Function at 0x43e0ab
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x1c
call fcn.0047106b
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
push 0xc
call fcn.0047106b
add esp, 4
mov dword [ebp - 0x40], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x567bac
push ebx
add ebx, 8
push ebx
push 8
call fcn.0047106b
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.0043e066
pop ebx
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str..com
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.https:__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 8]
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43e1db
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43e1eb
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x43e1ff
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
push dword [ebp + 8]
call fcn.004361f9
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x43e2bd
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43e2cd
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x43e2dd
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43e2ed
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43e2fd
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x43e30d
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43e31d
push ebx
call fcn.00471071
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x43e330
mov eax, 0x5441d5
push eax
push 1
mov ebx, 0x476270
call fcn.00471083
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x43e356
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x43e36a
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x542baa
push dword [ebp - 8]
call fcn.00401469
add esp, 8
cmp eax, 0
jne 0x43e470
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0x194
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.0047106b
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43e3ca
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43e3e9
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43e408
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43e427
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43e446
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43e465
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x43f3e8
mov ebx, dword [ebp - 0xc]
add ebx, 4
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x567e00
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0043836f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43e4c5
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43e4d5
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43e4eb
push ebx
call fcn.00471071
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0xc
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x567e12
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0043836f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43e546
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43e556
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43e56c
push ebx
call fcn.00471071
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0x10
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str.__font__br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x567e30
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0043836f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43e5c7
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43e5d7
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43e5ed
push ebx
call fcn.00471071
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0x14
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x567e48
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0043836f
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43e648
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43e658
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43e66e
push ebx
call fcn.00471071
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.src
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x43e6a5
mov eax, 0x542baa
push eax
push 4
mov ebx, 0x471de0
call fcn.00471083
add esp, 0x34
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [0x565dae]
fstp qword [ebp - 0x50]
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
fld qword [ebp - 0x50]
call fcn.004011b9
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
push str.src
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x43e708
mov eax, 0x542baa
push eax
push 4
mov ebx, 0x471de0
call fcn.00471083
add esp, 0x34
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x43e731
mov eax, 0x542baa
push eax
push 1
mov ebx, 0x471760
call fcn.00471083
add esp, 0x10
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x54]
fsub qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
fadd qword [0x565b73]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.004011b9
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x43e78b
mov eax, 0x542baa
push eax
push 2
mov ebx, 0x471b30
call fcn.00471083
add esp, 0x1c
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x43e7b5
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x565e1b
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.src__fn_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43e805
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43e815
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x43e829
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push str..com_fn_
push dword [ebp - 4]
push str.https:__
mov ecx, 4
call fcn.00401df8
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x43e861
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004361f9
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x43e920
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43e930
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x43e940
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43e950
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43e960
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x43e970
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43e980
push ebx
call fcn.00471071
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x43e993
mov eax, 0x5441d5
push eax
push 1
mov ebx, 0x476270
call fcn.00471083
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x43e9b9
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x43e9cd
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x567e72
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.__data
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43ea1d
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43ea2d
push ebx
call fcn.00471071
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401506
push reloc.WS2_32.dll_connect
push 0
push 0x542baa
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x43ea62
mov eax, 0x542baa
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43ea76
mov eax, 0x542baa
push eax
push 6
mov ebx, 0x472710
call fcn.00471083
add esp, 0x4c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43ea9c
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x43eab0
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x567aff
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str._action:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43eb00
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43eb10
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43eb24
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x567b10
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.ajaxdata___
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43eb74
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43eb84
push ebx
call fcn.00471071
add esp, 4
push dword [ebp - 0x54]
push 0x567e8a
mov ecx, 2
call fcn.00401df8
add esp, 8
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x43ebac
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x43ebc0
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x567aff
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.sign:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43ec10
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43ec20
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x43ec34
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x567b10
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.ciucjdsdc__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43ec84
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43ec94
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x43eca8
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x567b10
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.aihidcms__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43ecf8
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43ed08
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x43ed1c
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x567eb2
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str._ves:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043836f
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43ed6c
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43ed7c
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x43ed90
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push str.ves
push dword [ebp - 0x2c]
push str.websignkey
push dword [ebp - 0x28]
push str.websign
push dword [ebp - 0x24]
push str.sign
push dword [ebp - 0x20]
push str.signs
push dword [ebp - 0x1c]
push str.action
mov ecx, 0xc
call fcn.00401df8
add esp, 0x30
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43ede8
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push str..com
push dword [ebp - 4]
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0_r_nHost:
mov ecx, 3
call fcn.00401df8
add esp, 0xc
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43ee1d
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str..com
push dword [ebp - 4]
push str._r_nOrigin:_https:__
push dword [ebp - 0x38]
mov ecx, 4
call fcn.00401df8
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43ee55
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push dword [ebp - 0x14]
push str._r_nReferer:
push dword [ebp - 0x38]
mov ecx, 3
call fcn.00401df8
add esp, 0xc
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43ee88
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str..com_ajaxm.php
push dword [ebp - 4]
push str.https:__
mov ecx, 3
call fcn.00401df8
add esp, 0xc
mov dword [ebp - 0x44], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43eebc
mov eax, 0x542baa
push eax
push 1
mov ebx, 0x472a90
call fcn.00471083
add esp, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.004361f9
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x43ef7e
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x43ef8e
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x43ef9e
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x43efae
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x43efbe
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x43efce
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x43efde
push ebx
call fcn.00471071
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x43eff1
mov eax, 0x5441d5
push eax
push 1
mov ebx, 0x476270
call fcn.00471083
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x43f017
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43f02b
push ebx
call fcn.00471071
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0x20
call fcn.0047106b
add esp, 4
mov dword [ebp - 0x44], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x44]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f087
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f09b
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f0af
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f0c3
push ebx
call fcn.00471071
add esp, 4
pop ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 1
mov eax, 0x567b27
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x43f10d
push ebx
call fcn.00471071
add esp, 4
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
mov eax, 0x567b1f
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x43f148
push ebx
call fcn.00471071
add esp, 4
push dword [ebp - 0x5c]
push str._file_
push dword [ebp - 0x50]
mov ecx, 3
call fcn.00401df8
add esp, 0xc
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x43f173
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x43f183
push ebx
call fcn.00471071
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f199
push ebx
call fcn.00471071
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
push 0x542baa
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401469
add esp, 8
cmp eax, 0
jne 0x43f2a9
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0xffffffff
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.0047106b
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f203
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f222
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f241
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f260
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f27f
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f29e
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x43f3e8
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0xc8
cmp dword [ebp + 0x10], 0
mov eax, 0
sete al
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x43f311
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x43f2f8
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f30b
push ebx
call fcn.00471071
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.0047106b
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f342
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f361
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f380
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f39f
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f3be
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x43f3dd
push eax
mov ebx, eax
call fcn.00401d8d
inc eax
push eax
call fcn.0047106b
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x43f3e8
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x43f3f9
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x43f409
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f41d
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f431
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f445
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f459
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f46d
push ebx
call fcn.00471071
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x43f481
push ebx
call fcn.00471071
add esp, 4
pop ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x43f49a
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x43f4aa
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43f4ba
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x43f4ca
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x43f4da
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x43f4ea
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x43f4fa
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x43f50a
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x43f51a
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x43f52a
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x43f53a
push ebx
call fcn.00471071
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00471071
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc