Function at 0x4196f3
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov eax, dword [0x582050]
test eax, eax
je 0x419728
push eax
mov ebx, eax
call fcn.004011c6
inc eax
push eax
call fcn.0043f274
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x419739
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_69.0.3497.100_Safari_537.36
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
push dword [ebp + 8]
call fcn.00410d4f
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x419857
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x419867
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x419877
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x419887
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419897
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4198a7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4198b7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4198c7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4198d7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4198e7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4198f7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419907
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419917
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x419927
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41993b
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 8
call fcn.0043f274
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_122.0.0.0_Safari_537.36_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.7
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
push 0
push dword [ebp + 8]
call fcn.00405f3c
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x419a51
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x419a61
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419a71
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419a81
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x419a91
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x419aa1
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x419ab1
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x419ac1
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419ad1
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x443bc0
call fcn.0043f26e
add esp, 0x10
call fcn.0043f268
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x419b07
mov eax, 0x514a96
push eax
push 1
mov ebx, 0x4439a0
call fcn.0043f26e
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x419b2d
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419b41
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov eax, str..com
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, 0x5148bb
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call fcn.004028d1
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x419b90
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x419ba0
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, str.__iframe_
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.__iframe____
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004028d1
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x419bec
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419bfc
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, 0x514a01
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, str.src_
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004028d1
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x419c48
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x419c58
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x419c68
push ebx
call fcn.0043f268
add esp, 4
push dword [ebp - 0x44]
push str..com_
push dword [ebp - 0x1c]
mov ecx, 3
call fcn.00401231
add esp, 0xc
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419c93
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x419ca3
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 8
call fcn.0043f274
add esp, 4
mov dword [ebp - 0x58], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_122.0.0.0_Safari_537.36_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.7
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.00405f3c
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x419dd1
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x419de4
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x419df7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x419e0a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x419e1d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x419e2d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x419e3d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x419e4d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x419e5d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x419e6d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x58]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x443bc0
call fcn.0043f26e
add esp, 0x10
call fcn.0043f268
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x90]
test eax, eax
jne 0x419ea6
mov eax, 0x514a96
push eax
push 1
mov ebx, 0x4439a0
call fcn.0043f26e
add esp, 0x10
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x419ed2
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419ee9
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov eax, str..com
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, 0x5148bb
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call fcn.004028d1
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x419f38
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x419f48
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0x51c944
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x521a45
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004028d1
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x419f94
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419fa4
push ebx
call fcn.0043f268
add esp, 4
push dword [ebp - 0x30]
push str..com
push dword [ebp - 0x1c]
mov ecx, 3
call fcn.00401231
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419fcf
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x419fdf
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, 0x51c944
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, str.sign:
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004028d1
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41a02b
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41a03b
push ebx
call fcn.0043f268
add esp, 4
push str.websignwebsignkeyQuAXves1
push dword [ebp - 0x48]
push str.actiondownprocesssigns_3Fctdfsign
mov ecx, 3
call fcn.00401231
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41a068
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x5211a5
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, 0x521a9d
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp + 8]
call fcn.004028d1
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41a0b3
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41a0c3
push ebx
call fcn.0043f268
add esp, 4
push str._r_nSec_Fetch_Dest:_iframe_r_nSec_Fetch_Mode:_navigate_r_nSec_Fetch_Site:_same_origin_r_nUpgrade_Insecure_Requests:_1_r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_123.0.0.0_Safari_537.36_Edg_123.0.0.0_r_nsec_ch_ua:__Microsoft_Edge__v_123____Not:A_Brand__v_8____Chromium__v_123__r_nsec_ch_ua_mobile:__0_r_nsec_ch_ua_platform:__Windows_
mov ebx, dword [ebp + 8]
push dword [ebx]
push str._r_nReferer:
push dword [ebp - 0x60]
push str.HTTP_1.1_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.7_r_nAccept_Encoding:_gzip__deflate__br__zstd_r_nAccept_Language:_zh_CN_zh_q0.9_en_q0.8_en_GB_q0.7_en_US_q0.6_r_nConnection:_keep_alive_r_nHost:
mov ecx, 5
call fcn.00401231
add esp, 0x14
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41a0fa
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push 8
call fcn.0043f274
add esp, 4
mov dword [ebp - 0x74], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x90], 0
push 0
push dword [ebp - 0x90]
mov dword [ebp - 0x94], 0
push 0
lea eax, [ebp - 0x94]
push eax
mov dword [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0xa0], 0
push 0
lea eax, [ebp - 0xa0]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
lea eax, [ebp - 0x34]
push eax
call fcn.00405f3c
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41a237
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41a247
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41a25a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x41a26d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41a27d
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41a290
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41a2a3
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41a2b6
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41a2c9
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41a2d9
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x74]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x443bc0
call fcn.0043f26e
add esp, 0x10
call fcn.0043f268
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x41a312
mov eax, 0x514a96
push eax
push 1
mov ebx, 0x4439a0
call fcn.0043f26e
add esp, 0x10
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x41a33e
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0xa8]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41a355
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
push 0
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov eax, 0x5148bb
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov eax, 0x5218c4
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 8]
push eax
call fcn.00402b6f
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41a419
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41a429
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a439
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a449
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41a459
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41a469
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41a479
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41a489
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41a499
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41a4a9
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x514a01
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.dom_:_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004028d1
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41a4f5
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41a505
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41a515
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov eax, 0x5148bb
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5218c4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
lea eax, [ebp - 8]
push eax
call fcn.00402b6f
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41a5ea
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41a5fa
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41a60a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41a61a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41a62a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x41a63a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41a64a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41a65a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41a66a
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41a67a
push ebx
call fcn.0043f268
add esp, 4
mov dword [ebp - 0x90], 0
push 0
push dword [ebp - 0x90]
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
mov eax, 0x514a01
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
mov eax, str.url_:_
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004028d1
mov dword [ebp - 0xa0], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41a6e7
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x41a6fa
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x41a70d
push ebx
call fcn.0043f268
add esp, 4
push dword [ebp - 0xa0]
push str._file_
push dword [ebp - 0x54]
mov ecx, 3
call fcn.00401231
add esp, 0xc
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41a73e
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41a751
push ebx
call fcn.0043f268
add esp, 4
mov eax, dword [ebp - 0xa4]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41a768
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
test eax, eax
je 0x41a788
push eax
mov ebx, eax
call fcn.004011c6
inc eax
push eax
call fcn.0043f274
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x41a78d
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a79e
push ebx
call fcn.0043f268
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41a7ae
push ebx
call fcn.0043f268
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4