Function at 0x401cf0
Capabilities:
Contain obfuscated stackstrings
Hash data with md5

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41ba75
mov eax, dword fs:[0]
push eax
sub esp, 0xadc
mov eax, dword [0x4224a0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0xb
mov esi, str.http:__tj.yypdf.cn_report_tj_crashrecords.php
lea edi, [ebp - 0x8c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, 0xf
mov dword [ebp - 0x2b0], edi
xor ebx, ebx
push 0x1ff
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x28b]
push ebx
push eax
mov dword [ebp - 0x2b4], ebx
mov byte [ebp - 0x2c4], bl
mov byte [ebp - 0x28c], bl
call fcn.00413e90
add esp, 0xc
lea esi, [ebp - 0x2a8]
call fcn.004053f0
cmp dword [eax + 0x14], 0x10
jb 0x401d7c
mov eax, dword [eax]
push str.YYPdfReader_
push eax
push str._s_s
lea edx, [ebp - 0x28c]
call fcn.00402b60
add esp, 0xc
cmp dword [ebp - 0x294], 0x10
jb 0x401dad
mov ecx, dword [ebp - 0x2a8]
push ecx
call fcn.0040aa31
add esp, 4
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x28c]
push 0x200
push eax
mov dword [ebp - 0x1c], 0x666e6f63
mov dword [ebp - 0x18], 0x692e6769
mov word [ebp - 0x14], 0x696e
mov byte [ebp - 0x12], bl
call fcn.0040af84
mov esi, dword [0x41c008]
add esp, 0xc
lea ecx, [ebp - 0x28c]
push ecx
push 0x20
xor eax, eax
lea edx, [ebp - 0x5c]
push edx
push 0x41f210
push str.userid
push str.Setting
mov byte [ebp - 0x5c], bl
mov dword [ebp - 0x5b], eax
mov dword [ebp - 0x57], eax
mov dword [ebp - 0x53], eax
mov dword [ebp - 0x4f], eax
mov dword [ebp - 0x4b], eax
mov dword [ebp - 0x47], eax
mov dword [ebp - 0x43], eax
mov word [ebp - 0x3f], ax
mov byte [ebp - 0x3d], al
call esi
xor eax, eax
mov dword [ebp - 0x3b], eax
mov dword [ebp - 0x37], eax
mov dword [ebp - 0x33], eax
mov dword [ebp - 0x2f], eax
mov dword [ebp - 0x2b], eax
mov dword [ebp - 0x27], eax
mov dword [ebp - 0x23], eax
mov word [ebp - 0x1f], ax
mov byte [ebp - 0x1d], al
lea eax, [ebp - 0x28c]
push eax
push 0x20
lea ecx, [ebp - 0x3c]
push ecx
push str.2.0.2.5
push str.version
push str.Setting
mov byte [ebp - 0x3c], bl
call esi
push 1
push 0x41f234
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x358], edi
mov dword [ebp - 0x35c], ebx
mov byte [ebp - 0x36c], bl
call fcn.00401220
push edi
mov eax, str._Crash_BbBzExe_
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 1
call fcn.004029c0
push 1
mov eax, 0x41f238
lea ecx, [ebp - 0x36c]
call fcn.004029c0
push 1
mov eax, 0x41f23c
lea ecx, [ebp - 0x2c4]
call fcn.004029c0
push 0x10
mov eax, 0x41f240
lea ecx, [ebp - 0x2c4]
call fcn.004029c0
mov dword [ebp - 0x2e8], edi
mov dword [ebp - 0x2ec], ebx
mov byte [ebp - 0x2fc], bl
lea eax, [ebp - 0x3c]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401ee7
sub eax, esi
push eax
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x2fc]
call fcn.00401220
mov byte [ebp - 4], 2
push 0xb
push str._version_:_
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2cc], edi
mov dword [ebp - 0x2d0], ebx
mov byte [ebp - 0x2e0], bl
call fcn.00401220
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x2fc]
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 3
call fcn.00402ae0
add esp, 4
mov ecx, eax
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 4
call fcn.00402b80
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x2c4]
mov byte [ebp - 4], 5
call fcn.004028d0
mov esi, 0x10
cmp dword [ebp - 0x304], esi
jb 0x401f88
mov ecx, dword [ebp - 0x318]
push ecx
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x304], edi
mov dword [ebp - 0x308], ebx
mov byte [ebp - 0x318], bl
cmp dword [ebp - 0x294], esi
jb 0x401fb1
mov edx, dword [ebp - 0x2a8]
push edx
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x294], edi
mov dword [ebp - 0x298], ebx
mov byte [ebp - 0x2a8], bl
cmp dword [ebp - 0x2cc], esi
jb 0x401fda
mov eax, dword [ebp - 0x2e0]
push eax
call fcn.0040aa31
add esp, 4
mov byte [ebp - 4], 1
mov dword [ebp - 0x2cc], edi
mov dword [ebp - 0x2d0], ebx
mov byte [ebp - 0x2e0], bl
cmp dword [ebp - 0x2e8], esi
jb 0x402007
mov ecx, dword [ebp - 0x2fc]
push ecx
call fcn.0040aa31
add esp, 4
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x2e8], edi
mov dword [ebp - 0x2ec], ebx
mov byte [ebp - 0x2fc], bl
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x402020
sub eax, edx
push eax
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x2fc]
call fcn.00401220
mov byte [ebp - 4], 6
push 0xe
push str._channel_id_:_
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2cc], edi
mov dword [ebp - 0x2d0], ebx
mov byte [ebp - 0x2e0], bl
call fcn.00401220
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x2fc]
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 7
call fcn.00402ae0
add esp, 4
mov ecx, eax
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 8
call fcn.00402b80
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x2c4]
mov byte [ebp - 4], 9
call fcn.004028d0
mov esi, 0x10
cmp dword [ebp - 0x294], esi
jb 0x4020c1
mov ecx, dword [ebp - 0x2a8]
push ecx
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x294], edi
mov dword [ebp - 0x298], ebx
mov byte [ebp - 0x2a8], bl
cmp dword [ebp - 0x304], esi
jb 0x4020ea
mov edx, dword [ebp - 0x318]
push edx
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x304], edi
mov dword [ebp - 0x308], ebx
mov byte [ebp - 0x318], bl
cmp dword [ebp - 0x2cc], esi
jb 0x402113
mov eax, dword [ebp - 0x2e0]
push eax
call fcn.0040aa31
add esp, 4
mov byte [ebp - 4], 1
mov dword [ebp - 0x2cc], edi
mov dword [ebp - 0x2d0], ebx
mov byte [ebp - 0x2e0], bl
cmp dword [ebp - 0x2e8], esi
jb 0x402140
mov ecx, dword [ebp - 0x2fc]
push ecx
call fcn.0040aa31
add esp, 4
lea ebx, [ebp - 0x2fc]
call fcn.00401ad0
mov esi, eax
mov byte [ebp - 4], 0xa
push 7
xor ebx, ebx
mov edi, 0xf
push str._mac_:_
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2cc], edi
mov dword [ebp - 0x2d0], ebx
mov byte [ebp - 0x2e0], bl
call fcn.00401220
lea edx, [ebp - 0x318]
push edx
mov eax, esi
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 0xb
call fcn.00402ae0
add esp, 4
mov ecx, eax
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 0xc
call fcn.00402b80
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x2c4]
mov byte [ebp - 4], 0xd
call fcn.004028d0
mov esi, 0x10
cmp dword [ebp - 0x294], esi
jb 0x4021d8
mov eax, dword [ebp - 0x2a8]
push eax
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x294], edi
mov dword [ebp - 0x298], ebx
mov byte [ebp - 0x2a8], bl
cmp dword [ebp - 0x304], esi
jb 0x402201
mov ecx, dword [ebp - 0x318]
push ecx
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x304], edi
mov dword [ebp - 0x308], ebx
mov byte [ebp - 0x318], bl
cmp dword [ebp - 0x2cc], esi
jb 0x40222a
mov edx, dword [ebp - 0x2e0]
push edx
call fcn.0040aa31
add esp, 4
mov byte [ebp - 4], 1
mov dword [ebp - 0x2cc], edi
mov dword [ebp - 0x2d0], ebx
mov byte [ebp - 0x2e0], bl
cmp dword [ebp - 0x2e8], esi
jb 0x402257
mov eax, dword [ebp - 0x2fc]
push eax
call fcn.0040aa31
add esp, 4
push 0xe
push str._recoridlist_:
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 0x2e8], edi
mov dword [ebp - 0x2ec], ebx
mov byte [ebp - 0x2fc], bl
call fcn.00401220
lea eax, [ebp - 0x36c]
lea ecx, [ebp - 0x2fc]
lea ebx, [ebp - 0x2a8]
mov byte [ebp - 4], 0xe
call fcn.00402bc0
xor edi, edi
push edi
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x2c4]
mov byte [ebp - 4], 0xf
call fcn.004028d0
mov esi, 0x10
cmp dword [ebp - 0x294], esi
jb 0x4022c8
mov ecx, dword [ebp - 0x2a8]
push ecx
call fcn.0040aa31
add esp, 4
mov byte [ebp - 4], 1
mov dword [ebp - 0x294], 0xf
mov dword [ebp - 0x298], edi
mov byte [ebp - 0x2a8], 0
cmp dword [ebp - 0x2e8], esi
jb 0x4022fa
mov edx, dword [ebp - 0x2fc]
push edx
call fcn.0040aa31
add esp, 4
push 1
mov eax, 0x41f28c
lea ecx, [ebp - 0x2c4]
call fcn.004029c0
mov byte [ebp - 4], 0
cmp dword [ebp - 0x358], esi
jb 0x402327
mov eax, dword [ebp - 0x36c]
push eax
call fcn.0040aa31
add esp, 4
push str.__456__123
lea ecx, [ebp - 0x2c4]
push ecx
lea edx, [ebp - 0x2a8]
push edx
call fcn.00402c00
add esp, 0xc
mov byte [ebp - 4], 0x10
mov ecx, dword [eax + 0x10]
mov byte [ebp - 0x38c], 0
mov dword [ebp - 0x3e0], edi
mov dword [ebp - 0x3e4], edi
mov dword [ebp - 0x3f4], 0x67452301
mov dword [ebp - 0x3f0], 0xefcdab89
mov dword [ebp - 0x3ec], 0x98badcfe
mov dword [ebp - 0x3e8], 0x10325476
cmp dword [eax + 0x14], esi
jb 0x40238b
mov eax, dword [eax]
push eax
mov eax, ecx
lea esi, [ebp - 0x3f4]
call fcn.00408490
lea edi, [ebp - 0x334]
mov eax, esi
call fcn.00408f20
mov esi, 0x10
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x294], esi
jb 0x4023c6
mov eax, dword [ebp - 0x2a8]
push eax
call fcn.0040aa31
add esp, 4
mov ecx, dword [ebp - 0x2c4]
xor eax, eax
mov dword [ebp - 0x294], 0xf
mov dword [ebp - 0x298], eax
mov byte [ebp - 0x2a8], al
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0x2b0], esi
jae 0x4023f8
lea ecx, [ebp - 0x2c4]
lea edx, [ebp - 0xae4]
push edx
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0xae0]
push eax
call fcn.00402e10
mov ebx, eax
test ebx, ebx
je 0x402741
cmp dword [ebp - 0xae4], 0
jbe 0x402741
mov edi, dword [ebp - 0xae4]
add edi, edi
push edi
mov dword [ebp - 0xae8], edi
call fcn.00409b70
push edi
mov esi, eax
push 0
push esi
call fcn.00413e90
add esp, 0x10
push 0x41f148
lea ecx, [ebp - 0x388]
call fcn.004027c0
lea ecx, [ebp - 0xae8]
push ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xae4]
push esi
push edx
push ebx
lea edi, [ebp - 0x388]
call fcn.004011b0
push ebx
mov edi, eax
call fcn.0040af79
add esp, 0x14
test edi, edi
jne 0x4024ae
lea ecx, [ebp - 0x388]
call fcn.00402800
lea ecx, [ebp - 0x334]
call fcn.00402800
lea ecx, [ebp - 0x2c4]
call fcn.00402800
jmp 0x40278a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xae8], esp
push esi
call fcn.004027c0
lea ebx, [ebp - 0x2a8]
call fcn.00401940
add esp, 0x1c
mov edi, eax
lea eax, [ebp - 0x2c4]
cmp eax, edi
je 0x402550
cmp dword [ebp - 0x2b0], 0x10
jb 0x4024f1
mov ecx, dword [ebp - 0x2c4]
push ecx
call fcn.0040aa31
add esp, 4
xor ebx, ebx
mov dword [ebp - 0x2b0], 0xf
mov dword [ebp - 0x2b4], ebx
mov byte [ebp - 0x2c4], bl
cmp dword [edi + 0x14], 0x10
jae 0x402526
mov eax, dword [edi + 0x10]
inc eax
push eax
lea edx, [ebp - 0x2c4]
push edi
push edx
call fcn.0040a6d0
add esp, 0xc
jmp 0x402530
mov eax, dword [edi]
mov dword [ebp - 0x2c4], eax
mov dword [edi], ebx
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x2b4], ecx
mov edx, dword [edi + 0x14]
mov dword [ebp - 0x2b0], edx
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
jmp 0x402552
xor ebx, ebx
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x13
call fcn.00402800
cmp esi, ebx
je 0x40256e
push esi
call fcn.0040af79
add esp, 4
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x350]
call fcn.004027c0
lea ecx, [ebp - 0x350]
push ecx
mov eax, str._data
mov byte [ebp - 4], 0x15
call fcn.00402830
push str.sgin
lea edx, [ebp - 0x2c4]
push edx
lea eax, [ebp - 0x318]
push eax
call fcn.00402c00
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x334]
lea ebx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x16
call fcn.00402bc0
xor ebx, ebx
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x350]
mov byte [ebp - 4], 0x17
call fcn.004028d0
lea ecx, [ebp - 0x2a8]
call fcn.00402800
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x15
call fcn.00402800
xor esi, esi
jmp 0x402602
xor ebx, ebx
push 0xc
mov dword [ebp - 0x1c], 1
call fcn.0040aa8d
add esp, 4
cmp eax, ebx
je 0x402621
mov dword [eax], ebx
mov dword [eax + 8], ebx
mov dword [eax + 4], ebx
jmp 0x402623
xor eax, eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x33c], 0x10
mov ecx, dword [ebp - 0x350]
jae 0x40263f
lea ecx, [ebp - 0x350]
lea edx, [ebp - 0x1c]
push edx
call fcn.00403a40
cmp eax, ebx
je 0x402689
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp eax, ebx
je 0x402689
mov ecx, 0x41f2bc
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402680
cmp dl, bl
je 0x40267c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402680
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x402660
xor eax, eax
jmp 0x402685
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4026a1
lea ebx, [ebp - 0x1c]
mov byte [ebp - 4], 0x15
call fcn.004039f0
inc esi
cmp esi, 3
jl 0x402600
jmp 0x4026a9
lea ebx, [ebp - 0x1c]
call fcn.004039f0
mov esi, 0x10
cmp dword [ebp - 0x33c], esi
jb 0x4026c5
mov ecx, dword [ebp - 0x350]
push ecx
call fcn.0040aa31
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 0x33c], edi
mov dword [ebp - 0x340], ebx
mov byte [ebp - 0x350], bl
cmp dword [ebp - 0x374], esi
jb 0x4026f5
mov edx, dword [ebp - 0x388]
push edx
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x374], edi
mov dword [ebp - 0x378], ebx
mov byte [ebp - 0x388], bl
cmp dword [ebp - 0x320], esi
jb 0x40271e
mov eax, dword [ebp - 0x334]
push eax
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x320], edi
mov dword [ebp - 0x324], ebx
mov byte [ebp - 0x334], bl
cmp dword [ebp - 0x2b0], esi
jb 0x40278a
mov ecx, dword [ebp - 0x2c4]
push ecx
jmp 0x402782
cmp dword [ebp - 0x320], esi
jb 0x402758
mov edx, dword [ebp - 0x334]
push edx
call fcn.0040aa31
add esp, 4
mov dword [ebp - 0x320], 0xf
mov dword [ebp - 0x324], 0
mov byte [ebp - 0x334], 0
cmp dword [ebp - 0x2b0], esi
jb 0x40278a
mov eax, dword [ebp - 0x2c4]
push eax
call fcn.0040aa31
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040a547
mov esp, ebp
pop ebp
ret