Function at 0x4aed30
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50c145
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x100
mov eax, dword [0x567e00]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x70], ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x4c], 0
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0
push eax
push 0x533fb4
push 1
push 0
push 0x535aa0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
jns 0x4aedca
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 4], 2
test ecx, ecx
je 0x4b1b08
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
jmp 0x4b1b08
mov esi, dword [ebp - 0x4c]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x30]
push eax
call edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xf8]
push eax
call edi
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0xe8]
push eax
call edi
mov eax, dword [ebp - 0xe4]
mov edi, dword [ebp - 0xe8]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, dword [ebp - 0x48]
sub esp, 0x10
mov eax, esp
mov byte [ebp - 4], 6
sub esp, 0x10
mov dword [eax], ecx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xa0]
mov dword [eax + 0xc], ecx
mov eax, esp
mov ecx, dword [ebp - 0xa8]
sub esp, 0x10
mov dword [eax], ecx
mov ecx, dword [ebp - 0xb0]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xc0]
mov dword [eax + 0xc], ecx
mov eax, esp
mov ecx, dword [ebp - 0xc4]
sub esp, 0x10
mov dword [eax], edi
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xd0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x6c]
mov dword [eax + 0xc], ecx
mov ecx, esp
mov eax, dword [ebp - 0x110]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x108]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x104]
push esi
mov dword [ecx + 0xc], eax
call dword [ebp - 0x68]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, eax
lea eax, [ebp - 0x110]
push eax
call esi
lea eax, [ebp - 0xe8]
push eax
call esi
lea eax, [ebp - 0xf8]
push eax
call esi
lea eax, [ebp - 0x30]
push eax
call esi
test edi, edi
jns 0x4aef5c
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 4], 7
test ecx, ecx
je 0x4aef55
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov eax, edi
jmp 0x4b1b0a
mov dword [ebp - 0x54], 0
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0x68]
push 0x516d0c
mov byte [ebp - 4], 8
mov eax, dword [esi]
mov edi, dword [eax + 0x1c]
call fcn.004ab2f0
mov eax, dword [eax]
mov byte [ebp - 4], 9
test eax, eax
je 0x4aef8a
mov eax, dword [eax]
jmp 0x4aef8c
xor eax, eax
lea ecx, [ebp - 0x54]
push ecx
push eax
push esi
call edi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 8
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4aefd4
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x4aefb7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x4b1b08
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
jmp 0x4b1b08
cmp dword [ebx + 0xc], 0
mov edi, dword [ebp - 0x70]
jne 0x4af00a
push dword [ebp - 0x84]
mov ecx, edi
call fcn.004abf80
mov esi, eax
test esi, esi
jns 0x4af00a
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x4af001
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xd
jmp 0x4aefbe
mov dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x50]
push edx
push 0
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0xe
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
jns 0x4af058
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x4af03b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x10
test eax, eax
je 0x4af04c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x11
jmp 0x4aefbe
cmp dword [edi + 0xf4], 0
je 0x4af1b2
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x48]
push edx
push eax
mov byte [ebp - 4], 0x12
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov esi, eax
test esi, esi
jns 0x4af0c2
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x4af094
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x14
test eax, eax
je 0x4af0a5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x15
test eax, eax
je 0x4af0b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x16
jmp 0x4aefbe
mov eax, dword [edi + 0xf4]
sub eax, 1
jne 0x4af1a1
mov eax, dword [ebp - 0x48]
push 4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov esi, eax
test esi, esi
jns 0x4af121
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x17
test eax, eax
je 0x4af0f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x18
test eax, eax
je 0x4af104
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x19
test eax, eax
je 0x4af115
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1a
jmp 0x4aefbe
mov esi, dword [ebp - 0x48]
mov eax, dword [esi]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x68], eax
lea eax, [edi + 0xf8]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x1b
test eax, eax
je 0x4af14d
mov eax, dword [eax]
jmp 0x4af14f
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4af1a1
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x4af173
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x4af184
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x4af195
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1f
jmp 0x4aefbe
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x20
test eax, eax
je 0x4af1b2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x60]
push edx
push eax
mov byte [ebp - 4], 0x21
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jns 0x4af20f
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x22
test eax, eax
je 0x4af1e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x23
test eax, eax
je 0x4af1f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x24
test eax, eax
je 0x4af203
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x25
jmp 0x4aefbe
mov esi, dword [ebp - 0x60]
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x68], eax
lea eax, [edi + 0x74]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x26
test eax, eax
je 0x4af238
mov eax, dword [eax]
jmp 0x4af23a
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x21
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4af290
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x27
test eax, eax
je 0x4af262
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x28
test eax, eax
je 0x4af273
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x29
test eax, eax
je 0x4af284
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x2a
jmp 0x4aefbe
mov esi, dword [ebp - 0x60]
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x68], eax
lea eax, [edi + 0xa4]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x4af2bc
mov eax, dword [eax]
jmp 0x4af2be
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4af310
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x2c
test eax, eax
je 0x4af2e2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x2d
test eax, eax
je 0x4af2f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x4af304
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x2f
jmp 0x4aefbe
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x5c]
push edx
push eax
mov byte [ebp - 4], 0x30
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
jns 0x4af37e
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x31
test eax, eax
je 0x4af33f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x32
test eax, eax
je 0x4af350
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x33
test eax, eax
je 0x4af361
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x34
test eax, eax
je 0x4af372
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x35
jmp 0x4aefbe
mov dword [ebp - 0x58], 0
mov eax, dword [edi + 0x28]
dec eax
mov byte [ebp - 4], 0x36
cmp eax, 4
ja case.default.0x4af396
jmp dword [eax*4 + 0x4b1b2c]
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4af413
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x37
test eax, eax
je 0x4af3c3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x38
test eax, eax
je 0x4af3d4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x39
test eax, eax
je 0x4af3e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x3a
test eax, eax
je 0x4af3f6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x3b
test eax, eax
je 0x4af407
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x3c
jmp 0x4aefbe
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x70]
push edx
push 0x533fe4
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x3e
call dword [ecx]
mov esi, eax
mov byte [ebp - 4], 0x3d
test esi, esi
jns 0x4af4ab
mov ecx, dword [ebp - 0x70]
mov byte [ebp - 4], 0x3f
test ecx, ecx
je 0x4af44a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x40
test eax, eax
je 0x4af45b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x41
test eax, eax
je 0x4af46c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x42
test eax, eax
je 0x4af47d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x43
test eax, eax
je 0x4af48e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x44
test eax, eax
je 0x4af49f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x45
jmp 0x4b1afb
cmp word [edi], 0
je 0x4af5bb
mov esi, dword [ebp - 0x70]
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x46
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x47
test eax, eax
je 0x4af4ec
mov eax, dword [eax]
jmp 0x4af4ee
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0x3d
cmp edx, 8
jb 0x4af543
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4af539
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4af539
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4af5bb
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0x48
test eax, eax
je 0x4af55a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x49
test eax, eax
je 0x4af56b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x4a
test eax, eax
je 0x4af57c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x4b
test eax, eax
je 0x4af58d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x4c
test eax, eax
je 0x4af59e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x4d
test eax, eax
je 0x4af5af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x4e
jmp 0x4aefbe
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0x4f
test eax, eax
je 0x4b0675
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4b0675
lea eax, [ebp - 0x39]
mov byte [ebp - 0x39], 0
push eax
call fcn.004b27c0
add esp, 4
test eax, eax
js 0x4afbbc
cmp byte [ebp - 0x39], 0
je 0x4afbbc
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
push edx
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4af66d
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x51
test eax, eax
je 0x4af61d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x52
test eax, eax
je 0x4af62e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x53
test eax, eax
je 0x4af63f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x54
test eax, eax
je 0x4af650
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x55
test eax, eax
je 0x4af661
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x56
jmp 0x4aefbe
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x48]
push edx
push 0x533fe4
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x58
call dword [ecx]
mov esi, eax
mov byte [ebp - 4], 0x57
test esi, esi
jns 0x4af705
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 4], 0x59
test ecx, ecx
je 0x4af6a4
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x5a
test eax, eax
je 0x4af6b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x5b
test eax, eax
je 0x4af6c6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x5c
test eax, eax
je 0x4af6d7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x5d
test eax, eax
je 0x4af6e8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x5e
test eax, eax
je 0x4af6f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x5f
jmp 0x4b1afb
cmp word [edi], 0
je 0x4af815
mov esi, dword [ebp - 0x48]
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x60
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x61
test eax, eax
je 0x4af746
mov eax, dword [eax]
jmp 0x4af748
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0x57
cmp edx, 8
jb 0x4af79d
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4af793
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4af793
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4af815
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x62
test eax, eax
je 0x4af7b4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x63
test eax, eax
je 0x4af7c5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x64
test eax, eax
je 0x4af7d6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x65
test eax, eax
je 0x4af7e7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x66
test eax, eax
je 0x4af7f8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x67
test eax, eax
je 0x4af809
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x68
jmp 0x4aefbe
cmp word [edi + 0x10], 0
lea ecx, [edi + 0x10]
je 0x4af929
mov esi, dword [ebp - 0x48]
push ecx
mov eax, dword [esi]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x69
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x6a
test eax, eax
je 0x4af85a
mov eax, dword [eax]
jmp 0x4af85c
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0x57
cmp edx, 8
jb 0x4af8b1
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4af8a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4af8a7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4af929
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x6b
test eax, eax
je 0x4af8c8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x6c
test eax, eax
je 0x4af8d9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x6d
test eax, eax
je 0x4af8ea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x6e
test eax, eax
je 0x4af8fb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x6f
test eax, eax
je 0x4af90c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x70
test eax, eax
je 0x4af91d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x71
jmp 0x4aefbe
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x70]
push edx
push eax
mov byte [ebp - 4], 0x72
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4af9ce
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0x73
test eax, eax
je 0x4af95c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x74
test eax, eax
je 0x4af96d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x75
test eax, eax
je 0x4af97e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x76
test eax, eax
je 0x4af98f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x77
test eax, eax
je 0x4af9a0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x78
test eax, eax
je 0x4af9b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x79
test eax, eax
je 0x4af9c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x7a
jmp 0x4aefbe
mov esi, dword [ebp - 0x70]
push dword [edi + 0x20]
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b25f0
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x7b
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x7c
test eax, eax
je 0x4afa07
mov eax, dword [eax]
jmp 0x4afa09
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0x72
cmp edx, 8
jb 0x4afa5e
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4afa54
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4afa54
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4afaeb
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0x7d
test eax, eax
je 0x4afa79
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x7e
test eax, eax
je 0x4afa8a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x7f
test eax, eax
je 0x4afa9b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x80
test eax, eax
je 0x4afaac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x81
test eax, eax
je 0x4afabd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x82
test eax, eax
je 0x4aface
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x83
test eax, eax
je 0x4afadf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x84
jmp 0x4aefbe
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xd4], 0
mov ecx, dword [eax]
push 0
push eax
mov byte [ebp - 4], 0x85
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4afb91
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0x86
test eax, eax
je 0x4afb1f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x87
test eax, eax
je 0x4afb30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x88
test eax, eax
je 0x4afb41
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x89
test eax, eax
je 0x4afb52
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x8a
test eax, eax
je 0x4afb63
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x8b
test eax, eax
je 0x4afb74
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x8c
test eax, eax
je 0x4afb85
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x8d
jmp 0x4aefbe
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0x8e
test eax, eax
je 0x4afba2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x8f
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4b0675
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4b0675
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4afc32
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x92
test eax, eax
je 0x4afbe2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x93
test eax, eax
je 0x4afbf3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x94
test eax, eax
je 0x4afc04
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x95
test eax, eax
je 0x4afc15
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x96
test eax, eax
je 0x4afc26
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x97
jmp 0x4aefbe
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x48]
push edx
push 0x533ff4
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x99
call dword [ecx]
mov esi, eax
mov byte [ebp - 4], 0x98
test esi, esi
jns 0x4afcca
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 4], 0x9a
test ecx, ecx
je 0x4afc69
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0x9b
test eax, eax
je 0x4afc7a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0x9c
test eax, eax
je 0x4afc8b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0x9d
test eax, eax
je 0x4afc9c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0x9e
test eax, eax
je 0x4afcad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x9f
test eax, eax
je 0x4afcbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xa0
jmp 0x4b1afb
cmp word [edi], 0
je 0x4afdda
mov esi, dword [ebp - 0x48]
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xa1
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xa2
test eax, eax
je 0x4afd0b
mov eax, dword [eax]
jmp 0x4afd0d
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0x98
cmp edx, 8
jb 0x4afd62
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4afd58
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4afd58
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4afdda
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xa3
test eax, eax
je 0x4afd79
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xa4
test eax, eax
je 0x4afd8a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xa5
test eax, eax
je 0x4afd9b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xa6
test eax, eax
je 0x4afdac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xa7
test eax, eax
je 0x4afdbd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xa8
test eax, eax
je 0x4afdce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xa9
jmp 0x4aefbe
cmp word [edi + 0x10], 0
lea ecx, [edi + 0x10]
je 0x4afeee
mov esi, dword [ebp - 0x48]
push ecx
mov eax, dword [esi]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xaa
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xab
test eax, eax
je 0x4afe1f
mov eax, dword [eax]
jmp 0x4afe21
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0x98
cmp edx, 8
jb 0x4afe76
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4afe6c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4afe6c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4afeee
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xac
test eax, eax
je 0x4afe8d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xad
test eax, eax
je 0x4afe9e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xae
test eax, eax
je 0x4afeaf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xaf
test eax, eax
je 0x4afec0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xb0
test eax, eax
je 0x4afed1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xb1
test eax, eax
je 0x4afee2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xb2
jmp 0x4aefbe
mov eax, dword [ebp - 0x48]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov esi, eax
test esi, esi
jns 0x4aff71
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xb3
test eax, eax
je 0x4aff10
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xb4
test eax, eax
je 0x4aff21
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xb5
test eax, eax
je 0x4aff32
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xb6
test eax, eax
je 0x4aff43
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xb7
test eax, eax
je 0x4aff54
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xb8
test eax, eax
je 0x4aff65
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xb9
jmp 0x4aefbe
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x70]
push edx
push eax
mov byte [ebp - 4], 0xba
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4b0016
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0xbb
test eax, eax
je 0x4affa4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xbc
test eax, eax
je 0x4affb5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xbd
test eax, eax
je 0x4affc6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xbe
test eax, eax
je 0x4affd7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xbf
test eax, eax
je 0x4affe8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xc0
test eax, eax
je 0x4afff9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xc1
test eax, eax
je 0x4b000a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xc2
jmp 0x4aefbe
mov ecx, dword [edi + 0x24]
test ecx, ecx
je 0x4b013c
mov esi, dword [ebp - 0x70]
push ecx
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b25f0
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xc3
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xc4
test eax, eax
je 0x4b0058
mov eax, dword [eax]
jmp 0x4b005a
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0xba
cmp edx, 8
jb 0x4b00af
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4b00a5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b00a5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4b013c
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0xc5
test eax, eax
je 0x4b00ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xc6
test eax, eax
je 0x4b00db
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xc7
test eax, eax
je 0x4b00ec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xc8
test eax, eax
je 0x4b00fd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xc9
test eax, eax
je 0x4b010e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xca
test eax, eax
je 0x4b011f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xcb
test eax, eax
je 0x4b0130
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xcc
jmp 0x4aefbe
mov ecx, dword [edi + 0x20]
test ecx, ecx
je 0x4b0262
mov esi, dword [ebp - 0x70]
push ecx
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b25f0
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xcd
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xce
test eax, eax
je 0x4b017e
mov eax, dword [eax]
jmp 0x4b0180
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea ecx, [ebp - 0x6c]
test esi, esi
sets byte [ebp - 0x39]
call fcn.004ab620
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 0xba
cmp edx, 8
jb 0x4b01d5
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4b01cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b01cb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp byte [ebp - 0x39], 0
je 0x4b0262
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0xcf
test eax, eax
je 0x4b01f0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xd0
test eax, eax
je 0x4b0201
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xd1
test eax, eax
je 0x4b0212
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xd2
test eax, eax
je 0x4b0223
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xd3
test eax, eax
je 0x4b0234
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xd4
test eax, eax
je 0x4b0245
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xd5
test eax, eax
je 0x4b0256
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xd6
jmp 0x4aefbe
mov eax, dword [ebp - 0x70]
mov byte [ebp - 4], 0xd7
test eax, eax
je 0x4b0273
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xd8
jmp 0x4afba6
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
push edx
push 3
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4b02f2
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xd9
test eax, eax
je 0x4b02a2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xda
test eax, eax
je 0x4b02b3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xdb
test eax, eax
je 0x4b02c4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xdc
test eax, eax
je 0x4b02d5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xdd
test eax, eax
je 0x4b02e6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xde
jmp 0x4aefbe
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x48]
push edx
push 0x534004
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0xe0
call dword [ecx]
mov esi, eax
mov byte [ebp - 4], 0xdf
test esi, esi
jns 0x4b038a
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 4], 0xe1
test ecx, ecx
je 0x4b0329
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xe2
test eax, eax
je 0x4b033a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xe3
test eax, eax
je 0x4b034b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xe4
test eax, eax
je 0x4b035c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xe5
test eax, eax
je 0x4b036d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xe6
test eax, eax
je 0x4b037e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xe7
jmp 0x4b1afb
cmp word [edi], 0
je 0x4b045e
mov esi, dword [ebp - 0x48]
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xe8
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xe9
test eax, eax
je 0x4b03cb
mov eax, dword [eax]
jmp 0x4b03cd
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xdf
call fcn.00403430
test esi, esi
jns 0x4b045e
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xea
test eax, eax
je 0x4b03fd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xeb
test eax, eax
je 0x4b040e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xec
test eax, eax
je 0x4b041f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xed
test eax, eax
je 0x4b0430
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xee
test eax, eax
je 0x4b0441
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xef
test eax, eax
je 0x4b0452
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xf0
jmp 0x4aefbe
add edi, 0x10
cmp word [edi], 0
je 0x4b0535
mov esi, dword [ebp - 0x48]
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xf1
push eax
call fcn.004b3150
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xf2
test eax, eax
je 0x4b04a2
mov eax, dword [eax]
jmp 0x4b04a4
xor eax, eax
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xdf
call fcn.00403430
test esi, esi
jns 0x4b0535
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xf3
test eax, eax
je 0x4b04d4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xf4
test eax, eax
je 0x4b04e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xf5
test eax, eax
je 0x4b04f6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xf6
test eax, eax
je 0x4b0507
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xf7
test eax, eax
je 0x4b0518
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xf8
test eax, eax
je 0x4b0529
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xf9
jmp 0x4aefbe
mov esi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [esi]
mov edi, dword [eax + 0x54]
call fcn.004b2420
movzx eax, ax
push eax
push esi
call edi
mov esi, eax
test esi, esi
jns 0x4b05c5
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0xfa
test eax, eax
je 0x4b0564
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], 0xfb
test eax, eax
je 0x4b0575
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 0xfc
test eax, eax
je 0x4b0586
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 0xfd
test eax, eax
je 0x4b0597
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 0xfe
test eax, eax
je 0x4b05a8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0xff
test eax, eax
je 0x4b05b9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x100
jmp 0x4aefbe
mov eax, dword [ebp - 0x48]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov esi, eax
test esi, esi
jns 0x4b065e
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x101
test eax, eax
je 0x4b05ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x102
test eax, eax
je 0x4b0602
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x103
test eax, eax
je 0x4b0616
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x104
test eax, eax
je 0x4b062a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x105
test eax, eax
je 0x4b063e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x106
test eax, eax
je 0x4b0652
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x107
jmp 0x4aefbe
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x108
test eax, eax
je 0x4b0672
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [ebp - 0x70]
mov dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x78]
push edx
push eax
mov dword [ebp - 4], 0x16c
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov esi, eax
test esi, esi
jns 0x4b0f58
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x16d
test eax, eax
je 0x4b06ae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x16e
test eax, eax
je 0x4b06c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x16f
test eax, eax
je 0x4b06d6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x170
test eax, eax
je 0x4b06ea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x171
test eax, eax
je 0x4b06fe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x172
test eax, eax
je 0x4b0712
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x173
jmp 0x4aefbe
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
push edx
push 4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4b07a3
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x10a
test eax, eax
je 0x4b0747
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x10b
test eax, eax
je 0x4b075b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x10c
test eax, eax
je 0x4b076f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x10d
test eax, eax
je 0x4b0783
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x10e
test eax, eax
je 0x4b0797
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x10f
jmp 0x4aefbe
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x48]
push edx
push 0x534014
push eax
mov ecx, dword [eax]
mov dword [ebp - 4], 0x111
call dword [ecx]
mov esi, eax
mov byte [ebp - 4], 0x10
test esi, esi
jns 0x4b0854
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 4], 0x112
test ecx, ecx
je 0x4b07e4
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x113
test eax, eax
je 0x4b07f8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x114
test eax, eax
je 0x4b080c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x115
test eax, eax
je 0x4b0820
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x116
test eax, eax
je 0x4b0834
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x117
test eax, eax
je 0x4b0848
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x118
jmp 0x4b1afb
cmp word [edi], 0
je 0x4b0939
mov esi, dword [ebp - 0x48]
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x19
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x10
call fcn.00403430
test esi, esi
jns 0x4b0939
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x11b
test eax, eax
je 0x4b08c9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x11c
test eax, eax
je 0x4b08dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x11d
test eax, eax
je 0x4b08f1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x11e
test eax, eax
je 0x4b0905
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x11f
test eax, eax
je 0x4b0919
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x120
test eax, eax
je 0x4b092d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x121
jmp 0x4aefbe
cmp word [edi + 0x10], 0
lea ecx, [edi + 0x10]
je 0x4b0a22
mov esi, dword [ebp - 0x48]
push ecx
mov eax, dword [esi]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x22
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x10
call fcn.00403430
test esi, esi
jns 0x4b0a22
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x124
test eax, eax
je 0x4b09b2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x125
test eax, eax
je 0x4b09c6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x126
test eax, eax
je 0x4b09da
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x127
test eax, eax
je 0x4b09ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], pe_nt_image_headers32
test eax, eax
je 0x4b0a02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x129
test eax, eax
je 0x4b0a16
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x12a
jmp 0x4aefbe
mov eax, dword [ebp - 0x48]
mov edx, 1
mov ecx, dword [eax]
mov esi, dword [ecx + 0x54]
movzx ecx, word [edi + 6]
dec ecx
shl edx, cl
push edx
push eax
call esi
mov esi, eax
test esi, esi
jns 0x4b0ac8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x12b
test eax, eax
je 0x4b0a58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x12c
test eax, eax
je 0x4b0a6c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x12d
test eax, eax
je 0x4b0a80
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x12e
test eax, eax
je 0x4b0a94
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x12f
test eax, eax
je 0x4b0aa8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x130
test eax, eax
je 0x4b0abc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x131
jmp 0x4aefbe
mov eax, dword [ebp - 0x48]
push 0xfff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov esi, eax
test esi, esi
jns 0x4b0b64
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x132
test eax, eax
je 0x4b0af4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x133
test eax, eax
je 0x4b0b08
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x134
test eax, eax
je 0x4b0b1c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x135
test eax, eax
je 0x4b0b30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x136
test eax, eax
je 0x4b0b44
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x137
test eax, eax
je 0x4b0b58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x138
jmp 0x4aefbe
mov dword [ebp - 4], 0x139
jmp 0x4afba6
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
push edx
push 9
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
jns 0x4b0bf5
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x13b
test eax, eax
je 0x4b0b99
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x13c
test eax, eax
je 0x4b0bad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x13d
test eax, eax
je 0x4b0bc1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x13e
test eax, eax
je 0x4b0bd5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x13f
test eax, eax
je 0x4b0be9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x140
jmp 0x4aefbe
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x48]
push edx
push 0x534024
push eax
mov ecx, dword [eax]
mov dword [ebp - 4], 0x142
call dword [ecx]
mov esi, eax
mov byte [ebp - 4], 0x41
test esi, esi
jns 0x4b0ca6
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 4], 0x143
test ecx, ecx
je 0x4b0c36
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x144
test eax, eax
je 0x4b0c4a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x145
test eax, eax
je 0x4b0c5e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x146
test eax, eax
je 0x4b0c72
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x147
test eax, eax
je 0x4b0c86
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x148
test eax, eax
je 0x4b0c9a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x149
jmp 0x4b1afb
cmp dword [edi + 0xcc], 0
je 0x4b0d7b
mov esi, dword [ebp - 0x48]
mov eax, dword [esi]
mov eax, dword [eax + 0x5c]
mov dword [ebp - 0x68], eax
lea eax, [edi + 0xbc]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x4a
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x41
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4b0d7b
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x14b
test eax, eax
je 0x4b0d0b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x14c
test eax, eax
je 0x4b0d1f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x14d
test eax, eax
je 0x4b0d33
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x14e
test eax, eax
je 0x4b0d47
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x14f
test eax, eax
je 0x4b0d5b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x150
test eax, eax
je 0x4b0d6f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x151
jmp 0x4aefbe
lea ecx, [edi + 0xdc]
call fcn.004b2790
test al, al
je 0x4b0e6b
mov esi, dword [ebp - 0x48]
lea ecx, [edi + 0xdc]
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2a50
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x52
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x53
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x41
call fcn.00403430
test esi, esi
jns 0x4b0e6b
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x154
test eax, eax
je 0x4b0dfb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x155
test eax, eax
je 0x4b0e0f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x156
test eax, eax
je 0x4b0e23
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x157
test eax, eax
je 0x4b0e37
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x158
test eax, eax
je 0x4b0e4b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x159
test eax, eax
je 0x4b0e5f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x15a
jmp 0x4aefbe
cmp word [edi], 0
je 0x4b0f4c
mov esi, dword [ebp - 0x48]
push edi
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004b2450
add esp, 8
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x5b
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
lea ecx, [ebp - 0x38]
call fcn.00403430
test esi, esi
jns 0x4b0f4c
mov eax, dword [ebp - 0x48]
mov dword [ebp - 4], 0x15d
test eax, eax
je 0x4b0edc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x15e
test eax, eax
je 0x4b0ef0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x15f
test eax, eax
je 0x4b0f04
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x160
test eax, eax
je 0x4b0f18
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x161
test eax, eax
je 0x4b0f2c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x162
test eax, eax
je 0x4b0f40
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x163
