Function at 0x4acd60
Capabilities:
Parse pe header
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50be26
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x100
mov eax, dword [0x567e00]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0x10]
mov dword [esi], 0
cmp dword [ecx + 0x14], 8
mov dword [ebp - 0x70], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0xd8], esi
mov esi, ecx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0x78], eax
jb 0x4acdd9
mov esi, dword [ecx]
mov dword [ecx + 0x10], 0
xor ecx, ecx
mov word [esi], cx
mov ecx, edx
cmp dword [edx + 0x14], 8
jb 0x4acdef
mov ecx, dword [edx]
mov dword [edx + 0x10], 0
xor edx, edx
mov word [ecx], dx
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4ace05
mov ecx, dword [eax]
mov dword [eax + 0x10], edx
xor eax, eax
mov word [ecx], ax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x3c]
push eax
push 0x533fb4
push 1
push 0
push 0x535aa0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
jns 0x4ace4e
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 4], 2
test ecx, ecx
je 0x4adc02
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
jmp 0x4adc02
mov esi, dword [ebp - 0x3c]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x30]
push eax
call edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x110]
push eax
call edi
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0x100]
push eax
call edi
mov eax, dword [ebp - 0xfc]
mov edi, dword [ebp - 0x100]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xf0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, dword [ebp - 0x90]
sub esp, 0x10
mov eax, esp
mov byte [ebp - 4], 6
sub esp, 0x10
mov dword [eax], ecx
mov ecx, dword [ebp - 0x94]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xa0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [eax + 0xc], ecx
mov eax, esp
mov ecx, dword [ebp - 0xe0]
sub esp, 0x10
mov dword [eax], ecx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xb0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xb4]
mov dword [eax + 0xc], ecx
mov eax, esp
mov ecx, dword [ebp - 0xb8]
sub esp, 0x10
mov dword [eax], edi
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xc0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xc4]
mov dword [eax + 0xc], ecx
mov ecx, esp
mov eax, dword [ebp - 0xf0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xec]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xe8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xe4]
push esi
mov dword [ecx + 0xc], eax
call dword [ebp - 0x74]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, eax
lea eax, [ebp - 0xf0]
push eax
call esi
lea eax, [ebp - 0x100]
push eax
call esi
lea eax, [ebp - 0x110]
push eax
call esi
lea eax, [ebp - 0x30]
push eax
call esi
test edi, edi
jns 0x4acfec
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 4], 7
test ecx, ecx
je 0x4acfe5
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov eax, edi
jmp 0x4adc04
mov dword [ebp - 0x44], 0
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x74]
push 0x516d0c
mov byte [ebp - 4], 8
mov eax, dword [esi]
mov edi, dword [eax + 0x1c]
call fcn.004ab2f0
mov eax, dword [eax]
mov byte [ebp - 4], 9
test eax, eax
je 0x4ad01a
mov eax, dword [eax]
jmp 0x4ad01c
xor eax, eax
lea ecx, [ebp - 0x44]
push ecx
push eax
push esi
call edi
lea ecx, [ebp - 0x74]
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4ad060
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x4ad043
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x4adc02
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
jmp 0x4adc02
mov dword [ebp - 0x40], 0
mov esi, dword [ebp - 0x44]
push dword [ebp - 0x70]
mov byte [ebp - 4], 0xc
mov eax, dword [esi]
mov edi, dword [eax + 0x34]
lea eax, [ebp - 0x70]
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x4ad090
mov eax, dword [eax]
jmp 0x4ad092
xor eax, eax
lea ecx, [ebp - 0x40]
push ecx
push eax
push esi
call edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xc
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4ad0da
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x4ad0bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x4ad0ce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x10
jmp 0x4ad04a
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x80]
mov dword [ebp - 0x80], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
jns 0x4ad122
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x11
test eax, eax
je 0x4ad105
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x12
test eax, eax
je 0x4ad116
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x13
jmp 0x4ad04a
mov eax, dword [ebp - 0x80]
cmp eax, 1
je 0x4ad132
mov byte [ebp - 0x55], 1
test eax, eax
jne 0x4ad136
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x48]
push edx
push eax
mov byte [ebp - 4], 0x14
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov esi, eax
test esi, esi
jns 0x4ad193
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x15
test eax, eax
je 0x4ad165
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x16
test eax, eax
je 0x4ad176
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x17
test eax, eax
je 0x4ad187
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x18
jmp 0x4ad04a
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x4c]
push edx
push eax
mov byte [ebp - 4], 0x19
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
jns 0x4ad201
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x4ad1c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x1b
test eax, eax
je 0x4ad1d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x4ad1e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x4ad1f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1e
jmp 0x4ad04a
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x84]
mov dword [ebp - 0x84], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
cmp dword [ebp - 0x84], 0
jne 0x4ad274
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x1f
test eax, eax
je 0x4ad235
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x20
test eax, eax
je 0x4ad246
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x21
test eax, eax
je 0x4ad257
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x22
test eax, eax
je 0x4ad268
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x23
jmp 0x4ad787
mov dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x50]
push edx
push 1
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x24
call dword [ecx + 0x20]
mov esi, eax
test esi, esi
jns 0x4ad2f5
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x25
test eax, eax
je 0x4ad2a5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x26
test eax, eax
je 0x4ad2b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x27
test eax, eax
je 0x4ad2c7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x28
test eax, eax
je 0x4ad2d8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x29
test eax, eax
je 0x4ad2e9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x2a
jmp 0x4ad04a
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x88]
mov dword [ebp - 0x88], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov esi, eax
test esi, esi
jns 0x4ad376
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x4ad326
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x2c
test eax, eax
je 0x4ad337
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x2d
test eax, eax
je 0x4ad348
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x4ad359
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x4ad36a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x30
jmp 0x4ad04a
cmp word [ebp - 0x88], 0xffff
mov dword [ebp - 0x54], 0
sete byte [ebp - 0x5d]
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x54]
push edx
push eax
mov byte [ebp - 4], 0x31
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jns 0x4ad412
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x32
test eax, eax
je 0x4ad3b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x33
test eax, eax
je 0x4ad3c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x34
test eax, eax
je 0x4ad3d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x35
test eax, eax
je 0x4ad3e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x36
test eax, eax
je 0x4ad3f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x37
test eax, eax
je 0x4ad406
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x38
jmp 0x4ad04a
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0xc8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
jns 0x4ad49a
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x39
test eax, eax
je 0x4ad439
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x3a
test eax, eax
je 0x4ad44a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x3b
test eax, eax
je 0x4ad45b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x3c
test eax, eax
je 0x4ad46c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x3d
test eax, eax
je 0x4ad47d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x3e
test eax, eax
je 0x4ad48e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x3f
jmp 0x4ad04a
mov eax, dword [ebp - 0xc8]
test eax, eax
jne 0x4ad516
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x40
test eax, eax
je 0x4ad4b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x41
test eax, eax
je 0x4ad4c6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x42
test eax, eax
je 0x4ad4d7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x43
test eax, eax
je 0x4ad4e8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x44
test eax, eax
je 0x4ad4f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x45
test eax, eax
je 0x4ad50a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x46
jmp 0x4ad787
push eax
lea ecx, [ebp - 0x70]
call fcn.004ab2f0
mov eax, dword [eax]
mov byte [ebp - 4], 0x47
test eax, eax
je 0x4ad52d
mov eax, dword [eax]
jmp 0x4ad52f
xor eax, eax
mov esi, dword [ebp - 0x78]
mov ecx, esi
push eax
call fcn.00423d40
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x31
call fcn.004ab620
push 0xffffffffffffffff
push 0x5c
mov ecx, esi
call fcn.004b2740
cmp eax, 0xffffffff
jne 0x4ad55a
xor eax, eax
jmp 0x4ad566
push 0xffffffffffffffff
push 0x5c
mov ecx, esi
call fcn.004b2740
inc eax
push dword [esi + 0x10]
mov ecx, esi
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0041c230
push eax
mov ecx, esi
call fcn.00405690
mov edx, dword [ebp - 0x24]
cmp edx, 8
jb 0x4ad5b9
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4ad5af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4ad5af
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x5c]
push edx
push eax
mov byte [ebp - 4], 0x48
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov esi, eax
test esi, esi
jns 0x4ad65e
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x49
test eax, eax
je 0x4ad5ec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x4a
test eax, eax
je 0x4ad5fd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x4b
test eax, eax
je 0x4ad60e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x4c
test eax, eax
je 0x4ad61f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x4d
test eax, eax
je 0x4ad630
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x4e
test eax, eax
je 0x4ad641
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x4f
test eax, eax
je 0x4ad652
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x50
jmp 0x4ad04a
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jns 0x4ad6ff
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x51
test eax, eax
je 0x4ad68d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x52
test eax, eax
je 0x4ad69e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x53
test eax, eax
je 0x4ad6af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x54
test eax, eax
je 0x4ad6c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x55
test eax, eax
je 0x4ad6d1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x56
test eax, eax
je 0x4ad6e2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x57
test eax, eax
je 0x4ad6f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x58
jmp 0x4ad04a
cmp dword [ebp - 0x6c], 0
jne 0x4ad79e
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x59
test eax, eax
je 0x4ad71a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x5a
test eax, eax
je 0x4ad72b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x5b
test eax, eax
je 0x4ad73c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x5c
test eax, eax
je 0x4ad74d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x5d
test eax, eax
je 0x4ad75e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x5e
test eax, eax
je 0x4ad76f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x5f
test eax, eax
je 0x4ad780
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x60
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4ad794
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, 0x80004005
jmp 0x4adc04
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x68]
push edx
push 1
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x61
call dword [ecx + 0x20]
mov esi, eax
test esi, esi
jns 0x4ad856
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0x62
test eax, eax
je 0x4ad7d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x63
test eax, eax
je 0x4ad7e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x64
test eax, eax
je 0x4ad7f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x65
test eax, eax
je 0x4ad806
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x66
test eax, eax
je 0x4ad817
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x67
test eax, eax
je 0x4ad828
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x68
test eax, eax
je 0x4ad839
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x69
test eax, eax
je 0x4ad84a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x6a
jmp 0x4ad04a
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x6c
call dword [ecx]
mov esi, eax
mov byte [ebp - 4], 0x6b
test esi, esi
jns 0x4ad925
mov ecx, dword [ebp - 0x64]
mov byte [ebp - 4], 0x6d
test ecx, ecx
je 0x4ad891
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0x6e
test eax, eax
je 0x4ad8a2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x6f
test eax, eax
je 0x4ad8b3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x70
test eax, eax
je 0x4ad8c4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x71
test eax, eax
je 0x4ad8d5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x72
test eax, eax
je 0x4ad8e6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x73
test eax, eax
je 0x4ad8f7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x74
test eax, eax
je 0x4ad908
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x75
test eax, eax
je 0x4ad919
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x76
jmp 0x4adbf5
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0xcc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4ad9e4
mov eax, dword [ebp - 0x64]
mov byte [ebp - 4], 0x77
test eax, eax
je 0x4ad950
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0x78
test eax, eax
je 0x4ad961
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x79
test eax, eax
je 0x4ad972
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x7a
test eax, eax
je 0x4ad983
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x7b
test eax, eax
je 0x4ad994
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x7c
test eax, eax
je 0x4ad9a5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x7d
test eax, eax
je 0x4ad9b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x7e
test eax, eax
je 0x4ad9c7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x7f
test eax, eax
je 0x4ad9d8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x80
jmp 0x4ad04a
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0xd0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov esi, eax
test esi, esi
jns 0x4adaa3
mov eax, dword [ebp - 0x64]
mov byte [ebp - 4], 0x81
test eax, eax
je 0x4ada0f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0x82
test eax, eax
je 0x4ada20
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x83
test eax, eax
je 0x4ada31
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x84
test eax, eax
je 0x4ada42
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x85
test eax, eax
je 0x4ada53
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x86
test eax, eax
je 0x4ada64
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x87
test eax, eax
je 0x4ada75
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x88
test eax, eax
je 0x4ada86
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x89
test eax, eax
je 0x4ada97
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x8a
jmp 0x4ad04a
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4adadb
push eax
lea ecx, [ebp - 0x78]
call fcn.004ab2f0
mov eax, dword [eax]
mov byte [ebp - 4], 0x8b
test eax, eax
je 0x4adac4
mov eax, dword [eax]
jmp 0x4adac6
xor eax, eax
mov ecx, dword [ebp - 0x7c]
push eax
call fcn.00423d40
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x6b
call fcn.004ab620
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4adb12
push eax
lea ecx, [ebp - 0x7c]
call fcn.004ab2f0
mov eax, dword [eax]
mov byte [ebp - 4], 0x8c
test eax, eax
je 0x4adafc
mov eax, dword [eax]
jmp 0x4adafe
xor eax, eax
mov ecx, dword [ebp - 0xd4]
push eax
call fcn.00423d40
lea ecx, [ebp - 0x7c]
call fcn.004ab620
cmp byte [ebp - 0x55], 0
je 0x4adb25
cmp byte [ebp - 0x5d], 0
je 0x4adb25
mov eax, 1
jmp 0x4adb27
xor eax, eax
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
mov byte [ebp - 4], 0x8d
test eax, eax
je 0x4adb40
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0x8e
test eax, eax
je 0x4adb51
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x8f
test eax, eax
je 0x4adb62
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x90
test eax, eax
je 0x4adb73
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x91
test eax, eax
je 0x4adb84
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x92
test eax, eax
je 0x4adb95
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x93
test eax, eax
je 0x4adba6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x94
test eax, eax
je 0x4adbb7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x95
test eax, eax
je 0x4adbee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4adbee
mov dword [ebp - 4], 0x97
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4adc02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004c6f8b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14