Function at 0x42ecd0
Capabilities:
Create http request

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2778
call fcn.00449aa0
mov eax, dword [0x4b93f8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x2730], ecx
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x4302a8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2704], eax
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x4302b2
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x271c], esi
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x4302bc
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x2718], edi
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x4302c6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2744], eax
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x4302d0
mov eax, dword [ecx]
call dword [eax + 0xc]
xorps xmm0, xmm0
mov byte [ebp - 0x270d], 0
add eax, 0x10
movlpd qword [ebp - 0x2738], xmm0
lea ecx, [ebp - 0x2760]
mov dword [ebp - 0x2740], eax
movups xmmword [ebp - 0x2760], xmm0
call fcn.0041c2e0
push 0x4b9020
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x2760]
push eax
lea ecx, [ebp - 0x2750]
call fcn.004074e0
push 0x4b9020
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x2750]
or ebx, 0xffffffff
cmp eax, dword [ebp - 0x274c]
je 0x42eea5
lea ebx, [eax + 0x494]
mov dword [ebp - 0x26f4], ebx
nop
lea eax, [ebx - 0x20]
push eax
lea ecx, [ebp - 0x2778]
call fcn.00403710
push ebx
lea ecx, [ebp - 0x2774]
call fcn.00403710
push dword [ebp - 0x2774]
lea eax, [ebp - 0x2718]
push dword [ebp - 0x2778]
push str._s__s
push eax
call fcn.0041ad10
mov edi, dword [ebp - 0x2718]
lea ecx, [ebp - 0x271c]
add esp, 0x10
push dword [edi - 0xc]
push edi
call fcn.00403910
mov esi, 2
lea ebx, [ebp - 0x2770]
or edi, 0xffffffff
nop
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
dec esi
sub edx, 0x10
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42ee6e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x42ee50
mov ebx, dword [ebp - 0x26f4]
mov edi, dword [ebp - 0x2718]
add ebx, 0x6bc
mov dword [ebp - 0x26f4], ebx
lea eax, [ebx - 0x494]
cmp eax, dword [ebp - 0x274c]
jne 0x42edf0
mov esi, dword [ebp - 0x271c]
or ebx, 0xffffffff
cmp dword [esi - 0xc], 1
jg 0x42ef1d
mov ecx, dword [esi - 0x10]
add esi, 0xfffffff0
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
mov ecx, eax
lea eax, [esi + 0xc]
jl 0x42eed0
cmp ecx, dword [esi]
jne 0x42eed0
lock inc dword [eax]
add esi, 0x10
jmp 0x42ef82
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x26f8], edx
test edx, edx
je 0x4302da
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov ecx, dword [esi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [esi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.00437560
mov esi, dword [ebp - 0x26f8]
add esp, 0x10
add esi, 0x10
jmp 0x42ef82
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x42ef2f
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x42ef45
call fcn.00402250
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x4302df
mov eax, dword [ecx]
push 2
push 1
call dword [eax]
test eax, eax
je 0x4302e9
cmp dword [eax + 8], 1
lea esi, [eax + 0x10]
jl 0x43032a
push 2
push dword [ebp - 0x271c]
xor eax, eax
mov dword [esi - 0xc], 1
push 2
push esi
mov word [esi + 2], ax
call fcn.00437560
add esp, 0x10
mov ecx, 0x4a595c
mov eax, esi
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42efb6
test dx, dx
je 0x42efb2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42efb6
add eax, 4
add ecx, 4
test dx, dx
jne 0x42ef90
xor eax, eax
jmp 0x42efbb
sbb eax, eax
or eax, 1
test eax, eax
mov eax, ebx
sete byte [ebp - 0x271d]
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42efdb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x271d], 0
je 0x42f070
mov esi, dword [ebp - 0x271c]
mov ecx, 1
mov dword [ebp - 0x26f4], ecx
mov eax, dword [esi - 0xc]
cmp eax, ecx
jge 0x42f00c
mov ecx, eax
mov dword [ebp - 0x26f4], ecx
test ecx, ecx
jle 0x42f070
sub eax, ecx
cmp dword [esi - 4], 1
mov dword [ebp - 0x2700], eax
jle 0x42f02e
push dword [esi - 0xc]
lea ecx, [ebp - 0x271c]
call fcn.00402190
mov esi, dword [ebp - 0x271c]
mov eax, dword [ebp - 0x2700]
lea ecx, [eax*2 + 2]
mov eax, dword [ebp - 0x26f4]
push ecx
lea eax, [esi + eax*2]
push eax
push ecx
push esi
call fcn.004367a0
mov eax, dword [ebp - 0x2700]
add esp, 0x10
test eax, eax
js 0x43032a
cmp eax, dword [esi - 8]
jg 0x43032a
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x4302ee
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2724], eax
lea eax, [ebp - 0x2724]
push eax
call fcn.0041bbd0
mov eax, dword [ebp - 0x2724]
add esp, 4
cmp dword [eax - 0xc], 0
jne 0x42f0b7
lea eax, [ebp - 0x2724]
push eax
call fcn.0041bdc0
add esp, 4
lea ecx, [ebp - 0x2724]
call fcn.00432480
lea ecx, [ebp - 0x2724]
call fcn.00432640
mov eax, dword [0x4c1094]
mov ecx, dword [0x4c1090]
sub eax, ecx
sar eax, 5
test eax, eax
je 0x42f148
xor esi, esi
xor ebx, ebx
nop word [eax + eax]
push dword [esi + ecx + 0x18]
lea eax, [ebp - 0x2718]
push dword [esi + ecx + 0x14]
push dword [esi + ecx + 0x10]
push dword [esi + ecx + 8]
push dword [esi + ecx + 4]
push 0x4a5960
push eax
call fcn.0041ad10
mov edi, dword [ebp - 0x2718]
lea ecx, [ebp - 0x2744]
add esp, 0x1c
push dword [edi - 0xc]
push edi
call fcn.00403910
mov eax, dword [0x4c1094]
lea esi, [esi + 0x20]
mov ecx, dword [0x4c1090]
inc ebx
sub eax, ecx
sar eax, 5
cmp ebx, eax
jb 0x42f0f0
or ebx, 0xffffffff
mov ecx, dword [0x4bbedc]
xor eax, eax
mov esi, dword [0x4bbed8]
sub ecx, esi
mov dword [ebp - 0x270c], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x42f46c
xor eax, eax
mov dword [ebp - 0x26fc], eax
nop dword [eax]
cmp dword [eax + esi + 0x28], 0
je 0x42f1a5
push dword [eax + esi + 0x28]
lea eax, [ebp - 0x2718]
push 0x4a597c
push eax
call fcn.0041ad10
mov edi, dword [ebp - 0x2718]
add esp, 0xc
push dword [edi - 0xc]
lea ecx, [ebp - 0x2740]
push edi
call fcn.00403910
mov eax, dword [0x4bbed8]
mov ecx, dword [ebp - 0x26fc]
mov eax, dword [ecx + eax + 8]
mov ecx, dword [eax - 0x10]
mov dword [ebp - 0x26f8], eax
lea edi, [eax - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [edi + 0xc], 0
mov ecx, eax
lea eax, [edi + 0xc]
jl 0x42f1e8
cmp ecx, dword [edi]
jne 0x42f1e8
lock inc dword [eax]
jmp 0x42f226
mov eax, dword [ecx]
lea esi, [edi + 4]
push 2
push dword [esi]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4302da
mov ecx, dword [esi]
mov dword [edi + 4], ecx
mov eax, dword [esi]
lea ecx, [eax*2 + 2]
push ecx
push dword [ebp - 0x26f8]
lea eax, [eax*2 + 2]
push eax
lea eax, [edi + 0x10]
push eax
call fcn.00437560
add esp, 0x10
mov esi, dword [edi + 4]
add edi, 0x10
mov dword [ebp - 0x26f4], edi
test esi, esi
js 0x43032a
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x42f25d
push esi
lea ecx, [ebp - 0x26f4]
call fcn.004024d0
mov edi, dword [ebp - 0x26f4]
lea eax, [esi + 1]
push eax
push edi
call fcn.0046b5d9
add esp, 8
cmp esi, dword [edi - 8]
jg 0x43032a
xor eax, eax
mov dword [edi - 0xc], esi
mov word [edi + esi*2], ax
cmp dword [edi - 0xc], eax
jl 0x42f29d
push str.qingdao_ruanmei_network_technology
push edi
call fcn.0044b974
add esp, 8
test eax, eax
je 0x42f29d
sub eax, edi
sar eax, 1
jns 0x42f40e
mov eax, dword [0x4bbed8]
mov ecx, dword [ebp - 0x26fc]
mov eax, dword [ecx + eax]
mov ecx, dword [eax - 0x10]
mov dword [ebp - 0x26f4], eax
lea esi, [eax - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
mov ecx, eax
lea eax, [esi + 0xc]
jl 0x42f2d0
cmp ecx, dword [esi]
jne 0x42f2d0
lock inc dword [eax]
jmp 0x42f31a
mov eax, dword [ecx]
lea edx, [esi + 4]
push 2
push dword [edx]
mov dword [ebp - 0x26f8], edx
call dword [eax]
mov esi, eax
test esi, esi
je 0x4302da
mov eax, dword [ebp - 0x26f8]
mov ecx, dword [eax]
mov dword [esi + 4], ecx
mov eax, dword [eax]
lea ecx, [eax*2 + 2]
push ecx
push dword [ebp - 0x26f4]
lea eax, [eax*2 + 2]
push eax
lea eax, [esi + 0x10]
push eax
call fcn.00437560
add esp, 0x10
add esi, 0x10
mov dword [ebp - 0x273c], esi
cmp dword [esi - 0xc], 0
jne 0x42f341
push 6
push str.noname
lea ecx, [ebp - 0x273c]
call fcn.00402620
mov esi, dword [ebp - 0x273c]
mov eax, dword [0x4bbed8]
mov ecx, dword [ebp - 0x26fc]
mov eax, dword [ecx + eax + 0xc]
mov ecx, dword [eax - 0x10]
mov dword [ebp - 0x26f4], eax
add eax, 0xfffffff0
mov dword [ebp - 0x2708], eax
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
mov eax, dword [ebp - 0x2708]
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jl 0x42f381
cmp ecx, dword [eax]
jne 0x42f381
lock inc dword [edx]
jmp 0x42f3d7
lea edx, [eax + 4]
mov eax, dword [ecx]
push 2
push dword [edx]
mov dword [ebp - 0x26f8], edx
call dword [eax]
mov edx, eax
mov dword [ebp - 0x2708], edx
test edx, edx
je 0x4302da
mov eax, dword [ebp - 0x26f8]
mov ecx, dword [eax]
mov dword [edx + 4], ecx
mov eax, dword [eax]
lea ecx, [eax*2 + 2]
push ecx
push dword [ebp - 0x26f4]
lea eax, [eax*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.00437560
mov eax, dword [ebp - 0x2708]
add esp, 0x10
cmp dword [eax + 4], 0
jne 0x42f66b
mov edx, eax
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42f3f7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42f40e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, ebx
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x42f425
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [0x4bbedc]
mov eax, 0x2aaaaaab
mov esi, dword [0x4bbed8]
sub ecx, esi
mov edi, dword [ebp - 0x270c]
add dword [ebp - 0x26fc], 0x30
inc edi
imul ecx
mov dword [ebp - 0x270c], edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
mov edi, dword [ebp - 0x2718]
mov eax, dword [ebp - 0x26fc]
jb 0x42f180
mov eax, dword [ebp - 0x2734]
mov dword [ebp - 0x2700], eax
mov eax, dword [ebp - 0x2738]
mov dword [ebp - 0x26f4], eax
mov esi, dword [ebp - 0x2704]
cmp dword [esi - 0xc], 0
je 0x430114
cmp dword [esi - 4], 1
jle 0x42f4ae
push dword [esi - 0xc]
lea ecx, [ebp - 0x2704]
call fcn.00402190
mov esi, dword [ebp - 0x2704]
mov ebx, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 0
call ebx
mov edi, eax
push edi
call fcn.00448f65
push edi
push 0
push eax
mov dword [ebp - 0x26f8], eax
call fcn.0044c180
add esp, 0x10
push 0
push 0
push edi
mov edi, dword [ebp - 0x26f8]
push edi
push 0xffffffffffffffff
push esi
push 0
push 0
call ebx
push 0
push str.q_2D8lJ
lea ecx, [ebp - 0x26f0]
call fcn.004237d0
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x42f510
sub edi, ecx
mov ecx, edi
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x42f528
dec ecx
or ecx, 0xfffffff8
inc ecx
je 0x42f533
mov eax, 8
sub eax, ecx
add edi, eax
lea esi, [edi*8 + 1]
push esi
call fcn.00448f65
push esi
mov dword [ebp - 0x270c], eax
call fcn.00448f65
lea ecx, [edi + 1]
mov ebx, eax
push ecx
mov dword [ebp - 0x2714], ebx
call fcn.00448f65
push esi
push 0
push dword [ebp - 0x270c]
mov dword [ebp - 0x2708], eax
call fcn.0044c180
push esi
push 0
push ebx
call fcn.0044c180
push edi
push 0
push dword [ebp - 0x2708]
call fcn.0044c180
mov esi, dword [ebp - 0x26f8]
add esp, 0x30
mov edx, dword [ebp - 0x2708]
mov ecx, esi
sub edx, esi
nop dword [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x42f5a0
push esi
call fcn.00448f6e
add esp, 4
lea ecx, [ebp - 0x26f0]
push 0
push edi
push dword [ebp - 0x2708]
call fcn.00419a80
shl edi, 3
xor edx, edx
test edi, edi
je 0x42f601
mov esi, dword [ebp - 0x270c]
nop dword [eax]
mov eax, edx
mov ecx, edx
shr eax, 3
and ecx, 7
movsx eax, byte [ebp + eax - 0x2005]
shl eax, cl
sar eax, 7
and al, 1
mov byte [esi + edx], al
inc edx
cmp edx, edi
jb 0x42f5e0
push edi
push dword [ebp - 0x270c]
lea ecx, [ebp - 0x26f0]
push ebx
call fcn.0040c940
push dword [ebp - 0x2708]
call fcn.00448f6e
add esp, 4
lea ecx, [ebp - 0x2704]
push 0x2f
push str.http:__union.ruanmei.com_receive_rmup.aspx_uid
call fcn.00402620
mov eax, dword [ebp - 0x2704]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x42f650
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x42fca4
call fcn.00402250
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x42fca4
jmp 0x4302f8
mov eax, dword [ebp - 0x270c]
lea ecx, [eax + eax*2]
mov eax, dword [0x4bbed8]
shl ecx, 4
mov dword [ebp - 0x26f4], ecx
mov eax, dword [ecx + eax + 4]
mov ecx, dword [eax - 0x10]
mov dword [ebp - 0x2700], eax
add eax, 0xfffffff0
mov dword [ebp - 0x270c], eax
mov eax, dword [ecx]
call dword [eax + 0x10]
mov edx, eax
mov eax, dword [ebp - 0x270c]
cmp dword [eax + 0xc], 0
lea ecx, [eax + 0xc]
jl 0x42f6b7
cmp edx, dword [eax]
jne 0x42f6b7
lock inc dword [ecx]
jmp 0x42f709
lea ecx, [eax + 4]
mov eax, dword [edx]
push 2
push dword [ecx]
mov dword [ebp - 0x26f8], ecx
mov ecx, edx
call dword [eax]
mov edx, eax
mov dword [ebp - 0x270c], edx
test edx, edx
je 0x430302
mov ecx, dword [ebp - 0x26f8]
mov eax, dword [ecx]
mov dword [edx + 4], eax
mov ecx, dword [ecx]
lea eax, [ecx*2 + 2]
push eax
push dword [ebp - 0x2700]
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.00437560
add esp, 0x10
mov eax, dword [0x4bbed8]
mov ecx, dword [ebp - 0x26f4]
mov eax, dword [ecx + eax + 0x10]
mov ecx, dword [eax - 0x10]
mov dword [ebp - 0x2700], eax
add eax, 0xfffffff0
mov dword [ebp - 0x272c], eax
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
mov eax, dword [ebp - 0x272c]
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jl 0x42f749
cmp ecx, dword [eax]
jne 0x42f749
lock inc dword [edx]
jmp 0x42f799
lea edx, [eax + 4]
mov eax, dword [ecx]
push 2
push dword [edx]
mov dword [ebp - 0x26f8], edx
call dword [eax]
mov edx, eax
mov dword [ebp - 0x272c], edx
test edx, edx
je 0x430307
mov ecx, dword [ebp - 0x26f8]
mov eax, dword [ecx]
mov dword [edx + 4], eax
mov ecx, dword [ecx]
lea eax, [ecx*2 + 2]
push eax
push dword [ebp - 0x2700]
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.00437560
add esp, 0x10
mov ecx, dword [ebp - 0x26f4]
mov eax, dword [0x4bbed8]
mov edx, dword [ecx + eax + 0x18]
mov dword [ebp - 0x26f4], edx
mov edx, dword [ecx + eax + 0x1c]
mov al, byte [ecx + eax + 0x20]
mov dword [ebp - 0x26f8], edx
mov byte [ebp - 0x270d], al
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x43030c
mov eax, dword [ecx]
call dword [eax + 0xc]
push dword [ebp - 0x26f8]
add eax, 0x10
push dword [ebp - 0x26f4]
mov dword [ebp - 0x2728], eax
lea eax, [ebp - 0x2728]
push 0x4a4a88
push eax
call fcn.0041ad10
mov ecx, dword [esi - 0x10]
add esi, 0xfffffff0
add esp, 0xc
mov dword [ebp - 0x26f8], esi
mov dword [ebp - 0x2700], esp
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
mov ecx, eax
lea eax, [esi + 0xc]
jl 0x42f82a
cmp ecx, dword [esi]
jne 0x42f82a
lock inc dword [eax]
jmp 0x42f872
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x26f4], edx
test edx, edx
je 0x430316
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov ecx, dword [esi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [esi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.00437560
mov esi, dword [ebp - 0x26f4]
add esp, 0x10
mov ecx, dword [ebp - 0x2700]
lea eax, [esi + 0x10]
mov dword [ecx], eax
lea eax, [ebp - 0x26f4]
mov ecx, dword [ebp - 0x2730]
push eax
call fcn.0041ce30
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x43031b
mov eax, dword [ecx]
call dword [eax + 0xc]
mov esi, dword [ebp - 0x26f4]
add eax, 0x10
mov dword [ebp - 0x26fc], eax
add esi, 0xfffffff0
lea eax, [ebp - 0x26fc]
mov dword [ebp - 0x2714], esi
push eax
push ecx
mov ecx, dword [esi]
mov dword [ebp - 0x2700], esp
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
mov ecx, eax
lea eax, [esi + 0xc]
jl 0x42f8e4
cmp ecx, dword [esi]
jne 0x42f8e4
lock inc dword [eax]
jmp 0x42f925
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x26f4], edx
test edx, edx
je 0x430325
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax*2 + 2]
push ecx
lea eax, [esi + 0x10]
push eax
push ecx
lea eax, [edx + 0x10]
push eax
call fcn.00437560
mov esi, dword [ebp - 0x26f4]
add esp, 0x10
mov ecx, dword [ebp - 0x2700]
lea eax, [esi + 0x10]
mov dword [ecx], eax
call fcn.0041b590
mov esi, dword [ebp - 0x26fc]
add esp, 8
mov edx, dword [esi - 0xc]
mov dword [ebp - 0x26f4], edx
test edx, edx
js 0x43032a
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edx
or ecx, eax
jge 0x42f978
push edx
lea ecx, [ebp - 0x26fc]
call fcn.004024d0
mov esi, dword [ebp - 0x26fc]
mov edx, dword [ebp - 0x26f4]
lea eax, [edx + 1]
push eax
push esi
call fcn.0046b5d9
mov eax, dword [ebp - 0x26f4]
add esp, 8
cmp eax, dword [esi - 8]
jg 0x43032a
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
cmp dword [esi - 0xc], ecx
jge 0x42f9a7
or eax, 0xffffffff
jmp 0x42f9c2
push str.qingdao_ruanmei_network_technology
push esi
call fcn.0044b974
add esp, 8
test eax, eax
jne 0x42f9be
or eax, 0xffffffff
jmp 0x42f9c2
sub eax, esi
sar eax, 1
mov esi, dword [ebp - 0x26f8]
not eax
push ecx
shr eax, 0x1f
mov dword [ebp - 0x276c], eax
mov ecx, dword [esi]
mov dword [ebp - 0x2700], esp
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
mov ecx, eax
jl 0x42f9f7
cmp ecx, dword [esi]
jne 0x42f9f7
mov eax, esi
lock inc dword [edx]
jmp 0x42fa38
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x26f4], edx
test edx, edx
je 0x430334
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax*2 + 2]
push ecx
lea eax, [esi + 0x10]
push eax
push ecx
lea eax, [edx + 0x10]
push eax
call fcn.00437560
mov eax, dword [ebp - 0x26f4]
add esp, 0x10
mov ecx, dword [ebp - 0x2700]
add eax, 0x10
mov dword [ecx], eax
lea eax, [ebp - 0x2734]
mov ecx, dword [ebp - 0x2730]
push eax
call fcn.0041bf00
push ecx
mov ecx, dword [esi]
mov dword [ebp - 0x2700], esp
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
mov ecx, eax
jl 0x42fa79
cmp ecx, dword [esi]
jne 0x42fa79
mov eax, esi
lock inc dword [edx]
jmp 0x42faba
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x26f4], edx
test edx, edx
je 0x430339
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax*2 + 2]
push ecx
lea eax, [esi + 0x10]
push eax
push ecx
lea eax, [edx + 0x10]
push eax
call fcn.00437560
mov eax, dword [ebp - 0x26f4]
add esp, 0x10
mov ecx, dword [ebp - 0x2700]
add eax, 0x10
mov dword [ecx], eax
mov ecx, dword [ebp - 0x2730]
call fcn.0041df60
push ecx
mov ecx, dword [esi]
mov dword [ebp - 0x26f4], eax
mov dword [ebp - 0x2700], edx
mov dword [ebp - 0x2768], esp
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
mov ecx, eax
lea eax, [esi + 0xc]
jl 0x42fafe
cmp ecx, dword [esi]
jne 0x42fafe
lock inc dword [eax]
jmp 0x42fb3f
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x2764], edx
test edx, edx
je 0x43033e
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax*2 + 2]
push ecx
lea eax, [esi + 0x10]
push eax
push ecx
lea eax, [edx + 0x10]
push eax
call fcn.00437560
mov esi, dword [ebp - 0x2764]
add esp, 0x10
mov ecx, dword [ebp - 0x2768]
lea eax, [esi + 0x10]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x2730]
call fcn.0041d9f0
push dword [ebp - 0x2728]
mov eax, dword [ebp - 0x276c]
mov esi, dword [ebp - 0x2734]
movzx eax, al
push eax
mov eax, dword [ebp - 0x272c]
push esi
push dword [ebp - 0x2724]
add eax, 0x10
push eax
push dword [ebp - 0x271c]
mov eax, dword [ebp - 0x270c]
push edi
add eax, 0x10
push eax
mov eax, dword [ebp - 0x2708]
add eax, 0x10
push eax
push dword [ebp - 0x273c]
lea eax, [ebp - 0x2704]
push str.n:_s_d:_s_v:_s_s:_s_dns:_s_o:_s_disk:_s_path:_s_redown:_d_size:_s_
push eax
call fcn.0041ad10
add esp, 0x30
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42fbc8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x26fc]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42fbe5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2714]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42fbff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2728]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42fc1c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x272c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42fc36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42fc50
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2708]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42fc6a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x26f8]
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42fc84
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x42f484
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42f484
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2708], esi
test ebx, ebx
je 0x42fdc9
push 0
test ebx, 0xffff0000
jne 0x42fd6a
movzx edi, bx
push edi
call fcn.00403a80
add esp, 8
test eax, eax
je 0x42fceb
push edi
push eax
lea ecx, [ebp - 0x2708]
call fcn.004041c0
mov esi, dword [ebp - 0x2708]
or ebx, 0xffffffff
push dword [esi - 0xc]
lea ecx, [ebp - 0x2704]
push esi
call fcn.00403910
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42fd14
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x270c]
call fcn.00448f6e
push dword [ebp - 0x2714]
call fcn.00448f6e
mov edi, dword [ebp - 0x2730]
add esp, 8
mov eax, dword [edi + 0x594]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x42fd4f
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x42fe21
call fcn.00402250
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x42fe21
jmp 0x430343
push 0
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edi, [eax - 1]
test edi, edi
jle 0x42fdc9
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edi
or ecx, eax
jge 0x42fda3
push edi
lea ecx, [ebp - 0x2708]
call fcn.004024d0
mov esi, dword [ebp - 0x2708]
push edi
push esi
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp edi, dword [esi - 8]
jg 0x43032a
xor eax, eax
mov dword [esi - 0xc], edi
mov word [esi + edi*2], ax
jmp 0x42fceb
cmp dword [esi - 0xc], 0
lea edx, [esi - 0x10]
mov edi, dword [edx]
je 0x42fceb
cmp dword [edx + 0xc], 0
lea ecx, [edx + 0xc]
jge 0x42fdfc
cmp dword [esi - 8], 0
jl 0x43034d
xor eax, eax
mov dword [esi - 0xc], 0
mov word [esi], ax
jmp 0x42fceb
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x42fe12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xc]
lea esi, [eax + 0x10]
jmp 0x42fcee
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov eax, dword [edi + 0x594]
mov dword [ebp - 0x26f8], esi
mov dword [ebp - 0x2714], eax
mov edi, dword [eax - 0xc]
mov dword [ebp - 0x2734], edi
lea ecx, [edi + 8]
test ecx, ecx
js 0x430357
mov eax, dword [esi - 8]
mov edx, 1
sub edx, dword [esi - 4]
sub eax, ecx
or edx, eax
jge 0x42fe72
push ecx
lea ecx, [ebp - 0x26f8]
call fcn.004024d0
mov esi, dword [ebp - 0x26f8]
add edi, edi
push edi
push dword [ebp - 0x2714]
push edi
push esi
call fcn.00437560
push 0x10
push 0x4a5638
lea eax, [edi + esi]
push 0x10
push eax
call fcn.00437560
mov eax, dword [ebp - 0x2734]
add esp, 0x20
add eax, 8
cmp eax, dword [esi - 8]
jg 0x43032a
mov dword [esi - 0xc], eax
xor ecx, ecx
mov word [esi + eax*2], cx
lea eax, [ebp - 0x2728]
push esi
push eax
call fcn.0041d210
add esp, 8
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42fed9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x430361
mov eax, dword [ecx]
call dword [eax + 0xc]
push dword [ebp - 0x2728]
add eax, 0x10
mov dword [ebp - 0x26fc], eax
lea eax, [ebp - 0x26fc]
push str.v_s
push eax
call fcn.0041ad10
mov eax, dword [ebp - 0x26fc]
lea ecx, [ebp - 0x2704]
add esp, 0xc
push dword [eax - 0xc]
push eax
call fcn.00403910
push dword [ebp - 0x2700]
lea eax, [ebp - 0x26fc]
push dword [ebp - 0x26f4]
push str.s_d
push eax
call fcn.0041ad10
mov eax, dword [ebp - 0x26fc]
lea ecx, [ebp - 0x2704]
add esp, 0x10
push dword [eax - 0xc]
push eax
call fcn.00403910
xor eax, eax
cmp byte [ebp - 0x270d], al
setne al
push eax
lea eax, [ebp - 0x26fc]
push str.e_d
push eax
call fcn.0041ad10
mov eax, dword [ebp - 0x26fc]
lea ecx, [ebp - 0x2704]
add esp, 0xc
push dword [eax - 0xc]
push eax
call fcn.00403910
push dword [ebp - 0x2740]
lea eax, [ebp - 0x26fc]
push dword [ebp - 0x2744]
push str.ahijactcontent:_s_filecontent:_s_
push eax
call fcn.0041ad10
mov edi, dword [ebp - 0x26fc]
lea ecx, [ebp - 0x2704]
add esp, 0x10
push dword [edi - 0xc]
push edi
call fcn.00403910
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x43036b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
push 0
mov dword [ebp - 0x26f8], eax
call fcn.0046ead0
push eax
call fcn.0046a4be
call fcn.0046a49d
push eax
lea eax, [ebp - 0x26f8]
push str.r_d
push eax
call fcn.0041ad10
mov esi, dword [ebp - 0x26f8]
lea ecx, [ebp - 0x2704]
add esp, 0x14
push dword [esi - 0xc]
push esi
call fcn.00403910
push 0
push 0
push 0
push 1
push 0
mov dword [ebp - 0x2714], 0
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x26f8], eax
test eax, eax
je 0x43008c
push 4
lea ecx, [ebp - 0x2714]
push ecx
push 2
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionW]
mov eax, dword [ebp - 0x2704]
push 0
push 0x102
push 0
push 0
push eax
push dword [ebp - 0x26f8]
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
mov ecx, eax
mov eax, dword [sym.imp.WININET.dll_InternetCloseHandle]
test ecx, ecx
je 0x430084
push ecx
call eax
mov eax, dword [sym.imp.WININET.dll_InternetCloseHandle]
push dword [ebp - 0x26f8]
call eax
push 0
push str._PCMasterTray
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x2714], eax
test eax, eax
je 0x4300c3
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4300c3
push 0
push 4
push 0x708
push dword [ebp - 0x2714]
call dword [sym.imp.USER32.dll_PostMessageW]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4300da
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4300f1
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2728]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43010e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x2704]
mov edx, dword [ebp - 0x2724]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x430131
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x2750]
test eax, eax
je 0x4301a0
mov edi, eax
cmp eax, dword [ebp - 0x274c]
je 0x430172
mov edx, dword [edi]
mov eax, ebx
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43015e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0x6bc
cmp edi, dword [ebp - 0x274c]
jne 0x430145
mov eax, dword [ebp - 0x2750]
mov ecx, dword [ebp - 0x2748]
sub ecx, eax
mov eax, 0x980e4157
imul ecx
add edx, ecx
lea ecx, [ebp - 0x2750]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, dword [ebp - 0x2750]
push eax
call fcn.00435db0
mov eax, dword [ebp - 0x2760]
test eax, eax
je 0x43020e
mov edi, eax
cmp eax, dword [ebp - 0x275c]
je 0x4301e1
mov edx, dword [edi]
mov eax, ebx
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4301cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0x6bc
cmp edi, dword [ebp - 0x275c]
jne 0x4301b4
mov eax, dword [ebp - 0x2760]
mov ecx, dword [ebp - 0x2758]
sub ecx, eax
mov eax, 0x980e4157
imul ecx
add edx, ecx
lea ecx, [ebp - 0x2760]
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push dword [ebp - 0x2760]
call fcn.00435db0
mov edx, dword [ebp - 0x2740]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43022b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2744]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x430248
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2718]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x430265
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x271c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x430282
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x430297
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004495f3
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
call fcn.004026d0
push 0x80004005
call fcn.00402080
call fcn.004026d0
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
call fcn.004026d0
call fcn.004026d0
push 0x80004005
call fcn.00402080
call fcn.004026d0
push 0x80004005
call fcn.00402080
call fcn.004026d0
push 0x80070057
call fcn.00402080
call fcn.004026d0
call fcn.004026d0
call fcn.004026d0
push 0x80004005
call fcn.00402080
push 0x80070057
call fcn.00402080
push 0x80070057
call fcn.00402080
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
int3