Function at 0x423790
Capabilities:
Get hostname
Get http document via iwebbrowser2
Get session user name
Parse pe header
Resolve function by parsing pe exports
Schedule task via itaskscheduler
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47d897
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x148
mov eax, dword [0x4b41e0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x74], 0
movq qword [ebp - 0x6c], xmm0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x68], 1
push 1
push 0x49ef88
push ecx
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 1
call fcn.00403640
mov dword [ebp - 4], 2
cmp dword [ebp - 0x7c], 6
je 0x423838
mov byte [ebp - 0xe5], 0
jmp 0x425eda
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0
movq qword [ebp - 0x104], xmm0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x104], 0
mov byte [ebp - 0xfc], 1
mov byte [ebp - 4], 3
movq qword [ebp - 0x20], xmm0
push 2
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
call fcn.0046a22b
xor ecx, ecx
mov dword [ebp - 0xf4], eax
add esp, 4
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x18], 1
mov word [eax], cx
mov byte [ebp - 4], 4
xorps xmm0, xmm0
mov edx, dword [ebp - 0x74]
xor esi, esi
movq qword [ebp - 0x2c], xmm0
mov dword [ebp - 0x24], ecx
mov edi, dword [edx + 8]
test edi, edi
je 0x4238c8
cmp word [edi], si
je 0x4238c8
nop dword [eax + eax]
inc esi
cmp word [edi + esi*2], 0
jne 0x4238c0
xor ecx, ecx
mov dword [ebp - 0x28], esi
lea eax, [esi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0x2c], eax
test esi, esi
jle 0x423904
mov ecx, eax
sub edi, eax
mov edx, esi
mov ax, word [edi + ecx]
lea ecx, [ecx + 2]
mov word [ecx - 2], ax
sub edx, 1
jne 0x4238f4
mov edi, dword [ebp - 0x2c]
xor eax, eax
mov byte [ebp - 0x24], 1
mov word [edi + esi*2], ax
mov byte [ebp - 4], 5
push 0x204
mov dword [ebp - 0xe4], 0x101
mov dword [ebp - 0x100], eax
call fcn.0046a22b
xor ecx, ecx
mov dword [ebp - 0x104], eax
add esp, 4
mov word [eax + 0x202], cx
mov word [eax], cx
lea ecx, [ebp - 0xe4]
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov ecx, dword [ebp - 0xf4]
xor eax, eax
mov dword [ebp - 0xf8], eax
cmp word [ecx], ax
je 0x423973
inc eax
cmp word [ecx + eax*2], 0
jne 0x423965
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x1c], eax
test esi, esi
jne 0x42398d
cmp word [edi], si
je 0x423988
nop
inc esi
cmp word [edi + esi*2], 0
jne 0x423980
mov dword [ebp - 0x28], esi
test esi, esi
setg byte [ebp - 0x24]
test esi, esi
jle 0x4239ba
lea eax, [esi*2 - 2]
nop dword [eax]
cmp word [edi + eax], 0x5c
lea ecx, [edi + eax]
jne 0x4239ba
dec esi
xor edx, edx
sub eax, 2
mov dword [ebp - 0x28], esi
mov word [ecx], dx
test esi, esi
jne 0x4239a0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x49eab0
lea ecx, [ebp - 0x2c]
call fcn.00402320
cmp eax, 2
jle 0x423a10
mov edx, dword [ebp - 0x2c]
lea ecx, [eax - 1]
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4239fb
test edx, edx
je 0x4239f8
cmp word [edx], ax
je 0x4239f8
nop word [eax + eax]
inc eax
cmp word [edx + eax*2], 0
jne 0x4239f0
mov dword [ebp - 0x28], eax
cmp eax, ecx
setge byte [ebp - 0x24]
jl 0x423a10
cmovl ecx, eax
xor eax, eax
mov dword [ebp - 0x28], ecx
mov word [edx + ecx*2], ax
nop
call fcn.00403950
movsd xmm1, qword [0x4a9c10]
comisd xmm1, xmm0
jbe 0x424329
xorps xmm0, xmm0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x58], 0
movq qword [ebp - 0x50], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x4c], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x60]
mov esi, dword [ebp - 0x74]
push 1
push 0x49eb0c
push dword [esi + 0x10]
call fcn.00403640
xorps xmm0, xmm0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x40], 0
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 0x34], 1
push 1
push 0x49ef60
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x48]
push dword [esi + 0x14]
call fcn.00403640
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x60], 3
jne 0x4242d9
mov edi, dword [ebp - 0x48]
cmp edi, 2
jb 0x4242d9
mov dword [ebp - 0xc0], 0
lea eax, [ebp - 0xc0]
push eax
push 0x499158
push 1
push 0
push 0x499148
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x423b63
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x423b13
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x423b23
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x423b33
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x423b43
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov dword [ebp - 0xb0], 0
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0xc0]
push edx
push 0x499168
push dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
js 0x423c36
mov eax, dword [ebp - 0xb0]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
test eax, eax
jns 0x423b93
mov eax, dword [ebp - 0xb0]
push 0x2000
push eax
mov ecx, dword [eax]
call dword [ecx + 0x70]
test eax, eax
jns 0x423cd5
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x423bd2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x423be6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x423bf6
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x423c06
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x423c16
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov eax, dword [ebp - 0xc0]
lea edx, [ebp - 0xb0]
push edx
push 0x499168
push 0x499138
push dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
jns 0x423ba5
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x423c71
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x423c85
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x423c95
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x423ca5
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x423cb5
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov eax, dword [ebp - 0xb0]
push dword [esi + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
jns 0x423d63
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x423cff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x423d13
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x423d23
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x423d33
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x423d43
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov eax, dword [ebp - 0xb0]
push dword [esi + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x88]
test eax, eax
jns 0x423df1
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x423d8d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x423da1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x423db1
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x423dc1
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x423dd1
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov eax, dword [ebp - 0xb0]
push dword [esi + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xb0]
push 0x1b7740
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov edx, dword [ebp - 0x2c]
test edx, edx
jne 0x423e32
push 2
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov edx, eax
mov dword [ebp - 0x28], ecx
mov word [eax], cx
mov eax, dword [ebp - 0xb0]
push edx
push eax
mov byte [ebp - 0x24], 1
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov edx, dword [ebp - 0xf4]
cmp edx, str.LocalSystem
je 0x423e76
mov esi, str.LocalSystem
mov eax, edx
sub eax, esi
mov dword [ebp - 0x64], eax
movzx eax, word [eax + esi]
mov ecx, eax
test ax, ax
jne 0x423eb6
cmp word [esi], ax
jne 0x423ebb
mov edx, dword [ebp - 0xf4]
push edx
mov byte [ebp - 0xe5], 0
call fcn.00469e73
mov al, byte [ebp - 0xe5]
add esp, 4
mov byte [ebp - 0x18], al
mov dword [ebp - 0x1c], 0
push 2
call fcn.0046a22b
mov edx, eax
mov byte [ebp - 0x18], 1
add esp, 4
mov dword [ebp - 0xf4], edx
xor eax, eax
mov dword [ebp - 0x20], edx
mov word [edx], ax
jmp 0x423f12
cmp ax, word [esi]
je 0x423f01
xor edx, edx
cmp dx, ax
jne 0x423eca
mov dword [ebp - 0xe0], edx
jmp 0x423edc
push ecx
call fcn.0046e0a0
movzx eax, ax
add esp, 4
mov dword [ebp - 0xe0], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x423eec
xor eax, eax
jmp 0x423ef8
push ecx
call fcn.0046e0a0
add esp, 4
movzx eax, ax
cmp word [ebp - 0xe0], ax
jne 0x423f0c
mov eax, dword [ebp - 0x64]
add esi, 2
jmp 0x423e60
mov edx, dword [ebp - 0xf4]
cmp dword [ebp - 0xf8], 0
je 0x423f2e
mov eax, dword [ebp - 0xb0]
push 0
push edx
push eax
mov ecx, dword [eax]
mov byte [ebp - 0x18], 1
call dword [ecx + 0x78]
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd0], 0
mov byte [ebp - 4], 0x17
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0xb0]
push edx
lea edx, [ebp - 0xd8]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x423ff4
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x423f7c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x423f90
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x423fa4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x423fb4
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x423fc4
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x423fd4
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
push 0x30
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.0046b980
mov esi, dword [ebp - 0x58]
add esp, 0xc
mov eax, 0x30
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xac], ax
push dword [esi]
call fcn.0046dfd0
add esp, 4
mov word [ebp - 0xa8], ax
push dword [esi + 4]
call fcn.0046dfd0
add esp, 4
mov word [ebp - 0xa6], ax
push dword [esi + 8]
call fcn.0046dfd0
mov esi, dword [ebp - 0x40]
add esp, 4
mov word [ebp - 0xa4], ax
test edi, edi
jne 0x424060
xor eax, eax
jmp 0x42406f
mov eax, 1
test edi, edi
cmove edi, eax
mov eax, dword [esi]
mov dword [ebp - 0x48], edi
push eax
call fcn.0046dfd0
add esp, 4
mov word [ebp - 0x9c], ax
test edi, edi
jne 0x424087
xor eax, eax
jmp 0x4240ac
cmp edi, 1
ja 0x42409e
lea ecx, [edi - 1]
cmp edi, ecx
ja 0x424099
lea eax, [ecx + 1]
mov dword [ebp - 0x48], eax
mov eax, dword [esi + ecx*4]
jmp 0x4240ac
mov eax, 2
cmovbe edi, eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x48], edi
push eax
call fcn.0046dfd0
mov word [ebp - 0x9a], ax
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 0xd0]
add esp, 4
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x424160
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4240eb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4240ff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424113
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424123
push eax
call fcn.00469e73
add esp, 4
test esi, esi
je 0x424130
push esi
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424140
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov dword [ebp - 0xd4], 0
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0xd4]
mov eax, dword [ebp - 0xb0]
push edx
push 0x47f6a0
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x42422a
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4241a1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4241b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4241c9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4241dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4241ed
push eax
call fcn.00469e73
add esp, 4
test esi, esi
je 0x4241fa
push esi
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x42420a
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov eax, dword [ebp - 0xd4]
push 1
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
sete byte [ebp - 0xe5]
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x424257
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x42426b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x42427f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424293
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4242a3
push eax
call fcn.00469e73
add esp, 4
test esi, esi
je 0x4242b0
push esi
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4242c0
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425ea9
push eax
call fcn.00469e73
add esp, 4
jmp 0x425ea9
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4242e9
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x4242f9
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424309
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x425b37
push eax
call fcn.00469e73
add esp, 4
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov dword [ebp - 0xb8], 0
lea eax, [ebp - 0xb8]
push eax
push 0x499178
push 1
push 0
push 0x499188
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x42435b
mov byte [ebp - 4], 0x28
jmp 0x425b27
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x148]
push eax
call esi
movups xmm0, xmmword [ebp - 0x148]
lea eax, [ebp - 0x138]
push eax
movups xmmword [ebp - 0x158], xmm0
call esi
movups xmm0, xmmword [ebp - 0x138]
lea eax, [ebp - 0x118]
push eax
movups xmmword [ebp - 0x58], xmm0
call esi
movups xmm0, xmmword [ebp - 0x118]
lea eax, [ebp - 0x128]
push eax
movups xmmword [ebp - 0x40], xmm0
call esi
mov byte [ebp - 4], 0x2c
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x158]
mov eax, dword [ebp - 0xb8]
mov ecx, esp
sub esp, 0x10
mov edx, dword [eax]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x58]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x40]
movups xmmword [ecx], xmm0
mov ecx, esp
movups xmm0, xmmword [ebp - 0x128]
push eax
movups xmmword [ecx], xmm0
call dword [edx + 0x28]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x128]
push eax
call edi
lea eax, [ebp - 0x118]
push eax
call edi
lea eax, [ebp - 0x138]
push eax
call edi
lea eax, [ebp - 0x148]
push eax
call edi
test esi, esi
jns 0x424428
mov byte [ebp - 4], 0x2d
jmp 0x425b27
mov dword [ebp - 0xbc], 0
mov byte [ebp - 4], 0x2e
xorps xmm0, xmm0
mov eax, dword [ebp - 0x74]
movq qword [ebp - 0x114], xmm0
mov dword [ebp - 0x10c], 0
mov ecx, dword [eax + 0x10]
mov esi, dword [eax + 0x14]
xor eax, eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xec], esi
test ecx, ecx
je 0x424478
cmp word [ecx], ax
je 0x424478
nop dword [eax + eax]
inc eax
cmp word [ecx + eax*2], 0
jne 0x424470
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x49f958], 0
jne 0x424480
add ecx, eax
test esi, esi
je 0x4244aa
xor eax, eax
cmp word [esi], ax
je 0x4244a8
nop dword [eax]
inc eax
cmp word [esi + eax*2], 0
jne 0x4244a0
add ecx, eax
lea eax, [ecx + 1]
mov dword [ebp - 0xd8], ecx
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov edi, eax
add esp, 4
mov eax, dword [ebp - 0xd4]
mov edx, edi
mov dword [ebp - 0xf0], edi
test eax, eax
je 0x424503
movzx ecx, word [eax]
mov eax, ecx
test cx, cx
je 0x424503
mov esi, dword [ebp - 0xd4]
sub esi, edi
mov word [edx], cx
add edx, 2
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x4244f2
mov esi, 0x49f958
mov ecx, 0x54
sub esi, edx
nop
mov word [edx], cx
add edx, 2
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x424510
mov esi, dword [ebp - 0xec]
test esi, esi
je 0x424550
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0x424550
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add edx, 2
test ax, ax
jne 0x424535
nop word [eax + eax]
xor eax, eax
mov dword [ebp - 0x114], edi
mov word [edx], ax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x110], eax
mov byte [ebp - 0x10c], 1
push 0x49eab0
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x2f
call fcn.00401370
mov byte [ebp - 4], 0x30
mov edx, dword [eax]
test edx, edx
je 0x424590
mov edx, dword [edx]
jmp 0x424592
xor edx, edx
mov eax, dword [ebp - 0xb8]
lea esi, [ebp - 0xbc]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
mov byte [ebp - 4], 0x2f
mov esi, dword [ebp - 0xec]
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x424609
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x424609
test esi, esi
je 0x424609
mov eax, dword [esi]
test eax, eax
je 0x4245e1
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4245f8
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x424633
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42462a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x32
jmp 0x425b27
mov eax, dword [ebp - 0x74]
lea ecx, [ebp - 0xec]
push dword [eax]
call fcn.00401370
mov byte [ebp - 4], 0x33
mov edx, dword [eax]
test edx, edx
je 0x424651
mov edx, dword [edx]
jmp 0x424653
xor edx, edx
mov eax, dword [ebp - 0xbc]
push 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov esi, dword [ebp - 0xec]
test esi, esi
je 0x4246b0
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4246b0
test esi, esi
je 0x4246b0
mov eax, dword [esi]
test eax, eax
je 0x42468e
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4246a5
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
add esp, 8
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xc4], 0
mov byte [ebp - 4], 0x35
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 0xb8]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x42472f
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4246f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424709
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424726
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x39
jmp 0x425b27
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x424794
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42475a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x42476e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42478b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x3d
jmp 0x425b27
push dword [ebp - 0x104]
lea ecx, [ebp - 0xec]
mov byte [ebp - 0xfc], 1
call fcn.00401370
mov byte [ebp - 4], 0x3e
mov edx, dword [eax]
test edx, edx
je 0x4247ba
mov edx, dword [edx]
jmp 0x4247bc
xor edx, edx
mov eax, dword [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
mov byte [ebp - 4], 0x35
mov esi, dword [ebp - 0xec]
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x42482c
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x42482c
test esi, esi
je 0x42482c
mov eax, dword [esi]
test eax, eax
je 0x424804
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x42481b
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x42487e
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424844
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424858
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424875
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x42
jmp 0x425b27
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x74]
mov ecx, dword [eax]
push dword [edx + 4]
push eax
call dword [ecx + 0x20]
test eax, eax
jns 0x4248e2
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4248a8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x4248bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4248d9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x46
jmp 0x425b27
mov dword [ebp - 0xb0], 0
mov byte [ebp - 4], 0x47
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0xb4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jns 0x424969
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x42491b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42492f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424943
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x4b
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424960
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4c
jmp 0x425b27
push 0x49f95c
lea ecx, [ebp - 0xec]
call fcn.00401370
mov byte [ebp - 4], 0x4d
mov edx, dword [eax]
test edx, edx
je 0x424987
mov edx, dword [edx]
jmp 0x424989
xor edx, edx
mov eax, dword [ebp - 0xb0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
mov byte [ebp - 4], 0x47
mov esi, dword [ebp - 0xec]
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x4249f9
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4249f9
test esi, esi
je 0x4249f9
mov eax, dword [esi]
test eax, eax
je 0x4249d1
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4249e8
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x424a5f
mov byte [ebp - 4], 0x4e
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424a11
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424a25
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x50
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424a39
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x51
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424a56
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x52
jmp 0x425b27
mov eax, dword [ebp - 0xb0]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
jns 0x424ad3
mov byte [ebp - 4], 0x53
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424a85
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424a99
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x55
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424aad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x56
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424aca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x57
jmp 0x425b27
cmp dword [ebp - 0xf8], 0
je 0x424dae
push 0
push 1
push 1
push 0
push 0x49eab0
lea ecx, [ebp - 0x20]
call fcn.00402320
test eax, eax
jne 0x424c1e
mov eax, dword [ebp - 0x20]
push 0x102
mov dword [ebp - 0xd8], 0x80
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x1c], 0
call fcn.0046a22b
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x20], esi
mov word [esi + 0x100], ax
mov word [esi], ax
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x424b48
push eax
call fcn.00469e73
add esp, 4
lea eax, [ebp - 0xd8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
xor eax, eax
mov byte [ebp - 0x18], 0
cmp word [esi], ax
je 0x424b6e
inc eax
cmp word [esi + eax*2], 0
jne 0x424b61
mov dword [ebp - 0x1c], eax
jmp 0x424b73
mov dword [ebp - 0x1c], eax
xor eax, eax
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x49eab0], 0
jne 0x424b80
add eax, ecx
mov edx, 2
mov dword [ebp - 0xec], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046a22b
mov dword [ebp - 0xf4], eax
mov ecx, eax
movzx eax, word [esi]
add esp, 4
mov edx, eax
test ax, ax
je 0x424bd5
mov edi, esi
sub edi, ecx
mov word [ecx], dx
add ecx, 2
movzx eax, word [ecx + edi]
mov edx, eax
test ax, ax
jne 0x424bc4
mov edi, 0x49eab0
mov edx, 0x5c
sub edi, ecx
mov word [ecx], dx
lea ecx, [ecx + 2]
movzx eax, word [ecx + edi]
mov edx, eax
test ax, ax
jne 0x424be1
xor eax, eax
push esi
mov word [ecx], ax
call fcn.00469e73
mov esi, dword [ebp - 0xf4]
add esp, 4
mov eax, dword [ebp - 0xec]
mov edi, dword [ebp - 0xf0]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x18], 1
jmp 0x424c27
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0xf4], esi
mov eax, dword [ebp - 0xb0]
push 3
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
jns 0x424c9b
mov byte [ebp - 4], 0x58
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424c4d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424c61
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x5a
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424c75
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424c92
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x5c
jmp 0x425b27
test esi, esi
jne 0x424cbc
push 2
call fcn.0046a22b
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0xf4], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], eax
mov word [esi], ax
push esi
lea ecx, [ebp - 0xf0]
mov byte [ebp - 0x18], 1
call fcn.00401370
mov byte [ebp - 4], 0x5d
mov edx, dword [eax]
test edx, edx
je 0x424cda
mov edx, dword [edx]
jmp 0x424cdc
xor edx, edx
mov eax, dword [ebp - 0xb0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov esi, dword [ebp - 0xf0]
test eax, eax
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x424d48
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x424d48
test esi, esi
je 0x424d48
mov eax, dword [esi]
test eax, eax
je 0x424d20
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x424d37
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x424dae
mov byte [ebp - 4], 0x5e
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424d60
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424d74
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x60
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424d88
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x61
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424da5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x62
jmp 0x425b27
mov dword [ebp - 0xc8], 0
mov byte [ebp - 4], 0x63
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 0xb4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
jns 0x424e49
mov byte [ebp - 4], 0x64
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x424de7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x65
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424dfb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424e0f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424e23
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x68
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424e40
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x69
jmp 0x425b27
mov eax, dword [ebp - 0xc8]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jns 0x424ed1
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x424e6f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424e83
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6c
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424e97
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6d
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424eab
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x6e
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424ec8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6f
jmp 0x425b27
mov eax, dword [ebp - 0xc8]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xc8]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov dword [ebp - 0xc0], 0
mov byte [ebp - 4], 0x70
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0xb4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x424fa0
mov byte [ebp - 4], 0x71
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424f2a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x72
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x424f3e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x73
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424f52
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x74
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424f66
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x75
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x424f7a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x76
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424f97
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x77
jmp 0x425b27
mov dword [ebp - 0xcc], 0
mov byte [ebp - 4], 0x78
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 0xc0]
push edx
push 9
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
jns 0x425069
mov byte [ebp - 4], 0x79
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x424fdf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7a
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424ff3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425007
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7c
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x42501b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7d
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42502f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7e
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425043
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x7f
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425060
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x80
jmp 0x425b27
push str.Trigger1
lea ecx, [ebp - 0xf0]
call fcn.00401370
mov byte [ebp - 4], 0x81
mov edx, dword [eax]
test edx, edx
je 0x425087
mov edx, dword [edx]
jmp 0x425089
xor edx, edx
mov eax, dword [ebp - 0xcc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
mov byte [ebp - 4], 0x78
mov esi, dword [ebp - 0xf0]
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x4250f9
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4250f9
test esi, esi
je 0x4250f9
mov eax, dword [esi]
test eax, eax
je 0x4250d1
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4250e8
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x42519f
mov byte [ebp - 4], 0x82
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425115
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x83
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425129
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x84
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x42513d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x85
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425151
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x86
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425165
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x87
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425179
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x88
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425196
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x89
jmp 0x425b27
push edi
lea ecx, [ebp - 0xf0]
mov byte [ebp - 0x10c], 1
call fcn.00401370
mov byte [ebp - 4], 0x8a
mov edx, dword [eax]
test edx, edx
je 0x4251c0
mov edx, dword [edx]
jmp 0x4251c2
xor edx, edx
mov eax, dword [ebp - 0xcc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov esi, dword [ebp - 0xf0]
test eax, eax
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x42522e
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x42522e
test esi, esi
je 0x42522e
mov eax, dword [esi]
test eax, eax
je 0x425206
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x42521d
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x4252d4
mov byte [ebp - 4], 0x8b
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x42524a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8c
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x42525e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8d
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425272
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8e
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425286
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8f
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42529a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x90
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x4252ae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0x91
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4252cb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x92
jmp 0x425b27
cmp dword [ebp - 0xf8], 0
je 0x42553f
mov dword [ebp - 0xd4], 0
mov byte [ebp - 4], 0x9e
lea edx, [ebp - 0xd4]
mov eax, dword [ebp - 0xcc]
push edx
push 0x499198
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x4253c0
mov byte [ebp - 4], 0x9f
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x425322
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa0
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425336
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa1
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x42534a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa2
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x42535e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa3
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425372
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa4
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425386
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa5
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x42539a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0xa6
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4253b7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa7
jmp 0x425b27
mov eax, dword [ebp - 0xf4]
test eax, eax
jne 0x4253e5
push 2
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0xf4], eax
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov word [eax], cx
push eax
lea ecx, [ebp - 0xf0]
mov byte [ebp - 0x18], 1
call fcn.00401370
mov byte [ebp - 4], 0xa8
mov edx, dword [eax]
test edx, edx
je 0x425403
mov edx, dword [edx]
jmp 0x425405
xor edx, edx
mov eax, dword [ebp - 0xd4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov esi, dword [ebp - 0xf0]
test eax, eax
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x425471
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425471
test esi, esi
je 0x425471
mov eax, dword [esi]
test eax, eax
je 0x425449
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x425460
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x42552b
mov byte [ebp - 4], 0xa9
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x42548d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4254a1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xab
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4254b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xac
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4254c9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xad
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4254dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xae
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4254f1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xaf
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425505
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0xb0
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425522
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb1
jmp 0x425b27
mov byte [ebp - 4], 0xb2
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x42553f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
mov byte [ebp - 4], 0xb5
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0xb4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x425656
mov byte [ebp - 4], 0xb6
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425590
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb7
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x4255a4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb8
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4255b8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb9
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4255cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xba
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4255e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbb
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4255f4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbc
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425608
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbd
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42561c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbe
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425630
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0xbf
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42564d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc0
jmp 0x425b27
mov eax, dword [ebp - 0xd0]
lea edx, [ebp - 0xe0]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
jns 0x42574d
mov byte [ebp - 4], 0xc1
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425687
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc2
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x42569b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc3
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4256af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc4
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4256c3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc5
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4256d7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc6
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4256eb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc7
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4256ff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc8
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425713
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc9
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425727
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0xca
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425744
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xcb
jmp 0x425b27
mov eax, dword [ebp - 0xe0]
lea edx, [ebp - 0xdc]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x425846
mov byte [ebp - 4], 0xcc
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425780
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xcd
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425794
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xce
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4257a8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xcf
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4257bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd0
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4257d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd1
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4257e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd2
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4257f8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd3
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42580c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd4
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425820
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0xd5
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42583d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd6
jmp 0x425b27
mov eax, dword [ebp - 0x74]
lea ecx, [ebp - 0xf0]
push dword [eax + 8]
call fcn.00401370
mov byte [ebp - 4], 0xd7
mov edx, dword [eax]
test edx, edx
je 0x425865
mov edx, dword [edx]
jmp 0x425867
xor edx, edx
mov eax, dword [ebp - 0xdc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xf0]
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x4258d7
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4258d7
test esi, esi
je 0x4258d7
mov eax, dword [esi]
test eax, eax
je 0x4258af
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4258c6
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x4259b9
mov byte [ebp - 4], 0xd8
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x4258f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd9
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425907
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xda
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x42591b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdb
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x42592f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdc
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425943
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdd
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425957
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xde
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x42596b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdf
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42597f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe0
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425993
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0xe1
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4259b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe2
jmp 0x425b27
mov eax, dword [ebp - 0x74]
lea ecx, [ebp - 0xf0]
push dword [eax + 0xc]
call fcn.00401370
mov byte [ebp - 4], 0xe3
mov edx, dword [eax]
test edx, edx
je 0x4259d8
mov edx, dword [edx]
jmp 0x4259da
xor edx, edx
mov eax, dword [ebp - 0xdc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xf0]
sets cl
mov byte [ebp - 0xe5], cl
test esi, esi
je 0x425a4a
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425a4a
test esi, esi
je 0x425a4a
mov eax, dword [esi]
test eax, eax
je 0x425a22
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x425a39
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
mov cl, byte [ebp - 0xe5]
add esp, 8
test cl, cl
je 0x425b43
mov byte [ebp - 4], 0xe4
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425a66
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe5
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425a7a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe6
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x425a8e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe7
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425aa2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe8
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425ab6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe9
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425aca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xea
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425ade
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xeb
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425af2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xec
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425b06
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov byte [ebp - 4], 0xed
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425b23
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xee
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425b37
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 0xe5], 0
jmp 0x425ea9
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x425b5f
push 2
call fcn.0046a22b
add esp, 4
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov dword [ebp - 0x28], ecx
mov word [eax], cx
push eax
lea ecx, [ebp - 0xf0]
mov byte [ebp - 0x24], 1
call fcn.00401370
mov byte [ebp - 4], 0xef
mov edx, dword [eax]
test edx, edx
je 0x425b7d
mov edx, dword [edx]
jmp 0x425b7f
xor edx, edx
mov eax, dword [ebp - 0xdc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xf0]
test esi, esi
je 0x425bde
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425bde
test esi, esi
je 0x425bde
mov eax, dword [esi]
test eax, eax
je 0x425bbc
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x425bd3
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
add esp, 8
push str.Action1
lea ecx, [ebp - 0xf0]
call fcn.00401370
mov byte [ebp - 4], 0xf0
mov edx, dword [eax]
test edx, edx
je 0x425bfc
mov edx, dword [edx]
jmp 0x425bfe
xor edx, edx
mov eax, dword [ebp - 0xdc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov esi, dword [ebp - 0xf0]
test esi, esi
je 0x425c59
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425c59
test esi, esi
je 0x425c59
mov eax, dword [esi]
test eax, eax
je 0x425c37
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x425c4e
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
add esp, 8
mov dword [ebp - 0x64], 0
mov eax, 8
mov byte [ebp - 4], 0xf1
push 0x49eab8
mov word [ebp - 0x128], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x120], eax
test eax, eax
je 0x425f20
movups xmm0, xmmword [ebp - 0x128]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x138]
push eax
movups xmmword [ebp - 0x40], xmm0
call esi
movups xmm0, xmmword [ebp - 0x138]
lea eax, [ebp - 0x148]
push eax
movups xmmword [ebp - 0x58], xmm0
call esi
mov byte [ebp - 4], 0xf4
lea ecx, [ebp - 0xd8]
mov eax, dword [ebp - 0x74]
movups xmm0, xmmword [ebp - 0x148]
push dword [eax]
movups xmmword [ebp - 0x158], xmm0
call fcn.00401370
mov byte [ebp - 4], 0xf5
mov esi, dword [eax]
test esi, esi
je 0x425ce7
mov esi, dword [esi]
jmp 0x425ce9
xor esi, esi
movups xmm0, xmmword [ebp - 0x40]
mov eax, dword [ebp - 0xbc]
lea ecx, [ebp - 0x64]
push ecx
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
push 3
sub esp, 0x10
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x58]
movups xmmword [ecx], xmm0
mov ecx, esp
movups xmm0, xmmword [ebp - 0x158]
push 6
push dword [ebp - 0xb4]
movups xmmword [ecx], xmm0
push esi
push eax
call dword [edx + 0x44]
mov esi, dword [ebp - 0xd8]
test eax, eax
sete byte [ebp - 0xe5]
test esi, esi
je 0x425d8c
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425d82
test esi, esi
je 0x425d82
mov eax, dword [esi]
test eax, eax
je 0x425d60
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x425d77
push eax
call fcn.00469e73
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a21d
add esp, 8
mov dword [ebp - 0xd8], 0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x148]
push eax
call esi
lea eax, [ebp - 0x138]
push eax
call esi
lea eax, [ebp - 0x128]
push eax
call esi
mov byte [ebp - 4], 0xf6
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x425dbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xf7
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425dd2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xf8
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425de6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xf9
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x425dfa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfa
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425e0e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfb
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425e22
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfc
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425e36
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfd
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425e4a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfe
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425e5e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xff
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x425e72
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469e73
add esp, 4
mov dword [ebp - 4], 0x100
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425e92
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x101
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425ea9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x425eb9
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x425ecc
push eax
call fcn.00469e73
add esp, 4
push dword [ebp - 0x104]
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x425eea
push eax
call fcn.00469e73
add esp, 4
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x425efa
push eax
call fcn.00469e73
add esp, 4
mov al, byte [ebp - 0xe5]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00469e65
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
push 0x8007000e
call fcn.00469b70
int3