Function at 0x42cf80
Capabilities:
Contain obfuscated stackstrings
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x63a8d6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1b50
call fcn.00609d40
push ebx
push esi
push edi
xor esi, esi
mov dword [ebp - 0x10], esp
push 0x90
mov dword [ebp - 4], esi
call fcn.00622acb
add esp, 4
cmp eax, esi
je 0x42d0bc
mov ecx, dword [0x6f7b78]
mov ebx, eax
mov dword [eax], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 4], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 8], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0xc], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x10], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x14], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], esi
mov dword [eax + 0x20], esi
mov dword [eax + 0x24], esi
mov dword [eax + 0x28], esi
mov edx, dword [0x6f7b78]
mov dword [eax + 0x2c], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x30], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x34], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x38], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x3c], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x40], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x44], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x48], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x4c], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x50], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x54], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x58], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x5c], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x60], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x64], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x68], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x6c], edx
mov ecx, dword [0x6f7b78]
mov dword [eax + 0x70], ecx
mov edx, dword [0x6f7b78]
mov dword [eax + 0x74], edx
jmp 0x42d0be
xor ebx, ebx
cmp ebx, esi
mov dword [ebp - 0x34], ebx
je 0x42d2aa
mov eax, dword [ebp + 0x28]
mov dword [ebx + 0x88], esi
cmp eax, esi
mov dword [ebx + 0x84], eax
jne 0x42d0e6
mov dword [ebx + 0x84], 0x100
mov eax, dword [ebp + 0x7c]
xor esi, esi
xor edi, edi
cmp eax, esi
mov dword [ebp - 0x1c], esi
mov dword [ebx + 0x80], esi
mov byte [ebp + 0x2b], 0
je 0x42d205
mov dword [ebp - 0x14], edi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 1
push eax
push 0x6cc5b0
push 7
push edi
push 0x68deb0
call dword [0x6fc3f8]
test eax, eax
jl 0x42d194
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
push edx
mov edx, dword [ebp + 0x7c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x1c]
test eax, eax
jl 0x42d194
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0xbc]
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
push eax
push edi
push esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
jle 0x42d163
mov byte [ebp + 0x2b], 1
jmp 0x42d194
mov ecx, dword [ebp + 8]
mov esi, dword [ebp - 0xc0]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
push 0
push esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
jle 0x42d18f
mov byte [ebp + 0x2b], 1
jmp 0x42d194
xor esi, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0
test eax, eax
je 0x42d1a5
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov al, byte [ebp + 0x2b]
test al, al
jne 0x42d1ec
mov eax, dword [ebp + 8]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
jne 0x42d216
mov eax, dword [ebp + 0x80]
test eax, eax
je 0x42d1ec
mov ecx, dword [ebp + 8]
xor esi, esi
push esi
push esi
push esi
push esi
push 0xffffffffffffffff
push ecx
push esi
push esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
jne 0x42d216
mov ecx, ebx
call fcn.0042fbe0
push ebx
call fcn.00622af4
add esp, 4
jmp 0x42d2aa
mov eax, dword [ebp + 0x80]
cmp eax, esi
je 0x42d1ac
mov esi, eax
mov dword [ebp - 0x1c], esi
jmp 0x42d1ac
push edi
mov ecx, ebx
call fcn.00623157
mov edx, dword [ebp + 8]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push edx
push 0
push esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x42d2c2
mov eax, dword [0x6f7b78]
mov dword [ebp + 8], eax
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp + 8]
push str.WideCharToMultiByte___has_returned_with_error__ld_in_SendLinkToIDM___r_n
push ecx
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp - 0x2d0]
call fcn.004be6a0
mov edx, dword [ebp + 8]
push 1
push edx
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 3
call fcn.004be7c0
mov ecx, ebx
call fcn.0042fbe0
push ebx
call fcn.00622af4
add esp, 4
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 2
call fcn.004be7b0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0
call fcn.00622d8a
mov eax, 0x80004005
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x84
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
mov word [ebp - 0x24], ax
mov edi, dword [ebx]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
mov dword [ebp + 0x7c], edi
call fcn.00401070
test edi, edi
je 0x42d330
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x42d330
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push eax
mov eax, dword [ebp + 0x7c]
push 0xffffffffffffffff
push eax
push 0
push esi
call edi
test eax, eax
mov dword [ebp - 0x20], eax
je 0x42d330
lea ecx, [eax + eax + 2]
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp - 0x28], eax
test eax, eax
je 0x42d337
mov edx, dword [ebp - 0x20]
push edx
push eax
mov eax, dword [ebp + 0x7c]
push 0xffffffffffffffff
push eax
push 0
push esi
call edi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x42d33a
lea eax, [ebp - 0x24]
mov ecx, dword [ebp + 8]
push eax
push ecx
call fcn.0060a1a4
add esp, 8
test eax, eax
je 0x42d3db
mov edx, dword [ebp + 8]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov esi, 0xfde9
push edx
push 0
push esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
je 0x42d3db
mov eax, dword [0x6f7b78]
mov dword [ebp + 0x7c], eax
push edi
lea ecx, [ebp + 0x7c]
mov byte [ebp - 4], 5
call fcn.00623157
mov ecx, dword [ebp + 8]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push esi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x42d3cf
mov edx, dword [ebp + 0x7c]
push edx
call fcn.004a9380
mov edi, eax
add esp, 4
test edi, edi
je 0x42d3cf
mov eax, dword [ebp + 0x7c]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push edi
call fcn.00622af4
add esp, 4
lea ecx, [ebp + 0x7c]
mov byte [ebp - 4], 4
call fcn.00622d8a
mov edx, dword [ebx + 0x84]
mov eax, dword [ebx]
push 0xb
or edx, 0x80000
push eax
push str.dhstoidm:__
mov dword [ebx + 0x80], esi
mov dword [ebx + 0x84], edx
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d423
mov eax, dword [ebx]
push 0xc
push eax
push str.dhs2toidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d4bc
mov ecx, dword [0x6f7b78]
mov dword [ebp + 0x7c], ecx
mov eax, dword [ebx]
push 0xc
push eax
push str.dhs2toidm:__
mov byte [ebp - 4], 6
call fcn.0060d550
add esp, 0xc
test eax, eax
mov eax, dword [ebx]
jne 0x42d470
add eax, 0xc
lea edx, [ebp + 0x7c]
push eax
push 0x6c910c
push edx
call fcn.0061fae1
mov eax, dword [ebx + 0x84]
add esp, 0xc
or eax, 0x40000
mov dword [ebx + 0x84], eax
jmp 0x42d485
add eax, 0xb
push eax
lea eax, [ebp + 0x7c]
push 0x6c910c
push eax
call fcn.0061fae1
add esp, 0xc
mov ecx, dword [ebp + 0x7c]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
mov eax, dword [ebx + 0x84]
add esp, 0xc
or ah, 0x80
lea ecx, [ebp + 0x7c]
mov dword [ebx + 0x88], 2
mov dword [ebx + 0x84], eax
mov byte [ebp - 4], 4
call fcn.00622d8a
mov eax, dword [ebx]
push 0xb
push eax
push str.ytatoidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d51e
mov edx, dword [0x6f7b78]
mov dword [ebp + 0x7c], edx
mov eax, dword [ebx]
mov byte [ebp - 4], 7
add eax, 0xb
push eax
lea eax, [ebp + 0x7c]
push 0x6c910c
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp + 0x7c]
mov dword [ebx + 0x88], 4
mov byte [ebp - 4], 4
call fcn.00622d8a
mov eax, dword [ebx]
push 0xc
push eax
push str.yta2toidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d54a
mov eax, dword [ebx]
push 0xc
push eax
push str.yta3toidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d5c7
mov eax, dword [ebx]
push 0xc
push eax
push str.yta3toidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d56a
or dword [ebx + 0x84], 0x20000
mov edx, dword [0x6f7b78]
mov dword [ebp + 0x7c], edx
mov eax, dword [ebx]
mov byte [ebp - 4], 8
add eax, 0xc
push eax
lea eax, [ebp + 0x7c]
push 0x6c910c
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
mov eax, dword [ebx + 0x84]
add esp, 0xc
or eax, 0x10000
lea ecx, [ebp + 0x7c]
mov dword [ebx + 0x88], 4
mov dword [ebx + 0x84], eax
mov byte [ebp - 4], 4
call fcn.00622d8a
mov eax, dword [ebx]
push 0xc
push eax
push str.yta5toidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d629
mov edx, dword [0x6f7b78]
mov dword [ebp + 0x7c], edx
mov eax, dword [ebx]
mov byte [ebp - 4], 9
add eax, 0xc
push eax
lea eax, [ebp + 0x7c]
push 0x6c910c
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp + 0x7c]
mov dword [ebx + 0x88], 0x10
mov byte [ebp - 4], 4
call fcn.00622d8a
mov eax, dword [ebx]
push 0xb
push eax
push str.hlstoidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d68b
mov edx, dword [0x6f7b78]
mov dword [ebp + 0x7c], edx
mov eax, dword [ebx]
mov byte [ebp - 4], 0xa
add eax, 0xb
push eax
lea eax, [ebp + 0x7c]
push 0x6c910c
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp + 0x7c]
mov dword [ebx + 0x88], 8
mov byte [ebp - 4], 4
call fcn.00622d8a
mov eax, dword [ebx]
push 0xc
push eax
push str.hls2toidm:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d6ed
mov edx, dword [0x6f7b78]
mov dword [ebp + 0x7c], edx
mov eax, dword [ebx]
mov byte [ebp - 4], 0xb
add eax, 0xc
push eax
lea eax, [ebp + 0x7c]
push 0x6c910c
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp + 0x7c]
mov dword [ebx + 0x88], 0x100
mov byte [ebp - 4], 4
call fcn.00622d8a
mov eax, dword [ebx]
push 0xc
push eax
push str.idmfchttp:__
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d719
mov eax, dword [ebx]
push 0xd
push eax
push str.idmfchttps:__
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d75b
mov edx, dword [0x6f7b78]
mov dword [ebp + 0x7c], edx
mov eax, dword [ebx]
mov byte [ebp - 4], 0xc
add eax, 5
push eax
lea eax, [ebp + 0x7c]
push 0x6c910c
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp + 0x7c]
mov byte [ebp - 4], 4
call fcn.00622d8a
mov esi, dword [ebx]
push 8
push esi
push str.rtmpe:__
mov dword [ebp + 0x80], esi
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42fba6
push 7
push esi
push 0x6c9164
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42d79e
mov eax, dword [ebx + 0x84]
test ah, 4
jne 0x42fba6
push 7
push esi
push 0x6c9178
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d876
push 6
push esi
push 0x6c9154
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d876
push 6
push esi
push 0x6c915c
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d876
push 8
push esi
push 0x6c916c
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d876
push 8
push esi
push str.rtmpt:__
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d876
push 7
push esi
push 0x6c9164
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d876
push 9
push esi
push str.idmreg:__
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42d876
mov ecx, ebx
call fcn.0042fbe0
push ebx
call fcn.00622af4
mov al, byte [ebx + 0x84]
add esp, 4
test al, 0x20
jne 0x42f612
mov edx, dword [ebp + 8]
push edx
call dword [0x6fc1e4]
push 0
push 0
push 0
push 0
push eax
push 0x428940
call fcn.00626cae
jmp 0x42f612
push str..youtube.com
push esi
mov byte [ebp + 0x7f], 0
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42d8a2
push str..googlevideo.com
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42ddf4
push str.videoplayback
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42ddf4
push str.range
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42d8f2
push str.begin
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42d8f2
push str.len
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42ddf4
mov eax, dword [0x6f7b78]
mov dword [ebp + 0x28], eax
mov ecx, dword [ebx]
lea edx, [ebp + 0x28]
push ecx
push 0x6c910c
push edx
mov byte [ebp - 4], 0xd
call fcn.0061fae1
add esp, 0xc
push str.range
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42da97
mov edi, dword [ebp + 0x28]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x7c], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
mov esi, eax
add esp, 4
test esi, esi
mov dword [ebp - 0x18], esi
jne 0x42d966
mov eax, dword [ebp + 0x7c]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
jmp 0x42da7d
mov edx, dword [ebp + 0x7c]
lea ecx, [edi - 1]
push ecx
push edx
push esi
call fcn.00609f00
push 0x6cc4d8
push esi
mov byte [esi + edi - 1], 0
mov byte [ebp + 0xb], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42d9af
push str._range
push esi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42d9ae
mov eax, dword [ebp + 0x7c]
push eax
jmp 0x42da66
inc eax
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp - 0x14], eax
test eax, eax
je 0x42da65
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x42d9ed
mov ecx, dword [ebp + 0x7c]
push ecx
jmp 0x42da66
mov al, byte [ebp + 0xb]
test al, al
je 0x42d9f7
inc dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp - 0x2c]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp - 0x18]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
mov ecx, edx
and ecx, 3
push eax
push 0x6c910c
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0061fae1
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
push ecx
call fcn.00622af4
mov esi, dword [ebp - 0x18]
add esp, 4
jmp 0x42da74
push esi
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
call fcn.00622af4
add esp, 4
mov edx, dword [ebx]
lea eax, [ebp + 0x28]
push edx
push 0x6c910c
push eax
call fcn.0061fae1
mov esi, dword [ebp + 0x80]
add esp, 0xc
push str.begin
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42dc37
mov edi, dword [ebp + 0x28]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x7c], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
mov esi, eax
add esp, 4
test esi, esi
mov dword [ebp - 0x18], esi
jne 0x42daeb
mov ecx, dword [ebp + 0x7c]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
jmp 0x42dc23
mov eax, dword [ebp + 0x7c]
lea edx, [edi - 1]
push edx
push eax
push esi
call fcn.00609f00
push 0x6cc4c8
push esi
mov byte [esi + edi - 1], 0
mov byte [ebp + 0xb], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42db43
push str._begin
push esi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42db42
mov ecx, dword [ebp + 0x7c]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42dc1b
inc eax
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp - 0x14], eax
test eax, eax
je 0x42dc08
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x42db93
mov edx, dword [ebp + 0x7c]
push edx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42dc1b
mov al, byte [ebp + 0xb]
test al, al
je 0x42db9d
inc dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp - 0x2c]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp - 0x18]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
mov ecx, edx
and ecx, 3
push eax
push 0x6c910c
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0061fae1
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42dc17
push esi
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp - 0x18]
push edx
call fcn.00622af4
add esp, 4
mov eax, dword [ebx]
lea ecx, [ebp + 0x28]
push eax
push 0x6c910c
push ecx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x80]
push str.len
push edx
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42ddd2
mov edi, dword [ebp + 0x28]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x7c], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
mov esi, eax
add esp, 4
test esi, esi
mov dword [ebp - 0x18], esi
jne 0x42dc91
mov eax, dword [ebp + 0x7c]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
jmp 0x42ddd2
mov edx, dword [ebp + 0x7c]
lea ecx, [edi - 1]
push ecx
push edx
push esi
call fcn.00609f00
push 0x6cc4b8
push esi
mov byte [esi + edi - 1], 0
mov byte [ebp + 0xb], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42dce9
push str._len
push esi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42dce8
mov eax, dword [ebp + 0x7c]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42ddca
inc eax
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp + 0x80], eax
test eax, eax
je 0x42ddb7
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x42dd3c
mov ecx, dword [ebp + 0x7c]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42ddca
mov al, byte [ebp + 0xb]
test al, al
je 0x42dd49
inc dword [ebp + 0x80]
mov edi, dword [ebp + 0x80]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp - 0x2c]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp - 0x18]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
mov ecx, edx
and ecx, 3
push eax
push 0x6c910c
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0061fae1
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42ddc6
push esi
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp - 0x18]
push edx
call fcn.00622af4
add esp, 4
mov esi, dword [ebx]
xor eax, eax
lea ecx, [ebp + 0x28]
mov dword [ebp + 0x80], esi
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x48], eax
mov byte [ebp + 0x7f], 1
mov byte [ebp - 4], 4
call fcn.00622d8a
jmp 0x42ddfa
mov esi, dword [ebp + 0x80]
push str..youtube.com
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42de22
push str..googlevideo.com
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42e007
push str.videoplayback
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42e007
push str.sig
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42e007
push str.signature
push esi
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42e007
mov eax, dword [0x6f7b78]
mov dword [ebp + 0x28], eax
mov eax, dword [ebx]
lea ecx, [ebp + 0x28]
push ecx
push 0x6cc498
push eax
mov byte [ebp - 4], 0xe
call fcn.00429390
add esp, 0xc
test al, al
je 0x42df36
mov edi, dword [ebp + 0x28]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
xor esi, esi
mov edi, ecx
cmp esi, edi
jge 0x42defd
mov edx, dword [ebp + 0x28]
mov al, byte [esi + edx]
mov byte [ebp + 0xb], al
movsx eax, al
push eax
call fcn.0060a207
add esp, 4
test eax, eax
jne 0x42defa
mov al, byte [ebp + 0xb]
cmp al, 0x41
je 0x42defa
cmp al, 0x42
je 0x42defa
cmp al, 0x43
je 0x42defa
cmp al, 0x44
je 0x42defa
cmp al, 0x45
je 0x42defa
cmp al, 0x46
je 0x42defa
cmp al, 0x61
je 0x42defa
cmp al, 0x62
je 0x42defa
cmp al, 0x63
je 0x42defa
cmp al, 0x64
je 0x42defa
cmp al, 0x65
je 0x42defa
cmp al, 0x66
je 0x42defa
mov ecx, dword [ebp + 0x28]
cmp byte [esi + ecx], 0x2e
jne 0x42dffb
inc esi
jmp 0x42de9d
mov al, 1
test al, al
je 0x42dffb
push str._signature
push str._sig
mov ecx, ebx
call fcn.0061f504
push 0x6cc478
push 0x6cc470
mov ecx, ebx
call fcn.0061f504
mov edx, dword [ebx]
mov dword [ebp + 0x80], edx
jmp 0x42dffb
mov eax, dword [ebx]
lea ecx, [ebp + 0x28]
push ecx
push 0x6cc464
push eax
call fcn.00429390
add esp, 0xc
test al, al
je 0x42dffb
mov edi, dword [ebp + 0x28]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
xor esi, esi
mov edi, ecx
cmp esi, edi
jge 0x42dfc5
mov edx, dword [ebp + 0x28]
mov bl, byte [esi + edx]
movsx eax, bl
push eax
call fcn.0060a207
add esp, 4
test eax, eax
jne 0x42dfc2
cmp bl, 0x41
je 0x42dfc2
cmp bl, 0x42
je 0x42dfc2
cmp bl, 0x43
je 0x42dfc2
cmp bl, 0x44
je 0x42dfc2
cmp bl, 0x45
je 0x42dfc2
cmp bl, 0x46
je 0x42dfc2
cmp bl, 0x61
je 0x42dfc2
cmp bl, 0x62
je 0x42dfc2
cmp bl, 0x63
je 0x42dfc2
cmp bl, 0x64
je 0x42dfc2
cmp bl, 0x65
je 0x42dfc2
cmp bl, 0x66
je 0x42dfc2
mov ecx, dword [ebp + 0x28]
cmp byte [esi + ecx], 0x2e
jne 0x42dfcb
inc esi
jmp 0x42df63
mov al, 1
test al, al
jne 0x42dff8
mov esi, dword [ebp - 0x34]
push str._sig
push str._signature
mov ecx, esi
call fcn.0061f504
push 0x6cc470
push 0x6cc478
mov ecx, esi
call fcn.0061f504
mov edx, dword [esi]
mov dword [ebp + 0x80], edx
mov ebx, dword [ebp - 0x34]
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 4
call fcn.00622d8a
mov ecx, dword [0x6fcbc4]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test ecx, ecx
je 0x42e03f
mov eax, dword [ebx + 0x84]
test al, 4
je 0x42e026
test ah, 8
je 0x42e03f
mov eax, dword [ebx]
push eax
call fcn.00425ab0
test eax, eax
je 0x42e03f
test ebx, ebx
je 0x42f612
jmp 0x42f602
mov eax, dword [0x6fc6d4]
test eax, eax
je 0x42e089
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x42e089
mov ecx, dword [eax + 0x2ec]
test ecx, ecx
jle 0x42e089
test byte [ebx + 0x84], 8
je 0x42e089
mov ecx, dword [ebp + 0x80]
mov eax, dword [eax + 0x2f0]
push ecx
push eax
call fcn.0060a000
add esp, 8
test eax, eax
jne 0x42e089
test ebx, ebx
je 0x42f612
jmp 0x42f602
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x42e0dc
mov edx, eax
push edx
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e0dc
mov eax, dword [ebp + 0xc]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e0dc
cmp edi, 0x1388
jge 0x42e0dc
push edi
lea ecx, [ebx + 4]
call fcn.00623157
mov ecx, dword [ebp + 0xc]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x42e12f
mov edx, eax
push edx
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e12f
mov eax, dword [ebp + 0x10]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e12f
cmp edi, 0x2710
jge 0x42e12f
push edi
lea ecx, [ebx + 8]
call fcn.00623157
mov ecx, dword [ebp + 0x10]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x42e182
mov edx, eax
push edx
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e182
mov eax, dword [ebp + 0x2c]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e182
cmp edi, 0x7d0
jge 0x42e182
push edi
lea ecx, [ebx + 0x10]
call fcn.00623157
mov ecx, dword [ebp + 0x2c]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x42e1d5
mov edx, eax
push edx
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e1d5
mov eax, dword [ebp + 0x14]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e1d5
cmp edi, 0x7a120
jge 0x42e1d5
push edi
lea ecx, [ebx + 0xc]
call fcn.00623157
mov ecx, dword [ebp + 0x14]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x42e225
mov edx, eax
push edx
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e225
mov eax, dword [ebp + 0x18]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e225
cmp edi, 0x63
jge 0x42e225
push edi
lea ecx, [ebx + 0x14]
call fcn.00623157
mov ecx, dword [ebp + 0x18]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x42e275
mov edx, eax
push edx
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e275
mov eax, dword [ebp + 0x1c]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e275
cmp edi, 0x63
jge 0x42e275
push edi
lea ecx, [ebx + 0x18]
call fcn.00623157
mov ecx, dword [ebp + 0x1c]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov edi, dword [ebp + 0x20]
test edi, edi
je 0x42e2a1
push edi
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e2a1
mov edx, dword [ebx + 0x1c]
push edx
call dword [0x6fc1e0]
push edi
mov edi, dword [0x6fc1e4]
call edi
mov dword [ebx + 0x1c], eax
jmp 0x42e2a7
mov edi, dword [0x6fc1e4]
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x42e2dd
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e2dd
mov eax, dword [ebx + 0x84]
test ah, 8
je 0x42e2ca
test al, 0x40
je 0x42e2dd
mov ecx, dword [ebx + 0x20]
push ecx
call dword [0x6fc1e0]
mov edx, dword [ebp + 0x24]
push edx
call edi
mov dword [ebx + 0x20], eax
mov eax, dword [ebp + 0x30]
test eax, eax
je 0x42e304
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e304
mov ecx, dword [ebx + 0x28]
push ecx
call dword [0x6fc1e0]
mov edx, dword [ebp + 0x30]
push edx
call edi
mov dword [ebx + 0x28], eax
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x42e32b
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e32b
mov ecx, dword [ebx + 0x24]
push ecx
call dword [0x6fc1e0]
mov edx, dword [ebp + 0x34]
push edx
call edi
mov dword [ebx + 0x24], eax
mov eax, dword [ebp + 0x38]
test eax, eax
je 0x42e374
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e374
mov eax, dword [ebp + 0x38]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e374
push edi
lea ecx, [ebx + 0x2c]
call fcn.00623157
mov ecx, dword [ebp + 0x38]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x3c]
test eax, eax
je 0x42e4c0
mov edx, eax
push edx
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e4c0
mov eax, dword [ebp + 0x3c]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
test eax, eax
mov dword [ebp + 8], eax
je 0x42e4c0
mov eax, dword [ebx + 0x88]
cmp eax, 4
jne 0x42e48c
mov ecx, dword [0x6f7b78]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp + 8]
lea ecx, [ebp + 0xc]
push edx
mov byte [ebp - 4], 0xf
call fcn.00623157
mov ecx, dword [ebp + 0x3c]
mov edi, eax
mov eax, dword [ebp + 8]
push 0
push 0
push eax
push edi
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
push 5
push edi
push str.pdmt
mov dword [ebp + 8], edi
call fcn.00609d70
add esp, 0xc
test eax, eax
jne 0x42e469
push 0x2c
push edi
call fcn.00609c00
add esp, 8
test eax, eax
je 0x42e469
mov byte [eax], 0
lea edx, [ebp - 0x30]
inc eax
push edx
mov dword [ebp + 8], eax
call fcn.0057ff00
add esp, 4
lea eax, [ebp + 0x3c]
lea ecx, [ebp - 0x30]
add edi, 5
push eax
push ecx
push edi
mov dword [ebp + 0x3c], 0
call fcn.00592e50
add esp, 0xc
test eax, eax
je 0x42e45d
mov edx, dword [ebp - 0x30]
lea eax, [ebx + 0x30]
push edx
push 0x6c910c
push eax
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp - 0x30]
push ecx
call fcn.0057ff20
add esp, 4
mov edx, dword [ebp + 8]
lea eax, [ebx + 0x64]
push edx
push 0x6c910c
push eax
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call fcn.00622d8a
jmp 0x42e4c0
cmp eax, 2
jne 0x42e49a
mov edi, dword [ebp + 8]
lea ecx, [ebx + 0x60]
push edi
jmp 0x42e4a9
mov edi, dword [ebp + 8]
cmp eax, 0x10
push edi
lea ecx, [ebx + 0x64]
je 0x42e4a9
lea ecx, [ebx + 0x30]
call fcn.00623157
mov ecx, dword [ebp + 0x3c]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x40]
test eax, eax
je 0x42e56f
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e56f
cmp dword [ebx + 0x88], 0x10
je 0x42e56f
mov edi, dword [ebp + 0x80]
push str..youtube.com
push edi
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42e513
push str..googlevideo.com
push edi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42e53a
push str.videoplayback
push edi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42e53a
mov edx, dword [ebp + 0x40]
push str.text_plain
push edx
call fcn.0060c3d3
add esp, 8
test eax, eax
je 0x42e56f
mov eax, dword [ebp + 0x40]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e56f
push edi
lea ecx, [ebx + 0x34]
call fcn.00623157
mov ecx, dword [ebp + 0x40]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov edx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x48]
mov dword [ebx + 0x78], edx
mov dword [ebx + 0x7c], eax
mov eax, dword [ebp + 0x4c]
test eax, eax
je 0x42e5c4
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e5c4
mov ecx, dword [ebp + 0x4c]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e5c4
push edi
lea ecx, [ebx + 0x38]
call fcn.00623157
mov edx, dword [ebp + 0x4c]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov eax, dword [ebp + 0x50]
test eax, eax
je 0x42e60d
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e60d
mov eax, dword [ebp + 0x50]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e60d
push edi
lea ecx, [ebx + 0x3c]
call fcn.00623157
mov ecx, dword [ebp + 0x50]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x54]
test eax, eax
je 0x42e656
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e656
mov edx, dword [ebp + 0x54]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e656
push edi
lea ecx, [ebx + 0x40]
call fcn.00623157
push 0
push 0
push edi
push eax
mov eax, dword [ebp + 0x54]
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov eax, dword [ebp + 0x58]
test eax, eax
je 0x42e69f
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42e69f
mov ecx, dword [ebp + 0x58]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42e69f
push edi
lea ecx, [ebx + 0x44]
call fcn.00623157
mov edx, dword [ebp + 0x58]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov esi, dword [ebp + 0x5c]
test esi, esi
je 0x42f349
push esi
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f1ce
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
je 0x42f1ce
lea esi, [ebx + 0x48]
push edi
mov ecx, esi
call fcn.00623157
push 0
push 0
push edi
push eax
mov eax, dword [ebp + 0x5c]
push 0xffffffffffffffff
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [esi]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x42f1ce
push str..youtube.com
push edx
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42e739
mov eax, dword [esi]
push str..googlevideo.com
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42f1ce
mov eax, dword [esi]
push str.videoplayback
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42f1ce
mov eax, dword [esi]
push str.range
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42e791
mov eax, dword [esi]
push str.begin
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42e791
mov eax, dword [esi]
push str.len
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42f1ce
mov ecx, dword [0x6f7b78]
mov dword [ebp + 0xc], ecx
mov edx, dword [esi]
lea eax, [ebp + 0xc]
push edx
push 0x6c910c
push eax
mov byte [ebp - 4], 0x10
call fcn.0061fae1
mov eax, dword [esi]
add esp, 0xc
push str.range
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42e969
mov edi, dword [esi]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x10], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x3c], eax
test eax, eax
jne 0x42e805
mov ecx, dword [ebp + 0x10]
push ecx
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
jmp 0x42e951
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x3c]
lea edx, [edi - 1]
push edx
push eax
push ecx
call fcn.00609f00
mov eax, dword [ebp + 0x3c]
push 0x6cc4d8
push eax
mov byte [ebp + 0xb], 0
mov byte [eax + edi - 1], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42e868
mov edi, dword [ebp + 0x3c]
push str._range
push edi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42e865
mov edx, dword [ebp + 0x10]
push edx
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
push edi
jmp 0x42e949
inc eax
jmp 0x42e86b
mov edi, dword [ebp + 0x3c]
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x42e936
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x14], eax
test eax, eax
jne 0x42e8be
mov eax, dword [ebp + 0x10]
push eax
push 0x6c910c
push esi
call fcn.0061fae1
mov ecx, dword [ebp + 0x3c]
add esp, 0xc
push ecx
jmp 0x42e949
mov al, byte [ebp + 0xb]
test al, al
je 0x42e8c8
inc dword [ebp + 0x2c]
mov edi, dword [ebp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp + 0x14]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp + 0x3c]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x3c]
mov ecx, edx
push eax
and ecx, 3
lea eax, [ebx + 0x48]
push 0x6c910c
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x14]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42e945
push edi
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x3c]
push edx
call fcn.00622af4
add esp, 4
mov eax, dword [ebx + 0x48]
lea esi, [ebx + 0x48]
push eax
lea ecx, [ebp + 0xc]
push 0x6c910c
push ecx
call fcn.0061fae1
add esp, 0xc
mov eax, dword [esi]
push str.begin
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42eb0c
mov edi, dword [ebp + 0xc]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x10], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x3c], eax
test eax, eax
jne 0x42e9bd
mov edx, dword [ebp + 0x10]
push edx
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
jmp 0x42eaf4
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x3c]
lea eax, [edi - 1]
push eax
push ecx
push edx
call fcn.00609f00
mov eax, dword [ebp + 0x3c]
push 0x6cc4c8
push eax
mov byte [ebp + 0xb], 0
mov byte [eax + edi - 1], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42ea20
mov edi, dword [ebp + 0x3c]
push str._begin
push edi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42ea1d
mov eax, dword [ebp + 0x10]
push eax
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
push edi
jmp 0x42eaec
inc eax
jmp 0x42ea23
mov edi, dword [ebp + 0x3c]
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x42ead9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x14], eax
test eax, eax
jne 0x42ea61
mov ecx, dword [ebp + 0x10]
push ecx
jmp 0x42eada
mov al, byte [ebp + 0xb]
test al, al
je 0x42ea6b
inc dword [ebp + 0x2c]
mov edi, dword [ebp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp + 0x14]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp + 0x3c]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x3c]
mov ecx, edx
push eax
and ecx, 3
lea eax, [ebx + 0x48]
push 0x6c910c
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x14]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42eae8
push edi
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x3c]
push edx
call fcn.00622af4
add esp, 4
mov eax, dword [ebx + 0x48]
lea esi, [ebx + 0x48]
push eax
lea ecx, [ebp + 0xc]
push 0x6c910c
push ecx
call fcn.0061fae1
add esp, 0xc
mov eax, dword [esi]
push str.len
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42ec97
mov edi, dword [ebp + 0xc]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x10], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x3c], eax
test eax, eax
jne 0x42eb60
mov edx, dword [ebp + 0x10]
push edx
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
jmp 0x42ec97
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x3c]
lea eax, [edi - 1]
push eax
push ecx
push edx
call fcn.00609f00
mov eax, dword [ebp + 0x3c]
push 0x6cc4b8
push eax
mov byte [ebp + 0xb], 0
mov byte [eax + edi - 1], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42ebc3
mov edi, dword [ebp + 0x3c]
push str._len
push edi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42ebc0
mov eax, dword [ebp + 0x10]
push eax
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
push edi
jmp 0x42ec8f
inc eax
jmp 0x42ebc6
mov edi, dword [ebp + 0x3c]
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x42ec7c
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x14], eax
test eax, eax
jne 0x42ec04
mov ecx, dword [ebp + 0x10]
push ecx
jmp 0x42ec7d
mov al, byte [ebp + 0xb]
test al, al
je 0x42ec0e
inc dword [ebp + 0x2c]
mov edi, dword [ebp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp + 0x14]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp + 0x3c]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x3c]
mov ecx, edx
push eax
and ecx, 3
lea eax, [ebx + 0x48]
push 0x6c910c
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.0061fae1
mov ecx, dword [ebp + 0x14]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42ec8b
push edi
push 0x6c910c
push esi
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x3c]
push edx
call fcn.00622af4
add esp, 4
mov al, byte [ebp + 0x7f]
test al, al
jne 0x42f1c2
mov eax, dword [0x6f7b78]
mov dword [ebp + 0x3c], eax
mov ecx, dword [ebx]
lea edx, [ebp + 0x3c]
push ecx
push 0x6c910c
push edx
mov byte [ebp - 4], 0x11
call fcn.0061fae1
mov eax, dword [ebp + 0x80]
add esp, 0xc
push str.range
push eax
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42ee68
mov edi, dword [ebp + 0x3c]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x10], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
mov esi, eax
add esp, 4
test esi, esi
mov dword [ebp + 0x14], esi
jne 0x42ed1c
mov ecx, dword [ebp + 0x10]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
jmp 0x42ee54
mov eax, dword [ebp + 0x10]
lea edx, [edi - 1]
push edx
push eax
push esi
call fcn.00609f00
push 0x6cc4d8
push esi
mov byte [esi + edi - 1], 0
mov byte [ebp + 0xb], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42ed74
push str._range
push esi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42ed73
mov ecx, dword [ebp + 0x10]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42ee4c
inc eax
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x42ee39
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x18], eax
test eax, eax
jne 0x42edc4
mov edx, dword [ebp + 0x10]
push edx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42ee4c
mov al, byte [ebp + 0xb]
test al, al
je 0x42edce
inc dword [ebp + 0x2c]
mov edi, dword [ebp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp + 0x18]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp + 0x14]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x14]
mov ecx, edx
and ecx, 3
push eax
push 0x6c910c
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0061fae1
mov ecx, dword [ebp + 0x18]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42ee48
push esi
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x14]
push edx
call fcn.00622af4
add esp, 4
mov eax, dword [ebx]
lea ecx, [ebp + 0x3c]
push eax
push 0x6c910c
push ecx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x80]
push str.begin
push edx
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42f00e
mov edi, dword [ebp + 0x3c]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x10], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
mov esi, eax
add esp, 4
test esi, esi
mov dword [ebp + 0x14], esi
jne 0x42eec2
mov eax, dword [ebp + 0x10]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
jmp 0x42effa
mov edx, dword [ebp + 0x10]
lea ecx, [edi - 1]
push ecx
push edx
push esi
call fcn.00609f00
push 0x6cc4c8
push esi
mov byte [esi + edi - 1], 0
mov byte [ebp + 0xb], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42ef1a
push str._begin
push esi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42ef19
mov eax, dword [ebp + 0x10]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42eff2
inc eax
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x42efdf
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x18], eax
test eax, eax
jne 0x42ef6a
mov ecx, dword [ebp + 0x10]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42eff2
mov al, byte [ebp + 0xb]
test al, al
je 0x42ef74
inc dword [ebp + 0x2c]
mov edi, dword [ebp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp + 0x18]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp + 0x14]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x14]
mov ecx, edx
and ecx, 3
push eax
push 0x6c910c
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0061fae1
mov ecx, dword [ebp + 0x18]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42efee
push esi
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x14]
push edx
call fcn.00622af4
add esp, 4
mov eax, dword [ebx]
lea ecx, [ebp + 0x3c]
push eax
push 0x6c910c
push ecx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x80]
push str.len
push edx
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42f1a0
mov edi, dword [ebp + 0x3c]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x10], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 2
push edi
call fcn.00622acb
mov esi, eax
add esp, 4
test esi, esi
mov dword [ebp + 0x14], esi
jne 0x42f068
mov eax, dword [ebp + 0x10]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
jmp 0x42f1a0
mov edx, dword [ebp + 0x10]
lea ecx, [edi - 1]
push ecx
push edx
push esi
call fcn.00609f00
push 0x6cc4b8
push esi
mov byte [esi + edi - 1], 0
mov byte [ebp + 0xb], 0
call fcn.00609cc0
add esp, 0x14
test eax, eax
jne 0x42f0c0
push str._len
push esi
call fcn.00609cc0
add esp, 8
mov byte [ebp + 0xb], 1
test eax, eax
jne 0x42f0bf
mov eax, dword [ebp + 0x10]
push eax
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42f198
inc eax
mov byte [eax], 0
add eax, 7
push 0x26
push eax
call fcn.00609c00
add esp, 8
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x42f185
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00622acb
add esp, 4
mov dword [ebp + 0x18], eax
test eax, eax
jne 0x42f110
mov ecx, dword [ebp + 0x10]
push ecx
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
push esi
jmp 0x42f198
mov al, byte [ebp + 0xb]
test al, al
je 0x42f11a
inc dword [ebp + 0x2c]
mov edi, dword [ebp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [ebp + 0x18]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [ebp + 0x14]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x14]
mov ecx, edx
and ecx, 3
push eax
push 0x6c910c
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0061fae1
mov ecx, dword [ebp + 0x18]
add esp, 0xc
push ecx
call fcn.00622af4
add esp, 4
jmp 0x42f194
push esi
push 0x6c910c
push ebx
call fcn.0061fae1
add esp, 0xc
mov edx, dword [ebp + 0x14]
push edx
call fcn.00622af4
add esp, 4
mov eax, dword [ebx]
lea ecx, [ebp + 0x3c]
mov dword [ebp + 0x80], eax
xor eax, eax
mov dword [ebx + 0x78], eax
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x48], eax
mov dword [ebx + 0x7c], eax
mov byte [ebp - 4], 0x10
call fcn.00622d8a
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call fcn.00622d8a
mov eax, dword [ebp + 0x60]
test eax, eax
je 0x42f21f
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f21f
mov ecx, dword [ebp + 0x60]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f225
push edi
lea ecx, [ebx + 0x4c]
call fcn.00623157
mov edx, dword [ebp + 0x60]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
jmp 0x42f225
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x42f26e
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f26e
mov eax, dword [ebp + 0x64]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f26e
push edi
lea ecx, [ebx + 0x50]
call fcn.00623157
mov ecx, dword [ebp + 0x64]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x68]
test eax, eax
je 0x42f2b7
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f2b7
mov edx, dword [ebp + 0x68]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f2b7
push edi
lea ecx, [ebx + 0x54]
call fcn.00623157
push 0
push 0
push edi
push eax
mov eax, dword [ebp + 0x68]
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov eax, dword [ebp + 0x6c]
test eax, eax
je 0x42f300
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f300
mov ecx, dword [ebp + 0x6c]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f300
push edi
lea ecx, [ebx + 0x58]
call fcn.00623157
mov edx, dword [ebp + 0x6c]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov eax, dword [ebp + 0x70]
test eax, eax
je 0x42f349
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f349
mov eax, dword [ebp + 0x70]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f349
push edi
lea ecx, [ebx + 0x5c]
call fcn.00623157
mov ecx, dword [ebp + 0x70]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x74]
test eax, eax
je 0x42f39a
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f39a
mov edx, dword [ebp + 0x74]
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f3a0
push edi
lea ecx, [ebx + 0x68]
call fcn.00623157
push 0
push 0
push edi
push eax
mov eax, dword [ebp + 0x74]
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
jmp 0x42f3a0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp + 0x84]
test eax, eax
je 0x42f3f2
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f3f2
mov ecx, dword [ebp + 0x84]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f3f2
push edi
lea ecx, [ebx + 0x6c]
call fcn.00623157
mov edx, dword [ebp + 0x84]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov eax, dword [ebp + 0x88]
test eax, eax
je 0x42f444
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f444
mov eax, dword [ebp + 0x88]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f444
push edi
lea ecx, [ebx + 0x70]
call fcn.00623157
mov ecx, dword [ebp + 0x88]
push 0
push 0
push edi
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call esi
mov eax, dword [ebp + 0x78]
test eax, eax
je 0x42f4a3
push eax
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x42f48f
mov edx, dword [ebp + 0x78]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edx
push 0
push 0
call esi
mov edi, eax
test edi, edi
je 0x42f4bd
push edi
lea ecx, [ebx + 0x74]
call fcn.00623157
push 0
push 0
push edi
push eax
mov eax, dword [ebp + 0x78]
push 0xffffffffffffffff
push eax
push 0
push 0
call esi
jmp 0x42f4bd
test byte [ebx + 0x84], 0x20
je 0x42f4bd
lea ecx, [ebx + 0x74]
push str.IDwnlMgr
push ecx
jmp 0x42f4b5
test byte [ebx + 0x84], 0x20
je 0x42f4bd
lea edx, [ebx + 0x74]
push str.IDwnlMgr
push edx
call fcn.0061fae1
add esp, 8
test byte [ebx + 0x84], 4
je 0x42f4fb
push 0
push 0
push 0
push 1
push 0x6fc418
push 0x6fc418
push 0x6fc418
push 0x6fc418
push 0x6fc418
push 0x6fc418
mov ecx, 0x6fcb70
call fcn.004fc1e0
jmp 0x42f650
mov edi, dword [ebx + 0xc]
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [ebx + 8]
repne scasb al, byte es:[edi]
mov esi, dword [ebx + 4]
mov eax, dword [ebx + 0x18]
not ecx
push 0
push 0
dec ecx
push 0
push ecx
push edx
push esi
push eax
mov eax, dword [ebx + 0x14]
mov ecx, 0x6fc460
push eax
mov eax, dword [ebx]
push 0
push eax
call fcn.004fcb70
test eax, eax
je 0x42f53f
test ebx, ebx
je 0x42f612
jmp 0x42f602
mov edi, dword [ebx + 0x48]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x42f58b
mov edi, dword [ebx + 0x4c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov edx, dword [ebx + 0x50]
mov esi, dword [ebx + 4]
not ecx
push eax
push eax
dec ecx
push eax
mov eax, dword [ebx + 0x58]
push ecx
push edx
push esi
push eax
mov eax, dword [ebx + 0x54]
push eax
mov eax, dword [ebx + 0x48]
push 0
push eax
mov ecx, 0x6fc460
call fcn.004fcb70
test eax, eax
je 0x42f58b
test ebx, ebx
je 0x42f612
jmp 0x42f602
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x44]
mov edi, dword [ebx + 0xc]
push 1
push eax
push ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edx, dword [ebx + 8]
mov esi, dword [ebx + 4]
mov eax, dword [ebx + 0x18]
not ecx
dec ecx
push ecx
push edx
push esi
push eax
mov eax, dword [ebx + 0x14]
mov ecx, 0x6fcb70
push eax
mov eax, dword [ebx + 0x48]
push eax
mov eax, dword [ebx]
push eax
call fcn.004fcb70
test eax, eax
je 0x42f5d5
test ebx, ebx
je 0x42f8ca
jmp 0x42f8ba
test byte [ebx + 0x84], 0x20
jne 0x42f650
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
lea edx, [ebp + 8]
mov dword [ebp + 8], 0
push edx
push eax
push ecx
mov ecx, 0x6fcb70
call fcn.004fc850
test eax, eax
je 0x42f636
test ebx, ebx
je 0x42f612
mov ecx, ebx
call fcn.0042fbe0
push ebx
call fcn.00622af4
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00401070
mov eax, 0x80004001
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x84
mov eax, dword [ebp + 8]
test eax, eax
je 0x42f650
test byte [ebx + 0x84], 0x10
je 0x42f650
mov dword [ebx + 0x84], 8
mov edi, dword [ebp + 0x80]
push 9
xor esi, esi
push edi
push str.idmreg:__
mov dword [ebp + 0xc], 1
mov dword [ebp + 0x10], esi
call fcn.0060d550
add esp, 0xc
test eax, eax
jne 0x42f680
mov esi, 1
jmp 0x42f830
push str..com_autoreg.html_d
push edi
call fcn.00609cc0
add esp, 8
test eax, eax
jne 0x42f6a8
push str..com_fillregform.html_d
push edi
call fcn.00609cc0
add esp, 8
test eax, eax
je 0x42f830
lea ecx, [ebp - 0x1b60]
call fcn.00554000
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1b60]
push eax
push edi
mov byte [ebp - 4], 0x12
call fcn.005547b0
test eax, eax
je 0x42f821
mov cl, 0x60
mov al, 0x7b
mov byte [ebp - 0x4a], cl
mov byte [ebp - 0x46], cl
mov byte [ebp - 0x3a], cl
mov byte [ebp - 0x51], al
mov byte [ebp - 0x4c], al
lea ecx, [ebp - 0x54]
mov dl, 0x6a
mov al, 0x6e
push ecx
mov byte [ebp - 0x54], 0x21
mov byte [ebp - 0x53], 0x66
mov byte [ebp - 0x52], 0x61
mov byte [ebp - 0x50], dl
mov byte [ebp - 0x4f], 0x7d
mov byte [ebp - 0x4e], 0x61
mov byte [ebp - 0x4d], dl
mov byte [ebp - 0x4b], 0x6b
mov byte [ebp - 0x49], 0x78
mov byte [ebp - 0x48], 0x61
mov byte [ebp - 0x47], 0x63
mov byte [ebp - 0x45], al
mov byte [ebp - 0x44], 0x6b
mov byte [ebp - 0x43], 0x62
mov byte [ebp - 0x42], al
mov byte [ebp - 0x41], 0x61
mov byte [ebp - 0x40], al
mov byte [ebp - 0x3f], 0x68
mov byte [ebp - 0x3e], dl
mov byte [ebp - 0x3d], 0x7d
mov byte [ebp - 0x3c], 0x21
mov byte [ebp - 0x3b], 0x6c
mov byte [ebp - 0x39], 0x62
mov byte [ebp - 0x38], 0
call fcn.005de2e0
mov eax, dword [0x6f7b78]
add esp, 4
mov dword [ebp + 0x3c], eax
mov dword [ebp + 8], eax
lea edx, [ebp - 0x54]
lea eax, [ebp + 0x3c]
push edx
push str.www_s
push eax
mov byte [ebp - 4], 0x14
call fcn.0061fae1
add esp, 0xc
lea ecx, [ebp - 0x54]
lea edx, [ebp + 8]
push ecx
push str.secure_s
push edx
call fcn.0061fae1
mov edi, dword [ebp + 0x3c]
add esp, 0xc
lea esi, [ebp - 0x1350]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x42f7b6
test al, al
je 0x42f7b2
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x42f7b6
add esi, 2
add edi, 2
test al, al
jne 0x42f78e
xor eax, eax
jmp 0x42f7bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x42f7f9
mov edi, dword [ebp + 8]
lea esi, [ebp - 0x1350]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x42f7f0
test al, al
je 0x42f7ec
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x42f7f0
add esi, 2
add edi, 2
test al, al
jne 0x42f7c8
xor eax, eax
jmp 0x42f7f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x42f800
mov esi, 1
jmp 0x42f803
mov esi, dword [ebp + 0x10]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x13
call fcn.00622d8a
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 0x12
call fcn.00622d8a
mov edi, dword [ebp + 0x80]
lea ecx, [ebp - 0x1b60]
mov byte [ebp - 4], 4
call fcn.00554050
mov ecx, dword [0x6fc6d4]
mov eax, dword [ecx + 0x1c]
test eax, eax
jne 0x42f904
mov eax, dword [0x6fcaf4]
test eax, eax
je 0x42f8eb
test esi, esi
je 0x42f8b6
push edi
push 0x6c910c
push 0x6fca54
call fcn.0061fae1
mov eax, dword [0x6fcfd8]
add esp, 0xc
test eax, eax
je 0x42f880
push 0
push 0
push 0x2b45
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x42f8b6
push 0x6c9094
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov esi, eax
test esi, esi
je 0x42f8b6
lea eax, [ebp + 8]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [ebp + 8], eax
jne 0x42f8b6
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
test ebx, ebx
je 0x42f8ca
mov ecx, ebx
call fcn.0042fbe0
push ebx
call fcn.00622af4
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00401070
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x84
mov eax, dword [ecx + 0x1c]
test eax, eax
jne 0x42f904
push 0x32
call fcn.00428ca0
mov ecx, dword [0x6fc6d4]
add esp, 4
jmp 0x42f8eb
test esi, esi
je 0x42f93b
mov ecx, dword [ecx + 0x1c]
push ebx
push 0
push 0x2b44
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00401070
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x84
mov eax, dword [ebx + 0x84]
test al, 8
je 0x42f94c
test eax, 0x1000000
je 0x42f978
test al, 0x20
jne 0x42f978
test ah, 8
je 0x42f95e
mov eax, dword [0x6fcc00]
test eax, eax
jne 0x42f978
mov edx, dword [ecx + 0x1c]
push ebx
push 0
push 0x2b3e
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov edi, dword [ebp + 0xc]
jmp 0x42fb7d
mov eax, dword [ecx + 0x1c]
test eax, eax
je 0x42fa59
mov eax, dword [ecx + 0x1cc]
test eax, eax
je 0x42fa59
push 7
push edi
push 0x6c9164
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42fa59
push 8
push edi
push str.rtmpt:__
call fcn.0060d550
add esp, 0xc
test eax, eax
je 0x42fa59
mov edx, dword [0x6fcafc]
lea eax, [ebp + 8]
lea ecx, [ebp + 0x1c]
push eax
push ecx
push 0
push 0
push 0x6cc5c0
push edx
mov dword [ebp + 8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x42f9f0
cmp dword [ebp + 0x1c], 1
je 0x42fa59
mov ecx, dword [ebx + 0x80]
mov eax, dword [ebx + 4]
mov edx, dword [0x6fc6d4]
push ecx
push eax
push edi
mov ecx, dword [edx + 0x1cc]
call fcn.00497350
test eax, eax
jl 0x42fa30
mov eax, dword [0x6fc6d4]
push ebx
push 0
push 0x2b3e
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov edi, dword [ebp + 0xc]
jmp 0x42fb7d
cmp eax, 0xffffffe7
jne 0x42fa59
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00401070
mov eax, 0x80004001
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x84
push ebx
lea ecx, [ebp + 0x18]
call fcn.00622aff
lea edx, [ebx + 0x14]
lea ecx, [ebp + 0x14]
push edx
mov byte [ebp - 4], 0x15
call fcn.00622aff
lea eax, [ebx + 0x18]
lea ecx, [ebp + 0x2c]
push eax
mov byte [ebp - 4], 0x16
call fcn.00622aff
lea ecx, [ebx + 4]
mov byte [ebp - 4], 0x17
push ecx
lea ecx, [ebp + 0x10]
call fcn.00622aff
lea edx, [ebx + 8]
lea ecx, [ebp + 0xc]
push edx
mov byte [ebp - 4], 0x18
call fcn.00622aff
lea eax, [ebx + 0x48]
lea ecx, [ebp + 0x3c]
push eax
mov byte [ebp - 4], 0x19
call fcn.00622aff
mov edi, dword [ebx + 0xc]
or ecx, 0xffffffff
xor eax, eax
push ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push eax
mov esi, ecx
mov ecx, dword [0x6fc6d4]
push 0x2b3e
mov byte [ebp - 4], 0x1a
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edi, eax
test edi, edi
je 0x42fb0c
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x44]
mov edx, dword [ebp + 0xc]
push 1
push eax
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp + 0x2c]
push esi
push edx
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x3c]
push ecx
mov ecx, dword [ebp + 0x18]
push edx
push eax
push ecx
mov ecx, 0x6fcb70
jmp 0x42fb30
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x2c]
push 0
push 0
push 0
push esi
push edx
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x3c]
push ecx
mov ecx, dword [ebp + 0x18]
push edx
push eax
push ecx
mov ecx, 0x6fc460
call fcn.004fc1e0
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 0x19
call fcn.00622d8a
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x18
call fcn.00622d8a
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x17
call fcn.00622d8a
lea ecx, [ebp + 0x2c]
mov byte [ebp - 4], 0x16
call fcn.00622d8a
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x15
call fcn.00622d8a
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 4
call fcn.00622d8a
test edi, edi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
je 0x42fa3c
call fcn.00401070
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x84
mov ecx, ebx
call fcn.0042fbe0
push ebx
call fcn.00622af4
add esp, 4
push 0
push 0
push 0
push 0
push 0
push 0x4288c0
call fcn.00626cae
jmp 0x42f612