Function at 0x47d4d0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c09f5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x48c
mov eax, dword [0x4dd040]
push ebx
push esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
push edi
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x380]
mov dword [ebp - 0x10], esp
push eax
mov dword [ebp - 0x3d4], ecx
call esi
lea ecx, [ebp - 0x3b0]
xor ebx, ebx
push ecx
mov dword [ebp - 4], ebx
call esi
lea edx, [ebp - 0x3a0]
push edx
call esi
lea eax, [ebp - 0x3d0]
push eax
call esi
lea ecx, [ebp - 0x370]
push ecx
call esi
lea edx, [ebp - 0x498]
push edx
call esi
lea eax, [ebp - 0x3c0]
push eax
call esi
lea ecx, [ebp - 0x478]
push ecx
call esi
lea edx, [ebp - 0x438]
push edx
call esi
lea eax, [ebp - 0x448]
push eax
call esi
lea ecx, [ebp - 0x468]
push ecx
call esi
lea edx, [ebp - 0x488]
push edx
call esi
lea eax, [ebp - 0x390]
push eax
call esi
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2cc], ebx
mov edi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea ecx, [ebp - 0x2e8]
push ecx
push 0x4c7074
push 0x17
push ebx
push 0x4c7094
mov byte [ebp - 4], 0xe
call edi
cmp eax, ebx
jl 0x47d5ee
mov edx, dword [ebp - 0x2e8]
push edx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x47d5de
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [eax]
lea edx, [ebp - 0x304]
push edx
push 0x4c6ec8
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, ebx
jge 0x47d5f4
mov dword [ebp - 0x304], ebx
mov eax, dword [ebp - 0x2cc]
cmp eax, ebx
je 0x47d604
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x2e8]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x47d65a
mov ecx, dword [ebp - 0x2e8]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x47d64a
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
lea ecx, [ebp - 0x2cc]
push ecx
push 0x4c6ed8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x47d660
mov dword [ebp - 0x2cc], ebx
push str.ProviderMicrosoft.Jet.OLEDB.4.0_data_Source
lea ecx, [ebp - 0x35c]
call section..text
lea eax, [ebp - 0x2c8]
push eax
mov byte [ebp - 4], 0xf
call fcn.004036f0
add esp, 4
lea ecx, [ebp - 0x2c8]
push ecx
lea ecx, [ebp - 0x35c]
call fcn.00401050
push str._Persist_Security_InfoFalse_Jet_OLEDB:Database_PasswordHCbg3721k
lea ecx, [ebp - 0x35c]
call fcn.00401050
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x2d0], ebx
lea edx, [ebp - 0x2e8]
push edx
push 0x4c7074
push 0x17
push ebx
push 0x4c7094
mov byte [ebp - 4], 0x11
call edi
cmp eax, ebx
jl 0x47d70b
mov eax, dword [ebp - 0x2e8]
push eax
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x47d6fb
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [eax]
lea edx, [ebp - 0x30c]
push edx
push 0x4c6ec8
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, ebx
jge 0x47d711
mov dword [ebp - 0x30c], ebx
mov eax, dword [ebp - 0x2d0]
cmp eax, ebx
je 0x47d721
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x2e8]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x47d777
mov ecx, dword [ebp - 0x2e8]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x47d767
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
lea ecx, [ebp - 0x2d0]
push ecx
push 0x4c6ed8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x47d77d
mov dword [ebp - 0x2d0], ebx
mov dword [ebp - 0x300], ebx
lea eax, [ebp - 0x2e8]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
mov byte [ebp - 4], 0x12
call edi
cmp eax, ebx
jl 0x47d7dd
mov ecx, dword [ebp - 0x2e8]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x47d7cd
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
lea ecx, [ebp - 0x300]
push ecx
push 0x4c6ed8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x47d7e3
mov dword [ebp - 0x300], ebx
mov dword [ebp - 0x330], ebx
lea eax, [ebp - 0x2e8]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
mov byte [ebp - 4], 0x13
call edi
cmp eax, ebx
jl 0x47d843
mov ecx, dword [ebp - 0x2e8]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x47d833
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
lea ecx, [ebp - 0x330]
push ecx
push 0x4c6ed8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x2e8]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x47d849
mov dword [ebp - 0x330], ebx
mov cl, byte [0x4cb68c]
mov eax, dword [0x4cb688]
mov byte [ebp - 0x1c0], cl
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 0x14
mov ecx, 0x513e70
lea edx, [ebp - 0x3c]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x47d870
push str.ProviderSQLOLEDB_SERVER
lea ecx, [ebp - 0x34c]
call section..text
push 0x5143a0
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 0x15
call fcn.00401050
push str._DATABASE
lea ecx, [ebp - 0x34c]
call fcn.00401050
push 0x5140a0
lea ecx, [ebp - 0x34c]
call fcn.00401050
push str._UID
lea ecx, [ebp - 0x34c]
call fcn.00401050
push 0x5141a0
lea ecx, [ebp - 0x34c]
call fcn.00401050
push str._PWD
lea ecx, [ebp - 0x34c]
call fcn.00401050
push 0xff
push 0x5142a0
call fcn.004035f0
add esp, 8
push 0x5142a0
lea ecx, [ebp - 0x34c]
call fcn.00401050
mov ecx, 0x513ea0
mov edx, 0x5142a0
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x47d920
mov eax, dword [ebp - 0x304]
cmp eax, ebx
jne 0x47d944
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x304]
mov edx, dword [eax]
push 0x3c
push eax
mov esi, eax
call dword [edx + 0x34]
cmp eax, ebx
jge 0x47d95e
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x4c6e60
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x358], esp
push 0x4c6e60
mov byte [ebp - 4], 0x16
call fcn.00404ae0
mov eax, dword [ebp - 0x34c]
push ecx
mov ecx, esp
mov dword [ebp - 0x360], esp
push eax
mov byte [ebp - 4], 0x17
call fcn.00404ae0
cmp dword [ebp - 0x304], ebx
mov byte [ebp - 4], 0x18
jne 0x47d9b9
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x304]
mov byte [ebp - 4], 0x15
call fcn.00405310
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x4c6e60
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x358], esp
push 0x4c6e60
mov byte [ebp - 4], 0x19
call fcn.00404ae0
mov edx, dword [ebp - 0x35c]
push ecx
mov ecx, esp
mov dword [ebp - 0x360], esp
push edx
mov byte [ebp - 4], 0x1a
call fcn.00404ae0
cmp dword [ebp - 0x30c], ebx
mov byte [ebp - 4], 0x1b
jne 0x47da22
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x30c]
mov byte [ebp - 4], 0x15
call fcn.00405310
mov ax, word [0x4c7070]
mov cl, byte [0x4c7072]
push str.Select__from_SystemParameter2_where_NameSPonline
mov word [ebp - 0x2e8], ax
mov byte [ebp - 0x2e6], cl
mov word [ebp - 0x31c], 8
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x30c]
test eax, eax
mov bl, 0x1c
mov byte [ebp - 4], bl
mov word [ebp - 0x32c], 9
mov dword [ebp - 0x324], eax
jne 0x47da8d
push 0x80004003
call fcn.004b50d0
jmp 0x47da93
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov byte [ebp - 4], 0x1d
jne 0x47dab1
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov edi, dword [ebp - 0x32c]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x328]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x320]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x31c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x318]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x310]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
test eax, eax
jge 0x47db22
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x32c]
push eax
mov byte [ebp - 4], bl
call edi
test eax, eax
jge 0x47db3e
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x31c]
push ecx
mov byte [ebp - 4], 0x15
call edi
test eax, eax
jge 0x47db55
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
test eax, eax
jne 0x47db6f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov edx, dword [eax]
lea ecx, [ebp - 0x308]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x308], 0
call dword [edx + 0x50]
test eax, eax
jge 0x47db98
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x308], 0
jne 0x47dcc5
push 0x4c7a30
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x1e
mov byte [ebp - 4], bl
jne 0x47dbd8
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
push eax
lea ecx, [ebp - 0x370]
push ecx
mov byte [ebp - 4], 0x1f
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x47dc0d
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call edi
test eax, eax
jge 0x47dc23
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call edi
test eax, eax
jge 0x47dc3a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x370]
push ecx
lea ecx, [ebp - 0x2fc]
call fcn.00405240
mov esi, dword [eax]
test esi, esi
mov byte [ebp - 4], 0x20
je 0x47dc6d
mov eax, dword [esi + 4]
test eax, eax
jne 0x47dc68
mov edx, dword [esi]
push edx
call fcn.004b52b0
mov dword [esi + 4], eax
mov ecx, dword [esi + 4]
jmp 0x47dc6f
xor ecx, ecx
lea edx, [ebp - 0x2e8]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x47dc75
mov esi, dword [ebp - 0x2fc]
test esi, esi
mov byte [ebp - 4], 0x15
je 0x47dcc5
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x47dcc5
test esi, esi
je 0x47dcc5
mov eax, dword [esi]
test eax, eax
je 0x47dcac
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x47dcbc
push eax
call sub.MFC71.DLL_operator_delete_1
add esp, 4
push esi
call sub.MFC71.DLL_operator_delete
add esp, 4
mov eax, dword [ebp - 0x2d0]
test eax, eax
jne 0x47dcdf
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x308]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x308], 0
call dword [ecx + 0xdc]
test eax, eax
jge 0x47dd0b
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x308]
test eax, eax
je 0x47dd4a
mov eax, dword [ebp - 0x2d0]
test eax, eax
jne 0x47dd2f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
test eax, eax
jge 0x47dd4a
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
push str.Select_Kj_sjCont_Yc_jqCont_pt_SeatZT_Sendflag_djCont_from_Jqtj
mov word [ebp - 0x32c], 8
call fcn.004b5150
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x30c]
test eax, eax
mov bl, 0x21
mov byte [ebp - 4], bl
mov word [ebp - 0x31c], 9
mov dword [ebp - 0x314], eax
jne 0x47dd8d
push 0x80004003
call fcn.004b50d0
jmp 0x47dd93
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov byte [ebp - 4], 0x22
jne 0x47ddb1
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov edi, dword [ebp - 0x31c]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x318]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x310]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x32c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x328]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x320]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
test eax, eax
jge 0x47de22
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x31c]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47de3e
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x32c]
push ecx
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47de55
push eax
call fcn.004b50d0
push 0x4c9070
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x23
mov byte [ebp - 4], bl
jne 0x47de87
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
push eax
lea ecx, [ebp - 0x380]
push ecx
mov byte [ebp - 4], 0x24
call edi
test eax, eax
jge 0x47debe
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47ded4
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47deeb
push eax
call fcn.004b50d0
cmp word [ebp - 0x380], 1
je 0x47df02
movsx ecx, word [ebp - 0x378]
mov dword [ebp - 0x3d8], ecx
push str.sjCont
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x25
mov byte [ebp - 4], bl
jne 0x47df34
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
push eax
lea ecx, [ebp - 0x3b0]
push ecx
mov byte [ebp - 4], 0x26
call edi
test eax, eax
jge 0x47df65
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47df7b
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47df92
push eax
call fcn.004b50d0
movsx ecx, word [ebp - 0x3a8]
push 0x4c9064
mov dword [ebp - 0x360], ecx
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x27
mov byte [ebp - 4], bl
jne 0x47dfd1
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
push eax
lea ecx, [ebp - 0x3a0]
push ecx
mov byte [ebp - 4], 0x28
call edi
test eax, eax
jge 0x47e002
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47e018
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47e02f
push eax
call fcn.004b50d0
movsx ecx, word [ebp - 0x398]
push str.jqCont
mov dword [ebp - 0x358], ecx
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x29
mov byte [ebp - 4], bl
jne 0x47e06e
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
push eax
lea ecx, [ebp - 0x3d0]
push ecx
mov byte [ebp - 4], 0x2a
call edi
test eax, eax
jge 0x47e09f
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47e0b5
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47e0cc
push eax
call fcn.004b50d0
movsx ecx, word [ebp - 0x3c8]
push str.Sendflag
mov dword [ebp - 0x338], ecx
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x2b
mov byte [ebp - 4], bl
jne 0x47e10b
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
push eax
lea ecx, [ebp - 0x3c0]
push ecx
mov byte [ebp - 4], 0x2c
call edi
test eax, eax
jge 0x47e13c
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47e152
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47e169
push eax
call fcn.004b50d0
movsx ecx, word [ebp - 0x3b8]
push str.djCont
mov dword [ebp - 0x334], ecx
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x2d
mov byte [ebp - 4], bl
jne 0x47e1a8
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
push eax
lea ecx, [ebp - 0x390]
push ecx
mov byte [ebp - 4], 0x2e
call edi
test eax, eax
jge 0x47e1d9
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47e1ef
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47e206
push eax
call fcn.004b50d0
cmp word [ebp - 0x390], 1
mov dword [ebp - 0x2fc], 0
je 0x47e227
movsx ecx, word [ebp - 0x388]
mov dword [ebp - 0x2fc], ecx
push 0x4c9044
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov bl, 0x2f
mov byte [ebp - 4], bl
jne 0x47e259
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
push eax
lea ecx, [ebp - 0x370]
push ecx
mov byte [ebp - 4], 0x30
call edi
test eax, eax
jge 0x47e28a
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47e2a0
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x15
call esi
test eax, eax
jge 0x47e2b7
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x370]
push ecx
lea ecx, [ebp - 0x2d4]
call fcn.00405240
mov esi, dword [eax]
test esi, esi
mov byte [ebp - 4], 0x31
je 0x47e2ea
mov eax, dword [esi + 4]
test eax, eax
jne 0x47e2e5
mov edx, dword [esi]
push edx
call fcn.004b52b0
mov dword [esi + 4], eax
mov ecx, dword [esi + 4]
jmp 0x47e2ec
xor ecx, ecx
lea edx, [ebp - 0x50]
nop
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x47e2f0
mov esi, dword [ebp - 0x2d4]
test esi, esi
mov byte [ebp - 4], 0x15
je 0x47e340
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x47e340
test esi, esi
je 0x47e340
mov eax, dword [esi]
test eax, eax
je 0x47e327
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x47e337
push eax
call sub.MFC71.DLL_operator_delete_1
add esp, 4
push esi
call sub.MFC71.DLL_operator_delete
add esp, 4
lea ecx, [ebp - 0x50]
push ecx
call fcn.00403590
mov edx, dword [0x4cb648]
mov ax, word [0x4cb64c]
add esp, 4
push str.select__from_S_SeatZT
lea ecx, [ebp - 0x354]
mov dword [ebp - 0x1c4], edx
mov word [ebp - 0x1c0], ax
call section..text
push str._where_barno
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 0x32
call fcn.00401050
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x354]
call fcn.00401050
push 0x4c7328
lea ecx, [ebp - 0x354]
call fcn.00401050
mov eax, dword [ebp - 0x304]
test eax, eax
mov word [ebp - 0x32c], 9
mov dword [ebp - 0x324], eax
jne 0x47e3cd
push 0x80004003
call fcn.004b50d0
jmp 0x47e3d3
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov eax, dword [ebp - 0x354]
mov bl, 0x33
push eax
mov byte [ebp - 4], bl
mov word [ebp - 0x31c], 8
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x34
jne 0x47e411
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x32c]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x328]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x320]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x31c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x318]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x310]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
test eax, eax
jge 0x47e482
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x31c]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47e49e
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x32c]
push ecx
mov byte [ebp - 4], 0x32
call esi
test eax, eax
jge 0x47e4b5
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x47e4cf
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edx, dword [eax]
lea ecx, [ebp - 0x308]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x308], 0
call dword [edx + 0x50]
test eax, eax
jge 0x47e4f8
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x308], 0
jne 0x47e94a
lea edx, [ebp - 0x2d4]
push edx
call dword [sym.imp.MSVCR71.dll_time]
lea eax, [ebp - 0x2d4]
push eax
call dword [sym.imp.MSVCR71.dll_localtime]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push edx
mov edx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
push edx
mov edx, dword [eax + 0x14]
inc ecx
push ecx
add edx, 0x76c
push edx
lea eax, [ebp - 0x28]
push str._4d__02d__02d__02d:_02d:_02d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x28
mov esi, 8
push str.inserttime
mov word [ebp - 0x32c], si
call fcn.004b5150
mov dword [ebp - 0x324], eax
lea ecx, [ebp - 0x28]
mov bl, 0x35
push ecx
mov byte [ebp - 4], bl
mov word [ebp - 0x31c], si
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x36
jne 0x47e5a5
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x31c]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x318]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x310]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x32c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x328]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x320]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x47e610
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x31c]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47e62c
push eax
call fcn.004b50d0
lea eax, [ebp - 0x32c]
push eax
mov byte [ebp - 4], 0x32
call esi
test eax, eax
jge 0x47e643
push eax
call fcn.004b50d0
mov esi, 8
push str.SeatZT
mov word [ebp - 0x2e4], si
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
push str.seatZT
mov byte [ebp - 4], 0x37
mov word [ebp - 0x31c], si
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov byte [ebp - 4], 0x38
jne 0x47e692
push 0x80004003
call fcn.004b50d0
lea ecx, [ebp - 0x2e4]
push ecx
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x348]
push edx
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x39
jne 0x47e6cb
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x31c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x318]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x314]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x310]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x47e729
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x348]
push eax
mov byte [ebp - 4], 0x38
call esi
test eax, eax
jge 0x47e746
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x31c]
push ecx
mov byte [ebp - 4], 0x37
call esi
test eax, eax
jge 0x47e75d
push eax
call fcn.004b50d0
lea edx, [ebp - 0x2e4]
push edx
mov byte [ebp - 4], 0x32
call esi
test eax, eax
jge 0x47e774
push eax
call fcn.004b50d0
mov byte [ebp - 4], 0x3a
jmp 0x47ebec
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov dword [ebp - 4], 0x32
jne 0x47e7b6
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x308]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x308], 0
call dword [ecx + 0xdc]
test eax, eax
jge 0x47e7e2
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x308]
test eax, eax
je 0x47e821
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x47e806
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
test eax, eax
jge 0x47e821
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov ax, word [0x4cb644]
mov edx, dword [0x4cb640]
mov word [ebp - 0x1c0], ax
cmp dword [ebp - 0x334], 1
mov dword [ebp - 0x1c4], edx
jne 0x47fca0
mov eax, dword [0x4c8ff0]
mov edx, dword [0x4c8fec]
mov ecx, dword [str.Select_SeatNo__IP_from]
mov dword [ebp - 0xc0], eax
mov eax, dword [0x4c8ffc]
mov dword [ebp - 0xc4], edx
mov edx, dword [0x4c8ff8]
mov dword [ebp - 0xc8], ecx
mov ecx, dword [0x4c8ff4]
mov dword [ebp - 0xb4], eax
mov eax, 0x513dd0
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xbc], ecx
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47e894
lea edi, [ebp - 0xc8]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47e8a4
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xc8]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47e8c3
mov ecx, dword [str._where_IP__]
mov edx, dword [0x4c8fd4]
mov eax, dword [0x4c8fd8]
mov dword [edi], ecx
mov ecx, dword [0x4c8fdc]
mov dword [edi + 4], edx
mov edx, dword [0x4c8fe0]
mov dword [edi + 8], eax
mov eax, dword [0x4c8fe4]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0xc8]
mov dword [edi + 0x10], edx
push ecx
mov dword [edi + 0x14], eax
mov word [ebp - 0x32c], 8
call fcn.004b5150
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x30c]
test eax, eax
mov bl, 0x43
mov byte [ebp - 4], bl
mov word [ebp - 0x31c], 9
mov dword [ebp - 0x314], eax
jne 0x47ec8a
push 0x80004003
call fcn.004b50d0
jmp 0x47ec90
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x47e964
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [0x4dd060]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
push eax
mov dword [ebp - 0x2d4], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0x78]
test eax, eax
jge 0x47e9c4
mov edx, dword [ebp - 0x2d4]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
mov esi, 8
push str.barno
mov word [ebp - 0x32c], si
call fcn.004b5150
mov dword [ebp - 0x324], eax
lea eax, [ebp - 0x3c]
mov bl, 0x3c
push eax
mov byte [ebp - 4], bl
mov word [ebp - 0x31c], si
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x3d
jne 0x47ea19
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x31c]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x318]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x310]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x32c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x328]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x320]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x47ea84
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x31c]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47eaa0
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x32c]
push ecx
mov byte [ebp - 4], 0x32
call esi
test eax, eax
jge 0x47eab7
push eax
call fcn.004b50d0
mov esi, 8
push str.SeatZT
mov word [ebp - 0x2e4], si
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
push str.SeatZT
mov byte [ebp - 4], 0x3e
mov word [ebp - 0x31c], si
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2d0]
test eax, eax
mov byte [ebp - 4], 0x3f
jne 0x47eb06
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x348]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x40
jne 0x47eb3f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x31c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x318]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x314]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x310]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x47eb9d
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x348]
push eax
mov byte [ebp - 4], 0x3f
call esi
test eax, eax
jge 0x47ebba
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x31c]
push ecx
mov byte [ebp - 4], 0x3e
call esi
test eax, eax
jge 0x47ebd1
push eax
call fcn.004b50d0
lea edx, [ebp - 0x2e4]
push edx
mov byte [ebp - 4], 0x32
call esi
test eax, eax
jge 0x47ebe8
push eax
call fcn.004b50d0
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x47ec06
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [0x4dd060]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
push eax
mov dword [ebp - 0x2d4], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0xac]
test eax, eax
jge 0x47e795
mov edx, dword [ebp - 0x2d4]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
jmp 0x47e795
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov eax, dword [ebp - 0x300]
test eax, eax
mov byte [ebp - 4], 0x44
jne 0x47ecae
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
mov edi, dword [ebp - 0x31c]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x318]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x310]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x32c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x328]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x320]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
test eax, eax
jge 0x47ed1f
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x31c]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47ed3b
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x32c]
push ecx
mov byte [ebp - 4], 0x32
call esi
test eax, eax
jge 0x47ed52
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
test eax, eax
jne 0x47ed6c
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
mov edx, dword [eax]
lea ecx, [ebp - 0x308]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x308], 0
call dword [edx + 0x50]
test eax, eax
jge 0x47ed95
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x308], 0
jne 0x47fc1b
push str.select__from_S_SeatIP
lea ecx, [ebp - 0x308]
call section..text
push str._where_barno
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x45
call fcn.00401050
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x308]
call fcn.00401050
push 0x4c7328
lea ecx, [ebp - 0x308]
call fcn.00401050
mov eax, dword [ebp - 0x304]
test eax, eax
mov word [ebp - 0x32c], 9
mov dword [ebp - 0x324], eax
jne 0x47ee0b
push 0x80004003
call fcn.004b50d0
jmp 0x47ee11
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp - 0x308]
mov bl, 0x46
push edx
mov byte [ebp - 4], bl
mov word [ebp - 0x31c], 8
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x47
jne 0x47ee4f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x32c]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x328]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x320]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x31c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x318]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x310]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
xor edi, edi
cmp eax, edi
jge 0x47eec2
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x31c]
push eax
mov byte [ebp - 4], bl
call esi
cmp eax, edi
jge 0x47eede
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x32c]
push ecx
mov byte [ebp - 4], 0x45
call esi
cmp eax, edi
jge 0x47eef5
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
jne 0x47ef0f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edx, dword [eax]
lea ecx, [ebp - 0x334]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x334], edi
call dword [edx + 0x50]
cmp eax, edi
jge 0x47ef34
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x334], di
jne 0x47f121
push str.delete_from_S_SeatIP
lea ecx, [ebp - 0x334]
call section..text
push str._where_barno
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], 0x48
call fcn.00401050
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x334]
call fcn.00401050
push 0x4c7328
lea ecx, [ebp - 0x334]
call fcn.00401050
mov eax, dword [ebp - 0x334]
push eax
mov word [ebp - 0x32c], 8
call fcn.004b5150
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x304]
cmp eax, edi
mov bl, 0x49
mov byte [ebp - 4], bl
mov word [ebp - 0x31c], 9
mov dword [ebp - 0x314], eax
jne 0x47efc9
push 0x80004003
call fcn.004b50d0
jmp 0x47efcf
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp - 0x330]
cmp eax, edi
mov byte [ebp - 4], 0x4a
jne 0x47efed
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x330]
mov edi, dword [ebp - 0x31c]
push 1
mov edx, dword [eax]
push 3
push 2
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x318]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x314]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x310]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x32c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x328]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x324]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x320]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0xa0]
xor edi, edi
cmp eax, edi
jge 0x47f060
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x31c]
push edx
mov byte [ebp - 4], bl
call esi
cmp eax, edi
jge 0x47f07c
push eax
call fcn.004b50d0
lea eax, [ebp - 0x32c]
push eax
mov byte [ebp - 4], 0x48
call esi
cmp eax, edi
jge 0x47f093
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x330]
cmp eax, edi
jne 0x47f0ad
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x330]
mov ecx, dword [eax]
lea edx, [ebp - 0x2d4]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x2d4], edi
call dword [ecx + 0xdc]
cmp eax, edi
jge 0x47f0d5
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2d4], edi
je 0x47f112
mov eax, dword [ebp - 0x330]
cmp eax, edi
jne 0x47f0f7
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x330]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
cmp eax, edi
jge 0x47f112
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], 0x45
call fcn.00401150
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
jne 0x47f13b
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edx, dword [eax]
lea ecx, [ebp - 0x2d4]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x2d4], edi
call dword [edx + 0xdc]
cmp eax, edi
jge 0x47f163
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2d4], edi
je 0x47f1a0
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
jne 0x47f185
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, edi
jge 0x47f1a0
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov dword [ebp - 0x334], 1
lea ebx, [ebx]
mov eax, dword [ebp - 0x300]
cmp eax, edi
jne 0x47f1ca
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax]
lea edx, [ebp - 0x2d4]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x2d4], edi
call dword [ecx + 0x50]
cmp eax, edi
jge 0x47f1ef
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x2d4], di
jne 0x47f91c
mov eax, dword [ebp - 0x304]
cmp eax, edi
mov word [ebp - 0x32c], 9
mov dword [ebp - 0x324], eax
jne 0x47f221
push 0x80004003
call fcn.004b50d0
jmp 0x47f227
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push str.select__from_S_SeatIP
mov byte [ebp - 4], 0x4b
mov word [ebp - 0x31c], 8
call fcn.004b5150
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
mov byte [ebp - 4], 0x4c
jne 0x47f262
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [ebp - 0x32c]
push 1
mov edx, dword [eax]
push 3
push 2
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x328]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x324]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x320]
mov dword [ecx + 0xc], ebx
mov ebx, dword [ebp - 0x31c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x318]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x314]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x310]
push eax
mov esi, eax
mov dword [ecx + 0xc], ebx
call dword [edx + 0xa0]
cmp eax, edi
jge 0x47f2d3
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x31c]
push edx
mov byte [ebp - 4], 0x4b
call esi
cmp eax, edi
jge 0x47f2f0
push eax
call fcn.004b50d0
lea eax, [ebp - 0x32c]
push eax
mov byte [ebp - 4], 0x45
call esi
cmp eax, edi
jge 0x47f307
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
jne 0x47f321
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [0x4dd060]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
push eax
mov dword [ebp - 0x2d4], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0x78]
test eax, eax
jge 0x47f381
mov edx, dword [ebp - 0x2d4]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
mov esi, 8
push str.barno
mov word [ebp - 0x3f8], si
call fcn.004b5150
mov dword [ebp - 0x3f0], eax
lea eax, [ebp - 0x3c]
mov bl, 0x4d
push eax
mov byte [ebp - 4], bl
mov word [ebp - 0x3e8], si
call fcn.004b5150
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x4e
jne 0x47f3d6
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x3e8]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x3e4]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x3e0]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x3dc]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x3f8]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x3f4]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x3f0]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x3ec]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x47f441
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x3e8]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x47f45d
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x3f8]
push ecx
mov byte [ebp - 4], 0x45
call esi
test eax, eax
jge 0x47f474
push eax
call fcn.004b50d0
mov esi, 8
push 0x4c7508
mov word [ebp - 0x428], si
call fcn.004b5150
mov dword [ebp - 0x420], eax
push str.seatip
mov byte [ebp - 4], 0x4f
mov word [ebp - 0x408], si
call fcn.004b5150
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x300]
test eax, eax
mov byte [ebp - 4], 0x50
jne 0x47f4c3
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x300]
lea edx, [ebp - 0x428]
push edx
lea eax, [ebp - 0x458]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x51
jne 0x47f4fc
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x408]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x404]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x400]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x3fc]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x47f55a
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x458]
push eax
mov byte [ebp - 4], 0x50
call edi
test eax, eax
jge 0x47f577
push str.Select_Sendflag_from_Jqtj
mov word [ebp - 0x2f8], 8
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x30c]
cmp eax, edi
mov bl, 0x59
mov byte [ebp - 4], bl
mov word [ebp - 0x2e4], 9
mov dword [ebp - 0x2dc], eax
jne 0x47f95f
push 0x80004003
call fcn.004b50d0
jmp 0x47f965
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
mov byte [ebp - 4], 0x5a
jne 0x47f983
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x2e4]
push 1
mov edx, dword [eax]
push 3
push 2
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2e0]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2dc]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2d8]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x2f8]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2f4]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2f0]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0xa0]
test eax, eax
jge 0x47f9f4
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2e4]
push edx
mov byte [ebp - 4], bl
call edi
test eax, eax
jge 0x47fa10
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2f8]
push eax
mov byte [ebp - 4], 0x45
call edi
test eax, eax
jge 0x47fa27
push eax
call fcn.004b50d0
push str.Sendflag
mov word [ebp - 0x2f8], 8
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
mov word [ebp - 0x2e4], 0x16
mov dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x5c
jne 0x47fa71
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [ebp - 0x2e4]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2e0]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2dc]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2d8]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0x2f8]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2f4]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2f0]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0x100]
test eax, eax
jge 0x47fadc
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x5b
call edi
test eax, eax
jge 0x47faf3
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x2f8]
push ecx
mov byte [ebp - 4], 0x45
call edi
test eax, eax
jge 0x47fb0a
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x47fb24
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov edx, dword [0x4dd060]
mov dword [ebx + 8], edx
push eax
mov dword [ebp - 0x2d4], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0xac]
test eax, eax
jge 0x47fb87
mov ecx, dword [ebp - 0x2d4]
push 0x4c6e40
push ecx
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x47fba1
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edx, dword [eax]
lea ecx, [ebp - 0x2d4]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x2d4], 0
call dword [edx + 0xdc]
test eax, eax
jge 0x47fbcd
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x2d4]
test eax, eax
je 0x47fc0c
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x47fbf1
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x32
call fcn.00401150
mov eax, dword [ebp - 0x300]
test eax, eax
jne 0x47fc35
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax]
lea edx, [ebp - 0x2d4]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x2d4], 0
call dword [ecx + 0xdc]
test eax, eax
jge 0x47fc61
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x2d4]
test eax, eax
je 0x47fca0
mov eax, dword [ebp - 0x300]
test eax, eax
jne 0x47fc85
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
test eax, eax
jge 0x47fca0
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x2d0]
xor ebx, ebx
cmp eax, ebx
jne 0x47fcbc
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov edx, dword [eax]
lea ecx, [ebp - 0x2d4]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x2d4], ebx
call dword [edx + 0xdc]
cmp eax, ebx
jge 0x47fce4
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2d4], ebx
je 0x47fd21
mov eax, dword [ebp - 0x2d0]
cmp eax, ebx
jne 0x47fd06
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, ebx
jge 0x47fd21
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [0x4cb638]
mov cx, word [0x4cb63c]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, 0x16
cmp word [ebp - 0x380], si
mov dword [ebp - 0x1c4], eax
mov word [ebp - 0x1c0], cx
je 0x47fd68
lea edx, [ebp - 0x380]
push edx
call edi
cmp eax, ebx
jge 0x47fd61
push eax
call fcn.004b50d0
mov word [ebp - 0x380], si
cmp word [ebp - 0x3b0], si
mov dword [ebp - 0x378], ebx
je 0x47fd91
lea eax, [ebp - 0x3b0]
push eax
call edi
cmp eax, ebx
jge 0x47fd8a
push eax
call fcn.004b50d0
mov word [ebp - 0x3b0], si
cmp word [ebp - 0x3a0], si
mov dword [ebp - 0x3a8], ebx
je 0x47fdba
lea ecx, [ebp - 0x3a0]
push ecx
call edi
cmp eax, ebx
jge 0x47fdb3
push eax
call fcn.004b50d0
mov word [ebp - 0x3a0], si
cmp word [ebp - 0x3d0], si
mov dword [ebp - 0x398], ebx
je 0x47fde3
lea edx, [ebp - 0x3d0]
push edx
call edi
cmp eax, ebx
jge 0x47fddc
push eax
call fcn.004b50d0
mov word [ebp - 0x3d0], si
cmp word [ebp - 0x370], si
mov dword [ebp - 0x3c8], ebx
je 0x47fe0c
lea eax, [ebp - 0x370]
push eax
call edi
cmp eax, ebx
jge 0x47fe05
push eax
call fcn.004b50d0
mov word [ebp - 0x370], si
cmp word [ebp - 0x3c0], si
mov dword [ebp - 0x368], ebx
je 0x47fe35
lea ecx, [ebp - 0x3c0]
push ecx
call edi
cmp eax, ebx
jge 0x47fe2e
push eax
call fcn.004b50d0
mov word [ebp - 0x3c0], si
cmp word [ebp - 0x390], si
mov dword [ebp - 0x3b8], ebx
je 0x47fe5e
lea edx, [ebp - 0x390]
push edx
call edi
cmp eax, ebx
jge 0x47fe57
push eax
call fcn.004b50d0
mov word [ebp - 0x390], si
lea eax, [ebp - 0x2d4]
push eax
mov dword [ebp - 0x388], ebx
mov dword [0x513ca0], ebx
call dword [sym.imp.MSVCR71.dll_time]
lea ecx, [ebp - 0x2d4]
push ecx
call dword [sym.imp.MSVCR71.dll_localtime]
mov edx, dword [eax]
mov ecx, dword [eax + 4]
push edx
mov edx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
push edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
push ecx
inc edx
push edx
add eax, 0x76c
push eax
lea ecx, [ebp - 0x64]
push str._4d__02d__02d__02d:_02d:_02d
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x28
push str.select__from_S_NetBar
lea ecx, [ebp - 0x350]
call section..text
push str._where_Number
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x5d
call fcn.00401050
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x350]
call fcn.00401050
push 0x4c7328
lea ecx, [ebp - 0x350]
call fcn.00401050
mov eax, dword [ebp - 0x304]
cmp eax, ebx
mov word [ebp - 0x2f8], 9
mov dword [ebp - 0x2f0], eax
jne 0x47ff1b
push 0x80004003
call fcn.004b50d0
jmp 0x47ff21
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp - 0x350]
push edx
mov byte [ebp - 4], 0x5e
mov word [ebp - 0x2e4], 8
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2cc]
cmp eax, ebx
mov byte [ebp - 4], 0x5f
jne 0x47ff5e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [ebp - 0x2f8]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2f4]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2f0]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2ec]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0x2e4]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2e0]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2dc]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2d8]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0xa0]
test eax, eax
jge 0x47ffcf
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x5e
call edi
test eax, eax
jge 0x47ffe6
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x2f8]
push ecx
mov byte [ebp - 4], 0x5d
call edi
test eax, eax
jge 0x47fffd
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x480017
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edx, dword [eax]
lea ecx, [ebp - 0x2d4]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x2d4], 0
call dword [edx + 0x50]
test eax, eax
jge 0x480040
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x2d4], 0
jne 0x480f1a
push str.seatup
mov word [ebp - 0x348], 8
call fcn.004b5150
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x60
jne 0x48007f
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2cc]
lea edx, [ebp - 0x348]
push edx
lea eax, [ebp - 0x24]
push eax
call fcn.00403e70
cmp word [eax], 1
lea ecx, [ebp - 0x24]
push ecx
setne bl
call edi
test eax, eax
jge 0x4800ac
push eax
call fcn.004b50d0
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 4], 0x5d
call edi
test eax, eax
jge 0x4800c3
push eax
call fcn.004b50d0
test bl, bl
je 0x48013f
push str.seatup
mov word [ebp - 0x348], 8
call fcn.004b5150
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x61
jne 0x4800f8
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x348]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x2cc]
call fcn.00403e70
movsx edx, word [eax + 8]
lea eax, [ebp - 0x24]
push eax
mov dword [0x513ca0], edx
call edi
test eax, eax
jge 0x480128
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x348]
push ecx
mov byte [ebp - 4], 0x5d
call edi
test eax, eax
jge 0x48013f
push eax
call fcn.004b50d0
mov edi, 0x4c9de8
lea esi, [ebp - 0x2e8]
mov ecx, 2
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x48021a
mov edi, 8
push str.SPonline
mov word [ebp - 0x2f8], di
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
mov word [ebp - 0x2e4], 0x16
mov dword [ebp - 0x2dc], 1
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x63
jne 0x4801a6
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [ebp - 0x2e4]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2e0]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2dc]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2d8]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0x2f8]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2f4]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2f0]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0x100]
test eax, eax
jge 0x480211
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov byte [ebp - 4], 0x62
jmp 0x4802f0
mov edi, 0x4c88a8
lea esi, [ebp - 0x2e8]
mov ecx, 2
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
mov edi, 8
je 0x480322
push str.SPonline
mov word [ebp - 0x2f8], di
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
mov word [ebp - 0x2e4], 0x16
mov dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x65
jne 0x480281
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ebx, dword [ebp - 0x2e4]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2e0]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2dc]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2d8]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0x2f8]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x2f4]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x2f0]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0x100]
test eax, eax
jge 0x4802ec
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov byte [ebp - 4], 0x64
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2e4]
push eax
call ebx
test eax, eax
jge 0x480309
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x2f8]
push ecx
mov byte [ebp - 4], 0x5d
call ebx
test eax, eax
jge 0x480328
push eax
call fcn.004b50d0
jmp 0x480328
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push str.NetbarDate
mov word [ebp - 0x2f8], di
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
lea edx, [ebp - 0x64]
push edx
mov byte [ebp - 4], 0x66
mov word [ebp - 0x2e4], di
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x67
jne 0x480377
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x2e4]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x2e0]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x2dc]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x2d8]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x2f8]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x2f4]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x2f0]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x4803e2
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x66
call ebx
test eax, eax
jge 0x4803f9
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x2f8]
push ecx
mov byte [ebp - 4], 0x5d
call ebx
test eax, eax
jge 0x480410
push eax
call fcn.004b50d0
mov esi, 8
push str.LastVisitServerTime
mov word [ebp - 0x2f8], si
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
mov bl, 0x68
push 0x513e88
mov byte [ebp - 4], bl
mov word [ebp - 0x2e4], si
call fcn.004b5150
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x69
jne 0x480466
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x2e4]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2e0]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2dc]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2d8]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x2f8]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2f4]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2f0]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4804d1
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea edx, [ebp - 0x2e4]
mov byte [ebp - 4], bl
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push edx
call ebx
test eax, eax
jge 0x4804ed
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2f8]
push eax
mov byte [ebp - 4], 0x5d
call ebx
test eax, eax
jge 0x480504
push eax
call fcn.004b50d0
push str.OnCount
mov word [ebp - 0x2f8], 8
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
mov ecx, dword [ebp - 0x3d8]
mov word [ebp - 0x2e4], 0x16
mov dword [ebp - 0x2dc], ecx
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x6b
jne 0x480550
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x2e4]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2e0]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2dc]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2d8]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x2f8]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2f4]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2f0]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4805bb
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea edx, [ebp - 0x2e4]
push edx
mov byte [ebp - 4], 0x6a
call ebx
test eax, eax
jge 0x4805d2
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2f8]
push eax
mov byte [ebp - 4], 0x5d
call ebx
test eax, eax
jge 0x4805e9
push eax
call fcn.004b50d0
push str.OnlineCount
mov word [ebp - 0x2f8], 8
call fcn.004b5150
mov dword [ebp - 0x2f0], eax
mov ecx, dword [ebp - 0x360]
mov word [ebp - 0x2e4], 0x16
mov dword [ebp - 0x2dc], ecx
mov eax, dword [ebp - 0x2cc]
test eax, eax
mov byte [ebp - 4], 0x6d
jne 0x480635
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x2e4]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2e0]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2dc]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2d8]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x2f8]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2f4]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2f0]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2ec]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4806a0
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea edx, [ebp - 0x2e4]
push edx
mov byte [ebp - 4], 0x6c
call ebx
test eax, eax
jge 0x4806b7
push eax
call fcn.004b50d0
lea eax, [ebp - 0x2f8]
push eax
mov byte [ebp - 4], 0x5d
call ebx
test eax, eax
jge 0x4806ce
push 0
push 0x1000
push 0x4cb5f8
call sub.MFC71.DLL_AfxMessageBox_1
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor edi, edi
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
mov ecx, dword [0x4cb5f0]
mov dx, word [0x4cb5f4]
mov dword [ebp - 0x1c4], ecx
mov word [ebp - 0x1c0], dx
jne 0x480f67
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x2fc]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x2fc], edi
call dword [ecx + 0xdc]
cmp eax, edi
jge 0x480f8f
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2fc], edi
je 0x480fcc
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
jne 0x480fb1
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
cmp eax, edi
jge 0x480fcc
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x2d0]
cmp eax, edi
jne 0x480fe6
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov edx, dword [eax]
lea ecx, [ebp - 0x2fc]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x2fc], edi
call dword [edx + 0xdc]
cmp eax, edi
jge 0x48100e
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2fc], edi
je 0x48104b
mov eax, dword [ebp - 0x2d0]
cmp eax, edi
jne 0x481030
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2d0]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, edi
jge 0x48104b
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
jne 0x481065
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x2fc]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x2fc], edi
call dword [ecx + 0xdc]
cmp eax, edi
jge 0x48108d
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2fc], edi
je 0x4810ca
mov eax, dword [ebp - 0x2cc]
cmp eax, edi
jne 0x4810af
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
cmp eax, edi
jge 0x4810ca
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x300]
cmp eax, edi
jne 0x4810e4
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
mov edx, dword [eax]
lea ecx, [ebp - 0x2fc]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x2fc], edi
call dword [edx + 0xdc]
cmp eax, edi
jge 0x48110c
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2fc], edi
je 0x481149
mov eax, dword [ebp - 0x300]
cmp eax, edi
jne 0x48112e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x300]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, edi
jge 0x481149
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x330]
cmp eax, edi
jne 0x481163
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x330]
mov ecx, dword [eax]
lea edx, [ebp - 0x2fc]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x2fc], edi
call dword [ecx + 0xdc]
cmp eax, edi
jge 0x48118b
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2fc], edi
je 0x4811c8
mov eax, dword [ebp - 0x330]
cmp eax, edi
jne 0x4811ad
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x330]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
cmp eax, edi
jge 0x4811c8
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x30c]
cmp eax, edi
jne 0x4811e2
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30c]
mov edx, dword [eax]
lea ecx, [ebp - 0x2fc]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x2fc], edi
call dword [edx + 0x88]
cmp eax, edi
jge 0x48120a
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2fc], edi
je 0x481244
mov eax, dword [ebp - 0x30c]
cmp eax, edi
jne 0x48122c
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30c]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x3c]
cmp eax, edi
jge 0x481244
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x304]
cmp eax, edi
jne 0x48125e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x304]
mov ecx, dword [eax]
lea edx, [ebp - 0x2fc]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x2fc], edi
call dword [ecx + 0x88]
cmp eax, edi
jge 0x481286
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x2fc], edi
je 0x4812c0
mov eax, dword [ebp - 0x304]
cmp eax, edi
jne 0x4812a8
mov eax, dword [ebp - 0x2d0]
cmp eax, edi
je 0x4812d6