Function at 0x4087aa
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
jmp 0x4087e1
call fcn.00406ef0
test eax, eax
je 0x4087f3
jmp 0x408871
push ioctlsocket
push 0
push 0x407eb5
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
push eax
push dword [0xb43bf4]
call fcn.00406fc6
push ioctlsocket
push 0
push 0x40878b
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
push eax
push dword [0xb43bf8]
call fcn.00406fc6
push ioctlsocket
push 0
push 0x40b875
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
push eax
push dword [0xb43bfc]
call fcn.00406fc6
call fcn.0040a212
push 0
push eax
push 0xffffffffffffffff
push 8
push 0x160103f8
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
call fcn.0040a2da
call fcn.00407e0e
cmp dword [0xb43bdc], eax
je 0x408930
call fcn.00407e49
cmp dword [0xb43c38], 0x33d3e7e
mov eax, 0
setne al
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push eax
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
xor ecx, ecx
inc ecx
push ecx
push eax
cmp ecx, eax
jg 0x4088fc
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, eax
xor esi, esi
xor edi, edi
push dword [ebp + 8]
ret
add esp, 8
push 0x5200b0
push dword [0xb43c28]
call fcn.00401130
add esp, 8
cmp eax, 0
jne 0x408930
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, eax
xor esi, esi
xor edi, edi
push dword [ebp + 8]
ret
push 1
call fcn.00408651
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [0xb43c6c]
test ebx, ebx
je 0x408954
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c6c], eax
mov eax, 0x7804f9
push eax
mov ebx, dword [0xb43c70]
test ebx, ebx
je 0x408973
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c70], eax
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x64
sub ecx, 1
inc ecx
xor edx, edx
div ecx
add edx, 1
mov dword [ebp - 4], edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x10000
sub ecx, 1
inc ecx
xor edx, edx
div ecx
add edx, 1
mov dword [ebp - 8], edx
pop edx
pop ecx
fild dword [ebp - 4]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 8]
fstp qword [ebp - 0x20]
fadd qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.0040201c
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 4]
fstp qword [ebp - 0x20]
fmul qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.0040201c
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 4]
fstp qword [ebp - 0x20]
fsub qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 8]
fstp qword [ebp - 0x30]
fdiv qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.0040201c
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [0xb43be0]
fstp qword [ebp - 0x20]
fmul qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [0xb43be4]
fstp qword [ebp - 0x30]
fdiv qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.0040201c
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [0xb43be0]
fstp qword [ebp - 0x20]
fadd qword [ebp - 0x20]
fild dword [0xb43be4]
fstp qword [ebp - 0x28]
fadd qword [ebp - 0x28]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
call fcn.0040201c
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [0xb43be0]
fstp qword [ebp - 0x20]
fdiv qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.0040201c
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push dword [0xb43be4]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0x46acd0
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push dword [0xb43be0]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0x4671a0
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [0xb43be0]
fstp qword [ebp - 0x20]
fdiv qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [0xb43be4]
fstp qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fild dword [ebp - 4]
fstp qword [ebp - 0x40]
fdiv qword [ebp - 0x40]
fstp qword [ebp - 0x48]
push 0x80000601
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 8]
fstp qword [ebp - 0x20]
fadd qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.0040201c
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0x4671c0
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push dword [ebp - 8]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0x4671c0
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push dword [0xb43be0]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0x4671a0
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 4]
fstp qword [ebp - 0x20]
fadd qword [ebp - 0x20]
fild dword [ebp - 8]
fstp qword [ebp - 0x28]
fadd qword [ebp - 0x28]
fild dword [0xb43be0]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fild dword [0xb43be4]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.0040201c
mov dword [ebp - 0xc], eax
push 0xa0000101
push 0
push 0x780501
push 1
mov ebx, 0x4690b0
call fcn.00466d9d
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x4690b0
call fcn.00466d9d
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0xa0000101
push 0
push 0x78050d
push 1
mov ebx, 0x4690b0
call fcn.00466d9d
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x4690b0
call fcn.00466d9d
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
mov ecx, 3
call fcn.0040158f
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x408cf8
push ebx
call fcn.00466d91
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408d08
push ebx
call fcn.00466d91
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x408d18
push ebx
call fcn.00466d91
add esp, 4
push 1
mov eax, 0x5200b0
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0040a36d
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x408d46
push ebx
call fcn.00466d91
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x408d56
push ebx
call fcn.00466d91
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x408d66
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x408d79
mov eax, 0x5200b0
push eax
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x408d9f
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xc], eax
je 0x408dc6
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, eax
xor esi, esi
xor edi, edi
push dword [ebp + 8]
ret
push 0xb43c2c
push 0xb43c28
call fcn.0040a43b
and eax, 1
xor eax, 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push eax
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
xor ecx, ecx
inc ecx
push ecx
push eax
cmp ecx, eax
jg 0x408e1b
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, eax
xor esi, esi
xor edi, edi
push dword [ebp + 8]
ret
add esp, 8
cmp dword [0xb43c3c], 1
jne 0x408e48
push 0
push 0
push 0xffffffffffffffff
push 6
push 0x1601e7a4
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0xb43c2c
push 0xb43c28
call fcn.00401400
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [0xb43c74]
test ebx, ebx
je 0x408e71
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c74], eax
mov dword [0xb43c68], 1
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x6010389
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0
push 0xffffffffffffffff
push 1
push 0x6010389
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 1
push 1
push 0x41
push 0x40c6c2
call fcn.0040a594
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 0x73
push 0x40c85f
call fcn.0040a594
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 0x21
push 0x40c927
call fcn.0040a594
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 0x22
push 0x40c9ef
call fcn.0040a594
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 0x70
push 0x40e0e8
call fcn.0040a594
push 0
push 0x7d0
push 0xffffffffffffffff
push 8
push 0x16012177
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0x80000301
push 0
push 0xa
push 1
mov eax, 2
mov ebx, 0x4d6340
call fcn.00466db5
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x780516
push dword [ebp - 0x14]
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40905c
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40906f
mov eax, 0x5200b0
push eax
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x409092
push ebx
call fcn.00466d91
add esp, 4
push 0x80000301
push 0
push 0xa
push 1
mov eax, 2
mov ebx, 0x4d6340
call fcn.00466db5
add esp, 0x10
mov dword [ebp - 0x14], eax
push str.Pinyin.ime
push dword [ebp - 0x14]
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4090e0
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4090f3
mov eax, 0x5200b0
push eax
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x409116
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
push str.C:WindowsSystem32Fuck_it.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSystem32Pinyin.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64Fuck_it.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64Pinyin.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64gangben.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64gangben.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSystem32gangben.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSystem32gangben.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64_neiqian.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64_neiqian.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSystem32_neiqian.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSystem32_neiqian.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push 0
push 0
push 0
push VariantClear
push 0
push 0x7806ad
push VariantClear
push 0
push 0x536078
push VariantClear
push 0
mov eax, dword [0xb43bcc]
test eax, eax
jne 0x4092b1
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46aab0
call fcn.00466d9d
add esp, 0x34
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [0xb43c78]
test ebx, ebx
je 0x4092de
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c78], eax
push str.D3DX9_38.dll
push dword [0xb43c78]
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409312
mov eax, 0x5200b0
push eax
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409335
push ebx
call fcn.00466d91
add esp, 4
push 0x80000301
push 0
push 0xa
push 1
mov eax, 2
mov ebx, 0x4d6340
call fcn.00466db5
add esp, 0x10
mov dword [ebp - 0x14], eax
push str.Fuck_ita.dll
push dword [ebp - 0x14]
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409383
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x409396
mov eax, 0x5200b0
push eax
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4093b9
push ebx
call fcn.00466d91
add esp, 4
push 0x80000301
push 0
push 0xa
push 1
mov eax, 2
mov ebx, 0x4d6340
call fcn.00466db5
add esp, 0x10
mov dword [ebp - 0x14], eax
push str.Pinyin2.ime
push dword [ebp - 0x14]
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409407
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40941a
mov eax, 0x5200b0
push eax
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40943d
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
push str.C:WindowsSystem32Fuck_ita.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSystem32Pinyin2.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64Fuck_ita.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64Pinyin2.ime
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push VariantClear
push 0
push str.C:WindowsSysWOW64ProcessExtended.dll
push 1
mov ebx, 0x4693d0
call fcn.00466d9d
add esp, 0x10
push 0x80000301
push 0
push 0xa
push 1
mov eax, 2
mov ebx, 0x4d6340
call fcn.00466db5
add esp, 0x10
mov dword [ebp - 0x14], eax
push str._systemn.ini
push dword [ebp - 0x14]
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409521
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
push str.4HTRSE4JK4DASLHGF48WFE435FSD132786KUY786LOU465DR5FWECSD4BFD53ADS453DA
push VariantClear
push 0
push str.vison
push VariantClear
push 0
push 0x7807e2
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x409558
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46abb0
call fcn.00466d9d
add esp, 0x34
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40957b
push ebx
call fcn.00466d91
add esp, 4
push 0
push 0x7d0
push 0xffffffffffffffff
push 8
push 0x16012171
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0
push 0
push VariantClear
push 0
push 0x7807e6
push VariantClear
push 0
push 0x536078
push VariantClear
push 0
mov eax, dword [0xb43bcc]
test eax, eax
jne 0x4095cb
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46aab0
call fcn.00466d9d
add esp, 0x34
mov dword [ebp - 0x14], eax
push 0x7802e0
push dword [ebp - 0x14]
call fcn.00401130
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40960f
push ebx
call fcn.00466d91
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x409636
push 0
push 0
push 0xffffffffffffffff
push 0x12
push 0x160205b0
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0
push 0
push VariantClear
push 0
push 0x7807e6
push VariantClear
push 0
push 0x536078
push VariantClear
push 0
mov eax, dword [0xb43bcc]
test eax, eax
jne 0x409669
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46aab0
call fcn.00466d9d
add esp, 0x34
mov dword [ebp - 0x14], eax
push 0x7802e2
push dword [ebp - 0x14]
call fcn.00401130
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4096ad
push ebx
call fcn.00466d91
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x4096d4
push 0
push 1
push 0xffffffffffffffff
push 0x12
push 0x160205b0
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0
push 0
push VariantClear
push 0
push 0x7807f0
push VariantClear
push 0
push 0x536078
push VariantClear
push 0
mov eax, dword [0xb43bcc]
test eax, eax
jne 0x409707
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46aab0
call fcn.00466d9d
add esp, 0x34
mov dword [ebp - 0x14], eax
push 0x7802e0
push dword [ebp - 0x14]
call fcn.00401130
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40974b
push ebx
call fcn.00466d91
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x409772
push 0
push 0
push 0xffffffffffffffff
push 0x12
push 0x160205b1
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0
push 0
push VariantClear
push 0
push 0x7807f0
push VariantClear
push 0
push 0x536078
push VariantClear
push 0
mov eax, dword [0xb43bcc]
test eax, eax
jne 0x4097a5
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46aab0
call fcn.00466d9d
add esp, 0x34
mov dword [ebp - 0x14], eax
push 0x7802e2
push dword [ebp - 0x14]
call fcn.00401130
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4097e9
push ebx
call fcn.00466d91
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x409867
push 0
push 1
push 0xffffffffffffffff
push 0x12
push 0x160205b1
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x160201cd
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x1601ead0
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push 0
push 0x12c
push 0xffffffffffffffff
push 8
push 0x160204b5
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
cmp dword [0xb43c3c], 1
jne 0x409a35
push 0xb43c2c
push 0xb43c28
call fcn.00401400
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4098a5
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x4676f0
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4098cb
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4098de
mov eax, 0x5200b0
push eax
push 1
mov ebx, 0x467fd0
call fcn.00466d9d
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x409904
push ebx
call fcn.00466d91
add esp, 4
cmp dword [ebp - 0x1c], 0x7eb
jle 0x40997f
push 0
push 0x7807fb
push 0xffffffffffffffff
push 8
push 0x160201fc
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
push VariantClear
push 0
push 0x7802e2
push VariantClear
push 0
push 0x780814
push VariantClear
push 0
push 0x536078
push VariantClear
push 0
mov eax, dword [0xb43bcc]
test eax, eax
jne 0x409967
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46abb0
call fcn.00466d9d
add esp, 0x34
jmp 0x409a30
push 0xb43c2c
push 0xb43c28
call fcn.00401400
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push 0x780817
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4099b9
push ebx
call fcn.00466d91
add esp, 4
push 0
push dword [ebp - 0x18]
push 0xffffffffffffffff
push 8
push 0x160201fc
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4099e4
push ebx
call fcn.00466d91
add esp, 4
push VariantClear
push 0
push 0x7802e0
push VariantClear
push 0
push 0x780814
push VariantClear
push 0
push 0x536078
push VariantClear
push 0
mov eax, dword [0xb43bcc]
test eax, eax
jne 0x409a1d
mov eax, 0x5200b0
push eax
push 4
mov ebx, 0x46abb0
call fcn.00466d9d
add esp, 0x34
jmp 0x409a9a
push 0xb43c2c
push 0xb43c28
call fcn.00401400
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push 0x78081f
mov ecx, 2
call fcn.0040158f
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409a6f
push ebx
call fcn.00466d91
add esp, 4
push 0
push dword [ebp - 0x18]
push 0xffffffffffffffff
push 8
push 0x160201fc
push 0x5201038a
call fcn.00466dbb
add esp, 0x18
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x409a9a
push ebx
call fcn.00466d91
add esp, 4
push 2
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409ac6
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409aec
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c7c]
test ebx, ebx
je 0x409b03
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c7c], eax
push 3
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409b35
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409b5b
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c80]
test ebx, ebx
je 0x409b72
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c80], eax
push 4
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409ba4
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409bca
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c84]
test ebx, ebx
je 0x409be1
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c84], eax
push 5
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409c13
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409c39
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c88]
test ebx, ebx
je 0x409c50
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c88], eax
push 6
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409c82
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409ca8
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c8c]
test ebx, ebx
je 0x409cbf
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c8c], eax
push 7
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409cf1
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409d17
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c90]
test ebx, ebx
je 0x409d2e
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c90], eax
push 8
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409d60
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409d86
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c94]
test ebx, ebx
je 0x409d9d
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c94], eax
push 9
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409dcf
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409df5
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c98]
test ebx, ebx
je 0x409e0c
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c98], eax
push 0xa
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409e3e
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409e64
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43c9c]
test ebx, ebx
je 0x409e7b
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43c9c], eax
push 0xb
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409ead
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409ed3
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43ca0]
test ebx, ebx
je 0x409eea
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43ca0], eax
push 0xc
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409f1c
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409f42
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43ca4]
test ebx, ebx
je 0x409f59
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43ca4], eax
push 0xd
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409f8b
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409fb1
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43ca8]
test ebx, ebx
je 0x409fc8
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43ca8], eax
push 0xe
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x409ffa
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a020
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43cac]
test ebx, ebx
je 0x40a037
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43cac], eax
push 0xf
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x40a069
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a08f
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43cb0]
test ebx, ebx
je 0x40a0a6
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43cb0], eax
push 0x10
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x40a0d8
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a0fe
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43cb4]
test ebx, ebx
je 0x40a115
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43cb4], eax
push 0x11
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x40a147
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a16d
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43cb8]
test ebx, ebx
je 0x40a184
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43cb8], eax
push 0x12
call fcn.00408651
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 4
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x40a1b6
mov eax, 0x5200b0
push eax
push 2
mov ebx, 0x467730
call fcn.00466d9d
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a1dc
push ebx
call fcn.00466d91
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0xb43cbc]
test ebx, ebx
je 0x40a1f3
push ebx
call fcn.00466d91
add esp, 4
pop eax
mov dword [0xb43cbc], eax
call fcn.0040b6de
jmp 0x40a20e
mov esp, ebp
pop ebp
ret