Function at 0x43ccf0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
push 8
call fcn.00515ee9
add esp, 4
mov dword [ebp - 0x5c], eax
mov edi, eax
mov esi, 0xb609c8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
call fcn.0043fe69
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x43ce23
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp + 0x24], 0
je 0x43ce7f
mov eax, str.0X00
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43ce5c
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, 0xc512e2
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x43ce76
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
jmp 0x43ceb3
mov eax, str.ADULT
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43ce95
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, 0xc512e6
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x43ceaf
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nIf_Modified_Since:Wed__31_Dec_1969_16:00:00_GMT_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x43cec9
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x8c], ebx
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x8c]
call fcn.00440064
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x43cf6f
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x90], ebx
push dword [ebp - 0x90]
call fcn.0044125e
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43cf43
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x8c], ebx
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x8c]
call fcn.00440064
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x43cf83
mov eax, 0xc7bf44
jmp 0x43fcc9
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x38
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
jne 0x43cfa9
mov eax, 0x65d6b8
push eax
push 1
mov ebx, 0x516ff0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
call fcn.004036a3
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push dword [ebp - 0x34]
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x43d010
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
call fcn.004074d8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x43d0ca
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43d06e
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43d082
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43d0b7
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov eax, 0xc7bf60
jmp 0x43fcc9
mov ebx, dword [0xfb9b7c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x18]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x43d10a
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43d11b
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x8c], ebx
push dword [ebp - 0x18]
push dword [ebp - 0x8c]
call fcn.0044233f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x43d152
mov eax, 0xc7bf44
jmp 0x43fcc9
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x38], eax
jle 0x43d164
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
push eax
lea eax, [ebp - 0x40]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x43d307
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
push 0x65d6b8
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x43d206
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
mov eax, 0xc512e6
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43d1fd
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x90], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x94], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x98], ebx
push str.__N_
mov ebx, dword [ebp - 0x98]
push dword [ebx]
push 0xc282fe
mov ebx, dword [ebp - 0x94]
push dword [ebx]
push 0xc282fe
mov ebx, dword [ebp - 0x90]
push dword [ebx]
push 0xc282fe
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
push 0xc7bf7d
push dword [ebp - 0x3c]
push dword [ebp - 0x44]
mov ecx, 0xb
call fcn.0040113b
add esp, 0x2c
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43d2fb
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
pop eax
pop ebx
pop ecx
jmp 0x43d170
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x43d31d
mov eax, 0x65d6b8
push eax
push 1
mov ebx, 0x5165a0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x94]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
fsub qword [0xb60b33]
fstp qword [ebp - 0x9c]
fld qword [ebp - 0x9c]
call fcn.00401004
push 0x80000301
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x43d37a
mov eax, 0x65d6b8
push eax
push 2
mov ebx, 0x516af0
call fcn.00515f01
add esp, 0x1c
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43d3aa
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
push dword [ebp - 0x44]
push str.passengerTicketStr
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43d3e0
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
push eax
lea eax, [ebp - 0x40]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x43d5c0
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
push 0x65d6b8
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x43d486
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
mov eax, 0xc512e6
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43d47d
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x8c], ebx
push 0xc7bf95
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
je 0x43d5b8
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x90], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x94], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x98], ebx
push 0xc79720
mov ebx, dword [ebp - 0x98]
push dword [ebx]
push 0xc282fe
mov ebx, dword [ebp - 0x94]
push dword [ebx]
push 0xc282fe
mov ebx, dword [ebp - 0x90]
push dword [ebx]
push 0xc282fe
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
push dword [ebp - 0x48]
mov ecx, 9
call fcn.0040113b
add esp, 0x24
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43d5b4
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
pop eax
pop ebx
pop ecx
jmp 0x43d3f0
add esp, 0xc
push dword [ebp - 0x48]
push str.oldPassengerStr
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43d5f5
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x34
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
push str.train_location
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43d63e
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x38
mov dword [ebp - 0x90], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x94], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x98], ebx
push dword [ebp - 0x48]
push 0xc7bfb9
push dword [ebp - 0x44]
push str.cancel_flag2bed_level_order_num000000000000000000000000000000
mov ebx, dword [ebp - 0x98]
push dword [ebx]
push str.query_to_station_name
mov ebx, dword [ebp - 0x94]
push dword [ebx]
push str.query_from_station_name
push dword [ebp - 0xc]
push str.tour_flagdcpurpose_codes
mov ebx, dword [ebp - 0x90]
push dword [ebx]
push 0xc7c04e
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
push str.secretStr
mov ecx, 0xe
call fcn.0040113b
add esp, 0x38
mov dword [ebp - 0x9c], eax
push 0xe
call fcn.0041a81b
mov dword [ebp - 0xa0], eax
push dword [ebp - 0xa0]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43d71a
push ebx
call fcn.00515eef
add esp, 4
push 1
push 1
push 1
push 0xfa0
mov dword [ebp - 0xa8], 0
push 0
lea eax, [ebp - 0xa8]
push eax
push 1
lea eax, [ebp - 0xa4]
push eax
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x9c]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_confirmPassenger_autoSubmitOrderRequest
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0xac]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xb0], eax
mov ebx, dword [ebp - 0xac]
test ebx, ebx
je 0x43d798
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43d7ab
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x43d7be
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x43d7d1
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0xb0]
push eax
call fcn.0040b3e1
mov dword [ebp - 0xb4], eax
mov ebx, dword [ebp - 0xb0]
test ebx, ebx
je 0x43d7f6
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xb4]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43d80d
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xc280db
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43d852
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x8c], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x8c]
test eax, eax
jne 0x43d881
mov eax, 0x65d6b8
push eax
push 1
mov ebx, 0x5165a0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43d8ad
push ebx
call fcn.00515eef
add esp, 4
cmp dword [ebp - 0x90], 0
jne 0x43daff
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x90], ebx
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x90]
call fcn.0040862a
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43d907
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x38
mov dword [ebp - 0x90], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x94], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x98], ebx
push dword [ebp - 0x48]
push 0xc7bfb9
push dword [ebp - 0x44]
push str.cancel_flag2bed_level_order_num000000000000000000000000000000
mov ebx, dword [ebp - 0x98]
push dword [ebx]
push str.query_to_station_name
mov ebx, dword [ebp - 0x94]
push dword [ebx]
push str.query_from_station_name
push dword [ebp - 0xc]
push str.tour_flagdcpurpose_codes
mov ebx, dword [ebp - 0x90]
push dword [ebx]
push 0xc7c04e
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
push str.secretStr
mov ecx, 0xe
call fcn.0040113b
add esp, 0x38
mov dword [ebp - 0x9c], eax
push 0xe
call fcn.0041a81b
mov dword [ebp - 0xa0], eax
push dword [ebp - 0xa0]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:___r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43d9e8
push ebx
call fcn.00515eef
add esp, 4
push 1
push 1
push 1
push 0xfa0
mov dword [ebp - 0xa8], 0
push 0
lea eax, [ebp - 0xa8]
push eax
push 1
lea eax, [ebp - 0xa4]
push eax
mov dword [ebp - 0xac], 0
push 0
lea eax, [ebp - 0xac]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x9c]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_confirmPassenger_autoSubmitOrderRequest
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xb4], eax
mov ebx, dword [ebp - 0xb0]
test ebx, ebx
je 0x43da73
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43da86
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xac]
test ebx, ebx
je 0x43da99
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x43daac
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x43dabf
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0xb4]
push eax
call fcn.0040b3e1
mov dword [ebp - 0xb8], eax
mov ebx, dword [ebp - 0xb4]
test ebx, ebx
je 0x43dae4
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xb8]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43dafb
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43db12
mov eax, 0x65d6b8
push eax
push 1
mov ebx, 0x5165a0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x43dbd7
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43db7b
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43db8f
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43dbc4
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov eax, 0xc7c22e
jmp 0x43fcc9
lea eax, [ebp - 0x50]
push eax
call fcn.0041f143
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x43dbfd
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x58], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x43dc14
mov eax, 0x65d6b8
push eax
push 1
mov ebx, 0x5165a0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jle 0x43dcf5
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43dc7d
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43dc91
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43dcc6
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
push 0xc7c241
push dword [ebp - 0x58]
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
jmp 0x43fcc9
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
mov dword [ebp - 0x90], 0
push 0
push dword [ebp - 0x90]
mov eax, 0xc28132
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
mov eax, str.ata_:_result_:_
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00405f2a
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x43dd5f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43dd72
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43dd89
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
mov eax, 0xc7ae3d
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040a815
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43ddbf
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x5c]
call fcn.004074d8
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
je 0x43de79
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43de1d
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43de31
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43de66
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov eax, 0xc7c25d
jmp 0x43fcc9
mov ebx, dword [ebp - 0x5c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 2
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x43deb5
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43dec6
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x43df06
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43df17
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x5c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 2
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x43df57
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x43df68
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x5c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x43dfa8
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43dfb9
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x68]
push str.leftTicketStr
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43dfef
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x60], eax
push dword [ebp - 0x64]
push str.key_check_isChange
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43e025
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x64], eax
push dword [ebp - 0x68]
push str.leftTicket
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x43e05b
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x68], eax
push str.key_check_isChange
push dword [ebp - 0x64]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x43e117
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43e0bb
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43e0cf
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43e104
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov eax, 0xc7c2a3
jmp 0x43fcc9
mov ebx, dword [ebp - 0x5c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 2
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
push dword [ebp - 0x18]
push dword [ebp - 0x8c]
call fcn.0044233f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x43e157
mov eax, 0xc7c2b9
jmp 0x43fcc9
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
call fcn.004074d8
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x38], eax
jle 0x43e18f
cmp dword [ebp + 0x20], 0
jne 0x43e189
mov eax, 0xc7c2d6
jmp 0x43fcc9
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
mov eax, 0x65d6b8
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43e1a5
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
push eax
lea eax, [ebp - 0x40]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x43e370
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
push 0x65d6b8
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x43e24b
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
mov eax, 0xc512e6
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43e242
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x90], ebx
push 1
push dword [ebp - 0x90]
call fcn.004424a2
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x98], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x9c], ebx
push str._2C_2CN_
mov ebx, dword [ebp - 0x9c]
push dword [ebx]
push 0xc79593
mov ebx, dword [ebp - 0x98]
push dword [ebx]
push 0xc79593
push dword [ebp - 0x94]
push 0xc79593
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
push str._2C0_2C
push dword [ebp - 0x3c]
push dword [ebp - 0x44]
mov ecx, 0xb
call fcn.0040113b
add esp, 0x2c
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43e34d
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43e364
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
pop eax
pop ebx
pop ecx
jmp 0x43e1b5
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x43e386
mov eax, 0x65d6b8
push eax
push 1
mov ebx, 0x5165a0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x94]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
fsub qword [0xb60b33]
fstp qword [ebp - 0x9c]
fld qword [ebp - 0x9c]
call fcn.00401004
push 0x80000301
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x43e3e3
mov eax, 0x65d6b8
push eax
push 2
mov ebx, 0x516af0
call fcn.00515f01
add esp, 0x1c
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43e413
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
push dword [ebp - 0x44]
push str.passengerTicketStr
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43e449
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov eax, 0x65d6b8
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43e463
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
push eax
lea eax, [ebp - 0x40]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x43e6d7
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
push 0x65d6b8
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x43e509
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x8c], ebx
mov eax, 0xc512e6
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43e500
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x8c], ebx
push 0xc7bf95
mov ebx, dword [ebp - 0x8c]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
je 0x43e6cf
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x8c], ebx
push 1
push dword [ebp - 0x8c]
call fcn.004424a2
mov dword [ebp - 0x90], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xc79722
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xc7c309
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x90]
test eax, eax
jne 0x43e5c4
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x43e5f0
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x98], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x9c], ebx
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x40]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0xa0], ebx
push 0xc79720
mov ebx, dword [ebp - 0xa0]
push dword [ebx]
push 0xc79593
mov ebx, dword [ebp - 0x9c]
push dword [ebx]
push 0xc79593
mov ebx, dword [ebp - 0x98]
push dword [ebx]
push 0xc79593
push dword [ebp - 0x94]
push dword [ebp - 0x48]
mov ecx, 9
call fcn.0040113b
add esp, 0x24
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43e6b4
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xa4]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43e6cb
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
pop eax
pop ebx
pop ecx
jmp 0x43e473
add esp, 0xc
push dword [ebp - 0x48]
push str.oldPassengerStr
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43e70c
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
mov ebx, dword [0xfb9b80]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x518f50
call fcn.00515f01
add esp, 0x10
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x90], ebx
mov ebx, dword [0xfb9b84]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x518f10
call fcn.00515f01
add esp, 0x10
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x98], ebx
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x518f30
call fcn.00515f01
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x518570
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0xa0], eax
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 1
mov ebx, 0x518ef0
call fcn.00515f01
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x518570
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0xa8], eax
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 1
mov ebx, 0x518f70
call fcn.00515f01
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x518570
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0xb0], eax
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 1
mov ebx, 0x518f90
call fcn.00515f01
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x518570
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0xb8], eax
push reloc.WS2_32.dll_closesocket
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 1
mov ebx, 0x518fb0
call fcn.00515f01
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x518570
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0xc0], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 0x30
mov dword [ebp - 0xc4], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
mov dword [ebp - 0xc8], ebx
mov ebx, dword [0xfb9b7c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x18]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0xcc], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0xd0], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xd4], ebx
push str._json_att
push dword [ebp - 0xc]
push str.purpose_codes
push dword [ebp - 0x68]
push 0xc7bfb9
mov ebx, dword [ebp - 0xd4]
push dword [ebx]
push str.toStationTelecode
mov ebx, dword [ebp - 0xd0]
push dword [ebx]
push str.fromStationTelecode
mov ebx, dword [ebp - 0xcc]
push dword [ebx]
push str.seatType
mov ebx, dword [ebp - 0xc8]
push dword [ebx]
push str.stationTrainCode
mov ebx, dword [ebp - 0xc4]
push dword [ebx]
push str.GMT_2B0800train_no
push dword [ebp - 0xc0]
push 0xc7c387
push dword [ebp - 0xb8]
push 0xc7c387
push dword [ebp - 0xb0]
push 0xc79722
push dword [ebp - 0xa8]
push 0xc79722
push dword [ebp - 0xa0]
push 0xc79722
mov ebx, dword [ebp - 0x98]
push dword [ebx]
push 0xc79722
mov ebx, dword [ebp - 0x90]
push dword [ebx]
push str.train_date
mov ecx, 0x1d
call fcn.0040113b
add esp, 0x74
mov dword [ebp - 0xd8], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43e9d4
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x43e9e7
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xb0]
test ebx, ebx
je 0x43e9fa
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xb8]
test ebx, ebx
je 0x43ea0d
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xc0]
test ebx, ebx
je 0x43ea20
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xd8]
push eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43ea37
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x6c], eax
push 0xe
call fcn.0041a81b
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x8c]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:_application_json__text_javascript_____q0.01_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43ea7c
push ebx
call fcn.00515eef
add esp, 4
push 1
push 1
push 1
push 0xfa0
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x6c]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_confirmPassenger_getQueueCountAsync
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43eb04
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x43eb17
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x43eb2a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43eb3d
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0xa0]
push eax
call fcn.0040b3e1
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43eb62
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xa4]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43eb79
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
mov dword [ebp - 0x90], 0
push 0
push dword [ebp - 0x90]
mov eax, 0xc28132
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
mov eax, str.ticket_:_
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00405f2a
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x43ebe7
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43ebfa
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x43ec11
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x70], eax
push dword [ebp - 0x18]
lea eax, [ebp - 0x70]
push eax
call fcn.0044233f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x43ec38
mov eax, 0xc7c590
jmp 0x43fcc9
mov ebx, dword [0xfb9b7c]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x18]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x43ec78
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43ec89
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
call fcn.004074d8
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c], eax
jge 0x43ed5a
cmp dword [ebp + 0x20], 0
je 0x43ecbb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
jmp 0x43ed5a
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43ecfe
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43ed12
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43ed47
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov eax, 0xc7c5ad
jmp 0x43fcc9
mov dword [ebp - 0x74], 0
xor ecx, ecx
lea eax, [ebp - 0x78]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 6
jg 0x43f788
push 0x10
call fcn.0041a81b
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x43ed9d
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x7c], eax
push dword [ebp - 0x7c]
push str.https:__kyfw.12306.cn_otn_passcodeNew_getPassCodeNew_modulepassengerrandrandp0.
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], 0
push 0
push dword [ebp - 0x90]
push 1
push 0x1388
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_CN_zh_q0.8_en_q0.6_r_nAccept_Encoding:_gzip_deflate_sdch_r_nOrigin:_https:__kyfw.12306.cn_r_nReferer:_https:__kyfw.12306.cn_otn_login_init_r_nCache_Control:_no_store_no_cache_r_nPragma:_no_cache_r_nConnection:_Keep_Alive
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 0xa4], 0
push 0
push dword [ebp - 0xa4]
lea eax, [ebp - 0x8c]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43ee67
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43ee7a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43ee8d
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x43eea0
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43eeb3
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xa8]
push eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x43eeca
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x80], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x80]
test eax, eax
jne 0x43eee1
mov eax, 0xb609c8
push eax
push 1
mov ebx, 0x5165c0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1388
jle 0x43f6de
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x78], eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passcodeNew_getPassCodeNew_modulepassengerrandrandp0.
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0041ad32
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43ef5b
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x43ef75
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x84], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xc280fe
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x84]
test eax, eax
jne 0x43efc0
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x43eff3
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x84], eax
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x94]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
fild dword [ebp - 0x78]
fstp qword [ebp - 0x9c]
fsub qword [ebp - 0x9c]
fstp qword [ebp - 0xa4]
fld qword [ebp - 0xa4]
call fcn.00401004
mov dword [ebp - 0x78], eax
mov eax, dword [0xfb9c34]
cmp dword [ebp - 0x78], eax
jge 0x43f0a1
fild dword [0xfb9c34]
fstp qword [ebp - 0x90]
fld qword [ebp - 0x90]
fild dword [ebp - 0x78]
fstp qword [ebp - 0x98]
fsub qword [ebp - 0x98]
fstp qword [ebp - 0xa0]
fld qword [ebp - 0xa0]
call fcn.00401004
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
push 0x65d6b8
push dword [ebp - 0x84]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x43f0c7
mov eax, 0xc7c7b2
jmp 0x43fcc9
call fcn.0041ed42
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x11170
jge 0x43f102
push 0x80000301
push 0
push 0x64
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
jmp 0x43f0c7
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x94]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
fadd qword [0xc78ce1]
fstp qword [ebp - 0x9c]
fld qword [ebp - 0x9c]
call fcn.00401004
mov dword [ebp - 0x88], eax
push str.randrandp_json_att
push dword [ebp - 0x84]
push str.randCode
mov ecx, 3
call fcn.0040113b
add esp, 0xc
mov dword [ebp - 0x8c], eax
push 0xe
call fcn.0041a81b
mov dword [ebp - 0x90], eax
push dword [ebp - 0x90]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:_application_json__text_javascript_____q0.01_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x43f1ad
push ebx
call fcn.00515eef
add esp, 4
mov dword [ebp - 0x98], 0
push 0
push dword [ebp - 0x98]
push 1
push 0x1f40
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passcodeNew_checkRandCodeAnsyn
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa4]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x43f243
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43f256
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43f269
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43f27c
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43f28f
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0xa8]
push eax
call fcn.0040b3e1
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x43f2b4
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xac]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43f2cb
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x90], eax
jle 0x43f33a
call fcn.0041a998
mov dword [ebp - 0x8c], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x8c]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43f335
push ebx
call fcn.00515eef
add esp, 4
jmp 0x43f653
push 0x65d6b8
push dword [ebp - 0x50]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x43f515
call fcn.0041a998
mov dword [ebp - 0x8c], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x8c]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43f38f
push ebx
call fcn.00515eef
add esp, 4
push str.randrandp_json_att
push dword [ebp - 0x84]
push str.randCode
mov ecx, 3
call fcn.0040113b
add esp, 0xc
mov dword [ebp - 0x8c], eax
push 0xe
call fcn.0041a81b
mov dword [ebp - 0x90], eax
push dword [ebp - 0x90]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:_application_json__text_javascript_____q0.01_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x43f3f3
push ebx
call fcn.00515eef
add esp, 4
mov dword [ebp - 0x98], 0
push 0
push dword [ebp - 0x98]
push 1
push 0x1f40
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passcodeNew_checkRandCodeAnsyn
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa4]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x43f489
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43f49c
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43f4af
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43f4c2
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43f4d5
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0xa8]
push eax
call fcn.0040b3e1
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x43f4fa
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xac]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43f511
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_1___msg_:_TRUE_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43f546
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffff
jne 0x43f5c7
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_0___msg_:_FALSE_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43f59d
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffff
jne 0x43f5c7
xor eax, eax
jmp 0x43f5cc
mov eax, 1
test eax, eax
je 0x43f5de
jmp 0x43f653
push 0x80000301
push 0
push 0xc8
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_0___msg_:__
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43f62d
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffff
jne 0x43f149
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_1___msg_:_TRUE_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43f684
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffff
jne 0x43f6cd
push 0x80000301
push 0
push 0x5dc
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
jmp 0x43f6d9
mov dword [ebp - 0x74], 1
jmp 0x43f788
jmp 0x43f781
push 0x80000301
push 0
push 0x834
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
mov eax, 0xb609c8
xor ecx, ecx
test eax, eax
je 0x43f70a
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x80]
xor ebx, ebx
test eax, eax
je 0x43f71b
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x43f732
dec eax
test ecx, ecx
je 0x43f732
call fcn.004074f1
add esp, 0xc
test eax, eax
jne 0x43f781
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
mov dword [ebp - 0x8c], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x8c]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43f781
push ebx
call fcn.00515eef
add esp, 4
pop ebx
pop ecx
jmp 0x43ed68
add esp, 8
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.randCodeError
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43f7bc
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffff
je 0x43f7ec
mov eax, 0xc7c9ac
jmp 0x43fcc9
cmp dword [ebp - 0x74], 0
jne 0x43f800
mov eax, 0xc7c7b2
jmp 0x43fcc9
push str._json_att
push dword [ebp - 0x4c]
push 0xc7bfb9
push dword [ebp - 0x60]
push 0xc7bfb9
push dword [ebp - 0x64]
push 0xc7bfb9
push dword [ebp - 0xc]
push str.purpose_codes
push dword [ebp - 0x84]
push 0xc78861
push dword [ebp - 0x48]
push 0xc7bfb9
push dword [ebp - 0x44]
mov ecx, 0xe
call fcn.0040113b
add esp, 0x38
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43f865
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
push 1
push 0x1770
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:_application_json__text_javascript_____q0.01_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x6c]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_confirmPassenger_confirmSingleForQueueAsys
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43f907
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x43f91a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43f92d
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x43f940
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0xa0]
push eax
call fcn.0040b3e1
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43f965
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xa4]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43f97c
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xc7cbc1
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43f9b1
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffff
je 0x43faee
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
push 1
push 0x1770
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nAccept:_application_json__text_javascript_____q0.01_r_nAccept_Language:_zh_cn_zh_q0.8_en_us_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x6c]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_confirmPassenger_confirmSingleForQueueAsys
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
push eax
push dword [ebp + 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x43fa75
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x43fa88
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x43fa9b
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x43faae
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0xa0]
push eax
call fcn.0040b3e1
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x43fad3
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0xa4]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43faea
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._submitStatus_:true__messages_:__
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x43fb1f
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffff
jle 0x43fbe9
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43fb88
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43fb9c
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43fbd1
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
mov eax, 0xc7ba38
jmp 0x43fcc9
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x8c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010c8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x65d6b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43fc2c
mov eax, 0x65d6b8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43fc40
mov eax, 0x65d6b8
push eax
push 6
mov ebx, 0x5177c0
call fcn.00515f01
add esp, 0x4c
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x8c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43fc75
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x8c]
mov dword [ebx], eax
lea eax, [ebp - 0x50]
push eax
call fcn.0041f143
mov dword [ebp - 0x8c], eax
push 0xc7cbef
push dword [ebp - 0x8c]
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x43fcbe
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x90]
jmp 0x43fcc9
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x43fcda
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43fcea
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x43fcfa
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x43fd0a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x43fd1a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43fd2a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43fd3a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43fd4a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43fd5a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43fd6a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43fd7a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43fd8a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x43fd9a
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x5c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x43fdb8
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x43fdb4
imul eax, dword [ebx]
jmp 0x43fda9
mov ecx, eax
test ecx, ecx
je 0x43fdd7
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x43fdd0
push ebx
push eax
call fcn.00515eef
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x43fdbe
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43fdef
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43fdff
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x43fe0f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43fe1f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x43fe2f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x43fe3f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x43fe4f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x43fe62