Function at 0x42caf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ac2ed
mov eax, dword fs:[0]
push eax
mov eax, 0x1928
call fcn.00434b00
mov eax, dword [0x4d5210]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x18f8], ebx
mov ecx, dword [ebp + 8]
push str.8097
call fcn.00416960
push 1
push 0x4b18b4
lea ecx, [ebp - 0x1394]
mov dword [ebp - 0x1380], 0xf
mov edi, eax
mov dword [ebp - 0x1384], 0
mov byte [ebp - 0x1394], 0
call fcn.0040c340
xor esi, esi
mov dword [ebp - 4], 0
test edi, edi
je 0x42ccc3
push edi
lea ecx, [ebp - 0x158c]
call fcn.004078d0
lea eax, [ebp - 0x158c]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x1544]
push eax
call fcn.00440737
add esp, 8
mov esi, eax
lea eax, [ebp - 0x1394]
cmp eax, esi
je 0x42cbee
mov eax, dword [ebp - 0x1380]
cmp eax, 0x10
jb 0x42cbc7
inc eax
lea ecx, [ebp - 0x1394]
push eax
push dword [ebp - 0x1394]
call fcn.0040c0b0
push esi
lea ecx, [ebp - 0x1394]
mov dword [ebp - 0x1380], 0xf
mov dword [ebp - 0x1384], 0
mov byte [ebp - 0x1394], 0
call fcn.0040fe40
mov eax, dword [ebp - 0x1530]
cmp eax, 0x10
jb 0x42cc0c
inc eax
lea ecx, [ebp - 0x1544]
push eax
push dword [ebp - 0x1544]
call fcn.0040c0b0
mov eax, dword [ebp - 0x1578]
mov dword [ebp - 0x1530], 0xf
mov dword [ebp - 0x1534], 0
mov byte [ebp - 0x1544], 0
mov byte [ebp - 4], 0
cmp eax, 8
jb 0x42cc49
inc eax
lea ecx, [ebp - 0x158c]
push eax
push dword [ebp - 0x158c]
call fcn.00407b30
push edi
call fcn.0045d9d9
mov esi, eax
add esp, 4
test esi, esi
je 0x42ccc3
cmp esi, 1
jne 0x42cc74
cmp dword [0x4d6a60], 0
jne 0x42cc6b
call fcn.0040bbf0
push 0xffffffffffffffff
push str.9835b
jmp 0x42ccd8
cmp esi, 3
jne 0x42cc90
cmp dword [0x4d6a60], 0
jne 0x42cc87
call fcn.0040bbf0
push 0xffffffffffffffff
push str.16227
jmp 0x42ccd8
cmp esi, 0x64
jne 0x42ccac
cmp dword [0x4d6a60], 0
jne 0x42cca3
call fcn.0040bbf0
push 0xffffffffffffffff
push str.aaa74
jmp 0x42ccd8
cmp dword [0x4d6a60], 0
jne 0x42ccba
call fcn.0040bbf0
push 0xffffffffffffffff
push str.933e2
jmp 0x42ccd8
cmp dword [0x4d6a60], 0
jne 0x42ccd1
call fcn.0040bbf0
push 0xffffffffffffffff
push str.57352
mov ecx, dword [0x4d6a60]
push str.Easysting
call fcn.0043a5c1
cmp dword [0x4d6a60], 0
mov dword [ebp - 0x18e0], eax
jne 0x42ccfc
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
push 0
push str.8b17c
push str.Easysting
call fcn.0043a5c1
cmp eax, 0xffffffff
jne 0x42cdaa
cmp dword [0x4d6a60], 0
jne 0x42cd2a
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
call fcn.0043a0c2
push eax
lea ecx, [ebp - 0x1514]
call fcn.004078d0
push 0x11
push 0x4b218c
lea ecx, [ebp - 0x1514]
mov byte [ebp - 4], 3
call fcn.00409fa0
cmp dword [ebp - 0x1500], 8
lea eax, [ebp - 0x1514]
push 0
cmovae eax, dword [ebp - 0x1514]
push 0
push 0x4b12a0
push eax
call fcn.0043c5ae
add esp, 0x10
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x1500]
mov byte [ebp - 4], 0
cmp eax, 8
jb 0x42cdaa
inc eax
lea ecx, [ebp - 0x1514]
push eax
push dword [ebp - 0x1514]
call fcn.00407b30
push 0x40
push str.http:__data.yebankeji.cn__e2fee00cc6ac38b1045828e6698a2f6c29c38
lea ecx, [ebp - 0x152c]
mov dword [ebp - 0x1518], 0xf
mov dword [ebp - 0x151c], 0
mov byte [ebp - 0x152c], 0
call fcn.0040c340
cmp dword [ebp - 0x1518], 0x10
lea eax, [ebp - 0x152c]
mov ecx, ebx
mov byte [ebp - 4], 4
cmovae eax, dword [ebp - 0x152c]
push eax
call fcn.0042c800
mov edi, eax
cmp dword [ebp - 0x18e0], edi
je 0x42e2a0
test edi, edi
je 0x42cec2
test esi, esi
jne 0x42ce31
cmp dword [0x4d6a60], esi
jne 0x42ce1e
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
push edi
push str.57352
push str.Easysting
jmp 0x42ce99
cmp esi, 1
jne 0x42ce57
cmp dword [0x4d6a60], 0
jne 0x42ce44
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
push edi
push str.9835b
push str.Easysting
jmp 0x42ce99
push edi
cmp esi, 3
jne 0x42ce70
push str.16227
push str.Easysting
call fcn.0040c320
mov ecx, eax
jmp 0x42cebd
cmp esi, 0x64
jne 0x42ce88
push str.aaa74
push str.Easysting
call fcn.0040c320
mov ecx, eax
jmp 0x42cebd
push str.933e2
push str.Easysting
call fcn.0040c320
mov ecx, eax
call fcn.0043bde0
cmp dword [0x4d6a60], 0
jne 0x42ceac
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
push edi
push str.ef71e
push str.Easysting
call fcn.0043bde0
lea ecx, [ebp - 0x18d9]
mov dword [ebp - 0x18fc], 0x1000
call fcn.00408070
lea eax, [ebp - 0x16ac]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x18d9]
call fcn.00447724
cmp dword [0x4d6a60], 0
mov byte [ebp - 4], 6
jne 0x42ceff
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
lea eax, [ebp - 0x155c]
push eax
call fcn.0043a1c2
push eax
lea eax, [ebp - 0x13f4]
mov byte [ebp - 4], 7
push eax
call fcn.00440737
add esp, 8
mov eax, dword [ebp - 0x1548]
mov byte [ebp - 4], 9
cmp eax, 8
jb 0x42cf47
inc eax
lea ecx, [ebp - 0x155c]
push eax
push dword [ebp - 0x155c]
call fcn.00407b30
xor eax, eax
mov dword [ebp - 0x1548], 7
push 7
push 0x4b04e0
lea ecx, [ebp - 0x1424]
mov dword [ebp - 0x154c], 0
mov word [ebp - 0x155c], ax
mov dword [ebp - 0x1410], 7
mov dword [ebp - 0x1414], eax
mov word [ebp - 0x1424], ax
call fcn.00407a30
lea eax, [ebp - 0x1424]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x16e4]
push eax
call fcn.00440737
add esp, 8
mov eax, dword [ebp - 0x1410]
mov byte [ebp - 4], 0xc
cmp eax, 8
jb 0x42cfc9
inc eax
lea ecx, [ebp - 0x1424]
push eax
push dword [ebp - 0x1424]
call fcn.00407b30
xor eax, eax
mov dword [ebp - 0x1410], 7
push 7
push 0x4b04e0
lea ecx, [ebp - 0x143c]
mov dword [ebp - 0x1414], 0
mov word [ebp - 0x1424], ax
mov dword [ebp - 0x1428], 7
mov dword [ebp - 0x142c], eax
mov word [ebp - 0x143c], ax
call fcn.00407a30
lea eax, [ebp - 0x143c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x172c]
push eax
call fcn.00440737
add esp, 8
mov eax, dword [ebp - 0x1428]
mov byte [ebp - 4], 0xf
cmp eax, 8
jb 0x42d04b
inc eax
lea ecx, [ebp - 0x143c]
push eax
push dword [ebp - 0x143c]
call fcn.00407b30
xor eax, eax
mov dword [ebp - 0x1428], 7
push 7
push 0x4b05a0
lea ecx, [ebp - 0x1574]
mov dword [ebp - 0x142c], 0
mov word [ebp - 0x143c], ax
mov dword [ebp - 0x1560], 7
mov dword [ebp - 0x1564], eax
mov word [ebp - 0x1574], ax
call fcn.00407a30
lea eax, [ebp - 0x1574]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x16fc]
push eax
call fcn.00440737
add esp, 8
lea ecx, [ebp - 0x1574]
mov byte [ebp - 4], 0x12
call fcn.00407890
mov edi, dword [ebp - 0x13e4]
mov dword [ebp - 0x18f4], edi
cmp edi, 6
jl 0x42dc7e
lea esi, [edi - 6]
push esi
push 0
lea eax, [ebp - 0x1664]
push eax
lea ecx, [ebp - 0x13f4]
call fcn.0042ac10
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1454]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x13f4]
call fcn.0042ac10
push 2
push 0
lea eax, [ebp - 0x14b4]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1454]
call fcn.0042ac10
push 2
push 2
lea eax, [ebp - 0x149c]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x1454]
call fcn.0042ac10
push 2
push 4
lea eax, [ebp - 0x1484]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x1454]
call fcn.0042ac10
cmp dword [ebp - 0x14a0], 0x10
lea eax, [ebp - 0x14b4]
cmovae eax, dword [ebp - 0x14b4]
push eax
call fcn.0045da03
cmp dword [ebp - 0x1488], 0x10
lea ecx, [ebp - 0x149c]
mov dword [ebp - 0x1910], eax
cmovae ecx, dword [ebp - 0x149c]
push ecx
call fcn.0045da03
cmp dword [ebp - 0x1470], 0x10
lea ecx, [ebp - 0x1484]
mov dword [ebp - 0x190c], eax
cmovae ecx, dword [ebp - 0x1484]
push ecx
call fcn.0045da03
mov dword [ebp - 0x18f0], eax
xor eax, eax
mov byte [ebp - 0x18e2], 0
mov dword [ebp - 0x18e0], 0x12
mov dword [ebp - 0x1458], 7
mov dword [ebp - 0x145c], 0
mov word [ebp - 0x146c], ax
push 0x208
push eax
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x18
push eax
call fcn.00459150
add esp, 0x18
lea eax, [ebp - 0x31c]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x42d243
cmp dword [0x4d6a60], eax
jne 0x42d21a
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
call fcn.0043a004
push eax
lea ecx, [ebp - 0x146c]
call fcn.004079e0
push 0x4b218c
lea ecx, [ebp - 0x146c]
call fcn.00409b80
jmp 0x42d255
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x146c]
call fcn.004079e0
cmp dword [ebp - 0x1458], 8
lea eax, [ebp - 0x146c]
push 0
cmovae eax, dword [ebp - 0x146c]
push 0x80
push 3
push 0
push 1
push bind
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x42d3a0
push 0
push 0
lea eax, [ebp - 0x1924]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x42d3a0
lea eax, [ebp - 0x16cc]
push eax
lea eax, [ebp - 0x1924]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea eax, [ebp - 0x16bc]
push eax
lea eax, [ebp - 0x16cc]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov dword [ebp - 0x13f8], 0xf
mov dword [ebp - 0x13fc], 0
mov byte [ebp - 0x140c], 0
push 0x104
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x19
push 0
push eax
call fcn.00459150
movzx eax, word [ebp - 0x16bc]
push eax
lea eax, [ebp - 0x114]
push 0x4b30a8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x140c]
push eax
call fcn.0040c2e0
mov eax, dword [ebp - 0x13fc]
lea ecx, [ebp - 0x140c]
push 0xffffffffffffffff
add eax, 0xfffffffe
push eax
lea eax, [ebp - 0x17d4]
push eax
call fcn.0042ac10
push eax
lea ecx, [ebp - 0x140c]
call fcn.00416890
lea ecx, [ebp - 0x17d4]
call fcn.0040b400
cmp dword [ebp - 0x13f8], 0x10
lea eax, [ebp - 0x140c]
cmovae eax, dword [ebp - 0x140c]
push eax
call fcn.0045da03
add esp, 4
mov dword [ebp - 0x18e0], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x140c]
mov byte [ebp - 4], 0x18
call fcn.0040b400
mov eax, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x1910]
lea ecx, [eax - 1]
cmp edx, ecx
jl 0x42d3b8
inc eax
cmp edx, eax
jle 0x42d3bc
mov al, 1
jmp 0x42d3c2
mov al, byte [ebp - 0x18e2]
mov ecx, dword [ebp - 0x190c]
cmp ecx, 1
jl 0x42d3d2
cmp ecx, 0xc
jle 0x42d3d4
mov al, 1
mov ecx, dword [ebp - 0x18f0]
cmp ecx, 1
jl 0x42d3ec
cmp ecx, 0x1f
jg 0x42d3ec
test al, al
je 0x42db6d
cmp dword [ebx], 0
jne 0x42d3fd
push 0
call fcn.00461632
add esp, 4
mov dword [ebx], eax
cmp dword [0x4d6a60], 0
jne 0x42d40b
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
call fcn.0043a0da
mov esi, eax
test esi, esi
jne 0x42d420
mov esi, dword [ebx]
jmp 0x42d431
mov eax, dword [ebx]
sub eax, esi
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x12cc0300
cmovge esi, dword [ebx]
lea eax, [ebp - 0x15d4]
push esi
push eax
call fcn.0044281a
mov eax, esi
mov byte [ebp - 4], 0x1a
cdq
push edx
push eax
lea eax, [ebp - 0x14e4]
push eax
call fcn.004497dc
add esp, 0x14
push 0x4b059e
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 0x1b
call fcn.0040c220
push 0x4b059e
lea ecx, [ebp - 0x134c]
mov byte [ebp - 4], 0x1c
call fcn.0040c220
push 0x4b059e
lea ecx, [ebp - 0x1364]
mov byte [ebp - 4], 0x1d
call fcn.0040c220
lea ecx, [ebp - 0x18ec]
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x18ec], 0
mov dword [ebp - 0x18e8], 0
call fcn.0042e660
mov dword [ebp - 0x18ec], eax
mov esi, dword [ebp - 0x18f4]
xor ebx, ebx
mov byte [ebp - 4], 0x1f
nop word [eax + eax]
mov al, bl
lea ecx, [ebp - 0x18ec]
add al, 0x61
mov byte [ebp - 0x18e1], al
lea eax, [ebp - 0x18e1]
push esi
push eax
push 0
lea eax, [ebp - 0x1934]
push eax
call fcn.0042c6c0
inc ebx
cmp ebx, 0x1a
jl 0x42d4d0
mov esi, dword [ebp - 0x18f4]
xor ebx, ebx
mov al, bl
lea ecx, [ebp - 0x18ec]
add al, 0x41
mov byte [ebp - 0x18e3], al
lea eax, [ebp - 0x18e3]
push esi
push eax
push 0
lea eax, [ebp - 0x192c]
push eax
call fcn.0042c6c0
inc ebx
cmp ebx, 0x1a
jl 0x42d504
xor esi, esi
test edi, edi
jle 0x42d5c6
nop word [eax + eax]
mov edi, dword [ebp - 0x18ec]
lea edx, [ebp - 0x13f4]
mov ebx, dword [ebp - 0x13e0]
mov ecx, edi
cmp ebx, 0x10
mov eax, dword [edi + 4]
cmovae edx, dword [ebp - 0x13f4]
add edx, esi
cmp byte [eax + 0xd], 0
jne 0x42d5c6
mov dl, byte [edx]
nop dword [eax + eax]
cmp byte [eax + 0xe], dl
jge 0x42d57a
mov eax, dword [eax + 8]
jmp 0x42d57e
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x42d570
cmp ecx, edi
je 0x42d5c6
cmp dl, byte [ecx + 0xe]
jl 0x42d5c6
cmp ebx, 0x10
lea eax, [ebp - 0x13f4]
lea ecx, [ebp - 0x13c4]
cmovae eax, dword [ebp - 0x13f4]
mov al, byte [eax + esi]
mov byte [ebp - 0x18f0], al
push dword [ebp - 0x18f0]
push 1
call fcn.0042e720
inc esi
cmp esi, dword [ebp - 0x18f4]
jl 0x42d540
push 0xffffffffffffffff
push dword [ebp - 0x13b4]
lea eax, [ebp - 0x167c]
push eax
lea ecx, [ebp - 0x13f4]
call fcn.0042ac10
mov esi, eax
lea eax, [ebp - 0x1364]
cmp eax, esi
je 0x42d631
mov eax, dword [ebp - 0x1350]
cmp eax, 0x10
jb 0x42d60a
inc eax
lea ecx, [ebp - 0x1364]
push eax
push dword [ebp - 0x1364]
call fcn.0040c0b0
push esi
lea ecx, [ebp - 0x1364]
mov dword [ebp - 0x1350], 0xf
mov dword [ebp - 0x1354], 0
mov byte [ebp - 0x1364], 0
call fcn.0040fe40
mov eax, dword [ebp - 0x1668]
mov byte [ebp - 4], 0x1f
cmp eax, 0x10
jb 0x42d653
inc eax
lea ecx, [ebp - 0x167c]
push eax
push dword [ebp - 0x167c]
call fcn.0040c0b0
cmp dword [ebp - 0x1354], 3
jb 0x42d721
push 3
push 0
lea eax, [ebp - 0x1604]
push eax
lea ecx, [ebp - 0x1364]
call fcn.0042ac10
mov esi, eax
lea eax, [ebp - 0x134c]
cmp eax, esi
je 0x42d6c7
mov eax, dword [ebp - 0x1338]
cmp eax, 0x10
jb 0x42d6a0
inc eax
lea ecx, [ebp - 0x134c]
push eax
push dword [ebp - 0x134c]
call fcn.0040c0b0
push esi
lea ecx, [ebp - 0x134c]
mov dword [ebp - 0x1338], 0xf
mov dword [ebp - 0x133c], 0
mov byte [ebp - 0x134c], 0
call fcn.0040fe40
mov eax, dword [ebp - 0x15f0]
mov byte [ebp - 4], 0x1f
cmp eax, 0x10
jb 0x42d6e9
inc eax
lea ecx, [ebp - 0x1604]
push eax
push dword [ebp - 0x1604]
call fcn.0040c0b0
cmp dword [ebp - 0x1338], 0x10
lea eax, [ebp - 0x134c]
cmovae eax, dword [ebp - 0x134c]
push eax
call fcn.00449843
add esp, 4
test eax, eax
setne al
test al, al
jne 0x42d721
push 0
push 0x4b059e
lea ecx, [ebp - 0x134c]
call fcn.0040c340
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x134c]
push eax
lea ecx, [ebp - 0x13c4]
call fcn.004102b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x15d4]
push eax
lea ecx, [ebp - 0x13c4]
call fcn.004102b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x13c4]
push eax
lea ecx, [ebp - 0x13f4]
call fcn.0040bf80
cmp dword [0x4d6a60], 0
jne 0x42d771
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
call fcn.0043a0c2
push eax
lea ecx, [ebp - 0x13ac]
call fcn.004078d0
push 0x11
push str.EasyPDFSupply.exe
lea ecx, [ebp - 0x13ac]
mov byte [ebp - 4], 0x22
call fcn.00409fa0
mov dword [ebp - 0x1908], 0
mov dword [ebp - 0x1904], 0
mov dword [ebp - 0x1900], 0
push str.f458
lea ecx, [ebp - 0x15a4]
mov byte [ebp - 4], 0x23
call fcn.004078d0
lea eax, [ebp - 0x15a4]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x1908]
call fcn.00418c40
mov eax, dword [ebp - 0x1590]
mov byte [ebp - 4], 0x23
cmp eax, 8
jb 0x42d808
inc eax
lea ecx, [ebp - 0x15a4]
push eax
push dword [ebp - 0x15a4]
call fcn.00407b30
lea eax, [ebp - 0x13c4]
push eax
lea eax, [ebp - 0x161c]
push eax
call fcn.00440454
add esp, 8
push eax
lea ecx, [ebp - 0x1908]
mov byte [ebp - 4], 0x25
call fcn.00418c40
mov eax, dword [ebp - 0x1608]
mov byte [ebp - 4], 0x23
cmp eax, 8
jb 0x42d850
inc eax
lea ecx, [ebp - 0x161c]
push eax
push dword [ebp - 0x161c]
call fcn.00407b30
push str.2cb4
lea ecx, [ebp - 0x15bc]
call fcn.004078d0
lea eax, [ebp - 0x15bc]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x1908]
call fcn.00418c40
mov eax, dword [ebp - 0x15a8]
mov byte [ebp - 4], 0x23
cmp eax, 8
jb 0x42d898
inc eax
lea ecx, [ebp - 0x15bc]
push eax
push dword [ebp - 0x15bc]
call fcn.00407b30
lea eax, [ebp - 0x14e4]
push eax
lea eax, [ebp - 0x1634]
push eax
call fcn.00440454
add esp, 8
push eax
lea ecx, [ebp - 0x1908]
mov byte [ebp - 4], 0x27
call fcn.00418c40
mov eax, dword [ebp - 0x1620]
mov byte [ebp - 4], 0x23
cmp eax, 8
jb 0x42d8e0
inc eax
lea ecx, [ebp - 0x1634]
push eax
push dword [ebp - 0x1634]
call fcn.00407b30
push 0x4b3258
lea ecx, [ebp - 0x14fc]
call fcn.004078d0
lea eax, [ebp - 0x1908]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x14fc]
push eax
lea eax, [ebp - 0x13dc]
push eax
call fcn.0043f4fb
add esp, 0xc
mov eax, dword [ebp - 0x14e8]
mov byte [ebp - 4], 0x2a
cmp eax, 8
jb 0x42d933
inc eax
lea ecx, [ebp - 0x14fc]
push eax
push dword [ebp - 0x14fc]
call fcn.00407b30
xor eax, eax
mov dword [ebp - 0x14e8], 7
mov dword [ebp - 0x14ec], 0
mov word [ebp - 0x14fc], ax
call fcn.00447e16
test eax, eax
lea ecx, [ebp - 0x13dc]
lea eax, [ebp - 0x13ac]
je 0x42d991
cmp dword [ebp - 0x13c8], 8
push 0
cmovae ecx, dword [ebp - 0x13dc]
cmp dword [ebp - 0x1398], 8
push 0
cmovae eax, dword [ebp - 0x13ac]
push ecx
push eax
call fcn.0043c5ae
add esp, 0x10
jmp 0x42d9b7
cmp dword [ebp - 0x13c8], 8
cmovae ecx, dword [ebp - 0x13dc]
cmp dword [ebp - 0x1398], 8
push ecx
cmovae eax, dword [ebp - 0x13ac]
push eax
call fcn.0043c549
add esp, 8
mov eax, dword [ebp - 0x13c8]
cmp eax, 8
jb 0x42d9d5
inc eax
lea ecx, [ebp - 0x13dc]
push eax
push dword [ebp - 0x13dc]
call fcn.00407b30
xor eax, eax
mov dword [ebp - 0x13c8], 7
lea ecx, [ebp - 0x1908]
mov dword [ebp - 0x13cc], 0
mov word [ebp - 0x13dc], ax
call fcn.00410850
mov eax, dword [ebp - 0x1398]
cmp eax, 8
jb 0x42da1b
inc eax
lea ecx, [ebp - 0x13ac]
push eax
push dword [ebp - 0x13ac]
call fcn.00407b30
xor eax, eax
mov dword [ebp - 0x1398], 7
mov word [ebp - 0x13ac], ax
lea ecx, [ebp - 0x18ec]
mov eax, dword [ebp - 0x18ec]
push eax
mov dword [ebp - 0x139c], 0
push dword [eax]
lea eax, [ebp - 0x1914]
push eax
call fcn.00434260
push 0x10
push 1
push dword [ebp - 0x18ec]
call fcn.004074a0
mov eax, dword [ebp - 0x1350]
add esp, 0xc
cmp eax, 0x10
jb 0x42da83
inc eax
lea ecx, [ebp - 0x1364]
push eax
push dword [ebp - 0x1364]
call fcn.0040c0b0
mov eax, dword [ebp - 0x1338]
mov dword [ebp - 0x1350], 0xf
mov dword [ebp - 0x1354], 0
mov byte [ebp - 0x1364], 0
cmp eax, 0x10
jb 0x42dabc
inc eax
lea ecx, [ebp - 0x134c]
push eax
push dword [ebp - 0x134c]
call fcn.0040c0b0
mov eax, dword [ebp - 0x13b0]
mov dword [ebp - 0x1338], 0xf
mov dword [ebp - 0x133c], 0
mov byte [ebp - 0x134c], 0
cmp eax, 0x10
jb 0x42daf5
inc eax
lea ecx, [ebp - 0x13c4]
push eax
push dword [ebp - 0x13c4]
call fcn.0040c0b0
mov eax, dword [ebp - 0x14d0]
mov dword [ebp - 0x13b0], 0xf
mov dword [ebp - 0x13b4], 0
mov byte [ebp - 0x13c4], 0
cmp eax, 0x10
jb 0x42db2e
inc eax
lea ecx, [ebp - 0x14e4]
push eax
push dword [ebp - 0x14e4]
call fcn.0040c0b0
mov eax, dword [ebp - 0x15c0]
mov dword [ebp - 0x14d0], 0xf
mov dword [ebp - 0x14d4], 0
mov byte [ebp - 0x14e4], 0
cmp eax, 0x10
jb 0x42db67
inc eax
lea ecx, [ebp - 0x15d4]
push eax
push dword [ebp - 0x15d4]
call fcn.0040c0b0
mov ebx, dword [ebp - 0x18f8]
lea ecx, [ebp - 0x146c]
call fcn.00407890
mov eax, dword [ebp - 0x1470]
cmp eax, 0x10
jb 0x42db96
inc eax
lea ecx, [ebp - 0x1484]
push eax
push dword [ebp - 0x1484]
call fcn.0040c0b0
mov eax, dword [ebp - 0x1488]
mov dword [ebp - 0x1470], 0xf
mov dword [ebp - 0x1474], 0
mov byte [ebp - 0x1484], 0
cmp eax, 0x10
jb 0x42dbcf
inc eax
lea ecx, [ebp - 0x149c]
push eax
push dword [ebp - 0x149c]
call fcn.0040c0b0
mov eax, dword [ebp - 0x14a0]
mov dword [ebp - 0x1488], 0xf
mov dword [ebp - 0x148c], 0
mov byte [ebp - 0x149c], 0
cmp eax, 0x10
jb 0x42dc08
inc eax
lea ecx, [ebp - 0x14b4]
push eax
push dword [ebp - 0x14b4]
call fcn.0040c0b0
mov eax, dword [ebp - 0x1440]
mov dword [ebp - 0x14a0], 0xf
mov dword [ebp - 0x14a4], 0
mov byte [ebp - 0x14b4], 0
cmp eax, 0x10
jb 0x42dc41
inc eax
lea ecx, [ebp - 0x1454]
push eax
push dword [ebp - 0x1454]
call fcn.0040c0b0
mov eax, dword [ebp - 0x1650]
mov dword [ebp - 0x1440], 0xf
mov dword [ebp - 0x1444], 0
mov byte [ebp - 0x1454], 0
mov byte [ebp - 4], 0x12
cmp eax, 0x10
jb 0x42dc7e
inc eax
lea ecx, [ebp - 0x1664]
push eax
push dword [ebp - 0x1664]
call fcn.0040c0b0
cmp dword [0x4d6a60], 0
jne 0x42dc8c
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
call fcn.0043a0c2
push eax
lea ecx, [ebp - 0x164c]
call fcn.004078d0
push 0x4b14b4
lea ecx, [ebp - 0x164c]
mov byte [ebp - 4], 0x2b
call fcn.00409b80
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x42dce2
mov eax, dword [ecx]
jmp 0x42dce4
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0x164c]
push edx
push eax
call fcn.00407c50
lea eax, [ebp - 0x15ec]
push eax
call fcn.004482e2
lea eax, [ebp - 0x15ec]
mov byte [ebp - 4], 0x2c
push 0x4c94e4
push eax
call fcn.004119b0
add esp, 0x24
test al, al
je 0x42dd30
push 0x4b2058
lea ecx, [ebp - 0x15ec]
call fcn.004079e0
cmp dword [0x4d6a60], 0
jne 0x42dd3e
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
push 0
push str.InstallTime
push str.Easysting
call fcn.0043a5c1
cmp dword [0x4d6a60], 0
mov edi, eax
jne 0x42dd65
call fcn.0040bbf0
mov ecx, dword [0x4d6a60]
push 0
push str.FirstInstallTime
push str.Easysting
call fcn.0043a5c1
mov esi, eax
test edi, edi
jne 0x42dd8d
push edi
call fcn.00461632
add esp, 4
mov edi, eax
test esi, esi
jne 0x42dd9c
push esi
call fcn.00461632
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x191c]
call fcn.0044c14c
lea eax, [ebp - 0x1694]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x191c]
call fcn.0044fd5a
push 0x4b059e
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 0x2e
call fcn.0040c220
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x16ac]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0x1334]
call fcn.004102b0
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x16e4]
push eax
lea ecx, [ebp - 0x1334]
call fcn.004102b0
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x16fc]
push eax
lea ecx, [ebp - 0x1334]
call fcn.004102b0
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x13f4]
push eax
lea ecx, [ebp - 0x1334]
call fcn.004102b0
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
lea eax, [ebp - 0x17a4]
push 0
push eax
call fcn.00447a65
push eax
lea eax, [ebp - 0x17bc]
mov byte [ebp - 4], 0x30
push eax
call fcn.00440737
add esp, 0x10
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 0x31
call fcn.004102b0
lea ecx, [ebp - 0x17bc]
call fcn.0040b400
lea ecx, [ebp - 0x17a4]
mov byte [ebp - 4], 0x2f
call fcn.00407890
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x1394]
push eax
lea ecx, [ebp - 0x1334]
call fcn.004102b0
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
mov eax, esi
cdq
push edx
push eax
lea eax, [ebp - 0x1714]
push eax
call fcn.004497dc
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 0x32
call fcn.004102b0
lea ecx, [ebp - 0x1714]
mov byte [ebp - 4], 0x2f
call fcn.0040b400
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
mov eax, edi
cdq
push edx
push eax
lea eax, [ebp - 0x178c]
push eax
call fcn.004497dc
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 0x33
call fcn.004102b0
lea ecx, [ebp - 0x178c]
mov byte [ebp - 4], 0x2f
call fcn.0040b400
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x1694]
push eax
lea ecx, [ebp - 0x1334]
call fcn.004102b0
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
lea eax, [ebp - 0x15ec]
push eax
lea eax, [ebp - 0x1774]
push eax
call fcn.00440737
add esp, 8
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x1334]
mov byte [ebp - 4], 0x34
call fcn.004102b0
lea ecx, [ebp - 0x1774]
mov byte [ebp - 4], 0x2f
call fcn.0040b400
push 1
push 0x4b25b0
lea ecx, [ebp - 0x1334]
call fcn.004103b0
lea ecx, [ebp - 0x18d8]
call fcn.00442c93
lea eax, [ebp - 0x1334]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x175c]
push eax
call fcn.004403b6
add esp, 8
lea ecx, [ebp - 0x1334]
push eax
call fcn.00416890
lea ecx, [ebp - 0x175c]
call fcn.0040b400
lea eax, [ebp - 0x1334]
push eax
lea eax, [ebp - 0x1744]
push eax
lea ecx, [ebp - 0x18d8]
call fcn.00442cb5
push eax
lea ecx, [ebp - 0x1334]
call fcn.00416890
lea ecx, [ebp - 0x1744]
call fcn.0040b400
push 0x1000
lea eax, [ebp - 0x131c]
push 0
push eax
call fcn.00459150
add esp, 0xc
mov dword [ebp - 0x14b8], 0xf
lea eax, [ebp - 0x1334]
mov dword [ebp - 0x14bc], 0
lea ecx, [ebp - 0x14cc]
mov byte [ebp - 0x14cc], 0
push 0xffffffffffffffff
push 0
push eax
call fcn.0040bf80
cmp dword [ebp - 0x14b8], 0x10
lea ecx, [ebp - 0x18fc]
push ecx
lea ecx, [ebp - 0x131c]
mov byte [ebp - 4], 0x36
push ecx
push dword [ebp - 0x14bc]
lea eax, [ebp - 0x14cc]
mov dword [ebp - 0x18fc], 0x1000
cmovae eax, dword [ebp - 0x14cc]
push eax
mov byte [ebp - 0x131c], 0
call fcn.004429c0
add esp, 0x10
lea ecx, [ebp - 0x18da]
call fcn.00408070
lea eax, [ebp - 0x131c]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x18da]
call fcn.00447940
push str.http:__data.yebankeji.cn__e2feea9ae30cd826ed1b77fa09dbc164ea2c433f6c
lea ecx, [ebp - 0x137c]
call fcn.0040c220
cmp byte [ebp - 0x131c], 0
mov byte [ebp - 4], 0x38
jne 0x42e13f
xor ecx, ecx
jmp 0x42e151
lea ecx, [ebp - 0x131c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e148
sub ecx, edx
push ecx
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x137c]
call fcn.004103b0
cmp dword [ebp - 0x1368], 0x10
lea eax, [ebp - 0x137c]
mov ecx, ebx
cmovae eax, dword [ebp - 0x137c]
push eax
call fcn.0042e2e0
test eax, eax
jne 0x42e1fb
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call esi
cmp dword [ebp - 0x1368], 0x10
lea eax, [ebp - 0x137c]
mov ecx, ebx
cmovae eax, dword [ebp - 0x137c]
push eax
call fcn.0042e2e0
test eax, eax
jne 0x42e1fb
push 0xfa0
call esi
cmp dword [ebp - 0x1368], 0x10
lea eax, [ebp - 0x137c]
mov ecx, ebx
cmovae eax, dword [ebp - 0x137c]
push eax
call fcn.0042e2e0
test eax, eax
jne 0x42e1fb
push 0x1f40
call esi
cmp dword [ebp - 0x1368], 0x10
lea eax, [ebp - 0x137c]
mov ecx, ebx
cmovae eax, dword [ebp - 0x137c]
push eax
call fcn.0042e2e0
lea ecx, [ebp - 0x137c]
call fcn.0040b400
lea ecx, [ebp - 0x18da]
call fcn.0044c160
lea ecx, [ebp - 0x14cc]
call fcn.0040b400
lea ecx, [ebp - 0x18d8]
call fcn.0044c160
lea ecx, [ebp - 0x1334]
call fcn.0040b400
lea ecx, [ebp - 0x1694]
call fcn.0040b400
lea ecx, [ebp - 0x191c]
call fcn.0044c160
lea ecx, [ebp - 0x15ec]
call fcn.00407890
lea ecx, [ebp - 0x164c]
call fcn.00407890
lea ecx, [ebp - 0x16fc]
call fcn.0040b400
lea ecx, [ebp - 0x172c]
call fcn.0040b400
lea ecx, [ebp - 0x16e4]
call fcn.0040b400
lea ecx, [ebp - 0x13f4]
call fcn.0040b400
lea ecx, [ebp - 0x16ac]
call fcn.0040b400
lea ecx, [ebp - 0x18d9]
call fcn.0044c160
lea ecx, [ebp - 0x152c]
call fcn.0040b400
lea ecx, [ebp - 0x1394]
call fcn.0040b400
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00434840
mov esp, ebp
pop ebp
ret 4