Function at 0x40de90
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
push 0xd80f29
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa8]
push 0xd80f2d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1b8]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x40dfca
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov eax, 0xd7cbc7
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.00405843
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40df0b
push ebx
call fcn.0045f7d4
add esp, 4
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov eax, 0xd77388
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.00405843
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40df3b
push ebx
call fcn.0045f7d4
add esp, 4
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
push 0x40
push 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xc]
push eax
push dword [0xd80efd]
call fcn.0040f148
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40dfa5
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40dfb5
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40dfc5
push ebx
call fcn.0045f7d4
add esp, 4
jmp 0x40f144
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 0xd7caae
push dword [ebp - 8]
call fcn.0040182e
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e011
push ebx
call fcn.0045f7d4
add esp, 4
cmp dword [ebp - 0xc], 0
jne 0x40e070
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 0x14], eax
push 0x4892fe
push dword [ebp - 0x14]
call fcn.0040182e
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e062
push ebx
call fcn.0045f7d4
add esp, 4
cmp dword [ebp - 0x18], 0
jne 0x40e070
xor eax, eax
jmp 0x40e075
mov eax, 1
test eax, eax
je 0x40e16c
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov eax, 0xd7cbe0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.00405843
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e0ad
push ebx
call fcn.0045f7d4
add esp, 4
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov eax, 0xd77388
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.00405843
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e0dd
push ebx
call fcn.0045f7d4
add esp, 4
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
push 0x40
push 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xc]
push eax
push dword [0xd80efd]
call fcn.0040f148
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e147
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40e157
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40e167
push ebx
call fcn.0045f7d4
add esp, 4
jmp 0x40f144
push 0xd80f2d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1b8]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jne 0x40e958
push 0xd7cbf9
push dword [0xd80ee1]
call fcn.0040182e
add esp, 8
cmp eax, 0
jne 0x40e2bb
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.Referer:_https:__www.aliyundrive.com__r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f4d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e239
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40e249
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40e259
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40e269
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e279
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40e289
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e299
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40e2b0
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40e8b6
push 0xd7ccc4
push dword [0xd80ee1]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40e2f7
push 0xd7ccd1
push dword [0xd80ee1]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40e2f7
xor eax, eax
jmp 0x40e2fc
mov eax, 1
test eax, eax
je 0x40e401
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cce6
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.falloc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
push 0xd80f51
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f4d
call fcn.0040f452
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e38f
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40e39f
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40e3af
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e3bf
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40e3cf
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e3df
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40e3f6
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40e8b6
push 0xd7ccf0
push dword [0xd80ee1]
call fcn.0040182e
add esp, 8
cmp eax, 0
jne 0x40e531
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.Accept_Encoding:gzip__deflate__br_r_nAccept_Language:zh_CN_zh_q0.9_r_nCache_Control:no_cache_r_nConnection:keep_alive_r_neferer:https:__www.123pan.com__r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f4d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e4af
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40e4bf
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40e4cf
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40e4df
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e4ef
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40e4ff
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e50f
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40e526
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40e8b6
push 0xd7ce1c
push dword [0xd80ee1]
call fcn.0040182e
add esp, 8
cmp eax, 0
jne 0x40e661
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.Referer:https:__cowtransfer.com_r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f4d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e5df
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40e5ef
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40e5ff
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40e60f
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e61f
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40e62f
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e63f
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40e656
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40e8b6
push 0xd7ced8
push dword [0xd80ee1]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40e69d
push 0xd7cee3
push dword [0xd80ee1]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40e69d
xor eax, eax
jmp 0x40e6a2
mov eax, 1
test eax, eax
je 0x40e7a7
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cce6
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
push 0xd80f55
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f4d
call fcn.0040f452
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e735
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40e745
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40e755
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e765
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40e775
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e785
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40e79c
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40e8b6
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f4d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e839
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40e849
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40e859
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40e869
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40e879
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40e889
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e899
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40e8b0
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
push 0xd80f49
call fcn.0041003c
push 1
push 0xd80f59
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x41421d
call fcn.004120d7
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov eax, 0xd7cf84
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.00405843
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e90d
push ebx
call fcn.0045f7d4
add esp, 4
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
lea eax, [ebp - 0xc]
push eax
push 0xd80f31
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e93f
push ebx
call fcn.0045f7d4
add esp, 4
push 0
push 0xd80f31
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x78]
jmp 0x40f144
push 0xd80f2d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1b8]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jne 0x40f144
push 0xd7cbf9
push dword [0xd80ee5]
call fcn.0040182e
add esp, 8
cmp eax, 0
jne 0x40eaa7
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.Referer:_https:__www.aliyundrive.com__r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f5d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40ea25
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ea35
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ea45
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40ea55
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ea65
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ea75
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ea85
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40ea9c
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40f0a2
push 0xd7ccc4
push dword [0xd80ee5]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40eae3
push 0xd7ccd1
push dword [0xd80ee5]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40eae3
xor eax, eax
jmp 0x40eae8
mov eax, 1
test eax, eax
je 0x40ebed
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cce6
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.falloc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
push 0xd80f51
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f5d
call fcn.0040f452
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40eb7b
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40eb8b
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40eb9b
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ebab
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ebbb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ebcb
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40ebe2
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40f0a2
push 0xd7ccf0
push dword [0xd80ee5]
call fcn.0040182e
add esp, 8
cmp eax, 0
jne 0x40ed1d
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.Accept_Encoding:gzip__deflate__br_r_nAccept_Language:zh_CN_zh_q0.9_r_nCache_Control:no_cache_r_nConnection:keep_alive_r_neferer:https:__www.123pan.com__r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f5d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40ec9b
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ecab
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ecbb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40eccb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ecdb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40eceb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ecfb
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40ed12
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40f0a2
push 0xd7ce1c
push dword [0xd80ee5]
call fcn.0040182e
add esp, 8
cmp eax, 0
jne 0x40ee4d
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.Referer:https:__cowtransfer.com_r_nUser_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f5d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40edcb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40eddb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40edeb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40edfb
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ee0b
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ee1b
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ee2b
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40ee42
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40f0a2
push 0xd7ced8
push dword [0xd80ee5]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40ee89
push 0xd7cee3
push dword [0xd80ee5]
call fcn.0040182e
add esp, 8
cmp eax, 0
je 0x40ee89
xor eax, eax
jmp 0x40ee8e
mov eax, 1
test eax, eax
je 0x40ef93
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cce6
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
push 0xd80f55
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f5d
call fcn.0040f452
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40ef21
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ef31
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40ef41
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ef51
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ef61
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ef71
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40ef88
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
jmp 0x40f0a2
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xd80f45
call fcn.0040f237
mov dword [ebp - 8], eax
push 1
mov eax, 0xd7cc06
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, str.trunc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_116.0.0.0_Safari_537.36_Edg_116.0.1938.76
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0xd80ee9
push 0xd80f5d
call fcn.0040f452
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40f025
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f035
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f045
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40f055
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40f065
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f075
push ebx
call fcn.0045f7d4
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f085
push ebx
call fcn.0045f7d4
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [0xd80f49]
test ebx, ebx
je 0x40f09c
push ebx
call fcn.0045f7d4
add esp, 4
pop eax
mov dword [0xd80f49], eax
push 0xd80f49
call fcn.0041003c
push 1
push 0xd80f59
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x41421d
call fcn.004120d7
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov eax, 0xd7cf84
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.00405843
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40f0f9
push ebx
call fcn.0045f7d4
add esp, 4
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
lea eax, [ebp - 0xc]
push eax
push 0xd80f31
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40f12b
push ebx
call fcn.0045f7d4
add esp, 4
push 0
push 0xd80f31
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x78]
jmp 0x40f144
mov esp, ebp
pop ebp
ret