Function at 0x406850
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46490a
mov eax, dword fs:[0]
push eax
sub esp, 0x94
push esi
push edi
mov eax, dword [0x52eca4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x1c]
call fcn.00404240
mov dword [ebp - 4], 1
mov dword [ebp - 0x14], 0
push 0x46b324
push 0x533148
lea eax, [ebp - 0x88]
push eax
call fcn.00426670
add esp, 0xc
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0xa0], ecx
mov byte [ebp - 4], 2
push 0x46b308
mov edx, dword [ebp - 0xa0]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.00426670
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x88]
call fcn.00404300
push 0
push 0x80
push 3
push 0
push 3
push 0x80000000
lea ecx, [ebp - 0x10]
call fcn.00404490
push eax
call dword [0x467294]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
je 0x40697b
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
call dword [0x467284]
push 0xffffffffffffffff
lea edx, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0x2c]
call fcn.004065e0
lea eax, [ebp - 0x24]
push eax
call fcn.00406340
lea ecx, [ebp - 0x24]
call fcn.004066a0
mov esi, eax
mov edi, edx
lea ecx, [ebp - 0x2c]
call fcn.004066a0
sub esi, eax
sbb edi, edx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], edi
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [0x467280]
push 0
lea ecx, [ebp - 0x10]
call fcn.004267a0
push eax
call fcn.0044f754
add esp, 8
cmp eax, 0xffffffff
je 0x4069a0
cmp dword [ebp - 0x14], 0x3f480
jle 0x422795
lea eax, [ebp - 0x6c]
push eax
call dword [0x467290]
push 0
push 0x150af0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
call fcn.0045a080
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x3d1f8
jle 0x4069d7
push 0x46b328
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x4d878
jle 0x4069ed
push 0x46b360
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x566e4
jle 0x406a03
push 0x46b3ac
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x5dbd8
jle 0x406a19
push 0x46b3e0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x63fc4
jle 0x406a2f
push 0x46b458
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x69bf4
jle 0x406a45
push 0x46b4a4
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x6e12c
jle 0x406a5b
push 0x46b4e8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x716c4
jle 0x406a71
push 0x46b548
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x74c48
jle 0x406a87
push str.R6032_r_n__not_enough_space_for_locale_information_r_n
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x78190
jle 0x406a9d
push 0x46b5e8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x7b4bc
jle 0x406ab3
push 0x46b670
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x7e2d4
jle 0x406ac9
push 0x46b6c0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x80994
jle 0x406adf
push 0x46b708
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x8302c
jle 0x406af5
push 0x46b750
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x8523c
jle 0x406b0b
push 0x46b794
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x873fc
jle 0x406b21
push 0x46b7d4
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x8924c
jle 0x406b37
push 0x46b818
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x8ada4
jle 0x406b4d
push 0x46b860
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x8c834
jle 0x406b63
push 0x46b8c8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x8df18
jle 0x406b79
push 0x46b940
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x8f50c
jle 0x406b8f
push 0x46b9b8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x90aec
jle 0x406ba5
push 0x46b9f0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x92090
jle 0x406bbb
push 0x46ba30
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x93620
jle 0x406bd1
push str._Class_Hierarchy_Descriptor
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x94b24
jle 0x406be7
push 0x46bad0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x95f24
jle 0x406bfd
push 0x46bb30
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x972e8
jle 0x406c13
push 0x46bb88
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x985f8
jle 0x406c29
push 0x46bbe8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x9987c
jle 0x406c3f
push 0x46bc48
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x9aa08
jle 0x406c55
push 0x46bcd0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x9bafc
jle 0x406c6b
push 0x46bd18
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x9cad8
jle 0x406c81
push 0x46bd98
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x9dab4
jle 0x406c97
push 0x46be08
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x9ea54
jle 0x406cad
push 0x46be54
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0x9f97c
jle 0x406cc3
push 0x46be88
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa069c
jle 0x406cd9
push 0x46bed0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa13a8
jle 0x406cef
push 0x46bf18
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa20b4
jle 0x406d05
push 0x46bf58
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa2dc0
jle 0x406d1b
push 0x46bfa0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa3a90
jle 0x406d31
push 0x46c058
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa4760
jle 0x406d47
push 0x46c0f8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa5408
jle 0x406d5d
push 0x46c190
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa609c
jle 0x406d73
push 0x46c1e0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa6d08
jle 0x406d89
push 0x46c230
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa78d4
jle 0x406d9f
push 0x46c288
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa8450
jle 0x406db5
push 0x46c2d8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa8fb8
jle 0x406dcb
push 0x46c330
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xa9b0c
jle 0x406de1
push 0x46c378
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xaa638
jle 0x406df7
push 0x46c3f0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xab13c
jle 0x406e0d
push 0x46c468
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xabc40
jle 0x406e23
push 0x46c4f0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xac730
jle 0x406e39
push 0x46c588
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xad1e4
jle 0x406e4f
push 0x46c5c8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xadc98
jle 0x406e65
push 0x46c620
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xae6e8
jle 0x406e7b
push 0x46c668
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xaf0fc
jle 0x406e91
push 0x46c6b0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xafafc
jle 0x406ea7
push 0x46c718
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb04e8
jle 0x406ebd
push 0x46c778
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb0e98
jle 0x406ed3
push 0x46c7f8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb180c
jle 0x406ee9
push str._________._0123456789:_____ABCDEFGHIJKLMNOPQRSTUVWXYZ____ABCDEFGHIJKLMNOPQRSTUVWXYZ
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb216c
jle 0x406eff
push 0x46c8d0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb2ab8
jle 0x406f15
push 0x46c960
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb33f0
jle 0x406f2b
push 0x46c9d0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb3cd8
jle 0x406f41
push 0x46ca48
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb4598
jle 0x406f57
push 0x46cad0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb4e58
jle 0x406f6d
push 0x46cb58
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb56f0
jle 0x406f83
push 0x46cba0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb5f60
jle 0x406f99
push 0x46cc08
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb67a8
jle 0x406faf
push 0x46cd00
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb6ff0
jle 0x406fc5
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1__.NET_CLR_1.1.4322__.NET_CLR_2.0.50727_
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb7838
jle 0x406fdb
push 0x46cdc0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb8080
jle 0x406ff1
push 0x46ce18
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb8878
jle 0x407007
push 0x46ce78
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb905c
jle 0x40701d
push 0x46ceb8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xb9840
jle 0x407033
push 0x46cf18
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xba010
jle 0x407049
push 0x46cf60
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xba7e0
jle 0x40705f
push 0x46cfa8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbaf74
jle 0x407075
push 0x46d01c
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbb6f4
jle 0x40708b
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1__.NET_CLR_2.0.50727__.NET_CLR_3.0.04506.30_
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbbe74
jle 0x4070a1
push 0x46d0e0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbc5e0
jle 0x4070b7
push 0x46d180
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbcd4c
jle 0x4070cd
push 0x46d1d8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbd4a4
jle 0x4070e3
push 0x46d238
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbdbe8
jle 0x4070f9
push 0x46d298
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbe32c
jle 0x40710f
push 0x46d310
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbea70
jle 0x407125
push 0x46d358
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbf1b4
jle 0x40713b
push 0x46d3b8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xbf8f8
jle 0x407151
push 0x46d418
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc0028
jle 0x407167
push 0x46d478
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc0758
jle 0x40717d
push 0x46d538
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc0e74
jle 0x407193
push str.Mozilla_5.0__Windows__U__Windows_NT_5.1__zh_CN__rv:1.9.0.8__Gecko_2009032609_Firefox_3.0.8__.NET_CLR_3.5.30729_
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc1568
jle 0x4071a9
push 0x46d628
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc1c48
jle 0x4071bf
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1__InfoPath.2_
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc2314
jle 0x4071d5
push 0x46d6e8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc29e0
jle 0x4071eb
push 0x46d738
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc3070
jle 0x407201
push 0x46d7b8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc3700
jle 0x407217
push 0x46d810
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc3d7c
jle 0x40722d
push 0x46d888
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc43e4
jle 0x407243
push 0x46d8c8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc4a4c
jle 0x407259
push 0x46d920
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc50b4
jle 0x40726f
push 0x46d9d8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc571c
jle 0x407285
push 0x46da38
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc5d70
jle 0x40729b
push 0x46daa0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc63b0
jle 0x4072b1
push 0x46db18
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc69dc
jle 0x4072c7
push 0x46db88
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc7008
jle 0x4072dd
push 0x46dbe0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc7620
jle 0x4072f3
push 0x46dc18
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc7c24
jle 0x407309
push 0x46dce0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc8228
jle 0x40731f
push 0x46dd70
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc8818
jle 0x407335
push 0x46ddd0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc8e08
jle 0x40734b
push 0x46de58
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc93f8
jle 0x407361
push 0x46deb8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc99e8
jle 0x407377
push 0x46df58
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xc9fc4
jle 0x40738d
push 0x46dfc8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xca58c
jle 0x4073a3
push 0x46e080
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcab54
jle 0x4073b9
push 0x46e0d8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcb11c
jle 0x4073cf
push str.Mozilla_4.0__compatible__MSIE_7.0__Windows_NT_5.1__Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1___
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcb6d0
jle 0x4073e5
push 0x46e1e0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcbc70
jle 0x4073fb
push 0x46e240
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcc210
jle 0x407411
push 0x46e2a0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcc79c
jle 0x407427
push 0x46e2f8
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xccd14
jle 0x40743d
push 0x46e344
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcd28c
jle 0x407453
push 0x46e380
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcd804
jle 0x407469
push 0x46e410
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xcdd54
jle 0x40747f
push 0x46e458
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xce2a4
jle 0x407495
push 0x46e4a0
lea ecx, [ebp - 0x1c]
call fcn.00404340
cmp dword [ebp - 0x50], 0xce7e0
jle 0x4074ab
lea ecx, [ebp - 0x7c]
call fcn.0043ddb1
mov byte [ebp - 4], 6
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.00404490
push eax
lea ecx, [ebp - 0x7c]
call fcn.0043e238
test eax, eax
je 0x422844
lea ecx, [ebp - 0x7c]
call fcn.0043dc9c
mov dword [ebp - 0x84], eax
mov edx, dword [ebp - 0x84]
add edx, 5
push edx
call fcn.0043d34f
add esp, 4
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x84]
add ecx, 5
push ecx
push 0
mov edx, dword [ebp - 0x80]
push edx
call fcn.0044e5e0
add esp, 0xc
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x80]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.0043daa5
mov edx, dword [ebp - 0x80]
push edx
lea ecx, [ebp - 0x1c]
call fcn.00404340
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
push ecx
call fcn.0043d344
add esp, 4
lea ecx, [ebp - 0x7c]
call fcn.0043dd4b
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp + 8]
call fcn.00404260
mov eax, dword [ebp - 0x94]
or eax, 1
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7c]
call fcn.0043deca
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00404300
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00404300
mov eax, dword [ebp + 8]
jmp 0x4228a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4