Function at 0x4a0350
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c389d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x750
mov eax, dword [0x4dd040]
push ebx
push esi
push edi
mov dword [ebp - 0x14], eax
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1d8], ecx
xor eax, eax
jmp 0x4a0390
mov cl, byte [eax + 0x513e70]
mov byte [ebp + eax - 0x5c], cl
inc eax
test cl, cl
jne 0x4a0390
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x1d4]
push eax
call esi
lea ecx, [ebp - 0x268]
push ecx
mov dword [ebp - 4], ebx
call esi
lea edx, [ebp - 0x43c]
push edx
call esi
lea eax, [ebp - 0x41c]
push eax
call esi
lea ecx, [ebp - 0x258]
push ecx
call esi
lea edx, [ebp - 0x58c]
push edx
call esi
lea eax, [ebp - 0x6bc]
push eax
call esi
lea ecx, [ebp - 0x69c]
push ecx
call esi
lea edx, [ebp - 0x67c]
push edx
call esi
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x17c], ebx
mov edi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x180]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7094
mov byte [ebp - 4], 0xd
call edi
cmp eax, ebx
jl 0x4a047e
mov ecx, dword [ebp - 0x180]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a046e
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
lea ecx, [ebp - 0x190]
push ecx
push 0x4c6ec8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x4a0484
mov dword [ebp - 0x190], ebx
mov eax, dword [ebp - 0x174]
cmp eax, ebx
je 0x4a0494
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [ebp - 0x180]
push edx
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x4a04ea
mov eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a04da
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x174]
push edx
push 0x4c6ed8
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, ebx
jge 0x4a04f0
mov dword [ebp - 0x174], ebx
mov eax, dword [ebp - 0x184]
cmp eax, ebx
je 0x4a0500
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x180]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x4a0556
mov ecx, dword [ebp - 0x180]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a0546
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
lea ecx, [ebp - 0x184]
push ecx
push 0x4c6ed8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x4a055c
mov dword [ebp - 0x184], ebx
mov eax, dword [ebp - 0x178]
cmp eax, ebx
je 0x4a056c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [ebp - 0x180]
push edx
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x4a05c2
mov eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a05b2
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x178]
push edx
push 0x4c6ed8
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, ebx
jge 0x4a05c8
mov dword [ebp - 0x178], ebx
mov eax, dword [ebp - 0x17c]
cmp eax, ebx
je 0x4a05d8
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x180]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x4a062e
mov ecx, dword [ebp - 0x180]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a061e
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
lea ecx, [ebp - 0x17c]
push ecx
push 0x4c6ed8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x4a0634
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x1c4], ebx
lea eax, [ebp - 0x180]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7094
mov byte [ebp - 4], 0x10
call edi
cmp eax, ebx
jl 0x4a06a0
mov ecx, dword [ebp - 0x180]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a0690
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
lea ecx, [ebp - 0x19c]
push ecx
push 0x4c6ec8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x4a06a6
mov dword [ebp - 0x19c], ebx
mov eax, dword [ebp - 0x194]
cmp eax, ebx
je 0x4a06b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [ebp - 0x180]
push edx
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x4a070c
mov eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a06fc
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
lea edx, [ebp - 0x194]
push edx
push 0x4c6ed8
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, ebx
jge 0x4a0712
mov dword [ebp - 0x194], ebx
mov eax, dword [ebp - 0x1c4]
cmp eax, ebx
je 0x4a0722
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x180]
push eax
push 0x4c7074
push 0x17
push ebx
push 0x4c7084
call edi
cmp eax, ebx
jl 0x4a0778
mov ecx, dword [ebp - 0x180]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov esi, eax
cmp esi, ebx
jl 0x4a0768
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
lea ecx, [ebp - 0x1c4]
push ecx
push 0x4c6ed8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp esi, ebx
jge 0x4a077e
mov dword [ebp - 0x1c4], ebx
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push 0x4c6e60
mov byte [ebp - 4], 0x11
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x18c], esp
push 0x4c6e60
mov byte [ebp - 4], 0x12
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
push str.ProviderSQLOLEDB_SERVER_DATABASEHcardServer_UIDserver_PWDserver
mov byte [ebp - 4], 0x13
call fcn.00404ae0
cmp dword [ebp - 0x190], ebx
mov byte [ebp - 4], 0x14
jne 0x4a07db
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x190]
mov byte [ebp - 4], 0x11
call fcn.00405310
mov eax, dword [ebp - 0x190]
cmp eax, ebx
mov word [ebp - 0x1f8], 9
mov dword [ebp - 0x1f0], eax
jne 0x4a080f
push 0x80004003
call fcn.004b50d0
jmp 0x4a0815
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov bl, 0x15
push str.Select_HostStr_ProtocolType_EventNumber_Causation_Byname_from_tAlter_Telnet
mov byte [ebp - 4], bl
mov word [ebp - 0x1e8], 8
call fcn.004b5150
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x174]
xor edi, edi
cmp eax, edi
mov byte [ebp - 4], 0x16
jne 0x4a084d
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x174]
push 1
push 3
push 2
lea edx, [ebp - 0x1f8]
push edx
lea eax, [ebp - 0x1e8]
push eax
call fcn.00403d40
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], bl
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push ecx
call ebx
cmp eax, edi
jge 0x4a0888
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1f8]
push edx
mov byte [ebp - 4], 0x11
call ebx
cmp eax, edi
jge 0x4a089f
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
cmp eax, edi
jne 0x4a08b9
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
lea edx, [ebp - 0x180]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x180], edi
call dword [ecx + 0x50]
cmp eax, edi
jge 0x4a08de
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x180], di
jne 0x4a12a5
jmp 0x4a08f0
mov eax, dword [ebp - 0x174]
cmp eax, edi
jne 0x4a090a
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
lea edx, [ebp - 0x198]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x198], edi
call dword [ecx + 0x50]
cmp eax, edi
jge 0x4a092f
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x198], di
jne 0x4a12a5
push str.HostStr
mov word [ebp - 0x1e8], 8
call fcn.004b5150
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x174], edi
mov byte [ebp - 4], 0x17
jne 0x4a096b
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x53c]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
push eax
lea edx, [ebp - 0x1d4]
push edx
mov byte [ebp - 4], 0x18
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, edi
jge 0x4a09a0
push eax
call fcn.004b50d0
lea eax, [ebp - 0x53c]
push eax
mov byte [ebp - 4], 0x17
call ebx
cmp eax, edi
jge 0x4a09b7
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1e8]
push ecx
mov byte [ebp - 4], 0x11
call ebx
cmp eax, edi
jge 0x4a09ce
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1d4]
push edx
lea ecx, [ebp - 0x188]
call fcn.00405240
mov esi, dword [eax]
cmp esi, edi
mov byte [ebp - 4], 0x19
je 0x4a09ff
cmp dword [esi + 4], edi
jne 0x4a09fa
mov eax, dword [esi]
push eax
call fcn.004b52b0
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4a0a01
xor esi, esi
mov ecx, esi
lea edx, [ebp - 0x170]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a0a10
mov esi, dword [ebp - 0x188]
cmp esi, edi
mov byte [ebp - 4], 0x11
je 0x4a0a66
lea ecx, [esi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4a0a60
cmp esi, edi
je 0x4a0a60
mov eax, dword [esi]
cmp eax, edi
je 0x4a0a47
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
cmp eax, edi
je 0x4a0a57
push eax
call sub.MFC71.DLL_operator_delete_1
add esp, 4
push esi
call sub.MFC71.DLL_operator_delete
add esp, 4
mov dword [ebp - 0x188], edi
lea edx, [ebp - 0x170]
push edx
call fcn.00403590
add esp, 4
push str.SELECT__FROM_tTelnet
lea ecx, [ebp - 0x180]
call section..text
push str._where
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x1a
call fcn.00401050
push str.host_like__
lea ecx, [ebp - 0x180]
call fcn.00401050
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x180]
call fcn.00401050
push 0x4cb390
lea ecx, [ebp - 0x180]
call fcn.00401050
mov eax, dword [ebp - 0x190]
cmp eax, edi
mov word [ebp - 0x208], 9
mov dword [ebp - 0x200], eax
jne 0x4a0af0
push 0x80004003
call fcn.004b50d0
jmp 0x4a0af6
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp - 0x180]
push edx
mov byte [ebp - 4], 0x1b
mov word [ebp - 0x218], 8
call fcn.004b5150
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x184]
cmp eax, edi
mov byte [ebp - 4], 0x1c
jne 0x4a0b33
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ebx, dword [ebp - 0x208]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x204]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x200]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x1fc]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0x218]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x214]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x210]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x20c]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0xa0]
cmp eax, edi
jge 0x4a0ba4
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x218]
push eax
mov byte [ebp - 4], 0x1b
call ebx
cmp eax, edi
jge 0x4a0bc1
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x208]
push ecx
mov byte [ebp - 4], 0x1a
call ebx
cmp eax, edi
jge 0x4a0bd8
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
cmp eax, edi
jne 0x4a0bf2
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
lea ecx, [ebp - 0x198]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x198], edi
call dword [edx + 0x50]
cmp eax, edi
jge 0x4a0c17
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x198], di
je 0x4a0d22
xor edi, edi
mov eax, dword [ebp - 0x184]
cmp eax, edi
jne 0x4a0c40
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
lea ecx, [ebp - 0x198]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x198], edi
call dword [edx + 0xdc]
cmp eax, edi
jge 0x4a0c68
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x198], edi
je 0x4a0ca5
mov eax, dword [ebp - 0x184]
cmp eax, edi
jne 0x4a0c8a
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, edi
jge 0x4a0ca5
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x1d4], 0x16
je 0x4a0ccb
lea eax, [ebp - 0x1d4]
push eax
call ebx
cmp eax, edi
jge 0x4a0cc2
push eax
call fcn.004b50d0
mov word [ebp - 0x1d4], 0x16
mov eax, dword [ebp - 0x174]
cmp eax, edi
mov dword [ebp - 0x1cc], edi
jne 0x4a0ceb
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x90]
cmp eax, edi
jge 0x4a0d06
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x11
call fcn.00401150
xor edi, edi
jmp 0x4a08f0
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x184]
xor edi, edi
cmp eax, edi
jne 0x4a0d3e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
lea ecx, [ebp - 0x198]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x198], edi
call dword [edx + 0x50]
cmp eax, edi
jge 0x4a0d63
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x198], di
jne 0x4a0c26
push str.flag
mov word [ebp - 0x248], 8
call fcn.004b5150
mov dword [ebp - 0x240], eax
mov word [ebp - 0x228], 0x16
mov dword [ebp - 0x220], 1
mov eax, dword [ebp - 0x184]
cmp eax, edi
mov byte [ebp - 4], 0x1e
jne 0x4a0dba
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ebx, dword [ebp - 0x228]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x224]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x220]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x21c]
mov dword [ecx + 0xc], ebx
mov ebx, dword [ebp - 0x248]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x244]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x240]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x23c]
push eax
mov esi, eax
mov dword [ecx + 0xc], ebx
call dword [edx + 0x100]
cmp eax, edi
jge 0x4a0e25
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x228]
push edx
mov byte [ebp - 4], 0x1d
call esi
cmp eax, edi
jge 0x4a0e42
push eax
call fcn.004b50d0
lea eax, [ebp - 0x248]
push eax
mov byte [ebp - 4], 0x1a
call esi
cmp eax, edi
jge 0x4a0e59
push eax
call fcn.004b50d0
mov esi, 8
push str.EventNumber
mov word [ebp - 0x1f8], si
call fcn.004b5150
mov dword [ebp - 0x1f0], eax
push str.EventNumber
mov byte [ebp - 4], 0x1f
mov word [ebp - 0x238], si
call fcn.004b5150
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x174], edi
mov byte [ebp - 4], 0x20
jne 0x4a0ea6
push 0x80004003
call fcn.004b50d0
lea ecx, [ebp - 0x1f8]
push ecx
mov ecx, dword [ebp - 0x174]
lea edx, [ebp - 0x54c]
push edx
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x184]
cmp eax, edi
mov byte [ebp - 4], 0x21
jne 0x4a0edf
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x238]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x234]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x230]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x22c]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a0f3d
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x54c]
push eax
mov byte [ebp - 4], 0x20
call esi
test eax, eax
jge 0x4a0f5a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x238]
push ecx
mov byte [ebp - 4], 0x1f
call esi
test eax, eax
jge 0x4a0f71
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1f8]
push edx
mov byte [ebp - 4], 0x1a
call esi
test eax, eax
jge 0x4a0f88
push eax
call fcn.004b50d0
mov esi, 8
push str.Causation
mov word [ebp - 0x278], si
call fcn.004b5150
mov dword [ebp - 0x270], eax
push str.Causation
mov byte [ebp - 4], 0x22
mov word [ebp - 0x1b0], si
call fcn.004b5150
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x174]
test eax, eax
mov byte [ebp - 4], 0x23
jne 0x4a0fd7
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x55c]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x184]
test eax, eax
mov byte [ebp - 4], 0x24
jne 0x4a1010
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x1b0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x1ac]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x1a8]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x1a4]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a106e
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x55c]
push edx
mov byte [ebp - 4], 0x23
call esi
test eax, eax
jge 0x4a108b
push eax
call fcn.004b50d0
lea eax, [ebp - 0x1b0]
push eax
mov byte [ebp - 4], 0x22
call esi
test eax, eax
jge 0x4a10a2
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x278]
push ecx
mov byte [ebp - 4], 0x1a
call esi
test eax, eax
jge 0x4a10b9
push eax
call fcn.004b50d0
mov esi, 8
push str.Byname
mov word [ebp - 0x288], si
call fcn.004b5150
mov dword [ebp - 0x280], eax
push str.Byname
mov byte [ebp - 4], 0x25
mov word [ebp - 0x1c0], si
call fcn.004b5150
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x174]
test eax, eax
mov byte [ebp - 4], 0x26
jne 0x4a1108
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x174]
lea edx, [ebp - 0x288]
push edx
lea eax, [ebp - 0x52c]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x184]
test eax, eax
mov byte [ebp - 4], 0x27
jne 0x4a1141
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x1c0]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x1bc]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x1b8]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x1b4]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a119f
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x52c]
push eax
mov byte [ebp - 4], 0x26
call esi
test eax, eax
jge 0x4a11bc
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1c0]
push ecx
mov byte [ebp - 4], 0x25
call esi
test eax, eax
jge 0x4a11d3
push eax
call fcn.004b50d0
lea edx, [ebp - 0x288]
push edx
mov byte [ebp - 4], 0x1a
call esi
test eax, eax
jge 0x4a11ea
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
test eax, eax
jne 0x4a1204
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [0x4dd060]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
push eax
mov dword [ebp - 0x18c], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0xac]
test eax, eax
jge 0x4a1267
mov edx, dword [ebp - 0x18c]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x184]
test eax, eax
jne 0x4a1281
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x90]
test eax, eax
jge 0x4a0d1c
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
jmp 0x4a0d1c
mov eax, dword [ebp - 0x174]
cmp eax, edi
jne 0x4a12bf
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov edx, dword [eax]
lea ecx, [ebp - 0x188]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x188], edi
call dword [edx + 0xdc]
cmp eax, edi
jge 0x4a12e7
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x188], edi
je 0x4a1324
mov eax, dword [ebp - 0x174]
cmp eax, edi
jne 0x4a1309
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, edi
jge 0x4a1324
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x190]
cmp eax, edi
mov word [ebp - 0x1b0], 9
mov dword [ebp - 0x1a8], eax
jne 0x4a1349
push 0x80004003
call fcn.004b50d0
jmp 0x4a134f
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov bl, 0x28
push str.SELECT__FROM_tTelnet
mov byte [ebp - 4], bl
mov word [ebp - 0x1c0], 8
call fcn.004b5150
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x174]
cmp eax, edi
mov byte [ebp - 4], 0x29
jne 0x4a138b
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov edi, dword [ebp - 0x1b0]
push 1
mov edx, dword [eax]
push 3
push 2
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x1ac]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x1a8]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x1a4]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x1c0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x1bc]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x1b8]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x1b4]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0xa0]
test eax, eax
jge 0x4a13fc
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x1c0]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4a1418
push eax
call fcn.004b50d0
lea eax, [ebp - 0x1b0]
push eax
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a142f
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
xor ebx, ebx
cmp eax, ebx
mov edi, 0x16
jne 0x4a1450
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
lea edx, [ebp - 0x188]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x188], ebx
call dword [ecx + 0x50]
cmp eax, ebx
jge 0x4a1475
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x188], bx
jne 0x4a3f00
push str.sClientIP
mov word [ebp - 0x5bc], 8
call fcn.004b5150
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x174], ebx
mov byte [ebp - 4], 0x2a
jne 0x4a14b1
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x5bc]
push eax
lea ecx, [ebp - 0x6ec]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
push eax
lea edx, [ebp - 0x1d4]
push edx
mov byte [ebp - 4], 0x2b
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x4a14e6
push eax
call fcn.004b50d0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x6ec]
push eax
mov byte [ebp - 4], 0x2a
call esi
cmp eax, ebx
jge 0x4a1503
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x5bc]
push ecx
mov byte [ebp - 4], 0x11
call esi
cmp eax, ebx
jge 0x4a151a
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1d4]
push edx
lea ecx, [ebp - 0x198]
call fcn.00405240
mov esi, dword [eax]
cmp esi, ebx
mov byte [ebp - 4], 0x2c
je 0x4a154b
cmp dword [esi + 4], ebx
jne 0x4a1546
mov eax, dword [esi]
push eax
call fcn.004b52b0
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4a154d
xor esi, esi
mov ecx, esi
lea edx, [ebp - 0x34]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a1552
mov esi, dword [ebp - 0x198]
cmp esi, ebx
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
mov byte [ebp - 4], 0x11
je 0x4a15aa
lea ecx, [esi + 8]
push ecx
call edi
test eax, eax
jne 0x4a15a4
cmp esi, ebx
je 0x4a15a4
mov eax, dword [esi]
cmp eax, ebx
je 0x4a158b
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x4a159b
push eax
call sub.MFC71.DLL_operator_delete_1
add esp, 4
push esi
call sub.MFC71.DLL_operator_delete
add esp, 4
mov dword [ebp - 0x198], ebx
lea edx, [ebp - 0x34]
push edx
call fcn.00403590
add esp, 4
push str.sInstDate
mov word [ebp - 0x61c], 8
call fcn.004b5150
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x174], ebx
mov byte [ebp - 4], 0x2d
jne 0x4a15e5
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebp - 0x6dc]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
push eax
lea edx, [ebp - 0x268]
push edx
mov byte [ebp - 4], 0x2e
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x4a161a
push eax
call fcn.004b50d0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x6dc]
push eax
mov byte [ebp - 4], 0x2d
call esi
cmp eax, ebx
jge 0x4a1637
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x61c]
push ecx
mov byte [ebp - 4], 0x11
call esi
cmp eax, ebx
jge 0x4a164e
push eax
call fcn.004b50d0
lea edx, [ebp - 0x268]
push edx
lea ecx, [ebp - 0x180]
call fcn.00405240
mov esi, dword [eax]
cmp esi, ebx
mov byte [ebp - 4], 0x2f
je 0x4a167f
cmp dword [esi + 4], ebx
jne 0x4a167a
mov eax, dword [esi]
push eax
call fcn.004b52b0
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4a1681
xor esi, esi
mov ecx, esi
lea edx, [ebp - 0x48]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a1686
mov esi, dword [ebp - 0x180]
cmp esi, ebx
mov byte [ebp - 4], 0x11
je 0x4a16d8
lea ecx, [esi + 8]
push ecx
call edi
test eax, eax
jne 0x4a16d2
cmp esi, ebx
je 0x4a16d2
mov eax, dword [esi]
cmp eax, ebx
je 0x4a16b9
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x4a16c9
push eax
call sub.MFC71.DLL_operator_delete_1
add esp, 4
push esi
call sub.MFC71.DLL_operator_delete
add esp, 4
mov dword [ebp - 0x180], ebx
lea edx, [ebp - 0x48]
push edx
call fcn.00403590
add esp, 4
push str.sClientDate
mov word [ebp - 0x56c], 8
call fcn.004b5150
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x174], ebx
mov byte [ebp - 4], 0x30
jne 0x4a1713
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x56c]
push eax
lea ecx, [ebp - 0x6fc]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
push eax
lea edx, [ebp - 0x258]
push edx
mov byte [ebp - 4], 0x31
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x4a1748
push eax
call fcn.004b50d0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x6fc]
push eax
mov byte [ebp - 4], 0x30
call esi
cmp eax, ebx
jge 0x4a1765
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x56c]
push ecx
mov byte [ebp - 4], 0x11
call esi
cmp eax, ebx
jge 0x4a177c
push eax
call fcn.004b50d0
lea edx, [ebp - 0x258]
push edx
lea ecx, [ebp - 0x18c]
call fcn.00405240
mov esi, dword [eax]
cmp esi, ebx
mov byte [ebp - 4], 0x32
je 0x4a17ad
cmp dword [esi + 4], ebx
jne 0x4a17a8
mov eax, dword [esi]
push eax
call fcn.004b52b0
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4a17af
xor esi, esi
mov ecx, esi
lea edx, [ebp - 0x70]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a17b4
mov esi, dword [ebp - 0x18c]
cmp esi, ebx
mov byte [ebp - 4], 0x11
je 0x4a1806
lea ecx, [esi + 8]
push ecx
call edi
test eax, eax
jne 0x4a1800
cmp esi, ebx
je 0x4a1800
mov eax, dword [esi]
cmp eax, ebx
je 0x4a17e7
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x4a17f7
push eax
call sub.MFC71.DLL_operator_delete_1
add esp, 4
push esi
call sub.MFC71.DLL_operator_delete
add esp, 4
mov dword [ebp - 0x18c], ebx
lea edx, [ebp - 0x70]
push edx
call fcn.00403590
add esp, 4
mov edi, 8
push str.flag
mov word [ebp - 0x5fc], di
call fcn.004b5150
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x174], ebx
mov byte [ebp - 4], 0x33
jne 0x4a1844
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x5fc]
push eax
lea ecx, [ebp - 0x71c]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
push eax
lea edx, [ebp - 0x58c]
push edx
mov byte [ebp - 4], 0x34
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x4a1879
push eax
call fcn.004b50d0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x71c]
push eax
mov byte [ebp - 4], 0x33
call esi
cmp eax, ebx
jge 0x4a1896
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x5fc]
push ecx
mov byte [ebp - 4], 0x11
call esi
cmp eax, ebx
jge 0x4a18ad
push eax
call fcn.004b50d0
movsx edx, word [ebp - 0x584]
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp - 0x1a0], edx
call fcn.00404bc0
mov ecx, 0x4dd170
lea edx, [ebp - 0x20]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a18d5
mov eax, dword [0x4dd184]
push 0xa
lea edx, [ebp - 0x28c]
push edx
push eax
call dword [sym.imp.MSVCR71.dll__itoa]
mov eax, dword [ebp - 0x17c]
add esp, 0xc
cmp eax, ebx
jne 0x4a1911
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
lea edx, [ebp - 0x188]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x188], ebx
call dword [ecx + 0xdc]
cmp eax, ebx
jge 0x4a1939
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x188], ebx
je 0x4a1976
mov eax, dword [ebp - 0x17c]
cmp eax, ebx
jne 0x4a195b
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
cmp eax, ebx
jge 0x4a1976
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x190]
cmp eax, ebx
mov word [ebp - 0x1b0], 9
mov dword [ebp - 0x1a8], eax
jne 0x4a199b
push 0x80004003
call fcn.004b50d0
jmp 0x4a19a1
mov edx, dword [eax]
push eax
call dword [edx + 4]
push str.SELECT_top_0__FROM_tTelnet_history
mov byte [ebp - 4], 0x35
mov word [ebp - 0x1c0], di
call fcn.004b5150
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x17c]
cmp eax, ebx
mov byte [ebp - 4], 0x36
jne 0x4a19da
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1b0]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x1ac]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x1a8]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x1a4]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x1c0]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x1bc]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x1b8]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x1b4]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
cmp eax, ebx
jge 0x4a1a4b
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x35
call esi
cmp eax, ebx
jge 0x4a1a68
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1b0]
push ecx
mov byte [ebp - 4], 0x11
call esi
cmp eax, ebx
jge 0x4a1a7f
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
cmp eax, ebx
jne 0x4a1a99
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov edx, dword [0x4dd060]
mov dword [ebx + 8], edx
push eax
mov dword [ebp - 0x188], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0x78]
test eax, eax
jge 0x4a1af9
mov ecx, dword [ebp - 0x188]
push 0x4c6e40
push ecx
push eax
call fcn.004b50e0
mov esi, 8
push str.sClientDate
mov word [ebp - 0x57c], si
call fcn.004b5150
mov dword [ebp - 0x574], eax
push str.sClientDate
mov byte [ebp - 4], 0x37
mov word [ebp - 0x238], si
call fcn.004b5150
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x174]
test eax, eax
mov byte [ebp - 4], 0x38
jne 0x4a1b48
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x174]
lea edx, [ebp - 0x57c]
push edx
lea eax, [ebp - 0x73c]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x39
jne 0x4a1b81
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x238]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x234]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x230]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x22c]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a1bdf
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x73c]
push eax
mov byte [ebp - 4], 0x38
call edi
test eax, eax
jge 0x4a1bfc
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x238]
push ecx
mov byte [ebp - 4], 0x37
call edi
test eax, eax
jge 0x4a1c13
push eax
call fcn.004b50d0
lea edx, [ebp - 0x57c]
push edx
mov byte [ebp - 4], 0x11
call edi
test eax, eax
jge 0x4a1c2a
push eax
call fcn.004b50d0
mov esi, 8
push str.Host
mov word [ebp - 0x5cc], si
call fcn.004b5150
mov dword [ebp - 0x5c4], eax
push str.Host
mov byte [ebp - 4], 0x3a
mov word [ebp - 0x248], si
call fcn.004b5150
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x174]
test eax, eax
mov byte [ebp - 4], 0x3b
jne 0x4a1c79
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x75c]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x3c
jne 0x4a1cb2
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x248]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x244]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x240]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x23c]
push eax
mov dword [ebp - 0x188], eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a1d1a
mov edx, dword [ebp - 0x188]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
lea eax, [ebp - 0x75c]
push eax
mov byte [ebp - 4], 0x3b
call edi
test eax, eax
jge 0x4a1d31
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x248]
push ecx
mov byte [ebp - 4], 0x3a
call edi
test eax, eax
jge 0x4a1d48
push eax
call fcn.004b50d0
lea edx, [ebp - 0x5cc]
push edx
mov byte [ebp - 4], 0x11
call edi
test eax, eax
jge 0x4a1d5f
push eax
call fcn.004b50d0
mov esi, 8
push str.sInstDate
mov word [ebp - 0x5ec], si
call fcn.004b5150
mov dword [ebp - 0x5e4], eax
push str.sInstDate
mov byte [ebp - 4], 0x3d
mov word [ebp - 0x228], si
call fcn.004b5150
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x174]
test eax, eax
mov byte [ebp - 4], 0x3e
jne 0x4a1dae
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x5ec]
push eax
lea ecx, [ebp - 0x74c]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x3f
jne 0x4a1de7
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x228]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x224]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x220]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x21c]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a1e45
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x74c]
push edx
mov byte [ebp - 4], 0x3e
call esi
test eax, eax
jge 0x4a1e62
push eax
call fcn.004b50d0
lea eax, [ebp - 0x228]
push eax
mov byte [ebp - 4], 0x3d
call esi
test eax, eax
jge 0x4a1e79
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x5ec]
push ecx
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a1e90
push eax
call fcn.004b50d0
mov esi, 8
push str.sClientIP
mov word [ebp - 0x60c], si
call fcn.004b5150
mov dword [ebp - 0x604], eax
push str.sClientIP
mov byte [ebp - 4], 0x40
mov word [ebp - 0x208], si
call fcn.004b5150
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x174]
test eax, eax
mov byte [ebp - 4], 0x41
jne 0x4a1edf
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x174]
lea edx, [ebp - 0x60c]
push edx
lea eax, [ebp - 0x66c]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x42
jne 0x4a1f18
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x208]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x204]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x200]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x1fc]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a1f76
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x66c]
push eax
mov byte [ebp - 4], 0x41
call esi
test eax, eax
jge 0x4a1f93
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x208]
push ecx
mov byte [ebp - 4], 0x40
call esi
test eax, eax
jge 0x4a1faa
push eax
call fcn.004b50d0
lea edx, [ebp - 0x60c]
push edx
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a1fc1
push eax
call fcn.004b50d0
mov esi, 8
push 0x4c7d84
mov word [ebp - 0x3ec], si
call fcn.004b5150
mov dword [ebp - 0x3e4], eax
lea eax, [ebp - 0x20]
mov bl, 0x43
push eax
mov byte [ebp - 4], bl
mov word [ebp - 0x218], si
call fcn.004b5150
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x44
jne 0x4a2016
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x218]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x214]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x210]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x20c]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x3ec]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x3e8]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x3e4]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x3e0]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a2081
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x218]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4a209d
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x3ec]
push ecx
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a20b4
push eax
call fcn.004b50d0
mov esi, 8
push str.Certificate
mov word [ebp - 0x3bc], si
call fcn.004b5150
mov dword [ebp - 0x3b4], eax
lea edx, [ebp - 0x28c]
mov bl, 0x45
push edx
mov byte [ebp - 4], bl
mov word [ebp - 0x39c], si
call fcn.004b5150
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x46
jne 0x4a210c
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x39c]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x398]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x394]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x390]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x3bc]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x3b8]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x3b4]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x3b0]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a2177
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x39c]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4a2193
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x3bc]
push ecx
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a21aa
push eax
call fcn.004b50d0
mov esi, 8
push str.CertificateNo
mov word [ebp - 0x3fc], si
call fcn.004b5150
mov dword [ebp - 0x3f4], eax
mov bl, 0x47
push 0x4dd188
mov byte [ebp - 4], bl
mov word [ebp - 0x3dc], si
call fcn.004b5150
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x48
jne 0x4a2200
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x3dc]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x3d8]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x3d4]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x3d0]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x3fc]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x3f8]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x3f4]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x3f0]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4a226b
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea edx, [ebp - 0x3dc]
mov byte [ebp - 4], bl
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push edx
call ebx
test eax, eax
jge 0x4a2287
push eax
call fcn.004b50d0
lea eax, [ebp - 0x3fc]
push eax
mov byte [ebp - 4], 0x11
call ebx
test eax, eax
jge 0x4a229e
push eax
call fcn.004b50d0
push str.Sendflag
mov word [ebp - 0x4fc], 8
call fcn.004b5150
mov dword [ebp - 0x4f4], eax
mov word [ebp - 0x4dc], 0x16
mov dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x4a
jne 0x4a22e8
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x4dc]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x4d8]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x4d4]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x4d0]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x4fc]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x4f8]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x4f4]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x4f0]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a2353
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea eax, [ebp - 0x4dc]
push eax
mov byte [ebp - 4], 0x49
call ebx
test eax, eax
jge 0x4a236a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x4fc]
push ecx
mov byte [ebp - 4], 0x11
call ebx
test eax, eax
jge 0x4a2381
push eax
call fcn.004b50d0
mov esi, 8
push str.Name
mov word [ebp - 0x48c], si
call fcn.004b5150
mov dword [ebp - 0x484], eax
mov bl, 0x4b
push 0x4dd19c
mov byte [ebp - 4], bl
mov word [ebp - 0x51c], si
call fcn.004b5150
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x4c
jne 0x4a23d7
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x51c]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x518]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x514]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x510]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x48c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x488]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x484]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x480]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4a2442
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x51c]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4a245e
push eax
call fcn.004b50d0
lea eax, [ebp - 0x48c]
push eax
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a2475
push eax
call fcn.004b50d0
mov esi, 8
push str.ProtocolType
mov word [ebp - 0x45c], si
call fcn.004b5150
mov dword [ebp - 0x454], eax
mov bl, 0x4d
push 0x4c6ca8
mov byte [ebp - 4], bl
mov word [ebp - 0x40c], si
call fcn.004b5150
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x4e
jne 0x4a24cb
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x40c]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x408]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x404]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x400]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x45c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x458]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x454]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x450]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a2536
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x40c]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4a2552
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x45c]
push ecx
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a2569
push eax
call fcn.004b50d0
mov esi, 8
push str.description
mov word [ebp - 0x4ec], si
call fcn.004b5150
mov dword [ebp - 0x4e4], eax
mov bl, 0x4f
push str.Telnet
mov byte [ebp - 4], bl
mov word [ebp - 0x2cc], si
call fcn.004b5150
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x50
jne 0x4a25bf
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x2cc]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x2c8]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x2c4]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x2c0]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x4ec]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x4e8]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x4e4]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x4e0]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4a262a
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2cc]
push edx
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4a2646
push eax
call fcn.004b50d0
lea eax, [ebp - 0x4ec]
push eax
mov byte [ebp - 4], 0x11
call esi
test eax, eax
jge 0x4a265d
push eax
call fcn.004b50d0
mov esi, 8
push 0x4c7114
mov word [ebp - 0x42c], si
call fcn.004b5150
mov dword [ebp - 0x424], eax
mov bl, 0x51
push 0x4dd1b2
mov byte [ebp - 4], bl
mov word [ebp - 0x2ec], si
call fcn.004b5150
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x52
jne 0x4a26b3
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x2ec]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x2e8]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x2e4]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x2e0]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x42c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x428]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x424]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x420]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a271e
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2ec]
push eax
mov byte [ebp - 4], bl
call edi
test eax, eax
jge 0x4a273a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x42c]
push ecx
mov byte [ebp - 4], 0x11
call edi
test eax, eax
jge 0x4a2751
push eax
call fcn.004b50d0
mov esi, 8
push str.SeatNO
mov word [ebp - 0x4cc], si
call fcn.004b5150
mov dword [ebp - 0x4c4], eax
push 0x4dd1d0
mov byte [ebp - 4], 0x53
mov word [ebp - 0x30c], si
call fcn.004b5150
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0x54
jne 0x4a27a6
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov ebx, dword [ebp - 0x30c]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x308]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x304]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x300]
mov dword [ecx + 0xc], ebx
mov ebx, dword [ebp - 0x4cc]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x4c8]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x4c4]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x4c0]
push eax
mov esi, eax
mov dword [ecx + 0xc], ebx
call dword [edx + 0x100]
test eax, eax
jge 0x4a2811
mov eax, dword [ebp - 0x17c]
cmp eax, ebx
jne 0x4a3f1a
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edx, dword [eax]
lea ecx, [ebp - 0x18c]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x18c], ebx
call dword [edx + 0xdc]
cmp eax, ebx
jge 0x4a3f42
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x18c], ebx
je 0x4a3f7f
mov eax, dword [ebp - 0x17c]
cmp eax, ebx
jne 0x4a3f64
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x17c]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, ebx
jge 0x4a3f7f
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x174]
cmp eax, ebx
jne 0x4a3f99
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
lea edx, [ebp - 0x18c]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x18c], ebx
call dword [ecx + 0xdc]
cmp eax, ebx
jge 0x4a3fc1
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x18c], ebx
je 0x4a3ffe
mov eax, dword [ebp - 0x174]
cmp eax, ebx
jne 0x4a3fe3
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
cmp eax, ebx
jge 0x4a3ffe
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x190]
cmp eax, ebx
jne 0x4a4018
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x190]
mov edx, dword [eax]
lea ecx, [ebp - 0x18c]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x18c], ebx
call dword [edx + 0x88]
cmp eax, ebx
jge 0x4a4040
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x18c], ebx
je 0x4a407a
mov eax, dword [ebp - 0x190]
cmp eax, ebx
jne 0x4a4062
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x190]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x3c]
cmp eax, ebx
jge 0x4a407a
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x19c]
cmp eax, ebx
jne 0x4a4094
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
lea edx, [ebp - 0x18c]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x18c], ebx
call dword [ecx + 0x88]
cmp eax, ebx
jge 0x4a40bc
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x18c], ebx
je 0x4a40f6
mov eax, dword [ebp - 0x19c]
cmp eax, ebx
jne 0x4a40de
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x3c]
cmp eax, ebx
jge 0x4a40f6
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x194]
cmp eax, ebx
jne 0x4a4110
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x194]
mov edx, dword [eax]
lea ecx, [ebp - 0x18c]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x18c], ebx
call dword [edx + 0xdc]
cmp eax, ebx
jge 0x4a4138
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x18c], ebx
je 0x4a4175
mov eax, dword [ebp - 0x194]
cmp eax, ebx
jne 0x4a415a
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x194]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, ebx
jge 0x4a4175
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x184]
cmp eax, ebx
jne 0x4a418f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax]
lea edx, [ebp - 0x18c]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x18c], ebx
call dword [ecx + 0xdc]
cmp eax, ebx
jge 0x4a41b7
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x18c], ebx
je 0x4a41f4
mov eax, dword [ebp - 0x184]
cmp eax, ebx
jne 0x4a41d9
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x80]
cmp eax, ebx
jge 0x4a41f4
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x178]
cmp eax, ebx
jne 0x4a420e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x178]
mov edx, dword [eax]
lea ecx, [ebp - 0x18c]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x18c], ebx
call dword [edx + 0xdc]
cmp eax, ebx
jge 0x4a4236
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x18c], ebx
je 0x4a4273
mov eax, dword [ebp - 0x178]
cmp eax, ebx
jne 0x4a4258
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x178]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, ebx
jge 0x4a4273
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x174]
cmp eax, ebx
je 0x4a4289
mov dword [ebp - 0x174], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x184]
cmp eax, ebx
je 0x4a429f
mov dword [ebp - 0x184], ebx
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x178]
cmp eax, ebx
je 0x4a42b5
mov dword [ebp - 0x178], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x190]
cmp eax, ebx
je 0x4a42cb
mov dword [ebp - 0x190], ebx
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x19c]
cmp eax, ebx
je 0x4a42e1
mov dword [ebp - 0x19c], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x194]
cmp eax, ebx
je 0x4a42f7
mov dword [ebp - 0x194], ebx
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x17c]
cmp eax, ebx
je 0x4a430d
mov dword [ebp - 0x17c], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp word [ebp - 0x1d4], di
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
je 0x4a4336
lea edx, [ebp - 0x1d4]
push edx
call esi
cmp eax, ebx
jge 0x4a432f
push eax
call fcn.004b50d0
mov word [ebp - 0x1d4], di
cmp word [ebp - 0x268], di
mov dword [ebp - 0x1cc], ebx
je 0x4a435f
lea eax, [ebp - 0x268]
push eax
call esi
cmp eax, ebx
jge 0x4a4358
push eax
call fcn.004b50d0
mov word [ebp - 0x268], di
cmp word [ebp - 0x258], di
mov dword [ebp - 0x260], ebx
je 0x4a4388
lea ecx, [ebp - 0x258]
push ecx
call esi
cmp eax, ebx
jge 0x4a4381
push eax
call fcn.004b50d0
mov word [ebp - 0x258], di
cmp word [ebp - 0x43c], di
mov dword [ebp - 0x250], ebx
je 0x4a43b1
lea edx, [ebp - 0x43c]
push edx
call esi
cmp eax, ebx
jge 0x4a43aa
push eax
call fcn.004b50d0
mov word [ebp - 0x43c], di
cmp word [ebp - 0x41c], di
mov dword [ebp - 0x434], ebx
je 0x4a43da
lea eax, [ebp - 0x41c]
push eax
call esi
cmp eax, ebx
jge 0x4a43d3
push eax
call fcn.004b50d0
mov word [ebp - 0x41c], di
mov dword [ebp - 0x414], ebx
mov eax, dword [ebp - 0x1c4]
test eax, eax
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xf
je 0x4a43fd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x194]
test eax, eax
mov byte [ebp - 4], 0xe
je 0x4a4411
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x19c]
test eax, eax
mov byte [ebp - 4], 0xd
je 0x4a4425
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x17c]
test eax, eax
mov byte [ebp - 4], 0xc
je 0x4a4439
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x178]
test eax, eax
mov byte [ebp - 4], 0xb
je 0x4a444d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x184]
test eax, eax
mov byte [ebp - 4], 0xa
je 0x4a4461
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x174]
test eax, eax
mov byte [ebp - 4], 9
je 0x4a4475
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x190]
test eax, eax
mov byte [ebp - 4], 8
je 0x4a4489
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x67c]
push eax
mov byte [ebp - 4], 7
call esi
test eax, eax
jge 0x4a44a0
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x69c]
push ecx
mov byte [ebp - 4], 6
call esi
test eax, eax
jge 0x4a44b7
push eax
call fcn.004b50d0
lea edx, [ebp - 0x6bc]
push edx
mov byte [ebp - 4], 5
call esi
test eax, eax
jge 0x4a44ce
push eax
call fcn.004b50d0
lea eax, [ebp - 0x58c]
push eax
mov byte [ebp - 4], 4
call esi
test eax, eax
jge 0x4a44e5
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x258]
push ecx
mov byte [ebp - 4], 3
call esi
test eax, eax
jge 0x4a44fc
push eax
call fcn.004b50d0
lea edx, [ebp - 0x41c]
push edx
mov byte [ebp - 4], 2
call esi
test eax, eax
jge 0x4a4513
push eax
call fcn.004b50d0
lea eax, [ebp - 0x43c]
push eax
mov byte [ebp - 4], 1
call esi
test eax, eax
jge 0x4a452a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x268]
push ecx
mov byte [ebp - 4], 0
call esi
test eax, eax
jge 0x4a4541
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1d4]
push edx
mov dword [ebp - 4], 0xffffffff
call esi
test eax, eax
jge 0x4a455b
push eax
call fcn.004b50d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004b4b61
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret