Function at 0x4015d0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Delete file
Enumerate files on windows
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x409dac
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb54
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], ebx
call fcn.00405c10
lea esi, [ebx + 0x64]
mov ecx, ebx
push esi
call fcn.00405d50
mov eax, dword [ebx + 0x70]
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push str.C:HOSTMAC.ini
push eax
push str.HOSTNAME
push str.HOSTMACIP
call edi
mov esi, dword [esi]
push str.C:HOSTMAC.ini
push esi
push 0x40d358
push str.HOSTMACIP
call edi
mov eax, dword [ebx + 0x74]
push str.C:HOSTMAC.ini
push eax
push 0x40d354
push str.HOSTMACIP
call edi
push 0x3e9
mov ecx, ebx
call sub.MFC42.DLL_CWnd::GetDlgItem
mov esi, eax
push 0x40d340
mov ecx, esi
mov dword [ebp - 0x58], esi
call sub.MFC42.DLL_CWnd::SetWindowTextA
push 0x3e8
mov ecx, ebx
call sub.MFC42.DLL_CWnd::GetDlgItem
mov edi, eax
push 0
push 0xa
push 0x402
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x5c], edi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x40d330
mov ecx, esi
call sub.MFC42.DLL_CWnd::SetWindowTextA
mov ecx, dword [edi + 0x20]
push 0
push 0x1e
push 0x402
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4016c1
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
lea eax, [ebp - 0x18]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0xdc]
test eax, eax
jge 0x4016e4
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40171e
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4016ff
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x80]
test eax, eax
jge 0x40171e
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebx + 0x1084]
mov word [ebp - 0x54], 9
mov dword [ebp - 0x4c], eax
push eax
mov edx, dword [eax]
mov dword [ebp - 4], 0
call dword [edx + 4]
push str.Select__from_auto_config_where_itemIsUpdate
mov byte [ebp - 4], 1
mov word [ebp - 0x3c], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x401768
mov eax, str.Select__from_auto_config_where_itemIsUpdate
test eax, eax
je 0x401768
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 2
test eax, eax
jne 0x401780
push 0x80004003
call fcn.004096c7
mov eax, dword [ebp - 0x54]
push 1
push 3
push 3
sub esp, 0x10
mov esi, dword [ebx + 0x1088]
mov edx, esp
sub esp, 0x10
mov ecx, dword [esi]
mov dword [edx], eax
mov eax, dword [ebp - 0x50]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x4c]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x48]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x3c]
mov edx, esp
push esi
mov dword [edx], eax
mov eax, dword [ebp - 0x38]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x34]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x30]
mov dword [edx + 0xc], eax
call dword [ecx + 0xa0]
mov edi, eax
test edi, edi
jge 0x4017e1
push 0x40d320
push esi
push edi
call fcn.004096d5
test edi, edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x3c]
push ecx
mov byte [ebp - 4], 1
setl byte [ebp - 0x21]
call esi
test eax, eax
jge 0x4017ff
push eax
call fcn.004096c7
lea edx, [ebp - 0x54]
mov byte [ebp - 4], 0
push edx
call esi
test eax, eax
jge 0x401813
push eax
call fcn.004096c7
mov al, byte [ebp - 0x21]
test al, al
je 0x401857
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x40182e
push 0x80004003
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebx + 0x1088], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x1088]
mov dword [ebp - 4], 0xffffffff
test eax, eax
jne 0x401872
push 0x80004003
call fcn.004096c7
mov edi, dword [ebx + 0x1088]
lea eax, [ebp - 0x22]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0x50]
test eax, eax
jge 0x401892
push 0x40d320
push edi
push eax
call fcn.004096d5
cmp word [ebp - 0x22], 0
jne 0x401a34
push str.value
mov word [ebp - 0x54], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x4c], eax
jne 0x4018c7
mov ecx, str.value
test ecx, ecx
je 0x4018c7
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov dword [ebp - 4], 5
test eax, eax
jne 0x4018e2
push 0x80004003
call fcn.004096c7
mov ecx, dword [ebx + 0x1088]
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x3c]
push edx
push eax
call fcn.00409000
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 7
push ecx
call esi
test eax, eax
jge 0x401909
push eax
call fcn.004096c7
mov eax, dword [ebp - 0x3c]
cmp ax, 1
jne 0x401940
lea edx, [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
push edx
call esi
test eax, eax
jge 0x401844
push eax
call fcn.004096c7
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ax, 8
mov dword [ebp - 0x14], 0
jne 0x40195b
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
jmp 0x401997
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x70]
push edx
push 8
mov byte [ebp - 4], 8
call fcn.00408a80
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 7
push ecx
call esi
test eax, eax
jge 0x401997
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 9
test ecx, ecx
je 0x4019a9
call fcn.00408a50
jmp 0x4019ab
xor eax, eax
mov esi, 0x40d2e0
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4019d4
test cl, cl
je 0x4019d0
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4019d4
add eax, 2
add esi, 2
test cl, cl
jne 0x4019b0
xor eax, eax
jmp 0x4019d9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [ebp - 0x14]
sete byte [ebp - 0x21]
call fcn.00408970
mov al, byte [ebp - 0x21]
mov dword [ebp - 4], 0xffffffff
test al, al
je 0x401a20
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x401844
push eax
call fcn.004096c7
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x3c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x401a34
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x58]
push 0x40d2d0
call sub.MFC42.DLL_CWnd::SetWindowTextA
mov edx, dword [ebp - 0x5c]
push 0
push 0x32
push 0x402
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x401a6b
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
lea edx, [ebp - 0x18]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0xdc]
test eax, eax
jge 0x401a8e
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x401ac8
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x401aa9
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov eax, dword [esi]
call dword [eax + 0x80]
test eax, eax
jge 0x401ac8
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebx + 0x1084]
mov word [ebp - 0x54], 9
mov dword [ebp - 0x4c], eax
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
push str.Select__from_auto_config_where_itemUpdatePath
mov dword [ebp - 4], 0xa
mov word [ebp - 0x3c], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x401b0e
mov edx, str.Select__from_auto_config_where_itemUpdatePath
test edx, edx
je 0x401b0e
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0xb
test eax, eax
jne 0x401b26
push 0x80004003
call fcn.004096c7
mov edx, dword [ebp - 0x54]
push 1
push 3
push 3
sub esp, 0x10
mov esi, dword [ebx + 0x1088]
mov ecx, esp
sub esp, 0x10
mov eax, dword [esi]
mov dword [ecx], edx
mov edx, dword [ebp - 0x50]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x48]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x3c]
mov ecx, esp
push esi
mov dword [ecx], edx
mov edx, dword [ebp - 0x38]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x34]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x30]
