Function at 0x470f8b
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
push 8
call fcn.005039ad
add esp, 4
mov dword [ebp - 0x40], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0x5fa79f
push ebx
add ebx, 4
push ebx
push 8
call fcn.005039ad
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00442a99
pop ebx
mov dword [ebp - 0x44], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x5f5e52]
fstp qword [ebp - 0x54]
push 0x80000601
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x58], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x47109f
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4710ec
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
push 0x5f602b
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 3
mov eax, 1
mov ebx, 0x5713c0
call fcn.005039d1
add esp, 0x28
mov dword [ebp - 0x48], eax
push 0x5f5e2d
push dword [ebp - 0x48]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4711a1
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x4711fd
push VariantClear
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x4711c0
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push VariantClear
push 0
push 0x607ec1
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 3
jg 0x4738ae
mov eax, 0x5f5e2d
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x471268
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
push 1
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
mov eax, str.Host:_wq.jd.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:_http:__wqs.jd.com_my_cart_jdshopcart.shtml
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, str.http:__wq.jd.com_mlogin_h5v1_cpLogin_BJ_rurlhttp_3A_2F_2Fwqs.jd.com_2Fmy_2Findexv2.shtml_3Fshownav_3D1
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x471333
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x471343
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x471353
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x471363
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x471373
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x471383
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x471393
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4713a3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4713b3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4713c3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4713d3
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x5f6557
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, str.Location:
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x47141f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x47142f
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x471443
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Host:_open.show.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:_http:__wqs.jd.com_my_cart_jdshopcart.shtml
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
lea eax, [ebp - 8]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x4714ff
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x47150f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x47151f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x47152f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x47153f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x47154f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x47155f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x47156f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x47157f
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x5f6557
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, str.Location:
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4715cb
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4715db
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4715ef
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Host:_wq.jd.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:_http:__wqs.jd.com_my_cart_jdshopcart.shtml
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
push 0
lea eax, [ebp - 8]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x4716a6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4716b6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4716c6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4716d6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4716e6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4716f6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x471706
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x471716
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x471726
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x5f6557
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, str.Location:
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x471772
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x471782
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x471796
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Host:_graph.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:_http:__wqs.jd.com_my_cart_jdshopcart.shtml
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
lea eax, [ebp - 8]
push eax
call fcn.00415eed
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x47185d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x47186d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x47187d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x47188d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x47189d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4718ad
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4718bd
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4718cd
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4718dd
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x4718f0
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x471916
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x47192a
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, str.content_1_url
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x47197a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x47198a
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x47199e
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.0040143b
push VariantClear
push 0
push 0x5f7c08
push VariantClear
push 0
push str.61_
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4719e3
mov eax, 0x5f5e2d
push eax
push 6
mov ebx, 0x5054b0
call fcn.005039b3
add esp, 0x4c
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x471a0d
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.0040143b
push VariantClear
push 0
push 0x5fa953
push VariantClear
push 0
push 0x6085f5
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x471a52
mov eax, 0x5f5e2d
push eax
push 6
mov ebx, 0x5054b0
call fcn.005039b3
add esp, 0x4c
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x471a7c
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Host:_xui.ptlogin2.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x471b33
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x471b43
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x471b53
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x471b63
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x471b73
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x471b83
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x471b93
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x471ba3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x471bb3
push ebx
call fcn.005039b9
add esp, 4
call fcn.0044889a
mov dword [ebp - 0x48], eax
push dword [ebp - 0x48]
push str.appid716027609ptlang2052r
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__check.ptlogin2.qq.com_check_pt_tea1uin
mov ecx, 4
call fcn.0040108c
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x471bed
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x14]
push str.Host:_check.ptlogin2.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
push 1
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
lea eax, [ebp - 0x4c]
push eax
call fcn.00415eed
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x471cb9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x471cc9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x471cd9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x471ce9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x471cf9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x471d09
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x471d19
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x471d29
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x471d39
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x471d4c
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x471d72
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x471d86
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.ptui_checkVC_1
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x471dbb
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
je 0x4729dd
mov eax, 0x5f5f27
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x471df1
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x600dbb
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x608944
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x471e41
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x471e51
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x471e65
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
call fcn.0044889a
mov dword [ebp - 0x48], eax
push dword [ebp - 0x48]
push 0x608949
push dword [ebp - 0x1c]
push str.cap_cd
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__captcha.qq.com_cap_union_show_captype3lang2052aid716027609uin
mov ecx, 6
call fcn.0040108c
add esp, 0x18
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x471eab
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x14]
push str.Host:_check.ptlogin2.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
push 1
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.00455c29
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x471f72
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x471f82
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x471f92
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x471fa2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x471fb2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x471fc2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x471fd2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x471fe2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x471ff2
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x472006
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, str.g_click_cap_sig_
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472056
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x472066
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x47207a
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 1
inc dword [ebp - 0x24]
mov eax, dword [0x6eeaf4]
cmp dword [ebp - 0x24], eax
jle 0x472101
push VariantClear
push 0
push 0x5fa3b8
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov eax, 0x5fa3b8
push eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4720f6
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x14]
mov dword [ebx], eax
jmp 0x4729b8
mov eax, 0x5f5e98
xor ecx, ecx
test eax, eax
je 0x47210f
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x28]
xor ebx, ebx
test eax, eax
je 0x472120
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x472137
dec eax
test ecx, ecx
je 0x472137
call fcn.00407863
add esp, 0xc
test eax, eax
je 0x4723c1
call fcn.0044889a
mov dword [ebp - 0x48], eax
push dword [ebp - 0x48]
push 0x5fa953
push dword [ebp - 0x20]
push str.captype2sig
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__captcha.qq.com_getQueSig_aid716027609uin
mov ecx, 6
call fcn.0040108c
add esp, 0x18
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x472184
push ebx
call fcn.005039b9
add esp, 4
push str.v0.44835192896425724_r_nAccept_Language:_zh_CN_zh_q0.8
push dword [ebp - 0x20]
push str.cap_cd
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.Host:_captcha.qq.com_r_nAccept:___r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nReferer:_http:__captcha.qq.com_cap_union_show_captype3lang2052aid716027609uin
mov ecx, 5
call fcn.0040108c
add esp, 0x14
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
push 1
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
lea eax, [ebp - 0x4c]
push eax
call fcn.00415eed
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x472266
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x472276
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x472286
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x472296
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4722a6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4722b6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4722c6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4722d6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4722e6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4722f6
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x80]
test eax, eax
jne 0x472309
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x472332
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x472349
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, str.cap_getCapBySig__
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472399
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4723a9
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4723bd
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push str.sig
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__captcha.qq.com_getimgbysig_aid716027609uin
mov ecx, 4
call fcn.0040108c
add esp, 0x10
mov dword [ebp - 0x48], eax
push dword [ebp - 0x14]
push str.Host:_check.ptlogin2.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
push 1
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.00415eed
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4724b1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4724c1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4724d1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4724e1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4724f1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x472501
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x472511
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x472521
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x472531
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472541
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x472555
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6eeb8c]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
mov ebx, dword [0x6eeb84]
mov dword [ebp - 0x4c], ebx
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x50], ebx
mov ebx, dword [0x6eeb98]
add ebx, 0xc
mov dword [ebp - 0x54], ebx
push dword [ebp - 0x54]
mov edx, 0x1601233f
mov eax, 0x52010003
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
lea eax, [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x50]
push dword [ebx]
push 4
push 1
lea eax, [ebp - 0x30]
push eax
push 0x16012ac7
push 0x52010003
push 0x160168dc
push 0x52010003
push 0x160168dd
push 0x52010003
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push 3
push dword [ebp + 8]
lea eax, [ebp - 0x28]
push eax
call fcn.0043e907
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4725fd
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
call fcn.0044889a
mov dword [ebp - 0x48], eax
push dword [ebp - 0x48]
push 0x5fa953
push dword [ebp - 0x20]
push str.sig
push dword [ebp - 0x2c]
push str.captype2ans
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__captcha.qq.com_cap_union_verify_aid716027609uin
mov ecx, 8
call fcn.0040108c
add esp, 0x20
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x47264b
push ebx
call fcn.005039b9
add esp, 4
call fcn.0044889a
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push 0x608949
push dword [ebp - 0x1c]
push str.cap_cd
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.Host:_captcha.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:_image_png_image__q0.8___q0.5_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:_http:__captcha.qq.com_cap_union_show_captype3lang2052aid716027609uin
mov ecx, 6
call fcn.0040108c
add esp, 0x18
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x47268d
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 1
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.00415eed
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x472743
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x472753
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x472763
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472773
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x472783
push 0x5f5e2d
mov ebx, dword [ebp + 0x14]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x4729d8
jmp 0x4738ae
jmp 0x472b37
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x600dbb
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x608dfe
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472a29
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x472a39
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x472a4d
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x5fa926
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040db78
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x472a91
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x472aa5
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x600dbb
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x603502
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472af5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x472b05
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x472b19
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov eax, 0x5f67a0
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x472b33
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 0xc]
push dword [ebp + 0x10]
call fcn.00473c48
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x472b5d
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str.redirect_uri
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0040db78
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x472ba1
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x54]
push eax
call fcn.0045ee6f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472bcb
push ebx
call fcn.005039b9
add esp, 4
push str.pt_randsalt0ptlang2052low_login_enable0u1http_3A_2F_2Fconnect.qq.comfrom_ui1fploginerroralertdevice2aid716027609pt_3rd_aid100273020ptredirect1h1g1pt_uistyle35
push dword [ebp - 0x3c]
push 0x608ecb
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push 0x608ecf
push dword [ebp - 0x34]
push 0x608ed3
push dword [ebp - 0x38]
push str.pt_verifysession_v1
push dword [ebp - 0x18]
push str._26sign_3D_26time_3D_26status_version_3D_26status_os_3D_26status_machine_3D_26page_type_3D1_26has_auth_3D1_26update_auth_3D1_26auth_time_3D1435492717442pt_vcode_v1
push dword [ebp - 0x58]
push str.http:__ptlogin2.qq.com_pt_open_login_openlogin_datawhich_3D_26refer_cgi_3Dauthorize_26response_type_3Dcode_26client_id_3D100273020_26state_3D_26display_3D_26openapi_3D1010_1011_26switch_3D0_26src_3D1_26sdkv_3D_26sdkp_3Da_26tid_3D1435492706_26pf_3D_26need_pay_3D0_26browser_3D0_26browser_error_3D_26serial_3D_26token_key_3D_26redirect_uri_3D
mov ecx, 0xd
call fcn.0040108c
add esp, 0x34
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x472c22
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x472c36
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 0x14]
push str.Host:_ptlogin2.qq.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
push 1
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
lea eax, [ebp - 8]
push eax
call fcn.00415eed
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x472d06
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x472d16
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x472d26
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x472d36
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x472d46
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x472d56
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x472d66
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x472d76
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x472d89
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x472daf
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
lea eax, [ebp - 0x78]
push eax
call fcn.0043e1a1
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x472dd2
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x472de6
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x609248
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x472e1b
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
je 0x472eab
push VariantClear
push 0
push 0x609248
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov eax, 0x6092a8
push eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
test ebx, ebx
je 0x472e9b
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x14]
mov dword [ebx], eax
jmp 0x4738ae
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x6092bd
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x472edc
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
je 0x472f6c
push VariantClear
push 0
push 0x6092d6
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov eax, 0x6092d6
push eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
test ebx, ebx
je 0x472f5c
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x14]
mov dword [ebx], eax
jmp 0x4738ae
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x6092fd
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x472f9d
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
je 0x473028
push VariantClear
push 0
push 0x6092fd
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov eax, 0x6092fd
push eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
test ebx, ebx
je 0x47301d
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x14]
mov dword [ebx], eax
jmp 0x4738ae
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x609318
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x473059
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
je 0x4738a8
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x603502
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x609321
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004173a5
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4730c5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4730d5
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x58]
push str.http
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4730fd
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x14]
push str.Host:_wq.jd.com_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_4.4.2__zh_cn__H60_L02_Build_HDH60_L02__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_MQQBrowser_5.4_TBS_025413_Mobile_Safari_533.1_V1_AND_SQ_5.5.1_236_YYB_D_QQ_5.5.1.2435_NetType_WIFI_WebP_0.3.0_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nReferer:
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
lea eax, [ebp - 0x5c]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x4731d1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4731e1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x4731f4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x473204
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x473214
pop ecx
jmp 0x471247
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x44]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x473a31
push 0x5f5e2d
mov ebx, dword [ebp + 0x14]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x473903
mov eax, 0x609757
push eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4738fd
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0x14]
mov dword [ebx], eax
cmp dword [ebp + 0x20], 0
jne 0x473932
push 0xffffffffffffffff
push 0x12
push 0x1602cea9
push 0x52010003
call fcn.005039dd
add esp, 0x10
test eax, eax
je 0x473932
mov eax, 1
jmp 0x473937
mov eax, 0
test eax, eax
je 0x4739a8
mov ebx, dword [0x6eec14]
add ebx, 0xf0
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
mov eax, 0
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push 1
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov eax, 0x609760
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x48]
call fcn.004445a2
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x473998
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4739a8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp + 0x14]
push dword [ebx]
push 0x60976b
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x48], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4739d5
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x473a22
push ebx
call fcn.005039b9
add esp, 4
mov eax, 0x5f7514
jmp 0x473b40
cmp dword [ebp + 0x20], 0
jne 0x473a60
push 0xffffffffffffffff
push 0x12
push 0x1602cea9
push 0x52010003
call fcn.005039dd
add esp, 0x10
test eax, eax
je 0x473a60
mov eax, 1
jmp 0x473a65
mov eax, 0
test eax, eax
je 0x473aee
mov ebx, dword [0x6eec14]
add ebx, 0xec
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
mov eax, 0
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov eax, 0x609776
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x48]
call fcn.004445a2
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x473ace
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x473ade
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x473aee
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
push 0x609318
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov eax, 0x5f672d
jmp 0x473b40
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x473b51
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x473b61
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x473b71
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x473b81
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x473b91
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x473ba1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x473bb1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x473bc1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x473bd1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x473be1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x473bf1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x473c01
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x473c11
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x473c21
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x473c41
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x1c