Function at 0x46b4b1
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
push 8
call fcn.005039ad
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0x5fa79f
push ebx
add ebx, 4
push ebx
push 8
call fcn.005039ad
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00442a99
pop ebx
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
push 8
call fcn.005039ad
add esp, 4
mov dword [ebp - 0x60], eax
mov edi, eax
mov esi, 0x5f5e98
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x64], 0
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov ebx, 0x12
call fcn.0040143b
push 0x20004
push 0x16012ac7
push 0x52010003
push 7
mov eax, 1
mov ebx, 0x5716f0
call fcn.005039d1
add esp, 0x58
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 2
mov eax, 1
mov ebx, 0x5717e0
call fcn.005039d1
add esp, 0x1c
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
fild dword [ebp - 4]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
fadd qword [0x5f5e52]
fstp qword [ebp - 0x74]
push 0x80000601
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x78], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x46b6d2
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46b71f
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
push 0x5f602b
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push VariantClear
push 0
push 0x5f64f3
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push VariantClear
push 0
mov eax, dword [0x6eeb90]
test eax, eax
jne 0x46b7c4
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 8
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
call fcn.0043adca
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46b82c
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x46b840
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
xor ecx, ecx
lea eax, [ebp - 0x10]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 2
jg 0x46e54d
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46d6da
mov dword [ebp - 0x14], 0
mov eax, 0x5f5e2d
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x46b88f
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x14], 1
jl 0x46b8d2
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov eax, 0x5f602b
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46b8d2
push ebx
call fcn.005039b9
add esp, 4
push 0xffffffffffffffff
push 8
push 0x16017eb8
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x68], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x46b8fe
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46b924
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x14], eax
jle 0x46b9c2
mov eax, 0x6031f5
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46b946
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov ebx, dword [0x6eeb94]
add ebx, 0x1c
mov dword [ebp - 0x68], ebx
mov ebx, dword [ebp - 0x68]
mov dword [ebx], 1
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
jmp 0x46d6da
inc dword [ebp - 0x14]
push VariantClear
push 0
push 0x5fd2b8
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push 0xf
call fcn.00442da8
mov dword [ebp - 0x68], eax
push str.cookieCode2
push dword [ebp - 0x68]
push str.http:__zc.qq.com_cgi_bin_chs_numreg_init_r0.9
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46ba47
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 1
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
mov eax, str.Accept:___r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_4.0__compatible__MSIE_7.0__Windows_NT_6.1__WOW64__Trident_7.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__.NET4.0C__.NET4.0E__r_nHost:_zc.qq.com
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x9c], 0
push 0
push dword [ebp - 0x9c]
lea eax, [ebp - 0x6c]
push eax
call fcn.0046ecac
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46bb3d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46bb50
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46bb63
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46bb76
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46bb89
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46bb9c
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46bbaf
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46bbc2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46bbd2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46bbe2
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46bbf9
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
mov eax, str.elevel_:_
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004173a5
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46bc49
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46bc59
push ebx
call fcn.005039b9
add esp, 4
push 0x5f640a
push dword [ebp - 0x78]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46bc87
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x7c], 0
jne 0x46bcec
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.21__em_:_regnbsp_forbid
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46bcc2
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffff
jne 0x46bcec
xor eax, eax
jmp 0x46bcf1
mov eax, 1
test eax, eax
je 0x46bd90
mov eax, 0x603386
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46bd0f
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov ebx, dword [0x6eeb94]
add ebx, 0x1c
mov dword [ebp - 0x68], ebx
mov ebx, dword [ebp - 0x68]
mov dword [ebx], 1
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
jmp 0x46d6da
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov eax, str.machineCookie
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0045213f
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46bdd0
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x74]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46bdfe
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x78], 0
je 0x46be0d
jmp 0x46d6c1
push 0xf
call fcn.00442da8
mov dword [ebp - 0x68], eax
push dword [ebp - 0x68]
push str.http:__zc.qq.com_chs_m.js_v0.3
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46be42
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 1
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
mov eax, str.Accept:_application_javascript____q0.8_r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_7_0_like_Mac_OS_X__AppleWebKit_537.51.1__KHTML__like_Gecko__Version_7.0_Mobile_11A465_Safari_9537.53_r_nHost:_zc.qq.com
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x9c], 0
push 0
push dword [ebp - 0x9c]
lea eax, [ebp - 0x6c]
push eax
call fcn.0046ecac
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46bf38
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46bf4b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46bf5e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46bf71
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46bf84
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46bf97
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46bfaa
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46bfbd
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46bfcd
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46bfdd
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46bff4
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov eax, 0x6034fa
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
mov eax, 0x6034fe
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004173a5
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46c044
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46c054
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x46c068
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.0040143b
push VariantClear
push 0
push 0x5f7c08
push VariantClear
push 0
push 0x603502
push VariantClear
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x46c0ad
mov eax, 0x5f5e2d
push eax
push 6
mov ebx, 0x5054b0
call fcn.005039b3
add esp, 0x4c
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x46c0d7
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov eax, str.afunction__return_Math.round_Math.random____2147483647____new_Date_.getUTCMilliseconds_____1E10_
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46c105
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x60356c
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46c18c
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x46c19c
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46c1ac
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46c1bc
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46c1cc
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46c1dc
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46c1ec
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov eax, 0x60356c
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x46c297
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x46c2aa
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46c2bd
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46c2d0
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46c2e3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46c2f6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46c309
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0xa4]
push str.__pgv_infossids
push dword [ebp - 0x84]
push str.hmentera__index_ec0__pgv_pvid
mov ecx, 4
call fcn.0040108c
add esp, 0x10
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46c345
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x46c358
push ebx
call fcn.005039b9
add esp, 4
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041765e
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x46c381
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0xac]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x46c398
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x5f5e2d
push dword [ebp - 0x24]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46c3d2
push 0x5f7c08
push dword [ebp - 0x24]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46c3d2
xor eax, eax
jmp 0x46c3d7
mov eax, 1
test eax, eax
je 0x46c3e4
jmp 0x46d6c1
cmp dword [ebp - 0x10], 1
jne 0x46c47e
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 4]
push dword [ebp - 0x14]
lea eax, [ebp - 0xc]
push eax
mov eax, 0x5f602b
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0043be0d
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46c446
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46c456
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46c466
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x46c47a
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 0x5f5e2d
push dword [ebp - 0x1c]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46c49c
jmp 0x46d6da
call fcn.0044889a
mov dword [ebp - 0x68], eax
push 0x5fa953
push dword [ebp - 0x68]
push 0x602c6b
push dword [ebp - 0x1c]
push str.http:__zc.qq.com_cgi_bin_common_check_phone_telphone
mov ecx, 5
call fcn.0040108c
add esp, 0x14
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46c4d9
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 1
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
mov eax, str.Accept:___r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_7_0_like_Mac_OS_X__AppleWebKit_537.51.1__KHTML__like_Gecko__Version_7.0_Mobile_11A465_Safari_9537.53_r_nHost:_zc.qq.com
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x9c], 0
push 0
push dword [ebp - 0x9c]
lea eax, [ebp - 0x6c]
push eax
call fcn.00455c29
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46c5cf
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46c5e2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46c5f5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46c608
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46c61b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46c62e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46c641
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46c654
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46c664
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46c674
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46c68b
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push str._ec_:0
push dword [ebp - 0x20]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46c6ad
jmp 0x46d6c1
mov eax, dword [0x6eeaf4]
xor ecx, ecx
inc ecx
push ecx
push eax
cmp ecx, eax
jg 0x46d18b
push 0xf
call fcn.00442da8
mov dword [ebp - 0x68], eax
push dword [ebp - 0x68]
push str.http:__captcha.qq.com_getimage_aid1007901r0.17
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46c6f4
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 1
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
mov eax, str.Accept:_image_png__image_svgxml__image__q0.8____q0.5_r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_7_0_like_Mac_OS_X__AppleWebKit_537.51.1__KHTML__like_Gecko__Version_7.0_Mobile_11A465_Safari_9537.53_r_nHost:_captcha.qq.com
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
push 0
lea eax, [ebp - 0x6c]
push eax
call fcn.00415eed
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46c7df
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46c7f2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46c805
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46c818
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46c82b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46c83e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46c851
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46c864
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46c874
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46c884
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x46c89b
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x30], 0
jne 0x46c987
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov ebx, dword [0x6eeb94]
add ebx, 0x1c
mov dword [ebp - 0x68], ebx
mov ebx, dword [ebp - 0x68]
cmp dword [ebx], 1
jne 0x46c90a
mov eax, 0x5fa841
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46c906
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46c987
push 1
push 1
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46c982
push ebx
call fcn.005039b9
add esp, 4
jmp 0x46d18b
mov ebx, dword [0x6eeb8c]
add ebx, 0xc
mov dword [ebp - 0x68], ebx
mov ebx, dword [0x6eeb84]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x70], ebx
mov ebx, dword [0x6eeb98]
add ebx, 0xc
mov dword [ebp - 0x74], ebx
push dword [ebp - 0x74]
mov edx, 0x1601233f
mov eax, 0x52010003
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], edx
lea eax, [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x70]
push dword [ebx]
push 4
push 1
lea eax, [ebp - 0x38]
push eax
push 0x16012ac7
push 0x52010003
push 0x160168dc
push 0x52010003
push 0x160168dd
push 0x52010003
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 3
push dword [ebp - 4]
lea eax, [ebp - 0x2c]
push eax
call fcn.0043e907
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x46ca31
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov eax, str.function_parseBigInt_a__b___r_nreturn_new_BigInteger_a__b__n_nfunction_linebrk_a__b___r_nfor__var_c______r_nd__0__d__b___a.length___c__a.substring_d__d__b_____n___r_nd__b__r_nreturn_c__a.substring_d__a.length__n_nfunction_byte2Hex_a___r_nreturn_a___16____0___a.toString_16__:_a.toString_16__n_nfunction_pkcs1pad2_a__b___r_nif__b___a.length__11__return_uv_alert__Message_too_long_for_RSA____r_nnull__r_nfor__var_c______d__a.length___1__d___0__b___0____r_n____var_e__a.charCodeAt_d_____r_n____e___128___c___b___e:_e___127__e___2048____c___b___e__63__128__c___b___e____6__192__:__c___b___e__63__128__c___b___e____6__63__128__c___b___e____12__224__r_n_r_nc___b___0__r_nd__new_SecureRandom__r_nfor__e______b___2____r_n____for__e_0___0__e_0___0___d.nextBytes_e___r_n____c___b___e_0__r_n_r_nc___b___2__r_nc___b___0__r_nreturn_new_BigInteger_c__n_nfunction_RSAKey____r_nthis.n__null__r_nthis.e__0__r_nthis.coeff__this.dmq1__this.dmp1__this.q__this.p__this.d__null_n_nfunction_RSASetPublic_a__b___r_na___null__b___null__a.length___0__b.length___0____this.n__parseBigInt_a__16___this.e__parseInt_b__16___:_uv_alert__Invalid_RSA_public_key___n_nfunction_RSADoPublic_a___r_nreturn_a.modPowInt_this.e__this.n__n_nfunction_RSAEncrypt_a___r_na__pkcs1pad2_a__this.n.bitLength____7____3___r_nif__a__null__return_null__r_na__this.doPublic_a___r_nif__a__null__return_null__r_na__a.toString_16___r_nreturn__a.length__1___0___a:__0___a_n_nRSAKey.prototype.doPublic__RSADoPublic__nRSAKey.prototype.setPublic__RSASetPublic__nRSAKey.prototype.encrypt__RSAEncrypt__nvar_dbits__canary__244837814094590__nj_lm___canary__16777215___15715070__nfunction_BigInteger_a__b__c___r_na___null____number___typeof_a___this.fromNumber_a__b__c__:_b__null___string____typeof_a___this.fromString_a__256__:_this.fromString_a__b___n_nfunction_nbi____r_nreturn_new_BigInteger_null__n_nfunction_am1_a__b__c__d__e__f___r_nfor______f___0____r_n____var_g__b__this_a___c_d___e__r_n____e__Math.floor_g___67108864___r_n____c_d___g__67108863_r_n_r_nreturn_e_n_nfunction_am2_a__b__c__d__e__f___r_nvar_g__b__32767__r_nfor__b____15____f___0____r_n____var_h__this_a___32767__r_n____i__this_a_____15__r_n____k__b__h__i__g__r_n____h__g__h____k__32767_____15___c_d____e__1073741823___r_n____e___h_____30____k_____15___b__i___e_____30___r_n____c_d___h__1073741823_r_n_r_nreturn_e_n_nfunction_am3_a__b__c__d__e__f___r_nvar_g__b__16383__r_nfor__b____14____f___0____r_n____var_h__this_a___16383__r_n____i__this_a_____14__r_n____k__b__h__i__g__r_n____h__g__h____k__16383_____14___c_d___e__r_n____e___h____28____k____14___b__i__r_n____c_d___h__268435455_r_n_r_nreturn_e_n_nj_lm__true__nBigInteger.prototype.am__am2__ndbits__30__nBigInteger.prototype.DB__dbits__nBigInteger.prototype.DM___1____dbits____1__nBigInteger.prototype.DV__1____dbits__nvar_BI_FP__52__nBigInteger.prototype.FV__Math.pow_2__BI_FP___nBigInteger.prototype.F1__BI_FP___dbits__nBigInteger.prototype.F2__2__dbits___BI_FP__nvar_BI_RM___0123456789abcdefghijklmnopqrstuvwxyz___nBI_RC______nrr__nvv__nrr___0_.charCodeAt_0___nfor__vv__0__vv___9__vv__BI_RC_rr___vv__nrr___a_.charCodeAt_0___nfor__vv__10__vv___36__vv__BI_RC_rr___vv__nrr___A_.charCodeAt_0___nfor__vv__10__vv___36__vv__BI_RC_rr___vv__nfunction_int2char_a___r_nreturn_BI_RM.charAt_a__n_nfunction_intAt_a__b___r_nvar_c__BI_RC_a.charCodeAt_b____r_nreturn_c__null____1_:_c_n_nfunction_bnpCopyTo_a___r_nfor__var_b__this.t___1__b___0____b__a_b___this_b___r_na.t__this.t__r_na.s__this.s_n_nfunction_bnpFromInt_a___r_nthis.t__1__r_nthis.s__a___0____1_:_0__r_na___0___this_0___a:_a____1___this_0___a__DV:_this.t__0_n_nfunction_nbv_a___r_nvar_b__nbi____r_nb.fromInt_a___r_nreturn_b_n_nfunction_bnpFromString_a__b___r_nvar_c__r_nif__b__16__c__4__r_nelse_if__b__8__c__3__r_nelse_if__b__256__c__8__r_nelse_if__b__2__c__1__r_nelse_if__b__32__c__5__r_nelse_if__b__4__c__2__r_n
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46ca5f
push ebx
call fcn.005039b9
add esp, 4
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 3
jg 0x46cdb5
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
mov eax, 0x607402
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x46cae3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46caf3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46cb03
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46cb13
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46cb23
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46cb33
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x46cb4a
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0xf
call fcn.00442da8
mov dword [ebp - 0x68], eax
push dword [ebp - 0x68]
push str.http:__zc.qq.com_cgi_bin_chs_common_safe_check_r0.6
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46cb83
push ebx
call fcn.005039b9
add esp, 4
push 0x5fa953
push dword [ebp - 0x24]
push str.csloginstatus1
push dword [ebp - 0x1c]
push str.nickemailfalseother_emailfalseelevel1sex1qzdatejumpfrom58030telphone
push dword [ebp - 0x3c]
push str.country1province44city3isnongli0year0monthdayisrunyue0password
push dword [ebp - 0x34]
push 0x6074f2
mov ecx, 9
call fcn.0040108c
add esp, 0x24
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
push 1
mov eax, str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_7_0_like_Mac_OS_X__AppleWebKit_537.51.1__KHTML__like_Gecko__Version_7.0_Mobile_11A465_Safari_9537.53_r_nHost:_zc.qq.com
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
push 1
lea eax, [ebp - 0x70]
push eax
push 1
push 1
lea eax, [ebp - 0x6c]
push eax
call fcn.00455c29
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46cc9c
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46ccac
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46ccbf
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46ccd2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46cce5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46ccf8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46cd0b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46cd1e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x46cd2e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46cd3e
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46cd55
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x60761a
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46cd8a
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
jne 0x46cdaf
jmp 0x46cdb5
pop ecx
jmp 0x46ca61
add esp, 4
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
mov eax, str.VerifyCodeResult_:_
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004173a5
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46ce04
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46ce14
push ebx
call fcn.005039b9
add esp, 4
push 0x5f6421
push dword [ebp - 0x78]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46ce42
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x7c], 0
je 0x46ce56
jmp 0x46d18b
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
mov eax, str.VerifyCodeResult_:_
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004173a5
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46cea2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46ceb2
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5f27
push dword [ebp - 0x78]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46cee0
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x7c], 0
je 0x46cf37
push VariantClear
push 0
push 0x5fc77d
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
jmp 0x46d184
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str._ec_:4__em_:_paramnbsp_error_
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46cf68
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
je 0x46d04f
mov eax, 0x60765c
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46cf9e
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov ebx, dword [0x6eeb94]
add ebx, 0x1c
mov dword [ebp - 0x68], ebx
mov ebx, dword [ebp - 0x68]
mov dword [ebx], 1
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
push 1
push 1
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d045
push ebx
call fcn.005039b9
add esp, 4
jmp 0x46d18b
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x60761a
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46d080
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
je 0x46d0f4
mov eax, 0x6076a1
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46d0b6
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 1
push 1
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d0ea
push ebx
call fcn.005039b9
add esp, 4
jmp 0x46d18b
push dword [ebp - 0x20]
push 0x6076bf
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x68], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x46d11f
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d16c
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
push 1
push 0x3e8
call fcn.0041bfc4
pop eax
pop ecx
jmp 0x46c6b4
add esp, 8
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
mov eax, str.VerifyCodeResult_:_
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004173a5
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46d1da
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46d1ea
push ebx
call fcn.005039b9
add esp, 4
push 0x5f6421
push dword [ebp - 0x78]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46d218
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x7c], 0
je 0x46d64b
push 0xf
call fcn.00442da8
mov dword [ebp - 0x68], eax
push dword [ebp - 0x68]
push str.http:__zc.qq.com_cgi_bin_chs_common_sms_send_safe_r0.6
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d257
push ebx
call fcn.005039b9
add esp, 4
push str.elevel3regType1nick
push dword [ebp - 0x1c]
push str.telphone
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
push 1
mov eax, str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_7_0_like_Mac_OS_X__AppleWebKit_537.51.1__KHTML__like_Gecko__Version_7.0_Mobile_11A465_Safari_9537.53_r_nHost:_zc.qq.com
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
push 1
lea eax, [ebp - 0x70]
push eax
push 1
push 1
lea eax, [ebp - 0x6c]
push eax
call fcn.00455c29
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46d358
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46d368
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46d37b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46d38e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46d3a1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46d3b4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46d3c7
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46d3da
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x46d3ea
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46d3fa
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46d411
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.frequency
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46d446
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
je 0x46d5a1
push VariantClear
push 0
push 0x607733
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [0x6eec14]
add ebx, 0xfc
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov eax, 0x5f5e2d
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x60776e
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 0x68]
call fcn.004445a2
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x46d518
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46d528
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46d538
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46d548
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x10], 1
jle 0x46d59c
mov eax, 0x60777f
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46d568
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 1
push 0
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d59c
push ebx
call fcn.005039b9
add esp, 4
jmp 0x46d646
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.VerifyCodeResult_:_2_
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46d5d2
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
je 0x46d5fc
jmp 0x46d6da
mov eax, 0x5fd8f7
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46d612
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 1
push 0
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d646
push ebx
call fcn.005039b9
add esp, 4
jmp 0x46d6c1
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46d684
push 0x5fa841
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46d684
mov eax, 1
jmp 0x46d689
mov eax, 0
test eax, eax
je 0x46d6c1
push dword [ebp - 0x20]
push 0x5fa3b8
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46d6bd
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46b879
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46da28
mov dword [ebp - 0x14], 0
inc dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16017eb8
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x68], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x46d729
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d74f
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x14], eax
jl 0x46d7af
mov eax, 0x6077aa
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46d771
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov eax, 0x5f602b
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46d7aa
push ebx
call fcn.005039b9
add esp, 4
jmp 0x46da28
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.0044268a
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46d7f7
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46d807
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d817
push ebx
call fcn.005039b9
add esp, 4
push 0xf
call fcn.00442da8
mov dword [ebp - 0x68], eax
push 0x5fa953
push dword [ebp - 0x68]
push str.regType1r0.7
push dword [ebp - 0x44]
push str.http:__zc.qq.com_cgi_bin_chs_common_dirty_check_nick
mov ecx, 5
call fcn.0040108c
add esp, 0x14
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46d859
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 1
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
mov eax, str.Accept:___r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_7_0_like_Mac_OS_X__AppleWebKit_537.51.1__KHTML__like_Gecko__Version_7.0_Mobile_11A465_Safari_9537.53_r_nHost:_zc.qq.com
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x9c], 0
push 0
push dword [ebp - 0x9c]
lea eax, [ebp - 0x6c]
push eax
call fcn.0046ecac
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46d94f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46d962
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46d975
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46d988
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46d99b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46d9ae
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46d9c1
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46d9d4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46d9e4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46d9f4
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46da0b
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push str._ec_:0
push dword [ebp - 0x20]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46d6fa
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46db19
mov dword [ebp - 0x30], 1
cmp dword [ebp - 0x10], 2
jge 0x46dac2
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 4]
mov eax, 0x5f602b
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00449071
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46da95
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46daa5
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x46dab9
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
jmp 0x46db19
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
mov eax, 0x5f602b
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00441b36
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46db01
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x46db15
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46e11e
mov eax, str.function_parseBigInt_a__b___r_nreturn_new_BigInteger_a__b__n_nfunction_linebrk_a__b___r_nfor__var_c______r_nd__0__d__b___a.length___c__a.substring_d__d__b_____n___r_nd__b__r_nreturn_c__a.substring_d__a.length__n_nfunction_byte2Hex_a___r_nreturn_a___16____0___a.toString_16__:_a.toString_16__n_nfunction_pkcs1pad2_a__b___r_nif__b___a.length__11__return_uv_alert__Message_too_long_for_RSA____r_nnull__r_nfor__var_c______d__a.length___1__d___0__b___0____r_n____var_e__a.charCodeAt_d_____r_n____e___128___c___b___e:_e___127__e___2048____c___b___e__63__128__c___b___e____6__192__:__c___b___e__63__128__c___b___e____6__63__128__c___b___e____12__224__r_n_r_nc___b___0__r_nd__new_SecureRandom__r_nfor__e______b___2____r_n____for__e_0___0__e_0___0___d.nextBytes_e___r_n____c___b___e_0__r_n_r_nc___b___2__r_nc___b___0__r_nreturn_new_BigInteger_c__n_nfunction_RSAKey____r_nthis.n__null__r_nthis.e__0__r_nthis.coeff__this.dmq1__this.dmp1__this.q__this.p__this.d__null_n_nfunction_RSASetPublic_a__b___r_na___null__b___null__a.length___0__b.length___0____this.n__parseBigInt_a__16___this.e__parseInt_b__16___:_uv_alert__Invalid_RSA_public_key___n_nfunction_RSADoPublic_a___r_nreturn_a.modPowInt_this.e__this.n__n_nfunction_RSAEncrypt_a___r_na__pkcs1pad2_a__this.n.bitLength____7____3___r_nif__a__null__return_null__r_na__this.doPublic_a___r_nif__a__null__return_null__r_na__a.toString_16___r_nreturn__a.length__1___0___a:__0___a_n_nRSAKey.prototype.doPublic__RSADoPublic__nRSAKey.prototype.setPublic__RSASetPublic__nRSAKey.prototype.encrypt__RSAEncrypt__nvar_dbits__canary__244837814094590__nj_lm___canary__16777215___15715070__nfunction_BigInteger_a__b__c___r_na___null____number___typeof_a___this.fromNumber_a__b__c__:_b__null___string____typeof_a___this.fromString_a__256__:_this.fromString_a__b___n_nfunction_nbi____r_nreturn_new_BigInteger_null__n_nfunction_am1_a__b__c__d__e__f___r_nfor______f___0____r_n____var_g__b__this_a___c_d___e__r_n____e__Math.floor_g___67108864___r_n____c_d___g__67108863_r_n_r_nreturn_e_n_nfunction_am2_a__b__c__d__e__f___r_nvar_g__b__32767__r_nfor__b____15____f___0____r_n____var_h__this_a___32767__r_n____i__this_a_____15__r_n____k__b__h__i__g__r_n____h__g__h____k__32767_____15___c_d____e__1073741823___r_n____e___h_____30____k_____15___b__i___e_____30___r_n____c_d___h__1073741823_r_n_r_nreturn_e_n_nfunction_am3_a__b__c__d__e__f___r_nvar_g__b__16383__r_nfor__b____14____f___0____r_n____var_h__this_a___16383__r_n____i__this_a_____14__r_n____k__b__h__i__g__r_n____h__g__h____k__16383_____14___c_d___e__r_n____e___h____28____k____14___b__i__r_n____c_d___h__268435455_r_n_r_nreturn_e_n_nj_lm__true__nBigInteger.prototype.am__am2__ndbits__30__nBigInteger.prototype.DB__dbits__nBigInteger.prototype.DM___1____dbits____1__nBigInteger.prototype.DV__1____dbits__nvar_BI_FP__52__nBigInteger.prototype.FV__Math.pow_2__BI_FP___nBigInteger.prototype.F1__BI_FP___dbits__nBigInteger.prototype.F2__2__dbits___BI_FP__nvar_BI_RM___0123456789abcdefghijklmnopqrstuvwxyz___nBI_RC______nrr__nvv__nrr___0_.charCodeAt_0___nfor__vv__0__vv___9__vv__BI_RC_rr___vv__nrr___a_.charCodeAt_0___nfor__vv__10__vv___36__vv__BI_RC_rr___vv__nrr___A_.charCodeAt_0___nfor__vv__10__vv___36__vv__BI_RC_rr___vv__nfunction_int2char_a___r_nreturn_BI_RM.charAt_a__n_nfunction_intAt_a__b___r_nvar_c__BI_RC_a.charCodeAt_b____r_nreturn_c__null____1_:_c_n_nfunction_bnpCopyTo_a___r_nfor__var_b__this.t___1__b___0____b__a_b___this_b___r_na.t__this.t__r_na.s__this.s_n_nfunction_bnpFromInt_a___r_nthis.t__1__r_nthis.s__a___0____1_:_0__r_na___0___this_0___a:_a____1___this_0___a__DV:_this.t__0_n_nfunction_nbv_a___r_nvar_b__nbi____r_nb.fromInt_a___r_nreturn_b_n_nfunction_bnpFromString_a__b___r_nvar_c__r_nif__b__16__c__4__r_nelse_if__b__8__c__3__r_nelse_if__b__256__c__8__r_nelse_if__b__2__c__1__r_nelse_if__b__32__c__5__r_nelse_if__b__4__c__2__r_n
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46db5c
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
mov eax, 0x607402
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x46dbd3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46dbe3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46dbf3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46dc03
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46dc13
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46dc23
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x46dc3a
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0x5fa953
push dword [ebp - 0x24]
push str.csloginstatus1
push dword [ebp - 0x48]
push str.smsvc
push dword [ebp - 0x1c]
push str.emailfalseother_emailfalseelevel3sex1qzdatejumpfrom58030telphone
push dword [ebp - 0x44]
push str.nick
push dword [ebp - 0x3c]
push str.qzone_flag1country1province44city3isnongli0year1996month3day4isrunyue0password
push dword [ebp - 0x34]
push 0x6074f2
mov ecx, 0xd
call fcn.0040108c
add esp, 0x34
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x46dc97
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0xf
call fcn.00442da8
mov dword [ebp - 0x68], eax
push dword [ebp - 0x68]
push str.http:__zc.qq.com_cgi_bin_chs_numreg_get_acc_safe_r0.
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46dcd0
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
push 1
mov eax, str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_http:__zc.qq.com_chs_index.html_r_nAccept_Language:_zh_cn_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_7_0_like_Mac_OS_X__AppleWebKit_537.51.1__KHTML__like_Gecko__Version_7.0_Mobile_11A465_Safari_9537.53_r_nHost:_zc.qq.com
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
push 1
lea eax, [ebp - 0x50]
push eax
push 1
push 1
lea eax, [ebp - 0x6c]
push eax
call fcn.00415eed
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46ddb9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x46ddcc
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x46dddf
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x46ddf2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46de05
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x46de18
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46de2b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46de3b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46de4b
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x9c]
test eax, eax
jne 0x46de61
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x46de8d
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46dea4
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
mov eax, str.___uin_:_
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004173a5
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46def4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46df04
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x46df18
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x54], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.forbid
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46df4d
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
je 0x46dfa7
push 0x5fa6e8
push dword [ebp - 0x20]
push 0x60791f
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46df9e
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x46e11e
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str._ec_:16__em_:_smsnbsp_checknbsp_error_
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46dfd8
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
je 0x46e032
push 0x5fa6e8
push dword [ebp - 0x20]
push 0x5fc0a4
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46e029
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x46e11e
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str._ec_:2__em_:_vcnbsp_checknbsp_error_
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46e063
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
je 0x46e0d0
push VariantClear
push 0
push 0x5fe367
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
jmp 0x46e11e
push 0x5f5e2d
push dword [ebp - 0x54]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46e11e
push 0x5fa6e8
push dword [ebp - 0x20]
push 0x5fa6f7
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46e11a
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46e400
push VariantClear
push 0
push 0x5fa709
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 3
mov eax, 1
mov ebx, 0x5713c0
call fcn.005039d1
add esp, 0x28
mov dword [ebp - 0x68], eax
push 0x6079bb
push dword [ebp - 0x54]
push dword [ebp - 0x68]
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46e1e9
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x46e1fc
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46e249
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16025676
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x68], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x46e2a4
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46e2ca
push ebx
call fcn.005039b9
add esp, 4
fild dword [ebp - 0x6c]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5f5e52]
fstp qword [ebp - 0x7c]
push 0x80000601
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x80], eax
push 0
push dword [ebp - 0x80]
push 0xffffffffffffffff
push 8
push 0x16025676
push 0x52010003
call fcn.005039d7
add esp, 0x18
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x46e330
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
mov ebx, dword [0x6eec14]
add ebx, 0x54
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 0x58]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x54]
push eax
mov eax, 0x6079be
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x68]
call fcn.004445a2
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46e3b0
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46e3c0
push ebx
call fcn.005039b9
add esp, 4
push 0x5f6557
push dword [ebp - 0x40]
push 0x5fa87e
push dword [ebp - 0x54]
push dword [ebp - 0x5c]
mov ecx, 5
call fcn.0040108c
add esp, 0x14
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x46e3f7
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x5c], eax
jmp 0x46e4de
push 0x60777f
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46e466
push VariantClear
push 0
push 0x5fa709
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
jmp 0x46e4de
push dword [ebp - 0xc]
push 0x5fa71d
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x68], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x46e491
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46e4de
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46e505
cmp dword [ebp - 0x4c], 0
je 0x46e505
xor eax, eax
jmp 0x46e50a
mov eax, 1
test eax, eax
je 0x46e517
jmp 0x46e54d
cmp dword [ebp - 0x10], 2
jne 0x46e546
lea eax, [ebp - 0x1c]
push eax
mov eax, 0x5f602b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
call fcn.0043ba34
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46e546
push ebx
call fcn.005039b9
add esp, 4
pop ebx
pop ecx
jmp 0x46b84b
add esp, 8
push 0x60777f
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x46e583
mov eax, 0x5f5e2d
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46e57f
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0xffffffffffffffff
push 0x12
push 0x1602ce43
push 0x52010003
call fcn.005039dd
add esp, 0x10
test eax, eax
je 0x46e64b
push 0xffffffffffffffff
push 8
push 0x1602ce44
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x6c], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x46e5cd
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x5053c0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46e5f3
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x70]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46e621
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x74], 0
je 0x46e64b
push 0x5f5e2d
push dword [ebp - 0x5c]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46e64b
mov eax, 1
jmp 0x46e650
mov eax, 0
test eax, eax
je 0x46e9ee
push 0
push 0
push 0
push VariantClear
push 0
push 0x5f6557
push VariantClear
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x46e67d
mov eax, 0x5f5e2d
push eax
push 3
mov ebx, 0x5056a0
call fcn.005039b3
add esp, 0x28
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x60]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x46e6b5
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x46e6b1
imul eax, dword [ebx]
jmp 0x46e6a6
mov ecx, eax
test ecx, ecx
je 0x46e6d4
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x46e6cd
push ebx
push eax
call fcn.005039b9
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x46e6bb
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x60], eax
mov eax, 0x5f5e2d
push eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x46e6f6
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x60]
call fcn.00402e41
xor ecx, ecx
push eax
lea eax, [ebp - 0x64]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x46e8e7
mov ebx, dword [ebp - 0x60]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x64]
dec eax
jns 0x46e736
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x46e749
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov eax, 0x5fa87e
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x68]
call fcn.004418d1
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46e790
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
call fcn.00401e9f
push ebx
push ecx
mov eax, dword [ebp - 0x64]
dec eax
jns 0x46e7ad
push 4
call fcn.005039bf
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x46e7c0
push 1
call fcn.005039bf
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov eax, 0x5fa87e
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x7c]
call fcn.0040db78
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x46e81f
push ebx
call fcn.005039b9
add esp, 4
push 1
push dword [ebp - 0x58]
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 4]
call fcn.0046fee7
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46e84a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x46e85d
push ebx
call fcn.005039b9
add esp, 4
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 3
mov eax, 1
mov ebx, 0x5713c0
call fcn.005039d1
add esp, 0x28
mov dword [ebp - 0x68], eax
push 0x6079bb
push dword [ebp - 0x68]
push dword [ebp - 0x5c]
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x46e8c7
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x46e8db
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x5c], eax
pop eax
pop ebx
pop ecx
jmp 0x46e70b
add esp, 0xc
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x68], eax
push 0x5fb090
push dword [ebp - 0xc]
push 0x6079c7
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x68], 0
je 0x46e950
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x46e94b
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005039ad
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x46e955
mov eax, 0x5f5e2d
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46e968
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x5c]
push dword [ebp - 0x70]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46e98e
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x46e9a1
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 4]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x46e9ee
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
lea eax, [ebp - 0xc]
push eax
push 0x6eece4
mov eax, 0x5f64f3
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
mov eax, 0x5f602b
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
call fcn.00444cfb
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x46ea62
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x46ea72
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x74], 0
jne 0x46eaf5
push 0xffffffffffffffff
push 8
push 0x16025676
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x78], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x46eaa8
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x46eace
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x7c], 0
jle 0x46eaf5
push 0x5fa728
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x46eaf5
xor eax, eax
jmp 0x46eafa
mov eax, 1
test eax, eax
je 0x46eb24
push 0
push 0
push 0xffffffffffffffff
push 0x12
push 0x16025674
push 0x52010003
call fcn.005039d7
add esp, 0x18
call fcn.00438b73
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x68], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x68]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x46eb63
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46eb73
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x46eb83
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x46eb93
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x46eba3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x46ebb3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x46ebd3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x46ebe3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x46ebf3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x46ec03
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x46ec13
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x46ec23
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x46ec33
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x46ec43
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x46ec53
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x46ec63
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x46ec81
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x46ec7d
imul eax, dword [ebx]
jmp 0x46ec72
mov ecx, eax
test ecx, ecx
je 0x46eca0
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x46ec99
push ebx
push eax
call fcn.005039b9
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x46ec87
call fcn.005039b9
add esp, 4
mov esp, ebp
pop ebp
ret