Function at 0x40b7cb
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x10
call fcn.0043f274
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx], 0x5207c5
push ebx
add ebx, 4
push ebx
push 8
call fcn.0043f274
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.0043f274
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 0x10
call fcn.0043f274
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov eax, 3
mov dword [ebx], eax
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.0040cca0
pop ebx
mov dword [ebp - 0x10], 0
mov eax, 0x5148bb
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40b8c2
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0
push 0x3e8
call fcn.004026b2
push dword [0x582030]
push str.orderid
mov ecx, 2
call fcn.00401231
add esp, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 8
call fcn.0043f274
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Linux__Android_6.0__Nexus_5_Build_MRA58N__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_93.0.4577.82_Mobile_Safari_537.36_Edg_93.0.961.52
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
push 1
push 1
mov eax, str.https:__pay.jilvfaka.com_ajax_check_orderid.html
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
call fcn.00405f3c
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40ba12
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ba22
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40ba32
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40ba42
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40ba52
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40ba62
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40ba72
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40ba82
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40ba92
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40baa2
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x443bc0
call fcn.0043f26e
add esp, 0x10
call fcn.0043f268
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040a2ff
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40bae1
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40baf5
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov eax, 0x514a01
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.message_:_
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 4]
push eax
call fcn.004028d1
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40bb45
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40bb55
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40bb69
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x52065f
push dword [ebp - 4]
call fcn.00401129
add esp, 8
cmp eax, 0
jne 0x40bc15
push VariantClear
push 0
mov eax, dword [0x582030]
test eax, eax
jne 0x40bb9b
mov eax, 0x5148bb
push eax
push VariantClear
push 0
push 0x520668
push VariantClear
push 0
push 0x520673
push VariantClear
push 0
push 0x520684
push 4
mov ebx, 0x442820
call fcn.0043f26e
add esp, 0x34
mov eax, 0x5206aa
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.00405da8
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40bbf3
push ebx
call fcn.0043f268
add esp, 4
push 0
push 0
push 0xffffffffffffffff
push 5
push 0x1605bde5
push 0x52010001
call fcn.0043f28c
add esp, 0x18
jmp 0x40bc1a
jmp 0x40b8c6
mov dword [0x58203c], 0
xor ecx, ecx
lea eax, [ebp - 8]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 4
jg 0x40c26a
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x4413d0
call fcn.0043f26e
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x5206dd
push dword [ebp - 0x14]
push 0x5206f8
mov ecx, 3
call fcn.00401231
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40bc85
push ebx
call fcn.0043f268
add esp, 4
lea eax, [ebp - 0x18]
push eax
call fcn.00405da8
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40bc9e
push ebx
call fcn.0043f268
add esp, 4
cmp dword [ebp - 8], 2
je 0x40bcb6
cmp dword [ebp - 8], 4
je 0x40bcb6
xor eax, eax
jmp 0x40bcbb
mov eax, 1
test eax, eax
je 0x40becc
push dword [0x582030]
push str.https:__pay.jilvfaka.com_orderquery_kw
mov ecx, 2
call fcn.00401231
add esp, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 8
call fcn.0043f274
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Linux__Android_6.0__Nexus_5_Build_MRA58N__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_93.0.4577.82_Mobile_Safari_537.36_Edg_93.0.961.52
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x582034
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 0x14]
push eax
call fcn.00405f3c
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40bdf0
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40be00
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40be10
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40be20
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40be30
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40be40
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40be50
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40be60
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40be70
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x443bc0
call fcn.0043f26e
add esp, 0x10
call fcn.0043f268
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040a2ff
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40beaf
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40bec3
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 4], eax
jmp 0x40c0d0
push dword [0x582030]
push str.https:__api.jilvfaka.com_api_index_orderquery_kw
mov ecx, 2
call fcn.00401231
add esp, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 8
call fcn.0043f274
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Linux__Android_6.0__Nexus_5_Build_MRA58N__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_93.0.4577.82_Mobile_Safari_537.36_Edg_93.0.961.52
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x582034
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 0x14]
push eax
call fcn.00405f3c
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40bff9
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40c009
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40c019
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40c029
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40c039
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40c049
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40c059
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40c069
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40c079
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x443bc0
call fcn.0043f26e
add esp, 0x10
call fcn.0043f268
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0040a2ff
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40c0b8
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40c0cc
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
lea eax, [ebp - 4]
push eax
mov eax, str._MY__dA_Za_z_14
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40c12e
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40c165
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x5148bb
push dword [ebp - 0x10]
call fcn.00401129
add esp, 8
cmp eax, 0
je 0x40c187
jmp 0x40c26a
cmp dword [ebp - 8], 4
jne 0x40c1cf
push dword [0x582030]
push 0x52076e
mov ecx, 2
call fcn.00401231
add esp, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.00405da8
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40c1c5
push ebx
call fcn.0043f268
add esp, 4
jmp 0x40c276
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x4413d0
call fcn.0043f26e
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x5207a5
push dword [ebp - 0x14]
push 0x5207c2
mov ecx, 3
call fcn.00401231
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40c21b
push ebx
call fcn.0043f268
add esp, 4
lea eax, [ebp - 0x18]
push eax
call fcn.00405da8
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40c234
push ebx
call fcn.0043f268
add esp, 4
push 0
mov ebx, 0x442280
call fcn.0043f26e
add esp, 4
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0
push 0xbb8
call fcn.004026b2
pop ebx
pop ecx
jmp 0x40bc2b
add esp, 8
lea eax, [ebp - 0x10]
push eax
call fcn.0040c2aa
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40c286
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40c2a6
push ebx
call fcn.0043f268
add esp, 4
mov esp, ebp
pop ebp
ret