Function at 0x491d5d
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5f7c1e
push VariantClear
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x491df4
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x491e4a
push str._chacuo.net
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x491e44
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
push 0x5f5e2d
push dword [ebp - 4]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x491ec2
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x14]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00495894
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x491ec2
push 0x5fb006
push dword [ebp - 8]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x491ebe
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x49219b
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 3
jg 0x492106
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
call fcn.0041838e
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push str.https:__account.xiaomi.com_pass_ajax_tick_bizauthstep0_t
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x491f24
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Accept:_image_png__image_svgxml__image__q0.8____q0.5_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId883906522_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
lea eax, [ebp - 0x40]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x491fe3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x491ff3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x492003
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x492013
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x492023
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x492033
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x492043
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x492053
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x492063
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x492073
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x492083
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x621867
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4920c3
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x44]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4920f1
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x48], 0
je 0x492100
jmp 0x492106
pop ecx
jmp 0x491edd
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x621867
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x492149
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x44]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x492177
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x48], 0
je 0x49219b
mov eax, 0x62186c
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x492197
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x492f75
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
call fcn.0041838e
mov dword [ebp - 0x3c], eax
push str.bizchangePhonestep0
push dword [ebp - 0x3c]
push str.https:__account.xiaomi.com_pass_ajax_tick__t
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4921f5
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.Accept:_image_png__image_svgxml__image__q0.8____q0.5_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId862645830_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nAccept_Encoding:_gzip__deflate_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
lea eax, [ebp - 0x40]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x4922b4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4922c4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4922d4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4922e4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4922f4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x492304
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x492314
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x492324
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x492334
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x492344
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x492354
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
call fcn.0041838e
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push str.https:__account.xiaomi.com_pass_ajax_tick_bizauthstep0_t
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x492390
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
mov eax, str.Accept:_image_png__image_svgxml__image__q0.8____q0.5_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId862645830_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nAccept_Encoding:_gzip__deflate_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
lea eax, [ebp - 0x40]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x492454
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x492464
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x492474
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x492484
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x492494
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4924a4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4924b4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4924c4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4924d4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4924e4
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4924f4
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x6219f7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x492534
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x6219f7
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x492574
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
call fcn.0041838e
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x5c]
push str._jsontrue_dc
push dword [ebp - 0x54]
push 0x621a0f
push dword [ebp - 0x44]
push str.https:__account.xiaomi.com_pass_auth_security_bindSafeAddress_typePHuserId
mov ecx, 6
call fcn.0040108c
add esp, 0x18
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4925c0
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4925d0
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4925e0
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov eax, 0x6219f7
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x492620
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
push dword [ebp - 0x70]
push str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x49264d
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
push 1
push 1
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
push 1
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0xa0], 0
push 0
push dword [ebp - 0xa0]
lea eax, [ebp - 0x60]
push eax
call fcn.00415eed
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x492747
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x49275a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x49276d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x49277d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x492790
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x4927a3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x4927b6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x4927c9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x4927dc
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4927ef
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x492805
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x492831
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0xa8]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x492848
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.code_:2
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x49287d
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x492938
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x5f7bfd
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.url_:_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4928e9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4928f9
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x54]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x492927
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x58], 0
je 0x492938
mov eax, 1
jmp 0x49293d
mov eax, 0
test eax, eax
je 0x492f5b
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str.url_:_
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x492991
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4929a1
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x6219f7
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4929e1
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
push dword [ebp - 0x58]
push str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x492a0e
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x492ad2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x492ae2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x492af5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x492b08
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x492b18
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x492b2b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x492b3b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x492b4b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x492b5b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x492b6b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x492b7b
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
call fcn.0041838e
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push str.https:__account.xiaomi.com_auth_sendEmailTicket__dc
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x492bb7
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, 0x6219f7
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x492bf2
push ebx
call fcn.005039b9
add esp, 4
push str.retry0
push dword [ebp - 0x4c]
push 0x621c56
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x492c1f
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov eax, 0x6219f7
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x492c5f
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
push dword [ebp - 0x60]
push str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x492c8c
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
push 1
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x50]
push eax
push 1
push 1
lea eax, [ebp - 0x40]
push eax
call fcn.00415eed
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x492d56
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x492d66
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x492d79
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x492d89
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x492d9c
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x492daf
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x492dc2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x492dd2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x492de2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x492df2
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x8c]
test eax, eax
jne 0x492e08
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x492e34
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
lea eax, [ebp - 0x90]
push eax
call fcn.0043e1a1
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x492e60
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x492e77
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x621c5c
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x492eac
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x492eeb
mov eax, 0x621c79
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x492ee2
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
jmp 0x492f56
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.description_:_
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x492f1c
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x492f56
mov eax, 0x621cc8
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x492f52
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
jmp 0x492f75
mov eax, 0x621ce1
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x492f71
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4931c0
push VariantClear
push 0
push 0x621cfa
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push 0xffffffffffffffff
push 0x12
push 0x1601f1ff
push 0x52010003
call fcn.005039dd
add esp, 0x10
test eax, eax
je 0x4930b2
push dword [ebp + 8]
mov eax, 0x621d19
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 0xc]
push dword [ebp + 0x1c]
call fcn.0045f571
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x493021
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x493035
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x621d24
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x621d29
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x493085
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x493095
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4930a9
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x49318d
push dword [ebp + 0x18]
push 3
push dword [ebp + 8]
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
mov eax, 0x621d19
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.0045ff77
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x493101
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x493115
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x621d24
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str._br__br_
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x493165
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x493175
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x493189
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x5f5e2d
push dword [ebp - 0xc]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4931c0
mov eax, 0x621d5b
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4931bc
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x493b0a
push 0x621d75
push dword [ebp - 0xc]
push 0x621d7f
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x493209
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x493256
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
call fcn.0041838e
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push str.https:__account.xiaomi.com_auth_verifyEmail__flag8__dc
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x493292
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x6219f7
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4932d2
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0xc]
push 0x5fa57d
push dword [ebp - 0x50]
push str._jsontrueuser
mov ecx, 4
call fcn.0040108c
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x493302
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, 0x6219f7
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x493342
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
push dword [ebp - 0x64]
push str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x49336f
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
push 1
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x54]
push eax
push 1
push 1
lea eax, [ebp - 0x40]
push eax
call fcn.00455c29
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x49343f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x49344f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x493462
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x493472
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x493485
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x493498
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x4934ab
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4934be
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4934ce
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4934de
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4934f5
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.desc_:_
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x49352a
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x493a78
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str.location_:_
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x493596
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4935a6
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x48]
push str.https:__account.xiaomi.com
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4935ce
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x6219f7
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x49360e
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
push dword [ebp - 0x5c]
push str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x49363b
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
push 1
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
lea eax, [ebp - 0x4c]
push eax
call fcn.00455c29
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x493717
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x49372a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x49373d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x49374d
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x493760
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x493773
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x493783
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x493793
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4937a3
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4937b3
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4937ca
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str.URL_has_moved__a_href_
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49381a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x49382a
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x48]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x493858
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x493a78
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x5f7bfd
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str.URL_has_moved__a_href_
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004173a5
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4938ae
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4938be
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x6219f7
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4938fe
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
push dword [ebp - 0x58]
push str.Accept:___r_nContent_Type:_application_x_www_form_urlencoded_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x49392b
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
push 1
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.00415eed
mov ebx, eax
test ebx, ebx
je 0x4939e2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4939f2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x493a05
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x493a18
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x493a28
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x493a38
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x493a48
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x493a58
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x493a68
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x493a78
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, str.passportsecurity_slh
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x493ab8
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 0x44]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x493ae6
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x48], 0
je 0x493b0a
mov eax, 0x621e3b
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x493b06
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
xor ecx, ecx
lea eax, [ebp - 0x14]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 3
jg 0x494ef7
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x493b7b
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
mov eax, 0x5f5f9d
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.0043adca
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x493b63
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x493b77
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4940ad
mov dword [ebp - 0x1c], 0
inc dword [ebp - 0x1c]
push 0xffffffffffffffff
push 8
push 0x16017eb8
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x493bca
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x493bf0
push ebx
call fcn.005039b9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fmul qword [0x5f5f4b]
fstp qword [ebp - 0x4c]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fsub qword [ebp - 0x4c]
fcomp qword [0x5f6798]
fnstsw ax
test ah, 0x41
jne 0x493c3e
mov eax, 0x6031f5
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x493c35
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
jmp 0x4940ad
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0x5fc9df
push dword [ebp - 0x38]
push 0x5fa8a9
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x493c8a
push ebx
call fcn.005039b9
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x493c9d
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x493cea
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x14], 1
mov eax, 0
setg al
test eax, eax
je 0x493d08
mov eax, 1
jmp 0x493d0d
mov eax, 0
mov dword [ebp - 0x3c], eax
push 1
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea eax, [ebp - 8]
push eax
mov eax, 0x5f5f9d
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043be0d
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x493d61
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x493d71
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x493d81
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x493d95
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x5f5e2d
push dword [ebp - 0x20]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x493db7
jmp 0x4940ad
push VariantClear
push 0
push 0x6025f7
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push str.typePH
push dword [ebp - 0x20]
push str.https:__account.xiaomi.com_pass_user_externalIdBinded_externalId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.00415eed
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x493ee5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x493ef5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x493f05
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x493f15
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x493f25
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x493f35
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x493f45
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x493f55
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x493f65
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x493f75
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x493f85
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x493f98
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x493fbe
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x493fd2
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa0d7
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x494007
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x49405c
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, 0x5f5f9d
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x49405c
push ebx
call fcn.005039b9
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5fa0d7
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x49408d
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x493b9b
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4949ff
mov eax, str.dcsd__OriginLoginURLhttps_3A__account.xiaomi.com_pass_serviceLogin_3Fcallback_3Dhttps_253A_252F_252Faccount.xiaomi.com_252Fsts_253Fsign_253DZ7a_25252Bni8ZAGdN7Sp2LLYrs6AvimE_25253D_2526followup_253Dhttps_25253A_25252F_25252Faccount.xiaomi.com_25252Fpass_25252Fauth_25252Fsecurity_25252Fhome_25253FuserId_25253D883906828_2526sid_253Dpassport_26sid_3Dpassport
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041765e
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4940ee
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x494102
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
jl 0x49416e
mov eax, 0x5fa3b8
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x494130
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, 0x5f5f9d
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x494169
push ebx
call fcn.005039b9
add esp, 4
jmp 0x4949ff
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
call fcn.0041838e
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
call fcn.0041838e
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
call fcn.0041838e
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
call fcn.0041838e
mov dword [ebp - 0x54], eax
push dword [ebp - 0x54]
push 0x61a19d
push dword [ebp - 0x4c]
push 0x61a19d
push dword [ebp - 0x44]
push 0x61a19d
push dword [ebp - 0x3c]
push str.https:__account.xiaomi.com_pass_getCode_icodeTypeantispam_
mov ecx, 8
call fcn.0040108c
add esp, 0x20
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4941fe
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49420e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x49421e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x49422e
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov eax, 0x6219f7
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x49426e
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
push dword [ebp - 0x68]
push str.Accept:_image_png__image_svgxml__image__q0.8____q0.5_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x49429b
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 1
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x90], 0
push 0
lea eax, [ebp - 0x90]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
push dword [ebp - 0x98]
lea eax, [ebp - 0x58]
push eax
call fcn.00415eed
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x494389
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x49439c
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x4943af
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4943bf
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x4943d2
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x4943e5
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x4943f8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x49440b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x49441b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x49442b
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x494442
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [0x6eeb8c]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [0x6eeb84]
mov dword [ebp - 0x3c], ebx
mov ebx, dword [0x6eeb84]
add ebx, 0x10
mov dword [ebp - 0x40], ebx
mov ebx, dword [0x6eeb98]
add ebx, 0xc
mov dword [ebp - 0x44], ebx
push dword [ebp - 0x44]
mov edx, 0x1601233f
mov eax, 0x52010003
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edx
lea eax, [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x40]
push dword [ebx]
push 5
push 1
lea eax, [ebp - 0x2c]
push eax
push 0x16012ac7
push 0x52010003
push 0x160168dc
push 0x52010003
push 0x160168dd
push 0x52010003
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 3
push dword [ebp + 8]
lea eax, [ebp - 0x24]
push eax
call fcn.0043e907
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4944ea
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x622092
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x49452e
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.0045ee6f
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x494558
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x62209e
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x494598
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x58]
push eax
call fcn.0045ee6f
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4945c2
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x6219f7
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x494602
push ebx
call fcn.005039b9
add esp, 4
push str.replacefalse
push dword [ebp - 0x28]
push str.icode
push dword [ebp - 0x20]
push str.newAddress
push dword [ebp - 0x6c]
push str.passTokenaddressTypePHuserId
push dword [ebp - 0x5c]
push str.passportsecurity_ph
push dword [ebp - 0x48]
push 0x622107
mov ecx, 0xb
call fcn.0040108c
add esp, 0x2c
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49464f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x49465f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x49466f
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x494683
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x6219f7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4946c7
push ebx
call fcn.005039b9
add esp, 4
push str._r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko
push dword [ebp - 0x44]
push str.X_Requested_With:_XMLHttpRequest_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nAccept:_text_plain_____q0.01_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4946f4
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
push 1
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
push 1
mov eax, str.https:__account.xiaomi.com_pass_auth_security_checkSafeAddressParams
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
call fcn.00415eed
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4947ab
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4947bb
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4947cb
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4947db
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4947eb
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4947fb
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x49480b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x49481b
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x49482b
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x49483e
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x494864
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x494878
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.result_:1200201__info_:_server_invalidRequestParam
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4948ad
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x494915
push VariantClear
push 0
push 0x6222be
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.result_:1200207__info_:_server_addressBinded
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x494946
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x4949ae
push VariantClear
push 0
push 0x622304
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.START_result_:0
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4949df
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x49410d
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x494dd9
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x6219f7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x494a58
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x622092
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x494a98
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x54]
push eax
call fcn.0045ee6f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x494ac2
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov eax, 0x62209e
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x494b02
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x68]
push eax
call fcn.0045ee6f
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x494b2c
push ebx
call fcn.005039b9
add esp, 4
push str.contentType150007
push dword [ebp - 0x20]
push str.passTokennewAddress
push dword [ebp - 0x6c]
push str.passportsecurity_ph
push dword [ebp - 0x58]
push str.passport_ph
push dword [ebp - 0x44]
push str.addressTypePHreplacefalseuserId
mov ecx, 9
call fcn.0040108c
add esp, 0x24
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x494b71
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x494b81
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x494b91
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x494ba5
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 1
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
mov eax, str.X_Requested_With:_XMLHttpRequest_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nAccept:_text_plain_____q0.01_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId862645830servicebindPhone_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
push 1
mov eax, str.https:__account.xiaomi.com_pass_auth_security_sendSafeAddressTicket
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.00415eed
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x494c68
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x494c78
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x494c88
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x494c98
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x494ca8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x494cb8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x494cc8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x494cd8
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x494ce8
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x64]
test eax, eax
jne 0x494cfb
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x494d21
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x494d35
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.START_result_:0
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x494d6a
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x494dd9
mov eax, 0x5fd8f7
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x494da0
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, 0x5f5f9d
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043b51d
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x494dd9
push ebx
call fcn.005039b9
add esp, 4
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x494e49
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
mov eax, 0x5f5f9d
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00441b36
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x494e31
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x494e45
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x494e67
jmp 0x494ef7
cmp dword [ebp - 0x14], 3
je 0x494ec9
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x5faeac
push VariantClear
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x494ea2
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
je 0x494ec9
mov eax, 1
jmp 0x494ece
mov eax, 0
test eax, eax
je 0x494ef0
mov eax, 0x5f5e2d
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x494eec
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
pop ebx
pop ecx
jmp 0x493b11
add esp, 8
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x4952bd
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x6219f7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x494f53
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x622092
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x494f93
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x54]
push eax
call fcn.0045ee6f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x494fbd
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov eax, 0x62209e
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0045213f
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x494ffd
push ebx
call fcn.005039b9
add esp, 4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x68]
push eax
call fcn.0045ee6f
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x495027
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x20]
push str.passTokennewAddress
push dword [ebp - 0x6c]
push str.passportsecurity_ph
push dword [ebp - 0x58]
push str.replacefalsepassport_ph
push dword [ebp - 0x34]
push str.vkey
push dword [ebp - 0x44]
push str.userId
mov ecx, 0xa
call fcn.0040108c
add esp, 0x28
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49506f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x49507f
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x49508f
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4950a3
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push 1
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 1
mov eax, str.X_Requested_With:_XMLHttpRequest_r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nAccept:_text_plain_____q0.01_r_nReferer:_https:__account.xiaomi.com_pass_auth_security_home_userId862645830servicebindPhone_r_nAccept_Language:_zh_CN_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko_r_nHost:_account.xiaomi.com
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
push 1
mov eax, str.https:__account.xiaomi.com_pass_auth_security_bindSafeAddress
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.00415eed
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x495166
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x495176
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x495186
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x495196
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4951a6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4951b6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4951c6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4951d6
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4951e6
push ebx
call fcn.005039b9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x64]
test eax, eax
jne 0x4951f9
mov eax, 0x5f5e98
push eax
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x49521f
push ebx
call fcn.005039b9
add esp, 4
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x495233
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.START_result_:0
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x495268
mov eax, 0x5f5e2d
push eax
push 4
mov ebx, 0x504870
call fcn.005039b3
add esp, 0x34
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x4952bd
push 0x5fa6e8
push dword [ebp - 0xc]
push 0x5fa6f7
mov ecx, 3
call fcn.0040108c
add esp, 0xc
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4952b9
push ebx
call fcn.005039b9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x5f5e2d
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
jne 0x495571
push VariantClear
push 0
push 0x5fa709
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [0x6eec14]
add ebx, 0x28
mov dword [ebp - 0x38], ebx
push 0x5f5e2d
mov ebx, dword [ebp + 0x10]
push dword [ebx]
call fcn.004010e8
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp + 0x10]
push dword [ebx]
push 0x5fa87e
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x3c], 0
je 0x49538f
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x49538a
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005039ad
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x495394
mov eax, 0x5f5e2d
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4953a7
push ebx
call fcn.005039b9
add esp, 4
push dword [ebp - 0x44]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4953cf
push ebx
call fcn.005039b9
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 0x14]
lea eax, [ebp - 0x20]
push eax
mov eax, 0x6225a7
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x38]
call fcn.004445a2
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x49541a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49542a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x49543a
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x1601695e
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x495495
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4954bb
push ebx
call fcn.005039b9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fsub qword [0x5f5e52]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x5060b0
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x50], eax
push 0
push dword [ebp - 0x50]
push 0xffffffffffffffff
push 8
push 0x1601695e
push 0x52010003
call fcn.005039d7
add esp, 0x18
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x495518
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
mov eax, 0x5f5f9d
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.0043ba34
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x49556c
push ebx
call fcn.005039b9
add esp, 4
jmp 0x495679
push dword [ebp - 8]
push 0x5fa71d
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x38], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x49559c
mov eax, 0x5f5e2d
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16012ac7
push 0x52010003
push 4
mov eax, 1
mov ebx, 0x571590
call fcn.005039d1
add esp, 0x34
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4955e9
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eec14]
add ebx, 0x20
mov dword [ebp - 0x38], ebx
push 0x6225b2
mov ebx, dword [ebp + 0x10]
push dword [ebx]
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
lea eax, [ebp - 0x3c]
push eax
push dword [ebp + 0x14]
push dword [ebp + 0xc]
mov eax, 0x621711
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x38]
call fcn.004445a2
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x495659
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x495669
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x495679
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595110
call fcn.005039d1
add esp, 0x10
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
lea eax, [ebp - 8]
push eax
push 0x6eed0c
mov eax, 0x613ab8
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x5f5f9d
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.00444cfb
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4956ed
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4956fd
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x44], 0
jne 0x495780
push 0xffffffffffffffff
push 8
push 0x1601695e
push 0x52010003
call fcn.005039dd
add esp, 0x10
mov dword [ebp - 0x48], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x495733
mov eax, 0x5f5e2d
push eax
push 1
mov ebx, 0x504d60
call fcn.005039b3
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x495759
push ebx
call fcn.005039b9
add esp, 4
cmp dword [ebp - 0x4c], 0
jle 0x495780
push 0x5fa728
push dword [ebp - 8]
call fcn.004010e8
add esp, 8
cmp eax, 0
je 0x495780
xor eax, eax
jmp 0x495785
mov eax, 1
test eax, eax
je 0x4957af
push 0
push 0
push 0xffffffffffffffff
push 0x12
push 0x160168d1
push 0x52010003
call fcn.005039d7
add esp, 0x18
call fcn.004380aa
mov ebx, dword [0x6eeb84]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 1
mov eax, 5
mov ebx, 0x595130
call fcn.005039d1
add esp, 0x10
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4957ee
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4957fe
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x49580e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x49581e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49582e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49583e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x49584e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49585e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49586e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x49587e
push ebx
call fcn.005039b9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x49588e
push ebx
call fcn.005039b9
add esp, 4
mov esp, ebp
pop ebp
ret 0x18