Function at 0x403174
Capabilities:
Schedule task via itaskservice

Disassembly:
push 0x2e0
mov eax, 0x425585
call fcn.0040d63c
mov eax, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x234], eax
mov eax, dword [ebp + 0x10]
push esi
mov dword [ebp - 0x258], eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x4031b4
xor eax, eax
inc eax
jmp 0x403c24
push esi
push esi
push esi
push 3
pop ebx
push ebx
push 6
push esi
push esi
push 0xffffffffffffffff
push esi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x4031db
cmp eax, 0x80010119
je 0x4031db
push 2
pop eax
jmp 0x403c24
lea eax, [ebp - 0x224]
mov dword [ebp - 0x224], esi
push eax
push 0x428904
push 1
push esi
push 0x428914
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x403bf2
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 4], esi
lea edi, [ebp - 0x28c]
lea esi, [ebp - 0x27c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x26c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x26c]
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x2cc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x2cc]
lea edi, [ebp - 0x2ac]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x2bc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 0x10
mov eax, dword [ebp - 0x224]
mov edi, esp
mov byte [ebp - 4], bl
lea esi, [ebp - 0x28c]
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x29c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2ac]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2bc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x2bc]
push eax
call ebx
lea eax, [ebp - 0x2cc]
push eax
call ebx
lea eax, [ebp - 0x26c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x27c]
push eax
call ebx
test esi, esi
jns 0x4032fc
mov eax, dword [ebp - 0x224]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 4
jmp 0x403bf1
and dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x220]
push 0x426738
call fcn.004014e8
mov eax, dword [eax]
mov dword [ebp - 4], 4
test eax, eax
je 0x403324
mov edx, dword [eax]
jmp 0x403326
xor edx, edx
mov eax, dword [ebp - 0x224]
lea esi, [ebp - 0x21c]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x40334f
call fcn.0040314d
test esi, esi
jns 0x403366
mov eax, dword [ebp - 0x224]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 5
jmp 0x403bf1
push dword [ebp - 0x254]
lea ecx, [ebp - 0x220]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 5
test edx, edx
je 0x403388
mov edx, dword [edx]
jmp 0x40338a
xor edx, edx
mov eax, dword [ebp - 0x21c]
push 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x4033ac
call fcn.0040314d
mov edi, dword [ebp - 0x234]
test edi, edi
je 0x403c04
cmp byte [edi], 0
je 0x403c04
mov eax, dword [ebp - 0x224]
lea edx, [ebp - 0x218]
and dword [ebp - 0x218], 0
push edx
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x224]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x403404
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 6
jmp 0x403bf1
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x238]
and dword [ebp - 0x238], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x403441
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 7
jmp 0x403bf1
mov eax, dword [ebp - 0x238]
push 0x42673c
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x238]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x403483
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 8
jmp 0x403bf1
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x228]
and dword [ebp - 0x228], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
jns 0x4034c0
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 9
jmp 0x403bf1
mov eax, dword [ebp - 0x228]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov esi, eax
test esi, esi
js 0x403559
mov eax, dword [ebp - 0x228]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov esi, eax
test esi, esi
js 0x403559
mov eax, dword [ebp - 0x228]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov esi, eax
test esi, esi
js 0x403559
push str.PT0S
lea ecx, [ebp - 0x220]
call fcn.004014e8
mov edx, dword [eax]
mov dword [ebp - 4], 6
test edx, edx
je 0x403521
mov edx, dword [edx]
jmp 0x403523
xor edx, edx
mov eax, dword [ebp - 0x228]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x70]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x403545
call fcn.0040314d
test esi, esi
js 0x403559
mov eax, dword [ebp - 0x228]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov esi, eax
mov eax, dword [ebp - 0x228]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x403588
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xa
jmp 0x403bf1
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x23c]
and dword [ebp - 0x23c], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jns 0x4035c5
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xb
jmp 0x403bf1
mov eax, dword [ebp - 0x23c]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov ecx, dword [ebp - 0x23c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x403604
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xc
jmp 0x403bf1
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x240]
and dword [ebp - 0x240], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x403641
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xd
jmp 0x403bf1
mov eax, dword [ebp - 0x240]
lea edx, [ebp - 0x244]
and dword [ebp - 0x244], 0
push edx
push 9
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x240]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x40368e
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xe
jmp 0x403bf1
mov eax, dword [ebp - 0x244]
lea edx, [ebp - 0x25c]
and dword [ebp - 0x25c], 0
push edx
push 0x428924
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x244]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x4036dd
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xf
jmp 0x403bf1
push str.Trigger1
lea ecx, [ebp - 0x220]
call fcn.004014e8
mov edx, dword [eax]
mov dword [ebp - 4], 7
test edx, edx
je 0x4036fe
mov edx, dword [edx]
jmp 0x403700
xor edx, edx
mov eax, dword [ebp - 0x25c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x403720
call fcn.0040314d
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x248]
and dword [ebp - 0x248], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x40375d
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x10
jmp 0x403bf1
mov eax, dword [ebp - 0x248]
lea edx, [ebp - 0x24c]
and dword [ebp - 0x24c], 0
push edx
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov ecx, dword [ebp - 0x248]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x4037aa
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x11
jmp 0x403bf1
mov eax, dword [ebp - 0x24c]
lea edx, [ebp - 0x22c]
and dword [ebp - 0x22c], 0
push edx
push str.MbLk
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x24c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x4037f9
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x12
jmp 0x403bf1
push edi
lea ecx, [ebp - 0x220]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 8
test edx, edx
je 0x403816
mov edx, dword [edx]
jmp 0x403818
xor edx, edx
mov eax, dword [ebp - 0x22c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x40383a
call fcn.0040314d
test esi, esi
js 0x4038cd
push edi
lea ecx, [ebp - 0x220]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 9
test edx, edx
je 0x40385f
mov edx, dword [edx]
jmp 0x403861
xor edx, edx
mov eax, dword [ebp - 0x22c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x403883
call fcn.0040314d
test esi, esi
js 0x4038cd
push dword [ebp - 0x258]
lea ecx, [ebp - 0x258]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 0xa
test edx, edx
je 0x4038a9
mov edx, dword [edx]
jmp 0x4038ab
xor edx, edx
mov eax, dword [ebp - 0x22c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x258]
test ecx, ecx
je 0x4038cd
call fcn.0040314d
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x4038fc
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x13
jmp 0x403bf1
lea eax, [ebp - 0x250]
mov dword [ebp - 0x250], 0x101
push eax
lea eax, [ebp - 0x214]
push eax
push 0x220
push 0
call fcn.00403085
add esp, 0x10
test eax, eax
jne 0x403946
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x14
jmp 0x403bf1
and dword [ebp - 0x230], 0
lea ecx, [ebp - 0x2bc]
push 0x426770
call fcn.00401533
mov esi, eax
mov dword [ebp - 4], 0xb
lea edi, [ebp - 0x2ac]
lea eax, [ebp - 0x27c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x27c]
mov byte [ebp - 4], 0xc
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x2cc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00401533
push dword [ebp - 0x254]
mov esi, eax
mov byte [ebp - 4], 0xd
lea edi, [ebp - 0x28c]
lea ecx, [ebp - 0x220]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040149d
mov edx, dword [eax]
mov byte [ebp - 4], 0xe
test edx, edx
je 0x4039d2
mov edx, dword [edx]
jmp 0x4039d4
xor edx, edx
lea esi, [ebp - 0x230]
mov eax, dword [ebp - 0x21c]
push esi
sub esp, 0x10
lea esi, [ebp - 0x2ac]
mov edi, esp
mov ecx, dword [eax]
push 4
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x29c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x28c]
push 6
push dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
push edx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov ecx, dword [ebp - 0x220]
mov esi, eax
test ecx, ecx
je 0x403a37
call fcn.0040314d
and dword [ebp - 0x220], 0
lea eax, [ebp - 0x2cc]
push eax
call ebx
lea eax, [ebp - 0x27c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2bc]
push eax
call ebx
test esi, esi
jns 0x403a79
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x15
jmp 0x403bf1
lea eax, [ebp - 0x250]
mov dword [ebp - 0x250], 0x101
push eax
lea eax, [ebp - 0x214]
push eax
push 0x221
push 0
call fcn.00403085
add esp, 0x10
test eax, eax
jne 0x403ac3
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x16
jmp 0x403bf1
and dword [ebp - 0x230], 0
lea ecx, [ebp - 0x2ec]
push 0x426770
call fcn.00401533
mov esi, eax
mov dword [ebp - 4], 0xf
lea edi, [ebp - 0x2ac]
lea eax, [ebp - 0x26c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x26c]
mov byte [ebp - 4], 0x10
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x2dc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00401533
push dword [ebp - 0x254]
mov esi, eax
mov byte [ebp - 4], 0x11
lea edi, [ebp - 0x28c]
lea ecx, [ebp - 0x234]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040149d
mov edx, dword [eax]
mov byte [ebp - 4], 0x12
test edx, edx
je 0x403b4f
mov edx, dword [edx]
jmp 0x403b51
xor edx, edx
lea esi, [ebp - 0x230]
mov eax, dword [ebp - 0x21c]
push esi
sub esp, 0x10
lea esi, [ebp - 0x2ac]
mov edi, esp
mov ecx, dword [eax]
push 4
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x29c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x28c]
push 6
push dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
push edx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov ecx, dword [ebp - 0x234]
mov esi, eax
test ecx, ecx
je 0x403bb4
call fcn.0040314d
and dword [ebp - 0x234], 0
lea eax, [ebp - 0x2dc]
push eax
call ebx
lea eax, [ebp - 0x26c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2ec]
push eax
call ebx
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x403bfc
push 0x17
pop ebx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, ebx
jmp 0x403c24
mov eax, dword [ebp - 0x230]
jmp 0x403c16
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
call fcn.0040d5fa
ret