Function at 0x40efdf
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 8
call fcn.004301bb
add esp, 4
mov dword [ebp - 0x20], eax
mov edi, eax
mov esi, 0x53e1e8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x24], 0
push 8
call fcn.004301bb
add esp, 4
mov dword [ebp - 0x28], eax
mov edi, eax
mov esi, 0x53e1e8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x2c], 0
push 0x10
call fcn.004301bb
add esp, 4
mov dword [ebp - 0x30], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx], 0x53f8ef
push ebx
add ebx, 4
push ebx
push 8
call fcn.004301bb
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.004301bb
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 0x10
call fcn.004301bb
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov eax, 3
mov dword [ebx], eax
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00410d58
pop ebx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov eax, 0x53e170
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40f144
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
push 0x53e1e5
push dword [0x77572c]
push str.Host:
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f183
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Connection:_keep_alive_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f1b3
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Upgrade_Insecure_Requests:_1_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f1e3
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f213
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f243
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Sec_Fetch_Site:_same_origin_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f273
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Sec_Fetch_Mode:_navigate_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f2a3
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Sec_Fetch_User:__1_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f2d3
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Sec_Fetch_Dest:_iframe_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f303
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Accept_Encoding:_gzip__deflate__br_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f333
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str._tpl_x590_ver1_member_lottery_member_index.shtml_r_n
push dword [0x77572c]
push str.Referer:_https:__
push dword [ebp - 0xc]
mov ecx, 4
call fcn.0040106f
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f36e
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.Accept_Language:_zh_CN_zh_q0.9_r_n
push dword [ebp - 0xc]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f39e
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0
mov ebx, 0x4325d0
call fcn.004301d3
add esp, 4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
push 1
push 1
push 1
push 1
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
push dword [ebp - 0x48]
call fcn.0040ff07
mov dword [ebp - 0x4c], eax
push str._07:00:00
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40f40e
push ebx
call fcn.004301c1
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x40f421
mov eax, 0x53e170
push eax
push 1
mov ebx, 0x430f30
call fcn.004301d3
add esp, 0x10
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edx
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40f44a
push ebx
call fcn.004301c1
add esp, 4
push 0x80000301
push 0
push 8
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 3
mov ebx, 0x4322c0
call fcn.004301d3
add esp, 0x28
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], edx
fld qword [ebp - 0x68]
fcomp qword [0x53e3f7]
fnstsw ax
test ah, 0x41
je 0x40f4f6
push 0
mov ebx, 0x4325d0
call fcn.004301d3
add esp, 4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
push 0x80000301
push 0
push 0xffffffff
push 0x80000301
push 0
push 5
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 3
mov ebx, 0x431f10
call fcn.004301d3
add esp, 0x28
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], edx
jmp 0x40f50e
push 0
mov ebx, 0x4325d0
call fcn.004301d3
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], edx
push dword [0x775738]
push str.member_lottery_common_result_ssc.php_game_type
push dword [0x775728]
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0x3c], eax
push 1
push 0
push 1
push 0
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
push 8
call fcn.004301bb
add esp, 4
mov dword [ebp - 0x44], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
push 0x775754
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
push 0x775718
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
push 0
lea eax, [ebp - 0x3c]
push eax
call fcn.00409aef
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40f633
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40f646
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x40f659
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40f669
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40f679
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40f689
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40f699
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x434490
call fcn.004301d3
add esp, 0x10
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [0x775750]
test ebx, ebx
je 0x40f6d6
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [0x775750], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.gzip
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [0x775754]
test eax, eax
jne 0x40f70f
mov eax, 0x53e170
push eax
push 4
mov ebx, 0x430d40
call fcn.004301d3
add esp, 0x34
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
je 0x40f7ae
push 0x775750
call fcn.00410a8d
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x40f74f
mov eax, 0x53e1e8
push eax
push 1
mov ebx, 0x431e00
call fcn.004301d3
add esp, 0x10
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40f775
push ebx
call fcn.004301c1
add esp, 4
lea eax, [ebp - 0x40]
push eax
call fcn.0040663e
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40f791
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40f7a5
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
jmp 0x40f80d
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [0x775750]
test eax, eax
jne 0x40f7c3
mov eax, 0x53e1e8
push eax
push 1
mov ebx, 0x431e00
call fcn.004301d3
add esp, 0x10
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040663e
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40f7f5
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40f809
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov eax, str.__table_
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str._table
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00401d39
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40f859
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40f869
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f87d
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.__tr_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x40f8a6
mov eax, 0x53e170
push eax
push 3
mov ebx, 0x431720
call fcn.004301d3
add esp, 0x28
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x20]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40f8de
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40f8da
imul eax, dword [ebx]
jmp 0x40f8cf
mov ecx, eax
test ecx, ecx
je 0x40f8fd
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40f8f6
push ebx
push eax
call fcn.004301c1
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40f8e4
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x20]
call fcn.00401347
xor ecx, ecx
push eax
lea eax, [ebp - 0x24]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40fe06
mov ebx, dword [ebp - 0x20]
call fcn.00401360
push ebx
push ecx
mov ebx, dword [ebp - 0x20]
call fcn.00401347
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fild dword [ebp - 0x24]
fstp qword [ebp - 0x4c]
fsub qword [ebp - 0x4c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x53e1a7]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
call fcn.0040116f
dec eax
jns 0x40f976
push 4
call fcn.004301c7
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f989
push 1
call fcn.004301c7
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x60], ebx
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x53e1e5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x60]
mov eax, dword [ebx]
test eax, eax
jne 0x40f9b8
mov eax, 0x53e170
push eax
push 3
mov ebx, 0x431720
call fcn.004301d3
add esp, 0x28
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x28]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40f9f0
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40f9ec
imul eax, dword [ebx]
jmp 0x40f9e1
mov ecx, eax
test ecx, ecx
je 0x40fa0f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40fa08
push ebx
push eax
call fcn.004301c1
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40f9f6
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x28]
call fcn.00401347
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 8
jle 0x40fdfe
mov ebx, dword [ebp - 0x28]
call fcn.00401360
mov eax, 1
cmp eax, ecx
jl 0x40fa4e
push 1
call fcn.004301c7
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, str.__td_
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov eax, str._td_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x3c]
call fcn.00401d39
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40faa1
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40fab1
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40fac5
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x20]
call fcn.00401360
push ebx
push ecx
mov ebx, dword [ebp - 0x20]
call fcn.00401347
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fild dword [ebp - 0x24]
fstp qword [ebp - 0x4c]
fsub qword [ebp - 0x4c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x53e1a7]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
call fcn.0040116f
dec eax
jns 0x40fb17
push 4
call fcn.004301c7
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40fb2a
push 1
call fcn.004301c7
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push dword [ebp - 0x60]
mov eax, str._td_classNo__.__
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x40fbaa
push ebx
call fcn.004301c1
add esp, 4
mov eax, 0x53e170
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40fbc0
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
xor ecx, ecx
push eax
lea eax, [ebp - 0x38]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40fcb6
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
push dword [ebp - 0x38]
lea eax, [ebp - 0x30]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x40], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x40fc22
mov eax, 0x53e170
push eax
push 1
mov ebx, 0x430f90
call fcn.004301d3
add esp, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40fc4b
push ebx
call fcn.004301c1
add esp, 4
push 0x80000601
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 1
mov ebx, 0x431e00
call fcn.004301d3
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x53e4d0
push dword [ebp - 0x4c]
push dword [ebp - 0x34]
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40fc96
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40fcaa
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
pop eax
pop ebx
pop ecx
jmp 0x40fbdb
add esp, 0xc
push 0x53e170
push dword [ebp - 0x2c]
call fcn.004012aa
add esp, 8
cmp eax, 0
je 0x40fcf2
push 0x53e170
push dword [ebp - 0x34]
call fcn.004012aa
add esp, 8
cmp eax, 0
je 0x40fcf2
mov eax, 1
jmp 0x40fcf7
mov eax, 0
test eax, eax
je 0x40fdfe
push 0x80000301
push 0
push 0
mov ebx, 6
call fcn.00401d31
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x40fd28
mov eax, 0x53e170
push eax
push 0x20004
push 0x1601006b
push 0x52010002
push 5
mov eax, 1
mov ebx, 0x497820
call fcn.004301eb
add esp, 0x40
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
jne 0x40fdfe
mov ebx, 0xc
call fcn.00401d31
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x40fd79
mov eax, 0x53e170
push eax
push 0x80000301
push 0
push 0
push 0x20004
push 0x1601006b
push 0x52010002
push 7
mov eax, 1
mov ebx, 0x497650
call fcn.004301eb
add esp, 0x58
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40fdbf
mov eax, 0x53e170
push eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 0
push 0x20004
push 0x1601006b
push 0x52010002
push 4
mov eax, 1
mov ebx, 0x497600
call fcn.004301eb
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x40f91a
add esp, 0xc
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40fe19
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40fe29
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40fe39
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40fe49
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40fe67
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40fe63
imul eax, dword [ebx]
jmp 0x40fe58
mov ecx, eax
test ecx, ecx
je 0x40fe86
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40fe7f
push ebx
push eax
call fcn.004301c1
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40fe6d
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40feac
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40fea8
imul eax, dword [ebx]
jmp 0x40fe9d
mov ecx, eax
test ecx, ecx
je 0x40fecb
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40fec4
push ebx
push eax
call fcn.004301c1
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40feb2
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40fee3
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x30]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40ff03
push ebx
call fcn.004301c1
add esp, 4
mov esp, ebp
pop ebp
ret