Function at 0x4172e8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 8
call fcn.0047721e
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x5a8864
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
push 8
call fcn.0047721e
add esp, 4
mov dword [ebp - 0x14], eax
mov edi, eax
mov esi, 0x5a8864
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x18], 0
push 8
call fcn.0047721e
add esp, 4
mov dword [ebp - 0x1c], eax
mov edi, eax
mov esi, 0x5a8864
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
push 1
push dword [ebp + 8]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
test eax, eax
je 0x41bef9
mov eax, 0x61c75e
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 4]
push eax
push 0x8bb260
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4173db
push ebx
call fcn.00477224
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4173ef
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.655358_
push 1
mov ebx, CharToOemA
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41742d
mov eax, 0x5a8864
push eax
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x417441
mov eax, 0x5a8864
push eax
push 3
mov ebx, 0x479350
call fcn.00477236
add esp, 0x28
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x417467
push ebx
call fcn.00477224
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x417489
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x417485
imul eax, dword [ebx]
jmp 0x41747a
mov ecx, eax
test ecx, ecx
je 0x4174a8
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4174a1
push ebx
push eax
call fcn.00477224
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41748f
call fcn.00477224
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b39
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jle 0x41bef9
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 0
cmp eax, ecx
jl 0x4174e7
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x417504
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41752e
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push str.jzdl
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x417564
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0
call fcn.00477254
add esp, 4
push 0x7f94ae
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x417e29
mov ebx, dword [ebp - 0xc]
call fcn.00401b39
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 7
jle 0x417dde
push 0
mov ebx, 0x47a7d0
call fcn.00477236
add esp, 4
mov ebx, dword [0x8bb2f4]
add ebx, 0x28
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x4175ce
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x4175eb
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417617
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x2c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 2
cmp eax, ecx
jl 0x417647
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x417664
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417690
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x34
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 3
cmp eax, ecx
jl 0x4176c0
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x4176dd
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417709
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x38
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 4
cmp eax, ecx
jl 0x417739
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x417756
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417782
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x3c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 5
cmp eax, ecx
jl 0x4177b2
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x4177cf
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4177fb
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x40
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 6
cmp eax, ecx
jl 0x41782b
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x417848
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417874
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x44
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 7
cmp eax, ecx
jl 0x4178a4
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
je 0x4178c8
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0047721e
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4178db
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x48
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 8
cmp eax, ecx
jl 0x41790b
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x417928
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417954
push ebx
call fcn.00477224
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
push 1
push 0
push 0x8bb330
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb334
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb338
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb34c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb2dc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0
push 0xffffffffffffffff
push 6
push 0x160110c7
push 0x520110c5
call fcn.0047724e
add esp, 0x18
push 1
push 0
push 0x8bb33c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [0x8bb2f4]
add ebx, 0x3c
mov dword [ebp - 0x20], ebx
push 0x71aad7
mov ebx, dword [ebp - 0x20]
push dword [ebx]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x417c3e
mov ebx, dword [0x8bb2f4]
add ebx, 0x2c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
je 0x417a4c
push eax
mov ebx, eax
call fcn.00401ea6
inc eax
push eax
call fcn.0047721e
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x8bb370]
test ebx, ebx
je 0x417a60
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [0x8bb370], eax
mov word [0x8bb374], 0x4e22
mov ebx, dword [0x8bb2f4]
add ebx, 0x40
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x417a90
mov eax, 0x5a887b
push eax
push 1
mov ebx, 0x478350
call fcn.00477236
add esp, 0x10
mov word [0x8bb378], ax
push 0x70001
push 0
push dword [0x8bb314]
push 1
mov eax, 6
mov ebx, 0x4e76e0
call fcn.00477242
add esp, 0x10
test eax, eax
je 0x417bdf
push 0x80000201
push 0
push dword [0x8bb374]
push 1
mov ebx, reloc.KERNEL32.dll_TlsAlloc
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x80000201
push 0
push dword [0x8bb378]
push 1
mov ebx, reloc.KERNEL32.dll_TlsAlloc
call fcn.00477236
add esp, 0x10
push 0x80000201
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [0x8bb370]
test eax, eax
jne 0x417b33
mov eax, 0x5a887b
push eax
push 0x80000201
push 0
push dword [ebp - 0x20]
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.127.0.0.1
push 0x70001
push 0
push dword [0x8bb314]
push 5
mov eax, 6
mov ebx, 0x4e7780
call fcn.00477242
add esp, 0x40
test eax, eax
je 0x417b7b
jmp 0x417bda
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f94c1
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417bca
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x417bda
push ebx
call fcn.00477224
add esp, 4
jmp 0x417c3e
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f94c1
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417c2e
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x417c3e
push ebx
call fcn.00477224
add esp, 4
push 0x80000301
push 0
push 3
push 1
mov eax, 5
mov ebx, 0x4e68f0
call fcn.00477242
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x28
mov dword [ebp - 0x24], ebx
push 0x7f94ee
mov ebx, dword [ebp - 0x24]
push dword [ebx]
push 0x61ca41
push dword [ebp - 0x20]
mov ecx, 4
call fcn.00402b5f
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x417ca2
push ebx
call fcn.00477224
add esp, 4
push 0
mov ebx, 0x4778a0
call fcn.00477236
add esp, 4
mov dword [ebp - 0x2c], eax
push 0
mov ebx, 0x4778c0
call fcn.00477236
add esp, 4
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push 0x61ca41
push dword [ebp - 0x2c]
mov ecx, 3
call fcn.00402b5f
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x417cf7
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x417d07
push ebx
call fcn.00477224
add esp, 4
push 0
mov ebx, 0x4778a0
call fcn.00477236
add esp, 4
mov dword [ebp - 0x38], eax
push 0x61ca41
push dword [ebp - 0x38]
mov ecx, 2
call fcn.00402b5f
add esp, 8
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x417d44
push ebx
call fcn.00477224
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x417d57
mov eax, 0x5a887b
push eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x7f94f3
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x417d7d
mov eax, 0x5a887b
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x417d91
mov eax, 0x5a887b
push eax
push 5
mov eax, 5
mov ebx, 0x4e6660
call fcn.00477242
add esp, 0x40
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417db9
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x417dc9
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x417dd9
push ebx
call fcn.00477224
add esp, 4
jmp 0x417e1a
push 1
mov eax, 0x7f9516
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push 0x8bb29c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x78]
mov ebx, eax
test ebx, ebx
je 0x417e0a
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x417e1a
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f952b
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x417eab
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9534
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417e91
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x417ea1
push ebx
call fcn.00477224
add esp, 4
push 0
call fcn.00477254
add esp, 4
push 0x7f954d
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x417f48
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9558
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417f13
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x417f23
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb37c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9579
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x417ff6
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9582
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417fb0
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x417fc0
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f95aa
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4180a4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f95b3
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41805e
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41806e
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f95da
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4181c3
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x4180db
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x4180f8
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x7f95e3
mov ecx, 2
call fcn.00402b5f
add esp, 8
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418136
push ebx
call fcn.00477224
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41817d
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41818d
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9619
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418271
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9622
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41822b
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41823b
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9663
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41831f
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9672
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4182d9
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4182e9
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9685
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4183bc
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9694
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x418387
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418397
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb380
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f96b7
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418459
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f96c6
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x418424
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418434
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb380
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f96d3
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4184f6
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f96c6
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4184c1
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4184d1
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb380
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f96e2
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4185a4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9672
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41855e
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41856e
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f96f1
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418641
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f96fe
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41860c
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41861c
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb384
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9721
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4186de
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f96c6
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4186a9
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4186b9
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb384
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9730
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41877b
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f96c6
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x418746
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418756
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb384
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f973f
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41886f
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f974a
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x418850
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418860
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9769
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418963
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9772
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x418944
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418954
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f978f
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418b9a
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x418a07
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x418a24
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 2
cmp eax, ecx
jl 0x418a58
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x418a75
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 3
cmp eax, ecx
jl 0x418aa9
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x418ac6
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
push 0x7f979c
push dword [ebp - 0x2c]
push 0x7f97a6
push dword [ebp - 0x24]
push 0x7f97b1
mov ecx, 6
call fcn.00402b5f
add esp, 0x18
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418b14
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x418b24
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418b34
push ebx
call fcn.00477224
add esp, 4
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push 1
push 0
lea eax, [ebp - 0x38]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418b7b
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x418b8b
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f97c7
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418c8e
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f97d4
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x418c6f
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418c7f
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f97ed
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418ec5
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x418d32
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x418d4f
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 2
cmp eax, ecx
jl 0x418d83
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x418da0
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 3
cmp eax, ecx
jl 0x418dd4
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x418df1
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
push 0x7f979c
push dword [ebp - 0x2c]
push 0x7f97fa
push dword [ebp - 0x24]
push 0x7f9805
mov ecx, 6
call fcn.00402b5f
add esp, 0x18
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418e3f
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x418e4f
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418e5f
push ebx
call fcn.00477224
add esp, 4
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push 1
push 0
lea eax, [ebp - 0x38]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418ea6
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x418eb6
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f981b
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x418fb9
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9828
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x418f9a
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x418faa
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9841
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4190ad
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f984c
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41908e
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41909e
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9865
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4191a1
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9870
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419182
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419192
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9893
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419295
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f98a0
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419276
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419286
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f98bf
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4193f0
push 1
push 0
push 0x8bb388
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325b
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325c
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0
push 0x5a887b
push 0xffffffffffffffff
push 8
push 0x1601325f
push 0x52011ac6
call fcn.0047724e
add esp, 0x18
push 0xffffffffffffffff
push 0x13
push 0x16013260
push 0x52011ac6
call fcn.00477248
add esp, 0x10
push 0x80000301
push 0
push eax
push 0x1000e
push 0x16013260
push 0x52011ac6
push 2
mov ebx, 0x47aaa0
call fcn.00477236
add esp, 0x1c
mov dword [ebp - 0x24], eax
push 0x7f98c8
push dword [ebp - 0x24]
push 0x7f98d8
mov ecx, 3
call fcn.00402b5f
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41938a
push ebx
call fcn.00477224
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4193d1
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4193e1
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f98e2
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419617
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.jzkey
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.user
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [0x8bb250]
test eax, eax
jne 0x41943c
mov eax, 0x5a887b
push eax
push 4
mov ebx, 0x47ad70
call fcn.00477236
add esp, 0x34
mov dword [ebp - 0x20], eax
push 0x71aad7
push dword [ebp - 0x20]
call fcn.00401e09
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419480
push ebx
call fcn.00477224
add esp, 4
cmp dword [ebp - 0x24], 0
je 0x419507
push 0xffffffffffffffff
push 8
push 0x160130b7
push 0x520110c5
call fcn.00477248
add esp, 0x10
mov dword [ebp - 0x20], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4194b6
mov eax, 0x5a887b
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x61ca47
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.user
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [0x8bb250]
test eax, eax
jne 0x4194e4
mov eax, 0x5a887b
push eax
push 4
mov ebx, 0x47ae70
call fcn.00477236
add esp, 0x34
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419507
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [0x8bb2f4]
add ebx, 4
mov dword [ebp - 0x20], ebx
push 0xffffffffffffffff
push 8
push 0x160130b7
push 0x520110c5
call fcn.00477248
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0xffffffffffffffff
push 8
push 0x160130b8
push 0x520110c5
call fcn.00477248
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x71ab5c
push dword [ebp - 0x28]
push 0x61ca3d
push dword [ebp - 0x24]
push str._http:__127.0.0.1:21888_huaqi.xml
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push str.dev:
mov ecx, 7
call fcn.00402b5f
add esp, 0x1c
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419584
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419594
push ebx
call fcn.00477224
add esp, 4
mov ebx, 6
call fcn.0040390e
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4195b1
mov eax, 0x5a887b
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.QY.exe
push 0
push 0
push 0
push 5
mov eax, 5
mov ebx, 0x4e67f0
call fcn.00477242
add esp, 0x40
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4195eb
push ebx
call fcn.00477224
add esp, 4
push 0
push 2
push 0xffffffffffffffff
push 0x12
push 0x6010002
push 0x52010003
call fcn.0047724e
add esp, 0x18
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f98f6
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4196b4
push 1
push 0
push 0x8bb2dc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9903
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419695
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4196a5
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9922
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419751
push 1
push 0
push 0x8bb2dc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f992f
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419732
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419742
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9946
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4197ee
push 1
push 0
push 0x8bb38c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9953
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4197cf
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4197df
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f996e
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41988b
push 1
push 0
push 0x8bb38c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f997b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41986c
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41987c
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9996
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419939
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f99a1
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4198f3
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419903
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f99c4
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x4199e7
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f99cf
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4199a1
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4199b1
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f99e2
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419a95
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f99eb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419a4f
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419a5f
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f99f8
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419b43
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9a01
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419afd
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419b0d
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9a0e
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419ef4
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x419b7a
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x419b97
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x718b58
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x419bd2
mov eax, 0x5a887b
push eax
push 3
mov ebx, 0x478930
call fcn.00477236
add esp, 0x28
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419bf8
push ebx
call fcn.00477224
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x419c1a
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x419c16
imul eax, dword [ebx]
jmp 0x419c0b
mov ecx, eax
test ecx, ecx
je 0x419c39
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x419c32
push ebx
push eax
call fcn.00477224
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x419c20
call fcn.00477224
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 2
cmp eax, ecx
jl 0x419c63
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x419c80
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0x8bb390]
test ebx, ebx
je 0x419cad
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [0x8bb390], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 3
cmp eax, ecx
jl 0x419cd1
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x419cee
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0x8bb394]
test ebx, ebx
je 0x419d1b
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [0x8bb394], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 4
cmp eax, ecx
jl 0x419d3f
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x419d5c
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0x8bb398]
test ebx, ebx
je 0x419d89
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [0x8bb398], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 1
push 0
push 1
push 0xd2
push 1
mov eax, 0x7f9a1b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 0x8bb39c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x9c]
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419df1
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x14]
call fcn.00401b39
xor ecx, ecx
push eax
lea eax, [ebp - 0x18]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x419ee2
call fcn.0040664c
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 0x8bb39c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x419e74
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x14]
call fcn.00401b19
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x419e91
push 4
call fcn.0047722a
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419ea4
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push 1
push dword [ebp - 0x20]
push 1
push dword [ebp - 0x18]
push 0x8bb39c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc8]
mov ebx, eax
test ebx, ebx
je 0x419eda
push ebx
call fcn.00477224
add esp, 4
pop eax
pop ebx
pop ecx
jmp 0x419e02
add esp, 0xc
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9a3d
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x419fda
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x419f2b
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x419f48
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push 0
lea eax, [ebp - 0x24]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419fa5
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x419fb5
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3a0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9a4a
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a088
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9a5b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a042
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a052
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9a8a
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a136
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9a97
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a0f0
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a100
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9a8a
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a1e4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9a97
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a19e
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a1ae
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9aa6
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a281
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9ab7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a24c
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a25c
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3a0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9ad2
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a32f
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9adb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a2e9
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a2f9
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9ae8
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a3cc
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9af1
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a397
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a3a7
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3a0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9b08
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a469
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9b15
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a434
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a444
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3a0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9b36
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a517
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9b45
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a4d1
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a4e1
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9b6a
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a5b4
push 1
push 0
push 0x8bb3a4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9953
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a595
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a5a5
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9b7b
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a651
push 1
push 0
push 0x8bb3a4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f997b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a632
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a642
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9996
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a715
push 1
push 0
push 0x8bb3a4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9b8a
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a6cf
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a6df
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f99c4
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a7c3
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f99cf
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a77d
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a78d
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9bab
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41a871
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f99cf
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a82b
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a83b
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9bba
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41ac22
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x41a8a8
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41a8c5
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x718b58
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x41a900
mov eax, 0x5a887b
push eax
push 3
mov ebx, 0x478930
call fcn.00477236
add esp, 0x28
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a926
push ebx
call fcn.00477224
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41a948
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41a944
imul eax, dword [ebx]
jmp 0x41a939
mov ecx, eax
test ecx, ecx
je 0x41a967
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41a960
push ebx
push eax
call fcn.00477224
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41a94e
call fcn.00477224
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 2
cmp eax, ecx
jl 0x41a991
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41a9ae
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0x8bb3a8]
test ebx, ebx
je 0x41a9db
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [0x8bb3a8], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 3
cmp eax, ecx
jl 0x41a9ff
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41aa1c
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0x8bb3ac]
test ebx, ebx
je 0x41aa49
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [0x8bb3ac], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 4
cmp eax, ecx
jl 0x41aa6d
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41aa8a
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0x8bb398]
test ebx, ebx
je 0x41aab7
push ebx
call fcn.00477224
add esp, 4
pop eax
mov dword [0x8bb398], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 1
push 0
push 1
push 0xd2
push 1
mov eax, 0x7f9bcb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 0x8bb3b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x9c]
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41ab1f
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x1c]
call fcn.00401b39
xor ecx, ecx
push eax
lea eax, [ebp - 0x18]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x41ac10
call fcn.0040664c
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 0x8bb3b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41aba2
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x1c]
call fcn.00401b19
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x41abbf
push 4
call fcn.0047722a
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41abd2
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push 1
push dword [ebp - 0x20]
push 1
push dword [ebp - 0x18]
push 0x8bb3b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc8]
mov ebx, eax
test ebx, ebx
je 0x41ac08
push ebx
call fcn.00477224
add esp, 4
pop eax
pop ebx
pop ecx
jmp 0x41ab30
add esp, 0xc
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9bed
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41ad1e
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x41ac59
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41ac76
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push 0
lea eax, [ebp - 0x24]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41acd3
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41ace3
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb3b8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9bfa
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41adcc
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9a97
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41ad86
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41ad96
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9c07
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41ae7f
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9ab7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41ae34
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41ae44
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb3b8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9c18
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41af32
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9c27
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41aee7
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41aef7
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb3b8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9c55
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41afe0
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9c5e
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41af9a
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41afaa
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9c6b
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b093
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9c74
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b048
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b058
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb3b8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9c8b
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b18f
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x41b0ca
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41b0e7
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push 0
lea eax, [ebp - 0x24]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b144
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b154
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb3b8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9c98
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b23d
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9a97
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b1f7
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b207
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9ca5
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b2f0
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9ab7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b2a5
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b2b5
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb3b8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9cb6
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b3e7
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x41b327
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41b344
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push 0
lea eax, [ebp - 0x24]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b3a1
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b3b1
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ade
push 0x52011add
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9cbf
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b4e3
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x41b41e
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41b43b
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push 0
lea eax, [ebp - 0x24]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b498
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b4a8
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 1
push 0
push 0x8bb3b8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9cc8
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b580
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9cd7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b54b
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b55b
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9ce4
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b61d
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9cef
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b5e8
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b5f8
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9d16
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b6ba
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9d16
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b685
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b695
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9d1f
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b768
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9d2a
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b722
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b732
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011b29
push 0x52011b28
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9d58
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b805
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9d61
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b7d0
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b7e0
push ebx
call fcn.00477224
add esp, 4
push 1
push 0
push 0x8bb3bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9d92
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b8b3
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9d9d
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b86d
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b87d
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011b29
push 0x52011b28
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9db6
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41b9c6
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x41b8ea
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41b907
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [0x8bb2f4]
add ebx, 0x48
mov dword [ebp - 0x28], ebx
push 0x7f7e8a
mov ebx, dword [ebp - 0x28]
push dword [ebx]
push 0x7f9dbf
push dword [ebp - 0x24]
push 0x7f9dd5
mov ecx, 5
call fcn.00402b5f
add esp, 0x14
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b960
push ebx
call fcn.00477224
add esp, 4
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 1
push 0
lea eax, [ebp - 0x2c]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b9a7
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41b9b7
push ebx
call fcn.00477224
add esp, 4
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9e2d
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41ba74
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9cd7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41ba2e
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41ba3e
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ad3
push 0x52011ad2
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9e3c
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41bb22
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9e47
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41badc
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41baec
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ad3
push 0x52011ad2
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9e60
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41bbd0
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9e69
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41bb8a
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41bb9a
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ad3
push 0x52011ad2
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9e92
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41bc7e
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9d16
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41bc38
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41bc48
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ad3
push 0x52011ad2
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9e9f
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41bd2c
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9eaa
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41bce6
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41bcf6
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ad3
push 0x52011ad2
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9ec1
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41bdda
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
mov eax, 0x7f9d61
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41bd94
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41bda4
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ad3
push 0x52011ad2
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0x7f9ece
push dword [ebp - 0x10]
call fcn.00401e09
add esp, 8
cmp eax, 0
jne 0x41bef9
mov ebx, dword [ebp - 0xc]
call fcn.00401b19
mov eax, 1
cmp eax, ecx
jl 0x41be11
push 1
call fcn.0047722a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysFreeString
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41be2e
mov eax, 0x5a8864
push eax
push 1
mov ebx, SetUnhandledExceptionFilter
call fcn.00477236
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x7f9edb
mov ecx, 2
call fcn.00402b5f
add esp, 8
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41be6c
push ebx
call fcn.00477224
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push 0x40
push 1
mov eax, 0x61ca9a
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
push dword [0x8bb2a0]
call fcn.00406fbb
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41beb3
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41bec3
push ebx
call fcn.00477224
add esp, 4
push 0
push 0
push 0
push 0x10001
push 0x6011ad3
push 0x52011ad2
push 2
mov ebx, 0x47a7e0
call fcn.00477236
add esp, 0x1c
push 0x8bb36c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41bf09
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41bf27
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41bf23
imul eax, dword [ebx]
jmp 0x41bf18
mov ecx, eax
test ecx, ecx
je 0x41bf46
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41bf3f
push ebx
push eax
call fcn.00477224
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41bf2d
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41bf5e
push ebx
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41bf7c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41bf78
imul eax, dword [ebx]
jmp 0x41bf6d
mov ecx, eax
test ecx, ecx
je 0x41bf9b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41bf94
push ebx
push eax
call fcn.00477224
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41bf82
call fcn.00477224
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41bfc1
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41bfbd
imul eax, dword [ebx]
jmp 0x41bfb2
mov ecx, eax
test ecx, ecx
je 0x41bfe0
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41bfd9
push ebx
push eax
call fcn.00477224
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41bfc7
call fcn.00477224
add esp, 4
mov esp, ebp
pop ebp
ret 8