Function at 0x418b3a
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
push 0x14
call fcn.00515ee9
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x418c04
push dword [ebp + 8]
call fcn.0041a0de
mov dword [ebp - 0x38], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418c04
push ebx
call fcn.00515eef
add esp, 4
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x418cfb
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov eax, 0xc78b4d
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x418c3f
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov eax, dword [ebp - 4]
push eax
push 0x14
call fcn.00515ee9
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418c76
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418c95
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418cb4
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418cd3
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418cf2
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
jmp 0x419ff9
mov dword [ebp - 8], 0
xor ecx, ecx
lea eax, [ebp - 0xc]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 6
jg 0x4195a6
mov eax, 0x65d6b8
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x418d2d
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x10
call fcn.0041a81b
mov dword [ebp - 0x38], eax
push dword [ebp - 0x38]
push str.https:__kyfw.12306.cn_otn_passcodeNew_getPassCodeNew_moduleloginrandsjrand0.
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418d66
push ebx
call fcn.00515eef
add esp, 4
push 0xe
call fcn.0041a81b
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:38.0__Gecko_20100101_Firefox_38.0_r_nAccept:_image_png_image__q0.8___q0.5_r_nAccept_Language:_zh_CN_zh_q0.8_en_US_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x418d9b
push ebx
call fcn.00515eef
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 1
push 0x1f40
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 0x3c]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x418e11
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x418e21
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x418e31
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x418e41
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x418e51
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x418e65
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x418e7c
mov eax, 0xb609c8
push eax
push 1
mov ebx, 0x5165c0
call fcn.00515f01
add esp, 0x10
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1f40
jge 0x418f46
push 0x80000301
push 0
push 0xc8
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
cmp dword [ebp - 0x18], 0
je 0x418eff
call fcn.0041a998
mov dword [ebp - 0x38], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418efa
push ebx
call fcn.00515eef
add esp, 4
jmp 0x418f3a
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
mov dword [ebp - 0x38], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418f3a
push ebx
call fcn.00515eef
add esp, 4
mov dword [ebp - 0x18], 1
jmp 0x41959f
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x1c], eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passcodeNew_getPassCodeNew_moduleloginrandsjrand0.
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0041ad32
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x418f8b
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x418f9f
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x48]
fsub qword [ebp - 0x48]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.00401004
mov dword [ebp - 0x1c], eax
mov eax, dword [0xfb9c34]
cmp dword [ebp - 0x1c], eax
jge 0x419020
fild dword [0xfb9c34]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x44]
fsub qword [ebp - 0x44]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
call fcn.00401004
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
call fcn.0041ed42
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x11170
jge 0x419055
push 0x80000301
push 0
push 0x64
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
jmp 0x419020
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x1c], eax
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fadd qword [0xc78ce1]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.00401004
mov dword [ebp - 0x24], eax
push 0xc78ce9
push dword [ebp - 0x20]
push str.randCode
mov ecx, 3
call fcn.0040113b
add esp, 0xc
mov dword [ebp - 0x38], eax
push 0xe
call fcn.0041a81b
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:38.0__Gecko_20100101_Firefox_38.0_r_nAccept:___r_nAccept_Language:_zh_CN_zh_q0.8_en_US_q0.5_en_q0.3_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4190ee
push ebx
call fcn.00515eef
add esp, 4
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
push 1
push 0x1f40
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passcodeNew_checkRandCodeAnsyn
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x419160
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x419170
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x419180
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419190
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4191a0
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0x54]
push eax
call fcn.0040b3e1
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4191bc
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4191d0
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3c], eax
jle 0x41925d
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
mov dword [ebp - 0x38], eax
push 1
push 4
lea eax, [ebp - 0x38]
push eax
call fcn.0041eef1
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x419225
push ebx
call fcn.00515eef
add esp, 4
call fcn.0041a998
mov dword [ebp - 0x38], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x419258
push ebx
call fcn.00515eef
add esp, 4
jmp 0x41950d
push 0x65d6b8
push dword [ebp - 0x28]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x4193e1
call fcn.0041a998
mov dword [ebp - 0x38], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4192a9
push ebx
call fcn.00515eef
add esp, 4
push 0xc78ce9
push dword [ebp - 0x20]
push str.randCode
mov ecx, 3
call fcn.0040113b
add esp, 0xc
mov dword [ebp - 0x38], eax
push 0xe
call fcn.0041a81b
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:38.0__Gecko_20100101_Firefox_38.0_r_nAccept:___r_nAccept_Language:_zh_CN_zh_q0.8_en_US_q0.5_en_q0.3_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nIf_None_Match:_6354
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4192fb
push ebx
call fcn.00515eef
add esp, 4
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
push 1
push 0x1f40
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passcodeNew_checkRandCodeAnsyn
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41936d
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41937d
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41938d
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41939d
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4193ad
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0x54]
push eax
call fcn.0040b3e1
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4193c9
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4193dd
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_1___msg_:_TRUE_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x419412
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x419487
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_0___msg_:_FALSE_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x419463
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffff
jne 0x419487
xor eax, eax
jmp 0x41948c
mov eax, 1
test eax, eax
je 0x41949e
jmp 0x41950d
push 0x80000301
push 0
push 0xc8
push 1
mov ebx, 0x51a800
call fcn.00515f01
add esp, 0x10
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_0___msg_:__
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4194ed
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x41909c
push 0
mov ebx, 0x519ba0
call fcn.00515f01
add esp, 4
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x48]
fsub qword [ebp - 0x48]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.00401004
mov dword [ebp - 0x1c], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._result_:_1___msg_:_TRUE_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x419573
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x41959f
mov dword [ebp - 8], 1
jmp 0x4195a6
pop ebx
pop ecx
jmp 0x418d09
add esp, 8
cmp dword [ebp - 8], 0
jne 0x419690
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov eax, 0xc786f1
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4195d4
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov eax, dword [ebp - 4]
push eax
push 0x14
call fcn.00515ee9
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41960b
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41962a
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419649
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419668
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419687
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
jmp 0x419ff9
push dword [ebp - 0x20]
push 0xc78861
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.userDTO.password
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.loginUserDTO.user_name
push dword [ebp - 0x2c]
mov ecx, 7
call fcn.0040113b
add esp, 0x1c
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 0x1f40
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:38.0__Gecko_20100101_Firefox_38.0_r_nAccept:_application_json__text_javascript_____q0.01_r_nAccept_Language:_zh_CN_zh_q0.8_en_US_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_login_loginUserAsyn_random1433493286669
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x419739
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x419749
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x419759
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419769
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419779
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0x50]
push eax
call fcn.0040b3e1
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x419795
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4197a9
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, str.username
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00413b36
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4197d5
push ebx
call fcn.00515eef
add esp, 4
push 0x65d6b8
push dword [ebp - 0x3c]
call fcn.0040102b
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x419803
push ebx
call fcn.00515eef
add esp, 4
cmp dword [ebp - 0x40], 0
je 0x419de5
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 6
jg 0x419b65
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
push 1
push 0x1f40
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:38.0__Gecko_20100101_Firefox_38.0_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_CN_zh_q0.8_en_US_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nConnection:_keep_alive
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str.https:__kyfw.12306.cn_otn_leftTicket_init
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4198a0
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4198b0
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4198c0
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4198d0
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4198e0
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0x54]
push eax
call fcn.0040b3e1
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4198fc
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419910
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0xc28132
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str._otn_dynamicJs_
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00405f2a
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419960
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419970
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x419984
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0xc28132
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str.js_framework_audio_message.wav_jsessionid
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00405f2a
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4199d4
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4199e4
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4199f8
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x65d6b8
push dword [ebp - 0x30]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x419a50
push dword [ebp + 8]
call fcn.0041a0de
mov dword [ebp - 0x38], eax
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x419a4b
push ebx
call fcn.00515eef
add esp, 4
jmp 0x419b5f
push dword [ebp - 0x30]
push str.https:__kyfw.12306.cn_otn_dynamicJs_
mov ecx, 2
call fcn.0040113b
add esp, 8
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 0x1f40
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:38.0__Gecko_20100101_Firefox_38.0_r_nAccept:___r_nAccept_Language:_zh_CN_zh_q0.8_en_US_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x419ae6
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x419af6
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x419b06
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419b16
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419b26
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0x54]
push eax
call fcn.0040b3e1
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x419b42
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419b56
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x419b65
pop ecx
jmp 0x41980f
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
push 1
push 0x1f40
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:38.0__Gecko_20100101_Firefox_38.0_r_nAccept:___r_nAccept_Language:_zh_CN_zh_q0.8_en_US_q0.5_en_q0.3_r_nAccept_Encoding:_gzip__deflate_r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_https:__kyfw.12306.cn_otn_leftTicket_init_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
mov eax, 0x65d6b8
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_confirmPassenger_getPassengerDTOs
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp + 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov ebx, eax
test ebx, ebx
je 0x419be6
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x419bf6
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x419c06
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419c16
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419c26
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x419c36
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x419c5a
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419c6d
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
je 0x419c9a
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419cad
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x419cd8
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419ceb
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x419d16
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419d29
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov eax, dword [ebp - 4]
push eax
push 0x14
call fcn.00515ee9
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419d60
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419d7f
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419d9e
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419dbd
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419ddc
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
jmp 0x419ff9
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov eax, str.loginFail
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00413b36
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x419e16
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419e2c
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
push 0x65d6b8
mov ebx, dword [ebp - 0x38]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x419ea3
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov eax, str.messages
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00413b36
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x419e87
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419e9d
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
push 0x65d6b8
mov ebx, dword [ebp - 0x38]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x419ef8
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
lea eax, [ebp - 0x28]
push eax
call fcn.0041f143
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419ef2
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
push 0x65d6b8
mov ebx, dword [ebp - 0x38]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x419f43
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov eax, 0xc28327
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x419f3d
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov eax, dword [ebp - 4]
push eax
push 0x14
call fcn.00515ee9
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419f74
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419f93
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419fb2
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419fd1
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x419ff0
push eax
mov ebx, eax
call fcn.004010d0
inc eax
push eax
call fcn.00515ee9
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
jmp 0x419ff9
push eax
mov ebx, dword [ebp - 4]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a00e
push ebx
call fcn.00515eef
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a022
push ebx
call fcn.00515eef
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a036
push ebx
call fcn.00515eef
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a04a
push ebx
call fcn.00515eef
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a05e
push ebx
call fcn.00515eef
add esp, 4
pop ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41a077
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41a087
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41a097
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a0a7
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41a0b7
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41a0c7
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41a0d7
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc