Function at 0x41ae2e
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
push 4
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x50], eax
mov ebx, eax
mov dword [ebx], 0
push 0x90003
push 0
push ebx
push 1
mov eax, 8
mov ebx, 0x504570
call fcn.0043a4e8
add esp, 0x10
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
call fcn.004019bf
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 3
mov eax, 3
mov ebx, 0x4c6250
call fcn.0043a4e8
add esp, 0x28
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41af78
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 3
mov eax, 3
mov ebx, 0x4c6250
call fcn.0043a4e8
add esp, 0x28
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41afd5
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 3
mov eax, 3
mov ebx, 0x4c6250
call fcn.0043a4e8
add esp, 0x28
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41b032
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, 0x52af49
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41b04c
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x68b338
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x41b097
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
push 1
push 0
push 0xc8
call fcn.00410275
jmp 0x41b050
lea eax, [ebp - 0x14]
push eax
push 0x68b338
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x7c]
lea eax, [ebp - 0x14]
push eax
call fcn.0040a74f
push 0x5135f8
push dword [ebp - 0x14]
call fcn.004015a0
add esp, 8
cmp eax, 0
jne 0x41b0d1
jmp 0x41b036
push 0x68b2f0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41b0fd
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push str._r_nX_Requested_With:_XMLHttpRequest
push dword [ebp - 0x18]
push str.Accept:_text_plain_____q0.01_r_nAccept_Language:_zh_CN_zh_q0.9_en_US_q0.8_en_q0.7_r_nConnection:_keep_alive_r_nHost:_www.vn4442.com:18899_r_nReferer:_https:__www.vn4442.com:18899_m__r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_same_origin_r_nUser_Agent:
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41b138
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
push 0xf
call fcn.0040e438
mov dword [ebp - 0x70], eax
push str.envvv1
push dword [ebp - 0x70]
push str.https:__www.vn4442.com:18899_api_web_GetAllBasicWebsiteConfiguration_r0.7
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41b194
push ebx
call fcn.0043a4ca
add esp, 4
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x84], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
push 1
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0xa4], 0
push 0
lea eax, [ebp - 0xa4]
push eax
mov dword [ebp - 0xa8], 0
push 0
lea eax, [ebp - 0xa8]
push eax
push 1
push 0
lea eax, [ebp - 0x74]
push eax
call fcn.00403322
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41b2e3
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x41b2f6
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x41b309
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41b31c
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41b32f
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41b342
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41b355
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x84]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0xac]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41b392
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x5135f8
push dword [ebp - 0x24]
call fcn.004015a0
add esp, 8
cmp eax, 0
jne 0x41b3b4
jmp 0x41b036
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
push 0xf
call fcn.0040e438
mov dword [ebp - 0x70], eax
push str.envvv1
push dword [ebp - 0x70]
push str.https:__www.vn4442.com:18899_api_User_GetVipUrl_rd0.1
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41b40c
push ebx
call fcn.0043a4ca
add esp, 4
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x84], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
push 1
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0xa4], 0
push 0
lea eax, [ebp - 0xa4]
push eax
mov dword [ebp - 0xa8], 0
push 0
lea eax, [ebp - 0xa8]
push eax
push 1
push 0
lea eax, [ebp - 0x74]
push eax
call fcn.00403322
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41b55b
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x41b56e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x41b581
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41b594
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41b5a7
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41b5ba
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41b5cd
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x84]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0xac]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41b60a
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x5135f8
push dword [ebp - 0x28]
call fcn.004015a0
add esp, 8
cmp eax, 0
jne 0x41b62c
jmp 0x41b036
push dword [ebp - 0x28]
push dword [ebp - 0x24]
mov ecx, 2
call fcn.00402edc
add esp, 8
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b65c
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
push 0xf
call fcn.0040e438
mov dword [ebp - 0x70], eax
push str.envvv1
push dword [ebp - 0x70]
push str.https:__www.vn4442.com:18899_api_User_CheckSession_rd0.8
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41b6b8
push ebx
call fcn.0043a4ca
add esp, 4
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x84], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
push 1
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0xa4], 0
push 0
lea eax, [ebp - 0xa4]
push eax
push 1
push 0
lea eax, [ebp - 0x74]
push eax
call fcn.00403322
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41b7fa
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x41b80d
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41b820
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41b833
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41b846
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41b859
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x84]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0xa8]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41b896
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x5135f8
push dword [ebp - 0x30]
call fcn.004015a0
add esp, 8
cmp eax, 0
jne 0x41b8b8
jmp 0x41b036
call fcn.00410494
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41b8da
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push getpeername
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x41b8f1
mov eax, 0x5135f8
push eax
push 1
mov ebx, 0x43b2e0
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41b921
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push str._r_nX_Requested_With:_com.dsmjhl.H6SV5HF3K
push dword [ebp - 0x18]
push str.Accept:_image_avif_image_webp_image_apng_image_svgxml_image____q0.8_r_nAccept_Language:_zh_CN_zh_q0.9_en_US_q0.8_en_q0.7_r_nConnection:_keep_alive_r_nHost:_www.vn4442.com:18899_r_nReferer:_https:__www.vn4442.com:18899_m__r_nSec_Fetch_Dest:_image_r_nSec_Fetch_Mode:_no_cors_r_nSec_Fetch_Site:_same_origin_r_nUser_Agent:
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41b95c
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
push 0xe
call fcn.0040e438
mov dword [ebp - 0x70], eax
push dword [ebp - 0x34]
push str.guid
push dword [ebp - 0x70]
push str.https:__www.vn4442.com:18899_api_User_GetAuthCode_rd0.5
mov ecx, 4
call fcn.00402edc
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41b9bb
push ebx
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41b9d2
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push 1
push 1
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x74], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.00403322
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x41bb22
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41bb35
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x41bb48
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41bb5b
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41bb6e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41bb81
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x74]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41bbbe
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x41bbd5
mov eax, 0x5135f9
push eax
push 1
mov ebx, 0x43c370
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x6c], eax
push 0x5135f8
push dword [ebp - 0x6c]
call fcn.004015a0
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41bc25
push ebx
call fcn.0043a4ca
add esp, 4
cmp dword [ebp - 0x70], 0
je 0x41bc37
jmp 0x41b036
lea eax, [ebp - 0x3c]
push eax
call fcn.00410f1c
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41bc5d
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
push 0x52a33a
push dword [ebp - 0x40]
call fcn.004015a0
add esp, 8
cmp eax, 0
jne 0x41bc7f
jmp 0x41b036
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
push 0xe
call fcn.0040e438
mov dword [ebp - 0x70], eax
push str.envvv1
push dword [ebp - 0x70]
push str.https:__www.vn4442.com:18899_api_Web_WhetherGoLoginPage_rd0.9
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41bcd7
push ebx
call fcn.0043a4ca
add esp, 4
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x84], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
push 1
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0xa4], 0
push 0
lea eax, [ebp - 0xa4]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0xa8], 0
push 0
lea eax, [ebp - 0xa8]
push eax
push 1
push 0
lea eax, [ebp - 0x74]
push eax
call fcn.00403322
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41be26
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x41be39
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x41be4c
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41be5f
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41be72
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41be85
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41be98
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x84]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0xac]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41bed5
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x5135f8
push dword [ebp - 0x30]
call fcn.004015a0
add esp, 8
cmp eax, 0
jne 0x41bef7
jmp 0x41b036
push 1
push 1
push 1
push 0
push 5
call fcn.00410275
push getpeername
push 0
push 0x52b191
push 0x80000301
push 0
push 6
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 4
mov eax, 3
mov ebx, 0x4c6420
call fcn.0043a4e8
add esp, 0x34
push str._api_User_CheckLoginFirstStep_r0.69703241360576envvv1
push dword [ebp - 0x10]
push str.https:__
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41bf8e
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str._r_nX_Requested_With:_XMLHttpRequest
push dword [ebp - 0x18]
push str._m__r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_same_origin_r_nUser_Agent:
push dword [ebp - 0x10]
push str._r_nReferer:_https:__
push dword [ebp - 0x10]
push str._r_nOrigin:_https:__
push dword [ebp - 0x10]
push str.Accept:_text_plain_____q0.01_r_nAccept_Language:_zh_CN_zh_q0.9_en_US_q0.8_en_q0.7_r_nConnection:_keep_alive_r_nContent_Length:_391_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nHost:
mov ecx, 9
call fcn.00402edc
add esp, 0x24
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41bfe1
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
lea eax, [ebp - 8]
push eax
call fcn.00411005
mov dword [ebp - 0x78], eax
push dword [ebp - 0x34]
push str._22_2C_22login_www_22_3A_22https_3A_2F_2Fwww.vn4442.com_3A18899_2Fandroid_22_2C_22muiNum_22_3A0_2C_22isApp_22_3Afalse_7Dguid
push dword [ebp - 4]
push str.smsCodejmptwo1login_wwwhttps_3A_2F_2Fwww.vn4442.com_3A18899_2Fandroidusertypecreditdevice_typewapclient_idclient_cdandroid_webcheckData_7B_22username_22_3A_22
push dword [ebp - 0x40]
push str.code
push dword [ebp - 0x78]
push str.password
push dword [ebp - 4]
push str.username
mov ecx, 0xa
call fcn.00402edc
add esp, 0x28
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41c07b
push ebx
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41c092
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x78], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
push dword [ebp - 0x90]
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
push 1
push 1
lea eax, [ebp - 0x38]
push eax
call fcn.00403322
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x41c1e0
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41c1f3
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41c206
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41c219
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41c22c
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x78]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41c269
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004199ed
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41c2c7
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41c2da
push ebx
call fcn.0043a4ca
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x41c2f0
mov eax, 0x5135f9
push eax
push 1
mov ebx, 0x43c370
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41c31c
push ebx
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41c333
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
lea eax, [ebp - 0x4c]
push eax
call fcn.004119f2
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41c36f
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
push getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41c386
mov eax, 0x5135f8
push eax
push 1
mov ebx, 0x43bd50
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
lea eax, [ebp - 0x6c]
push eax
call fcn.00411cde
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41c3d6
push ebx
call fcn.0043a4ca
add esp, 4
lea eax, [ebp - 0x74]
push eax
call fcn.0041013f
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41c3fb
push ebx
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41c412
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0040a74f
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x52b464
push getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41c450
mov eax, 0x5135f8
push eax
push 4
mov ebx, 0x43b110
call fcn.0043a4d0
add esp, 0x34
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
je 0x41c4c3
push getpeername
push 0
push 0x52b479
push 0x80000301
push 0
push 6
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 4
mov eax, 3
mov ebx, 0x4c6420
call fcn.0043a4e8
add esp, 0x34
jmp 0x41d4e7
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x52b482
push getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41c4f4
mov eax, 0x5135f8
push eax
push 4
mov ebx, 0x43b110
call fcn.0043a4d0
add esp, 0x34
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
je 0x41c51f
jmp 0x41b036
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x52b491
push getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41c550
mov eax, 0x5135f8
push eax
push 4
mov ebx, 0x43b110
call fcn.0043a4d0
add esp, 0x34
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
je 0x41c5c3
push getpeername
push 0
push 0x52b491
push 0x80000301
push 0
push 6
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 4
mov eax, 3
mov ebx, 0x4c6420
call fcn.0043a4e8
add esp, 0x34
jmp 0x41d4e7
push 0x5135f8
push dword [ebp - 0x4c]
call fcn.004015a0
add esp, 8
cmp eax, 0
jne 0x41c629
push getpeername
push 0
push 0x52b4a8
push 0x80000301
push 0
push 6
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 4
mov eax, 3
mov ebx, 0x4c6420
call fcn.0043a4e8
add esp, 0x34
jmp 0x41b036
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x52b4b1
push getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41c65a
mov eax, 0x5135f8
push eax
push 4
mov ebx, 0x43b110
call fcn.0043a4d0
add esp, 0x34
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
je 0x41d4e2
push getpeername
push 0
push 0x52b4b1
push 0x80000301
push 0
push 6
push 0x80000301
push 0
push dword [ebp + 8]
push 0x40004
push 0x16010057
push 0x52010001
push 4
mov eax, 3
mov ebx, 0x4c6420
call fcn.0043a4e8
add esp, 0x34
push getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41c6db
mov eax, 0x5135f8
push eax
push 0x90003
push 0
push dword [ebp - 0x50]
push 2
mov eax, 8
mov ebx, 0x504540
call fcn.0043a4e8
add esp, 0x1c
push 0
push 0
push 0
push getpeername
push 0
push str.data_LOGIN_USER_KEY_value
push 0x90003
push 0
push dword [ebp - 0x50]
push 3
mov eax, 8
mov ebx, 0x504550
call fcn.0043a4e8
add esp, 0x28
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41c74d
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov eax, 0x513905
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
mov eax, str.session:
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004066e4
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41c7bb
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41c7ce
push ebx
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41c7e5
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x58], eax
mov eax, str.https:__www.vn4442.com:18899_api_User_GetReturnAmtToWallet_rd0.35109093481101517envvv1
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41c7ff
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov eax, str.Accept:_text_plain_____q0.01_r_nAccept_Language:_zh_CN_zh_q0.9_en_US_q0.8_en_q0.7_r_nConnection:_keep_alive_r_nHost:_www.vn4442.com:18899_r_nReferer:_https:__www.vn4442.com:18899_m__r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_same_origin_r_nUser_Agent:_Mozilla_5.0__Linux__Android_9__SM_G977N_Build_LMY48Z__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_92.0.4515.131_Mobile_Safari_537.36_webViewInApp_r_nX_Requested_With:_XMLHttpRequest
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41c819
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x78], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.00403322
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x41c969
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41c97c
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x41c98f
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41c9a2
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41c9b5
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41c9c8
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x78]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41ca05
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004199ed
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41ca63
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41ca76
push ebx
call fcn.0043a4ca
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x41ca8c
mov eax, 0x5135f9
push eax
push 1
mov ebx, 0x43c370
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41cab8
push ebx
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41cacf
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
lea eax, [ebp - 0x60]
push eax
call fcn.004119f2
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41cb0b
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x60], eax
push getpeername
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x41cb22
mov eax, 0x5135f8
push eax
push 1
mov ebx, 0x43bd50
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
lea eax, [ebp - 0x6c]
push eax
call fcn.00411cde
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41cb72
push ebx
call fcn.0043a4ca
add esp, 4
lea eax, [ebp - 0x74]
push eax
call fcn.0041013f
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41cb97
push ebx
call fcn.0043a4ca
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41cbae
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x60], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x52bcb6
push getpeername
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x41cbe3
mov eax, 0x5135f8
push eax
push 4
mov ebx, 0x43b110
call fcn.0043a4d0
add esp, 0x34
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
jne 0x41cc64
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x52bcc3
push getpeername
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x41cc3a
mov eax, 0x5135f8
push eax
push 4
mov ebx, 0x43b110
call fcn.0043a4d0
add esp, 0x34
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffff
jne 0x41cc64
xor eax, eax
jmp 0x41cc69
mov eax, 1
test eax, eax
je 0x41d4e2
push 1
push 1
push 1
push 0
push 1
call fcn.00410275
mov eax, str.https:__www.vn4442.com:18899_api_User_GetAccount_Acc_bal_cdmy_walletrd0.9535367279024063envvv1backamt1
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41cc9f
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov eax, str.Accept:_text_plain_____q0.01_r_nAccept_Language:_zh_CN_zh_q0.9_en_US_q0.8_en_q0.7_r_nConnection:_keep_alive_r_nHost:_www.vn4442.com:18899_r_nReferer:_https:__www.vn4442.com:18899_m__r_nSec_Fetch_Dest:_empty_r_nSec_Fetch_Mode:_cors_r_nSec_Fetch_Site:_same_origin_r_nUser_Agent:_Mozilla_5.0__Linux__Android_9__SM_G977N_Build_LMY48Z__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_92.0.4515.131_Mobile_Safari_537.36_webViewInApp_r_nX_Requested_With:_XMLHttpRequest
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41ccb9
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 0x78], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.00403322
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x41ce09
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41ce1c
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x41ce2f
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41ce42
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41ce55
jmp 0x41b036
push 0x68b334
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
inc dword [0x68b340]
push 0x68b334
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
call fcn.00407cd3
push 0x80000301
push 0
push dword [0x68b340]
push 1
mov ebx, 0x43c370
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x6c], eax
push dword [ebp - 0x6c]
push 0x52b9d0
mov ecx, 2
call fcn.00402edc
add esp, 8
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41d566
push ebx
call fcn.0043a4ca
add esp, 4
lea eax, [ebp - 0x70]
push eax
push 1
call fcn.00407f72
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41d58a
push ebx
call fcn.0043a4ca
add esp, 4
push 0x80000301
push 0
push dword [0x68b31c]
push 1
mov ebx, 0x43c370
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x6c], eax
push dword [ebp - 0x6c]
push 0x52a7ec
mov ecx, 2
call fcn.00402edc
add esp, 8
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41d5e0
push ebx
call fcn.0043a4ca
add esp, 4
lea eax, [ebp - 0x70]
push eax
push 2
call fcn.00407f72
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41d604
push ebx
call fcn.0043a4ca
add esp, 4
push 0x80000301
push 0
push dword [0x68b318]
push 1
mov ebx, 0x43c370
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x6c], eax
push dword [ebp - 0x6c]
push 0x52a7f7
mov ecx, 2
call fcn.00402edc
add esp, 8
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41d65a
push ebx
call fcn.0043a4ca
add esp, 4
lea eax, [ebp - 0x70]
push eax
push 3
call fcn.00407f72
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41d67e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41d68e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41d69e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41d6ae
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41d6be
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41d6ce
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41d6de
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41d6ee
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41d6fe
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41d70e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41d71e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41d72e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41d73e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41d74e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41d75e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41d76e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41d77e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41d78e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41d79e
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41d7ae
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x50]
push ebx
push 0x90003
push 0
push ebx
push 1
mov eax, 8
mov ebx, 0x504560
call fcn.0043a4e8
add esp, 0x10
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41d7e6
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41d7f6
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41d806
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41d816
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41d826
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x41d836
push ebx
call fcn.0043a4ca
add esp, 4
mov esp, ebp
pop ebp
ret 4