Function at 0x586df0
Capabilities:
Check http status code
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x5a48]
mov eax, 0x5a48
call fcn.00621970
push 0xffffffffffffffff
push 0x662924
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x5a44], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 4], 0
mov edi, dword [ebx + 0x3244]
push edi
call fcn.0057b1e0
mov esi, eax
mov dword [ebp - 0x5c], esi
push 0xf
push str.content_length:
add edi, esi
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x586f65
cmp byte [ebp + 0x5a50], al
je 0x586f1f
lea edi, [ebx + 0x3218]
push edi
push str._I64d
mov eax, dword [ebx + 0x3244]
lea ecx, [esi + eax + 0xf]
push ecx
call fcn.00621c2e
add esp, 0xc
xor edx, edx
cmp dword [edi], edx
jne 0x586eff
cmp dword [edi + 4], edx
jne 0x586eff
mov eax, dword [ebx + 0x3244]
lea esi, [esi + eax + 0xf]
mov dword [ebp - 0x4c], esi
cmp byte [esi], 0x20
jne 0x586eb2
inc esi
jmp 0x586ea7
cmp byte [esi], 0x30
jne 0x586ec8
mov eax, dword [ebx + 0x3208]
cmp eax, edx
je 0x586ec8
mov byte [eax + 0x889], 1
cmp dword [ebx + 0x5c], edx
jl 0x586eff
jg 0x586ed4
cmp dword [ebx + 0x58], edx
jbe 0x586eff
mov eax, dword [ebx + 0x60]
mov ecx, dword [ebx + 0x64]
cmp ecx, edx
jl 0x586eff
jg 0x586ee4
cmp eax, edx
jbe 0x586eff
cmp eax, dword [ebx + 0x78]
jne 0x586eff
cmp ecx, dword [ebx + 0x7c]
jne 0x586eff
mov eax, dword [ebx + 0x3208]
cmp eax, edx
je 0x586eff
mov byte [eax + 0x25f], 1
cmp dword [ebx + 0x321c], edx
jg 0x586f3e
jl 0x586f11
cmp dword [ebx + 0x3218], edx
jae 0x586f3e
mov dword [ebx + 0x3218], edx
mov dword [ebx + 0x321c], edx
jmp 0x586f3e
lea ecx, [ebx + 0x3278]
push ecx
push str._I64d
mov edx, dword [ebx + 0x3244]
lea eax, [esi + edx + 0xf]
push eax
call fcn.00621c2e
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x5a44]
xor ecx, ebp
call fcn.0062023e
add ebp, 0x5a48
mov esp, ebp
pop ebp
ret 4
xor edi, edi
cmp dword [ebx + 0x31fc], edi
jne 0x586ff7
cmp byte [ebp + 0x5a50], 0
je 0x586ff7
push 0xe
push str.accept_ranges:
mov ecx, dword [ebx + 0x3244]
add ecx, esi
push ecx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x586ff7
cmp dword [ebx + 0xc4], edi
jne 0x586ff7
mov edx, dword [ebx + 0x3244]
lea esi, [esi + edx + 0xe]
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
push str.none
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x586fe8
mov ecx, dword [ebx + 0x3208]
cmp ecx, edi
je 0x586fd9
mov eax, dword [ecx]
push 2
mov edx, dword [eax + 0xc]
call edx
mov dword [ebx + 0x31fc], 2
jmp 0x586f3e
mov dword [ebx + 0x31fc], 1
jmp 0x586f3e
push 0xe
push str.Content_Range:
mov eax, dword [ebx + 0x3244]
add eax, esi
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x5870b7
cmp byte [ebp + 0x5a50], al
je 0x5870b7
mov ecx, dword [ebx + 0x3244]
lea eax, [esi + ecx + 0xe]
push 0x2f
push eax
call fcn.00621820
add esp, 8
cmp eax, edi
je 0x58705e
inc eax
mov cl, byte [eax]
cmp cl, 0xd
je 0x58705e
cmp cl, 0xa
je 0x58705e
lea edx, [ebx + 0x3280]
push edx
push str._I64d
push eax
call fcn.00621c2e
add esp, 0xc
mov eax, dword [ebx + 0x3244]
lea esi, [esi + eax + 0xe]
push 0x2d
push esi
call fcn.00621820
add esp, 8
cmp eax, edi
je 0x586f3e
inc eax
mov cl, byte [eax]
cmp cl, 0xd
je 0x586f3e
cmp cl, 0xa
je 0x586f3e
add ebx, 0x3288
push ebx
push str._I64d
push eax
call fcn.00621c2e
add esp, 0xc
test eax, eax
jg 0x586f3e
mov dword [ebx], edi
mov dword [ebx + 4], edi
jmp 0x586f3e
push 0x12
push str.Transfer_Encoding:
mov ecx, dword [ebx + 0x3244]
add ecx, esi
push ecx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58712a
mov edx, dword [ebx + 0x3244]
lea esi, [esi + edx + 0x12]
lea ecx, [ecx]
cmp esi, edi
je 0x586f3e
cmp byte [esi], 0x20
jne 0x5870f3
inc esi
mov dword [ebp - 0x48], esi
jmp 0x5870e8
push 7
push str.chunked
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x587113
mov byte [ebx + 0xe0], 1
jmp 0x586f3e
push 0x2c
push esi
call fcn.00621820
add esp, 8
cmp eax, edi
je 0x587123
inc eax
mov esi, eax
mov dword [ebp - 0x48], esi
jmp 0x5870e0
push 0x15
push str.Server:_BestHop_2.4.4
mov eax, dword [ebx + 0x3244]
add eax, esi
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x587168
cmp byte [ebp + 0x5a50], al
je 0x587168
mov ebx, dword [ebx + 0x3208]
cmp ebx, edi
je 0x586f3e
mov byte [ebx + 0x25f], 1
jmp 0x586f3e
push 0x1b
push str.Server:_MediaFire_HTTP_lrbd
mov ecx, dword [ebx + 0x3244]
add ecx, esi
push ecx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58718c
cmp byte [ebp + 0x5a50], al
jne 0x58714e
push 0x11
push str.Content_Encoding:
mov edx, dword [ebx + 0x3244]
add edx, esi
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58727e
cmp byte [ebp + 0x5a50], al
je 0x58727e
mov eax, dword [ebx + 0x3244]
lea esi, [esi + eax + 0x11]
cmp byte [esi], 0x20
jne 0x5871cd
inc esi
mov dword [ebp - 0x60], esi
jmp 0x5871c2
push 4
push str.gzip
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x58721d
push 6
push str.x_gzip
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x58721d
push 7
push str.deflate
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x58721d
push 9
push str.x_deflate
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58722e
mov byte [ebx + 0x21], 1
mov ecx, dword [ebx + 0xc8]
mov byte [ecx + 0x34f], 1
push 3
push 0x6b0dd0
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x58726e
push 3
push 0x6b0dcc
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x58726e
push 6
push str.brotli
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x586f3e
mov byte [ebx + 0x20], 1
mov byte [ebx + 0x326d], 1
jmp 0x586f3e
push 0x11
push str.WWW_Authenticate:
