Function at 0x4d856c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe48
push ebx
mov dword [ebp - 0x128], eax
mov eax, 0x5e9a48
call fcn.005496a0
mov edx, dword [ebp - 0x128]
cmp dword [edx + 0xe4], 0
jne 0x4d85e3
lea ecx, [ebp - 0x124]
push ecx
push 0
push 0
push 0
push 1
push fcn.00401d4c
push 0
mov word [ebp - 0x114], 8
mov edx, 0x5e6499
lea eax, [ebp - 0x24]
call fcn.005499e4
inc dword [ebp - 0x108]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [sym.imp.rtl60.bpl__Sysutils_Exception_]
call sub.rtl60.bpl__Sysutils_Exception__bctr_qqrx17System_AnsiString
push eax
push 0x401ce8
call sub.cc3260mt.dll___ThrowExceptionLDTC_qpvt1t1t1uiuiuipuct1
add esp, 0x24
mov word [ebp - 0x114], 0x14
lea eax, [ebp - 4]
call fcn.00401fbc
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x20
mov word [ebp - 0x114], 0x2c
lea eax, [ebp - 8]
call fcn.0041db28
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x20
mov word [ebp - 0x114], 0x38
lea eax, [ebp - 0xc]
call fcn.0041db28
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x20
mov word [ebp - 0x114], 0x44
lea eax, [ebp - 0x10]
call fcn.0041db28
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x20
mov word [ebp - 0x114], 0x50
lea eax, [ebp - 0x14]
call fcn.0041db28
inc dword [ebp - 0x108]
mov word [ebp - 0x114], 0x20
push 0
call sub.ole32.dll_CoInitialize
mov word [ebp - 0x114], 0x5c
lea eax, [ebp - 0x18]
call fcn.004225c8
push eax
inc dword [ebp - 0x108]
mov edx, 0x5e64b2
lea eax, [ebp - 0x28]
call fcn.0054bebc
inc dword [ebp - 0x108]
mov eax, dword [eax]
pop edx
call fcn.004b47dc
dec dword [ebp - 0x108]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0054bfa4
mov word [ebp - 0x114], 0x20
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov edx, dword [eax]
call dword [edx + 0x48]
mov dword [ebp - 0x134], eax
mov word [ebp - 0x114], 0x68
mov edx, 0x5e64b3
lea eax, [ebp - 0x2c]
call fcn.005499e4
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
dec dword [ebp - 0x108]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00549c08
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x13c], eax
mov dl, 1
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov word [ebp - 0x114], 0x74
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x34]
call fcn.0041db28
push eax
inc dword [ebp - 0x108]
mov edx, 0x5e64b4
lea eax, [ebp - 0x30]
call fcn.0054bebc
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, dword [ebp - 0x140]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x78]
lea eax, [ebp - 0x34]
call fcn.00422698
mov edx, eax
lea eax, [ebp - 8]
call fcn.004226a8
dec dword [ebp - 0x108]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0041db58
dec dword [ebp - 0x108]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0054bfa4
mov word [ebp - 0x114], pe_nt_image_headers32
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x144], eax
mov edx, 0x5e621b
lea eax, [ebp - 0x3c]
call fcn.0054bf6c
inc dword [ebp - 0x108]
push dword [eax]
lea eax, [ebp - 0x40]
call fcn.0041db28
push eax
inc dword [ebp - 0x108]
mov edx, 0x5e64bc
lea eax, [ebp - 0x38]
call fcn.0054bebc
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov cl, 2
mov eax, dword [ebp - 0x144]
mov ebx, dword [eax]
call dword [ebx + 0x84]
lea eax, [ebp - 0x40]
call fcn.00422698
mov edx, eax
lea eax, [ebp - 0xc]
call fcn.004226a8
dec dword [ebp - 0x108]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0041db58
dec dword [ebp - 0x108]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0054bfa4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0054bfa4
lea eax, [ebp - 0xc]
call fcn.0041db98
mov dword [ebp - 0x148], eax
mov word [ebp - 0x114], 0x8c
lea eax, [ebp - 0x44]
call fcn.00401fbc
mov edx, eax
inc dword [ebp - 0x108]
mov ecx, dword [ebp - 0x128]
mov eax, dword [ecx + 0xe4]
call fcn.0047a690
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x54]
call fcn.00426ea0
mov edx, eax
add dword [ebp - 0x108], 2
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax]
call dword [ecx + 0x60]
sub dword [ebp - 0x108], 2
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0041dad4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00549c08
mov word [ebp - 0x114], 0x98
lea eax, [ebp - 8]
call fcn.0041db98
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x58]
call fcn.0041da18
mov edx, eax
inc dword [ebp - 0x108]
mov eax, dword [ebp - 0x150]
mov ecx, dword [eax]
call dword [ecx + 0x10]
lea eax, [ebp - 0x58]
call fcn.0041da88
mov dword [ebp - 0x14c], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
call dword [ecx + 0x18]
dec dword [ebp - 0x108]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0041da48
mov word [ebp - 0x114], 0xa4
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x154], eax
mov edx, 0x5e621b
lea eax, [ebp - 0x60]
call fcn.0054bf6c
inc dword [ebp - 0x108]
push dword [eax]
lea eax, [ebp - 0x64]
call fcn.0041db28
push eax
inc dword [ebp - 0x108]
mov edx, 0x5e64c2
lea eax, [ebp - 0x5c]
call fcn.0054bebc
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov cl, 2
mov eax, dword [ebp - 0x154]
mov ebx, dword [eax]
call dword [ebx + 0x84]
lea eax, [ebp - 0x64]
call fcn.00422698
mov edx, eax
lea eax, [ebp - 0xc]
call fcn.004226a8
dec dword [ebp - 0x108]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0041db58
dec dword [ebp - 0x108]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0054bfa4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0054bfa4
lea eax, [ebp - 0xc]
call fcn.0041db98
mov dword [ebp - 0x158], eax
mov word [ebp - 0x114], 0xb0
mov edx, dword [ebp - 0x128]
add edx, 0xe8
lea eax, [ebp - 0x74]
call fcn.00426ea0
mov edx, eax
add dword [ebp - 0x108], 2
mov eax, dword [ebp - 0x158]
mov ecx, dword [eax]
call dword [ecx + 0x60]
sub dword [ebp - 0x108], 2
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0041dad4
mov word [ebp - 0x114], 0xbc
lea eax, [ebp - 8]
call fcn.0041db98
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x78]
call fcn.0041da18
mov edx, eax
inc dword [ebp - 0x108]
mov eax, dword [ebp - 0x160]
mov ecx, dword [eax]
call dword [ecx + 0x10]
lea eax, [ebp - 0x78]
call fcn.0041da88
mov dword [ebp - 0x15c], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax]
call dword [ecx + 0x18]
dec dword [ebp - 0x108]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0041da48
mov word [ebp - 0x114], 0xc8
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov edx, dword [eax]
call dword [edx + 0x48]
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x1c]
call fcn.00401fbc
mov edx, eax
inc dword [ebp - 0x108]
mov eax, dword [ebp - 0x164]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov word [ebp - 0x114], 0x20
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov edx, dword [eax]
call dword [edx + 0x48]
mov dword [ebp - 0x16c], eax
mov word [ebp - 0x114], 0xd4
mov edx, 0x5e64c9
lea eax, [ebp - 0x7c]
call fcn.005499e4
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
dec dword [ebp - 0x108]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.00549c08
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x174], eax
xor edx, edx
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov word [ebp - 0x114], 0xe0
lea eax, [ebp - 0x20]
call fcn.00401fbc
push eax
inc dword [ebp - 0x108]
mov edx, 0x5e64ca
lea eax, [ebp - 0x80]
call fcn.005499e4
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x128]
mov eax, dword [eax + 0xe0]
call sym.SDERPService.exe__TClientProxy_Invoke_qqr17System_AnsiStringt1
dec dword [ebp - 0x108]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.00549c08
mov word [ebp - 0x114], 0x20
push 4
lea eax, [ebp - 0x20]
call fcn.0042bd14
push eax
lea edx, [ebp - 0x12c]
push edx
call sub.cc3260mt.dll__memcpy
add esp, 0xc
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov edx, dword [eax]
call dword [edx + 0x48]
mov dword [ebp - 0x178], eax
mov word [ebp - 0x114], 0xec
lea eax, [ebp - 0x84]
call fcn.00401fbc
push eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x12c]
mov edx, 5
call fcn.00549fb0
lea edx, [ebp - 0x84]
mov edx, dword [edx]
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
dec dword [ebp - 0x108]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.00549c08
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x180], eax
mov dl, 1
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov word [ebp - 0x114], 0xf8
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x88]
call fcn.0041da18
mov edx, eax
inc dword [ebp - 0x108]
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax]
call dword [ecx + 0x14]
lea eax, [ebp - 0x88]
call fcn.0041da88
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x9c]
call fcn.0041db28
push eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0x98]
xor edx, edx
call fcn.0041da98
add dword [ebp - 0x108], 2
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x188]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x10]
lea eax, [ebp - 0x9c]
call fcn.0041db98
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0xa0]
call fcn.0040dff4
mov edx, eax
inc dword [ebp - 0x108]
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0xa0]
push edx
mov edx, 0x5e64d6
lea eax, [ebp - 0xa4]
call fcn.0054bebc
mov edx, eax
inc dword [ebp - 0x108]
pop eax
call fcn.0054c02c
push eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0054bfa4
dec dword [ebp - 0x108]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.0054bfa4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0041db58
sub dword [ebp - 0x108], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0041dad4
