Function at 0x40868d
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov dword [ebp - 4], 0
mov eax, 0x53e170
push eax
mov ebx, dword [0x775728]
test ebx, ebx
je 0x4086b6
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [0x775728], eax
push 0
push 0x53f1bd
push 0xffffffffffffffff
push 8
push 0x1601000d
push 0x52010002
call fcn.004301d9
add esp, 0x18
call fcn.00409008
push 0
push 0x53f1ca
push 0xffffffffffffffff
push 8
push 0x1601000d
push 0x52010002
call fcn.004301d9
add esp, 0x18
mov eax, 0x53e170
push eax
mov ebx, dword [0x775714]
test ebx, ebx
je 0x408714
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [0x775714], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
call fcn.0040bde1
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
push str.public_attachImage.php_t
push dword [0x775728]
mov ecx, 3
call fcn.0040106f
add esp, 0xc
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40875c
push ebx
call fcn.004301c1
add esp, 4
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push 0
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 8
call fcn.004301bb
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_56.0.2924.90_Safari_537.36_2345Explorer_9.5.0.17997_r_nAccept:_image_jpeg__application_x_ms_application__image_gif__application_xamlxml__image_pjpeg__application_x_ms_xbap__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword____r_nHost:_wx77333.com
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 1
push 0x775718
push 1
push 0x775714
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
lea eax, [ebp - 0x10]
push eax
call fcn.00409aef
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x408863
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408873
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408883
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408893
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4088a3
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4088b3
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4088c3
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4088d3
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x434490
call fcn.004301d3
add esp, 0x10
call fcn.004301c1
add esp, 4
push 0
push dword [ebp - 0x50]
push 0xffffffffffffffff
push 0xa
push 0x16014572
push 0x52010002
call fcn.004301d9
add esp, 0x18
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408921
push ebx
call fcn.004301c1
add esp, 4
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov eax, 0x53e3da
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov eax, 0x53f35d
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 0x775728
call fcn.00401d39
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40896e
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40897e
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0x77572c]
test ebx, ebx
je 0x408995
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [0x77572c], eax
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 8
call fcn.004301bb
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
push 0x775718
push 1
push 0x775714
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
push 0x775728
call fcn.00409aef
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408aa7
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x408ab7
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x408ac7
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x408ad7
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x408ae7
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x408af7
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408b07
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x434490
call fcn.004301d3
add esp, 0x10
call fcn.004301c1
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x408b3d
mov eax, 0x53e1e8
push eax
push 1
mov ebx, 0x431e00
call fcn.004301d3
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x408b63
push ebx
call fcn.004301c1
add esp, 4
lea eax, [ebp - 0x4c]
push eax
call fcn.0040663e
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408b7f
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x408b93
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x775718
push 0x775714
call fcn.00405588
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [0x775714]
test ebx, ebx
je 0x408bc0
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [0x775714], eax
push str.tpl_x590_ver1_index.shtml
push dword [0x775728]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 8
call fcn.004301bb
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
push 0x775718
push 1
push 0x775714
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
lea eax, [ebp - 8]
push eax
call fcn.00409aef
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x408cec
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x408cfc
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408d0c
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x408d1c
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x408d2c
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x408d3c
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x408d4c
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x408d5c
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x434490
call fcn.004301d3
add esp, 0x10
call fcn.004301c1
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x408d92
mov eax, 0x53e1e8
push eax
push 1
mov ebx, 0x431e00
call fcn.004301d3
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x408db8
push ebx
call fcn.004301c1
add esp, 4
lea eax, [ebp - 0x50]
push eax
call fcn.0040663e
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x408dd4
push ebx
call fcn.004301c1
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x408de8
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x408e08
push eax
mov ebx, eax
call fcn.00401004
inc eax
push eax
call fcn.004301bb
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x775730]
test ebx, ebx
je 0x408e1c
push ebx
call fcn.004301c1
add esp, 4
pop eax
mov dword [0x775730], eax
push 0
mov ebx, 0x4306d0
call fcn.004301d3
add esp, 4
mov dword [ebp - 8], eax
push str._1.jpg
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x408e5f
push ebx
call fcn.004301c1
add esp, 4
push 0xffffffffffffffff
push 0xa
push 0x16014572
push 0x52010002
call fcn.004301df
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x408e8b
mov eax, 0x53e1e8
push eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x408e9f
mov eax, 0x53e170
push eax
push 2
mov ebx, 0x432630
call fcn.004301d3
add esp, 0x1c
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x408ec2
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x408ed2
push ebx
call fcn.004301c1
add esp, 4
cmp dword [ebp + 8], 1
jne 0x408f5c
push 0xffffffffffffffff
push 0xa
push 0x16014572
push 0x52010002
call fcn.004301df
add esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, 0x53e1e8
xor ecx, ecx
test eax, eax
je 0x408f03
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0xc]
xor ebx, ebx
test eax, eax
je 0x408f14
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x408f2b
dec eax
test ecx, ecx
je 0x408f2b
call fcn.004024bb
add esp, 0xc
test eax, eax
mov eax, 0
setne al
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x408f4b
push ebx
call fcn.004301c1
add esp, 4
cmp dword [ebp - 0x10], 0
je 0x408f5c
mov eax, 1
jmp 0x408f61
mov eax, 0
test eax, eax
je 0x408ff2
push 0xffffffffffffffff
push 0xa
push 0x16014572
push 0x52010002
call fcn.004301df
add esp, 0x10
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040c2b7
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x408fb7
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x408fc7
push ebx
call fcn.004301c1
add esp, 4
push 0
push dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0x16014573
push 0x52010002
call fcn.004301d9
add esp, 0x18
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x408ff2
push ebx
call fcn.004301c1
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x409002
push ebx
call fcn.004301c1
add esp, 4
mov esp, ebp
pop ebp
ret 4