Function at 0x4f5080
Capabilities:
Get http document via iwebbrowser2
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x549c69
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x5938b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov byte [ebp - 0x110], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0xe4], 0
mov byte [ebp - 4], 2
mov dword [ebp - 0x108], 0
mov byte [ebp - 4], 3
mov dword [ebp - 0xf8], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0xec], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x104], 0
mov byte [ebp - 4], 6
mov dword [ebp - 0x100], 0
mov byte [ebp - 4], 7
mov dword [ebp - 0xf4], 0
mov byte [ebp - 4], 8
mov dword [ebp - 0x124], 0
mov byte [ebp - 4], 9
mov dword [ebp - 0xe8], 0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xfc], 0
mov byte [ebp - 4], 0xb
push 0
push 0
push 0
push 3
push 6
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x4f5189
cmp eax, 0x80010119
jne 0x4f5d04
lea eax, [ebp - 0xf0]
push eax
push 0x5500a4
push 1
push 0
push 0x5502b4
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4f5d04
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x154]
push eax
call esi
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x144]
movups xmm0, xmmword [ebp - 0x154]
push eax
movups xmmword [ebp - 0x194], xmm0
call esi
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x120]
movups xmm0, xmmword [ebp - 0x144]
push eax
movups xmmword [ebp - 0xcc], xmm0
call esi
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x134]
movups xmm0, xmmword [ebp - 0x120]
push eax
movups xmmword [ebp - 0xb4], xmm0
call esi
mov byte [ebp - 4], 0xf
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x194]
mov eax, dword [ebp - 0xf0]
mov ecx, esp
sub esp, 0x10
mov edx, dword [eax]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xcc]
movups xmmword [ecx], xmm0
mov ecx, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xb4]
movups xmmword [ecx], xmm0
mov ecx, esp
movups xmm0, xmmword [ebp - 0x134]
push eax
movups xmmword [ecx], xmm0
call dword [edx + 0x28]
mov esi, eax
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x134]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
js 0x4f5d04
mov eax, dword [ebp - 0xf0]
push 0xc
mov dword [ebp - 0xd8], eax
call fcn.004f8556
mov esi, eax
add esp, 4
mov dword [ebp - 0xdc], esi
mov byte [ebp - 4], 0x10
test esi, esi
je 0x4f52f1
push 0x565940
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x4f5e18
jmp 0x4f52f3
xor esi, esi
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xe0], esi
test esi, esi
je 0x4f5e22
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x10c]
mov ecx, dword [ebp - 0xd8]
push edx
push dword [esi]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x1c]
mov esi, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe0]
call fcn.004f6410
test esi, esi
js 0x4f5d04
mov eax, dword [ebp - 0xf0]
lea edx, [ebp - 0xe4]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x4f5d04
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0x108]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
js 0x4f5d04
cmp dword [edi + 0x2c], 8
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xe0], eax
lea eax, [edi + 0x18]
mov dword [ebp - 0xd8], eax
jb 0x4f5392
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
push 0xc
call fcn.004f8556
mov esi, eax
add esp, 4
mov dword [ebp - 0xdc], esi
mov byte [ebp - 4], 0x12
test esi, esi
je 0x4f53da
push dword [ebp - 0xd8]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x4f53dc
cmp dword [ebp - 0xd8], eax
jne 0x4f5e2c
jmp 0x4f53dc
xor esi, esi
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xd8], esi
test esi, esi
je 0x4f5e36
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xe0]
push dword [esi]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x20]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd8]
call fcn.004f6410
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0xe8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
js 0x4f5d04
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xd8], eax
mov eax, 0xb
mov word [ebp - 0x120], ax
xor eax, eax
mov word [ebp - 0x118], ax
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x164]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x120]
push 2
push 0
push eax
lea eax, [ebp - 0x164]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
test eax, eax
js 0x4f5e40
movzx esi, word [ebp - 0x15c]
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x164]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xd8]
push esi
push ecx
mov eax, dword [ecx]
call dword [eax + 0x48]
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xd8], eax
mov eax, 0xb
mov word [ebp - 0x134], ax
xor eax, eax
mov word [ebp - 0x12c], ax
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x134]
push 2
push 0
push eax
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
test eax, eax
js 0x4f5e46
movzx esi, word [ebp - 0x16c]
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xd8]
push esi
push ecx
mov eax, dword [ecx]
call dword [eax + 0xa8]
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x134]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xd8], eax
mov eax, 0xb
mov word [ebp - 0x120], ax
xor eax, eax
mov word [ebp - 0x118], ax
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x120]
push 2
push 0
push eax
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
test eax, eax
js 0x4f5e4c
movzx esi, word [ebp - 0x17c]
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xd8]
push esi
push ecx
mov eax, dword [ecx]
call dword [eax + 0x40]
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [edi + 0x60], 0
je 0x4f5600
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0xfc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
js 0x4f5d04
mov eax, dword [ebp - 0xfc]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0xf8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x4f5d04
mov eax, dword [edi + 0x64]
sub eax, 0
je 0x4f5744
sub eax, 1
jne 0x4f5d04
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xec]
push edx
push 9
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x4f5d04
mov dword [ebp - 0xd8], 0
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0xec]
push edx
push 0x550154
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x4f5693
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x4f5d04
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4f5d04
push dword [edi + 0x68]
lea eax, [ebp - 0x24]
mov dword [ebp - 0x14], 0
push str.PT_dM
push 0xffffffffffffffff
xorps xmm0, xmm0
push 0xa
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.004f6470
mov eax, dword [ebp - 0xd8]
push 0xc
mov dword [ebp - 0xe0], eax
call fcn.004f8556
mov esi, eax
add esp, 0x18
mov dword [ebp - 0xdc], esi
mov byte [ebp - 4], 0x23
test esi, esi
je 0x4f5700
lea eax, [ebp - 0x24]
mov dword [esi + 4], 0
push eax
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x4f5e52
jmp 0x4f5702
xor esi, esi
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xdc], esi
test esi, esi
je 0x4f5e5c
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0xe0]
push dword [esi]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x54]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xdc]
call fcn.004f6410
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xd8]
jmp 0x4f59e2
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xec]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x4f5d04
mov dword [ebp - 0xe0], 0
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0xec]
push edx
push 0x550194
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x4f57a7
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x4f5d04
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4f5d04
push 0x80
lea eax, [ebp - 0xa4]
push 0
push eax
call fcn.004fb1f0
add esp, 0xc
lea ecx, [ebp - 0x118]
push 0xffffffffffffffff
push 0
push dword [edi + 0x78]
push dword [edi + 0x74]
push dword [edi + 0x70]
push dword [edi + 0x6c]
push dword [edi + 0x68]
call fcn.004b0740
push 0x11
xor eax, eax
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
lea ecx, [ebp - 0xbc]
push str._Y__m__dT_H:_M:_S
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
call fcn.0040e470
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x118]
call fcn.004b0940
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xbc]
call fcn.0040ac80
cmp dword [ebp - 0xc0], 8
lea eax, [ebp - 0xd4]
mov esi, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
cmovae eax, dword [ebp - 0xd4]
push eax
call fcn.004f4cc0
mov byte [ebp - 4], 0x1e
mov ecx, dword [eax]
test ecx, ecx
je 0x4f587e
mov ecx, dword [ecx]
jmp 0x4f5880
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x3c]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xdc]
call fcn.004f6410
mov eax, dword [ebp - 0xe0]
movzx ecx, word [edi + 0x7c]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
mov dword [ebp - 0xd8], 0
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0xe0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
jns 0x4f58f4
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x4f58e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xd4]
call fcn.0040ac80
jmp 0x4f578a
push dword [edi + 0x80]
lea eax, [ebp - 0xa4]
push str.PT_dH
push 0xffffffffffffffff
push 0x40
push eax
call fcn.004f6470
mov esi, dword [ebp - 0xd8]
lea eax, [ebp - 0xa4]
add esp, 0x14
lea ecx, [ebp - 0xdc]
push eax
call fcn.004f4cc0
mov byte [ebp - 4], 0x20
mov eax, dword [eax]
test eax, eax
je 0x4f5938
mov ecx, dword [eax]
jmp 0x4f593a
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x28]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xdc]
call fcn.004f6410
push dword [edi + 0x84]
xor eax, eax
push str.PT_dH
push 0xffffffffffffffff
mov word [ebp - 0xa4], ax
lea eax, [ebp - 0xa4]
push 0x40
push eax
call fcn.004f6470
mov esi, dword [ebp - 0xd8]
lea eax, [ebp - 0xa4]
add esp, 0x14
lea ecx, [ebp - 0xdc]
push eax
call fcn.004f4cc0
mov byte [ebp - 4], 0x21
mov ecx, dword [eax]
test ecx, ecx
je 0x4f599d
mov ecx, dword [ecx]
jmp 0x4f599f
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x20]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xdc]
call fcn.004f6410
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x4f59c9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xd4]
call fcn.0040ac80
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x4f59ec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0x104]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
js 0x4f5d04
mov eax, dword [ebp - 0x104]
lea edx, [ebp - 0x100]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x4f5d04
mov eax, dword [ebp - 0x100]
lea edx, [ebp - 0xf4]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
js 0x4f5d04
cmp dword [edi + 0x44], 8
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xdc], eax
lea eax, [edi + 0x30]
mov dword [ebp - 0xd8], eax
jb 0x4f5a66
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
push 0xc
call fcn.004f8556
mov esi, eax
add esp, 4
mov dword [ebp - 0xe0], esi
mov byte [ebp - 4], 0x25
test esi, esi
je 0x4f5aae
push dword [ebp - 0xd8]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x4f5ab0
cmp dword [ebp - 0xd8], eax
jne 0x4f5e66
jmp 0x4f5ab0
xor esi, esi
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xd8], esi
test esi, esi
je 0x4f5e70
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xdc]
push dword [esi]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd8]
call fcn.004f6410
cmp dword [edi + 0x5c], 8
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xdc], eax
lea eax, [edi + 0x48]
mov dword [ebp - 0xd8], eax
jb 0x4f5b06
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
push 0xc
call fcn.004f8556
mov esi, eax
add esp, 4
mov dword [ebp - 0xe0], esi
mov byte [ebp - 4], 0x27
test esi, esi
je 0x4f5b4e
push dword [ebp - 0xd8]
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x4f5b50
cmp dword [ebp - 0xd8], eax
jne 0x4f5e7a
jmp 0x4f5b50
xor esi, esi
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xd8], esi
test esi, esi
je 0x4f5e84
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0xdc]
push dword [esi]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x34]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd8]
call fcn.004f6410
mov eax, 8
push 0x563018
mov word [ebp - 0x134], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x12c], eax
test eax, eax
je 0x4f5e8e
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x144]
movups xmm0, xmmword [ebp - 0x134]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
push eax
movups xmmword [ebp - 0xb4], xmm0
call esi
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x154]
movups xmm0, xmmword [ebp - 0x144]
push eax
movups xmmword [ebp - 0xcc], xmm0
call esi
mov byte [ebp - 4], 0x2b
cmp dword [edi + 0x14], 8
movups xmm0, xmmword [ebp - 0x154]
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xdc], eax
movups xmmword [ebp - 0x194], xmm0
jb 0x4f5c0a
mov edi, dword [edi]
push 0xc
call fcn.004f8556
mov esi, eax
add esp, 4
mov dword [ebp - 0xd8], esi
mov byte [ebp - 4], 0x2c
test esi, esi
je 0x4f5c49
push edi
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x4f5c4b
test edi, edi
jne 0x4f5e98
jmp 0x4f5c4b
xor esi, esi
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0xd8], esi
test esi, esi
je 0x4f5ea2
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x124]
movups xmm0, xmmword [ebp - 0xb4]
mov edx, dword [ebp - 0xdc]
push eax
sub esp, 0x10
mov eax, esp
mov ecx, dword [edx]
push 0
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xcc]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [ebp - 0x194]
push 6
push dword [ebp - 0xe4]
movups xmmword [eax], xmm0
push dword [esi]
push edx
call dword [ecx + 0x44]
mov esi, eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xd8]
call fcn.004f6410
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x154]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call edi
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x144]
push eax
call edi
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x134]
push eax
call edi
mov eax, dword [ebp - 0x110]
test esi, esi
movzx eax, al
mov ecx, 1
cmovns eax, ecx
mov dword [ebp - 0x110], eax
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0xfc]
test eax, eax
je 0x4f5d18
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0xe8]
test eax, eax
je 0x4f5d2c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x124]
test eax, eax
je 0x4f5d40
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x4f5d54
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x100]
test eax, eax
je 0x4f5d68
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x104]
test eax, eax
je 0x4f5d7c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x4f5d90
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0xf8]
test eax, eax
je 0x4f5da4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x108]
test eax, eax
je 0x4f5db8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xe4]
test eax, eax
je 0x4f5dcc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x10c]
test eax, eax
je 0x4f5de0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xf0]
test ecx, ecx
je 0x4f5df7
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov al, byte [ebp - 0x110]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f8545
mov esp, ebp
pop ebp
ret
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push eax
call fcn.004f83e0
push eax
call fcn.004f83e0
push eax
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
push 0x8007000e
call fcn.004f83e0
int3