Function at 0x410609
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov dword [ebp - 4], 0
push 8
call fcn.004796cf
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x54adff
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
push 0xc
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x54aec4
push ebx
add ebx, 8
push ebx
push 8
call fcn.004796cf
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.0040a4a2
pop ebx
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.__span_
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x5758c1
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
call fcn.0040a204
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410706
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x410716
push ebx
call fcn.004796db
add esp, 4
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov eax, 0x5758d2
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004029ea
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410756
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x410766
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41077a
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x28], ebx
push 1
push 1
push 1
push 1
lea eax, [ebp - 4]
push eax
call fcn.0041239b
mov dword [ebp - 0x2c], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401294
push getpeername
push 0
push 0x54adb4
push getpeername
push 0
push 0x5758d4
push getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4107e4
mov eax, 0x54adb4
push eax
push 6
mov ebx, 0x47acf0
call fcn.004796d5
add esp, 0x4c
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41080a
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410820
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401294
push getpeername
push 0
push 0x54adb4
push getpeername
push 0
push 0x5758d8
push getpeername
push 0
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x41087f
mov eax, 0x54adb4
push eax
push 6
mov ebx, 0x47acf0
call fcn.004796d5
add esp, 0x4c
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4108ab
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.__span_
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x5758dc
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
call fcn.0040a204
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4108fc
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41090c
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x410920
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0040795a
mov ebx, dword [ebp - 8]
call fcn.00401f93
xor ecx, ecx
push eax
lea eax, [ebp - 0xc]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x410a75
mov ebx, dword [ebp - 8]
call fcn.00401fac
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x410979
push 0x201
push 0x4018ac5
push 4
call fcn.004796e1
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x410996
push 0x201
push 0x4018ac5
push 1
call fcn.004796e1
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x4109c5
mov eax, 0x54adb4
push eax
push getpeername
push 0
push str.VRCR
push 4
mov ebx, 0x47a130
call fcn.004796d5
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
je 0x410a6d
mov ebx, dword [ebp - 8]
call fcn.00401fac
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x410a18
push 0x255
push 0x4018ac5
push 4
call fcn.004796e1
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x410a35
push 0x255
push 0x4018ac5
push 1
call fcn.004796e1
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
push dword [ebx]
push dword [ebp - 0x10]
mov ecx, 2
call fcn.004010a4
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410a69
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
pop eax
pop ebx
pop ecx
jmp 0x410944
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x5758e9
push getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x410aa9
mov eax, 0x54adb4
push eax
push 4
mov ebx, 0x47a130
call fcn.004796d5
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
je 0x410b21
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x5758ec
push getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x410afa
mov eax, 0x54adb4
push eax
push 4
mov ebx, 0x47a130
call fcn.004796d5
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x410b21
mov eax, 1
jmp 0x410b26
mov eax, 0
test eax, eax
je 0x410b4d
mov eax, str.VRCR
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x410b44
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
jmp 0x410c47
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x5758e9
push getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x410b7e
mov eax, 0x54adb4
push eax
push 4
mov ebx, 0x47a130
call fcn.004796d5
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
je 0x410bbd
mov eax, 0x5758e9
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x410bb4
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
jmp 0x410c47
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x5758ec
push getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x410bee
mov eax, 0x54adb4
push eax
push 4
mov ebx, 0x47a130
call fcn.004796d5
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
je 0x410c2d
mov eax, 0x5758ec
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x410c24
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
jmp 0x410c47
mov eax, 0x54b13d
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x410c43
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x410c6e
push eax
mov ebx, eax
call fcn.00401039
inc eax
push eax
call fcn.004796cf
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410c81
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov eax, 0x5758ef
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, 0x5758f2
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0040a204
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410cdd
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410ced
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410d03
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
push 0x54adb4
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call fcn.004011f7
add esp, 8
cmp eax, 0
jne 0x410db1
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov eax, 0x54adce
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, str._size:_
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0040a204
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410d85
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410d95
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410dab
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov eax, 0x575903
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, 0x575908
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0040a204
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410e07
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410e17
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410e2d
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x28], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x575913
push getpeername
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x410e71
mov eax, 0x54adb4
push eax
push 4
mov ebx, 0x47a130
call fcn.004796d5
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
je 0x411550
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x54adce
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.__iframe_id_Iframe__src_
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
call fcn.0040a204
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410edc
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x410eec
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410f00
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x54adb4
push dword [ebp - 0x18]
call fcn.004011f7
add esp, 8
cmp eax, 0
je 0x411550
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 8
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
push 5
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
mov eax, str.accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_naccept_language:_zh_CN_zh_q0.9_r_nif_none_match:__3a060_YFfqfMltrX13JOTGbrLfgvmpFMg__r_nsec_ch_ua:___Not_A_Brand__v_99____Chromium__v_94__r_nsec_ch_ua_mobile:__0_r_nsec_ch_ua_platform:__Windows__r_nsec_fetch_dest:_document_r_nsec_fetch_mode:_navigate_r_nsec_fetch_site:_none_r_nsec_fetch_user:__1_r_nupgrade_insecure_requests:_1_r_nuser_agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_94.0.4606.71_Safari_537.36_Core_1.94.178.400_QQBrowser_11.2.5170.400_r_naccept_encoding:_gzip__deflate__br
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
lea eax, [ebp - 0x18]
push eax
call fcn.00403ab1
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x411030
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x411040
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x411050
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x411060
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x411070
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x411080
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x411090
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4110a0
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4110b0
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x47e590
call fcn.004796d5
add esp, 0x10
call fcn.004796db
add esp, 4
lea eax, [ebp - 0x6c]
push eax
call fcn.0040c130
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4110ef
push ebx
call fcn.004796db
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x411102
mov eax, 0x54adff
push eax
push 1
mov ebx, 0x47bad0
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x411128
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41113c
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x54b228
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x575933
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0040a204
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41118c
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41119c
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4111b0
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str._tour.xml
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.models_
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040a204
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x411200
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411210
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x411224
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 8
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
push 5
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
mov eax, str.accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_naccept_language:_zh_CN_zh_q0.9_r_nif_none_match:__3a060_YFfqfMltrX13JOTGbrLfgvmpFMg__r_nsec_ch_ua:___Not_A_Brand__v_99____Chromium__v_94__r_nsec_ch_ua_mobile:__0_r_nsec_ch_ua_platform:__Windows__r_nsec_fetch_dest:_document_r_nsec_fetch_mode:_navigate_r_nsec_fetch_site:_none_r_nsec_fetch_user:__1_r_nupgrade_insecure_requests:_1_r_nuser_agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_94.0.4606.71_Safari_537.36_Core_1.94.178.400_QQBrowser_11.2.5170.400_r_naccept_encoding:_gzip__deflate__br
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
lea eax, [ebp - 0x18]
push eax
call fcn.00403ab1
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41133b
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41134b
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41135b
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41136b
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41137b
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41138b
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41139b
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4113ab
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4113bb
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x47e590
call fcn.004796d5
add esp, 0x10
call fcn.004796db
add esp, 4
lea eax, [ebp - 0x6c]
push eax
call fcn.0040c130
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4113fa
push ebx
call fcn.004796db
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x41140d
mov eax, 0x54adff
push eax
push 1
mov ebx, 0x47bad0
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x411433
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x411447
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x54adce
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.thumburl_
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0040a204
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x411497
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4114a7
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4114bb
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x54adb4
push dword [ebp - 0x18]
call fcn.004011f7
add esp, 8
cmp eax, 0
je 0x411550
push dword [ebp - 0x18]
push 0x57595a
push dword [ebp - 0x1c]
push str.https:__vr_down.om.cn_vr_models_
mov ecx, 4
call fcn.004010a4
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41150c
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x411537
push eax
mov ebx, eax
call fcn.00401039
inc eax
push eax
call fcn.004796cf
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41154a
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x28], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x575913
push getpeername
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x41158e
mov eax, 0x54adb4
push eax
push 4
mov ebx, 0x47a130
call fcn.004796d5
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4116bb
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov eax, 0x54adce
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, str.___div___img_src_
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0040a204
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x411604
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x411614
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41162a
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x2c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401294
push getpeername
push 0
push str._w_500
push getpeername
push 0
push str._w_1070
push getpeername
push 0
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x411689
mov eax, 0x54adb4
push eax
push 6
mov ebx, 0x47acf0
call fcn.004796d5
add esp, 0x4c
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4116b5
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x28], ebx
push 0x54adb4
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call fcn.004011f7
add esp, 8
cmp eax, 0
je 0x41192f
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
push 8
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x3c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
push 5
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
mov eax, str.accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_naccept_language:_zh_CN_zh_q0.9_r_nif_none_match:__3a060_YFfqfMltrX13JOTGbrLfgvmpFMg__r_nsec_ch_ua:___Not_A_Brand__v_99____Chromium__v_94__r_nsec_ch_ua_mobile:__0_r_nsec_ch_ua_platform:__Windows__r_nsec_fetch_dest:_document_r_nsec_fetch_mode:_navigate_r_nsec_fetch_site:_none_r_nsec_fetch_user:__1_r_nupgrade_insecure_requests:_1_r_nuser_agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_94.0.4606.71_Safari_537.36_Core_1.94.178.400_QQBrowser_11.2.5170.400_r_naccept_encoding:_gzip__deflate__br
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push dword [ebp - 0x2c]
call fcn.00403ab1
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x411809
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x411819
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x411829
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x411839
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x411849
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x411859
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x411869
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x411879
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x411889
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x3c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x47e590
call fcn.004796d5
add esp, 0x10
call fcn.004796db
add esp, 4
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
lea eax, [ebp - 0x74]
push eax
call fcn.00412c67
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4118d4
push ebx
call fcn.004796db
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x4118e7
mov eax, 0x54adff
push eax
push 1
mov ebx, 0x47bad0
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x411910
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411929
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x10]
push dword [ebx]
push str.https:__www.om.cn_api_v2_model_detail_id
mov ecx, 2
call fcn.004010a4
add esp, 8
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 8
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x38], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
push 5
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
push 1
mov eax, str.accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_naccept_language:_zh_CN_zh_q0.9_r_nif_none_match:__3a060_YFfqfMltrX13JOTGbrLfgvmpFMg__r_nsec_ch_ua:___Not_A_Brand__v_99____Chromium__v_94__r_nsec_ch_ua_mobile:__0_r_nsec_ch_ua_platform:__Windows__r_nsec_fetch_dest:_document_r_nsec_fetch_mode:_navigate_r_nsec_fetch_site:_none_r_nsec_fetch_user:__1_r_nupgrade_insecure_requests:_1_r_nuser_agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_94.0.4606.71_Safari_537.36_Core_1.94.178.400_QQBrowser_11.2.5170.400_r_naccept_encoding:_gzip__deflate__br
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
lea eax, [ebp - 0x28]
push eax
call fcn.00403ab1
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x411a5c
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x411a6c
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x411a7c
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x411a8c
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x411a9c
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x411aac
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x411abc
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x411acc
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x411adc
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x411aec
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x38]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x47e590
call fcn.004796d5
add esp, 0x10
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x411b23
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040c130
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x411b47
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x411b5e
mov eax, 0x54adff
push eax
push 1
mov ebx, 0x47bad0
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x411b88
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.00407e1d
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x411bac
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x20
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x28]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x411c08
push ebx
call fcn.004796db
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x411c1c
push ebx
call fcn.004796db
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x411c30
push ebx
call fcn.004796db
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x411c44
push ebx
call fcn.004796db
add esp, 4
pop ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, str.data.money
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411c93
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411ca9
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x24
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, str.data.collect
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411cf5
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411d0b
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, str.data.browse
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411d57
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411d6d
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, str.data_sale_price_.vip
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411db9
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411dcf
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x28], ebx
push 0x54adb4
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call fcn.004011f7
add esp, 8
cmp eax, 0
je 0x411e24
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x28], ebx
mov eax, 0x575a04
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411e1e
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
mov eax, str.data_ori_model_
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x411e5f
push ebx
call fcn.004796db
add esp, 4
push 0x575a23
push dword [ebp - 0x30]
call fcn.004011f7
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411e8d
push ebx
call fcn.004796db
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x411ec0
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x30
mov dword [ebp - 0x28], ebx
mov eax, 0x575a25
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411eba
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x28], ebx
push 0x54aec2
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call fcn.004011f7
add esp, 8
cmp eax, 0
jne 0x411f0f
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x34
mov dword [ebp - 0x28], ebx
mov eax, 0x575a32
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x411f09
push ebx
call fcn.004796db
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x10]
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, 0x575a3f
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411f65
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, str.gxrq
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411fad
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, 0x575a47
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411ff5
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, str.wjdx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41203d
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, 0x575a50
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x412085
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, str.tpdz
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4120cd
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, str.bs64
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x412115
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, 0x575a5d
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41215d
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x24
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, 0x575a60
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4121a5
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, 0x575a64
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4121ed
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, str.tjjg
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x412235
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x30
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, str.nhymf
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41227d
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x34
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push dword [ebp - 0x28]
push 1
mov eax, str.mfmx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4122c5
push ebx
call fcn.004796db
add esp, 4
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
jmp 0x4122de
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4122ef
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41230d
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x412309
imul eax, dword [ebx]
jmp 0x4122fe
mov ecx, eax
test ecx, ecx
je 0x41232c
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x412325
push ebx
push eax
call fcn.004796db
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x412313
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x412344
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x412354
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x412364
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x412374
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x412384
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.004796db
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc