Function at 0x4085c5
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov ebx, dword [0x5be648]
call fcn.004011f8
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jle 0x40a517
push 0x80000301
push 0
push dword [0x5be654]
push 1
mov eax, 3
mov ebx, 0x489230
call fcn.00418364
add esp, 0x10
mov ebx, dword [0x5be648]
call fcn.00401211
mov eax, 0
cmp eax, ecx
jl 0x408694
push 1
call fcn.0041833a
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx]
test eax, eax
je 0x4086ba
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.0041832e
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4086cb
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x5be648
push 4
mov eax, 2
call fcn.00418328
add esp, 8
mov ebx, dword [0x5be648]
mov dword [ebp - 0x44], ebx
call fcn.00401211
mov dword [ebp - 0x48], ecx
sub ecx, 0
jle 0x408789
cmp ecx, 1
jle 0x408707
mov ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0
jle 0x408789
mov edi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov dword [edi], 1
add edi, 4
mov eax, ecx
sub eax, dword [ebp - 0x40]
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x408735
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x44]
add edi, 8
mov ecx, dword [ebp - 0x40]
mov ebx, edi
push edi
push ecx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x408752
push ebx
call fcn.00418334
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x408741
pop edi
mov eax, dword [ebp - 0x40]
shl eax, 2
mov esi, edi
add esi, eax
mov ecx, dword [ebp - 0x48]
sub ecx, 0
sub ecx, dword [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
sub edi, dword [ebp - 0x44]
push edi
push dword [ebp - 0x44]
call fcn.00418358
add esp, 8
mov dword [0x5be648], eax
mov eax, dword [ebp - 0x40]
jmp 0x40878b
xor eax, eax
push 0x80000301
push 0
push dword [0x5be654]
push 1
mov eax, 3
mov ebx, 0x489250
call fcn.00418364
add esp, 0x10
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x4087c2
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x4194b0
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
push str.http:__121.199.43.213_index.php_sn
mov ecx, 2
call fcn.0040149d
add esp, 8
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408800
push ebx
call fcn.00418334
add esp, 4
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
lea eax, [ebp - 0x44]
push eax
call fcn.0040a5fb
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4088b1
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4088c4
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4088d7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4088e7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4088f7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x408907
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408917
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408927
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408937
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40894e
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov eax, 0x4ba5d0
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x4ba5d2
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040d2ef
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408986
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408996
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4089aa
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x4b9f10
push dword [ebp - 0xc]
call fcn.004014f9
add esp, 8
cmp eax, 0
je 0x408a0a
lea eax, [ebp - 0xc]
push eax
call fcn.0040d6b8
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x419c90
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x408a01
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x408a0a
push 0xffffffffffffffff
push 0x12
push 0x16012b18
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jne 0x409769
push 0xffffffffffffffff
push 8
push 0x16011c3b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x40], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x408a59
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x418f30
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408a82
push ebx
call fcn.00418334
add esp, 4
fld qword [ebp - 0x48]
fsub qword [0x4ba1a3]
fstp qword [ebp - 0x50]
push 0x80000601
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push 1
mov ebx, 0x419c90
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x54], eax
push 0
push dword [ebp - 0x54]
push 0xffffffffffffffff
push 8
push 0x16011c3b
push 0x52010001
call fcn.00418352
add esp, 0x18
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x408ad9
push ebx
call fcn.00418334
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16011c3b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x40], eax
push 0x4ba1ab
push dword [ebp - 0x40]
push 0x4ba1ae
mov ecx, 3
call fcn.0040149d
add esp, 0xc
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408b1f
push ebx
call fcn.00418334
add esp, 4
push 0
push dword [ebp - 0x44]
push 0xffffffffffffffff
push 8
push 0x160120cb
push 0x52010001
call fcn.00418352
add esp, 0x18
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408b4a
push ebx
call fcn.00418334
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x408b5d
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x418f30
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
push 0xffffffffffffffff
push 8
push 0x16011fc7
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x408ba2
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x419190
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408bc8
push ebx
call fcn.00418334
add esp, 4
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x44]
fsub qword [ebp - 0x54]
fcomp qword [0x4ba1b5]
fnstsw ax
test ah, 0x41
jne 0x408c3d
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4ba5d2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x408c16
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffff
je 0x408c3d
mov eax, 1
jmp 0x408c3f
xor eax, eax
test eax, eax
je 0x409743
call fcn.00402782
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
push str.https:__fmipalcweb.icloud.com_fmipalcservice_client_getCaptchaImage_rnd
mov ecx, 2
call fcn.0040149d
add esp, 8
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408c77
push ebx
call fcn.00418334
add esp, 4
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Accept:___r_nOrigin:_https:__www.icloud.com_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__WOW64__Trident_5.0__r_nConnection:_Keep_Alive_r_nCache_Control:_no_cache
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
lea eax, [ebp - 0x44]
push eax
call fcn.00402bf4
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408d29
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x408d3c
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x408d4f
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x408d5f
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x408d6f
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x408d7f
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408d8f
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408d9f
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408daf
push ebx
call fcn.00418334
