Function at 0x4cb9a0
Capabilities:
Authenticate hmac
Copy file
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4f87b6
mov eax, dword fs:[0]
push eax
mov eax, 0x12bc
call fcn.004e03c0
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0x12b8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x12d0]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x12e4]
mov esi, dword [esp + 0x12e0]
xor edi, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x58], ecx
mov dword [ecx + 0x74], 1
lea ecx, [esp + 0x70]
mov dword [esp + 0x6c], ebx
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov dword [esp + 0x12d8], edi
cmp dword [0x103a97c], edi
je 0x4cba2a
push str.SetConfig_start
push 8
call fcn.0043d500
add esp, 8
push 0x16b00
push edi
push 0x1059a58
call sub.MSVCR90.dll_memset
add esp, 0xc
lea ecx, [esp + 0x68]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x12d8], 1
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x12d8], 2
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x12d8], 3
push 0x16b00
push 0x1042d58
push 0x1059a58
call sub.MSVCR90.dll_memcpy
mov eax, dword [0x104311c]
and eax, 4
add esp, 0xc
cmp dword [ebx + 8], 0x31
mov dword [esp + 0x78], eax
jg 0x4cbaa1
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xc4
mov eax, dword [eax]
push eax
call fcn.004d8d70
push eax
push str.tc_TCD
push str.SOFTWARETrojanCutTC_Env_tc_CLIENT
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], eax
mov dword [0x1043044], eax
call fcn.00491ff0
mov ebp, dword [esp + 0x2c]
add esp, 0x14
and ebp, 4
je 0x4cbaf9
cmp dword [ebx + 8], 0x47
jg 0x4cbae6
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x11c
push eax
lea ecx, [esp + 0x64]
call dword [sym.imp.mfc90.dll_Ordinal_817]
mov eax, dword [esp + 0x60]
mov eax, dword [eax - 0xc]
cmp eax, edi
jle 0x4cc1ba
cmp eax, 0x400
jae 0x4cc1ba
push 0x1000
lea ecx, [esp + 0x2d0]
push ecx
push str.tc_DDX_Server
push str.SOFTWARETrojanCutTC_Env_tc_COMMUNICATION
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491b30
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4cbb44
mov byte [esp + 0x2cc], 0
lea edx, [esp + 0x2cc]
push edx
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12d8], 4
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x12d8], 5
lea ecx, [esp + 0x98]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x12d8], 6
lea ecx, [esp + 0x40]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x12d8], 7
mov ecx, dword [esp + 0x60]
mov eax, dword [ecx - 0xc]
cmp eax, edi
jle 0x4cbbf2
push edi
push ecx
lea edx, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x12e0], 8
lea eax, [esp + 0xa0]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x4ff790
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12e8], 9
mov byte [esp + 0x12e8], 7
call fcn.004d90e0
add esp, 0x10
mov ecx, dword [esp + 0x20]
cmp dword [ecx - 0xc], edi
jle 0x4cbc45
push edi
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x12e0], 0xa
lea eax, [esp + 0x48]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x4ff790
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12e8], 0xb
mov byte [esp + 0x12e8], 7
call fcn.004d90e0
add esp, 0x10
push str.255.255.255.255
lea ecx, [esp + 0x58]
xor bl, bl
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12d8], 0xc
cmp esi, edi
je 0x4cbc76
lea ecx, [esp + 0xc8]
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, esi
call sub.mfc90.dll_Ordinal_3391
mov ecx, dword [esp + 0x48]
xor esi, esi
cmp ecx, edi
jle 0x4cbd29
cmp esi, 0x1e
jge 0x4cbd29
test esi, esi
jl 0x4cba9c
cmp esi, ecx
jge 0x4cba9c
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x54]
push 0
lea ecx, [eax + esi*4]
push edx
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
je 0x4cbd1c
mov eax, dword [esp + 0xa0]
xor edi, edi
test eax, eax
jle 0x4cbd0d
cmp edi, 0x1e
jge 0x4cbd0d
test edi, edi
jl 0x4cba9c
cmp edi, eax
jge 0x4cba9c
cmp esi, dword [esp + 0x48]
mov eax, dword [esp + 0x9c]
mov eax, dword [eax + edi*4]
jge 0x4cba9c
mov ecx, dword [esp + 0x44]
push 0
lea ecx, [ecx + esi*4]
push eax
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
jne 0x4cbd1c
mov eax, dword [esp + 0xa0]
inc edi
cmp edi, eax
jl 0x4cbcc3
push 1
push esi
lea ecx, [esp + 0x48]
call sub.mfc90.dll_Ordinal_5878
dec esi
mov bl, 1
mov ecx, dword [esp + 0x48]
inc esi
cmp esi, ecx
jl 0x4cbc84
xor edi, edi
cmp dword [esp + 0xa0], edi
jle 0x4cbe3e
jmp 0x4cbd44
mov ecx, dword [esp + 0x48]
cmp edi, 0x1e
jge 0x4cbe3e
xor esi, esi
test ecx, ecx
jle 0x4cbda9
cmp esi, 0x1e
jge 0x4cbda9
test edi, edi
jl 0x4cba9c
cmp edi, dword [esp + 0xa0]
jge 0x4cba9c
mov edx, dword [esp + 0x9c]
mov eax, dword [edx + edi*4]
test esi, esi
jl 0x4cba9c
cmp esi, ecx
jge 0x4cba9c
mov ecx, dword [esp + 0x44]
push 0
lea ecx, [ecx + esi*4]
push eax
call dword [sym.imp.mfc90.dll_Ordinal_2481]
cmp eax, 0xffffffff
jne 0x4cbe30
mov ecx, dword [esp + 0x48]
inc esi
cmp esi, ecx
jl 0x4cbd53
test edi, edi
jl 0x4cba9c
cmp edi, dword [esp + 0xa0]
jge 0x4cba9c
mov edx, dword [esp + 0x9c]
lea eax, [edx + edi*4]
push 0x5028fc
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00402a60
mov byte [esp + 0x12e4], 0xd
lea ecx, [esp + 0x60]
push ecx
push eax
lea edx, [esp + 0x3c]
push edx
call fcn.004029d0
add esp, 0x18
mov byte [esp + 0x12d8], 0xe
push eax
mov eax, dword [esp + 0x4c]
push eax
lea ecx, [esp + 0x48]
call sub.mfc90.dll_Ordinal_6153
mov byte [esp + 0x12d8], 0xd
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x12d8], 0xc
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov bl, 1
inc edi
cmp edi, dword [esp + 0xa0]
jl 0x4cbd40
test bl, bl
je 0x4cc152
push 0x5116d8
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12d8], 0xf
mov eax, dword [esp + 0x48]
xor esi, esi
lea ebx, [esi + 1]
test eax, eax
jle 0x4cbee9
lea ebx, [ebx]
cmp esi, 0x1e
jge 0x4cbee9
test esi, esi
jne 0x4cbe92
test eax, eax
jle 0x4cba9c
mov ecx, dword [esp + 0x44]
push ecx
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_941]
jmp 0x4cbedf
jl 0x4cba9c
cmp esi, eax
jge 0x4cba9c
mov edx, dword [esp + 0x44]
lea eax, [edx + esi*4]
push eax
lea eax, [esp + 0x2c]
push 0x4ff790
push eax
call fcn.00410070
add esp, 0xc
mov byte [esp + 0x12d8], 0x10
push eax
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x12d8], 0xf
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [esp + 0x48]
add esi, ebx
cmp esi, eax
jl 0x4cbe70
mov eax, dword [esp + 0x24]
mov edx, 0x10db4e8
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, ebx
test cl, cl
jne 0x4cbef4
push 0x10db4e8
push str.tc_DDX_Server
push str.SOFTWARETrojanCutTC_Env_tc_COMMUNICATION
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491e90
mov eax, 0x10db4e8
add esp, 0x10
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbf23
sub eax, edx
je 0x4cc140
mov eax, 0x10db4e8
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cbf40
sub eax, edx
cmp eax, 0x400
jae 0x4cc140
lea ecx, [esp + 0xb4]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x12d8], 0x11
lea ecx, [esp + 0x7c]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x12d8], 0x12
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x12d8], 0x13
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x7c], esp
push 0x10db4e8
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12e0], 0x14
lea ecx, [esp + 0xbc]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x74], esp
push 0x4ff790
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12e8], 0x15
mov byte [esp + 0x12e8], 0x13
call fcn.004d90e0
add esp, 0x10
push 0xffffffffffffffff
push 0
mov ecx, 0x10707c0
call sub.mfc90.dll_Ordinal_6494
push 0xffffffffffffffff
push 0
mov ecx, 0x10707ac
call sub.mfc90.dll_Ordinal_6494
mov eax, dword [esp + 0xbc]
xor esi, esi
test eax, eax
jle 0x4cc109
lea edi, [esi + 2]
lea esp, [esp]
cmp esi, 0x1e
jge 0x4cc109
test esi, esi
jl 0x4cba9c
cmp esi, eax
jge 0x4cba9c
mov edx, dword [esp + 0xb8]
lea eax, [edx + esi*4]
push eax
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x84]
call sub.mfc90.dll_Ordinal_6494
push 0
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x6c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x12e0], 0x16
lea ecx, [esp + 0x84]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x84], esp
push 0x5028fc
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12e8], 0x17
mov byte [esp + 0x12e8], 0x13
call fcn.004d90e0
add esp, 0x10
cmp dword [esp + 0x84], edi
jne 0x4cc0f8
mov eax, dword [esp + 0x80]
mov edx, dword [eax]
cmp dword [edx - 0xc], ebx
jle 0x4cc0db
push eax
mov eax, dword [0x10707c8]
push eax
mov ecx, 0x10707c0
call sub.mfc90.dll_Ordinal_6153
cmp dword [esp + 0x84], ebx
jle 0x4cba9c
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 4]
add eax, 4
cmp dword [ecx - 0xc], ebx
jle 0x4cc0f8
mov edx, dword [0x10707b4]
push eax
push edx
mov ecx, 0x10707ac
call sub.mfc90.dll_Ordinal_6153
mov eax, dword [esp + 0xbc]
add esi, ebx
cmp esi, eax
jl 0x4cc010
mov byte [esp + 0x12d8], 0x12
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x12d8], 0x11
lea ecx, [esp + 0x7c]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x12d8], 0xf
lea ecx, [esp + 0xb4]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x12d8], 0xc
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x58]
call fcn.00495a50
mov byte [esp + 0x12d8], 7
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x12d8], 6
lea ecx, [esp + 0x40]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x12d8], 5
lea ecx, [esp + 0x98]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x12d8], 4
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x12d8], 3
lea ecx, [esp + 0x5c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ebx, dword [esp + 0x6c]
test byte [esp + 0x18], 3
je 0x4cc1cb
mov dword [0x10da2bc], 1
test ebp, ebp
je 0x4cc1dc
test byte [0x1043044], 3
jne 0x4cf717
cmp dword [ebx + 8], 9
jg 0x4cc1e7
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x24
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x10430e4], eax
jne 0x4cc238
cmp dword [ebx + 8], 2
jg 0x4cc211
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 8
mov eax, dword [eax]
push eax
call fcn.004d8d70
movzx ecx, al
shr eax, 8
add esp, 4
and eax, 0xff
mov dword [0x10430d8], ecx
mov dword [0x10430d4], eax
cmp dword [ebx + 8], 3
jg 0x4cc243
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xc
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042fe4], eax
cmp dword [ebx + 8], 4
jg 0x4cc264
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x10
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430dc], eax
cmp dword [ebx + 8], 8
jg 0x4cc285
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x20
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov edx, eax
and edx, 1
and eax, 2
add esp, 4
mov dword [0x104300c], edx
mov dword [0x1059820], eax
cmp dword [ebx + 8], 0xa
jg 0x4cc2b4
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x28
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov ebp, dword [sym.imp.MSVCR90.dll_atoi]
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x1043010], eax
je 0x4cc2f5
mov esi, 1
mov dword [0x1042fe8], esi
mov dword [0x1042fec], esi
mov dword [0x1042ff0], esi
jmp 0x4cc954
cmp dword [ebx + 8], 5
jg 0x4cc300
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x14
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov esi, 6
add esp, 4
mov dword [0x1042fe8], eax
cmp dword [ebx + 8], esi
jg 0x4cc325
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x18
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042fec], eax
cmp dword [ebx + 8], 7
jg 0x4cc346
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x1c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042ff0], eax
cmp dword [ebx + 8], 0xb
jg 0x4cc367
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x2c
push eax
lea ecx, [esp + 0x6c]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x200
push 0
push 0x104a520
call sub.MSVCR90.dll_memset
push 0x32
push 0
push 0x104a720
call sub.MSVCR90.dll_memset
push 0x64
push 0
push 0x1056362
call sub.MSVCR90.dll_memset
push 0x200
push 0
push 0x10563c6
call sub.MSVCR90.dll_memset
push 0x200
push 0
push 0x10565c6
call sub.MSVCR90.dll_memset
push 0x200
push 0
push 0x10567c6
call sub.MSVCR90.dll_memset
add esp, 0x48
push 0x1400
push 0
push 0x1056c1e
call sub.MSVCR90.dll_memset
push 0x200
push 0
push 0x105801e
call sub.MSVCR90.dll_memset
push 0x1400
push 0
push 0x105821e
call sub.MSVCR90.dll_memset
add esp, 0x24
lea ecx, [esp + 0x40]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x12d8], 0x18
mov eax, dword [esp + 0x68]
cmp dword [eax - 0xc], esi
jle 0x4cc7f3
push 0x508ac0
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x70]
push edx
call fcn.00492540
mov edi, dword [esp + 0x54]
add esp, 0xc
cmp edi, 3
jle 0x4cc52a
test edi, edi
jg 0x4cc45c
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp dword [esp + 0x48], 1
mov dword [0x1043028], eax
jg 0x4cc47c
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx + 4]
push eax
call fcn.004d8d70
mov edi, dword [esp + 0x4c]
add esp, 4
cmp edi, 2
mov dword [0x104311c], eax
jg 0x4cc49f
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esp + 0x44]
mov edx, dword [eax + 8]
cmp dword [edx - 0xc], 0x200
jae 0x4cc4c0
mov esi, 0x104a520
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc4b4
jmp 0x4cc4e5
mov eax, edx
push 0x1ff
push eax
push 0x104a520
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
add esp, 0xc
mov byte [0x104a71f], 0
cmp edi, 3
jg 0x4cc4ef
call sub.mfc90.dll_Ordinal_1252
mov ecx, dword [eax + 0xc]
cmp dword [ecx - 0xc], 0x32
jae 0x4cc50c
mov edx, ecx
mov esi, 0x104a720
nop
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc500
jmp 0x4cc52e
mov eax, ecx
push 0x31
push eax
push 0x104a720
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
add esp, 0xc
mov byte [0x104a751], 0
mov eax, dword [esp + 0x44]
cmp edi, 4
jle 0x4cc588
mov edx, dword [eax + 0x10]
cmp dword [edx - 0xc], 0x64
jae 0x4cc55c
cmp edi, 4
jg 0x4cc546
call sub.mfc90.dll_Ordinal_1252
mov esi, 0x1056362
jmp 0x4cc550
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc550
jmp 0x4cc588
cmp edi, 4
jg 0x4cc566
call sub.mfc90.dll_Ordinal_1252
mov eax, edx
push 0x63
push eax
push 0x1056362
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
add esp, 0xc
mov byte [0x10563c5], 0
cmp edi, 5
jle 0x4cc5eb
mov ecx, dword [eax + 0x14]
cmp dword [ecx - 0xc], 0x200
jae 0x4cc5bc
cmp edi, 5
jg 0x4cc5a3
call sub.mfc90.dll_Ordinal_1252
mov edx, ecx
mov esi, 0x10563c6
lea ebx, [ebx]
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc5b0
jmp 0x4cc5eb
cmp edi, 5
jg 0x4cc5c6
call sub.mfc90.dll_Ordinal_1252
mov eax, ecx
push 0x1ff
push eax
push 0x10563c6
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
add esp, 0xc
mov byte [0x10565c5], 0
cmp edi, 6
jle 0x4cc64b
mov edx, dword [eax + 0x18]
cmp dword [edx - 0xc], 0x200
jae 0x4cc61c
cmp edi, 6
jg 0x4cc606
call sub.mfc90.dll_Ordinal_1252
mov esi, 0x10565c6
jmp 0x4cc610
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc610
jmp 0x4cc64b
cmp edi, 6
jg 0x4cc626
call sub.mfc90.dll_Ordinal_1252
mov eax, edx
push 0x1ff
push eax
push 0x10565c6
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
add esp, 0xc
mov byte [0x10567c5], 0
cmp edi, 7
jle 0x4cc6ab
mov ecx, dword [eax + 0x1c]
cmp dword [ecx - 0xc], 0x200
jae 0x4cc67c
cmp edi, 7
jg 0x4cc666
call sub.mfc90.dll_Ordinal_1252
mov edx, ecx
mov esi, 0x10567c6
lea ecx, [ecx]
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc670
jmp 0x4cc6ab
cmp edi, 7
jg 0x4cc686
call sub.mfc90.dll_Ordinal_1252
mov eax, ecx
push 0x1ff
push eax
push 0x10567c6
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
add esp, 0xc
mov byte [0x10569c5], 0
cmp edi, 8
jle 0x4cc6c6
mov eax, dword [eax + 0x20]
push eax
call ebp
mov edi, dword [esp + 0x4c]
mov dword [0x10430b8], eax
mov eax, dword [esp + 0x48]
add esp, 4
cmp edi, 9
jle 0x4cc6e1
mov eax, dword [eax + 0x24]
push eax
call ebp
mov edi, dword [esp + 0x4c]
mov dword [0x10430bc], eax
mov eax, dword [esp + 0x48]
add esp, 4
cmp edi, 0xa
jle 0x4cc73c
mov edx, dword [eax + 0x28]
cmp dword [edx - 0xc], 0x1400
jae 0x4cc70d
cmp edi, 0xa
jg 0x4cc6fc
call sub.mfc90.dll_Ordinal_1252
mov esi, 0x1056c1e
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc701
jmp 0x4cc73c
cmp edi, 0xa
jg 0x4cc717
call sub.mfc90.dll_Ordinal_1252
mov eax, edx
push 0x13ff
push eax
push 0x1056c1e
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
add esp, 0xc
mov byte [0x105801d], 0
cmp edi, 0xb
jle 0x4cc79b
mov ecx, dword [eax + 0x2c]
cmp dword [ecx - 0xc], 0x200
jae 0x4cc76c
cmp edi, 0xb
jg 0x4cc757
call sub.mfc90.dll_Ordinal_1252
mov edx, ecx
mov esi, 0x105801e
mov edi, edi
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
test cl, cl
jne 0x4cc760
jmp 0x4cc79b
cmp edi, 0xb
jg 0x4cc776
call sub.mfc90.dll_Ordinal_1252
mov eax, ecx
push 0x1ff
push eax
push 0x105801e
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
add esp, 0xc
mov byte [0x105821d], 0
cmp edi, 0xc
jle 0x4cc7f3
mov edx, dword [eax + 0x30]
cmp dword [edx - 0xc], 0x1400
jae 0x4cc7cc
cmp edi, 0xc
jg 0x4cc7b6
call sub.mfc90.dll_Ordinal_1252
mov eax, edx
mov edx, 0x105821e
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4cc7c0
jmp 0x4cc7f3
cmp edi, 0xc
jg 0x4cc7d6
call sub.mfc90.dll_Ordinal_1252
mov eax, edx
push 0x13ff
push eax
push 0x105821e
call dword [sym.imp.MSVCR90.dll_strncpy]
add esp, 0xc
mov byte [0x105961d], 0
cmp dword [ebx + 8], 0xc
jg 0x4cc7fe
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x30
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x1000
push 0
push 0x1049520
call sub.MSVCR90.dll_memset
push 0x1000
push 0
push 0x104a752
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x2c]
add esp, 0x18
cmp dword [eax - 0xc], 3
jle 0x4cc926
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x48]
call sub.mfc90.dll_Ordinal_6494
push 0x508ac0
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.00492540
mov edi, dword [esp + 0x54]
add esp, 0xc
cmp edi, 1
jle 0x4cc907
test edi, edi
jg 0x4cc87c
call sub.mfc90.dll_Ordinal_1252
mov esi, dword [esp + 0x44]
mov ecx, dword [esi]
mov eax, dword [ecx - 0xc]
cmp eax, 0x1000
jae 0x4cc89d
mov edx, 0x1049520
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4cc891
jmp 0x4cc8c0
push 0xfff
push ecx
push 0x1049520
call dword [sym.imp.MSVCR90.dll_strncpy]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
add esp, 0xc
mov byte [0x104a51f], 0
cmp edi, 1
jg 0x4cc8ca
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [esi + 4]
cmp dword [eax - 0xc], 0x1000
jae 0x4cc8ec
mov ecx, eax
mov edx, 0x104a752
lea ecx, [ecx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4cc8e0
jmp 0x4cc907
push 0xfff
push eax
push 0x104a752
call dword [sym.imp.MSVCR90.dll_strncpy]
add esp, 0xc
mov byte [0x104b751], 0
cmp dword [0x103a97c], 0x77
jne 0x4cc93e
mov ecx, dword [esp + 0x14]
push ecx
push str.tc_ExceptDLLs__tc_ForceCom__s_
push 8
call fcn.0043d500
add esp, 0xc
jmp 0x4cc93e
cmp dword [0x103a97c], 0x77
jne 0x4cc93e
push str.tc_ExceptDLLs__tc_ForceCom___3
push 8
call fcn.0043d500
add esp, 8
mov byte [esp + 0x12d8], 3
lea ecx, [esp + 0x40]
call sub.mfc90.dll_Ordinal_781
mov esi, 1
cmp dword [ebx + 8], 0xd
jg 0x4cc95f
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x34
mov eax, dword [eax]
push eax
call fcn.004d8d70
movzx edx, al
mov dword [0x1043110], eax
shr eax, 8
and eax, 0xffff
add esp, 4
cmp dword [0x103a97c], 0
mov dword [0x1043114], edx
mov dword [0x1043118], eax
je 0x4cc9a4
push eax
push str.SetConfig_CID_:__d
push 8
call fcn.0043d500
add esp, 0xc
cmp byte [0x103b0fc], 0
jne 0x4cc9cb
cmp dword [ebx + 8], 0xe
jg 0x4cc9b8
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x38
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
jmp 0x4cc9fa
cmp dword [ebx + 8], 0xe
jg 0x4cc9d6
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x38
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov ecx, dword [0x1059dcc]
and eax, 0xf0f8003f
and ecx, 0xf07ffc0
add esp, 4
or eax, ecx
mov dword [0x10430cc], eax
cmp dword [ebx + 8], 0xf
jg 0x4cca0a
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x3c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043020], eax
cmp dword [ebx + 8], 0x10
jg 0x4cca2b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x40
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x104310c], eax
cmp dword [ebx + 8], 0x11
jg 0x4cca4c
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x44
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042d74], eax
cmp dword [ebx + 8], 0x12
jg 0x4cca6d
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x48
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042d78], eax
mov dword [0x1042d58], esi
cmp dword [ebx + 8], 0x13
jg 0x4cca94
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x4c
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104ffd2
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4ccaf5
cmp ecx, 0x64
jae 0x4ccadd
mov edx, 0x104ffd2
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, esi
test cl, cl
jne 0x4ccad0
jmp 0x4ccaf5
push 0x63
push eax
push 0x104ffd2
call dword [sym.imp.MSVCR90.dll_strncpy]
add esp, 0xc
mov byte [0x1050035], 0
mov eax, dword [0x1042d7c]
mov ecx, eax
and ecx, 0x1000
mov dword [esp + 0x18], ecx
mov ecx, eax
and ecx, 0x8000
and eax, 0x2000
cmp dword [ebx + 8], 0x14
mov dword [esp + 0x20], ecx
mov dword [esp + 0x5c], eax
jg 0x4ccb26
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x50
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov edi, eax
mov ebp, eax
mov esi, eax
add esp, 4
and edi, 0x1000
and ebp, 0x8000
and esi, 0x2000
cmp dword [0x103a97c], 0
mov dword [0x1042d7c], eax
je 0x4ccb77
mov edx, dword [esp + 0x18]
push edi
push edx
push str.rdpclip__0x_08x__0x_08x_
push 8
call fcn.0043d500
mov eax, dword [0x1042d7c]
add esp, 0x10
cmp dword [esp + 0x5c], esi
je 0x4ccc44
test eax, 0x2000
jne 0x4ccc44
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x12d8], 0x19
push 0x10da2e0
lea eax, [esp + 0x28]
push str._sLog_fw.fw
push eax
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0xc
push 0x4ff418
push 0x502d68
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
mov ecx, dword [esp + 0x24]
push 0
push 1
push ecx
call fcn.0046aae0
add esp, 0xc
test eax, eax
jne 0x4ccc32
push eax
push 1
push str.C:_fw2.fw
call fcn.0046aae0
add esp, 0xc
push 0
test eax, eax
je 0x4ccc01
mov edx, dword [esp + 0x28]
push edx
push str.C:_fw2.fw
jmp 0x4ccc2c
push 1
push str.C:_fw1.fw
call fcn.0046aae0
add esp, 0xc
push 0
test eax, eax
je 0x4ccc22
mov eax, dword [esp + 0x28]
push eax
push str.C:_fw1.fw
jmp 0x4ccc2c
mov ecx, dword [esp + 0x28]
push ecx
push str.C:_fw.fw
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov byte [esp + 0x12d8], 3
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp dword [esp + 0x20], ebp
je 0x4ccc69
xor edx, edx
test ebp, ebp
setne dl
push edx
push str.UILockdown
push str.SOFTWAREPoliciesMicrosoftWindows_Defender_Security_CenterFirewall_and_network_protection
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491ff0
add esp, 0x10
cmp dword [esp + 0x18], edi
je 0x4ccda6
lea ecx, [esp + 0x40]
call fcn.0044da80
mov byte [esp + 0x12d8], 0x1a
push ecx
mov ecx, esp
mov dword [esp + 0x68], esp
push str.rdpclip.exe
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12dc], 0x1b
mov byte [esp + 0x12dc], 0x1a
lea ecx, [esp + 0x44]
call fcn.00451610
cmp dword [0x103a97c], 0
mov edi, eax
je 0x4cccca
push edi
push str.rdpclip_pid__d_
push 8
call fcn.0043d500
add esp, 0xc
test edi, edi
je 0x4ccd95
push edi
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0x1ff
mov esi, eax
lea eax, [esp + 0xd1]
push 0
push eax
mov byte [esp + 0xd8], 0
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x200
lea ecx, [esp + 0xd0]
push ecx
push 0
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0xcc]
push edx
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12d8], 0x1c
cmp dword [0x103a97c], 0
je 0x4ccd54
mov eax, dword [esp + 0x20]
push eax
push str.rdpclip_path__s_
push 8
call fcn.0043d500
add esp, 0xc
push edi
lea ecx, [esp + 0x44]
call fcn.0044dac0
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0x20]
push 0
push 0
push 0x5116d8
push ecx
push str.open
push 0
call fcn.00464ac0
add esp, 0x18
mov byte [esp + 0x12d8], 0x1a
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x12d8], 3
lea ecx, [esp + 0x40]
call fcn.0044dab0
cmp dword [ebx + 8], 0x15
jg 0x4ccdb1
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x54
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042d5c], eax
cmp dword [ebx + 8], 0x16
jg 0x4ccdd2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x58
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042d84], eax
cmp dword [ebx + 8], 0x17
jg 0x4ccdf3
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x5c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043014], eax
cmp dword [ebx + 8], 0x18
jg 0x4cce14
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x60
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x104303c], eax
cmp dword [ebx + 8], 0x19
jg 0x4cce35
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x64
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430e0], eax
cmp dword [ebx + 8], 0x1a
jg 0x4cce56
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x68
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043034], eax
cmp dword [ebx + 8], 0x1b
jg 0x4cce77
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x6c
push eax
mov ecx, 0x5dab80
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp dword [ebx + 8], 0x1d
jg 0x4cce94
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x74
push eax
mov ecx, 0x5dab9c
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp dword [ebx + 8], 0x1e
jg 0x4cceb1
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x78
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042d88], eax
cmp dword [ebx + 8], 0x1f
jg 0x4cced2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x7c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042ff8], eax
cmp dword [ebx + 8], 0x20
jg 0x4ccef3
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
sub eax, 0xffffff80
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042ffc], eax
cmp dword [ebx + 8], 0x21
jg 0x4ccf14
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x84
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x10430fc], eax
jne 0x4ccf5a
cmp dword [ebx + 8], 0x22
jg 0x4ccf40
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x88
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043108], eax
jmp 0x4ccf5f
mov eax, dword [0x1043108]
shr eax, 4
not eax
and eax, 1
push 1
push eax
call fcn.0046efe0
add esp, 8
cmp dword [ebx + 8], 0x23
jg 0x4ccf7d
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x8c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x1043038], eax
jne 0x4ccfbe
cmp dword [ebx + 8], 0x24
jg 0x4ccfa9
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x90
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
jmp 0x4ccfea
cmp dword [ebx + 8], 0x24
jg 0x4ccfc9
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x90
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov edx, dword [0x1059e04]
and eax, 0xffffffd7
and edx, 0x28
add esp, 4
or eax, edx
cmp byte [0x103b0fc], 0
mov dword [0x1043104], eax
je 0x4cd000
or eax, 8
mov dword [0x1043104], eax
cmp dword [ebx + 8], 0x25
jg 0x4cd00b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x94
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430e8], eax
cmp dword [ebx + 8], 0x26
jg 0x4cd02e
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x98
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430d0], eax
cmp dword [ebx + 8], 0x27
jg 0x4cd051
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0x9c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x10430ec], eax
jne 0x4cd092
cmp dword [ebx + 8], 0x28
jg 0x4cd07d
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xa0
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
jmp 0x4cd0be
cmp dword [ebx + 8], 0x28
jg 0x4cd09d
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xa0
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov ecx, dword [0x1059d4c]
and eax, 0xfffffffd
and ecx, 2
add esp, 4
or eax, ecx
mov dword [0x104304c], eax
cmp dword [ebx + 8], 0x29
jg 0x4cd0ce
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xa4
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x800
push 0
push 0x1043120
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cd137
cmp ecx, 0x800
jae 0x4cd11c
mov edx, 0x1043120
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cd110
jmp 0x4cd137
push 0x7ff
push eax
push 0x1043120
call dword [sym.imp.MSVCR90.dll_strncpy]
add esp, 0xc
mov byte [0x104391f], 0
cmp dword [ebx + 8], 0x2a
jg 0x4cd142
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xa8
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x600
push 0
push 0x1043920
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cd1ab
cmp ecx, 0x600
jae 0x4cd190
mov edx, 0x1043920
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cd184
jmp 0x4cd1ab
push 0x5ff
push eax
push 0x1043920
call dword [sym.imp.MSVCR90.dll_strncpy]
add esp, 0xc
mov byte [0x1043f1f], 0
cmp dword [ebx + 8], 0x2b
jg 0x4cd1b6
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xac
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043000], eax
cmp dword [ebx + 8], 0x2c
jg 0x4cd1d9
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xb0
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043004], eax
cmp dword [ebx + 8], 0x2d
jg 0x4cd1fc
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xb4
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x1043008], eax
jne 0x4cd240
cmp dword [ebx + 8], 0x2e
jg 0x4cd228
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xb8
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043040], eax
cmp dword [ebx + 8], 0x2f
jg 0x4cd24b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [ebx + 4]
add eax, 0xbc
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042d64], eax
cmp dword [ebx + 8], 0x30
jg 0x4cd26e
call sub.mfc90.dll_Ordinal_1252
mov edi, dword [esp + 0x6c]
mov eax, dword [edi + 4]
add eax, 0xc0
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov ebx, eax
mov edx, ebx
xor edx, dword [0x10430f4]
add esp, 4
test dl, 0x60
je 0x4cd2b2
test bl, 0x60
jne 0x4cd2b2
cmp dword [0x53f200], 0x600
jge 0x4cd2b2
push str.lanmanworkstation
call fcn.0043ec30
add esp, 4
mov dword [0x10430f4], ebx
cmp dword [edi + 8], 0x30
jg 0x4cd2c3
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xc0
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x10430f4], eax
jne 0x4cd309
cmp dword [edi + 8], 0x32
jg 0x4cd2ef
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xc8
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430f8], eax
jmp 0x4cd33e
cmp dword [edi + 8], 0x32
jg 0x4cd314
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xc8
mov eax, dword [eax]
push eax
call fcn.004d8d70
mov ecx, eax
mov eax, dword [0x1059df8]
xor ecx, eax
and ecx, 0x7fffffff
add esp, 4
xor ecx, eax
mov dword [0x10430f8], ecx
cmp dword [edi + 8], 0x33
jg 0x4cd349
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xcc
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x32
push 0
push 0x1042fb2
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 6
jle 0x4cd38f
cmp ecx, 0x32
jae 0x4cd38f
mov edx, 0x1042fb2
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4cd385
cmp byte [0x1042fb2], 0
je 0x4cd474
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x12d8], 0x1d
push 0x1042fb2
lea ecx, [esp + 0x1c]
mov dword [esp + 0x24], 0x50
mov dword [esp + 0x60], 0
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x12d8], 0x1e
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x24]
push edx
call fcn.00468da0
add esp, 0x10
mov byte [esp + 0x12d8], 0x1d
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp dword [esp + 0x20], 0
jle 0x4cd462
mov eax, dword [esp + 0x54]
cmp dword [eax - 0xc], 6
jle 0x4cd462
mov ecx, dword [esp + 0x5c]
push ecx
push str.TC_ServerType
push str.SOFTWARETrueCut_tc_INSTALL
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491ff0
mov edx, dword [esp + 0x30]
push edx
push str.TC_TCPort
push str.SOFTWARETrueCut_tc_INSTALL
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491ff0
mov eax, dword [esp + 0x74]
push eax
push str.TC_TCServer
push str.SOFTWARETrueCut_tc_INSTALL
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491e90
add esp, 0x30
mov byte [esp + 0x12d8], 3
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90.dll_Ordinal_601]
cmp dword [edi + 8], 0x34
jg 0x4cd47f
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xd0
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043050], eax
cmp dword [edi + 8], 0x35
jg 0x4cd4a2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xd4
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043054], eax
cmp dword [edi + 8], 0x36
jg 0x4cd4c5
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xd8
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043058], eax
cmp dword [edi + 8], 0x37
jg 0x4cd4e8
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xdc
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x104305c], eax
cmp dword [edi + 8], 0x38
jg 0x4cd50b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xe0
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043060], eax
cmp dword [edi + 8], 0x39
jg 0x4cd52e
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xe4
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043064], eax
cmp dword [edi + 8], 0x3a
jg 0x4cd551
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xe8
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043068], eax
cmp dword [edi + 8], 0x3b
jg 0x4cd574
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xec
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x104306c], eax
cmp dword [edi + 8], 0x3c
jg 0x4cd597
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xf0
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x1043070], eax
jne 0x4cd5fe
cmp dword [edi + 8], 0x3d
jg 0x4cd5c3
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xf4
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043078], eax
cmp dword [edi + 8], 0x3e
jg 0x4cd5e6
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xf8
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x104307c], eax
cmp dword [edi + 8], 0x3f
jg 0x4cd609
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0xfc
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430c8], eax
cmp dword [edi + 8], 0x40
jg 0x4cd62c
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x100
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043080], eax
cmp dword [edi + 8], 0x41
jg 0x4cd64f
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x104
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043084], eax
cmp dword [edi + 8], 0x42
jg 0x4cd672
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x108
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x10430f0], eax
jne 0x4cd73d
cmp dword [edi + 8], 0x43
jg 0x4cd6a2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x10c
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x5000
push 0
push 0x1044520
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cd72d
cmp ecx, 0x5000
jae 0x4cd6f6
mov edx, 0x1044520
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cd6e4
mov esi, dword [sym.imp.MSVCR90.dll_strncpy]
jmp 0x4cd713
mov esi, dword [sym.imp.MSVCR90.dll_strncpy]
push 0x4fff
push eax
push 0x1044520
call esi
add esp, 0xc
mov byte [0x104951f], 0
cmp dword [0x103a97c], 0x77
jne 0x4cd75b
push str.theApp.m_bEnableConfig__0_tc_ExceptProcess_tmp2.GetLength_____3
push 8
call fcn.0043d500
add esp, 8
jmp 0x4cd75b
cmp dword [0x103a97c], 0x77
jne 0x4cd755
push 0x51f3d0
jmp 0x4cd74b
cmp dword [0x103a97c], 0x77
jne 0x4cd755
push str.theApp.m_bEnableConfig___0_tc_ExceptProcess_
push 8
call fcn.0043d500
add esp, 8
mov esi, dword [sym.imp.MSVCR90.dll_strncpy]
cmp dword [edi + 8], 0x44
jg 0x4cd766
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x110
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1042d68], eax
cmp dword [edi + 8], 0x46
jg 0x4cd789
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x118
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x400
push 0
push 0x1044120
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cd7f3
cmp ecx, 0x400
jae 0x4cd7dc
mov edx, 0x1044120
sub edx, eax
jmp 0x4cd7d0
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cd7d0
jmp 0x4cd7f3
push 0x3ff
push eax
push 0x1044120
call esi
add esp, 0xc
mov byte [0x104451f], 0
cmp dword [edi + 8], 0x48
jg 0x4cd7fe
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x120
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x104308c], eax
cmp dword [edi + 8], 0x49
jg 0x4cd821
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x124
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043090], eax
cmp dword [edi + 8], 0x4a
jg 0x4cd844
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x128
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043094], eax
cmp dword [edi + 8], 0x4b
jg 0x4cd867
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x12c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x1043098], eax
cmp dword [edi + 8], 0x4c
jg 0x4cd88a
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x130
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430a0], eax
cmp dword [edi + 8], 0x4d
jg 0x4cd8ad
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x134
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x104309c], eax
cmp dword [edi + 8], 0x4e
jg 0x4cd8d0
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x138
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104b752
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 2
jle 0x4cd930
cmp ecx, 0x64
jae 0x4cd91c
mov edx, 0x104b752
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cd910
jmp 0x4cd930
push 0x63
push eax
push 0x104b752
call esi
add esp, 0xc
mov byte [0x104b7b5], 0
cmp dword [edi + 8], 0x4f
jg 0x4cd93b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x13c
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104b7b6
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 2
jle 0x4cd997
cmp ecx, 0x64
jae 0x4cd983
mov edx, 0x104b7b6
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cd977
jmp 0x4cd997
push 0x63
push eax
push 0x104b7b6
call esi
add esp, 0xc
mov byte [0x104b819], 0
cmp dword [edi + 8], 0x50
jg 0x4cd9a2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x140
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x1404
push 0
push 0x104b81a
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 2
jle 0x4cda07
cmp ecx, 0x1404
jae 0x4cd9f0
mov edx, 0x104b81a
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cd9e4
jmp 0x4cda07
push 0x1403
push eax
push 0x104b81a
call esi
add esp, 0xc
mov byte [0x104cc1d], 0
cmp dword [edi + 8], 0x51
jg 0x4cda12
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x144
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x200
push 0
push 0x104cc1e
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cda77
cmp ecx, 0x200
jae 0x4cda60
mov edx, 0x104cc1e
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cda54
jmp 0x4cda77
push 0x1ff
push eax
push 0x104cc1e
call esi
add esp, 0xc
mov byte [0x104ce1d], 0
cmp dword [edi + 8], 0x52
jg 0x4cda82
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x148
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x200
push 0
push 0x104ce1e
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cdae7
cmp ecx, 0x200
jae 0x4cdad0
mov edx, 0x104ce1e
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cdac4
jmp 0x4cdae7
push 0x1ff
push eax
push 0x104ce1e
call esi
add esp, 0xc
mov byte [0x104d01d], 0
cmp dword [edi + 8], 0x53
jg 0x4cdaf2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x14c
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104f8e6
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cdb50
cmp ecx, 0x64
jae 0x4cdb3c
mov edx, 0x104f8e6
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cdb30
jmp 0x4cdb50
push 0x63
push eax
push 0x104f8e6
call esi
add esp, 0xc
mov byte [0x104f949], 0
cmp dword [edi + 8], 0x54
jg 0x4cdb5b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x150
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104f94a
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cdbb7
cmp ecx, 0x64
jae 0x4cdba3
mov edx, 0x104f94a
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cdb97
jmp 0x4cdbb7
push 0x63
push eax
push 0x104f94a
call esi
add esp, 0xc
mov byte [0x104f9ad], 0
cmp dword [edi + 8], 0x55
jg 0x4cdbc2
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x154
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430a4], eax
cmp dword [edi + 8], 0x56
jg 0x4cdbe5
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x158
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104f9ae
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cdc41
cmp ecx, 0x64
jae 0x4cdc2d
mov edx, 0x104f9ae
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4cdc21
jmp 0x4cdc41
push 0x63
push eax
push 0x104f9ae
call esi
add esp, 0xc
mov byte [0x104fa11], 0
cmp dword [edi + 8], 0x57
jg 0x4cdc4c
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x15c
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x2800
push 0
push 0x104d01e
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cdcb3
cmp ecx, 0x2800
jae 0x4cdc9c
mov edx, 0x104d01e
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4cdc90
jmp 0x4cdcb3
push 0x27ff
push eax
push 0x104d01e
call esi
add esp, 0xc
mov byte [0x104f81d], 0
cmp dword [edi + 8], 0x58
jg 0x4cdcbe
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x160
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104f81e
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cdd20
cmp ecx, 0x64
jae 0x4cdd0c
mov edx, 0x104f81e
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4cdd00
jmp 0x4cdd20
push 0x63
push eax
push 0x104f81e
call esi
add esp, 0xc
mov byte [0x104f881], 0
cmp dword [edi + 8], 0x59
jg 0x4cdd2b
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x164
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x64
push 0
push 0x104f882
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
add esp, 0xc
cmp ecx, 3
jle 0x4cdd87
cmp ecx, 0x64
jae 0x4cdd73
mov edx, 0x104f882
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4cdd67
jmp 0x4cdd87
push 0x63
push eax
push 0x104f882
call esi
add esp, 0xc
mov byte [0x104f8e5], 0
cmp dword [edi + 8], 0x5a
jg 0x4cdd92
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x168
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
mov dword [0x10430a8], eax
cmp dword [edi + 8], 0x5b
jg 0x4cddb5
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x16c
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp dword [0x1042d88], 3
mov dword [0x10430ac], eax
jb 0x4cde2a
cmp dword [edi + 8], 0x5c
jg 0x4cdde1
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x170
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_817]
cmp byte [0x103b0fc], 0
jne 0x4cde2a
push 0x200
push 0
push 0x10510fe
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
mov edx, 0x10510fe
add esp, 0xc
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4cde20
cmp dword [edi + 8], 0x5d
jg 0x4cde35
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [edi + 4]
add eax, 0x174
mov eax, dword [eax]
push eax
call fcn.004d8d70
add esp, 4
cmp byte [0x103b0fc], 0
mov dword [0x1043100], eax
jne 0x4cde76
cmp dword [edi + 8], 0x5e
jg 0x4cde61
cmp dword [edi + 8], 0x5e
jg 0x4cde81
mov byte [esp + 0x12d8], 2
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x12d8], 1
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x12d8], 0
lea ecx, [esp + 0x68]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x12d8], 0xffffffff
lea ecx, [esp + 0x70]
call dword [sym.imp.mfc90.dll_Ordinal_601]
xor al, al
mov ecx, dword [esp + 0x12d0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x12b8]
xor ecx, esp
call fcn.004e0148
add esp, 0x12c8
ret 8