Function at 0x402f31
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
push 0xc
call fcn.0040c9c5
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x490cd7
push ebx
add ebx, 4
push ebx
push 8
call fcn.0040c9c5
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00405bab
pop ebx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push 4
call fcn.0040c9c5
add esp, 4
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
push 8
call fcn.0040c9c5
add esp, 4
mov dword [ebp - 0x40], eax
mov edi, eax
mov esi, 0x4907f9
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
push 0
push 0
push 0
push 1
mov ebx, 0x40cde0
call fcn.0040c9dd
add esp, 0x10
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x45f2a0
call fcn.0040c9ef
add esp, 0x28
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40309e
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x45f2a0
call fcn.0040c9ef
add esp, 0x28
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4030f5
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x4908b9
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, str.skey
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00404b08
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x403151
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x403161
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x403175
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
call fcn.00404d69
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x403199
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 1
mov ebx, 0x40cde0
call fcn.0040c9dd
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16011bc4
push 0x52010001
call fcn.0040c9e9
add esp, 0x10
mov dword [ebp - 0x4c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4031e1
mov eax, 0x4907e4
push eax
push 1
mov ebx, 0x40d410
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403207
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x50]
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x404953
cmp dword [ebp - 0x14], 1
jle 0x4032e1
push reloc.WS2_32.dll_connect
push 0
push 0x4908c1
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
push 0xffffffffffffffff
push 8
push 0x16011140
push 0x52010001
call fcn.0040c9e9
add esp, 0x10
mov dword [ebp - 0x4c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x40329f
mov eax, 0x4907e4
push eax
push 1
mov ebx, 0x40d410
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4032c5
push ebx
call fcn.0040c9cb
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x50]
push 1
mov ebx, 0x40f1f0
call fcn.0040c9dd
add esp, 0x10
push 0x80000301
push 0
push dword [0x510b20]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push dword [ebp - 0x14]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push 0x4908ca
push dword [ebp - 0x4c]
push 0x4908cc
mov ecx, 4
call fcn.004016d5
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403352
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x403362
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x403375
mov eax, 0x4907e4
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4033c2
push ebx
call fcn.0040c9cb
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, str.http:__2013gujianzhu.act.qq.com_
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4033f8
push ebx
call fcn.0040c9cb
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x30]
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403435
push ebx
call fcn.0040c9cb
add esp, 4
call fcn.00404eba
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push 0x4908f6
push dword [ebp - 0x10]
push str.http:__2013gujianzhu.act.qq.com_fileupload_fileupload_ticket_g_tk
mov ecx, 4
call fcn.004016d5
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40346d
push ebx
call fcn.0040c9cb
add esp, 4
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x10]
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4034a8
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4034b8
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, str.XMLHttpRequest
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov eax, str.X_Requested_With
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4034ee
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4034fe
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, str.http:__2013gujianzhu.act.qq.com_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403528
push ebx
call fcn.0040c9cb
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x48]
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00405037
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403567
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40357b
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x49095b
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4035b0
mov eax, 0x4907e4
push eax
push 4
mov ebx, 0x40d170
call fcn.0040c9dd
add esp, 0x34
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jle 0x404865
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x490964
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, str._ticket_:_
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00404b08
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x403628
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x403638
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40364c
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x80000301
push 0
push dword [ebp - 0x14]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push 0x490971
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403697
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x4036aa
mov eax, 0x4907e4
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4036f7
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [0x510b18]
call fcn.00401004
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push 1
push 2
mov ebx, 0x40ce80
call fcn.0040c9dd
add esp, 0x1c
mov dword [ebp - 0x24], eax
push 0
mov ebx, 0x40cdc0
call fcn.0040c9dd
add esp, 4
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x510b18]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x50]
push dword [ebx]
push 0x49097a
push dword [ebp - 0x4c]
mov ecx, 3
call fcn.004016d5
add esp, 0xc
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403789
push ebx
call fcn.0040c9cb
add esp, 4
lea eax, [ebp - 0x54]
push eax
call fcn.004052af
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4037a5
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4037b9
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0x80000301
push 0
push dword [0x510b20]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push dword [ebp - 0x14]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push 0x4908ca
push dword [ebp - 0x4c]
push 0x490985
mov ecx, 4
call fcn.004016d5
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40382e
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40383e
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x403851
mov eax, 0x4907e4
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40389e
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
push str.upload.act.qq.com
push 1
mov ebx, 0x40f210
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push 0x50
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4038de
mov eax, 0x4907e4
push eax
push 0x70002
push 0
push dword [ebp - 0x2c]
push 3
mov eax, 6
mov ebx, 0x467820
call fcn.0040c9ef
add esp, 0x28
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403910
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x403923
mov eax, 0x4907f9
push eax
push 1
mov ebx, 0x40cda0
call fcn.0040c9dd
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
push 0x4909a0
push dword [ebp - 8]
push str._r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__WOW64__Trident_5.0__r_nHost:_upload.act.qq.com_r_nConnection:_Keep_Alive_r_nCache_Control:_no_cache_r_nCookie:
push dword [ebp - 0x50]
push str._HTTP_1.1_r_nAccept:___r_nAccept_Language:_zh_CN_r_nReferer:_http:__2013gujianzhu.act.qq.com_swf_xuehua2.swf_r_nx_flash_version:_11_5_502_146_r_nContent_Type:_application_x_www_form_urlencoded_r_nContent_Length:
push dword [ebp - 0x20]
push str.actid641010043ticket
push dword [ebp - 4]
push str.POST__cgi_bin_up_pic_flash_uin
mov ecx, 9
call fcn.004016d5
add esp, 0x24
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x403998
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x4039ab
mov eax, 0x4907e4
push eax
push 1
mov ebx, 0x40dad0
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4039d1
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4039e5
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push dword [ebp - 0x28]
push dword [ebp - 0x30]
mov ecx, 2
call fcn.00402eda
add esp, 8
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push 0x3a98
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x403a1e
mov eax, 0x4907f9
push eax
push 0x70002
push 0
push dword [ebp - 0x2c]
push 3
mov eax, 6
mov ebx, 0x467980
call fcn.0040c9ef
add esp, 0x28
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403a50
push ebx
call fcn.0040c9cb
add esp, 4
push 0
push 0
push 0
push 0x80000301
push 0
push 0x3a98
push 0x70002
push 0
push dword [ebp - 0x2c]
push 3
mov eax, 6
mov ebx, 0x4678d0
call fcn.0040c9ef
add esp, 0x28
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x403a9a
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x80000301
push 0
push 0xef
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x403abd
mov eax, 0x4907f9
push eax
push 2
mov ebx, 0x40db80
call fcn.0040c9dd
add esp, 0x1c
mov dword [ebp - 0x4c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x403ae6
mov eax, 0x4907f9
push eax
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403b0c
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403b20
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x490b72
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, str.Content_Length:
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00404b08
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x403b7c
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x403b8c
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x403b9f
mov eax, 0x4907e4
push eax
push 1
mov ebx, 0x40d410
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x403bc5
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x38], eax
push 0x80000301
push 0
push dword [ebp - 0x38]
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x403be8
mov eax, 0x4907f9
push eax
push 2
mov ebx, 0x40dbc0
call fcn.0040c9dd
add esp, 0x1c
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004053fc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403c1a
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x403c2d
mov eax, 0x4907f9
push eax
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x403c53
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403c67
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov eax, 0x490964
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov eax, str._body.store_url_:_
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00404b08
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x403cc3
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x403cd3
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x403ce7
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0x4907e4
push dword [ebp - 0x3c]
call fcn.00401731
add esp, 8
cmp eax, 0
je 0x404818
push 0x80000301
push 0
push dword [0x510b20]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push dword [ebp - 0x14]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push 0x4908ca
push dword [ebp - 0x4c]
push 0x490b99
mov ecx, 4
call fcn.004016d5
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403d75
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x403d85
push ebx
call fcn.0040c9cb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x403d98
mov eax, 0x4907e4
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x403de5
push ebx
call fcn.0040c9cb
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, str.http:__2013gujianzhu.act.qq.com_default_uploadFile
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x10]
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x403e28
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403e38
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, str._http:__2013gujianzhu.act.qq.com_
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403e62
push ebx
call fcn.0040c9cb
add esp, 4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
push 0
mov ebx, 0x40cdc0
call fcn.0040c9dd
add esp, 4
mov dword [ebp - 0x4c], eax
push 0x490bf7
push dword [ebp - 0x4c]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403eb1
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [0x510b18]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
mov ebx, dword [0x510b18]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x58], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x490841
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x58]
mov eax, dword [ebx]
test eax, eax
jne 0x403f1c
mov eax, 0x4907e4
push eax
push 4
mov ebx, 0x40d170
call fcn.0040c9dd
add esp, 0x34
mov dword [ebp - 0x64], eax
fild dword [ebp - 0x64]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
fsub qword [0x4907ea]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
call fcn.00401025
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x54]
mov eax, dword [ebx]
test eax, eax
jne 0x403f6f
mov eax, 0x4907e4
push eax
push 2
mov ebx, 0x40cf00
call fcn.0040c9dd
add esp, 0x1c
mov dword [ebp - 0x70], eax
push reloc.WS2_32.dll_connect
push 0
push 0x4907e4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x403faa
mov eax, 0x4907e4
push eax
push reloc.WS2_32.dll_connect
push 0
push 0x490c01
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x403fca
mov eax, 0x4907e4
push eax
push 4
mov ebx, 0x40f280
call fcn.0040c9dd
add esp, 0x34
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x403ff3
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x404006
push ebx
call fcn.0040c9cb
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4907e5
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x40402e
mov eax, 0x4907e4
push eax
push 3
mov ebx, 0x40d940
call fcn.0040c9dd
add esp, 0x28
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x40405a
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40407f
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40407b
imul eax, dword [ebx]
jmp 0x404070
mov ecx, eax
test ecx, ecx
je 0x40409e
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404097
push ebx
push eax
call fcn.0040c9cb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404085
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x40]
call fcn.00401004
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
je 0x40410c
push reloc.WS2_32.dll_connect
push 0
push 0x490c04
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
jmp 0x40494b
lea eax, [ebp - 0x3c]
push eax
call fcn.004056c7
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x50], ebx
push dword [ebp - 0x50]
call fcn.004056c7
mov dword [ebp - 0x54], eax
push dword [ebp - 0x54]
push str.province
push dword [ebp - 0x4c]
push str.picUrl
mov ecx, 4
call fcn.004016d5
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40416b
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40417b
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40418f
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
push str.title
push dword [ebp - 0x44]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4041bf
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
push 0xffffffffffffffff
push 9
push 0x16011b42
push 0x52010001
call fcn.0040c9e9
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x490c2e
push dword [ebp - 0x4c]
call fcn.00401731
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40420a
push ebx
call fcn.0040c9cb
add esp, 4
cmp dword [ebp - 0x50], 0
je 0x404319
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push 0
push 2
mov ebx, 0x40ce80
call fcn.0040c9dd
add esp, 0x1c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x4042b2
mov eax, 0x490c37
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004056c7
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40426f
push ebx
call fcn.0040c9cb
add esp, 4
push dword [ebp - 0x50]
push dword [ebp - 0x44]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x404295
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4042a9
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
jmp 0x404314
mov eax, 0x490c44
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004056c7
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4042d6
push ebx
call fcn.0040c9cb
add esp, 4
push dword [ebp - 0x50]
push dword [ebp - 0x44]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4042fc
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x404310
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
jmp 0x40438c
push 0xffffffffffffffff
push 9
push 0x16011b42
push 0x52010001
call fcn.0040c9e9
add esp, 0x10
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004056c7
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40434e
push ebx
call fcn.0040c9cb
add esp, 4
push dword [ebp - 0x50]
push dword [ebp - 0x44]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x404374
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x404388
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
call fcn.004058cc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004056c7
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4043b0
push ebx
call fcn.0040c9cb
add esp, 4
push dword [ebp - 0x50]
push str.friends
push dword [ebp - 0x44]
mov ecx, 3
call fcn.004016d5
add esp, 0xc
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4043db
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4043ef
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
push 0xffffffffffffffff
push 0x12
push 0x16011814
push 0x52010001
call fcn.0040c9e9
add esp, 0x10
test eax, eax
je 0x404446
push str.listen1
push dword [ebp - 0x44]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40443d
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
jmp 0x404476
push str.listen0
push dword [ebp - 0x44]
mov ecx, 2
call fcn.004016d5
add esp, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x404472
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [0x510b24]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov ebx, dword [0x510b24]
call fcn.00401004
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push 1
push 2
mov ebx, 0x40ce80
call fcn.0040c9dd
add esp, 0x1c
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
push dword [ebp - 0x54]
call fcn.004056c7
mov dword [ebp - 0x58], eax
push dword [ebp - 0x58]
push str.userName
push dword [ebp - 0x44]
mov ecx, 3
call fcn.004016d5
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4044f6
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40450a
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x4c]
call fcn.004056c7
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push str.fileName
push dword [ebp - 0x44]
mov ecx, 3
call fcn.004016d5
add esp, 0xc
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40455c
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x404570
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 2
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x4c]
call fcn.004056c7
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push str.desc
push dword [ebp - 0x44]
mov ecx, 3
call fcn.004016d5
add esp, 0xc
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4045c2
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4045d6
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
push 1
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x30]
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x48]
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00405037
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40461b
push ebx
call fcn.0040c9cb
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40462f
push ebx
call fcn.0040c9cb
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x490c88
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x404664
mov eax, 0x4907e4
push eax
push 4
mov ebx, 0x40d170
call fcn.0040c9dd
add esp, 0x34
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jle 0x4047cb
push reloc.WS2_32.dll_connect
push 0
push 0x490c95
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
inc dword [ebp - 0x48]
push 0x80000301
push 0
push dword [0x510b28]
push 1
mov eax, 2
mov ebx, 0x463a30
call fcn.0040c9ef
add esp, 0x10
push 0xffffffffffffffff
push 8
push 0x16011b44
push 0x52010001
call fcn.0040c9e9
add esp, 0x10
mov dword [ebp - 0x4c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x40471f
mov eax, 0x4907e4
push eax
push 1
mov ebx, 0x40d410
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x404745
push ebx
call fcn.0040c9cb
add esp, 4
fild dword [ebp - 0x50]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
fadd qword [0x4907ea]
fstp qword [ebp - 0x60]
push 0x80000601
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x64], eax
push 0
push dword [ebp - 0x64]
push 0xffffffffffffffff
push 8
push 0x16011b44
push 0x52010001
call fcn.0040c9e3
add esp, 0x18
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4047a2
push ebx
call fcn.0040c9cb
add esp, 4
push 0x80000301
push 0
push dword [0x510b28]
push 1
mov eax, 2
mov ebx, 0x463a50
call fcn.0040c9ef
add esp, 0x10
jmp 0x404813
push reloc.WS2_32.dll_connect
push 0
push 0x490ca2
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
jmp 0x404860
push reloc.WS2_32.dll_connect
push 0
push 0x490caf
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
jmp 0x40494b
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x490cbc
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x404896
mov eax, 0x4907e4
push eax
push 4
mov ebx, 0x40d170
call fcn.0040c9dd
add esp, 0x34
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jle 0x404903
push reloc.WS2_32.dll_connect
push 0
push 0x490cc1
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
jmp 0x40494b
push reloc.WS2_32.dll_connect
push 0
push 0x490cca
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
pop eax
pop ebx
pop ecx
jmp 0x403213
add esp, 0xc
push 0x80000301
push 0
push dword [ebp - 0x48]
push 1
mov ebx, 0x40df10
call fcn.0040c9dd
add esp, 0x10
mov dword [ebp - 0x4c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x404988
mov eax, 0x4907e4
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp + 8]
push 0x20004
push 0x16010002
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x45f470
call fcn.0040c9ef
add esp, 0x34
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4049d5
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4049e5
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4049f5
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x404a05
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x404a15
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x404a35
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x404a45
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x404a55
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x2c]
push ebx
push 0x70002
push 0
push ebx
push 1
mov eax, 6
mov ebx, 0x4680a0
call fcn.0040c9ef
add esp, 0x10
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x404a8d
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x404a9d
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x404aad
push ebx
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404acb
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404ac7
imul eax, dword [ebx]
jmp 0x404abc
mov ecx, eax
test ecx, ecx
je 0x404aea
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404ae3
push ebx
push eax
call fcn.0040c9cb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404ad1
call fcn.0040c9cb
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x404b02
push ebx
call fcn.0040c9cb
add esp, 4
mov esp, ebp
pop ebp
ret 4