Function at 0x4a932f
Capabilities:
Delete file

Disassembly:
mov eax, 0x4cca61
call fcn.004c7e20
sub esp, 0x1e4
mov eax, dword [0x4ed384]
push ebx
push esi
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
push edi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x148], ebx
je 0x4aac12
cmp dword [ebp + 0xc], ebx
je 0x4aac12
mov eax, dword [0x4f0980]
mov dword [ebp - 0x138], eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x12c], eax
push dword [ebp + 0x10]
lea edi, [ebp - 0x144]
call fcn.00402f03
mov eax, edi
call fcn.0040a767
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x180], ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x19c]
push eax
call esi
lea eax, [ebp - 0x1d8]
push eax
call esi
cmp dword [ebp + 0x30], ebx
je 0x4a9485
mov eax, dword [ebp + 0x30]
cmp word [eax], bx
je 0x4a9485
push eax
lea edi, [ebp - 0x15c]
call fcn.00402f03
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x19c]
push eax
mov eax, edi
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.004a8c32
mov edi, eax
lea eax, [ebp - 0x138]
call fcn.00402f73
mov eax, dword [ebp - 0x170]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a942e
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x15c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9445
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
cmp dword [eax - 8], ebx
je 0x4a9485
lea eax, [ebp - 0x19c]
call fcn.004a2e12
mov esi, eax
xor eax, eax
call fcn.004a2e12
sub eax, esi
cmp eax, 0x18
jae 0x4a9485
lea edi, [ebp - 0x138]
lea eax, [ebp - 0x144]
call fcn.00402f73
mov eax, dword [ebp - 0x144]
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x140], ebx
push 0x4d4c90
push dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov dword [ebp - 0x15c], ebx
call dword [sym.imp.MSVCRT.dll_wcsstr]
mov edi, eax
pop ecx
neg edi
sbb edi, edi
pop ecx
neg edi
push str.http:__
xor ecx, ecx
lea esi, [ebp - 0x144]
mov dword [ebp - 0x1cc], edi
call fcn.0040a781
xor ecx, ecx
test eax, eax
setge cl
cmp ecx, ebx
mov dword [ebp - 0x174], ecx
je 0x4a94f0
push 0x4d8e0c
xor ecx, ecx
call fcn.0040a781
test eax, eax
mov dword [ebp - 0x164], 1
jg 0x4a94f6
mov dword [ebp - 0x164], ebx
cmp edi, ebx
je 0x4a9509
push 0x2f
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_wcsrchr]
pop ecx
pop ecx
jmp 0x4a950c
mov eax, dword [ebp + 0x10]
push 0x2e
push eax
call dword [sym.imp.MSVCRT.dll_wcsrchr]
cmp edi, ebx
pop ecx
mov esi, eax
pop ecx
mov dword [ebp - 0x16c], esi
je 0x4a96ae
cmp esi, ebx
je 0x4a9538
push dword [ebp + 0x10]
call fcn.004a2e72
test eax, eax
pop ecx
jne 0x4a9543
mov esi, 0x4db27c
mov dword [ebp - 0x16c], esi
cmp esi, ebx
je 0x4a9553
push esi
lea eax, [ebp - 0x12c]
call fcn.00402fb6
push 0x3f
xor ecx, ecx
lea esi, [ebp - 0x12c]
call fcn.00414476
cmp eax, ebx
jle 0x4a9594
lea ecx, [ebp - 0x1b4]
push ecx
mov ecx, esi
call fcn.00408bad
mov edi, eax
mov eax, esi
call fcn.00402f73
mov eax, dword [ebp - 0x1b4]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9594
push eax
call fcn.004013aa
lea eax, [ebp - 0x12c]
call fcn.0040a767
mov eax, dword [ebp - 0x12c]
cmp dword [eax - 8], ebx
je 0x4a95c9
lea eax, [ebp - 0x160]
xor edi, edi
push eax
inc edi
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x160], 0x3b
call fcn.00403377
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x154], ebx
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x154], eax
jge 0x4aab75
cmp dword [ebp + 0x28], ebx
je 0x4a9751
push ebx
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x4a9751
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x4a9622
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], ebx
je 0x4a9640
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
je 0x4a9659
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], ebx
je 0x4a9676
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a968d
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a96a4
push eax
call fcn.004013aa
mov eax, 0x80004004
jmp 0x4aac17
cmp esi, ebx
jne 0x4a9547
push dword [ebp + 0x34]
lea eax, [ebp - 0x140]
push dword [ebp + 0x30]
push 0xea60
push ebx
push dword [ebp + 0x24]
push dword [ebp + 0x14]
push eax
push ebx
push dword [ebp + 0x10]
call fcn.004a9070
mov edi, eax
add esp, 0x24
cmp edi, ebx
jl 0x4a973d
push ebx
push dword [ebp - 0x140]
lea eax, [ebp - 0x190]
push eax
call fcn.004a912e
mov eax, dword [ebp - 0x190]
add esp, 0xc
cmp dword [eax - 8], ebx
je 0x4a9713
lea edi, [ebp - 0x190]
lea eax, [ebp - 0x12c]
call fcn.00402f73
mov eax, dword [ebp - 0x190]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x15c], 1
je 0x4a959f
push eax
call fcn.004013aa
jmp 0x4a959f
mov eax, edi
call fcn.004a5420
test al, al
je 0x4a9553
jmp 0x4aaa3f
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp + 8]
call fcn.004ab7f3
add eax, 0x14
mov eax, dword [eax]
cmp dword [eax - 8], ebx
je 0x4a9792
push dword [ebp - 0x12c]
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp + 8]
call fcn.004ab7f3
mov esi, eax
add esi, 0x14
xor ecx, ecx
call fcn.0040a781
cmp eax, 0xffffffff
je 0x4aab6a
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x13c]
push eax
mov eax, dword [ebp - 0x154]
call fcn.004ab7f3
push eax
call fcn.004ab305
mov esi, dword [ebp - 0x13c]
cmp esi, ebx
je 0x4aa862
mov dword [ebp - 0x124], ebx
lea ecx, [ebp - 0x124]
push ecx
mov byte [ebp - 4], 8
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
cmp eax, ebx
jge 0x4a97f9
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4a97ea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x4aab6a
mov esi, dword [ebp - 0x124]
lea eax, [ebp - 0x134]
push eax
call fcn.004ab1fe
mov esi, dword [ebp - 0x124]
lea eax, [ebp - 0x130]
push eax
call fcn.004ab220
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x130], ebx
je 0x4a9ee2
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x4a9841
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp + 0x2c]
mov eax, dword [ebp - 0x130]
push dword [ebp + 0x28]
mov ecx, dword [eax]
push 0x4f3568
push dword [ebp + 0x14]
mov dword [ebp - 0x140], ebx
push dword [ebp + 0x10]
push eax
call dword [ecx + 0x44]
cmp eax, ebx
mov dword [ebp - 0x128], eax
jge 0x4a9ecb
cmp eax, 0x80040066
jne 0x4a9d03
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
lea edx, [ebp - 0x11c]
push edx
push eax
call dword [ecx + 0x48]
push dword [ebp - 0x11c]
lea edi, [ebp - 0x158]
call fcn.00402f03
cmp dword [ebp - 0x164], ebx
mov byte [ebp - 4], 0xc
je 0x4a98e8
mov eax, dword [ebp - 0x158]
cmp dword [eax - 8], ebx
je 0x4a98e8
lea eax, [ebp - 0x1a4]
push eax
xor eax, eax
inc eax
mov edx, edi
call fcn.0044927b
mov eax, dword [eax]
or dword [ebp - 0x148], 1
push 0x4d5198
push eax
call dword [sym.imp.MSVCRT.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x4a98e8
mov bl, 1
jmp 0x4a98ea
xor bl, bl
test byte [ebp - 0x148], 1
je 0x4a9911
mov eax, dword [ebp - 0x1a4]
and dword [ebp - 0x148], 0xfffffffe
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9911
push eax
call fcn.004013aa
test bl, bl
je 0x4a99d9
mov eax, dword [ebp - 0x158]
mov eax, dword [eax - 8]
lea ecx, [ebp - 0x1d0]
push ecx
push 7
add eax, 0xfffffff8
pop ecx
lea edx, [ebp - 0x158]
call fcn.00403255
mov eax, dword [eax]
lea ecx, [ebp - 0x170]
push 0
push ecx
call fcn.00401754
mov eax, dword [ebp - 0x1d0]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
pop ecx
pop ecx
je 0x4a9963
push eax
call fcn.004013aa
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x170]
call fcn.004b012d
push dword [eax]
or eax, 0xffffffff
lea ecx, [ebp - 0x1bc]
call fcn.00401621
mov eax, dword [eax]
pop ecx
pop ecx
lea esi, [ebp - 0x11c]
call fcn.0040dbc3
mov eax, dword [ebp - 0x1bc]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a99ab
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a99c2
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x170]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a99d9
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
lea edx, [ebp - 0x120]
push edx
push eax
call dword [ecx + 0x4c]
cmp dword [ebp - 0x164], 0
je 0x4a9bb0
mov eax, dword [ebp - 0x120]
test eax, eax
je 0x4a9bb0
cmp word [eax], 0
je 0x4a9bb0
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x198]
push eax
lea edi, [ebp - 0x1b8]
mov dword [ebp - 0x178], ecx
call fcn.00402f03
lea eax, [ebp - 0x18c]
push eax
push ecx
mov eax, esp
mov dword [ebp - 0x194], esp
xor edi, edi
mov byte [ebp - 4], 0xd
mov ebx, dword [ebp - 0x1b8]
push edi
push eax
mov eax, ebx
call fcn.00401754
pop ecx
pop ecx
call fcn.004a8832
mov esi, dword [ebp - 0x138]
cmp dword [esi - 8], edi
je 0x4a9b7a
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1d8]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jl 0x4a9b4e
lea eax, [ebp - 0x1f0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x1f0]
push eax
push edi
push edi
push esi
call fcn.004a522b
add esp, 0x10
or eax, 0xffffffff
lea ecx, [ebp - 0x18c]
call fcn.004a2f01
lea edi, [ebp - 0x138]
lea eax, [ebp - 0x144]
call fcn.00402f73
mov eax, dword [ebp - 0x144]
mov dword [ebp + 0x10], eax
lea eax, [ebx - 0xc]
cmp eax, dword [0x4f0984]
je 0x4a9ae4
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x158]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9afb
push eax
call fcn.004013aa
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
test eax, eax
je 0x4a9b0f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
test eax, eax
je 0x4a9b23
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
test eax, eax
je 0x4a9b37
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor ebx, ebx
jmp 0x4a9485
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea ecx, [ebp - 0x138]
mov esi, esp
mov dword [ebp - 0x194], esp
call fcn.00402eaa
mov ecx, 0x4f3590
call fcn.004b2bfd
xor edi, edi
cmp dword [ebp - 0x188], edi
lea esi, [ebp - 0x11c]
jbe 0x4a9b95
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4a9b9a
mov eax, 0x4d1350
call fcn.0040dbc3
lea eax, [ebx - 0xc]
cmp eax, dword [0x4f0984]
je 0x4a9bb0
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x4a9ccf
cmp word [eax], 0
je 0x4a9ccf
mov ecx, dword [ebp - 0x160]
inc dword [ebp - 0x160]
cmp ecx, 3
jge 0x4a9ccf
push 0x2e
push eax
mov dword [ebp + 0x10], eax
call dword [sym.imp.MSVCRT.dll_wcsrchr]
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x16c], eax
je 0x4a9c01
push eax
lea eax, [ebp - 0x12c]
call fcn.00402fb6
push 0x3f
xor ecx, ecx
lea esi, [ebp - 0x12c]
call fcn.00414476
test eax, eax
jle 0x4a9c42
lea ecx, [ebp - 0x1a0]
push ecx
mov ecx, esi
call fcn.00408bad
mov edi, eax
mov eax, esi
call fcn.00402f73
mov eax, dword [ebp - 0x1a0]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9c42
push eax
call fcn.004013aa
lea eax, [ebp - 0x12c]
call fcn.0040a767
mov eax, dword [ebp - 0x12c]
cmp dword [eax - 8], 0
je 0x4a9c78
lea eax, [ebp - 0x154]
xor edi, edi
push eax
inc edi
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x154], 0x3b
call fcn.00403377
mov eax, dword [ebp - 0x158]
or dword [ebp - 0x154], 0xffffffff
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9c96
push eax
call fcn.004013aa
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
test eax, eax
je 0x4a9caa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
test eax, eax
je 0x4a9cbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
test eax, eax
jmp 0x4a9eaa
mov eax, dword [ebp - 0x158]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9ce6
push eax
call fcn.004013aa
xor edi, edi
cmp dword [ebp - 0x174], edi
je 0x4a9d94
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
jmp 0x4a9db1
cmp dword [ebp - 0x164], ebx
je 0x4a9ce6
mov eax, dword [ebp - 0x138]
cmp dword [eax - 8], 0
je 0x4a9ce6
or eax, 0xffffffff
xor edi, edi
lea ecx, [ebp - 0x18c]
call fcn.004a2f01
lea edi, [ebp - 0x138]
lea eax, [ebp - 0x144]
call fcn.00402f73
mov eax, dword [ebp - 0x144]
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
xor ebx, ebx
cmp eax, ebx
je 0x4a9d57
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4a9d6b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4a9d7f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4a9485
mov eax, dword [ebp - 0x128]
call fcn.004a5420
mov byte [ebp - 4], 9
test al, al
mov eax, dword [ebp - 0x130]
je 0x4a9e80
cmp eax, edi
je 0x4a9dbb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, edi
je 0x4a9dcf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, edi
je 0x4a9de3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], edi
je 0x4a9e11
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], edi
mov dword [ebp - 0x120], edi
je 0x4a9e2a
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], edi
je 0x4a9e47
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9e5e
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4a9e75
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x128]
jmp 0x4aac17
cmp eax, edi
je 0x4a9e8a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, edi
je 0x4a9e9e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, edi
je 0x4a9eb2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
jmp 0x4aab68
mov dword [ebp - 4], 0xa
jmp 0x4aa8fd
cmp dword [ebp - 0x134], ebx
je 0x4a9f83
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x4a9f02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax]
push 0x4f3568
push dword [ebp + 0x14]
mov dword [ebp - 0x140], ebx
push dword [ebp + 0x10]
push eax
call dword [ecx + 0x40]
mov edi, eax
cmp edi, ebx
jge 0x4a9ecb
call fcn.004a5420
mov byte [ebp - 4], 9
test al, al
mov eax, dword [ebp - 0x130]
je 0x4aa820
cmp eax, ebx
je 0x4a9f46
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4a9f5a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4a9f6e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
jmp 0x4aaa4d
cmp dword [ebp - 0x140], ebx
jne 0x4aa135
cmp dword [ebp - 0x188], ebx
jne 0x4a9ff1
push 0x58
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
je 0x4a9fb6
push ebx
push ebx
push 1
push ebx
push dword [ebp + 0x10]
mov esi, eax
call fcn.004a535f
mov esi, eax
jmp 0x4a9fb8
xor esi, esi
cmp esi, ebx
mov dword [ebp - 0x128], esi
je 0x4a9fc7
mov eax, dword [esi]
push esi
call dword [eax]
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x11
call fcn.004a2ea3
cmp esi, ebx
mov byte [ebp - 4], 0xa
je 0x4a9feb
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [esi]
push esi
call dword [eax + 4]
push dword [ebp + 0x34]
mov edi, dword [ebp - 0x12c]
push dword [ebp + 0x30]
lea eax, [ebp - 0x140]
push dword [ebp + 0x2c]
lea ecx, [ebp - 0x18c]
push dword [ebp + 0x28]
push dword [ebp + 0x24]
push dword [ebp + 0x14]
push eax
push edi
call fcn.004a8ee6
add esp, 0x20
cmp eax, ebx
mov dword [ebp - 0x128], eax
jge 0x4aa171
cmp dword [ebp - 0x174], ebx
je 0x4aa041
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
jmp 0x4aa058
call fcn.004a5420
mov byte [ebp - 4], 9
test al, al
mov eax, dword [ebp - 0x130]
je 0x4aa989
cmp eax, ebx
je 0x4aa062
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aa076
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa08a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x4aa0ae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], ebx
je 0x4aa0cc
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
je 0x4aa0e5
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], ebx
je 0x4aa102
push eax
call fcn.004013aa
lea eax, [edi - 0xc]
cmp eax, dword [0x4f0984]
je 0x4aa113
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa12a
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x128]
jmp 0x4aac17
lea edx, [ebp - 0x1e0]
push edx
xor eax, eax
push ebx
mov dword [ebp - 0x1b0], ebx
lea edi, [ebp - 0x1ac]
stosd dword es:[edi], eax
push dword [ebp - 0x1ac]
mov dword [ebp - 0x1e0], ebx
push dword [ebp - 0x1b0]
lea edi, [ebp - 0x1dc]
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov esi, dword [ebp - 0x140]
lea eax, [ebp - 0x14c]
push eax
call fcn.004ab154
mov esi, dword [ebp - 0x14c]
lea eax, [ebp - 0x150]
push eax
call fcn.00492e86
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa1ac
push dword [ebp + 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c]
xor esi, esi
inc esi
cmp dword [ebp - 0x15c], ebx
jne 0x4aa4f4
xor eax, eax
push 0x40
mov byte [ebp - 0x118], 0
pop ecx
lea edi, [ebp - 0x117]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x150]
cmp eax, ebx
mov dword [ebp - 0x15c], esi
mov dword [ebp - 0x128], 0x104
je 0x4aa202
mov ecx, dword [eax]
lea edx, [ebp - 0x128]
push edx
lea edx, [ebp - 0x118]
push edx
push 8
push eax
call dword [ecx + 0x40]
cmp dword [ebp - 0x164], ebx
je 0x4aa22c
lea eax, [ebp - 0x1c8]
push ebx
push eax
lea eax, [ebp - 0x118]
call fcn.00406298
pop ecx
pop ecx
mov byte [ebp - 4], 0x14
or dword [ebp - 0x148], 2
jmp 0x4aa24b
push dword [ebp - 0x16c]
lea edi, [ebp - 0x1c0]
call fcn.00402f03
mov dword [ebp - 4], 0x15
or dword [ebp - 0x148], 4
push dword [eax]
mov edi, dword [ebp - 0x140]
lea eax, [ebp - 0x168]
push edi
push eax
call fcn.004a912e
add esp, 0xc
test byte [ebp - 0x148], 4
je 0x4aa28a
mov eax, dword [ebp - 0x1c0]
and dword [ebp - 0x148], 0xfffffffb
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa28a
push eax
call fcn.004013aa
mov dword [ebp - 4], 0x17
test byte [ebp - 0x148], 2
je 0x4aa2b8
mov eax, dword [ebp - 0x1c8]
and dword [ebp - 0x148], 0xfffffffd
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa2b8
push eax
call fcn.004013aa
cmp dword [ebp - 0x1cc], ebx
je 0x4aa40c
push ebx
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x4aa40c
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa2e7
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x168]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa2fe
push eax
call fcn.004013aa
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x150]
cmp eax, ebx
je 0x4aa312
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa326
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
cmp eax, ebx
je 0x4aa33a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aa34e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa362
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, ebx
mov byte [ebp - 4], 5
je 0x4aa380
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], ebx
je 0x4aa39e
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
je 0x4aa3b7
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], ebx
je 0x4aa3d4
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa3eb
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa402
push eax
call fcn.004013aa
mov eax, 0x80004005
jmp 0x4aac17
mov eax, dword [ebp - 0x168]
cmp dword [eax - 8], ebx
je 0x4aa4e1
cmp dword [ebp - 0x16c], ebx
je 0x4aa43a
push dword [ebp - 0x16c]
push eax
call dword [sym.imp.MSVCRT.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x4aa4db
lea edi, [ebp - 0x168]
lea eax, [ebp - 0x12c]
call fcn.00402f73
mov eax, dword [ebp - 0x168]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa462
push eax
call fcn.004013aa
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x150]
cmp eax, ebx
je 0x4aa476
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa48a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
cmp eax, ebx
je 0x4aa49e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aa4b2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa4c6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4a959f
mov eax, dword [ebp - 0x168]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa4fa
push eax
call fcn.004013aa
jmp 0x4aa4fa
mov edi, dword [ebp - 0x140]
push dword [ebp + 0x14]
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa525
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x3c]
cmp dword [ebp - 0x128], ebx
jge 0x4aa86b
mov eax, dword [ebp - 0x150]
cmp eax, ebx
je 0x4aa54a
push dword [ebp + 0x2c]
mov ecx, dword [eax]
push dword [ebp + 0x28]
push ebx
push 0xffffffffffffffff
push eax
call dword [ecx + 0x44]
push dword [ebp + 0x10]
push dword [ebp - 0x138]
call dword [sym.imp.MSVCRT.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x4aa6dd
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa579
mov dword [ebp - 0x124], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x150]
cmp eax, ebx
je 0x4aa58f
mov dword [ebp - 0x150], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa5a5
mov dword [ebp - 0x14c], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, ebx
mov eax, edi
je 0x4aa5b7
mov ecx, dword [eax]
push eax
mov dword [ebp - 0x140], ebx
call dword [ecx + 8]
mov edi, dword [ebp - 0x138]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea ecx, [ebp - 0x138]
mov esi, esp
mov dword [ebp - 0x194], esp
call fcn.00402eaa
mov ecx, 0x4f3590
call fcn.004b2bfd
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x150]
cmp eax, ebx
je 0x4aa5f6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa60a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
cmp eax, ebx
je 0x4aa61e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aa632
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa646
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x4aa66a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], ebx
je 0x4aa688
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
je 0x4aa6a1
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], ebx
je 0x4aa6be
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa6d5
push eax
call fcn.004013aa
lea eax, [edi - 0xc]
jmp 0x4aa7df
cmp dword [ebp - 0x174], ebx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x150]
je 0x4aa7f8
cmp eax, ebx
je 0x4aa6fd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa711
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
cmp eax, ebx
je 0x4aa725
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aa739
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa74d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, ebx
mov byte [ebp - 4], 5
je 0x4aa76b
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], ebx
je 0x4aa789
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
je 0x4aa7a2
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], ebx
je 0x4aa7bf
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa7d6
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aa7ed
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x128]
jmp 0x4aac17
cmp eax, ebx
je 0x4aa802
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa816
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
cmp eax, ebx
je 0x4aa82a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aa83e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa852
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
jmp 0x4aab6a
cmp dword [ebp - 0x150], ebx
je 0x4aa8bc
mov eax, dword [ebp - 0x124]
lea edx, [ebp - 0x128]
push edx
mov dword [ebp - 0x128], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
cmp eax, ebx
jl 0x4aa8bc
push dword [ebp + 0x2c]
mov eax, dword [ebp - 0x128]
push dword [ebp + 0x28]
lea edx, [ebp - 0x1e8]
push edx
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x150]
push esi
mov dword [ebp - 0x1e8], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
mov ecx, dword [ebp + 0x1c]
cmp ecx, ebx
mov dword [ebp - 4], 0x13
je 0x4aa8d5
lea eax, [ebp - 0x140]
call fcn.004a031f
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x150]
cmp eax, ebx
je 0x4aa8e9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
je 0x4aa8fd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test byte [ebp + 0x14], 1
je 0x4aa9e3
cmp dword [ebp + 0x18], ebx
je 0x4aa9e3
cmp dword [ebp + 0x20], ebx
je 0x4aa9e3
mov dword [ebp - 0x128], ebx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
lea edx, [ebp - 0x128]
push edx
push eax
call dword [ecx + 0x18]
cmp eax, ebx
jl 0x4aa966
push dword [ebp - 0x128]
call fcn.00491937
test eax, eax
pop ecx
jne 0x4aa9d0
push dword [ebp + 0x20]
push dword [ebp - 0x128]
push dword [ebp + 0x18]
push dword [ebp + 8]
call fcn.004aac30
cmp eax, ebx
jge 0x4aa9d0
cmp dword [ebp - 0x128], ebx
je 0x4aa979
push dword [ebp - 0x128]
call sub.ole32.dll_CoTaskMemFree
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x128], ebx
cmp eax, ebx
je 0x4aa993
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aa9a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aa9bb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4aab6a
cmp dword [ebp - 0x128], ebx
je 0x4aa9e3
push dword [ebp - 0x128]
call sub.ole32.dll_CoTaskMemFree
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x124]
call fcn.004a031f
mov edi, eax
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x130]
cmp eax, ebx
je 0x4aaa07
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x134]
cmp eax, ebx
je 0x4aaa1b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
cmp eax, ebx
je 0x4aaa2f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x4aaa53
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], ebx
je 0x4aaa71
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
je 0x4aaa8a
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], ebx
je 0x4aaaa7
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aaabe
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aaad5
push eax
call fcn.004013aa
mov eax, edi
jmp 0x4aac17
xor ebx, ebx
inc dword [ebp - 0x154]
jmp 0x4a95e1
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x4aab89
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [ebp - 0x18c]
call fcn.004bac7e
cmp dword [ebp - 0x120], ebx
je 0x4aaba7
push dword [ebp - 0x120]
call sub.ole32.dll_CoTaskMemFree
cmp dword [ebp - 0x11c], ebx
mov dword [ebp - 0x120], ebx
je 0x4aabc0
push dword [ebp - 0x11c]
call sub.ole32.dll_CoTaskMemFree
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
mov dword [ebp - 0x11c], ebx
je 0x4aabdd
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aabf4
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff4
cmp eax, dword [0x4f0984]
je 0x4aac0b
push eax
call fcn.004013aa
mov eax, 0x80004001
jmp 0x4aac17
mov eax, 0x80004003
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004c7b01
pop edi
pop esi
pop ebx
leave
ret 0x30