Function at 0x41940d
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov eax, str.http:__myi.vip.com_api_tools_time
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41946b
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
mov ebx, 0x43de60
call fcn.0043a645
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
push 1
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
push 0
lea eax, [ebp - 4]
push eax
call fcn.00404331
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419516
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419526
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x419536
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x419546
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x419556
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x419566
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x419576
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419586
push ebx
call fcn.0043a63f
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x419599
mov eax, 0x57866e
push eax
push 1
mov ebx, 0x43c350
call fcn.0043a645
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4195bf
push ebx
call fcn.0043a63f
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4195d3
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0
push 1
push 1
push 1
mov eax, 0x57919e
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push 1
mov eax, str.data_:
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00403860
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41961b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41962b
push ebx
call fcn.0043a63f
add esp, 4
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 8]
cdq
push edx
push eax
call fcn.0041a5e2
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41964a
push ebx
call fcn.0043a63f
add esp, 4
call fcn.0041a755
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
push str.http:__myi.vip.com_api_account_checkLoginAndPayComparison_
mov ecx, 2
call fcn.00401613
add esp, 8
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41967a
push ebx
call fcn.0043a63f
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41968e
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov eax, 0x578648
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4196a8
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0
mov ebx, 0x43de60
call fcn.0043a645
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
push 1
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
mov eax, str.Referer:http:__myi.vip.com_index.html_r_nDNT:_1_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_8.0__Windows_NT_6.0__Trident_6.0__r_nAccept:_application_javascript____q0.8_r_nAccept_Language:_en_US_r_nAccept_Encoding:_gzip__deflate
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
push dword [ebp + 8]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
push 0
lea eax, [ebp - 4]
push eax
call fcn.00401cef
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x419777
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x419787
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419797
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4197a7
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4197b7
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4197c7
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4197d7
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4197e7
push ebx
call fcn.0043a63f
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x4197fa
mov eax, 0x57866e
push eax
push 1
mov ebx, 0x43c350
call fcn.0043a645
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x419820
push ebx
call fcn.0043a63f
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x419834
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
call fcn.00418269
push 0
push 1
push 1
push 1
mov eax, 0x57a539
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push 1
mov eax, str.code_:
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00403860
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x419888
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419898
push ebx
call fcn.0043a63f
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4198ac
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 0x579f03
push dword [ebp - 0x14]
call fcn.004010c1
add esp, 8
cmp eax, 0
jne 0x41a558
push 1
push 1
mov eax, str.login_username
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
call fcn.0040f428
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4198f7
push ebx
call fcn.0043a63f
add esp, 4
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
push eax
call fcn.0041a954
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41991f
push ebx
call fcn.0043a63f
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x419933
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
push eax
push dword [ebp - 0x14]
call fcn.004010c1
add esp, 8
cmp eax, 0
jne 0x41997c
push 0x80000301
push 0
push 0x7d0
push 1
mov ebx, 0x43e150
call fcn.0043a645
add esp, 0x10
mov eax, 0
jmp 0x41a58a
mov dword [ebp - 0x1c], 1
mov ebx, dword [0x6c7c1c]
call fcn.004011e9
xor ecx, ecx
push eax
lea eax, [ebp - 0x20]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x419b14
mov ebx, dword [0x6c7c1c]
call fcn.0040115e
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x4199c5
push 4
call fcn.0043a651
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4199d8
push 1
call fcn.0043a651
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call fcn.004010c1
add esp, 8
cmp eax, 0
jne 0x419b0c
mov dword [ebp - 0x1c], 0
mov ebx, dword [0x6c7c20]
call fcn.0040115e
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x419a21
push 4
call fcn.0043a651
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419a34
push 1
call fcn.0043a651
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x419a5a
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419a6d
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
mov ebx, dword [0x6c7c44]
call fcn.0040115e
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x419a93
push 4
call fcn.0043a651
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419aa6
push 1
call fcn.0043a651
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
cmp dword [ebx], 2
jge 0x419afe
mov ebx, dword [0x6c7c44]
call fcn.0040115e
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x419ada
push 4
call fcn.0043a651
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419aed
push 1
call fcn.0043a651
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebx], 2
mov ebx, dword [0x6c7c1c]
call fcn.004011e9
mov dword [ebp - 0x20], eax
pop eax
pop ebx
pop ecx
jmp 0x419997
add esp, 0xc
mov eax, dword [ebp - 0x1c]
and eax, 1
xor eax, 1
test eax, eax
je 0x419c18
push 0x10001
push 0x6016310
push 0x52016311
push 1
mov ebx, 0x43de70
call fcn.0043a645
add esp, 0x10
test eax, eax
je 0x419bf0
push 0
mov ebx, 0x43ce50
call fcn.0043a645
add esp, 4
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
push 0x80000301
push 0
push 3
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 2
mov ebx, 0x43cd30
call fcn.0043a645
add esp, 0x1c
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push 0x57890e
push dword [ebp - 0x14]
push 0x57a54b
mov ecx, 4
call fcn.00401613
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x419bc5
push ebx
call fcn.0043a63f
add esp, 4
push 0
push dword [ebp - 0x34]
push 0xffffffffffffffff
push 8
push 0x16016317
push 0x52016311
call fcn.0043a663
add esp, 0x18
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x419bf0
push ebx
call fcn.0043a63f
add esp, 4
push 0x80000301
push 0
push 0x1f4
push 1
mov ebx, 0x43e150
call fcn.0043a645
add esp, 0x10
mov eax, 1
jmp 0x41a58a
push 0x10001
push 0x6016310
push 0x52016311
push 1
mov ebx, 0x43de70
call fcn.0043a645
add esp, 0x10
test eax, eax
je 0x419ce0
push 0
mov ebx, 0x43ce50
call fcn.0043a645
add esp, 4
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
push 0x80000301
push 0
push 3
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 2
mov ebx, 0x43cd30
call fcn.0043a645
add esp, 0x1c
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push 0x57890e
push dword [ebp - 0x14]
push 0x57a559
mov ecx, 4
call fcn.00401613
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x419cb5
push ebx
call fcn.0043a63f
add esp, 4
push 0
push dword [ebp - 0x34]
push 0xffffffffffffffff
push 8
push 0x16016317
push 0x52016311
call fcn.0043a663
add esp, 0x18
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x419ce0
push ebx
call fcn.0043a63f
add esp, 4
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x419cfc
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x419d0d
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push dword [0x6c7bf0]
push 1
mov eax, 1
mov ebx, 0x4a3640
call fcn.0043a66f
add esp, 0x10
push 0x6c7c20
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7c20]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x419d7e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7c20], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
push edi
test eax, eax
je 0x419dc3
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push 0x6c7c24
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, 0x578648
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7c24]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x419e0f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7c24], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
push edi
test eax, eax
je 0x419e54
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push 0x6c7c38
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, 0x57a56b
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7c38]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x419ea0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7c38], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
push edi
test eax, eax
je 0x419ee5
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push 0x6c7cc8
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, 0
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7cc8]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x419f31
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7cc8], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
mov dword [edi], eax
push 0x6c7ca0
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, 0
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7ca0]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x419fa7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7ca0], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
mov dword [edi], eax
push 0x6c7c44
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, 2
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7c44]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41a01d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7c44], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
mov dword [edi], eax
push 0x6c7c28
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, 0x578648
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7c28]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41a093
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7c28], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
push edi
test eax, eax
je 0x41a0d8
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push 0x6c7c2c
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, 0x578648
mov dword [ebp - 0x28], eax
mov ebx, dword [0x6c7c2c]
mov dword [ebp - 0x2c], ebx
call fcn.0040115e
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41a124
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7c2c], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
push edi
test eax, eax
je 0x41a169
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x41a17f
mov eax, 0x578648
push eax
push 1
mov ebx, 0x43ba20
call fcn.0043a645
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x6c7c1c
push 4
mov eax, 2
call fcn.0043a639
add esp, 8
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ebx, dword [0x6c7c1c]
mov dword [ebp - 0x30], ebx
call fcn.0040115e
mov dword [ebp - 0x34], ecx
mov edi, dword [ebp - 0x30]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41a1dc
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x34]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x30]
call fcn.0043a65d
add esp, 8
mov dword [0x6c7c1c], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x34]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x2c]
push edi
test eax, eax
je 0x41a221
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a234
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [0x6c7c1c]
call fcn.004011e9
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
call fcn.0041add1
push 0x80000301
push 0
push dword [0x6c7bf0]
push 1
mov eax, 1
mov ebx, 0x4a3660
call fcn.0043a66f
add esp, 0x10
push 0xffffffffffffffff
push 0x12
push 0x16018a0d
push 0x52010001
call fcn.0043a669
add esp, 0x10
test eax, eax
je 0x41a49c
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
push 5
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
push 1
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
push dword [ebp + 8]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
push 0
mov eax, str.http:__act.vip.com_act_act_comm.php_actsave_dataappkey918c811c4af392e4d5f83327e9565568
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00401cef
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41a34b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41a35b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41a36b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41a37b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41a38b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41a39b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41a3ab
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41a3bb
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41a3cb
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41a3db
push ebx
call fcn.0043a63f
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x41a3ee
mov eax, 0x57866e
push eax
push 1
mov ebx, 0x43c350
call fcn.0043a645
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41a414
push ebx
call fcn.0043a63f
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41a428
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x6c7c24]
call fcn.0040115e
push ebx
push ecx
mov eax, dword [ebp - 0x24]
dec eax
jns 0x41a44c
push 4
call fcn.0043a651
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41a45f
push 1
call fcn.0043a651
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41a483
push eax
mov ebx, eax
call fcn.0040117e
inc eax
push eax
call fcn.0043a64b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x28]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a496
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov ebx, dword [ebp - 0x28]
mov dword [ebx], eax
fild dword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fmul qword [0x57a2f6]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
fild dword [ebp - 0x24]
fstp qword [ebp - 0x3c]
fadd qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
mov ebx, dword [0x6c7cc8]
call fcn.0040115e
push ebx
push ecx
mov eax, dword [ebp - 0x24]
dec eax
jns 0x41a4dd
push 4
call fcn.0043a651
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41a4f0
push 1
call fcn.0043a651
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0x80000301
push 0
push dword [ebp - 0x48]
fld qword [ebp - 0x44]
call fcn.00401c1c
push 0x80000301
push 0
push eax
push reloc.OLEAUT32.dll_SysStringLen
push 0
push 0x41fc31
push 3
mov eax, 1
mov ebx, 0x4a3550
call fcn.0043a66f
add esp, 0x28
push 0x80000301
push 0
push 0xa
push 1
mov ebx, 0x43e150
call fcn.0043a645
add esp, 0x10
jmp 0x41a580
push 0x80000301
push 0
push 0x1f4
push 1
mov ebx, 0x43e150
call fcn.0043a645
add esp, 0x10
mov eax, 0
jmp 0x41a58a
mov eax, 1
jmp 0x41a58a
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a59b
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41a5ab
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41a5bb
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41a5cb
push ebx
call fcn.0043a63f
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41a5db
push ebx
call fcn.0043a63f
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4