Function at 0x426e10
Capabilities:
Schedule task via itaskscheduler
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47df45
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xd0
mov eax, dword [0x4b4200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
movq qword [ebp - 0x2c], xmm0
xor esi, esi
inc esi
cmp word [esi*2 + 0x4a785c], 0
jne 0x426e62
mov ecx, 2
mov dword [ebp - 0x28], esi
lea eax, [esi + 1]
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0x2c], eax
test esi, esi
jle 0x426eb3
mov edi, 0x4a785c
mov ecx, eax
sub edi, eax
mov edx, esi
nop
mov ax, word [ecx + edi]
lea ecx, [ecx + 2]
mov word [ecx - 2], ax
sub edx, 1
jne 0x426ea0
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov byte [ebp - 0x24], 1
mov word [eax + esi*2], cx
mov dword [ebp - 4], ecx
xorps xmm0, xmm0
xor eax, eax
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x18], 1
push 7
push 2
push 1
push 1
push 0x49eb90
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00406350
test eax, eax
je 0x426f6b
push 0
push 1
push 1
push 0
push str._tasks_
lea ecx, [ebp - 0x2c]
call fcn.00406350
test eax, eax
je 0x426f6b
mov ecx, dword [ebp - 0x28]
add eax, 6
mov edi, dword [ebp - 0x2c]
test ecx, ecx
jne 0x426f31
test edi, edi
je 0x426f2e
cmp word [edi], cx
je 0x426f2e
inc ecx
cmp word [edi + ecx*2], 0
jne 0x426f26
mov dword [ebp - 0x28], ecx
cmp eax, ecx
jl 0x426f39
mov eax, ecx
jmp 0x426f40
xor edx, edx
test eax, eax
cmovs eax, edx
mov byte [ebp - 0x24], 1
test ecx, ecx
je 0x426f6b
sub ecx, eax
xor edx, edx
mov dword [ebp - 0x28], ecx
test ecx, ecx
jle 0x426f65
lea esi, [edi + eax*2]
mov ax, word [esi]
lea esi, [esi + 2]
mov word [edi + edx*2], ax
inc edx
cmp edx, ecx
jl 0x426f56
xor eax, eax
mov word [edi + ecx*2], ax
call fcn.00407a10
movsd xmm1, qword [0x4aa3d8]
comisd xmm1, xmm0
jbe 0x427222
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x38], 0
lea eax, [ebp - 0x38]
push eax
push 0x4aa324
push 1
push 0
push 0x4aa304
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x427005
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x426fc4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor edi, edi
xor esi, esi
test edi, edi
je 0x426fd5
push edi
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x426fe5
push eax
call fcn.00469dd3
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00469dc5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov esi, dword [ecx + 0x18]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
jne 0x42703a
push 2
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov dword [ebp - 0x28], ecx
mov word [eax], cx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x3c]
mov byte [ebp - 0x24], 1
push edx
push 0x4aa334
push ecx
push eax
call esi
test eax, eax
jns 0x427069
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x427060
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
jmp 0x426fb7
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x4c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x84]
test eax, eax
jns 0x427097
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x42708e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
jmp 0x426fb7
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x44]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x8c]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x20]
call fcn.00405a60
mov edi, dword [ebp - 0x44]
test edi, edi
je 0x4271df
xor eax, eax
cmp word [edi], ax
je 0x4271df
inc eax
cmp word [edi + eax*2], 0
jne 0x4270c8
test eax, eax
je 0x4271df
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], 0
test eax, eax
jne 0x4270fb
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4270f8
cmp word [ecx], ax
je 0x4270f8
nop
inc eax
cmp word [ecx + eax*2], 0
jne 0x4270f0
mov dword [ebp - 0x1c], eax
xor ecx, ecx
nop dword [eax]
inc ecx
cmp word [ecx*2 + 0x49eaf8], 0
jne 0x427100
add ecx, eax
xor eax, eax
inc eax
cmp word [edi + eax*2], 0
jne 0x427110
add eax, ecx
mov ecx, 2
mov dword [ebp - 0x30], eax
inc eax
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov ecx, dword [ebp - 0x20]
mov esi, eax
add esp, 4
mov dword [ebp - 0x5c], esi
mov edx, esi
test ecx, ecx
je 0x427171
movzx ecx, word [ecx]
mov eax, ecx
test cx, cx
je 0x427171
mov ecx, dword [ebp - 0x20]
sub ecx, esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], ecx
mov ecx, eax
mov esi, dword [ebp - 0x64]
nop
mov word [edx], cx
add edx, 2
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x427160
mov ecx, 0x49eaf8
mov esi, 0x20
sub ecx, edx
nop dword [eax]
mov word [edx], si
add edx, 2
movzx eax, word [ecx + edx]
mov esi, eax
test ax, ax
jne 0x427180
movzx eax, word [edi]
mov esi, dword [ebp - 0x5c]
mov ecx, eax
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x20]
test ax, ax
je 0x4271bb
movzx eax, ax
movzx eax, ax
lea edi, [edi + 2]
mov word [edx], ax
add edx, 2
movzx eax, word [edi]
test ax, ax
jne 0x4271a7
xor eax, eax
mov word [edx], ax
test ecx, ecx
je 0x4271cd
push ecx
call fcn.00469dd3
add esp, 4
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x5c]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x18], 1
jmp 0x4271e2
mov edi, dword [ebp - 0x20]
push dword [ebp - 0x4c]
mov esi, dword [sym.imp.ole32.dll_CoTaskMemFree]
call esi
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4271f7
push eax
call esi
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x427208
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x42796d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x42796d
mov dword [ebp - 0x40], 0
lea eax, [ebp - 0x40]
push eax
push 0x499108
push 1
push 0
push 0x499118
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x427251
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x40]
jmp 0x426fba
mov eax, dword [ebp - 0x40]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [eax]
mov edi, dword [eax + 0x28]
lea eax, [ebp - 0xb0]
push eax
call esi
movups xmm0, xmmword [ebp - 0xb0]
lea eax, [ebp - 0xa0]
push eax
movups xmmword [ebp - 0xc0], xmm0
call esi
movups xmm0, xmmword [ebp - 0xa0]
lea eax, [ebp - 0x90]
push eax
movups xmmword [ebp - 0xd0], xmm0
call esi
movups xmm0, xmmword [ebp - 0x90]
lea eax, [ebp - 0x80]
push eax
movups xmmword [ebp - 0xe0], xmm0
call esi
mov byte [ebp - 4], 0x10
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xc0]
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xd0]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xe0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x80]
push dword [ebp - 0x40]
movups xmmword [eax], xmm0
call edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x80]
push eax
call esi
lea eax, [ebp - 0x90]
push eax
call esi
lea eax, [ebp - 0xa0]
push eax
call esi
lea eax, [ebp - 0xb0]
push eax
call esi
mov eax, dword [ebp - 0x60]
shr eax, 0x1f
test al, al
je 0x42732c
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x40]
jmp 0x426fba
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x40]
push 0xc
mov eax, dword [eax]
mov edi, dword [eax + 0x1c]
call fcn.00469fe6
mov esi, eax
add esp, 4
mov dword [ebp - 0x68], esi
mov byte [ebp - 4], 0x13
test esi, esi
je 0x427389
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
push 0x49eae8
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x427986
jmp 0x42738b
xor esi, esi
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x68], esi
test esi, esi
je 0x427990
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x14
push eax
push dword [esi]
push dword [ebp - 0x40]
call edi
shr eax, 0x1f
or ecx, 0xffffffff
mov dword [ebp - 0x60], eax
lock xadd dword [esi + 8], ecx
dec ecx
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
jne 0x4273f4
mov eax, dword [esi]
test eax, eax
je 0x4273cf
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4273e6
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov eax, dword [ebp - 0x60]
add esp, 8
test al, al
je 0x427415
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x427409
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x40]
jmp 0x426fba
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov esi, dword [eax + 0x34]
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x427444
push 2
call fcn.0046a3df
add esp, 4
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov dword [ebp - 0x28], ecx
mov word [eax], cx
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x24], 1
call fcn.004013f0
mov byte [ebp - 4], 0x18
mov eax, dword [eax]
test eax, eax
je 0x42745f
mov eax, dword [eax]
jmp 0x427461
xor eax, eax
lea ecx, [ebp - 0x3c]
push ecx
push eax
push dword [ebp - 0x38]
call esi
mov esi, dword [ebp - 0x60]
shr eax, 0x1f
mov dword [ebp - 0x64], eax
test esi, esi
je 0x4274bb
or ecx, 0xffffffff
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x4274bb
test esi, esi
je 0x4274bb
mov eax, dword [esi]
test eax, eax
je 0x427496
push eax
call edi
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4274ad
push eax
call fcn.00469dd3
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a3d1
mov eax, dword [ebp - 0x64]
add esp, 8
test al, al
je 0x4274ed
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4274d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4274e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x40]
jmp 0x426fba
mov dword [ebp - 0x44], 0
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
test eax, eax
jns 0x427548
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x42751a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x42752b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x42753c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x40]
jmp 0x426fba
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x21
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x44]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x4275b4
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x427575
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x427586
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x427597
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4275a8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x40]
jmp 0x426fba
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x42761f
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4275e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4275f1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x427602
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x427613
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x40]
jmp 0x426fba
mov edx, 1
mov dword [ebp - 0x60], edx
cmp eax, edx
jl 0x427915
nop
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0x2c
lea esi, [ebp - 0x48]
mov eax, dword [ebp - 0x54]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
jns 0x427656
mov byte [ebp - 4], 0x2d
jmp 0x4278d4
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x34]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x427670
mov byte [ebp - 4], 0x2e
jmp 0x4278d4
cmp dword [ebp - 0x34], 0
je 0x42767f
mov byte [ebp - 4], 0x2f
jmp 0x4278d4
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x48]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x4276b9
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x4276b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x32
jmp 0x4278d4
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x58]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x4c], 0
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x58]
test eax, eax
je 0x4276f4
push eax
call fcn.00469dd3
add esp, 4
xor esi, esi
mov byte [ebp - 0x18], 0
test edi, edi
je 0x42770b
cmp word [edi], si
je 0x42770b
inc esi
cmp word [edi + esi*2], 0
jne 0x427703
mov ecx, 2
mov dword [ebp - 0x1c], esi
lea eax, [esi + 1]
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov ecx, eax
add esp, 4
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x20], ecx
test esi, esi
jle 0x427753
mov edx, ecx
sub edi, ecx
mov ecx, esi
nop dword [eax + eax]
mov ax, word [edi + edx]
lea edx, [edx + 2]
mov word [edx - 2], ax
sub ecx, 1
jne 0x427740
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov byte [ebp - 0x18], 1
mov word [ecx + esi*2], ax
mov edi, dword [ebp - 0x4c]
test edi, edi
je 0x427878
cmp word [edi], ax
je 0x427878
inc eax
cmp word [edi + eax*2], 0
jne 0x427771
test eax, eax
je 0x427878
mov byte [ebp - 0x18], 0
test esi, esi
jne 0x42779b
cmp word [ecx], si
je 0x427798
nop
inc esi
cmp word [ecx + esi*2], 0
jne 0x427790
mov dword [ebp - 0x1c], esi
xor eax, eax
nop dword [eax]
lea eax, [eax + 1]
cmp word [eax*2 + 0x49eaf8], 0
jne 0x4277a0
lea ecx, [esi + eax]
xor eax, eax
cmp word [edi + eax*2 + 2], 0
lea eax, [eax + 1]
jne 0x4277b3
lea esi, [ecx + eax]
mov ecx, 2
lea eax, [esi + 1]
mov dword [ebp - 0x68], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0046a3df
mov dword [ebp - 0x64], eax
mov edx, eax
mov eax, dword [ebp - 0x5c]
add esp, 4
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x5c]
test cx, cx
je 0x427811
mov esi, eax
movzx ecx, cx
sub esi, edx
nop
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x427800
mov esi, 0x49eaf8
mov ecx, 0x20
sub esi, edx
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x427820
movzx eax, word [edi]
mov esi, dword [ebp - 0x68]
mov ecx, eax
test ax, ax
je 0x427854
nop
movzx eax, ax
lea edi, [edi + 2]
mov word [edx], ax
add edx, 2
movzx eax, word [edi]
test ax, ax
jne 0x427840
mov edi, dword [ebp - 0x5c]
xor eax, eax
push edi
mov word [edx], ax
call fcn.00469dd3
mov eax, dword [ebp - 0x64]
add esp, 4
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], esi
mov byte [ebp - 0x18], 1
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x427889
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [ebp - 0x4c]
test edi, edi
je 0x427896
push edi
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
test esi, esi
jne 0x4278f3
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x4278a6
mov dword [ebp - 0x1c], eax
jmp 0x4278bf
xor ecx, ecx
cmp word [eax], cx
je 0x4278b8
nop dword [eax]
inc ecx
cmp word [eax + ecx*2], 0
jne 0x4278b0
mov dword [ebp - 0x1c], ecx
test ecx, ecx
jne 0x4278f3
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x4278d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4278e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edx, dword [ebp - 0x60]
inc edx
mov dword [ebp - 0x60], edx
cmp edx, dword [ebp - 0x30]
jle 0x427630
jmp 0x427915
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x427904
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x34
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x427915
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x427926
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x427937
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x427948
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x427959
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x42796a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [ebp - 0x5c]
test edi, edi
je 0x426fc6
cmp word [edi], 0
je 0x426fc6
mov esi, edi
jmp 0x426fd5
push 0x8007000e
call fcn.00469a60
push 0x8007000e
call fcn.00469a60
int3