Function at 0x438d99
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
push 8
call fcn.005039ad
add esp, 4
mov dword [ebp - 0x30], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0x5fa79f
push ebx
add ebx, 4
push ebx
push 8
call fcn.005039ad
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00442a99
pop ebx
jmp 0x438e57
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov ebx, 0x12
call fcn.0040143b
push 0x20004
push 0x16012ac7
push 0x52010003
push 7
mov eax, 1
mov ebx, 0x5716f0
call fcn.005039d1
add esp, 0x58
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 2
mov eax, 1
mov ebx, 0x5717e0
call fcn.005039d1
add esp, 0x1c
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
fild dword [ebp - 4]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fadd qword [0x5f5e52]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x438f5d
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x438faa
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
push 0x5f5f9d
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push VariantClear
push 0
push 0x5f64f3
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push VariantClear
push 0
mov eax, dword [0x6eeb90]
test eax, eax
jne 0x43904f
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 8
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
mov eax, 0x5f5f9d
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.0043adca
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4390b7
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4390cb
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4396ce
mov dword [ebp - 0x10], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jle 0x439131
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov eax, 0x5f5f9d
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x439131
push ebx
call fcn.005039b9
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16017eb8
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x34], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43915d
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x439183
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x10], eax
jle 0x439221
mov eax, 0x5fa04a
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4391a5
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov ebx, dword [0x6eeb94]
add ebx, 0x14
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
mov dword [ebx], 1
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
jmp 0x4396ce
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
push dword [ebp - 0x10]
lea eax, [ebp - 0xc]
push eax
mov eax, 0x5f5f9d
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0043be0d
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x439279
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x439289
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x439299
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4392ad
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 0x5f5e2d
push dword [ebp - 0x14]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4392cf
jmp 0x4396ce
push str.typePH
push dword [ebp - 0x14]
push str.https:__account.xiaomi.com_pass_user_externalIdBinded_externalId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.00415eed
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4393b5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4393c5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4393d5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4393e5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4393f5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x439405
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x439415
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x439425
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x439435
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x439445
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x439455
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x439468
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43948e
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
lea eax, [ebp - 0x70]
push eax
call fcn.0043e1a1
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4394b1
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4394c5
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.userId_:1
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4394fa
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x439567
push VariantClear
push 0
push 0x5fa0be
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
jmp 0x43967d
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa0d7
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x439598
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x439605
push VariantClear
push 0
push 0x5fa0e3
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
jmp 0x43967d
push dword [ebp - 0x18]
push 0x5fa0f2
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x34], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x439630
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43967d
push ebx
call fcn.005039b9
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa0d7
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4396ae
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x4390ef
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x439ac6
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4396fa
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 6
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
mov eax, str.Accept:_text_html__application_xhtmlxml____r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
push 0
mov eax, str.https:__account.xiaomi.com_pass_register
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x4397fe
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43980e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43981e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x43982e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x43983e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43984e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43985e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43986e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43987e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43988e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43989e
push ebx
call fcn.005039b9
add esp, 4
push str.contentType4000002userId_1
push dword [ebp - 0x14]
push str.address
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 1
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
mov eax, str.X_Requested_With:_XMLHttpRequest_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nAccept:_text_plain_____q0.01_r_nReferer:_https:__account.xiaomi.com_pass_register_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x34]
push eax
push 1
push 1
mov eax, str.https:__account.xiaomi.com_pass_sms_quota
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.00415eed
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43997a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43998a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x43999a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4399aa
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4399ba
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4399ca
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4399da
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4399ea
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4399fa
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x439a0a
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x64]
test eax, eax
jne 0x439a1d
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x439a43
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x439a57
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.result_:0__description_:_0___code_:0
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x439a8c
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x439ac6
mov eax, 0x5fa384
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x439ac2
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x43a0e1
mov dword [ebp - 0x10], 0
inc dword [ebp - 0x10]
fild dword [0x6eeaf4]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fmul qword [0x5f5f4b]
fstp qword [ebp - 0x40]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fsub qword [ebp - 0x40]
fcomp qword [0x5f5f6c]
fnstsw ax
test ah, 1
jne 0x439b3a
mov eax, 0x5fa3b8
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x439b31
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x43a0e1
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
call fcn.0041838e
mov dword [ebp - 0x38], eax
push dword [ebp - 0x38]
push str.https:__account.xiaomi.com_pass_getCode_icodeTyperegister
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x439b76
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
push 0
lea eax, [ebp - 0x3c]
push eax
call fcn.00415eed
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x439c38
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x439c48
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x439c58
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x439c68
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x439c78
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x439c88
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x439c98
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x439ca8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x439cb8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x439cc8
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x439cdc
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov ebx, dword [0x6eeb8c]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [0x6eeb84]
mov dword [ebp - 0x38], ebx
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x3c], ebx
mov ebx, dword [0x6eeb98]
add ebx, 0xc
mov dword [ebp - 0x40], ebx
push dword [ebp - 0x40]
mov edx, 0x1601233f
mov eax, 0x52010003
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
lea eax, [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
push 5
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x16012ac7
push 0x52010003
push 0x160168dc
push 0x52010003
push 0x160168dd
push 0x52010003
mov ebx, dword [ebp - 0x38]
push dword [ebx]
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 3
push dword [ebp - 4]
lea eax, [ebp - 0x20]
push eax
call fcn.0043e907
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x439d87
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x439d9b
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push str.icode
push dword [ebp - 0x14]
push 0x5fa413
mov ecx, 4
call fcn.0040108c
add esp, 0x10
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 1
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
mov eax, str.X_Requested_With:_XMLHttpRequest_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nReferer:_https:__account.xiaomi.com_pass_register_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x34]
push eax
push 1
push 1
mov eax, str.https:__account.xiaomi.com_pass_sendPhoneTicket
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.00415eed
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x439e7e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x439e8e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x439e9e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x439eae
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x439ebe
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x439ece
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x439ede
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x439eee
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x439efe
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x439f0e
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x64]
test eax, eax
jne 0x439f21
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x439f47
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
lea eax, [ebp - 0x68]
push eax
call fcn.0043e1a1
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x439f6a
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x439f7e
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa4f8
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x439fb3
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x43a020
push VariantClear
push 0
push 0x5fa4f8
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
jmp 0x43a090
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa507
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43a051
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x43a090
mov eax, 0x5fa533
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43a087
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x43a0e1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa56e
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43a0c1
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x439ae6
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x43a151
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
mov eax, 0x5f5f9d
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00441b36
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43a139
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x43a14d
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x43a3c9
push dword [ebp - 0x28]
push 0x5fa57d
push dword [ebp - 0x24]
push str.icode
push dword [ebp - 0x14]
push str.https:__account.xiaomi.com_pass_verifyPhoneRegTicket_phone
mov ecx, 6
call fcn.0040108c
add esp, 0x18
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
push 1
mov eax, str.Referer:_https:__account.xiaomi.com_pass_register_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
lea eax, [ebp - 0x34]
push eax
call fcn.00415eed
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43a25a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43a26a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43a27a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x43a28a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x43a29a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43a2aa
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43a2ba
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43a2ca
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x43a2da
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43a2ea
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x43a2fd
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43a323
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
lea eax, [ebp - 0x70]
push eax
call fcn.0043e1a1
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x43a346
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x43a35a
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa56e
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43a38f
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x43a3c9
mov eax, 0x5fa60e
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43a3c5
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x43a920
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
call fcn.0044268a
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x43a431
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43a441
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43a451
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43a461
push ebx
call fcn.005039b9
add esp, 4
push 0x6eec10
lea eax, [ebp - 0x30]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov eax, str.GetXM
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43a4ef
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43a4ff
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43a50f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x43a51f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43a52f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43a53f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43a54f
push ebx
call fcn.005039b9
add esp, 4
push str._jsontrueqs
push dword [ebp - 0x2c]
push str.repassword
push dword [ebp - 0x2c]
push 0x5f5edf
push dword [ebp - 0x28]
push 0x5fa57d
push dword [ebp - 0x24]
push str.icode
push dword [ebp - 0x14]
push 0x5fa413
mov ecx, 0xb
call fcn.0040108c
add esp, 0x2c
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
mov eax, str.Content_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nReferer:_https:__account.xiaomi.com_pass_register_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x54]
push eax
push 1
push 1
lea eax, [ebp - 0x50]
push eax
call fcn.00415eed
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43a651
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43a661
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x43a674
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x43a684
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x43a694
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x43a6a4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43a6b4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x43a6c4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43a6d4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x43a6e4
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x84]
test eax, eax
jne 0x43a6fa
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x43a726
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
lea eax, [ebp - 0x88]
push eax
call fcn.0043e1a1
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x43a752
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x43a769
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa6da
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43a79e
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x43a920
push 0x5fa6e8
push dword [ebp - 0x18]
push 0x5fa6f7
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43a7ef
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov eax, str.GetXM
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43a86e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43a87e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43a88e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x43a89e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43a8ae
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43a8be
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43a8ce
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x50]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43a8fc
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x54], 0
je 0x43a920
mov eax, 0x5f5e2d
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43a91c
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x43ab37
push VariantClear
push 0
push 0x5fa709
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16016959
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x34], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43a9dc
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43aa02
push ebx
call fcn.005039b9
add esp, 4
fild dword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fsub qword [0x5f5e52]
fstp qword [ebp - 0x48]
push 0x80000601
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0
push dword [ebp - 0x4c]
push 0xffffffffffffffff
push 8
push 0x16016959
push 0x52010003
call fcn.005039d7
add esp, 0x18
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43aa5f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
mov ebx, dword [0x6eec14]
add ebx, 0x1c
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, 0x5fa712
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x34]
call fcn.004445a2
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43aaed
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x43aafd
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43ab0d
push ebx
call fcn.005039b9
add esp, 4
lea eax, [ebp - 0x14]
push eax
mov eax, 0x5f5f9d
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.0043ba34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43ab32
push ebx
call fcn.005039b9
add esp, 4
jmp 0x43abaf
push dword [ebp - 0xc]
push 0x5fa71d
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x34], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43ab62
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43abaf
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
lea eax, [ebp - 0xc]
push eax
push 0x6eec18
mov eax, 0x5f64f3
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, 0x5f5f9d
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00444cfb
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43ac23
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43ac33
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x40], 0
jne 0x43acb6
push 0xffffffffffffffff
push 8
push 0x16016959
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x43ac69
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43ac8f
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x48], 0
jle 0x43acb6
push 0x5fa728
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x43acb6
xor eax, eax
jmp 0x43acbb
mov eax, 1
test eax, eax
je 0x43ace5
push 0
push 0
push 0xffffffffffffffff
push 0x12
push 0x160168cd
push 0x52010003
call fcn.005039d7
add esp, 0x18
call fcn.0043794f
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x34]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
jmp 0x43ad26
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x43ad36
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43ad46
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x43ad56
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x43ad66
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43ad76
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x43ad86
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x43ad96
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x43ada6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x43adb6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x30]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.005039b9
add esp, 4
mov esp, ebp
pop ebp
ret