Function at 0x10cffbc
Capabilities:
Schedule task via itaskservice

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x300
mov eax, dword [0x111127c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
lea esi, [ebp + 0x1c]
lea edi, [ebp - 0x214]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp + 0xc]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 0x10]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp + 0x18]
xor ebx, ebx
mov dword [ebp - 0x218], eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x21c], ebx
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0037
test byte [eax + 0x1c], 0x40
je 0x10d0037
cmp byte [eax + 0x19], 4
jb 0x10d0037
push 0x100fab4
push 0xa
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
cmp dword [ebp + 0x14], ebx
ja 0x10d004d
push 0x100fdac
push 0x71
push 0x100fca4
call fcn.0107b4be
cmp dword [ebp - 0x218], ebx
jne 0x10d0066
push 0x100fd94
push 0x72
push 0x100fca4
call fcn.0107b4be
push 4
pop ecx
mov edi, 0x100cbcc
lea esi, [ebp - 0x214]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x10d008b
push 0x100fd78
push 0x73
push 0x100fca4
call fcn.0107b4be
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x2b0]
push eax
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x248], ebx
mov dword [ebp - 0x254], ebx
call esi
lea eax, [ebp - 0x2a0]
push eax
call esi
push dword [ebp - 0x224]
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x250], ebx
call fcn.010ceec8
lea ecx, [ebp - 0x234]
call fcn.010d9b10
push eax
push 0x1015360
push 1
push ebx
push 0x1015570
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jge 0x10d016a
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0xb
jmp 0x10d0d9b
push dword [ebp - 0x224]
push dword [ebp - 0x234]
call fcn.010ce9a9
mov edi, eax
cmp edi, ebx
jl 0x10d0da6
lea ecx, [ebp - 0x234]
call fcn.010ceb85
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x220]
add esi, 0x24
call fcn.010d9b10
push eax
push ebx
push edi
call dword [esi]
mov edi, eax
cmp edi, ebx
jge 0x10d01de
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0xc
jmp 0x10d0d9b
lea ecx, [ebp - 0x220]
call fcn.010ceb85
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x230]
add esi, 0x1c
call fcn.010d9b10
push eax
push edi
call dword [esi]
mov edi, eax
cmp edi, ebx
jge 0x10d0236
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0xd
jmp 0x10d0d9b
mov esi, dword [sym.imp.msvcrt.dll__wgetenv]
push 0x100fd60
call esi
pop ecx
push eax
lea ecx, [ebp - 0x22c]
call fcn.0105e136
push 1
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x224], 0x5c
call fcn.010571c2
mov edi, eax
cmp edi, ebx
jl 0x10d0da6
push 0x100fd4c
call esi
pop ecx
push eax
lea ecx, [ebp - 0x22c]
call fcn.01057980
mov edi, eax
cmp edi, ebx
jl 0x10d0da6
mov eax, dword [0x111124c]
mov esi, 0x111124c
cmp eax, esi
je 0x10d02c8
test byte [eax + 0x1c], 0x40
je 0x10d02c8
cmp byte [eax + 0x19], 4
jb 0x10d02c8
push dword [ebp - 0x22c]
push 0x100fab4
push 0xe
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
lea ecx, [ebp - 0x230]
call fcn.010ceb85
push dword [ebp - 0x22c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov edi, eax
cmp edi, ebx
jge 0x10d0313
mov eax, dword [0x111124c]
cmp eax, esi
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0xf
jmp 0x10d0d9b
push 0x100fd00
lea ecx, [ebp - 0x27c]
call fcn.010ce94a
mov esi, eax
lea edi, [ebp - 0x290]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x230]
movsd dword es:[edi], dword [esi]
call fcn.010ceb85
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x290]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x58]
mov edi, eax
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.010ce930
cmp edi, ebx
jge 0x10d0399
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x10
jmp 0x10d0d9b
lea ecx, [ebp - 0x220]
call fcn.010ceb85
push dword [ebp - 0x230]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov edi, eax
cmp edi, ebx
jge 0x10d03e7
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x11
jmp 0x10d0d9b
lea ecx, [ebp - 0x220]
call fcn.010ceb85
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x258]
add esi, 0x44
call fcn.010d9b10
push eax
push edi
call dword [esi]
mov edi, eax
cmp edi, ebx
jge 0x10d043f
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x12
jmp 0x10d0d9b
lea ecx, [ebp - 0x258]
call fcn.010ceb85
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x268]
add esi, 0x30
call fcn.010d9b10
push eax
push ebx
push edi
call dword [esi]
mov edi, eax
cmp edi, ebx
jge 0x10d0498
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x13
jmp 0x10d0d9b
lea ecx, [ebp - 0x268]
call fcn.010ceb85
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x23c]
call fcn.010d9b10
push eax
push 0x10154c0
push edi
call dword [esi]
mov edi, eax
cmp edi, ebx
jge 0x10d04f2
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x14
jmp 0x10d0d9b
push 0x100fc20
lea ecx, [ebp - 0x248]
call fcn.0105e136
lea ecx, [ebp - 0x23c]
call fcn.010ceb85
push dword [ebp - 0x248]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
mov edi, eax
cmp edi, ebx
jge 0x10d0550
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x15
jmp 0x10d0d9b
movzx eax, byte [ebp - 0x205]
push eax
movzx eax, byte [ebp - 0x206]
push eax
movzx eax, byte [ebp - 0x207]
push eax
movzx eax, byte [ebp - 0x208]
push eax
movzx eax, byte [ebp - 0x209]
push eax
movzx eax, byte [ebp - 0x20a]
push eax
movzx eax, byte [ebp - 0x20b]
push eax
movzx eax, byte [ebp - 0x20c]
push eax
movzx eax, word [ebp - 0x20e]
push eax
movzx eax, word [ebp - 0x210]
push eax
push dword [ebp - 0x214]
lea eax, [ebp - 0x204]
push 0x100fb78
push 0x100
push eax
call fcn.01025c69
mov edi, eax
add esp, 0x38
cmp edi, ebx
jl 0x10d0da6
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d05fd
test byte [eax + 0x1c], 0x40
je 0x10d05fd
cmp byte [eax + 0x19], 4
jb 0x10d05fd
lea ecx, [ebp - 0x204]
push ecx
mov esi, 0x100fab4
push esi
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
jmp 0x10d0602
mov esi, 0x100fab4
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x254]
call fcn.0105e136
lea ecx, [ebp - 0x23c]
call fcn.010ceb85
push dword [ebp - 0x254]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x34]
mov edi, eax
cmp edi, ebx
jge 0x10d065e
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x17
jmp 0x10d0d9b
push dword [ebp + 0x14]
push dword [ebp - 0x218]
push dword [ebp - 0x220]
call fcn.010cfd2c
mov edi, eax
cmp edi, ebx
jl 0x10d0da6
lea ecx, [ebp - 0x220]
call fcn.010ceb85
mov edi, dword [eax]
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x218], eax
add edi, 0x3c
call fcn.010d9b10
push eax
push dword [ebp - 0x218]
call dword [edi]
mov edi, eax
cmp edi, ebx
jge 0x10d06d9
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x18
jmp 0x10d0d9b
lea ecx, [ebp - 0x24c]
call fcn.010ceb85
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x10d071f
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x19
jmp 0x10d0d9b
lea ecx, [ebp - 0x220]
call fcn.010ceb85
mov edi, dword [eax]
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x218], eax
add edi, 0x2c
call fcn.010d9b10
push eax
push dword [ebp - 0x218]
call dword [edi]
mov edi, eax
cmp edi, ebx
jge 0x10d077c
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x1a
jmp 0x10d0d9b
lea ecx, [ebp - 0x228]
call fcn.010ceb85
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x20]
mov edi, eax
cmp edi, ebx
jge 0x10d07c1
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x1b
jmp 0x10d0d9b
lea ecx, [ebp - 0x228]
call fcn.010ceb85
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x40]
mov edi, eax
cmp edi, ebx
jge 0x10d0806
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x1c
jmp 0x10d0d9b
lea ecx, [ebp - 0x228]
call fcn.010ceb85
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x10d084c
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x1d
jmp 0x10d0d9b
lea ecx, [ebp - 0x228]
call fcn.010ceb85
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x58]
mov edi, eax
cmp edi, ebx
jge 0x10d0892
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x1e
jmp 0x10d0d9b
lea ecx, [ebp - 0x228]
call fcn.010ceb85
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x38]
mov edi, eax
cmp edi, ebx
jge 0x10d08d7
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x1f
jmp 0x10d0d9b
lea ecx, [ebp - 0x228]
call fcn.010ceb85
mov edi, dword [eax]
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x218], eax
add edi, 0x9c
call fcn.010d9b10
push eax
push dword [ebp - 0x218]
call dword [edi]
mov edi, eax
cmp edi, ebx
jge 0x10d0937
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x20
jmp 0x10d0d9b
lea ecx, [ebp - 0x250]
call fcn.010ceb85
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x30]
mov edi, eax
cmp edi, ebx
jge 0x10d097c
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x21
jmp 0x10d0d9b
push 0x100fb50
lea ecx, [ebp - 0x264]
call fcn.0105e136
lea ecx, [ebp - 0x234]
call fcn.010ceb85
mov edi, dword [eax]
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x218], eax
call fcn.010d9b10
push eax
push dword [ebp - 0x264]
push dword [ebp - 0x218]
call dword [edi + 0x1c]
mov edi, eax
cmp edi, ebx
jge 0x10d09ed
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push esi
push 0x22
jmp 0x10d0d9b
lea ecx, [ebp - 0x240]
call fcn.010ceb85
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x244]
add esi, 0x24
call fcn.010d9b10
push eax
push 0x100fb40
push edi
call dword [esi]
mov edi, eax
cmp edi, ebx
jge 0x10d0b2e
cmp edi, 0x80070002
je 0x10d0a5e
cmp edi, 0x80070003
je 0x10d0a5e
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x25
jmp 0x10d0d9b
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0a88
test byte [eax + 0x1c], 0x40
je 0x10d0a88
cmp byte [eax + 0x19], 4
jb 0x10d0a88
push 0x100fab4
push 0x23
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
push 0x100fd00
lea ecx, [ebp - 0x290]
call fcn.010ce94a
mov esi, eax
lea edi, [ebp - 0x27c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x240]
movsd dword es:[edi], dword [esi]
call fcn.010ceb85
mov ebx, dword [eax]
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x218], eax
add ebx, 0x2c
call fcn.010d9b10
push eax
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x27c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x100fb40
push dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
call dword [ebx]
mov edi, eax
lea eax, [ebp - 0x290]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.010ce930
test edi, edi
jge 0x10d0b2c
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x24
jmp 0x10d0d9b
xor ebx, ebx
push 0x100fb00
lea ecx, [ebp - 0x25c]
call fcn.0105e136
mov esi, dword [ebp - 0x260]
cmp esi, ebx
je 0x10d0b73
push esi
lea ecx, [ebp - 0x27c]
call fcn.010ce94a
push eax
lea ecx, [ebp - 0x2b0]
call fcn.010ce985
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.010ce930
cmp dword [ebp - 0x238], ebx
je 0x10d0bc8
push dword [ebp - 0x238]
lea ecx, [ebp - 0x27c]
call fcn.010ce94a
push eax
lea ecx, [ebp - 0x2a0]
call fcn.010ce985
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.010ce930
push dword [ebp - 0x238]
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x21c], 1
call fcn.010ce94a
jmp 0x10d0be5
lea eax, [ebp - 0x290]
push eax
mov dword [ebp - 0x21c], 2
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x290]
mov dword [ebp - 0x218], eax
cmp esi, ebx
je 0x10d0bff
or dword [ebp - 0x21c], 4
push esi
lea ecx, [ebp - 0x2d0]
jmp 0x10d0c11
or dword [ebp - 0x21c], 8
push 0x100fcd4
lea ecx, [ebp - 0x2c0]
call fcn.010ce94a
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0x214]
lea edi, [ebp - 0x27c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x218]
lea edi, [ebp - 0x2f0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x224]
lea edi, [ebp - 0x300]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x244]
movsd dword es:[edi], dword [esi]
call fcn.010ceb85
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x224], eax
mov eax, dword [eax]
mov dword [ebp - 0x218], ecx
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x280], eax
call fcn.010d9b10
push eax
sub esp, 0x10
mov edi, esp
xor eax, eax
cmp dword [ebp - 0x260], ebx
lea esi, [ebp - 0x27c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sete al
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x2f0]
lea eax, [eax*4 + 1]
push eax
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x280]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x300]
movsd dword es:[edi], dword [esi]
push 2
push dword [ebp - 0x218]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x25c]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x224]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x44]
mov edi, eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.010ce930
test byte [ebp - 0x21c], 8
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
je 0x10d0d21
and dword [ebp - 0x21c], 0xfffffff7
lea eax, [ebp - 0x2c0]
push eax
call esi
push eax
call fcn.010ce930
test byte [ebp - 0x21c], 4
je 0x10d0d40
and dword [ebp - 0x21c], 0xfffffffb
lea eax, [ebp - 0x2d0]
push eax
call esi
push eax
call fcn.010ce930
test byte [ebp - 0x21c], 2
je 0x10d0d5f
and dword [ebp - 0x21c], 0xfffffffd
lea eax, [ebp - 0x290]
push eax
call esi
push eax
call fcn.010ce930
test byte [ebp - 0x21c], 1
je 0x10d0d77
lea eax, [ebp - 0x2e0]
push eax
call esi
push eax
call fcn.010ce930
cmp edi, ebx
jge 0x10d0da6
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0dab
test byte [eax + 0x1c], 0x40
je 0x10d0dab
cmp byte [eax + 0x19], 2
jb 0x10d0dab
push edi
push 0x100fab4
push 0x26
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
mov eax, dword [0x111124c]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor ebx, ebx
cmp dword [ebp - 0x260], ebx
je 0x10d0dcf
lea eax, [ebp - 0x2b0]
push eax
call esi
push eax
call fcn.010ce930
mov eax, dword [0x111124c]
cmp dword [ebp - 0x238], ebx
je 0x10d0deb
lea eax, [ebp - 0x2a0]
push eax
call esi
push eax
call fcn.010ce930
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10d0e10
test byte [eax + 0x1c], 0x40
je 0x10d0e10
cmp byte [eax + 0x19], 4
jb 0x10d0e10
push 0x100fab4
push 0x27
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
mov eax, dword [ebp - 0x250]
cmp eax, ebx
je 0x10d0e20
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x228]
cmp eax, ebx
je 0x10d0e30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24c]
cmp eax, ebx
je 0x10d0e40
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x26c]
cmp eax, ebx
je 0x10d0e50
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x244]
cmp eax, ebx
je 0x10d0e60
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x240]
cmp eax, ebx
je 0x10d0e70
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x23c]
cmp eax, ebx
je 0x10d0e80
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x268]
cmp eax, ebx
je 0x10d0e90
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x258]
cmp eax, ebx
je 0x10d0ea0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x230]
cmp eax, ebx
je 0x10d0eb0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x220]
cmp eax, ebx
je 0x10d0ec0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x234]
cmp eax, ebx
je 0x10d0ed0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x2a0]
push eax
call esi
push eax
call fcn.010ce930
lea eax, [ebp - 0x2b0]
push eax
call esi
push eax
call fcn.010ce930
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ebx
call esi
push dword [ebp - 0x254]
call esi
push dword [ebp - 0x248]
call esi
push dword [ebp - 0x264]
call esi
push dword [ebp - 0x22c]
call esi
push dword [ebp - 0x25c]
call esi
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0106f5f8
leave
ret 0x24