Function at 0x43bd26
Capabilities:
Schedule task via itaskservice

Disassembly:
push 8
push 0xb80
mov eax, 0x4fd32b
call fcn.00498c6b
xor esi, esi
mov dword [ebp - 0xa20], esi
lea eax, [ebp - 0xa20]
mov dword [ebp - 4], esi
push eax
push 0x52e1c8
push 0x17
push esi
push 0x52f8a8
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
test eax, eax
js 0x43d33d
jmp 0x43bddf
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xa18], eax
push 0x10
push esi
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x9f4], eax
lea eax, [ebp - 0xa80]
push eax
call fcn.004a1820
add esp, 0xc
lea eax, [ebp - 0xa80]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0xa80]
lea edi, [ebp - 0x78]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xa70]
push 0x10
push 0
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004a1820
add esp, 0xc
lea eax, [ebp - 0xa70]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0xa70]
lea edi, [ebp - 0x60]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xa60]
push 0x10
push 0
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004a1820
add esp, 0xc
lea eax, [ebp - 0xa60]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0xa60]
lea edi, [ebp - 0x30]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xa10]
push 0x10
push 0
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004a1820
add esp, 0xc
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 0x10
mov byte [ebp - 4], 6
mov edi, esp
lea esi, [ebp - 0x78]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x60]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x30]
mov edi, esp
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0xa10]
push dword [ebp - 0xa18]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ebp - 0x9f4]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0xa10]
push eax
call edi
lea eax, [ebp - 0xa60]
push eax
call edi
lea eax, [ebp - 0xa70]
push eax
call edi
lea eax, [ebp - 0xa80]
push eax
call edi
test esi, esi
jns 0x43bfa5
push 0x79
push 0x52e090
push esi
push 6
lea ecx, [ebp - 0x9f0]
mov byte [ebp - 4], 7
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x9f0]
jmp 0x43d361
and dword [ebp - 0xa30], 0
mov esi, dword [ebp - 0xa20]
lea ecx, [ebp - 0x9f4]
push 0x52e058
mov byte [ebp - 4], 9
mov eax, dword [esi]
mov edi, dword [eax + 0x1c]
call fcn.0043b4bb
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0xa
push ecx
push dword [eax]
push esi
call edi
push dword [ebp - 0x9f4]
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jns 0x43c083
push 0x7e
push 0x52e090
push esi
push 6
lea ecx, [ebp - 0x988]
mov byte [ebp - 4], 0xb
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x988]
jmp 0x43d361
xor esi, esi
mov dword [ebp - 0xa14], esi
mov eax, dword [ebp - 0xa20]
lea edx, [ebp - 0xa14]
push edx
push esi
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0xd
call dword [ecx + 0x24]
test eax, eax
jns 0x43c143
push 0x83
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0xe
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x920]
jmp 0x43d361
mov dword [ebp - 0xa38], esi
mov eax, dword [ebp - 0xa14]
lea edx, [ebp - 0xa38]
push edx
push eax
mov byte [ebp - 4], 0x10
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x43c200
push 0x88
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x11
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x8b8]
jmp 0x43d361
lea eax, [ebp - 0x68]
push 2
push eax
call fcn.0047f5be
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.0043ae0e
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x14
jb 0x43c226
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xa18]
call fcn.0043b4bb
lea ecx, [ebp - 0x38]
call fcn.0040dc64
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x17
call fcn.0040dc3e
mov eax, dword [ebp - 0xa38]
push dword [ebp - 0xa18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
jns 0x43c303
push 0x8e
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x850]
mov byte [ebp - 4], 0x18
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x850]
jmp 0x43d361
mov dword [ebp - 0xa48], esi
mov eax, dword [ebp - 0xa14]
lea edx, [ebp - 0xa48]
push edx
push eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jns 0x43c3c0
push 0x93
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 0x1b
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x7e8]
jmp 0x43d361
mov dword [ebp - 0xa28], esi
mov eax, dword [ebp - 0xa14]
lea edx, [ebp - 0xa28]
push edx
push eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
jns 0x43c47d
push 0x98
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0x1e
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x780]
jmp 0x43d361
mov eax, dword [ebp - 0xa28]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jns 0x43c52b
push 0x9c
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 0x20
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x718]
jmp 0x43d361
mov dword [ebp - 0xa50], esi
mov eax, dword [ebp - 0xa28]
lea edx, [ebp - 0xa50]
push edx
push eax
mov byte [ebp - 4], 0x22
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
jns 0x43c5eb
push 0xa1
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x6b0]
mov byte [ebp - 4], 0x23
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x6b0]
jmp 0x43d361
mov dword [ebp - 0xa3c], esi
mov eax, dword [ebp - 0xa14]
lea edx, [ebp - 0xa3c]
push edx
push eax
mov byte [ebp - 4], 0x25
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jns 0x43c6a8
push 0xa6
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x26
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x648]
jmp 0x43d361
mov dword [ebp - 0xa44], esi
mov eax, dword [ebp - 0xa3c]
lea edx, [ebp - 0xa44]
push edx
push 1
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x28
call dword [ecx + 0x28]
test eax, eax
jns 0x43c767
push 0xab
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x5e0]
mov byte [ebp - 4], 0x29
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x5e0]
jmp 0x43d361
mov dword [ebp - 0xa1c], esi
mov eax, dword [ebp - 0xa44]
lea edx, [ebp - 0xa1c]
push edx
push 0x52f898
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x2b
call dword [ecx]
test eax, eax
jns 0x43c828
push 0xb0
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x2c
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x578]
jmp 0x43d361
mov esi, dword [ebp - 0xa1c]
lea ecx, [ebp - 0x9f4]
push str.AvastBrowserProtectTrigger
mov eax, dword [esi]
mov edi, dword [eax + 0x24]
call fcn.0043b4bb
push dword [eax]
mov byte [ebp - 4], 0x2e
push esi
call edi
push dword [ebp - 0x9f4]
mov esi, eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jns 0x43c8fe
push 0xb4
push 0x52e090
push esi
push 6
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x2f
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x510]
jmp 0x43d361
mov esi, dword [ebp - 0xa1c]
mov eax, dword [esi]
mov edi, dword [eax + 0x3c]
lea eax, [ebp - 0x9f4]
push eax
call fcn.0043d368
pop ecx
push dword [eax]
mov byte [ebp - 4], 0x31
push esi
call edi
push dword [ebp - 0x9f4]
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jns 0x43c9cd
push 0xb8
push 0x52e090
push esi
push 6
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x32
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x2a0]
jmp 0x43d361
xor edi, edi
mov dword [ebp - 0xa40], edi
mov eax, dword [ebp - 0xa1c]
lea edx, [ebp - 0xa40]
push edx
push eax
mov byte [ebp - 4], 0x34
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
jns 0x43ca8c
push 0xbd
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 0x35
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x4a8]
jmp 0x43d361
mov esi, dword [ebp - 0xa40]
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x9f4], eax
call fcn.00429305
cmp dword [eax + 0x14], 0x10
jb 0x43caaa
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x9fc]
call fcn.0043b486
push dword [eax]
mov byte [ebp - 4], 0x37
push esi
call dword [ebp - 0x9f4]
push dword [ebp - 0x9fc]
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jns 0x43cb71
push 0xc1
push 0x52e090
push esi
push 6
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x38
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x440]
jmp 0x43d361
mov dword [ebp - 0xa34], edi
mov eax, dword [ebp - 0xa14]
lea edx, [ebp - 0xa34]
push edx
push eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x43cc2e
push 0xc6
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x3d8]
mov byte [ebp - 4], 0x3b
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x3d8]
jmp 0x43d361
mov dword [ebp - 0xa2c], edi
mov eax, dword [ebp - 0xa34]
lea edx, [ebp - 0xa2c]
push edx
push edi
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x3d
call dword [ecx + 0x30]
test eax, eax
jns 0x43ccec
push 0xcb
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x3e
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x370]
jmp 0x43d361
mov dword [ebp - 0xa24], edi
mov eax, dword [ebp - 0xa2c]
lea edx, [ebp - 0xa24]
push edx
push 0x52f8e8
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x40
call dword [ecx]
test eax, eax
jns 0x43cdad
push 0xd0
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x41
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x308]
jmp 0x43d361
push edi
lea eax, [ebp - 0x98]
push edi
push eax
call fcn.00492c76
add esp, 0xc
mov esi, dword [ebp - 0xa24]
lea ecx, [ebp - 0x9fc]
cmp dword [ebp - 0x84], 8
mov byte [ebp - 4], 0x43
mov eax, dword [esi]
mov edi, dword [eax + 0x2c]
lea eax, [ebp - 0x98]
cmovae eax, dword [ebp - 0x98]
push eax
call fcn.0043b4bb
push dword [eax]
mov byte [ebp - 4], 0x44
push esi
call edi
push dword [ebp - 0x9fc]
mov esi, eax
mov byte [ebp - 4], 0x43
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jns 0x43cea8
push 0xd5
push 0x52e090
push esi
push 6
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x45
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x238]
jmp 0x43d361
push 1
lea ecx, [ebp - 0xb90]
call fcn.00430fc6
mov byte [ebp - 4], 0x47
call fcn.004292aa
test al, al
je 0x43ced5
lea eax, [ebp - 0xb80]
push str.__runonce
push eax
call fcn.00427217
pop ecx
pop ecx
call fcn.004290cc
test al, al
je 0x43cef1
lea eax, [ebp - 0xb80]
push str.___force
push eax
call fcn.00427217
pop ecx
pop ecx
call fcn.00429071
test al, al
je 0x43cf0d
lea eax, [ebp - 0xb80]
push str.___dev
push eax
call fcn.00427217
pop ecx
pop ecx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb78]
call fcn.0042a4d9
cmp dword [ebp - 0x40], 0
mov byte [ebp - 4], 0x48
je 0x43d003
mov esi, dword [ebp - 0xa24]
lea ecx, [ebp - 0x9fc]
cmp dword [ebp - 0x3c], 8
mov eax, dword [esi]
mov edi, dword [eax + 0x34]
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
push eax
call fcn.0043b4bb
push dword [eax]
mov byte [ebp - 4], 0x49
push esi
call edi
push dword [ebp - 0x9fc]
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jns 0x43d003
push 0xed
push 0x52e090
push esi
push 6
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x4a
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x1d0]
jmp 0x43d361
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa30]
lea ecx, [ebp - 0xa60]
mov dword [ebp - 0x9f4], eax
push 0x52ce20
mov byte [ebp - 4], 0x4e
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xa04], eax
xor eax, eax
mov word [ebp - 0xa60], ax
call fcn.0043b9d0
lea esi, [ebp - 0xa60]
lea edi, [ebp - 0x30]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xa70]
push 0x10
push 0
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004a1820
add esp, 0xc
lea eax, [ebp - 0xa70]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea esi, [ebp - 0xa70]
mov byte [ebp - 4], 0x50
lea edi, [ebp - 0x60]
xor eax, eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xa80]
mov word [ebp - 0xa80], ax
lea eax, [ebp - 0xa18]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0043b98c
mov eax, dword [ebp - 0xa14]
lea esi, [ebp - 0xa80]
lea edi, [ebp - 0x78]
mov dword [ebp - 0x9fc], eax
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x9f8]
push eax
mov byte [ebp - 4], 0x51
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0043d584
pop ecx
lea ecx, [ebp - 0xa4c]
mov byte [ebp - 4], 0x52
push ecx
sub esp, 0x10
lea esi, [ebp - 0x30]
mov edi, esp
push 3
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x60]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x78]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 6
push dword [ebp - 0x9fc]
movsd dword es:[edi], dword [esi]
push dword [eax]
push dword [ebp - 0x9f4]
movsd dword es:[edi], dword [esi]
call dword [ebp - 0xa04]
push dword [ebp - 0x9f8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, eax
call esi
lea eax, [ebp - 0xa80]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xa70]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0xa60]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test edi, edi
jns 0x43d1df
push 0xfe
push 0x52e090
push edi
push 6
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x53
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x168]
jmp 0x43d361
mov eax, dword [ebp - 0xa4c]
mov byte [ebp - 4], 0x55
test eax, eax
je 0x43d1f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x50]
call fcn.0040dc64
lea ecx, [ebp - 0xb90]
call fcn.00431851
lea ecx, [ebp - 0x98]
call fcn.0040dc64
mov eax, dword [ebp - 0xa24]
mov byte [ebp - 4], 0x56
test eax, eax
je 0x43d225
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa2c]
mov byte [ebp - 4], 0x57
test eax, eax
je 0x43d239
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa34]
mov byte [ebp - 4], 0x58
test eax, eax
je 0x43d24d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa40]
mov byte [ebp - 4], 0x59
test eax, eax
je 0x43d261
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa1c]
mov byte [ebp - 4], 0x5a
test eax, eax
je 0x43d275
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa44]
mov byte [ebp - 4], 0x5b
test eax, eax
je 0x43d289
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa3c]
mov byte [ebp - 4], 0x5c
test eax, eax
je 0x43d29d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa50]
mov byte [ebp - 4], 0x5d
test eax, eax
je 0x43d2b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa28]
mov byte [ebp - 4], 0x5e
test eax, eax
je 0x43d2c5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa48]
mov byte [ebp - 4], 0x5f
test eax, eax
je 0x43d2d9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0xa18]
call esi
mov eax, dword [ebp - 0xa38]
mov byte [ebp - 4], 0x60
test eax, eax
je 0x43d2f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa14]
mov byte [ebp - 4], 0x61
test eax, eax
je 0x43d309
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa30]
mov byte [ebp - 4], 0x62
test eax, eax
je 0x43d31d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 4], 0x63
test eax, eax
je 0x43d334
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x1c]
call fcn.00498b7a
ret
push 0x70
push 0x52e090
push eax
push 6
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 1
call fcn.00417422
push 0x5519c4
lea eax, [ebp - 0x100]
push eax
call fcn.004a1a51
int3