Function at 0x416300
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 1
push 3
mov ebx, 0x479ba0
call fcn.004796d5
add esp, 0x28
mov dword [ebp - 0x1c], eax
push 1
push dword [ebp - 0x1c]
push 0x20
call fcn.00416e16
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x416392
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 8
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
push 2
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, str.user_agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_94.0.4606.71_Safari_537.36_Core_1.94.186.400_QQBrowser_11.3.5195.400
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
push 1
push dword [ebp + 0xc]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov eax, str.https:__www.om.cn_v55_file_token_safe1
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00403ab1
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4164a9
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4164b9
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4164c9
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4164d9
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4164e9
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4164f9
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x416509
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x416519
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x416529
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x47e590
call fcn.004796d5
add esp, 0x10
call fcn.004796db
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x41655f
mov eax, 0x54adff
push eax
push 1
mov ebx, 0x47bad0
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x416585
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x416599
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov eax, 0x54adce
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, str.data_:_
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040a204
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4165e9
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4165f9
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41660d
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x54adb4
push dword [ebp - 0xc]
call fcn.004011f7
add esp, 8
cmp eax, 0
je 0x416d5c
mov eax, str.https:__upload_z2.qiniup.com_
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x416640
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push getpeername
push 0
push str.______WebKitFormBoundaryGl2melmJxWpG5Mlu_r_nContent_Disposition:_form_data__name_file___filename_MK6cK7Aj6XR3VUuTxANMqpljsQ1aNY0K.jpg__r_nContent_Type:_image_jpeg_r_n_r_n_img__r_n______WebKitFormBoundaryGl2melmJxWpG5Mlu_r_nContent_Disposition:_form_data__name_token__r_n_r_n_token__r_n______WebKitFormBoundaryGl2melmJxWpG5Mlu_r_nContent_Disposition:_form_data__name_key__r_n_r_n_url__r_n______WebKitFormBoundaryGl2melmJxWpG5Mlu_r_nContent_Disposition:_form_data__name_fname__r_n_r_n_name_.jpg_r_n______WebKitFormBoundaryGl2melmJxWpG5Mlu__
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x1c], eax
push getpeername
push 0
push str._img_
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x20], eax
push getpeername
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x41669b
mov eax, 0x54adb4
push eax
push 1
mov eax, 4
mov ebx, 0x4e72a0
call fcn.004796f3
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, 6
call fcn.00401294
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x4166d3
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4166e7
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4166fb
mov eax, 0x54adff
push eax
push 5
mov ebx, 0x47b650
call fcn.004796d5
add esp, 0x40
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x416721
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x416731
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x416741
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x416755
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push getpeername
push 0
push str._token_
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x1c], eax
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x41678d
mov eax, 0x54adb4
push eax
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, 6
call fcn.00401294
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4167c0
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4167d4
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4167e8
mov eax, 0x54adff
push eax
push 5
mov ebx, 0x47b650
call fcn.004796d5
add esp, 0x40
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41680e
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41681e
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x416832
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push getpeername
push 0
push str._name_
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x1c], eax
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41686a
mov eax, 0x54adb4
push eax
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, 6
call fcn.00401294
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41689d
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4168b1
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4168c5
mov eax, 0x54adff
push eax
push 5
mov ebx, 0x47b650
call fcn.004796d5
add esp, 0x40
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4168eb
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4168fb
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41690f
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push getpeername
push 0
push str._url_
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0
mov ebx, 0x47c280
call fcn.004796d5
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 1
push 1
mov eax, 0x54adb4
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
mov eax, str.yyyy_M_d
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x20]
push dword [ebp - 0x24]
call fcn.0040b460
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x416999
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4169a9
push ebx
call fcn.004796db
add esp, 4
push str..jpg
push dword [ebp - 4]
push 0x57595a
push dword [ebp - 0x34]
push str.v3_image_search_
mov ecx, 5
call fcn.004010a4
add esp, 0x14
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4169de
push ebx
call fcn.004796db
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x4169f1
mov eax, 0x54adb4
push eax
push 1
mov ebx, 0x47b070
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x416a17
push ebx
call fcn.004796db
add esp, 4
mov ebx, 6
call fcn.00401294
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x416a34
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x416a48
mov eax, 0x54adff
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x416a5c
mov eax, 0x54adff
push eax
push 5
mov ebx, 0x47b650
call fcn.004796d5
add esp, 0x40
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x416a82
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x416a92
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x416aa6
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 8
call fcn.004796cf
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, str.Content_Type:_multipart_form_data__boundary____WebKitFormBoundaryGl2melmJxWpG5Mlu_r_n
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
push 1
push 1
lea eax, [ebp - 0x10]
push eax
call fcn.00403ab1
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x416bb6
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x416bc6
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x416bd6
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x416be6
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x416bf6
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x416c06
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x416c16
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x416c26
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x47e590
call fcn.004796d5
add esp, 0x10
call fcn.004796db
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x416c5c
mov eax, 0x54adff
push eax
push 1
mov ebx, 0x47bad0
call fcn.004796d5
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x416c82
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x416c96
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov eax, 0x54adce
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, str.key_:_
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040a204
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x416ce6
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x416cf6
push ebx
call fcn.004796db
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x416d0a
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x54adb4
push dword [ebp - 8]
call fcn.004011f7
add esp, 8
cmp eax, 0
je 0x416d57
push dword [ebp - 8]
push str.https:__down.om.cn_
mov ecx, 2
call fcn.004010a4
add esp, 8
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x416d53
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
jmp 0x416d8d
mov eax, dword [ebp - 8]
test eax, eax
je 0x416d78
push eax
mov ebx, eax
call fcn.00401039
inc eax
push eax
call fcn.004796cf
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x416d89
push ebx
call fcn.004796db
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x416da9
push eax
mov ebx, eax
call fcn.00401039
inc eax
push eax
call fcn.004796cf
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x416dae
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x416dbf
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x416dcf
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x416ddf
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x416def
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x416dff
push ebx
call fcn.004796db
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x416e0f
push ebx
call fcn.004796db
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 8