Function at 0x516af0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5b74c2
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push esi
mov esi, ecx
xor ebx, ebx
mov eax, dword [esi + 0x30]
cmp eax, ebx
jle 0x516dd2
push ebp
lea eax, [esi + 0x10]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esp + 0x18]
lea edi, [esi + 0x28]
push ebx
push ecx
mov ecx, edi
call fcn.0041abd0
push 1
push ebx
mov ecx, edi
mov dword [esp + 0x78], ebx
call sub.MFC42.DLL_CStringArray::RemoveAt
mov edx, dword [esi + 8]
lea ecx, [esi + 8]
call dword [edx + 0x1c]
lea eax, [esp + 0x20]
push eax
call sub.MFC42.DLL_CTime::GetTickCount
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::CString_1
mov ecx, dword [esp + 0x18]
lea ebp, [esi + 0x3c]
push ecx
push edi
push str.POST__TravelWeb_jsp_login_online.jsp_lptime0._d_HTTP_1.1_r_nAccept:___r_nAccept_Language:_zh_cn_r_nReferer:_http:__web2.travelsky.com_TravelWeb_etermConfig.do_methodqueryEtermConfig_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_4.0__compatible__MSIE_8.0__Windows_NT_6.1__WOW64__Trident_4.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__Media_Center_PC_6.0__.NET4.0C__.NET4.0E__r_nHost:_web2.travelsky.com_r_nContent_Length:_0_r_nConnection:_Keep_Alive_r_nPragma:_no_cache_r_nCookie:_loczh_CN___s_r_n_r_n
push ebp
mov byte [esp + 0x80], 1
call dword [sym.imp.MSVCRT.dll_sprintf]
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
push 0x14
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esi + 0x83c], ecx
call sub.MFC42.DLL_operatornew
add esp, 0x14
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0x70], 2
je 0x516bb8
mov ecx, eax
call fcn.005935da
mov edi, eax
mov dword [esp + 0x10], edi
jmp 0x516bbe
mov dword [esp + 0x10], ebx
mov edi, ebx
push ebx
push 0x3f
push 1
push ebx
mov ecx, edi
mov byte [esp + 0x80], 1
call sub.MFC42.DLL_CAsyncSocket::Create
push 0x50
push str.web2.travelsky.com
mov ecx, edi
call sub.MFC42.DLL_CAsyncSocket::Connect
cmp eax, 1
jne 0x516d80
mov eax, dword [esi + 0x83c]
mov edx, dword [edi]
push ebx
push eax
push ebp
mov ecx, edi
call dword [edx + 0x20]
cmp eax, ebx
jle 0x516d80
mov edx, dword [edi]
push ebx
push 0x800
push ebp
mov ecx, edi
call dword [edx + 0x1c]
cmp eax, ebx
jle 0x516d80
mov byte [eax + esi + 0x3c], bl
mov esi, dword [sym.imp.MSVCRT.dll_strstr]
push str.AlteonP
push ebp
call esi
add esp, 8
cmp eax, ebx
je 0x516d80
push eax
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esp + 0x14]
mov byte [esp + 0x70], 3
call sub.MFC42.DLL_CString::TrimRight
mov eax, dword [esp + 0x14]
push 0x624614
push eax
call esi
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x516d72
mov edi, str.JSESSIONID
or ecx, 0xffffffff
xor eax, eax
push 0x3a
repne scasb al, byte es:[edi]
not ecx
dec ecx
add esi, ecx
push esi
call dword [sym.imp.MSVCRT.dll_strchr]
add esp, 8
cmp eax, ebx
je 0x516d6e
mov edx, eax
sub edx, esi
cmp edx, 0x40
jge 0x516d6e
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x29]
mov byte [esp + 0x28], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
lea edi, [esp + 0x28]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
xor eax, eax
and ecx, 3
mov dword [esp + 0x1c], eax
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x635490]
cmp dword [ecx + 0x2f0], ebx
jle 0x516d6e
mov ecx, dword [ecx + 0x2ec]
mov edi, dword [ecx + eax*4]
cmp edi, ebx
je 0x516d51
mov eax, dword [edi + 0x20]
xor ebp, ebp
cmp eax, ebx
jle 0x516d51
mov edx, dword [edi + 0x1c]
mov esi, dword [edx + ebp*4]
cmp esi, ebx
je 0x516d1e
mov eax, dword [esi + 0x70]
cmp eax, ebx
je 0x516d1e
cmp byte [eax + 0x92], bl
je 0x516d1e
mov ecx, dword [esp + 0x18]
mov eax, dword [esi + 0xc14]
push ecx
push eax
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
je 0x516d28
mov eax, dword [edi + 0x20]
inc ebp
cmp ebp, eax
jl 0x516cec
jmp 0x516d51
lea edx, [esp + 0x14]
lea ecx, [esi + 0xc14]
push edx
call sub.MFC42.DLL_CString::operator_1
add esi, 0xc10
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call sub.MFC42.DLL_CString::operator
mov ecx, esi
call sub.MFC42.DLL_CString::MakeUpper
mov ecx, dword [0x635490]
mov eax, dword [esp + 0x1c]
inc eax
mov edx, dword [ecx + 0x2f0]
mov dword [esp + 0x1c], eax
cmp eax, edx
jl 0x516cd6
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0x14]
mov byte [esp + 0x70], 1
call sub.MFC42.DLL_CString::CString
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x18]
cmp edi, ebx
je 0x516d94
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 4]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x24]
mov byte [esp + 0x70], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov dword [esp + 0x70], 0xffffffff
call sub.MFC42.DLL_CString::CString
pop edi
pop ebp
pop esi
mov al, 1
pop ebx
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
add esp, 0x64
ret
mov ecx, dword [esp + 0x60]
pop esi
mov al, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret