Function at 0x100828e0
Capabilities:
Create thread
Encode data using base64
Enumerate pe sections
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1013e831
mov eax, dword fs:[0]
push eax
sub esp, 0xd10
mov eax, dword [0x10170024]
xor eax, esp
mov dword [esp + 0xd08], eax
push ebx
push esi
push edi
mov eax, dword [0x10170024]
xor eax, esp
push eax
lea eax, [esp + 0xd20]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0x98], ecx
mov ecx, esi
mov dword [esp + 0xd0], eax
call fcn.10082530
xor edi, edi
push 0x206
lea ecx, [esp + 0x4fa]
push edi
push ecx
mov word [esp + 0x500], di
call sub.MSVCR80.dll_memset
lea edx, [esp + 0x500]
add esp, 0xc
mov eax, esi
sub edx, esi
lea esp, [esp]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x10082970
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, edi
jge 0x100829a3
push eax
push str._nCoInitialize_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
mov eax, 1
jmp 0x10085f85
lea edx, [esp + 0x54]
push edx
push 0x10146980
push 1
push edi
push 0x10146b70
mov dword [esp + 0x68], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x10082b9a
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x1c]
push eax
call edi
mov dword [esp + 0xd28], 0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xd8], ecx
lea ecx, [esp + 0x84]
push ecx
mov dword [esp + 0xe0], edx
mov dword [esp + 0xe4], eax
call edi
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xbc], edx
mov edx, dword [esp + 0x90]
lea eax, [esp + 0x9c]
push eax
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], edx
call edi
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x70], edx
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0xa8]
lea edx, [esp + 0xac]
push edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
call edi
mov byte [esp + 0xd28], 3
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xec]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xf0]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xe4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xa0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xa4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xa8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xdc]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xf0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xf4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xf8]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call edi
lea edx, [esp + 0x9c]
push edx
call edi
lea eax, [esp + 0x84]
push eax
call edi
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call edi
test esi, esi
jge 0x10082baa
push esi
push str.ITaskService::Connect_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x5c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x10085f85
lea ecx, [esp + 0x38]
push ecx
mov edi, 0x1014bdb4
mov dword [esp + 0x38], 0
call fcn.100810b0
mov dword [esp + 0xd28], 4
mov eax, dword [eax]
test eax, eax
je 0x10082bd6
mov ecx, dword [eax]
jmp 0x10082bd8
xor ecx, ecx
mov eax, dword [esp + 0x54]
mov edx, dword [eax]
lea esi, [esp + 0x34]
push esi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0xd28], 0xffffffff
call fcn.10081150
test esi, esi
jge 0x10082c2f
push esi
push str.Cannot_get_Root_folder_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x5c]
add esp, 8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x10085f85
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
push 0
lea edx, [esp + 0x4f8]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], 0
mov ecx, dword [eax]
push 0
push eax
mov eax, dword [ecx + 0x24]
call eax
mov edi, eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor esi, esi
cmp edi, esi
jge 0x10082c86
push edi
push str.Failed_to_CoCreate_an_instance_of_the_TaskService_class:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
jmp 0x10082c14
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x64]
mov dword [esp + 0x64], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
cmp eax, esi
jge 0x10082cc3
push eax
push str._nCannot_get_identification_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push str.Administrator
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10082d0a
push edi
push str._nCannot_put_identification_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x68]
mov dword [esp + 0x68], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
cmp eax, esi
jge 0x10082d47
push eax
push str._nCannot_get_principal_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 1
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10082d8b
push edi
push str._nCannot_put_principal_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, esi
jge 0x10082dc8
push eax
push str._nCannot_get_settings_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xb0]
push 0xffffffffffffffff
push eax
call edx
cmp eax, esi
jge 0x10082e01
push eax
push str._nCannot_put_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push esi
push eax
call edx
cmp eax, esi
jge 0x10082e36
push eax
push str._nCannot_put_DisallowStartIfOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
push esi
push eax
call edx
cmp eax, esi
jge 0x10082e6b
push eax
push str._nCannot_put_StopIfGoingOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x58]
mov dword [esp + 0x58], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x9c]
call eax
cmp eax, esi
jge 0x10082eab
push eax
push str._nCannot_get_IdleSettings:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
push esi
push eax
call edx
cmp eax, esi
jge 0x10082ef8
push eax
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x58]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0xa0]
call eax
mov edi, eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10082f4e
push edi
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x48]
mov dword [esp + 0x48], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, esi
jge 0x10082f8b
push eax
push str._nCannot_get_trigger_collection:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov ecx, ebx
mov dword [esp + 0x44], esi
call fcn.10003590
test eax, eax
je 0x10085b49
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 1
jne 0x10083b47
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 2
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10082ffa
push esi
push str._nCannot_create_ITrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], 0
mov ecx, dword [eax]
push 0x10146a70
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008304d
push esi
push str._nQueryInterface_call_failed_for_ITimeTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push 0x206
lea eax, [esp + 0xea]
push 0
push eax
mov word [esp + 0xf0], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 5
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100830a9
mov eax, dword [eax]
jmp 0x100830ab
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 6
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008312a
mov eax, dword [eax]
jmp 0x1008312c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10083130
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100831e1
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 7
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100831b8
mov eax, dword [eax]
jmp 0x100831ba
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10083243
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 8
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008321c
mov eax, dword [eax]
jmp 0x1008321e
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 9
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008329f
mov eax, dword [eax]
jmp 0x100832a1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100832a4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10083355
push 0x10151f24
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0xa
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008332c
mov eax, dword [eax]
jmp 0x1008332e
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x100833b7
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0xb
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083390
mov eax, dword [eax]
jmp 0x10083392
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0xc
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083413
mov eax, dword [eax]
jmp 0x10083415
xor eax, eax
lea edx, [eax + 2]
jmp 0x10083420
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10083420
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100834d1
push 0x10151f24
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0xd
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100834a8
mov eax, dword [eax]
jmp 0x100834aa
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x10083533
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0xe
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008350c
mov eax, dword [eax]
jmp 0x1008350e
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0xf
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008358f
mov eax, dword [eax]
jmp 0x10083591
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10083594
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008365c
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0x10
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083620
mov eax, dword [eax]
jmp 0x10083622
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x100836d5
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0x11
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083697
mov eax, dword [eax]
jmp 0x10083699
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x38]
push eax
lea edi, [esp + 0xe8]
call fcn.100810b0
mov dword [esp + 0xd28], 0x12
mov eax, dword [eax]
test eax, eax
je 0x10083729
mov eax, dword [eax]
jmp 0x1008372b
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0xd28], 0xffffffff
call fcn.10081150
test esi, esi
jge 0x10083776
push esi
push str._nCannot_put_Start_Boundary:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, 0x54
xor edi, edi
mov esi, ebx
mov dword [esp + 0x38], eax
call fcn.100035b0
movzx ecx, word [eax + 0x24]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [eax]
push edx
call ecx
test eax, eax
jge 0x100837c6
push eax
push str._nCannot_put_Days_Interval:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008381d
push esi
push str._nCannot_get_Repetition:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x14], edi
je 0x100839e1
push 0x206
lea eax, [esp + 0x2f2]
push edi
push eax
mov word [esp + 0x2f8], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x10154414
lea ecx, [esp + 0x2f0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
call fcn.100035b0
mov edx, eax
mov eax, 0x88888889
mul dword [edx + 0x14]
shr edx, 5
mov dword [esp + 0x18], edx
mov word [esp + 0x1c], 0x16
mov dword [esp + 0x24], edx
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0x13
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100838ab
mov eax, dword [eax]
jmp 0x100838ad
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x2f0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1015441c
lea edx, [esp + 0x2f0]
push 0x104
push edx
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
mov ecx, eax
mov eax, dword [esp + 0x18]
mov edx, eax
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0x14]
add edx, edx
add edx, edx
sub eax, edx
mov word [esp + 0x1c], 0x13
mov dword [esp + 0x24], eax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0xd28], 0x14
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008393d
mov eax, dword [eax]
jmp 0x1008393f
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x2f0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10154420
lea edx, [esp + 0x2f0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x2f0]
call fcn.100810b0
mov dword [esp + 0xd28], 0x15
mov eax, dword [eax]
test eax, eax
je 0x100839b4
mov eax, dword [eax]
jmp 0x100839b6
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xd28], 0xffffffff
call fcn.10081150
test esi, esi
jl 0x10083b17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x18], edi
je 0x10085b49
call fcn.100035b0
mov ecx, eax
mov eax, 0x88888889
mul dword [ecx + 0x18]
mov esi, edx
push 0x206
lea edx, [esp + 0x2f2]
push edi
push edx
shr esi, 5
mov word [esp + 0x2f8], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x10154414
lea eax, [esp + 0x2f0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
mov eax, 0x16
add esp, 0xc
mov word [esp + 0x1c], ax
mov dword [esp + 0x24], esi
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], eax
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083a6c
mov eax, dword [eax]
jmp 0x10083a6e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0x2f0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
or ebx, 0xffffffff
push edx
mov dword [esp + 0xd2c], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1015441c
lea eax, [esp + 0x2f0]
push 0x104
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea edi, [esp + 0x2f0]
call fcn.100810b0
mov dword [esp + 0xd28], 0x17
mov eax, dword [eax]
test eax, eax
je 0x10083ae2
mov eax, dword [eax]
jmp 0x10083ae4
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xd28], ebx
call fcn.10081150
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10085b49
push esi
push str._nCannot_put_ExecutionTimeLimit:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], edi
jne 0x10084322
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10082fd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], edi
mov ecx, dword [eax]
push 0x10146a60
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10083bd1
push esi
push str._nQueryInterface_call_failed_for_IDailyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push 0x206
lea eax, [esp + 0xea]
push 0
push eax
mov word [esp + 0xf0], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x18
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083c2d
mov eax, dword [eax]
jmp 0x10083c2f
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x19
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083cae
mov eax, dword [eax]
jmp 0x10083cb0
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10083cb3
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10083d68
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x1a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083d3f
mov eax, dword [eax]
jmp 0x10083d41
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10083dca
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x1b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083da3
mov eax, dword [eax]
jmp 0x10083da5
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x1c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083e26
mov eax, dword [eax]
jmp 0x10083e28
xor eax, eax
lea edx, [eax + 2]
jmp 0x10083e30
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10083e30
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10083ee5
push 0x10151f24
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x1d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083ebc
mov eax, dword [eax]
jmp 0x10083ebe
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10083f47
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x1e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083f20
mov eax, dword [eax]
jmp 0x10083f22
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x1f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10083fa3
mov eax, dword [eax]
jmp 0x10083fa5
xor eax, eax
lea edx, [eax + 2]
jmp 0x10083fb0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10083fb0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10084065
push 0x10151f24
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x20
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008403c
mov eax, dword [eax]
jmp 0x1008403e
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x100840c7
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x21
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100840a0
mov eax, dword [eax]
jmp 0x100840a2
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x22
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084123
mov eax, dword [eax]
jmp 0x10084125
xor eax, eax
lea edx, [eax + 2]
jmp 0x10084130
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10084130
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100841f8
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x23
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100841bc
mov eax, dword [eax]
jmp 0x100841be
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10084271
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x24
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084233
mov eax, dword [eax]
jmp 0x10084235
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe8]
call fcn.100810b0
mov dword [esp + 0xd28], 0x25
mov eax, dword [eax]
test eax, eax
je 0x100842c5
mov eax, dword [eax]
jmp 0x100842c7
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0xd28], 0xffffffff
call fcn.10081150
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10085b49
push esi
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 2
jne 0x10084b3a
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 3
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10082fd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146a80
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x100843ad
push esi
push str._nQueryInterface_call_failed_for_IWeeklyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push 0x206
lea eax, [esp + 0xea]
push 0
push eax
mov word [esp + 0xf0], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x26
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084409
mov eax, dword [eax]
jmp 0x1008440b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x27
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008448a
mov eax, dword [eax]
jmp 0x1008448c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10084490
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10084541
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x28
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084518
mov eax, dword [eax]
jmp 0x1008451a
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x100845a3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x29
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008457c
mov eax, dword [eax]
jmp 0x1008457e
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x2a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100845ff
mov eax, dword [eax]
jmp 0x10084601
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10084604
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100846b5
push 0x10151f24
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x2b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008468c
mov eax, dword [eax]
jmp 0x1008468e
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10084717
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x2c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100846f0
mov eax, dword [eax]
jmp 0x100846f2
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x2d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084773
mov eax, dword [eax]
jmp 0x10084775
xor eax, eax
lea edx, [eax + 2]
jmp 0x10084780
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10084780
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10084831
push 0x10151f24
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x2e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084808
mov eax, dword [eax]
jmp 0x1008480a
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x10084893
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x2f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008486c
mov eax, dword [eax]
jmp 0x1008486e
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x30
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100848ef
mov eax, dword [eax]
jmp 0x100848f1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100848f4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100849bc
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x31
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084980
mov eax, dword [eax]
jmp 0x10084982
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10084a35
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x32
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100849f7
mov eax, dword [eax]
jmp 0x100849f9
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe8]
call fcn.100810b0
mov dword [esp + 0xd28], 0x33
mov eax, dword [eax]
test eax, eax
je 0x10084a89
mov ecx, dword [eax]
jmp 0x10084a8b
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xd28], 0xffffffff
call fcn.10081150
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [esp + 0x40], edi
jge 0x10085b49
mov ecx, dword [esp + 0x40]
push ecx
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10082c17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 4
jne 0x10085367
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 5
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10082fd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146aa0
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10084bc5
push esi
push str._nQueryInterface_call_failed_for_pMonthlyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push 0x206
lea eax, [esp + 0xea]
push 0
push eax
mov word [esp + 0xf0], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x34
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084c21
mov eax, dword [eax]
jmp 0x10084c23
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x35
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084ca2
mov eax, dword [eax]
jmp 0x10084ca4
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10084ca7
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10084d58
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x36
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084d2f
mov eax, dword [eax]
jmp 0x10084d31
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x10084dba
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x37
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084d93
mov eax, dword [eax]
jmp 0x10084d95
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x38
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084e16
mov eax, dword [eax]
jmp 0x10084e18
xor eax, eax
lea edx, [eax + 2]
jmp 0x10084e20
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10084e20
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10084ed1
push 0x10151f24
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x39
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084ea8
mov eax, dword [eax]
jmp 0x10084eaa
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10084f33
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x3a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084f0c
mov eax, dword [eax]
jmp 0x10084f0e
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x3b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10084f8f
mov eax, dword [eax]
jmp 0x10084f91
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10084f94
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10085045
push 0x10151f24
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x3c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008501c
mov eax, dword [eax]
jmp 0x1008501e
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x100850a7
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x3d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085080
mov eax, dword [eax]
jmp 0x10085082
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x3e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085103
mov eax, dword [eax]
jmp 0x10085105
xor eax, eax
lea edx, [eax + 2]
jmp 0x10085110
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10085110
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100851d8
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x3f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008519c
mov eax, dword [eax]
jmp 0x1008519e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10085251
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x40
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085213
mov eax, dword [eax]
jmp 0x10085215
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe8]
call fcn.100810b0
mov dword [esp + 0xd28], 0x41
mov eax, dword [eax]
test eax, eax
je 0x100852a5
mov ecx, dword [eax]
jmp 0x100852a7
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xd28], 0xffffffff
call fcn.10081150
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push 0xfff
push eax
mov eax, dword [edx + 0x64]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0x40], edi
jge 0x10085b49
mov eax, dword [esp + 0x40]
push eax
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 3
jne 0x10085b49
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 4
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10082fd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146a90
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10084ba1
push 0x206
lea eax, [esp + 0xea]
push edi
push eax
mov word [esp + 0xf0], di
call sub.MSVCR80.dll_memset
add esp, 0xc
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x42
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085429
mov eax, dword [eax]
jmp 0x1008542b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x43
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100854aa
mov eax, dword [eax]
jmp 0x100854ac
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100854b0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10085561
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x44
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085538
mov eax, dword [eax]
jmp 0x1008553a
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x100855c3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x45
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008559c
mov eax, dword [eax]
jmp 0x1008559e
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x46
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008561f
mov eax, dword [eax]
jmp 0x10085621
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10085624
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100856d5
push 0x10151f24
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x47
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100856ac
mov eax, dword [eax]
jmp 0x100856ae
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x10085737
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x48
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085710
mov eax, dword [eax]
jmp 0x10085712
xor eax, eax
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x49
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085793
mov eax, dword [eax]
jmp 0x10085795
xor eax, eax
lea edx, [eax + 2]
jmp 0x100857a0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100857a0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10085851
push 0x10151f24
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x4a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085828
mov eax, dword [eax]
jmp 0x1008582a
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x100858b3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x4b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008588c
mov eax, dword [eax]
jmp 0x1008588e
xor eax, eax
push eax
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe8]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x4c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008590f
mov eax, dword [eax]
jmp 0x10085911
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10085914
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x100859dc
push 0x10151f24
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x4d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x100859a0
mov eax, dword [eax]
jmp 0x100859a2
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10085a55
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0xd28], 0x4e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10085a17
mov eax, dword [eax]
jmp 0x10085a19
xor eax, eax
push eax
lea edx, [esp + 0xe8]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0xd2c], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe8]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe8]
call fcn.100810b0
mov dword [esp + 0xd28], 0x4f
mov eax, dword [eax]
test eax, eax
je 0x10085aa9
mov ecx, dword [eax]
jmp 0x10085aab
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0xd28], 0xffffffff
call fcn.10081150
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 0xfff
push eax
call edx
mov ecx, ebx
mov dword [esp + 0x38], 0
xor edi, edi
call fcn.10003590
test eax, eax
jbe 0x10085b12
mov esi, ebx
call fcn.100035b0
mov eax, dword [eax + 0x24]
or dword [esp + 0x38], eax
mov ecx, ebx
add edi, 1
call fcn.10003590
cmp edi, eax
jb 0x10085af6
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x54]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x64]
push 0
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x40]
test eax, eax
jl 0x10085343
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x60]
xor edi, edi
mov dword [esp + 0x60], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
cmp eax, edi
jge 0x10085b88
push eax
push str._nCannot_get_Task_collection_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x60], edi
mov ecx, dword [eax]
push edi
push eax
mov eax, dword [ecx + 0x30]
call eax
mov esi, eax
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x10085bd4
push esi
push str._nCannot_create_the_action:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x50]
push edx
mov dword [esp + 0x54], edi
mov ecx, dword [eax]
push str.MbLk
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x10085c23
push esi
push str._nQueryInterface_call_failed_for_IExecAction:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push 0x206
lea eax, [esp + 0x702]
push edi
push eax
mov word [esp + 0x708], di
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0xdc]
lea edx, [esp + 0x708]
add esp, 0xc
mov eax, esi
sub edx, esi
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x10085c53
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x6fc]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, edi
jge 0x10085caa
push eax
push str._nCannot_put_action_path:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push 0x206
lea eax, [esp + 0x90a]
push edi
push eax
mov word [esp + 0x910], di
call sub.MSVCR80.dll_memset
mov eax, dword [ebp + 0x18]
lea edx, [esp + 0x910]
add esp, 0xc
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x10085cd4
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x904]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
cmp eax, edi
jge 0x10085d2b
push eax
push str._nCannot_put_Arguments:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push 0x206
lea eax, [esp + 0xb12]
push edi
push eax
mov word [esp + 0xb18], di
call sub.MSVCR80.dll_memset
add esp, 0xc
call fcn.10082860
lea ecx, [eax + eax]
push ecx
lea edx, [esp + 0xb10]
push esi
push edx
call sub.MSVCR80.dll_memcpy
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [esp + 0xb0c]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov esi, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, edi
jge 0x10085dad
push esi
push str._nCannot_put_WorkingDirectory:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10082c17
mov edi, 0x1014be14
lea esi, [esp + 0xac]
mov dword [esp + 0x80], 0
call fcn.10081260
mov dword [esp + 0xd28], 0x50
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x84]
push ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0xd28], 0x51
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x90]
mov edi, 0x10153fac
lea esi, [esp + 0x9c]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
call fcn.10081260
mov byte [esp + 0xd28], 0x52
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x80]
push ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x38]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [ecx + 0xc], edi
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x48]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [esp + 0x98]
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x9c]
mov esi, dword [edx]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0xa0]
mov dword [ecx + 0xc], edi
mov edi, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [eax + 4]
mov dword [ecx + 4], edi
mov edi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x68]
push 6
push ecx
mov ecx, dword [esi + 0x44]
lea eax, [esp + 0x534]
push eax
push edx
call ecx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0x9c]
push edx
mov edi, eax
call esi
lea eax, [esp + 0x84]
push eax
call esi
lea ecx, [esp + 0xac]
push ecx
mov dword [esp + 0xd2c], 0xffffffff
call esi
test edi, edi
jge 0x10085f27
push edi
push str._nError_saving_the_Task_:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10082c17
push str._n_Success__Task_successfully_registered.
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x80]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [esp + 0x98]
push 0
push 0
push esi
push 0x10081360
push 0
push 0
call dword [sym.imp.MSVCR80.dll__beginthreadex]
add esp, 0x18
mov dword [esi + 4], eax
xor eax, eax
mov ecx, dword [esp + 0xd20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd08]
xor ecx, esp
call fcn.1012d370
mov esp, ebp
pop ebp
ret 0x14