Function at 0x44c2b0
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x577f7d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xd0
push esi
push edi
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x3c], edx
push eax
push 0x5816e0
push 1
push 0
push 0x5816f0
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x2c], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x44cd62
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x44cd62
mov eax, dword [eax]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0xa0]
push eax
call edi
mov dword [ebp - 4], 0
lea eax, [ebp - 0x90]
movups xmm0, xmmword [ebp - 0xa0]
push eax
movups xmmword [ebp - 0xb0], xmm0
call edi
movups xmm0, xmmword [ebp - 0x90]
lea eax, [ebp - 0xe0]
push eax
movups xmmword [ebp - 0xc0], xmm0
call edi
movups xmm0, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x80]
push eax
movups xmmword [ebp - 0xd0], xmm0
call edi
mov byte [ebp - 4], 3
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb0]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc0]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xd0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x80]
push dword [ebp - 0x2c]
movups xmmword [eax], xmm0
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x80]
push eax
call edi
lea eax, [ebp - 0xe0]
push eax
call edi
lea eax, [ebp - 0x90]
push eax
call edi
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
push eax
call edi
mov eax, dword [ebp - 0x2c]
test esi, esi
js 0x44cd5c
mov dword [ebp - 0x14], 0
mov eax, dword [eax]
push 0xc
mov edi, dword [eax + 0x1c]
call fcn.00547e47
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x44c441
push 0x58e880
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x44cd77
jmp 0x44c443
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44cd77
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 5
push eax
push dword [esi]
push dword [ebp - 0x2c]
call edi
or edi, 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44c4b6
mov ecx, dword [esi]
test ecx, ecx
je 0x44c491
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44c4a8
push eax
call fcn.00547f8c
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00547d61
mov eax, dword [ebp - 0x1c]
add esp, 8
test eax, eax
js 0x44cd59
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x44cd59
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
call fcn.00547e47
mov esi, eax
add esp, 4
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 6
test esi, esi
je 0x44c51b
push dword [ebp - 0x30]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44c51d
cmp dword [ebp - 0x30], eax
jne 0x44cd81
jmp 0x44c51d
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], esi
test esi, esi
je 0x44cd77
push 0
mov dword [ebp - 4], 7
push dword [esi]
push dword [ebp - 0x14]
call dword [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44c586
mov eax, dword [esi]
test eax, eax
je 0x44c564
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44c57b
push eax
call fcn.00547f8c
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00547d61
add esp, 8
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], 0
push 0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44cd54
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x44cd54
mov dword [ebp - 0x6c], 0
lea edx, [ebp - 0x6c]
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0x1c]
test eax, eax
js 0x44cd46
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x44cd46
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
js 0x44cd46
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x44cd46
lea edx, [ebp - 0x54]
mov dword [ebp - 0x54], 0
mov eax, dword [ecx]
push edx
push 2
push ecx
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x50]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44cd46
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x44cd46
lea edx, [ebp - 0x28]
mov dword [ebp - 0x28], 0
mov eax, dword [ecx]
push edx
push 0x5816d0
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x54]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44cd46
cmp dword [ebp - 0x28], 0
je 0x44cd46
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x44cd8b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x58], eax
push str.UGtWZVxQKKPzspzSwIl3OQwxCMiI
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 8
call fcn.0042ce30
test al, al
jne 0x44c6b1
push 0x1d
push str.UGtWZVxQKKPzspzSwIl3OQwxCMiI
lea ecx, [ebp - 0x58]
call fcn.0042d150
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x28]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x38], esi
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x38], ecx
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x68]
mov dword [esi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x30], eax
call fcn.00547e47
mov esi, eax
add esp, 4
mov dword [ebp - 0x40], esi
mov byte [ebp - 4], 0xb
test esi, esi
je 0x44c72f
push dword [ebp - 0x30]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44c731
cmp dword [ebp - 0x30], eax
jne 0x44cd95
jmp 0x44c731
xor esi, esi
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x40], esi
test esi, esi
je 0x44cd9f
mov byte [ebp - 4], 0xc
push dword [esi]
push dword [ebp - 0x28]
call dword [ebp - 0x1c]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44c78b
mov eax, dword [esi]
test eax, eax
je 0x44c769
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44c780
push eax
call fcn.00547f8c
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00547d61
add esp, 8
mov byte [ebp - 4], 9
mov eax, edi
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44c7a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x44cda9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
push str.OWhxHSghR2RnoUZWEBn2CVklLeglSKQXoDLWEE
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xd
call fcn.0042ce30
test al, al
jne 0x44c7e9
push 0x27
push str.OWhxHSghR2RnoUZWEBn2CVklLeglSKQXoDLWEE
lea ecx, [ebp - 0x30]
call fcn.0042d150
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x28]
push ecx
mov esi, esp
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x40], eax
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x34]
mov dword [esi], eax
call fcn.00443520
add esp, 4
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
push 0xc
mov dword [ebp - 0x1c], eax
call fcn.00547e47
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x10
test esi, esi
je 0x44c866
push dword [ebp - 0x1c]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44c868
cmp dword [ebp - 0x1c], eax
jne 0x44cdb3
jmp 0x44c868
xor esi, esi
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44cdbd
mov byte [ebp - 4], 0x11
push dword [esi]
push dword [ebp - 0x28]
call dword [ebp - 0x68]
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x44c8c2
mov eax, dword [esi]
test eax, eax
je 0x44c8a0
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44c8b7
push eax
call fcn.00547f8c
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00547d61
add esp, 8
mov byte [ebp - 4], 0xe
mov eax, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44c8e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x28]
push 1
push ecx
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
jns 0x44c900
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
jmp 0x44ccf1
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x48], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, dword [ebp - 0x28]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44ccee
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x44ccee
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [ebx + 8]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
call fcn.00547e47
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x12
test esi, esi
je 0x44c981
push dword [ebp - 0x1c]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44c983
cmp dword [ebp - 0x1c], eax
jne 0x44cdc7
jmp 0x44c983
xor esi, esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44cd77
mov byte [ebp - 4], 0x13
push dword [esi]
push dword [ebp - 0x48]
call dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, edi
mov byte [ebp - 4], 0xe
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44c9e4
mov ecx, dword [esi]
test ecx, ecx
je 0x44c9c2
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44c9d9
push eax
call fcn.00547f8c
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00547d61
add esp, 8
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x34], 0
jl 0x44ccee
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
test eax, eax
js 0x44ccee
mov ecx, dword [ebp - 0x5c]
test ecx, ecx
je 0x44ccee
lea edx, [ebp - 0x60]
mov dword [ebp - 0x60], 0
mov eax, dword [ecx]
push edx
push 0
push ecx
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x5c]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44ccee
mov ecx, dword [ebp - 0x60]
test ecx, ecx
je 0x44ccee
lea edx, [ebp - 0x4c]
mov dword [ebp - 0x4c], 0
mov eax, dword [ecx]
push edx
push str.MbLk
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x60]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test esi, esi
js 0x44ccee
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x44ccee
mov eax, dword [eax]
push 0xc
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
call fcn.00547e47
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x14
test esi, esi
je 0x44cad1
push dword [ebp - 0x1c]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44cad3
cmp dword [ebp - 0x1c], eax
jne 0x44cdd1
jmp 0x44cad3
xor esi, esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44cd77
mov byte [ebp - 4], 0x15
push dword [esi]
push dword [ebp - 0x4c]
call dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov ecx, edi
mov byte [ebp - 4], 0xe
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44cb34
mov ecx, dword [esi]
test ecx, ecx
je 0x44cb12
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44cb29
push eax
call fcn.00547f8c
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00547d61
add esp, 8
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x14]
jl 0x44ccf1
mov dword [ebp - 0x64], 0
mov eax, dword [eax]
push 0x58e88c
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x34], eax
mov eax, 8
mov word [ebp - 0x80], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x78], eax
test eax, eax
je 0x44cd77
movups xmm0, xmmword [ebp - 0x80]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x90]
push eax
movups xmmword [ebp - 0xd0], xmm0
call esi
movups xmm0, xmmword [ebp - 0x90]
lea eax, [ebp - 0xa0]
push eax
movups xmmword [ebp - 0xc0], xmm0
call esi
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x18]
movups xmm0, xmmword [ebp - 0xa0]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
push 0xc
movups xmmword [ebp - 0xb0], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
call fcn.00547e47
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 0x19
test esi, esi
je 0x44cc08
push dword [ebp - 0x44]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x44cc0a
cmp dword [ebp - 0x44], eax
jne 0x44cddb
jmp 0x44cc0a
xor esi, esi
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x24], esi
test esi, esi
je 0x44cd77
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x64]
movups xmm0, xmmword [ebp - 0xd0]
push eax
sub esp, 0x10
mov eax, esp
push 3
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0xb0]
push 6
push dword [ebp - 0x3c]
movups xmmword [eax], xmm0
push dword [esi]
push dword [ebp - 0x14]
call dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov ecx, edi
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x44cc9f
mov ecx, dword [esi]
test ecx, ecx
je 0x44cc7d
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x44cc94
push eax
call fcn.00547f8c
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.00547d61
add esp, 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xa0]
push eax
call esi
lea eax, [ebp - 0x90]
push eax
call esi
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0xe
push eax
call esi
cmp dword [ebp - 0x3c], 0
jl 0x44ccee
cmp dword [ebp - 0x64], 0
je 0x44ccee
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 1
jmp 0x44cd04
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [ebp - 0x1d], 0
mov edx, dword [ebp - 0x40]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44cd1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x38]
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x44cd30
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov al, byte [ebp - 0x1d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x44cd5c
mov eax, dword [ebp - 0x14]
jmp 0x44cd5c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
xor al, al
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.005475d0
push 0x8007000e
call fcn.005475d0
push 0x80004005
call fcn.0042d130
push 0x8007000e
call fcn.005475d0
push 0x8007000e
call fcn.005475d0
push 0x80004005
call fcn.0042d130
push 0x8007000e
call fcn.005475d0
push 0x8007000e
call fcn.005475d0
push 0x8007000e
call fcn.005475d0
push 0x8007000e
call fcn.005475d0
push 0x8007000e
call fcn.005475d0
int3