Function at 0x10086130
Capabilities:
Check os version
Encode data using base64
Enumerate pe sections
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10111bd1
mov eax, dword fs:[0]
push eax
sub esp, 0xc18
mov eax, dword [0x1013b024]
xor eax, esp
mov dword [esp + 0xc10], eax
push ebx
push esi
push edi
mov eax, dword [0x1013b024]
xor eax, esp
push eax
lea eax, [esp + 0xc28]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x18]
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0x80], eax
mov edi, ecx
mov ecx, dword [ebp + 0x14]
lea eax, [esp + 0xdc]
push eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x88], edx
mov dword [esp + 0xe0], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [esp + 0xe0], 6
jae 0x100861db
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x38]
mov edx, dword [edi]
mov edx, dword [edx + 0x10]
push eax
mov eax, dword [esp + 0x84]
push ecx
push ebx
push eax
push esi
mov ecx, edi
call edx
jmp 0x10089834
mov ecx, esi
call fcn.100826b0
xor edi, edi
push 0x206
lea eax, [esp + 0x60a]
push edi
push eax
mov word [esp + 0x610], di
call sub.MSVCR80.dll_memset
lea edx, [esp + 0x610]
add esp, 0xc
mov eax, esi
sub edx, esi
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x10086210
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, edi
jge 0x10086243
push eax
push str._nCoInitialize_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
mov eax, 1
jmp 0x10089834
lea ecx, [esp + 0x54]
push ecx
push 0x10119800
push 1
push edi
push 0x101199f0
mov dword [esp + 0x68], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x1008643a
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
push edx
call edi
mov dword [esp + 0xc30], 0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0x8c]
push eax
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], edx
call edi
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x94]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0xbc]
push edx
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
call edi
mov ecx, dword [esp + 0xc0]
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xc8]
lea ecx, [esp + 0xac]
push ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
call edi
mov byte [esp + 0xc30], 3
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xe4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xac]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xc0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xc4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xc8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xa0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xa4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xa8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xdc]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xf0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xf4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xf8]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call edi
lea edx, [esp + 0xbc]
push edx
call edi
lea eax, [esp + 0x8c]
push eax
call edi
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call edi
test esi, esi
jge 0x1008644a
push esi
push str.ITaskService::Connect_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x5c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x10089834
lea ecx, [esp + 0x38]
push ecx
mov edi, 0x1011da4c
mov dword [esp + 0x38], 0
call fcn.10081230
mov dword [esp + 0xc30], 4
mov eax, dword [eax]
test eax, eax
je 0x10086476
mov ecx, dword [eax]
jmp 0x10086478
xor ecx, ecx
mov eax, dword [esp + 0x54]
mov edx, dword [eax]
lea esi, [esp + 0x34]
push esi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.100812d0
test esi, esi
jge 0x100864cf
push esi
push str.Cannot_get_Root_folder_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x5c]
add esp, 8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x10089834
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
push 0
lea edx, [esp + 0x608]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], 0
mov ecx, dword [eax]
push 0
push eax
mov eax, dword [ecx + 0x24]
call eax
mov edi, eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor esi, esi
cmp edi, esi
jge 0x10086526
push edi
push str.Failed_to_CoCreate_an_instance_of_the_TaskService_class:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
jmp 0x100864b4
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x64]
mov dword [esp + 0x64], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
cmp eax, esi
jge 0x10086563
push eax
push str._nCannot_get_identification_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push str.Administrator
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x100865aa
push edi
push str._nCannot_put_identification_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x68]
mov dword [esp + 0x68], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
cmp eax, esi
jge 0x100865e7
push eax
push str._nCannot_get_principal_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 1
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x1008662b
push edi
push str._nCannot_put_principal_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, esi
jge 0x10086668
push eax
push str._nCannot_get_settings_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xb0]
push 0xffffffffffffffff
push eax
call edx
cmp eax, esi
jge 0x100866a1
push eax
push str._nCannot_put_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push esi
push eax
call edx
cmp eax, esi
jge 0x100866d6
push eax
push str._nCannot_put_DisallowStartIfOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
push esi
push eax
call edx
cmp eax, esi
jge 0x1008670b
push eax
push str._nCannot_put_StopIfGoingOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x58]
mov dword [esp + 0x58], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x9c]
call eax
cmp eax, esi
jge 0x1008674b
push eax
push str._nCannot_get_IdleSettings:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
push esi
push eax
call edx
cmp eax, esi
jge 0x10086798
push eax
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x58]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0xa0]
call eax
mov edi, eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x100867ee
push edi
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x48]
mov dword [esp + 0x48], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, esi
jge 0x1008682b
push eax
push str._nCannot_get_trigger_collection:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov ecx, ebx
mov dword [esp + 0x44], esi
call fcn.10003480
test eax, eax
je 0x100893f9
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 1
jne 0x100873f3
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 2
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008689a
push esi
push str._nCannot_create_ITrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], 0
mov ecx, dword [eax]
push 0x101198f0
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x100868ed
push esi
push str._nQueryInterface_call_failed_for_ITimeTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 5
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086949
mov eax, dword [eax]
jmp 0x1008694b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 6
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100869ca
mov eax, dword [eax]
jmp 0x100869cc
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100869d0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086a85
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 7
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086a5c
mov eax, dword [eax]
jmp 0x10086a5e
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10086ae7
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 8
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086ac0
mov eax, dword [eax]
jmp 0x10086ac2
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 9
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086b43
mov eax, dword [eax]
jmp 0x10086b45
xor eax, eax
lea edx, [eax + 2]
jmp 0x10086b50
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10086b50
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086c01
push 0x10123c1c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xa
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086bd8
mov eax, dword [eax]
jmp 0x10086bda
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x10086c63
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xb
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086c3c
mov eax, dword [eax]
jmp 0x10086c3e
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xc
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086cbf
mov eax, dword [eax]
jmp 0x10086cc1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10086cc4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086d79
push 0x10123c1c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xd
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086d50
mov eax, dword [eax]
jmp 0x10086d52
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x10086ddb
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xe
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086db4
mov eax, dword [eax]
jmp 0x10086db6
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0xf
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086e37
mov eax, dword [eax]
jmp 0x10086e39
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10086e40
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10086f08
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x10
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086ecc
mov eax, dword [eax]
jmp 0x10086ece
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10086f81
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x11
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10086f43
mov eax, dword [eax]
jmp 0x10086f45
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x38]
push eax
lea edi, [esp + 0x1f8]
call fcn.10081230
mov dword [esp + 0xc30], 0x12
mov eax, dword [eax]
test eax, eax
je 0x10086fd5
mov eax, dword [eax]
jmp 0x10086fd7
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.100812d0
test esi, esi
jge 0x10087022
push esi
push str._nCannot_put_Start_Boundary:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, 0x54
xor edi, edi
mov esi, ebx
mov dword [esp + 0x38], eax
call fcn.100034a0
movzx ecx, word [eax + 0x24]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [eax]
push edx
call ecx
test eax, eax
jge 0x10087072
push eax
push str._nCannot_put_Days_Interval:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x100870c9
push esi
push str._nCannot_get_Repetition:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x14], edi
je 0x1008728d
push 0x206
lea eax, [esp + 0x402]
push edi
push eax
mov word [esp + 0x408], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x101260dc
lea ecx, [esp + 0x400]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
call fcn.100034a0
mov edx, eax
mov eax, 0x88888889
mul dword [edx + 0x14]
shr edx, 5
mov dword [esp + 0x18], edx
mov word [esp + 0x1c], 0x16
mov dword [esp + 0x24], edx
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x13
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087157
mov eax, dword [eax]
jmp 0x10087159
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x400]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101260e4
lea edx, [esp + 0x400]
push 0x104
push edx
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
mov ecx, eax
mov eax, dword [esp + 0x18]
mov edx, eax
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0x14]
add edx, edx
add edx, edx
sub eax, edx
mov word [esp + 0x1c], 0x13
mov dword [esp + 0x24], eax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xc30], 0x14
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100871e9
mov eax, dword [eax]
jmp 0x100871eb
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x400]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101260e8
lea edx, [esp + 0x400]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x400]
call fcn.10081230
mov dword [esp + 0xc30], 0x15
mov eax, dword [eax]
test eax, eax
je 0x10087260
mov eax, dword [eax]
jmp 0x10087262
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.100812d0
test esi, esi
jl 0x100873c3
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x18], edi
je 0x100893f9
call fcn.100034a0
mov ecx, eax
mov eax, 0x88888889
mul dword [ecx + 0x18]
mov esi, edx
push 0x206
lea edx, [esp + 0x402]
push edi
push edx
shr esi, 5
mov word [esp + 0x408], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x101260dc
lea eax, [esp + 0x400]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
mov eax, 0x16
add esp, 0xc
mov word [esp + 0x1c], ax
mov dword [esp + 0x24], esi
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], eax
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087318
mov eax, dword [eax]
jmp 0x1008731a
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x400]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
or ebx, 0xffffffff
push edx
mov dword [esp + 0xc34], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101260e4
lea eax, [esp + 0x400]
push 0x104
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea edi, [esp + 0x400]
call fcn.10081230
mov dword [esp + 0xc30], 0x17
mov eax, dword [eax]
test eax, eax
je 0x1008738e
mov eax, dword [eax]
jmp 0x10087390
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xc30], ebx
call fcn.100812d0
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x100893f9
push esi
push str._nCannot_put_ExecutionTimeLimit:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], edi
jne 0x10087bc2
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10086876
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], edi
mov ecx, dword [eax]
push 0x101198e0
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008747d
push esi
push str._nQueryInterface_call_failed_for_IDailyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x18
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100874d9
mov eax, dword [eax]
jmp 0x100874db
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x19
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008755a
mov eax, dword [eax]
jmp 0x1008755c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087560
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087615
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100875ec
mov eax, dword [eax]
jmp 0x100875ee
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10087677
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087650
mov eax, dword [eax]
jmp 0x10087652
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100876d3
mov eax, dword [eax]
jmp 0x100876d5
xor eax, eax
lea edx, [eax + 2]
jmp 0x100876e0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100876e0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087791
push 0x10123c1c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087768
mov eax, dword [eax]
jmp 0x1008776a
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x100877f3
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100877cc
mov eax, dword [eax]
jmp 0x100877ce
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x1f
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008784f
mov eax, dword [eax]
jmp 0x10087851
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087854
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087909
push 0x10123c1c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x20
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100878e0
mov eax, dword [eax]
jmp 0x100878e2
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x1008796b
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x21
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087944
mov eax, dword [eax]
jmp 0x10087946
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x22
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100879c7
mov eax, dword [eax]
jmp 0x100879c9
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100879d0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087a98
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x23
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087a5c
mov eax, dword [eax]
jmp 0x10087a5e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10087b11
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x24
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087ad3
mov eax, dword [eax]
jmp 0x10087ad5
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.10081230
mov dword [esp + 0xc30], 0x25
mov eax, dword [eax]
test eax, eax
je 0x10087b65
mov eax, dword [eax]
jmp 0x10087b67
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.100812d0
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x100893f9
push esi
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 2
jne 0x100883e6
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 3
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10086876
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10119900
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10087c4d
push esi
push str._nQueryInterface_call_failed_for_IWeeklyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x26
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087ca9
mov eax, dword [eax]
jmp 0x10087cab
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x27
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087d2a
mov eax, dword [eax]
jmp 0x10087d2c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087d30
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087de5
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x28
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087dbc
mov eax, dword [eax]
jmp 0x10087dbe
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10087e47
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x29
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087e20
mov eax, dword [eax]
jmp 0x10087e22
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087ea3
mov eax, dword [eax]
jmp 0x10087ea5
xor eax, eax
lea edx, [eax + 2]
jmp 0x10087eb0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10087eb0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10087f61
push 0x10123c1c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087f38
mov eax, dword [eax]
jmp 0x10087f3a
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x10087fc3
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10087f9c
mov eax, dword [eax]
jmp 0x10087f9e
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008801f
mov eax, dword [eax]
jmp 0x10088021
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088024
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100880d9
push 0x10123c1c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100880b0
mov eax, dword [eax]
jmp 0x100880b2
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x1008813b
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x2f
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088114
mov eax, dword [eax]
jmp 0x10088116
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x30
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088197
mov eax, dword [eax]
jmp 0x10088199
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100881a0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088268
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x31
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008822c
mov eax, dword [eax]
jmp 0x1008822e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x100882e1
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x32
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100882a3
mov eax, dword [eax]
jmp 0x100882a5
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.10081230
mov dword [esp + 0xc30], 0x33
mov eax, dword [eax]
test eax, eax
je 0x10088335
mov ecx, dword [eax]
jmp 0x10088337
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.100812d0
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [esp + 0x40], edi
jge 0x100893f9
mov ecx, dword [esp + 0x40]
push ecx
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x100864b7
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 4
jne 0x10088c17
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 5
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10086876
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10119920
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10088471
push esi
push str._nQueryInterface_call_failed_for_pMonthlyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
push 0x206
lea eax, [esp + 0x1fa]
push 0
push eax
mov word [esp + 0x200], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x34
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100884cd
mov eax, dword [eax]
jmp 0x100884cf
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x35
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008854e
mov eax, dword [eax]
jmp 0x10088550
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088553
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088604
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x36
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100885db
mov eax, dword [eax]
jmp 0x100885dd
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10088666
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x37
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008863f
mov eax, dword [eax]
jmp 0x10088641
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x38
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100886c2
mov eax, dword [eax]
jmp 0x100886c4
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100886c7
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088778
push 0x10123c1c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x39
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008874f
mov eax, dword [eax]
jmp 0x10088751
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x100887da
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100887b3
mov eax, dword [eax]
jmp 0x100887b5
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088836
mov eax, dword [eax]
jmp 0x10088838
xor eax, eax
lea edx, [eax + 2]
jmp 0x10088840
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088840
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100888f5
push 0x10123c1c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100888cc
mov eax, dword [eax]
jmp 0x100888ce
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x10088957
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088930
mov eax, dword [eax]
jmp 0x10088932
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100889b3
mov eax, dword [eax]
jmp 0x100889b5
xor eax, eax
lea edx, [eax + 2]
jmp 0x100889c0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100889c0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088a88
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x3f
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088a4c
mov eax, dword [eax]
jmp 0x10088a4e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10088b01
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x40
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088ac3
mov eax, dword [eax]
jmp 0x10088ac5
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.10081230
mov dword [esp + 0xc30], 0x41
mov eax, dword [eax]
test eax, eax
je 0x10088b55
mov ecx, dword [eax]
jmp 0x10088b57
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.100812d0
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push 0xfff
push eax
mov eax, dword [edx + 0x64]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0x40], edi
jge 0x100893f9
mov eax, dword [esp + 0x40]
push eax
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 3
jne 0x100893f9
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 4
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10086876
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10119910
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x1008844d
push 0x206
lea eax, [esp + 0x1fa]
push edi
push eax
mov word [esp + 0x200], di
call sub.MSVCR80.dll_memset
add esp, 0xc
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x42
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088cd9
mov eax, dword [eax]
jmp 0x10088cdb
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x43
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088d5a
mov eax, dword [eax]
jmp 0x10088d5c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088d60
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088e11
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x44
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088de8
mov eax, dword [eax]
jmp 0x10088dea
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10088e73
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x45
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088e4c
mov eax, dword [eax]
jmp 0x10088e4e
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x46
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088ecf
mov eax, dword [eax]
jmp 0x10088ed1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10088ed4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10088f85
push 0x10123c1c
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x47
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088f5c
mov eax, dword [eax]
jmp 0x10088f5e
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x10088fe7
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x48
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10088fc0
mov eax, dword [eax]
jmp 0x10088fc2
xor eax, eax
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x49
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10089043
mov eax, dword [eax]
jmp 0x10089045
xor eax, eax
lea edx, [eax + 2]
jmp 0x10089050
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10089050
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10089101
push 0x10123c1c
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100890d8
mov eax, dword [eax]
jmp 0x100890da
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x10089163
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008913c
mov eax, dword [eax]
jmp 0x1008913e
xor eax, eax
push eax
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0x1f8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100891bf
mov eax, dword [eax]
jmp 0x100891c1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100891c4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008928c
push 0x10123c1c
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x10089250
mov eax, dword [eax]
jmp 0x10089252
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x1f8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10089305
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xc30], 0x4e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x100892c7
mov eax, dword [eax]
jmp 0x100892c9
xor eax, eax
push eax
lea edx, [esp + 0x1f8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xc34], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0x1f8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0x1f8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x1f8]
call fcn.10081230
mov dword [esp + 0xc30], 0x4f
mov eax, dword [eax]
test eax, eax
je 0x10089359
mov ecx, dword [eax]
jmp 0x1008935b
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xc30], 0xffffffff
call fcn.100812d0
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 0xfff
push eax
call edx
mov ecx, ebx
mov dword [esp + 0x38], 0
xor edi, edi
call fcn.10003480
test eax, eax
jbe 0x100893c2
mov esi, ebx
call fcn.100034a0
mov eax, dword [eax + 0x24]
or dword [esp + 0x38], eax
mov ecx, ebx
add edi, 1
call fcn.10003480
cmp edi, eax
jb 0x100893a6
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x54]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x64]
push 0
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x40]
test eax, eax
jl 0x10088bf3
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x60]
xor edi, edi
mov dword [esp + 0x60], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
cmp eax, edi
jge 0x10089438
push eax
push str._nCannot_get_Task_collection_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x60], edi
mov ecx, dword [eax]
push edi
push eax
mov eax, dword [ecx + 0x30]
call eax
mov esi, eax
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x10089484
push esi
push str._nCannot_create_the_action:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x50]
push edx
mov dword [esp + 0x54], edi
mov ecx, dword [eax]
push str.MbLk
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x100894d3
push esi
push str._nQueryInterface_call_failed_for_IExecAction:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
push 0x206
lea eax, [esp + 0x812]
push edi
push eax
mov word [esp + 0x818], di
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0x8c]
lea edx, [esp + 0x818]
add esp, 0xc
mov eax, esi
sub edx, esi
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x10089503
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x80c]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, edi
jge 0x1008955a
push eax
push str._nCannot_put_action_path:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov ebx, dword [esp + 0x84]
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x10089566
sub eax, edx
sar eax, 1
je 0x100895fb
push 0x206
lea eax, [esp + 0x402]
push edi
push eax
mov word [esp + 0x408], di
call sub.MSVCR80.dll_memset
lea edx, [esp + 0x408]
add esp, 0xc
mov eax, ebx
sub edx, ebx
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x100895a4
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x3fc]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
cmp eax, edi
jge 0x100895fb
push eax
push str._nCannot_put_Arguments:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
push 0x206
lea eax, [esp + 0xa1a]
push edi
push eax
mov word [esp + 0xa20], di
call sub.MSVCR80.dll_memset
add esp, 0xc
call fcn.100829e0
lea ecx, [eax + eax]
push ecx
lea edx, [esp + 0xa18]
push esi
push edx
call sub.MSVCR80.dll_memcpy
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [esp + 0xa14]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov esi, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x1008967d
push esi
push str._nCannot_put_WorkingDirectory:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x100864b7
mov edi, 0x1011daac
lea esi, [esp + 0xac]
mov dword [esp + 0x88], 0
call fcn.100813e0
mov dword [esp + 0xc30], 0x50
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x8c]
push ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0xc30], 0x51
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x98]
mov edi, 0x10125c74
lea esi, [esp + 0xbc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
call fcn.100813e0
mov byte [esp + 0xc30], 0x52
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x88]
push ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x38]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [ecx + 0xc], edi
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x48]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [esp + 0x98]
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x9c]
mov esi, dword [edx]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0xa0]
mov dword [ecx + 0xc], edi
mov edi, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [eax + 4]
mov dword [ecx + 4], edi
mov edi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x68]
push 6
push ecx
mov ecx, dword [esi + 0x44]
lea eax, [esp + 0x644]
push eax
push edx
call ecx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0xbc]
push edx
mov edi, eax
call esi
lea eax, [esp + 0x8c]
push eax
call esi
lea ecx, [esp + 0xac]
push ecx
mov dword [esp + 0xc34], 0xffffffff
call esi
test edi, edi
jge 0x100897f7
push edi
push str._nError_saving_the_Task_:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x100864b7
push str._n_Success__Task_successfully_registered.
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov ecx, dword [esp + 0xc28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc10]
xor ecx, esp
call fcn.1010dc50
mov esp, ebp
pop ebp
ret 0x14