Function at 0x460a70
Capabilities:
Check http status code
Contain obfuscated stackstrings
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x558295
mov eax, dword fs:[0]
push eax
sub esp, 0x540
push esi
push edi
mov eax, dword [0x5bf364]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], 0
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [0x5d7a9c]
cmp eax, dword [esi + 4]
jg 0x463d8a
mov eax, dword [0x5d7acc]
cmp eax, dword [esi + 4]
jg 0x463df6
mov eax, dword [0x5d7afc]
cmp eax, dword [esi + 4]
jg 0x463e62
mov eax, dword [0x5d7b2c]
cmp eax, dword [esi + 4]
jg 0x463ece
mov eax, dword [0x5d7b5c]
cmp eax, dword [esi + 4]
jg 0x463f3a
mov eax, dword [0x5d7b8c]
cmp eax, dword [esi + 4]
jg 0x463fa6
mov eax, dword [0x5d7bbc]
cmp eax, dword [esi + 4]
jg 0x464012
mov eax, dword [0x5d7bec]
cmp eax, dword [esi + 4]
jg 0x46407e
mov eax, dword [0x5d7c1c]
cmp eax, dword [esi + 4]
jg 0x4640ea
mov eax, dword [0x5d7c4c]
cmp eax, dword [esi + 4]
jg 0x464156
mov eax, dword [0x5d7c7c]
cmp eax, dword [esi + 4]
jg 0x4641c2
lea ecx, [ebp - 0x2ac]
call fcn.0043f960
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x3fc]
call fcn.004422e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa4]
push 0
call fcn.004642d0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1dc]
call fcn.00405c90
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1b0]
call fcn.00405c90
mov byte [ebp - 4], 0x1d
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0
mov byte [ebp - 4], 0x1e
mov dword [ebp - method.CMStringArray.virtual_0], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x1f
push ecx
lea ecx, [ebp - 0x178]
mov dword [ebp - method.CMStringArray.virtual_0], vtable.rg_n1::rg_n1959.0
call fcn.00404e70
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
call fcn.00405c90
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], str._r_n_r_n
mov byte [ebp - 4], 0x23
mov edi, 0x580994
mov ecx, dword [ebp - 0x88]
test ecx, ecx
jne 0x460c48
cmp dword [ebp - 0x70], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0x78]
mov eax, dword [0x5d7adc]
test eax, eax
jne 0x460c61
cmp dword [0x5d7af4], 0
mov eax, edi
cmovne eax, dword [0x5d7aec]
push 1
push 1
push ecx
lea edx, [ebp - 0x178]
mov ecx, eax
call fcn.00496650
add esp, 0xc
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x21
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x94], vtable.CVolObject.0
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x460caa
cmp dword [esi + 0x24], eax
mov eax, 0x580994
je 0x460caa
mov eax, dword [esi + 0x1c]
mov ecx, 0x588db8
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x460cd6
test dx, dx
je 0x460cd2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x460cd6
add eax, 4
add ecx, 4
test dx, dx
jne 0x460cb0
xor eax, eax
jmp 0x460cdb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x461c4b
mov dword [ebp - 0x94], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x94], vtable.CVolObject.0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x94], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x28
push ecx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x94], vtable.rg_n1::rg_n1959.0
call fcn.00404e70
mov byte [ebp - 4], 0x2a
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov byte [ebp - 4], 0x2b
mov dword [ebp - method.CMStringArray.virtual_0], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x2c
push ecx
lea ecx, [ebp - 0xf4]
mov dword [ebp - method.CMStringArray.virtual_0], vtable.rg_n1::rg_n1959.0
call fcn.00404e70
mov byte [ebp - 4], 0x2e
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0
mov byte [ebp - 4], 0x2f
mov dword [ebp - method.CMStringArray.virtual_0], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x30
push ecx
lea ecx, [ebp - 0x1fc]
mov dword [ebp - method.CMStringArray.virtual_0], vtable.rg_n1::rg_n1959.0
call fcn.00404e70
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x580994
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xd0]
call fcn.00405c90
mov byte [ebp - 4], 0x35
mov dword [ebp - 0xd0], vtable.CWConstString.0
mov dword [ebp - 0xc4], 0x580994
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x12c]
call fcn.00405c90
mov byte [ebp - 4], 0x37
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x120], 0x580994
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x158]
call fcn.00405c90
mov byte [ebp - 4], 0x39
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x14c], 0x580994
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x234]
call fcn.00405c90
mov byte [ebp - 4], 0x3b
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x228], 0x580994
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x68]
call fcn.00405c90
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x100]
or dword [ebp - 0x90], 1
push ecx
or dword [ebp - 0xfc], 1
lea ecx, [ebp - 0x208]
push ecx
push ecx
push 0
or dword [ebp - 0x204], 1
lea ecx, [ebp - 0x3c]
or dword [eax + 4], 1
push 0xbb8
push ecx
lea ecx, [ebp - 0xd0]
push ecx
lea ecx, [ebp - 0x12c]
push ecx
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x184]
push ecx
push eax
push 0
push dword [ebp + 0x10]
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.0043fc30
mov esi, eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3fc]
mov edx, dword [ebp - 0x3fc]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x3f8], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0x3fc]
push esi
call fcn.004424d0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x54c]
call fcn.00428990
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x224]
call fcn.00405c00
mov byte [ebp - 4], 0x3a
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x148]
call fcn.00405c00
mov byte [ebp - 4], 0x38
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x11c]
call fcn.00405c00
mov byte [ebp - 4], 0x36
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov byte [ebp - 4], 0x34
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x1fc]
mov dword [ebp + 0xc], eax
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CMStringArray.0
mov byte [ebp - 4], 0x52
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x1f8]
call fcn.00405c00
mov byte [ebp - 4], 0x2e
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0xf4]
mov dword [ebp + 0x14], eax
mov dword [ebp - 0xf4], vtable.CMStringArray.0
mov byte [ebp - 4], 0x56
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0xf0]
call fcn.00405c00
mov byte [ebp - 4], 0x2a
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0x88]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x88], vtable.CMStringArray.0
mov byte [ebp - 4], 0x5a
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x94], vtable.CVolObject.0
cmp eax, 0x12e
je 0x4615b6
cmp eax, 0x12d
je 0x4615b6
mov eax, dword [0x5c7988]
mov dword [0x5c7978], 0
test eax, eax
je 0x4610f3
push eax
mov eax, dword [0x5c797c]
mov ecx, 0x5c797c
call dword [eax + 0xc]
push 0x588db8
mov ecx, 0x5c797c
mov dword [0x5c7988], 0
mov dword [0x5c7990], 0
mov dword [0x5c798c], 0
call fcn.004993c0
push dword [ebp + 0x10]
mov ecx, 0x5c7998
call fcn.00412e50
push 0x5d7c20
mov ecx, 0x5c7a1c
call fcn.00412e50
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x96
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.User_Agent:
mov byte [ebp - 4], 0x97
lea edx, [ebp - 0x3c]
push 0x5d7c20
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0x98
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x461185
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x461185
mov ecx, dword [eax + 0x1c]
push ecx
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0x97
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x3c], vtable.CVolObject.0
call fcn.00405c90
mov byte [ebp - 4], 0x9e
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], str.vip.123pan.cn
mov byte [ebp - 4], 0x9f
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x4611fe
cmp dword [ebp - 0x70], 0
mov eax, edi
cmovne eax, dword [ebp - 0x78]
push 0
push 1
push 0
push eax
mov ecx, 0x5c7998
call fcn.0049d2e0
mov esi, eax
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x94], vtable.CVolObject.0
cmp esi, 0xffffffff
je 0x461364
lea ecx, [ebp - 0x100]
call fcn.00405c90
mov byte [ebp - 4], 0xa3
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0xf4], str.https:__vip.123pan.cn_
mov byte [ebp - 4], 0xa4
lea ecx, [ebp - 0x94]
call fcn.00405c90
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x58e46c
mov byte [ebp - 4], 0xa6
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
jne 0x46129f
cmp dword [ebp - 0xdc], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x4612b2
cmp dword [ebp - 0x70], eax
cmovne edi, dword [ebp - 0x78]
mov eax, edi
push 1
sub esp, 8
push ecx
push eax
mov ecx, 0x5c7580
call fcn.0049c170
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0xa4
mov dword [ebp - 0x94], vtable.CVolObject.0
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0xf0]
call fcn.00405c00
mov byte [ebp - 4], 0x21
mov eax, dword [0x5c79e0]
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [0x5c79d0], 0
test eax, eax
je 0x46131e
push eax
mov eax, dword [0x5c79d4]
mov ecx, 0x5c79d4
call dword [eax + 0xc]
push str.https:__vip.123pan.cn_
mov ecx, 0x5c79d4
mov dword [0x5c79e0], 0
mov dword [0x5c79e8], 0
mov dword [0x5c79e4], 0
call fcn.004993c0
push str.Referer:https:__vip.123pan.cn_
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
jmp 0x461b5f
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0xad
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x58823c
mov byte [ebp - 4], 0xae
lea eax, [ebp - 0x3c]
push 0
push 0
push ecx
push 8
push eax
mov edx, 0x5c7998
lea ecx, [ebp - 0xd0]
call fcn.00436810
mov byte [ebp - 4], 0xaf
mov edx, eax
push 0x58823c
lea ecx, [ebp - 0x68]
call fcn.0049d910
add esp, 4
mov byte [ebp - 4], 0xb0
mov ecx, 0x5c79c4
push eax
call fcn.00412e50
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0xaf
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov byte [ebp - 4], 0xae
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov byte [ebp - 4], 0xb6
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x3c], vtable.CVolObject.0
call fcn.00405c90
mov byte [ebp - 4], 0xb8
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x58e46c
mov byte [ebp - 4], 0xb9
mov ecx, dword [0x5c79d0]
test ecx, ecx
jne 0x46144e
cmp dword [0x5c79e8], 0
mov ecx, edi
cmovne ecx, dword [0x5c79e0]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x461461
cmp dword [ebp - 0x70], eax
cmovne edi, dword [ebp - 0x78]
mov eax, edi
push 1
sub esp, 8
push ecx
push eax
mov ecx, 0x5c7580
call fcn.0049c170
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x94], vtable.CVolObject.0
call fcn.00405c90
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0xd0], vtable.CWConstString.0
mov dword [ebp - 0xc4], 0x58823c
mov byte [ebp - 4], 0xbe
lea eax, [ebp - 0xd0]
push 0
push 0
push ecx
push 8
push eax
mov edx, 0x5c7998
lea ecx, [ebp - 0x158]
call fcn.00436810
mov edx, eax
mov byte [ebp - 4], 0xbf
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0xc0
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.Referer:
mov byte [ebp - 4], 0xc1
lea ecx, [ebp - 0x12c]
push edx
lea edx, [ebp - 0x3c]
call fcn.0049d790
mov byte [ebp - 4], 0xc2
mov edx, eax
push 0x58823c
lea ecx, [ebp - 0x68]
call fcn.0049d910
add esp, 8
mov byte [ebp - 4], 0xc3
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x461535
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x461535
mov ecx, dword [eax + 0x1c]
push ecx
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xc4
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0xc2
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0xc6
lea ecx, [ebp - 0x11c]
call fcn.00405c00
mov byte [ebp - 4], 0xc1
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xc9
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0xbf
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x148]
call fcn.00405c00
mov byte [ebp - 4], 0xbe
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xce
jmp 0x461b46
mov eax, dword [0x5c7988]
mov dword [0x5c7978], 0
test eax, eax
je 0x4615d7
push eax
mov eax, dword [0x5c797c]
mov ecx, 0x5c797c
call dword [eax + 0xc]
push 0x588db8
mov ecx, 0x5c797c
mov dword [0x5c7988], 0
mov dword [0x5c7990], 0
mov dword [0x5c798c], 0
call fcn.004993c0
mov eax, dword [0x5c7998]
mov ecx, 0x5c7998
call dword [eax + 0x44]
mov eax, dword [ebp - 0x378]
mov ecx, 0x5c79a8
mov dword [0x5c799c], eax
mov eax, dword [ebp - 0x374]
mov dword [0x5c79a0], eax
mov eax, dword [ebp - 0x370]
mov dword [0x5c79a4], eax
mov eax, dword [0x5c79a8]
call dword [eax + 0x44]
lea eax, [ebp - 0x36c]
mov ecx, 0x5c79a8
push eax
call fcn.00405870
mov eax, dword [0x5c7a1c]
mov ecx, 0x5c7a1c
call dword [eax + 0x44]
mov eax, dword [0x5d7c24]
mov ecx, 0x5c7a2c
mov dword [0x5c7a20], eax
mov eax, dword [0x5d7c28]
mov dword [0x5c7a24], eax
mov eax, dword [0x5d7c2c]
mov dword [0x5c7a28], eax
mov eax, dword [0x5c7a2c]
call dword [eax + 0x44]
push 0x5d7c30
mov ecx, 0x5c7a2c
call fcn.00405870
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x5c
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.User_Agent:
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x3c]
push 0x5d7c20
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0x5e
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x4616e0
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x4616e0
mov ecx, dword [eax + 0x1c]
push ecx
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0x5d
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x3c], vtable.CVolObject.0
call fcn.00405c90
mov byte [ebp - 4], 0x64
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], str.aliyundrive
mov byte [ebp - 4], 0x65
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x461759
cmp dword [ebp - 0x70], 0
mov eax, edi
cmovne eax, dword [ebp - 0x78]
push 0
push 1
push 0
push eax
mov ecx, 0x5c7998
call fcn.0049d2e0
mov esi, eax
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x94], vtable.CVolObject.0
cmp esi, 0xffffffff
je 0x4618bf
lea ecx, [ebp - 0x100]
call fcn.00405c90
mov byte [ebp - 4], 0x69
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0xf4], str.https:__www.aliyundrive.com_
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x94]
call fcn.00405c90
mov byte [ebp - 4], 0x6b
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x58e46c
mov byte [ebp - 4], 0x6c
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
jne 0x4617fa
cmp dword [ebp - 0xdc], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x46180d
cmp dword [ebp - 0x70], eax
cmovne edi, dword [ebp - 0x78]
mov eax, edi
push 1
sub esp, 8
push ecx
push eax
mov ecx, 0x5c7580
call fcn.0049c170
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x6a
mov dword [ebp - 0x94], vtable.CVolObject.0
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xf0]
call fcn.00405c00
mov byte [ebp - 4], 0x21
mov eax, dword [0x5c79e0]
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [0x5c79d0], 0
test eax, eax
je 0x461879
push eax
mov eax, dword [0x5c79d4]
mov ecx, 0x5c79d4
call dword [eax + 0xc]
push str.https:__www.aliyundrive.com_
mov ecx, 0x5c79d4
mov dword [0x5c79e0], 0
mov dword [0x5c79e8], 0
mov dword [0x5c79e4], 0
call fcn.004993c0
push str.Referer:https:__www.aliyundrive.com_
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
jmp 0x461b5f
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x73
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x58823c
mov byte [ebp - 4], 0x74
lea eax, [ebp - 0x3c]
push 0
push 0
push ecx
push 8
push eax
mov edx, 0x5c7998
lea ecx, [ebp - 0xd0]
call fcn.00436810
mov byte [ebp - 4], 0x75
mov edx, eax
push 0x58823c
lea ecx, [ebp - 0x68]
call fcn.0049d910
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x76
mov ecx, 0x5c79c4
mov edx, dword [0x5c79c4]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x5c79c8], ecx
mov ecx, dword [esi + 8]
mov dword [0x5c79cc], ecx
mov ecx, 0x5c79d4
mov eax, dword [esi + 0xc]
mov dword [0x5c79d0], eax
mov eax, dword [0x5c79d4]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x5c79d4
push eax
call fcn.00405870
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0x75
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov byte [ebp - 4], 0x74
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x3c], vtable.CVolObject.0
call fcn.00405c90
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x58e46c
mov byte [ebp - 4], 0x7f
mov ecx, dword [0x5c79d0]
test ecx, ecx
jne 0x4619e3
cmp dword [0x5c79e8], 0
mov ecx, edi
cmovne ecx, dword [0x5c79e0]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x4619f6
cmp dword [ebp - 0x70], eax
cmovne edi, dword [ebp - 0x78]
mov eax, edi
push 1
sub esp, 8
push ecx
push eax
mov ecx, 0x5c7580
call fcn.0049c170
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x94], vtable.CVolObject.0
call fcn.00405c90
mov byte [ebp - 4], 0x83
mov dword [ebp - 0xd0], vtable.CWConstString.0
mov dword [ebp - 0xc4], 0x58823c
mov byte [ebp - 4], 0x84
lea eax, [ebp - 0xd0]
push 0
push 0
push ecx
push 8
push eax
mov edx, 0x5c7998
lea ecx, [ebp - 0x158]
call fcn.00436810
mov edx, eax
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x86
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.Referer:
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x12c]
push edx
lea edx, [ebp - 0x3c]
call fcn.0049d790
mov byte [ebp - 4], 0x88
mov edx, eax
push 0x58823c
lea ecx, [ebp - 0x68]
call fcn.0049d910
add esp, 8
mov byte [ebp - 4], 0x89
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x461aca
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x461aca
mov ecx, dword [eax + 0x1c]
push ecx
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0x88
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x11c]
call fcn.00405c00
mov byte [ebp - 4], 0x87
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x85
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x148]
call fcn.00405c00
mov byte [ebp - 4], 0x84
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov esi, dword [ebp + 8]
mov ecx, esi
call fcn.00405c90
mov byte [ebp - 4], 0xd0
mov ecx, esi
push 0x5891d8
mov dword [esi], vtable.CWString.0
call fcn.0049c380
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0xd1
lea eax, [ebp - 0x178]
mov dword [ebp + 0x10], eax
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CMStringArray.0
mov byte [ebp - 4], 0xd3
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0xd1
lea ecx, [ebp - 0x174]
call fcn.00405c00
mov byte [ebp - 4], 0x1d
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x1a0]
call fcn.00405c00
mov byte [ebp - 4], 0x1c
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x1cc]
call fcn.00405c00
mov byte [ebp - 4], 0x1b
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x18
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
call fcn.004644d0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3fc]
call fcn.00428990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ac]
call fcn.0043faf0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov edx, 0x588dc4
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x4622a5
lea ecx, [ebp - 0x208]
call fcn.00404ac0
mov edi, eax
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x100]
call fcn.00404ac0
mov esi, eax
mov byte [ebp - 4], 0xdb
lea ecx, [ebp - 0x94]
call fcn.00404ac0
mov edx, eax
mov byte [ebp - 4], 0xdc
lea ecx, [ebp - 0x234]
call fcn.00405c90
mov byte [ebp - 4], 0xdd
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x228], 0x580994
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x158]
call fcn.00405c90
mov byte [ebp - 4], 0xdf
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x14c], 0x580994
mov byte [ebp - 4], 0xe0
lea ecx, [ebp - 0x12c]
call fcn.00405c90
mov byte [ebp - 4], 0xe1
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x120], 0x580994
mov byte [ebp - 4], 0xe2
lea ecx, [ebp - 0xd0]
call fcn.00405c90
mov byte [ebp - 4], 0xe3
mov dword [ebp - 0xd0], vtable.CWConstString.0
mov dword [ebp - 0xc4], 0x580994
mov byte [ebp - 4], 0xe4
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0xe5
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x580994
mov byte [ebp - 4], 0xe6
lea ecx, [ebp - 0x68]
call fcn.00405c90
mov byte [ebp - 4], 0xe7
or dword [edi + 4], 1
push edi
or dword [esi + 4], 1
push esi
or dword [edx + 4], 1
or dword [eax + 4], 1
push edx
push ecx
push 0
push 0xbb8
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x12c]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x184]
push ecx
mov edi, dword [ebp + 0x10]
lea ecx, [ebp - 0x2ac]
push eax
push 0
push edi
lea eax, [ebp - 0x54c]
push eax
call fcn.0043fc30
mov esi, eax
mov byte [ebp - 4], 0xe8
lea ecx, [ebp - 0x3fc]
mov edx, dword [ebp - 0x3fc]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x3f8], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0x3fc]
push esi
call fcn.004424d0
mov byte [ebp - 4], 0xe7
lea ecx, [ebp - 0x54c]
call fcn.00428990
mov byte [ebp - 4], 0xe9
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0xe6
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0xec
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0xe4
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov byte [ebp - 4], 0xef
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov byte [ebp - 4], 0xe2
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov byte [ebp - 4], 0xf2
lea ecx, [ebp - 0x11c]
call fcn.00405c00
mov byte [ebp - 4], 0xe0
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xf5
lea ecx, [ebp - 0x148]
call fcn.00405c00
mov byte [ebp - 4], 0xde
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xf8
lea ecx, [ebp - 0x224]
call fcn.00405c00
mov byte [ebp - 4], 0xdc
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0xfa
lea eax, [ebp - 0x88]
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x88], vtable.CMStringArray.0
mov byte [ebp - 4], 0xfc
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0xdb
mov dword [ebp - 0x94], vtable.CVolObject.0
mov byte [ebp - 4], 0xfe
lea eax, [ebp - 0xf4]
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xf4], vtable.CMStringArray.0
mov dword [ebp - 4], 0x100
mov ecx, eax
call fcn.00492860
mov dword [ebp - 4], 0xfe
lea ecx, [ebp - 0xf0]
call fcn.00405c00
mov dword [ebp - 4], 0xda
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x102
lea eax, [ebp - 0x1fc]
mov dword [ebp + 0x14], eax
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CMStringArray.0
mov byte [ebp - 4], 4
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1f8]
call fcn.00405c00
mov dword [ebp - 4], 0x21
mov eax, dword [ebp - 0x34c]
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
cmp eax, 0x12e
je 0x462069
cmp eax, 0x12d
je 0x462069
mov eax, dword [0x5c7988]
mov dword [0x5c7978], 0
test eax, eax
je 0x461fa0
push eax
mov eax, dword [0x5c797c]
mov ecx, 0x5c797c
call dword [eax + 0xc]
push 0x588dc4
mov ecx, 0x5c797c
mov dword [0x5c7988], 0
mov dword [0x5c7990], 0
mov dword [0x5c798c], 0
call fcn.004993c0
push edi
mov ecx, 0x5c7998
call fcn.00412e50
push 0x5d7c50
mov ecx, 0x5c7a1c
call fcn.00412e50
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov dword [ebp - 4], 0x10e
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.User_Agent:
mov dword [ebp - 4], 0x10f
lea edx, [ebp - 0x3c]
push 0x5d7c50
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0x10
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x462036
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x462036
mov ecx, dword [eax + 0x1c]
push ecx
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x68], vtable.CVolObject.0
mov dword [ebp - 4], 0x114
jmp 0x4621c7
mov eax, dword [0x5c7988]
mov dword [0x5c7978], 0
test eax, eax
je 0x46208a
push eax
mov eax, dword [0x5c797c]
mov ecx, 0x5c797c
call dword [eax + 0xc]
push 0x588dc4
mov ecx, 0x5c797c
mov dword [0x5c7988], 0
mov dword [0x5c7990], 0
mov dword [0x5c798c], 0
call fcn.004993c0
mov eax, dword [0x5c7998]
mov ecx, 0x5c7998
call dword [eax + 0x44]
mov eax, dword [ebp - 0x378]
mov ecx, 0x5c79a8
mov dword [0x5c799c], eax
mov eax, dword [ebp - 0x374]
mov dword [0x5c79a0], eax
mov eax, dword [ebp - 0x370]
mov dword [0x5c79a4], eax
mov eax, dword [0x5c79a8]
call dword [eax + 0x44]
lea eax, [ebp - 0x36c]
mov ecx, 0x5c79a8
push eax
call fcn.00405870
mov eax, dword [0x5c7a1c]
mov ecx, 0x5c7a1c
call dword [eax + 0x44]
mov eax, dword [0x5d7c54]
mov ecx, 0x5c7a2c
mov dword [0x5c7a20], eax
mov eax, dword [0x5d7c58]
mov dword [0x5c7a24], eax
mov eax, dword [0x5d7c5c]
mov dword [0x5c7a28], eax
mov eax, dword [0x5c7a2c]
call dword [eax + 0x44]
push 0x5d7c60
mov ecx, 0x5c7a2c
call fcn.00405870
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov dword [ebp - 4], 0x106
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.User_Agent:
mov dword [ebp - 4], 0x107
lea edx, [ebp - 0x3c]
push 0x5d7c50
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 8
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x462199
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x462199
mov ecx, dword [eax + 0x1c]
push ecx
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 7
mov dword [ebp - 0x68], vtable.CVolObject.0
mov dword [ebp - 4], 0x10c
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov dword [ebp - 4], 0x21
mov esi, dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 0x3c], vtable.CVolObject.0
call fcn.00405c90
mov dword [ebp - 4], 0x116
mov ecx, esi
push 0x5891d8
mov dword [esi], vtable.CWString.0
call fcn.0049c380
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x10], 1
mov dword [ebp - 4], 0x117
lea eax, [ebp - 0x178]
mov dword [ebp + 0x10], eax
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CMStringArray.0
mov byte [ebp - 4], 0x19
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x174]
call fcn.00405c00
mov dword [ebp - 4], 0x1d
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x11b
lea ecx, [ebp - 0x1a0]
call fcn.00405c00
mov dword [ebp - 4], 0x1c
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x11d
lea ecx, [ebp - 0x1cc]
call fcn.00405c00
mov dword [ebp - 4], 0x1b
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x18
jmp 0x461c07
lea eax, [ebp - 0x68]
push eax
call fcn.0045e0b0
mov edx, eax
mov dword [ebp - 0xd4], edx
mov dword [ebp - 4], 0x120
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ecx + 0x44]
cmp eax, fcn.00404130
je 0x4622db
lea ecx, [ebp - 0x1dc]
call eax
mov edx, dword [ebp - 0xd4]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x1d8], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x1d4], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1cc]
call dword [eax + 0x44]
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0x1cc]
add eax, 0x10
push eax
call fcn.00405870
mov dword [ebp - 4], 0x121
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov dword [ebp - 4], 0x21
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x68], vtable.CVolObject.0
mov eax, dword [eax + 0x44]
cmp eax, fcn.00404130
je 0x46234f
lea ecx, [ebp - 0x1b0]
call eax
mov eax, dword [0x5d7aa4]
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x1ac], eax
mov eax, dword [0x5d7aa8]
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x5d7aac]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a0]
call dword [eax + 0x44]
push 0x5d7ab0
lea ecx, [ebp - 0x1a0]
call fcn.00405870
lea ecx, [ebp - 0x94]
call fcn.00405c90
mov dword [ebp - 4], 0x123
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x58e4bc
mov dword [ebp - 4], 0x124
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x4623d0
cmp dword [esi + 0x24], ecx
mov ecx, 0x580994
je 0x4623d0
mov ecx, dword [esi + 0x1c]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x4623e4
cmp dword [ebp - 0x70], 0
mov eax, edi
cmovne eax, dword [ebp - 0x78]
push 1
sub esp, 8
push ecx
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0049c170
mov dword [ebp - 4], 0x126
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], vtable.CVolObject.0
call fcn.00405c90
mov dword [ebp - 4], 0x128
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], str.penc_rT
mov dword [ebp - 4], 0x129
mov ecx, dword [ebp - 0x1d0]
test ecx, ecx
jne 0x462460
cmp dword [ebp - 0x1b8], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x462474
cmp dword [ebp - 0x70], 0
mov eax, edi
cmovne eax, dword [ebp - 0x78]
push 1
sub esp, 8
push ecx
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0049c170
mov dword [ebp - 4], 0x12b
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], vtable.CVolObject.0
call fcn.00405c90
mov dword [ebp - 4], 0x12d
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x58e508
mov dword [ebp - 4], 0x12e
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x4624ed
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x4624ed
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x462501
cmp dword [ebp - 0x70], 0
mov eax, edi
cmovne eax, dword [ebp - 0x78]
push 1
sub esp, 8
push ecx
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0049c170
mov dword [ebp - 4], 0x130
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x94], vtable.CVolObject.0
call fcn.00405c90
mov dword [ebp - 4], 0x132
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x58e53c
mov dword [ebp - 4], 0x133
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x46257a
cmp dword [eax + 0x24], ecx
mov ecx, 0x580994
je 0x46257a
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x46258e
cmp dword [ebp - 0x70], 0
mov eax, edi
cmovne eax, dword [ebp - 0x78]
push 1
sub esp, 8
push ecx
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0049c170
mov dword [ebp - 4], 0x135
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x94], vtable.CVolObject.0
call fcn.00404ac0
mov dword [ebp + 0x10], eax
mov dword [ebp - 4], 0x137
lea ecx, [ebp - 0x100]
call fcn.00404ac0
mov edi, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x94]
call fcn.00404ac0
mov esi, eax
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x234]
call fcn.00405c90
mov byte [ebp - 4], 0x3a
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x228], 0x580994
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x158]
call fcn.00405c90
mov byte [ebp - 4], 0x3c
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x14c], 0x580994
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x12c]
call fcn.00405c90
mov byte [ebp - 4], 0x3e
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x120], 0x580994
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xd0]
call fcn.00405c90
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xd0], vtable.CWConstString.0
mov dword [ebp - 0xc4], 0x580994
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x580994
mov byte [ebp - 4], 0x43
mov edx, 0x5c7640
push str._vip_analysis
lea ecx, [ebp - 0x68]
call fcn.0049d910
add esp, 4
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp + 0x10]
push ecx
or dword [ecx + 4], 1
or dword [edi + 4], 1
or dword [esi + 4], 1
push edi
push esi
push ecx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x12c]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x184]
push ecx
lea ecx, [ebp - 0x1b0]
push ecx
push 1
push eax
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.0043fc30
mov esi, eax
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3fc]
mov edx, dword [ebp - 0x3fc]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x3f8], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0x3fc]
push esi
call fcn.004424d0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x54c]
call fcn.00428990
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0x43
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov byte [ebp - 4], 0x3f
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x11c]
call fcn.00405c00
mov byte [ebp - 4], 0x3d
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x148]
call fcn.00405c00
mov byte [ebp - 4], 0x3b
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x224]
call fcn.00405c00
mov byte [ebp - 4], 0x39
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x88]
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x88], vtable.CMStringArray.0
mov byte [ebp - 4], 0x59
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x84]
call fcn.00405c00
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x94], vtable.CVolObject.0
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xf4], vtable.CMStringArray.0
mov byte [ebp - 4], 0x5d
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xf0]
call fcn.00405c00
mov byte [ebp - 4], 0x37
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x15f
lea eax, [ebp - 0x1fc]
mov dword [ebp - 0x238], eax
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CMStringArray.0
mov byte [ebp - 4], 0x61
mov ecx, eax
call fcn.00492860
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x1f8]
call fcn.00405c00
mov dword [ebp - 4], 0x21
mov eax, dword [ebp - 0x34c]
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
cmp eax, 0xc8
je 0x4629d1
push eax
lea ecx, [ebp - 0x68]
call fcn.004122a0
mov edx, eax
mov dword [ebp - 4], 0x163
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x64
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x58e564
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp + 8]
push edx
lea edx, [ebp - 0x3c]
call fcn.0049d790
add esp, 4
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x63
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov dword [ebp - 4], 0x169
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x184]
call fcn.00404b40
mov dword [ebp - 4], 0x16b
lea ecx, [ebp - 0x1a0]
call fcn.00405c00
mov dword [ebp - 4], 0x1c
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x16d
lea ecx, [ebp - 0x1cc]
call fcn.00405c00
mov dword [ebp - 4], 0x1b
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x18
lea ecx, [ebp - 0x9c]
push dword [ebp - 0xa4]
call fcn.004644d0
jmp 0x463d56
sub esp, 0x10
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0xa4]
call fcn.00464ce0
add esp, 0x10
lea ecx, [ebp - 0xd0]
call fcn.00405c90
mov dword [ebp - 4], 0x170
mov dword [ebp - 0xd0], vtable.CWConstString.0
mov dword [ebp - 0xc4], 0x580994
mov dword [ebp - 4], 0x171
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x72
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str._msg
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x3c]
push eax
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0x74
mov edx, 0x5891d8
mov ecx, eax
call fcn.00412340
mov esi, eax
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x58]
call fcn.00405c00
mov byte [ebp - 4], 0x73
mov dword [ebp - 0x68], vtable.CVolObject.0
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x71
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov dword [ebp - 4], 0x17b
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], vtable.CVolObject.0
test esi, esi
je 0x462bbc
call fcn.00405c90
mov dword [ebp - 4], 0x17d
mov dword [ebp - 0xd0], vtable.CWConstString.0
mov dword [ebp - 0xc4], 0x580994
mov dword [ebp - 4], 0x17e
lea ecx, [ebp - 0x3c]
call fcn.00405c90
mov byte [ebp - 4], 0x7f
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str._msg
mov byte [ebp - 4], 0x80
lea eax, [ebp - 0xd0]
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00464dd0
add esp, 8
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x2c]
call fcn.00405c00
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov dword [ebp - 4], 0x185
lea ecx, [ebp - 0xc0]
call fcn.00405c00
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xd0], vtable.CVolObject.0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x184]
call fcn.00404b40
mov dword [ebp - 4], 0x187
lea ecx, [ebp - 0x1a0]
call fcn.00405c00
mov dword [ebp - 4], 0x1c
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
mov dword [ebp - 4], 0x189
lea ecx, [ebp - 0x1cc]
call fcn.00405c00
mov dword [ebp - 4], 0x1b
mov dword [ebp - method.CMStringArray.virtual_0], vtable.CVolObject.0
jmp 0x4629b4
push 0x580994
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x18c
lea ecx, [ebp - 0x3c]
push str._data_Download
call fcn.004128e0
mov byte [ebp - 4], 0x8d
lea edx, [ebp - 0xa4]
push esi
push eax
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0x8e
mov ecx, 0x5c7998
push eax
call fcn.00412e50
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x68]
call fcn.00405240
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push 0x580994
lea ecx, [ebp - 0x12c]
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x18f
lea ecx, [ebp - 0x3c]
push str._data_Referer
call fcn.004128e0
mov byte [ebp - 4], 0x90
lea edx, [ebp - 0xa4]
push esi
push eax
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0x91
mov ecx, 0x5c79c4
push eax
call fcn.00412e50
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x68]
call fcn.00405240
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x12c]
call fcn.00412610
mov esi, dword [ebp + 0xc]
mov edx, str.Quark
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x462f10
push str.Quark
mov ecx, 0x5c796c
call fcn.0049c2a0
push 0x580994
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x192
lea ecx, [ebp - 0x3c]
push str._data_Cookie
call fcn.004128e0
mov byte [ebp - 4], 0x93
lea edx, [ebp - 0xa4]
push esi
push eax
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0x94
mov ecx, 0x5c79f0
push eax
call fcn.00412e50
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x68]
call fcn.00405240
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push 0x5d7b00
mov ecx, 0x5c7a1c
call fcn.00412e50
push 0x58e46c
lea ecx, [ebp - 0x12c]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x195
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x462d81
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c7430
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x12c]
call fcn.00412610
push 0x58e5c4
lea ecx, [ebp - 0x68]
call fcn.004128e0
mov edx, eax
mov dword [ebp - 4], 0x196
mov ecx, 0x5c79f0
push 0
sub esp, 8
call fcn.00412280
push eax
mov ecx, edx
call fcn.00412280
push eax
mov ecx, 0x5c7430
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x68]
call fcn.00412610
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x197
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0x98
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.Cookie:
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov dword [ebp - 4], 0x199
mov edx, eax
push 0x5c79f0
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0x9a
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push str.User_Agent:
lea ecx, [ebp - 0x158]
call fcn.004128e0
mov dword [ebp - 4], 0x19b
mov edx, eax
push 0x5d7b00
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0x9c
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x158]
jmp 0x463d01
mov edx, 0x588d4c
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x463166
push 0x588d4c
mov ecx, 0x5c796c
call fcn.0049c2a0
push 0x580994
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x19d
lea ecx, [ebp - 0x3c]
push str._data_Cookie
call fcn.004128e0
mov byte [ebp - 4], 0x9e
lea edx, [ebp - 0xa4]
push esi
push eax
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0x9f
mov ecx, 0x5c79f0
push eax
call fcn.00412e50
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x68]
call fcn.00405240
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push 0x5d7b30
mov ecx, 0x5c7a1c
call fcn.00412e50
push 0x58e46c
lea ecx, [ebp - 0x12c]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x1a0
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x462fec
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c7460
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x12c]
call fcn.00412610
push 0x58e5c4
lea ecx, [ebp - 0x68]
call fcn.004128e0
mov edx, eax
mov dword [ebp - 4], 0x1a1
mov ecx, 0x5c79f0
push 0
sub esp, 8
call fcn.00412280
push eax
mov ecx, edx
call fcn.00412280
push eax
mov ecx, 0x5c7460
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x68]
call fcn.00412610
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1a2
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xa3
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.Cookie:
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov dword [ebp - 4], 0x1a4
mov edx, eax
push 0x5c79f0
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xa5
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xa4
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push str.User_Agent:
lea ecx, [ebp - 0x158]
call fcn.004128e0
mov dword [ebp - 4], 0x1a6
mov edx, eax
push 0x5d7b30
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xa7
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xa6
jmp 0x462ef6
mov edx, str.weiyun
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x4633bc
push str.weiyun
mov ecx, 0x5c796c
call fcn.0049c2a0
push 0x580994
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x1a8
lea ecx, [ebp - 0x3c]
push str._data_Cookie
call fcn.004128e0
mov byte [ebp - 4], 0xa9
lea edx, [ebp - 0xa4]
push esi
push eax
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0xaa
mov ecx, 0x5c79f0
push eax
call fcn.00412e50
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x68]
call fcn.00405240
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push 0x5d7b60
mov ecx, 0x5c7a1c
call fcn.00412e50
push 0x58e5b8
lea ecx, [ebp - 0x12c]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x1ab
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x463242
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c7490
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x12c]
call fcn.00412610
push str.FTN5K
lea ecx, [ebp - 0x68]
call fcn.004128e0
mov edx, eax
mov dword [ebp - 4], 0x1ac
mov ecx, 0x5c79f0
push 0
sub esp, 8
call fcn.00412280
push eax
mov ecx, edx
call fcn.00412280
push eax
mov ecx, 0x5c7490
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x68]
call fcn.00412610
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1ad
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xae
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.Cookie:
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov dword [ebp - 4], 0x1af
mov edx, eax
push 0x5c79f0
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xb0
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push str.User_Agent:
lea ecx, [ebp - 0x158]
call fcn.004128e0
mov dword [ebp - 4], 0x1b1
mov edx, eax
push 0x5d7b60
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xb2
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xb1
jmp 0x462ef6
mov edx, str.feishu
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x463612
push str.feishu
mov ecx, 0x5c796c
call fcn.0049c2a0
push 0x580994
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x1b3
lea ecx, [ebp - 0x3c]
push str._data_Cookie
call fcn.004128e0
mov byte [ebp - 4], 0xb4
lea edx, [ebp - 0xa4]
push esi
push eax
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0xb5
mov ecx, 0x5c79f0
push eax
call fcn.00412e50
mov byte [ebp - 4], 0xb4
lea ecx, [ebp - 0x68]
call fcn.00405240
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push 0x5d7b90
mov ecx, 0x5c7a1c
call fcn.00412e50
push str.fNeg
lea ecx, [ebp - 0x12c]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x1b6
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x463498
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c74c0
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x12c]
call fcn.00412610
push str.fNs
lea ecx, [ebp - 0x68]
call fcn.004128e0
mov edx, eax
mov dword [ebp - 4], 0x1b7
mov ecx, 0x5c79f0
push 0
sub esp, 8
call fcn.00412280
push eax
mov ecx, edx
call fcn.00412280
push eax
mov ecx, 0x5c74c0
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x68]
call fcn.00412610
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1b8
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xb9
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.Cookie:
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov dword [ebp - 4], 0x1ba
mov edx, eax
push 0x5c79f0
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xbb
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xba
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push str.User_Agent:
lea ecx, [ebp - 0x158]
call fcn.004128e0
mov dword [ebp - 4], 0x1bc
mov edx, eax
push 0x5d7b90
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xbd
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xbc
jmp 0x462ef6
mov edx, str.tianyi
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x463758
push str.tianyi
mov ecx, 0x5c796c
call fcn.0049c2a0
push 0x5d7bc0
mov ecx, 0x5c7a1c
call fcn.00412e50
push 0x58e5ec
lea ecx, [ebp - 0x68]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x1be
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x463675
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c74f0
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x68]
call fcn.00412610
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1bf
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xc0
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xbf
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.User_Agent:
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov dword [ebp - 4], 0x1c1
mov edx, eax
push 0x5d7bc0
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xc2
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xc1
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
jmp 0x463d01
mov edx, str.QQmail
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x4639ae
push str.QQmail
mov ecx, 0x5c796c
call fcn.0049c2a0
push 0x580994
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x1c3
lea ecx, [ebp - 0x3c]
push str._data_Cookie
call fcn.004128e0
mov byte [ebp - 4], 0xc4
lea edx, [ebp - 0xa4]
push esi
push eax
lea ecx, [ebp - 0x68]
call fcn.00464dd0
add esp, 8
mov byte [ebp - 4], 0xc5
mov ecx, 0x5c79f0
push eax
call fcn.00412e50
mov byte [ebp - 4], 0xc4
lea ecx, [ebp - 0x68]
call fcn.00405240
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push 0x5d7c20
mov ecx, 0x5c7a1c
call fcn.00412e50
push 0x58e61c
lea ecx, [ebp - 0x12c]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x1c6
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x463834
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c7520
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x12c]
call fcn.00412610
push str.mail5k
lea ecx, [ebp - 0x68]
call fcn.004128e0
mov edx, eax
mov dword [ebp - 4], 0x1c7
mov ecx, 0x5c79f0
push 0
sub esp, 8
call fcn.00412280
push eax
mov ecx, edx
call fcn.00412280
push eax
mov ecx, 0x5c7520
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x68]
call fcn.00412610
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1c8
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xc9
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xc8
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.Cookie:
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov dword [ebp - 4], 0x1ca
mov edx, eax
push 0x5c79f0
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xcb
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xca
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
push str.User_Agent:
lea ecx, [ebp - 0x158]
call fcn.004128e0
mov dword [ebp - 4], 0x1cc
mov edx, eax
push 0x5d7c20
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xcd
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xcc
jmp 0x462ef6
mov edx, str.123pan
mov ecx, esi
call fcn.00412ba0
mov ecx, 0x5c796c
test eax, eax
je 0x463adf
push str.123pan
call fcn.0049c2a0
push 0x5d7bf0
mov ecx, 0x5c7a1c
call fcn.00412e50
push 0x58e46c
lea ecx, [ebp - 0x68]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x1ce
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x463a11
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c7550
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x68]
call fcn.00412610
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1cf
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xd0
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.User_Agent:
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov dword [ebp - 4], 0x1d1
mov edx, eax
push 0x5d7bf0
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xd2
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xd1
jmp 0x46373e
push esi
call fcn.00412e50
push 0x5d7c20
mov ecx, 0x5c7a1c
call fcn.00412e50
push str.Referer:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1d3
mov edx, eax
push 0x5c79c4
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xd4
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push 0x58e46c
lea ecx, [ebp - 0xd0]
call fcn.004128e0
mov ecx, eax
mov dword [ebp - 4], 0x1d5
mov eax, dword [0x5c79d0]
test eax, eax
jne 0x463b84
cmp dword [0x5c79e8], eax
mov eax, 0x580994
cmovne eax, dword [0x5c79e0]
push 0
sub esp, 8
push eax
call fcn.00412280
push eax
mov ecx, 0x5c7580
call fcn.0049c170
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
call fcn.00412610
mov edx, str.Cloudreve
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x463c15
push 0x58e63c
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov esi, eax
mov dword [ebp - 4], 0x1d6
lea ecx, [ebp - 0x68]
push str.u0026
call fcn.004128e0
mov edx, eax
mov byte [ebp - 4], 0xd7
mov ecx, esi
push 0
sub esp, 8
call fcn.00412280
push eax
mov ecx, edx
call fcn.00412280
push eax
mov ecx, 0x5c7998
call fcn.0049c170
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x68]
call fcn.00412610
jmp 0x463cf7
mov edx, str.aliyundrive
mov ecx, esi
call fcn.00412ba0
test eax, eax
je 0x463caa
push 0x5d7c80
mov ecx, 0x5c7a1c
call fcn.00412e50
push str.User_Agent:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1d8
mov edx, eax
push 0x5d7c80
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xd9
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
push str.X_Canary:clientwindows_appadrive_versionv4.15.0
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
jmp 0x463d06
push str.User_Agent:
lea ecx, [ebp - 0x3c]
call fcn.004128e0
mov dword [ebp - 4], 0x1da
mov edx, eax
push 0x5d7c20
lea ecx, [ebp - 0x68]
call fcn.0049d790
add esp, 4
mov byte [ebp - 4], 0xdb
mov ecx, eax
call fcn.00412280
push eax
push 1
push 0x5c148c
call fcn.00411e20
add esp, 0xc
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x68]
call fcn.00405240
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
call fcn.00412610
mov ecx, dword [ebp + 8]
push 0x5891d8
call fcn.00404cd0
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x184]
call fcn.00404b40
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1b0]
call fcn.00405240
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1dc]
call fcn.00405240
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa4]
call fcn.00464230
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3fc]
call fcn.00428990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ac]
call fcn.0043faf0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
push 0x5d7a9c
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7a9c], 0xffffffff
jne 0x460aba
mov dword [ebp - 4], 1
mov ecx, 0x5d7aa0
call fcn.00405c90
mov byte [ebp - 4], 2
mov ecx, 0x5d7aa0
push str._Sign_:__
mov dword [0x5d7aa0], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 1
push 0x5634b0
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7a9c
call fcn.0050ed83
add esp, 8
jmp 0x460aba
push 0x5d7acc
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7acc], 0xffffffff
jne 0x460acb
mov dword [ebp - 4], 3
mov ecx, 0x5d7ad0
call fcn.00405c90
mov byte [ebp - 4], 4
mov ecx, 0x5d7ad0
push str.Content_Type:_application_json_r_n_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_50.0.2661.87_Safari_537.36
mov dword [0x5d7ad0], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 3
push 0x563450
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7acc
call fcn.0050ed83
add esp, 8
jmp 0x460acb
push 0x5d7afc
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7afc], 0xffffffff
jne 0x460adc
mov dword [ebp - 4], 5
mov ecx, 0x5d7b00
call fcn.00405c90
mov byte [ebp - 4], 6
mov ecx, 0x5d7b00
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__quark_cloud_drive_2.5.55_Chrome_100.0.4896.160_Electron_18.3.5.12_a038f7b798_Safari_537.36_Channel_pckk_360_daily
mov dword [0x5d7b00], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 5
push 0x5633f0
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7afc
call fcn.0050ed83
add esp, 8
jmp 0x460adc
push 0x5d7b2c
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7b2c], 0xffffffff
jne 0x460aed
mov dword [ebp - 4], 7
mov ecx, 0x5d7b30
call fcn.00405c90
mov byte [ebp - 4], 8
mov ecx, 0x5d7b30
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__uc_cloud_drive_1.1.5_Chrome_100.0.4896.160_Electron_18.3.5.12_a038f7b798_Safari_537.36_Channel_ucpan_other_ch
mov dword [0x5d7b30], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 7
push 0x563390
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7b2c
call fcn.0050ed83
add esp, 8
jmp 0x460aed
push 0x5d7b5c
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7b5c], 0xffffffff
jne 0x460afe
mov dword [ebp - 4], 9
mov ecx, 0x5d7b60
call fcn.00405c90
mov byte [ebp - 4], 0xa
mov ecx, 0x5d7b60
push 0x58dd30
mov dword [0x5d7b60], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 9
push 0x563330
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7b5c
call fcn.0050ed83
add esp, 8
jmp 0x460afe
push 0x5d7b8c
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7b8c], 0xffffffff
jne 0x460b0f
mov dword [ebp - 4], 0xb
mov ecx, 0x5d7b90
call fcn.00405c90
mov byte [ebp - 4], 0xc
mov ecx, 0x5d7b90
push str.Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_109.0.5414.128_Safari_537.36_Lark_7.8.7_LarkLocale_zh_CN_SuperApp
mov dword [0x5d7b90], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 0xb
push 0x5632d0
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7b8c
call fcn.0050ed83
add esp, 8
jmp 0x460b0f
push 0x5d7bbc
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7bbc], 0xffffffff
jne 0x460b20
mov dword [ebp - 4], 0xd
mov ecx, 0x5d7bc0
call fcn.00405c90
mov byte [ebp - 4], 0xe
mov ecx, 0x5d7bc0
push str.Dart_2.19__dart:io_
mov dword [0x5d7bc0], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 0xd
push 0x563270
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7bbc
call fcn.0050ed83
add esp, 8
jmp 0x460b20
push 0x5d7bec
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7bec], 0xffffffff
jne 0x460b31
mov dword [ebp - 4], 0xf
mov ecx, 0x5d7bf0
call fcn.00405c90
mov byte [ebp - 4], 0x10
mov ecx, 0x5d7bf0
push str.123pan_v2.3.11_Android_9_Xiaomi_MI_9_
mov dword [0x5d7bf0], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 0xf
push 0x563210
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7bec
call fcn.0050ed83
add esp, 8
jmp 0x460b31
push 0x5d7c1c
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7c1c], 0xffffffff
jne 0x460b42
mov dword [ebp - 4], 0x11
mov ecx, 0x5d7c20
call fcn.00405c90
mov byte [ebp - 4], 0x12
mov ecx, 0x5d7c20
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_123.0.0.0_Safari_537.36_Edg_123.0.0.0
mov dword [0x5d7c20], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 0x11
push 0x5631b0
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7c1c
call fcn.0050ed83
add esp, 8
jmp 0x460b42
push 0x5d7c4c
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7c4c], 0xffffffff
jne 0x460b53
mov dword [ebp - 4], 0x13
mov ecx, 0x5d7c50
call fcn.00405c90
mov byte [ebp - 4], 0x14
mov ecx, 0x5d7c50
push str.pan.baidu.com
mov dword [0x5d7c50], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 0x13
push 0x563150
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7c4c
call fcn.0050ed83
add esp, 8
jmp 0x460b53
push 0x5d7c7c
call fcn.0050edcd
add esp, 4
cmp dword [0x5d7c7c], 0xffffffff
jne 0x460b64
mov dword [ebp - 4], 0x15
mov ecx, 0x5d7c80
call fcn.00405c90
mov byte [ebp - 4], 0x16
mov ecx, 0x5d7c80
push str.Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__aDrive_4.15.0_Chrome_108.0.5359.215_Electron_22.3.24_Safari_537.36
mov dword [0x5d7c80], 0x587c94
call fcn.0049c380
mov byte [ebp - 4], 0x15
push 0x5630f0
call fcn.0050f1f4
mov byte [ebp - 4], 0
push 0x5d7c7c
call fcn.0050ed83
add esp, 8
jmp 0x460b64