Function at 0x401350
Capabilities:
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x4364c0
mov eax, dword fs:[0]
push eax
sub esp, 0x44
push ebx
push esi
push edi
mov eax, dword [0x446650]
xor eax, esp
push eax
lea eax, [esp + 0x54]
mov dword fs:[0], eax
push str.http:__182.254.228.14:8080_vote_list.jsp_g3
lea ecx, [esp + 0x40]
mov dword [esp + 0x60], 0
call fcn.004027b0
push str.http:__182.254.228.14:8080_bc_i_want_to_vote.action
lea ecx, [esp + 0x3c]
mov byte [esp + 0x60], 1
call fcn.004027b0
push str.http:__182.254.228.14:8080_captcha
lea ecx, [esp + 0x38]
mov byte [esp + 0x60], 2
call fcn.004027b0
push str.http:__www.like383.com_boxVcodeSrv_wap.jsp
lea ecx, [esp + 0x34]
mov byte [esp + 0x60], 3
call fcn.004027b0
push str.Accept:__r_n
lea ecx, [esp + 0x1c]
mov byte [esp + 0x60], 4
call fcn.004027b0
push 0x17
push str.Accept_Encoding:utf_8_r_n
lea ecx, [esp + 0x20]
mov byte [esp + 0x64], 5
call fcn.004023a0
push 0x20
push str.Accept_Language:zh_CN_zh_q0.8_r_n
lea ecx, [esp + 0x20]
call fcn.004023a0
push 0x12
push str.Connection:close_r_n
lea ecx, [esp + 0x20]
call fcn.004023a0
push 0x3f
push str.Content_Type:application_x_www_form_urlencoded__charsetUTF_8_r_n
lea ecx, [esp + 0x20]
call fcn.004023a0
push 0x23
push str.Origin:http:__182.254.228.14:8080_r_n
lea ecx, [esp + 0x20]
call fcn.004023a0
push 0x36
push str.Referer:http:__182.254.228.14:8080_vote_list.jsp_g3_r_n
lea ecx, [esp + 0x20]
call fcn.004023a0
push 0x79
push str.User_Agent:Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_39.0.2171.71_Safari_537.36_r_n
lea ecx, [esp + 0x20]
call fcn.004023a0
push 0x21
push str.X_Requested_With:XMLHttpRequest_r_n
lea ecx, [esp + 0x20]
call fcn.004023a0
push 0x43cba8
lea ecx, [esp + 0x50]
call fcn.004027b0
push 0x43cba8
lea ecx, [esp + 0x24]
mov byte [esp + 0x60], 6
call fcn.004027b0
push 0x43cba8
lea ecx, [esp + 0x18]
mov byte [esp + 0x60], 7
call fcn.004027b0
push 0x43cba8
lea ecx, [esp + 0x20]
mov byte [esp + 0x60], 8
call fcn.004027b0
lea eax, [esp + 0x24]
mov byte [esp + 0x5c], 9
push eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 4], 1
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [eax - 0xc]
lea edx, [esp + 0x28]
push edx
push ecx
jle 0x4014d6
mov eax, ecx
push eax
lea ecx, [esp + 0x30]
call fcn.004025f0
mov eax, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x2c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x60], esp
mov esi, esp
push eax
call fcn.00402c00
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x78], 0xa
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
mov dword [esp + 0x60], esp
mov esi, esp
push eax
call fcn.00402c00
add eax, 0x10
add esp, 4
mov dword [esi], eax
push 0
mov byte [esp + 0x7c], 9
call fcn.00404040
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx - 0xc]
add esp, 0x20
test eax, eax
je 0x401b61
jge 0x401535
or eax, 0xffffffff
jmp 0x401550
push str.var_tt___
push ecx
call fcn.004210f4
add esp, 8
test eax, eax
jne 0x40154c
or eax, 0xffffffff
jmp 0x401550
sub eax, dword [esp + 0x14]
push 0x24
add eax, 0xa
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x20]
call fcn.00401f80
mov byte [esp + 0x5c], 0xb
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 0
jge 0x401578
or eax, 0xffffffff
jmp 0x401593
push str.var_ssid___
push eax
call fcn.004210f4
add esp, 8
test eax, eax
jne 0x40158f
or eax, 0xffffffff
jmp 0x401593
sub eax, dword [esp + 0x14]
push 0x20
add eax, 0xc
push eax
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x20]
call fcn.00401f80
lea eax, [esp + 0x48]
push str.id95g3tt
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x64], 0xc
call fcn.00402250
push str.ssid
push eax
lea ecx, [esp + 0x54]
push ecx
mov byte [esp + 0x70], 0xd
call fcn.00402170
add esp, 0x14
lea edx, [esp + 0x28]
push edx
push eax
lea eax, [esp + 0x48]
mov bl, 0xe
push eax
mov byte [esp + 0x68], bl
call fcn.004020b0
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x60], 0xf
call fcn.00402b80
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401623
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0xd
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401648
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0xc
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40166d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jge 0x40167c
or eax, 0xffffffff
jmp 0x401697
push str.JSESSIONID
push eax
call fcn.004210f4
add esp, 8
test eax, eax
jne 0x401693
or eax, 0xffffffff
jmp 0x401697
sub eax, dword [esp + 0x20]
push 0x20
add eax, 0xb
push eax
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00401f80
push 0x12
push str.Cookie:JSESSIONID
lea ecx, [esp + 0x20]
mov byte [esp + 0x64], 0x10
call fcn.004023a0
mov edi, dword [esp + 0x48]
mov eax, dword [edi - 0xc]
push eax
push edi
lea ecx, [esp + 0x20]
call fcn.004023a0
push 2
push 0x43c950
lea ecx, [esp + 0x20]
call fcn.004023a0
lea edx, [esp + 0x40]
push str.X_Forwarded_For:
push edx
lea ecx, [esp + 0x6c]
call fcn.00402250
push 0x43c950
push eax
lea eax, [esp + 0x54]
mov bl, 0x11
push eax
mov byte [esp + 0x70], bl
call fcn.00402170
add esp, 0x14
mov byte [esp + 0x5c], 0x12
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.004023a0
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401747
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0x10
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40176c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push str.CLIENT_IP:
push ecx
lea ecx, [esp + 0x6c]
call fcn.00402250
push 0x43c950
push eax
lea edx, [esp + 0x54]
mov bl, 0x13
push edx
mov byte [esp + 0x70], bl
call fcn.00402170
add esp, 0x14
mov byte [esp + 0x5c], 0x14
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.004023a0
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4017d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0x10
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4017f6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push str.VIA:
push ecx
lea ecx, [esp + 0x6c]
call fcn.00402250
push 0x43c950
push eax
lea edx, [esp + 0x54]
mov bl, 0x15
push edx
mov byte [esp + 0x70], bl
call fcn.00402170
add esp, 0x14
mov byte [esp + 0x5c], 0x16
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.004023a0
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40185b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0x10
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401880
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push str.REMOTE_ADDR:
push ecx
lea ecx, [esp + 0x6c]
call fcn.00402250
push 0x43c950
push eax
lea edx, [esp + 0x54]
push edx
mov byte [esp + 0x70], 0x17
call fcn.00402170
add esp, 0x14
mov byte [esp + 0x5c], 0x18
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.004023a0
mov byte [esp + 0x5c], 0x17
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4018e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0x10
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40190a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x28]
push eax
mov eax, dword [esp + 0x24]
push 0
push 0x43cba8
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x5c], esp
mov esi, esp
push eax
call fcn.00402c00
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x78], 0x19
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov dword [esp + 0x5c], esp
mov esi, esp
push eax
call fcn.00402c00
add eax, 0x10
add esp, 4
mov dword [esi], eax
push 0
mov byte [esp + 0x7c], 0x10
call fcn.00404040
add esp, 0x20
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x28]
push eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 4], 1
push ecx
jle 0x401997
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x28]
call fcn.004025f0
mov eax, dword [esp + 0x24]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.Connection:close_r_n
call fcn.004027b0
mov byte [esp + 0x74], 0x1a
mov eax, dword [esp + 0x48]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x5c], esp
mov esi, esp
push eax
call fcn.00402c00
add eax, 0x10
add esp, 4
mov dword [esi], eax
push 1
mov byte [esp + 0x7c], 0x10
call fcn.00404040
mov eax, dword [esp + 0x34]
add esp, 0x20
cmp dword [eax - 0xc], 5
jle 0x401a29
push 5
push 0
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x20]
call fcn.00401f80
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x60], 0x1b
call fcn.00402b80
mov byte [esp + 0x5c], 0x10
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x401a29
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x44]
push str.randCode
push ecx
lea ecx, [esp + 0x1c]
call fcn.00402250
add esp, 8
mov byte [esp + 0x5c], 0x1c
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x24]
call fcn.004023a0
mov byte [esp + 0x5c], 0x10
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x401a79
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
call fcn.00402750
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x28]
push eax
mov eax, dword [esp + 0x28]
cmp dword [eax - 4], 1
mov ecx, dword [eax - 0xc]
push ecx
jle 0x401aad
push ecx
lea ecx, [esp + 0x30]
call fcn.004025f0
mov eax, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x2c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x58], esp
mov esi, esp
push eax
call fcn.00402c00
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x78], 0x1d
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
mov dword [esp + 0x6c], esp
mov esi, esp
push eax
call fcn.00402c00
add eax, 0x10
add esp, 4
mov dword [esi], eax
push 1
mov byte [esp + 0x7c], 0x10
call fcn.00404040
lea eax, [edi - 0x10]
add esp, 0x20
mov byte [esp + 0x5c], 0xc
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x401b17
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0xb
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401b3c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 9
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401b61
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 8
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401b86
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 7
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401bab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 6
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401bd0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 5
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401bf5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 4
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401c1a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 3
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401c3f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 2
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401c64
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 1
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401c89
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401cae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x5c], 0xffffffff
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401cd6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x50
ret