Function at 0x416e4f
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x1c
call fcn.00470fd3
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
push 0xc
call fcn.00470fd3
add esp, 4
mov dword [ebp - 0x40], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x5666a9
push ebx
add ebx, 8
push ebx
push 8
call fcn.00470fd3
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00416e0a
pop ebx
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str..com
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.https:__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 8]
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x416f7f
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x416f8f
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x416fa3
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
push dword [ebp + 8]
call fcn.0040ef9d
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x417061
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x417071
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x417081
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x417091
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4170a1
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4170b1
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4170c1
push ebx
call fcn.00470fd9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x4170d4
mov eax, 0x543f8f
push eax
push 1
mov ebx, 0x4761d0
call fcn.00470feb
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4170fa
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41710e
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x543c8f
push dword [ebp - 8]
call fcn.0040189f
add esp, 8
cmp eax, 0
jne 0x417214
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0x194
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.00470fd3
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41716e
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41718d
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4171ac
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4171cb
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4171ea
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x417209
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x41818c
mov ebx, dword [ebp - 0xc]
add ebx, 4
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x566901
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00411113
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x417269
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x417279
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41728f
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0xc
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x566913
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00411113
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4172ea
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4172fa
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417310
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0x10
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str.__font__br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x566931
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00411113
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41736b
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41737b
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417391
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0x14
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x566949
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00411113
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4173ec
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4173fc
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417412
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.src
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x417449
mov eax, 0x543c8f
push eax
push 4
mov ebx, 0x471d40
call fcn.00470feb
add esp, 0x34
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [0x565b68]
fstp qword [ebp - 0x50]
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
fld qword [ebp - 0x50]
call fcn.004010e6
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
push str.src
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4174ac
mov eax, 0x543c8f
push eax
push 4
mov ebx, 0x471d40
call fcn.00470feb
add esp, 0x34
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4174d5
mov eax, 0x543c8f
push eax
push 1
mov ebx, 0x4716c0
call fcn.00470feb
add esp, 0x10
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x54]
fsub qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
fadd qword [0x56592d]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.004010e6
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x41752f
mov eax, 0x543c8f
push eax
push 2
mov ebx, 0x471a90
call fcn.00470feb
add esp, 0x1c
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x417559
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x565bd5
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.src__fn_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4175a9
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4175b9
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4175cd
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push str..com_fn_
push dword [ebp - 4]
push str.https:__
mov ecx, 4
call fcn.004019a7
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x417605
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.0040ef9d
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4176c4
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4176d4
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4176e4
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4176f4
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x417704
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x417714
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x417724
push ebx
call fcn.00470fd9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x417737
mov eax, 0x543f8f
push eax
push 1
mov ebx, 0x4761d0
call fcn.00470feb
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41775d
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x417771
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x566973
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.__data
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4177c1
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4177d1
push ebx
call fcn.00470fd9
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401897
push reloc.WS2_32.dll_connect
push 0
push 0x543c8f
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x417806
mov eax, 0x543c8f
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x41781a
mov eax, 0x543c8f
push eax
push 6
mov ebx, 0x472670
call fcn.00470feb
add esp, 0x4c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x417840
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x417854
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x5665fc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str._action:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4178a4
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4178b4
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4178c8
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56660d
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.ajaxdata___
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x417918
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x417928
push ebx
call fcn.00470fd9
add esp, 4
push dword [ebp - 0x54]
push 0x56698b
mov ecx, 2
call fcn.004019a7
add esp, 8
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x417950
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x417964
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x5665fc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.sign:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4179b4
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4179c4
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4179d8
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56660d
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.ciucjdsdc__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x417a28
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x417a38
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417a4c
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56660d
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.aihidcms__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x417a9c
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x417aac
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x417ac0
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x5669b3
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str._ves:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411113
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x417b10
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x417b20
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x417b34
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push str.ves
push dword [ebp - 0x2c]
push str.websignkey
push dword [ebp - 0x28]
push str.websign
push dword [ebp - 0x24]
push str.sign
push dword [ebp - 0x20]
push str.signs
push dword [ebp - 0x1c]
push str.action
mov ecx, 0xc
call fcn.004019a7
add esp, 0x30
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x417b8c
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push str..com
push dword [ebp - 4]
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0_r_nHost:
mov ecx, 3
call fcn.004019a7
add esp, 0xc
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x417bc1
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str..com
push dword [ebp - 4]
push str._r_nOrigin:_https:__
push dword [ebp - 0x38]
mov ecx, 4
call fcn.004019a7
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x417bf9
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push dword [ebp - 0x14]
push str._r_nReferer:
push dword [ebp - 0x38]
mov ecx, 3
call fcn.004019a7
add esp, 0xc
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x417c2c
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str..com_ajaxm.php
push dword [ebp - 4]
push str.https:__
mov ecx, 3
call fcn.004019a7
add esp, 0xc
mov dword [ebp - 0x44], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x417c60
mov eax, 0x543c8f
push eax
push 1
mov ebx, 0x4729f0
call fcn.00470feb
add esp, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.0040ef9d
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x417d22
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x417d32
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x417d42
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x417d52
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x417d62
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x417d72
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x417d82
push ebx
call fcn.00470fd9
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x417d95
mov eax, 0x543f8f
push eax
push 1
mov ebx, 0x4761d0
call fcn.00470feb
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x417dbb
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x417dcf
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0x20
call fcn.00470fd3
add esp, 4
mov dword [ebp - 0x44], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x44]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x417e2b
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x417e3f
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x417e53
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x417e67
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 1
mov eax, 0x566624
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x417eb1
push ebx
call fcn.00470fd9
add esp, 4
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
mov eax, 0x56661c
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x417eec
push ebx
call fcn.00470fd9
add esp, 4
push dword [ebp - 0x5c]
push str._file_
push dword [ebp - 0x50]
mov ecx, 3
call fcn.004019a7
add esp, 0xc
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x417f17
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x417f27
push ebx
call fcn.00470fd9
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x417f3d
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
push 0x543c8f
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.0040189f
add esp, 8
cmp eax, 0
jne 0x41804d
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0xffffffff
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.00470fd3
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x417fa7
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x417fc6
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x417fe5
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418004
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418023
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418042
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x41818c
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0xc8
cmp dword [ebp + 0x10], 0
mov eax, 0
sete al
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x4180b5
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x41809c
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4180af
push ebx
call fcn.00470fd9
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.00470fd3
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4180e6
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418105
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418124
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418143
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418162
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418181
push eax
mov ebx, eax
call fcn.0040193c
inc eax
push eax
call fcn.00470fd3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x41818c
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41819d
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4181ad
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4181c1
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4181d5
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4181e9
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4181fd
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x418211
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x418225
push ebx
call fcn.00470fd9
add esp, 4
pop ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41823e
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41824e
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41825e
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41826e
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41827e
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41828e
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41829e
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4182ae
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4182be
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4182ce
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4182de
push ebx
call fcn.00470fd9
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00470fd9
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc