Function at 0x442c35
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
push edi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x10], eax
xor ecx, ecx
push 2
add eax, 6
pop ebx
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420bca
pop ecx
xor ecx, ecx
mov dword [esi + 4], eax
mov eax, ebx
mov ebx, ecx
mov dword [ebp - 8], eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], 0x7c
cmp dword [ebp - 0x10], ecx
jle 0x442db9
push 0x20
pop edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x18], 0x28
jmp 0x442c97
inc ecx
cmp word [edi + ecx*2], dx
je 0x442c96
movzx edx, word [edi + ecx*2]
cmp dx, word [ebp - 0x14]
je 0x442cbf
mov eax, dword [esi + 4]
inc ecx
mov word [eax + ebx*2], dx
movzx edx, word [edi + ecx*2]
push 0x20
pop eax
inc ebx
cmp dx, ax
jne 0x442ca7
mov eax, dword [ebp - 8]
inc eax
push 0x7c
mov dword [ebp - 8], eax
mov eax, dword [esi + 4]
pop edx
mov word [eax + ebx*2], dx
push 0x20
inc ebx
pop eax
jmp 0x442cd4
inc ecx
cmp word [edi + ecx*2], ax
je 0x442cd3
jmp 0x442cee
cmp dx, word [ebp - 0x18]
je 0x442cf7
mov eax, dword [esi + 4]
push 0x20
mov word [eax + ebx*2], dx
inc ecx
inc ebx
pop eax
movzx edx, word [edi + ecx*2]
cmp dx, ax
jne 0x442cdc
mov eax, dword [esi + 4]
push 0x3b
pop edx
mov word [eax + ebx*2], dx
push 0x20
inc ebx
pop eax
jmp 0x442d08
inc ecx
cmp word [edi + ecx*2], ax
je 0x442d07
mov edx, dword [ebp - 0x18]
cmp word [edi + ecx*2], dx
jne 0x442d18
inc ecx
cmp word [edi + ecx*2], ax
je 0x442d17
xor edx, edx
inc edx
jmp 0x442d27
pop eax
jmp 0x442d27
inc ecx
cmp word [edi + ecx*2], ax
je 0x442d26
jmp 0x442d5a
cmp ax, word [ebp - 0x14]
jne 0x442d3f
push 0x20
pop eax
inc ecx
cmp word [edi + ecx*2], ax
je 0x442d38
movzx eax, word [edi + ecx*2]
mov dword [ebp - 0x2c], eax
cmp eax, 0x29
je 0x442d6b
mov eax, dword [esi + 4]
mov edi, dword [ebp - 0x2c]
mov word [eax + ebx*2], di
mov edi, dword [ebp + 8]
inc ecx
inc ebx
movzx eax, word [edi + ecx*2]
push 0x3b
pop edi
cmp ax, di
mov edi, dword [ebp + 8]
jne 0x442d2f
jmp 0x442d70
xor eax, eax
mov edx, eax
inc ecx
push 0x20
pop eax
jmp 0x442d76
inc ecx
cmp word [edi + ecx*2], ax
je 0x442d75
mov eax, dword [esi + 4]
test edx, edx
jne 0x442d87
push 0xa
jmp 0x442d89
push 0x3b
pop edi
mov word [eax + ebx*2], di
mov edi, dword [ebp + 8]
push 0x3b
pop eax
inc ebx
cmp word [edi + ecx*2], ax
jne 0x442d9c
inc ecx
xor eax, eax
inc eax
push 0x20
cmp edx, eax
je 0x442d23
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ebx
pop edx
cmp ecx, dword [ebp - 0x10]
jl 0x442c97
xor ecx, ecx
push 3
pop edx
cmp dword [esi + 0x24], ecx
je 0x442dc8
add eax, edx
mov dword [ebp - 8], eax
xor ecx, ecx
push 4
pop edi
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420bca
mov dword [esi + 8], eax
mov eax, dword [ebp - 8]
xor ecx, ecx
push 0x1c
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420bca
mov dword [esi + 0xc], eax
mov dword [eax], str.InterfaceDispatch
mov eax, dword [esi + 0xc]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [esi + 0xc]
pop ecx
or dword [eax + 8], 0xffffffff
mov eax, dword [esi + 0xc]
pop ecx
or dword [eax + 0xc], 0xffffffff
mov eax, dword [esi + 0xc]
xor ecx, ecx
mov dword [eax + 0x10], edi
mov eax, dword [esi + 0xc]
inc ecx
mov dword [eax + 0x14], edx
mov eax, dword [esi + 0xc]
push 2
mov word [eax + 0x18], cx
mov eax, dword [esi + 0xc]
xor ecx, ecx
mov word [eax + 0x1a], cx
mov eax, dword [esi + 0xc]
pop ecx
mov dword [eax + 0x1c], edx
mov eax, dword [esi + 0xc]
push 0x13
mov dword [eax + 0x20], edx
mov eax, dword [esi + 0xc]
mov dword [ebp + 8], ecx
mov dword [eax + 0x24], edx
mov eax, dword [esi + 0xc]
or dword [eax + 0x28], 0xffffffff
mov eax, dword [esi + 0xc]
mov dword [eax + 0x2c], edi
mov eax, dword [esi + 0xc]
pop edi
mov dword [eax + 0x30], edx
mov eax, dword [esi + 0xc]
mov word [eax + 0x34], cx
mov eax, dword [esi + 0xc]
mov word [eax + 0x36], di
mov eax, dword [esi + 8]
mov edi, ecx
mov dword [eax], edx
mov eax, dword [esi + 8]
mov dword [eax + 4], edx
cmp dword [esi + 0x24], edx
je 0x442fb8
mov eax, dword [esi + 0xc]
push 5
mov dword [eax + 0x38], str.QueryInterface
mov eax, dword [esi + 0xc]
pop edi
mov dword [eax + 0x40], 1
mov eax, dword [esi + 0xc]
push 3
mov dword [eax + 0x44], edx
mov eax, dword [esi + 0xc]
mov dword [ebp + 8], edi
mov dword [eax + 0x48], 4
mov eax, dword [esi + 0xc]
mov dword [eax + 0x4c], ecx
mov eax, dword [esi + 0xc]
xor ecx, ecx
inc ecx
mov word [eax + 0x50], cx
mov eax, dword [esi + 0xc]
pop ecx
push 0x10
mov word [eax + 0x52], cx
call fcn.00420bca
pop ecx
mov ecx, dword [esi + 8]
push 0x48
mov dword [ecx + 8], eax
mov eax, dword [esi + 8]
pop ecx
mov eax, dword [eax + 8]
xor edx, edx
mov word [eax + 4], cx
mov eax, dword [esi + 8]
mov ecx, 0x4013
mov eax, dword [eax + 8]
push 0x13
mov word [eax + 0xc], cx
mov eax, dword [esi + 8]
mov eax, dword [eax + 8]
mov dword [eax], edx
mov eax, dword [esi + 8]
mov eax, dword [eax + 8]
mov dword [eax + 8], edx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov eax, dword [eax + 8]
mov dword [ecx + 0x3c], eax
mov eax, dword [esi + 0xc]
xor ecx, ecx
mov dword [eax + 0x54], str.AddRef
mov eax, dword [esi + 0xc]
inc ecx
mov dword [eax + 0x58], edx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x5c], 2
mov eax, dword [esi + 0xc]
mov dword [eax + 0x60], ecx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x64], 4
mov eax, dword [esi + 0xc]
mov dword [eax + 0x68], edx
mov eax, dword [esi + 0xc]
mov word [eax + 0x6c], cx
mov eax, dword [esi + 0xc]
pop ecx
mov word [eax + 0x6e], cx
mov eax, dword [esi + 8]
push 3
mov dword [eax + 0xc], edx
mov eax, dword [esi + 0xc]
pop ecx
mov dword [eax + 0x70], str.Release
mov eax, dword [esi + 0xc]
mov dword [eax + 0x74], edx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x78], ecx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x7c], 2
mov eax, dword [esi + 0xc]
mov dword [eax + 0x80], 4
mov eax, dword [esi + 0xc]
mov dword [eax + 0x84], edx
mov eax, dword [esi + 0xc]
xor ecx, ecx
inc ecx
mov word [eax + 0x88], cx
mov eax, dword [esi + 0xc]
push 0x13
pop ecx
mov word [eax + 0x8a], cx
mov eax, dword [esi + 8]
mov dword [eax + 0x10], edx
mov eax, dword [esi + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], eax
xor eax, eax
mov ecx, eax
push 8
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], ecx
pop eax
test ebx, ebx
jle 0x44320e
mov eax, dword [ebp + 8]
imul edi, edi, 0x1c
shl eax, 2
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
add eax, 0xfffffffe
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], edi
movzx ebx, word [eax + ecx*2]
cmp bx, word [ebp - 0x30]
mov dword [ebp + 8], ebx
mov ebx, dword [ebp - 4]
jne 0x443015
xor edx, edx
mov word [eax + ecx*2], dx
lea edx, [ecx + 1]
lea edx, [eax + edx*2]
mov dword [ebp - 0x28], edx
jmp 0x4431ff
push 0xa
pop esi
cmp word [ebp + 8], si
mov esi, dword [ebp - 0x1c]
je 0x44302c
cmp word [ebp + 8], 0
jne 0x4431ff
xor ebx, ebx
mov word [eax + ecx*2], bx
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp - 0x18]
mov dword [edi + eax], ecx
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + 1]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0xc]
mov ebx, dword [ebp - 0x20]
mov dword [edi + eax + 8], ebx
mov eax, dword [esi + 0xc]
mov ebx, dword [ebp - 4]
mov dword [edi + eax + 0xc], ecx
mov eax, dword [esi + 0xc]
xor ecx, ecx
inc ecx
mov word [edi + eax + 0x18], cx
xor eax, eax
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp + 8], ecx
cmp word [edx], ax
je 0x4430a8
push 0x3b
mov eax, edx
mov ebx, ecx
xor edi, edi
pop esi
cmp word [eax], si
jne 0x44308e
cmp word [eax + 2], di
je 0x443089
inc ebx
jmp 0x44308e
xor edi, edi
mov word [eax], di
inc ecx
lea eax, [edx + ecx*2]
cmp word [eax], di
jne 0x44307b
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 4]
mov dword [ebp + 8], ecx
xor eax, eax
cmp dword [ebp + 8], 0
mov ecx, eax
mov dword [ebp - 0x18], ecx
jle 0x4430dd
push 0x3b
pop edi
cmp word [edx + eax*2], di
mov edi, dword [ebp - 0x10]
je 0x4430c7
inc eax
cmp eax, dword [ebp + 8]
jl 0x4430b3
jmp 0x4430dd
xor ebx, ebx
mov word [edx + eax*2], bx
inc eax
lea eax, [edx + eax*2]
cmp word [eax], bx
mov ebx, dword [ebp - 4]
cmovne ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, dword [esi + 0xc]
lea eax, [ecx + 0x1a]
add eax, edi
add ecx, 0x10
push eax
add ecx, edi
push ecx
push edx
call fcn.00442313
mov ecx, dword [esi + 0xc]
mov eax, dword [ebp - 0x14]
mov dword [edi + ecx + 0x14], eax
xor ecx, ecx
test eax, eax
je 0x4431cb
push 8
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420bca
mov edx, dword [ebp - 0xc]
pop ecx
mov ecx, dword [esi + 8]
mov dword [edx + ecx], eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4431bc
xor ecx, ecx
xor ebx, ebx
cmp word [eax], bx
mov ebx, dword [ebp - 4]
mov dword [ebp + 8], ecx
mov edx, eax
mov dword [ebp - 0x14], ecx
je 0x443195
mov ebx, eax
push 0x3b
pop edi
cmp word [ebx], di
push 0
pop edi
jne 0x443186
xor eax, eax
push edx
mov word [ebx], ax
call fcn.004436e1
mov ecx, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + edx]
mov word [ecx + edi*8 + 4], ax
mov eax, dword [esi + 8]
mov ecx, edi
mov eax, dword [eax + edx]
xor edx, edx
mov dword [eax + ecx*8], edx
mov eax, dword [ebp - 0x18]
inc ecx
mov dword [ebp + 8], ecx
mov ecx, dword [ebp - 0x14]
lea edx, [ebx + 2]
xor edi, edi
inc ecx
mov dword [ebp - 0x14], ecx
lea ebx, [eax + ecx*2]
cmp word [ebx], di
jne 0x443143
mov ebx, dword [ebp - 4]
push edx
call fcn.004436e1
mov ecx, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + edx]
mov word [ecx + edi*8 + 4], ax
mov eax, dword [esi + 8]
mov ecx, edi
mov eax, dword [eax + edx]
xor edi, edi
mov dword [eax + ecx*8], edi
mov edi, dword [ebp - 0x10]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov eax, dword [edx + eax]
mov dword [edi + ecx + 4], eax
jmp 0x4431db
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov dword [edx + eax], ecx
mov eax, dword [esi + 0xc]
mov dword [edi + eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
add edx, 4
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
lea edx, [ecx + 1]
add edi, 0x1c
lea edx, [eax + edx*2]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x10], edi
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, ebx
jl 0x442ff1
push 8
pop eax
push eax
call fcn.00420bca
pop ecx
mov ecx, dword [ebp - 8]
mov dword [esi + 0x10], eax
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
pop edi
pop esi
mov dword [ecx], eax
pop ebx
leave
ret 4