Function at 0x4177f9
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [0x5de928], 1
mov dword [ebp - 4], 0
push 0x80000301
push 0
push 0x3c
push 1
mov ebx, 0x43cf50
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4179e2
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0xffffffffffffffff
push 0x12
push 0x160154aa
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jne 0x417aad
mov eax, dword [0x5de93c]
test eax, eax
je 0x417a2d
push eax
mov ebx, eax
call fcn.00401004
inc eax
push eax
call fcn.0043bbf6
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x417a3e
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, dword [0x5de944]
test eax, eax
je 0x417a60
push eax
mov ebx, eax
call fcn.00401004
inc eax
push eax
call fcn.0043bbf6
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x417a71
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov eax, dword [0x5de940]
test eax, eax
je 0x417a93
push eax
mov ebx, eax
call fcn.00401004
inc eax
push eax
call fcn.0043bbf6
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x417aa4
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
jmp 0x417aad
push 0xffffffffffffffff
push 0x13
push 0x16015458
push 0x52010001
call fcn.0043bc08
add esp, 0x10
push 0x80000301
push 0
push eax
push 0x1000e
push 0x16015458
push 0x52010001
push 2
mov ebx, 0x43ea90
call fcn.0043bbf0
add esp, 0x1c
mov dword [ebp - 0xd0], eax
push 0x5aac59
push dword [ebp - 0xd0]
call fcn.00401737
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0xd4], eax
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x417b29
push ebx
call fcn.0043bbfc
add esp, 4
cmp dword [ebp - 0xd4], 0
je 0x417cc6
push 0xffffffffffffffff
push 8
push 0x1601545b
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xcc], eax
push VariantClear
push 0
mov eax, dword [ebp - 0xcc]
test eax, eax
jne 0x417b68
mov eax, 0x4e2b35
push eax
push 1
mov ebx, 0x43cae0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x417b94
push ebx
call fcn.0043bbfc
add esp, 4
push 0x4e2b35
push dword [ebp - 0xd0]
call fcn.00401737
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0xd4], eax
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x417bcb
push ebx
call fcn.0043bbfc
add esp, 4
cmp dword [ebp - 0xd4], 0
jne 0x417c7e
push 0xffffffffffffffff
push 8
push 0x1601545a
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xd8], eax
push VariantClear
push 0
mov eax, dword [ebp - 0xd8]
test eax, eax
jne 0x417c0a
mov eax, 0x4e2b35
push eax
push 1
mov ebx, 0x43cae0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xdc], eax
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x417c36
push ebx
call fcn.0043bbfc
add esp, 4
push 0x4e2b35
push dword [ebp - 0xdc]
call fcn.00401737
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0xe0], eax
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x417c6d
push ebx
call fcn.0043bbfc
add esp, 4
cmp dword [ebp - 0xe0], 0
jne 0x417c7e
xor eax, eax
jmp 0x417c83
mov eax, 1
test eax, eax
je 0x417cc6
push VariantClear
push 0
push 0x5aaba3
push 0x80000301
push 0
push 0
push VariantClear
push 0
push 0x5aac62
push 3
mov ebx, 0x43e470
call fcn.0043bbf0
add esp, 0x28
jmp 0x41e157
push 0
mov ebx, 0x43db60
call fcn.0043bbf0
add esp, 4
push reloc.WS2_32.dll_closesocket
push edx
push eax
push 1
mov ebx, 0x43da80
call fcn.0043bbf0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xd8], eax
push 0
mov ebx, 0x43db60
call fcn.0043bbf0
add esp, 4
push reloc.WS2_32.dll_closesocket
push edx
push eax
push 1
mov ebx, 0x43daa0
call fcn.0043bbf0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xe8], eax
push 0
mov ebx, 0x43db60
call fcn.0043bbf0
add esp, 4
push reloc.WS2_32.dll_closesocket
push edx
push eax
push 1
mov ebx, 0x43dac0
call fcn.0043bbf0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xf8], eax
push str..txt
push dword [ebp - 0xf8]
push 0x5aac97
push dword [ebp - 0xe8]
push 0x5aac97
push dword [ebp - 0xd8]
push 0x5aac99
mov ecx, 7
call fcn.0040106f
add esp, 0x1c
mov dword [ebp - 0xfc], eax
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x417df3
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe8]
test ebx, ebx
je 0x417e06
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf8]
test ebx, ebx
je 0x417e19
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xfc]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x417e30
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0
mov ebx, 0x43c0b0
call fcn.0043bbf0
add esp, 4
mov dword [ebp - 0xcc], eax
push dword [ebp - 0x18]
push 0x5aacab
push dword [ebp - 0xcc]
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x417e80
push ebx
call fcn.0043bbfc
add esp, 4
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 5
push VariantClear
push 0
mov eax, dword [ebp - 0xd0]
test eax, eax
jne 0x417eae
mov eax, 0x4e2b35
push eax
push 3
mov ebx, 0x43deb0
call fcn.0043bbf0
add esp, 0x28
mov dword [ebp - 0xd4], eax
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x417eda
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x43e0a0
call fcn.0043bbf0
add esp, 0x10
push 0
mov ebx, 0x43db60
call fcn.0043bbf0
add esp, 4
push reloc.WS2_32.dll_closesocket
push edx
push eax
push 1
mov ebx, 0x43da80
call fcn.0043bbf0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xd8], eax
push 0
mov ebx, 0x43db60
call fcn.0043bbf0
add esp, 4
push reloc.WS2_32.dll_closesocket
push edx
push eax
push 1
mov ebx, 0x43daa0
call fcn.0043bbf0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xe8], eax
push 0
mov ebx, 0x43db60
call fcn.0043bbf0
add esp, 4
push reloc.WS2_32.dll_closesocket
push edx
push eax
push 1
mov ebx, 0x43dac0
call fcn.0043bbf0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xf8], eax
push str..txt
push dword [ebp - 0xf8]
push 0x5aac97
push dword [ebp - 0xe8]
push 0x5aac97
push dword [ebp - 0xd8]
push 0x5aacad
mov ecx, 7
call fcn.0040106f
add esp, 0x1c
mov dword [ebp - 0xfc], eax
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x41802c
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe8]
test ebx, ebx
je 0x41803f
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf8]
test ebx, ebx
je 0x418052
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xfc]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x418069
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0
mov ebx, 0x43c0b0
call fcn.0043bbf0
add esp, 4
mov dword [ebp - 0xcc], eax
push dword [ebp - 0x20]
push 0x5aacab
push dword [ebp - 0xcc]
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x4180b9
push ebx
call fcn.0043bbfc
add esp, 4
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 5
push VariantClear
push 0
mov eax, dword [ebp - 0xd0]
test eax, eax
jne 0x4180e7
mov eax, 0x4e2b35
push eax
push 3
mov ebx, 0x43deb0
call fcn.0043bbf0
add esp, 0x28
mov dword [ebp - 0xd4], eax
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x418113
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x43e0a0
call fcn.0043bbf0
add esp, 0x10
push 0x50004
push 0x1601347a
push 0x52010001
push 1
mov eax, 4
mov ebx, 0x4a97b0
call fcn.0043bc02
add esp, 0x10
xor ecx, ecx
push eax
lea eax, [ebp - 0x28]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x41dfd1
push 0x80000601
push 0x40080000
push 0
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
push 0x80000601
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push 2
mov ebx, 0x43bf00
call fcn.0043bbf0
add esp, 0x1c
push 0x80000601
push edx
push eax
push 1
mov ebx, 0x43c140
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x418245
push 0x80000301
push 0
push 1
push 1
mov eax, 8
mov ebx, 0x4b40c0
call fcn.0043bc02
add esp, 0x10
push 0x80000301
push 0
push 3
push 1
mov eax, 8
mov ebx, 0x4b40c0
call fcn.0043bc02
add esp, 0x10
push 0x80000301
push 0
push 6
push 1
mov eax, 8
mov ebx, 0x4b4110
call fcn.0043bc02
add esp, 0x10
cmp dword [0x5de928], 3
jne 0x418272
mov dword [ebp - 0xcc], 0
push 0
push dword [ebp - 0xcc]
push 1
push 0x1f4
call fcn.0040866b
jmp 0x418245
push 0xffffffffffffffff
push 0x13
push 0x16015458
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0x2c], eax
cmp dword [0x5de928], 2
jne 0x41829d
jmp 0x41dfd1
mov dword [ebp - 0xcc], 0
push 0
push dword [ebp - 0xcc]
push 0xfa
push 0xa
call fcn.004163b0
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd4], 0
push 0
push dword [ebp - 0xd4]
push 0xfa
push 0xa
call fcn.004163b0
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xdc], 0
push 0
push dword [ebp - 0xdc]
push 0xfa
push 0xa
call fcn.004163b0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
push 0
push dword [ebp - 0xe4]
push 0xfa
push 0xa
call fcn.004163b0
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xec], 0
push 0
lea eax, [ebp - 0xec]
push eax
mov dword [ebp - 0xf0], 0
push 0
lea eax, [ebp - 0xf0]
push eax
mov dword [ebp - 0xf4], 0
push 0
lea eax, [ebp - 0xf4]
push eax
mov dword [ebp - 0xf8], 0
push 0
lea eax, [ebp - 0xf8]
push eax
mov dword [ebp - 0xfc], 0
push 0
lea eax, [ebp - 0xfc]
push eax
mov dword [ebp - 0x100], 0
push 0
lea eax, [ebp - 0x100]
push eax
mov dword [ebp - 0x104], 0
push 0
lea eax, [ebp - 0x104]
push eax
mov dword [ebp - 0x108], 0
push 0
lea eax, [ebp - 0x108]
push eax
mov dword [ebp - 0x10c], 0
push 0
lea eax, [ebp - 0x10c]
push eax
mov dword [ebp - 0x110], 0
push 0
lea eax, [ebp - 0x110]
push eax
mov dword [ebp - 0x114], 0
push 0
lea eax, [ebp - 0x114]
push eax
mov dword [ebp - 0x118], 0
push 0
lea eax, [ebp - 0x118]
push eax
push 1
lea eax, [ebp - 0xe8]
push eax
push 1
mov eax, 0x5aacbf
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x11c]
push eax
push 1
lea eax, [ebp - 0xe0]
push eax
push 1
mov eax, 0x5aacc3
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x120]
push eax
push 1
lea eax, [ebp - 0xd8]
push eax
push 1
mov eax, 0x5aacc7
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0xd0]
push eax
mov eax, 0x5aaccb
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x128]
push eax
mov dword [ebp - 0x12c], 0
push 0
push dword [ebp - 0x12c]
mov dword [ebp - 0x130], 0
push 0
push dword [ebp - 0x130]
mov dword [ebp - 0x134], 0
push 0
push dword [ebp - 0x134]
mov eax, str.VIA:_1.1_PROXY.HIDOMAIN.COM:3128__squid_2.7.STABLE6__r_nX_Forwarded_For:_1.2.3.4
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x138]
push eax
call fcn.0041659c
mov dword [ebp - 0x13c], eax
mov ebx, dword [ebp - 0x138]
test ebx, ebx
je 0x4184f3
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x128]
test ebx, ebx
je 0x418506
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x418519
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x124]
test ebx, ebx
je 0x41852c
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x41853f
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x120]
test ebx, ebx
je 0x418552
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe0]
test ebx, ebx
je 0x418565
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x11c]
test ebx, ebx
je 0x418578
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe8]
test ebx, ebx
je 0x41858b
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x118]
test ebx, ebx
je 0x41859e
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x114]
test ebx, ebx
je 0x4185b1
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x110]
test ebx, ebx
je 0x4185c4
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x10c]
test ebx, ebx
je 0x4185d7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x108]
test ebx, ebx
je 0x4185ea
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x104]
test ebx, ebx
je 0x4185fd
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x100]
test ebx, ebx
je 0x418610
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xfc]
test ebx, ebx
je 0x418623
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf8]
test ebx, ebx
je 0x418636
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf4]
test ebx, ebx
je 0x418649
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf0]
test ebx, ebx
je 0x41865c
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xec]
test ebx, ebx
je 0x41866f
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0x13c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x418686
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push 0
push 0x4e2b35
push 0xffffffffffffffff
push 8
push 0x1601579d
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
push 0
push 0x4e2b35
push 0xffffffffffffffff
push 8
push 0x16015738
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
push 0xffffffffffffffff
push 0x12
push 0x160157d0
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jne 0x418780
push 0
push 0x5aad26
push 0xffffffffffffffff
push 8
push 0x1601579d
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [0x5de918]
push 0x50004
push 0x16015739
push 0x52010001
push 3
mov eax, 4
mov ebx, 0x4a95c0
call fcn.0043bc02
add esp, 0x28
mov dword [ebp - 0xcc], eax
push 0
push dword [ebp - 0xcc]
push 0xffffffffffffffff
push 8
push 0x16015738
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x418780
push ebx
call fcn.0043bbfc
add esp, 4
push 0xffffffffffffffff
push 0x12
push 0x160157cb
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jne 0x418af5
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 0xa
jg 0x418ad0
mov dword [ebp - 0xcc], 0
push 0
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xd0], 0
push 0
lea eax, [ebp - 0xd0]
push eax
mov dword [ebp - 0xd4], 0
push 0
lea eax, [ebp - 0xd4]
push eax
mov dword [ebp - 0xd8], 0
push 0
push dword [ebp - 0xd8]
mov dword [ebp - 0xdc], 0
push 0
lea eax, [ebp - 0xdc]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0xe0], 0
push 0
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 0xe4], 0
push 0
lea eax, [ebp - 0xe4]
push eax
mov dword [ebp - 0xe8], 0
push 0
lea eax, [ebp - 0xe8]
push eax
mov dword [ebp - 0xec], 0
push 0
push dword [ebp - 0xec]
mov eax, 0x4e30c0
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0xf0]
push eax
call fcn.004018fe
mov dword [ebp - 0xf4], eax
mov ebx, dword [ebp - 0xf0]
test ebx, ebx
je 0x418895
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe8]
test ebx, ebx
je 0x4188a8
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe4]
test ebx, ebx
je 0x4188bb
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe0]
test ebx, ebx
je 0x4188ce
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x4188e1
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x4188f4
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x418907
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x41891a
push ebx
call fcn.0043bbfc
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xf4]
test eax, eax
jne 0x418930
mov eax, 0x4e2b0c
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xf8], eax
mov ebx, dword [ebp - 0xf4]
test ebx, ebx
je 0x41895c
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xf8]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418973
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.004060e5
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41899d
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5aadce
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x4189d2
mov eax, 0x4e2b35
push eax
push 4
mov ebx, 0x43c580
call fcn.0043bbf0
add esp, 0x34
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffff
je 0x418a02
jmp 0x418ad0
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5aadd7
push 0x80000301
push 0
push 3
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
push VariantClear
push 0
push 0x5aadd7
push 0x80000301
push 0
push 1
push 0x50002
push 0x160134cc
push 0x52010001
push 3
mov eax, 4
mov ebx, 0x4a9410
call fcn.0043bc02
add esp, 0x28
mov dword [ebp - 0xcc], 0
push 0
push dword [ebp - 0xcc]
push 1
push 0x1f4
call fcn.0040866b
pop ecx
jmp 0x4187ab
add esp, 4
push 0
push 0x4e2b35
push 0xffffffffffffffff
push 8
push 0x16015738
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
jmp 0x418af5
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push 0x80000301
push 0
push 1
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 3
mov eax, 4
mov ebx, 0x4a95c0
call fcn.0043bc02
add esp, 0x28
mov dword [ebp - 0xdc], eax
push VariantClear
push 0
mov eax, dword [ebp - 0xdc]
test eax, eax
jne 0x418b71
mov eax, 0x4e2b35
push eax
push 1
mov ebx, 0x43cae0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xe0], eax
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x418b9d
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xe0]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418bb4
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xcc], 0
push 0
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xd0], 0
push 0
lea eax, [ebp - 0xd0]
push eax
mov dword [ebp - 0xd4], 0
push 0
lea eax, [ebp - 0xd4]
push eax
mov dword [ebp - 0xd8], 0
push 0
lea eax, [ebp - 0xd8]
push eax
mov dword [ebp - 0xdc], 0
push 0
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0xe0], 0
push 0
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 0xe4], 0
push 0
lea eax, [ebp - 0xe4]
push eax
mov dword [ebp - 0xe8], 0
push 0
lea eax, [ebp - 0xe8]
push eax
mov dword [ebp - 0xec], 0
push 0
lea eax, [ebp - 0xec]
push eax
mov dword [ebp - 0xf0], 0
push 0
lea eax, [ebp - 0xf0]
push eax
mov dword [ebp - 0xf4], 0
push 0
lea eax, [ebp - 0xf4]
push eax
mov dword [ebp - 0xf8], 0
push 0
lea eax, [ebp - 0xf8]
push eax
mov dword [ebp - 0xfc], 0
push 0
lea eax, [ebp - 0xfc]
push eax
mov dword [ebp - 0x100], 0
push 0
lea eax, [ebp - 0x100]
push eax
mov dword [ebp - 0x104], 0
push 0
lea eax, [ebp - 0x104]
push eax
mov dword [ebp - 0x108], 0
push 0
lea eax, [ebp - 0x108]
push eax
mov dword [ebp - 0x10c], 0
push 0
lea eax, [ebp - 0x10c]
push eax
mov dword [ebp - 0x110], 0
push 0
lea eax, [ebp - 0x110]
push eax
mov eax, 0x5aade9
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x114]
push eax
mov eax, 0x5aaded
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0x11c], 0
push 0
push dword [ebp - 0x11c]
mov dword [ebp - 0x120], 0
push 0
push dword [ebp - 0x120]
mov dword [ebp - 0x124], 0
push 0
push dword [ebp - 0x124]
lea eax, [ebp - 0x38]
push eax
call fcn.0041659c
mov dword [ebp - 0x128], eax
mov ebx, dword [ebp - 0x118]
test ebx, ebx
je 0x418d8a
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x114]
test ebx, ebx
je 0x418d9d
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x110]
test ebx, ebx
je 0x418db0
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x10c]
test ebx, ebx
je 0x418dc3
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x108]
test ebx, ebx
je 0x418dd6
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x104]
test ebx, ebx
je 0x418de9
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x100]
test ebx, ebx
je 0x418dfc
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xfc]
test ebx, ebx
je 0x418e0f
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf8]
test ebx, ebx
je 0x418e22
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf4]
test ebx, ebx
je 0x418e35
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xf0]
test ebx, ebx
je 0x418e48
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xec]
test ebx, ebx
je 0x418e5b
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe8]
test ebx, ebx
je 0x418e6e
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe4]
test ebx, ebx
je 0x418e81
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe0]
test ebx, ebx
je 0x418e94
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x418ea7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x418eba
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x418ecd
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x418ee0
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x418ef3
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0x128]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418f0a
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push 0x80000301
push 0
push 2
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 3
mov eax, 4
mov ebx, 0x4a95c0
call fcn.0043bc02
add esp, 0x28
mov dword [ebp - 0xdc], eax
push VariantClear
push 0
mov eax, dword [ebp - 0xdc]
test eax, eax
jne 0x418f8a
mov eax, 0x4e2b35
push eax
push 1
mov ebx, 0x43cae0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xe0], eax
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x418fb6
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xe0]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x418fcd
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5aadef
push 0x80000301
push 0
push 3
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
push dword [0x5de938]
push str.callback
push dword [0x5de934]
push str.sidmi_eshop_sign
push dword [ebp - 0x3c]
push str._jsontruepwd
push dword [ebp - 0x38]
push 0x5aaee8
mov ecx, 8
call fcn.0040106f
add esp, 0x20
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41908d
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
push 0xffffffffffffffff
push 8
push 0x16015738
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd0], 0
push 0
lea eax, [ebp - 0xd0]
push eax
push 1
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xd4], 0
push 0
lea eax, [ebp - 0xd4]
push eax
mov dword [ebp - 0xd8], 0
push 0
push dword [ebp - 0xd8]
mov dword [ebp - 0xdc], 0
push 0
lea eax, [ebp - 0xdc]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_36.0.1985.143_Safari_537.36
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0xe0]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
push 1
push 0x5de914
push 1
lea eax, [ebp - 0x40]
push eax
push 1
push 1
mov eax, str.https:__account.xiaomi.com_pass_serviceLoginAuth2
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004018fe
mov dword [ebp - 0xe8], eax
mov ebx, dword [ebp - 0xe4]
test ebx, ebx
je 0x41915f
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe0]
test ebx, ebx
je 0x419172
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x419185
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x419198
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x4191ab
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x4191be
push ebx
call fcn.0043bbfc
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xe8]
test eax, eax
jne 0x4191d4
mov eax, 0x4e2b0c
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xec], eax
mov ebx, dword [ebp - 0xe8]
test ebx, ebx
je 0x419200
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xec]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419217
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004060e5
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419241
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xcc], 0
push 0
push dword [ebp - 0xcc]
mov dword [ebp - 0xd0], 0
push 0
push dword [ebp - 0xd0]
mov eax, 0x4e2cb6
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xd4]
push eax
mov eax, str._desc_:_
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00402bd8
mov dword [ebp - 0xdc], eax
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x4192af
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x4192c2
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xdc]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4192d9
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5aaf03
push VariantClear
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41930e
mov eax, 0x4e2b35
push eax
push 4
mov ebx, 0x43c580
call fcn.0043bbf0
add esp, 0x34
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffff
je 0x41ddb2
mov dword [ebp - 0xcc], 0
push 0
push dword [ebp - 0xcc]
mov dword [ebp - 0xd0], 0
push 0
push dword [ebp - 0xd0]
mov eax, 0x4e2cb6
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xd4]
push eax
mov eax, str.location_:_
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00402bd8
mov dword [ebp - 0xdc], eax
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x41939e
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x4193b1
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xdc]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4193c8
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xcc], 0
push 0
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xd0], 0
push 0
lea eax, [ebp - 0xd0]
push eax
mov dword [ebp - 0xd4], 0
push 0
lea eax, [ebp - 0xd4]
push eax
push 1
push 1
push 1
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0xd8], 0
push 0
lea eax, [ebp - 0xd8]
push eax
push 1
push 0x5de954
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0xdc], 0
push 0
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0xe0], 0
push 0
push dword [ebp - 0xe0]
lea eax, [ebp - 0x50]
push eax
call fcn.004018fe
mov ebx, eax
test ebx, ebx
je 0x41946f
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x419482
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x419495
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x4194a8
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x4194bb
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x4194ce
push ebx
call fcn.0043bbfc
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5aaa56
push VariantClear
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x4194ff
mov eax, 0x4e2b35
push eax
push 4
mov ebx, 0x43c580
call fcn.0043bbf0
add esp, 0x34
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffff
je 0x41dc67
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5aaf08
push 0x80000301
push 0
push 3
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
push 0x5de954
mov eax, str.lastsources1.mi.com
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00403db3
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x4195c6
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xd0]
push eax
mov ebx, dword [0x5de954]
test ebx, ebx
je 0x4195e0
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [0x5de954], eax
push 0x5de954
mov eax, str.XM_Hd_Start1
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00403db3
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x41961b
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xd0]
push eax
mov ebx, dword [0x5de954]
test ebx, ebx
je 0x419635
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [0x5de954], eax
push 0x5de954
mov eax, str.xmOnbeforeflag1
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00403db3
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x419670
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xd0]
push eax
mov ebx, dword [0x5de954]
test ebx, ebx
je 0x41968a
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [0x5de954], eax
push 0x5de954
mov eax, str.XM_HK_Hd_Start1
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00403db3
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x4196c5
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xd0]
push eax
mov ebx, dword [0x5de954]
test ebx, ebx
je 0x4196df
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [0x5de954], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5aaf11
push 0x80000301
push 0
push 4
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
push 0xffffffffffffffff
push 8
push 0x16015738
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd0], 0
push 0
lea eax, [ebp - 0xd0]
push eax
push 1
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xd4], 0
push 0
lea eax, [ebp - 0xd4]
push eax
mov dword [ebp - 0xd8], 0
push 0
push dword [ebp - 0xd8]
mov dword [ebp - 0xdc], 0
push 0
lea eax, [ebp - 0xdc]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0xe0], 0
push 0
lea eax, [ebp - 0xe0]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0xe4], 0
push 0
lea eax, [ebp - 0xe4]
push eax
mov dword [ebp - 0xe8], 0
push 0
push dword [ebp - 0xe8]
lea eax, [ebp - 0xc]
push eax
call fcn.004018fe
mov dword [ebp - 0xec], eax
mov ebx, dword [ebp - 0xe4]
test ebx, ebx
je 0x419827
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe0]
test ebx, ebx
je 0x41983a
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x41984d
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x419860
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x419873
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd0]
test ebx, ebx
je 0x419886
push ebx
call fcn.0043bbfc
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xec]
test eax, eax
jne 0x41989c
mov eax, 0x4e2b0c
push eax
push 1
mov ebx, 0x43d4b0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xf0], eax
mov ebx, dword [ebp - 0xec]
test ebx, ebx
je 0x4198c8
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xf0]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4198df
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004060e5
mov dword [ebp - 0xcc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5aadce
push VariantClear
push 0
mov eax, dword [ebp - 0xcc]
test eax, eax
jne 0x419926
mov eax, 0x4e2b35
push eax
push 4
mov ebx, 0x43c580
call fcn.0043bbf0
add esp, 0x34
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x419952
push ebx
call fcn.0043bbfc
add esp, 4
cmp dword [ebp - 0xd0], 0xffffffff
je 0x419a7c
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5aaf33
push 0x80000301
push 0
push 4
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
push 0x4e2b4b
push dword [ebp - 0x3c]
push 0x5aa727
push dword [ebp - 0x38]
mov ecx, 4
call fcn.0040106f
add esp, 0x10
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x419a05
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x58], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x419a1c
mov eax, 0x4e2b35
push eax
push 0x80000301
push 0
push dword [ebp - 0x24]
push 2
mov ebx, 0x43e450
call fcn.0043bbf0
add esp, 0x1c
push VariantClear
push 0
push 0x5aaf33
push 0x80000301
push 0
push 1
push 0x50002
push 0x160134cc
push 0x52010001
push 3
mov eax, 4
mov ebx, 0x4a9410
call fcn.0043bc02
add esp, 0x28
jmp 0x41dc62
mov dword [ebp - 0xcc], 0
push 0
push dword [ebp - 0xcc]
mov dword [ebp - 0xd0], 0
push 0
push dword [ebp - 0xd0]
mov eax, 0x4e2cb6
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xd4]
push eax
mov eax, str._a_href_
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00402bd8
mov dword [ebp - 0xdc], eax
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x419ae6
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x419af9
push ebx
call fcn.0043bbfc
add esp, 4
mov eax, dword [ebp - 0xdc]
push eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x419b10
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x5c], eax
push 0xffffffffffffffff
push 8
push 0x16015738
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd0], 0
push 0
lea eax, [ebp - 0xd0]
push eax
push 1
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xd4], 0
push 0
lea eax, [ebp - 0xd4]
push eax
push 1
push 1
mov dword [ebp - 0xd8], 0
push 0
lea eax, [ebp - 0xd8]
push eax
mov dword [ebp - 0xdc], 0
push 0
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0xe0], 0
push 0
lea eax, [ebp - 0xe0]
push eax
push 1
push 0x5de954
mov dword [ebp - 0xe4], 0
push 0
lea eax, [ebp - 0xe4]
push eax
mov dword [ebp - 0xe8], 0
push 0
push dword [ebp - 0xe8]
lea eax, [ebp - 0x5c]
push eax
call fcn.004018fe
mov dword [ebp - 0xec], eax
mov ebx, dword [ebp - 0xe4]
test ebx, ebx
je 0x419bed
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xe0]
test ebx, ebx
je 0x419c00
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xdc]
test ebx, ebx
je 0x419c13
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd8]
test ebx, ebx
je 0x419c26
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xd4]
test ebx, ebx
je 0x419c39
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x419c4c
jmp 0x41ddad
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5ab4e0
push 0x80000301
push 0
push 3
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5ab4e9
push 0x80000301
push 0
push 4
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
push 0x4e2b4b
push dword [ebp - 0x3c]
push 0x5aa727
push dword [ebp - 0x38]
mov ecx, 4
call fcn.0040106f
add esp, 0x10
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41dd79
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x58], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x41dd90
mov eax, 0x4e2b35
push eax
push 0x80000301
push 0
push dword [ebp - 0x24]
push 2
mov ebx, 0x43e450
call fcn.0043bbf0
add esp, 0x1c
jmp 0x41def8
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5ab4e0
push 0x80000301
push 0
push 3
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
fild dword [ebp - 0x28]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
fsub qword [0x4e2cd5]
fstp qword [ebp - 0xd8]
push VariantClear
push 0
push 0x5ab4e9
push 0x80000301
push 0
push 4
fld qword [ebp - 0xd8]
call fcn.004018d7
push 0x80000301
push 0
push eax
push 0x50004
push 0x1601347a
push 0x52010001
push 4
mov eax, 4
mov ebx, 0x4a9790
call fcn.0043bc02
add esp, 0x34
push 0x4e2b4b
push dword [ebp - 0x3c]
push 0x5aa727
push dword [ebp - 0x38]
mov ecx, 4
call fcn.0040106f
add esp, 0x10
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41dec4
push ebx
call fcn.0043bbfc
add esp, 4
pop eax
mov dword [ebp - 0x58], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x41dedb
mov eax, 0x4e2b35
push eax
push 0x80000301
push 0
push dword [ebp - 0x24]
push 2
mov ebx, 0x43e450
call fcn.0043bbf0
add esp, 0x1c
push 0x80000301
push 0
push dword [ebp - 0x28]
push 0x50004
push 0x1601347a
push 0x52010001
push 2
mov eax, 4
mov ebx, 0x4a9900
call fcn.0043bc02
add esp, 0x1c
push 0xffffffffffffffff
push 8
push 0x16017476
push 0x52010001
call fcn.0043bc08
add esp, 0x10
mov dword [ebp - 0xcc], eax
push VariantClear
push 0
mov eax, dword [ebp - 0xcc]
test eax, eax
jne 0x41df5a
mov eax, 0x4e2b35
push eax
push 1
mov ebx, 0x43c7c0
call fcn.0043bbf0
add esp, 0x10
mov dword [ebp - 0xd0], eax
mov ebx, dword [ebp - 0xcc]
test ebx, ebx
je 0x41df86
push ebx
call fcn.0043bbfc
add esp, 4
fild dword [ebp - 0xd0]
fstp qword [ebp - 0xd8]
fld qword [ebp - 0xd8]
fmul qword [0x4e3204]
fstp qword [ebp - 0xe0]
mov dword [ebp - 0xe4], 0
push 0
push dword [ebp - 0xe4]
push 1
fld qword [ebp - 0xe0]
call fcn.004018d7
push eax
call fcn.0040866b
pop eax
pop ebx
pop ecx
jmp 0x418167
add esp, 0xc
push 0x80000301
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x43ded0
call fcn.0043bbf0
add esp, 0x10
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x43ded0
call fcn.0043bbf0
add esp, 0x10
push 0
push 0
push 0xffffffffffffffff
push 6
push 0x1601392b
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
push 0
push 1
push 0xffffffffffffffff
push 6
push 0x1601379b
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
push 0
push 1
push 0xffffffffffffffff
push 6
push 0x160157d7
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
push 0
push 1
push 0xffffffffffffffff
push 6
push 0x160157d6
push 0x52010001
call fcn.0043bc0e
add esp, 0x18
mov ebx, 6
call fcn.00402bd0
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push 0
push 0
push 0
push 0
push 0x40008
push 0x16017ae2
push 0x52010001
push 6
mov eax, 3
mov ebx, 0x48f160
call fcn.0043bc02
add esp, 0x4c
mov dword [ebp - 0xbc], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_getpeername
push 0
push 0x4e2b0c
push 0x80000301
push 0
push dword [ebp - 0xbc]
push 0x40008
push 0x16017ae2
push 0x52010001
push 4
mov eax, 3
mov ebx, 0x48f1e0
call fcn.0043bc02
add esp, 0x34
push VariantClear
push 0
push 0x5aab84
push 0x80000301
push 0
push 1
push 0x50002
push 0x160134cc
push 0x52010001
push 3
mov eax, 4
mov ebx, 0x4a9410
call fcn.0043bc02
add esp, 0x28
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41e167
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41e177
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41e187
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41e197
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41e1a7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41e1b7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41e1c7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41e1d7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41e1e7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41e1f7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41e207
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41e217
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41e227
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41e237
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41e247
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41e257
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41e267
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41e277
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41e287
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41e297
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x41e2a7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41e2b7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41e2c7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41e2d7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41e2e7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41e2f7
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41e307
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41e31a
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41e32d
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41e340
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41e353
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x41e366
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41e379
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x41e38c
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41e39f
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x41e3b2
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x41e3c5
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xac]
test ebx, ebx
je 0x41e3d8
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xb0]
test ebx, ebx
je 0x41e3eb
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xb4]
test ebx, ebx
je 0x41e3fe
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xc0]
test ebx, ebx
je 0x41e411
push ebx
call fcn.0043bbfc
add esp, 4
mov ebx, dword [ebp - 0xc8]
test ebx, ebx
je 0x41e424
push ebx
call fcn.0043bbfc
add esp, 4
mov esp, ebp
pop ebp
ret