Function at 0x41c2d0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
push 8
call fcn.0042e86c
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx], 0x4e143d
push ebx
add ebx, 4
push ebx
push 8
call fcn.0042e86c
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.004232e5
pop ebx
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x41c3c4
push eax
mov ebx, eax
call fcn.004011c3
inc eax
push eax
call fcn.0042e86c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41c3d5
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 8
call fcn.0042e86c
add esp, 4
mov dword [ebp - 0x58], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
lea eax, [ebp - 4]
push eax
call fcn.0041d48e
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41c501
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41c514
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41c524
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41c534
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41c544
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41c554
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41c564
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41c574
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x58]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x4334a0
call fcn.0042e866
add esp, 0x10
call fcn.0042e872
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x90]
test eax, eax
jne 0x41c5ad
mov eax, 0x4df890
push eax
push 1
mov ebx, 0x430ad0
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41c5d9
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41c5f0
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x4e08f9
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.Etag_:_
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41c640
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41c650
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41c664
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x4e1013
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.FileId_:
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41c6b4
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41c6c4
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41c6d8
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x4e08f9
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.S3KeyFlag_:_
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41c728
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41c738
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41c74c
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x4e08f9
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.ShareKey_:_
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41c79c
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41c7ac
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41c7c0
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x4e1013
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.Size_:
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41c810
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41c820
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41c834
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov eax, str.xxxxxxxx_xxxx_4xxx_yxxx_xxxxxxxxxxxx.replace___xy__g_function_c_var_rMath.random__160_vcx_r:_r0x30x8__return_v.toString_16___
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41c865
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41c879
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x41c890
mov eax, 0x4df8ae
push eax
push 1
mov ebx, 0x4301f0
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x4c], eax
push reloc.WS2_32.dll_connect
push 0
push str.1234567890000000
push 1
mov ebx, 0x4301f0
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x50], eax
push reloc.WS2_32.dll_connect
push 0
push str.1234567890000000
push 1
mov ebx, 0x4301f0
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x54], eax
push 1
lea eax, [ebp - 0x54]
push eax
push 1
push 7
push 1
mov eax, str.AES_CBC
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0041e872
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41c923
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41c933
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41c943
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41c953
push ebx
call fcn.0042e872
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.00420bd1
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41c96f
push ebx
call fcn.0042e872
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x41c982
mov eax, 0x4df8ae
push eax
push 1
mov ebx, 0x42f650
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41c9a8
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41c9bc
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push str.accept:___r_naccept_language:_zh_CN_zh_q0.9_r_napp_version:_3_r_ncontent_type:_application_json_charsetUTF_8_r_norigin:_https:__www.123pan.com_r_nplatform:_web_r_nreferer:_https:__www.123pan.com_s_ziYcVv_iIxJA.html_r_nsec_fetch_mode:_cors_r_nsec_fetch_site:_same_origin_r_nuser_agent:_Mozilla_5.0__Windows_NT_10.0__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_78.0.3904.108_Safari_537.36_r_nloginuuid:
mov ecx, 2
call fcn.00402195
add esp, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41c9ec
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov eax, str.https:__www.123pan.com_b_api_share_download_info
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41ca06
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov eax, str.Math.round_0x989680__Math.random___
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41ca37
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41ca4b
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov eax, str.Math.round_new_Date__.getTime_____0x3e8_.toString__
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41ca7c
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41ca90
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push reloc.WS2_32.dll_bind
push 0
push 1
mov ebx, 6
call fcn.0040218d
push reloc.WS2_32.dll_connect
push 0
push 0x4df8ae
push reloc.WS2_32.dll_connect
push 0
push str.https:__www.123pan.com
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41cad5
mov eax, 0x4df8ae
push eax
push 6
mov ebx, 0x42fe70
call fcn.0042e866
add esp, 0x4c
mov dword [ebp - 0x4c], eax
push str.web38_8D_sL8gPjom7bkcY
push dword [ebp - 0x4c]
push 0x4df9ef
push dword [ebp - 0x34]
push 0x4df9ef
push dword [ebp - 0x38]
mov ecx, 6
call fcn.00402195
add esp, 0x18
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41cb23
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41cb37
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
lea eax, [ebp - 8]
push eax
call fcn.00420fc9
mov dword [ebp - 0x58], eax
push dword [ebp - 0x58]
push 0x4df97b
push dword [ebp - 0x34]
push 0x4df97b
push dword [ebp - 0x38]
mov ecx, 5
call fcn.00402195
add esp, 0x14
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41cb9e
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41cbb2
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push str._auth_key
push dword [ebp - 4]
mov ecx, 3
call fcn.00402195
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41cbe5
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
mov eax, str.06cf745a1aa6095cdd9f77e161d6e5d1
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 0x20]
push eax
push 1
mov eax, str.161224704
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, str.1814732676_0
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
push 1
mov eax, str.2098678
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x1c]
push eax
mov eax, str.ziYcVv_iIxJA
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov eax, str._ShareKey_:_ziYcVv_iIxJA___FileID_:2098678__S3keyFlag_:_1814732676_0___Size_:161224704__Etag_:_06cf745a1aa6095cdd9f77e161d6e5d1_
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0040f83d
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41cc91
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41cca1
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41ccb1
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41ccc1
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41ccd1
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41cce1
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41ccf5
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 8
call fcn.0042e86c
add esp, 4
mov dword [ebp - 0x58], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
push 1
push 1
lea eax, [ebp - 4]
push eax
call fcn.0041d48e
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41cdf9
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41ce09
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41ce19
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x41ce29
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41ce39
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41ce49
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x58]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x4334a0
call fcn.0042e866
add esp, 0x10
call fcn.0042e872
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x84]
test eax, eax
jne 0x41ce82
mov eax, 0x4df890
push eax
push 1
mov ebx, 0x430ad0
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41ceae
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41cec5
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, str.u0026
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.params
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41cf15
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41cf25
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41cf39
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x4e08f9
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.DownloadURL_:_
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41cf89
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41cf99
push ebx
call fcn.0042e872
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.004218da
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41cfb5
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41cfc9
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
lea eax, [ebp - 0x44]
push eax
call fcn.00422540
mov dword [ebp - 0x50], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x41cff8
mov eax, 0x4df890
push eax
push 1
mov ebx, 0x430ad0
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41d01e
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41d032
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 4], eax
push dword [ebp - 0x48]
push str.Referer:
mov ecx, 2
call fcn.00402195
add esp, 8
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
push 8
call fcn.0042e86c
add esp, 4
mov dword [ebp - 0x5c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
lea eax, [ebp - 4]
push eax
call fcn.0041d48e
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41d16f
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41d182
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41d192
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41d1a2
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41d1b2
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x41d1c2
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x41d1d2
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41d1e2
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x5c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x4334a0
call fcn.0042e866
add esp, 0x10
call fcn.0042e872
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x90]
test eax, eax
jne 0x41d21b
mov eax, 0x4df890
push eax
push 1
mov ebx, 0x430ad0
call fcn.0042e866
add esp, 0x10
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41d247
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41d25e
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x4e08f9
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, str.redirect_url_:_
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 8]
push eax
call fcn.004142ef
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41d2ae
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41d2be
push ebx
call fcn.0042e872
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41d2d2
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.WS2_32.dll_bind
push 0
push 1
mov ebx, 6
call fcn.0040218d
push reloc.WS2_32.dll_connect
push 0
push 0x4df8ae
push reloc.WS2_32.dll_connect
push 0
push 0x4dfac6
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41d317
mov eax, 0x4df8ae
push eax
push 6
mov ebx, 0x42fe70
call fcn.0042e866
add esp, 0x4c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41d341
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x41d361
push eax
mov ebx, eax
call fcn.004011c3
inc eax
push eax
call fcn.0042e86c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x41d366
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41d377
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41d387
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41d397
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41d3a7
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41d3b7
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41d3c7
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41d3d7
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41d3e7
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41d3f7
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41d417
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41d427
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41d437
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41d447
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41d457
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41d467
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41d477
push ebx
call fcn.0042e872
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41d487
push ebx
call fcn.0042e872
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4