Function at 0x40868d
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.00447cd8
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0x4fca76
push ebx
add ebx, 4
push ebx
push 8
call fcn.00447cd8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.0040e1d5
pop ebx
mov dword [ebp - 0x14], 0
push 8
call fcn.00447cd8
add esp, 4
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0x4fc238
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
push 8
call fcn.00447cd8
add esp, 4
mov dword [ebp - 0x24], eax
mov edi, eax
mov esi, 0x4fc238
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
push 8
call fcn.00447cd8
add esp, 4
mov dword [ebp - 0x30], eax
mov edi, eax
mov esi, 0x4fc238
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x34], 0
push 0x2c
call fcn.00447cd8
add esp, 4
mov dword [ebp - 0x38], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xb
rep stosd dword es:[edi], eax
push 8
call fcn.00447cd8
add esp, 4
mov dword [ebp - 0x3c], eax
mov edi, eax
mov esi, 0x4fc238
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.00447cd8
add esp, 4
mov dword [ebp - 0x40], eax
mov edi, eax
mov esi, 0x4fc238
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov eax, dword [0x657e14]
mov dword [ebp - 4], eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push dword [ebp + 8]
call fcn.0040a451
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4087ff
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x408815
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 3
jg 0x408f57
mov eax, str.http:__open.baidu.com_special_time_
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40883e
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__Trident_7.0__rv:11.0__QQBrowser_8.0.3345.400__like_Gecko
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4088dd
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4088ed
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4088fd
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40890d
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40891d
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40892d
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40893d
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40894d
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40895d
push ebx
call fcn.00447cde
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x408970
mov eax, 0x4fc238
push eax
push 1
mov ebx, 0x44b690
call fcn.00447cd2
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x408996
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4089aa
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x4fc725
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.window.baidu_time_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040b121
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4089fa
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408a0a
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x408a1e
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 0x4fc035
push dword [ebp - 0x14]
call fcn.004010e6
add esp, 8
cmp eax, 0
jne 0x408a45
mov eax, 0x4fc035
jmp 0x40a19b
push 0x80000301
push 0
push 0xa
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x408a64
mov eax, 0x4fc035
push eax
push 2
mov ebx, 0x449c90
call fcn.00447cd2
add esp, 0x1c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x408a8e
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov eax, str.786464602A3F3F737C212928272221213E727C7F773E2126233E737F7D3F727C7F773F6364716479733F212528212226292220212527222526262926273F118AA1340
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408ac3
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408ad3
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x408ae7
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
mov eax, str.Accept:_text_html__application_xhtmlxml____r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__Trident_7.0__rv:11.0__like_Gecko_QQBrowser_8.1.3701.400
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
push 1
mov eax, str.1456456456456
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x408b87
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x408b97
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x408ba7
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x408bb7
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x408bc7
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408bd7
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408be7
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408bf7
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408c07
push ebx
call fcn.00447cde
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x408c1a
mov eax, 0x4fc238
push eax
push 1
mov ebx, 0x44b690
call fcn.00447cd2
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x408c40
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x408c54
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str.__div_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.bct_fc05_fc11_nbw_blog_ztag__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040b121
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408ca4
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408cb4
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x408cc8
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x4fc883
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, 0x4fc888
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040b121
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408d18
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408d28
push ebx
call fcn.00447cde
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4fc88d
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x408d4d
mov eax, 0x4fc035
push eax
push 3
mov ebx, 0x44acb0
call fcn.00447cd2
add esp, 0x28
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x408d73
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x408d95
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x408d91
imul eax, dword [ebx]
jmp 0x408d86
mov ecx, eax
test ecx, ecx
je 0x408db4
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x408dad
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x408d9b
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x4fc88f
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, 0x4fc892
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040b121
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408e0c
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408e1c
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408e30
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x4fc88f
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, 0x4fc897
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040b121
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408e80
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408e90
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x408ea4
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x4fc88f
mov ebx, dword [ebp + 8]
push dword [ebx]
push 0x4fc89c
mov ecx, 3
call fcn.0040145e
add esp, 0xc
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x4fc8a1
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040b121
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408f0b
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408f1b
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x408f2f
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x4fc035
push dword [ebp - 0xc]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x408f51
jmp 0x408f57
pop ecx
jmp 0x40881d
add esp, 4
push 0x4fc035
push dword [ebp - 0xc]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x40a03d
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4fc88d
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x408f98
mov eax, 0x4fc035
push eax
push 3
mov ebx, 0x44acb0
call fcn.00447cd2
add esp, 0x28
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x408fd0
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x408fcc
imul eax, dword [ebx]
jmp 0x408fc1
mov ecx, eax
test ecx, ecx
je 0x408fef
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x408fe8
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x408fd6
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 0
cmp eax, ecx
jl 0x409019
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x409036
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a170
call fcn.00447cd2
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edx
push 1
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
call fcn.0040ba6b
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409075
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a740
call fcn.00447cd2
add esp, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp dword [ebp - 0x4c], edx
jl 0x4090a3
jg 0x4090a2
cmp dword [ebp - 0x50], eax
jb 0x4090a3
inc ecx
mov eax, ecx
test eax, eax
je 0x4091fb
mov dword [ebp - 4], 0
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov eax, str.C3C0C0B7D6CAC2C1A9EDB3BCD7FBD1BADFA5DBB7A7F74141B3AA232225262222222220B3B14BA6D0C0C0D0D7DDE8D2F7AEBBC3B2D8AA4D118AA1340
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4090e5
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4090f5
push ebx
call fcn.00447cde
add esp, 4
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, str.D8AAC1F9C6B4118AA1340
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409126
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409136
push ebx
call fcn.00447cde
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x40914f
mov eax, 0x4fc035
push eax
push 0x80000301
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x40916f
mov eax, 0x4fc035
push eax
push 4
mov ebx, 0x44d650
call fcn.00447cd2
add esp, 0x34
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409192
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4091a2
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x30]
call fcn.0040211c
mov eax, 0x62
cmp eax, ecx
jl 0x4091c0
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x4091e6
push eax
mov ebx, eax
call fcn.004013f3
inc eax
push eax
call fcn.00447cd8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4091f7
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x24]
call fcn.00402103
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jl 0x4097cf
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 1
cmp eax, ecx
jl 0x40922e
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push 0x4fc035
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x4097cf
push 0
mov ebx, 0x4499d0
call fcn.00447cd2
add esp, 4
mov dword [ebp - 0x44], eax
push 0
mov ebx, 0x4499f0
call fcn.00447cd2
add esp, 4
mov dword [ebp - 0x48], eax
push dword [ebp - 0x48]
push 0x4fc934
push dword [ebp - 0x44]
mov ecx, 3
call fcn.0040145e
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4092a6
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4092b6
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4092ca
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x60005
push 0
push dword [ebp - 0x38]
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x4092eb
mov eax, 0x4fc035
push eax
push 2
mov eax, 5
mov ebx, 0x4bb390
call fcn.00447cf6
add esp, 0x1c
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x44], ebx
push 0x4fc035
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x40967e
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 1
cmp eax, ecx
jl 0x409342
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4fc4c7
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x409371
mov eax, 0x4fc035
push eax
push 3
mov ebx, 0x44acb0
call fcn.00447cd2
add esp, 0x28
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4093a9
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4093a5
imul eax, dword [ebx]
jmp 0x40939a
mov ecx, eax
test ecx, ecx
je 0x4093c8
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4093c1
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4093af
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x44], ebx
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4fc4c7
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x409401
mov eax, 0x4fc035
push eax
push 3
mov ebx, 0x44acb0
call fcn.00447cd2
add esp, 0x28
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x409439
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x409435
imul eax, dword [ebx]
jmp 0x40942a
mov ecx, eax
test ecx, ecx
je 0x409458
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x409451
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40943f
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
call fcn.0040211c
mov eax, 0
cmp eax, ecx
jl 0x409482
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x40949f
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a550
call fcn.00447cd2
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x40]
call fcn.0040211c
mov eax, 0
cmp eax, ecx
jl 0x4094d3
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x4094f0
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a550
call fcn.00447cd2
add esp, 0x10
cmp dword [ebp - 0x48], eax
jg 0x40967e
mov dword [ebp - 4], 1
mov ebx, dword [ebp - 0x3c]
call fcn.0040211c
mov eax, 0
cmp eax, ecx
jl 0x409531
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x40954e
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a550
call fcn.00447cd2
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x40]
call fcn.0040211c
mov eax, 0
cmp eax, ecx
jl 0x409582
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x40959f
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a550
call fcn.00447cd2
add esp, 0x10
cmp dword [ebp - 0x48], eax
jne 0x40966a
mov ebx, dword [ebp - 0x3c]
call fcn.0040211c
mov eax, 1
cmp eax, ecx
jl 0x4095d9
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x58], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x58]
mov eax, dword [ebx]
test eax, eax
jne 0x4095f6
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a550
call fcn.00447cd2
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x40]
call fcn.0040211c
mov eax, 1
cmp eax, ecx
jl 0x40962a
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x60], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x60]
mov eax, dword [ebx]
test eax, eax
jne 0x409647
mov eax, 0x4fc035
push eax
push 1
mov ebx, 0x44a550
call fcn.00447cd2
add esp, 0x10
cmp dword [ebp - 0x5c], eax
jle 0x40966a
mov eax, 1
jmp 0x40966f
mov eax, 0
test eax, eax
je 0x40967e
mov dword [ebp - 4], 0
cmp dword [ebp - 4], 0
jne 0x4097cf
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov eax, str.A3DCC0E2A0F6A1AEA4FDDEE3B3BCD7FBDFD2C4C8C7FEC0D2A0F6A3B2DAC43130118AA1340
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4096b9
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4096c9
push ebx
call fcn.00447cde
add esp, 4
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, str.D8AAC1F9C6B4118AA1340
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4096fa
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40970a
push ebx
call fcn.00447cde
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x409723
mov eax, 0x4fc035
push eax
push 0x80000301
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x409743
mov eax, 0x4fc035
push eax
push 4
mov ebx, 0x44d650
call fcn.00447cd2
add esp, 0x34
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409766
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x409776
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x30]
call fcn.0040211c
mov eax, 0x62
cmp eax, ecx
jl 0x409794
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x4097ba
push eax
mov ebx, eax
call fcn.004013f3
inc eax
push eax
call fcn.00447cd8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4097cb
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x24]
call fcn.00402103
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jl 0x40a02e
mov eax, 0x4fc035
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4097fa
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 2
cmp eax, ecx
jl 0x40981c
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push 0x4fc035
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x4098c5
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 2
cmp eax, ecx
jl 0x40985d
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str.4141D8AA118AA1340
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x4098c5
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 2
cmp eax, ecx
jl 0x40989e
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
push str.DBA3C0E2C1F9C6B4118AA1340
mov ebx, dword [ebp - 0x54]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x4098c5
xor eax, eax
jmp 0x4098ca
mov eax, 1
test eax, eax
je 0x40991a
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 3
cmp eax, ecx
jl 0x4098f0
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x60], ebx
push 0x4fc035
mov ebx, dword [ebp - 0x60]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x40991a
mov eax, 1
jmp 0x40991f
mov eax, 0
test eax, eax
je 0x409cb1
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 3
cmp eax, ecx
jl 0x409945
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x44]
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409975
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [0x657e18]
test ebx, ebx
je 0x40998c
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [0x657e18], eax
cmp dword [0x657e1c], 0
jne 0x409a8f
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 3
cmp eax, ecx
jl 0x4099bd
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x44]
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4099ed
push ebx
call fcn.00447cde
add esp, 4
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409a16
push ebx
call fcn.00447cde
add esp, 4
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x409a3f
push ebx
call fcn.00447cde
add esp, 4
push 1
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0040bae7
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409a67
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409a77
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x409a87
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x60]
mov dword [0x657e1c], eax
mov eax, dword [0x657e1c]
mov dword [ebp - 4], eax
cmp dword [0x657e1c], 0
jne 0x409cb1
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 2
cmp eax, ecx
jl 0x409ac2
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str.DBA3C0E2C1F9C6B4118AA1340
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x409c2c
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov eax, str.4141D8AAC1F9C6B4A2ABA3D9A9B631118AA1340
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409b16
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x409b26
push ebx
call fcn.00447cde
add esp, 4
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, str.D8AAC1F9C6B4118AA1340
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409b57
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409b67
push ebx
call fcn.00447cde
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x409b80
mov eax, 0x4fc035
push eax
push 0x80000301
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x409ba0
mov eax, 0x4fc035
push eax
push 4
mov ebx, 0x44d650
call fcn.00447cd2
add esp, 0x34
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409bc3
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x409bd3
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x30]
call fcn.0040211c
mov eax, 0x62
cmp eax, ecx
jl 0x409bf1
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x409c17
push eax
mov ebx, eax
call fcn.004013f3
inc eax
push eax
call fcn.00447cd8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409c28
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 2
cmp eax, ecx
jl 0x409c4a
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str.DBA3C0E2C1F9C6B4118AA1340
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
jne 0x409cb1
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 2
cmp eax, ecx
jl 0x409c8b
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov eax, str.C7BCA0D9118AA1340
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x409cab
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 2
cmp eax, ecx
jl 0x409ccf
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str.C7BCA0D9118AA1340
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.004010e6
add esp, 8
cmp eax, 0
jne 0x409fcb
cmp dword [ebp - 4], 0
jne 0x409fcb
mov ebx, dword [ebp - 0x24]
call fcn.00402103
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 5
jl 0x409d6a
mov ebx, dword [ebp - 0x24]
call fcn.0040211c
mov eax, 4
cmp eax, ecx
jl 0x409d2f
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x409d55
push eax
mov ebx, eax
call fcn.004013f3
inc eax
push eax
call fcn.00447cd8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x409d66
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x4fc035
push dword [ebp - 0x34]
call fcn.004010e6
add esp, 8
cmp eax, 0
je 0x409fc4
cmp dword [0x657e20], 0
jne 0x409e66
mov ebx, dword [ebp - 0x18]
call fcn.00402103
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x409e04
mov ebx, dword [ebp - 0x18]
call fcn.0040211c
mov eax, 0
cmp eax, ecx
jl 0x409dc3
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x44]
lea eax, [ebp - 0x34]
push eax
call fcn.0040dd55
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409df7
push ebx
call fcn.00447cde
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [0x657e20], eax
jmp 0x409e66
mov ebx, dword [ebp - 0x18]
call fcn.0040211c
mov eax, 0
cmp eax, ecx
jl 0x409e22
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x18]
call fcn.0040211c
mov eax, 1
cmp eax, ecx
jl 0x409e48
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 1
push dword [ebp - 0x48]
push dword [ebp - 0x44]
lea eax, [ebp - 0x34]
push eax
call fcn.0040dd55
mov dword [0x657e20], eax
mov eax, dword [0x657e20]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x409fbf
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov eax, str.C7BCA0D9A9AAD2E2C1F9C6B4DEA4DDB8A9EDB3BCD7FBDFD8A9AAD2E2D8FDACEEB3B1118AA1340
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409ea9
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x409eb9
push ebx
call fcn.00447cde
add esp, 4
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, str.D8AAC1F9C6B4118AA1340
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409eea
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409efa
push ebx
call fcn.00447cde
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x409f13
mov eax, 0x4fc035
push eax
push 0x80000301
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x409f33
mov eax, 0x4fc035
push eax
push 4
mov ebx, 0x44d650
call fcn.00447cd2
add esp, 0x34
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409f56
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x409f66
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x30]
call fcn.0040211c
mov eax, 0x62
cmp eax, ecx
jl 0x409f84
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x409faa
push eax
mov ebx, eax
call fcn.004013f3
inc eax
push eax
call fcn.00447cd8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409fbb
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
jmp 0x409fcb
mov dword [ebp - 4], 1
cmp dword [ebp - 4], 0
jne 0x40a02e
mov ebx, dword [ebp - 0x30]
call fcn.0040211c
mov eax, 0x62
cmp eax, ecx
jl 0x409ff3
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x40a019
push eax
mov ebx, eax
call fcn.004013f3
inc eax
push eax
call fcn.00447cd8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a02a
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [0x657e14], 1
jmp 0x40a191
cmp dword [0x657e14], 0
jne 0x40a191
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov eax, str.DDE8D2F7D1BCADC3A2ABA3D9A9B6B3BCD7FBACFCA2F9DDE8D2F7B3B1118AA1340
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40a07b
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40a08b
push ebx
call fcn.00447cde
add esp, 4
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, str.D8AAC1F9C6B4118AA1340
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040b2bd
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40a0bc
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40a0cc
push ebx
call fcn.00447cde
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x40a0e5
mov eax, 0x4fc035
push eax
push 0x80000301
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x40a105
mov eax, 0x4fc035
push eax
push 4
mov ebx, 0x44d650
call fcn.00447cd2
add esp, 0x34
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40a128
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40a138
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x30]
call fcn.0040211c
mov eax, 0x62
cmp eax, ecx
jl 0x40a156
push 1
call fcn.00447ce4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x40a17c
push eax
mov ebx, eax
call fcn.004013f3
inc eax
push eax
call fcn.00447cd8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a18d
push ebx
call fcn.00447cde
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov eax, 0x4fc035
jmp 0x40a19b
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40a1ac
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40a1bc
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a1dc
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40a1fa
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40a1f6
imul eax, dword [ebx]
jmp 0x40a1eb
mov ecx, eax
test ecx, ecx
je 0x40a219
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40a212
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40a200
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40a231
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40a241
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40a25f
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40a25b
imul eax, dword [ebx]
jmp 0x40a250
mov ecx, eax
test ecx, ecx
je 0x40a27e
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40a277
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40a265
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x30]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40a2a4
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40a2a0
imul eax, dword [ebx]
jmp 0x40a295
mov ecx, eax
test ecx, ecx
je 0x40a2c3
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40a2bc
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40a2aa
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40a2db
push ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x38]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a2ef
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a303
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a317
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a32b
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a33f
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a353
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a367
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a37b
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a38f
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a3a3
push ebx
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a3b7
push ebx
call fcn.00447cde
add esp, 4
pop ebx
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x3c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40a3de
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40a3da
imul eax, dword [ebx]
jmp 0x40a3cf
mov ecx, eax
test ecx, ecx
je 0x40a3fd
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40a3f6
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40a3e4
call fcn.00447cde
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40a423
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40a41f
imul eax, dword [ebx]
jmp 0x40a414
mov ecx, eax
test ecx, ecx
je 0x40a442
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40a43b
push ebx
push eax
call fcn.00447cde
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40a429
call fcn.00447cde
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc