Function at 0x447d40
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5acc2e
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1154
call fcn.00592460
mov eax, dword [0x606c40]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 0x18]
or dword [ebp - 0x1120], 0xffffffff
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x1124], edx
mov edx, dword [ebp + 0x14]
xor ebx, ebx
mov dword [ebp - 0x1110], eax
mov dword [ebp - 0x1128], ecx
mov dword [ebp - 0x1154], edx
mov dword [ebp - 0x1158], esi
cmp dword [ebp + 8], ebx
je 0x44889f
cmp eax, ebx
je 0x44889f
cmp word [eax], bx
je 0x44889f
cmp edi, ebx
je 0x44889f
cmp word [edi], bx
je 0x44889f
cmp ecx, ebx
je 0x44889f
cmp word [ecx], bx
je 0x44889f
cmp edx, ebx
je 0x44889f
cmp word [edx], bx
je 0x44889f
mov eax, dword [0x61f08c]
mov esi, 0x61f08c
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1140], eax
lea eax, [ebp - 0x1140]
push eax
push ebx
push edi
mov dword [ebp - 4], ebx
call fcn.00425e27
mov eax, dword [ebp - 0x1140]
add esp, 0xc
cmp dword [eax - 0xc], ebx
je 0x448836
push 0x7e
pop edi
xor eax, eax
push edi
mov word [ebp - 0x19c], ax
lea eax, [ebp - 0x19a]
push ebx
push eax
call fcn.005847c0
lea eax, [ebp - 0x19c]
add esp, 0xc
push eax
call fcn.00427b5a
pop ecx
xor eax, eax
push edi
mov word [ebp - 0x11c], ax
lea eax, [ebp - 0x11a]
push ebx
push eax
call fcn.005847c0
add esp, 0xc
lea eax, [ebp - 0x1160]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x115c]
push eax
push str.umid
push str.Softwarehao123JuziBrowser
push 0x80000001
mov dword [ebp - 0x115c], 1
mov dword [ebp - 0x1160], edi
call dword [0x5b14c4]
mov eax, dword [0x61f08c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1118], eax
mov byte [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0x5bc], ebx
lea edi, [ebp - 0x5b8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x5bc]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jne 0x447f54
push 0x62
mov word [ebp - 0x84], ax
lea eax, [ebp - 0x82]
push ebx
push eax
call fcn.005847c0
add esp, 0xc
push 0x32
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x5bc]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x1118]
push eax
call fcn.004074ff
push 0x2d
lea eax, [ebp - 0x1118]
push eax
call fcn.0042cf26
push 0x7b
lea eax, [ebp - 0x1118]
push eax
call fcn.0042cf26
push 0x7d
lea eax, [ebp - 0x1118]
push eax
call fcn.0042cf26
mov eax, dword [ebp - 0x1118]
cmp dword [eax - 0xc], ebx
jne 0x447f70
push str.B2A133393FFB4370A2744CBE20792DF4
lea eax, [ebp - 0x1118]
push eax
call fcn.004074ff
lea eax, [ebp - 0x1118]
call fcn.00417c0e
mov eax, dword [0x61f08c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1144], eax
xor eax, eax
mov byte [ebp - 4], 2
cmp ax, word [0x6276d0]
jne 0x447fa4
call fcn.00403b76
jmp 0x447fa9
mov eax, 0x6276d0
push dword [ebp - 0x1118]
lea ecx, [ebp - 0x19c]
push dword [ebp - 0x1140]
push dword [ebp - 0x1110]
push dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x11c]
push ecx
push eax
push str.http:__www.hao123.com_juzi_netfavorites_download_appver_smid_scid_stype_dresfrom_suname_svk_s
lea eax, [ebp - 0x1144]
call fcn.0040497e
mov eax, dword [0x61f08c]
add esp, 0x20
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1130], eax
lea eax, [ebp - 0x11c]
push eax
mov byte [ebp - 4], 3
push dword [0x6b2910]
lea eax, [ebp - 0x1130]
push str.___________________________7d_08x_04x
call fcn.0040bffa
mov eax, dword [0x61f08c]
add esp, 0xc
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1150], eax
mov byte [ebp - 4], 4
push dword [ebp - 0x1130]
lea ebx, [ebp - 0x1110]
call fcn.0047bcb7
pop ecx
mov byte [ebp - 4], 5
push dword [eax]
lea eax, [ebp - 0x1150]
push str.multipart_form_data__boundary_s
call fcn.0040497e
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x1110]
pop ecx
pop ecx
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [0x61f08c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1138], eax
mov byte [ebp - 4], 6
push dword [ebp - 0x1130]
lea eax, [ebp - 0x1138]
push str.___s
call fcn.0040bffa
mov eax, dword [0x61f08c]
pop ecx
pop ecx
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1148], eax
mov byte [ebp - 4], 7
push dword [ebp - 0x1130]
lea eax, [ebp - 0x1148]
push str.___s__
call fcn.0040bffa
mov eax, dword [0x61f08c]
pop ecx
pop ecx
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x114c], eax
mov byte [ebp - 4], 8
push dword [ebp - 0x1128]
lea eax, [ebp - 0x1110]
push eax
call fcn.0047bc06
mov byte [ebp - 4], 9
push dword [eax]
lea eax, [ebp - 0x114c]
push dword [ebp - 0x1138]
push str._s_r_nContent_Disposition:_form_data__name_BDUSS__r_n_r_n_s
call fcn.0040bffa
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x1110]
add esp, 0x14
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [0x61f08c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1128], eax
mov byte [ebp - 4], 0xa
push dword [ebp - 0x1124]
lea eax, [ebp - 0x1110]
push eax
call fcn.0047bc06
mov byte [ebp - 4], 0xb
push dword [eax]
lea eax, [ebp - 0x1128]
push dword [ebp - 0x1138]
push str._s_r_nContent_Disposition:_form_data__name_lastservermd5__r_n_r_n_s
call fcn.0040bffa
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x1110]
add esp, 0x14
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [0x61f08c]
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1124], eax
mov byte [ebp - 4], 0xc
push dword [ebp - 0x1128]
lea eax, [ebp - 0x1124]
push dword [ebp - 0x114c]
push 0x5d5cf0
call fcn.0040bffa
mov eax, dword [0x61f08c]
add esp, 0xc
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1134], eax
mov byte [ebp - 4], 0xd
push dword [ebp - 0x1148]
lea eax, [ebp - 0x1134]
push str._r_n_s_r_n
call fcn.0040bffa
mov eax, dword [ebp - 0x1124]
mov esi, dword [eax - 0xc]
mov eax, dword [ebp - 0x1134]
mov ebx, dword [eax - 0xc]
lea edi, [ebx + esi]
lea eax, [edi + 2]
push eax
call fcn.0057c3f0
add esp, 0xc
mov dword [ebp - 0x113c], eax
test eax, eax
je 0x4487a4
lea eax, [edi + 2]
push eax
push 0
push dword [ebp - 0x113c]
call fcn.005847c0
add esp, 0xc
push esi
push dword [ebp - 0x1124]
push dword [ebp - 0x113c]
call fcn.00584840
mov eax, dword [ebp - 0x113c]
add esp, 0xc
push ebx
push dword [ebp - 0x1134]
add eax, esi
push eax
call fcn.00584840
add esp, 0xc
xor eax, eax
mov esi, 0x206
push esi
push eax
mov word [ebp - 0x5ac], ax
lea eax, [ebp - 0x5aa]
push eax
call fcn.005847c0
add esp, 0xc
xor eax, eax
push esi
push eax
mov word [ebp - 0x3a4], ax
lea eax, [ebp - 0x3a2]
push eax
call fcn.005847c0
add esp, 0xc
push 0x62f48
call fcn.0057db2c
pop ecx
mov dword [ebp - 0x1110], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x4482ab
push eax
call fcn.0046cc84
mov esi, eax
jmp 0x4482ad
xor esi, esi
mov byte [ebp - 4], 0xd
test esi, esi
je 0x44832b
push dword [ebp - 0x1144]
mov eax, esi
call fcn.0040a0cf
push dword [ebp - 0x1150]
mov ecx, dword [ebp - 0x113c]
push edi
mov eax, esi
call fcn.0040a131
lea ebx, [ebp - 0x5ac]
mov dword [esi + 0x2468], 1
mov dword [esi + 0x26b0], 0x4e20
call fcn.0042c93d
mov eax, ebx
push eax
mov eax, esi
call fcn.0040a100
call fcn.0046d136
test eax, eax
je 0x448311
push 0xa
mov eax, esi
call fcn.0046d4db
cmp dword [esi + 0x5d120], 7
je 0x448323
xor eax, eax
mov word [ebp - 0x5ac], ax
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
lea eax, [ebp - 0x68c]
push eax
mov byte [ebp - 4], 0xf
call fcn.00536f4c
lea eax, [ebp - 0x5fc]
push eax
xor ebx, ebx
mov byte [ebp - 4], 0x10
call fcn.00539358
lea edx, [ebp - 0x5ac]
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 0x11
call fcn.00425cf0
lea ecx, [ebp - 0x5fc]
push ecx
push eax
lea ebx, [ebp - 0x68c]
mov byte [ebp - 4], 0x12
call fcn.00536f95
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x5c8]
mov bl, al
mov byte [ebp - 4], 0x11
call fcn.00406f79
test bl, bl
je 0x448768
cmp byte [ebp - 0x5f4], 0
je 0x448768
lea eax, [ebp - 0x5fc]
call fcn.0053a095
test al, al
je 0x448768
mov edx, 0x5d5964
lea ecx, [ebp - 0x5fc]
call fcn.00539d84
cmp byte [eax + 8], 4
jne 0x448768
mov eax, dword [eax]
cmp eax, edi
je 0x448768
push eax
lea eax, [ebp - 0x1114]
push eax
call fcn.0047be04
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
push dword [ebp - 0x1118]
push dword [ebp - 0x1114]
call fcn.0057d999
pop ecx
pop ecx
test eax, eax
je 0x448418
mov eax, dword [ebp - 0x1114]
add eax, 0xfffffff0
call fcn.0040758d
jmp 0x448768
mov edx, str.errno
lea ecx, [ebp - 0x5fc]
call fcn.00539d84
cmp byte [eax + 8], 1
jne 0x448405
mov ecx, eax
call fcn.0053977b
mov dword [ebp - 0x1120], eax
cmp eax, edi
je 0x448452
mov eax, dword [ebp - 0x1114]
add eax, 0xfffffff0
call fcn.0040758d
jmp 0x448759
mov edx, str.downloadurl
lea ecx, [ebp - 0x5fc]
call fcn.00539d84
cmp byte [eax + 8], 4
jne 0x448745
mov eax, dword [eax]
cmp eax, edi
je 0x448745
push eax
lea eax, [ebp - 0x111c]
push eax
call fcn.0047be04
pop ecx
pop ecx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x111c]
cmp dword [eax - 0xc], edi
jne 0x4484af
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1114]
add eax, 0xfffffff0
call fcn.0040758d
jmp 0x448761
push 0x62f48
call fcn.0057db2c
pop ecx
mov dword [ebp - 0x1110], eax
mov byte [ebp - 4], 0x15
cmp eax, edi
je 0x4484d2
push eax
call fcn.0046cc84
mov esi, eax
jmp 0x4484d4
xor esi, esi
mov byte [ebp - 4], 0x14
cmp esi, edi
je 0x448540
push dword [ebp - 0x111c]
mov eax, esi
call fcn.0040a0cf
lea ebx, [ebp - 0x3a4]
mov dword [esi + 0x2468], 1
mov dword [esi + 0x26b0], 0x493e0
call fcn.0042c93d
mov eax, ebx
push eax
mov eax, esi
call fcn.0040a100
call fcn.0046d136
test eax, eax
je 0x448524
push 0xa
mov eax, esi
call fcn.0046d4db
cmp dword [esi + 0x5d120], 7
je 0x448536
xor eax, eax
mov word [ebp - 0x3a4], ax
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
xor edi, edi
lea eax, [ebp - 0x3a4]
push eax
call dword [0x5b14d8]
test eax, eax
jne 0x44855c
mov eax, dword [ebp - 0x111c]
jmp 0x448494
mov edx, str.filemd5
lea ecx, [ebp - 0x5fc]
call fcn.00539d84
cmp byte [eax + 8], 4
jne 0x448551
mov eax, dword [eax]
cmp eax, edi
je 0x448551
push eax
lea eax, [ebp - 0x112c]
push eax
call fcn.0047be04
pop ecx
pop ecx
mov eax, dword [ebp - 0x112c]
cmp dword [eax - 0xc], edi
jne 0x44859c
add eax, 0xfffffff0
call fcn.0040758d
jmp 0x448551
xor eax, eax
push 0x7e
mov word [ebp - 0x9c], ax
lea eax, [ebp - 0x9a]
push edi
push eax
call fcn.005847c0
add esp, 0xc
lea edx, [ebp - 0x9c]
lea ecx, [ebp - 0x3a4]
call fcn.0046c7ef
test eax, eax
jne 0x4485d4
mov eax, dword [ebp - 0x112c]
jmp 0x448592
push dword [ebp - 0x112c]
lea eax, [ebp - 0x9c]
push eax
call fcn.0057d999
pop ecx
pop ecx
test eax, eax
jne 0x4485cc
or dword [ebp - 0x1120], 0xffffffff
lea esi, [ebp - 0x110c]
call fcn.00508634
lea eax, [ebp - 0x3a4]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x17
call fcn.0050873e
cmp eax, edi
je 0x44871a
mov eax, esi
push eax
call fcn.0050879f
mov ebx, eax
xor esi, esi
cmp esi, ebx
jge 0x448703
push 0x22c
lea eax, [ebp - 0x8b8]
push edi
push eax
mov dword [ebp - 0x8bc], edi
call fcn.005847c0
add esp, 0xc
push esi
lea edx, [ebp - 0x8bc]
lea ecx, [ebp - 0x110c]
call fcn.005087f3
cmp eax, edi
je 0x448703
test byte [ebp - 0x6b0], 0x10
jne 0x448846
lea eax, [ebp - 0x8b8]
push str.file.dat
push eax
call fcn.0057d999
pop ecx
pop ecx
test eax, eax
jne 0x448846
push dword [ebp - 0x8bc]
lea esi, [ebp - 0x110c]
call fcn.005088e0
mov esi, eax
cmp esi, edi
je 0x448703
push 5
push dword [ebp - 0x1154]
push edi
push edi
call dword [0x5b1428]
push 0x5cba40
push dword [ebp - 0x1154]
lea eax, [ebp - 0x1110]
push eax
mov dword [ebp - 0x1110], edi
call fcn.0058138c
add esp, 0xc
test eax, eax
jne 0x4486fc
push dword [ebp - 0x1110]
push dword [ebp - 0x690]
push 1
push esi
call fcn.00581b18
push dword [ebp - 0x1110]
call fcn.00581c11
add esp, 0x14
mov dword [ebp - 0x1120], edi
push esi
call fcn.0057db06
pop ecx
lea ecx, [ebp - 0x110c]
call fcn.0050877f
cmp dword [ebp - 0x1120], edi
je 0x44884c
lea ecx, [ebp - 0x110c]
mov byte [ebp - 4], 0x16
call fcn.005086b3
mov eax, dword [ebp - 0x112c]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x111c]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1114]
add eax, 0xfffffff0
call fcn.0040758d
xor eax, eax
cmp eax, edi
jne 0x448768
cmp dword [ebp - 0x1120], edi
jne 0x448768
or dword [ebp - 0x1120], 0xffffffff
lea ecx, [ebp - 0x5fc]
mov byte [ebp - 4], 0x10
call fcn.005395db
lea eax, [ebp - 0x68c]
call fcn.0040ab1e
lea ecx, [ebp - 0x3a4]
call fcn.00472d66
lea ecx, [ebp - 0x5ac]
call fcn.00472d66
push dword [ebp - 0x113c]
call fcn.0057db06
pop ecx
mov eax, dword [ebp - 0x1134]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1124]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1128]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x114c]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1148]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1138]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1150]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1130]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1144]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1118]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1140]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1120]
jmp 0x4488a2
inc esi
jmp 0x448624
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x1158]
call fcn.004074ff
mov eax, dword [ebp - 0x1158]
call fcn.00417c0e
lea ecx, [ebp - 0x110c]
mov byte [ebp - 4], 0x16
call fcn.005086b3
mov eax, dword [ebp - 0x112c]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x111c]
add eax, 0xfffffff0
call fcn.0040758d
jmp 0x448405
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0057d6ce
leave
ret 0x14