Function at 0x406b1f
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
cmp dword [ebp + 0x10], 0
je 0x406c73
mov eax, str.forward.xdaili.cn:80
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x406b87
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
push 1
call fcn.004074db
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x406bae
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 8]
push str._timestamp
mov ebx, dword [ebp + 0x28]
push dword [ebx]
push str._secret
mov ebx, dword [ebp + 0x20]
push dword [ebx]
push 0x4d1b34
mov ecx, 6
call fcn.00401105
add esp, 0x18
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x406bf2
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 1
push 1
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.004079c7
mov dword [ebp - 0x2c], eax
push 0x4c5c05
push dword [ebp - 8]
push str.timestamp
mov ebx, dword [ebp + 0x20]
push dword [ebx]
push str.orderno
push dword [ebp - 0x2c]
push str.Proxy_Authorization:sign
mov ecx, 7
call fcn.00401105
add esp, 0x1c
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406c5b
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x406c6f
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
cmp dword [ebp + 0x18], 0
je 0x406db9
mov eax, str.dtan.xiongmaodaili.com:8088
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x406c93
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
push 1
call fcn.004074db
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x406cba
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 8]
push str._timestamp
mov ebx, dword [ebp + 0x28]
push dword [ebx]
push str._secret
mov ebx, dword [ebp + 0x20]
push dword [ebx]
push 0x4d1b34
mov ecx, 6
call fcn.00401105
add esp, 0x18
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x406cfe
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x406d15
mov eax, 0x4c5bfc
push eax
push 1
mov ebx, 0x419730
call fcn.004182d6
add esp, 0x10
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.00408356
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406d5a
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x406d6e
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x4c5c05
push dword [ebp - 8]
push str.timestamp
mov ebx, dword [ebp + 0x20]
push dword [ebx]
push str.orderno
push dword [ebp - 0xc]
push str.Proxy_Authorization:sign
mov ecx, 7
call fcn.00401105
add esp, 0x1c
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x406db5
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov eax, str.http:__wap.js.10086.cn_login.thtml_redirectURLhttp:__wap.js.10086.cn_
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x406dcf
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
call fcn.00408c0e
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
push str.Host:_wap.js.10086.cn_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nUpgrade_Insecure_Requests:_1_r_nUser_Agent:_Mozilla_5.0__Linux__Android_6.0__Nexus_5_Build_MRA58N__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_63.0.3239.132_Mobile_Safari_537.36_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9_image_webp_image_apng___q0.8_r_nReferer:_http:__wap.js.10086.cn_wquestionnaire_wquestionnaire_page_login.jsp_backurl_r_n
mov ecx, 2
call fcn.00401105
add esp, 8
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406e03
push ebx
call fcn.004182d0
add esp, 4
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
push 8
call fcn.004182ca
add esp, 4
mov dword [ebp - 0x3c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
lea eax, [ebp - 0x14]
push eax
call fcn.00409787
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x406f0c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x406f1c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406f2c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x406f3c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x406f4c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x406f5c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x406f6c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x406f7c
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x3c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x41beb0
call fcn.004182d6
add esp, 0x10
call fcn.004182d0
add esp, 4
lea eax, [ebp - 0x70]
push eax
call fcn.0040dab8
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x406fbb
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x406fcf
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x4d1d94
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.imgReqSeq
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040db25
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40701f
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40702f
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x407043
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov eax, str.http:__wap.js.10086.cn_actionDispatcher.do
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40705d
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
push dword [ebp + 0xc]
mov eax, str.DES_Encrypt
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, str.var_CryptoJS__CryptoJS___function__Math__undefined___r_n____var_C____r_n____var_C_lib__C.lib____r_n____var_Base__C_lib.Base___function_____r_n________function_F_____r_n________return__r_n____________extend:_function__overrides___r_n________________F.prototype__this__r_n________________var_subtype__new_F____r_n________________if__overrides___r_n____________________subtype.mixIn_overrides___r_n_________________r_n________________if___subtype.hasOwnProperty_init___this.init__subtype.init___r_n____________________subtype.init__function_____r_n________________________subtype._super.init.apply_this__arguments___r_n______________________r_n_________________r_n________________subtype.init.prototype__subtype__r_n________________subtype._super__this__r_n________________return_subtype__r_n______________create:_function_____r_n________________var_instance__this.extend____r_n________________instance.init.apply_instance__arguments___r_n________________return_instance__r_n______________init:_function______mixIn:_function__properties___r_n________________for__var_propertyName_in_properties___r_n____________________if__properties.hasOwnProperty_propertyName____r_n________________________this_propertyName___properties_propertyName___r_n_____________________r_n_________________r_n________________if__properties.hasOwnProperty_toString____r_n____________________this.toString__properties.toString__r_n_________________r_n______________clone:_function_____r_n________________return_this.init.prototype.extend_this___r_n_____________r_n__________r_n_________r_n____var_WordArray__C_lib.WordArray__Base.extend__r_n________init:_function__words__sigBytes___r_n____________words__this.words__words______r_n____________if__sigBytes___undefined___r_n________________this.sigBytes__sigBytes__r_n_____________else__r_n________________this.sigBytes__words.length__4__r_n_____________r_n__________toString:_function__encoder___r_n____________return__encoder__Hex_.stringify_this___r_n__________concat:_function__wordArray___r_n____________var_thisWords__this.words__r_n____________var_thatWords__wordArray.words__r_n____________var_thisSigBytes__this.sigBytes__r_n____________var_thatSigBytes__wordArray.sigBytes__r_n____________this.clamp____r_n____________if__thisSigBytes___4___r_n________________for__var_i__0__i___thatSigBytes__i___r_n____________________var_thatByte___thatWords_i_____2_______24____i___4___8____0xff__r_n____________________thisWords__thisSigBytes__i______2___thatByte_____24_____thisSigBytes__i____4___8___r_n_________________r_n_____________else_if__thatWords.length___0xffff___r_n________________for__var_i__0__i___thatSigBytes__i__4___r_n____________________thisWords__thisSigBytes__i______2___thatWords_i_____2___r_n_________________r_n_____________else__r_n________________thisWords.push.apply_thisWords__thatWords___r_n_____________r_n____________this.sigBytes__thatSigBytes__r_n____________return_this__r_n__________clamp:_function_____r_n____________var_words__this.words__r_n____________var_sigBytes__this.sigBytes__r_n____________words_sigBytes_____2___0xffffffff_____32____sigBytes___4___8___r_n____________words.length__Math.ceil_sigBytes___4___r_n__________clone:_function_____r_n____________var_clone__Base.clone.call_this___r_n____________clone.words__this.words.slice_0___r_n____________return_clone__r_n__________random:_function__nBytes___r_n____________var_words______r_n____________var_r___function__m_w___r_n________________var_m_w__m_w__r_n________________var_m_z__0x3ade68b1__r_n________________var_mask__0xffffffff__r_n________________return_function_____r_n____________________m_z___0x9069___m_z__0xFFFF____m_z____0x10____mask__r_n____________________m_w___0x4650___m_w__0xFFFF____m_w____0x10____mask__r_n____________________var_result____m_z____0x10___m_w___mask__r_n____________________result___0x100000000__r_n____________________result__0.5__r_n____________________return_result___Math.random_____.5___1
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.0040ddc3
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4070bd
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4070cd
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4070dd
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4070ed
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4070fd
push ebx
call fcn.004182d0
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x3c]
push eax
call fcn.0040df57
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x407127
push ebx
call fcn.004182d0
add esp, 4
push str.loginType0browserUAMozilla_2F5.0_7BLinux_3BAndroid5.0_3BSM_G900PBuild_2FLRX21T_7DAppleWebKit_2F537.36_7BKHTML_2ClikeGecko_7DChrome_2F80.0.3987.163MobileSafari_2F537.36
push dword [ebp - 0x20]
push str.passwordSMS_vaildisSavePasswordValverifyCodeisSms0vertimgReqSeq
push dword [ebp - 0x40]
push str.password
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.reqUrlloginTouchbusiNumloginmobile
mov ecx, 7
call fcn.00401105
add esp, 0x1c
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x407166
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40717a
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 5
jg 0x4073bf
push dword [ebp - 0x10]
push str.Host:_wap.js.10086.cn_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nUpgrade_Insecure_Requests:_1_r_nUser_Agent:_Mozilla_5.0__Linux__Android_6.0__Nexus_5_Build_MRA58N__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_63.0.3239.132_Mobile_Safari_537.36_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9_image_webp_image_apng___q0.8_r_nReferer:_http:__wap.js.10086.cn_wquestionnaire_wquestionnaire_page_login.jsp_backurl_r_n_r_n
mov ecx, 2
call fcn.00401105
add esp, 8
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 8
call fcn.004182ca
add esp, 4
mov dword [ebp - 0x38], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
push 1
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.00409787
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x407299
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4072a9
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4072b9
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4072c9
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4072d9
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4072e9
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x38]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x41beb0
call fcn.004182d6
add esp, 0x10
call fcn.004182d0
add esp, 4
lea eax, [ebp - 0x60]
push eax
call fcn.0040dab8
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x407328
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40733c
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push str.result
push getpeername
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x407371
mov eax, 0x4c5bfc
push eax
push 4
mov ebx, 0x418b30
call fcn.004182d6
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
je 0x407396
jmp 0x4073bf
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x47e260
call fcn.004182f4
add esp, 0x10
pop ecx
jmp 0x407180
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push str._js.ac.10086.cn
push getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4073f3
mov eax, 0x4c5bfc
push eax
push 4
mov ebx, 0x418b30
call fcn.004182d6
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x407422
mov eax, 0x4d152e
jmp 0x407443
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x40743e
push eax
mov ebx, eax
call fcn.0040109a
inc eax
push eax
call fcn.004182ca
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x407443
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x407454
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x407464
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x407474
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x407484
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x407494
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4074a4
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4074b4
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4074c4
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4074d4
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x28