dec dword [ebp - 0x108]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0041da48
pop ecx
test cl, cl
je 0x4d90ae
mov word [ebp - 0x114], 0x104
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x1a0], eax
lea eax, [ebp - 0xa8]
call fcn.0041da18
mov edx, eax
inc dword [ebp - 0x108]
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [eax]
call dword [ecx + 0x14]
lea eax, [ebp - 0xa8]
call fcn.0041da88
mov dword [ebp - 0x19c], eax
lea eax, [ebp - 0xbc]
call fcn.0041db28
push eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0xb8]
xor edx, edx
call fcn.0041da98
add dword [ebp - 0x108], 2
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 0x19c]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x10]
lea eax, [ebp - 0xbc]
call fcn.0041db98
mov dword [ebp - 0x198], eax
lea eax, [ebp - 0xc0]
call fcn.0041da18
mov edx, eax
inc dword [ebp - 0x108]
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax]
call dword [ecx + 0x10]
lea eax, [ebp - 0xc0]
call fcn.0041da88
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0xe4]
call fcn.0041db28
push eax
inc dword [ebp - 0x108]
mov edx, 0x5e64dc
lea eax, [ebp - 0xd0]
call fcn.0054addc
mov edx, eax
inc dword [ebp - 0x108]
lea eax, [ebp - 0xe0]
call fcn.004c98d8
add dword [ebp - 0x108], 2
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0x194]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x10]
lea eax, [ebp - 0xe4]
call fcn.0041db98
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0xf4]
call fcn.0044be1c
mov edx, eax
add dword [ebp - 0x108], 2
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea edx, [ebp - 0xf4]
push edx
lea eax, [ebp - 0xf8]
call fcn.00401fbc
mov edx, eax
inc dword [ebp - 0x108]
pop eax
call fcn.0054b224
lea edx, [ebp - 0xf8]
lea eax, [ebp - 4]
call fcn.00549c38
dec dword [ebp - 0x108]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.00549c08
sub dword [ebp - 0x108], 2
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.0041dad4
dec dword [ebp - 0x108]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0041db58
sub dword [ebp - 0x108], 2
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0041dad4
dec dword [ebp - 0x108]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0054ae98
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0041da48
dec dword [ebp - 0x108]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0041db58
sub dword [ebp - 0x108], 2
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0041dad4
dec dword [ebp - 0x108]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0041da48
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov edx, dword [eax]
call dword [edx + 0x48]
mov dword [ebp - 0x1a4], eax
mov word [ebp - 0x114], 0x110
mov edx, 0x5e64e4
lea eax, [ebp - 0xfc]
call fcn.005499e4
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
dec dword [ebp - 0x108]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00549c08
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x1ac], eax
xor edx, edx
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
lea edx, [ebp - 0x124]
push edx
push 0
push 0
push 0
push 1
push fcn.00401d4c
push 0
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [sym.imp.rtl60.bpl__Sysutils_Exception_]
call sub.rtl60.bpl__Sysutils_Exception__bctr_qqrx17System_AnsiString
push eax
push 0x401ce8
call sub.cc3260mt.dll___ThrowExceptionLDTC_qpvt1t1t1uiuiuipuct1
add esp, 0x24
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
mov edx, dword [eax]
call dword [edx + 0x48]
mov dword [ebp - 0x1b0], eax
mov word [ebp - 0x114], 0x11c
mov edx, 0x5e64e5
lea eax, [ebp - 0x100]
call fcn.005499e4
inc dword [ebp - 0x108]
mov edx, dword [eax]
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
dec dword [ebp - 0x108]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.00549c08
lea eax, [ebp - 0x18]
call fcn.00422688
mov dword [ebp - 0x1b8], eax
xor edx, edx
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov edx, dword [ebp - 0x128]
xor eax, eax
mov dword [edx + 0xe4], eax
dec dword [ebp - 0x108]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00549c08
dec dword [ebp - 0x108]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00549c08
dec dword [ebp - 0x108]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004225f8
dec dword [ebp - 0x108]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0041db58
dec dword [ebp - 0x108]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0041db58
dec dword [ebp - 0x108]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0041db58
dec dword [ebp - 0x108]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0041db58
dec dword [ebp - 0x108]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00549c08
mov ecx, dword [ebp - 0x124]
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret