Function at 0x40e68b
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
cmp dword [ebp + 0x10], 0
jne 0x40e959
mov eax, str.http:__www.net.cn_static_customercare_yourip.asp
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40e6d0
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40e7ec
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40e7fc
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40e80c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40e81c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40e82c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40e83c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40e84c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40e85c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40e86c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x40e8a2
mov eax, 0x514c52
push eax
push 1
mov ebx, 0x451f10
call fcn.0044fdb3
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40e8c8
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e8dc
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, str.__h2_
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str._h2_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40e92c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40e93c
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e950
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x4104a4
cmp dword [ebp + 0x10], 1
jne 0x40ec79
mov eax, str.http:__pv.sohu.com_cityjson
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40e979
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40ea94
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40eaa4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40eab4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40eac4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40ead4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40eae4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40eaf4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40eb04
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40eb14
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x40eb4a
mov eax, 0x514c52
push eax
push 1
mov ebx, 0x451f10
call fcn.0044fdb3
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40eb70
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40eb84
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, str.____cid
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.cip_:__
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ebd4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ebe4
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ebf8
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x51519c
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.cname_:__
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ec48
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ec58
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ec6e
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
jmp 0x4104a4
cmp dword [ebp + 0x10], 2
jne 0x40efa0
mov eax, str.https:__api.ttt.sh_ip_qqwry_
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40ec99
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40edb4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40edc4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40edd4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40ede4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40edf4
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40ee04
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40ee14
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40ee24
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40ee34
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040b577
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40ee73
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40ee87
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.0041050d
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40eeab
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514f98
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.ip_:_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40eefb
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ef0b
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ef1f
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514f98
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.address_:_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ef6f
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ef7f
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ef95
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
jmp 0x4104a4
cmp dword [ebp + 0x10], 3
jne 0x40f2a4
mov eax, str.https:__ip.cn_api_index_iptype0
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40efc0
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_47.0.2526.80_Safari_537.36_Core_1.47.277.400_QQBrowser_9.4.7658.400
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40f0dc
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40f0ec
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40f0fc
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40f10c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40f11c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f12c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40f13c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40f14c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40f15c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040b577
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40f19b
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40f1af
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514f98
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str._ip_:_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f1ff
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f20f
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f223
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514f98
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str._address_:_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f273
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f283
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f299
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
jmp 0x4104a4
cmp dword [ebp + 0x10], 4
jne 0x40f63e
mov eax, str.https:__ip.taobao.com_outGetIpInfo_ipmyipaccessKeyalibaba_inc
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40f2c4
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40f3df
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40f3ef
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40f3ff
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40f40f
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40f41f
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f42f
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40f43f
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40f44f
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40f45f
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040b577
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40f49e
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40f4b2
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514f98
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.ip_:_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f502
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f512
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f526
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514f98
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.region_:_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f576
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f586
push ebx
call fcn.0044fdad
add esp, 4
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, 0x514f98
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, str.city_:_
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40f5d2
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40f5e2
push ebx
call fcn.0044fdad
add esp, 4
push dword [ebp - 0x38]
push 0x515303
push dword [ebp - 0x24]
mov ecx, 3
call fcn.004016d5
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40f60d
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f61d
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f633
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
jmp 0x4104a4
cmp dword [ebp + 0x10], 5
jne 0x40f8cb
mov eax, str.https:__www.uc.cn_ip
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40f65e
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40f779
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40f789
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40f799
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40f7a9
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40f7b9
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f7c9
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40f7d9
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40f7e9
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40f7f9
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040b577
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40f838
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40f84c
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x51531a
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00411075
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f890
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f8a4
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, 0x514a20
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f8c0
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
jmp 0x4104a4
cmp dword [ebp + 0x10], 6
jne 0x40fb8e
mov eax, str.https:__api.ip.sb_ip
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40f8eb
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40fa06
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40fa16
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40fa26
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40fa36
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40fa46
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40fa56
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40fa66
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40fa76
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40fa86
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x40fabc
mov eax, 0x514c52
push eax
push 1
mov ebx, 0x451f10
call fcn.0044fdb3
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40fae2
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40faf6
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000101
push 0
push 0xa
push 1
mov ebx, 0x450810
call fcn.0044fdb3
add esp, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409d13
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40fb53
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40fb67
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, 0x514a20
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fb83
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
jmp 0x4104a4
cmp dword [ebp + 0x10], 7
jne 0x40fe4b
mov eax, str.https:__ipinfo.io_json
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40fbae
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
lea eax, [ebp - 4]
push eax
call fcn.004112f7
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40fccc
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40fcdc
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40fcec
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40fcfc
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40fd0c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40fd1c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40fd2c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40fd3c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40fd4c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40fd5c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40fd6c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40fd7c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40fd8c
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40fd9c
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40fdb0
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514f98
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.ip_:__
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40fe00
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40fe10
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40fe24
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, 0x514a20
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fe40
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
jmp 0x4104a4
mov eax, str.http:__www.ip138.com
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40fe61
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_50.0.2661.87_Safari_537.36
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40ff7d
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40ff8d
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40ff9d
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40ffad
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40ffbd
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40ffcd
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40ffdd
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40ffed
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40fffd
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410034
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._iframe_src
push 1
mov ebx, 0x451630
call fcn.0044fdb3
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x5153ec
push dword [ebp - 0x14]
mov ecx, 2
call fcn.00402dfa
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x410081
push ebx
call fcn.0044fdad
add esp, 4
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov eax, 0x5153ec
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0041473b
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4100b9
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4100c9
push ebx
call fcn.0044fdad
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x4100dc
mov eax, 0x514c52
push eax
push 1
mov ebx, 0x451f10
call fcn.0044fdb3
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x410102
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x410116
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x5153f5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x410139
mov eax, 0x514a20
push eax
push 2
mov ebx, 0x4501b0
call fcn.0044fdb3
add esp, 0x1c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x410189
push dword [ebp - 4]
push str.http:
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x410185
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 8
call fcn.0044fda7
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 4]
push eax
call fcn.00406bac
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4102a0
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4102b0
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4102c0
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4102d0
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4102e0
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4102f0
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410300
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x410310
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x410320
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x455740
call fcn.0044fdb3
add esp, 0x10
call fcn.0044fdad
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040b577
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41035f
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x410373
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, str.__title_
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x515409
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4103c3
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4103d3
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4103e7
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000101
push 0
push 0xa
push 1
mov ebx, 0x450810
call fcn.0044fdb3
add esp, 0x10
mov dword [ebp - 0x14], eax
push str.__p_
push dword [ebp - 0x14]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x410434
push ebx
call fcn.0044fdad
add esp, 4
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
lea eax, [ebp - 0x18]
push eax
mov eax, 0x51541d
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00409f52
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x410478
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410488
push ebx
call fcn.0044fdad
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41049e
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x4104c0
push eax
mov ebx, eax
call fcn.004010a1
inc eax
push eax
call fcn.0044fda7
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x4104c5
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4104d6
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4104e6
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4104f6
push ebx
call fcn.0044fdad
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410506
push ebx
call fcn.0044fdad
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10