Function at 0x401b0d
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
push 0xffffffffffffffff
push 0x12
push 0x160122bf
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x401c23
push 0xffffffffffffffff
push 8
push 0x160122b9
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x50], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x401bea
mov eax, 0x4be211
push eax
push 1
mov ebx, 0x420650
call fcn.0041fa4f
add esp, 0x10
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edx
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x401c13
push ebx
call fcn.0041fa43
add esp, 4
fld qword [ebp - 0x58]
call fcn.0040189f
mov dword [ebp - 4], eax
jmp 0x401c2a
mov dword [ebp - 4], 0x1869f
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
call fcn.004035fb
mov dword [ebp - 0x54], eax
push 1
call fcn.00403a0c
mov dword [ebp - 0x58], eax
push dword [ebp - 0x58]
push dword [ebp - 0x54]
mov ecx, 2
call fcn.0040118d
add esp, 8
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x401c71
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x401c81
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x401c95
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x7cf
push 0x7bc
call fcn.004039d5
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x4212d0
call fcn.0041fa4f
add esp, 0x10
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x401cd9
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0xc
push 1
call fcn.004039d5
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x4212d0
call fcn.0041fa4f
add esp, 0x10
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x401d1d
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x1e
push 1
call fcn.004039d5
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x4212d0
call fcn.0041fa4f
add esp, 0x10
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401d61
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
xor ecx, ecx
inc ecx
push ecx
push eax
cmp ecx, eax
jg 0x4034d2
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16011e81
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x48b440
call fcn.0041fa55
add esp, 0x28
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401dc8
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x4be226
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00403bb8
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x401e0c
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x401e20
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x4be226
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00403cd6
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x401e64
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x401e78
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0xffffffffffffffff
push 0x12
push 0x16011ec2
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jne 0x401f37
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov eax, 0x4be211
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00403e97
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x401eea
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x401efa
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x401f0a
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x401f1a
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x401f2e
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
jmp 0x402408
push 0xffffffffffffffff
push 0x12
push 0x16011ec3
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jne 0x40202c
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov eax, 0x4be211
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00407ec3
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x401fbf
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x401fcf
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x401fdf
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x401fef
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x401fff
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40200f
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402023
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
jmp 0x402408
push 0xffffffffffffffff
push 0x12
push 0x16011ec4
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jne 0x402121
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov eax, str.8981
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
call fcn.004083c0
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4020b4
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4020c4
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4020d4
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4020e4
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4020f4
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402104
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402118
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
jmp 0x402408
push 0xffffffffffffffff
push 0x12
push 0x16011ec5
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jne 0x4021bf
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov eax, 0x4be211
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
call fcn.00408980
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x402182
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x402192
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4021a2
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4021b6
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
jmp 0x402408
push 0xffffffffffffffff
push 0x12
push 0x160188ca
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jne 0x40225d
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov eax, 0x4be211
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
call fcn.00408b6b
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x402220
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x402230
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402240
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402254
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
jmp 0x402408
push 0xffffffffffffffff
push 0x12
push 0x16018a02
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jne 0x402352
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov eax, str.1008
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00408ee9
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4022e5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4022f5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x402305
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x402315
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x402325
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402335
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402349
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
jmp 0x402408
push 0xffffffffffffffff
push 0x12
push 0x16018c2a
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jne 0x402408
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov eax, 0x4be232
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00409223
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4023c0
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4023d0
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4023e0
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4023f0
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402404
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x40241b
mov eax, 0x4be211
push eax
push 1
mov ebx, 0x41ff90
call fcn.0041fa4f
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xb
jne 0x402488
push VariantClear
push 0
push 0x4be236
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16011e81
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x48b630
call fcn.0041fa55
add esp, 0x34
jmp 0x4024d5
push VariantClear
push 0
push 0x4be245
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16011e81
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x48b630
call fcn.0041fa55
add esp, 0x34
jmp 0x402887
mov eax, str.http:__www.ilovepingan.com_newtank_thirdparty_yzt_vehicle_two_sendImgCode.do
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4024eb
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push str.subsysotpchannelCode564e92af0cf23299b6c4c66fd1449221756057
push dword [ebp - 0x24]
push str.userId
mov ecx, 3
call fcn.0040118d
add esp, 0xc
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x402520
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.X_Requested_With:_XMLHttpRequest_r_nUser_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_7_1_2_like_Mac_OS_X__AppleWebKit_537.51.2__KHTML__like_Gecko__Mobile_11D257_MicroMessenger_6.0.1_NetType_WIFI
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.00409770
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4025ae
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4025be
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4025ce
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4025de
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4025ee
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4025fe
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x402612
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x4be3a9
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, str.id_:_
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040c464
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x402662
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x402672
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x402686
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x4be3a9
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, str.base64_
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040c464
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4026d6
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4026e6
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4026fa
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push 0x4be211
push dword [ebp - 0x38]
call fcn.004011e9
add esp, 8
cmp eax, 0
jne 0x402823
fild dword [ebp + 8]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x4be21e]
fstp qword [ebp - 0x5c]
push 0x4be3b9
push dword [ebp - 0x24]
mov ecx, 2
call fcn.0040118d
add esp, 8
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
fld qword [ebp - 0x5c]
call fcn.0040189f
push eax
call fcn.0040c600
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x402763
push ebx
call fcn.0041fa43
add esp, 4
push 0xffffffffffffffff
push 0x12
push 0x16011ec4
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jne 0x4027a3
lea eax, [ebp - 0x24]
push eax
call fcn.0040ca2e
mov ebx, eax
test ebx, ebx
je 0x40279e
push ebx
call fcn.0041fa43
add esp, 4
jmp 0x40281e
push 0xffffffffffffffff
push 0x12
push 0x16018a02
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jne 0x4027e3
lea eax, [ebp - 0x24]
push eax
call fcn.0040cbe2
mov ebx, eax
test ebx, ebx
je 0x4027de
push ebx
call fcn.0041fa43
add esp, 4
jmp 0x40281e
push 0xffffffffffffffff
push 0x12
push 0x16018c2a
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jne 0x40281e
lea eax, [ebp - 0x24]
push eax
call fcn.0040ce39
mov ebx, eax
test ebx, ebx
je 0x40281e
push ebx
call fcn.0041fa43
add esp, 4
jmp 0x40286f
fild dword [ebp + 8]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x4be21e]
fstp qword [ebp - 0x5c]
push 0x4be3be
push dword [ebp - 0x24]
mov ecx, 2
call fcn.0040118d
add esp, 8
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
fld qword [ebp - 0x5c]
call fcn.0040189f
push eax
call fcn.0040c600
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40286f
push ebx
call fcn.0041fa43
add esp, 4
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x1f4
call fcn.0040d07d
push 0x4be211
push dword [ebp - 0x38]
call fcn.004011e9
add esp, 8
cmp eax, 0
je 0x401e7c
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
lea eax, [ebp - 0x38]
push eax
call fcn.0040d275
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4028cc
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov eax, str.3040
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040dc07
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40291f
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40292f
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40293f
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40294f
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x402963
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
push 0x4be3d8
push dword [ebp - 0x40]
call fcn.004011e9
add esp, 8
cmp eax, 0
jne 0x40299a
mov eax, 0x4be211
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x402996
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
push str.checkProtocol1appId10385otpType00callBackjsonpCallback_1449221737760
push dword [ebp - 0x34]
push str.validCodeId
push dword [ebp - 0x40]
push str.validCode
push dword [ebp - 0x24]
push str.https:__member.pingan.com.cn_pinganone_pa_sendShortMessageBfappvcode.do_callbackjsonpCallbackmobileNo
mov ecx, 7
call fcn.0040118d
add esp, 0x1c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4029db
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, 0x4be211
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4029f5
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_7_1_2_like_Mac_OS_X__AppleWebKit_537.51.2__KHTML__like_Gecko__Mobile_11D257_MicroMessenger_6.0.1_NetType_WIFI
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.00409770
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x402a91
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x402aa1
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x402ab1
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x402ac1
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x402ad1
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x402ae1
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x402af1
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402b01
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x402b15
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x1f4
call fcn.0040d07d
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x4be3a9
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, str.activeId_:_
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040c464
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x402b7d
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x402b8d
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x402ba1
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov eax, str.http:__www.ilovepingan.com_newtank_thirdparty_yzt_vehicle_two_carSerialList.do
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x402bbb
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, str.channelCode564e92af0cf23299b6c4c66fbrandId1d1449221851340
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x402bd5
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.X_Requested_With:_XMLHttpRequest_r_nUser_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_7_1_2_like_Mac_OS_X__AppleWebKit_537.51.2__KHTML__like_Gecko__Mobile_11D257_MicroMessenger_6.0.1_NetType_WIFI
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.00409770
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x402c63
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x402c73
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x402c83
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x402c93
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x402ca3
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402cb3
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x402cc7
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x1f4
call fcn.0040d07d
push 0x4be211
push dword [ebp - 0x30]
call fcn.004011e9
add esp, 8
cmp eax, 0
je 0x402ba5
push 0xffffffffffffffff
push 0x12
push 0x16011ec2
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jne 0x402d84
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x12
push 1
push 2
push 1
push dword [ebp + 8]
push 1
push 0x16011e81
push 0x52010001
lea eax, [ebp - 0x24]
push eax
call fcn.0040f3c8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402d67
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x402d7b
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
jmp 0x403092
push 0xffffffffffffffff
push 0x12
push 0x16011ec3
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x402e0c
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x12
push 1
push 2
push 1
push dword [ebp + 8]
push 1
push 0x16011e81
push 0x52010001
lea eax, [ebp - 0x24]
push eax
call fcn.0040fdf9
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402def
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x402e03
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
jmp 0x403092
push 0xffffffffffffffff
push 0x12
push 0x16011ec4
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x402e94
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x12
push 1
push 2
push 1
push dword [ebp + 8]
push 1
push 0x16011e81
push 0x52010001
lea eax, [ebp - 0x24]
push eax
call fcn.0041056b
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402e77
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x402e8b
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
jmp 0x403092
push 0xffffffffffffffff
push 0x12
push 0x16011ec5
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x402f1c
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x12
push 1
push 2
push 1
push dword [ebp + 8]
push 1
push 0x16011e81
push 0x52010001
lea eax, [ebp - 0x24]
push eax
call fcn.00410b8a
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402eff
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x402f13
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
jmp 0x403092
push 0xffffffffffffffff
push 0x12
push 0x160188ca
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x402fa4
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x12
push 1
push 2
push 1
push dword [ebp + 8]
push 1
push 0x16011e81
push 0x52010001
lea eax, [ebp - 0x24]
push eax
call fcn.0041144f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x402f87
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x402f9b
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
jmp 0x403092
push 0xffffffffffffffff
push 0x12
push 0x16018a02
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x40302c
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 0x12
push 1
push 2
push 1
push dword [ebp + 8]
push 1
push 0x16011e81
push 0x52010001
lea eax, [ebp - 0x24]
push eax
call fcn.00411c82
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40300f
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x403023
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
jmp 0x403092
push 0xffffffffffffffff
push 0x12
push 0x16018c2a
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jne 0x403092
push 1
push 0x12
push 1
push 2
push 1
push dword [ebp + 8]
push 1
push 0x16011e81
push 0x52010001
lea eax, [ebp - 0x24]
push eax
call fcn.0041219d
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40308e
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4be5f5
push VariantClear
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4030c3
mov eax, 0x4be211
push eax
push 4
mov ebx, 0x420480
call fcn.0041fa4f
add esp, 0x34
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffff
je 0x403138
push VariantClear
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4030f6
mov eax, 0x4be211
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16011e81
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x48b630
call fcn.0041fa55
add esp, 0x34
jmp 0x4034cb
push VariantClear
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x40314b
mov eax, 0x4be211
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16011e81
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x48b630
call fcn.0041fa55
add esp, 0x34
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x4be5fa
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, 0x4be5fe
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0041299d
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4031d4
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4031e4
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4031f8
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
mov eax, str.http:__www.ilovepingan.com_newtank_thirdparty_yzt_vehicle_two_loginAndWorth.do
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403212
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push str.checkProtocol1d1449221878451
push dword [ebp - 0x4c]
push str.activeNo
push dword [ebp - 0x44]
push str.activeId
push dword [ebp - 0x24]
push str.channelCode564e92af0cf23299b6c4c66fappId10385mobile
push dword [ebp - 0x20]
push str.brandId1seriesId1cityIdbuyYear2015tag
mov ecx, 9
call fcn.0040118d
add esp, 0x24
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40325f
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.X_Requested_With:_XMLHttpRequest_r_nUser_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_7_1_2_like_Mac_OS_X__AppleWebKit_537.51.2__KHTML__like_Gecko__Mobile_11D257_MicroMessenger_6.0.1_NetType_WIFI
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.00409770
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4032ed
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4032fd
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40330d
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40331d
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40332d
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40333d
push ebx
call fcn.0041fa43
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403351
push ebx
call fcn.0041fa43
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x1f4
call fcn.0040d07d
push 0x4be211
push dword [ebp - 0x30]
call fcn.004011e9
add esp, 8
cmp eax, 0
je 0x4031fc
fild dword [ebp + 8]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x4be21e]
fstp qword [ebp - 0x5c]
lea eax, [ebp - 0x30]
push eax
fld qword [ebp - 0x5c]
call fcn.0040189f
push eax
call fcn.0040c600
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4be6f6
push VariantClear
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x4033db
mov eax, 0x4be211
push eax
push 4
mov ebx, 0x420480
call fcn.0041fa4f
add esp, 0x34
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffff
je 0x4034cb
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16011e81
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x48b650
call fcn.0041fa55
add esp, 0x28
push 0xffffffffffffffff
push 0x12
push 0x160122ba
push 0x52010001
call fcn.0041fa61
add esp, 0x10
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jne 0x40347e
push 0
push 0
push 0
push reloc.WS2_32.dll_getpeername
push 0
push 0x4be6ff
push 2
mov ebx, 0x4222a0
call fcn.0041fa4f
add esp, 0x1c
push VariantClear
push 0
push 0x4c6557
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16011e81
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x48b630
call fcn.0041fa55
add esp, 0x34
jmp 0x4034d5
pop eax
pop ecx
jmp 0x401d6a
add esp, 8
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4034e5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4034f5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x403505
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x403515
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403525
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403535
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x403545
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x403555
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403565
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403575
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403585
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x403595
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4035a5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4035b5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4035c5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4035d5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4035e5
push ebx
call fcn.0041fa43
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4035f5
push ebx
call fcn.0041fa43
add esp, 4
mov esp, ebp
pop ebp
ret 4