Function at 0x421b38
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push 8
call fcn.005a964e
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.005a964e
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x6f1075
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
push 8
call fcn.005a964e
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x6f1075
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0x10
call fcn.005a964e
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov eax, 3
mov dword [ebx], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], esp
push 0
mov eax, 0x23
call fcn.005a9660
cmp dword [ebp - 0x1c], esp
je 0x421c06
push 0
push 0x4026de2
push 6
call fcn.005a965a
add esp, 0xc
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.WinHttp.WinHttpRequest.5.1
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x5b0870
call fcn.005a9666
add esp, 0x28
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x421c4b
mov eax, 0x6f1075
jmp 0x422852
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x421c60
mov eax, 0x6f1088
push eax
push 1
mov ebx, 0x5aa540
call fcn.005a9666
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x421c8c
push ebx
call fcn.005a9654
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
push 0x6f1088
mov ebx, dword [ebp + 0xc]
push dword [ebx]
call fcn.004010d3
add esp, 8
cmp eax, 0
jne 0x421ccb
mov eax, 0x70bb4b
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x421cc5
push ebx
call fcn.005a9654
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
cmp dword [ebp + 0x44], 0xffffffff
je 0x421d5c
cmp dword [ebp + 0x44], 1
jge 0x421ceb
mov dword [ebp + 0x44], 0x1388
jmp 0x421d08
fild dword [ebp + 0x44]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fmul qword [0x70caa6]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004040bb
mov dword [ebp + 0x44], eax
push 0xa0000301
push 0
lea eax, [ebp + 0x44]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x44]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x44]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x44]
push eax
push reloc.WS2_32.dll_connect
push 0
push str.SetTimeouts
push 0x10030
push 0
push dword [ebp - 4]
push 6
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x4c
push 0x6f1088
mov ebx, dword [ebp + 0x4c]
push dword [ebx]
call fcn.004010d3
add esp, 8
cmp eax, 0
je 0x421e28
push 0xa0000004
push 0
push dword [ebp + 0x4c]
push 0x80000301
push 0
push 2
push reloc.WS2_32.dll_connect
push 0
push str.SetProxy
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x34
push 0x6f1088
mov ebx, dword [ebp + 0x54]
push dword [ebx]
call fcn.004010d3
add esp, 8
cmp eax, 0
je 0x421e28
cmp dword [ebp + 0x68], 0
jne 0x421de1
mov dword [ebp + 0x64], 1
push 0xa0000301
push 0
lea eax, [ebp + 0x64]
push eax
push 0xa0000004
push 0
push dword [ebp + 0x5c]
push 0xa0000004
push 0
push dword [ebp + 0x54]
push reloc.WS2_32.dll_connect
push 0
push str.SetProxyCredentials
push 0x10030
push 0
push dword [ebp - 4]
push 5
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x40
push reloc.WS2_32.dll_bind
push 0
push 0
push 0xa0000004
push 0
push dword [ebp + 8]
push 0xa0000004
push 0
push dword [ebp + 0xc]
push reloc.WS2_32.dll_connect
push 0
push str.Open
push 0x10030
push 0
push dword [ebp - 4]
push 5
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x40
cmp dword [ebp + 0x3c], 0
je 0x421eba
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push 6
push reloc.WS2_32.dll_connect
push 0
push str.Option
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x5b0770
call fcn.005a9666
add esp, 0x34
push 0x6f1088
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
call fcn.004010d3
add esp, 8
cmp eax, 0
jne 0x421f10
push str._r_nAccept:___r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0__r_nContent_Type:_application_x_www_form_urlencoded
mov ebx, dword [ebp + 8]
push dword [ebx]
push 0x70d6ce
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x421f0a
push ebx
call fcn.005a9654
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push 0x6f1088
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
call fcn.004010d3
add esp, 8
cmp eax, 0
je 0x421f69
push 0xa0000004
push 0
push dword [ebp + 0x1c]
push reloc.WS2_32.dll_connect
push 0
push str.Cookie
push reloc.WS2_32.dll_connect
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x34
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x70ccbf
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x421f9c
mov eax, 0x6f1088
push eax
push 4
mov ebx, 0x5aa390
call fcn.005a9666
add esp, 0x34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jle 0x4223f7
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x70ccbf
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x421fe3
mov eax, 0x6f1088
push eax
push 3
mov ebx, 0x5ab1c0
call fcn.005a9666
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42201b
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x422017
imul eax, dword [ebx]
jmp 0x42200c
mov ecx, eax
test ecx, ecx
je 0x42203a
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x422033
push ebx
push eax
call fcn.005a9654
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x422021
call fcn.005a9654
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 8]
call fcn.00402c77
xor ecx, ecx
push eax
lea eax, [ebp - 0xc]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4223ef
mov ebx, dword [ebp - 8]
call fcn.00402637
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x42208c
push 0x66b
push 0x4026de2
push 4
call fcn.005a965a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4220a9
push 0x66b
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x70d6f0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4220e4
mov eax, 0x6f1088
push eax
push 4
mov ebx, 0x5aa390
call fcn.005a9666
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jle 0x4223e7
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x422122
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42211e
imul eax, dword [ebx]
jmp 0x422113
mov ecx, eax
test ecx, ecx
je 0x422141
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42213a
push ebx
push eax
call fcn.005a9654
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x422128
call fcn.005a9654
add esp, 4
mov eax, 0x6f1075
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 8]
call fcn.00402637
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x422178
push 0x6d5
push 0x4026de2
push 4
call fcn.005a965a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x422195
push 0x6d5
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x70d6f0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4221c4
mov eax, 0x6f1088
push eax
push 3
mov ebx, 0x5ab1c0
call fcn.005a9666
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4221fc
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4221f8
imul eax, dword [ebx]
jmp 0x4221ed
mov ecx, eax
test ecx, ecx
je 0x42221b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x422214
push ebx
push eax
call fcn.005a9654
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x422202
call fcn.005a9654
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 2
inc dword [ebp - 0xc]
mov ebx, dword [ebp - 0x10]
call fcn.00402c77
cmp dword [ebp - 0xc], eax
jle 0x422247
jmp 0x422333
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 1
cmp eax, ecx
jl 0x42226f
push 0x7d1
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 1
cmp eax, ecx
jl 0x42229f
push 0x7f0
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00402637
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4222ce
push 0x7f0
push 0x4026de2
push 4
call fcn.005a965a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4222eb
push 0x7f0
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
push dword [ebx]
push 0x70d6f0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x422328
push ebx
call fcn.005a9654
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
jmp 0x42222e
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 0
cmp eax, ecx
jl 0x42235b
push 0x83a
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 1
cmp eax, ecx
jl 0x42238b
push 0x83a
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x4223a8
mov eax, 0x6f1088
push eax
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4223be
mov eax, 0x6f1088
push eax
push reloc.WS2_32.dll_connect
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x422057
add esp, 0xc
jmp 0x422694
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x70d6f0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x42242a
mov eax, 0x6f1088
push eax
push 4
mov ebx, 0x5aa390
call fcn.005a9666
add esp, 0x34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jle 0x422694
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x70d6f0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x422471
mov eax, 0x6f1088
push eax
push 3
mov ebx, 0x5ab1c0
call fcn.005a9666
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4224a9
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4224a5
imul eax, dword [ebx]
jmp 0x42249a
mov ecx, eax
test ecx, ecx
je 0x4224c8
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4224c1
push ebx
push eax
call fcn.005a9654
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4224af
call fcn.005a9654
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 2
inc dword [ebp - 0xc]
mov ebx, dword [ebp - 0x10]
call fcn.00402c77
cmp dword [ebp - 0xc], eax
jle 0x4224f4
jmp 0x4225e0
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 1
cmp eax, ecx
jl 0x42251c
push 0xa0f
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 1
cmp eax, ecx
jl 0x42254c
push 0xa2e
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00402637
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x42257b
push 0xa2e
push 0x4026de2
push 4
call fcn.005a965a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x422598
push 0xa2e
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
push dword [ebx]
push 0x70d6f0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4225d5
push ebx
call fcn.005a9654
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
jmp 0x4224db
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 0
cmp eax, ecx
jl 0x422608
push 0xa78
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00402637
mov eax, 1
cmp eax, ecx
jl 0x422638
push 0xa78
push 0x4026de2
push 1
call fcn.005a965a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x422655
mov eax, 0x6f1088
push eax
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x42266b
mov eax, 0x6f1088
push eax
push reloc.WS2_32.dll_connect
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x34
mov eax, 0x6f1075
xor ecx, ecx
test eax, eax
je 0x4226a2
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov ebx, dword [ebp + 0x74]
mov eax, dword [ebx]
xor ebx, ebx
test eax, eax
je 0x4226b5
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x4226cc
dec eax
test ecx, ecx
je 0x4226cc
call fcn.004075e8
add esp, 0xc
test eax, eax
jne 0x42270e
push 0xa0000004
push 0
push dword [ebp + 0x14]
push reloc.WS2_32.dll_connect
push 0
push str.Send
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x28
jmp 0x422779
push 0
push 0
push 0
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp + 0x74]
mov eax, dword [ebx]
test eax, eax
jne 0x422729
mov eax, 0x6f1075
push eax
push 0x10031
push 0
push dword [ebp - 0x14]
push 3
mov ebx, 0x5b01e0
call fcn.005a9666
add esp, 0x28
push 0x20010031
push 0
lea eax, [ebp - 0x14]
push eax
push reloc.WS2_32.dll_connect
push 0
push str.Send
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x5af610
call fcn.005a9666
add esp, 0x28
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.ResponseBody
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x5af5e0
call fcn.005a9666
add esp, 0x28
mov dword [ebp - 0x1c], eax
push 0
push 0
push 0
push 0x10031
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x5af7a0
call fcn.005a9666
add esp, 0x1c
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
push ebx
push 0x10031
push 0
push ebx
push 1
mov ebx, 0x5af760
call fcn.005a9666
add esp, 0x10
call fcn.005a9654
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x422806
push ebx
call fcn.005a9654
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
mov eax, 0x24
call fcn.005a9660
cmp dword [ebp - 0x1c], esp
je 0x422833
push 0xf38
push 0x4026de2
push 6
call fcn.005a965a
add esp, 0xc
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x42284d
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.005a964e
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x422852
push eax
mov ebx, dword [ebp - 4]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x5b0840
call fcn.005a9666
add esp, 0x10
call fcn.005a9654
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x422894
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x422890
imul eax, dword [ebx]
jmp 0x422885
mov ecx, eax
test ecx, ecx
je 0x4228b3
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4228ac
push ebx
push eax
call fcn.005a9654
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x42289a
call fcn.005a9654
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4228d9
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4228d5
imul eax, dword [ebx]
jmp 0x4228ca
mov ecx, eax
test ecx, ecx
je 0x4228f8
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4228f1
push ebx
push eax
call fcn.005a9654
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4228df
call fcn.005a9654
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
push 0x10031
push 0
push ebx
push 1
mov ebx, 0x5af760
call fcn.005a9666
add esp, 0x10
call fcn.005a9654
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x422933
push ebx
call fcn.005a9654
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x74