Function at 0x4960e0
Capabilities:
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52fd82
mov eax, dword fs:[0]
push eax
sub esp, 0x1f8
mov eax, dword [0x590cc0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x168], edi
lea ecx, [ebp - 0x168]
push ecx
push 0x55ba00
push 1
push edi
push 0x56348c
mov dword [ebp - 4], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
jge 0x49616d
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, edi
je 0x498ea4
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x498ea4
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edx, dword [ebp - 0x1a8]
mov esi, dword [ebp - 0x1b4]
mov edi, dword [ebp - 0x1b0]
mov ebx, dword [ebp - 0x1ac]
lea eax, [ebp - 0x1d8]
push eax
mov dword [ebp - 0x6c], edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edx, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x1cc]
lea edx, [ebp - 0x1c8]
push edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c8]
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x1bc]
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x6c]
mov dword [eax + 4], edi
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov esi, dword [ebp - 0x24]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x20]
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x1c]
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x18]
mov dword [eax + 0xc], esi
mov esi, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x168]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x3c]
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x38]
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x34]
mov dword [eax + 0xc], esi
mov esi, dword [ebp - 0x5c]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [ebp - 0x58]
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x54]
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x50]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
mov byte [ebp - 4], 5
call eax
mov esi, eax
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x5c]
test esi, esi
push ecx
sets bl
call edi
lea edx, [ebp - 0x1c8]
push edx
call edi
lea eax, [ebp - 0x1d8]
push eax
call edi
lea ecx, [ebp - 0x1b4]
push ecx
call edi
test bl, bl
je 0x4962ce
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x498ea4
mov dword [ebp - 0x174], 0
mov esi, dword [ebp - 0x168]
push 0x539ff0
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 6
call fcn.004926b0
mov eax, dword [eax]
mov byte [ebp - 4], 7
test eax, eax
je 0x496300
mov eax, dword [eax]
jmp 0x496302
xor eax, eax
mov ecx, dword [esi]
lea edx, [ebp - 0x174]
push edx
push eax
mov eax, dword [ecx + 0x1c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x170]
sets bl
mov byte [ebp - 4], 6
call fcn.004937a0
test bl, bl
je 0x496364
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x496342
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp dword [ebp + 0xc], 0
mov edi, dword [ebp - 0x184]
jne 0x4963bc
mov eax, dword [ebp - 0x1a0]
push eax
mov ecx, edi
call fcn.00494360
mov esi, eax
test esi, esi
jns 0x4963bc
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x49639a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
xor ebx, ebx
mov dword [ebp - 0x16c], ebx
mov eax, dword [ebp - 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x16c]
push edx
push ebx
push eax
mov eax, dword [ecx + 0x24]
mov byte [ebp - 4], 8
call eax
mov esi, eax
cmp esi, ebx
jge 0x496432
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x4963fa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x496410
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x17c], ebx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
lea edx, [ebp - 0x17c]
push edx
push eax
mov eax, dword [ecx + 0x1c]
mov byte [ebp - 4], 9
call eax
mov esi, eax
cmp esi, ebx
jge 0x4964bb
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x49646d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x496483
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x496499
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov esi, dword [ebp - 0x17c]
lea eax, [edi + 0x80]
push eax
lea ecx, [ebp - 0x184]
push ecx
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xa
cmp eax, ebx
je 0x4964e5
mov eax, dword [eax]
jmp 0x4964e7
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x28]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x184]
sets bl
mov byte [ebp - 4], 9
call fcn.004937a0
test bl, bl
je 0x49656e
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x496520
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x496536
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x49654c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov esi, dword [ebp - 0x17c]
lea eax, [edi + 0xb8]
push eax
lea ecx, [ebp - 0x184]
push ecx
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x496598
mov eax, dword [eax]
jmp 0x49659a
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x20]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x184]
sets bl
call fcn.004937a0
test bl, bl
je 0x49661d
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4965cf
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4965e5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4965fb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
xor ebx, ebx
mov dword [ebp - 0x180], ebx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
lea edx, [ebp - 0x180]
push edx
push eax
mov eax, dword [ecx + 0x24]
mov byte [ebp - 4], 0xc
call eax
mov esi, eax
cmp esi, ebx
jge 0x4966be
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x49665a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x496670
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x496686
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x49669c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x178], ebx
mov eax, dword [edi + 0x28]
dec eax
mov byte [ebp - 4], 0xd
cmp eax, 3
ja case.default.0x4966d5
jmp dword [eax*4 + 0x498ec4]
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x178]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jge 0x49678d
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x496713
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x496729
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x49673f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x496755
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x49676b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x184], ebx
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
lea edx, [ebp - 0x184]
push edx
push 0x55ba20
push eax
mov eax, dword [ecx]
mov byte [ebp - 4], 0xe
call eax
mov esi, eax
cmp esi, ebx
jge 0x496860
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x4967d0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x4967e6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x4967fc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x496812
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x496828
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x49683e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi], bx
je 0x496977
mov esi, dword [ebp - 0x184]
lea eax, [ebp - 0x84]
push edi
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1ec]
push ecx
mov byte [ebp - 4], 0xf
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x10
cmp eax, ebx
je 0x4968a1
mov eax, dword [eax]
jmp 0x4968a3
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x3c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1ec]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x84]
call fcn.0051c7a0
test bl, bl
je 0x496977
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x4968e7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x4968fd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x496913
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x496929
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x49693f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x496955
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [ebp - 0x184]
jmp 0x497840
lea eax, [ebp - 0x191]
push eax
mov byte [ebp - 0x191], 0
call fcn.00495090
add esp, 4
cmp eax, ebx
jl 0x49705a
cmp byte [ebp - 0x191], 0
je 0x49705a
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x178]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jge 0x496a5e
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x4969e4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x4969fa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x496a10
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x496a26
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x496a3c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x170], ebx
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
lea edx, [ebp - 0x170]
push edx
push 0x55ba20
push eax
mov eax, dword [ecx]
mov byte [ebp - 4], 0x11
call eax
mov esi, eax
cmp esi, ebx
jge 0x496b31
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x496aa1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x496ab7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x496acd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x496ae3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x496af9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x496b0f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi], bx
je 0x496c46
mov esi, dword [ebp - 0x170]
lea eax, [ebp - 0x68]
push edi
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1fc]
push ecx
mov byte [ebp - 4], 0x12
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x13
cmp eax, ebx
je 0x496b6f
mov eax, dword [eax]
jmp 0x496b71
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x3c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1fc]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x11
call fcn.0051c7a0
test bl, bl
je 0x496c46
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x496bb6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x496bcc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x496be2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x496bf8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x496c0e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x496c24
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi + 0x10], 0
lea eax, [edi + 0x10]
je 0x496d5c
mov esi, dword [ebp - 0x170]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1e0]
push ecx
mov byte [ebp - 4], 0x14
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x15
test eax, eax
je 0x496c89
mov eax, dword [eax]
jmp 0x496c8b
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x44]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1e0]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x4c]
call fcn.0051c7a0
test bl, bl
je 0x496d5c
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x496ccc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x496ce2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x496cf8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x496d0e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x496d24
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x496d3a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
lea edx, [ebp - 0x184]
push edx
push eax
mov eax, dword [ecx + 0x28]
mov byte [ebp - 4], 0x16
call eax
mov esi, eax
test esi, esi
jns 0x496e45
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0x11
test eax, eax
je 0x496d9f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x496db5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x496dcb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x496de1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x496df7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x496e0d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x496e23
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [edi + 0x20]
mov esi, dword [ebp - 0x184]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00495370
add esp, 8
push eax
lea edx, [ebp - 0x1e4]
push edx
mov byte [ebp - 4], 0x17
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x18
test eax, eax
je 0x496e7d
mov eax, dword [eax]
jmp 0x496e7f
xor eax, eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x20]
push eax
push esi
call edx
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1e4]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x30]
call fcn.0051c7a0
test bl, bl
je 0x496f66
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0x11
test eax, eax
je 0x496ec0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x496ed6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x496eec
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x496f02
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x496f18
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x496f2e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x496f44
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push 0
push eax
mov byte [ebp - 4], 0x19
call edx
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1a4]
sets bl
call fcn.004937a0
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0x11
test bl, bl
je 0x49782e
test eax, eax
je 0x496fb4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x496fca
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x496fe0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x496ff6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x49700c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x497022
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x497038
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x178]
push edx
push 2
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jge 0x49710b
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x497091
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x4970a7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x4970bd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x4970d3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x4970e9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x170], ebx
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
lea edx, [ebp - 0x170]
push edx
push 0x55ba30
push eax
mov eax, dword [ecx]
mov byte [ebp - 4], 0x1a
call eax
mov esi, eax
cmp esi, ebx
jge 0x4971de
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x49714e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x497164
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x49717a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x497190
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x4971a6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x4971bc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi], bx
je 0x4972f9
mov esi, dword [ebp - 0x170]
lea eax, [ebp - 0xf4]
push edi
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1f4]
push ecx
mov byte [ebp - 4], 0x1b
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x1c
cmp eax, ebx
je 0x49721f
mov eax, dword [eax]
jmp 0x497221
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x3c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1f4]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x1a
call fcn.0051c7a0
test bl, bl
je 0x4972f9
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497269
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x49727f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x497295
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4972ab
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4972c1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4972d7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi + 0x10], 0
lea eax, [edi + 0x10]
je 0x497419
mov esi, dword [ebp - 0x170]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1dc]
push ecx
mov byte [ebp - 4], 0x1d
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x49733f
mov eax, dword [eax]
jmp 0x497341
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x44]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1dc]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x1a
call fcn.0051c7a0
test bl, bl
je 0x497419
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497389
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x49739f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x4973b5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4973cb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4973e1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4973f7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x54]
push 1
push eax
call edx
mov esi, eax
test esi, esi
jns 0x4974d9
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497449
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x49745f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x497475
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x49748b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4974a1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4974b7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
lea edx, [ebp - 0x184]
push edx
push eax
mov eax, dword [ecx + 0x28]
mov byte [ebp - 4], 0x1f
call eax
mov esi, eax
test esi, esi
jns 0x4975c2
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x49751c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497532
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x497548
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x49755e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x497574
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x49758a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4975a0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [edi + 0x24]
test eax, eax
je 0x4976f5
mov esi, dword [ebp - 0x184]
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.00495370
add esp, 8
push eax
lea ecx, [ebp - 0x204]
push ecx
mov byte [ebp - 4], 0x20
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x21
test eax, eax
je 0x497605
mov eax, dword [eax]
jmp 0x497607
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x28]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x204]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x1f
call fcn.0051c7a0
test bl, bl
je 0x4976f5
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x49764f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497665
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x49767b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x497691
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4976a7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4976bd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4976d3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [edi + 0x20]
test eax, eax
je 0x497824
mov esi, dword [ebp - 0x184]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00495370
add esp, 8
push eax
lea ecx, [ebp - 0x200]
push ecx
mov byte [ebp - 4], 0x22
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x23
test eax, eax
je 0x497738
mov eax, dword [eax]
jmp 0x49773a
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x20]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x200]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0xd8]
call fcn.0051c7a0
test bl, bl
je 0x497824
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x49777e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497794
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x4977aa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x4977c0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4977d6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4977ec
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x497802
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [ebp - 0x184]
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x49783a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497850
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor ebx, ebx
mov dword [ebp - 0x18c], ebx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
lea edx, [ebp - 0x18c]
push edx
push eax
mov eax, dword [ecx + 0x44]
mov byte [ebp - 4], 0x2e
call eax
mov esi, eax
cmp esi, ebx
jge 0x4983ab
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x497891
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x4978a7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x4978bd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x4978d3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x4978e9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x4978ff
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x178]
push edx
push 3
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jge 0x4979d2
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x497958
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x49796e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x497984
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x49799a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x4979b0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x170], ebx
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
lea edx, [ebp - 0x170]
push edx
push 0x55ba40
push eax
mov eax, dword [ecx]
mov byte [ebp - 4], 0x24
call eax
mov esi, eax
cmp esi, ebx
jge 0x497aa5
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x497a15
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x497a2b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x497a41
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x497a57
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x497a6d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x497a83
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi], bx
je 0x497bc0
mov esi, dword [ebp - 0x170]
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1e8]
push ecx
mov byte [ebp - 4], 0x25
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x26
cmp eax, ebx
je 0x497ae6
mov eax, dword [eax]
jmp 0x497ae8
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x3c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1e8]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x24
call fcn.0051c7a0
test bl, bl
je 0x497bc0
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497b30
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x497b46
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x497b5c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x497b72
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x497b88
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x497b9e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi + 0x10], 0
lea eax, [edi + 0x10]
je 0x497ce0
mov esi, dword [ebp - 0x170]
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1f8]
push ecx
mov byte [ebp - 4], 0x27
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x28
test eax, eax
je 0x497c06
mov eax, dword [eax]
jmp 0x497c08
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x44]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1f8]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x24
call fcn.0051c7a0
test bl, bl
je 0x497ce0
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497c50
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x497c66
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x497c7c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x497c92
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x497ca8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x497cbe
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov esi, dword [ebp - 0x170]
mov ebx, dword [esi]
push edi
mov ecx, edi
call fcn.00492890
mov ecx, dword [ebx + 0x54]
movzx eax, ax
push eax
push esi
call ecx
mov esi, eax
mov eax, dword [ebp - 0x170]
test esi, esi
jns 0x497daa
mov byte [ebp - 4], 0xd
test eax, eax
je 0x497d1a
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x497d30
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x497d46
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x497d5c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x497d72
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x497d88
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 1
push eax
call edx
mov esi, eax
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test esi, esi
jns 0x497844
test eax, eax
je 0x497dd4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x497dea
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x497e00
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x497e16
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x497e2c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x497e42
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x178]
push edx
push 4
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jge 0x497f15
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x497e9b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x497eb1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x497ec7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x497edd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x497ef3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x170], ebx
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
lea edx, [ebp - 0x170]
push edx
push 0x55ba50
push eax
mov eax, dword [ecx]
mov byte [ebp - 4], 0x29
call eax
mov esi, eax
cmp esi, ebx
jge 0x497fe8
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x497f58
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x497f6e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x497f84
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x497f9a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x497fb0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x497fc6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi], bx
je 0x498103
mov esi, dword [ebp - 0x170]
lea eax, [ebp - 0xa0]
push edi
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x1f0]
push ecx
mov byte [ebp - 4], 0x2a
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x2b
cmp eax, ebx
je 0x498029
mov eax, dword [eax]
jmp 0x49802b
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x3c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x1f0]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x29
call fcn.0051c7a0
test bl, bl
je 0x498103
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x498073
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x498089
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x49809f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4980b5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4980cb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4980e1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp word [edi + 0x10], 0
lea eax, [edi + 0x10]
je 0x498223
mov esi, dword [ebp - 0x170]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.00495220
add esp, 8
push eax
lea ecx, [ebp - 0x19c]
push ecx
mov byte [ebp - 4], 0x2c
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x2d
test eax, eax
je 0x498149
mov eax, dword [eax]
jmp 0x49814b
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x44]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x19c]
sets bl
call fcn.004937a0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x29
call fcn.0051c7a0
test bl, bl
je 0x498223
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x498193
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x4981a9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x4981bf
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4981d5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4981eb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x498201
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
movzx ecx, word [edi + 6]
mov eax, dword [ebp - 0x170]
mov edx, dword [eax]
dec ecx
mov esi, 1
shl esi, cl
push esi
push eax
mov eax, dword [edx + 0x54]
call eax
mov esi, eax
mov eax, dword [ebp - 0x170]
test esi, esi
jns 0x4982ee
mov byte [ebp - 4], 0xd
test eax, eax
je 0x49825e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x498274
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x49828a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4982a0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4982b6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4982cc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 0xfff
push eax
call edx
mov esi, eax
test esi, esi
jns 0x49783a
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x49831b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x498331
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x498347
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x49835d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x498373
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x498389
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x190], ebx
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax]
lea edx, [ebp - 0x190]
push edx
push ebx
push eax
mov eax, dword [ecx + 0x30]
mov byte [ebp - 4], 0x2f
call eax
mov esi, eax
cmp esi, ebx
jge 0x498491
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
cmp eax, ebx
je 0x4983eb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x498401
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x498417
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x49842d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x498443
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x498459
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x49846f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x188], ebx
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax]
lea edx, [ebp - 0x188]
push edx
push 0x55ba10
push eax
mov eax, dword [ecx]
mov byte [ebp - 4], 0x30
call eax
mov esi, eax
cmp esi, ebx
jge 0x498590
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 0x2f
cmp eax, ebx
je 0x4984d4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
cmp eax, ebx
je 0x4984ea
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x498500
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x498516
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x49852c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x498542
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x498558
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x49856e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov esi, dword [ebp - 0x188]
lea eax, [edi + 0x2c]
push eax
lea ecx, [ebp - 0x19c]
push ecx
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x31
cmp eax, ebx
je 0x4985b7
mov eax, dword [eax]
jmp 0x4985b9
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x2c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x19c]
sets bl
mov byte [ebp - 4], 0x30
call fcn.004937a0
test bl, bl
je 0x4986b2
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x4985f6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x49860c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x498622
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x498638
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x49864e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x498664
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x49867a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x498690
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp dword [edi + 0x74], 0
je 0x4987de
mov esi, dword [ebp - 0x188]
lea eax, [edi + 0x64]
push eax
lea ecx, [ebp - 0x19c]
push ecx
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x32
test eax, eax
je 0x4986e3
mov eax, dword [eax]
jmp 0x4986e5
xor eax, eax
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x3c]
push esi
call eax
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x19c]
sets bl
mov byte [ebp - 4], 0x30
call fcn.004937a0
test bl, bl
je 0x4987de
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x498722
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x498738
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x49874e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x498764
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x49877a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x498790
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4987a6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4987bc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
cmp dword [edi + 0x58], 0
je 0x498906
mov esi, dword [ebp - 0x188]
add edi, 0x48
lea eax, [ebp - 0x19c]
push edi
push eax
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x33
test eax, eax
je 0x49880f
mov eax, dword [eax]
jmp 0x498811
xor eax, eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x34]
push eax
push esi
call edx
mov esi, eax
test esi, esi
lea ecx, [ebp - 0x19c]
sets bl
call fcn.004937a0
test bl, bl
je 0x498906
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x49884a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x498860
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x498876
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x49888c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x4988a2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4988b8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4988ce
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4988e4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
lea edx, [ebp - 0x198]
push edx
push eax
mov eax, dword [ecx + 0x2c]
mov byte [ebp - 4], 0x34
call eax
mov esi, eax
test esi, esi
jns 0x498a1b
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0x30
test eax, eax
je 0x498949
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x49895f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x498975
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x49898b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x4989a1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x4989b7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x4989cd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x4989e3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x4989f9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov esi, dword [ebp - 0x198]
mov eax, 0xb
xor ecx, ecx
mov word [ebp - 0x1b4], ax
mov word [ebp - 0x1ac], cx
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x35
call fcn.00492760
mov edx, dword [esi]
movzx eax, ax
push eax
mov eax, dword [edx + 0x40]
push esi
call eax
mov esi, eax
lea ecx, [ebp - 0x1b4]
test esi, esi
push ecx
sets bl
mov byte [ebp - 4], 0x34
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x198]
test bl, bl
je 0x498b59
mov byte [ebp - 4], 0x30
test eax, eax
je 0x498a87
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x498a9d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x498ab3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x498ac9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x498adf
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x498af5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x498b0b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x498b21
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
test eax, eax
je 0x498b37
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x498ea4
mov ecx, dword [eax]
mov edx, dword [ecx + 0x88]
push 4
push eax
call edx
mov esi, eax
test esi, esi
jns 0x498c30
mov eax, dword [ebp - 0x198]
mov byte [ebp - 4], 0x30
test eax, eax
je 0x498b86
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x188]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x498b9c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x498bb2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x18c]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x498bc8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x178]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x498bde
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
test eax, eax
je 0x498bf4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
test eax, eax
je 0x498c0a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
test eax, eax
je 0x498c20
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [ebp - 0x174]
call fcn.00492880
jmp 0x498e99
mov dword [ebp - 0x1b8], 0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x1c8]
push eax
call esi
mov ecx, dword [ebp - 0x1c0]
mov edx, dword [ebp - 0x1bc]
mov edi, dword [ebp - 0x1c8]
mov ebx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x1d8]
push eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], edx
call esi
mov edx, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x1cc]
lea edx, [ebp - 0x1b4]
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
call esi
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x1b4]
mov esi, dword [ebp - 0x174]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x1a4]
push edx
mov byte [ebp - 4], 0x39
mov dword [ebp - 0x18], eax
call fcn.00493f20
add esp, 8
mov eax, dword [eax]
mov byte [ebp - 4], 0x3a
test eax, eax
je 0x498cef
mov ecx, dword [eax]
jmp 0x498cf1
xor ecx, ecx
lea eax, [ebp - 0x1b8]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0x54]
mov dword [eax + 4], ebx
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x50]
mov dword [eax + 0xc], edi
mov edi, dword [ebp - 0x40]
push 3
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0x3c]
mov dword [eax + 4], edi
mov edi, dword [ebp - 0x38]
mov edx, dword [esi]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x34]
mov dword [eax + 0xc], edi
mov edi, dword [ebp - 0x24]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0x20]
mov dword [eax + 4], edi
mov edi, dword [ebp - 0x1c]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x18]
push 2
mov dword [eax + 0xc], edi
mov eax, dword [ebp - 0x16c]
push eax
push ecx
mov ecx, dword [edx + 0x44]
push esi
call ecx
lea ecx, [ebp - 0x1a4]
mov esi, eax
call fcn.004937a0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x1b4]
push edx
call edi
lea eax, [ebp - 0x1d8]
push eax
call edi
lea ecx, [ebp - 0x1c8]
push ecx
call edi
lea ecx, [ebp - 0x1b8]
call fcn.00492880
lea ecx, [ebp - 0x198]
call fcn.00492880
lea ecx, [ebp - 0x188]
call fcn.00492880
lea ecx, [ebp - 0x190]
call fcn.00492880
lea ecx, [ebp - 0x18c]
call fcn.00492880
lea ecx, [ebp - 0x178]
call fcn.00492880
lea ecx, [ebp - 0x180]
call fcn.00492880
lea ecx, [ebp - 0x17c]
call fcn.00492880
lea ecx, [ebp - 0x16c]
call fcn.00492880
lea ecx, [ebp - 0x174]
call fcn.00492880
jmp 0x498e99
mov eax, dword [ebp - 0x180]
mov byte [ebp - 4], 9
cmp eax, ebx
je 0x498e11
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x17c]
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x498e27
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x16c]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x498e3d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x498e53
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x498e6c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0x80004005
jmp 0x498ea6
lea ecx, [ebp - 0x168]
call fcn.00492880
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b9ff3
mov esp, ebp
pop ebp
ret 8