Function at 0x4a4850
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c3d4f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x338
mov eax, dword [0x4dd040]
push ebx
push esi
push edi
xor esi, esi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1a0], ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov edi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x38]
push eax
push 0x4c7074
push 0x17
push esi
push 0x4c7094
mov byte [ebp - 4], 3
call edi
cmp eax, esi
mov ebx, dword [sym.imp.ole32.dll_OleRun]
jl 0x4a48e8
mov ecx, dword [ebp - 0x38]
push ecx
call ebx
mov esi, eax
test esi, esi
jl 0x4a48d9
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push 0x4c6ec8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
push eax
call dword [edx + 8]
test esi, esi
jge 0x4a48ed
xor esi, esi
mov dword [ebp - 0x3c], esi
jmp 0x4a48ef
xor esi, esi
mov eax, dword [ebp - 0x30]
cmp eax, esi
je 0x4a48fc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [ebp - 0x38]
push edx
push 0x4c7074
push 0x17
push esi
push 0x4c7084
call edi
cmp eax, esi
jl 0x4a4941
mov eax, dword [ebp - 0x38]
push eax
call ebx
mov esi, eax
test esi, esi
jl 0x4a4932
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
lea edx, [ebp - 0x30]
push edx
push 0x4c6ed8
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
jge 0x4a4946
xor esi, esi
mov dword [ebp - 0x30], esi
jmp 0x4a4948
xor esi, esi
mov eax, dword [ebp - 0x40]
cmp eax, esi
je 0x4a4955
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x38]
push eax
push 0x4c7074
push 0x17
push esi
push 0x4c7094
call edi
cmp eax, esi
jl 0x4a499a
mov ecx, dword [ebp - 0x38]
push ecx
call ebx
mov esi, eax
test esi, esi
jl 0x4a498b
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push 0x4c6ec8
push eax
call dword [edx]
mov esi, eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
push eax
call dword [edx + 8]
test esi, esi
jge 0x4a499f
xor esi, esi
mov dword [ebp - 0x40], esi
jmp 0x4a49a1
xor esi, esi
mov eax, dword [ebp - 0x2c]
cmp eax, esi
je 0x4a49ae
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [ebp - 0x38]
push edx
push 0x4c7074
push 0x17
push esi
push 0x4c7084
call edi
cmp eax, esi
jl 0x4a49f1
mov eax, dword [ebp - 0x38]
push eax
call ebx
mov esi, eax
test esi, esi
jl 0x4a49e4
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push 0x4c6ed8
push eax
call dword [ecx]
mov esi, eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
jge 0x4a49f8
mov dword [ebp - 0x2c], 0
mov byte [ebp - 4], 4
mov ecx, 0x513e70
lea edx, [ebp - 0x28]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a4a04
lea edx, [ebp - 0x28]
push edx
call fcn.00403590
add esp, 4
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x4c6e60
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push 0x4c6e60
mov byte [ebp - 4], 5
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x78], esp
push str.ProviderSQLOLEDB_SERVER_DATABASEHCardServer_UIDserver_PWDserver
mov byte [ebp - 4], 6
call fcn.00404ae0
mov eax, dword [ebp - 0x40]
test eax, eax
mov byte [ebp - 4], 7
jne 0x4a4a69
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.00405310
push str.select__from_tAlterMail__where_sendflag0
lea ecx, [ebp - 0x44]
call section..text
mov eax, dword [ebp - 0x40]
test eax, eax
mov byte [ebp - 4], 8
mov word [ebp - 0x54], 9
mov dword [ebp - 0x4c], eax
jne 0x4a4aa2
push 0x80004003
call fcn.004b50d0
jmp 0x4a4aa8
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp - 0x44]
push edx
mov byte [ebp - 4], 9
mov word [ebp - 0x19c], 8
call fcn.004b5150
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0xa
jne 0x4a4adc
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x54]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x50]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x4c]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x48]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x19c]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x198]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x194]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x190]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
test eax, eax
jge 0x4a4b41
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x19c]
push eax
mov byte [ebp - 4], 9
call esi
test eax, eax
jge 0x4a4b5e
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x54]
push ecx
mov byte [ebp - 4], 8
call esi
test eax, eax
jge 0x4a4b72
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4a4b86
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x38]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x38], 0
call dword [edx + 0x50]
test eax, eax
jge 0x4a4ba9
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x38], 0
jne 0x4a61e2
push str.ProviderSQLOLEDB_SERVER
lea ecx, [ebp - 0x38]
call section..text
mov bl, 0xb
push 0x5143a0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00401050
push str._DATABASE
lea ecx, [ebp - 0x38]
call fcn.00401050
push 0x5140a0
lea ecx, [ebp - 0x38]
call fcn.00401050
push str._UID
lea ecx, [ebp - 0x38]
call fcn.00401050
push 0x5141a0
lea ecx, [ebp - 0x38]
call fcn.00401050
push str._PWD
lea ecx, [ebp - 0x38]
call fcn.00401050
push 0xff
push 0x5142a0
call fcn.004035f0
add esp, 8
push 0x5142a0
lea ecx, [ebp - 0x38]
call fcn.00401050
mov ecx, 0x513ea0
mov edx, 0x5142a0
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a4c40
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x4a4c5e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
push 0x3c
push eax
mov esi, eax
call dword [edx + 0x34]
test eax, eax
jge 0x4a4c78
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x4c6e60
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x4c6e60
mov byte [ebp - 4], 0xc
call fcn.00404ae0
mov eax, dword [ebp - 0x38]
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push eax
mov byte [ebp - 4], 0xd
call fcn.00404ae0
mov eax, dword [ebp - 0x3c]
test eax, eax
mov byte [ebp - 4], 0xe
jne 0x4a4cc6
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], bl
call fcn.00405310
mov eax, dword [ebp - 0x2c]
xor edi, edi
cmp eax, edi
jne 0x4a4ce7
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x34], edi
call dword [ecx + 0x50]
cmp eax, edi
jge 0x4a4d06
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x34], di
mov eax, dword [ebp - 0x3c]
jne 0x4a6172
cmp eax, edi
mov word [ebp - 0x19c], 9
mov dword [ebp - 0x194], eax
jne 0x4a4d32
push 0x80004003
call fcn.004b50d0
jmp 0x4a4d38
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push str.select__from_S_tAlterEail
mov byte [ebp - 4], 0xf
mov word [ebp - 0x54], 8
call fcn.004b5150
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x30]
cmp eax, edi
mov byte [ebp - 4], 0x10
jne 0x4a4d67
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x19c]
push 1
mov edx, dword [eax]
push 3
push 2
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x198]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x194]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x190]
mov dword [ecx + 0xc], ebx
mov ebx, dword [ebp - 0x54]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x4c]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x48]
push eax
mov esi, eax
mov dword [ecx + 0xc], ebx
call dword [edx + 0xa0]
cmp eax, edi
jge 0x4a4dcc
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x54]
push edx
mov byte [ebp - 4], 0xf
call esi
cmp eax, edi
jge 0x4a4de6
push eax
call fcn.004b50d0
lea eax, [ebp - 0x19c]
push eax
mov byte [ebp - 4], 0xb
call esi
cmp eax, edi
jge 0x4a4dfd
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
cmp eax, edi
jne 0x4a4e11
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [0x4dd060]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
push eax
mov dword [ebp - 0x34], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0x78]
test eax, eax
jge 0x4a4e6b
mov edx, dword [ebp - 0x34]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
mov esi, 8
push str.sClientDate
mov word [ebp - 0x294], si
call fcn.004b5150
mov dword [ebp - 0x28c], eax
push str.sClientDate
mov byte [ebp - 4], 0x11
mov word [ebp - 0xac], si
call fcn.004b5150
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x12
jne 0x4a4eb7
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x344]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x13
jne 0x4a4ee7
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0xac]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0xa8]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0xa4]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0xa0]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a4f45
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x344]
push edx
mov byte [ebp - 4], 0x12
call edi
test eax, eax
jge 0x4a4f62
push eax
call fcn.004b50d0
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x11
call edi
test eax, eax
jge 0x4a4f79
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x294]
push ecx
mov byte [ebp - 4], 0xb
call edi
test eax, eax
jge 0x4a4f90
push eax
call fcn.004b50d0
mov esi, 8
push str.FromAccount
mov word [ebp - 0x1d4], si
call fcn.004b5150
mov dword [ebp - 0x1cc], eax
push str.FromAccount
mov byte [ebp - 4], 0x14
mov word [ebp - 0x16c], si
call fcn.004b5150
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x15
jne 0x4a4fdc
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x1d4]
push edx
lea eax, [ebp - 0x274]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x16
jne 0x4a500c
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x16c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x168]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x164]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x160]
push eax
mov dword [ebp - 0x34], eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a506e
mov ecx, dword [ebp - 0x34]
push 0x4c6e40
push ecx
push eax
call fcn.004b50e0
lea edx, [ebp - 0x274]
push edx
mov byte [ebp - 4], 0x15
call edi
test eax, eax
jge 0x4a5085
push eax
call fcn.004b50d0
lea eax, [ebp - 0x16c]
push eax
mov byte [ebp - 4], 0x14
call edi
test eax, eax
jge 0x4a509c
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1d4]
push ecx
mov byte [ebp - 4], 0xb
call edi
test eax, eax
jge 0x4a50b3
push eax
call fcn.004b50d0
mov esi, 8
push str.ToAccount
mov word [ebp - 0x264], si
call fcn.004b5150
mov dword [ebp - 0x25c], eax
push str.ToAccount
mov byte [ebp - 4], 0x17
mov word [ebp - 0x18c], si
call fcn.004b5150
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x18
jne 0x4a50ff
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x2f4]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x19
jne 0x4a512f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x18c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x188]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x184]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x180]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a518d
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2f4]
push eax
mov byte [ebp - 4], 0x18
call esi
test eax, eax
jge 0x4a51aa
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x18c]
push ecx
mov byte [ebp - 4], 0x17
call esi
test eax, eax
jge 0x4a51c1
push eax
call fcn.004b50d0
lea edx, [ebp - 0x264]
push edx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a51d8
push eax
call fcn.004b50d0
mov esi, 8
push str.sInstDate
mov word [ebp - 0x254], si
call fcn.004b5150
mov dword [ebp - 0x24c], eax
push str.sInstDate
mov byte [ebp - 4], 0x1a
mov word [ebp - 0xcc], si
call fcn.004b5150
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x1b
jne 0x4a5224
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x2b4]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x1c
jne 0x4a5254
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0xcc]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0xc8]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0xc4]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0xc0]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a52b2
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2b4]
push edx
mov byte [ebp - 4], 0x1b
call esi
test eax, eax
jge 0x4a52cf
push eax
call fcn.004b50d0
lea eax, [ebp - 0xcc]
push eax
mov byte [ebp - 4], 0x1a
call esi
test eax, eax
jge 0x4a52e6
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x254]
push ecx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a52fd
push eax
call fcn.004b50d0
mov esi, 8
push str.sClientIP
mov word [ebp - 0x1b4], si
call fcn.004b5150
mov dword [ebp - 0x1ac], eax
push str.sClientIP
mov byte [ebp - 4], 0x1d
mov word [ebp - 0x14c], si
call fcn.004b5150
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x1e
jne 0x4a5349
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x334]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x1f
jne 0x4a5379