mov edx, dword [ebx + 0x3244]
add edx, esi
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58779e
mov eax, dword [ebx + 0x3244]
lea edi, [esi + eax + 0x11]
mov dword [ebp - 0x38], edi
mov al, byte [edi]
cmp al, 0x20
je 0x587798
cmp al, 9
je 0x587798
mov esi, edi
nop
push 5
push str.realm
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x587384
add esi, 5
jmp 0x5872e0
mov al, byte [esi]
test al, al
je 0x5873ac
cmp al, 0x3d
je 0x5872f4
inc esi
mov dword [ebp - 0x50], esi
jmp 0x5872e0
cmp byte [esi], 0
je 0x5873ac
inc esi
cmp byte [esi], 0
je 0x5873ac
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
cmp byte [esi], 0
je 0x5873ac
cmp byte [esi], 0x22
jne 0x587333
inc esi
cmp byte [esi], 0
je 0x5873ac
push 0x22
push esi
call fcn.00621820
jmp 0x587350
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x587357
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x5873ac
sub eax, esi
mov dword [ebp - 0x1c], eax
test eax, eax
jle 0x5873ac
mov ecx, eax
push ecx
mov ecx, dword [ebx + 0xc8]
add ecx, 0x1c0
call fcn.00402860
mov edx, dword [ebp - 0x1c]
push edx
push esi
push eax
call fcn.00621de0
add esp, 0xc
jmp 0x5873ac
push 0x20
push esi
call fcn.00621820
add esp, 8
test eax, eax
jne 0x5873a2
push 9
push esi
call fcn.00621820
add esp, 8
test eax, eax
je 0x5873ac
inc eax
cmp byte [eax], 0
jne 0x58778e
push 5
push str.Basic
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x586f3e
mov eax, dword [ebx + 0xc8]
mov byte [eax + 0x1ae], 0
push 6
push str.Digest
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x5875e5
push str.NTLM
push edi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x5875e5
push 0x67b29c
push edi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x587427
push 0x67f2c0
push edi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x586f3e
sub eax, edi
mov esi, eax
test esi, esi
je 0x586f3e
mov ecx, dword [ebx + 0xc8]
mov byte [ecx + 0x1af], 1
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 1
lea edx, [esi + 1]
push edx
lea ecx, [ebp - 0x14]
call fcn.00402860
mov edi, eax
push esi
mov eax, dword [ebp - 0x38]
push eax
push edi
call fcn.00621de0
mov byte [edi + esi], 0
mov ecx, dword [ebx + 0xc8]
add ecx, 0x2ec
push ecx
push str.nonce
mov edx, dword [ebp - 0x14]
push edx
call fcn.0057e510
mov eax, dword [ebx + 0xc8]
add eax, 0x2f4
push eax
push str.realm
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.0057e510
mov edx, dword [ebx + 0xc8]
add edx, 0x2fc
push edx
push 0x6b19b0
mov eax, dword [ebp - 0x14]
push eax
call fcn.0057e510
mov ecx, dword [ebx + 0xc8]
add ecx, 0x2f8
push ecx
push str.algorithm
mov edx, dword [ebp - 0x14]
push edx
call fcn.0057e510
mov eax, dword [ebx + 0xc8]
add eax, 0x300
push eax
push str.opaque
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.0057e510
add esp, 0x48
push str.stale
mov edx, dword [ebp - 0x14]
push edx
call fcn.006218e0
add esp, 8
test eax, eax
je 0x58759e
add eax, 5
push 0x3d
push eax
call fcn.00621820
add esp, 8
mov esi, eax
test esi, esi
je 0x58759e
inc esi
lea ecx, [ebp + 0x5a3c]
call fcn.00402510
mov byte [ebp - 4], 2
push 0x2c
push esi
call fcn.00621820
add esp, 8
lea ecx, [ebp + 0x5a3c]
test eax, eax
je 0x58756b
sub eax, esi
mov edi, eax
lea eax, [edi + 1]
push eax
call fcn.00402860
mov dword [ebp - 0x18], eax
push edi
push esi
push eax
call fcn.00621de0
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edi], 0
jmp 0x587571
push esi
call fcn.0054f250
push str.true
mov edx, dword [ebp + 0x5a3c]
push edx
call fcn.00621d5e
add esp, 8
test eax, eax
jne 0x58758f
mov byte [ebx + 0x32c4], al
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x5a3c]
call fcn.00402580
mov eax, dword [ebx + 0xc8]
mov dword [eax + 0x304], 1
lea ecx, [ebp - 0x1c]
push ecx
call fcn.006239e1
mov edx, dword [ebp - 0x1c]
push edx
push 0x67ea60
mov eax, dword [ebx + 0xc8]
add eax, 0x2f0
push eax
call fcn.00402f80
add esp, 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402580
jmp 0x586f3e
cmp dword [ebx + 0x32d4], 0
jne 0x587694
cmp dword [ebx + 0x32d8], 0
jne 0x587694
xor esi, esi
push 0x67b29c
push edi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x587625
push 0x67f2c0
push edi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x58766b
sub eax, edi
mov esi, eax
cmp esi, 6
jle 0x58766b
push 7
push str.Bearer
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58766b
push str.NTLM
push edi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x58766b
push str.Digest
push edi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x58766b
mov esi, 6
push esi
push edi
mov ecx, dword [ebx + 0xc8]
mov edx, dword [ecx + 0x2e8]
push edx
call fcn.00621de0
mov eax, dword [ebx + 0xc8]
mov ecx, dword [eax + 0x2e8]
mov byte [esi + ecx], 0
jmp 0x586f3b
push 0x20
push edi
call fcn.00621820
add esp, 8
mov esi, eax
mov dword [ebp - 0x1c], esi
xor edi, edi
mov dword [ebp + 0x5a3c], edi
test esi, esi
je 0x5876e2
inc esi
mov dword [ebp - 0x1c], esi
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x5876d8
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x5876e2
sub eax, esi
mov edi, eax
mov dword [ebp + 0x5a3c], edi
cmp dword [ebx + 0x32cc], 0
je 0x58772a
mov byte [ebp - 4], 3
mov eax, dword [ebx + 0x32cc]
push eax
call fcn.005f4517
add esp, 4
mov dword [ebp - 4], 0
jmp 0x587720
mov dword [ebx + 0x32cc], 0
test edi, edi
jne 0x587765
cmp dword [ebx + 0xa0], edi
je 0x587765
cmp dword [ebx + 0x32d4], edi
je 0x587752
lea edx, [ebx + 0x3314]
push edx
mov ecx, ebx
call fcn.0057bb00
mov dword [ebx + 0x32d4], edi
xor eax, eax
mov dword [ebx + 0x32d4], eax
mov dword [ebx + 0x32d8], eax
jmp 0x586f3e
lea eax, [edi + 1]
push eax
call fcn.005f4522
mov dword [ebx + 0x32cc], eax
push edi
push esi
push eax
call fcn.00621de0
add esp, 0x10
mov ecx, dword [ebx + 0x32cc]
mov byte [edi + ecx], 0
jmp 0x586f3e
mov esi, eax
mov dword [ebp - 0x50], esi
jmp 0x5872c0
inc edi
jmp 0x5872a8
push 0x13
push str.Proxy_Authenticate:
mov edx, dword [ebx + 0x3244]
add edx, esi
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x587aa3
mov eax, dword [ebx + 0x3244]
lea esi, [esi + eax + 0x13]
jmp 0x5877d0
mov al, byte [esi]
cmp al, 0x20
je 0x587a9a
cmp al, 9
je 0x587a9a
push 5
push str.Basic
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x586f3e
push 6
push str.Digest
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58790f
push str.NTLM
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x58790f
mov eax, dword [ebx + 0x19c]
cmp dword [eax + 8], 2
je 0x58790f
mov dword [eax + 8], 3
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
cmp eax, edi
jne 0x587867
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
cmp eax, edi
je 0x586f3e
sub eax, esi
mov edi, eax
test edi, edi
je 0x586f3e
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 5
lea ecx, [edi + 1]
push ecx
lea ecx, [ebp - 0x14]
call fcn.00402860
mov dword [ebp - 0x18], eax
push edi
push esi
push eax
call fcn.00621de0
add esp, 0xc
mov edx, dword [ebp - 0x18]
mov byte [edx + edi], 0
lea ecx, [ebp + 0x5a3c]
call fcn.00402510
mov byte [ebp - 4], 6
mov eax, dword [ebx + 0xc8]
mov ecx, dword [eax]
push ecx
mov edx, dword [eax + 0x24]
push edx
call fcn.0057a280
add esp, 4
push eax
push 0x686310
lea eax, [ebp + 0x5a3c]
push eax
call fcn.00402f80
add esp, 0x10
mov ecx, dword [ebp + 0x5a3c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebx + 0x19c]
call fcn.005a6f80
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x5a3c]
call fcn.00402580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402580
jmp 0x586f3e
mov eax, dword [ebx + 0x19c]
mov dword [eax + 8], 2
cmp dword [ebx + 0x32e0], edi
jne 0x5879a2
cmp dword [ebx + 0x32e4], edi
jne 0x5879a2
push str.NTLM
mov ecx, dword [ebx + 0x19c]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.00621d5e
add esp, 8
test eax, eax
je 0x586f3e
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x587972
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x587976
sub eax, esi
mov edi, eax
push edi
push esi
mov eax, dword [ebx + 0x19c]
mov ecx, dword [eax + 0x10c]
push ecx
call fcn.00621de0
add esp, 0xc
mov edx, dword [ebx + 0x19c]
mov eax, dword [edx + 0x10c]
mov byte [edi + eax], 0
jmp 0x586f3e
push 0x20
push esi
call fcn.00621820
add esp, 8
mov esi, eax
mov dword [ebp - 0x1c], esi
mov dword [ebp + 0x5a3c], edi
test esi, esi
je 0x5879ee
inc esi
mov dword [ebp - 0x1c], esi
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x5879e4
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x5879ee
sub eax, esi
mov edi, eax
mov dword [ebp + 0x5a3c], edi
cmp dword [ebx + 0x32e8], 0
je 0x587a36
mov byte [ebp - 4], 7
mov eax, dword [ebx + 0x32e8]
push eax
call fcn.005f4517
add esp, 4
mov dword [ebp - 4], 0
jmp 0x587a2c
mov dword [ebx + 0x32e8], 0
test edi, edi
jne 0x587a71
cmp dword [ebx + 0xa0], edi
je 0x587a71
cmp dword [ebx + 0x32e0], edi
je 0x587a5e
lea ecx, [ebx + 0x32f0]
push ecx
mov ecx, ebx
call fcn.0057bb00
mov dword [ebx + 0x32e0], edi
xor eax, eax
mov dword [ebx + 0x32e0], eax
mov dword [ebx + 0x32e4], eax
jmp 0x586f3e
lea edx, [edi + 1]
push edx
call fcn.005f4522
mov dword [ebx + 0x32e8], eax
push edi
push esi
push eax
call fcn.00621de0
add esp, 0x10
mov eax, dword [ebx + 0x32e8]
mov byte [edi + eax], 0
jmp 0x586f3e
inc esi
mov dword [ebp - 0x64], esi
jmp 0x5877d0
push 9
push str.Location:
mov ecx, dword [ebx + 0x3244]
add ecx, esi
push ecx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x587b45
cmp byte [ebp + 0x5a50], al
je 0x587b45
mov eax, dword [ebx + 0x31f8]
cmp eax, edi
je 0x587ade
push eax
call fcn.005f4517
add esp, 4
mov edx, dword [ebx + 0x3244]
lea esi, [esi + edx + 9]
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
xor edi, edi
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x587b18
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x587b1c
sub eax, esi
mov edi, eax
lea eax, [edi + 1]
push eax
call fcn.005f4522
mov dword [ebx + 0x31f8], eax
push edi
push esi
push eax
call fcn.00621de0
add esp, 0x10
mov ecx, dword [ebx + 0x31f8]
mov byte [edi + ecx], 0
jmp 0x586f3e
push 0x14
push str.Content_Disposition:
mov edx, dword [ebx + 0x3244]
add edx, esi
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x588ccd
cmp byte [ebp + 0x5a50], al
je 0x588ccd
mov eax, dword [ebx + 0x325c]
cmp eax, 0xc8
je 0x587b89
cmp eax, 0xce
jne 0x586f3e
mov eax, dword [ebx + 0xc8]
cmp dword [eax + 0x334], edi
jne 0x586f3e
mov byte [ebp - 0x1d], 0
mov ecx, dword [ebx + 0x3244]
lea eax, [esi + ecx + 0x14]
push str.attachment
push eax
call fcn.006218e0
add esp, 8
test eax, eax
je 0x587bc1
mov byte [ebp - 0x1d], 1
jmp 0x587bea
mov edx, dword [ebx + 0x3244]
lea eax, [esi + edx + 0x14]
push str.inline_
push eax
call fcn.006218e0
add esp, 8
test eax, eax
je 0x587bea
mov eax, dword [ebx + 0xc8]
mov byte [eax + 0x18e], 1
inc dword [ebx + 0x32ac]
mov ecx, dword [ebx + 0x3244]
lea edx, [esi + ecx + 0x14]
push edx
mov ecx, ebx
call fcn.0057c1e0
mov eax, dword [ebx + 0x3244]
lea eax, [esi + eax + 0x14]
push str.filename
push eax
call fcn.006218e0
add esp, 8
mov edi, eax
test edi, edi
jne 0x587c82
mov ecx, dword [ebx + 0x3244]
lea esi, [esi + ecx + 0x14]
push 0x6b1934
push esi
call fcn.006229a0
mov edi, eax
add esp, 8
lea ebx, [ebx]
test edi, edi
je 0x587c6c
push 8
push str.filename
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x587c82
lea eax, [edi + 2]
cmp byte [eax], 0
jne 0x587c64
xor edi, edi
jmp 0x587c40
push 0x6b1934
push eax
jmp 0x587c30
cmp byte [ebp - 0x1d], 0
je 0x586f3e
mov ecx, ebx
call fcn.00580ce0
jmp 0x586f3e
push 0x3d
push edi
call fcn.00621820
add esp, 8
mov esi, eax
test esi, esi
je 0x586f3e
inc esi
mov al, byte [esi]
cmp al, 0xd
je 0x586f3e
cmp al, 0xa
je 0x586f3e
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
cmp byte [esi], 0
je 0x586f3e
mov byte [ebp - 0x1d], 1
mov al, byte [esi]
cmp al, 0x22
jne 0x587e62
inc esi
push 0x22
push esi
call fcn.00621820
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
je 0x587e82
mov byte [ebp - 0x1d], 0
sub eax, esi
mov dword [ebp + 0x5a3c], eax
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 9
mov edx, dword [ebp + 0x5a3c]
push edx
lea ecx, [ebp - 0x14]
call fcn.00402860
mov edi, eax
mov dword [ebp - 0x44], edi
mov eax, dword [ebp + 0x5a3c]
push eax
push esi
push edi
call fcn.00621de0
add esp, 0xc
mov ecx, dword [ebp + 0x5a3c]
mov byte [ecx + edi], 0
cmp byte [ebp - 0x1d], 0
je 0x587ee5
push 0x3b
mov edx, dword [ebp - 0x14]
push edx
call fcn.00621820
add esp, 8
mov esi, eax
mov dword [ebp - 0x40], esi
test esi, esi
jne 0x587d79
push 0x2e
mov eax, dword [ebp - 0x14]
push eax
call fcn.00621820
add esp, 8
test eax, eax
je 0x587fbf
inc eax
push 0x2c
push eax
call fcn.00621820
add esp, 8
mov esi, eax
mov dword [ebp - 0x40], esi
test esi, esi
je 0x587fbf
mov byte [esi], 0
push 7
push str.utf_8
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x587fbf
push str.filename
inc esi
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x587fbf
push 0x3d
add eax, 8
push eax
call fcn.00621820
add esp, 8
mov esi, eax
test esi, esi
je 0x587fbf
inc esi
push 7
push str.utf_8
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x587fbf
lea ecx, [ebp + 0x5a3c]
call fcn.00402510
mov byte [ebp - 4], 0xa
push esi
push 0x678ea8
lea edx, [ebp + 0x5a3c]
push edx
call fcn.00402f80
add esp, 0xc
mov eax, dword [ebp + 0x5a3c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x587e10
sub eax, edx
mov esi, eax
push esi
lea ecx, [ebp - 0x14]
call fcn.00402860
mov edi, eax
mov dword [ebp - 0x44], edi
push esi
mov eax, dword [ebp + 0x5a3c]
push eax
push edi
call fcn.00621de0
mov byte [esi + edi], 0
push 0x3b
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00621820
add esp, 0x14
mov dword [ebp - 0x40], eax
test eax, eax
je 0x587e53
mov byte [eax], 0
mov byte [ebp - 4], 9
lea ecx, [ebp + 0x5a3c]
jmp 0x587fba
cmp al, 0x27
jne 0x587e82
inc esi
push 0x27
push esi
call fcn.00621820
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
je 0x587e82
mov byte [ebp - 0x1d], 0
jmp 0x587ce6
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x587ce6
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x587ce6
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x587ec0
sub eax, edx
mov dword [ebp + 0x5a3c], eax
je 0x586f3e
cmp eax, 0x200
jle 0x587cee
jmp 0x586f3e
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x18], esi
cmp byte [esi], 0x2e
jne 0x587fbf
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x587f23
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
je 0x587fbf
mov esi, dword [ebp - 0x24]
sub esi, dword [ebp - 0x18]
lea edx, [esi - 2]
cmp edx, 3
ja 0x587fbf
lea ecx, [ebp - 0x1c]
call fcn.00402510
mov byte [ebp - 4], 0xb
push esi
lea ecx, [ebp - 0x1c]
call fcn.00402860
mov edi, eax
push esi
mov eax, dword [ebp - 0x18]
push eax
push edi
call fcn.00621de0
add esp, 0xc
mov byte [edi + esi], 0
lea ecx, [ebp + 0x5a3c]
call fcn.00402510
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
push 0x678de0
lea eax, [ebp + 0x5a3c]
push eax
call fcn.00402f80
mov ecx, dword [ebp + 0x5a3c]
push ecx
push 0x678ea8
lea edx, [ebp - 0x14]
push edx
call fcn.00402f80
add esp, 0x1c
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x44], edi
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x5a3c]
call fcn.00402580
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1c]
call fcn.00402580
push 8
push str._UTF_8_
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x587fe5
lea eax, [ebp - 0x14]
push eax
push edi
call fcn.005d5bd0
add esp, 8
jmp 0x5880cb
push 9
push str._UTF8_B_
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58800b
lea ecx, [ebp - 0x14]
push ecx
push edi
call fcn.005d5bd0
add esp, 8
jmp 0x5880cb
push 0xa
push str.ISO_8859
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x588040
mov edx, dword [ebp - 0x14]
add edx, 0xa
push edx
lea ecx, [ebp - 0x18]
call fcn.004030c0
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
call fcn.00405920
jmp 0x5880bf
push 9
push str.ISO_8859_
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x588072
mov ecx, dword [ebp - 0x14]
add ecx, 9
push ecx
lea ecx, [ebp - 0x18]
call fcn.004030c0
mov byte [ebp - 4], 0xe
push 0x6b18f8
mov edx, dword [ebp - 0x18]
push edx
jmp 0x5880a2
push 0xb
push str.windows_125
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x5880cb
mov eax, dword [ebp - 0x14]
add eax, 0xb
push eax
lea ecx, [ebp - 0x18]
call fcn.004030c0
mov byte [ebp - 4], 0xf
push 0x6b18f8
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.006218e0
add esp, 8
test eax, eax
je 0x5880bf
add eax, 2
cmp byte [eax], 0
je 0x5880bf
push eax
lea ecx, [ebp - 0x14]
call fcn.0054f250
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x18]
call fcn.00402580
push 7
push str.utf_8
mov edx, dword [ebp - 0x14]
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x588325
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x588325
push str.filename
push esi
call fcn.006218e0
add esp, 8
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
jne 0x58814b
push 0x6b1934
push esi
call fcn.006229a0
add esp, 8
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x588325
push 8
push str.filename
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x58814b
add edi, 2
cmp byte [edi], 0
jne 0x588143
xor edi, edi
jmp 0x588118
push 0x6b1934
push edi
jmp 0x58810e
push 0x3d
push edi
call fcn.00621820
add esp, 8
mov edi, eax
mov dword [ebp - 0x3c], edi
test edi, edi
je 0x5881f9
inc edi
mov dword [ebp - 0x3c], edi
mov al, byte [edi]
cmp al, 0xd
je 0x5881f9
cmp al, 0xa
je 0x5881f9
push edi
mov ecx, ebx
call fcn.0057b1e0
lea esi, [eax + edi]
cmp byte [esi], 0
je 0x5881f9
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], 0
mov byte [ebp - 0x1e], 1
cmp byte [esi], 0x22
jne 0x588235
inc esi
mov dword [ebp - 0x28], esi
push 0x22
push esi
call fcn.00621820
add esp, 8
mov dword [ebp - 0x2c], eax
test eax, eax
je 0x588235
mov byte [ebp - 0x1e], 0
sub eax, esi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
call fcn.00402860
mov edi, eax
mov dword [ebp - 0x3c], edi
mov ecx, dword [ebp - 0x1c]
push ecx
push esi
push edi
call fcn.00621de0
add esp, 0xc
cmp byte [ebp - 0x1e], 0
je 0x5881f9
push 0x3b
mov edx, dword [ebp - 0x14]
push edx
call fcn.00621820
add esp, 8
test eax, eax
je 0x5881f9
mov byte [eax], 0
push 0xa
push str.ISO_8859
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58829a
mov eax, dword [ebp - 0x14]
add eax, 0xa
push eax
lea ecx, [ebp - 0x18]
call fcn.004030c0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x14]
call fcn.00405920
jmp 0x588319
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x5881ba
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x5881ba
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x588270
sub eax, edx
mov dword [ebp - 0x1c], eax
je 0x588289
cmp eax, 0x100
jle 0x5881bf
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402580
jmp 0x586f3e
push 9
push str.ISO_8859_
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x5882cc
mov edx, dword [ebp - 0x14]
add edx, 9
push edx
lea ecx, [ebp - 0x18]
call fcn.004030c0
mov byte [ebp - 4], 0x11
push 0x6b18f8
mov eax, dword [ebp - 0x18]
push eax
jmp 0x5882fc
push 0xb
push str.windows_125
push edi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x588325
mov ecx, dword [ebp - 0x14]
add ecx, 0xb
push ecx
lea ecx, [ebp - 0x18]
call fcn.004030c0
mov byte [ebp - 4], 0x12
push 0x6b18f8
mov edx, dword [ebp - 0x18]
push edx
call fcn.006218e0
add esp, 8
test eax, eax
je 0x588319
add eax, 2
cmp byte [eax], 0
je 0x588319
push eax
lea ecx, [ebp - 0x14]
call fcn.0054f250
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x18]
call fcn.00402580
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp + 0x30]
call fcn.00406fb0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebx + 0xc8]
add ecx, 0xc4
lea edx, [ebp - 0x14]
push edx
call fcn.00405920
push 7
push str.utf_8
mov eax, dword [ebp - 0x14]
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x5883b0
mov ecx, dword [ebp - 0x14]
add ecx, 7
push ecx
lea ecx, [ebp - 0x1c]
call fcn.004030c0
mov byte [ebp - 4], 0x14
push 0
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp + 0x30]
call fcn.00401990
mov ecx, dword [ebx + 0xc8]
add ecx, 0xc4
lea eax, [ebp - 0x1c]
push eax
call fcn.00405920
mov ecx, dword [ebx + 0xc8]
mov byte [ecx + 0x341], 1
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1c]
call fcn.00402580
mov ecx, dword [ebx + 0xc8]
mov eax, dword [ecx + 0xc4]
push 1
push 0
push 1
push 1
lea edx, [ebp + 0x30]
push edx
movzx edx, byte [ecx + 0x341]
neg edx
sbb edx, edx
and edx, 0xfde9
push edx
push eax
call fcn.005be180
mov eax, dword [ebx + 0xc8]
mov esi, dword [eax + 0xbc]
test esi, esi
je 0x588439
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5883f5
sub eax, edx
je 0x588439
push 9
push str.text_html
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x588439
mov ecx, dword [ebx + 0xc8]
mov eax, dword [ecx + 0xbc]
push eax
call fcn.005f4517
add esp, 4
mov edx, dword [ebx + 0xc8]
mov dword [edx + 0xbc], 0
cmp dword [ebx + 0xc4], 0
jne 0x5887bb
mov eax, dword [ebx + 0xc8]
cmp dword [eax + 0x334], 0
jne 0x5887bb
cmp dword [eax + 0x32c], 0
jne 0x5887bb
cmp byte [eax + 0x345], 0
jne 0x5887bb
mov eax, dword [eax + 0x15c]
test eax, 0x100
je 0x58848b
test eax, 0x2000
jne 0x5887bb
mov eax, dword [ebp + 0x30]
test eax, eax
jne 0x588495
lea eax, [ebp + 0x34]
push 0x25
push eax
call fcn.00621db0
add esp, 8
mov ecx, dword [ebp + 0x30]
test eax, eax
je 0x5884f7
test ecx, ecx
mov eax, ecx
jne 0x5884b0
lea eax, [ebp + 0x34]
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x5884b3
sub eax, esi
sar eax, 1
cmp eax, 0x2800
jae 0x5884f7
test ecx, ecx
jne 0x5884d0
lea ecx, [ebp + 0x34]
lea edx, [ebp + 0x3c]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x5884d3
lea eax, [ebp + 0x30]
push eax
lea ecx, [ebp + 0x3c]
push ecx
call fcn.005b8a60
add esp, 8
mov ecx, dword [ebp + 0x30]
test ecx, ecx
mov eax, ecx
jne 0x588500
lea eax, [ebp + 0x34]
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x588503
sub eax, esi
sar eax, 1
cmp eax, 0x100
jbe 0x5885d9
test ecx, ecx
mov eax, ecx
jne 0x588526
lea eax, [ebp + 0x34]
push 0x2e
push eax
call fcn.0061fd52
add esp, 8
mov esi, dword [ebp + 0x30]
test esi, esi
jne 0x58853b
lea esi, [ebp + 0x34]
test eax, eax
je 0x5885cd
mov ecx, eax
lea edi, [ecx + 2]
jmp 0x588550
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x588550
sub ecx, edi
sar ecx, 1
cmp ecx, 0xa
jae 0x5885cd
mov ecx, eax
lea edi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x588570
sub ecx, edi
sar ecx, 1
mov edx, 0xfd
sub edx, ecx
xor ecx, ecx
mov word [esi + edx*2], cx
mov dword [ebp], ecx
mov dword [ebp + 8], ecx
xor edx, edx
mov word [ebp + 4], dx
mov byte [ebp - 4], 0x15
push ecx
push eax
push esi
push 0x678de0
lea ecx, [ebp]
call fcn.00402330
mov eax, dword [ebp]
test eax, eax
jne 0x5885b6
lea eax, [ebp + 4]
push eax
lea ecx, [ebp + 0x30]
call fcn.00401800
mov byte [ebp - 4], 0x13
lea ecx, [ebp]
call fcn.00401210
jmp 0x5885d6
xor eax, eax
mov word [esi + 0x1fa], ax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ebx + 0x3208]
mov edx, dword [edx + 0x18]
xor edi, edi
cmp edx, edi
je 0x588641
mov eax, dword [ebx + 0xc8]
cmp dword [eax + 0x3c], edi
jne 0x588641
test dword [eax + 0x15c], 0x2000
mov eax, ecx
je 0x588621
cmp ecx, edi
jne 0x588608
lea eax, [ebp + 0x34]
push eax
push 0x148f
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x5887bb
cmp ecx, edi
jne 0x588628
lea eax, [ebp + 0x34]
push eax
push 0x13bc
push 0x111
mov ecx, dword [edx]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x5887bb
mov eax, dword [ebx + 0xc8]
cmp dword [eax + 0x3c], edi
je 0x5887bb
cmp dword [eax + 0x34], edi
je 0x58865a
mov eax, dword [eax + 0x34]
jmp 0x58865d
add eax, 0x38
push 0x100
lea edx, [ebp + 0x543c]
push edx
push 0x100
lea ecx, [ebp + 0x583c]
push ecx
push 0x100
lea edx, [ebp + 0x523c]
push edx
push 3
lea ecx, [ebp + 0x5a3c]
push ecx
push eax
call fcn.006231d7
add esp, 0x24
test eax, eax
jne 0x5887bb
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x20], edi
xor edx, edx
mov word [ebp + 0x1c], dx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp + 0x30]
cmp eax, edi
jne 0x5886b5
lea eax, [ebp + 0x34]
push edi
push eax
lea eax, [ebp + 0x523c]
push eax
lea ecx, [ebp + 0x5a3c]
push ecx
push 0x67d030
lea ecx, [ebp + 0x18]
call fcn.00411610
lea edx, [ebp + 0x583c]
push edx
lea ecx, [ebp + 0x24]
call fcn.00402190
mov byte [ebp - 4], 0x17
lea eax, [ebp + 0x583c]
push eax
lea ecx, [ebp]
call fcn.00402190
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 0x543c]
push ecx
lea ecx, [ebp + 0x24]
call fcn.00405330
mov eax, dword [ebp + 0x30]
cmp eax, edi
jne 0x588711
lea eax, [ebp + 0x34]
mov ecx, dword [ebp + 0x24]
cmp ecx, edi
jne 0x58871b
lea ecx, [ebp + 0x28]
push eax
push ecx
call fcn.0062574a
add esp, 8
test eax, eax
je 0x588797
mov eax, dword [ebp + 0x30]
cmp eax, edi
jne 0x588733
lea eax, [ebp + 0x34]
push 0x2b
push eax
call fcn.00621db0
add esp, 8
test eax, eax
je 0x5887e4
mov eax, dword [ebp + 0x30]
cmp eax, edi
jne 0x588750
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp + 0xc]
call fcn.00402190
mov byte [ebp - 4], 0x19
push 0x20
push 0x2b
lea ecx, [ebp + 0xc]
call fcn.0040f8f0
mov eax, dword [ebp + 0xc]
cmp eax, edi
jne 0x588773
lea eax, [ebp + 0x10]
mov ecx, dword [ebp + 0x24]
cmp ecx, edi
jne 0x58877d
lea ecx, [ebp + 0x28]
push eax
push ecx
call fcn.0062574a
add esp, 8
test eax, eax
jne 0x5887d8
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 0xc]
call fcn.00401210
mov byte [ebp - 4], 0x17
lea ecx, [ebp]
call fcn.00401210
mov byte [ebp - 4], 0x16
lea ecx, [ebp + 0x24]
call fcn.00401210
mov byte [ebp - 4], 0x13
lea ecx, [ebp + 0x18]
call fcn.00401210
mov byte [ebp - 4], 9
lea ecx, [ebp + 0x30]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402580
jmp 0x586f3e
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 0xc]
call fcn.00401210
mov eax, dword [ebp + 0x24]
cmp eax, edi
jne 0x5887ee
lea eax, [ebp + 0x28]
push 0x5f
push eax
call fcn.0061fd52
add esp, 8
mov dword [ebp - 0x30], eax
cmp eax, edi
je 0x5888b7
lea edx, [ebp + 0x24]
push edx
lea ecx, [ebp + 0xc]
call fcn.00420df0
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp + 0xc]
cmp eax, edi
jne 0x58881e
lea eax, [ebp + 0x10]
push 0x5f
push eax
call fcn.0061fd52
add esp, 8
mov esi, eax
mov dword [ebp - 0x30], esi
cmp esi, edi
je 0x5888ab
xor eax, eax
mov word [esi], ax
add esi, 2
mov dword [ebp - 0x30], esi
mov edi, 1
mov dword [ebp - 0x58], edi
movzx eax, word [esi]
test ax, ax
je 0x588870
cmp ax, 0x2e
je 0x588870
movzx ecx, ax
push ecx
call fcn.0062221c
add esp, 4
test eax, eax
jne 0x588868
mov dword [ebp - 0x58], eax
jmp 0x5888ab
add esi, 2
mov dword [ebp - 0x30], esi
jmp 0x588845
test edi, edi
je 0x5888ab
cmp word [esi], 0x2e
jne 0x5888ab
push esi
lea ecx, [ebp + 0xc]
call fcn.00405330
mov eax, dword [ebp + 0x30]
test eax, eax
mov ecx, eax
jne 0x58888f
lea ecx, [ebp + 0x34]
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x588899
lea eax, [ebp + 0x10]
push ecx
push eax
call fcn.0062574a
add esp, 8
test eax, eax
je 0x58878b
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 0xc]
call fcn.00401210
mov edx, dword [ebx + 0xc8]
test dword [edx + 0x15c], 0x2000
je 0x58892b
mov eax, dword [ebp + 0x18]
test eax, eax
jne 0x5888d3
lea eax, [ebp + 0x1c]
push 0x100
lea ecx, [ebp + 0x563c]
push ecx
push 0x100
lea edx, [ebp + 0x583c]
push edx
push 0x100
lea ecx, [ebp + 0x523c]
push ecx
push 3
lea edx, [ebp + 0x5a3c]
push edx
push eax
call fcn.006231d7
add esp, 0x24
test eax, eax
jne 0x58892b
lea eax, [ebp + 0x563c]
push eax
lea ecx, [ebp + 0x543c]
push ecx
call fcn.0062574a
add esp, 8
test eax, eax
jne 0x588797
mov edx, dword [ebx + 0x3208]
cmp dword [edx + 0x148], 0
je 0x5889a5
mov eax, dword [ebp + 0x18]
test eax, eax
jne 0x588944
lea eax, [ebp + 0x1c]
push 0x100
lea ecx, [ebp + 0x563c]
push ecx
push 0x100
lea edx, [ebp + 0x583c]
push edx
push 0x100
lea ecx, [ebp + 0x523c]
push ecx
push 3
lea edx, [ebp + 0x5a3c]
push edx
push eax
call fcn.006231d7
add esp, 0x24
test eax, eax
jne 0x588c6b
lea eax, [ebp + 0x563c]
push eax
lea ecx, [ebp + 0x543c]
push ecx
call fcn.0062574a
add esp, 8
test eax, eax
jne 0x588c6b
jmp 0x588797
mov eax, dword [ebp + 0x24]
test eax, eax
jne 0x5889af
lea eax, [ebp + 0x28]
mov ecx, str.manuallogin.html
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x5889da
test dx, dx
je 0x5889d6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x5889da
add eax, 4
add ecx, 4
test dx, dx
jne 0x5889b4
xor eax, eax
jmp 0x5889df
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x588a63
mov eax, dword [ebp + 0x18]
test eax, eax
jne 0x5889f1
lea eax, [ebp + 0x1c]
push 0x100
lea edx, [ebp + 0x563c]
push edx
push 0x100
lea ecx, [ebp + 0x583c]
push ecx
push 0x100
lea edx, [ebp + 0x523c]
push edx
push 3
lea ecx, [ebp + 0x5a3c]
push ecx
push eax
call fcn.006231d7
add esp, 0x24
test eax, eax
jne 0x588a63
push 0x6856f4
lea edx, [ebp + 0x563c]
push edx
call fcn.0062574a
add esp, 8
test eax, eax
je 0x588797
push 0x68b324
lea eax, [ebp + 0x563c]
push eax
call fcn.0062574a
add esp, 8
test eax, eax
je 0x588797
mov eax, dword [ebp + 0x18]
test eax, eax
jne 0x588a6d
lea eax, [ebp + 0x1c]
push 0x100
lea ecx, [ebp + 0x503c]
push ecx
push 0x100
lea edx, [ebp + 0x583c]
push edx
push 0x100
lea ecx, [ebp + 0x523c]
push ecx
push 3
lea edx, [ebp + 0x5a3c]
push edx
push eax
call fcn.006231d7
add esp, 0x24
test eax, eax
jne 0x588b97
lea eax, [ebp + 0x503c]
push eax
lea ecx, [ebp + 0x543c]
push ecx
call fcn.0062574a
add esp, 8
test eax, eax
jne 0x588b97
mov eax, dword [ebx + 0xc8]
cmp byte [eax + 0x192], 0
jne 0x588797
test byte [eax + 0x15c], 0x40
jne 0x588797
lea eax, [ebp + 0x583c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x588af2
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0x24]
test ecx, ecx
jne 0x588b0b
lea ecx, [ebp + 0x28]
push eax
push ecx
lea edx, [ebp + 0x583c]
push edx
call fcn.006225ac
add esp, 0xc
test eax, eax
jne 0x588b97
lea eax, [ebp + 0x583c]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x588b30
sub eax, edx
sar eax, 1
mov edi, dword [ebp + 0x24]
test edi, edi
mov ecx, edi
jne 0x588b4b
lea ecx, [ebp + 0x28]
lea esi, [ecx + 2]
mov edi, edi
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x588b50
sub ecx, esi
sar ecx, 1
cmp eax, ecx
jae 0x588b97
lea eax, [ebp + 0x583c]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x588b70
sub eax, edx
sar eax, 1
test edi, edi
mov ecx, edi
jne 0x588b88
lea ecx, [ebp + 0x28]
mov edx, 0x5f
cmp dx, word [ecx + eax*2]
je 0x588797
mov eax, dword [ebx + 0xc8]
cmp byte [eax + 0x346], 0
jne 0x588c6b
mov esi, 1
cmp dword [ebx + 0x32ac], esi
jg 0x588797
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x54], esi
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x1c]
push edx
xor edi, edi
push edi
push edi
push str.notaskfn2
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x588bf3
cmp dword [ebp - 0x1c], esi
jne 0x588bf3
mov dword [ebp - 0x54], edi
jmp 0x588c6b
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x14], edi
xor ecx, ecx
mov word [ebp + 0x10], cx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp + 0x30]
cmp eax, edi
mov ecx, eax
jne 0x588c0f
lea ecx, [ebp + 0x34]
mov eax, dword [ebp]
cmp eax, edi
jne 0x588c19
lea eax, [ebp + 4]
mov edx, dword [0x75dd28]
push edx
push ecx
lea ecx, [ebp + 0x543c]
push ecx
push eax
mov edx, dword [0x75ec70]
push edx
lea ecx, [ebp + 0xc]
call fcn.00411610
mov eax, dword [ebp + 0xc]
cmp eax, edi
jne 0x588c42
lea eax, [ebp + 0x10]
push 0x50024
push 0x678d88
push eax
push edi
call fcn.00473140
add esp, 0x10
cmp eax, 7
je 0x58878b
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 0xc]
call fcn.00401210
mov eax, dword [ebp + 0x18]
test eax, eax
jne 0x588c75
lea eax, [ebp + 0x1c]
push eax
mov ecx, dword [ebx + 0xc8]
call fcn.005cde10
mov eax, dword [ebx + 0x3208]
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x588c9d
push eax
mov ecx, dword [ebx + 0xc8]
call fcn.005cfb10
mov ebx, dword [ebx + 0x3208]
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x588797
mov ecx, dword [ebx + 0xb8]
push ecx
push 0x13c9
push 0x111
mov edx, dword [eax]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x588797
push 0xd
push str.Content_Type:
mov eax, dword [ebx + 0x3244]
add eax, esi
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x588fcb
cmp byte [ebp + 0x5a50], al
je 0x588fcb
mov eax, dword [ebx + 0x325c]
cmp eax, 0xc8
je 0x588d18
cmp eax, 0xce
je 0x588d18
cmp eax, 0x130
jne 0x586f3e
mov ecx, dword [ebx + 0xc8]
mov eax, dword [ecx + 0xbc]
cmp eax, edi
je 0x588d31
push eax
call fcn.005f4517
add esp, 4
mov edx, dword [ebx + 0x3244]
lea esi, [esi + edx + 0xd]
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
mov dword [ebp - 0x1c], edi
push 0x67b29c
push esi
call fcn.006218e0
mov edi, eax
push 0x3b
push esi
call fcn.00621820
add esp, 0x10
mov dword [ebp + 0x5a3c], eax
cmp eax, edi
jae 0x588d6e
test eax, eax
jne 0x588d72
test edi, edi
jne 0x588d7c
mov edi, eax
test eax, eax
je 0x588e13
sub edi, esi
mov dword [ebp - 0x1c], edi
mov edi, dword [ebp - 0x1c]
lea eax, [edi + 5]
push eax
call fcn.005f4522
mov ecx, dword [ebx + 0xc8]
mov dword [ecx + 0xbc], eax
push edi
push esi
mov edx, dword [ebx + 0xc8]
mov eax, dword [edx + 0xbc]
push eax
call fcn.00621de0
add esp, 0x10
mov ecx, dword [ebx + 0xc8]
mov edx, dword [ecx + 0xbc]
mov byte [edi + edx], 0
mov eax, dword [ebx + 0xc8]
cmp byte [eax + 0x171], 0
je 0x588e32
push 9
push str.text_html
mov eax, dword [eax + 0xbc]
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x588e32
mov ecx, dword [ebx + 0xc8]
mov eax, dword [ecx + 0xbc]
push eax
call fcn.005f4517
add esp, 4
mov edx, dword [ebx + 0xc8]
mov dword [edx + 0xbc], 0
jmp 0x586f3e
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x588d81
sub eax, esi
mov edi, eax
jmp 0x588d84
mov edx, dword [ebx + 0xc8]
mov eax, dword [edx + 0xc4]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x588e41
sub eax, esi
je 0x588e66
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x588de9
push str.application_vnd.lumberjack.manifest
mov eax, dword [ebx + 0xc8]
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.00621d5e
add esp, 8
test eax, eax
jne 0x588ed7
mov eax, dword [ebx + 0xc8]
test dword [eax + 0x15c], 0x100
je 0x588ed7
mov eax, dword [eax + 0xbc]
push eax
call fcn.005f4517
add esp, 4
mov edx, dword [ebx + 0xc8]
mov dword [edx + 0xbc], 0
mov eax, dword [ebx + 0xc8]
mov dword [eax + 0x334], 1
mov ecx, dword [ebx + 0xc8]
mov byte [ecx + 0x338], 1
jmp 0x586f3e
push 0x14
push str.multipart_byteranges
mov edx, dword [ebx + 0xc8]
mov eax, dword [edx + 0xbc]
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x588f1b
push 0x16
push str.multipart_x_byteranges
mov ecx, dword [ebx + 0xc8]
mov edx, dword [ecx + 0xbc]
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x586f3e
mov eax, dword [ebp + 0x5a3c]
test eax, eax
je 0x586f3e
push str.boundary
push eax
call fcn.006218e0
add esp, 8
test eax, eax
je 0x586f3e
push 0x3d
push eax
call fcn.00621820
add esp, 8
mov esi, eax
test esi, esi
je 0x586f3e
inc esi
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
xor edi, edi
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x588f85
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x588f89
sub eax, esi
mov edi, eax
lea ecx, [ebx + 0x3268]
push edi
call fcn.00402860
push edi
push esi
push eax
call fcn.00621de0
add esp, 0xc
mov eax, dword [ebx + 0x3268]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x588fb0
sub eax, edx
je 0x586f3e
mov byte [ebx + 0x326c], 1
jmp 0x586f3e
push 0xb
push str.Set_Cookie:
mov eax, dword [ebx + 0x3244]
add eax, esi
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x589006
cmp byte [ebp + 0x5a50], al
je 0x589006
mov ecx, dword [ebx + 0x3244]
lea edx, [esi + ecx + 0xb]
push edx
mov ecx, ebx
call fcn.00582580
jmp 0x586f3e
push 5
push str.ETag:
mov eax, dword [ebx + 0x3244]
add eax, esi
push eax
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x58907d
mov ecx, dword [ebx + 0x3244]
lea esi, [esi + ecx + 5]
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x58905a
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x58905e
sub eax, esi
mov edi, eax
push edi
mov ecx, dword [ebx + 0xc8]
add ecx, 0xf8
call fcn.00402860
push edi
push esi
push eax
call fcn.00621de0
jmp 0x586f3b
push 4
push str.P3P:
mov edx, dword [ebx + 0x3244]
add edx, esi
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x5890d1
mov eax, dword [ebx + 0x3244]
lea esi, [esi + eax + 4]
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
push 0x23
push str.policyref_http:__p3p.yahoo.com_w3c_
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x586f3e
mov byte [ebx + 0x326e], 1
jmp 0x586f3e
push 5
push str.Date:
mov ecx, dword [ebx + 0x3244]
add ecx, esi
push ecx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x589194
cmp byte [ebp + 0x5a50], al
je 0x589194
mov edx, dword [ebx + 0x3244]
lea esi, [esi + edx + 5]
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
xor edi, edi
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x589137
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x58913b
sub eax, esi
mov edi, eax
lea eax, [edi + 1]
push eax
call fcn.005f4522
mov dword [ebp - 0x1c], eax
push edi
push esi
push eax
call fcn.00621de0
add esp, 0x10
mov esi, dword [ebp - 0x1c]
mov byte [esi + edi], 0
lea ecx, [ebp - 0x18]
call fcn.0058ee40
mov byte [ebp - 4], 0x1c
push esi
lea ecx, [ebp - 0x18]
call fcn.0058fd80
mov ecx, dword [ebx + 0xc8]
mov dword [ecx + 0x3a4], eax
push esi
call fcn.005f4517
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0058ee50
jmp 0x586f3e
push 0xe
push str.Last_Modified:
mov edx, dword [ebx + 0x3244]
add edx, esi
push edx
call fcn.00624cad
add esp, 0xc
test eax, eax
jne 0x5892b3
cmp dword [ebx + 0xc4], edi
jne 0x5892b3
cmp byte [ebp + 0x5a50], al
je 0x5892b3
mov eax, dword [ebx + 0x3244]
lea esi, [esi + eax + 0xe]
push esi
mov ecx, ebx
call fcn.0057b1e0
add esi, eax
xor edi, edi
push 0x67b29c
push esi
call fcn.006218e0
add esp, 8
test eax, eax
jne 0x589206
push 0x67f2c0
push esi
call fcn.006218e0
add esp, 8
test eax, eax
je 0x58920a
sub eax, esi
mov edi, eax
lea ecx, [edi + 1]
push ecx
call fcn.005f4522
mov dword [ebp - 0x1c], eax
push edi
push esi
push eax
call fcn.00621de0
add esp, 0x10
mov esi, dword [ebp - 0x1c]
mov byte [esi + edi], 0
mov ecx, dword [ebx + 0xc8]
mov eax, dword [ecx + 0x20]
test eax, eax
jne 0x58924a
mov edx, dword [ebx + 0x3208]
mov eax, dword [edx + 0xb8]
push eax
push esi
call fcn.005d14f0
jmp 0x58927d
push edi
push eax
push esi
call fcn.00624cad
add esp, 0xc
test eax, eax
je 0x58927d
mov ecx, dword [ebx + 0x3208]
cmp dword [ecx + 0x144], 0
jne 0x58927d
push esi
push 0x678ea8
lea edx, [ebx + 0x322c]
push edx
call fcn.00402f80
add esp, 0xc
lea ecx, [ebp - 0x18]
call fcn.0058ee40
mov byte [ebp - 4], 0x1d
push esi
lea ecx, [ebp - 0x18]
call fcn.0058fd80
mov ecx, dword [ebx + 0xc8]
mov dword [ecx + 0x3a8], eax
push esi
call fcn.005f4517
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0058ee50
mov dword [ebp - 4], 0xffffffff
jmp 0x586f3e