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x408dc5
mov eax, 0x4ba031
push eax
push 1
mov ebx, 0x419c90
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x408df1
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x408e08
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, 0x4ba039
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov eax, str.data:image_jpeg_base64_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00403ec6
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408e58
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408e68
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x408e7c
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
lea eax, [ebp - 0x14]
push eax
call fcn.00405da5
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x408eac
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0
push dword [ebp - 0x18]
push 0xffffffffffffffff
push 0xa
push 0x16011d6b
push 0x52010001
call fcn.00418352
add esp, 0x18
push 0xffffffffffffffff
push 0xa
push 0x16011d6b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x40], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x408ef7
mov eax, 0x4ba031
push eax
push 1
mov ebx, 0x418930
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408f1d
push ebx
call fcn.00418334
add esp, 4
push 0xffffffffffffffff
push 0xa
push 0x16011d6b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xffffffffffffffff
push 8
push 0x16011c44
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0xffffffffffffffff
push 8
push 0x16011c42
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, str.zhaobin
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x44]
lea eax, [ebp - 0x48]
push eax
call fcn.0040679f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408fa3
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408fb3
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408fc3
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x408fd3
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408fe7
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 0x4ba05b
push dword [ebp - 0x1c]
call fcn.004014f9
add esp, 8
cmp eax, 0
jne 0x40973e
push 0
push dword [ebp - 0x20]
push 0xffffffffffffffff
push 8
push 0x16011d6c
push 0x52010001
call fcn.00418352
add esp, 0x18
push 0x80000301
push 0
push 0x1388
push 1
mov eax, 4
mov ebx, 0x489390
call fcn.00418364
add esp, 0x10
mov eax, dword [ebp - 4]
test eax, eax
je 0x40905e
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.0041832e
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40906f
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, 0x4ba039
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov eax, str._captchaContext_:_id_:_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00403ec6
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4090bf
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4090cf
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4090e3
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 0x20]
push eax
push 1
mov eax, 0x4ba07a
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
mov eax, 0x4ba081
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x4ba088
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, str._deviceId_:_
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
call fcn.00406b71
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4091ad
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4091bd
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4091cd
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4091dd
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4091ed
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4091fd
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40920d
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40921d
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x409234
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x40924b
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x419850
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
mov eax, str.Accept:___r_nOrigin:_https:__www.icloud.com_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__WOW64__Trident_5.0__r_nConnection:_Keep_Alive_r_nCache_Control:_no_cache
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
push 1
mov eax, str.https:__fmipalcweb.icloud.com_fmipalcservice_client_checkActivationLock
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00402bf4
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x409306
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x409316
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x409326
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x409336
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409346
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409356
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x409366
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409376
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x409386
push ebx
call fcn.00418334
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x40939c
mov eax, 0x4ba031
push eax
push 1
mov ebx, 0x419c90
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4093c8
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4093df
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str._statusCode_:_403_
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x409414
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x409481
mov eax, 0x4ba135
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40944a
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x4b9f1c
push dword [ebp - 4]
push dword [ebp - 0x38]
mov ecx, 3
call fcn.0040149d
add esp, 0xc
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40947d
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str._locked_:true__type_:_
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4094b2
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x4094f1
mov eax, 0x4ba15a
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4094e8
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
jmp 0x4095a7
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str._locked_:false__type_:_SN__
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x409522
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x4095a7
mov eax, 0x4ba199
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x409558
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x4b9f1c
push dword [ebp - 0x34]
push 0x4ba19e
push dword [ebp - 0xc]
push 0x4ba19e
push dword [ebp - 4]
push dword [0x5be658]
mov ecx, 7
call fcn.0040149d
add esp, 0x1c
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [0x5be658]
test ebx, ebx
je 0x4095a1
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [0x5be658], eax
push 0x4ba135
push dword [ebp - 0x34]
call fcn.004014f9
add esp, 8
cmp eax, 0
je 0x4096e8
mov ebx, 0x12
call fcn.00401182
push 0x20004
push 0x16010036
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x480b00
call fcn.00418364
add esp, 0x58
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x409606
mov eax, 0x4b9f10
push eax
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 0x20004
push 0x16010036
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x480ae0
call fcn.00418364
add esp, 0x34
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x409656
mov eax, 0x4b9f10
push eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 0x20004
push 0x16010036
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x480ae0
call fcn.00418364
add esp, 0x34
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x4096a6
mov eax, 0x4b9f10
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 0x20004
push 0x16010036
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x480ae0
call fcn.00418364
add esp, 0x34
jmp 0x409739
push 0x4ba135
push dword [ebp - 0x34]
call fcn.004014f9
add esp, 8
cmp eax, 0
jne 0x409739
push 0x4b9f1c
push dword [ebp - 4]
push dword [ebp - 0x38]
mov ecx, 3
call fcn.0040149d
add esp, 0xc
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x409730
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
jmp 0x409739
jmp 0x40973e
jmp 0x409743
push 0
push dword [ebp - 4]
push 0xffffffffffffffff
push 8
push 0x160120ca
push 0x52010001
call fcn.00418352
add esp, 0x18
dec dword [0x5be64c]
jmp 0x40a517
push 0xffffffffffffffff
push 0x12
push 0x16012b19
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jne 0x40a517
push 0xffffffffffffffff
push 8
push 0x16011c3b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x40], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x4097b8
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x418f30
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4097e1
push ebx
call fcn.00418334
add esp, 4
fld qword [ebp - 0x48]
fsub qword [0x4ba1a3]
fstp qword [ebp - 0x50]
push 0x80000601
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push 1
mov ebx, 0x419c90
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x54], eax
push 0
push dword [ebp - 0x54]
push 0xffffffffffffffff
push 8
push 0x16011c3b
push 0x52010001
call fcn.00418352
add esp, 0x18
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409838
push ebx
call fcn.00418334
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16011c3b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x40], eax
push 0x4ba1ab
push dword [ebp - 0x40]
push 0x4ba1ae
mov ecx, 3
call fcn.0040149d
add esp, 0xc
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40987e
push ebx
call fcn.00418334
add esp, 4
push 0
push dword [ebp - 0x44]
push 0xffffffffffffffff
push 8
push 0x160120cb
push 0x52010001
call fcn.00418352
add esp, 0x18
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4098a9
push ebx
call fcn.00418334
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4098bc
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x418f30
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
push 0xffffffffffffffff
push 8
push 0x16012b17
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x409901
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x419190
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409927
push ebx
call fcn.00418334
add esp, 4
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x44]
fsub qword [ebp - 0x54]
fcomp qword [0x4ba5db]
fnstsw ax
test ah, 1
je 0x4099eb
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4ba5d2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x409975
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffff
je 0x4099eb
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4099a8
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x418f30
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], edx
fld qword [ebp - 0x74]
fsub qword [0x4ba39b]
fcomp qword [0x4ba1b5]
fnstsw ax
test ah, 0x41
jne 0x4099eb
mov eax, 1
jmp 0x4099ed
xor eax, eax
test eax, eax
je 0x40a4f1
call fcn.00402782
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
push str.https:__fmipalcweb.icloud.com_fmipalcservice_client_getCaptchaImage_rnd
mov ecx, 2
call fcn.0040149d
add esp, 8
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x409a25
push ebx
call fcn.00418334
add esp, 4
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Accept:___r_nOrigin:_https:__www.icloud.com_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__WOW64__Trident_5.0__r_nConnection:_Keep_Alive_r_nCache_Control:_no_cache
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
lea eax, [ebp - 0x44]
push eax
call fcn.00402bf4
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x409ad7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x409aea
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x409afd
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x409b0d
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x409b1d
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x409b2d
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409b3d
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409b4d
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409b5d
push ebx
call fcn.00418334
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x409b73
mov eax, 0x4ba031
push eax
push 1
mov ebx, 0x419c90
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x409b9f
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x409bb6
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, 0x4ba039
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov eax, str.data:image_jpeg_base64_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00403ec6
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409c06
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409c16
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x409c2a
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
lea eax, [ebp - 0x14]
push eax
call fcn.00405da5
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x409c5a
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0
push dword [ebp - 0x18]
push 0xffffffffffffffff
push 0xa
push 0x16011d6b
push 0x52010001
call fcn.00418352
add esp, 0x18
push 0xffffffffffffffff
push 0xa
push 0x16011d6b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x40], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x409ca5
mov eax, 0x4ba031
push eax
push 1
mov ebx, 0x418930
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x409ccb
push ebx
call fcn.00418334
add esp, 4
push 0xffffffffffffffff
push 0xa
push 0x16011d6b
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xffffffffffffffff
push 8
push 0x16011c44
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0xffffffffffffffff
push 8
push 0x16011c42
push 0x52010001
call fcn.0041834c
add esp, 0x10
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, str.zhaobin
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x44]
lea eax, [ebp - 0x48]
push eax
call fcn.0040679f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409d51
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409d61
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409d71
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409d81
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x409d95
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 0x4ba05b
push dword [ebp - 0x1c]
call fcn.004014f9
add esp, 8
cmp eax, 0
jne 0x40a4ec
push 0
push dword [ebp - 0x20]
push 0xffffffffffffffff
push 8
push 0x16011d6c
push 0x52010001
call fcn.00418352
add esp, 0x18
push 0x80000301
push 0
push 0x1388
push 1
mov eax, 4
mov ebx, 0x489390
call fcn.00418364
add esp, 0x10
mov eax, dword [ebp - 4]
test eax, eax
je 0x409e0c
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.0041832e
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x409e1d
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, 0x4ba039
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov eax, str._captchaContext_:_id_:_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00403ec6
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409e6d
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409e7d
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x409e91
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 0x20]
push eax
push 1
mov eax, 0x4ba07a
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
mov eax, 0x4ba081
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x4ba088
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, str._deviceId_:_
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
call fcn.00406b71
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x409f5b
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x409f6b
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x409f7b
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x409f8b
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x409f9b
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x409fab
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x409fbb
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x409fcb
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x409fe2
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x409ff9
mov eax, 0x4b9f10
push eax
push 1
mov ebx, 0x419850
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
mov eax, str.Accept:___r_nOrigin:_https:__www.icloud.com_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__WOW64__Trident_5.0__r_nConnection:_Keep_Alive_r_nCache_Control:_no_cache
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
push 1
mov eax, str.https:__fmipalcweb.icloud.com_fmipalcservice_client_checkActivationLock
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00402bf4
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x40a0b4
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40a0c4
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40a0d4
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40a0e4
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40a0f4
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40a104
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40a114
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40a124
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40a134
push ebx
call fcn.00418334
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x40a14a
mov eax, 0x4ba031
push eax
push 1
mov ebx, 0x419c90
call fcn.00418346
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x40a176
push ebx
call fcn.00418334
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a18d
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str._statusCode_:_403_
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40a1c2
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x40a22f
mov eax, 0x4ba135
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40a1f8
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x4b9f1c
push dword [ebp - 4]
push dword [ebp - 0x38]
mov ecx, 3
call fcn.0040149d
add esp, 0xc
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40a22b
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str._locked_:true__type_:_
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40a260
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x40a29f
mov eax, 0x4ba15a
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40a296
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
jmp 0x40a355
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str._locked_:false__type_:_SN__
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40a2d0
mov eax, 0x4b9f10
push eax
push 4
mov ebx, 0x418d60
call fcn.00418346
add esp, 0x34
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x40a355
mov eax, 0x4ba199
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40a306
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x4b9f1c
push dword [ebp - 0x34]
push 0x4ba19e
push dword [ebp - 0xc]
push 0x4ba19e
push dword [ebp - 4]
push dword [0x5be658]
mov ecx, 7
call fcn.0040149d
add esp, 0x1c
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [0x5be658]
test ebx, ebx
je 0x40a34f
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [0x5be658], eax
push 0x4ba135
push dword [ebp - 0x34]
call fcn.004014f9
add esp, 8
cmp eax, 0
je 0x40a496
mov ebx, 0x12
call fcn.00401182
push 0x20004
push 0x16010036
push 0x52010001
push 7
mov eax, 1
mov ebx, 0x480b00
call fcn.00418364
add esp, 0x58
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x40a3b4
mov eax, 0x4b9f10
push eax
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 0x20004
push 0x16010036
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x480ae0
call fcn.00418364
add esp, 0x34
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x40a404
mov eax, 0x4b9f10
push eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 0x20004
push 0x16010036
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x480ae0
call fcn.00418364
add esp, 0x34
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x40a454
mov eax, 0x4b9f10
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 0x20004
push 0x16010036
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x480ae0
call fcn.00418364
add esp, 0x34
jmp 0x40a4e7
push 0x4ba135
push dword [ebp - 0x34]
call fcn.004014f9
add esp, 8
cmp eax, 0
jne 0x40a4e7
push 0x4b9f1c
push dword [ebp - 4]
push dword [ebp - 0x38]
mov ecx, 3
call fcn.0040149d
add esp, 0xc
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40a4de
push ebx
call fcn.00418334
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
jmp 0x40a4e7
jmp 0x40a4ec
jmp 0x40a4f1
push 0
push dword [ebp - 4]
push 0xffffffffffffffff
push 8
push 0x160120ca
push 0x52010001
call fcn.00418352
add esp, 0x18
dec dword [0x5be64c]
jmp 0x40a517
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40a527
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40a537
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40a547
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a557
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a567
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40a577
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40a587
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40a597
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40a5a7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40a5b7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40a5c7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40a5d7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40a5e7
push ebx
call fcn.00418334
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40a5f7
push ebx
call fcn.00418334
add esp, 4
mov esp, ebp
pop ebp
ret