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x14c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x148]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x144]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x140]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a53d7
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x334]
push eax
mov byte [ebp - 4], 0x1e
call esi
test eax, eax
jge 0x4a53f4
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x14c]
push ecx
mov byte [ebp - 4], 0x1d
call esi
test eax, eax
jge 0x4a540b
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1b4]
push edx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a5422
push eax
call fcn.004b50d0
mov esi, 8
push 0x4c7d84
mov word [ebp - 0x1f4], si
call fcn.004b5150
mov dword [ebp - 0x1ec], eax
push 0x4c7d84
mov byte [ebp - 4], 0x20
mov word [ebp - 0xec], si
call fcn.004b5150
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x21
jne 0x4a546e
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x22
jne 0x4a549e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0xec]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0xe8]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0xe4]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0xe0]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a54fc
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2d4]
push edx
mov byte [ebp - 4], 0x21
call esi
test eax, eax
jge 0x4a5519
push eax
call fcn.004b50d0
lea eax, [ebp - 0xec]
push eax
mov byte [ebp - 4], 0x20
call esi
test eax, eax
jge 0x4a5530
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1f4]
push ecx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a5547
push eax
call fcn.004b50d0
mov esi, 8
push str.Certificate
mov word [ebp - 0x234], si
call fcn.004b5150
mov dword [ebp - 0x22c], eax
push str.Certificate
mov byte [ebp - 4], 0x23
mov word [ebp - 0x15c], si
call fcn.004b5150
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x24
jne 0x4a5593
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x234]
push edx
lea eax, [ebp - 0x314]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x25
jne 0x4a55c3
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x15c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x158]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x154]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x150]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a5621
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x314]
push eax
mov byte [ebp - 4], 0x24
call esi
test eax, eax
jge 0x4a563e
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x15c]
push ecx
mov byte [ebp - 4], 0x23
call esi
test eax, eax
jge 0x4a5655
push eax
call fcn.004b50d0
lea edx, [ebp - 0x234]
push edx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a566c
push eax
call fcn.004b50d0
mov esi, 8
push str.CertificateNo
mov word [ebp - 0x214], si
call fcn.004b5150
mov dword [ebp - 0x20c], eax
push str.CertificateNo
mov byte [ebp - 4], 0x26
mov word [ebp - 0x10c], si
call fcn.004b5150
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x27
jne 0x4a56b8
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x284]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x28
jne 0x4a56e8
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x10c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x108]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x104]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x100]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a5746
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x284]
push edx
mov byte [ebp - 4], 0x27
call edi
test eax, eax
jge 0x4a5763
push eax
call fcn.004b50d0
lea eax, [ebp - 0x10c]
push eax
mov byte [ebp - 4], 0x26
call edi
test eax, eax
jge 0x4a577a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x214]
push ecx
mov byte [ebp - 4], 0xb
call edi
test eax, eax
jge 0x4a5791
push eax
call fcn.004b50d0
push str.sendflag
mov word [ebp - 0x12c], 8
call fcn.004b5150
mov dword [ebp - 0x124], eax
mov word [ebp - 0x17c], 0x16
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x2a
jne 0x4a57d5
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x17c]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x178]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x174]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x170]
mov dword [ecx + 0xc], ebx
mov ebx, dword [ebp - 0x12c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x128]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x124]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x120]
push eax
mov esi, eax
mov dword [ecx + 0xc], ebx
call dword [edx + 0x100]
test eax, eax
jge 0x4a5840
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea edx, [ebp - 0x17c]
push edx
mov byte [ebp - 4], 0x29
call edi
test eax, eax
jge 0x4a5857
push eax
call fcn.004b50d0
lea eax, [ebp - 0x12c]
push eax
mov byte [ebp - 4], 0xb
call edi
test eax, eax
jge 0x4a586e
push eax
call fcn.004b50d0
mov esi, 8
push str.Name
mov word [ebp - 0x1c4], si
call fcn.004b5150
mov dword [ebp - 0x1bc], eax
push str.Name
mov byte [ebp - 4], 0x2b
mov word [ebp - 0x9c], si
call fcn.004b5150
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x2c
jne 0x4a58ba
push 0x80004003
call fcn.004b50d0
lea ecx, [ebp - 0x1c4]
push ecx
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x2a4]
push edx
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x2d
jne 0x4a58ea
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x9c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x98]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x94]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x90]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a5948
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2a4]
push eax
mov byte [ebp - 4], 0x2c
call esi
test eax, eax
jge 0x4a5965
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x9c]
push ecx
mov byte [ebp - 4], 0x2b
call esi
test eax, eax
jge 0x4a597c
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1c4]
push edx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a5993
push eax
call fcn.004b50d0
mov esi, 8
push str.ProtocolType
mov word [ebp - 0x1e4], si
call fcn.004b5150
mov dword [ebp - 0x1dc], eax
push str.ProtocolType
mov byte [ebp - 4], 0x2e
mov word [ebp - 0xbc], si
call fcn.004b5150
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x2f
jne 0x4a59df
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x30
jne 0x4a5a0f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0xbc]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0xb8]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0xb4]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0xb0]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a5a6d
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2c4]
push edx
mov byte [ebp - 4], 0x2f
call esi
test eax, eax
jge 0x4a5a8a
push eax
call fcn.004b50d0
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x2e
call esi
test eax, eax
jge 0x4a5aa1
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1e4]
push ecx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a5ab8
push eax
call fcn.004b50d0
mov esi, 8
push str.EventNumber
mov word [ebp - 0x204], si
call fcn.004b5150
mov dword [ebp - 0x1fc], eax
push str.EventNumber
mov byte [ebp - 4], 0x31
mov word [ebp - 0xdc], si
call fcn.004b5150
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x32
jne 0x4a5b04
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x204]
push edx
lea eax, [ebp - 0x2e4]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x33
jne 0x4a5b34
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0xdc]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0xd8]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0xd4]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0xd0]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a5b92
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x32
call edi
test eax, eax
jge 0x4a5baf
push eax
call fcn.004b50d0
lea ecx, [ebp - 0xdc]
push ecx
mov byte [ebp - 4], 0x31
call edi
test eax, eax
jge 0x4a5bc6
push eax
call fcn.004b50d0
lea edx, [ebp - 0x204]
push edx
mov byte [ebp - 4], 0xb
call edi
test eax, eax
jge 0x4a5bdd
push eax
call fcn.004b50d0
mov esi, 8
push str.barNo
mov word [ebp - 0x11c], si
call fcn.004b5150
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x34
mov word [ebp - 0xfc], si
call fcn.004b5150
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x35
jne 0x4a5c2b
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0xfc]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0xf8]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0xf4]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0xf0]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0x11c]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x118]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x114]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x110]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0x100]
test eax, eax
jge 0x4a5c96
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea eax, [ebp - 0xfc]
push eax
mov byte [ebp - 4], 0x34
call edi
test eax, eax
jge 0x4a5cad
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x11c]
push ecx
mov byte [ebp - 4], 0xb
call edi
test eax, eax
jge 0x4a5cc4
push eax
call fcn.004b50d0
mov esi, 8
push str.Causation
mov word [ebp - 0x224], si
call fcn.004b5150
mov dword [ebp - 0x21c], eax
push str.Causation
mov byte [ebp - 4], 0x36
mov word [ebp - 0x13c], si
call fcn.004b5150
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x37
jne 0x4a5d10
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x304]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x38
jne 0x4a5d40
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x13c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x138]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x134]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x130]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a5d9e
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x304]
push eax
mov byte [ebp - 4], 0x37
call esi
test eax, eax
jge 0x4a5dbb
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x13c]
push ecx
mov byte [ebp - 4], 0x36
call esi
test eax, eax
jge 0x4a5dd2
push eax
call fcn.004b50d0
lea edx, [ebp - 0x224]
push edx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a5de9
push eax
call fcn.004b50d0
mov esi, 8
push 0x4cd0d4
mov word [ebp - 0x244], si
call fcn.004b5150
mov dword [ebp - 0x23c], eax
push 0x4cd0d4
mov byte [ebp - 4], 0x39
mov word [ebp - 0x8c], si
call fcn.004b5150
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x3a
jne 0x4a5e35
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x324]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x3b
jne 0x4a5e65
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x8c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x88]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x84]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x80]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a5ec0
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x324]
push edx
mov byte [ebp - 4], 0x3a
call esi
test eax, eax
jge 0x4a5edd
push eax
call fcn.004b50d0
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x39
call esi
test eax, eax
jge 0x4a5ef4
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x244]
push ecx
mov byte [ebp - 4], 0xb
call esi
test eax, eax
jge 0x4a5f0b
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x3c
jne 0x4a5f23
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov edx, dword [0x4dd060]
mov dword [ebx + 8], edx
push eax
mov dword [ebp - 0x34], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0xac]
test eax, eax
jge 0x4a5f80
mov ecx, dword [ebp - 0x34]
push 0x4c6e40
push ecx
push eax
call fcn.004b50e0
mov ebx, 0xb
push str.Sendflag
mov dword [ebp - 4], ebx
mov word [ebp - 0x64], 8
call fcn.004b5150
mov dword [ebp - 0x5c], eax
mov word [ebp - 0x74], 0x16
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x3f
jne 0x4a5fc0
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x74]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x70]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x6c]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x68]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x64]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x60]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x5c]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x58]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4a6013
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x74]
push edx
mov byte [ebp - 4], 0x3e
call esi
test eax, eax
jge 0x4a602d
push eax
call fcn.004b50d0
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4a6040
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4a6054
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [0x4dd060]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
push eax
mov dword [ebp - 0x34], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0xac]
test eax, eax
jge 0x4a60b1
mov edx, dword [ebp - 0x34]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4a60c5
cmp eax, edi
jne 0x4a6183
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x34], edi
call dword [ecx + 0x88]
cmp eax, edi
jge 0x4a61a5
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x34], edi
je 0x4a61d6
mov eax, dword [ebp - 0x3c]
cmp eax, edi
jne 0x4a61be
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x3c]
cmp eax, edi
jge 0x4a61d6
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00401150
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4a61f6
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x34]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x34], 0
call dword [edx + 0xdc]
test eax, eax
jge 0x4a621c
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4a6252
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4a6237
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
test eax, eax
jge 0x4a6252
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
push str.select__from_tAlterTelnet__where_sendflag0
lea ecx, [ebp - 0x1a4]
call section..text
mov eax, dword [ebp - 0x40]
test eax, eax
mov byte [ebp - 4], 0x40
mov word [ebp - 0x74], 9
mov dword [ebp - 0x6c], eax
jne 0x4a6282
push 0x80004003
call fcn.004b50d0
jmp 0x4a6288
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp - 0x1a4]
mov bl, 0x41
push edx
mov byte [ebp - 4], bl
mov word [ebp - 0x64], 8
call fcn.004b5150
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x42
jne 0x4a62ba
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x74]
push 1
mov ecx, dword [eax]
push 3
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x70]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x6c]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x68]
mov dword [edx + 0xc], edi
mov edi, dword [ebp - 0x64]
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov edi, dword [ebp - 0x60]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x5c]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x58]
push eax
mov esi, eax
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
xor edi, edi
cmp eax, edi
jge 0x4a6315
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], bl
call esi
cmp eax, edi
jge 0x4a632e
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x74]
push ecx
mov byte [ebp - 4], 0x40
call esi
cmp eax, edi
jge 0x4a6342
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jne 0x4a6356
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x34]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x34], edi
call dword [edx + 0x50]
cmp eax, edi
jge 0x4a6375
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x34], di
jne 0x4a7885
push str.ProviderSQLOLEDB_SERVER
lea ecx, [ebp - 0x38]
call section..text
mov bl, 0x43
push 0x5143a0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00401050
push str._DATABASE
lea ecx, [ebp - 0x38]
call fcn.00401050
push 0x5140a0
lea ecx, [ebp - 0x38]
call fcn.00401050
push str._UID
lea ecx, [ebp - 0x38]
call fcn.00401050
push 0x5141a0
lea ecx, [ebp - 0x38]
call fcn.00401050
push str._PWD
lea ecx, [ebp - 0x38]
call fcn.00401050
push 0xff
push 0x5142a0
call fcn.004035f0
add esp, 8
push 0x5142a0
lea ecx, [ebp - 0x38]
call fcn.00401050
mov ecx, 0x513ea0
mov edx, 0x5142a0
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x4a6408
mov eax, dword [ebp - 0x3c]
cmp eax, edi
jne 0x4a6426
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
push 0x3c
push eax
mov esi, eax
call dword [edx + 0x34]
cmp eax, edi
jge 0x4a6440
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x4c6e60
call fcn.00404ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x4c6e60
mov byte [ebp - 4], 0x44
call fcn.00404ae0
mov eax, dword [ebp - 0x38]
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
mov byte [ebp - 4], 0x45
call fcn.00404ae0
cmp dword [ebp - 0x3c], edi
mov byte [ebp - 4], 0x46
jne 0x4a648c
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 4], bl
call fcn.00405310
mov eax, dword [ebp - 0x2c]
xor edi, edi
cmp eax, edi
jne 0x4a64ad
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x34], edi
call dword [ecx + 0x50]
cmp eax, edi
jge 0x4a64cc
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp word [ebp - 0x34], di
mov eax, dword [ebp - 0x3c]
jne 0x4a7813
cmp eax, edi
mov word [ebp - 0x74], 9
mov dword [ebp - 0x6c], eax
jne 0x4a64f2
push 0x80004003
call fcn.004b50d0
jmp 0x4a64f8
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push str.select__from_S_tAlterTelnet
mov byte [ebp - 4], 0x47
mov word [ebp - 0x64], 8
call fcn.004b5150
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x30]
cmp eax, edi
mov byte [ebp - 4], 0x48
jne 0x4a6527
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x74]
push 1
mov edx, dword [eax]
push 3
push 2
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x68]
mov dword [ecx + 0xc], ebx
mov ebx, dword [ebp - 0x64]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x60]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x58]
push eax
mov esi, eax
mov dword [ecx + 0xc], ebx
call dword [edx + 0xa0]
cmp eax, edi
jge 0x4a6580
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x64]
push edx
mov byte [ebp - 4], 0x47
call esi
cmp eax, edi
jge 0x4a659a
push eax
call fcn.004b50d0
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x43
call esi
cmp eax, edi
jge 0x4a65ae
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
cmp eax, edi
jne 0x4a65c2
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [0x4dd060]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
push eax
mov dword [ebp - 0x34], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0x78]
test eax, eax
jge 0x4a661c
mov edx, dword [ebp - 0x34]
push 0x4c6e40
push edx
push eax
call fcn.004b50e0
mov esi, 8
push str.sClientDate
mov word [ebp - 0x244], si
call fcn.004b5150
mov dword [ebp - 0x23c], eax
push str.sClientDate
mov byte [ebp - 4], 0x49
mov word [ebp - 0x8c], si
call fcn.004b5150
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x4a
jne 0x4a6668
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x324]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x4b
jne 0x4a6698
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x8c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x88]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x84]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x80]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a66f3
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x324]
push edx
mov byte [ebp - 4], 0x4a
call edi
test eax, eax
jge 0x4a6710
push eax
call fcn.004b50d0
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x49
call edi
test eax, eax
jge 0x4a6727
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x244]
push ecx
mov byte [ebp - 4], 0x43
call edi
test eax, eax
jge 0x4a673e
push eax
call fcn.004b50d0
mov esi, 8
push str.Host
mov word [ebp - 0x224], si
call fcn.004b5150
mov dword [ebp - 0x21c], eax
push str.Host
mov byte [ebp - 4], 0x4c
mov word [ebp - 0x13c], si
call fcn.004b5150
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x4d
jne 0x4a678a
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x304]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x4e
jne 0x4a67ba
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x13c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x138]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x134]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x130]
push eax
mov dword [ebp - 0x34], eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a681c
mov ecx, dword [ebp - 0x34]
push 0x4c6e40
push ecx
push eax
call fcn.004b50e0
lea edx, [ebp - 0x304]
push edx
mov byte [ebp - 4], 0x4d
call edi
test eax, eax
jge 0x4a6833
push eax
call fcn.004b50d0
lea eax, [ebp - 0x13c]
push eax
mov byte [ebp - 4], 0x4c
call edi
test eax, eax
jge 0x4a684a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x224]
push ecx
mov byte [ebp - 4], 0x43
call edi
test eax, eax
jge 0x4a6861
push eax
call fcn.004b50d0
mov esi, 8
push str.sInstDate
mov word [ebp - 0x204], si
call fcn.004b5150
mov dword [ebp - 0x1fc], eax
push str.sInstDate
mov byte [ebp - 4], 0x4f
mov word [ebp - 0x11c], si
call fcn.004b5150
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x50
jne 0x4a68ad
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x204]
push edx
lea eax, [ebp - 0x2e4]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x51
jne 0x4a68dd
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x11c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x118]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x114]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x110]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a693b
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 4], 0x50
call esi
test eax, eax
jge 0x4a6958
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x11c]
push ecx
mov byte [ebp - 4], 0x4f
call esi
test eax, eax
jge 0x4a696f
push eax
call fcn.004b50d0
lea edx, [ebp - 0x204]
push edx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a6986
push eax
call fcn.004b50d0
mov esi, 8
push str.sClientIP
mov word [ebp - 0x1e4], si
call fcn.004b5150
mov dword [ebp - 0x1dc], eax
push str.sClientIP
mov byte [ebp - 4], 0x52
mov word [ebp - 0xfc], si
call fcn.004b5150
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x53
jne 0x4a69d2
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x54
jne 0x4a6a02
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0xfc]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0xf8]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0xf4]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0xf0]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a6a60
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x2c4]
push edx
mov byte [ebp - 4], 0x53
call esi
test eax, eax
jge 0x4a6a7d
push eax
call fcn.004b50d0
lea eax, [ebp - 0xfc]
push eax
mov byte [ebp - 4], 0x52
call esi
test eax, eax
jge 0x4a6a94
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1e4]
push ecx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a6aab
push eax
call fcn.004b50d0
mov esi, 8
push 0x4c7d84
mov word [ebp - 0x1c4], si
call fcn.004b5150
mov dword [ebp - 0x1bc], eax
push 0x4c7d84
mov byte [ebp - 4], 0x55
mov word [ebp - 0xdc], si
call fcn.004b5150
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x56
jne 0x4a6af7
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x2a4]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x57
jne 0x4a6b27
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0xdc]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0xd8]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0xd4]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0xd0]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a6b85
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2a4]
push eax
mov byte [ebp - 4], 0x56
call esi
test eax, eax
jge 0x4a6ba2
push eax
call fcn.004b50d0
lea ecx, [ebp - 0xdc]
push ecx
mov byte [ebp - 4], 0x55
call esi
test eax, eax
jge 0x4a6bb9
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1c4]
push edx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a6bd0
push eax
call fcn.004b50d0
mov esi, 8
push str.Certificate
mov word [ebp - 0x214], si
call fcn.004b5150
mov dword [ebp - 0x20c], eax
push str.Certificate
mov byte [ebp - 4], 0x58
mov word [ebp - 0xbc], si
call fcn.004b5150
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x59
jne 0x4a6c1c
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x284]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x5a
jne 0x4a6c4c
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0xbc]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0xb8]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0xb4]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0xb0]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a6caa
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x284]
push edx
mov byte [ebp - 4], 0x59
call esi
test eax, eax
jge 0x4a6cc7
push eax
call fcn.004b50d0
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x58
call esi
test eax, eax
jge 0x4a6cde
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x214]
push ecx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a6cf5
push eax
call fcn.004b50d0
mov esi, 8
push str.CertificateNo
mov word [ebp - 0x234], si
call fcn.004b5150
mov dword [ebp - 0x22c], eax
push str.CertificateNo
mov byte [ebp - 4], 0x5b
mov word [ebp - 0x9c], si
call fcn.004b5150
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x5c
jne 0x4a6d41
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x234]
push edx
lea eax, [ebp - 0x314]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x5d
jne 0x4a6d71
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x9c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x98]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x94]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x90]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a6dcf
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x314]
push eax
mov byte [ebp - 4], 0x5c
call edi
test eax, eax
jge 0x4a6dec
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x9c]
push ecx
mov byte [ebp - 4], 0x5b
call edi
test eax, eax
jge 0x4a6e03
push eax
call fcn.004b50d0
lea edx, [ebp - 0x234]
push edx
mov byte [ebp - 4], 0x43
call edi
test eax, eax
jge 0x4a6e1a
push eax
call fcn.004b50d0
push str.sendflag
mov word [ebp - 0x17c], 8
call fcn.004b5150
mov dword [ebp - 0x174], eax
mov word [ebp - 0x12c], 0x16
mov dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x5f
jne 0x4a6e5e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x12c]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x128]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x124]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x120]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0x17c]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x178]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x174]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x170]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0x100]
test eax, eax
jge 0x4a6ec9
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea eax, [ebp - 0x12c]
push eax
mov byte [ebp - 4], 0x5e
call edi
test eax, eax
jge 0x4a6ee0
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x17c]
push ecx
mov byte [ebp - 4], 0x43
call edi
test eax, eax
jge 0x4a6ef7
push eax
call fcn.004b50d0
mov esi, 8
push str.Name
mov word [ebp - 0x1f4], si
call fcn.004b5150
mov dword [ebp - 0x1ec], eax
push str.Name
mov byte [ebp - 4], 0x60
mov word [ebp - 0x10c], si
call fcn.004b5150
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x61
jne 0x4a6f43
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x1f4]
push edx
lea eax, [ebp - 0x2d4]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x62
jne 0x4a6f73
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x10c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x108]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x104]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x100]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a6fd1
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2d4]
push eax
mov byte [ebp - 4], 0x61
call esi
test eax, eax
jge 0x4a6fee
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x10c]
push ecx
mov byte [ebp - 4], 0x60
call esi
test eax, eax
jge 0x4a7005
push eax
call fcn.004b50d0
lea edx, [ebp - 0x1f4]
push edx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a701c
push eax
call fcn.004b50d0
mov esi, 8
push str.ProtocolType
mov word [ebp - 0x1b4], si
call fcn.004b5150
mov dword [ebp - 0x1ac], eax
push str.ProtocolType
mov byte [ebp - 4], 0x63
mov word [ebp - 0x15c], si
call fcn.004b5150
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x64
jne 0x4a7068
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x334]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x65
jne 0x4a7098
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x15c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x158]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x154]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x150]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a70f6
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x334]
push edx
mov byte [ebp - 4], 0x64
call esi
test eax, eax
jge 0x4a7113
push eax
call fcn.004b50d0
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 0x63
call esi
test eax, eax
jge 0x4a712a
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1b4]
push ecx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a7141
push eax
call fcn.004b50d0
mov esi, 8
push str.EventNumber
mov word [ebp - 0x254], si
call fcn.004b5150
mov dword [ebp - 0x24c], eax
push str.EventNumber
mov byte [ebp - 4], 0x66
mov word [ebp - 0xec], si
call fcn.004b5150
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x67
jne 0x4a718d
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x254]
push edx
lea eax, [ebp - 0x2b4]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x68
jne 0x4a71bd
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0xec]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0xe8]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0xe4]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0xe0]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a721b
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2b4]
push eax
mov byte [ebp - 4], 0x67
call edi
test eax, eax
jge 0x4a7238
push eax
call fcn.004b50d0
lea ecx, [ebp - 0xec]
push ecx
mov byte [ebp - 4], 0x66
call edi
test eax, eax
jge 0x4a724f
push eax
call fcn.004b50d0
lea edx, [ebp - 0x254]
push edx
mov byte [ebp - 4], 0x43
call edi
test eax, eax
jge 0x4a7266
push eax
call fcn.004b50d0
mov esi, 8
push str.barNo
mov word [ebp - 0xcc], si
call fcn.004b5150
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x69
mov word [ebp - 0x14c], si
call fcn.004b5150
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x6a
jne 0x4a72b4
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x14c]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0x148]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x144]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x140]
mov dword [edx + 0xc], ebx
mov ebx, dword [ebp - 0xcc]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [ebp - 0xc8]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0xc4]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0xc0]
push eax
mov esi, eax
mov dword [edx + 0xc], ebx
call dword [ecx + 0x100]
test eax, eax
jge 0x4a731f
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 0x69
call edi
test eax, eax
jge 0x4a7336
push eax
call fcn.004b50d0
lea ecx, [ebp - 0xcc]
push ecx
mov byte [ebp - 4], 0x43
call edi
test eax, eax
jge 0x4a734d
push eax
call fcn.004b50d0
mov esi, 8
push str.Causation
mov word [ebp - 0x264], si
call fcn.004b5150
mov dword [ebp - 0x25c], eax
push str.Causation
mov byte [ebp - 4], 0x6b
mov word [ebp - 0x18c], si
call fcn.004b5150
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x6c
jne 0x4a7399
push 0x80004003
call fcn.004b50d0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x2f4]
push eax
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x6d
jne 0x4a73c9
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esi + 4]
mov dword [edx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
mov esi, dword [ebp - 0x18c]
sub esp, 0x10
mov edx, esp
mov dword [edx], esi
mov esi, dword [ebp - 0x188]
mov dword [edx + 4], esi
mov esi, dword [ebp - 0x184]
mov dword [edx + 8], esi
mov esi, dword [ebp - 0x180]
push eax
mov edi, eax
mov dword [edx + 0xc], esi
call dword [ecx + 0x100]
test eax, eax
jge 0x4a7427
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2f4]
push eax
mov byte [ebp - 4], 0x6c
call esi
test eax, eax
jge 0x4a7444
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x18c]
push ecx
mov byte [ebp - 4], 0x6b
call esi
test eax, eax
jge 0x4a745b
push eax
call fcn.004b50d0
lea edx, [ebp - 0x264]
push edx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a7472
push eax
call fcn.004b50d0
mov esi, 8
push 0x4cd0d4
mov word [ebp - 0x1d4], si
call fcn.004b5150
mov dword [ebp - 0x1cc], eax
push 0x4cd0d4
mov byte [ebp - 4], 0x6e
mov word [ebp - 0x16c], si
call fcn.004b5150
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x6f
jne 0x4a74be
push 0x80004003
call fcn.004b50d0
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x274]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00403e70
mov esi, eax
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x70
jne 0x4a74ee
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ebx, dword [esi]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov esi, dword [ebp - 0x16c]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [ebp - 0x168]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x164]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x160]
push eax
mov edi, eax
mov dword [ecx + 0xc], esi
call dword [edx + 0x100]
test eax, eax
jge 0x4a754c
push 0x4c6e40
push edi
push eax
call fcn.004b50e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x274]
push edx
mov byte [ebp - 4], 0x6f
call esi
test eax, eax
jge 0x4a7569
push eax
call fcn.004b50d0
lea eax, [ebp - 0x16c]
push eax
mov byte [ebp - 4], 0x6e
call esi
test eax, eax
jge 0x4a7580
push eax
call fcn.004b50d0
lea ecx, [ebp - 0x1d4]
push ecx
mov byte [ebp - 4], 0x43
call esi
test eax, eax
jge 0x4a7597
push eax
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 0x71
jne 0x4a75af
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x4dd058]
mov edx, dword [0x4dd05c]
mov esi, dword [0x4dd060]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov dword [ebx + 8], esi
mov esi, dword [0x4dd064]
mov dword [ebx + 0xc], esi
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebx + 4], edx
mov edx, dword [0x4dd060]
mov dword [ebx + 8], edx
push eax
mov dword [ebp - 0x34], eax
mov dword [ebx + 0xc], esi
call dword [edi + 0xac]
test eax, eax
jge 0x4a760c
mov ecx, dword [ebp - 0x34]
push 0x4c6e40
push ecx
push eax
call fcn.004b50e0
mov ebx, 0x43
push str.Sendflag
mov dword [ebp - 4], ebx
mov word [ebp - 0x54], 8
call fcn.004b5150
mov dword [ebp - 0x4c], eax
mov word [ebp - 0xac], 0x16
mov dword [ebp - 0xa4], 1
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x74
jne 0x4a7652
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0xac]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0xa8]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0xa4]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0xa0]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp - 0x54]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x50]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x4c]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x48]
push eax
mov esi, eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x100]
test eax, eax
jge 0x4a76b1
cmp eax, edi
jne 0x4a7824
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x34], edi
call dword [ecx + 0x88]
cmp eax, edi
jge 0x4a7846
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x34], edi
je 0x4a7877
mov eax, dword [ebp - 0x3c]
cmp eax, edi
jne 0x4a785f
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x3c]
cmp eax, edi
jge 0x4a7877
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x40
call fcn.00401150
xor edi, edi
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jne 0x4a7899
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x34]
push ecx
push eax
mov esi, eax
mov dword [ebp - 0x34], edi
call dword [edx + 0xdc]
cmp eax, edi
jge 0x4a78bb
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x34], edi
je 0x4a78ef
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jne 0x4a78d4
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
cmp eax, edi
jge 0x4a78ef
push 0x4c6e40
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x40]
cmp eax, edi
jne 0x4a7903
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
mov esi, eax
mov dword [ebp - 0x34], edi
call dword [ecx + 0x88]
cmp eax, edi
jge 0x4a7925
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
cmp dword [ebp - 0x34], edi
je 0x4a7956
mov eax, dword [ebp - 0x40]
cmp eax, edi
jne 0x4a793e
push 0x80004003
call fcn.004b50d0
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x3c]
cmp eax, edi
jge 0x4a7956
push 0x4c6e30
push esi
push eax
call fcn.004b50e0
mov eax, dword [ebp - 0x3c]
cmp eax, edi
je 0x4a7966
mov dword [ebp - 0x3c], edi
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x30]
cmp eax, edi
je 0x4a7976
mov dword [ebp - 0x30], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x40]
cmp eax, edi
je 0x4a7986
mov dword [ebp - 0x40], edi
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x2c]
cmp eax, edi
je 0x4a7996
mov dword [ebp - 0x2c], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 8
call fcn.00401150
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 4
call fcn.00401150
mov eax, dword [ebp - 0x2c]
test eax, eax
mov dword [ebp - 4], 2
je 0x4a79c5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x30]
test eax, eax
mov byte [ebp - 4], 1
je 0x4a79d6
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x40]
test eax, eax
mov byte [ebp - 4], 0
je 0x4a79e7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 4], 0xffffffff
je 0x4a79fb
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004b4b61
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret