Function at 0x40317b
Capabilities:
Schedule task via itaskservice

Disassembly:
push 0x2e0
mov eax, 0x425695
call fcn.0040d6aa
mov eax, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x234], eax
mov eax, dword [ebp + 0x10]
push esi
mov dword [ebp - 0x258], eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x4031bb
xor eax, eax
inc eax
jmp 0x403c2b
push esi
push esi
push esi
push 3
pop ebx
push ebx
push 6
push esi
push esi
push 0xffffffffffffffff
push esi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x4031e2
cmp eax, 0x80010119
je 0x4031e2
push 2
pop eax
jmp 0x403c2b
lea eax, [ebp - 0x224]
mov dword [ebp - 0x224], esi
push eax
push 0x42886c
push 1
push esi
push 0x42887c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x403bf9
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 4], esi
lea edi, [ebp - 0x28c]
lea esi, [ebp - 0x27c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x26c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x26c]
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x2cc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x2cc]
lea edi, [ebp - 0x2ac]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x2bc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 0x10
mov eax, dword [ebp - 0x224]
mov edi, esp
mov byte [ebp - 4], bl
lea esi, [ebp - 0x28c]
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x29c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2ac]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2bc]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x2bc]
push eax
call ebx
lea eax, [ebp - 0x2cc]
push eax
call ebx
lea eax, [ebp - 0x26c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x27c]
push eax
call ebx
test esi, esi
jns 0x403303
mov eax, dword [ebp - 0x224]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 4
jmp 0x403bf8
and dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x220]
push 0x426738
call fcn.004014e8
mov eax, dword [eax]
mov dword [ebp - 4], 4
test eax, eax
je 0x40332b
mov edx, dword [eax]
jmp 0x40332d
xor edx, edx
mov eax, dword [ebp - 0x224]
lea esi, [ebp - 0x21c]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x403356
call fcn.00403154
test esi, esi
jns 0x40336d
mov eax, dword [ebp - 0x224]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 5
jmp 0x403bf8
push dword [ebp - 0x254]
lea ecx, [ebp - 0x220]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 5
test edx, edx
je 0x40338f
mov edx, dword [edx]
jmp 0x403391
xor edx, edx
mov eax, dword [ebp - 0x21c]
push 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x4033b3
call fcn.00403154
mov edi, dword [ebp - 0x234]
test edi, edi
je 0x403c0b
cmp byte [edi], 0
je 0x403c0b
mov eax, dword [ebp - 0x224]
lea edx, [ebp - 0x218]
and dword [ebp - 0x218], 0
push edx
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x224]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x40340b
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 6
jmp 0x403bf8
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x238]
and dword [ebp - 0x238], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x403448
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 7
jmp 0x403bf8
mov eax, dword [ebp - 0x238]
push 0x42673c
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x238]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x40348a
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 8
jmp 0x403bf8
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x228]
and dword [ebp - 0x228], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
jns 0x4034c7
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 9
jmp 0x403bf8
mov eax, dword [ebp - 0x228]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov esi, eax
test esi, esi
js 0x403560
mov eax, dword [ebp - 0x228]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov esi, eax
test esi, esi
js 0x403560
mov eax, dword [ebp - 0x228]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov esi, eax
test esi, esi
js 0x403560
push str.PT0S
lea ecx, [ebp - 0x220]
call fcn.004014e8
mov edx, dword [eax]
mov dword [ebp - 4], 6
test edx, edx
je 0x403528
mov edx, dword [edx]
jmp 0x40352a
xor edx, edx
mov eax, dword [ebp - 0x228]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x70]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x40354c
call fcn.00403154
test esi, esi
js 0x403560
mov eax, dword [ebp - 0x228]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov esi, eax
mov eax, dword [ebp - 0x228]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x40358f
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xa
jmp 0x403bf8
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x23c]
and dword [ebp - 0x23c], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jns 0x4035cc
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xb
jmp 0x403bf8
mov eax, dword [ebp - 0x23c]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov ecx, dword [ebp - 0x23c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x40360b
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xc
jmp 0x403bf8
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x240]
and dword [ebp - 0x240], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x403648
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xd
jmp 0x403bf8
mov eax, dword [ebp - 0x240]
lea edx, [ebp - 0x244]
and dword [ebp - 0x244], 0
push edx
push 9
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov ecx, dword [ebp - 0x240]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x403695
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xe
jmp 0x403bf8
mov eax, dword [ebp - 0x244]
lea edx, [ebp - 0x25c]
and dword [ebp - 0x25c], 0
push edx
push 0x42888c
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x244]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x4036e4
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xf
jmp 0x403bf8
push str.Trigger1
lea ecx, [ebp - 0x220]
call fcn.004014e8
mov edx, dword [eax]
mov dword [ebp - 4], 7
test edx, edx
je 0x403705
mov edx, dword [edx]
jmp 0x403707
xor edx, edx
mov eax, dword [ebp - 0x25c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x403727
call fcn.00403154
mov eax, dword [ebp - 0x218]
lea edx, [ebp - 0x248]
and dword [ebp - 0x248], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x403764
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x10
jmp 0x403bf8
mov eax, dword [ebp - 0x248]
lea edx, [ebp - 0x24c]
and dword [ebp - 0x24c], 0
push edx
push 0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov ecx, dword [ebp - 0x248]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x4037b1
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x11
jmp 0x403bf8
mov eax, dword [ebp - 0x24c]
lea edx, [ebp - 0x22c]
and dword [ebp - 0x22c], 0
push edx
push str.MbLk
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ecx, dword [ebp - 0x24c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
jns 0x403800
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x12
jmp 0x403bf8
push edi
lea ecx, [ebp - 0x220]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 8
test edx, edx
je 0x40381d
mov edx, dword [edx]
jmp 0x40381f
xor edx, edx
mov eax, dword [ebp - 0x22c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x403841
call fcn.00403154
test esi, esi
js 0x4038d4
push edi
lea ecx, [ebp - 0x220]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 9
test edx, edx
je 0x403866
mov edx, dword [edx]
jmp 0x403868
xor edx, edx
mov eax, dword [ebp - 0x22c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x40388a
call fcn.00403154
test esi, esi
js 0x4038d4
push dword [ebp - 0x258]
lea ecx, [ebp - 0x258]
call fcn.0040149d
mov edx, dword [eax]
mov dword [ebp - 4], 0xa
test edx, edx
je 0x4038b0
mov edx, dword [edx]
jmp 0x4038b2
xor edx, edx
mov eax, dword [ebp - 0x22c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x258]
test ecx, ecx
je 0x4038d4
call fcn.00403154
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x403903
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x13
jmp 0x403bf8
lea eax, [ebp - 0x250]
mov dword [ebp - 0x250], 0x101
push eax
lea eax, [ebp - 0x214]
push eax
push 0x220
push 0
call fcn.0040308e
add esp, 0x10
test eax, eax
jne 0x40394d
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x14
jmp 0x403bf8
and dword [ebp - 0x230], 0
lea ecx, [ebp - 0x2bc]
push 0x426770
call fcn.00401533
mov esi, eax
mov dword [ebp - 4], 0xb
lea edi, [ebp - 0x2ac]
lea eax, [ebp - 0x27c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x27c]
mov byte [ebp - 4], 0xc
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x2cc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00401533
push dword [ebp - 0x254]
mov esi, eax
mov byte [ebp - 4], 0xd
lea edi, [ebp - 0x28c]
lea ecx, [ebp - 0x220]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040149d
mov edx, dword [eax]
mov byte [ebp - 4], 0xe
test edx, edx
je 0x4039d9
mov edx, dword [edx]
jmp 0x4039db
xor edx, edx
lea esi, [ebp - 0x230]
mov eax, dword [ebp - 0x21c]
push esi
sub esp, 0x10
lea esi, [ebp - 0x2ac]
mov edi, esp
mov ecx, dword [eax]
push 4
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x29c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x28c]
push 6
push dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
push edx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov ecx, dword [ebp - 0x220]
mov esi, eax
test ecx, ecx
je 0x403a3e
call fcn.00403154
and dword [ebp - 0x220], 0
lea eax, [ebp - 0x2cc]
push eax
call ebx
lea eax, [ebp - 0x27c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2bc]
push eax
call ebx
test esi, esi
jns 0x403a80
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x15
jmp 0x403bf8
lea eax, [ebp - 0x250]
mov dword [ebp - 0x250], 0x101
push eax
lea eax, [ebp - 0x214]
push eax
push 0x221
push 0
call fcn.0040308e
add esp, 0x10
test eax, eax
jne 0x403aca
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x16
jmp 0x403bf8
and dword [ebp - 0x230], 0
lea ecx, [ebp - 0x2ec]
push 0x426770
call fcn.00401533
mov esi, eax
mov dword [ebp - 4], 0xf
lea edi, [ebp - 0x2ac]
lea eax, [ebp - 0x26c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x26c]
mov byte [ebp - 4], 0x10
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x2dc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00401533
push dword [ebp - 0x254]
mov esi, eax
mov byte [ebp - 4], 0x11
lea edi, [ebp - 0x28c]
lea ecx, [ebp - 0x234]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040149d
mov edx, dword [eax]
mov byte [ebp - 4], 0x12
test edx, edx
je 0x403b56
mov edx, dword [edx]
jmp 0x403b58
xor edx, edx
lea esi, [ebp - 0x230]
mov eax, dword [ebp - 0x21c]
push esi
sub esp, 0x10
lea esi, [ebp - 0x2ac]
mov edi, esp
mov ecx, dword [eax]
push 4
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x29c]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x28c]
push 6
push dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
push edx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x44]
mov ecx, dword [ebp - 0x234]
mov esi, eax
test ecx, ecx
je 0x403bbb
call fcn.00403154
and dword [ebp - 0x234], 0
lea eax, [ebp - 0x2dc]
push eax
call ebx
lea eax, [ebp - 0x26c]
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2ec]
push eax
call ebx
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test esi, esi
jns 0x403c03
push 0x17
pop ebx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, ebx
jmp 0x403c2b
mov eax, dword [ebp - 0x230]
jmp 0x403c1d
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
call fcn.0040d668
ret