mov dword [ecx + 0xc], edx
call dword [eax + 0xa0]
mov edi, eax
test edi, edi
jge 0x401b87
push 0x40d320
push esi
push edi
call fcn.004096d5
test edi, edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0xa
setl byte [ebp - 0x21]
call esi
test eax, eax
jge 0x401ba5
push eax
call fcn.004096c7
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xffffffff
push ecx
call esi
test eax, eax
jge 0x401bbc
push eax
call fcn.004096c7
mov al, byte [ebp - 0x21]
test al, al
mov eax, dword [ebx + 0x1088]
je 0x401be8
test eax, eax
jne 0x401bd7
push 0x80004003
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
push eax
mov edx, dword [eax]
call dword [edx + 8]
jmp 0x40183a
test eax, eax
jne 0x401bf6
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
lea ecx, [ebp - 0x22]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
test eax, eax
jge 0x401c16
push 0x40d320
push esi
push eax
call fcn.004096d5
cmp word [ebp - 0x22], 0
jne 0x401d7d
push str.value
mov word [ebp - 0x54], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x4c], eax
jne 0x401c4b
mov edx, str.value
test edx, edx
je 0x401c4b
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov dword [ebp - 4], 0xc
test eax, eax
jne 0x401c66
push 0x80004003
call fcn.004096c7
mov ecx, dword [ebx + 0x1088]
lea eax, [ebp - 0x54]
lea edx, [ebp - 0x3c]
push eax
push edx
call fcn.00409000
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0xe
call esi
test eax, eax
jge 0x401c93
push eax
call fcn.004096c7
mov eax, dword [ebp - 0x3c]
cmp ax, 1
je 0x401d20
cmp ax, 8
mov dword [ebp - 0x14], 0
jne 0x401cbb
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x14]
call fcn.00408890
jmp 0x401cf7
lea edx, [ebp - 0x70]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x70]
push eax
push 8
mov byte [ebp - 4], 0xf
call fcn.00408a80
mov ecx, dword [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x14]
call fcn.00408890
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0xe
push edx
call esi
test eax, eax
jge 0x401cf7
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x10
test ecx, ecx
je 0x401d09
call fcn.00408a50
jmp 0x401d0b
xor eax, eax
push eax
lea ecx, [ebx + 0x78]
call sub.MFC42.DLL_CString::operator_1
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
call fcn.00408970
lea esi, [ebx + 0x78]
lea eax, [ebp - 0x18]
push 1
push eax
mov ecx, esi
call sub.MFC42.DLL_CString::Right
mov eax, dword [eax]
push 0x40d298
push eax
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
lea ecx, [ebp - 0x18]
test eax, eax
setne byte [ebp - 0x21]
call fcn.0040916a
mov al, byte [ebp - 0x21]
test al, al
je 0x401d62
push 0x40d298
mov ecx, esi
call sub.MFC42.DLL_CString::operator
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x401d7d
push eax
call fcn.004096c7
push ecx
lea edx, [ebx + 0x78]
mov ecx, esp
mov dword [ebp - 0xd8], esp
push edx
call sub.MFC42.DLL_CString::CString_1
mov ecx, ebx
call fcn.00404740
mov eax, dword [ebp - 0x5c]
push 0
push 0x46
push 0x402
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 0x58]
push 0x40d284
call sub.MFC42.DLL_CWnd::SetWindowTextA
lea ecx, [ebp - 0x60]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0x11
call sub.MFC42.DLL_CString::CString
push str.Select__from_auto_config_where_itemINI
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::operator_1
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x401df5
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
lea eax, [ebp - 0x18]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0xdc]
test eax, eax
jge 0x401e18
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x401e52
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x401e33
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x80]
test eax, eax
jge 0x401e52
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebx + 0x1084]
mov word [ebp - 0x54], 9
mov dword [ebp - 0x4c], eax
push eax
mov edx, dword [eax]
call dword [edx + 4]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x13
push eax
mov esi, eax
mov word [ebp - 0x3c], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x401e91
test esi, esi
je 0x401e91
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0x14
test eax, eax
jne 0x401ea9
push 0x80004003
call fcn.004096c7
mov edx, dword [ebp - 0x54]
push 1
push 3
push 3
sub esp, 0x10
mov esi, dword [ebx + 0x1088]
mov ecx, esp
sub esp, 0x10
mov eax, dword [esi]
mov dword [ecx], edx
mov edx, dword [ebp - 0x50]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x48]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x3c]
mov ecx, esp
push esi
mov dword [ecx], edx
mov edx, dword [ebp - 0x38]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x34]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x30]
mov dword [ecx + 0xc], edx
call dword [eax + 0xa0]
mov edi, eax
test edi, edi
jge 0x401f0a
push 0x40d320
push esi
push edi
call fcn.004096d5
test edi, edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x13
setl byte [ebp - 0x21]
call esi
test eax, eax
jge 0x401f28
push eax
call fcn.004096c7
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x12
push ecx
call esi
test eax, eax
jge 0x401f3c
push eax
call fcn.004096c7
mov al, byte [ebp - 0x21]
test al, al
je 0x401f9b
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x401f57
push 0x80004003
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
push eax
mov edx, dword [eax]
call dword [edx + 8]
lea ecx, [ebp - 0x1c]
mov dword [ebx + 0x1088], 0
mov byte [ebp - 4], 0x11
call fcn.0040916a
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
call fcn.0040916a
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x118]
push eax
call esi
lea ecx, [ebp - 0x94]
push ecx
call esi
lea edx, [ebp - 0xa4]
push edx
call esi
lea eax, [ebp - 0xb4]
push eax
call esi
lea ecx, [ebp - 0x13c]
push ecx
call esi
mov byte [ebp - 4], 0x19
mov edi, dword [ebp - 0x20]
xor ebx, ebx
cmp dword [edi + 0x1088], ebx
jne 0x401fe9
push 0x80004003
call fcn.004096c7
mov esi, dword [edi + 0x1088]
lea eax, [ebp - 0x22]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0x50]
cmp eax, ebx
jge 0x402009
push 0x40d320
push esi
push eax
call fcn.004096d5
cmp word [ebp - 0x22], bx
jne 0x402b6c
push str.value
mov word [ebp - 0x3c], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x34], eax
jne 0x40203d
mov ecx, str.value
test ecx, ecx
je 0x40203d
push 0x8007000e
call fcn.004096c7
mov eax, dword [edi + 0x1088]
mov byte [ebp - 4], 0x1a
cmp eax, ebx
jne 0x402055
push 0x80004003
call fcn.004096c7
mov ecx, dword [edi + 0x1088]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x210]
push edx
push eax
call fcn.00409000
lea ecx, [ebp - 0x118]
push eax
push ecx
mov byte [ebp - 4], 0x1b
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x402087
push eax
call fcn.004096c7
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x210]
push edx
mov byte [ebp - 4], 0x1a
call esi
cmp eax, ebx
jge 0x4020a4
push eax
call fcn.004096c7
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x19
push eax
call esi
cmp eax, ebx
jge 0x4020b8
push eax
call fcn.004096c7
cmp word [ebp - 0x118], 1
jne 0x402105
lea ecx, [ebp - 0x118]
push ecx
call esi
cmp eax, ebx
jge 0x4020d5
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0x118], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x110], eax
jne 0x402105
mov edx, 0x40d7e4
test edx, edx
je 0x402105
push 0x8007000e
call fcn.004096c7
cmp word [ebp - 0x118], 8
mov dword [ebp - 0x14], ebx
jne 0x402123
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
jmp 0x402162
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [ebp - 0x118]
lea ecx, [ebp - 0x54]
push edx
push 8
mov byte [ebp - 4], 0x1c
call fcn.00408a80
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x19
push ecx
call esi
cmp eax, ebx
jge 0x402162
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x1d
cmp ecx, ebx
je 0x402174
call fcn.00408a50
jmp 0x402176
xor eax, eax
push eax
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::operator_1
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.00408970
lea edx, [ebp - 0x1c]
lea eax, [edi + 0x7c]
push edx
lea ecx, [ebp - 0x28]
push eax
push ecx
call sub.MFC42.DLL_operator_3
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1e
call fcn.00409296
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x19
call fcn.0040916a
push str.ApplicationName
mov word [ebp - 0x70], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x68], eax
jne 0x4021df
mov edx, str.ApplicationName
test edx, edx
je 0x4021df
push 0x8007000e
call fcn.004096c7
mov eax, dword [edi + 0x1088]
mov byte [ebp - 4], 0x1f
cmp eax, ebx
jne 0x4021f7
push 0x80004003
call fcn.004096c7
mov ecx, dword [edi + 0x1088]
lea eax, [ebp - 0x70]
lea edx, [ebp - 0x220]
push eax
push edx
call fcn.00409000
push eax
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x20
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x402229
push eax
call fcn.004096c7
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1f
push ecx
call esi
cmp eax, ebx
jge 0x402240
push eax
call fcn.004096c7
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x19
push edx
call esi
cmp eax, ebx
jge 0x402254
push eax
call fcn.004096c7
cmp word [ebp - 0x94], 1
jne 0x4022a1
lea eax, [ebp - 0x94]
push eax
call esi
cmp eax, ebx
jge 0x402271
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0x94], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x8c], eax
jne 0x4022a1
mov ecx, 0x40d7e4
test ecx, ecx
je 0x4022a1
push 0x8007000e
call fcn.004096c7
push str.KeyName
mov word [ebp - 0x80], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x78], eax
jne 0x4022cb
mov edx, str.KeyName
test edx, edx
je 0x4022cb
push 0x8007000e
call fcn.004096c7
mov eax, dword [edi + 0x1088]
mov byte [ebp - 4], 0x21
cmp eax, ebx
jne 0x4022e3
push 0x80004003
call fcn.004096c7
mov ecx, dword [edi + 0x1088]
lea eax, [ebp - 0x80]
lea edx, [ebp - 0x14c]
push eax
push edx
call fcn.00409000
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x22
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x402315
push eax
call fcn.004096c7
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x21
push ecx
call esi
cmp eax, ebx
jge 0x40232c
push eax
call fcn.004096c7
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0x19
push edx
call esi
cmp eax, ebx
jge 0x402340
push eax
call fcn.004096c7
cmp word [ebp - 0xa4], 1
jne 0x40238d
lea eax, [ebp - 0xa4]
push eax
call esi
cmp eax, ebx
jge 0x40235d
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0xa4], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x9c], eax
jne 0x40238d
mov ecx, 0x40d7e4
test ecx, ecx
je 0x40238d
push 0x8007000e
call fcn.004096c7
push str.ValueString
mov word [ebp - 0x19c], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x194], eax
jne 0x4023bd
mov edx, str.ValueString
test edx, edx
je 0x4023bd
push 0x8007000e
call fcn.004096c7
mov eax, dword [edi + 0x1088]
mov byte [ebp - 4], 0x23
cmp eax, ebx
jne 0x4023d5
push 0x80004003
call fcn.004096c7
mov ecx, dword [edi + 0x1088]
lea eax, [ebp - 0x19c]
lea edx, [ebp - 0x15c]
push eax
push edx
call fcn.00409000
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0x24
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40240a
push eax
call fcn.004096c7
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x23
push ecx
call esi
cmp eax, ebx
jge 0x402421
push eax
call fcn.004096c7
lea edx, [ebp - 0x19c]
mov byte [ebp - 4], 0x19
push edx
call esi
cmp eax, ebx
jge 0x402438
push eax
call fcn.004096c7
cmp word [ebp - 0xb4], 1
jne 0x402485
lea eax, [ebp - 0xb4]
push eax
call esi
cmp eax, ebx
jge 0x402455
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0xb4], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0xac], eax
jne 0x402485
mov ecx, 0x40d7e4
test ecx, ecx
je 0x402485
push 0x8007000e
call fcn.004096c7
push str.flag
mov word [ebp - 0x1ac], 8
call fcn.00409582
cmp eax, ebx
mov dword [ebp - 0x1a4], eax
jne 0x4024b5
mov edx, str.flag
test edx, edx
je 0x4024b5
push 0x8007000e
call fcn.004096c7
mov eax, dword [edi + 0x1088]
mov byte [ebp - 4], 0x25
cmp eax, ebx
jne 0x4024cd
push 0x80004003
call fcn.004096c7
mov ecx, dword [edi + 0x1088]
lea eax, [ebp - 0x1ac]
lea edx, [ebp - 0x128]
push eax
push edx
call fcn.00409000
push eax
lea eax, [ebp - 0x13c]
push eax
mov byte [ebp - 4], 0x26
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x402502
push eax
call fcn.004096c7
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x25
push ecx
call esi
cmp eax, ebx
jge 0x402519
push eax
call fcn.004096c7
lea edx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x19
push edx
call esi
cmp eax, ebx
jge 0x402530
push eax
call fcn.004096c7
cmp word [ebp - 0x13c], 1
jne 0x40254f
mov word [ebp - 0x13c], 2
mov word [ebp - 0x134], bx
jmp 0x402b2d
cmp word [ebp - 0x134], bx
je 0x402b2d
cmp word [ebp - 0xa4], 8
mov dword [ebp - 0x14], 0
jne 0x40258a
mov eax, dword [ebp - 0x9c]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
jmp 0x4025dd
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x17c]
push ecx
call esi
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x17c]
push edx
push 8
mov byte [ebp - 4], 0x27
call fcn.00408a80
mov eax, dword [ebp - 0x174]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x17c]
push ecx
mov byte [ebp - 4], 0x19
call ebx
test eax, eax
jge 0x4025dd
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x28
test ecx, ecx
je 0x4025f1
call fcn.00408a50
mov edi, eax
jmp 0x4025f3
xor edi, edi
cmp word [ebp - 0x94], 8
mov dword [ebp - 0x2c], 0
jne 0x402615
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0x2c]
push edx
call fcn.00408890
jmp 0x40265c
lea eax, [ebp - 0x16c]
push eax
call esi
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x29
push ecx
push 8
lea ecx, [ebp - 0x16c]
call fcn.00408a80
mov edx, dword [ebp - 0x164]
lea ecx, [ebp - 0x2c]
push edx
call fcn.00408890
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x28
push eax
call ebx
test eax, eax
jge 0x40265c
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x2a
test ecx, ecx
je 0x40266e
call fcn.00408a50
jmp 0x402670
xor eax, eax
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x760]
push ecx
push 0x400
push edx
push str.DefaultErr
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x2c]
call fcn.00408970
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.00408970
cmp word [ebp - 0xb4], 8
mov dword [ebp - 0x14], 0
jne 0x4026c3
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
jmp 0x40270a
lea ecx, [ebp - 0x18c]
push ecx
call esi
lea edx, [ebp - 0xb4]
lea ecx, [ebp - 0x18c]
push edx
push 8
mov byte [ebp - 4], 0x2b
call fcn.00408a80
mov eax, dword [ebp - 0x184]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x19
push ecx
call ebx
test eax, eax
jge 0x40270a
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x2c
test ecx, ecx
je 0x40271c
call fcn.00408a50
jmp 0x40271e
xor eax, eax
mov esi, eax
mov eax, str.NEEDDELETE
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x40274d
test cl, cl
je 0x402749
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x40274d
add eax, 2
add esi, 2
test cl, cl
jne 0x402725
xor eax, eax
jmp 0x402752
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
sete bl
call fcn.00408970
test bl, bl
je 0x4028a6
cmp word [ebp - 0xa4], 8
mov dword [ebp - 0x14], 0
jne 0x402793
mov eax, dword [ebp - 0x9c]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
jmp 0x4027e4
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x1bc]
push ecx
call edi
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x1bc]
push edx
push 8
mov byte [ebp - 4], 0x2d
call fcn.00408a80
mov eax, dword [ebp - 0x1b4]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x19
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x4027e4
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x2e
test ecx, ecx
je 0x4027f8
call fcn.00408a50
mov esi, eax
jmp 0x4027fa
xor esi, esi
cmp word [ebp - 0x94], 8
mov dword [ebp - 0x40], 0
jne 0x40281c
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0x40]
push edx
call fcn.00408890
jmp 0x402867
lea eax, [ebp - 0xd4]
push eax
call edi
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2f
push ecx
push 8
lea ecx, [ebp - 0xd4]
call fcn.00408a80
mov edx, dword [ebp - 0xcc]
lea ecx, [ebp - 0x40]
push edx
call fcn.00408890
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x2e
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x402867
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 0x30
test ecx, ecx
je 0x402879
call fcn.00408a50
jmp 0x40287b
xor eax, eax
mov ecx, dword [ebp - 0x1c]
push ecx
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x40]
call fcn.00408970
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.00408970
mov edx, dword [ebp - 0x20]
mov byte [edx + 0x68], 1
jmp 0x4028ac
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp word [ebp - 0xb4], 8
mov dword [ebp - 0x14], 0
jne 0x4028ce
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
jmp 0x402919
lea ecx, [ebp - 0xe8]
push ecx
call edi
lea edx, [ebp - 0xb4]
lea ecx, [ebp - 0xe8]
push edx
push 8
mov byte [ebp - 4], 0x31
call fcn.00408a80
mov eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x19
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x402919
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x32
test ecx, ecx
je 0x40292b
call fcn.00408a50
jmp 0x40292d
xor eax, eax
mov esi, eax
lea eax, [ebp - 0x760]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x40295d
test cl, cl
je 0x402959
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x40295d
add eax, 2
add esi, 2
test cl, cl
jne 0x402935
xor esi, esi
jmp 0x402962
sbb esi, esi
sbb esi, 0xffffffff
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.00408970
test esi, esi
je 0x402b2d
cmp word [ebp - 0xb4], 8
mov dword [ebp - 0x14], 0
jne 0x402998
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
jmp 0x4029e3
lea ecx, [ebp - 0x108]
push ecx
call edi
lea edx, [ebp - 0xb4]
lea ecx, [ebp - 0x108]
push edx
push 8
mov byte [ebp - 4], 0x33
call fcn.00408a80
mov eax, dword [ebp - 0x100]
lea ecx, [ebp - 0x14]
push eax
call fcn.00408890
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x19
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x4029e3
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x34
test ecx, ecx
je 0x4029f7
call fcn.00408a50
mov ebx, eax
jmp 0x4029f9
xor ebx, ebx
cmp word [ebp - 0xa4], 8
mov dword [ebp - 0x18], 0
jne 0x402a1b
mov edx, dword [ebp - 0x9c]
lea ecx, [ebp - 0x18]
push edx
call fcn.00408890
jmp 0x402a66
lea eax, [ebp - 0xf8]
push eax
call edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x35
push ecx
push 8
lea ecx, [ebp - 0xf8]
call fcn.00408a80
mov edx, dword [ebp - 0xf0]
lea ecx, [ebp - 0x18]
push edx
call fcn.00408890
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 0x34
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x402a66
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x36
test ecx, ecx
je 0x402a7a
call fcn.00408a50
mov esi, eax
jmp 0x402a7c
xor esi, esi
cmp word [ebp - 0x94], 8
mov dword [ebp - 0x44], 0
jne 0x402a9e
mov ecx, dword [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00408890
jmp 0x402ae9
lea edx, [ebp - 0xc4]
push edx
call edi
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0xc4]
push eax
push 8
mov byte [ebp - 4], 0x37
call fcn.00408a80
mov ecx, dword [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00408890
lea edx, [ebp - 0xc4]
mov byte [ebp - 4], 0x36
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x402ae9
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x44]
mov byte [ebp - 4], 0x38
test ecx, ecx
je 0x402afb
call fcn.00408a50
jmp 0x402afd
xor eax, eax
mov ecx, dword [ebp - 0x1c]
push ecx
push ebx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x44]
call fcn.00408970
lea ecx, [ebp - 0x18]
call fcn.00408970
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.00408970
mov edx, dword [ebp - 0x20]
mov byte [edx + 0x68], 1
mov esi, dword [ebp - 0x20]
mov eax, dword [esi + 0x1088]
test eax, eax
jne 0x402b44
push 0x80004003
call fcn.004096c7
mov esi, dword [esi + 0x1088]
push esi
mov eax, dword [esi]
call dword [eax + 0x90]
test eax, eax
jge 0x401fd2
push 0x40d320
push esi
push eax
call fcn.004096d5
jmp 0x401fd2
mov ecx, dword [ebp - 0x58]
push 0x40d1fc
call sub.MFC42.DLL_CWnd::SetWindowTextA
mov ecx, dword [ebp - 0x5c]
push 0
push 0x50
push 0x402
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov esi, dword [ebp - 0x20]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x3a
lea edi, [esi + 0x64]
push edi
push str.Select__from_auto_clients_where_Mark
push ecx
call sub.MFC42.DLL_operator_2
push 0x40d1d0
lea edx, [ebp - 0x28]
mov bl, 0x3b
push eax
push edx
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3c
call fcn.00409296
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.0040916a
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x3a
call fcn.0040916a
mov eax, dword [esi + 0x1088]
test eax, eax
jne 0x402c09
push 0x80004003
call fcn.004096c7
mov ebx, dword [ebp - 0x20]
lea ecx, [ebp - 0x28]
push ecx
mov esi, dword [ebx + 0x1088]
push esi
mov eax, dword [esi]
call dword [eax + 0xdc]
test eax, eax
jge 0x402c2f
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x402c69
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x402c4a
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov edx, dword [esi]
call dword [edx + 0x80]
test eax, eax
jge 0x402c69
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebx + 0x1084]
lea esi, [ebx + 0x1084]
mov word [ebp - 0x54], 9
mov dword [ebp - 0x4c], eax
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x3d
push eax
mov dword [ebp - 0x28], eax
mov word [ebp - 0x3c], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x402cb2
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x402cb2
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0x3e
test eax, eax
jne 0x402cca
push 0x80004003
call fcn.004096c7
mov edx, dword [ebp - 0x20]
push 1
push 3
push 3
mov ebx, dword [edx + 0x1088]
mov edx, dword [ebp - 0x54]
sub esp, 0x10
mov ecx, esp
sub esp, 0x10
mov eax, dword [ebx]
mov dword [ecx], edx
mov edx, dword [ebp - 0x50]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x48]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x3c]
mov ecx, esp
push ebx
mov dword [ecx], edx
mov edx, dword [ebp - 0x38]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x34]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x30]
mov dword [ecx + 0xc], edx
call dword [eax + 0xa0]
test eax, eax
mov dword [ebp - 0x18], eax
jge 0x402d2d
push 0x40d320
push ebx
push eax
call fcn.004096d5
mov ebx, dword [ebp - 0x18]
lea ecx, [ebp - 0x3c]
test ebx, ebx
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push ecx
setl byte [ebp - 0x21]
mov byte [ebp - 4], 0x3d
call ebx
test eax, eax
jge 0x402d50
push eax
call fcn.004096c7
lea edx, [ebp - 0x54]
mov byte [ebp - 4], 0x3a
push edx
call ebx
test eax, eax
jge 0x402d64
push eax
call fcn.004096c7
mov al, byte [ebp - 0x21]
mov ebx, dword [ebp - 0x20]
test al, al
je 0x402d98
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x402d82
push 0x80004003
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov dword [ebx + 0x1088], 0
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x402dac
push 0x80004003
call fcn.004096c7
mov ebx, dword [ebx + 0x1088]
lea eax, [ebp - 0x22]
push eax
push ebx
mov edx, dword [ebx]
call dword [edx + 0x50]
test eax, eax
jge 0x402dcc
push 0x40d320
push ebx
push eax
call fcn.004096d5
cmp word [ebp - 0x22], 0
mov ebx, dword [ebp - 0x20]
jne 0x402ed4
lea ecx, [ebx + 0x70]
lea edx, [ebp - 0x24]
push ecx
push str.Update_auto_clients_set_hostname
push edx
call sub.MFC42.DLL_operator_2
push str._IP
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
push eax
call sub.MFC42.DLL_operator
add ebx, 0x74
lea ecx, [ebp - 0x40]
push ebx
push eax
push ecx
mov byte [ebp - 4], 0x40
call sub.MFC42.DLL_operator_3
push str._uptimegetdate___where_Mark
lea edx, [ebp - 0x44]
push eax
push edx
mov byte [ebp - 4], 0x41
call sub.MFC42.DLL_operator
push edi
push eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x42
push eax
call sub.MFC42.DLL_operator_3
push 0x40d1d0
lea ecx, [ebp - 0x28]
mov bl, 0x43
push eax
push ecx
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.00409296
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.0040916a
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x42
call fcn.0040916a
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x41
call fcn.0040916a
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x40
call fcn.0040916a
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call fcn.0040916a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3a
call fcn.0040916a
push 1
push 0
lea ecx, [ebp - 0x2c]
call fcn.00408500
push ecx
mov ecx, esp
mov dword [ebp - 0x84], esp
push eax
call fcn.004087f0
lea edx, [ebp - 0x28]
mov ecx, esi
push edx
mov byte [ebp - 4], 0x3a
call fcn.004086a0
mov ecx, eax
call fcn.00408dc0
lea ecx, [ebp - 0x28]
jmp 0x402fc9
lea eax, [ebx + 0x74]
lea ecx, [ebp - 0x24]
push eax
push str.Insert_into_auto_clients__ip_hostname_Mark_uptime__values__
push ecx
call sub.MFC42.DLL_operator_2
push 0x40d140
lea edx, [ebp - 0x14]
push eax
push edx
mov byte [ebp - 4], 0x46
call sub.MFC42.DLL_operator
add ebx, 0x70
mov byte [ebp - 4], 0x47
push ebx
push eax
lea eax, [ebp - 0x40]
push eax
call sub.MFC42.DLL_operator_3
push 0x40d140
lea ecx, [ebp - 0x44]
push eax
push ecx
mov byte [ebp - 4], 0x48
call sub.MFC42.DLL_operator
push edi
lea edx, [ebp - 0x18]
push eax
push edx
mov byte [ebp - 4], 0x49
call sub.MFC42.DLL_operator_3
push str._getdate____
push eax
lea eax, [ebp - 0x28]
mov bl, 0x4a
push eax
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.00409296
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.0040916a
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x49
call fcn.0040916a
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x48
call fcn.0040916a
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x47
call fcn.0040916a
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x46
call fcn.0040916a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3a
call fcn.0040916a
push 1
push 0
lea ecx, [ebp - 0x2c]
call fcn.00408500
push ecx
mov ecx, esp
mov dword [ebp - 0x84], esp
push eax
call fcn.004087f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3a
push ecx
mov ecx, esi
call fcn.004086a0
mov ecx, eax
call fcn.00408dc0
lea ecx, [ebp - 0x28]
call fcn.004012c0
lea edx, [ebp - 0x128]
mov byte [ebp - 4], 0x39
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x402fe9
push eax
call fcn.004096c7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.0040916a
mov eax, dword [ebp - 0x5c]
push 0
push 0x5a
push 0x402
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 0x58]
push 0x40d118
call sub.MFC42.DLL_CWnd::SetWindowTextA
push str.Select__from_auto_config_where_itemEXE_order_by_id
lea ecx, [ebp - 0x60]
call sub.MFC42.DLL_CString::operator_1
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x40303c
push 0x80004003
call fcn.004096c7
mov edi, dword [ebx + 0x1088]
lea eax, [ebp - 0x28]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0xdc]
test eax, eax
jge 0x40305f
push 0x40d320
push edi
push eax
call fcn.004096d5
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x403099
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x40307a
push 0x80004003
call fcn.004096c7
mov edi, dword [ebx + 0x1088]
push edi
mov ecx, dword [edi]
call dword [ecx + 0x80]
test eax, eax
jge 0x403099
push 0x40d320
push edi
push eax
call fcn.004096d5
mov eax, dword [esi]
mov word [ebp - 0x54], 9
mov dword [ebp - 0x4c], eax
push eax
mov edx, dword [eax]
call dword [edx + 4]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x4d
push eax
mov esi, eax
mov word [ebp - 0x3c], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x4030d4
test esi, esi
je 0x4030d4
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0x4e
test eax, eax
jne 0x4030ec
push 0x80004003
call fcn.004096c7
mov edx, dword [ebp - 0x54]
push 1
push 3
push 3
sub esp, 0x10
mov esi, dword [ebx + 0x1088]
mov ecx, esp
sub esp, 0x10
mov eax, dword [esi]
mov dword [ecx], edx
mov edx, dword [ebp - 0x50]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x48]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x3c]
mov ecx, esp
push esi
mov dword [ecx], edx
mov edx, dword [ebp - 0x38]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x34]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x30]
mov dword [ecx + 0xc], edx
call dword [eax + 0xa0]
mov edi, eax
test edi, edi
jge 0x40314b
push 0x40d320
push esi
push edi
call fcn.004096d5
xor esi, esi
lea eax, [ebp - 0x3c]
cmp edi, esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
mov byte [ebp - 4], 0x4d
setl bl
call edi
cmp eax, esi
jge 0x40316c
push eax
call fcn.004096c7
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x19
push ecx
call edi
cmp eax, esi
jge 0x403180
push eax
call fcn.004096c7
test bl, bl
je 0x4031b3
mov edi, dword [ebp - 0x20]
cmp dword [edi + 0x1088], esi
jne 0x403199
push 0x80004003
call fcn.004096c7
mov eax, dword [edi + 0x1088]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov ebx, dword [ebp - 0x20]
mov dword [edi + 0x1088], esi
jmp 0x403877
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x70]
push eax
call edi
lea ecx, [ebp - 0x3c]
push ecx
call edi
lea edx, [ebp - 0x54]
push edx
call edi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x51
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0x53
mov dword [ebp - 0x200], 0x44
mov dword [ebp - 0x1fc], esi
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x1f4], esi
mov dword [ebp - 0x1d4], 1
mov word [ebp - 0x1d0], 5
mov word [ebp - 0x1ce], si
mov dword [ebp - 0x1cc], esi
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x1088]
test ecx, ecx
jne 0x40323a
push 0x80004003
call fcn.004096c7
mov ebx, dword [ebp - 0x20]
lea edx, [ebp - 0x22]
push edx
mov esi, dword [ebx + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x50]
test eax, eax
jge 0x40325d
push 0x40d320
push esi
push eax
call fcn.004096d5
cmp word [ebp - 0x22], 0
jne 0x4037ea
push str.Value
mov word [ebp - 0xc4], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0xbc], eax
jne 0x403298
mov eax, str.Value
test eax, eax
je 0x403298
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0x54
test eax, eax
jne 0x4032b0
push 0x80004003
call fcn.004096c7
mov ecx, dword [ebx + 0x1088]
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0x128]
push edx
push eax
call fcn.00409000
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
lea ecx, [ebp - 0x70]
push eax
push ecx
mov byte [ebp - 4], 0x55
call edi
test eax, eax
jge 0x4032e4
push eax
call fcn.004096c7
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x128]
push edx
mov byte [ebp - 4], 0x54
call esi
test eax, eax
jge 0x403301
push eax
call fcn.004096c7
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x53
push eax
call esi
test eax, eax
jge 0x403318
push eax
call fcn.004096c7
cmp word [ebp - 0x70], 1
jne 0x403359
lea ecx, [ebp - 0x70]
push ecx
call esi
test eax, eax
jge 0x40332f
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0x70], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x68], eax
jne 0x403359
mov edx, 0x40d7e4
test edx, edx
je 0x403359
push 0x8007000e
call fcn.004096c7
push str.flag
mov word [ebp - 0xf8], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0xf0], eax
jne 0x403389
mov eax, str.flag
test eax, eax
je 0x403389
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0x56
test eax, eax
jne 0x4033a1
push 0x80004003
call fcn.004096c7
mov ecx, dword [ebx + 0x1088]
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0x15c]
push edx
push eax
call fcn.00409000
lea ecx, [ebp - 0x3c]
push eax
push ecx
mov byte [ebp - 4], 0x57
call edi
test eax, eax
jge 0x4033cf
push eax
call fcn.004096c7
lea edx, [ebp - 0x15c]
mov byte [ebp - 4], 0x56
push edx
call esi
test eax, eax
jge 0x4033e6
push eax
call fcn.004096c7
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 0x53
push eax
call esi
test eax, eax
jge 0x4033fd
push eax
call fcn.004096c7
cmp word [ebp - 0x3c], 1
jne 0x40343e
lea ecx, [ebp - 0x3c]
push ecx
call esi
test eax, eax
jge 0x403414
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0x3c], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x40343e
mov edx, 0x40d7e4
test edx, edx
je 0x40343e
push 0x8007000e
call fcn.004096c7
push 0x40d0d4
mov word [ebp - 0x108], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x100], eax
jne 0x40346e
mov eax, 0x40d0d4
test eax, eax
je 0x40346e
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0x58
test eax, eax
jne 0x403486
push 0x80004003
call fcn.004096c7
mov ecx, dword [ebx + 0x1088]
lea edx, [ebp - 0x108]
lea eax, [ebp - 0x14c]
push edx
push eax
call fcn.00409000
lea ecx, [ebp - 0x54]
push eax
push ecx
mov byte [ebp - 4], 0x59
call edi
test eax, eax
jge 0x4034b4
push eax
call fcn.004096c7
lea edx, [ebp - 0x14c]
mov byte [ebp - 4], 0x58
push edx
call esi
test eax, eax
jge 0x4034cb
push eax
call fcn.004096c7
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x53
push eax
call esi
test eax, eax
jge 0x4034e2
push eax
call fcn.004096c7
mov ax, word [ebp - 0x54]
cmp ax, 1
jne 0x40350b
lea ecx, [ebp - 0x54]
push ecx
call esi
test eax, eax
jge 0x4034fc
push eax
call fcn.004096c7
mov ax, 3
mov dword [ebp - 0x4c], 0
mov word [ebp - 0x54], ax
mov edi, dword [ebp - 0x34]
cmp ax, 8
mov dword [ebp - 0x18], 0
jne 0x403529
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x18]
push edx
call fcn.00408890
jmp 0x403571
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x5a
push ecx
push 8
lea ecx, [ebp - 0xe8]
call fcn.00408a80
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0x18]
push edx
call fcn.00408890
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x53
push eax
call esi
test eax, eax
jge 0x403571
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x5b
test ecx, ecx
je 0x403583
call fcn.00408a50
jmp 0x403585
xor eax, eax
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::operator_1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x53
call fcn.00408970
cmp word [ebp - 0x70], 8
mov dword [ebp - 0x18], 0
jne 0x4035b6
mov ecx, dword [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00408890
jmp 0x4035fe
lea edx, [ebp - 0xd4]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0xd4]
push eax
push 8
mov byte [ebp - 4], 0x5c
call fcn.00408a80
mov ecx, dword [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00408890
lea edx, [ebp - 0xd4]
mov byte [ebp - 4], 0x53
push edx
call esi
test eax, eax
jge 0x4035fe
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x5d
test ecx, ecx
je 0x403610
call fcn.00408a50
jmp 0x403612
xor eax, eax
push eax
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::operator_1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x53
call fcn.00408970
lea eax, [ebp - 0x1c]
lea esi, [ebx + 0x7c]
push eax
lea ecx, [ebp - 0x28]
push esi
push ecx
call sub.MFC42.DLL_operator_3
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5e
call fcn.00409296
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x53
call fcn.0040916a
push str.runexdel.log
lea edx, [ebp - 0x44]
push esi
push edx
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x5f
call fcn.00409296
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x53
call fcn.0040916a
cmp edi, 2
jne 0x4036e2
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x200]
mov edx, dword [ebp - 0x1c]
push eax
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push edx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x4036d1
mov eax, dword [ebp - 0x7c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [ebp - 0x80]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x80]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ecx, dword [ebp - 0x80]
push ecx
call esi
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
push edx
push eax
push ecx
jmp 0x4037a3
cmp edi, 1
jne 0x4037ae
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0xb60]
push 0x400
push eax
push str.DefaultErr
push ecx
push str.RUNEXE
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov edi, dword [ebp - 0x1c]
lea eax, [ebp - 0xb60]
mov esi, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40373e
test cl, cl
je 0x40373a
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40373e
add eax, 2
add esi, 2
test cl, cl
jne 0x40371a
xor eax, eax
jmp 0x403743
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4037ae
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x200]
push eax
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x403797
mov edx, dword [ebp - 0x7c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
call esi
mov eax, dword [ebp - 0x80]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x80]
lea ecx, [ebp - 0x40]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov eax, dword [ebp - 0x80]
push eax
call esi
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
push ecx
push edx
push eax
push str.RUNEXE
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4037c2
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x90]
test eax, eax
jge 0x403223
push 0x40d320
push esi
push eax
call fcn.004096d5
jmp 0x403223
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4037fe
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov edx, dword [esi]
call dword [edx + 0x80]
test eax, eax
jge 0x40381d
push 0x40d320
push esi
push eax
call fcn.004096d5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
call fcn.0040916a
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x51
call fcn.0040916a
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x50
call esi
test eax, eax
jge 0x40384f
push eax
call fcn.004096c7
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x4f
push ecx
call esi
test eax, eax
jge 0x403863
push eax
call fcn.004096c7
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x19
push edx
call esi
test eax, eax
jge 0x403877
push eax
call fcn.004096c7
mov eax, dword [ebp - 0x5c]
push 0
push 0x64
push 0x402
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 0x58]
push 0x40d0a8
call sub.MFC42.DLL_CWnd::SetWindowTextA
push str.Select__from_auto_config_where_itemDEL
lea ecx, [ebp - 0x60]
call sub.MFC42.DLL_CString::operator_1
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4038bb
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
lea eax, [ebp - 0x28]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0xdc]
test eax, eax
jge 0x4038de
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x403918
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4038f9
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x80]
test eax, eax
jge 0x403918
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebx + 0x1084]
mov word [ebp - 0x54], 9
mov dword [ebp - 0x4c], eax
push eax
mov edx, dword [eax]
call dword [edx + 4]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x60
push eax
mov esi, eax
mov word [ebp - 0x3c], 8
call fcn.00409582
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x403957
test esi, esi
je 0x403957
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebx + 0x1088]
mov byte [ebp - 4], 0x61
test eax, eax
jne 0x40396f
push 0x80004003
call fcn.004096c7
mov edx, dword [ebp - 0x54]
push 1
push 3
push 3
sub esp, 0x10
mov esi, dword [ebx + 0x1088]
mov ecx, esp
sub esp, 0x10
mov eax, dword [esi]
mov dword [ecx], edx
mov edx, dword [ebp - 0x50]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x48]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x3c]
mov ecx, esp
push esi
mov dword [ecx], edx
mov edx, dword [ebp - 0x38]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x34]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x30]
mov dword [ecx + 0xc], edx
call dword [eax + 0xa0]
mov edi, eax
test edi, edi
jge 0x4039d0
push 0x40d320
push esi
push edi
call fcn.004096d5
test edi, edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x60
setl bl
call esi
test eax, eax
jge 0x4039ed
push eax
call fcn.004096c7
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x19
push ecx
call esi
test eax, eax
jge 0x403a01
push eax
call fcn.004096c7
test bl, bl
je 0x403a3d
mov esi, dword [ebp - 0x20]
mov eax, dword [esi + 0x1088]
test eax, eax
jne 0x403a1c
push 0x80004003
call fcn.004096c7
mov eax, dword [esi + 0x1088]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [esi + 0x1088], 0
jmp 0x40414a
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x80]
push eax
call esi
lea ecx, [ebp - 0x70]
push ecx
call esi
lea edx, [ebp - 0x3c]
push edx
call esi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x64
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x65
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x66
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x1088]
test ecx, ecx
jne 0x403a94
push 0x80004003
call fcn.004096c7
mov edi, dword [ebp - 0x20]
lea edx, [ebp - 0x22]
push edx
mov esi, dword [edi + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x50]
test eax, eax
jge 0x403ab7
push 0x40d320
push esi
push eax
call fcn.004096d5
cmp word [ebp - 0x22], 0
jne 0x4040e4
mov ebx, 8
push str.value
mov word [ebp - 0xc4], bx
call fcn.00409582
test eax, eax
mov dword [ebp - 0xbc], eax
jne 0x403af5
mov eax, str.value
test eax, eax
je 0x403af5
push 0x8007000e
call fcn.004096c7
mov eax, dword [edi + 0x1088]
mov byte [ebp - 4], 0x68
test eax, eax
jne 0x403b0d
push 0x80004003
call fcn.004096c7
mov ecx, dword [ebp - 0x20]
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0x128]
push edx
mov ecx, dword [ecx + 0x1088]
push eax
call fcn.00409000
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
lea ecx, [ebp - 0x80]
push eax
push ecx
mov byte [ebp - 4], 0x69
call edi
test eax, eax
jge 0x403b44
push eax
call fcn.004096c7
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x128]
push edx
mov byte [ebp - 4], 0x68
call esi
test eax, eax
jge 0x403b61
push eax
call fcn.004096c7
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x67
push eax
call esi
test eax, eax
jge 0x403b78
push eax
call fcn.004096c7
cmp word [ebp - 0x80], 1
jne 0x403bb7
lea ecx, [ebp - 0x80]
push ecx
call esi
test eax, eax
jge 0x403b8f
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0x80], bx
call fcn.00409582
test eax, eax
mov dword [ebp - 0x78], eax
jne 0x403bb7
mov edx, 0x40d7e4
test edx, edx
je 0x403bb7
push 0x8007000e
call fcn.004096c7
push 0x40d0d4
mov word [ebp - 0xf8], bx
call fcn.00409582
test eax, eax
mov dword [ebp - 0xf0], eax
jne 0x403be5
mov eax, 0x40d0d4
test eax, eax
je 0x403be5
push 0x8007000e
call fcn.004096c7
mov ecx, dword [ebp - 0x20]
mov byte [ebp - 4], 0x6a
mov eax, dword [ecx + 0x1088]
test eax, eax
jne 0x403c00
push 0x80004003
call fcn.004096c7
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0xf8]
push eax
mov ecx, dword [edx + 0x1088]
lea edx, [ebp - 0x15c]
push edx
call fcn.00409000
push eax
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x6b
call edi
test eax, eax
jge 0x403c31
push eax
call fcn.004096c7
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x6a
push ecx
call esi
test eax, eax
jge 0x403c48
push eax
call fcn.004096c7
lea edx, [ebp - 0xf8]
mov byte [ebp - 4], 0x67
push edx
call esi
test eax, eax
jge 0x403c5f
push eax
call fcn.004096c7
cmp word [ebp - 0x70], 1
jne 0x403c9e
lea eax, [ebp - 0x70]
push eax
call esi
test eax, eax
jge 0x403c76
push eax
call fcn.004096c7
push 0x40d7e4
mov word [ebp - 0x70], bx
call fcn.00409582
test eax, eax
mov dword [ebp - 0x68], eax
jne 0x403c9e
mov ecx, 0x40d7e4
test ecx, ecx
je 0x403c9e
push 0x8007000e
call fcn.004096c7
push str.flag
mov word [ebp - 0x108], bx
call fcn.00409582
test eax, eax
mov dword [ebp - 0x100], eax
jne 0x403ccc
mov edx, str.flag
test edx, edx
je 0x403ccc
push 0x8007000e
call fcn.004096c7
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x6c
mov ecx, dword [eax + 0x1088]
test ecx, ecx
jne 0x403ce7
push 0x80004003
call fcn.004096c7
mov ecx, dword [ebp - 0x20]
lea edx, [ebp - 0x108]
lea eax, [ebp - 0x14c]
push edx
mov ecx, dword [ecx + 0x1088]
push eax
call fcn.00409000
lea ecx, [ebp - 0x3c]
push eax
push ecx
mov byte [ebp - 4], 0x6d
call edi
test eax, eax
jge 0x403d18
push eax
call fcn.004096c7
lea edx, [ebp - 0x14c]
mov byte [ebp - 4], 0x6c
push edx
call esi
test eax, eax
jge 0x403d2f
push eax
call fcn.004096c7
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x67
push eax
call esi
test eax, eax
jge 0x403d46
push eax
call fcn.004096c7
cmp word [ebp - 0x3c], 1
jne 0x403d6a
lea ecx, [ebp - 0x3c]
push ecx
call esi
test eax, eax
jge 0x403d5d
push eax
call fcn.004096c7
mov word [ebp - 0x3c], 3
mov dword [ebp - 0x34], 0
cmp word [ebp - 0x70], bx
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x18], 0
jne 0x403d88
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push edx
call fcn.00408890
jmp 0x403dcf
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x6e
push ecx
push ebx
lea ecx, [ebp - 0xe8]
call fcn.00408a80
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0x18]
push edx
call fcn.00408890
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x67
push eax
call esi
test eax, eax
jge 0x403dcf
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x6f
test ecx, ecx
je 0x403de1
call fcn.00408a50
jmp 0x403de3
xor eax, eax
push eax
lea ecx, [ebp - 0x40]
call sub.MFC42.DLL_CString::operator_1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x67
call fcn.00408970
cmp word [ebp - 0x80], bx
mov dword [ebp - 0x18], 0
jne 0x403e13
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00408890
jmp 0x403e5a
lea edx, [ebp - 0xd4]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0xd4]
push eax
push ebx
mov byte [ebp - 4], 0x70
call fcn.00408a80
mov ecx, dword [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00408890
lea edx, [ebp - 0xd4]
mov byte [ebp - 4], 0x67
push edx
call esi
test eax, eax
jge 0x403e5a
push eax
call fcn.004096c7
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x71
test ecx, ecx
je 0x403e6c
call fcn.00408a50
jmp 0x403e6e
xor eax, eax
push eax
lea ecx, [ebp - 0x58]
call sub.MFC42.DLL_CString::operator_1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x67
call fcn.00408970
mov ebx, dword [ebp - 0x20]
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x28]
lea esi, [ebx + 0x7c]
push esi
push ecx
call sub.MFC42.DLL_operator_3
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x72
call fcn.00409296
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x67
call fcn.0040916a
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x58]
push edx
call fcn.00409296
push str.runexdel.log
lea eax, [ebp - 0x14]
push esi
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x73
call fcn.00409296
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x67
call fcn.0040916a
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x40]
push ecx
lea edx, [ebp - 0x760]
push 0x400
push edx
push str.DefaultErr
push eax
push str.RUNDEL
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp edi, 2
je 0x403f50
cmp edi, 1
jne 0x4040a8
mov esi, dword [ebp - 0x1c]
lea eax, [ebp - 0x760]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x403f43
test cl, cl
je 0x403f3f
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x403f43
add eax, 2
add esi, 2
test cl, cl
jne 0x403f1f
xor eax, eax
jmp 0x403f48
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4040a8
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x360]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x404091
lea ecx, [ebp - 0x44]
call sub.MFC42.DLL_CString::CString
push 0x5c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x74
call sub.MFC42.DLL_CString::ReverseFind
lea edx, [ebp - 0x12c]
push eax
push edx
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::Left
push 0x5c
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x75
push eax
call sub.MFC42.DLL_operator_1
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x76
call fcn.00409296
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x75
call fcn.0040916a
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x74
call fcn.0040916a
lea ecx, [ebp - 0x334]
lea edx, [ebp - 0x44]
push ecx
lea eax, [ebp - 0xd8]
push edx
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x77
call fcn.00409296
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x74
call fcn.0040916a
mov ecx, dword [ebp - 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x80
push ecx
call edi
mov edx, dword [ebp - 0x1c]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push edx
call ebx
lea eax, [ebp - 0x360]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x404082
lea ecx, [ebp - 0x334]
lea edx, [ebp - 0x44]
push ecx
lea eax, [ebp - 0x84]
push edx
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x78
call fcn.00409296
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x74
call fcn.0040916a
mov ecx, dword [ebp - 0x1c]
push 0x80
push ecx
call edi
mov edx, dword [ebp - 0x1c]
push edx
call ebx
lea eax, [ebp - 0x360]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40402c
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x67
call fcn.0040916a
mov ebx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
push ecx
push edx
push eax
push str.RUNDEL
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4040bc
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x90]
test eax, eax
jge 0x403a7d
push 0x40d320
push esi
push eax
call fcn.004096d5
jmp 0x403a7d
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x66
call fcn.0040916a
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x65
call fcn.0040916a
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x64
call fcn.0040916a
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x3c]
push edx
mov byte [ebp - 4], 0x63
call edi
test eax, eax
jge 0x404122
push eax
call fcn.004096c7
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x62
push eax
call edi
test eax, eax
jge 0x404136
push eax
call fcn.004096c7
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x19
push ecx
call edi
test eax, eax
jge 0x40414a
push eax
call fcn.004096c7
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x404161
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
lea eax, [ebp - 0x84]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0xdc]
test eax, eax
jge 0x404187
push 0x40d320
push esi
push eax
call fcn.004096d5
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x4041c4
mov eax, dword [ebx + 0x1088]
test eax, eax
jne 0x4041a5
push 0x80004003
call fcn.004096c7
mov esi, dword [ebx + 0x1088]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x80]
test eax, eax
jge 0x4041c4
push 0x40d320
push esi
push eax
call fcn.004096d5
lea edx, [ebp - 0x13c]
mov byte [ebp - 4], 0x18
push edx
call edi
test eax, eax
jge 0x4041db
push eax
call fcn.004096c7
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x17
push eax
call edi
test eax, eax
jge 0x4041f2
push eax
call fcn.004096c7
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x16
push ecx
call edi
test eax, eax
jge 0x404209
push eax
call fcn.004096c7
lea edx, [ebp - 0x94]
mov byte [ebp - 4], 0x15
push edx
call edi
test eax, eax
jge 0x404220
push eax
call fcn.004096c7
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x12
push eax
call edi
test eax, eax
jge 0x404237
push eax
call fcn.004096c7
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x11
call fcn.0040916a
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
call fcn.0040916a
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret