Function at 0x487030
Capabilities:
Encode data using xor
Execute anti-debugging instructions
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ddf95
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1138
call fcn.0045bc60
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
jmp 0x48706b
push str.http:__SERVERNAME
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0
cmp eax, 4
jne 0x48708e
push str._vrb_UserLoginV1.aspx
jmp 0x48709f
cmp eax, 5
jne 0x48709a
push str._vrb_RenewalV1.aspx
jmp 0x48709f
push str._vrb_chkolv13.aspx
lea ecx, [ebp - 0x18]
call fcn.0045b320
mov eax, dword [0x61963c]
push 0x5e2540
push eax
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
jne 0x4870ce
push str._lanchs
lea ecx, [ebp - 0x18]
call fcn.0045b320
jmp 0x4870db
push 0x61963c
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::operator_2
mov eax, 0x7ffe0014
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
cmp ecx, edx
jne 0x4870e0
mov eax, dword [eax]
push 0
push 0x3e8
push ecx
push eax
call fcn.004d1900
push 0
push 0xa
push edx
push eax
call fcn.004d1900
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov dword [ebp - 0x7c], edx
mov ebx, edx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp - 0x2c]
rdtsc
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov eax, ebx
mov edx, edi
neg eax
and eax, 0x1f
xor edx, ebx
mov ecx, 0x20
mov edi, edx
sub ecx, eax
shr edi, cl
mov ecx, eax
mov eax, esi
shl edx, cl
neg eax
and eax, 0x1f
mov ecx, 0x20
sub ecx, eax
or edi, edx
mov edx, esi
xor edx, ebx
mov ebx, edx
shr ebx, cl
mov ecx, eax
mov eax, edi
shl edx, cl
neg eax
and eax, 0x1f
mov ecx, 0x20
sub ecx, eax
or ebx, edx
mov edx, esi
xor edx, edi
mov esi, edx
shr esi, cl
mov ecx, eax
mov eax, dword [ebp - 0x30]
shl edx, cl
or esi, edx
dec eax
mov dword [ebp - 0x30], eax
jne 0x487134
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::CString_3
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 1
cmp eax, 4
jne 0x4871f9
mov edx, dword [0x619638]
mov eax, dword [0x619644]
mov ecx, dword [0x6195ec]
push edx
push eax
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x6195f4
call sub.MFC42.DLL_CString::CString_4
lea edx, [ebp - 0x2c]
push edx
call fcn.00485130
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x1c]
push eax
push str._s_s_s_s
push ecx
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::Format_1
add esp, 0x18
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
jmp 0x4872c1
cmp dword [ebp + 8], 5
jne 0x487257
mov edx, dword [0x619648]
mov eax, dword [0x619638]
mov ecx, dword [0x619644]
push edx
mov edx, dword [0x6195ec]
push eax
push ecx
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x6195f4
call sub.MFC42.DLL_CString::CString_4
lea eax, [ebp - 0x2c]
push eax
call fcn.00485130
add esp, 8
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push ecx
push str._s_s_s_s_s
push edx
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::Format_1
add esp, 0x1c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
jmp 0x4872c1
mov eax, dword [0x619634]
mov ecx, dword [0x619638]
mov edx, dword [0x619600]
push esi
push edi
push ebx
push eax
mov eax, dword [0x619660]
push ecx
mov ecx, dword [0x619644]
push edx
mov edx, dword [0x619604]
push eax
push ecx
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x619650
call sub.MFC42.DLL_CString::CString_4
lea eax, [ebp - 0x2c]
push eax
call fcn.00484610
add esp, 8
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push ecx
push edx
lea eax, [ebp - 0x1c]
push str._d_s_s_s_d_s_s_s_x_x_x
push eax
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::Format_1
add esp, 0x34
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CString::CString
mov eax, dword [0x619628]
push 0x5e2540
push eax
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
jne 0x487321
push eax
call dword [sym.imp.MSVCRT.dll_time]
push eax
call dword [sym.imp.MSVCRT.dll_srand]
add esp, 8
rdtsc
mov dword [ebp - 0x2c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call dword [sym.imp.MSVCRT.dll_rand]
mov ecx, dword [ebp - 0x2c]
add ecx, esi
add eax, ecx
and eax, 0xffff
push eax
push str._08d
push 0x619628
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
mov edx, dword [0x619628]
xor edi, edi
mov dword [0x61965c], 0x5a
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov eax, dword [edx - 8]
lea ecx, [ebp - 0x78]
push ecx
push eax
push edi
mov ecx, 0x619628
call sub.MFC42.DLL_CString::GetBuffer
push eax
lea ecx, [ebp - 0x1148]
call fcn.0046b920
lea edx, [ebp - 0x4c]
push 4
push edx
mov ecx, 0x619628
call sub.MFC42.DLL_CString::Right
mov esi, eax
mov eax, dword [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
mov eax, dword [eax - 8]
inc eax
push eax
push edi
call sub.MFC42.DLL_CString::GetBuffer
lea ecx, [ebp - 0x54]
push eax
push ecx
lea ecx, [ebp - 0x1148]
call fcn.0046c960
mov ebx, eax
lea edx, [ebp - 0x30]
push 4
push edx
mov ecx, 0x619628
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::Left
push ebx
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 7
push eax
call sub.MFC42.DLL_operator_3
push esi
lea ecx, [ebp - 0x2c]
mov ebx, 8
push eax
push ecx
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator_3
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
push str.xjl
lea ecx, [ebp - 0x18]
call fcn.0045b320
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x18]
push edx
call sub.MFC42.DLL_CString::operator_2
push str.randcode
lea ecx, [ebp - 0x18]
call fcn.0045b320
push 0x5c1818
lea eax, [ebp - 0x24]
push 0x619640
push eax
call sub.MFC42.DLL_operator_4
mov ecx, dword [ebp - 0x24]
push edi
mov byte [ebp - 4], 0xa
mov eax, dword [ecx - 8]
lea ecx, [ebp - 0x24]
inc eax
push eax
push edi
call sub.MFC42.DLL_CString::GetBuffer
lea edx, [ebp - 0x2c]
push eax
push edx
lea ecx, [ebp - 0x1148]
call fcn.0046c960
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
call sub.MFC42.DLL_CString::CString_3
push edi
mov byte [ebp - 4], 0xc
call dword [sym.imp.MSVCRT.dll_time]
add esp, 4
push eax
lea eax, [ebp - 0x20]
push str._08d
push eax
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
lea ecx, [ebp - 0x18]
push str.pass
call fcn.0045b320
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::operator_2
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x28]
push edx
call sub.MFC42.DLL_CString::CString_4
push edi
push edi
push edi
push edi
push 1
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd
call fcn.0045afd8
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x30], edi
call sub.MFC42.DLL_CString::CString_3
push edi
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x48], 0x3f3
mov dword [ebp - 0x2c], 0x1388
push 4
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x44]
push eax
push 2
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea ecx, [ebp - 0x2c]
push 4
mov edi, 0x3e8
push ecx
push 5
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], edi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea edx, [ebp - 0x2c]
push 4
mov esi, 0x1b58
push edx
push 6
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], esi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea eax, [ebp - 0x2c]
push 4
push eax
push 7
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], edi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea ecx, [ebp - 0x2c]
push 4
push ecx
push ebx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], esi
call sub.MFC42.DLL_CInternetSession::SetOption
push 0
lea edx, [ebp - 0x2c]
push 4
push edx
push 3
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], 1
call sub.MFC42.DLL_CInternetSession::SetOption
mov eax, dword [ebp - 0x3c]
push 4
push 1
push 0x40
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov eax, dword [0x6195e0]
test eax, eax
jne 0x487655
push str.c.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.220.162.238.232
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.c1.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.58.22.102.247
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.c2.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.220.162.238.240
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.c3.xdrj.cn
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
push str.67.228.120.179
push eax
mov ecx, 0x6195d8
call sub.MFC42.DLL_CStringArray::SetAtGrow_1
mov eax, dword [0x6195e0]
mov edi, eax
mov dword [ebp - 0x70], edi
jmp 0x48766a
xor esi, esi
mov dword [ebp - 0x2c], esi
cmp esi, edi
jae 0x48781b
jmp 0x487689
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::operator_3
mov edx, dword [0x61962c]
lea ecx, [ebp - 0x18]
lea eax, [esi + edx*2]
xor edx, edx
div edi
mov eax, dword [0x6195dc]
mov edx, dword [eax + edx*4]
push edx
push str.SERVERNAME
call sub.MFC42.DLL_CString::Replace
jmp 0x4876c8
mov byte [ebp - 4], 0x10
jmp 0x4876de
mov edx, dword [0x61962c]
mov ebx, 0xa
xor ecx, ecx
mov dword [0x5da744], ebx
lea eax, [esi + edx*2]
xor edx, edx
div edi
mov eax, dword [0x6195dc]
mov dword [0x619654], 0x32
mov word [ebp - 0x63], cx
mov byte [ebp - 0x64], 0
mov byte [ebp - 0x61], cl
mov edx, dword [eax + edx*4]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x48772a
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x48774a
cmp ax, 0x7f
je 0x48773d
cmp ax, 0xa8c0
jne 0x48774a
mov dword [ebp - 0x48], 0x3f3
mov dword [0x5da758], ebx
mov ecx, dword [ebp - 0x18]
push 0
push 0
push 0x4000001
push 1
push ecx
lea ecx, [ebp - 0x44]
call sub.MFC42.DLL_CInternetSession::OpenURL
mov edi, eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov edx, dword [edi]
mov dword [ebp - 0x30], edi
call dword [edx + 0x60]
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::MakeLower
jmp 0x487789
lea ecx, [ebp - 0xc8]
push 0x5da814
push ecx
call fcn.004287d0
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x11
call sub.MFC42.DLL_CString::Find_3
cmp eax, 0xffffffff
lea ecx, [ebp - 0xc8]
setne bl
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x48788e
jmp 0x4877db
mov edx, dword [edi]
push 0x619614
mov ecx, edi
call dword [edx + 0x60]
push 0x619614
mov ecx, 0x619610
call sub.MFC42.DLL_CString::operator_3
mov dword [ebp - 0x48], 0x3f3
mov dword [0x619658], 0x50
jmp 0x487817
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x44]
call 0x4d181c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd
call sub.MFC42.DLL_CInternetSession::CInternetSession
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x48]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0xb0]
push 0x5da800
push eax
call fcn.004287d0
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::Find_3
cmp eax, 0xffffffff
lea ecx, [ebp - 0xb0]
setne bl
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x4880b0
call fcn.0045ee60
mov eax, dword [0x5da744]
add ebx, eax
call ebx
call [ebx - 0x15]
adc byte [esi + 0x4d], dl
push eax
jb 0x487954
je 0x48794c
arpl word [eax + 0x62], si
imul ebp, dword gs:[bp], 0x458d178b
in al, dx
push eax
mov ecx, edi
call dword [edx + 0x60]
lea ecx, [ebp - 0x5c]
push 0x5da7c0
push ecx
call fcn.004287d0
add esp, 8
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString_3
mov esi, dword [ebp + 8]
lea edx, [ebp - 0x60]
push esi
push 0x5c3bf8
push edx
mov byte [ebp - 4], 0x14
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x5c]
push eax
call sub.MFC42.DLL_CString::operator_2
push SysReAllocStringLen
push 0
push ecx
mov dword [str.2P7_Fc], 0xa
mov ecx, esp
mov dword [ebp - 0xd0], esp
push 0x5e2540
call sub.MFC42.DLL_CString::CString_1
push ecx
lea edx, [ebp - 0x5c]
mov ecx, esp
mov dword [ebp - 0x74], esp
push edx
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x14
call fcn.0045c340
lea eax, [ebp - 0x68]
mov bl, 0x16
push eax
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], bl
call fcn.0045c6b0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x17
push ecx
lea ecx, [ebp - 0x6c]
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x19
call sub.MFC42.DLL_CString::CString
test esi, esi
jne 0x487a06
add byte [eax], al
add byte [ebx + 0x30a589cc], cl
invalid
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
mov edi, dword [sym.imp.MSVCRT.dll__mbscmp]
push edx
push eax
call edi
add esp, 8
test eax, eax
je 0x487a24
mov ecx, dword [ebp - 0x14]
push 0x5e2540
push ecx
call edi
add esp, 8
test eax, eax
je 0x487a24
push ecx
lea edx, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x74], esp
push edx
mov dword [0x619658], 0x50
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0xf0]
call fcn.0045c6f0
jmp 0x487a7b
cmp esi, 1
jne 0x487a75
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x6195f8]
mov edi, dword [sym.imp.MSVCRT.dll__mbscmp]
push ecx
push eax
call edi
add esp, 8
test eax, eax
jne 0x487a65
push 0x41
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::operator
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x14
call fcn.0045c4c0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
jmp 0x48808b
lea edx, [ebp - 0x14]
mov ecx, 0x6195f8
push edx
call sub.MFC42.DLL_CString::operator_3
jmp 0x487a7b
mov edi, dword [sym.imp.MSVCRT.dll__mbscmp]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x14
call fcn.0045c4c0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
push 0
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x74], esp
push eax
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x1148]
call fcn.0046cc40
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1a
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
mov edx, dword [ebp - 0x14]
push 0x5e2540
push edx
call edi
add esp, 8
test eax, eax
je 0x488084
test esi, esi
jne 0x487e0a
mov edi, dword [0x619628]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Delete
push esi
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea eax, [ebp - 0x80]
push esi
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619620
mov byte [ebp - 4], 0x1b
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0xb8]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
add esp, 4
lea ecx, [ebp - 0xb8]
mov dword [0x61961c], eax
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea edx, [ebp - 0x8c]
push esi
push edx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
mov edi, dword [sym.imp.MSVCRT.dll_sscanf]
push 0x619618
push 0x5c11bc
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x8c]
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea eax, [ebp - 0xb4]
push esi
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619634
mov byte [ebp - 4], 0x1c
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0x94]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619630
mov byte [ebp - 4], 0x1d
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
cmp dword [0x619654], 0x32
jne 0x487df8
cmp dword [0x61965c], 0x5a
jne 0x487df8
cmp dword [0x5da758], 0x46
jne 0x487df8
lea edx, [ebp - 0x14]
mov ecx, 0x619610
push edx
call sub.MFC42.DLL_CString::operator_3
push 0x5f
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Find_2
mov esi, eax
lea eax, [ebp - 0xac]
push esi
push eax
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
lea ecx, [ebp - 0x58]
push ecx
push 0x5c1968
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0xac]
call sub.MFC42.DLL_CString::CString
inc esi
mov ecx, 0x619630
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0x5f
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Find_2
mov esi, eax
lea edx, [ebp - 0x84]
push esi
push edx
mov ecx, 0x619630
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
lea ecx, [ebp - 0x50]
push ecx
push 0x5c1968
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x84]
call sub.MFC42.DLL_CString::CString
inc esi
mov ecx, 0x619630
push esi
push 0
call sub.MFC42.DLL_CString::Delete
mov eax, dword [0x619630]
lea edx, [ebp - 0x4c]
push edx
push 0x5c1968
push eax
call edi
mov edi, dword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
add esp, 0xc
mov dword [ebp + 8], 0
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0x7c]
cmp eax, 4
jge 0x487ffe
mov eax, ebx
mov ecx, 0x20
neg eax
and eax, 0x1f
mov esi, edx
sub ecx, eax
shl esi, cl
mov ecx, eax
shr edx, cl
mov ecx, 0x20
or esi, edx
xor esi, ebx
mov edx, esi
mov esi, edi
mov eax, edx
mov dword [ebp - 0x4c], edx
neg eax
and eax, 0x1f
sub ecx, eax
shl esi, cl
mov ecx, eax
shr edi, cl
mov ecx, 0x20
or esi, edi
xor esi, edx
mov edi, esi
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x58], edi
neg eax
and eax, 0x1f
sub ecx, eax
shl esi, cl
mov ecx, eax
mov eax, dword [ebp + 8]
shr ebx, cl
or esi, ebx
xor esi, edi
inc eax
mov ebx, esi
mov dword [ebp + 8], eax
mov dword [ebp - 0x50], ebx
jmp 0x487d83
push 0x5e2540
lea ecx, [ebp - 0x14]
call fcn.0045afae
jmp 0x487ccb
cmp esi, 1
jne 0x487f46
lea ecx, [ebp - 0x54]
call sub.MFC42.DLL_CString::CString_3
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x619604]
push eax
push ecx
push ecx
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x74], esp
push 0x619650
call sub.MFC42.DLL_CString::CString_4
lea edx, [ebp - 0xbc]
push edx
call fcn.00484610
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x54]
push eax
push str._s_s_s
push ecx
mov byte [ebp - 4], 0x1f
call sub.MFC42.DLL_CString::Format_1
add esp, 0x14
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x1e
call sub.MFC42.DLL_CString::CString
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea edx, [ebp - 0x9c]
push esi
push edx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x54]
push eax
call edi
add esp, 8
lea ecx, [ebp - 0x9c]
test eax, eax
setne bl
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x487ebb
mov dword [str.2P7_Fc], 0x32
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0xc4]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619634
mov byte [ebp - 4], 0x20
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x1e
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
lea edx, [ebp - 0x14]
mov ecx, 0x619630
push edx
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
mov edi, dword [sym.imp.MSVCRT.dll_sscanf]
jmp 0x487ccb
cmp esi, 4
jne 0x487f8d
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
push eax
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619650
mov byte [ebp - 4], 0x21
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
jmp 0x488084
cmp esi, 5
jne 0x488084
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0xc0]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
push eax
mov ecx, 0x619620
mov byte [ebp - 4], 0x22
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
lea edx, [ebp - 0x14]
mov ecx, 0x619610
push edx
call sub.MFC42.DLL_CString::operator_3
mov dword [0x619658], 0x50
jmp 0x488084
mov eax, 0x7ffe0014
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
cmp ecx, edx
jne 0x488003
mov eax, dword [eax]
push 0
push 0x3e8
push ecx
push eax
call fcn.004d1900
push 0
push 0xa
push edx
push eax
call fcn.004d1900
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
cmp edx, esi
jb 0x48803c
sub edx, esi
jmp 0x488044
sub edx, esi
add edx, 0x418937
lea ecx, [edx + esi]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x20]
mov dword [ebp + 8], eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x50]
cmp edx, eax
jne 0x48807a
mov eax, dword [ebp - 0x58]
cmp ecx, eax
jae 0x48807a
add ecx, 0x12c
cmp ecx, eax
jb 0x48807a
mov dword [0x5da754], 0x3c
jmp 0x488084
mov dword [str.2P7_Fc], 0x32
mov dword [ebp - 0x48], 0x3f4
jmp 0x48809b
call fcn.0045ee60
mov eax, dword [str.2P7_Fc]
add ebx, eax
call ebx
call [ebx - 0x17]
idiv edi
dec dword [ebp - 0x877b]
jmp [eax - 0x5c]
lea eax, [ebp - 0x88]
push 0x5da7a4
push eax
call fcn.004287d0
add esp, 8
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x23
call sub.MFC42.DLL_CString::Find_3
cmp eax, 0xffffffff
lea ecx, [ebp - 0x88]
setne bl
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x488231
jmp 0x488102
mov edx, dword [edi]
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call dword [edx + 0x60]
push 0
push ecx
lea edx, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x74], esp
push edx
call sub.MFC42.DLL_CString::CString_4
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x1148]
push eax
call fcn.0046cc40
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
push 0
push 0x5c1818
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [ebp - 0x98]
push esi
push ecx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
add esp, 4
lea ecx, [ebp - 0x98]
mov edi, eax
call sub.MFC42.DLL_CString::CString
inc esi
lea ecx, [ebp - 0x14]
push esi
push 0
call sub.MFC42.DLL_CString::Delete
lea edx, [ebp - 0x14]
mov ecx, 0x6195fc
push edx
call sub.MFC42.DLL_CString::operator_3
push 0
push 3
lea eax, [ebp - 0xa0]
push str.RegisterSupportErrMessage
push eax
call fcn.0041f4f0
add esp, 0x10
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
test edi, edi
jne 0x488209
mov ecx, dword [ebp - 0x14]
push edi
push 4
push ecx
call sub.MFC42.DLL_AfxMessageBox_1
cmp eax, 7
jne 0x488209
push 0x5c1688
mov ecx, 0x619600
call fcn.0045afae
mov edx, dword [ebp + 8]
push edx
call fcn.00487030
add esp, 4
mov dword [ebp - 0x48], eax
jmp 0x488210
mov dword [ebp - 0x48], 0x3f6
jmp 0x488220
jmp 0x487817
test edi, edi
mov dword [ebp - 4], 0xf
je 0x488253
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x54]
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
mov dword [ebp - 0x30], 0
push 0
push 2
lea eax, [ebp - 0xa8]
push str.RegisterSupportErrMessage
push eax
call fcn.0041f4f0
add esp, 0x10
push eax
mov ecx, 0x619614
mov byte [ebp - 4], 0x27
call sub.MFC42.DLL_CString::operator_3
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xf
call sub.MFC42.DLL_CString::CString
mov edi, dword [ebp - 0x70]
inc esi
mov dword [ebp - 0x48], 0x3f5
mov dword [ebp - 0x2c], esi
jmp 0x48766f