Function at 0x10089860
Capabilities:
Create thread
Encode data using base64
Enumerate pe sections
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10111811
mov eax, dword fs:[0]
push eax
sub esp, 0x8f8
mov eax, dword [0x1013b024]
xor eax, esp
mov dword [esp + 0x8f0], eax
push ebx
push esi
push edi
mov eax, dword [0x1013b024]
xor eax, esp
push eax
lea eax, [esp + 0x908]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0xc8], ecx
mov ecx, esi
mov dword [esp + 0xc4], eax
call fcn.100826b0
xor edi, edi
push 0x206
lea ecx, [esp + 0x6fa]
push edi
push ecx
mov word [esp + 0x700], di
call sub.MSVCR80.dll_memset
lea edx, [esp + 0x700]
add esp, 0xc
mov eax, esi
sub edx, esi
lea esp, [esp]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x100898f0
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, edi
jge 0x10089923
push eax
push str._nCoInitialize_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
mov eax, 1
jmp 0x1008ce5d
lea edx, [esp + 0x50]
push edx
push 0x10119800
push 1
push edi
push 0x101199f0
mov dword [esp + 0x64], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x10089b1a
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x1c]
push eax
call edi
mov dword [esp + 0x910], 0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xd0], ecx
lea ecx, [esp + 0x84]
push ecx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], eax
call edi
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x90]
lea eax, [esp + 0xb4]
push eax
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], edx
call edi
mov edx, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x70], edx
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0xc0]
lea edx, [esp + 0xa4]
push edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
call edi
mov byte [esp + 0x910], 3
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xe4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xa4]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xb8]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xbc]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xc0]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xa0]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xa4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xa8]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0xd4]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xe8]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xec]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xf0]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
call eax
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0xa4]
push ecx
mov esi, eax
call edi
lea edx, [esp + 0xb4]
push edx
call edi
lea eax, [esp + 0x84]
push eax
call edi
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call edi
test esi, esi
jge 0x10089b2a
push esi
push str.ITaskService::Connect_failed:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x58]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x1008ce5d
lea ecx, [esp + 0x38]
push ecx
mov edi, 0x1011da4c
mov dword [esp + 0x38], 0
call fcn.10081230
mov dword [esp + 0x910], 4
mov eax, dword [eax]
test eax, eax
je 0x10089b56
mov ecx, dword [eax]
jmp 0x10089b58
xor ecx, ecx
mov eax, dword [esp + 0x50]
mov edx, dword [eax]
lea esi, [esp + 0x34]
push esi
push ecx
push eax
mov eax, dword [edx + 0x1c]
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.100812d0
test esi, esi
jge 0x10089baf
push esi
push str.Cannot_get_Root_folder_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x58]
add esp, 8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x1008ce5d
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
push 0
lea edx, [esp + 0x6f8]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov eax, dword [esp + 0x50]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], 0
mov ecx, dword [eax]
push 0
push eax
mov eax, dword [ecx + 0x24]
call eax
mov edi, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor esi, esi
cmp edi, esi
jge 0x10089c06
push edi
push str.Failed_to_CoCreate_an_instance_of_the_TaskService_class:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
jmp 0x10089b94
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x60]
mov dword [esp + 0x60], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
cmp eax, esi
jge 0x10089c43
push eax
push str._nCannot_get_identification_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push str.Administrator
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10089c8a
push edi
push str._nCannot_put_identification_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x68]
mov dword [esp + 0x68], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
cmp eax, esi
jge 0x10089cc7
push eax
push str._nCannot_get_principal_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 1
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10089d0b
push edi
push str._nCannot_put_principal_info:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp eax, esi
jge 0x10089d48
push eax
push str._nCannot_get_settings_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xb0]
push 0xffffffffffffffff
push eax
call edx
cmp eax, esi
jge 0x10089d81
push eax
push str._nCannot_put_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push esi
push eax
call edx
cmp eax, esi
jge 0x10089db6
push eax
push str._nCannot_put_DisallowStartIfOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
push esi
push eax
call edx
cmp eax, esi
jge 0x10089deb
push eax
push str._nCannot_put_StopIfGoingOnBatteries:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x54]
mov dword [esp + 0x54], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x9c]
call eax
cmp eax, esi
jge 0x10089e2b
push eax
push str._nCannot_get_IdleSettings:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
push esi
push eax
call edx
cmp eax, esi
jge 0x10089e78
push eax
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x54]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0xa0]
call eax
mov edi, eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, esi
jge 0x10089ece
push edi
push str._nCannot_put_idle_setting_information:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x48]
mov dword [esp + 0x48], esi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, esi
jge 0x10089f0b
push eax
push str._nCannot_get_trigger_collection:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov ecx, ebx
mov dword [esp + 0x44], esi
call fcn.10003480
test eax, eax
je 0x1008caa5
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 1
jne 0x1008aab0
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 2
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10089f7a
push esi
push str._nCannot_create_ITrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], 0
mov ecx, dword [eax]
push 0x101198f0
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x10089fcd
push esi
push str._nQueryInterface_call_failed_for_ITimeTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 5
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a029
mov eax, dword [eax]
jmp 0x1008a02b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 6
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a0aa
mov eax, dword [eax]
jmp 0x1008a0ac
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008a0b0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008a161
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 7
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a138
mov eax, dword [eax]
jmp 0x1008a13a
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008a1c3
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 8
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a19c
mov eax, dword [eax]
jmp 0x1008a19e
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 9
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a21f
mov eax, dword [eax]
jmp 0x1008a221
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008a224
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008a2d5
push 0x10123c1c
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xa
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a2ac
mov eax, dword [eax]
jmp 0x1008a2ae
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x1008a337
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xb
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a310
mov eax, dword [eax]
jmp 0x1008a312
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xc
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a393
mov eax, dword [eax]
jmp 0x1008a395
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008a3a0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008a3a0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008a451
push 0x10123c1c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xd
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a428
mov eax, dword [eax]
jmp 0x1008a42a
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x1008a4b3
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xe
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a48c
mov eax, dword [eax]
jmp 0x1008a48e
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0xf
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a50f
mov eax, dword [eax]
jmp 0x1008a511
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008a514
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x38]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008a5dc
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x10
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a5a0
mov eax, dword [eax]
jmp 0x1008a5a2
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008a655
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x11
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a617
mov eax, dword [eax]
jmp 0x1008a619
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x38]
push eax
lea edi, [esp + 0xe0]
call fcn.10081230
mov dword [esp + 0x910], 0x12
mov eax, dword [eax]
test eax, eax
je 0x1008a6a9
mov eax, dword [eax]
jmp 0x1008a6ab
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x38]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.100812d0
test esi, esi
jge 0x1008a6f6
push esi
push str._nCannot_put_Start_Boundary:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, 0x54
xor edi, edi
mov esi, ebx
mov dword [esp + 0x38], eax
call fcn.100034a0
movzx ecx, word [eax + 0x24]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [eax]
push edx
call ecx
test eax, eax
jge 0x1008a746
push eax
push str._nCannot_put_Days_Interval:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008a79d
push esi
push str._nCannot_get_Repetition:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x14], edi
je 0x1008a961
push 0x206
lea eax, [esp + 0x2ea]
push edi
push eax
mov word [esp + 0x2f0], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x101260dc
lea ecx, [esp + 0x2e8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
call fcn.100034a0
mov edx, eax
mov eax, 0x88888889
mul dword [edx + 0x14]
shr edx, 5
mov dword [esp + 0x18], edx
mov word [esp + 0x1c], 0x16
mov dword [esp + 0x24], edx
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x13
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a82b
mov eax, dword [eax]
jmp 0x1008a82d
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x2e8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101260e4
lea edx, [esp + 0x2e8]
push 0x104
push edx
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
mov ecx, eax
mov eax, dword [esp + 0x18]
mov edx, eax
shl edx, 4
sub edx, eax
mov eax, dword [ecx + 0x14]
add edx, edx
add edx, edx
sub eax, edx
mov word [esp + 0x1c], 0x13
mov dword [esp + 0x24], eax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp + 0x910], 0x14
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a8bd
mov eax, dword [eax]
jmp 0x1008a8bf
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0x2e8]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x38]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101260e8
lea edx, [esp + 0x2e8]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0x2e8]
call fcn.10081230
mov dword [esp + 0x910], 0x15
mov eax, dword [eax]
test eax, eax
je 0x1008a934
mov eax, dword [eax]
jmp 0x1008a936
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.100812d0
test esi, esi
jl 0x1008aa80
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x18], edi
je 0x1008caa5
push 0x206
lea eax, [esp + 0x2ea]
push edi
push eax
mov word [esp + 0x2f0], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x101260dc
lea ecx, [esp + 0x2e8]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
call fcn.100034a0
mov eax, dword [eax + 0x18]
mov word [esp + 0x1c], 0x13
mov dword [esp + 0x24], eax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x16
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008a9e1
mov eax, dword [eax]
jmp 0x1008a9e3
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea edx, [esp + 0x2e8]
push 0x104
push edx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
or ebx, 0xffffffff
push eax
mov dword [esp + 0x914], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x101260e8
lea ecx, [esp + 0x2e8]
push 0x104
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea edi, [esp + 0x2e8]
call fcn.10081230
mov dword [esp + 0x910], 0x17
mov eax, dword [eax]
test eax, eax
je 0x1008aa57
mov eax, dword [eax]
jmp 0x1008aa59
xor eax, eax
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0x910], ebx
call fcn.100812d0
test esi, esi
jge 0x1008caa5
push esi
push str._nCannot_put_ExecutionTimeLimit:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], edi
jne 0x1008b276
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089f56
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x44], edi
mov ecx, dword [eax]
push 0x101198e0
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008ab3a
push esi
push str._nQueryInterface_call_failed_for_IDailyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x18
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008ab96
mov eax, dword [eax]
jmp 0x1008ab98
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x19
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008ac17
mov eax, dword [eax]
jmp 0x1008ac19
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008ac20
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008acd1
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008aca8
mov eax, dword [eax]
jmp 0x1008acaa
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008ad33
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008ad0c
mov eax, dword [eax]
jmp 0x1008ad0e
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008ad8f
mov eax, dword [eax]
jmp 0x1008ad91
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008ad94
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008ae45
push 0x10123c1c
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008ae1c
mov eax, dword [eax]
jmp 0x1008ae1e
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x1008aea7
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008ae80
mov eax, dword [eax]
jmp 0x1008ae82
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x1f
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008af03
mov eax, dword [eax]
jmp 0x1008af05
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008af10
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008af10
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008afc1
push 0x10123c1c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x20
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008af98
mov eax, dword [eax]
jmp 0x1008af9a
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x1008b023
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x21
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008affc
mov eax, dword [eax]
jmp 0x1008affe
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x22
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b07f
mov eax, dword [eax]
jmp 0x1008b081
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b084
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b14c
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x23
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b110
mov eax, dword [eax]
jmp 0x1008b112
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008b1c5
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x24
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b187
mov eax, dword [eax]
jmp 0x1008b189
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.10081230
mov dword [esp + 0x910], 0x25
mov eax, dword [eax]
test eax, eax
je 0x1008b219
mov eax, dword [eax]
jmp 0x1008b21b
xor eax, eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x3c]
push ecx
call eax
lea edi, [esp + 0x18]
mov esi, eax
mov dword [esp + 0x910], 0xffffffff
call fcn.100812d0
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008caa5
push esi
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 2
jne 0x1008ba8a
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 3
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089f56
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10119900
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008b301
push esi
push str._nQueryInterface_call_failed_for_IWeeklyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x26
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b35d
mov eax, dword [eax]
jmp 0x1008b35f
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x27
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b3de
mov eax, dword [eax]
jmp 0x1008b3e0
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b3e3
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b494
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x28
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b46b
mov eax, dword [eax]
jmp 0x1008b46d
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008b4f6
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x29
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b4cf
mov eax, dword [eax]
jmp 0x1008b4d1
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b552
mov eax, dword [eax]
jmp 0x1008b554
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b557
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b608
push 0x10123c1c
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b5df
mov eax, dword [eax]
jmp 0x1008b5e1
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x1008b66a
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b643
mov eax, dword [eax]
jmp 0x1008b645
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b6c6
mov eax, dword [eax]
jmp 0x1008b6c8
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008b6d0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b6d0
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b781
push 0x10123c1c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b758
mov eax, dword [eax]
jmp 0x1008b75a
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x1008b7e3
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x2f
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b7bc
mov eax, dword [eax]
jmp 0x1008b7be
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x30
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b83f
mov eax, dword [eax]
jmp 0x1008b841
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008b844
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008b90c
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x31
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b8d0
mov eax, dword [eax]
jmp 0x1008b8d2
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008b985
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x32
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008b947
mov eax, dword [eax]
jmp 0x1008b949
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.10081230
mov dword [esp + 0x910], 0x33
mov eax, dword [eax]
test eax, eax
je 0x1008b9d9
mov ecx, dword [eax]
jmp 0x1008b9db
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0x910], 0xffffffff
call fcn.100812d0
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [esp + 0x40], edi
jge 0x1008caa5
mov ecx, dword [esp + 0x40]
push ecx
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10089b97
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 4
jne 0x1008c2b7
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 5
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089f56
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10119920
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jge 0x1008bb15
push esi
push str._nQueryInterface_call_failed_for_pMonthlyTrigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
push 0x206
lea eax, [esp + 0xe2]
push 0
push eax
mov word [esp + 0xe8], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x34
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bb71
mov eax, dword [eax]
jmp 0x1008bb73
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x35
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bbf2
mov eax, dword [eax]
jmp 0x1008bbf4
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008bbf7
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008bca8
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x36
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bc7f
mov eax, dword [eax]
jmp 0x1008bc81
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008bd0a
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x37
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bce3
mov eax, dword [eax]
jmp 0x1008bce5
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x38
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bd66
mov eax, dword [eax]
jmp 0x1008bd68
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008bd70
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008bd70
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008be21
push 0x10123c1c
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x39
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bdf8
mov eax, dword [eax]
jmp 0x1008bdfa
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x1008be83
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008be5c
mov eax, dword [eax]
jmp 0x1008be5e
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bedf
mov eax, dword [eax]
jmp 0x1008bee1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008bee4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008bf99
push 0x10123c1c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bf70
mov eax, dword [eax]
jmp 0x1008bf72
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x1008bffb
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008bfd4
mov eax, dword [eax]
jmp 0x1008bfd6
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c057
mov eax, dword [eax]
jmp 0x1008c059
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c060
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c128
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x3f
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c0ec
mov eax, dword [eax]
jmp 0x1008c0ee
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008c1a1
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x40
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c163
mov eax, dword [eax]
jmp 0x1008c165
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.10081230
mov dword [esp + 0x910], 0x41
mov eax, dword [eax]
test eax, eax
je 0x1008c1f5
mov ecx, dword [eax]
jmp 0x1008c1f7
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0x910], 0xffffffff
call fcn.100812d0
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx]
add eax, 0x5c
xor edi, edi
mov esi, ebx
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx edx, word [eax + 0x24]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
add eax, 0x54
mov dword [esp + 0x18], eax
call fcn.100034a0
movzx ecx, word [eax + 0x26]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [eax]
push edx
call ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push 0xfff
push eax
mov eax, dword [edx + 0x64]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0x40], edi
jge 0x1008caa5
mov eax, dword [esp + 0x40]
push eax
push str._nCannot_add_start_boundary_to_trigger:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
xor edi, edi
mov esi, ebx
call fcn.100034a0
cmp dword [eax + 0x20], 3
jne 0x1008caa5
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push 4
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x10089f56
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], edi
mov ecx, dword [eax]
push 0x10119910
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jl 0x1008baf1
push 0x206
lea eax, [esp + 0xe2]
push edi
push eax
mov word [esp + 0xe8], di
call sub.MSVCR80.dll_memset
add esp, 0xc
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 4]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x42
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c379
mov eax, dword [eax]
jmp 0x1008c37b
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x43
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c3fa
mov eax, dword [eax]
jmp 0x1008c3fc
xor eax, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c400
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c4b5
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x44
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c48c
mov eax, dword [eax]
jmp 0x1008c48e
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
jmp 0x1008c517
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 6]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x45
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c4f0
mov eax, dword [eax]
jmp 0x1008c4f2
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x1012606c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x46
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c573
mov eax, dword [eax]
jmp 0x1008c575
xor eax, eax
lea edx, [eax + 2]
jmp 0x1008c580
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c580
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c631
push 0x10123c1c
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x47
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c608
mov eax, dword [eax]
jmp 0x1008c60a
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
jmp 0x1008c693
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 8]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x48
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c66c
mov eax, dword [eax]
jmp 0x1008c66e
xor eax, eax
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126070
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x49
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c6ef
mov eax, dword [eax]
jmp 0x1008c6f1
xor eax, eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c6f4
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c7a9
push 0x10123c1c
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4a
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c780
mov eax, dword [eax]
jmp 0x1008c782
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
jmp 0x1008c80b
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x10]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4b
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c7e4
mov eax, dword [eax]
jmp 0x1008c7e6
xor eax, eax
push eax
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0x10126074
lea eax, [esp + 0xe0]
push 0x104
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4c
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c867
mov eax, dword [eax]
jmp 0x1008c869
xor eax, eax
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1008c870
sub eax, edx
sar eax, 1
cmp eax, 1
lea edi, [esp + 0x18]
sete byte [esp + 0x17]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [esp + 0x17], 0
je 0x1008c938
push 0x10123c1c
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4d
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c8fc
mov eax, dword [eax]
jmp 0x1008c8fe
xor eax, eax
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push eax
lea eax, [esp + 0xe0]
push 0x104
push eax
call esi
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1008c9b1
xor edi, edi
mov esi, ebx
call fcn.100034a0
movzx eax, word [eax + 0x12]
mov word [esp + 0x1c], 0x12
mov word [esp + 0x24], ax
lea esi, [esp + 0x1c]
lea edi, [esp + 0x18]
mov dword [esp + 0x910], 0x4e
call fcn.10081420
mov eax, dword [eax]
test eax, eax
je 0x1008c973
mov eax, dword [eax]
jmp 0x1008c975
xor eax, eax
push eax
lea edx, [esp + 0xe0]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edi, [esp + 0x18]
call fcn.100812d0
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x914], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10126074
lea ecx, [esp + 0xe0]
push 0x104
push ecx
call esi
add esp, 0xc
push 0x10126078
lea edx, [esp + 0xe0]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea edi, [esp + 0xe0]
call fcn.10081230
mov dword [esp + 0x910], 0x4f
mov eax, dword [eax]
test eax, eax
je 0x1008ca05
mov ecx, dword [eax]
jmp 0x1008ca07
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x3c]
call eax
lea edi, [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0x910], 0xffffffff
call fcn.100812d0
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 0xfff
push eax
call edx
mov ecx, ebx
mov dword [esp + 0x38], 0
xor edi, edi
call fcn.10003480
test eax, eax
jbe 0x1008ca6e
mov esi, ebx
call fcn.100034a0
mov eax, dword [eax + 0x24]
or dword [esp + 0x38], eax
mov ecx, ebx
add edi, 1
call fcn.10003480
cmp edi, eax
jb 0x1008ca52
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x54]
call eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x64]
push 0
push eax
call edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x40]
test eax, eax
jl 0x1008c293
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x64]
xor ebx, ebx
mov dword [esp + 0x64], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
cmp eax, ebx
jge 0x1008cae4
push eax
push str._nCannot_get_Task_collection_pointer:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x64]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x60], ebx
mov ecx, dword [eax]
push ebx
push eax
mov eax, dword [ecx + 0x30]
call eax
mov esi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x1008cb30
push esi
push str._nCannot_create_the_action:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x5c], ebx
mov ecx, dword [eax]
push str.MbLk
push eax
mov eax, dword [ecx]
call eax
mov esi, eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp esi, ebx
jge 0x1008cb7f
push esi
push str._nQueryInterface_call_failed_for_IExecAction:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
push 0x206
lea eax, [esp + 0x2ea]
push ebx
push eax
mov word [esp + 0x2f0], bx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x206
lea ecx, [esp + 0x4f2]
push ebx
push ecx
mov word [esp + 0x4f8], bx
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0xd0]
add esp, 0xc
call fcn.100829e0
add eax, eax
push eax
lea edx, [esp + 0x2e8]
push esi
push edx
call sub.MSVCR80.dll_memcpy
add esp, 0xc
lea esi, [esp + 0x2e4]
call fcn.100829e0
add eax, eax
push eax
mov ecx, esi
push ecx
lea edx, [esp + 0x4f4]
push edx
call sub.MSVCR80.dll_memcpy
lea edi, [esp + 0x4f8]
add esp, 0xc
add edi, 0xfffffffe
jmp 0x1008cc10
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x1008cc10
mov eax, dword [esp + 0x58]
mov ecx, 7
mov esi, str.ABLaucher.exe
rep movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x4ec]
movsw word es:[edi], word [esi]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
mov esi, eax
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push str.schedule
push eax
call edx
cmp esi, ebx
jge 0x1008cc85
push esi
push str._nCannot_put_action_path:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 8
push eax
call edx
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x10089b97
mov edi, 0x1011daac
lea esi, [esp + 0xa4]
mov dword [esp + 0x80], 0
call fcn.100813e0
mov dword [esp + 0x910], 0x50
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x84]
push ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0x910], 0x51
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x90]
mov edi, 0x10125c74
lea esi, [esp + 0xb4]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
call fcn.100813e0
mov byte [esp + 0x910], 0x52
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x80]
push ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x38]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [ecx + 0xc], edi
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x48]
push 0
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [esp + 0x98]
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x9c]
mov esi, dword [edx]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0xa0]
mov dword [ecx + 0xc], edi
mov edi, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [eax + 4]
mov dword [ecx + 4], edi
mov edi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x68]
push 6
push ecx
mov ecx, dword [esi + 0x44]
lea eax, [esp + 0x734]
push eax
push edx
call ecx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0xb4]
push edx
mov edi, eax
call esi
lea eax, [esp + 0x84]
push eax
call esi
lea ecx, [esp + 0xa4]
push ecx
mov dword [esp + 0x914], 0xffffffff
call esi
test edi, edi
jge 0x1008cdff
push edi
push str._nError_saving_the_Task_:__x
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x30]
jmp 0x10089b97
push str._n_Success__Task_successfully_registered.
call dword [sym.imp.MSVCR80.dll_printf]
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x80]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [esp + 0xc8]
push 0
push 0
push esi
push 0x100814e0
push 0
push 0
call dword [sym.imp.MSVCR80.dll__beginthreadex]
add esp, 0x18
mov dword [esi + 4], eax
xor eax, eax
mov ecx, dword [esp + 0x908]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x8f0]
xor ecx, esp
call fcn.1010dc50
mov esp, ebp
pop ebp
ret 0x14