Function at 0x100896e0
Capabilities:
Create thread
Encode data using base64
Enumerate pe sections
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1013e0b1
mov eax, dword fs:[0]
push eax
sub esp, 0x8f8
mov eax, dword [0x10170024]
xor eax, esp
mov dword [esp + 0x8f0], eax
push ebx
push esi
push edi
mov eax, dword [0x10170024]
xor eax, esp
push eax
lea eax, [esp + 0x908]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0xc8], ecx
mov ecx, esi
mov dword [esp + 0xc4], eax
call fcn.10082530
xor edi, edi
push 0x206
lea ecx, [esp + 0x6fa]
push edi
push ecx
mov word [esp + 0x700], di
call sub.MSVCR80.dll_memset
lea edx, [esp + 0x700]
add esp, 0xc
mov eax, esi
sub edx, esi
lea esp, [esp]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x10089770
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, edi
jge 0x100897a3
push eax
push str._nCoInitialize_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
mov eax, 1
jmp 0x1008ccdd
lea edx, [esp + 0x50]
push edx
push 0x10146980
push 1
push edi
push 0x10146b70
mov dword [esp + 0x64], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x1008999a
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x1c]
push eax
call edi
mov dword [esp + 0x910], 0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xd0], ecx
lea ecx, [esp + 0x84]
push ecx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], eax
call edi
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x90]
lea eax, [esp + 0xb4]
push eax
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], edx
call edi
mov edx, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x70], edx
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0xc0]
lea edx, [esp + 0xa4]
push edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
call edi
mov byte [esp + 0x910], 3
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xe4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xa4]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xb8]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xbc]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xc0]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xa0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xa4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xa8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xd4]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xec]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xf0]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0xa4]
push ecx
mov esi, eax
call edi
lea edx, [esp + 0xb4]
push edx
call edi
lea eax, [esp + 0x84]
push eax
call edi
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call edi
test esi, esi
jge 0x100899aa
push esi
push str.ITaskService::Connect_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x58]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x1008ccdd
lea ecx, [esp + 0x38]
push ecx
mov edi, 0x1014bdb4
mov dword [esp + 0x38], 0
call fcn.100810b0
mov dword [esp + 0x910], 4
mov eax, dword [eax]
test eax, eax
je 0x100899d6
mov ecx, dword [eax]
jmp 0x100899d8
xor ecx, ecx
mov eax, dword [esp + 0x50]
mov edx, dword [eax]
lea esi, [esp + 0x34]
push esi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.10081150
test esi, esi
jge 0x10089a2f
push esi
push str.Cannot_get_Root_folder_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x58]
add esp, 8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x1008ccdd
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
push 0
lea edx, [esp + 0x6f8]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov eax, dword [esp + 0x50]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], 0
mov ecx, dword [eax]
push 0
push eax
mov eax, dword [ecx + 0x24]
call eax
mov edi, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor esi, esi
cmp edi, esi
jge 0x10089a86
push edi
push str.Failed_to_CoCreate_an_instance_of_the_TaskService_class:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
jmp 0x10089a14
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x60]
mov dword [esp + 0x60], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
cmp eax, esi
jge 0x10089ac3
push eax
push str._nCannot_get_identification_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push str.Administrator
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10089b0a
push edi
push str._nCannot_put_identification_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x68]
mov dword [esp + 0x68], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
cmp eax, esi
jge 0x10089b47
push eax
push str._nCannot_get_principal_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 1
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10089b8b
push edi
push str._nCannot_put_principal_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, esi
jge 0x10089bc8
push eax
push str._nCannot_get_settings_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xb0]
push 0xffffffffffffffff
push eax
call edx
cmp eax, esi
jge 0x10089c01
push eax
push str._nCannot_put_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push esi
push eax
call edx
cmp eax, esi
jge 0x10089c36
push eax
push str._nCannot_put_DisallowStartIfOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
push esi
push eax
call edx
cmp eax, esi
jge 0x10089c6b
push eax
push str._nCannot_put_StopIfGoingOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x54]
mov dword [esp + 0x54], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x9c]
call eax
cmp eax, esi
jge 0x10089cab
push eax
push str._nCannot_get_IdleSettings:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
push esi
push eax
call edx
cmp eax, esi
jge 0x10089cf8
push eax
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x54]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0xa0]
call eax
mov edi, eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10089d4e
push edi
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x48]
mov dword [esp + 0x48], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, esi
jge 0x10089d8b
push eax
push str._nCannot_get_trigger_collection:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov ecx, ebx
mov dword [esp + 0x44], esi
call fcn.10003590
test eax, eax
je 0x1008c925
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 1
jne 0x1008a930
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 2
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10089dfa
push esi
push str._nCannot_create_ITrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], 0
mov ecx, dword [eax]
push 0x10146a70
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10089e4d
push esi
push str._nQueryInterface_call_failed_for_ITimeTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 5
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10089ea9
mov eax, dword [eax]
jmp 0x10089eab
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 6
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10089f2a
mov eax, dword [eax]
jmp 0x10089f2c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10089f30
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x10089fe1
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 7
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x10089fb8
mov eax, dword [eax]
jmp 0x10089fba
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008a043
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 8
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a01c
mov eax, dword [eax]
jmp 0x1008a01e
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 9
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a09f
mov eax, dword [eax]
jmp 0x1008a0a1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008a0a4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008a155
push 0x10151f24
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xa
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a12c
mov eax, dword [eax]
jmp 0x1008a12e
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x1008a1b7
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xb
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a190
mov eax, dword [eax]
jmp 0x1008a192
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xc
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a213
mov eax, dword [eax]
jmp 0x1008a215
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008a220
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008a220
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008a2d1
push 0x10151f24
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xd
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a2a8
mov eax, dword [eax]
jmp 0x1008a2aa
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x1008a333
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xe
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a30c
mov eax, dword [eax]
jmp 0x1008a30e
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xf
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a38f
mov eax, dword [eax]
jmp 0x1008a391
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008a394
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008a45c
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x10
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a420
mov eax, dword [eax]
jmp 0x1008a422
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008a4d5
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x11
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a497
mov eax, dword [eax]
jmp 0x1008a499
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x38]
push eax
lea edi, [esp + 0xe0]
call fcn.100810b0
mov dword [esp + 0x910], 0x12
mov eax, dword [eax]
test eax, eax
je 0x1008a529
mov eax, dword [eax]
jmp 0x1008a52b
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.10081150
test esi, esi
jge 0x1008a576
push esi
push str._nCannot_put_Start_Boundary:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, 0x54
xor edi, edi
mov esi, ebx
mov dword [esp + 0x38], eax
call fcn.100035b0
movzx ecx, word [eax + 0x24]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [eax]
push edx
call ecx
test eax, eax
jge 0x1008a5c6
push eax
push str._nCannot_put_Days_Interval:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008a61d
push esi
push str._nCannot_get_Repetition:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x14], edi
je 0x1008a7e1
push 0x206
lea eax, [esp + 0x2ea]
push edi
push eax
mov word [esp + 0x2f0], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x10154414
lea ecx, [esp + 0x2e8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
call fcn.100035b0
mov edx, eax
mov eax, 0x88888889
mul dword [edx + 0x14]
shr edx, 5
mov dword [esp + 0x18], edx
mov word [esp + 0x1c], 0x16
mov dword [esp + 0x24], edx
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x13
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a6ab
mov eax, dword [eax]
jmp 0x1008a6ad
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x2e8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1015441c
lea edx, [esp + 0x2e8]
push 0x104
push edx
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
mov ecx, eax
mov eax, dword [esp + 0x18]
mov edx, eax
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0x14]
add edx, edx
add edx, edx
sub eax, edx
mov word [esp + 0x1c], 0x13
mov dword [esp + 0x24], eax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x14
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a73d
mov eax, dword [eax]
jmp 0x1008a73f
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x2e8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10154420
lea edx, [esp + 0x2e8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x2e8]
call fcn.100810b0
mov dword [esp + 0x910], 0x15
mov eax, dword [eax]
test eax, eax
je 0x1008a7b4
mov eax, dword [eax]
jmp 0x1008a7b6
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.10081150
test esi, esi
jl 0x1008a900
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x18], edi
je 0x1008c925
push 0x206
lea eax, [esp + 0x2ea]
push edi
push eax
mov word [esp + 0x2f0], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x10154414
lea ecx, [esp + 0x2e8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
call fcn.100035b0
mov eax, dword [eax + 0x18]
mov word [esp + 0x1c], 0x13
mov dword [esp + 0x24], eax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x16
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008a861
mov eax, dword [eax]
jmp 0x1008a863
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea edx, [esp + 0x2e8]
push 0x104
push edx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
or ebx, 0xffffffff
push eax
mov dword [esp + 0x914], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10154420
lea ecx, [esp + 0x2e8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea edi, [esp + 0x2e8]
call fcn.100810b0
mov dword [esp + 0x910], 0x17
mov eax, dword [eax]
test eax, eax
je 0x1008a8d7
mov eax, dword [eax]
jmp 0x1008a8d9
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0x910], ebx
call fcn.10081150
test esi, esi
jge 0x1008c925
push esi
push str._nCannot_put_ExecutionTimeLimit:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], edi
jne 0x1008b0f6
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089dd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], edi
mov ecx, dword [eax]
push 0x10146a60
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008a9ba
push esi
push str._nQueryInterface_call_failed_for_IDailyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x18
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008aa16
mov eax, dword [eax]
jmp 0x1008aa18
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x19
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008aa97
mov eax, dword [eax]
jmp 0x1008aa99
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008aaa0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008ab51
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ab28
mov eax, dword [eax]
jmp 0x1008ab2a
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008abb3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ab8c
mov eax, dword [eax]
jmp 0x1008ab8e
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ac0f
mov eax, dword [eax]
jmp 0x1008ac11
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008ac14
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008acc5
push 0x10151f24
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ac9c
mov eax, dword [eax]
jmp 0x1008ac9e
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x1008ad27
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ad00
mov eax, dword [eax]
jmp 0x1008ad02
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ad83
mov eax, dword [eax]
jmp 0x1008ad85
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008ad90
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008ad90
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008ae41
push 0x10151f24
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x20
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ae18
mov eax, dword [eax]
jmp 0x1008ae1a
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x1008aea3
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x21
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ae7c
mov eax, dword [eax]
jmp 0x1008ae7e
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x22
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008aeff
mov eax, dword [eax]
jmp 0x1008af01
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008af04
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008afcc
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x23
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008af90
mov eax, dword [eax]
jmp 0x1008af92
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008b045
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x24
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b007
mov eax, dword [eax]
jmp 0x1008b009
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.100810b0
mov dword [esp + 0x910], 0x25
mov eax, dword [eax]
test eax, eax
je 0x1008b099
mov eax, dword [eax]
jmp 0x1008b09b
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.10081150
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008c925
push esi
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 2
jne 0x1008b90a
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 3
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089dd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146a80
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008b181
push esi
push str._nQueryInterface_call_failed_for_IWeeklyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x26
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b1dd
mov eax, dword [eax]
jmp 0x1008b1df
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x27
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b25e
mov eax, dword [eax]
jmp 0x1008b260
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b263
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b314
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x28
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b2eb
mov eax, dword [eax]
jmp 0x1008b2ed
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008b376
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x29
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b34f
mov eax, dword [eax]
jmp 0x1008b351
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b3d2
mov eax, dword [eax]
jmp 0x1008b3d4
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b3d7
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b488
push 0x10151f24
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b45f
mov eax, dword [eax]
jmp 0x1008b461
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x1008b4ea
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b4c3
mov eax, dword [eax]
jmp 0x1008b4c5
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b546
mov eax, dword [eax]
jmp 0x1008b548
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008b550
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b550
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b601
push 0x10151f24
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b5d8
mov eax, dword [eax]
jmp 0x1008b5da
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x1008b663
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b63c
mov eax, dword [eax]
jmp 0x1008b63e
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x30
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b6bf
mov eax, dword [eax]
jmp 0x1008b6c1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b6c4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b78c
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x31
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b750
mov eax, dword [eax]
jmp 0x1008b752
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008b805
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x32
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b7c7
mov eax, dword [eax]
jmp 0x1008b7c9
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.100810b0
mov dword [esp + 0x910], 0x33
mov eax, dword [eax]
test eax, eax
je 0x1008b859
mov ecx, dword [eax]
jmp 0x1008b85b
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0x910], 0xffffffff
call fcn.10081150
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [esp + 0x40], edi
jge 0x1008c925
mov ecx, dword [esp + 0x40]
push ecx
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10089a17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 4
jne 0x1008c137
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 5
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089dd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146aa0
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008b995
push esi
push str._nQueryInterface_call_failed_for_pMonthlyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x34
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008b9f1
mov eax, dword [eax]
jmp 0x1008b9f3
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x35
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008ba72
mov eax, dword [eax]
jmp 0x1008ba74
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008ba77
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008bb28
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x36
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008baff
mov eax, dword [eax]
jmp 0x1008bb01
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008bb8a
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x37
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bb63
mov eax, dword [eax]
jmp 0x1008bb65
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x38
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bbe6
mov eax, dword [eax]
jmp 0x1008bbe8
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008bbf0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008bbf0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008bca1
push 0x10151f24
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x39
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bc78
mov eax, dword [eax]
jmp 0x1008bc7a
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x1008bd03
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bcdc
mov eax, dword [eax]
jmp 0x1008bcde
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bd5f
mov eax, dword [eax]
jmp 0x1008bd61
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008bd64
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008be19
push 0x10151f24
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bdf0
mov eax, dword [eax]
jmp 0x1008bdf2
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x1008be7b
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008be54
mov eax, dword [eax]
jmp 0x1008be56
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bed7
mov eax, dword [eax]
jmp 0x1008bed9
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008bee0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008bfa8
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3f
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bf6c
mov eax, dword [eax]
jmp 0x1008bf6e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008c021
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x40
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008bfe3
mov eax, dword [eax]
jmp 0x1008bfe5
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.100810b0
mov dword [esp + 0x910], 0x41
mov eax, dword [eax]
test eax, eax
je 0x1008c075
mov ecx, dword [eax]
jmp 0x1008c077
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0x910], 0xffffffff
call fcn.10081150
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100035b0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push 0xfff
push eax
mov eax, dword [edx + 0x64]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0x40], edi
jge 0x1008c925
mov eax, dword [esp + 0x40]
push eax
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
xor edi, edi
mov esi, ebx
call fcn.100035b0
cmp dword [eax + 0x20], 3
jne 0x1008c925
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 4
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089dd6
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10146a90
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x1008b971
push 0x206
lea eax, [esp + 0xe2]
push edi
push eax
mov word [esp + 0xe8], di
call sub.MSVCR80.dll_memset
add esp, 0xc
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x42
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c1f9
mov eax, dword [eax]
jmp 0x1008c1fb
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x43
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c27a
mov eax, dword [eax]
jmp 0x1008c27c
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c280
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c335
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x44
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c30c
mov eax, dword [eax]
jmp 0x1008c30e
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008c397
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x45
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c370
mov eax, dword [eax]
jmp 0x1008c372
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a4
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x46
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c3f3
mov eax, dword [eax]
jmp 0x1008c3f5
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008c400
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c400
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c4b1
push 0x10151f24
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x47
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c488
mov eax, dword [eax]
jmp 0x1008c48a
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
jmp 0x1008c513
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x48
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c4ec
mov eax, dword [eax]
jmp 0x1008c4ee
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543a8
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x49
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c56f
mov eax, dword [eax]
jmp 0x1008c571
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c574
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c629
push 0x10151f24
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4a
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c600
mov eax, dword [eax]
jmp 0x1008c602
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
jmp 0x1008c68b
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4b
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c664
mov eax, dword [eax]
jmp 0x1008c666
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101543ac
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4c
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c6e7
mov eax, dword [eax]
jmp 0x1008c6e9
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c6f0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c7b8
push 0x10151f24
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4d
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c77c
mov eax, dword [eax]
jmp 0x1008c77e
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008c831
xor edi, edi
mov esi, ebx
call fcn.100035b0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4e
call fcn.100812a0
mov eax, dword [eax]
test eax, eax
je 0x1008c7f3
mov eax, dword [eax]
jmp 0x1008c7f5
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.10081150
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x101543ac
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x101543b0
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.100810b0
mov dword [esp + 0x910], 0x4f
mov eax, dword [eax]
test eax, eax
je 0x1008c885
mov ecx, dword [eax]
jmp 0x1008c887
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0x910], 0xffffffff
call fcn.10081150
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 0xfff
push eax
call edx
mov ecx, ebx
mov dword [esp + 0x38], 0
xor edi, edi
call fcn.10003590
test eax, eax
jbe 0x1008c8ee
mov esi, ebx
call fcn.100035b0
mov eax, dword [eax + 0x24]
or dword [esp + 0x38], eax
mov ecx, ebx
add edi, 1
call fcn.10003590
cmp edi, eax
jb 0x1008c8d2
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x54]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x64]
push 0
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x40]
test eax, eax
jl 0x1008c113
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x64]
xor ebx, ebx
mov dword [esp + 0x64], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
cmp eax, ebx
jge 0x1008c964
push eax
push str._nCannot_get_Task_collection_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x64]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x60], ebx
mov ecx, dword [eax]
push ebx
push eax
mov eax, dword [ecx + 0x30]
call eax
mov esi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x1008c9b0
push esi
push str._nCannot_create_the_action:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x5c], ebx
mov ecx, dword [eax]
push str.MbLk
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x1008c9ff
push esi
push str._nQueryInterface_call_failed_for_IExecAction:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
push 0x206
lea eax, [esp + 0x2ea]
push ebx
push eax
mov word [esp + 0x2f0], bx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x206
lea ecx, [esp + 0x4f2]
push ebx
push ecx
mov word [esp + 0x4f8], bx
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0xd0]
add esp, 0xc
call fcn.10082860
add eax, eax
push eax
lea edx, [esp + 0x2e8]
push esi
push edx
call sub.MSVCR80.dll_memcpy
add esp, 0xc
lea esi, [esp + 0x2e4]
call fcn.10082860
add eax, eax
push eax
mov ecx, esi
push ecx
lea edx, [esp + 0x4f4]
push edx
call sub.MSVCR80.dll_memcpy
lea edi, [esp + 0x4f8]
add esp, 0xc
add edi, 0xfffffffe
jmp 0x1008ca90
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x1008ca90
mov eax, dword [esp + 0x58]
mov ecx, 7
mov esi, str.ABLaucher.exe
rep movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x4ec]
movsw word es:[edi], word [esi]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
mov esi, eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push str.schedule
push eax
call edx
cmp esi, ebx
jge 0x1008cb05
push esi
push str._nCannot_put_action_path:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089a17
mov edi, 0x1014be14
lea esi, [esp + 0xa4]
mov dword [esp + 0x80], 0
call fcn.10081260
mov dword [esp + 0x910], 0x50
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x84]
push ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0x910], 0x51
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x90]
mov edi, 0x10153fac
lea esi, [esp + 0xb4]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
call fcn.10081260
mov byte [esp + 0x910], 0x52
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x80]
push ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x38]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [ecx + 0xc], edi
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x48]
push 0
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [esp + 0x98]
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x9c]
mov esi, dword [edx]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0xa0]
mov dword [ecx + 0xc], edi
mov edi, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [eax + 4]
mov dword [ecx + 4], edi
mov edi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x68]
push 6
push ecx
mov ecx, dword [esi + 0x44]
lea eax, [esp + 0x734]
push eax
push edx
call ecx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0xb4]
push edx
mov edi, eax
call esi
lea eax, [esp + 0x84]
push eax
call esi
lea ecx, [esp + 0xa4]
push ecx
mov dword [esp + 0x914], 0xffffffff
call esi
test edi, edi
jge 0x1008cc7f
push edi
push str._nError_saving_the_Task_:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10089a17
push str._n_Success__Task_successfully_registered.
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x80]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [esp + 0xc8]
push 0
push 0
push esi
push 0x10081360
push 0
push 0
call dword [sym.imp.MSVCR80.dll__beginthreadex]
add esp, 0x18
mov dword [esi + 4], eax
xor eax, eax
mov ecx, dword [esp + 0x908]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x8f0]
xor ecx, esp
call fcn.1012d370
mov esp, ebp
pop ebp
ret 0x14