Function at 0x486e90
Capabilities:
Encode data using xor
Execute anti-debugging instructions
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ddfa5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1138
call fcn.0045b980
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
jmp 0x486ecb
push str.http:__SERVERNAME
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0
cmp eax, 4
jne 0x486eee
push str._vrb_UserLoginV1.aspx
jmp 0x486eff
cmp eax, 5
jne 0x486efa
push str._vrb_RenewalV1.aspx
jmp 0x486eff
push str._vrb_chkolv13.aspx
lea ecx, [ebp - 0x18]
call fcn.0045b040
mov eax, dword [0x61963c]
push 0x5e2540
push eax
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
jne 0x486f2e
push str._lanchs
lea ecx, [ebp - 0x18]
call fcn.0045b040
jmp 0x486f3b
push 0x61963c
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::operator_2
mov eax, 0x7ffe0014
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
cmp ecx, edx
jne 0x486f40
mov eax, dword [eax]
push 0
push 0x3e8
push ecx
push eax
call fcn.004d1910
push 0
push 0xa
push edx
push eax
call fcn.004d1910
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov dword [ebp - 0x7c], edx
mov ebx, edx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp - 0x2c]
rdtsc
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov eax, ebx
mov edx, edi
neg eax
and eax, 0x1f
xor edx, ebx
mov ecx, 0x20
mov edi, edx
sub ecx, eax
shr edi, cl
mov ecx, eax
mov eax, esi
shl edx, cl
neg eax
and eax, 0x1f
mov ecx, 0x20
sub ecx, eax
or edi, edx
mov edx, esi
xor edx, ebx
mov ebx, edx
shr ebx, cl
mov ecx, eax
mov eax, edi
shl edx, cl
neg eax
and eax, 0x1f
mov ecx, 0x20
sub ecx, eax
or ebx, edx
mov edx, esi
xor edx, edi
mov esi, edx
shr esi, cl
mov ecx, eax
mov eax, dword [ebp - 0x30]
shl edx, cl
or esi, edx
dec eax
mov dword [ebp - 0x30], eax
jne 0x486f94
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::CString_3
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 1
cmp eax, 4
jne 0x487059
mov edx, dword [0x619638]
mov eax, dword [0x619644]
mov ecx, dword [0x6195ec]
push edx
push eax
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x6195f4
call sub.MFC42.DLL_CString::CString_4
lea edx, [ebp - 0x2c]
push edx
call fcn.00484f90
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x1c]
push eax
push str._s_s_s_s
push ecx
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::Format_1
add esp, 0x18
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
jmp 0x487121
cmp dword [ebp + 8], 5
jne 0x4870b7
mov edx, dword [0x619648]
mov eax, dword [0x619638]
mov ecx, dword [0x619644]
push edx
mov edx, dword [0x6195ec]
push eax
push ecx
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x6195f4
call sub.MFC42.DLL_CString::CString_4
lea eax, [ebp - 0x2c]
push eax
call fcn.00484f90
add esp, 8
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push ecx
push str._s_s_s_s_s
push edx
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::Format_1
add esp, 0x1c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
jmp 0x487121
mov eax, dword [0x619634]
mov ecx, dword [0x619638]
mov edx, dword [0x619600]
push esi
push edi
push ebx
push eax
mov eax, dword [0x619660]
push ecx
mov ecx, dword [0x619644]
push edx
mov edx, dword [0x619604]
push eax
push ecx
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x619650
call sub.MFC42.DLL_CString::CString_4
lea eax, [ebp - 0x2c]
push eax
call fcn.00484470
add esp, 8
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push ecx
push edx
lea eax, [ebp - 0x1c]
push str._d_s_s_s_d_s_s_s_x_x_x
push eax
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::Format_1
add esp, 0x34
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CString::CString
mov eax, dword [0x619628]
push 0x5e2540
push eax
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
jne 0x487181
push eax
call dword [sym.imp.MSVCRT.dll_time]
push eax
call dword [sym.imp.MSVCRT.dll_srand]
add esp, 8
rdtsc
mov dword [ebp - 0x2c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call dword [sym.imp.MSVCRT.dll_rand]
mov ecx, dword [ebp - 0x2c]
add ecx, esi
add eax, ecx
and eax, 0xffff
push eax
push str._08d
push 0x619628
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
mov edx, dword [0x619628]
xor edi, edi
mov dword [0x61965c], 0x5a
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov eax, dword [edx - 8]
lea ecx, [ebp - 0x78]
push ecx
push eax
push edi
mov ecx, 0x619628
call sub.MFC42.DLL_CString::GetBuffer
push eax
lea ecx, [ebp - 0x1148]
call fcn.0046b750
lea edx, [ebp - 0x4c]
push 4
push edx
mov ecx, 0x619628
call sub.MFC42.DLL_CString::Right
mov esi, eax
mov eax, dword [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
mov eax, dword [eax - 8]
inc eax
push eax
push edi
call sub.MFC42.DLL_CString::GetBuffer
lea ecx, [ebp - 0x54]
push eax
push ecx
lea ecx, [ebp - 0x1148]
call fcn.0046c790
mov ebx, eax
lea edx, [ebp - 0x30]
push 4
push edx
mov ecx, 0x619628
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::Left
push ebx
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 7
push eax
call sub.MFC42.DLL_operator_3
push esi
lea ecx, [ebp - 0x2c]
mov ebx, 8
push eax
push ecx
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator_3
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
push str.xjl
lea ecx, [ebp - 0x18]
call fcn.0045b040
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x18]
push edx
call sub.MFC42.DLL_CString::operator_2
push str.randcode
lea ecx, [ebp - 0x18]
call fcn.0045b040
push 0x5c1818
lea eax, [ebp - 0x24]
push 0x619640
push eax
call sub.MFC42.DLL_operator_4
mov ecx, dword [ebp - 0x24]
push edi
mov byte [ebp - 4], 0xa
mov eax, dword [ecx - 8]
lea ecx, [ebp - 0x24]
inc eax
push eax
push edi
call sub.MFC42.DLL_CString::GetBuffer
lea edx, [ebp - 0x2c]
push eax
push edx
lea ecx, [ebp - 0x1148]
call fcn.0046c790
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
call sub.MFC42.DLL_CString::CString_3
push edi
mov byte [ebp - 4], 0xc
call dword [sym.imp.MSVCRT.dll_time]
add esp, 4
push eax
lea eax, [ebp - 0x20]
push str._08d
push eax
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
lea ecx, [ebp - 0x18]
push str.pass
call fcn.0045b040
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::operator_2
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x28]
push edx
call sub.MFC42.DLL_CString::CString_4
push edi
push edi
push edi
push edi
push 1
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd
call fcn.0045acf8
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x30], edi
call sub.MFC42.DLL_CString::CString_3
push edi
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x48], 0x3f3
mov dword [ebp - 0x2c], 0x1388
push 4
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x44]
push eax
push 2
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea ecx, [ebp - 0x2c]
push 4
mov edi, 0x3e8
push ecx
push 5
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], edi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea edx, [ebp - 0x2c]
push 4
mov esi, 0x1b58
push edx
push 6
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], esi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea eax, [ebp - 0x2c]
push 4
push eax
push 7
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], edi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea ecx, [ebp - 0x2c]
push 4
push ecx
push ebx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], esi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea edx, [ebp - 0x2c]
push 4
push edx
push 3
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], 1
call sub.MFC42.DLL_CInternetSession::SetOption
mov eax, dword [ebp - 0x3c]
push 4
push 1
push 0x40
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov eax, dword [0x6195e0]
test eax, eax
jne 0x4874b5
push str.c.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.220.162.238.232
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.c1.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.58.22.102.247
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.c2.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.220.162.238.240
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.c3.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.67.228.120.179
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
mov edi, eax
mov dword [ebp - 0x70], edi
jmp 0x4874ca
xor esi, esi
mov dword [ebp - 0x2c], esi
cmp esi, edi
jae 0x48767b
jmp 0x4874e9
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::operator_3
mov edx, dword [0x61962c]
lea ecx, [ebp - 0x18]
lea eax, [esi + edx*2]
xor edx, edx
div edi
mov eax, dword [0x6195dc]
mov edx, dword [eax + edx*4]
push edx
push str.SERVERNAME
call sub.MFC42.DLL_CString::Replace
jmp 0x487528
mov byte [ebp - 4], 0x10
jmp 0x48753e
mov edx, dword [0x61962c]
mov ebx, 0xa
xor ecx, ecx
mov dword [0x5da744], ebx
lea eax, [esi + edx*2]
xor edx, edx
div edi
mov eax, dword [0x6195dc]
mov dword [0x619654], 0x32
mov word [ebp - 0x63], cx
mov byte [ebp - 0x64], 0
mov byte [ebp - 0x61], cl
mov edx, dword [eax + edx*4]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x48758a
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x4875aa
cmp ax, 0x7f
je 0x48759d
cmp ax, 0xa8c0
jne 0x4875aa
mov dword [ebp - 0x48], 0x3f3
mov dword [0x5da758], ebx
mov ecx, dword [ebp - 0x18]
push 0
push 0
push 0x4000001
push 1
push ecx
lea ecx, [ebp - 0x44]
call sub.MFC42.DLL_CInternetSession::OpenURL
mov edi, eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov edx, dword [edi]
mov dword [ebp - 0x30], edi
call dword [edx + 0x60]
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::MakeLower
jmp 0x4875e9
lea ecx, [ebp - 0xc8]
push 0x5da814
push ecx
call fcn.004285c0
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x11
call sub.MFC42.DLL_CString::Find_3
cmp eax, 0xffffffff
lea ecx, [ebp - 0xc8]
setne bl
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x4876ee
jmp 0x48763b
mov edx, dword [edi]
push 0x619614
mov ecx, edi
call dword [edx + 0x60]
push 0x619614
mov ecx, 0x619610
call sub.MFC42.DLL_CString::operator_3
mov dword [ebp - 0x48], 0x3f3
mov dword [0x619658], 0x50
jmp 0x487677
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x44]
call 0x4d182c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd
call sub.MFC42.DLL_CInternetSession::CInternetSession
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x48]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0xb0]
push 0x5da800
push eax
call fcn.004285c0
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::Find_3
cmp eax, 0xffffffff
lea ecx, [ebp - 0xb0]
setne bl
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x487f10
call fcn.0045eb80
mov eax, dword [0x5da744]
add ebx, eax
call ebx
call [ebx - 0x15]
adc byte [esi + 0x4d], dl
push eax
jb 0x4877b4
je 0x4877ac
arpl word [eax + 0x62], si
imul ebp, dword gs:[bp], 0x458d178b
in al, dx
push eax
mov ecx, edi
call dword [edx + 0x60]
lea ecx, [ebp - 0x5c]
push 0x5da7c0
push ecx
call fcn.004285c0
add esp, 8
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString_3
mov esi, dword [ebp + 8]
lea edx, [ebp - 0x60]
push esi
push 0x5c3bf8
push edx
mov byte [ebp - 4], 0x14
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x5c]
push eax
call sub.MFC42.DLL_CString::operator_2
push 0x80000001
push 0
push ecx
mov dword [str.2P7_Fc], 0xa
mov ecx, esp
mov dword [ebp - 0xd0], esp
push 0x5e2540
call sub.MFC42.DLL_CString::CString_1
push ecx
lea edx, [ebp - 0x5c]
mov ecx, esp
mov dword [ebp - 0x74], esp
push edx
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x14
call fcn.0045c060
lea eax, [ebp - 0x68]
mov bl, 0x16
push eax
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], bl
call fcn.0045c3d0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x17
push ecx
lea ecx, [ebp - 0x6c]
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x19
call sub.MFC42.DLL_CString::CString
test esi, esi
jne 0x487866
add byte [eax], al
add byte [ebx + 0x30a589cc], cl
invalid
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
mov edi, dword [sym.imp.MSVCRT.dll__mbscmp]
push edx
push eax
call edi
add esp, 8
test eax, eax
je 0x487884
mov ecx, dword [ebp - 0x14]
push 0x5e2540
push ecx
call edi
add esp, 8
test eax, eax
je 0x487884
push ecx
lea edx, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x74], esp
push edx
mov dword [0x619658], 0x50
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0xf0]
call fcn.0045c410
jmp 0x4878db
cmp esi, 1
jne 0x4878d5
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x6195f8]
mov edi, dword [sym.imp.MSVCRT.dll__mbscmp]
push ecx
push eax
call edi
add esp, 8
test eax, eax
jne 0x4878c5
push 0x41
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::operator
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x14
call fcn.0045c1e0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
jmp 0x487eeb
lea edx, [ebp - 0x14]
mov ecx, 0x6195f8
push edx
call sub.MFC42.DLL_CString::operator_3
jmp 0x4878db
mov edi, dword [sym.imp.MSVCRT.dll__mbscmp]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x14
call fcn.0045c1e0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
push 0
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x74], esp
push eax
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x1148]
call fcn.0046ca70
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1a
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
mov edx, dword [ebp - 0x14]
push 0x5e2540
push edx
call edi
add esp, 8
test eax, eax
je 0x487ee4
test esi, esi
jne 0x487c6a
mov edi, dword [0x619628]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Delete
push esi
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea eax, [ebp - 0x80]
push esi
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619620
mov byte [ebp - 4], 0x1b
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0xb8]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
add esp, 4
lea ecx, [ebp - 0xb8]
mov dword [0x61961c], eax
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea edx, [ebp - 0x8c]
push esi
push edx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
mov edi, dword [sym.imp.MSVCRT.dll_sscanf]
push 0x619618
push 0x5c11bc
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x8c]
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea eax, [ebp - 0xb4]
push esi
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619634
mov byte [ebp - 4], 0x1c
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0x94]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619630
mov byte [ebp - 4], 0x1d
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
cmp dword [0x619654], 0x32
jne 0x487c58
cmp dword [0x61965c], 0x5a
jne 0x487c58
cmp dword [0x5da758], 0x46
jne 0x487c58
lea edx, [ebp - 0x14]
mov ecx, 0x619610
push edx
call sub.MFC42.DLL_CString::operator_3
push 0x5f
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Find_2
mov esi, eax
lea eax, [ebp - 0xac]
push esi
push eax
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
lea ecx, [ebp - 0x58]
push ecx
push 0x5c1968
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0xac]
call sub.MFC42.DLL_CString::CString
inc esi
mov ecx, 0x619630
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0x5f
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Find_2
mov esi, eax
lea edx, [ebp - 0x84]
push esi
push edx
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
lea ecx, [ebp - 0x50]
push ecx
push 0x5c1968
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x84]
call sub.MFC42.DLL_CString::CString
inc esi
mov ecx, 0x619630
push esi
push 0
call sub.MFC42.DLL_CString::Delete
mov eax, dword [0x619630]
lea edx, [ebp - 0x4c]
push edx
push 0x5c1968
push eax
call edi
mov edi, dword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
add esp, 0xc
mov dword [ebp + 8], 0
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0x7c]
cmp eax, 4
jge 0x487e5e
mov eax, ebx
mov ecx, 0x20
neg eax
and eax, 0x1f
mov esi, edx
sub ecx, eax
shl esi, cl
mov ecx, eax
shr edx, cl
mov ecx, 0x20
or esi, edx
xor esi, ebx
mov edx, esi
mov esi, edi
mov eax, edx
mov dword [ebp - 0x4c], edx
neg eax
and eax, 0x1f
sub ecx, eax
shl esi, cl
mov ecx, eax
shr edi, cl
mov ecx, 0x20
or esi, edi
xor esi, edx
mov edi, esi
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x58], edi
neg eax
and eax, 0x1f
sub ecx, eax
shl esi, cl
mov ecx, eax
mov eax, dword [ebp + 8]
shr ebx, cl
or esi, ebx
xor esi, edi
inc eax
mov ebx, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x50], ebx
jmp 0x487be3
push 0x5e2540
lea ecx, [ebp - 0x14]
call fcn.0045acce
jmp 0x487b2b
cmp esi, 1
jne 0x487da6
lea ecx, [ebp - 0x54]
call sub.MFC42.DLL_CString::CString_3
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x619604]
push eax
push ecx
push ecx
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x74], esp
push 0x619650
call sub.MFC42.DLL_CString::CString_4
lea edx, [ebp - 0xbc]
push edx
call fcn.00484470
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x54]
push eax
push str._s_s_s
push ecx
mov byte [ebp - 4], 0x1f
call sub.MFC42.DLL_CString::Format_1
add esp, 0x14
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x1e
call sub.MFC42.DLL_CString::CString
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea edx, [ebp - 0x9c]
push esi
push edx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x54]
push eax
call edi
add esp, 8
lea ecx, [ebp - 0x9c]
test eax, eax
setne bl
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x487d1b
mov dword [str.2P7_Fc], 0x32
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0xc4]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619634
mov byte [ebp - 4], 0x20
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x1e
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
lea edx, [ebp - 0x14]
mov ecx, 0x619630
push edx
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
mov edi, dword [sym.imp.MSVCRT.dll_sscanf]
jmp 0x487b2b
cmp esi, 4
jne 0x487ded
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
push eax
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619650
mov byte [ebp - 4], 0x21
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
jmp 0x487ee4
cmp esi, 5
jne 0x487ee4
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0xc0]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619620
mov byte [ebp - 4], 0x22
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
lea edx, [ebp - 0x14]
mov ecx, 0x619610
push edx
call sub.MFC42.DLL_CString::operator_3
mov dword [0x619658], 0x50
jmp 0x487ee4
mov eax, 0x7ffe0014
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
cmp ecx, edx
jne 0x487e63
mov eax, dword [eax]
push 0
push 0x3e8
push ecx
push eax
call fcn.004d1910
push 0
push 0xa
push edx
push eax
call fcn.004d1910
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
cmp edx, esi
jb 0x487e9c
sub edx, esi
jmp 0x487ea4
sub edx, esi
add edx, 0x418937
lea ecx, [edx + esi]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x20]
mov dword [ebp + 8], eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x50]
cmp edx, eax
jne 0x487eda
mov eax, dword [ebp - 0x58]
cmp ecx, eax
jae 0x487eda
add ecx, 0x12c
cmp ecx, eax
jb 0x487eda
mov dword [0x5da754], 0x3c
jmp 0x487ee4
mov dword [str.2P7_Fc], 0x32
mov dword [ebp - 0x48], 0x3f4
jmp 0x487efb
call fcn.0045eb80
mov eax, dword [str.2P7_Fc]
add ebx, eax
call ebx
call [ebx - 0x17]
idiv edi
dec dword [ebp - 0x877b]
jmp [eax - 0x5c]
lea eax, [ebp - 0x88]
push 0x5da7a4
push eax
call fcn.004285c0
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x23
call sub.MFC42.DLL_CString::Find_3
cmp eax, 0xffffffff
lea ecx, [ebp - 0x88]
setne bl
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x488091
jmp 0x487f62
mov edx, dword [edi]
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call dword [edx + 0x60]
push 0
push ecx
lea edx, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x74], esp
push edx
call sub.MFC42.DLL_CString::CString_4
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1148]
push eax
call fcn.0046ca70
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0x98]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
add esp, 4
lea ecx, [ebp - 0x98]
mov edi, eax
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
lea edx, [ebp - 0x14]
mov ecx, 0x6195fc
push edx
call sub.MFC42.DLL_CString::operator_3
push 0
push 3
lea eax, [ebp - 0xa0]
push str.RegisterSupportErrMessage
push eax
call fcn.0041f2d0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test edi, edi
jne 0x488069
mov ecx, dword [ebp - 0x14]
push edi
push 4
push ecx
call sub.MFC42.DLL_AfxMessageBox_1
cmp eax, 7
jne 0x488069
push 0x5c1688
mov ecx, 0x619600
call fcn.0045acce
mov edx, dword [ebp + 8]
push edx
call fcn.00486e90
add esp, 4
mov dword [ebp - 0x48], eax
jmp 0x488070
mov dword [ebp - 0x48], 0x3f6
jmp 0x488080
jmp 0x487677
test edi, edi
mov dword [ebp - 4], 0xf
je 0x4880b3
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x54]
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
mov dword [ebp - 0x30], 0
push 0
push 2
lea eax, [ebp - 0xa8]
push str.RegisterSupportErrMessage
push eax
call fcn.0041f2d0
add esp, 0x10
push eax
mov ecx, 0x619614
mov byte [ebp - 4], 0x27
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xf
call sub.MFC42.DLL_CString::CString
mov edi, dword [ebp - 0x70]
inc esi
mov dword [ebp - 0x48], 0x3f5
mov dword [ebp - 0x2c], esi
jmp 0x4874cf