Function at 0x423cf0
Capabilities:
Get hostname
Get http document via iwebbrowser2
Get session user name
Parse pe header
Resolve function by parsing pe exports
Schedule task via itaskscheduler
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47dde4
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x140
mov eax, dword [0x4b4200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x74], 0
movq qword [ebp - 0x6c], xmm0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x68], 1
push 1
push 0x49f1c8
push ecx
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 1
call fcn.00407700
mov dword [ebp - 4], 2
cmp dword [ebp - 0x7c], 6
je 0x423d98
mov byte [ebp - 0xe9], 0
jmp 0x426477
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
movq qword [ebp - 0x100], xmm0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x100], 0
mov byte [ebp - 0xf8], 1
mov byte [ebp - 4], 3
movq qword [ebp - 0x24], xmm0
push 2
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.0046a3df
xor ecx, ecx
mov dword [ebp - 0xf0], eax
add esp, 4
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x1c], 1
mov word [eax], cx
mov byte [ebp - 4], 4
xorps xmm0, xmm0
mov edx, dword [ebp - 0x74]
xor esi, esi
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x28], ecx
mov edi, dword [edx + 8]
test edi, edi
je 0x423e28
cmp word [edi], si
je 0x423e28
nop dword [eax + eax]
inc esi
cmp word [edi + esi*2], 0
jne 0x423e20
mov ecx, 2
mov dword [ebp - 0x2c], esi
lea eax, [esi + 1]
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0x30], eax
test esi, esi
jle 0x423e63
mov ecx, eax
sub edi, eax
mov edx, esi
mov ax, word [ecx + edi]
lea ecx, [ecx + 2]
mov word [ecx - 2], ax
sub edx, 1
jne 0x423e53
mov edi, dword [ebp - 0x30]
xor eax, eax
mov byte [ebp - 0x28], 1
mov word [edi + esi*2], ax
mov byte [ebp - 4], 5
push 0x204
mov dword [ebp - 0xe4], 0x101
mov dword [ebp - 0xfc], eax
call fcn.0046a3df
xor ecx, ecx
mov dword [ebp - 0x100], eax
add esp, 4
mov word [eax + 0x202], cx
mov word [eax], cx
lea ecx, [ebp - 0xe4]
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov ecx, dword [ebp - 0xf0]
xor eax, eax
mov dword [ebp - 0xf4], eax
cmp word [ecx], ax
je 0x423ed2
inc eax
cmp word [ecx + eax*2], 0
jne 0x423ec4
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x20], eax
test esi, esi
jne 0x423eed
cmp word [edi], si
je 0x423ee8
nop
inc esi
cmp word [edi + esi*2], 0
jne 0x423ee0
mov dword [ebp - 0x2c], esi
test esi, esi
setg byte [ebp - 0x28]
test esi, esi
jle 0x423f1a
lea eax, [esi*2 - 2]
nop dword [eax]
cmp word [edi + eax], 0x5c
lea ecx, [edi + eax]
jne 0x423f1a
dec esi
xor edx, edx
sub eax, 2
mov dword [ebp - 0x2c], esi
mov word [ecx], dx
test esi, esi
jne 0x423f00
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x49eae8
lea ecx, [ebp - 0x30]
call fcn.00406350
cmp eax, 2
jle 0x423f6f
mov edx, dword [ebp - 0x30]
lea ecx, [eax - 1]
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x423f5b
test edx, edx
je 0x423f58
cmp word [edx], ax
je 0x423f58
nop word [eax + eax]
inc eax
cmp word [edx + eax*2], 0
jne 0x423f50
mov dword [ebp - 0x2c], eax
cmp eax, ecx
setge byte [ebp - 0x28]
jl 0x423f6f
cmovl ecx, eax
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov word [edx + ecx*2], ax
call fcn.00407a10
movsd xmm1, qword [0x4aa3d8]
comisd xmm1, xmm0
jbe 0x424887
xorps xmm0, xmm0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x58], 0
movq qword [ebp - 0x50], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x4c], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x60]
mov esi, dword [ebp - 0x74]
push 1
push 0x49edd0
push dword [esi + 0x10]
call fcn.00407700
xorps xmm0, xmm0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x40], 0
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 0x34], 1
push 1
push 0x49f1a4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x48]
push dword [esi + 0x14]
call fcn.00407700
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x60], 3
jne 0x424837
mov edi, dword [ebp - 0x48]
cmp edi, 2
jb 0x424837
mov dword [ebp - 0xc4], 0
lea eax, [ebp - 0xc4]
push eax
push 0x4aa324
push 1
push 0
push 0x4aa304
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x4240c2
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424072
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424082
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x424092
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4240a2
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov dword [ebp - 0xb0], 0
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0xc4]
push edx
push 0x4aa334
push dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
test eax, eax
js 0x424195
mov eax, dword [ebp - 0xb0]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
test eax, eax
jns 0x4240f2
mov eax, dword [ebp - 0xb0]
push 0x2000
push eax
mov ecx, dword [eax]
call dword [ecx + 0x70]
test eax, eax
jns 0x424234
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424131
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424145
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424155
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x424165
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424175
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov eax, dword [ebp - 0xc4]
lea edx, [ebp - 0xb0]
push edx
push 0x4aa334
push 0x4aa2f4
push dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
jns 0x424104
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4241d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4241e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4241f4
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x424204
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424214
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov eax, dword [ebp - 0xb0]
push dword [esi + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
jns 0x4242c2
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x42425e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424272
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424282
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x424292
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4242a2
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov eax, dword [ebp - 0xb0]
push dword [esi + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x88]
test eax, eax
jns 0x424350
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4242ec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424300
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424310
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x424320
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424330
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov eax, dword [ebp - 0xb0]
push dword [esi + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xb0]
push 0x1b7740
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov esi, dword [ecx + 0x90]
mov ecx, dword [ebp - 0x30]
test ecx, ecx
jne 0x4243a6
push 2
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0x30], eax
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov word [eax], cx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x30]
push ecx
push eax
mov byte [ebp - 0x28], 1
call esi
mov edx, dword [ebp - 0xf0]
cmp edx, str.LocalSystem
je 0x4243e6
mov esi, str.LocalSystem
mov eax, edx
sub eax, esi
mov dword [ebp - 0x64], eax
nop dword [eax + eax]
movzx eax, word [eax + esi]
mov ecx, eax
test ax, ax
jne 0x42441a
cmp word [esi], ax
jne 0x42441f
mov edx, dword [ebp - 0xf0]
push edx
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
push 2
call fcn.0046a3df
mov edx, eax
mov byte [ebp - 0x1c], 1
add esp, 4
mov dword [ebp - 0xf0], edx
xor eax, eax
mov dword [ebp - 0x24], edx
mov word [edx], ax
jmp 0x424476
cmp ax, word [esi]
je 0x424465
xor edx, edx
cmp dx, ax
jne 0x42442e
mov dword [ebp - 0xe0], edx
jmp 0x424440
push ecx
call fcn.0046e306
movzx eax, ax
add esp, 4
mov dword [ebp - 0xe0], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x424450
xor eax, eax
jmp 0x42445c
push ecx
call fcn.0046e306
add esp, 4
movzx eax, ax
cmp word [ebp - 0xe0], ax
jne 0x424470
mov eax, dword [ebp - 0x64]
add esi, 2
jmp 0x4243d0
mov edx, dword [ebp - 0xf0]
cmp dword [ebp - 0xf4], 0
je 0x424492
mov eax, dword [ebp - 0xb0]
push 0
push edx
push eax
mov ecx, dword [eax]
mov byte [ebp - 0x1c], 1
call dword [ecx + 0x78]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0xdc], 0
mov byte [ebp - 4], 0x17
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0xb0]
push edx
lea edx, [ebp - 0x18]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x424552
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x4244da
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4244ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424502
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424512
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x424522
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424532
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
push 0x30
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.0046ba40
mov esi, dword [ebp - 0x58]
add esp, 0xc
mov eax, 0x30
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xac], ax
push dword [esi]
call fcn.0046e166
add esp, 4
mov word [ebp - 0xa8], ax
push dword [esi + 4]
call fcn.0046e166
add esp, 4
mov word [ebp - 0xa6], ax
push dword [esi + 8]
call fcn.0046e166
mov esi, dword [ebp - 0x40]
add esp, 4
mov word [ebp - 0xa4], ax
test edi, edi
jne 0x4245be
xor eax, eax
jmp 0x4245cd
mov eax, 1
test edi, edi
cmove edi, eax
mov eax, dword [esi]
mov dword [ebp - 0x48], edi
push eax
call fcn.0046e166
add esp, 4
mov word [ebp - 0x9c], ax
test edi, edi
jne 0x4245e5
xor eax, eax
jmp 0x42460a
cmp edi, 1
ja 0x4245fc
lea ecx, [edi - 1]
cmp edi, ecx
ja 0x4245f7
lea eax, [ecx + 1]
mov dword [ebp - 0x48], eax
mov eax, dword [esi + ecx*4]
jmp 0x42460a
mov eax, 2
cmovbe edi, eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x48], edi
push eax
call fcn.0046e166
mov word [ebp - 0x9a], ax
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 0xdc]
add esp, 4
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x4246be
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x424649
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x42465d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x424671
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424681
push eax
call fcn.00469dd3
add esp, 4
test esi, esi
je 0x42468e
push esi
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x42469e
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov dword [ebp - 0xd0], 0
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0xb0]
push edx
push 0x47f6a0
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x424788
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4246ff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x424713
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424727
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x42473b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x42474b
push eax
call fcn.00469dd3
add esp, 4
test esi, esi
je 0x424758
push esi
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424768
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov eax, dword [ebp - 0xd0]
push 1
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
sete byte [ebp - 0xe9]
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4247b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x4247c9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4247dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4247f1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424801
push eax
call fcn.00469dd3
add esp, 4
test esi, esi
je 0x42480e
push esi
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x42481e
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x426446
push eax
call fcn.00469dd3
add esp, 4
jmp 0x426446
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x424847
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x424857
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x424867
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4260ba
push eax
call fcn.00469dd3
add esp, 4
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov dword [ebp - 0xb4], 0
lea eax, [ebp - 0xb4]
push eax
push 0x499108
push 1
push 0
push 0x499118
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x4248b9
mov byte [ebp - 4], 0x28
jmp 0x4260aa
mov eax, dword [ebp - 0xb4]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [eax]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x140]
push eax
call edi
movups xmm0, xmmword [ebp - 0x140]
lea eax, [ebp - 0x130]
push eax
movups xmmword [ebp - 0x150], xmm0
call edi
movups xmm0, xmmword [ebp - 0x130]
lea eax, [ebp - 0x110]
push eax
movups xmmword [ebp - 0x58], xmm0
call edi
movups xmm0, xmmword [ebp - 0x110]
lea eax, [ebp - 0x120]
push eax
movups xmmword [ebp - 0x40], xmm0
call edi
mov byte [ebp - 4], 0x2c
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x150]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x58]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x40]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x120]
push dword [ebp - 0xb4]
movups xmmword [eax], xmm0
call esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
shr eax, 0x1f
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x120]
push eax
call esi
lea eax, [ebp - 0x110]
push eax
call esi
lea eax, [ebp - 0x130]
push eax
call esi
lea eax, [ebp - 0x140]
push eax
call esi
cmp byte [ebp - 0x18], 0
je 0x424993
mov byte [ebp - 4], 0x2d
jmp 0x4260aa
mov dword [ebp - 0xbc], 0
mov byte [ebp - 4], 0x2e
xorps xmm0, xmm0
mov eax, dword [ebp - 0x74]
movq qword [ebp - 0x10c], xmm0
mov dword [ebp - 0x104], 0
mov ecx, dword [eax + 0x10]
mov esi, dword [eax + 0x14]
xor eax, eax
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xe8], ecx
test ecx, ecx
je 0x4249de
cmp word [ecx], ax
je 0x4249de
inc eax
cmp word [ecx + eax*2], 0
jne 0x4249d6
xor ecx, ecx
inc ecx
cmp word [ecx*2 + 0x49f9b0], 0
jne 0x4249e0
add ecx, eax
test esi, esi
je 0x424a0a
xor eax, eax
cmp word [esi], ax
je 0x424a08
nop dword [eax]
inc eax
cmp word [esi + eax*2], 0
jne 0x424a00
add ecx, eax
lea eax, [ecx + 1]
mov dword [ebp - 0xd4], ecx
mov ecx, 2
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov edx, dword [ebp - 0xe8]
mov edi, eax
add esp, 4
mov dword [ebp - 0x18], edi
mov ecx, edi
test edx, edx
je 0x424a77
movzx eax, word [edx]
mov esi, eax
mov dword [ebp - 0xe8], esi
mov esi, dword [ebp - 0xd0]
test ax, ax
je 0x424a77
movzx esi, ax
sub edx, edi
nop word [eax + eax]
mov word [ecx], si
add ecx, 2
movzx eax, word [edx + ecx]
mov esi, eax
test ax, ax
jne 0x424a60
mov esi, dword [ebp - 0xd0]
mov edi, 0x49f9b0
mov edx, 0x54
sub edi, ecx
mov word [ecx], dx
add ecx, 2
movzx eax, word [edi + ecx]
mov edx, eax
test ax, ax
jne 0x424a83
mov edi, dword [ebp - 0x18]
test esi, esi
je 0x424ab9
movzx eax, word [esi]
mov edx, eax
test ax, ax
je 0x424ab9
movzx eax, ax
lea esi, [esi + 2]
mov word [ecx], ax
add ecx, 2
movzx eax, word [esi]
test ax, ax
jne 0x424aa5
xor eax, eax
mov dword [ebp - 0x10c], edi
mov word [ecx], ax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x108], eax
mov byte [ebp - 0x104], 1
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xe8]
mov eax, dword [ebp - 0xb4]
push 0x49eae8
mov eax, dword [eax]
mov esi, dword [eax + 0x1c]
call fcn.004013f0
mov byte [ebp - 4], 0x30
mov eax, dword [eax]
test eax, eax
je 0x424b04
mov eax, dword [eax]
jmp 0x424b06
xor eax, eax
lea ecx, [ebp - 0xbc]
push ecx
push eax
push dword [ebp - 0xb4]
call esi
mov ecx, eax
mov byte [ebp - 4], 0x2f
mov esi, dword [ebp - 0xe8]
shr ecx, 0x1f
mov dword [ebp - 0xd4], ecx
test esi, esi
je 0x424b79
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x424b79
test esi, esi
je 0x424b79
mov eax, dword [esi]
test eax, eax
je 0x424b51
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x424b68
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0xd4]
add esp, 8
test cl, cl
je 0x424ba3
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424b9a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x32
jmp 0x4260aa
mov eax, dword [ebp - 0xbc]
lea ecx, [ebp - 0xe8]
mov eax, dword [eax]
mov esi, dword [eax + 0x3c]
mov eax, dword [ebp - 0x74]
push dword [eax]
call fcn.004013f0
mov byte [ebp - 4], 0x33
mov eax, dword [eax]
test eax, eax
je 0x424bcc
mov eax, dword [eax]
jmp 0x424bce
xor eax, eax
push 0
push eax
push dword [ebp - 0xbc]
call esi
mov esi, dword [ebp - 0xe8]
test esi, esi
je 0x424c27
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x424c27
test esi, esi
je 0x424c27
mov eax, dword [esi]
test eax, eax
je 0x424c05
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x424c1c
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
add esp, 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xc0], 0
mov byte [ebp - 4], 0x35
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 0xb4]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x424ca6
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424c6c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x424c80
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424c9d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x39
jmp 0x4260aa
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0xc0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x424d0b
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424cd1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x424ce5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424d02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x3d
jmp 0x4260aa
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0xe8]
push dword [ebp - 0x100]
mov byte [ebp - 0xf8], 1
mov eax, dword [eax]
mov esi, dword [eax + 0x28]
call fcn.004013f0
mov byte [ebp - 4], 0x3e
mov eax, dword [eax]
test eax, eax
je 0x424d3c
mov eax, dword [eax]
jmp 0x424d3e
xor eax, eax
push eax
push dword [ebp - 0xc0]
call esi
mov ecx, eax
mov byte [ebp - 4], 0x35
mov esi, dword [ebp - 0xe8]
shr ecx, 0x1f
mov dword [ebp - 0xd4], ecx
test esi, esi
je 0x424daa
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x424daa
test esi, esi
je 0x424daa
mov eax, dword [esi]
test eax, eax
je 0x424d82
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x424d99
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0xd4]
add esp, 8
test cl, cl
je 0x424dfc
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424dc2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x424dd6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424df3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x42
jmp 0x4260aa
mov eax, dword [ebp - 0xc0]
mov edx, dword [ebp - 0x74]
mov ecx, dword [eax]
push dword [edx + 4]
push eax
call dword [ecx + 0x20]
test eax, eax
jns 0x424e60
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424e26
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x424e3a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424e57
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x46
jmp 0x4260aa
mov dword [ebp - 0xb0], 0
mov byte [ebp - 4], 0x47
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0xb8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jns 0x424ee7
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424e99
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424ead
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x424ec1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x4b
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424ede
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4c
jmp 0x4260aa
mov eax, dword [ebp - 0xb0]
lea ecx, [ebp - 0xe8]
push 0x49f9b4
mov eax, dword [eax]
mov esi, dword [eax + 0x20]
call fcn.004013f0
mov byte [ebp - 4], 0x4d
mov eax, dword [eax]
test eax, eax
je 0x424f10
mov eax, dword [eax]
jmp 0x424f12
xor eax, eax
push eax
push dword [ebp - 0xb0]
call esi
mov ecx, eax
mov byte [ebp - 4], 0x47
mov esi, dword [ebp - 0xe8]
shr ecx, 0x1f
mov dword [ebp - 0xd4], ecx
test esi, esi
je 0x424f7e
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x424f7e
test esi, esi
je 0x424f7e
mov eax, dword [esi]
test eax, eax
je 0x424f56
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x424f6d
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0xd4]
add esp, 8
test cl, cl
je 0x424fe4
mov byte [ebp - 4], 0x4e
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x424f96
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x424faa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x50
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x424fbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x51
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x424fdb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x52
jmp 0x4260aa
mov eax, dword [ebp - 0xb0]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
jns 0x425058
mov byte [ebp - 4], 0x53
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x42500a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x42501e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x55
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425032
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x56
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42504f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x57
jmp 0x4260aa
cmp dword [ebp - 0xf4], 0
je 0x42532c
push 0
push 1
push 1
push 0
push 0x49eae8
lea ecx, [ebp - 0x24]
call fcn.00406350
test eax, eax
mov eax, dword [ebp - 0x24]
jne 0x42519a
push 0x102
mov dword [ebp - 0xd4], 0x80
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x20], 0
call fcn.0046a3df
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x24], esi
mov word [esi + 0x100], ax
mov word [esi], ax
mov eax, dword [ebp - 0xe8]
test eax, eax
je 0x4250cd
push eax
call fcn.00469dd3
add esp, 4
lea eax, [ebp - 0xd4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
xor eax, eax
mov byte [ebp - 0x1c], 0
cmp word [esi], ax
je 0x4250f3
inc eax
cmp word [esi + eax*2], 0
jne 0x4250e6
mov dword [ebp - 0x20], eax
jmp 0x4250f8
mov dword [ebp - 0x20], eax
xor eax, eax
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x49eae8], 0
jne 0x425100
add eax, ecx
mov ecx, 2
mov dword [ebp - 0xe8], eax
inc eax
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov dword [ebp - 0xf0], eax
mov ecx, eax
movzx eax, word [esi]
add esp, 4
mov edx, eax
test ax, ax
je 0x425154
mov edi, esi
sub edi, ecx
mov word [ecx], dx
add ecx, 2
movzx eax, word [edi + ecx]
mov edx, eax
test ax, ax
jne 0x425143
mov edi, 0x49eae8
mov edx, 0x5c
sub edi, ecx
mov word [ecx], dx
lea ecx, [ecx + 2]
movzx eax, word [edi + ecx]
mov edx, eax
test ax, ax
jne 0x425160
xor eax, eax
push esi
mov word [ecx], ax
call fcn.00469dd3
mov eax, dword [ebp - 0xf0]
add esp, 4
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 1
jmp 0x4251a0
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xb0]
push 3
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
jns 0x425214
mov byte [ebp - 4], 0x58
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4251c6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4251da
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x5a
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4251ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42520b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x5c
jmp 0x4260aa
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov esi, dword [eax + 0x30]
mov eax, dword [ebp - 0xf0]
test eax, eax
jne 0x425244
push 2
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0xf0], eax
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
mov word [eax], cx
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 0x1c], 1
call fcn.004013f0
mov byte [ebp - 4], 0x5d
mov eax, dword [eax]
test eax, eax
je 0x425262
mov eax, dword [eax]
jmp 0x425264
xor eax, eax
push eax
push dword [ebp - 0xb0]
call esi
mov esi, dword [ebp - 0xe8]
mov ecx, eax
shr ecx, 0x1f
mov dword [ebp - 0x18], ecx
test esi, esi
je 0x4252c6
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4252c6
test esi, esi
je 0x4252c6
mov eax, dword [esi]
test eax, eax
je 0x4252a1
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4252b8
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0x18]
add esp, 8
test cl, cl
je 0x42532c
mov byte [ebp - 4], 0x5e
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4252de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4252f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x60
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425306
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x61
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425323
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x62
jmp 0x4260aa
mov dword [ebp - 0xc8], 0
mov byte [ebp - 4], 0x63
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 0xb8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
jns 0x4253c7
mov byte [ebp - 4], 0x64
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425365
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x65
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425379
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x42538d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4253a1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x68
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4253be
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x69
jmp 0x4260aa
mov eax, dword [ebp - 0xc8]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jns 0x42544f
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4253ed
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425401
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6c
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425415
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6d
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425429
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x6e
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425446
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6f
jmp 0x4260aa
mov eax, dword [ebp - 0xc8]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xc8]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov dword [ebp - 0xc4], 0
mov byte [ebp - 4], 0x70
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 0xb8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x42551e
mov byte [ebp - 4], 0x71
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4254a8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x72
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4254bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x73
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4254d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x74
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4254e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x75
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4254f8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x76
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425515
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x77
jmp 0x4260aa
mov dword [ebp - 0xcc], 0
mov byte [ebp - 4], 0x78
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 0xc4]
push edx
push 9
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
jns 0x4255e7
mov byte [ebp - 4], 0x79
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x42555d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7a
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425571
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425585
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7c
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425599
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7d
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4255ad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x7e
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4255c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x7f
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4255de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x80
jmp 0x4260aa
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xe8]
push str.Trigger1
mov eax, dword [eax]
mov esi, dword [eax + 0x24]
call fcn.004013f0
mov byte [ebp - 4], 0x81
mov eax, dword [eax]
test eax, eax
je 0x425610
mov eax, dword [eax]
jmp 0x425612
xor eax, eax
push eax
push dword [ebp - 0xcc]
call esi
mov ecx, eax
mov byte [ebp - 4], 0x78
mov esi, dword [ebp - 0xe8]
shr ecx, 0x1f
mov dword [ebp - 0x18], ecx
test esi, esi
je 0x425678
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425678
test esi, esi
je 0x425678
mov eax, dword [esi]
test eax, eax
je 0x425653
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x42566a
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0x18]
add esp, 8
test cl, cl
je 0x42571e
mov byte [ebp - 4], 0x82
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425694
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x83
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4256a8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x84
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4256bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x85
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4256d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x86
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4256e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x87
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4256f8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x88
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425715
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x89
jmp 0x4260aa
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xe8]
push edi
mov byte [ebp - 0x104], 1
mov eax, dword [eax]
mov esi, dword [eax + 0x3c]
call fcn.004013f0
mov byte [ebp - 4], 0x8a
mov eax, dword [eax]
test eax, eax
je 0x42574a
mov eax, dword [eax]
jmp 0x42574c
xor eax, eax
push eax
push dword [ebp - 0xcc]
call esi
mov esi, dword [ebp - 0xe8]
mov ecx, eax
shr ecx, 0x1f
mov dword [ebp - 0x18], ecx
test esi, esi
je 0x4257ae
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4257ae
test esi, esi
je 0x4257ae
mov eax, dword [esi]
test eax, eax
je 0x425789
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4257a0
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0x18]
add esp, 8
test cl, cl
je 0x425854
mov byte [ebp - 4], 0x8b
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4257ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8c
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4257de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8d
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4257f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8e
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425806
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8f
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x42581a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x90
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x42582e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0x91
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42584b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x92
jmp 0x4260aa
cmp dword [ebp - 0xf4], 0
je 0x425ac0
mov dword [ebp - 0xd0], 0
mov byte [ebp - 4], 0x9e
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0xcc]
push edx
push 0x499128
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x425940
mov byte [ebp - 4], 0x9f
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4258a2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa0
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4258b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa1
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4258ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa2
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4258de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa3
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4258f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa4
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425906
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa5
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x42591a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0xa6
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425937
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa7
jmp 0x4260aa
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov esi, dword [eax + 0x5c]
mov eax, dword [ebp - 0xf0]
test eax, eax
jne 0x425970
push 2
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0xf0], eax
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
mov word [eax], cx
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 0x1c], 1
call fcn.004013f0
mov byte [ebp - 4], 0xa8
mov eax, dword [eax]
test eax, eax
je 0x42598e
mov eax, dword [eax]
jmp 0x425990
xor eax, eax
push eax
push dword [ebp - 0xd0]
call esi
mov esi, dword [ebp - 0xe8]
mov ecx, eax
shr ecx, 0x1f
mov dword [ebp - 0x18], ecx
test esi, esi
je 0x4259f2
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4259f2
test esi, esi
je 0x4259f2
mov eax, dword [esi]
test eax, eax
je 0x4259cd
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4259e4
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0x18]
add esp, 8
test cl, cl
je 0x425aac
mov byte [ebp - 4], 0xa9
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x425a0e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425a22
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xab
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425a36
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xac
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425a4a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xad
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425a5e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xae
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425a72
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xaf
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425a86
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0xb0
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425aa3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb1
jmp 0x4260aa
mov byte [ebp - 4], 0xb2
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x425ac0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xd8], 0
mov byte [ebp - 4], 0xb5
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0xb8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x425bd7
mov byte [ebp - 4], 0xb6
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x425b11
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb7
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425b25
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb8
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425b39
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xb9
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425b4d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xba
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425b61
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbb
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425b75
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbc
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425b89
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbd
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425b9d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xbe
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425bb1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0xbf
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425bce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc0
jmp 0x4260aa
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xe0]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
jns 0x425cce
mov byte [ebp - 4], 0xc1
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x425c08
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc2
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425c1c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc3
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425c30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc4
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425c44
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc5
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425c58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc6
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425c6c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc7
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425c80
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc8
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425c94
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc9
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425ca8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0xca
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425cc5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xcb
jmp 0x4260aa
mov eax, dword [ebp - 0xe0]
lea edx, [ebp - 0xd8]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x425dc7
mov byte [ebp - 4], 0xcc
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x425d01
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xcd
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425d15
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xce
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425d29
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xcf
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425d3d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd0
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425d51
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd1
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425d65
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd2
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425d79
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd3
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425d8d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd4
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425da1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0xd5
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425dbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd6
jmp 0x4260aa
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xe8]
mov eax, dword [eax]
mov esi, dword [eax + 0x2c]
mov eax, dword [ebp - 0x74]
push dword [eax + 8]
call fcn.004013f0
mov byte [ebp - 4], 0xd7
mov eax, dword [eax]
test eax, eax
je 0x425df1
mov eax, dword [eax]
jmp 0x425df3
xor eax, eax
push eax
push dword [ebp - 0xd8]
call esi
mov ecx, eax
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xe8]
shr ecx, 0x1f
mov dword [ebp - 0x18], ecx
test esi, esi
je 0x425e59
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425e59
test esi, esi
je 0x425e59
mov eax, dword [esi]
test eax, eax
je 0x425e34
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x425e4b
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0x18]
add esp, 8
test cl, cl
je 0x425f3b
mov byte [ebp - 4], 0xd8
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x425e75
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd9
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425e89
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xda
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x425e9d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdb
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x425eb1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdc
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x425ec5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdd
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x425ed9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xde
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x425eed
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xdf
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x425f01
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe0
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x425f15
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0xe1
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x425f32
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe2
jmp 0x4260aa
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xe8]
mov eax, dword [eax]
mov esi, dword [eax + 0x34]
mov eax, dword [ebp - 0x74]
push dword [eax + 0xc]
call fcn.004013f0
mov byte [ebp - 4], 0xe3
mov eax, dword [eax]
test eax, eax
je 0x425f65
mov eax, dword [eax]
jmp 0x425f67
xor eax, eax
push eax
push dword [ebp - 0xd8]
call esi
mov ecx, eax
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xe8]
shr ecx, 0x1f
mov dword [ebp - 0x18], ecx
test esi, esi
je 0x425fcd
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x425fcd
test esi, esi
je 0x425fcd
mov eax, dword [esi]
test eax, eax
je 0x425fa8
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x425fbf
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov ecx, dword [ebp - 0x18]
add esp, 8
test cl, cl
je 0x4260c6
mov byte [ebp - 4], 0xe4
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x425fe9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe5
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x425ffd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe6
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x426011
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe7
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x426025
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe8
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x426039
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe9
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x42604d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xea
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x426061
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xeb
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x426075
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xec
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x426089
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov byte [ebp - 4], 0xed
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4260a6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xee
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x4260ba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 0xe9], 0
jmp 0x426446
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov esi, dword [eax + 0x3c]
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x4260ed
push 2
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0x30], eax
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov word [eax], cx
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 0x28], 1
call fcn.004013f0
mov byte [ebp - 4], 0xef
mov eax, dword [eax]
test eax, eax
je 0x42610b
mov eax, dword [eax]
jmp 0x42610d
xor eax, eax
push eax
push dword [ebp - 0xd8]
call esi
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xe8]
test esi, esi
je 0x426168
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x426168
test esi, esi
je 0x426168
mov eax, dword [esi]
test eax, eax
je 0x426146
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x42615d
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
add esp, 8
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xe8]
push str.Action1
mov eax, dword [eax]
mov esi, dword [eax + 0x20]
call fcn.004013f0
mov byte [ebp - 4], 0xf0
mov eax, dword [eax]
test eax, eax
je 0x426191
mov eax, dword [eax]
jmp 0x426193
xor eax, eax
push eax
push dword [ebp - 0xd8]
call esi
mov esi, dword [ebp - 0xe8]
test esi, esi
je 0x4261ea
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4261ea
test esi, esi
je 0x4261ea
mov eax, dword [esi]
test eax, eax
je 0x4261c8
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4261df
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
add esp, 8
mov dword [ebp - 0x64], 0
mov byte [ebp - 4], 0xf1
mov eax, dword [ebp - 0xbc]
push 0x49eb08
mov eax, dword [eax]
mov esi, dword [eax + 0x44]
mov eax, 8
mov word [ebp - 0x120], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x118], eax
test eax, eax
je 0x4264bd
movups xmm0, xmmword [ebp - 0x120]
lea eax, [ebp - 0x130]
push eax
movups xmmword [ebp - 0x40], xmm0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
movups xmm0, xmmword [ebp - 0x130]
lea eax, [ebp - 0x140]
push eax
movups xmmword [ebp - 0x58], xmm0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0xf4
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
movups xmm0, xmmword [ebp - 0x140]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x74]
movups xmmword [ebp - 0x150], xmm0
push dword [eax]
call fcn.004013f0
mov byte [ebp - 4], 0xf5
mov ecx, dword [eax]
test ecx, ecx
je 0x42628e
mov ecx, dword [ecx]
jmp 0x426290
xor ecx, ecx
movups xmm0, xmmword [ebp - 0x40]
lea eax, [ebp - 0x64]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x58]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x150]
push 6
push dword [ebp - 0xe8]
movups xmmword [eax], xmm0
push ecx
push dword [ebp - 0xbc]
call esi
mov esi, dword [ebp - 0x18]
test eax, eax
sete byte [ebp - 0xe9]
test esi, esi
je 0x426329
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x426322
test esi, esi
je 0x426322
mov eax, dword [esi]
test eax, eax
je 0x426300
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x426317
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
add esp, 8
mov dword [ebp - 0x18], 0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x140]
push eax
call esi
lea eax, [ebp - 0x130]
push eax
call esi
lea eax, [ebp - 0x120]
push eax
call esi
mov byte [ebp - 4], 0xf6
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x42635b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xf7
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x42636f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xf8
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x426383
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xf9
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x426397
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfa
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4263ab
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfb
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x4263bf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfc
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4263d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfd
mov eax, dword [ebp - 0xb0]
test eax, eax
je 0x4263e7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xfe
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4263fb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xff
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x42640f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.00469dd3
add esp, 4
mov dword [ebp - 4], 0x100
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x42642f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x101
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x426446
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x426456
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0xf0]
test eax, eax
je 0x426469
push eax
call fcn.00469dd3
add esp, 4
push dword [ebp - 0x100]
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x426487
push eax
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x426497
push eax
call fcn.00469dd3
add esp, 4
mov al, byte [ebp - 0xe9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00469dc5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
push 0x8007000e
call fcn.00469a60
int3