Function at 0x407e41
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xfc
mov eax, 0x6d47d5
call fcn.0057bf64
mov edi, edx
mov dword [ebp - 0xc4], ecx
mov eax, dword [ebp + 8]
mov ecx, str.Services::RequestDownloadUrl
cmp dword [0x7d2140], 0x10
mov ebx, 0x7d212c
push 0x78903c
push ecx
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0xc]
push str.INFO:
mov dword [ebp - 0xec], eax
mov eax, dword [ebp + 0x10]
push 0x3b9
push ecx
mov dword [ebp - 0xf0], eax
mov eax, ebx
cmovae eax, dword [0x7d212c]
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push eax
push str.MYSD_ErrMsg_JiSu
push 1
call fcn.0042b82f
add esp, 0x24
xor eax, eax
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xb8], al
push 0xf
pop ecx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 4], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov byte [ebp - 0x58], al
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov byte [ebp - 0xa0], al
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov byte [ebp - 0x70], al
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xdc]
push eax
mov byte [ebp - 0xe4], al
call fcn.00409ca2
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x100]
push 0
mov byte [ebp - 0x108], 0
call fcn.00409ca2
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xcc]
push 0
mov byte [ebp - 0xd4], 0
call fcn.00409ca2
movzx eax, byte [edi + 0xd8]
sub esp, 0x10
mov dword [ebp - 0xbc], eax
mov ecx, esp
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x14], esp
push eax
call fcn.0040a61c
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push 0x78bf54
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov byte [ebp - 4], 9
mov ecx, eax
call fcn.00409799
sub esp, 0x10
lea eax, [edi + 0x78]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0040a5e4
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
push str.system
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00409799
movzx eax, byte [0x7c33b0]
sub esp, 0x10
mov dword [ebp - 0xbc], eax
mov ecx, esp
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x14], esp
push eax
call fcn.0040a61c
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
push str.type
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00409799
sub esp, 0x10
mov dword [ebp - 0x14], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
call fcn.0042ca75
lea ecx, [ebp - 0x40]
call fcn.0042bed0
add esp, 0x18
push eax
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.0040a508
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
push str.exeName
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00409799
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.004024a8
lea ecx, [ebp - 0x40]
call fcn.0042cf51
sub esp, 0x10
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0040a508
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push str.version
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.00409799
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.004024a8
sub esp, 0x10
lea eax, [edi + 0x90]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0040a5e4
sub esp, 0x18
mov byte [ebp - 4], 0x11
mov ecx, esp
push 0x78bfc4
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00409799
sub esp, 0x10
xor eax, eax
mov esi, esp
mov dword [ebp - 0x14], esp
mov dword [ebp - 0xbc], esi
mov edi, esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esi + 8]
mov byte [esi], al
mov dword [edi], eax
mov dword [edi + 4], eax
mov byte [ebp - 4], 0x12
mov ecx, edi
movzx eax, byte [esi]
push eax
call fcn.00409ee3
push 0x18
mov byte [esi], 3
call fcn.004028de
mov esi, eax
lea eax, [ebp - 0xbd]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], esi
mov byte [ebp - 4], 0x13
mov ecx, esi
mov dword [esp], str.config.ini
call fcn.00402398
mov dword [edi], esi
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
push str.config
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00409799
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov byte [ebp - 0x20], al
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x15
push dword [ebp - 0x20]
lea ecx, [ebp - 0x18]
call fcn.00409ee3
push 0x18
mov byte [ebp - 0x20], 3
call fcn.004028de
mov esi, eax
lea eax, [ebp - 0xbd]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], esi
mov byte [ebp - 4], 0x16
mov ecx, esi
mov dword [esp], str.Everything.exe
call fcn.00402398
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x108]
call fcn.004096d7
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.00409ee3
sub esp, 0x10
mov byte [ebp - 4], 9
lea eax, [ebp - 0x108]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00409805
sub esp, 0x18
mov byte [ebp - 4], 0x19
mov ecx, esp
push str.fileList
call fcn.00402398
lea ecx, [ebp - 0xe4]
call fcn.0040ae3a
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00409799
lea edx, [ebp - 0xb8]
lea ecx, [ebp - 0xe4]
call fcn.00424cfe
test eax, eax
je 0x408254
mov esi, 0x3ed
jmp 0x408733
and dword [ebp - 0x78], 0
lea ecx, [ebp - 0x88]
push str.JiSu
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
call fcn.004024ce
push str.Speed
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x1d
call fcn.004024ce
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push str.Content_Type:_application_json
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.004024ce
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x40]
call fcn.00415a34
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.00409b2a
lea ecx, [ebp - 0x40]
call fcn.004024a8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
call fcn.004024a8
lea eax, [ebp - 0x88]
mov edx, str.User_Agent:
push eax
lea ecx, [ebp - 0x28]
call fcn.0040a3af
push eax
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x40]
call fcn.00415a34
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.00409b2a
lea ecx, [ebp - 0x40]
call fcn.004024a8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
call fcn.004024a8
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 0x70]
push ecx
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00416548
add esp, 0x14
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x4083f3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.0040224b
mov esi, eax
mov byte [ebp - 4], 0x20
cmp dword [esi + 0x14], 0x10
jb 0x40836b
mov esi, dword [esi]
cmp dword [ebp - 0x5c], 0x10
lea edi, [ebp - 0x70]
mov edx, dword [ebp - 0xc4]
lea ecx, [ebp - 0x40]
cmovae edi, dword [ebp - 0x70]
call fcn.004036dd
mov byte [ebp - 4], 0x21
cmp dword [eax + 0x14], 0x10
jb 0x408390
mov eax, dword [eax]
cmp dword [0x7d2140], 0x10
push 0x78903c
cmovae ebx, dword [0x7d212c]
push esi
push 0x78b538
push edi
push 0x78c0a8
push eax
push str.HttpPost_ret:
push str.ERROR:
push 0x3e2
push str.Services::RequestDownloadUrl
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push ebx
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.0042b82f
add esp, 0x38
lea ecx, [ebp - 0x40]
call fcn.004024a8
lea ecx, [ebp - 0x28]
call fcn.004024a8
mov esi, 0x3f5
jmp 0x408728
lea edx, [ebp - 0xd4]
lea ecx, [ebp - 0xa0]
call fcn.00406f0d
mov esi, eax
test esi, esi
je 0x408489
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0040a4d8
test eax, eax
jne 0x408728
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.0040224b
mov byte [ebp - 4], 0x25
cmp dword [eax + 0x14], 0x10
jb 0x40843a
mov eax, dword [eax]
cmp dword [0x7d2140], 0x10
push 0x78903c
cmovae ebx, dword [0x7d212c]
push eax
push 0x78b538
push str.No__msg__param
push str.ERROR:
push 0x3f0
push str.Services::RequestDownloadUrl
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push ebx
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.0042b82f
add esp, 0x2c
lea ecx, [ebp - 0x40]
call fcn.004024a8
jmp 0x408728
cmp byte [ebp - 0xd4], 1
mov esi, str.data
jne 0x4084b6
mov ecx, dword [ebp - 0xcc]
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0040b98e
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0040b69e
pop ecx
pop ecx
jmp 0x4084b8
xor eax, eax
test eax, eax
jne 0x40852c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.0040224b
mov byte [ebp - 4], 0x29
cmp dword [eax + 0x14], 0x10
jb 0x4084d8
mov eax, dword [eax]
cmp dword [0x7d2140], 0x10
push 0x78903c
cmovae ebx, dword [0x7d212c]
push eax
push 0x78b538
push str.No__data__param
push str.ERROR:
push 0x3f7
push str.Services::RequestDownloadUrl
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push ebx
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.0042b82f
add esp, 0x2c
lea ecx, [ebp - 0x40]
call fcn.004024a8
mov esi, 0x3eb
jmp 0x408728
sub esp, 0x18
mov ecx, esp
push esi
call fcn.00402398
lea ecx, [ebp - 0xd4]
call fcn.0040ae3a
mov edi, str.installDownpath
cmp byte [eax], 1
jne 0x408568
push edi
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [eax + 8]
call fcn.0040b98e
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0040b69e
pop ecx
pop ecx
jmp 0x40856a
xor eax, eax
test eax, eax
jne 0x4085de
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.0040224b
mov byte [ebp - 4], 0x2d
cmp dword [eax + 0x14], 0x10
jb 0x40858a
mov eax, dword [eax]
cmp dword [0x7d2140], 0x10
push 0x78903c
cmovae ebx, dword [0x7d212c]
push eax
push 0x78b538
push str.No__data_installDownpath__param
push str.ERROR:
push 0x3fd
push str.Services::RequestDownloadUrl
push str.e:hongzhenqiancode03_jisubrowser_yindao_codeqinghouinstaller_services_services.cpp
push ebx
push str.MYSD_ErrMsg_JiSu
push 2
call fcn.0042b82f
add esp, 0x2c
lea ecx, [ebp - 0x40]
call fcn.004024a8
mov esi, 0x3ee
jmp 0x408728
sub esp, 0x18
mov ecx, esp
push esi
call fcn.00402398
lea ecx, [ebp - 0xd4]
call fcn.0040ae3a
sub esp, 0x18
mov esi, eax
mov ecx, esp
push edi
call fcn.00402398
mov ecx, esi
call fcn.0040ae3a
sub esp, 0x18
mov ecx, eax
push esp
call fcn.0040a564
lea ecx, [ebp - 0x40]
call fcn.0042bed0
mov ecx, dword [ebp - 0xe8]
add esp, 0x18
push eax
call fcn.00409b2a
lea ecx, [ebp - 0x40]
call fcn.004024a8
mov bl, byte [ebp - 0xd4]
mov esi, dword [ebp - 0xcc]
cmp bl, 1
jne 0x408662
push str.config
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call fcn.0040b98e
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0040b69e
pop ecx
pop ecx
jmp 0x408664
xor eax, eax
test eax, eax
je 0x4086b8
sub esp, 0x18
mov ecx, esp
push str.config
call fcn.00402398
lea ecx, [ebp - 0xd4]
call fcn.0040ae3a
sub esp, 0x18
mov ecx, eax
push esp
call fcn.0040a564
lea ecx, [ebp - 0x40]
call fcn.0042bed0
mov ecx, dword [ebp - 0xec]
add esp, 0x18
push eax
call fcn.00409b2a
lea ecx, [ebp - 0x40]
call fcn.004024a8
mov esi, dword [ebp - 0xcc]
mov bl, byte [ebp - 0xd4]
cmp bl, 1
jne 0x4086dc
push str.Everything.exe
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call fcn.0040b98e
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0040b69e
pop ecx
pop ecx
jmp 0x4086de
xor eax, eax
test eax, eax
je 0x408726
sub esp, 0x18
mov ecx, esp
push str.Everything.exe
call fcn.00402398
lea ecx, [ebp - 0xd4]
call fcn.0040ae3a
sub esp, 0x18
mov ecx, eax
push esp
call fcn.0040a564
lea ecx, [ebp - 0x40]
call fcn.0042bed0
mov ecx, dword [ebp - 0xf0]
add esp, 0x18
push eax
call fcn.00409b2a
lea ecx, [ebp - 0x40]
call fcn.004024a8
xor esi, esi
lea ecx, [ebp - 0x88]
call fcn.004024a8
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xcc]
push dword [ebp - 0xd4]
call fcn.00409ee3
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x100]
push dword [ebp - 0x108]
call fcn.00409ee3
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xdc]
push dword [ebp - 0xe4]
call fcn.00409ee3
lea ecx, [ebp - 0x70]
call fcn.004024a8
lea ecx, [ebp - 0xa0]
call fcn.004024a8
lea ecx, [ebp - 0x58]
call fcn.004024a8
lea ecx, [ebp - 0xb8]
call fcn.004024a8
mov eax, esi
call fcn.0057bf0e
ret