Function at 0x40f096
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [0x8781e4], 0
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0
cmp eax, ecx
jl 0x40f0e2
push 0x30
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x79151d
mov ecx, 2
call fcn.0040168b
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f12d
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f143
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 1
cmp eax, ecx
jl 0x40f174
push 0xae
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.resetFlag0_csrfby40VF8uaWkBY3k1N21fLDZHQ2w9XiYqHWx1YBN4GSwATXcMDBYhWA_3D_3D_
push dword [ebp - 0x10]
push str.http:__cq.julive.com_site_get_mobile_captcha_phone
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f1c4
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f1da
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 1
cmp eax, ecx
jl 0x40f20b
push 0x18b
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Referer:_http:__cq.julive.com_site_register_reset0_r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_64.0.3282.140_Safari_537.36_Edge_17.17134_r_nX_CSRF_Token:_webkit_r_nAccept:___r_nX_Requested_With:_XMLHttpRequest_r_nAccept_Language:_zh_CN_r_nHost:_cq.julive.com_r_nConnection:_Keep_Alive_r_nCookie:_comjia_uuid_7B3AFAF4F5_BF63_82EB_37B3_F93C5A1C01FC_7D__op_track97d151b01b8c1d8bd40bbcfbcc3dd5aa__julive_point_c_first_urldc5f129b62f75576b6252846b80c09f83ddb26b00a120b73a68f4c183f3fe8b0a_3A2_3A_7Bi_3A0_3Bs_3A24_3A_22julive_point_c_first_url_22_3Bi_3A1_3Bs_3A2_3A_22_1_22_3B_7D___csrf78e60d5b4d51bb303cb67107dae02c6e4854a66be9d559190f7f41d7afc593baa_3A2_3A_7Bi_3A0_3Bs_3A5_3A_22_csrf_22_3Bi_3A1_3Bs_3A32_3A_22gg06VrUb4NRnmobeqbhSgAERrq_9sZ0G_22_3B_7D__SERVERID545b935a65f0166ef007b96429e4a7d016236931401623693140__rrswlgw_sessionKeyd605b72e_a9ba_4b3d_8f6f_6a941d2ab015_1675776070_r_nCache_Control:_no_cache
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f230
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 2
cmp eax, ecx
jl 0x40f261
push 0x1cc
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.type1httpTypejsonp_155288939369
push dword [ebp - 0x10]
push str.http:__j.xy860.com_android_invite_getcode__callbacksuccess_jsonpCallbackmobile
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f2b1
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f2c7
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 3
cmp eax, ecx
jl 0x40f2f8
push 0x2ad
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.smsType1
push dword [ebp - 0x10]
push str.https:__open.shiguangkey.com_api_udb_verifycode_get_smscode_phone86_
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f348
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f35e
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 3
cmp eax, ecx
jl 0x40f38f
push 0x354
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.:authority:_open.shiguangkey.com_r_n:method:_GET_r_n:path:__api_udb_verifycode_get_smscode_phone86_15123456788smsType1_r_n:scheme:_https_r_naccept:_application_json_r_naccept_encoding:_gzip__deflate__br_r_naccept_language:_zh_CN_zh_q0.9_r_ncookie:_Hm_lvt_7e8b931a9b138d0956731816191783041623758005__im_tokenundefined__aliyungf_tcb2590bdfabf597b855758cd323908a282e369c3121ed7694c64cfec15482ef74__Hm_lpvt_7e8b931a9b138d0956731816191783041623758019_r_nreferer:_https:__open.shiguangkey.com__versionshowClosetrueisRegisterbindPhonefalsewechatfalsetokenautoClosetruesystemId0inviteLinkIdlocal_r_nsec_fetch_dest:_empty_r_nsec_fetch_mode:_cors_r_nsec_fetch_site:_same_origin_r_nterminaltype:_4_r_nuser_agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f3b4
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 4
cmp eax, ecx
jl 0x40f3e5
push 0x395
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.signPnFzonPUHQYV5I_2Fa692jSYdLVmDq1HrNJSVfiOy8VD0_3D
push dword [ebp - 0x10]
push str.http:__iclass.ruijie.com.cn_icmgr_rest_techReg_sms_timeStamp1624618053671phoneNo
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f435
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f44b
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 5
cmp eax, ecx
jl 0x40f47c
push 0x489
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.type0sessionKeyphoneIsAbroad0validateCode_1624582994940
push dword [ebp - 0x10]
push str.https:__ptlogin.yuewen.com_userSdk_sendmsgnew_methodjQuery191018179477236040742_1624582994937appId36formatjsonpareaId1inputUserId
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f4cc
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f4e2
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 6
cmp eax, ecx
jl 0x40f513
push 0x5bf
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.t1622896732316
push dword [ebp - 0x10]
push str.http:__api.5296live.com_member_sendmobilesms_mobile
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f563
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f579
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 6
cmp eax, ecx
jl 0x40f5aa
push 0x65b
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Host:_api.5296live.com_r_nConnection:_keep_alive_r_nUser_Agent:_Mozilla_5.0__Linux__Android_7.1.1__OPPO_A83_Build_N6F26Q__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_62.0.3202.84_Mobile_Safari_537.36_r_nAccept:_image_webp_image_apng_image____q0.8_r_nReferer:_http:__www.ydhz.xyz_mini_index.php_hm15191548752ok_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_en_US_q0.9_r_nX_Requested_With:_com.theapp
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f5cf
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 7
cmp eax, ecx
jl 0x40f600
push 0x69c
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str._22__22type_22:1__22token_22:null__22waterCorpId_22:3__22UNID_22:_22_22__22areaId_22:0__22accountType_22:_22XJ_22__22apiType_22:_22PC_22__22appVersion_22:_221.0.2_22_7D
push dword [ebp - 0x10]
push str.http:__wx.fowep.com_iwater_v1_usercenter_nt_sendAuthCode_v2.json_requestPara_7B_22mobile_22:_22
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f650
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f666
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 8
cmp eax, ecx
jl 0x40f697
push 0x80f
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.content_22code_22:_22H75M3_22
push dword [ebp - 0x10]
push str.http:__api.sms.cn_sms__acsenduidsun98pwd5a509d25c595fcec2561652992f1915btemplate542423mobile
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f6e7
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f6fd
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 8
cmp eax, ecx
jl 0x40f72e
push 0x8ed
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nHost:_api.sms.cn_r_nReferer:_http:__www.ddooo.com_update_send.htm_r_nUpgrade_Insecure_Requests:_1_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f753
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 9
cmp eax, ecx
jl 0x40f784
push 0x92e
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push str.https:__api.qsdxb.com_dxb_member_v2_get_sms_code_web_mobile
mov ecx, 2
call fcn.0040168b
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f7cf
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f7e5
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 9
cmp eax, ecx
jl 0x40f816
push 0x9bc
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:_application_json__text_javascript_____q0.01_r_nAccept_Encoding:_gzip__deflate__br_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Type:_application_json_charsetutf_8_r_nHost:_api.qsdxb.com_r_nReferer:_https:__api.qsdxb.com_dxb_web_register.html_verifyCodeq4619x_r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_same_origin_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36_r_nX_Requested_With:_XMLHttpRequest
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f83b
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xa
cmp eax, ecx
jl 0x40f86c
push 0x9fd
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push str.https:__api.wfcorp.cn_shijiu_shopsmall_Verification_sms_useProPhone
mov ecx, 2
call fcn.0040168b
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f8b7
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f8cd
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xa
cmp eax, ecx
jl 0x40f8fe
push 0xa93
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_nAccept_Encoding:_gzip__deflate__br_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nHost:_api.wfcorp.cn_r_nSec_Fetch_Dest:_document_r_nSec_Fetch_Mode:_navigate_r_nSec_Fetch_Site:_none_r_nSec_Fetch_User:__1_r_nUpgrade_Insecure_Requests:_1_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f923
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xb
cmp eax, ecx
jl 0x40f954
push 0xad4
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.appinfoid17349_1627982435689
push dword [ebp - 0x10]
push str.http:__www.huatu.com_other_yuyue_duanxin_xiebodx.php_callbackjQuery1113031866676693559426_1627982435688tel
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f9a4
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f9ba
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xc
cmp eax, ecx
jl 0x40f9eb
push 0xc21
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.http:__ssy.nesc.cn_v1_api_
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fa0d
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xc
cmp eax, ecx
jl 0x40fa3e
push 0xc6a
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401021
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40fa8d
mov eax, 0x5daf30
push eax
push VariantClear
push 0
push 0x7826a2
push VariantClear
push 0
push str._action_:_102___inviteeMobile_:_
push 6
mov ebx, 0x41b820
call fcn.0041a902
add esp, 0x4c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40facb
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fae1
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xc
cmp eax, ecx
jl 0x40fb12
push 0xccc
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:_application_json__text_javascript_____q0.01_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Length:_46_r_nContent_Type:_application_json_r_nCookie:_Hm_lvt_e2738ae8da7d6c18f4202ed1a88478301623745460__Hm_lpvt_e2738ae8da7d6c18f4202ed1a88478301623745460___chnl___CRH_SESSION_ID271d0a5e_6e39_4dc1_b480_7ebef310d4e0_r_nHost:_ssy.nesc.cn_r_nOrigin:_http:__ssy.nesc.cn_r_nReferer:_http:__ssy.nesc.cn_activities_accountFissionForWeChat.html_mobileNo1766115uniqueLabelccf3c0db5b0d4b6e9af3c4ed0f624aec_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36_r_nX_Requested_With:_XMLHttpRequest
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fb37
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xd
cmp eax, ecx
jl 0x40fb68
push 0xd0d
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.http:__rsedu.ch.mnr.gov.cn__index_passWord_getPhoneCodeTrueCode
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fb8a
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xd
cmp eax, ecx
jl 0x40fbbb
push 0xd7b
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push str.phone
mov ecx, 2
call fcn.0040168b
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40fc09
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fc1f
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xd
cmp eax, ecx
jl 0x40fc50
push 0xdd3
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:_application_json__text_javascript_____q0.01_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Length:_17_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nCookie:_JSESSIONID62FE90DD6AAA9E817A95F8349DD1D1D0__UM_distinctid17a0f1f6ed1294_0644969a2da9e6_55683476_100200_17a0f1f6ed2c1__CNZZDATA1271924038173794549_1623746951__7C1623746951_r_nHost:_rsedu.ch.mnr.gov.cn_r_nOrigin:_http:__rsedu.ch.mnr.gov.cn_r_nReferer:_http:__rsedu.ch.mnr.gov.cn__index_register_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36_r_nX_Requested_With:_XMLHttpRequest
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fc75
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xe
cmp eax, ecx
jl 0x40fca6
push 0xe14
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.http:__huiyuan.sae_china.org_member_signupcode.php
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fcc8
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xe
cmp eax, ecx
jl 0x40fcf9
push 0xe75
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.codeget
push dword [ebp - 0x10]
push str.mobile
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40fd4c
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fd62
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xe
cmp eax, ecx
jl 0x40fd93
push 0xedd
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:___r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Length:_27_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nCookie:_PHPSESSIDmaljj6gmus6qff9ta6b7cnqjq2__Hm_lvt_1a9706af532c9896b933f1bd8adb08401623753044__Hm_lpvt_1a9706af532c9896b933f1bd8adb08401623753052_r_nHost:_huiyuan.sae_china.org_r_nOrigin:_http:__huiyuan.sae_china.org_r_nReferer:_http:__huiyuan.sae_china.org_member_signup.php_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36_r_nX_Requested_With:_XMLHttpRequest
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fdb8
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xf
cmp eax, ecx
jl 0x40fde9
push 0xf31
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.https:__fund.xueqiu.com_services_sms_v2_send_verification_code_t1623760073164
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fe0b
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xf
cmp eax, ecx
jl 0x40fe3c
push 0xfae
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.voicefalsescenelogin
push dword [ebp - 0x10]
push str.telephone
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40fe8f
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fea5
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0xf
cmp eax, ecx
jl 0x40fed6
push 0x1028
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:___r_nAccept_Encoding:_gzip__deflate__br_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Length:_45_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_ndj_client:_web_r_ndj_device_id:_web_BkME2hz8ju_r_ndj_flavor:_1300100141_r_ndj_signature:_9c618f06cbdf3756d234c2944fac5c3585756df1_r_ndj_timestamp:_1623760044010_r_ndj_version:_6.54_r_nHost:_fund.xueqiu.com_r_nOrigin:_https:__danjuanfunds.com_r_nReferer:_https:__danjuanfunds.com_account_login_redirect_channel1300100141_r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_cross_site_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36_r_nx_forwarded_for:_111.19.85.235__39.96.119.66__172.18.1.10_r_nx_real_ip:_111.19.85.235_r_nX_Requested_With:_XMLHttpRequest
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fefb
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x10
cmp eax, ecx
jl 0x40ff2c
push 0x1069
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.https:__ytapi.radio.cn_ytsrv_srv_pcUserOperation_sendVerificationCode
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ff4e
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x10
cmp eax, ecx
jl 0x40ff7f
push 0x10dd
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.businessType1014
push dword [ebp - 0x10]
push str.plantNameCCYTmobilNumber
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ffd2
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ffe8
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x10
cmp eax, ecx
jl 0x410019
push 0x1162
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:___r_nAccept_Encoding:_gzip__deflate__br_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Length:_56_r_nContent_Type:_application_x_www_form_urlencoded_r_nequipmentSource:_WEB_r_nHost:_ytapi.radio.cn_r_nOrigin:_http:__www.radio.cn_r_nproviderCode:_25010_r_nReferer:_http:__www.radio.cn_pc_portal_home_index.html_r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_cross_site_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36_r_nversion:_4.0.0
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41003e
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x11
cmp eax, ecx
jl 0x41006f
push 0x11a3
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.https:__m.jiaoyimao.com_api2_session_sendMobileVerificationCode
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410091
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x11
cmp eax, ecx
jl 0x4100c2
push 0x1211
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401021
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x410111
mov eax, 0x5daf30
push eax
push VariantClear
push 0
push 0x7826a2
push VariantClear
push 0
push str._r_n___phone_:__
push 6
mov ebx, 0x41b820
call fcn.0041a902
add esp, 0x4c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41014f
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410165
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x11
cmp eax, ecx
jl 0x410196
push 0x1273
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Host:_m.jiaoyimao.com_r_nConnection:_keep_alive_r_nContent_Length:_2699_r_nAccept:_application_json__text_plain____r_nOrigin:_https:__m.jiaoyimao.com_r_nx_csrf_token:_2BPUZnh95AvleMjFWkNngcmall_front_server_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_7.1.1__zh_cn__OPPO_A83_Build_N6F26Q__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_70.0.3538.80_Mobile_Safari_537.36_HeyTapBrowser_10.7.23.1_r_nContent_Type:_application_json_charsetUTF_8_r_nReferer:_https:__m.jiaoyimao.com_session_loginByPhone_redirectUrlhttps:__m.jiaoyimao.com_seller_gameid_6554__loginBacktrue_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nCookie:_ctoken2BPUZnh95AvleMjFWkNngcmall_front_server__ssids1623791422453879__sfromsJIAOYIMALL001__EGG_SESSlf0pDADqs7muJbbnhsbadbVUYut3jGsy6jNrPeKwmc__gAOAr11f1djac7LyFCp8m74KIFYsnSCi1bS5TCM5UlmiGDjYq6rQDMDY9PxYwE5y3QTFYOoZzRMN0GyqmIvFEZMv_ok09xpl4FNol1sHBQ__aplus_fromJIAOYIMALL001__aplus_modelTypejym_h5__cnamZwkGc4FEmUCAW8TVTBTgx5N___bl_uid7hkzbp1kyUmjFzhsgmyhyFez5mtL__aplus_traceg_1__zmxyTipCookietrue__session1623791422456885_3__isgBB8fIE8Cgx9qZocDttsC13mHpXGphHMm9zowHbFsv04VQDfCtFUddilSA5Zzbkue
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4101bb
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x12
cmp eax, ecx
jl 0x4101ec
push 0x12b4
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.https:__m.ys7.com_passport_captcha.html_t1623777311014
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41020e
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x12
cmp eax, ecx
jl 0x41023f
push 0x131a
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push str.code_csrfdEgtSnFMZG0GOEYbOHkCNTINRRs3OQJZAiZaGgAdK18wGh0mLnoSGQ
push dword [ebp - 0x10]
push str.mobile
mov ecx, 3
call fcn.0040168b
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410292
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4102a8
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x12
cmp eax, ecx
jl 0x4102d9
push 0x13be
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Host:_m.ys7.com_r_nConnection:_keep_alive_r_nContent_Length:_91_r_nAccept:_application_json_r_nOrigin:_https:__m.ys7.com_r_nX_Requested_With:_XMLHttpRequest_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_7.1.1__zh_cn__OPPO_A83_Build_N6F26Q__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_70.0.3538.80_Mobile_Safari_537.36_HeyTapBrowser_10.7.23.1_r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_https:__m.ys7.com_passport_register.html_comedealer_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nCookie:_SSogou5tk3ale9rlrn8384oaocd1__use_new_rn1__track_identity7a807f7639d6c7b6821ab5fe6f93e12e___csrf00df0c799bb64c6240c5ec73c9de614f1af8ef9eceff7ae3552ef7fe93a47d5aa_3A2_3A_7Bi_3A0_3Bs_3A5_3A_22_csrf_22_3Bi_3A1_3Bs_3A32_3A_22rpkQI5fXFEhQFuf4vnwPqQO2DR0l_6vt_22_3B_7D____ad_displayc4a68ebebbcfd1e27216ba76b41375d8026cdab5ba3c879b928a7c12136b4335a_3A2_3A_7Bi_3A0_3Bs_3A10_3A_22ad_display_22_3Bi_3A1_3Bi_3A1_3B_7D__track_positionmy
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4102fe
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x13
cmp eax, ecx
jl 0x41032f
push 0x13ff
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.https:__epassport.diditaxi.com.cn_passport_login_v5_codeMT
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410351
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x13
cmp eax, ecx
jl 0x410382
push 0x1468
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401021
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4103d1
mov eax, 0x5daf30
push eax
push VariantClear
push 0
push 0x7826a2
push VariantClear
push 0
push str.q_cell_:_
push 6
mov ebx, 0x41b820
call fcn.0041a902
add esp, 0x4c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41040f
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410425
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x13
cmp eax, ecx
jl 0x410456
push 0x14ca
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:_application_json__text_plain____r_nAccept_Encoding:_gzip__deflate__br_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Length:_52_r_nContent_Type:_application_x_www_form_urlencoded_r_nHost:_epassport.diditaxi.com.cn_r_nOrigin:_https:__app.didiyun.com_r_nReferer:_https:__app.didiyun.com__r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_cross_site_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41047b
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x14
cmp eax, ecx
jl 0x4104ac
push 0x150b
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.http:__zwfw_new.hunan.gov.cn_cssso_connect_page_sendmobilecaptcha
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4104ce
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x14
cmp eax, ecx
jl 0x4104ff
push 0x157b
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401021
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x41054e
mov eax, 0x5daf30
push eax
push VariantClear
push 0
push 0x7826a2
push VariantClear
push 0
push str._r_n___captchatype_:__register___r_n___phone_:__
push 6
mov ebx, 0x41b820
call fcn.0041a902
add esp, 0x4c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41058c
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4105a2
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x14
cmp eax, ecx
jl 0x4105d3
push 0x15dd
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Host:_zwfw_new.hunan.gov.cn_r_nConnection:_keep_alive_r_nContent_Length:_73_r_nAccept:_application_json__text_plain____r_nOrigin:_http:__zwfw_new.hunan.gov.cn_r_nUser_Agent:_Mozilla_5.0__Linux__U__Android_7.1.1__zh_cn__OPPO_A83_Build_N6F26Q__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_70.0.3538.80_Mobile_Safari_537.36_HeyTapBrowser_10.7.23.1_r_nContent_Type:_application_json_charsetUTF_8_r_nReferer:_http:__zwfw_new.hunan.gov.cn_cssso_static_h5_register_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nCookie:_HttpOnly__AlteonP8080_1ATe8LGlXFQr4oM5secZyVw__
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4105f8
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x15
cmp eax, ecx
jl 0x410629
push 0x1631
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.https:__leadsin_api.firstleap.cn_ol_v1_mini_activity_send_code
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41064b
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x15
cmp eax, ecx
jl 0x41067c
push 0x169e
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push str.phone
mov ecx, 2
call fcn.0040168b
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4106ca
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4106e0
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x16
cmp eax, ecx
jl 0x410711
push 0x171c
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
mov eax, str.http:__a.buka.tv_buka_buka_public_doubleteacher_api_contact_send_code_mobile.do
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410733
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x16
cmp eax, ecx
jl 0x410764
push 0x179a
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0xffffffffffffffff
push 8
push 0x16016445
push 0x52010001
call fcn.0041a91a
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401021
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4107b3
mov eax, 0x5daf30
push eax
push VariantClear
push 0
push 0x7826a2
push VariantClear
push 0
push str._phone_num_:_
push 6
mov ebx, 0x41b820
call fcn.0041a902
add esp, 0x4c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4107f1
push ebx
call fcn.0041a8f6
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410807
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x16
cmp eax, ecx
jl 0x410838
push 0x17fc
push 0x40192d9
push 1
call fcn.0041a908
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov eax, str.Accept:_application_json__text_plain____r_nAccept_Encoding:_gzip__deflate_r_nAccept_Language:_zh_CN_zh_q0.9_r_nConnection:_keep_alive_r_nContent_Length:_45_r_nContent_Type:_application_json_charsetUTF_8_r_nHost:_a.buka.tv_r_nOrigin:_http:__home.buka.tv_r_nReferer:_http:__home.buka.tv__r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.198_Safari_537.36
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41085d
push ebx
call fcn.0041a8f6
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x8781fc]
call fcn.004016e7
mov eax, 0x17
cmp eax, ecx
jl 0x41088e