Function at 0x4c1270
Capabilities:
Get http document via iwebbrowser2
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e71cc
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x190
mov eax, dword [0x66a074]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xf0], edi
mov byte [ebp - 0xf1], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x130], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0xfc], 0
mov byte [ebp - 4], 2
mov dword [ebp - 0x12c], 0
mov byte [ebp - 4], 3
mov dword [ebp - 0x128], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0x124], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x108], 0
mov byte [ebp - 4], 6
mov dword [ebp - 0x114], 0
mov byte [ebp - 4], 7
mov dword [ebp - 0x120], 0
mov byte [ebp - 4], 8
mov dword [ebp - 0x11c], 0
mov byte [ebp - 4], 9
mov dword [ebp - 0x110], 0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x134], 0
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x104], 0
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x118], 0
push 0
push 0
push 0
push 3
push 6
push 0
push 0
push 0xffffffffffffffff
push 0
mov byte [ebp - 4], 0xd
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x4c13ae
cmp eax, 0x80010119
jne 0x4c1ecd
lea eax, [ebp - 0x10c]
push eax
push 0x607e78
push 1
push 0
push 0x608088
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4c1ecd
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x180]
push eax
call esi
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x168]
movups xmm0, xmmword [ebp - 0x180]
push eax
movups xmmword [ebp - 0x190], xmm0
call esi
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x158]
movups xmm0, xmmword [ebp - 0x168]
push eax
movups xmmword [ebp - 0x1a0], xmm0
call esi
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x148]
movups xmm0, xmmword [ebp - 0x158]
push eax
movups xmmword [ebp - 0xa8], xmm0
call esi
mov byte [ebp - 4], 0x11
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x190]
mov eax, dword [ebp - 0x10c]
mov ecx, esp
sub esp, 0x10
mov edx, dword [eax]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x1a0]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xa8]
movups xmmword [ecx], xmm0
mov ecx, esp
movups xmm0, xmmword [ebp - 0x148]
push eax
movups xmmword [ecx], xmm0
call dword [edx + 0x28]
mov esi, eax
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x148]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0xf
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xe
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 0xd
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
js 0x4c1ecd
mov eax, dword [ebp - 0x10c]
push 0xc
mov dword [ebp - 0xf8], eax
call fcn.005b75ca
mov esi, eax
add esp, 4
mov dword [ebp - 0x100], esi
mov byte [ebp - 4], 0x12
test esi, esi
je 0x4c1516
push 0x613f10
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x4c2013
jmp 0x4c1518
xor esi, esi
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x100], esi
test esi, esi
je 0x4c201d
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x130]
mov ecx, dword [ebp - 0xf8]
push edx
push dword [esi]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x1c]
mov dword [ebp - 0xf8], eax
lea eax, [esi + 8]
push eax
mov byte [ebp - 4], 0xd
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c1590
mov eax, dword [esi]
test eax, eax
je 0x4c156e
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1585
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
cmp dword [ebp - 0xf8], 0
mov dword [ebp - 0x100], 0
jl 0x4c1ecd
mov eax, dword [ebp - 0x10c]
lea edx, [ebp - 0xfc]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x4c1ecd
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0x12c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
js 0x4c1ecd
mov esi, dword [ebp - 0x12c]
add edi, 0x18
cmp dword [edi + 0x14], 8
jb 0x4c15f0
mov edi, dword [edi]
push edi
lea ecx, [ebp - 0xf8]
call fcn.004c0db0
mov byte [ebp - 4], 0x14
mov ecx, dword [eax]
test ecx, ecx
je 0x4c160a
mov ecx, dword [ecx]
jmp 0x4c160c
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x20]
mov byte [ebp - 4], 0xd
mov esi, dword [ebp - 0xf8]
test esi, esi
je 0x4c1672
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c1668
test esi, esi
je 0x4c1668
mov eax, dword [esi]
test eax, eax
je 0x4c1646
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c165d
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
mov dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0x104]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
js 0x4c1ecd
mov edi, dword [ebp - 0x104]
mov eax, 0xb
mov word [ebp - 0x168], ax
xor eax, eax
mov word [ebp - 0x160], ax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x168]
mov esi, dword [edi]
call fcn.004c0eb0
movzx eax, ax
push eax
push edi
call dword [esi + 0x48]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xd
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x104]
mov eax, 0xb
mov word [ebp - 0x158], ax
xor eax, eax
mov word [ebp - 0x150], ax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x158]
mov esi, dword [edi]
call fcn.004c0eb0
movzx eax, ax
push eax
push edi
call dword [esi + 0xa8]
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0xd
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x104]
mov eax, 0xb
mov word [ebp - 0x148], ax
xor eax, eax
mov word [ebp - 0x140], ax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x148]
mov esi, dword [edi]
call fcn.004c0eb0
movzx eax, ax
push eax
push edi
call dword [esi + 0x40]
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0xd
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0xf0]
cmp byte [edi + 0x60], 0
je 0x4c1794
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0x118]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
js 0x4c1ecd
mov eax, dword [ebp - 0x118]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0x128]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x4c1ecd
mov eax, dword [ebp - 0x128]
lea edx, [ebp - 0x124]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x4c1ecd
mov eax, dword [ebp - 0x124]
lea edx, [ebp - 0x108]
push edx
push 0x607f68
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
js 0x4c1ecd
push 0x80
lea eax, [ebp - 0x98]
push 0
push eax
call fcn.005b9c20
mov esi, dword [edi + 0x68]
add esp, 0xc
mov eax, dword [edi + 0x74]
mov ecx, dword [edi + 0x70]
mov edx, dword [edi + 0x6c]
mov edi, dword [edi + 0x64]
mov dword [ebp - 0xe8], eax
lea eax, [esi - 1]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xec], 0
lea eax, [edi - 0x76c]
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xec]
push eax
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xcc], 0xffffffff
call fcn.005c27fc
add esp, 4
mov dword [ebp - 0x170], eax
xor eax, eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x16c], edx
push 0x11
push str._Y__m__dT_H:_M:_S
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], ax
call fcn.00409060
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x170]
call fcn.004ccb70
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1b
call fcn.00408ff0
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0xc8]
cmp dword [ebp - 0xb4], 8
lea ecx, [ebp - 0xf8]
mov esi, dword [ebp - 0x108]
cmovae eax, dword [ebp - 0xc8]
push eax
call fcn.004c0db0
mov byte [ebp - 4], 0x1f
mov ecx, dword [eax]
test ecx, ecx
je 0x4c190d
mov ecx, dword [ecx]
jmp 0x4c190f
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x3c]
mov byte [ebp - 4], 0x1a
mov esi, dword [ebp - 0xf8]
test esi, esi
je 0x4c1975
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c196b
test esi, esi
je 0x4c196b
mov eax, dword [esi]
test eax, eax
je 0x4c1949
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1960
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
mov dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x108]
mov edi, dword [ebp - 0xf0]
mov edx, dword [eax]
movzx ecx, word [edi + 0x78]
push ecx
push eax
call dword [edx + 0x54]
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x114]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
jns 0x4c19b7
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x20
call fcn.00408ff0
jmp 0x4c1ec9
push dword [edi + 0x7c]
lea eax, [ebp - 0x98]
push str.PT_dH
push 0xffffffffffffffff
push 0x40
push eax
call fcn.004ac840
mov eax, dword [ebp - 0x114]
add esp, 0x14
mov dword [ebp - 0x100], eax
push 0xc
call fcn.005b75ca
mov esi, eax
add esp, 4
mov dword [ebp - 0xf0], esi
mov byte [ebp - 4], 0x24
test esi, esi
je 0x4c1a1f
lea eax, [ebp - 0x98]
mov dword [esi + 4], 0
push eax
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x4c2027
jmp 0x4c1a21
xor esi, esi
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xf0], esi
test esi, esi
je 0x4c2031
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x100]
push dword [esi]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
lea eax, [esi + 8]
mov byte [ebp - 4], 0x1a
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c1a8c
mov eax, dword [esi]
test eax, eax
je 0x4c1a6a
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1a81
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
push dword [edi + 0x80]
xor eax, eax
mov dword [ebp - 0xf0], 0
push str.PT_dH
push 0xffffffffffffffff
mov word [ebp - 0x98], ax
lea eax, [ebp - 0x98]
push 0x40
push eax
call fcn.004ac840
mov eax, dword [ebp - 0x114]
add esp, 0x14
mov dword [ebp - 0x100], eax
push 0xc
call fcn.005b75ca
mov esi, eax
add esp, 4
mov dword [ebp - 0xf0], esi
mov byte [ebp - 4], 0x26
test esi, esi
je 0x4c1b0a
lea eax, [ebp - 0x98]
mov dword [esi + 4], 0
push eax
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x4c203b
jmp 0x4c1b0c
xor esi, esi
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xf0], esi
test esi, esi
je 0x4c2045
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x100]
push dword [esi]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x20]
lea eax, [esi + 8]
mov byte [ebp - 4], 0x1a
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c1b77
mov eax, dword [esi]
test eax, eax
je 0x4c1b55
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1b6c
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0x120]
push edx
push eax
mov dword [ebp - 0xf0], 0
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jns 0x4c1bac
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x28
call fcn.00408ff0
jmp 0x4c1ec9
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x11c]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
jns 0x4c1bd9
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x2c
call fcn.00408ff0
jmp 0x4c1ec9
mov eax, dword [ebp - 0x11c]
lea edx, [ebp - 0x110]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x4c1c08
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x30
call fcn.00408ff0
jmp 0x4c1ec9
cmp dword [edi + 0x44], 8
lea eax, [edi + 0x30]
mov esi, dword [ebp - 0x110]
jb 0x4c1c19
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xf0]
call fcn.004c0db0
mov byte [ebp - 4], 0x34
mov ecx, dword [eax]
test ecx, ecx
je 0x4c1c33
mov ecx, dword [ecx]
jmp 0x4c1c35
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x2c]
mov byte [ebp - 4], 0x1a
mov esi, dword [ebp - 0xf0]
test esi, esi
je 0x4c1c9b
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c1c91
test esi, esi
je 0x4c1c91
mov eax, dword [esi]
test eax, eax
je 0x4c1c6f
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1c86
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
mov dword [ebp - 0xf0], 0
cmp dword [edi + 0x5c], 8
lea eax, [edi + 0x48]
mov esi, dword [ebp - 0x110]
jb 0x4c1cac
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xf0]
call fcn.004c0db0
mov byte [ebp - 4], 0x35
mov ecx, dword [eax]
test ecx, ecx
je 0x4c1cc6
mov ecx, dword [ecx]
jmp 0x4c1cc8
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x34]
mov byte [ebp - 4], 0x1a
mov esi, dword [ebp - 0xf0]
test esi, esi
je 0x4c1d2e
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c1d24
test esi, esi
je 0x4c1d24
mov eax, dword [esi]
test eax, eax
je 0x4c1d02
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1d19
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
mov dword [ebp - 0xf0], 0
mov eax, 8
push 0x612848
mov word [ebp - 0x148], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x140], eax
test eax, eax
je 0x4c204f
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x158]
movups xmm0, xmmword [ebp - 0x148]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
push eax
movups xmmword [ebp - 0xa8], xmm0
call esi
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x180]
movups xmm0, xmmword [ebp - 0x158]
push eax
movups xmmword [ebp - 0x1a0], xmm0
call esi
mov byte [ebp - 4], 0x38
cmp dword [edi + 0x14], 8
movups xmm0, xmmword [ebp - 0x180]
mov esi, dword [ebp - 0x130]
movups xmmword [ebp - 0x190], xmm0
jb 0x4c1daf
mov edi, dword [edi]
push edi
lea ecx, [ebp - 0xf0]
call fcn.004c0db0
mov byte [ebp - 4], 0x39
mov eax, dword [eax]
test eax, eax
je 0x4c1dc9
mov edx, dword [eax]
jmp 0x4c1dcb
xor edx, edx
movups xmm0, xmmword [ebp - 0xa8]
mov ecx, dword [esi]
lea eax, [ebp - 0x134]
push eax
sub esp, 0x10
mov eax, esp
push 0
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x1a0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x190]
push 6
push dword [ebp - 0xfc]
movups xmmword [eax], xmm0
push edx
push esi
call dword [ecx + 0x44]
mov byte [ebp - 4], 0x38
mov edi, eax
mov esi, dword [ebp - 0xf0]
test esi, esi
je 0x4c1e71
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4c1e67
test esi, esi
je 0x4c1e67
mov eax, dword [esi]
test eax, eax
je 0x4c1e45
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4c1e5c
push eax
call fcn.005b79a0
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.005b7992
add esp, 8
mov dword [ebp - 0xf0], 0
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 0x37
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call esi
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x36
push eax
call esi
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x1a
push eax
call esi
test edi, edi
jns 0x4c1eb3
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3a
call fcn.00408ff0
jmp 0x4c1ec9
mov byte [ebp - 0xf1], 1
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3e
call fcn.00408ff0
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x118]
test eax, eax
je 0x4c1ee1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x104]
test eax, eax
je 0x4c1ef5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x134]
test eax, eax
je 0x4c1f09
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0x110]
test eax, eax
je 0x4c1f1d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x4c1f31
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x47
mov eax, dword [ebp - 0x120]
test eax, eax
je 0x4c1f45
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0x114]
test eax, eax
je 0x4c1f59
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0x108]
test eax, eax
je 0x4c1f6d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x124]
test eax, eax
je 0x4c1f81
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4b
mov eax, dword [ebp - 0x128]
test eax, eax
je 0x4c1f95
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4c
mov eax, dword [ebp - 0x12c]
test eax, eax
je 0x4c1fa9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4d
mov eax, dword [ebp - 0xfc]
test eax, eax
je 0x4c1fbd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x4e
mov eax, dword [ebp - 0x130]
test eax, eax
je 0x4c1fd1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x10c]
test ecx, ecx
je 0x4c1fe8
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov al, byte [ebp - 0xf1]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b75ab
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.005b8660
push 0x8007000e
call fcn.005b8660
push 0x8007000e
call fcn.005b8660
push 0x8007000e
call fcn.005b8660
push 0x8007000e
call fcn.005b8660
push 0x8007000e
call fcn.005b8660
push 0x8007000e
call fcn.005b8660
int3