Function at 0x40ee70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x473107
mov eax, dword fs:[0]
push eax
sub esp, 0x160
mov eax, dword [0x4934a4]
xor eax, esp
mov dword [esp + 0x158], eax
push ebx
push esi
push edi
mov eax, dword [0x4934a4]
xor eax, esp
push eax
lea eax, [esp + 0x170]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x38], esi
jmp 0x40eec8
call fcn.0041e575
xor ecx, ecx
xor ebx, ebx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40eee4
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov edi, 1
mov dword [esp + 0x178], edi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x178], 3
mov ecx, dword [esi + 0x19c]
push ebx
push ebx
push 0x1009
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push 0x3ef
mov ecx, esi
call fcn.00423eed
mov ecx, eax
call fcn.004240e7
push ebx
push 0x3ee
mov ecx, esi
call fcn.00423eed
mov ecx, eax
call fcn.004240e7
cmp dword [ebp + 8], ebx
je 0x4100d0
call fcn.0041e575
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40ef73
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0x178], 5
call fcn.0041e575
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40efa5
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x178], 7
call fcn.0041e575
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40efd7
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x178], 9
mov dword [esp + 0x30], edi
mov ecx, dword [esp + 0x30]
push ecx
push str.http:__tieba.baidu.com_f_like_mylike_pn
lea edx, [esp + 0x48]
push str._s_d
push edx
call fcn.00409010
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [0x4ae218]
lea edx, [esp + 0x60]
push edx
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0x60]
push eax
push ecx
push ebx
push edx
xor ecx, ecx
mov edx, str.http:__tieba.baidu.com
call fcn.0040b380
add esp, 0x2c
test eax, eax
je 0x40f5f3
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov byte [esp + 0x178], 0xb
push 0x100000
push 0x480313
push str._a_href____._kw_____.____a_
lea ecx, [esp + 0x90]
call fcn.00466f70
mov byte [esp + 0x178], 0xc
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x178], 0xd
lea eax, [esp + 0x74]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x70], bl
mov dword [esp + 0x50], eax
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x178], 0xf
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x80], 1
mov byte [esp + 0x178], 0x10
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
push ecx
push edi
lea ecx, [esp + 0xac]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
call fcn.00408130
mov byte [esp + 0x178], 0x11
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xa4]
mov esi, ecx
cmp eax, 0x10
jae 0x40f150
lea esi, [esp + 0xa4]
mov eax, esi
mov edx, dword [esp + 0xb4]
add edx, eax
push edi
mov dword [esp + 0x54], edx
call fcn.0041dcac
add esp, 4
jmp 0x40f140
mov eax, dword [esp + 0x84]
cmp eax, ebx
je 0x40f154
mov eax, dword [eax + 0x18]
jmp 0x40f156
mov eax, ecx
jmp 0x40f122
xor eax, eax
test eax, 0x80000
jne 0x40f4ea
lea eax, [esp + 0x54]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], ebx
mov byte [esp + 0x178], 0x12
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x84]
lea edx, [esp + 0x84]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0x108], edx
mov dword [esp + 0xf0], esi
mov dword [esp + 0xf8], esi
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], esi
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x128]
lea edx, [esp + 0x124]
mov dword [esp + 0x10c], eax
mov byte [esp + 0x123], bl
mov dword [esp + 0x124], ecx
mov dword [esp + 0x138], ebx
mov dword [esp + 0x128], edx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], 0xffffffff
mov dword [esp + 0x134], ebx
mov byte [esp + 0x178], 0x13
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x178], 0x14
push ebx
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0xec]
call fcn.0045f810
mov byte [esp + 0x178], 0x15
lea ecx, [esp + 0xe4]
call fcn.00466d90
mov byte [esp + 0x13], al
mov byte [esp + 0x178], 0x17
mov eax, dword [esp + 0x144]
cmp eax, ebx
je 0x40f29b
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x14c]
lea edx, [esp + 0x154]
push edx
push ecx
push eax
call fcn.00414db0
mov edx, dword [esp + 0x154]
push edx
call fcn.0041dcac
add esp, 0x14
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x178], 0x16
mov eax, dword [esp + 0x12c]
cmp eax, ebx
je 0x40f2cc
mov ecx, dword [esp + 0x128]
mov dword [ecx], eax
mov byte [esp + 0x178], 0x11
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x4c], eax
cmp eax, ebx
je 0x40f35b
mov byte [esp + 0x178], 0x19
add eax, 0x20
mov dword [esp + 0x3c], eax
mov byte [esp + 0x178], 0x19
mov edi, dword [eax + 4]
cmp edi, ebx
je 0x40f32b
lea edx, [edi + 4]
or eax, 0xffffffff
lock xadd dword [edx], eax
jne 0x40f32b
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
lea ecx, [edi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x40f32b
mov eax, dword [edi]
mov edx, dword [eax + 8]
mov ecx, edi
call edx
mov byte [esp + 0x178], 0x11
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
cmp eax, ebx
je 0x40f346
push eax
call fcn.0041dcac
add esp, 4
mov eax, dword [esp + 0x4c]
push eax
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
call fcn.0041dcac
add esp, 4
cmp byte [esp + 0x13], bl
je 0x40f4ea
mov esi, dword [esp + 0x38]
mov ecx, dword [esi + 0x19c]
push ebx
push ebx
push 0x1004
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
add esi, 0x17c
push 1
mov ecx, esi
call fcn.00427c72
mov ecx, dword [esp + 0x54]
mov edi, eax
mov eax, dword [esp + 0x58]
cmp byte [esp + 0x80], bl
je 0x40f3ad
cmp ecx, eax
je 0x40f5fc
sub eax, ecx
mov edx, eax
mov eax, 0x2aaaaaab
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 3
jle 0x40f3cb
add ecx, 0x24
jmp 0x40f3cf
lea ecx, [esp + 0x68]
lea edx, [esp + 0xc8]
push edx
call fcn.00413880
mov byte [esp + 0x178], 0x1c
cmp dword [eax + 0x14], 0x10
jb 0x40f3ec
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004097a0
mov byte [esp + 0x17c], 0x1d
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x180], 0x1c
call fcn.00413270
mov byte [esp + 0x178], 0x1e
mov eax, dword [eax]
push eax
push ebx
push edi
mov ecx, esi
call fcn.00427aa4
mov byte [esp + 0x178], 0x1c
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f44f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x178], 0x11
cmp dword [esp + 0xdc], 0x10
jb 0x40f471
mov ecx, dword [esp + 0xc8]
push ecx
call fcn.0041dcac
add esp, 4
push 0x480314
push 1
push edi
mov ecx, esi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
call fcn.00427aa4
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push edi
mov ecx, esi
call fcn.00427cb5
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
cmp byte [esp + 0x80], bl
je 0x40f4c2
cmp esi, eax
je 0x40f5fc
sub eax, esi
mov ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
lea eax, [esi + 0x18]
jg 0x40f4e2
lea eax, [esp + 0x68]
mov esi, dword [eax + 4]
jmp 0x40f140
mov eax, dword [esp + 0xa4]
mov ecx, 0x10
cmp dword [esp + 0xb8], ecx
jae 0x40f506
lea eax, [esp + 0xa4]
cmp esi, eax
je 0x40f601
mov byte [esp + 0x178], cl
cmp dword [esp + 0xb8], ecx
jb 0x40f52e
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.0041dcac
add esp, 4
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], bl
mov byte [esp + 0x178], 0x20
lea edx, [esp + 0x74]
mov dword [esp + 0x3c], edx
mov byte [esp + 0x178], 0x20
mov esi, dword [esp + 0x78]
cmp esi, ebx
je 0x40f591
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x40f591
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x40f591
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov byte [esp + 0x178], 0xc
mov eax, dword [esp + 0x54]
cmp eax, ebx
je 0x40f5aa
push eax
call fcn.0041dcac
add esp, 4
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x178], 9
mov esi, dword [esp + 0x88]
cmp esi, ebx
je 0x40f5f3
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x40f5f3
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x40f5f3
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
inc dword [esp + 0x30]
jmp 0x40eff3
call fcn.00413bc0
mov byte [esp + 0x178], cl
cmp dword [esp + 0xb8], ecx
jb 0x40f621
mov eax, dword [esp + 0xa4]
push eax
call fcn.0041dcac
add esp, 4
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], bl
mov al, 0x25
mov byte [esp + 0x178], al
lea ecx, [esp + 0x74]
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x178], al
mov esi, dword [esp + 0x78]
cmp esi, ebx
je 0x40f684
lea edx, [esi + 4]
or eax, 0xffffffff
lock xadd dword [edx], eax
jne 0x40f684
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x40f684
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov byte [esp + 0x178], 0xc
mov eax, dword [esp + 0x54]
cmp eax, ebx
je 0x40f69d
push eax
call fcn.0041dcac
add esp, 4
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x178], 9
mov esi, dword [esp + 0x88]
cmp esi, ebx
je 0x40f6e6
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x40f6e6
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x40f6e6
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x19c]
push ebx
push ebx
push 0x1004
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jne 0x40fb15
push 0x15
push str.http:__wapp.baidu.com
lea ecx, [esp + 0x48]
call fcn.00409670
push 9
push str._mo_q___0
lea ecx, [esp + 0x48]
call fcn.004022e0
push 0x22
push str.__1_1_0__2_m_tnbdFBWtabfavorite
lea ecx, [esp + 0x48]
call fcn.004022e0
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
mov eax, dword [0x4ae218]
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x4c]
lea edx, [esp + 0x50]
push edx
push eax
push str.User_Agent:_Safari_U_iOS_5.1.1_Zh_cn_320480___UCWEB8.4.1.169_42_997_r_n
push ecx
xor ecx, ecx
mov edx, str.http:__wapp.baidu.com
call fcn.0040b380
add esp, 0x1c
test eax, eax
je 0x40fb15
mov edx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x34]
push eax
call fcn.00401000
add esp, 8
mov byte [esp + 0x178], 0x2a
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov byte [esp + 0x178], 0x2c
push 0x100000
push 0x480313
push str._a_href____._kw_____.____a_
lea ecx, [esp + 0x90]
call fcn.00466f70
mov byte [esp + 0x178], 0x2d
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x178], 0x2e
lea ecx, [esp + 0x74]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x70], bl
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x178], 0x30
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x80], 1
mov byte [esp + 0x178], 0x31
mov esi, dword [esp + 0x30]
mov eax, esi
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40f836
sub eax, edi
push eax
push esi
lea ecx, [esp + 0xac]
call fcn.00408130
mov byte [esp + 0x178], 0x32
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xa4]
mov esi, ecx
cmp eax, 0x10
jae 0x40f920
lea esi, [esp + 0xa4]
mov eax, esi
mov edi, dword [esp + 0xb4]
add edi, eax
mov eax, dword [esp + 0x1c]
push eax
mov dword [esp + 0x54], edi
call fcn.0041dcac
add esp, 4
push esi
lea ecx, [esp + 0x58]
push ecx
push edi
push esi
lea ecx, [esp + 0x94]
call fcn.00414600
add esp, 0x10
test al, al
je 0x40fa64
mov edi, dword [esp + 0x38]
add edi, 0x17c
lea ebx, [ebx]
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x19c]
push ebx
push ebx
push 0x1004
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push 1
mov ecx, edi
call fcn.00427c72
mov ecx, dword [esp + 0x54]
mov esi, eax
mov eax, dword [esp + 0x58]
cmp byte [esp + 0x80], bl
je 0x40f902
cmp ecx, eax
je 0x40f5fc
sub eax, ecx
mov edx, eax
mov eax, 0x2aaaaaab
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 3
jle 0x40f927
add ecx, 0x24
jmp 0x40f92b
mov eax, ecx
jmp 0x40f877
lea ecx, [esp + 0x68]
lea edx, [esp + 0xc8]
push edx
call fcn.00413880
mov byte [esp + 0x178], 0x33
cmp dword [eax + 0x14], 0x10
jb 0x40f948
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004097a0
mov byte [esp + 0x17c], 0x34
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x180], 0x33
call fcn.00413270
mov byte [esp + 0x178], 0x35
mov eax, dword [eax]
push eax
push ebx
push esi
mov ecx, edi
call fcn.00427aa4
mov byte [esp + 0x178], 0x33
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40f9ab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x178], 0x32
cmp dword [esp + 0xdc], 0x10
jb 0x40f9cd
mov ecx, dword [esp + 0xc8]
push ecx
call fcn.0041dcac
add esp, 4
push 0x480314
push 1
push esi
mov ecx, edi
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
call fcn.00427aa4
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push esi
mov ecx, edi
call fcn.00427cb5
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
cmp byte [esp + 0x80], bl
je 0x40fa1e
cmp esi, eax
je 0x40f5fc
sub eax, esi
mov ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
lea eax, [esi + 0x18]
jg 0x40fa3e
lea eax, [esp + 0x68]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x50]
push eax
lea ecx, [esp + 0x58]
push ecx
push edx
push eax
lea ecx, [esp + 0x94]
call fcn.00414600
add esp, 0x10
test al, al
jne 0x40f8c0
mov byte [esp + 0x178], 0x31
cmp dword [esp + 0xb8], 0x10
jb 0x40fa86
mov eax, dword [esp + 0xa4]
push eax
call fcn.0041dcac
add esp, 4
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], bl
mov byte [esp + 0x178], 0x2d
lea ecx, [esp + 0x54]
call fcn.00413790
mov byte [esp + 0x178], 0x2a
mov esi, dword [esp + 0x88]
cmp esi, ebx
je 0x40faed
lea ecx, [esi + 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x40faed
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x40faed
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov byte [esp + 0x178], 9
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40fb15
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x19c]
push ebx
push ebx
push 0x1004
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jne 0x41004f
mov eax, dword [0x4ae210]
push eax
push 0x4803b0
lea ecx, [esp + 0x28]
call fcn.0040db50
mov ecx, dword [0x4ae1f4]
push ecx
push str._client_id
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x4803c4
push str._client_type
lea ecx, [esp + 0x28]
call fcn.0040db50
push str.4.5.3
push str._client_version
lea ecx, [esp + 0x28]
call fcn.0040db50
mov edx, dword [0x4ae1f8]
push edx
push str._phone_imei
lea ecx, [esp + 0x28]
call fcn.0040db50
mov eax, dword [0x4ae1fc]
push eax
push str.cuid
lea ecx, [esp + 0x28]
call fcn.0040db50
push str.baidu_appstore
push str.from
lea ecx, [esp + 0x28]
call fcn.0040db50
push str.GT_I9100
push str.model
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480430
push str.net_type
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480440
push str.stErrorNums
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480450
push str.stMethod
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480450
push str.stMode
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480468
push str.stSize
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480474
push str.stTime
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480440
push str.stTimesNum
lea ecx, [esp + 0x28]
call fcn.0040db50
lea esi, [esp + 0x14]
call fcn.00416050
mov byte [esp + 0x178], 0x3a
mov eax, dword [eax]
push eax
push str.timestamp
lea ecx, [esp + 0x28]
call fcn.0040db50
mov byte [esp + 0x178], 9
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40fca2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
call fcn.0040d780
mov byte [esp + 0x178], 0x3c
push eax
lea ecx, [esp + 0x38]
call fcn.0040a040
mov byte [esp + 0x178], 9
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40fcea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
cmp dword [eax - 4], 1
mov esi, dword [eax - 0xc]
jle 0x40fd05
push esi
lea ecx, [esp + 0x38]
call fcn.004094d0
mov eax, dword [esp + 0x34]
push 0x32
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x24]
push ecx
push esi
push eax
push str.http:__c.tieba.baidu.com_c_f_forum_like
mov edx, str.POST
mov ecx, str.http:__c.tieba.baidu.com_c_f_forum_like
call fcn.004019b0
add esp, 0x18
test eax, eax
je 0x41004f
lea edx, [esp + 0xe4]
push edx
call fcn.00418c20
mov byte [esp + 0x178], 0x3e
push ebx
lea edi, [esp + 0xa8]
call fcn.0041c040
mov byte [esp + 0x178], 0x3f
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x98], 0xf
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40fd80
sub eax, edx
push eax
mov eax, dword [esp + 0x20]
push eax
lea ecx, [esp + 0x8c]
call fcn.00408130
mov byte [esp + 0x178], 0x40
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x8c]
push ecx
lea ecx, [esp + 0x120]
call fcn.00408040
mov edx, dword [esp + 0x114]
mov esi, 0x10
cmp dword [esp + 0x128], esi
jae 0x40fdd6
lea edx, [esp + 0x114]
mov ecx, dword [esp + 0x124]
lea eax, [esp + 0xa4]
lea ecx, [ecx + edx]
push eax
lea edi, [esp + 0xe8]
call fcn.00418d30
mov byte [esp + 0x13], al
mov byte [esp + 0x178], 0x3f
cmp dword [esp + 0x98], esi
jb 0x40fe19
mov ecx, dword [esp + 0x84]
push ecx
call fcn.0041dcac
add esp, 4
mov dword [esp + 0x98], 0xf
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
cmp byte [esp + 0x13], bl
je 0x410019
push str.error_code
lea edx, [esp + 0xa8]
push edx
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x50]
call fcn.004097a0
mov byte [esp + 0x178], 0x41
mov eax, dword [esp + 0x4c]
push 0x480440
push eax
call fcn.0043c642
add esp, 8
cmp eax, ebx
jne 0x40fff1
push str.forum_list
lea ecx, [esp + 0xa8]
push ecx
call fcn.0041c890
push eax
lea ecx, [esp + 0x88]
call fcn.0041c1e0
mov byte [esp + 0x178], 0x42
cmp byte [esp + 0x8c], bl
je case.0x40fec5.0
mov dword [esp + 0x18], ebx
movsx eax, byte [esp + 0x8c]
cmp eax, 7
ja case.0x40fec5.0
jmp dword [eax*4 + 0x410724]
mov eax, dword [esp + 0x84]
cmp dword [eax + 8], ebx
je case.0x40fec5.0
mov edx, dword [eax + 4]
lea eax, [esp + 0x30]
mov dword [esp + 0x30], edx
call fcn.0041d2b0
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x14]
inc eax
jmp 0x40ff00
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx + 8]
cmp dword [esp + 0x18], eax
jae case.0x40fec5.0
mov edi, dword [esp + 0x38]
mov edx, dword [edi + 0x19c]
push ebx
push ebx
push 0x1004
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
add edi, 0x17c
push 1
mov ecx, edi
call fcn.00427c72
mov esi, eax
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x88]
push ecx
call fcn.0041c650
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.0041c1e0
mov byte [esp + 0x188], 0x43
push str.name
lea edx, [esp + 0x28]
push edx
mov byte [esp + 0x190], 0x42
call fcn.00416120
mov byte [esp + 0x178], 0x44
mov eax, dword [eax]
push eax
push ebx
push esi
mov ecx, edi
call fcn.00427aa4
mov byte [esp + 0x178], 0x42
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ffb5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x480314
push 1
push esi
mov ecx, edi
call fcn.00427aa4
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push esi
mov ecx, edi
call fcn.00427cb5
inc dword [esp + 0x18]
jmp 0x40feb4
mov byte [esp + 0x178], 0x41
lea ecx, [esp + 0x84]
call fcn.0041c340
mov byte [esp + 0x178], 0x3f
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410019
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0041dcac
add esp, 4
mov byte [esp + 0x178], 0x3e
lea ecx, [esp + 0xa4]
call fcn.0041c340
mov byte [esp + 0x178], 9
lea edx, [esp + 0xe4]
push edx
call fcn.004107d0
mov byte [esp + 0x178], 7
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410077
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x178], 5
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41009f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x178], 3
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410659
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x410659
mov ecx, dword [0x4ae210]
push ecx
push 0x4803b0
lea ecx, [esp + 0x28]
call fcn.0040db50
mov edx, dword [0x4ae1f4]
push edx
push str._client_id
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x4803c4
push str._client_type
lea ecx, [esp + 0x28]
call fcn.0040db50
push str.4.5.3
push str._client_version
lea ecx, [esp + 0x28]
call fcn.0040db50
mov eax, dword [0x4ae1f8]
push eax
push str._phone_imei
lea ecx, [esp + 0x28]
call fcn.0040db50
mov ecx, dword [0x4ae1fc]
push ecx
push str.cuid
lea ecx, [esp + 0x28]
call fcn.0040db50
push str.baidu_appstore
push str.from
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480450
push str.like_forum
lea ecx, [esp + 0x28]
call fcn.0040db50
push str.GT_I9100
push str.model
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480430
push str.net_type
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480440
push str.recommend
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480440
push str.stErrorNums
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480450
push str.stMethod
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480450
push str.stMode
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x4804f8
push str.stSize
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x4804fc
push str.stTime
lea ecx, [esp + 0x28]
call fcn.0040db50
push 0x480440
push str.stTimesNum
lea ecx, [esp + 0x28]
call fcn.0040db50
lea esi, [esp + 0x14]
call fcn.00416050
mov byte [esp + 0x178], 0x4a
mov eax, dword [eax]
push eax
push str.timestamp
lea ecx, [esp + 0x28]
call fcn.0040db50
mov byte [esp + 0x178], 3
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x410264
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
call fcn.0040d780
mov byte [esp + 0x178], 0x4c
push eax
lea ecx, [esp + 0x38]
call fcn.0040a040
mov byte [esp + 0x178], 3
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4102ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
cmp dword [eax - 4], 1
mov esi, dword [eax - 0xc]
jle 0x4102c7
push esi
lea ecx, [esp + 0x38]
call fcn.004094d0
mov eax, dword [esp + 0x34]
push 0x32
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x24]
push ecx
push esi
push eax
push str.http:__c.tieba.baidu.com_c_f_forum_forumrecommend
mov edx, str.POST
mov ecx, str.http:__c.tieba.baidu.com_c_f_forum_forumrecommend
call fcn.004019b0
add esp, 0x18
test eax, eax
je 0x410659
lea edx, [esp + 0xe4]
push edx
call fcn.00418c20
mov byte [esp + 0x178], 0x4e
push ebx
lea edi, [esp + 0xa8]
call fcn.0041c040
mov byte [esp + 0x178], 0x4f
mov esi, dword [esp + 0x1c]
mov eax, esi
mov dword [esp + 0x98], 0xf
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x410340
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x8c]
call fcn.00408130
mov byte [esp + 0x178], 0x50
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x120]
call fcn.00408040
cmp dword [esp + 0x128], 0x10
mov edx, dword [esp + 0x114]
jae 0x41038e
lea edx, [esp + 0x114]
mov ecx, dword [esp + 0x124]
lea eax, [esp + 0xa4]
add ecx, edx
push eax
lea edi, [esp + 0xe8]
call fcn.00418d30
mov byte [esp + 0x13], al
mov byte [esp + 0x178], 0x4f
cmp dword [esp + 0x98], 0x10
jb 0x4103d1
mov ecx, dword [esp + 0x84]
push ecx
call fcn.0041dcac
add esp, 4
mov dword [esp + 0x98], 0xf
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
cmp byte [esp + 0x13], bl
je 0x410627
push str.error_code
lea edx, [esp + 0xa8]
push edx
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x4c]
call fcn.004097a0
mov byte [esp + 0x178], 0x51
mov eax, dword [esp + 0x48]
push 0x480440
push eax
call fcn.0043c642
add esp, 8
cmp eax, ebx
jne 0x4105ff
push str.like_forum
lea ecx, [esp + 0xa8]
push ecx
call fcn.0041c890
push eax
lea ecx, [esp + 0x88]
call fcn.0041c1e0
mov byte [esp + 0x178], 0x52
cmp byte [esp + 0x8c], bl
je 0x4105e7
lea ecx, [esp + 0x84]
mov dword [esp + 0x18], ebx
call fcn.0041c5e0
test eax, eax
je 0x4105e7
mov esi, dword [esp + 0x38]
add esi, 0x17c
lea ebx, [ebx]
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x88]
push eax
call fcn.0041c650
push str.is_sign
push eax
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x48]
call fcn.004097a0
mov byte [esp + 0x178], 0x53
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x19c]
push ebx
push ebx
push 0x1004
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push 1
mov ecx, esi
call fcn.00427c72
mov edi, eax
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x88]
push ecx
call fcn.0041c650
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.0041c1e0
mov byte [esp + 0x188], 0x54
push str.forum_name
lea edx, [esp + 0x28]
push edx
mov byte [esp + 0x190], 0x53
call fcn.00416120
mov byte [esp + 0x178], 0x55
mov eax, dword [eax]
push eax
push ebx
push edi
mov ecx, esi
call fcn.00427aa4
mov byte [esp + 0x178], 0x53
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410566
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x44]
push 0x480450
push ecx
call fcn.0043c642
add esp, 8
mov ecx, esi
cmp eax, ebx
jne 0x410585
push 0x480548
jmp 0x41058a
push 0x480314
push 1
push edi
call fcn.00427aa4
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push edi
mov ecx, esi
call fcn.00427cb5
mov byte [esp + 0x178], 0x52
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4105ca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [esp + 0x18]
inc edi
lea ecx, [esp + 0x84]
mov dword [esp + 0x18], edi
call fcn.0041c5e0
cmp edi, eax
jb 0x410490
mov byte [esp + 0x178], 0x51
lea ecx, [esp + 0x84]
call fcn.0041c340
mov esi, dword [esp + 0x1c]
mov byte [esp + 0x178], 0x4f
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410627
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
call fcn.0041dcac
add esp, 4
mov byte [esp + 0x178], 0x4e
lea ecx, [esp + 0xa4]
call fcn.0041c340
mov byte [esp + 0x178], 3
lea ecx, [esp + 0xe4]
push ecx
call fcn.004107d0
mov esi, dword [esp + 0x38]
push 1
push 0x3ef
mov ecx, esi
call fcn.00423eed
mov ecx, eax
call fcn.004240e7
push 1
push 0x3ee
mov ecx, esi
call fcn.00423eed
mov ecx, eax
call fcn.004240e7
jmp 0x410697
mov byte [esp + 0x178], 1
mov esi, dword [esp + 0x20]
cmp esi, ebx
je 0x4106c3
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x24]
push edx
push eax
push esi
call fcn.0040e310
add esp, 0xc
push esi
call fcn.0041dcac
add esp, 4
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x178], 0xffffffff
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4106fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x158]
xor ecx, esp
call fcn.0043ae62
mov esp, ebp
pop ebp
ret 4