Function at 0x415eed
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov dword [ebp - 4], 0
push 8
call fcn.005039ad
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.005039ad
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x5f5e98
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
push 0x10
call fcn.005039ad
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov eax, 3
mov dword [ebx], eax
mov dword [ebp - 0x18], 0
push 8
call fcn.005039ad
add esp, 4
mov dword [ebp - 0x1c], eax
mov edi, eax
mov esi, 0x5f5e98
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
cmp dword [0x6eeb9c], 1
jne 0x415fab
mov eax, 0x5f5e98
jmp 0x41701e
call fcn.00417116
cmp dword [ebp + 0xc], 1
mov eax, 0
sete al
test eax, eax
je 0x415fce
mov eax, 0x5f7a14
jmp 0x415fd3
mov eax, 0x5f7a19
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x415fea
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
push 0
push 0
push VariantClear
push 0
push str.WinHttp.WinHttpRequest.5.1
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x50b2e0
call fcn.005039b3
add esp, 0x28
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x416033
mov eax, 0x5f5e98
jmp 0x41701e
cmp dword [ebp + 0x5c], 0xffffffff
je 0x4160c4
cmp dword [ebp + 0x5c], 1
jge 0x416053
mov dword [ebp + 0x5c], 0x32c8
jmp 0x416070
fild dword [ebp + 0x5c]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fmul qword [0x5f7a38]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.00401e78
mov dword [ebp + 0x5c], eax
push 0xa0000301
push 0
lea eax, [ebp + 0x5c]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x5c]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x5c]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x5c]
push eax
push VariantClear
push 0
push 0x5f7a40
push 0x10030
push 0
push dword [ebp - 8]
push 6
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x4c
push 0x5f5e2d
mov ebx, dword [ebp + 0x4c]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x416190
push 0xa0000004
push 0
push dword [ebp + 0x4c]
push 0x80000301
push 0
push 2
push VariantClear
push 0
push str.SetProxy
push 0x10030
push 0
push dword [ebp - 8]
push 4
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x34
push 0x5f5e2d
mov ebx, dword [ebp + 0x64]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x416190
cmp dword [ebp + 0x78], 0
jne 0x416149
mov dword [ebp + 0x74], 1
push 0xa0000301
push 0
lea eax, [ebp + 0x74]
push eax
push 0xa0000004
push 0
push dword [ebp + 0x6c]
push 0xa0000004
push 0
push dword [ebp + 0x64]
push VariantClear
push 0
push str.SetProxyCredentials
push 0x10030
push 0
push dword [ebp - 8]
push 5
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x40
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0xa0000004
push 0
push dword [ebp + 8]
push 0xa0000004
push 0
lea eax, [ebp - 4]
push eax
push VariantClear
push 0
push str.Open
push 0x10030
push 0
push dword [ebp - 8]
push 5
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x40
cmp dword [ebp + 0x3c], 0
jne 0x4161f1
cmp dword [ebp + 0x40], 0
je 0x4161f1
xor eax, eax
jmp 0x4161f6
mov eax, 1
test eax, eax
je 0x41623e
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push 6
push VariantClear
push 0
push str.Option
push 0x10030
push 0
push dword [ebp - 8]
push 4
mov ebx, 0x50b1e0
call fcn.005039b3
add esp, 0x34
push 0x80000301
push 0
push 0x3300
push 0x80000301
push 0
push 4
push VariantClear
push 0
push str.Option
push 0x10030
push 0
push dword [ebp - 8]
push 4
mov ebx, 0x50b1e0
call fcn.005039b3
add esp, 0x34
push 0x5f5e2d
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4162bc
mov eax, str.Accept:__
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4162b1
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
jmp 0x416345
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.Accept:
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4162ef
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x416345
push str._r_nAccept:__
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41633f
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.Accept_Language:
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x416378
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x4163ce
push str._r_nAccept_Language:_zh_cn
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4163c8
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.User_Agent:
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x416401
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x416457
push str._r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_38.0.2125.122_Safari_537.36
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416451
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.Content_Type:
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x41648a
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x4164e0
push str._r_nContent_Type:_application_x_www_form_urlencoded
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4164da
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5f7b89
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x416513
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x41656e
mov ebx, dword [ebp + 8]
push dword [ebx]
push str._r_nReferer:
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416568
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push 0x5f5e2d
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x4165c7
push 0xa0000004
push 0
push dword [ebp + 0x1c]
push VariantClear
push 0
push 0x5f7b9f
push VariantClear
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 8]
push 4
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5f6557
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4165fa
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x4166a5
push dword [ebp + 0x2c]
call fcn.00417147
mov dword [ebp - 0x20], eax
push dword [ebp + 0x2c]
call fcn.0041725f
mov dword [ebp - 0x24], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x416643
mov eax, 0x5f5e2d
push eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x416657
mov eax, 0x5f5e2d
push eax
push VariantClear
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 8]
push 4
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x34
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x416690
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4166a0
push ebx
call fcn.005039b9
add esp, 4
jmp 0x4168a2
push 0
push 0
push 0
push VariantClear
push 0
push 0x5f6557
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4166cc
mov eax, 0x5f5e2d
push eax
push 3
mov ebx, 0x5056a0
call fcn.005039b3
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x416704
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x416700
imul eax, dword [ebx]
jmp 0x4166f5
mov ecx, eax
test ecx, ecx
je 0x416723
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41671c
push ebx
push eax
call fcn.005039b9
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41670a
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0xc]
call fcn.00402e41
xor ecx, ecx
push eax
lea eax, [ebp - 0x10]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x41689f
mov ebx, dword [ebp - 0xc]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x41676b
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41677e
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push 0x5f5e2d
mov ebx, dword [ebp - 0x20]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x416897
mov ebx, dword [ebp - 0xc]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x4167be
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4167d1
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push dword [ebp - 0x20]
call fcn.00417147
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x416801
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x416814
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
push dword [ebp - 0x28]
call fcn.0041725f
mov dword [ebp - 0x2c], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x41683a
mov eax, 0x5f5e2d
push eax
push VariantClear
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x41684e
mov eax, 0x5f5e2d
push eax
push VariantClear
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 8]
push 4
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x416887
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x416897
push ebx
call fcn.005039b9
add esp, 4
pop eax
pop ebx
pop ecx
jmp 0x416740
add esp, 0xc
mov eax, 0x5f5e98
xor ecx, ecx
test eax, eax
je 0x4168b0
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov ebx, dword [ebp + 0x44]
mov eax, dword [ebx]
xor ebx, ebx
test eax, eax
je 0x4168c3
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x4168da
dec eax
test ecx, ecx
je 0x4168da
call fcn.00407863
add esp, 0xc
test eax, eax
jne 0x41691c
push 0xa0000004
push 0
push dword [ebp + 0x14]
push VariantClear
push 0
push str.Send
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x28
jmp 0x416987
push 0
push 0
push 0
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp + 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x416937
mov eax, 0x5f5e98
push eax
push 0x10031
push 0
push dword [ebp - 0x14]
push 3
mov ebx, 0x50a9f0
call fcn.005039b3
add esp, 0x28
push 0x20010031
push 0
lea eax, [ebp - 0x14]
push eax
push VariantClear
push 0
push str.Send
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x509c20
call fcn.005039b3
add esp, 0x28
push 0
push 0
push 0
push VariantClear
push 0
push str.ResponseBody
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x509bf0
call fcn.005039b3
add esp, 0x28
mov dword [ebp - 0x20], eax
push 0
push 0
push 0
push 0x10031
push 0
push dword [ebp - 0x20]
push 2
mov ebx, 0x509fb0
call fcn.005039b3
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10031
push 0
push ebx
push 1
mov ebx, 0x509d70
call fcn.005039b3
add esp, 0x10
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x416a14
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0
push 0
push 0
push VariantClear
push 0
push str.GetallResponseHeaders
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x509b30
call fcn.005039b3
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416a5f
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x34]
mov dword [ebx], eax
push 0
push 0
push 0
push VariantClear
push 0
push str.GetallResponseHeaders
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x509b30
call fcn.005039b3
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x54]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416aac
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x54]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
mov ebx, 6
call fcn.0040143b
push VariantClear
push 0
push str.Set_Cookie
push VariantClear
push 0
push str.Set_Cookie
push VariantClear
push 0
mov ebx, dword [ebp + 0x34]
mov eax, dword [ebx]
test eax, eax
jne 0x416af5
mov eax, 0x5f5e2d
push eax
push 6
mov ebx, 0x5054b0
call fcn.005039b3
add esp, 0x4c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416b21
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x34]
mov dword [ebx], eax
push 0
push 0
push 0
push VariantClear
push 0
push 0x5f6557
push VariantClear
push 0
mov ebx, dword [ebp + 0x34]
mov eax, dword [ebx]
test eax, eax
jne 0x416b4e
mov eax, 0x5f5e2d
push eax
push 3
mov ebx, 0x5056a0
call fcn.005039b3
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x416b86
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x416b82
imul eax, dword [ebx]
jmp 0x416b77
mov ecx, eax
test ecx, ecx
je 0x416ba5
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x416b9e
push ebx
push eax
call fcn.005039b9
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x416b8c
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov eax, 0x5f5e2d
push eax
mov ebx, dword [ebp + 0x24]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416bc9
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x24]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
call fcn.00402e41
xor ecx, ecx
push eax
lea eax, [ebp - 0x10]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x416f2d
mov ebx, dword [ebp - 0x1c]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x416c0b
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x416c1e
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.Set_Cookie
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x416c59
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
je 0x416f25
mov ebx, dword [ebp - 0x1c]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x416c96
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x416ca9
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5f7bea
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x416ce4
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
je 0x416e1e
mov ebx, dword [ebp - 0x1c]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x416d21
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x416d34
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov eax, 0x5f7bea
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov eax, str.Set_Cookie:
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x20]
call fcn.004173a5
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x416d87
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x416d97
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x416daa
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x5053c0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x416dd0
push ebx
call fcn.005039b9
add esp, 4
push 0x5f7bf8
push dword [ebp - 0x38]
mov ebx, dword [ebp + 0x24]
push dword [ebx]
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x416dfd
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp + 0x24]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416e13
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x24]
mov dword [ebx], eax
jmp 0x416f25
mov ebx, dword [ebp - 0x1c]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x416e3b
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x416e4e
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
mov ebx, 9
call fcn.0040143b
push VariantClear
push 0
push str.Set_Cookie:
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x416e8d
mov eax, 0x5f5e2d
push eax
push 6
mov ebx, 0x5054b0
call fcn.005039b3
add esp, 0x4c
mov dword [ebp - 0x24], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x416eb6
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x5053c0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x416edc
push ebx
call fcn.005039b9
add esp, 4
push 0x5f7bf8
push dword [ebp - 0x28]
mov ebx, dword [ebp + 0x24]
push dword [ebx]
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x416f09
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x24]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416f1f
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x24]
mov dword [ebx], eax
pop eax
pop ebx
pop ecx
jmp 0x416be0
add esp, 0xc
push VariantClear
push 0
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x416f45
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504080
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fsub qword [0x5f5f4b]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
call fcn.00401e78
push 0x80000301
push 0
push eax
push VariantClear
push 0
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x416f92
mov eax, 0x5f5e2d
push eax
push 2
mov ebx, 0x504580
call fcn.005039b3
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp + 0x24]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416fbe
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x24]
mov dword [ebx], eax
push dword [ebp + 0x24]
push dword [ebp + 0x1c]
call fcn.0041765e
mov ebx, eax
test ebx, ebx
je 0x416fde
push ebx
call fcn.005039b9
add esp, 4
push 0x10030
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x50b2b0
call fcn.005039b3
add esp, 0x10
call fcn.00418362
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x417019
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.005039ad
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x41701e
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41702f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x50b2b0
call fcn.005039b3
add esp, 0x10
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x417070
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41706c
imul eax, dword [ebx]
jmp 0x417061
mov ecx, eax
test ecx, ecx
je 0x41708f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x417088
push ebx
push eax
call fcn.005039b9
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x417076
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
push 0x10031
push 0
push ebx
push 1
mov ebx, 0x509d70
call fcn.005039b3
add esp, 0x10
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4170ca
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4170e8
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4170e4
imul eax, dword [ebx]
jmp 0x4170d9
mov ecx, eax
test ecx, ecx
je 0x417107
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x417100
push ebx
push eax
call fcn.005039b9
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4170ee
call fcn.005039b9
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x74