Function at 0x415788
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x1c
call fcn.004711ec
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
push 0xc
call fcn.004711ec
add esp, 4
mov dword [ebp - 0x40], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x5660bc
push ebx
add ebx, 8
push ebx
push 8
call fcn.004711ec
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00415743
pop ebx
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str..com
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.https:__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 8]
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4158b8
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4158c8
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4158dc
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
push dword [ebp + 8]
call fcn.0040d8d6
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41599a
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4159aa
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4159ba
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4159ca
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4159da
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4159ea
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4159fa
push ebx
call fcn.004711f2
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x415a0d
mov eax, 0x542d0d
push eax
push 1
mov ebx, 0x4763f0
call fcn.00471204
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x415a33
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x415a47
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x542baa
push dword [ebp - 8]
call fcn.00401bc8
add esp, 8
cmp eax, 0
jne 0x415b4d
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0x194
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.004711ec
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x415aa7
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x415ac6
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x415ae5
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x415b04
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x415b23
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x415b42
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x416ac5
mov ebx, dword [ebp - 0xc]
add ebx, 4
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x566314
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x415ba2
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x415bb2
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x415bc8
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0xc
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x566326
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x415c23
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x415c33
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x415c49
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0x10
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str.__font__br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x566344
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x415ca4
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x415cb4
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x415cca
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
add ebx, 0x14
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str._br_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x56635c
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x415d25
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x415d35
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x415d4b
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.src
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x415d82
mov eax, 0x542baa
push eax
push 4
mov ebx, 0x471f60
call fcn.00471204
add esp, 0x34
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [0x565e2c]
fstp qword [ebp - 0x50]
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
fld qword [ebp - 0x50]
call fcn.0040107e
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
push str.src
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x415de5
mov eax, 0x542baa
push eax
push 4
mov ebx, 0x471f60
call fcn.00471204
add esp, 0x34
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x415e0e
mov eax, 0x542baa
push eax
push 1
mov ebx, 0x4718e0
call fcn.00471204
add esp, 0x10
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x54]
fsub qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
fadd qword [0x542d15]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.0040107e
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x415e68
mov eax, 0x542baa
push eax
push 2
mov ebx, 0x471cb0
call fcn.00471204
add esp, 0x1c
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x415e92
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x565e99
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.src__fn_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x415ee2
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x415ef2
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x415f06
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push str..com_fn_
push dword [ebp - 4]
push str.https:__
mov ecx, 4
call fcn.0040298e
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x415f3e
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.0040d8d6
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x415ffd
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41600d
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x41601d
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41602d
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41603d
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41604d
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41605d
push ebx
call fcn.004711f2
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x416070
mov eax, 0x542d0d
push eax
push 1
mov ebx, 0x4763f0
call fcn.00471204
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x416096
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4160aa
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x566386
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.__data
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4160fa
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41610a
push ebx
call fcn.004711f2
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401c65
push reloc.WS2_32.dll_connect
push 0
push 0x542baa
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x41613f
mov eax, 0x542baa
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x416153
mov eax, 0x542baa
push eax
push 6
mov ebx, 0x472890
call fcn.00471204
add esp, 0x4c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x416179
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41618d
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56600d
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str._action:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4161dd
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4161ed
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x416201
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56601e
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.ajaxdata___
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x416251
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x416261
push ebx
call fcn.004711f2
add esp, 4
push dword [ebp - 0x54]
push 0x56639e
mov ecx, 2
call fcn.0040298e
add esp, 8
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x416289
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41629d
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56600d
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.sign:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4162ed
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4162fd
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x416311
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56601e
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.ciucjdsdc__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x416361
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x416371
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x416385
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x56601e
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.aihidcms__
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4163d5
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4163e5
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4163f9
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x5663c6
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str._ves:
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040fa4c
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x416449
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x416459
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41646d
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push str.ves
push dword [ebp - 0x2c]
push str.websignkey
push dword [ebp - 0x28]
push str.websign
push dword [ebp - 0x24]
push str.sign
push dword [ebp - 0x20]
push str.signs
push dword [ebp - 0x1c]
push str.action
mov ecx, 0xc
call fcn.0040298e
add esp, 0x30
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4164c5
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push str..com
push dword [ebp - 4]
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0_r_nHost:
mov ecx, 3
call fcn.0040298e
add esp, 0xc
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4164fa
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str..com
push dword [ebp - 4]
push str._r_nOrigin:_https:__
push dword [ebp - 0x38]
mov ecx, 4
call fcn.0040298e
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x416532
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push dword [ebp - 0x14]
push str._r_nReferer:
push dword [ebp - 0x38]
mov ecx, 3
call fcn.0040298e
add esp, 0xc
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x416565
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push str..com_ajaxm.php
push dword [ebp - 4]
push str.https:__
mov ecx, 3
call fcn.0040298e
add esp, 0xc
mov dword [ebp - 0x44], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x416599
mov eax, 0x542baa
push eax
push 1
mov ebx, 0x472c10
call fcn.00471204
add esp, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.0040d8d6
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41665b
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41666b
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41667b
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x41668b
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41669b
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4166ab
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4166bb
push ebx
call fcn.004711f2
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x4166ce
mov eax, 0x542d0d
push eax
push 1
mov ebx, 0x4763f0
call fcn.00471204
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4166f4
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x416708
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0x20
call fcn.004711ec
add esp, 4
mov dword [ebp - 0x44], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x44]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416764
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416778
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41678c
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4167a0
push ebx
call fcn.004711f2
add esp, 4
pop ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 1
mov eax, 0x566037
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4167ea
push ebx
call fcn.004711f2
add esp, 4
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
mov eax, 0x56602d
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x416825
push ebx
call fcn.004711f2
add esp, 4
push dword [ebp - 0x5c]
push str._file_
push dword [ebp - 0x50]
mov ecx, 3
call fcn.0040298e
add esp, 0xc
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x416850
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x416860
push ebx
call fcn.004711f2
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x416876
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov ebx, dword [ebp - 0x44]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
push 0x542baa
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401bc8
add esp, 8
cmp eax, 0
jne 0x416986
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0xffffffff
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.004711ec
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4168e0
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4168ff
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41691e
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41693d
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41695c
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41697b
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x416ac5
mov ebx, dword [ebp - 0xc]
add ebx, 0x18
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebx], 0xc8
cmp dword [ebp + 0x10], 0
mov eax, 0
sete al
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x4169ee
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
je 0x4169d5
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4169e8
push ebx
call fcn.004711f2
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov eax, dword [ebp - 0xc]
push eax
push 0x1c
call fcn.004711ec
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x416a1f
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x416a3e
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x416a5d
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x416a7c
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x416a9b
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x416aba
push eax
mov ebx, eax
call fcn.00402481
inc eax
push eax
call fcn.004711ec
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
jmp 0x416ac5
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x416ad6
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x416ae6
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416afa
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416b0e
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416b22
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416b36
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416b4a
push ebx
call fcn.004711f2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x416b5e
push ebx
call fcn.004711f2
add esp, 4
pop ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x416b77
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x416b87
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x416b97
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x416ba7
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x416bb7
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x416bc7
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x416bd7
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x416be7
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x416bf7
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x416c07
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x416c17
push ebx
call fcn.004711f2
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.004711f2
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc