Function at 0x40414d
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push 8
call fcn.0041408c
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.0041408c
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x48f705
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
push 8
call fcn.0041408c
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x48f705
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0x10
call fcn.0041408c
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov eax, 3
mov dword [ebx], eax
mov dword [ebp - 0x18], 0
push 8
call fcn.0041408c
add esp, 4
mov dword [ebp - 0x1c], eax
mov edi, eax
mov esi, 0x48f705
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x20], esp
push 0
mov eax, 4
call fcn.0041409e
cmp dword [ebp - 0x20], esp
je 0x40422c
push 6
call fcn.00414098
add esp, 4
push 0
push 0
push 0
push VariantClear
push 0
push str.WinHttp.WinHttpRequest.5.1
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x418280
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x4042ac
push 0
push 0
push 0
push VariantClear
push 0
push str.MSXML2.ServerXMLHTTP.6.0
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x418280
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x4042ac
mov eax, 0x48f705
jmp 0x405353
push VariantClear
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x4042c1
mov eax, 0x48f704
push eax
push 1
mov ebx, 0x414a90
call fcn.004140a4
add esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4042ed
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
push 0x48f704
mov ebx, dword [ebp + 0xc]
push dword [ebx]
call fcn.004018ed
add esp, 8
cmp eax, 0
jne 0x40432c
mov eax, 0x4916a7
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404326
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
cmp dword [ebp + 0x3c], 0xffffffff
je 0x4043bd
cmp dword [ebp + 0x3c], 1
jge 0x40434c
mov dword [ebp + 0x3c], 0x3a98
jmp 0x404369
fild dword [ebp + 0x3c]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fmul qword [0x4916ab]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.00401569
mov dword [ebp + 0x3c], eax
push 0xa0000301
push 0
lea eax, [ebp + 0x3c]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x3c]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x3c]
push eax
push 0xa0000301
push 0
lea eax, [ebp + 0x3c]
push eax
push VariantClear
push 0
push 0x4916b3
push 0x10030
push 0
push dword [ebp - 4]
push 6
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x4c
push 0x48f704
push dword [0x4d43b8]
call fcn.004018ed
add esp, 8
cmp eax, 0
je 0x404481
push 0xa0000004
push 0
push 0x4d43b8
push 0x80000301
push 0
push 2
push VariantClear
push 0
push str.SetProxy
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x34
push 0x48f704
push dword [0x4d43bc]
call fcn.004018ed
add esp, 8
cmp eax, 0
je 0x404481
push 0xa0000301
push 0
push 0x4d43c4
push 0xa0000004
push 0
push 0x4d43c0
push 0xa0000004
push 0
push 0x4d43bc
push VariantClear
push 0
push str.SetProxyCredentials
push 0x10030
push 0
push dword [ebp - 4]
push 5
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x40
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0xa0000004
push 0
push dword [ebp + 8]
push 0xa0000004
push 0
push dword [ebp + 0xc]
push VariantClear
push 0
push str.Open
push 0x10030
push 0
push dword [ebp - 4]
push 5
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x40
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push 6
push VariantClear
push 0
push str.Option
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x4181a0
call fcn.004140a4
add esp, 0x34
push 0x48f704
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
call fcn.004018ed
add esp, 8
cmp eax, 0
jne 0x40455f
push str._r_nAccept:___r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0__r_nContent_Type:_application_x_www_form_urlencoded
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.Referer:
mov ecx, 3
call fcn.0040204b
add esp, 0xc
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404559
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 1
push dword [ebp + 8]
call fcn.00405480
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00405ae2
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4045a6
push ebx
call fcn.00414092
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4045b6
push ebx
call fcn.00414092
add esp, 4
push dword [ebp + 0x1c]
lea eax, [ebp - 0x2c]
push eax
call fcn.00405ff6
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4045d5
push ebx
call fcn.00414092
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4045eb
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push 0x48f704
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
call fcn.004018ed
add esp, 8
cmp eax, 0
je 0x40464a
push 0xa0000004
push 0
push dword [ebp + 0x1c]
push VariantClear
push 0
push str.Cookie
push VariantClear
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x48f70d
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40467d
mov eax, 0x48f704
push eax
push 4
mov ebx, 0x4148f0
call fcn.004140a4
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jle 0x404a74
push 0
push 0
push 0
push VariantClear
push 0
push 0x48f70d
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4046c4
mov eax, 0x48f704
push eax
push 3
mov ebx, 0x4151f0
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4046fc
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4046f8
imul eax, dword [ebx]
jmp 0x4046ed
mov ecx, eax
test ecx, ecx
je 0x40471b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404714
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404702
call fcn.00414092
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 8]
call fcn.0040104f
xor ecx, ecx
push eax
lea eax, [ebp - 0xc]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x404a6c
mov ebx, dword [ebp - 8]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x404763
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x404776
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4917ae
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x4047b1
mov eax, 0x48f704
push eax
push 4
mov ebx, 0x4148f0
call fcn.004140a4
add esp, 0x34
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jle 0x404a64
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4047ef
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4047eb
imul eax, dword [ebx]
jmp 0x4047e0
mov ecx, eax
test ecx, ecx
je 0x40480e
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404807
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4047f5
call fcn.00414092
add esp, 4
mov eax, 0x48f705
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 8]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40483b
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40484e
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push 0
push 0
push 0
push VariantClear
push 0
push 0x4917ae
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x40487d
mov eax, 0x48f704
push eax
push 3
mov ebx, 0x4151f0
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4048b5
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4048b1
imul eax, dword [ebx]
jmp 0x4048a6
mov ecx, eax
test ecx, ecx
je 0x4048d4
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4048cd
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4048bb
call fcn.00414092
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 2
inc dword [ebp - 0xc]
mov ebx, dword [ebp - 0x10]
call fcn.0040104f
cmp dword [ebp - 0xc], eax
jle 0x404900
jmp 0x4049c4
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 1
cmp eax, ecx
jl 0x40491e
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 1
cmp eax, ecx
jl 0x404944
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x404969
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40497c
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
push dword [ebx]
push 0x4917ae
mov ebx, dword [ebp - 0x24]
push dword [ebx]
mov ecx, 3
call fcn.0040204b
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4049b9
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
jmp 0x4048e7
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 0
cmp eax, ecx
jl 0x4049e2
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 1
cmp eax, ecx
jl 0x404a08
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x404a25
mov eax, 0x48f704
push eax
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x404a3b
mov eax, 0x48f704
push eax
push VariantClear
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x404738
add esp, 0xc
jmp 0x404cd5
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4917ae
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x404aa7
mov eax, 0x48f704
push eax
push 4
mov ebx, 0x4148f0
call fcn.004140a4
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jle 0x404cd5
push 0
push 0
push 0
push VariantClear
push 0
push 0x4917ae
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x404aee
mov eax, 0x48f704
push eax
push 3
mov ebx, 0x4151f0
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404b26
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404b22
imul eax, dword [ebx]
jmp 0x404b17
mov ecx, eax
test ecx, ecx
je 0x404b45
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404b3e
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404b2c
call fcn.00414092
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 2
inc dword [ebp - 0xc]
mov ebx, dword [ebp - 0x10]
call fcn.0040104f
cmp dword [ebp - 0xc], eax
jle 0x404b71
jmp 0x404c35
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 1
cmp eax, ecx
jl 0x404b8f
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 1
cmp eax, ecx
jl 0x404bb5
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x404bda
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x404bed
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
push dword [ebx]
push 0x4917ae
mov ebx, dword [ebp - 0x24]
push dword [ebx]
mov ecx, 3
call fcn.0040204b
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404c2a
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
jmp 0x404b58
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 0
cmp eax, ecx
jl 0x404c53
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x10]
call fcn.00401070
mov eax, 1
cmp eax, ecx
jl 0x404c79
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x404c96
mov eax, 0x48f704
push eax
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x404cac
mov eax, 0x48f704
push eax
push VariantClear
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x34
mov eax, 0x48f705
xor ecx, ecx
test eax, eax
je 0x404ce3
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov ebx, dword [ebp + 0x4c]
mov eax, dword [ebx]
xor ebx, ebx
test eax, eax
je 0x404cf6
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x404d0d
dec eax
test ecx, ecx
je 0x404d0d
call fcn.004040a1
add esp, 0xc
test eax, eax
jne 0x404d4f
push 0xa0000004
push 0
push dword [ebp + 0x14]
push VariantClear
push 0
push str.Send
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x28
jmp 0x404dba
push 0
push 0
push 0
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp + 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x404d6a
mov eax, 0x48f705
push eax
push 0x10031
push 0
push dword [ebp - 0x14]
push 3
mov ebx, 0x417c40
call fcn.004140a4
add esp, 0x28
push 0x20010031
push 0
lea eax, [ebp - 0x14]
push eax
push VariantClear
push 0
push str.Send
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x417100
call fcn.004140a4
add esp, 0x28
push 0
push 0
push 0
push VariantClear
push 0
push str.ResponseBody
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x4170d0
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x20], eax
push 0
push 0
push 0
push 0x10031
push 0
push dword [ebp - 0x20]
push 2
mov ebx, 0x417290
call fcn.004140a4
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10031
push 0
push ebx
push 1
mov ebx, 0x4171c0
call fcn.004140a4
add esp, 0x10
call fcn.00414092
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x404e47
push ebx
call fcn.00414092
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0
push 0
push 0
push VariantClear
push 0
push str.GetallResponseHeaders
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x417040
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404e92
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0x44]
mov dword [ebx], eax
push 0
push 0
push 0
push VariantClear
push 0
push 0x48f70d
push VariantClear
push 0
mov ebx, dword [ebp + 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x404ebf
mov eax, 0x48f704
push eax
push 3
mov ebx, 0x4151f0
call fcn.004140a4
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404ef7
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404ef3
imul eax, dword [ebx]
jmp 0x404ee8
mov ecx, eax
test ecx, ecx
je 0x404f16
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404f0f
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404efd
call fcn.00414092
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov eax, 0x48f704
push eax
mov ebx, dword [ebp + 0x24]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404f3a
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0x24]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
call fcn.0040104f
xor ecx, ecx
push eax
lea eax, [ebp - 0xc]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40526c
mov ebx, dword [ebp - 0x1c]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x404f7c
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x404f8f
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.Location:
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x404fca
mov eax, 0x48f704
push eax
push 4
mov ebx, 0x4148f0
call fcn.004140a4
add esp, 0x34
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jle 0x4050d0
mov ebx, dword [ebp - 0x1c]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x405007
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40501a
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0x80000301
push 0
push 1
mov ebx, 6
call fcn.00401068
push VariantClear
push 0
push str.Location:
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x405065
mov eax, 0x48f704
push eax
push 6
mov ebx, 0x415000
call fcn.004140a4
add esp, 0x4c
mov dword [ebp - 0x24], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x40508e
mov eax, 0x48f704
push eax
push 1
mov ebx, 0x414f30
call fcn.004140a4
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4050b4
push ebx
call fcn.00414092
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp + 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4050ca
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4050ed
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x405100
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.Set_Cookie
push VariantClear
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x40513b
mov eax, 0x48f704
push eax
push 4
mov ebx, 0x4148f0
call fcn.004140a4
add esp, 0x34
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jle 0x405264
mov ebx, dword [ebp - 0x1c]
call fcn.00401070
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x405178
push 4
call fcn.00414098
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40518b
push 1
call fcn.00414098
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0x4917ed
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x4917ef
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
call fcn.00406d91
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4051d2
push ebx
call fcn.00414092
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4051e2
push ebx
call fcn.00414092
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x4051f5
mov eax, 0x48f704
push eax
push 1
mov ebx, 0x414f30
call fcn.004140a4
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40521b
push ebx
call fcn.00414092
add esp, 4
push 0x4917fb
push dword [ebp - 0x34]
mov ebx, dword [ebp + 0x24]
push dword [ebx]
mov ecx, 3
call fcn.0040204b
add esp, 0xc
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x405248
push ebx
call fcn.00414092
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp + 0x24]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40525e
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0x24]
mov dword [ebx], eax
pop eax
pop ebx
pop ecx
jmp 0x404f51
add esp, 0xc
push dword [ebp + 0x24]
push dword [ebp + 0x1c]
call fcn.00405ff6
mov ebx, eax
test ebx, ebx
je 0x405289
push ebx
call fcn.00414092
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 1
push dword [ebp + 8]
call fcn.00405480
mov dword [ebp - 0x24], eax
push dword [ebp + 0x1c]
lea eax, [ebp - 0x24]
push eax
call fcn.00406fe2
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4052c3
push ebx
call fcn.00414092
add esp, 4
push 0x48f704
mov ebx, dword [ebp + 0x34]
push dword [ebx]
call fcn.004018ed
add esp, 8
cmp eax, 0
jne 0x405315
mov ebx, dword [ebp + 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x4052fc
push eax
mov ebx, eax
call fcn.00401590
inc eax
push eax
call fcn.0041408c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp + 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40530f
push ebx
call fcn.00414092
add esp, 4
pop eax
mov ebx, dword [ebp + 0x34]
mov dword [ebx], eax
mov dword [ebp - 0x20], esp
mov eax, 5
call fcn.0041409e
cmp dword [ebp - 0x20], esp
je 0x405334
push 6
call fcn.00414098
add esp, 4
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40534e
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0041408c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x405353
push eax
mov ebx, dword [ebp - 4]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x418270
call fcn.004140a4
add esp, 0x10
call fcn.00414092
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x405395
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x405391
imul eax, dword [ebx]
jmp 0x405386
mov ecx, eax
test ecx, ecx
je 0x4053b4
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4053ad
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40539b
call fcn.00414092
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4053da
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4053d6
imul eax, dword [ebx]
jmp 0x4053cb
mov ecx, eax
test ecx, ecx
je 0x4053f9
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4053f2
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4053e0
call fcn.00414092
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
push 0x10031
push 0
push ebx
push 1
mov ebx, 0x4171c0
call fcn.004140a4
add esp, 0x10
call fcn.00414092
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x405434
push ebx
call fcn.00414092
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x405452
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40544e
imul eax, dword [ebx]
jmp 0x405443
mov ecx, eax
test ecx, ecx
je 0x405471
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40546a
push ebx
push eax
call fcn.00414092
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x405458
call fcn.00414092
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x4c