Function at 0x4075c0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x10
call fcn.00421299
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx], 0x4ef8d8
push ebx
add ebx, 4
push ebx
push 8
call fcn.00421299
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.00421299
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov eax, 0x4ef7f9
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4076e3
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 4], eax
call fcn.0040a3b7
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.commonBean.phoneNo
push dword [ebp - 0x54]
push str.https:__upay.10010.com_npfweb_getArea_init_callbackjsonp
mov ecx, 4
call fcn.004013f4
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x407721
push ebx
call fcn.0042129f
add esp, 4
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
mov eax, 0x4ef8b3
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00402a38
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4077d2
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4077e5
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4077f8
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x40780b
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x40781e
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40782e
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x40783e
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40784e
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x80]
push eax
call fcn.0040700e
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x407873
push ebx
call fcn.0042129f
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40788a
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 8], eax
push str.invoiceBean.need_invoice1invoiceBean.invoice_typeinvoiceBean.is_mailing1saveflagfalseinvoiceBean.post_listinvoiceBean.invoice_listrechargeBean.cardPwdcommonBean.channelType101commonBean.bussineType01
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.phoneNocommonBean.provinceCode010commonBean.cityCode102rechargeMode_E5_9C_A8_E7_BA_BF_E6_94_AF_E4_BB_98cardBean.cardValueCode01offerPriceStrHidden19.70cardBean.cardValue20cardBean.minCardNum1cardBean.maxCardNum150MaxThreshold01150MinThreshold011MaxThreshold0210MinThreshold021MaxThreshold036MinThreshold031MaxThreshold043MinThreshold041MaxThreshold051MinThreshold051actionPayFeeInfo.actionConfigIdcommonBean.payAmount
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.https:__upay.10010.com_npfweb_NpfCellWeb_payFee_PayFeeCheck_secstate.state3mCBuETgA_2FYTbuZO79gHFA_3D_3D_5E_40_5E0.0.1commonBean.userChooseMode0commonBean.phoneNo
mov ecx, 5
call fcn.004013f4
add esp, 0x14
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
mov eax, 0x4ef8b3
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00402a38
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x407962
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x407975
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x407988
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x40799b
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4079ab
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4079bb
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4079cb
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4079db
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x7c]
push eax
call fcn.0040700e
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x407a00
push ebx
call fcn.0042129f
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x407a17
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4efede
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x407a4c
mov eax, 0x4ef7f9
push eax
push 4
mov ebx, 0x421a70
call fcn.004212a5
add esp, 0x34
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffff
je 0x407a76
mov eax, 0x4efef9
jmp 0x40a26f
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._secstate_:__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x407ac4
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x407b05
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040a52b
mov dword [ebp - 0x54], eax
push str.invoiceBean.need_invoice1invoiceBean.invoice_typeinvoiceBean.is_mailing1saveflagfalseinvoiceBean.post_listinvoiceBean.invoice_listrechargeBean.cardPwdcommonBean.channelType101commonBean.bussineType01
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.phoneNocommonBean.provinceCode010commonBean.cityCode102rechargeMode_E5_9C_A8_E7_BA_BF_E6_94_AF_E4_BB_98cardBean.cardValueCode01offerPriceStrHidden19.70cardBean.cardValue20cardBean.minCardNum1cardBean.maxCardNum150MaxThreshold01150MinThreshold011MaxThreshold0210MinThreshold021MaxThreshold036MinThreshold031MaxThreshold043MinThreshold041MaxThreshold051MinThreshold051actionPayFeeInfo.actionConfigIdcommonBean.payAmount
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.commonBean.userChooseMode0commonBean.phoneNo
push dword [ebp - 0x54]
push str.secstate.state
mov ecx, 7
call fcn.004013f4
add esp, 0x1c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x407b56
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
push 1
lea eax, [ebp - 0x58]
push eax
push 1
mov eax, str.Referer:_https:__upay.10010.com_npfweb_npfcellweb_phone_recharge_fill.htm_a_r_n
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
mov eax, str.POST
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
mov eax, str.https:__upay.10010.com_npfweb_NpfCellWeb_payFee_PayFeeApplay.action
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
call fcn.0040a7bc
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x407bfe
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x407c11
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x407c24
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x407c34
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x407c44
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x407c54
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x407c64
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x407c74
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x7c]
push eax
call fcn.0040700e
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x407c99
push ebx
call fcn.0042129f
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x407cb0
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x407cd0
push eax
mov ebx, eax
call fcn.00401389
inc eax
push eax
call fcn.00421299
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x407ce1
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
mov eax, 0x4ef8b3
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402a38
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x407d8d
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x407da0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x407db0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x407dc0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x407dd0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x407de0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x407df0
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x78]
push eax
call fcn.0040700e
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x407e15
push ebx
call fcn.0042129f
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x407e2c
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.cipherText__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x407e7e
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407ebf
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.enBuyTel__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x407f11
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x407f52
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.enTimeStamp__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x407fa4
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x407fe5
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.enServiceOrder__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x408037
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x408078
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.enServiceInfo__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4080ca
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40810b
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.enSourc__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40815d
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40819e
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.enChannelStr__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4081f0
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x408231
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov eax, str._input_type_hidden__name_paymentInfo.currentId__value__.___
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x408283
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x14]
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4082c4
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str._r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nConnection:_keep_alive_r_nUser_Agent:_Mozilla_5.0__Windows_NT_5.1__rv:8.0.1__Gecko_20100101_Firefox_8.0.1_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_zh_q0.5_r_nAccept_Encoding:_gzip__deflate_r_nAccept_Charset:_GB2312_utf_8_q0.7__q0.7_r_n
push dword [ebp - 0x14]
push str.Referer:
mov ecx, 3
call fcn.004013f4
add esp, 0xc
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4082f9
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov eax, str.AliPay01qcuQurnyGc01
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040c2db
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x408321
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x1c]
push eax
call fcn.0040c2db
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040c2db
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040c2db
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040c2db
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040c2db
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040c2db
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040c2db
mov dword [ebp - 0x74], eax
push dword [ebp - 0x38]
push str.paymentInfo.currentId
push dword [ebp - 0x74]
push str.paymentInfo.enChannelStr
push dword [ebp - 0x70]
push str.paymentInfo.enSourc
push dword [ebp - 0x6c]
push str.paymentInfo.enServiceInfo
push dword [ebp - 0x68]
push str.paymentInfo.enServiceOrder
push dword [ebp - 0x64]
push str.paymentInfo.enTimeStamp
push dword [ebp - 0x60]
push str.paymentInfo.ServicePlantFormId11paymentInfo.enBuyTel
push dword [ebp - 0x5c]
push str.paymentInfo.cipherText
push dword [ebp - 0x58]
push str.paymentInfo.bankSelect
mov ecx, 0x12
call fcn.004013f4
add esp, 0x48
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4083ec
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4083fc
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40840c
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x40841c
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x40842c
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40843c
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x40844f
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x408462
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 1
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
mov eax, str.POST
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
mov eax, str.https:__unipay.10010.com_udpPortal_payment_paymentAffirm.action
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
call fcn.0040a7bc
mov dword [ebp - 0x98], eax
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x40851d
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x408530
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x408543
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x408556
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x408569
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x40857c
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x40858f
push ebx
call fcn.0042129f
add esp, 4
lea eax, [ebp - 0x98]
push eax
call fcn.0040700e
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x4085b4
push ebx
call fcn.0042129f
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4085cb
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4085eb
push eax
mov ebx, eax
call fcn.00401389
inc eax
push eax
call fcn.00421299
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x5efcd4]
test ebx, ebx
je 0x4085ff
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [0x5efcd4], eax
mov eax, dword [0x5efcd4]
test eax, eax
je 0x408623
push eax
mov ebx, eax
call fcn.00401389
inc eax
push eax
call fcn.00421299
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
test ebx, ebx
je 0x408636
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov ebx, dword [ebp + 0x18]
mov dword [ebx], eax
push 0x4ef7f9
mov ebx, dword [ebp + 0x18]
push dword [ebx]
call fcn.00401450
add esp, 8
cmp eax, 0
jne 0x408692
mov eax, 0x4f04c5
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40866d
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x40868d
push eax
mov ebx, eax
call fcn.00401389
inc eax
push eax
call fcn.00421299
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x40a26f
push dword [ebp + 0x20]
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 0x18]
call fcn.0040cb57
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4086b8
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x4086d8
push eax
mov ebx, eax
call fcn.00401389
inc eax
push eax
call fcn.00421299
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x40a26f
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40a280
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40a290
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a2b0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40a2c0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40a2d0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40a2e0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40a2f0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40a300
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40a310
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40a320
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40a330
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40a340
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40a350
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40a360
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40a370
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40a380
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40a390
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40a3a0
push ebx
call fcn.0042129f
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40a3b0
push ebx
call fcn.0042129f
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x20