Function at 0x10085fb0
Capabilities:
Check os version
Encode data using base64
Enumerate pe sections
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1013e471
mov eax, dword fs:[0]
push eax
sub esp, 0xc18
mov eax, dword [0x10170024]
xor eax, esp
mov dword [esp + 0xc10], eax
push ebx
push esi
push edi
mov eax, dword [0x10170024]
xor eax, esp
push eax
lea eax, [esp + 0xc28]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x18]
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0x80], eax
mov edi, ecx
mov ecx, dword [ebp + 0x14]
lea eax, [esp + 0xdc]
push eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x88], edx
mov dword [esp + 0xe0], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [esp + 0xe0], 6
jae 0x1008605b
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x38]
mov edx, dword [edi]
mov edx, dword [edx + 0x10]
push eax
mov eax, dword [esp + 0x84]
push ecx
push ebx
push eax
push esi
mov ecx, edi
call edx
jmp 0x100896b4
mov ecx, esi
call fcn.10082530
xor edi, edi
push 0x206
lea eax, [esp + 0x60a]
push edi
push eax
mov word [esp + 0x610], di
call sub.MSVCR80.dll_memset
lea edx, [esp + 0x610]
add esp, 0xc
mov eax, esi
sub edx, esi
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x10086090
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, edi
jge 0x100860c3
push eax
push str._nCoInitialize_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
mov eax, 1
jmp 0x100896b4
lea ecx, [esp + 0x54]
push ecx
push 0x10146980
push 1
push edi
push 0x10146b70
mov dword [esp + 0x68], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x100862ba
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
push edx
call edi
mov dword [esp + 0xc30], 0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0x8c]
push eax
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], edx
call edi
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x94]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0xbc]
push edx
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
call edi
mov ecx, dword [esp + 0xc0]
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xc8]
lea ecx, [esp + 0xac]
push ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
call edi
mov byte [esp + 0xc30], 3
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xe4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xac]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xc0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xc4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xc8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xa0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xa4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xa8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xdc]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xf0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xf4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xf8]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call edi
lea edx, [esp + 0xbc]
push edx
call edi
lea eax, [esp + 0x8c]
push eax
call edi
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call edi
test esi, esi
jge 0x100862ca
push esi
push str.ITaskService::Connect_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x5c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x100896b4
lea ecx, [esp + 0x38]
push ecx
mov edi, 0x1014bdb4
mov dword [esp + 0x38], 0
call fcn.100810b0
mov dword [esp + 0xc30], 4
mov eax, dword [eax]
test eax, eax
je 0x100862f6
mov ecx, dword [eax]
jmp 0x100862f8
xor ecx, ecx
mov eax, dword [esp + 0x54]
mov edx, dword [eax]
lea esi, [esp + 0x34]
push esi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.10081150
test esi, esi
jge 0x1008634f
push esi
push str.Cannot_get_Root_folder_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x5c]
add esp, 8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x100896b4
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
push 0
lea edx, [esp + 0x608]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], 0
mov ecx, dword [eax]
push 0
push eax
mov eax, dword [ecx + 0x24]
call eax
mov edi, eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor esi, esi
cmp edi, esi
jge 0x100863a6
push edi
push str.Failed_to_CoCreate_an_instance_of_the_TaskService_class:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
jmp 0x10086334
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x64]
mov dword [esp + 0x64], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
cmp eax, esi
jge 0x100863e3
push eax
push str._nCannot_get_identification_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push str.Administrator
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x1008642a
push edi
push str._nCannot_put_identification_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x68]
mov dword [esp + 0x68], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
cmp eax, esi
jge 0x10086467
push eax
push str._nCannot_get_principal_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 1
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x100864ab
push edi
push str._nCannot_put_principal_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, esi
jge 0x100864e8
push eax
push str._nCannot_get_settings_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xb0]
push 0xffffffffffffffff
push eax
call edx
cmp eax, esi
jge 0x10086521
push eax
push str._nCannot_put_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push esi
push eax
call edx
cmp eax, esi
jge 0x10086556
push eax
push str._nCannot_put_DisallowStartIfOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
push esi
push eax
call edx
cmp eax, esi
jge 0x1008658b
push eax
push str._nCannot_put_StopIfGoingOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x58]
mov dword [esp + 0x58], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x9c]
call eax
cmp eax, esi
jge 0x100865cb
push eax
push str._nCannot_get_IdleSettings:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
push esi
push eax
call edx
cmp eax, esi
jge 0x10086618
push eax
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x58]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0xa0]
call eax
mov edi, eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x1008666e
push edi
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x48]
mov dword [esp + 0x48], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, esi
jge 0x100866ab
push eax
push str._nCannot_get_trigger_collection:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov ecx, ebx
mov dword [esp + 0x44], esi
call fcn.10003590
test eax, eax
je 0x10089279
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 1
jne 0x10087273
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 2
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008671a
push esi
push str._nCannot_create_ITrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], 0
mov ecx, dword [eax]
push 0x10146a70
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008676d
push esi
push str._nQueryInterface_call_failed_for_ITimeTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 5
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100867c9
mov eax, dword [eax]
jmp 0x100867cb
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 6
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008684a
mov eax, dword [eax]
jmp 0x1008684c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10086850
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086905
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 7
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100868dc
mov eax, dword [eax]
jmp 0x100868de
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10086967
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 8
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086940
mov eax, dword [eax]
jmp 0x10086942
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 9
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100869c3
mov eax, dword [eax]
jmp 0x100869c5
xor eax, eax
lea edx, [eax + 2]
jmp 0x100869d0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100869d0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086a81
push 0x10151f24
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xa
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086a58
mov eax, dword [eax]
jmp 0x10086a5a
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10086ae3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xb
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086abc
mov eax, dword [eax]
jmp 0x10086abe
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xc
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086b3f
mov eax, dword [eax]
jmp 0x10086b41
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10086b44
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086bf9
push 0x10151f24
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xd
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086bd0
mov eax, dword [eax]
jmp 0x10086bd2
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x10086c5b
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xe
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086c34
mov eax, dword [eax]
jmp 0x10086c36
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xf
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086cb7
mov eax, dword [eax]
jmp 0x10086cb9
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10086cc0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086d88
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x10
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086d4c
mov eax, dword [eax]
jmp 0x10086d4e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10086e01
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x11
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086dc3
mov eax, dword [eax]
jmp 0x10086dc5
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x38]
push eax
lea edi, [esp + 0x1f8]
call fcn.100810b0
mov dword [esp + 0xc30], 0x12
mov eax, dword [eax]
test eax, eax
je 0x10086e55
mov eax, dword [eax]
jmp 0x10086e57
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.10081150
test esi, esi
jge 0x10086ea2
push esi
push str._nCannot_put_Start_Boundary:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, 0x54
xor edi, edi
mov esi, ebx
mov dword [esp + 0x38], eax
call fcn.100035b0
movzx ecx, word [eax + 0x24]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [eax]
push edx
call ecx
test eax, eax
jge 0x10086ef2
push eax
push str._nCannot_put_Days_Interval:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10086f49
push esi
push str._nCannot_get_Repetition:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x14], edi
je 0x1008710d
push 0x206
lea eax, [esp + 0x402]
push edi
push eax
mov word [esp + 0x408], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x10154414
lea ecx, [esp + 0x400]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
call fcn.100035b0
mov edx, eax
mov eax, 0x88888889
mul dword [edx + 0x14]
shr edx, 5
mov dword [esp + 0x18], edx
mov word [esp + 0x1c], 0x16
mov dword [esp + 0x24], edx
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x13
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10086fd7
mov eax, dword [eax]
jmp 0x10086fd9
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x400]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1015441c
lea edx, [esp + 0x400]
push 0x104
push edx
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
mov ecx, eax
mov eax, dword [esp + 0x18]
mov edx, eax
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0x14]
add edx, edx
add edx, edx
sub eax, edx
mov word [esp + 0x1c], 0x13
mov dword [esp + 0x24], eax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x14
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087069
mov eax, dword [eax]
jmp 0x1008706b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x400]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10154420
lea edx, [esp + 0x400]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x400]
call fcn.100810b0
mov dword [esp + 0xc30], 0x15
mov eax, dword [eax]
test eax, eax
je 0x100870e0
mov eax, dword [eax]
jmp 0x100870e2
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.10081150
test esi, esi
jl 0x10087243
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x18], edi
je 0x10089279
call fcn.100035b0
mov ecx, eax
mov eax, 0x88888889
mul dword [ecx + 0x18]
mov esi, edx
push 0x206
lea edx, [esp + 0x402]
push edi
push edx
shr esi, 5
mov word [esp + 0x408], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x10154414
lea eax, [esp + 0x400]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
mov eax, 0x16
add esp, 0xc
mov word [esp + 0x1c], ax
mov dword [esp + 0x24], esi
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], eax
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087198
mov eax, dword [eax]
jmp 0x1008719a
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x400]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
or ebx, 0xffffffff
push edx
mov dword [esp + 0xc34], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1015441c
lea eax, [esp + 0x400]
push 0x104
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea edi, [esp + 0x400]
call fcn.100810b0
mov dword [esp + 0xc30], 0x17
mov eax, dword [eax]
test eax, eax
je 0x1008720e
mov eax, dword [eax]
jmp 0x10087210
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xc30], ebx
call fcn.10081150
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10089279
push esi
push str._nCannot_put_ExecutionTimeLimit:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], edi
jne 0x10087a42
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x100866f6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], edi
mov ecx, dword [eax]
push 0x10146a60
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x100872fd
push esi
push str._nQueryInterface_call_failed_for_IDailyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x18
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087359
mov eax, dword [eax]
jmp 0x1008735b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x19
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100873da
mov eax, dword [eax]
jmp 0x100873dc
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100873e0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087495
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008746c
mov eax, dword [eax]
jmp 0x1008746e
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x100874f7
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100874d0
mov eax, dword [eax]
jmp 0x100874d2
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087553
mov eax, dword [eax]
jmp 0x10087555
xor eax, eax
lea edx, [eax + 2]
jmp 0x10087560
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087560
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087611
push 0x10151f24
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100875e8
mov eax, dword [eax]
jmp 0x100875ea
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10087673
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008764c
mov eax, dword [eax]
jmp 0x1008764e
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100876cf
mov eax, dword [eax]
jmp 0x100876d1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100876d4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087789
push 0x10151f24
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x20
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087760
mov eax, dword [eax]
jmp 0x10087762
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x100877eb
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x21
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100877c4
mov eax, dword [eax]
jmp 0x100877c6
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x22
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087847
mov eax, dword [eax]
jmp 0x10087849
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087850
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087918
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x23
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100878dc
mov eax, dword [eax]
jmp 0x100878de
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10087991
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x24
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087953
mov eax, dword [eax]
jmp 0x10087955
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.100810b0
mov dword [esp + 0xc30], 0x25
mov eax, dword [eax]
test eax, eax
je 0x100879e5
mov eax, dword [eax]
jmp 0x100879e7
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.10081150
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10089279
push esi
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 2
jne 0x10088266
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 3
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x100866f6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146a80
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10087acd
push esi
push str._nQueryInterface_call_failed_for_IWeeklyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x26
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087b29
mov eax, dword [eax]
jmp 0x10087b2b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x27
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087baa
mov eax, dword [eax]
jmp 0x10087bac
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087bb0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087c65
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x28
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087c3c
mov eax, dword [eax]
jmp 0x10087c3e
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10087cc7
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x29
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087ca0
mov eax, dword [eax]
jmp 0x10087ca2
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087d23
mov eax, dword [eax]
jmp 0x10087d25
xor eax, eax
lea edx, [eax + 2]
jmp 0x10087d30
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087d30
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087de1
push 0x10151f24
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087db8
mov eax, dword [eax]
jmp 0x10087dba
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10087e43
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087e1c
mov eax, dword [eax]
jmp 0x10087e1e
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087e9f
mov eax, dword [eax]
jmp 0x10087ea1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087ea4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087f59
push 0x10151f24
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087f30
mov eax, dword [eax]
jmp 0x10087f32
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x10087fbb
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10087f94
mov eax, dword [eax]
jmp 0x10087f96
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x30
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088017
mov eax, dword [eax]
jmp 0x10088019
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088020
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100880e8
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x31
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100880ac
mov eax, dword [eax]
jmp 0x100880ae
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10088161
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x32
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088123
mov eax, dword [eax]
jmp 0x10088125
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.100810b0
mov dword [esp + 0xc30], 0x33
mov eax, dword [eax]
test eax, eax
je 0x100881b5
mov ecx, dword [eax]
jmp 0x100881b7
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.10081150
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [esp + 0x40], edi
jge 0x10089279
mov ecx, dword [esp + 0x40]
push ecx
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10086337
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 4
jne 0x10088a97
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 5
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x100866f6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146aa0
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x100882f1
push esi
push str._nQueryInterface_call_failed_for_pMonthlyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x34
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008834d
mov eax, dword [eax]
jmp 0x1008834f
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x35
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100883ce
mov eax, dword [eax]
jmp 0x100883d0
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100883d3
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088484
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x36
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008845b
mov eax, dword [eax]
jmp 0x1008845d
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x100884e6
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x37
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100884bf
mov eax, dword [eax]
jmp 0x100884c1
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x38
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088542
mov eax, dword [eax]
jmp 0x10088544
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088547
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100885f8
push 0x10151f24
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x39
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100885cf
mov eax, dword [eax]
jmp 0x100885d1
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x1008865a
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088633
mov eax, dword [eax]
jmp 0x10088635
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100886b6
mov eax, dword [eax]
jmp 0x100886b8
xor eax, eax
lea edx, [eax + 2]
jmp 0x100886c0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100886c0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088775
push 0x10151f24
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008874c
mov eax, dword [eax]
jmp 0x1008874e
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x100887d7
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100887b0
mov eax, dword [eax]
jmp 0x100887b2
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088833
mov eax, dword [eax]
jmp 0x10088835
xor eax, eax
lea edx, [eax + 2]
jmp 0x10088840
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088840
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088908
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100888cc
mov eax, dword [eax]
jmp 0x100888ce
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10088981
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x40
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088943
mov eax, dword [eax]
jmp 0x10088945
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.100810b0
mov dword [esp + 0xc30], 0x41
mov eax, dword [eax]
test eax, eax
je 0x100889d5
mov ecx, dword [eax]
jmp 0x100889d7
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.10081150
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push 0xfff
push eax
mov eax, dword [edx + 0x64]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0x40], edi
jge 0x10089279
mov eax, dword [esp + 0x40]
push eax
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 3
jne 0x10089279
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 4
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x100866f6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146a90
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x100882cd
push 0x206
lea eax, [esp + 0x1fa]
push edi
push eax
mov word [esp + 0x200], di
call sub.MSVCR80.dll_memset
add esp, 0xc
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x42
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088b59
mov eax, dword [eax]
jmp 0x10088b5b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x43
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088bda
mov eax, dword [eax]
jmp 0x10088bdc
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088be0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088c91
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x44
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088c68
mov eax, dword [eax]
jmp 0x10088c6a
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10088cf3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x45
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088ccc
mov eax, dword [eax]
jmp 0x10088cce
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x46
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088d4f
mov eax, dword [eax]
jmp 0x10088d51
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088d54
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088e05
push 0x10151f24
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x47
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088ddc
mov eax, dword [eax]
jmp 0x10088dde
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10088e67
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x48
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088e40
mov eax, dword [eax]
jmp 0x10088e42
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x49
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088ec3
mov eax, dword [eax]
jmp 0x10088ec5
xor eax, eax
lea edx, [eax + 2]
jmp 0x10088ed0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088ed0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088f81
push 0x10151f24
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088f58
mov eax, dword [eax]
jmp 0x10088f5a
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x10088fe3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10088fbc
mov eax, dword [eax]
jmp 0x10088fbe
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008903f
mov eax, dword [eax]
jmp 0x10089041
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10089044
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008910c
push 0x10151f24
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100890d0
mov eax, dword [eax]
jmp 0x100890d2
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10089185
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10089147
mov eax, dword [eax]
jmp 0x10089149
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.100810b0
mov dword [esp + 0xc30], 0x4f
mov eax, dword [eax]
test eax, eax
je 0x100891d9
mov ecx, dword [eax]
jmp 0x100891db
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.10081150
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 0xfff
push eax
call edx
mov ecx, ebx
mov dword [esp + 0x38], 0
xor edi, edi
call fcn.10003590
test eax, eax
jbe 0x10089242
mov esi, ebx
call fcn.100035b0
mov eax, dword [eax + 0x24]
or dword [esp + 0x38], eax
mov ecx, ebx
add edi, 1
call fcn.10003590
cmp edi, eax
jb 0x10089226
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x54]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x64]
push 0
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x40]
test eax, eax
jl 0x10088a73
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x60]
xor edi, edi
mov dword [esp + 0x60], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
cmp eax, edi
jge 0x100892b8
push eax
push str._nCannot_get_Task_collection_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x60], edi
mov ecx, dword [eax]
push edi
push eax
mov eax, dword [ecx + 0x30]
call eax
mov esi, eax
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x10089304
push esi
push str._nCannot_create_the_action:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x50]
push edx
mov dword [esp + 0x54], edi
mov ecx, dword [eax]
push str.MbLk
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x10089353
push esi
push str._nQueryInterface_call_failed_for_IExecAction:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
push 0x206
lea eax, [esp + 0x812]
push edi
push eax
mov word [esp + 0x818], di
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0x8c]
lea edx, [esp + 0x818]
add esp, 0xc
mov eax, esi
sub edx, esi
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x10089383
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x80c]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, edi
jge 0x100893da
push eax
push str._nCannot_put_action_path:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov ebx, dword [esp + 0x84]
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x100893e6
sub eax, edx
sar eax, 1
je 0x1008947b
push 0x206
lea eax, [esp + 0x402]
push edi
push eax
mov word [esp + 0x408], di
call sub.MSVCR80.dll_memset
lea edx, [esp + 0x408]
add esp, 0xc
mov eax, ebx
sub edx, ebx
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x10089424
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x3fc]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
cmp eax, edi
jge 0x1008947b
push eax
push str._nCannot_put_Arguments:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
push 0x206
lea eax, [esp + 0xa1a]
push edi
push eax
mov word [esp + 0xa20], di
call sub.MSVCR80.dll_memset
add esp, 0xc
call fcn.10082860
lea ecx, [eax + eax]
push ecx
lea edx, [esp + 0xa18]
push esi
push edx
call sub.MSVCR80.dll_memcpy
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [esp + 0xa14]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov esi, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x100894fd
push esi
push str._nCannot_put_WorkingDirectory:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10086337
mov edi, 0x1014be14
lea esi, [esp + 0xac]
mov dword [esp + 0x88], 0
call fcn.10081260
mov dword [esp + 0xc30], 0x50
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x8c]
push ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0xc30], 0x51
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x98]
mov edi, 0x10153fac
lea esi, [esp + 0xbc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
call fcn.10081260
mov byte [esp + 0xc30], 0x52
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x88]
push ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x38]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [ecx + 0xc], edi
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x48]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [esp + 0x98]
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x9c]
mov esi, dword [edx]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0xa0]
mov dword [ecx + 0xc], edi
mov edi, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [eax + 4]
mov dword [ecx + 4], edi
mov edi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x68]
push 6
push ecx
mov ecx, dword [esi + 0x44]
lea eax, [esp + 0x644]
push eax
push edx
call ecx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0xbc]
push edx
mov edi, eax
call esi
lea eax, [esp + 0x8c]
push eax
call esi
lea ecx, [esp + 0xac]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call esi
test edi, edi
jge 0x10089677
push edi
push str._nError_saving_the_Task_:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10086337
push str._n_Success__Task_successfully_registered.
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov ecx, dword [esp + 0xc28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc10]
xor ecx, esp
call fcn.1012d370
mov esp, ebp
pop ebp
ret 0x14