Function at 0x471520
Capabilities:
Access peb ldr_data
Check http status code
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x5b5267
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x77c
mov eax, dword [0x63b4a0]
push ebx
push esi
push edi
mov dword [esp + 0xc], eax
mov ecx, dword [0x64a740]
xor ebx, ebx
push ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x794], ebx
call fcn.00557aba
lea ecx, [esp + 0x378]
mov byte [esp + 0x790], 1
call fcn.0055b385
lea ecx, [esp + 0x348]
mov byte [esp + 0x790], 2
call fcn.0055b385
lea ecx, [esp + 0x358]
mov byte [esp + 0x790], 3
call fcn.0055b385
lea ecx, [esp + 0x244]
mov byte [esp + 0x790], 4
call fcn.0055b385
lea ecx, [esp + 0x224]
mov byte [esp + 0x790], 5
call fcn.0055b385
lea ecx, [esp + 0x318]
mov byte [esp + 0x790], 6
call fcn.0055b385
lea ecx, [esp + 0x204]
mov byte [esp + 0x790], 7
call fcn.0055b385
lea ecx, [esp + 0x1e4]
mov byte [esp + 0x790], 8
call fcn.0055b385
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x790], 9
call fcn.0055b385
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x790], 0xa
call fcn.0055b385
lea ecx, [esp + 0x338]
mov byte [esp + 0x790], 0xb
call fcn.0055b385
lea ecx, [esp + 0x184]
mov byte [esp + 0x790], 0xc
call fcn.0055b385
lea ecx, [esp + 0x164]
mov byte [esp + 0x790], 0xd
call fcn.0055b385
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x790], 0xe
call fcn.0055b385
lea ecx, [esp + 0x328]
mov byte [esp + 0x790], 0xf
call fcn.0055b385
lea ecx, [esp + 0x2f8]
mov byte [esp + 0x790], 0x10
call fcn.0055b385
lea ecx, [esp + 0x2d8]
mov byte [esp + 0x790], 0x11
call fcn.0055b385
lea ecx, [esp + 0x254]
mov byte [esp + 0x790], 0x12
call fcn.0055b385
lea ecx, [esp + 0x2b8]
mov byte [esp + 0x790], 0x13
call fcn.0055b385
lea ecx, [esp + 0x368]
mov byte [esp + 0x790], 0x14
call fcn.0055b385
lea ecx, [esp + 0x234]
mov byte [esp + 0x790], 0x15
call fcn.0055b385
lea ecx, [esp + 0x154]
mov byte [esp + 0x790], 0x16
call fcn.0055b385
lea ecx, [esp + 0x308]
mov byte [esp + 0x790], 0x17
call fcn.0055b385
lea ecx, [esp + 0x214]
mov byte [esp + 0x790], 0x18
call fcn.0055b385
lea ecx, [esp + 0x284]
mov byte [esp + 0x790], 0x19
call fcn.0055b385
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x790], 0x1a
call fcn.0055b385
lea ecx, [esp + 0x264]
mov byte [esp + 0x790], 0x1b
call fcn.0055b385
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x790], 0x1c
call fcn.0055b385
lea ecx, [esp + 0x34]
mov byte [esp + 0x790], 0x1d
call fcn.0055b385
lea ecx, [esp + 0x2a8]
mov byte [esp + 0x790], 0x1e
call fcn.0055b385
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x790], 0x1f
call fcn.0055b385
lea ecx, [esp + 0x2c8]
mov byte [esp + 0x790], 0x20
call fcn.0055b385
lea ecx, [esp + 0x194]
mov byte [esp + 0x790], 0x21
call fcn.0055b385
lea ecx, [esp + 0x294]
mov byte [esp + 0x790], 0x22
call fcn.0055b385
lea ecx, [esp + 0x174]
mov byte [esp + 0x790], 0x23
call fcn.0055b385
lea ecx, [esp + 0x274]
mov byte [esp + 0x790], 0x24
call fcn.0055b385
mov eax, dword [0x63b4a0]
mov dword [esp + 0x30], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], eax
push ecx
mov byte [esp + 0x794], 0x29
mov ecx, esp
mov dword [esp + 0x18], esp
push str.PSDCONFIRM
call fcn.0058dfad
push ecx
mov byte [esp + 0x798], 0x2a
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x79c], 0x29
call fcn.0048a630
mov dword [0x64a178], eax
mov ecx, 0x100
xor eax, eax
mov edi, 0x64bf60
rep stosd dword es:[edi], eax
mov ecx, 0x100
mov edi, 0x64bb60
rep stosd dword es:[edi], eax
mov ecx, 0x100
mov edi, 0x64b760
rep stosd dword es:[edi], eax
mov ecx, 0x100
mov edi, 0x64b360
rep stosd dword es:[edi], eax
mov ecx, 0x100
mov edi, 0x64af60
rep stosd dword es:[edi], eax
add esp, 0xc
mov ecx, 0x100
mov edi, 0x64ab60
rep stosd dword es:[edi], eax
push 0x649cf8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
push str.select__from_SysInfo
push ebx
lea ecx, [esp + 0x50]
call fcn.00557dcf
cmp dword [esp + 0x10c], ebx
jne 0x472333
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x44]
push edx
push str.AreaCode
call fcn.0055891c
mov eax, dword [esp + 0x1c]
push eax
push 0x64a6f0
call fcn.00569261
add esp, 8
lea ecx, [esp + 0x44]
push 0x64a714
push str.Sheng
call fcn.0055891c
push 0x64a710
push 0x61f868
lea ecx, [esp + 0x4c]
call fcn.0055891c
lea ecx, [esp + 0x28]
push ecx
push str.MonitorPSD
lea ecx, [esp + 0x4c]
call fcn.0055891c
mov edx, dword [esp + 0x28]
push edx
push 0x651ce4
call fcn.00569261
add esp, 8
lea eax, [esp + 0x1c4]
lea ecx, [esp + 0x44]
push ebx
push eax
push str.WebFlag
call fcn.005587de
lea ecx, [esp + 0x30]
push ecx
push str.Web1Info
lea ecx, [esp + 0x4c]
call fcn.0055891c
lea edx, [esp + 0x24]
lea ecx, [esp + 0x44]
push edx
push str.Web2Info
call fcn.0055891c
lea eax, [esp + 0x1a4]
push ebx
push eax
push str.DisplayWebAtExplorer
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0x338]
push ebx
push ecx
push str.DisplayWebAtApp
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x184]
push ebx
push edx
push str.AutoAddLocal
lea ecx, [esp + 0x50]
call fcn.005587de
lea eax, [esp + 0x164]
push ebx
push eax
push str.OpenWeb_CallIn
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0x2e8]
push ebx
push ecx
push str.OpenWeb_CallOut
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x328]
push ebx
push edx
push str.WebPhonePSD
lea ecx, [esp + 0x50]
call fcn.005587de
push ebx
lea eax, [esp + 0x228]
lea ecx, [esp + 0x48]
push eax
push str.CallOutDisplayCard
call fcn.005587de
lea ecx, [esp + 0x244]
push ebx
push ecx
push str.CallInDisplayCard
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x318]
push ebx
push edx
push str.ExitInputPSD
lea ecx, [esp + 0x50]
call fcn.005587de
lea eax, [esp + 0x204]
push ebx
push eax
push str.AutoExitContactCardAfterHangup
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0x1e4]
push ebx
push ecx
push str.AutoExitContactCardDelay
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x2f8]
push ebx
push edx
push str.CodeRecFile
lea ecx, [esp + 0x50]
call fcn.005587de
lea eax, [esp + 0x2d8]
push ebx
push eax
push str.MinimizeToTrayOnRun
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0x2b8]
push ebx
push ecx
push str.CallOutDisplaySmallCard
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x254]
push ebx
push edx
push str.CallInDisplaySmallCard
lea ecx, [esp + 0x50]
call fcn.005587de
push 0x64a590
push str.UNCOMUID
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x64a58c
push str.UNCOMPSD
lea ecx, [esp + 0x4c]
call fcn.0055891c
lea eax, [esp + 0x154]
push ebx
push eax
push str.CATSMS
lea ecx, [esp + 0x50]
call fcn.005587de
push 0x64a578
push str.MobileMSGSignal
lea ecx, [esp + 0x4c]
call fcn.0055891c
lea ecx, [esp + 0x234]
push ebx
push ecx
push str.USERPROPERTY
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x308]
push ebx
push edx
push str.birthdaywarning
lea ecx, [esp + 0x50]
call fcn.005587de
lea eax, [esp + 0x214]
push ebx
push eax
push str.autofindcount
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0x284]
push ebx
push ecx
push str.autobackupdbflag
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x1f4]
push ebx
push edx
push str.autobackupdbperweek
lea ecx, [esp + 0x50]
call fcn.005587de
push 0x649ca8
push str.backupdbpath
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x64a588
push str.smskey
lea ecx, [esp + 0x4c]
call fcn.0055891c
lea eax, [esp + 0x264]
push ebx
push eax
push str.addname
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0x1d4]
push ebx
push ecx
push str.IsYewuFieldLink
lea ecx, [esp + 0x50]
call fcn.005587de
xor edi, edi
mov esi, 0x64c3e8
push edi
lea edx, [esp + 0x10]
push str.PrintContact_d
push edx
call fcn.00588507
mov ecx, dword [esp + 0x18]
add esp, 0xc
lea eax, [esp + 0x34]
push ebx
push eax
push ecx
lea ecx, [esp + 0x50]
call fcn.005587de
mov edx, dword [esp + 0x3c]
inc edi
mov dword [esi], edx
add esi, 4
cmp esi, 0x64c438
jl 0x471c24
xor edi, edi
mov esi, 0x64c360
push edi
lea eax, [esp + 0x10]
push str.PrintYewu_d
push eax
call fcn.00588507
mov edx, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 0x34]
push ebx
push ecx
push edx
lea ecx, [esp + 0x50]
call fcn.005587de
mov eax, dword [esp + 0x3c]
inc edi
mov dword [esi], eax
add esi, 4
cmp esi, 0x64c3ac
jl 0x471c64
lea ecx, [esp + 0x2a8]
push ebx
push ecx
push str.rowsperpage
lea ecx, [esp + 0x50]
call fcn.005587de
lea edx, [esp + 0x1b4]
push ebx
push edx
push str.IsBigFont_Contact
lea ecx, [esp + 0x50]
call fcn.005587de
lea eax, [esp + 0x2c8]
push ebx
push eax
push str.IsBigFont_Yewu
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0xc]
push ecx
push str.Footer_Contact
lea ecx, [esp + 0x4c]
call fcn.0055891c
mov edx, dword [esp + 0xc]
push edx
push 0x6190e0
push 0x64bf60
call fcn.00569261
add esp, 0xc
lea eax, [esp + 0xc]
lea ecx, [esp + 0x44]
push eax
push str.Footer_Yewu
call fcn.0055891c
mov ecx, dword [esp + 0xc]
push ecx
push 0x6190e0
push 0x64bb60
call fcn.00569261
add esp, 0xc
lea edx, [esp + 0xc]
lea ecx, [esp + 0x44]
push edx
push str.Title_Contact
call fcn.0055891c
mov eax, dword [esp + 0xc]
push eax
push 0x6190e0
push 0x64af60
call fcn.00569261
add esp, 0xc
lea ecx, [esp + 0xc]
push ecx
push str.Title_Yewu
lea ecx, [esp + 0x4c]
call fcn.0055891c
mov edx, dword [esp + 0xc]
push edx
push 0x6190e0
push 0x64ab60
call fcn.00569261
add esp, 0xc
lea eax, [esp + 0xc]
lea ecx, [esp + 0x44]
push eax
push str.Header_Contact
call fcn.0055891c
mov ecx, dword [esp + 0xc]
push ecx
push 0x6190e0
push 0x64b760
call fcn.00569261
add esp, 0xc
lea edx, [esp + 0xc]
lea ecx, [esp + 0x44]
push edx
push str.Header_Yewu
call fcn.0055891c
mov eax, dword [esp + 0xc]
push eax
push 0x6190e0
push 0x64b360
call fcn.00569261
add esp, 0xc
lea ecx, [esp + 0x194]
push ebx
push ecx
push str.proxyflag
lea ecx, [esp + 0x50]
call fcn.005587de
push 0x64a584
push str.proxyip
lea ecx, [esp + 0x4c]
call fcn.0055891c
lea edx, [esp + 0x294]
push ebx
push edx
push str.proxyport
lea ecx, [esp + 0x50]
call fcn.005587de
push 0x64a580
push str.proxyuser
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x64a57c
push str.proxypsd
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x651b1c
push str.smsweb1
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x651b18
push str.smsweb2
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x651b14
push str.smsweb3
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x651b10
push str.smsweb4
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x651b0c
push str.smsweb5
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x651b08
push str.smssendokinfo
lea ecx, [esp + 0x4c]
call fcn.0055891c
mov edi, 0x13
mov esi, 0x64c3ac
push edi
lea eax, [esp + 0x10]
push str.PrintYewu_d
push eax
call fcn.00588507
mov edx, dword [esp + 0x18]
add esp, 0xc
lea ecx, [esp + 0x34]
push ebx
push ecx
push edx
lea ecx, [esp + 0x50]
call fcn.005587de
mov eax, dword [esp + 0x3c]
inc edi
mov dword [esi], eax
add esi, 4
cmp esi, 0x64c3e8
jl 0x471ec1
mov edi, 1
mov esi, 0x64fc6c
push edi
lea ecx, [esp + 0x10]
push str.ywtj_d
push ecx
call fcn.00588507
mov eax, dword [esp + 0x18]
add esp, 0xc
lea edx, [esp + 0x34]
lea ecx, [esp + 0x44]
push ebx
push edx
push eax
call fcn.005587de
mov ecx, dword [esp + 0x3c]
inc edi
mov dword [esi], ecx
add esi, 4
cmp esi, 0x64fc80
jl 0x471f04
mov edi, 0x14
mov esi, 0x64c438
push edi
lea edx, [esp + 0x10]
push str.PrintContact_d
push edx
call fcn.00588507
mov ecx, dword [esp + 0x18]
add esp, 0xc
lea eax, [esp + 0x34]
push ebx
push eax
push ecx
lea ecx, [esp + 0x50]
call fcn.005587de
mov edx, dword [esp + 0x3c]
inc edi
mov dword [esi], edx
add esi, 4
cmp esi, 0x64c4e0
jl 0x471f47
push 0x649c9c
push str.premsg
lea ecx, [esp + 0x4c]
call fcn.0055891c
push 0x649c98
push str.PremsgField
lea ecx, [esp + 0x4c]
call fcn.0055891c
lea eax, [esp + 0x174]
push ebx
push eax
push str.numbercount
lea ecx, [esp + 0x50]
call fcn.005587de
lea ecx, [esp + 0x274]
push ebx
push ecx
push str.web_byid
lea ecx, [esp + 0x50]
call fcn.005587de
mov eax, dword [esp + 0x27c]
mov edx, dword [esp + 0x17c]
mov ecx, dword [esp + 0x29c]
mov dword [0x649cd0], eax
mov eax, dword [esp + 0x1bc]
mov dword [0x645388], edx
mov edx, dword [esp + 0x19c]
mov dword [0x64ab5c], eax
mov eax, dword [esp + 0x26c]
mov dword [0x651cd4], ecx
mov ecx, dword [esp + 0x2d0]
mov dword [0x651ca4], eax
mov eax, dword [esp + 0x1fc]
mov dword [0x651cd0], edx
mov edx, dword [esp + 0x1dc]
mov dword [0x628360], eax
mov eax, dword [esp + 0x2b0]
mov dword [0x64ab58], ecx
mov ecx, dword [esp + 0x21c]
mov dword [0x651ca8], edx
mov edx, dword [esp + 0x28c]
cmp eax, 0x14
mov dword [0x62835c], ecx
mov dword [0x651cdc], edx
mov dword [0x628344], eax
je 0x4720ae
cmp eax, 0x32
je 0x4720ae
cmp eax, 0x64
je 0x4720ae
cmp eax, 0xc8
je 0x4720ae
cmp eax, 0x12c
je 0x4720ae
cmp eax, 0x1f4
je 0x4720ae
cmp eax, 0x320
je 0x4720ae
cmp eax, 0x4b0
je 0x4720ae
cmp eax, 0x7d0
je 0x4720ae
mov dword [0x628344], 0x32
mov eax, dword [esp + 0x15c]
cmp eax, ebx
mov dword [0x628350], eax
je 0x4720cd
cmp eax, 2
je 0x4720cd
mov dword [0x628350], 1
mov esi, dword [esp + 0x20c]
xor ecx, ecx
mov edx, dword [esp + 0x1ec]
mov eax, dword [esp + 0x24c]
cmp esi, ebx
mov dword [0x649cc8], edx
setne cl
mov edx, dword [esp + 0x300]
mov dword [0x649ccc], ecx
mov ecx, dword [esp + 0x22c]
mov dword [0x64a180], eax
mov eax, dword [esp + 0x2e0]
mov dword [0x64a17c], ecx
mov ecx, dword [esp + 0x25c]
mov dword [0x64a174], edx
mov edx, dword [esp + 0x2c0]
mov dword [0x651ccc], ecx
lea ecx, [esp + 0x30]
mov dword [0x651cc4], eax
mov eax, dword [esp + 0x1cc]
push ecx
mov ecx, 0x649cec
mov dword [0x651cc8], edx
mov dword [0x649cf0], eax
call fcn.0058e078
lea edx, [esp + 0x24]
mov ecx, 0x649ce8
push edx
call fcn.0058e078
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x2f0]
mov edx, dword [esp + 0x1ac]
mov dword [0x649ce0], eax
mov eax, dword [esp + 0x18c]
mov dword [0x649ce4], ebx
mov dword [0x649cd4], eax
mov eax, dword [0x64a180]
cmp eax, ebx
mov dword [0x649cdc], ecx
mov dword [0x649cd8], edx
je 0x4721bd
cmp dword [0x651ccc], ebx
je 0x4721bd
mov dword [0x651ccc], ebx
mov dword [0x64a180], 1
cmp dword [0x64a17c], ebx
je 0x4721dd
cmp dword [0x651cc8], ebx
je 0x4721dd
mov dword [0x651cc8], ebx
mov dword [0x64a17c], 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x64a6f0
call fcn.0058dfad
call fcn.00488c30
add esp, 4
cmp al, bl
jne 0x47230e
push 0x619f20
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619f14
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619f04
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619ef8
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619eec
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619ee0
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619ecc
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x61f514
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619ebc
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619eac
push 0x64a6f0
call fcn.00574e80
add esp, 8
test eax, eax
je 0x47230e
push 0x619ea8
push 0x64a6f0
call fcn.00574e80
add esp, 8
mov dword [0x64a6ec], 7
test eax, eax
jne 0x472318
mov dword [0x64a6ec], 8
mov ecx, dword [esp + 0x23c]
mov dword [0x64a188], ecx
lea ecx, [esp + 0x44]
call fcn.00557ea3
jmp 0x472618
lea ecx, [esp + 0x44]
call fcn.00557ea3
push 0x61f50c
mov ecx, 0x64a714
call fcn.0058e0c8
push 0x61f504
mov ecx, 0x64a710
call fcn.0058e0c8
push str.0531
push 0x64a6f0
call fcn.00569261
lea edx, [esp + 0x1c]
mov esi, 1
push edx
mov dword [0x64a6ec], 8
mov dword [0x64a180], esi
mov dword [0x64a17c], esi
mov dword [0x649ccc], esi
mov dword [0x649cc8], ebx
mov dword [0x64a174], ebx
mov dword [0x651cc4], ebx
mov dword [0x651cc8], ebx
mov dword [0x651ccc], ebx
mov dword [0x62835c], 0x1388
mov dword [0x651cdc], esi
mov dword [0x628360], esi
call fcn.0048a380
add esp, 0xc
push 0x61df20
push eax
lea eax, [esp + 0x28]
mov byte [esp + 0x798], 0x2b
push eax
call fcn.0058e1d4
push eax
mov ecx, 0x649ca8
mov byte [esp + 0x794], 0x2c
call fcn.0058e078
lea ecx, [esp + 0x20]
mov byte [esp + 0x790], 0x2b
call fcn.0058df3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x790], 0x29
call fcn.0058df3f
push 0x645010
mov ecx, 0x649cec
mov dword [0x649cf0], ebx
call fcn.0058e0c8
push 0x645010
mov ecx, 0x649ce8
call fcn.0058e0c8
push 0x61f4f4
mov ecx, 0x649c9c
mov dword [0x649ce4], ebx
mov dword [0x649ce0], ebx
mov dword [0x649cdc], ebx
mov dword [0x649cd8], ebx
mov dword [0x649cd4], ebx
mov dword [0x628344], 0x32
call fcn.0058e0c8
push str.Name
mov ecx, 0x649c98
call fcn.0058e0c8
mov ecx, 0x14
mov eax, esi
mov edi, 0x64c3e8
mov dword [0x645388], ebx
rep stosd dword es:[edi], eax
mov ecx, 0x2a
xor eax, eax
mov edi, 0x64c438
mov dword [0x649cd0], ebx
rep stosd dword es:[edi], eax
mov ecx, 0x22
mov eax, esi
mov edi, 0x64c360
mov dword [0x64a188], 0x639b
rep stosd dword es:[edi], eax
mov ecx, 6
xor eax, eax
mov edi, 0x64fc6c
rep stosd dword es:[edi], eax
mov eax, dword [0x63b4a0]
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
push 0x649ca8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x794], 0x2e
call fcn.0058e078
push 0x618528
push 0x618524
lea ecx, [esp + 0x20]
call fcn.00587da8
lea ecx, [esp + 0x14]
push ecx
call fcn.004cd970
mov edx, dword [0x649ca8]
mov eax, dword [eax]
mov ecx, dword [0x64a188]
push edx
mov edx, dword [0x64a17c]
push 0x61857c
push eax
mov eax, dword [0x64a180]
push 0x61857c
push ecx
mov ecx, dword [0x64a710]
push edx
mov edx, dword [0x64a714]
push eax
push 0x64a6f0
push ecx
push edx
lea eax, [esp + 0x3c]
push str.insert_into_SysInfo_Sheng__tShi__tAreaCode_MonitorPSD_CallInDisplayCard__tCallOutDisplayCard_UNCOMUID_UNCOMPSD_RememberLogPSD_CurrentLogUser_AutoLogOn_ExitInputPSD_AutoExitContactCardAfterHangup_AutoExitContactCardDelay_WebFlag_Web1Info_Web2Info_DisplayWebAtExplorer_DisplayWebAtApp_AutoAddLocal_OpenWeb_CallIn_OpenWeb_CallOut_WebPhonePSD_CodeRecFile_MinimizeToTrayOnRun_CallInDisplaySmallCard_CallOutDisplaySmallCard_CATSMS__tUSERPROPERTY_birthdaywarning_autofindcount_autobackupdbflag_autobackupdbperweek_lastbackupdb__t_t_t_tbackupdbpath_smskey_smskeyflag_addname_IsYewuFieldLink_PrintContact0_PrintContact1_PrintContact2_PrintContact3_PrintContact4_PrintContact5_PrintContact6_PrintContact7_PrintContact8_PrintContact9_PrintContact10_PrintContact11_PrintContact12_PrintContact13_PrintContact14_PrintContact15_PrintContact16_PrintContact17_PrintContact18_PrintContact19_PrintYewu0_PrintYewu1_PrintYewu2_PrintYewu3_PrintYewu4_PrintYewu5_PrintYewu6_PrintYewu7_PrintYewu8_PrintYewu9_PrintYewu10_PrintYewu11_PrintYewu12_PrintYewu13_PrintYewu14_PrintYewu15_PrintYewu16_PrintYewu17_PrintYewu18_rowsperpage_IsBigFont_Contact_IsBigFont_Yewu_Footer_Contact_Footer_Yewu_proxyflag_proxyip_proxyport_proxyuser_proxypsd_values__s__s__s___d__d___0_admin_0_0_1_0_0___0_0_0_0_0_0_0_0_0_0_0__d_1_5000_1_1__s_s_s__s__0_0_0_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_1_50_0_0___0__0___
push eax
mov byte [esp + 0x7c4], 0x2f
call fcn.00588507
add esp, 0x34
lea ecx, [esp + 0x14]
mov byte [esp + 0x790], 0x2e
call fcn.0058df3f
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [0x64a740]
call fcn.005572e4
mov ecx, dword [0x64a740]
push str.update_SysInfo_set_smsweb1http:__http.c123.com_tx__uid_smsweb2pwd_smsweb3mobile_smsweb4content_smsweb5_smssendokinfo100
call fcn.005572e4
mov ecx, dword [0x64a740]
push str.update_SysInfo_set_PrintYewu191_PrintYewu201_PrintYewu211_PrintYewu221_PrintYewu231_PrintYewu241_PrintYewu251_PrintYewu261_PrintYewu271_PrintYewu281_PrintYewu291_PrintYewu301_PrintYewu311_PrintYewu321_PrintYewu331
call fcn.005572e4
mov ecx, dword [0x64a740]
push str.update_SysInfo_set_ywtj10_ywtj20_ywtj30_ywtj40_ywtj50
call fcn.005572e4
mov ecx, dword [0x64a740]
push str.update_SysInfo_set_PrintContact200_PrintContact210_PrintContact220_PrintContact230_PrintContact240_PrintContact250_PrintContact260_PrintContact270_PrintContact280_PrintContact290_PrintContact300_PrintContact310_PrintContact320_PrintContact330_PrintContact340_PrintContact350_PrintContact360_PrintContact370_PrintContact380_PrintContact390_PrintContact400_PrintContact410_PrintContact420_PrintContact430_PrintContact440_PrintContact450_PrintContact460_PrintContact470_PrintContact480_PrintContact490_PrintContact500_PrintContact510_PrintContact520_PrintContact530_PrintContact540_PrintContact550_PrintContact560_PrintContact570_PrintContact580_PrintContact590_PrintContact600_PrintContact610
call fcn.005572e4
mov ecx, dword [0x64a740]
push str.update_SysInfo_set_premsg
call fcn.005572e4
mov ecx, dword [0x64a740]
push str.update_SysInfo_set_numbercount0
call fcn.005572e4
mov ecx, dword [0x64a740]
push str.update_SysInfo_set_web_byid0
call fcn.005572e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x790], 0x2d
call fcn.0058df3f
lea ecx, [esp + 0x10]
mov byte [esp + 0x790], 0x29
call fcn.0058df3f
lea ecx, [esp + 0x44]
call fcn.005580b8
test eax, eax
je 0x47262e
lea ecx, [esp + 0x44]
call fcn.00557ea3
mov edx, dword [0x63b4a0]
mov dword [esp + 0x2c], edx
push ebx
push str.select__from_CallInfoType_where_CallInfoType__
push ebx
lea ecx, [esp + 0x50]
mov byte [esp + 0x79c], 0x30
call fcn.00557dcf
cmp dword [esp + 0x10c], ebx
jne 0x4726a4
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x44]
push eax
push str.CallInfoType
call fcn.0055891c
mov ecx, dword [esp + 0x2c]
mov edx, dword [0x64a744]
push ecx
push ebx
mov eax, dword [edx + 0xa14]
push 0x143
push eax
call esi
mov edx, dword [esp + 0x44]
push 1
push 1
lea ecx, [esp + 0x4c]
call dword [edx + 0x14]
cmp dword [esp + 0x10c], ebx
je 0x47265f
lea ecx, [esp + 0x44]
call fcn.00557ea3
mov ecx, dword [0x64a740]
push str.update_LogUser_set_PSD_where_isnull_PSD_
call fcn.005572e4
push 0x649cf8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x64a6f0
call dword [0x645314]
mov eax, dword [0x64a6ec]
push eax
call dword [0x645310]
push 0x651ce4
call dword [0x6452f0]
mov ecx, 0x80
xor eax, eax
lea edi, [esp + 0x588]
lea edx, [esp + 0x588]
rep stosd dword es:[edi], eax
mov ecx, 0x80
lea edi, [esp + 0x388]
rep stosd dword es:[edi], eax
mov ecx, dword [0x649cec]
push ecx
push edx
call fcn.00569261
mov eax, dword [0x649ce8]
lea ecx, [esp + 0x390]
push eax
push ecx
call fcn.00569261
mov ecx, dword [0x649cd4]
add esp, 0x10
lea edx, [esp + 0x388]
lea eax, [esp + 0x588]
push edx
mov edx, dword [0x649cd8]
push eax
mov eax, dword [0x649cdc]
push ecx
mov ecx, dword [0x649ce0]
push edx
mov edx, dword [0x649ce4]
push eax
mov eax, dword [0x649cf0]
push ecx
push edx
push eax
call dword [0x6452e8]
mov eax, dword [0x64a178]
cmp eax, ebx
mov eax, dword [0x64a744]
jne 0x47279a
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call fcn.0058e662
mov edx, dword [eax + 4]
push ebx
push 0x8054
push edx
jmp 0x4727b5
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call fcn.0058e662
mov ecx, dword [eax + 4]
push 8
push 0x8054
push ecx
call dword [sym.imp.USER32.dll_CheckMenuItem]
cmp dword [0x651cd0], 1
jne 0x472873
mov edx, dword [0x63b4a0]
mov dword [esp + 0x10], edx
mov eax, dword [0x651cd4]
lea ecx, [esp + 0x10]
push eax
push 0x61842c
push ecx
mov byte [esp + 0x79c], 0x31
call fcn.00588507
add esp, 8
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x64a57c
call fcn.0058dcb4
push ecx
mov byte [esp + 0x798], 0x32
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x64a580
call fcn.0058dcb4
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0x7a0], 0x33
call fcn.0058dcb4
push ecx
mov byte [esp + 0x7a0], 0x34
mov ecx, esp
mov dword [esp + 0x2b4], esp
push 0x64a584
call fcn.0058dcb4
mov ecx, 0x651b60
mov byte [esp + 0x7a0], 0x31
call fcn.00462480
lea ecx, [esp + 0x10]
mov byte [esp + 0x790], 0x30
call fcn.0058df3f
lea ecx, [esp + 0x2c]
mov byte [esp + 0x790], 0x29
call fcn.0058df3f
lea ecx, [esp + 0x28]
mov byte [esp + 0x790], 0x28
call fcn.0058df3f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x790], 0x27
call fcn.0058df3f
lea ecx, [esp + 0x24]
mov byte [esp + 0x790], 0x26
call fcn.0058df3f
lea ecx, [esp + 0x30]
mov byte [esp + 0x790], 0x25
call fcn.0058df3f
lea ecx, [esp + 0x274]
mov byte [esp + 0x790], 0x24
call fcn.0055b3f5
lea ecx, [esp + 0x174]
mov byte [esp + 0x790], 0x23
call fcn.0055b3f5
lea ecx, [esp + 0x294]
mov byte [esp + 0x790], 0x22
call fcn.0055b3f5
lea ecx, [esp + 0x194]
mov byte [esp + 0x790], 0x21
call fcn.0055b3f5
lea ecx, [esp + 0x2c8]
mov byte [esp + 0x790], 0x20
call fcn.0055b3f5
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x790], 0x1f
call fcn.0055b3f5
lea ecx, [esp + 0x2a8]
mov byte [esp + 0x790], 0x1e
call fcn.0055b3f5
lea ecx, [esp + 0x34]
mov byte [esp + 0x790], 0x1d
call fcn.0055b3f5
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x790], 0x1c
call fcn.0055b3f5
lea ecx, [esp + 0x264]
mov byte [esp + 0x790], 0x1b
call fcn.0055b3f5
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x790], 0x1a
call fcn.0055b3f5
lea ecx, [esp + 0x284]
mov byte [esp + 0x790], 0x19
call fcn.0055b3f5
lea ecx, [esp + 0x214]
mov byte [esp + 0x790], 0x18
call fcn.0055b3f5
lea ecx, [esp + 0x308]
mov byte [esp + 0x790], 0x17
call fcn.0055b3f5
lea ecx, [esp + 0x154]
mov byte [esp + 0x790], 0x16
call fcn.0055b3f5
lea ecx, [esp + 0x234]
mov byte [esp + 0x790], 0x15
call fcn.0055b3f5
lea ecx, [esp + 0x368]
mov byte [esp + 0x790], 0x14
call fcn.0055b3f5
lea ecx, [esp + 0x2b8]
mov byte [esp + 0x790], 0x13
call fcn.0055b3f5
lea ecx, [esp + 0x254]
mov byte [esp + 0x790], 0x12
call fcn.0055b3f5
lea ecx, [esp + 0x2d8]
mov byte [esp + 0x790], 0x11
call fcn.0055b3f5
lea ecx, [esp + 0x2f8]
mov byte [esp + 0x790], 0x10
call fcn.0055b3f5
lea ecx, [esp + 0x328]
mov byte [esp + 0x790], 0xf
call fcn.0055b3f5
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x790], 0xe
call fcn.0055b3f5
lea ecx, [esp + 0x164]
mov byte [esp + 0x790], 0xd
call fcn.0055b3f5
lea ecx, [esp + 0x184]
mov byte [esp + 0x790], 0xc
call fcn.0055b3f5
lea ecx, [esp + 0x338]
mov byte [esp + 0x790], 0xb
call fcn.0055b3f5
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x790], 0xa
call fcn.0055b3f5
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x790], 9
call fcn.0055b3f5
lea ecx, [esp + 0x1e4]
mov byte [esp + 0x790], 8
call fcn.0055b3f5
lea ecx, [esp + 0x204]
mov byte [esp + 0x790], 7
call fcn.0055b3f5
lea ecx, [esp + 0x318]
mov byte [esp + 0x790], 6
call fcn.0055b3f5
lea ecx, [esp + 0x224]
mov byte [esp + 0x790], 5
call fcn.0055b3f5
lea ecx, [esp + 0x244]
mov byte [esp + 0x790], 4
call fcn.0055b3f5
lea ecx, [esp + 0x358]
mov byte [esp + 0x790], 3
call fcn.0055b3f5
lea ecx, [esp + 0x348]
mov byte [esp + 0x790], 2
call fcn.0055b3f5
lea ecx, [esp + 0x378]
mov byte [esp + 0x790], 1
call fcn.0055b3f5
lea ecx, [esp + 0x44]
mov byte [esp + 0x790], bl
call fcn.00557cc6
lea ecx, [esp + 0xc]
mov dword [esp + 0x790], 0xffffffff
call fcn.0058df3f
mov ecx, dword [esp + 0x788]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x788
ret