jmp 0x4aefbe
mov dword [ebp - 4], 0x164
jmp 0x4afba6
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x7c]
push edx
push 0
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x74
call dword [ecx + 0x30]
mov esi, eax
test esi, esi
jns 0x4b1011
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0x75
test eax, eax
je 0x4b0f8d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x176
test eax, eax
je 0x4b0fa1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x177
test eax, eax
je 0x4b0fb5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x178
test eax, eax
je 0x4b0fc9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x179
test eax, eax
je 0x4b0fdd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x17a
test eax, eax
je 0x4b0ff1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x17b
test eax, eax
je 0x4b1005
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x17c
jmp 0x4aefbe
mov dword [ebp - 0x74], 0
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x7d
push eax
lea ecx, [ebp - 0x7c]
call fcn.004aacf0
mov esi, eax
test esi, esi
jns 0x4b10d8
mov ecx, dword [ebp - 0x74]
mov byte [ebp - 4], 0x7e
test ecx, ecx
je 0x4b1043
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0x7f
test eax, eax
je 0x4b1054
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x180
test eax, eax
je 0x4b1068
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x181
test eax, eax
je 0x4b107c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x182
test eax, eax
je 0x4b1090
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x183
test eax, eax
je 0x4b10a4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x184
test eax, eax
je 0x4b10b8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x185
test eax, eax
je 0x4b10cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x186
jmp 0x4b1afb
mov esi, dword [ebp - 0x74]
mov eax, dword [esi]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x68], eax
lea eax, [edi + 0x2c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x7d
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4b11bf
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0x88
test eax, eax
je 0x4b112a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0x89
test eax, eax
je 0x4b113b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x18a
test eax, eax
je 0x4b114f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x18b
test eax, eax
je 0x4b1163
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x18c
test eax, eax
je 0x4b1177
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x18d
test eax, eax
je 0x4b118b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x18e
test eax, eax
je 0x4b119f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x18f
test eax, eax
je 0x4b11b3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x190
jmp 0x4aefbe
cmp dword [edi + 0x6c], 0
je 0x4b12b0
mov esi, dword [ebp - 0x74]
mov eax, dword [esi]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x68], eax
lea eax, [edi + 0x5c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x91
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x7d
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4b12b0
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0x92
test eax, eax
je 0x4b121b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0x93
test eax, eax
je 0x4b122c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x194
test eax, eax
je 0x4b1240
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x195
test eax, eax
je 0x4b1254
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x196
test eax, eax
je 0x4b1268
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x197
test eax, eax
je 0x4b127c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x198
test eax, eax
je 0x4b1290
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x199
test eax, eax
je 0x4b12a4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x19a
jmp 0x4aefbe
cmp dword [edi + 0x54], 0
je 0x4b139d
mov esi, dword [ebp - 0x74]
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x68], eax
lea eax, [edi + 0x44]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x9b
call fcn.004ab730
push eax
push esi
call dword [ebp - 0x68]
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004ab620
test esi, esi
jns 0x4b139d
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0x9c
test eax, eax
je 0x4b1308
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0x9d
test eax, eax
je 0x4b1319
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x19e
test eax, eax
je 0x4b132d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x19f
test eax, eax
je 0x4b1341
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x1a0
test eax, eax
je 0x4b1355
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x1a1
test eax, eax
je 0x4b1369
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x1a2
test eax, eax
je 0x4b137d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x1a3
test eax, eax
je 0x4b1391
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1a4
jmp 0x4aefbe
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x80]
push edx
push eax
mov byte [ebp - 4], 0xa5
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov esi, eax
test esi, esi
jns 0x4b1476
mov eax, dword [ebp - 0x80]
mov byte [ebp - 4], 0xa6
test eax, eax
je 0x4b13d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0xa7
test eax, eax
je 0x4b13e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0xa8
test eax, eax
je 0x4b13f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x1a9
test eax, eax
je 0x4b1406
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x1aa
test eax, eax
je 0x4b141a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x1ab
test eax, eax
je 0x4b142e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x1ac
test eax, eax
je 0x4b1442
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x1ad
test eax, eax
je 0x4b1456
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x1ae
test eax, eax
je 0x4b146a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1af
jmp 0x4aefbe
mov esi, dword [ebp - 0x80]
lea ecx, [ebp - 0x30]
push 0
mov eax, dword [esi]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x68], eax
call fcn.004ab390
mov ecx, eax
mov byte [ebp - 4], 0xb0
call fcn.004ab740
movzx eax, ax
push eax
push esi
call dword [ebp - 0x68]
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
jns 0x4b1569
mov eax, dword [ebp - 0x80]
mov byte [ebp - 4], 0xb1
test eax, eax
je 0x4b14c3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0xb2
test eax, eax
je 0x4b14d4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0xb3
test eax, eax
je 0x4b14e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x1b4
test eax, eax
je 0x4b14f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x1b5
test eax, eax
je 0x4b150d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x1b6
test eax, eax
je 0x4b1521
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x1b7
test eax, eax
je 0x4b1535
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x1b8
test eax, eax
je 0x4b1549
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x1b9
test eax, eax
je 0x4b155d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1ba
jmp 0x4aefbe
mov esi, dword [ebp - 0x80]
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x68], eax
movzx eax, byte [edi + 0xd5]
push eax
call fcn.004ab390
mov ecx, eax
mov byte [ebp - 4], 0xbb
call fcn.004ab740
movzx eax, ax
push eax
push esi
call dword [ebp - 0x68]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xa5
push eax
call edi
test esi, esi
jns 0x4b1668
mov eax, dword [ebp - 0x80]
mov byte [ebp - 4], 0xbc
test eax, eax
je 0x4b15c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0xbd
test eax, eax
je 0x4b15d3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0xbe
test eax, eax
je 0x4b15e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x1bf
test eax, eax
je 0x4b15f8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x1c0
test eax, eax
je 0x4b160c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x1c1
test eax, eax
je 0x4b1620
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x1c2
test eax, eax
je 0x4b1634
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x1c3
test eax, eax
je 0x4b1648
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x1c4
test eax, eax
je 0x4b165c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1c5
jmp 0x4aefbe
mov eax, dword [ebp - 0x80]
push 4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x88]
mov esi, eax
test esi, esi
jns 0x4b1737
mov eax, dword [ebp - 0x80]
mov byte [ebp - 4], 0xc6
test eax, eax
je 0x4b1691
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0xc7
test eax, eax
je 0x4b16a2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0xc8
test eax, eax
je 0x4b16b3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x1c9
test eax, eax
je 0x4b16c7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x1ca
test eax, eax
je 0x4b16db
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x1cb
test eax, eax
je 0x4b16ef
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x1cc
test eax, eax
je 0x4b1703
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x1cd
test eax, eax
je 0x4b1717
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x1ce
test eax, eax
je 0x4b172b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1cf
jmp 0x4aefbe
mov dword [ebp - 0x88], 0
mov esi, dword [ebp - 0x54]
mov eax, dword [esi]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 4], 0xd3
call fcn.004b3150
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0xd4
call fcn.004ab730
mov edx, eax
lea eax, [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x68]
sub esp, 0x10
mov ecx, esp
push 3
mov dword [ecx], eax
sub esp, 0x10
mov eax, dword [ebp - 0x6c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xd0]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xc4]
mov dword [ecx + 0xc], eax
mov eax, esp
mov ecx, dword [ebp - 0xc0]
sub esp, 0x10
mov dword [eax], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xb0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 0xc], ecx
mov eax, esp
mov ecx, dword [ebp - 0xa0]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x98]
push 2
push dword [ebp - 0x48]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x70]
push edx
push esi
mov dword [eax + 0xc], ecx
call dword [ebp - 0xfc]
lea ecx, [ebp - 0xd4]
mov esi, eax
call fcn.004ab620
lea eax, [ebp - 0x30]
push eax
call edi
lea eax, [ebp - 0xf8]
push eax
call edi
lea eax, [ebp - 0xe8]
push eax
call edi
test esi, esi
jns 0x4b1997
mov eax, dword [ebp - 0x88]
mov byte [ebp - 4], 0xd5
test eax, eax
je 0x4b18e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x80]
mov byte [ebp - 4], 0xd6
test eax, eax
je 0x4b18f1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0xd7
test eax, eax
je 0x4b1902
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0xd8
test eax, eax
je 0x4b1913
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x1d9
test eax, eax
je 0x4b1927
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x1da
test eax, eax
je 0x4b193b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x1db
test eax, eax
je 0x4b194f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x1dc
test eax, eax
je 0x4b1963
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x1dd
test eax, eax
je 0x4b1977
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x1de
test eax, eax
je 0x4b198b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x1df
jmp 0x4aefbe
mov eax, dword [ebp - 0x88]
mov byte [ebp - 4], 0xe0
test eax, eax
je 0x4b19ab
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x80]
mov byte [ebp - 4], 0xe1
test eax, eax
je 0x4b19bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0xe2
test eax, eax
je 0x4b19cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0xe3
test eax, eax
je 0x4b19de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 4], 0x1e4
test eax, eax
je 0x4b19f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 4], 0x1e5
test eax, eax
je 0x4b1a06
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x1e6
test eax, eax
je 0x4b1a1a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x1e7
test eax, eax
je 0x4b1a2e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x1e8
test eax, eax
je 0x4b1a42
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x1e9
test eax, eax
je 0x4b1af4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4b1af4
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x167
test eax, eax
je 0x4b1a73
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 0x168
test eax, eax
je 0x4b1a87
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x169
test eax, eax
je 0x4b1a9b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], 0x16a
test eax, eax
je 0x4b1aaf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 4], 0x16b
test eax, eax
je 0x4b1ac3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, 0x80004005
jmp 0x4b1b0a
mov dword [ebp - 4], 0x1eb
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x4b1b08
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004c6f8b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8