Function at 0x4d2c40
Capabilities:
Check os version
Copy file
Create thread
Delete registry value
Get number of processors
Parse pe header
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4f9134
mov eax, dword fs:[0]
push eax
mov eax, 0x14888
call fcn.004e03c0
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0x14884], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x1489c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x148ac]
mov edi, dword [esp + 0x148b4]
mov esi, dword [esp + 0x148b8]
push 0x14000
lea eax, [esp + 0x89c]
push 0
push eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x30], ebp
call sub.MSVCR90.dll_memset
push esi
lea ecx, [esp + 0x8a8]
push edi
push ecx
call sub.MSVCR90.dll_memcpy
add esp, 0x18
push 0x5116d8
lea ecx, [esp + 0x60]
mov byte [esp + esi + 0x89c], 0
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov dword [esp + 0x148a4], 0
lea edx, [esp + 0x898]
push edx
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_820]
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 1
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0x148ac], 0
call fcn.0048eab0
add esp, 8
mov byte [esp + 0x148a4], 2
mov eax, dword [esp + 0x58]
mov ebx, eax
test ebp, ebp
je 0x4d2d40
cmp byte [ebp + 8], 0
je 0x4d2d40
lea ebx, [eax + 5]
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 3
cmp byte [ebx], 0x59
jne 0x4d2d8f
lea edx, [ebx + 1]
push edx
lea eax, [esp + 0x24]
push eax
call fcn.004964c0
add esp, 8
mov byte [esp + 0x148a4], 4
push eax
lea ecx, [esp + 0x58]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x148a4], 3
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d2d9e
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0x58]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov ebp, 0x77
cmp dword [0x103a97c], ebp
jne 0x4d2dc0
mov edx, dword [esp + 0x58]
push edx
push esi
push str.ReceiveClient___d__s
push 8
call fcn.0043da10
add esp, 0x10
mov eax, dword [esp + 0x54]
mov eax, dword [eax - 0xc]
cmp eax, 5
jl 0x4d5966
lea ecx, [esp + 0x2c]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x148a4], 5
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x34]
call sub.mfc90.dll_Ordinal_6494
push 0
push ecx
lea edx, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148ac], 6
lea eax, [esp + 0x34]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x54], esp
push 0x502ba4
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b4], 7
mov byte [esp + 0x148b4], 5
call fcn.004d90e0
mov eax, dword [esp + 0x44]
add esp, 0x10
mov edi, eax
cmp eax, 0x1e
je 0x4d2e57
cmp eax, 0x64
je 0x4d2e57
cmp eax, 6
je 0x4d2e57
cmp eax, 2
jne 0x4d593c
cmp byte [ebx], 0x59
jne 0x4d2e7e
mov byte [0x10d7c71], 1
cmp dword [0x103a97c], ebp
jne 0x4d2e7e
push str.ReceiveClient_g_bCommNew_is_true
push 8
call fcn.0043d500
mov eax, dword [esp + 0x3c]
add esp, 8
test eax, eax
jg 0x4d2e87
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x64]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 8
push 0x5203a0
lea ecx, [esp + 0x64]
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
jne 0x4d431c
cmp dword [esp + 0x34], 1
jg 0x4d2ec1
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 4]
push eax
call fcn.004d8d70
add esp, 4
movzx eax, ax
cmp edi, 0x64
je 0x4d4110
cmp edi, 0x78
je 0x4d4110
cmp edi, 0x1e
jne 0x4d5928
mov ecx, 0xff31
cmp ax, cx
jne 0x4d2f74
cmp dword [0x103a97c], 0x77
jne 0x4d2f18
mov edx, dword [0x1070790]
push edx
push str.recv_TC_SET_PASSWORD__s_
push 8
call fcn.0043d500
add esp, 0xc
cmp dword [esp + 0x34], 2
jg 0x4d2f24
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x1c]
add eax, 8
push eax
lea ecx, [esi + 0x32450]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov eax, dword [esi + 0x32458]
test eax, eax
je 0x4d5928
mov eax, dword [eax + 0x20]
push 0
push 0
push 0x13d6
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xff54
cmp ax, cx
jne 0x4d2fc3
cmp dword [0x103a97c], 0x77
jne 0x4d2f9d
mov edx, dword [0x1070790]
push edx
push str.recv_TC_AUTOPATCH_NOW__s_
push 8
call fcn.0043d500
add esp, 0xc
push 0
push 0x502404
call fcn.004a4050
add esp, 8
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xff55
cmp ax, cx
jne 0x4d3027
cmp dword [0x103a97c], 0x77
jne 0x4d2fec
mov edx, dword [0x1070790]
push edx
push str.recv_TC_SET_SWEEP__s_
push 8
call fcn.0043d500
add esp, 0xc
cmp dword [esp + 0x34], 2
jg 0x4d2ff8
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 8]
push eax
call fcn.004d8d70
push 1
push eax
call fcn.0046efe0
add esp, 0xc
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xff77
cmp ax, cx
jne 0x4d328b
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0xc
mov eax, dword [esp + 0x34]
cmp eax, 7
mov edi, dword [sym.imp.MSVCR90.dll_atoi]
jge 0x4d30aa
cmp eax, 5
jg 0x4d3060
call sub.mfc90.dll_Ordinal_1252
cmp eax, 4
mov ecx, dword [esp + 0x30]
jg 0x4d306e
call sub.mfc90.dll_Ordinal_1252
cmp eax, 3
jg 0x4d3078
call sub.mfc90.dll_Ordinal_1252
cmp eax, 2
jg 0x4d3082
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
push edx
mov edx, dword [ecx + 0xc]
push eax
mov eax, dword [ecx + 8]
push edx
push eax
lea ecx, [esp + 0x28]
push str._s__s__s__s
push ecx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x18
jmp 0x4d3188
cmp eax, 6
jg 0x4d30b4
call sub.mfc90.dll_Ordinal_1252
cmp eax, 5
mov ecx, dword [esp + 0x30]
jg 0x4d30c2
call sub.mfc90.dll_Ordinal_1252
cmp eax, 4
jg 0x4d30cc
call sub.mfc90.dll_Ordinal_1252
cmp eax, 3
jg 0x4d30d6
call sub.mfc90.dll_Ordinal_1252
cmp eax, 2
jg 0x4d30e0
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [ecx + 0x18]
mov eax, dword [ecx + 0x14]
mov esi, dword [sym.imp.mfc90.dll_Ordinal_2539]
push edx
mov edx, dword [ecx + 0x10]
push eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ecx + 8]
push edx
push eax
push ecx
lea edx, [esp + 0x2c]
push str._s__s__s__s__s
push edx
call esi
add esp, 0x1c
cmp dword [esp + 0x34], 6
jg 0x4d3115
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x18]
push eax
call edi
mov eax, dword [esp + 0x38]
add esp, 4
cmp eax, 7
jle 0x4d318c
cmp eax, 6
mov ecx, dword [esp + 0x30]
jg 0x4d3139
call sub.mfc90.dll_Ordinal_1252
cmp eax, 5
jg 0x4d3143
call sub.mfc90.dll_Ordinal_1252
cmp eax, 4
jg 0x4d314d
call sub.mfc90.dll_Ordinal_1252
cmp eax, 3
jg 0x4d3157
call sub.mfc90.dll_Ordinal_1252
cmp eax, 2
jg 0x4d3161
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [ecx + 0x1c]
mov eax, dword [ecx + 0x18]
push edx
mov edx, dword [ecx + 0x14]
push eax
mov eax, dword [ecx + 0x10]
push edx
mov edx, dword [ecx + 0xc]
push eax
mov eax, dword [ecx + 8]
push edx
push eax
lea ecx, [esp + 0x30]
push str._s__s__s__s__s__s
push ecx
call esi
add esp, 0x20
mov eax, dword [esp + 0x34]
cmp eax, 3
jg 0x4d3196
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 0xc]
push eax
call edi
push eax
push str.tc_rv_Port
push str.SOFTWARETC_RV
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491ff0
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x28]
push ecx
mov dword [0x10d7bf4], eax
call fcn.004d8f20
mov bl, 0xd
mov byte [esp + 0x148bc], bl
push str.TC_R.EXE
push eax
lea edx, [esp + 0x40]
push edx
call fcn.00402a60
mov byte [esp + 0x148c8], 0xe
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax]
push 0
push 0
push ecx
push eax
push str.open
push 0
call fcn.00464ac0
add esp, 0x3c
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0xc
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea edx, [esp + 0x20]
push edx
call fcn.00491540
mov byte [esp + 0x148a8], 0xf
mov eax, dword [eax]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push str.TC_CONNECT_RDP_TC_R.EXE__s__err:_s_
push 8
call fcn.0043d500
add esp, 0x14
mov byte [esp + 0x148a4], 0xc
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov edx, 0xff62
cmp ax, dx
jne 0x4d331a
cmp dword [esp + 0x34], 3
jg 0x4d32a5
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x10
cmp dword [esp + 0x38], 2
push 1
jg 0x4d32d0
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x38]
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148b0], 0x11
mov eax, dword [esp + 0x30]
push eax
mov byte [esp + 0x148b4], 8
mov ecx, dword [esp + 0x2c]
call fcn.004cfe30
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xee68
cmp ax, cx
jne 0x4d33a9
cmp dword [esp + 0x34], 3
jg 0x4d3334
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x12
cmp dword [esp + 0x38], 2
push 2
jg 0x4d335f
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x38]
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148b0], 0x13
mov edx, dword [esp + 0x30]
push edx
mov byte [esp + 0x148b4], 8
mov ecx, dword [esp + 0x2c]
call fcn.004cfe30
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xee69
cmp ax, cx
jne 0x4d3409
cmp dword [esp + 0x34], 3
jg 0x4d33bf
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x14
mov edx, dword [esp + 0x28]
push edx
mov byte [esp + 0x148ac], 8
mov ecx, dword [esp + 0x24]
call fcn.004ba910
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xee6e
cmp ax, cx
jne 0x4d3467
push 0
push 0x1056bba
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491ff0
push 0
push 0x1056bba
push str.TC_SET_INIT_BACKUP_sScanClearKey__s___d_
push 8
call fcn.0043d500
call fcn.00467200
push 1
push 0x51579c
call fcn.004a4050
add esp, 0x28
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov edx, 0xee6b
cmp ax, dx
jne 0x4d369f
mov edi, 2
cmp dword [esp + 0x34], edi
mov byte [0x10d7c6c], 0
jg 0x4d348c
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 8
push eax
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x15
cmp dword [esp + 0x34], 3
jg 0x4d34b2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0xc
push eax
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x16
mov eax, dword [esp + 0x50]
cmp dword [eax - 0xc], 0
je 0x4d3649
lea ecx, [esp + 0x14]
push ecx
call fcn.004d8f20
mov byte [esp + 0x148a8], 0x17
push 0x4ff418
push eax
lea edx, [esp + 0x2c]
push edx
call fcn.00402a60
add esp, 0x10
mov byte [esp + 0x148a4], 0x19
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp dword [esp + 0x34], edi
jg 0x4d351c
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 8
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.004029d0
mov ebx, 0x1a
mov byte [esp + 0x148b0], bl
push str..SAL.zip
push eax
lea edx, [esp + 0x2c]
push edx
call fcn.00402a60
add esp, 0x18
mov byte [esp + 0x148a4], 0x1b
mov eax, dword [eax]
push 0
push 0
push 4
push 0
push 3
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x19
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp esi, 0xffffffff
je 0x4d3637
lea ecx, [esp + 0x14]
mov dword [0x53eff4], esi
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov ebx, 0x1c
mov byte [esp + 0x148a4], bl
mov ecx, dword [esp + 0x34]
cmp ecx, 3
jg 0x4d35ca
call sub.mfc90.dll_Ordinal_1252
cmp ecx, edi
mov eax, dword [esp + 0x30]
jg 0x4d35d7
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
push ecx
push edx
push 0xee6c
lea eax, [esp + 0x20]
push str.Set_d_s_s
push eax
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x1d
mov eax, dword [esp + 0x28]
push eax
mov byte [esp + 0x148ac], bl
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
mov byte [esp + 0x148a4], 0x19
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x16
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x40]
push str.rerun
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x4d3664
mov byte [0x10d7c6c], 1
mov byte [esp + 0x148a4], 0x15
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov edx, 0xee6c
cmp ax, dx
jne 0x4d3807
cmp dword [esp + 0x34], 2
jg 0x4d36b9
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 8
push eax
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x1e
mov edi, dword [0x53eff4]
test edi, edi
je 0x4d37de
cmp dword [esp + 0x34], 3
jg 0x4d36ed
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0xc
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x1f
mov eax, dword [esp + 0x20]
mov esi, dword [eax - 0xc]
lea ecx, [esp + 0x98]
push ecx
push eax
call fcn.00491490
add esp, 8
push 0
lea edx, [esp + 0x4c]
push edx
mov eax, esi
cdq
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0xa4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov bl, 0x20
mov byte [esp + 0x148a4], bl
mov ecx, dword [esp + 0x34]
cmp ecx, 4
jg 0x4d375e
call sub.mfc90.dll_Ordinal_1252
cmp ecx, 2
mov eax, dword [esp + 0x30]
jg 0x4d376c
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 8]
push ecx
push edx
push 0xee6c
lea eax, [esp + 0x20]
push str.Set_d_s_s
push eax
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x48], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x21
mov eax, dword [esp + 0x28]
push eax
mov byte [esp + 0x148ac], bl
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
mov byte [esp + 0x148a4], 0x1f
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x1e
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xee6d
cmp ax, cx
jne 0x4d3b4a
cmp dword [esp + 0x34], 2
jg 0x4d3821
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 8
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x22
cmp dword [esp + 0x34], 3
jg 0x4d3847
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0xc
push eax
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x23
mov eax, dword [0x53eff4]
xor esi, esi
cmp eax, esi
je 0x4d3b0f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x24
lea edx, [esp + 0x28]
push edx
call fcn.00465390
mov byte [esp + 0x148a8], 0x25
push 0x4ff418
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00402a60
add esp, 0x10
mov byte [esp + 0x148a4], 0x27
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push str..SAL.zip
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x30], esi
call fcn.00402a60
add esp, 0xc
mov byte [esp + 0x148a4], 0x28
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x148a4], 0x27
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [esp + 0x18]
push esi
push eax
lea ecx, [esp + 0x2c]
push ecx
call fcn.00438170
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x98]
push edx
push eax
mov dword [esp + 0xa0], 0xffffffff
call fcn.00437cd0
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x98]
push ecx
push edx
mov dword [esp + 0xa0], esi
call fcn.00437cd0
push str..SAL.txt
push str..SAL.zip
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0xc0]
sub ecx, eax
mov dl, byte [eax]
mov byte [eax + ecx], dl
inc eax
test dl, dl
jne 0x4d3967
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0xc4]
push ecx
push edx
call fcn.00439930
mov eax, dword [esp + 0x24]
push eax
call fcn.00437ca0
mov edx, dword [esp + 0x18]
xor eax, eax
lea ecx, [esp + 0x74]
push ecx
push esi
push edx
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExA]
mov eax, dword [esp + 0x90]
push 1
push esi
push esi
push eax
call fcn.004e0460
mov ecx, dword [esp + 0x94]
xor edi, edi
add eax, ecx
adc edx, edi
mov dword [esp + 0x4c], edx
jne 0x4d3a16
cmp eax, 0x2710
jbe 0x4d3aeb
lea edx, [esp + 0x14]
push edx
mov byte [0x10dc518], 1
call fcn.00465390
mov bl, 0x29
mov byte [esp + 0x148a8], bl
push str.SAL.txt
push eax
lea eax, [esp + 0x34]
push eax
call fcn.00402a60
add esp, 0x10
mov byte [esp + 0x148a4], 0x2a
mov eax, dword [eax]
mov ecx, dword [esp + 0x18]
push esi
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x27
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp dword [0x103a97c], esi
je 0x4d3a94
push str.b4_GetSal_1
push 8
call fcn.0043d500
add esp, 8
test byte [0x104311c], 4
jne 0x4d3aa7
push 1
call fcn.004cfd90
add esp, 4
cmp byte [0x10d7c6c], 0
je 0x4d3aeb
mov edx, dword [esp + 0x1c]
push 0x63
push 1
mov byte [0x10d7c6c], 0
mov eax, dword [edx + 0x20]
push 0x13d4
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
push str.CallAutoPatch_SAL_changeed
push 8
mov byte [0x10da2b9], 1
mov byte [0x10d9863], 1
call fcn.0043d500
add esp, 8
mov byte [esp + 0x148a4], 0x24
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x23
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x22
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xff74
cmp ax, cx
jne 0x4d3db6
cmp dword [esp + 0x34], 2
jg 0x4d3b64
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 8
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x2b
cmp dword [esp + 0x34], 3
jg 0x4d3b8a
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0xc
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x2c
cmp dword [esp + 0x34], 4
jg 0x4d3bb0
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0x10
push eax
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov bl, 0x2d
mov byte [esp + 0x148a4], bl
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
push edx
push eax
push str.recv_TC_SET_HASH_SVR_AGENT__s___s_
push 8
call fcn.0043d500
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x34]
push eax
call fcn.004029d0
mov byte [esp + 0x148c0], 0x2e
mov eax, dword [esp + 0x38]
mov ecx, dword [eax - 0xc]
push ecx
push eax
call fcn.00495b20
push eax
lea ecx, [esp + 0x44]
push 0x4ff1b8
push ecx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
mov edx, dword [esp + 0x44]
add esp, 0x30
push edx
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4d3c90
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x2c
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x2b
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
push 0x7ff
lea eax, [esp + 0x9d]
push 0
push eax
mov byte [esp + 0xa4], 0
call sub.MSVCR90.dll_memset
add esp, 0xc
push str._Y__m__d__H:_M:_S
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x50]
push edx
call fcn.00410ab0
mov ecx, eax
call fcn.00409400
mov byte [esp + 0x148a4], 0x2f
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push eax
push ecx
lea edx, [esp + 0xa0]
push str.0_s0_s
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp dword [eax - 0xc], 0xa
jle 0x4d3d5f
push 0x51eb30
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x4d3d5b
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x98]
push eax
push ecx
push str.SoftWareTrojanCut_tc_FileSA
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491e90
mov eax, dword [esp + 0x28]
add esp, 0x10
lea edx, [esp + 0x98]
push edx
push eax
mov ecx, 0x53f2c8
call fcn.0042f720
mov ecx, eax
call dword [sym.imp.mfc90.dll_Ordinal_820]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
push ecx
push edx
push str.TC_SET_HASH_SVR_AGENT_OK:___s___s_
jmp 0x4d3d6a
mov eax, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x28]
push eax
push str.TC_SET_HASH_SVR_AGENT_Error__s___s_
push 8
call fcn.0043d500
add esp, 0x10
mov byte [esp + 0x148a4], 0x2e
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x2c
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x2b
jmp 0x4d5253
mov ecx, 0xff56
cmp ax, cx
jne 0x4d3ef5
mov edx, dword [0x1070790]
push edx
push str.recv_TC_SET_DELETE__s_
push 8
call fcn.0043d500
add esp, 0xc
push 0
lea ecx, [esp + 0x68]
call fcn.00456910
mov byte [esp + 0x148a4], 0x30
cmp dword [esp + 0x34], 2
jg 0x4d3df9
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 8]
push eax
call fcn.004d8d70
lea ecx, [esp + 0x18]
push ecx
mov esi, eax
call fcn.00465390
add esp, 8
mov bl, 0x31
mov byte [esp + 0x148a4], bl
mov eax, esi
sub eax, 2
je 0x4d3e9d
sub eax, 2
jne 0x4d3ea4
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x50], esp
push str.tc_UNINSTALL_PASSWORD
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x32
push ecx
mov ecx, esp
mov dword [esp + 0x50], esp
push str.tc_Env_tc_CLIENT
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x33
mov byte [esp + 0x148b0], bl
lea ecx, [esp + 0x70]
call fcn.004573e0
push str._tc_un.exe
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_945]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0x5138dc
push edx
push str.open
push 0
call fcn.00464ac0
add esp, 0x18
jmp 0x4d3ea4
mov byte [0x10da080], 1
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x20]
push 1
push 1
push 0x13d4
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [esp + 0x148a4], 0x30
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x64]
call fcn.00456840
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov edx, 0xff63
cmp ax, dx
jne 0x4d3f51
push str.tc_RFMsg
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueA]
mov eax, dword [0x1043084]
and eax, 0x10
or eax, dword [0x10430b0]
and eax, 0x3e
test al, 0x10
jne 0x4d5928
push 0x4ff784
call fcn.004657a0
add esp, 4
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xff59
cmp ax, cx
jne 0x4d4086
cmp dword [esp + 0x34], 2
jg 0x4d3f6b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 8
push eax
mov ecx, 0x10dd2f8
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp dword [esp + 0x34], 3
jg 0x4d3f8a
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0xc
push eax
mov ecx, 0x10dd30c
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp dword [esp + 0x34], 4
jg 0x4d3fa9
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0x10
push eax
mov ecx, 0x10dd358
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp dword [esp + 0x34], 5
jg 0x4d3fc8
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0x14
push eax
mov ecx, 0x10dd308
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x51c1a8
mov ecx, 0x10dd308
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
jne 0x4d4005
lea edx, [esp + 0x48]
push edx
push eax
mov dword [0x10da090], 0x100
push eax
jmp 0x4d5916
push str.256b
mov ecx, 0x10dd308
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4d406e
push str.256B
mov ecx, 0x10dd308
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4d406e
push 0x51c194
mov ecx, 0x10dd308
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4d406e
push 0x51c190
mov ecx, 0x10dd308
call dword [sym.imp.mfc90.dll_Ordinal_1603]
neg eax
sbb eax, eax
lea edx, [esp + 0x48]
push edx
and eax, 0xfffffff0
add eax, 0x10
push 0
mov dword [0x10da090], eax
push 0
jmp 0x4d5916
lea edx, [esp + 0x48]
push edx
push 0
mov dword [0x10da090], 0x101
push 0
jmp 0x4d5916
mov ecx, 0xff61
cmp ax, cx
jne 0x4d5928
push 0x4ff784
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov esi, eax
mov bl, 0x34
mov byte [esp + 0x148a4], bl
push 0xe4
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148a4], 0x35
mov esi, dword [esi]
mov eax, dword [eax]
mov ecx, dword [esp + 0x1c]
push 0
push esi
push eax
call sub.mfc90.dll_Ordinal_4502
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov edx, 0xff13
cmp ax, dx
jne 0x4d5928
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x2c]
push eax
push ecx
mov ecx, esi
call fcn.004cb9a0
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 9
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov bl, 0xa
mov byte [esp + 0x148a4], bl
mov ecx, dword [esp + 0x34]
cmp ecx, 0x1d
jg 0x4d416b
call sub.mfc90.dll_Ordinal_1252
cmp ecx, 0x1c
mov eax, dword [esp + 0x30]
jg 0x4d4179
call sub.mfc90.dll_Ordinal_1252
cmp ecx, 0x1b
jg 0x4d4183
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [eax + 0x74]
mov edx, dword [eax + 0x70]
mov eax, dword [eax + 0x6c]
push ecx
push edx
push eax
lea ecx, [esp + 0x20]
push str._s_s_s
push ecx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
mov edx, dword [esp + 0x28]
add esp, 0x14
push 0x5116d8
push edx
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
push 0x5201f4
push str._null__null__null_6
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
push 0x5201d4
push str._null__null__null_7
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
cmp byte [0x10d7c71], 0
je 0x4d421d
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
push ecx
call fcn.004963d0
add esp, 8
mov byte [esp + 0x148a4], 0xb
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0xc]
push ecx
push eax
call fcn.00495b20
mov edx, dword [0x10dd2fc]
add esp, 8
push edx
lea ecx, [esp + 0x58]
mov dword [0x10d7cd0], eax
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4d42a6
cmp byte [0x103b0fc], 0
jne 0x4d427e
mov eax, dword [esp + 0x54]
mov ecx, dword [0x10d7cd0]
push eax
push ecx
push str.recv_TC_SET_CONFIG_g_MyCheckSum_0x_08x___s_
push 8
call fcn.0043d500
add esp, 0x10
lea eax, [esp + 0x54]
push eax
mov ecx, 0x10dd2fc
call dword [sym.imp.mfc90.dll_Ordinal_817]
jmp 0x4d42bc
mov edx, dword [0x10d7cd0]
push edx
push str.recv_TC_SET_CONFIG_g_MyCheckSum_0x_08x_
push 8
call fcn.0043d500
add esp, 0xc
lea eax, [esp + 0x54]
push eax
mov ecx, 0x10dd2fc
call dword [sym.imp.mfc90.dll_Ordinal_817]
jmp 0x4d42bc
mov ecx, dword [0x10d7cd0]
push ecx
push str.recv_same_TC_SET_CONFIG_g_MyCheckSum_0x_08x_
push 8
call fcn.0043d500
add esp, 0xc
test byte [0x1043084], 0x80
je 0x4d42ca
call fcn.0044b010
mov byte [esi + 0xac], 0
cmp dword [0x1042d74], 2
jne 0x4d42e1
mov ecx, esi
call fcn.00495960
mov byte [esp + 0x148a4], 9
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
push 0x520130
lea ecx, [esp + 0x64]
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
jne 0x4d5928
cmp dword [esp + 0x34], 1
jg 0x4d433f
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 4]
push eax
call fcn.004d8d70
movzx ebp, ax
mov ebx, 2
add esp, 4
mov dword [esp + 0x18], ebp
cmp edi, ebx
jne 0x4d4434
mov eax, 0xff41
cmp bp, ax
jne 0x4d5928
mov esi, 0x77
cmp dword [0x103a97c], esi
jne 0x4d4394
mov ecx, dword [0x1070790]
push ecx
push str.recv_TC_GET_IDENTIFY__s_
push 8
call fcn.0043d500
add esp, 0xc
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov bl, 0x36
mov byte [esp + 0x148a4], bl
push 0xee41
lea edx, [esp + 0x18]
push str.Set_d
push edx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 8
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x37
mov ecx, dword [esp + 0x28]
push ecx
mov byte [esp + 0x148ac], bl
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
cmp dword [0x103a97c], esi
jne 0x4d440b
mov edx, dword [0x1070790]
push edx
push str.sended_TC_SET_IDENTIFY__s_
push 8
call fcn.0043d500
add esp, 0xc
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
cmp edi, 6
jne 0x4d4864
mov eax, 0xff64
cmp bp, ax
jne 0x4d44ae
cmp dword [esp + 0x34], ebx
jg 0x4d4452
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx + 8]
push eax
call dword [sym.imp.MSVCR90.dll_atoi]
add esp, 4
cmp dword [0x103a97c], 0x77
mov dword [0x10d7cd4], eax
jne 0x4d5928
cmp dword [esp + 0x34], ebx
jg 0x4d4480
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 8]
push eax
push str.recv_TC_CONNECT_AGAIN__s_
push 8
call fcn.0043d500
add esp, 0xc
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xff41
cmp bp, cx
jne 0x4d5928
mov esi, 0x77
cmp dword [0x103a97c], esi
jne 0x4d44df
mov edx, dword [0x1070790]
push edx
push str.recv_TC_GET_IDENTIFY__s_
push 8
call fcn.0043d500
add esp, 0xc
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x38
push 0xee41
lea eax, [esp + 0x18]
push str.Set_d
push eax
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 8
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x39
mov eax, dword [esp + 0x28]
push eax
mov byte [esp + 0x148ac], 0x38
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
cmp dword [0x103a97c], esi
jne 0x4d4556
mov ecx, dword [0x1070790]
push ecx
push str.sended_TC_SET_IDENTIFY__s_
push 8
call fcn.0043d500
add esp, 0xc
push str.SOFTWARETrueCut_
lea ecx, [esp + 0x68]
call fcn.00456910
mov byte [esp + 0x148a4], 0x3a
mov edi, dword [esp + 0x34]
cmp edi, ebx
jg 0x4d4579
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov edx, dword [esi + 8]
mov eax, dword [edx - 0xc]
lea ecx, [esi + 8]
test eax, eax
je 0x4d462a
call dword [sym.imp.mfc90.dll_Ordinal_4481]
cmp dword [esp + 0x34], 2
jg 0x4d45a0
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_Section
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x3c
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x3d
mov byte [esp + 0x148b0], 0x3a
lea ecx, [esp + 0x70]
call fcn.00457170
mov edi, dword [esp + 0x34]
cmp edi, 2
jg 0x4d4610
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 8]
mov edx, 0x10708a2
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d4620
cmp edi, 3
jg 0x4d4634
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esi + 0xc]
cmp dword [eax - 0xc], 0
lea ecx, [esi + 0xc]
je 0x4d46dc
call dword [sym.imp.mfc90.dll_Ordinal_4481]
cmp dword [esp + 0x34], 3
jg 0x4d4656
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x3e
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_Org
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x3f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x40
mov byte [esp + 0x148b0], 0x3a
lea ecx, [esp + 0x70]
call fcn.00457170
mov edi, dword [esp + 0x34]
cmp edi, 3
jg 0x4d46c6
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0xc]
mov edx, 0x1070906
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d46d2
cmp edi, 4
jg 0x4d46e6
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esi + 0x10]
cmp dword [edx - 0xc], 0
lea ecx, [esi + 0x10]
je 0x4d478e
call dword [sym.imp.mfc90.dll_Ordinal_4481]
cmp dword [esp + 0x34], 4
jg 0x4d4708
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0x10
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x41
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_User_Office
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x42
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x43
mov byte [esp + 0x148b0], 0x3a
lea ecx, [esp + 0x70]
call fcn.00457170
mov edi, dword [esp + 0x34]
cmp edi, 4
jg 0x4d4778
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x10]
mov edx, 0x107096a
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d4784
cmp edi, 5
jg 0x4d4798
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [esi + 0x14]
cmp dword [ecx - 0xc], 0
lea eax, [esi + 0x14]
je 0x4d482a
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x44
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_User_name
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x45
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x46
mov byte [esp + 0x148b0], 0x3a
lea ecx, [esp + 0x70]
call fcn.00457170
cmp dword [esp + 0x34], 5
jg 0x4d480f
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esp + 0x30]
mov ecx, dword [edx + 0x14]
mov edx, 0x1070a00
jmp 0x4d4820
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d4820
mov byte [esp + 0x148a4], 0x38
lea ecx, [esp + 0x64]
call fcn.00456840
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
cmp edi, 0x1e
jne 0x4d5928
mov eax, 0xff75
cmp bp, ax
jne 0x4d48e6
mov edi, dword [esp + 0x1c]
mov esi, dword [sym.imp.MSVCR90.dll__beginthreadex]
lea ecx, [esp + 0x20]
push ecx
push 0
push edi
push 0x4d0cf0
push 0
push 0
mov dword [0x10d7c4c], eax
mov dword [esp + 0x38], 0
call esi
lea edx, [esp + 0x38]
push edx
push 0
push edi
push 0x4992e0
push 0
push 0
call esi
add esp, 0x30
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 3
lea ecx, [esp + 0x2c]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x148a4], bl
jmp 0x4d596e
mov eax, 0xff68
cmp bp, ax
je 0x4d491a
mov ecx, 0xff69
cmp bp, cx
je 0x4d4904
mov edx, 0xff6c
cmp bp, dx
jne 0x4d495d
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
movzx edx, bp
push edx
push eax
mov ecx, esi
call fcn.004b7c30
jmp 0x4d4961
push str.recv_TC_GETSETUPLIST
push 8
call fcn.0043d500
xor eax, eax
lea ecx, [esp + 0x30]
push ecx
push eax
push 1
push 0x4bf5f0
push eax
push eax
mov dword [0x10d7c80], eax
mov dword [esp + 0x48], eax
mov dword [0x10d7c4c], 0xff68
call dword [sym.imp.MSVCR90.dll__beginthreadex]
add esp, 0x20
mov dword [0x10d7c24], eax
jmp 0x4d48b7
mov esi, dword [esp + 0x1c]
mov ecx, 0xff65
cmp bp, cx
je 0x4d4979
mov edx, 0xff66
cmp bp, dx
jne 0x4d4bb1
cmp dword [0x53ee20], 0
je 0x4d4bb1
mov eax, ecx
cmp bp, ax
jne 0x4d49b6
push str.recv_TC_GETPROCESSLIST
push 8
call fcn.0043d500
mov ecx, dword [0x53ee20]
add esp, 8
neg ecx
sbb ecx, ecx
mov dword [0x10d7c7c], 0
mov dword [0x10d7c74], ecx
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x47
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x48
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x49
mov esi, 0xe
mov bl, 0x4b
jmp 0x4d4a00
push 0x5116d8
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_820]
push 0x5116d8
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_820]
cmp dword [0x10d7c74], 0
je 0x4d4a40
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x54]
push eax
push 0x10d7c74
mov ecx, 0x53ee14
call fcn.0042d6b0
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x4c]
push 0x502ba4
push edx
call fcn.00410070
mov byte [esp + 0x148b0], 0x4a
push 0x502ba4
push eax
lea eax, [esp + 0x58]
push eax
call fcn.00402a60
mov byte [esp + 0x148bc], bl
lea ecx, [esp + 0x58]
push ecx
push eax
lea edx, [esp + 0x48]
push edx
call fcn.004029d0
add esp, 0x24
mov byte [esp + 0x148a4], 0x4c
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x4a
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x49
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90.dll_Ordinal_601]
sub esi, 1
jne 0x4d4a00
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov bl, 0x4d
mov byte [esp + 0x148a4], bl
movzx eax, bp
cmp dword [0x10d7c74], esi
jne 0x4d4afa
mov eax, 0xff67
mov ecx, dword [esp + 0x20]
push ecx
push eax
lea edx, [esp + 0x1c]
push str.Set_d_s
push edx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
cmp dword [0x103a97c], 0x76
jne 0x4d4b30
mov eax, dword [esp + 0x14]
push eax
push str.send_TC_GETPROCESSLIST...__s_
push 8
call fcn.0043d500
add esp, 0xc
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x4e
mov eax, dword [esp + 0x28]
push eax
mov byte [esp + 0x148ac], bl
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
inc dword [0x10d7c7c]
mov byte [esp + 0x148a4], 0x49
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x48
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x47
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov esi, dword [esp + 0x1c]
mov ecx, 0xff71
cmp bp, cx
je 0x4d4bc9
mov edx, 0xff72
cmp bp, dx
jne 0x4d4d6c
cmp dword [0x10de378], 0
je 0x4d4d6c
push 0x1070800
lea eax, [esp + 0x44]
push 0x502ba4
push eax
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x148a4], 0x4f
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x50
mov eax, dword [0x10d7c88]
mov edi, eax
cmp edi, dword [0x10de378]
mov esi, edi
jge 0x4d4c7a
lea ebp, [edi + 0x61]
mov bl, 0x51
lea ecx, [ecx]
cmp esi, ebp
jge 0x4d4c7a
push eax
mov ecx, 0x10de370
call fcn.004094e0
push eax
lea ecx, [esp + 0x4c]
push 0x502ba4
push ecx
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x148a4], bl
push eax
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x148a4], 0x50
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [0x10d7c88]
inc eax
inc esi
cmp esi, dword [0x10de378]
mov dword [0x10d7c88], eax
jl 0x4d4c20
add edi, 0x61
cmp esi, edi
jge 0x4d4ca9
sub edi, esi
jmp 0x4d4c90
push 0x502ba4
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_945]
sub edi, 1
jne 0x4d4c90
mov eax, dword [0x10d7c88]
test eax, eax
je 0x4d4cd5
cmp eax, dword [0x10de378]
jl 0x4d4cd5
push 0xffffffffffffffff
push 0
mov ecx, 0x10de370
mov dword [esp + 0x20], 0xff73
call sub.mfc90.dll_Ordinal_6494
mov dword [0x10d7c88], 0
mov edx, dword [esp + 0x40]
movzx eax, word [esp + 0x18]
push edx
push eax
lea ecx, [esp + 0x1c]
push str.Set_d_s
push ecx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
cmp dword [0x103a97c], 0x76
jne 0x4d4d10
mov edx, dword [esp + 0x14]
push edx
push str.send_TC_GET_PER_LIST...__s_
push 8
call fcn.0043d500
add esp, 0xc
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x52
mov ecx, dword [esp + 0x28]
push ecx
mov byte [esp + 0x148ac], 0x50
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
mov byte [esp + 0x148a4], 0x4f
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, 0xff6b
cmp bp, dx
je 0x4d4d84
mov eax, 0xff6c
cmp bp, ax
jne 0x4d4f3b
cmp dword [0x1019564], 0
je 0x4d4f3b
push 0x1070800
lea ecx, [esp + 0x44]
push 0x502ba4
push ecx
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x148a4], 0x53
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x54
mov eax, dword [0x10d7c84]
mov ecx, dword [0x1019564]
mov edi, eax
cmp edi, ecx
mov esi, edi
jge 0x4d4e4a
lea ebp, [edi + 0x61]
mov bl, 0x55
lea ebx, [ebx]
cmp esi, ebp
jge 0x4d4e4a
test eax, eax
jl 0x4d2e82
cmp eax, ecx
jge 0x4d2e82
mov edx, dword [0x1019560]
lea eax, [edx + eax*4]
push eax
lea eax, [esp + 0x4c]
push 0x502ba4
push eax
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x148a4], bl
push eax
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x148a4], 0x54
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [0x10d7c84]
mov ecx, dword [0x1019564]
inc eax
inc esi
cmp esi, ecx
mov dword [0x10d7c84], eax
jl 0x4d4de0
lea edx, [edi + 0x61]
cmp esi, edx
jge 0x4d4e7f
sub edx, esi
mov esi, edx
jmp 0x4d4e60
push 0x502ba4
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_945]
sub esi, 1
jne 0x4d4e60
mov ecx, dword [0x1019564]
mov eax, dword [0x10d7c84]
test eax, eax
je 0x4d4ea6
cmp eax, ecx
jl 0x4d4ea6
push 0xffffffffffffffff
push 0
mov ecx, 0x101955c
mov ebp, 0xff73
call sub.mfc90.dll_Ordinal_6494
mov dword [0x10d7c84], 0
jmp 0x4d4eaa
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
push ecx
movzx edx, bp
push edx
lea eax, [esp + 0x1c]
push str.Set_d_s
push eax
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
cmp dword [0x103a97c], 0x76
jne 0x4d4ee3
mov ecx, dword [esp + 0x14]
push ecx
push str.send_TC_GETPCONLIST...__s_
push 8
call fcn.0043d500
add esp, 0xc
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x56
mov eax, dword [esp + 0x28]
push eax
mov byte [esp + 0x148ac], 0x54
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
mov byte [esp + 0x148a4], 0x53
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov esi, dword [esp + 0x1c]
mov ecx, 0xff6e
cmp bp, cx
je 0x4d4f53
mov edx, 0xff6f
cmp bp, dx
jne 0x4d5286
cmp dword [0x53f2b8], 0
je 0x4d5286
push 0x1070800
lea eax, [esp + 0x18]
push 0x502ba4
push eax
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x148a4], 0x57
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x58
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x59
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov bl, 0x5a
mov byte [esp + 0x148a4], bl
mov eax, dword [0x10d7c78]
mov edi, dword [0x10d7c8c]
mov dword [esp + 0x50], eax
mov esi, edi
test eax, eax
je 0x4d5090
nop
lea eax, [edi + 0x61]
cmp esi, eax
jge 0x4d5090
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x58]
push eax
mov ecx, 0x53f2ac
call fcn.0042d6b0
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x4c]
push 0x5028f0
push edx
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x148a4], 0x5b
push eax
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push 0x5116d8
push 0x50e01c
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x48]
push 0x502ba4
push ecx
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x148a4], 0x5c
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_601]
inc dword [0x10d7c8c]
inc esi
cmp dword [esp + 0x50], 0
jne 0x4d4fd0
lea eax, [edi + 0x61]
cmp esi, eax
jge 0x4d50b4
sub eax, esi
mov esi, eax
jmp 0x4d50a0
push 0x502ba4
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_945]
sub esi, 1
jne 0x4d50a0
mov eax, dword [0x10d7c8c]
test eax, eax
je 0x4d51bf
cmp eax, dword [0x53f2b8]
jl 0x4d51bf
mov ecx, 0x53f2ac
call fcn.0042f390
mov edx, dword [esp + 0x14]
mov esi, dword [sym.imp.mfc90.dll_Ordinal_2539]
push edx
push 0xff70
lea eax, [esp + 0x20]
push str.Set_d_s
push eax
mov dword [0x10d7c8c], 0
call esi
add esp, 0x10
push 0
push 0x51d5fc
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
je 0x4d51db
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x148a4], 0x5d
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0xc]
add eax, 0xfffffffe
push eax
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_4392]
mov byte [esp + 0x148a4], 0x5e
push eax
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov byte [esp + 0x148a4], 0x5d
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov ecx, dword [0x6806bc]
mov edx, dword [0x6806b8]
mov eax, dword [0x5f3f48]
push ecx
push edx
push eax
lea ecx, [esp + 0x5c]
push str._d_d_d
push ecx
call esi
add esp, 0x14
lea edx, [esp + 0x50]
push edx
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d51db
mov eax, dword [esp + 0x14]
push eax
movzx ecx, bp
push ecx
lea edx, [esp + 0x20]
push str.Set_d_s
push edx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
cmp dword [0x103a97c], 0x76
jne 0x4d51f8
mov eax, dword [esp + 0x18]
push eax
push str.send_TC_GET_UI_LIST...__s_
push 8
call fcn.0043d500
add esp, 0xc
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x5f
mov eax, dword [esp + 0x28]
push eax
mov byte [esp + 0x148ac], bl
mov ecx, dword [esp + 0x24]
call fcn.004aa4c0
mov byte [esp + 0x148a4], 0x59
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x58
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0x57
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov ecx, 0xff12
cmp bp, cx
jne 0x4d5903
cmp dword [0x103a97c], 0x77
jne 0x4d52b3
mov edx, dword [0x1070790]
push edx
push str.recv_TC_GET_USER_INFO__s_
push 8
call fcn.0043d500
add esp, 0xc
cmp dword [esp + 0x34], 3
jg 0x4d52bf
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0xc]
cmp dword [ecx - 0xc], 0
jle 0x4d5305
mov eax, ecx
push eax
call fcn.004d8d70
cdq
mov ecx, eax
add esp, 4
or ecx, edx
je 0x4d5301
test byte [0x10430cc], 8
je 0x4d5301
lea ecx, [esp + 0x64]
push ecx
push edx
push eax
call fcn.0048f990
add esp, 0xc
lea edx, [esp + 0x64]
push edx
call dword [sym.imp.KERNEL32.dll_SetSystemTime]
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x34], 4
jg 0x4d5311
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [eax + 0x10]
cmp dword [ecx - 0xc], 0
jle 0x4d532f
mov eax, ecx
push eax
call fcn.004d8d70
mov dword [esi + 0x324c8], eax
mov eax, dword [esp + 0x34]
add esp, 4
mov ecx, 1
cmp dword [esi + 0x324c8], ecx
jae 0x4d5342
mov dword [esi + 0x324c8], ecx
cmp dword [esp + 0x34], 5
jg 0x4d534e
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [eax + 0x14]
cmp dword [edx - 0xc], 0
jle 0x4d536c
mov eax, edx
push eax
call fcn.004d8d70
mov dword [esi + 0x324cc], eax
mov eax, dword [esp + 0x34]
add esp, 4
cmp dword [esp + 0x34], 9
jg 0x4d5378
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [eax + 0x24]
cmp dword [ecx - 0xc], 0
jle 0x4d5396
mov eax, ecx
push eax
call fcn.004d8d70
mov dword [esi + 0x324d0], eax
mov eax, dword [esp + 0x34]
add esp, 4
cmp dword [esp + 0x34], 0xa
jg 0x4d53a2
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [eax + 0x28]
cmp dword [edx - 0xc], 0
jle 0x4d53c4
mov eax, edx
push eax
call fcn.004d8d70
add esp, 4
test eax, eax
setne al
mov byte [0x10d7bfb], al
mov eax, dword [esp + 0x30]
cmp byte [0x103a972], 0
je 0x4d555e
push 0x200
lea ecx, [esp + 0x9c]
push ecx
push str.PEeurTSalt
push str.SoftwareTruecut
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491b30
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4d5411
push 0x200
lea edx, [esp + 0x9c]
push 0
push edx
call sub.MSVCR90.dll_memset
add esp, 0xc
lea eax, [esp + 0x98]
mov dword [esp + 0x48], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4d5423
sub eax, edx
mov esi, eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x48]
push 0x1070778
push ecx
call fcn.00402a60
mov byte [esp + 0x148b0], 0x60
mov edx, dword [0x1070778]
mov ecx, dword [edx - 0xc]
mov eax, dword [eax]
lea edx, [esp + 0x54]
push edx
add ecx, esi
push ecx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00466670
add esp, 0x1c
mov bl, 0x62
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov esi, 0xb
cmp dword [esp + 0x34], esi
jg 0x4d5491
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
add eax, 0x2c
push eax
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a4], 0x63
cmp dword [esp + 0x34], esi
jg 0x4d54b6
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x14]
add ecx, 0x2c
push edx
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4d5512
mov eax, dword [esp + 0x14]
mov ecx, dword [0x1070804]
mov edx, dword [0x1070778]
push eax
push ecx
push edx
push 0x51ffd0
push 0x20
call fcn.0043d500
add esp, 0x14
push 0
push 0
push 0x51ff78
call sub.mfc90.dll_Ordinal_1183
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x20]
push 0
push 0
push 0x12
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4d5533
mov edx, dword [esp + 0x14]
mov eax, dword [0x1070804]
mov ecx, dword [0x1070778]
push edx
push eax
push ecx
push 0x51ff44
push 0x20
call fcn.0043d500
add esp, 0x14
mov byte [esp + 0x148a4], bl
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x24]
test edi, edi
je 0x4d58a2
cmp dword [esp + 0x34], 8
jg 0x4d5576
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [eax + 0x20]
push eax
call fcn.004d8d70
add esp, 4
mov dword [edi + 0xc], eax
test eax, eax
je 0x4d58a2
cmp dword [esp + 0x34], 0x18
jg 0x4d5599
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 0x60]
push eax
call dword [sym.imp.MSVCR90.dll_atoi]
add esp, 4
push str.SOFTWARETrueCut_
lea ecx, [esp + 0x68]
mov dword [0x10d7cd4], eax
call fcn.00456910
mov byte [esp + 0x148a4], 0x64
cmp byte [0x103a983], 0
jne 0x4d588d
mov edi, dword [esp + 0x34]
mov ebx, 0x1a
cmp edi, ebx
jg 0x4d55e4
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov eax, dword [esi + 0x68]
mov eax, dword [eax - 0xc]
lea ecx, [esi + 0x68]
test eax, eax
je 0x4d568f
call dword [sym.imp.mfc90.dll_Ordinal_4481]
cmp dword [esp + 0x34], ebx
jg 0x4d560a
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0x68
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x65
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_Section
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x66
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x67
mov byte [esp + 0x148b0], 0x64
lea ecx, [esp + 0x70]
call fcn.00457170
mov edi, dword [esp + 0x34]
cmp edi, ebx
jg 0x4d5679
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x68]
mov edx, 0x10708a2
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d5685
cmp edi, 0x1b
jg 0x4d5699
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esi + 0x6c]
cmp dword [edx - 0xc], 0
lea ecx, [esi + 0x6c]
je 0x4d5741
call dword [sym.imp.mfc90.dll_Ordinal_4481]
cmp dword [esp + 0x34], 0x1b
jg 0x4d56bb
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0x6c
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x68
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_Org
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x69
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x6a
mov byte [esp + 0x148b0], 0x64
lea ecx, [esp + 0x70]
call fcn.00457170
mov edi, dword [esp + 0x34]
cmp edi, 0x1b
jg 0x4d572b
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x6c]
mov edx, 0x1070906
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d5737
mov ebx, 0x1c
cmp edi, ebx
jg 0x4d574f
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esi + 0x70]
cmp dword [eax - 0xc], 0
lea ecx, [esi + 0x70]
je 0x4d57fa
call dword [sym.imp.mfc90.dll_Ordinal_4481]
cmp dword [esp + 0x34], ebx
jg 0x4d5770
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x30]
push ecx
add eax, 0x70
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x6b
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_User_Office
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x6c
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x6d
mov byte [esp + 0x148b0], 0x64
lea ecx, [esp + 0x70]
call fcn.00457170
mov edi, dword [esp + 0x34]
cmp edi, ebx
jg 0x4d57df
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x70]
mov edx, 0x107096a
jmp 0x4d57f0
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d57f0
cmp edi, 0x1d
jg 0x4d5804
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [esi + 0x74]
cmp dword [ecx - 0xc], 0
lea eax, [esi + 0x74]
je 0x4d588d
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x148a8], 0x6e
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.TC_User_name
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148ac], 0x6f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push str.tc_INSTALL
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x148b0], 0x70
mov byte [esp + 0x148b0], 0x64
lea ecx, [esp + 0x70]
call fcn.00457170
cmp dword [esp + 0x34], 0x1d
jg 0x4d5877
call sub.mfc90.dll_Ordinal_1252
mov edx, dword [esp + 0x30]
mov ecx, dword [edx + 0x74]
mov edx, 0x1070a00
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4d5883
mov byte [esp + 0x148a4], 8
lea ecx, [esp + 0x64]
call fcn.00456840
mov esi, dword [esp + 0x1c]
call fcn.00467ab0
cmp dword [0x103a97c], 0x77
mov byte [0x10195bc], 1
jne 0x4d58cf
mov eax, dword [esi + 0x324c8]
push eax
push 1
push str.TC_GET_USER_INFO_g_bOKSendStatus___d_m_iAllUserCnt__d_
push 8
call fcn.0043d500
add esp, 0x10
mov ecx, dword [esp + 0x24]
mov eax, 0x10624dd3
mul dword [esi + 0x324c8]
shr edx, 6
push ecx
mov ecx, esi
mov dword [0x53efd4], edx
call fcn.004aa790
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
mov edx, 0xff59
cmp bp, dx
jne 0x4d5928
lea eax, [esp + 0x48]
push eax
push 0
push 1
push 0x49d9b0
push 0
push 0
call dword [sym.imp.MSVCR90.dll__beginthreadex]
add esp, 0x18
mov byte [esp + 0x148a4], 5
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x4d5955
lea ecx, [esp + 0x898]
push ecx
push eax
push esi
push str.ReceiveClient_Err_count__lentgh__d_nSize__d_buf__s_
push 8
call fcn.0043da10
add esp, 0x14
mov byte [esp + 0x148a4], 3
lea ecx, [esp + 0x2c]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x148a4], 2
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x148a4], 0
lea ecx, [esp + 0x58]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x148a4], 0xffffffff
lea ecx, [esp + 0x5c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x1489c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14884]
xor ecx, esp
call fcn.004e0148
add esp, 0x14894
ret 0x10