Function at 0x1000292c
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push closesocket
push 0
push 1
mov ebx, 6
call fcn.100012c1
push getpeername
push 0
mov eax, dword [0x100caa78]
test eax, eax
jne 0x1000296e
mov eax, 0x1009ccf4
push eax
push getpeername
push 0
push str._ID_
push getpeername
push 0
push str.______WebKitFormBoundarytAGojJsc7OX7p30B_r_nContent_Disposition:_form_data__name_visiter_id__r_n_r_n_ID__r_n______WebKitFormBoundarytAGojJsc7OX7p30B_r_nContent_Disposition:_form_data__name_business_id__r_n_r_n1_r_n______WebKitFormBoundarytAGojJsc7OX7p30B_r_nContent_Disposition:_form_data__name_avatar__r_n_r_n_assets_images_index_avatar_red2.png_r_n______WebKitFormBoundarytAGojJsc7OX7p30B_r_nContent_Disposition:_form_data__name_record__r_n_r_n_r_n______WebKitFormBoundarytAGojJsc7OX7p30B_r_nContent_Disposition:_form_data__name_service_id__r_n_r_n1_r_n______WebKitFormBoundarytAGojJsc7OX7p30B_r_nContent_Disposition:_form_data__name_upload___filename_img_1679309852074.png__r_nContent_Type:_image_jpg_r_n_r_n
push 6
mov ebx, 0x1000b060
call fcn.1000a196
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100029b0
push ebx
call fcn.1000a17e
add esp, 4
pop eax
mov dword [ebp - 4], eax
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x100029c7
mov eax, 0x1009ccf4
push eax
push 1
mov ebx, 0x1000b3e0
call fcn.1000a196
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
push 0x1009d0a3
push 1
mov ebx, 0x1000b3e0
call fcn.1000a196
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0
mov ebx, 0x1000a720
call fcn.1000a196
add esp, 4
mov dword [ebp - 0x14], eax
push str..jpg
push dword [0x100caa74]
push str.Datapicture_
push dword [ebp - 0x14]
mov ecx, 4
call fcn.1000111d
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10002a46
push ebx
call fcn.1000a17e
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x10002a59
mov eax, 0x1009ccf4
push eax
push 1
mov ebx, 0x1000bb40
call fcn.1000a196
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10002a7f
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, 6
call fcn.100012c1
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x10002a9c
mov eax, 0x1009cd17
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x10002ab0
mov eax, 0x1009cd17
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10002ac4
mov eax, 0x1009cd17
push eax
push 5
mov ebx, 0x1000b700
call fcn.1000a196
add esp, 0x40
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10002aea
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10002afa
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10002b0a
push ebx
call fcn.1000a17e
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10002b1e
push ebx
call fcn.1000a17e
add esp, 4
pop eax
mov dword [ebp - 8], eax
push str._admin_event_upload
push dword [0x100caa60]
mov ecx, 2
call fcn.1000111d
add esp, 8
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_63.0.3239.132_Safari_537.36_r_nContent_Type:_multipart_form_data__boundary____WebKitFormBoundarytAGojJsc7OX7p30B
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
push 1
lea eax, [ebp - 0xc]
push eax
call fcn.10002d87
mov ebx, eax
test ebx, ebx
je 0x10002be1
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10002bf1
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10002c01
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10002c11
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x10002c21
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10002c31
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10002c41
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10002c51
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, 6
call fcn.100012c1
push ioctlsocket
push 0
push 0x100073a3
push 3
mov eax, 2
mov ebx, 0x10075b20
call fcn.1000a19c
add esp, 0x28
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10002c8e
push ebx
call fcn.1000a17e
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10002c9e
push ebx
call fcn.1000a17e
add esp, 4
mov esp, ebp
pop ebp
ret