Function at 0x56a610
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x62b398
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
mov ebx, ecx
mov ecx, dword [ebx + 0x31e0]
push esi
lea esi, [ebx + 0x31e0]
push edi
xor eax, eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], eax
mov eax, dword [ebx]
push 0x1e
push ecx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
call dword [eax + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x56a683
lea ecx, [eax + 0x28]
call fcn.0054a920
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edi, 0x2751
je 0x56a693
cmp edi, 0x2743
jne 0x56a6f9
mov eax, dword [ebx + 0xb0]
test dword [eax + 0x14c], 0x400000
jne 0x56a6f9
mov dl, byte [eax + 0x16b]
push esi
test dl, dl
sete dl
mov byte [eax + 0x16b], dl
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x18]
mov eax, dword [esi]
mov edx, dword [ebx]
push 0x1e
push eax
mov ecx, ebx
call dword [edx + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x56a6f9
lea ecx, [eax + 0x28]
call fcn.0054a920
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
je 0x56a778
mov dword [ebp - 0x24], 0
push edi
mov ecx, ebx
call fcn.0054e310
test eax, eax
jne 0x56a75f
mov eax, dword [ebp - 0x24]
inc eax
cmp eax, 5
mov dword [ebp - 0x24], eax
jg 0x56a75f
mov edx, dword [ebx]
push esi
mov ecx, ebx
call dword [edx + 0x18]
mov ecx, dword [esi]
mov eax, dword [ebx]
push 0x1e
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x56a704
lea ecx, [eax + 0x28]
call fcn.0054a920
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
je 0x56a778
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x3230], 1
mov eax, dword [ebx + 0x184]
test eax, eax
je 0x56a7c5
mov cl, byte [eax + 0x15c]
test cl, cl
mov byte [ebp - 0x12], cl
je 0x56a7c9
mov ecx, ebx
call fcn.0056a360
mov edi, eax
test edi, edi
je 0x56a95a
cmp edi, 0x7585
jne 0x56a858
mov ecx, ebx
call fcn.005644f0
mov edx, dword [ebx]
push esi
jmp 0x56bf3d
mov byte [ebp - 0x12], 0
test eax, eax
je 0x56a95a
mov cl, byte [eax + 0x137]
test cl, cl
je 0x56a95a
mov ecx, dword [ebx + 0x3444]
test ecx, ecx
je 0x56a95a
mov eax, dword [ecx + 0x335c]
lea edx, [ecx + 0x3308]
push edx
push eax
call fcn.005cae00
test eax, eax
jne 0x56c221
mov ecx, dword [ebx + 0x3444]
push 1
lea edx, [ecx + 0x3318]
lea eax, [ecx + 0x3310]
push edx
mov edx, dword [ebx + 0x184]
push eax
mov eax, dword [edx]
lea edx, [ecx + 0x3308]
push eax
mov eax, dword [esi]
push edx
push eax
call fcn.005cb2d0
test eax, eax
je 0x56a948
cmp eax, 0x757e
jne 0x56c221
mov ecx, ebx
call fcn.005644f0
mov edx, dword [ebx]
push esi
jmp 0x56bf3d
mov ecx, dword [ebx + 0x184]
mov al, byte [ecx + 0x15d]
test al, al
jne 0x56a8e6
cmp edi, 0x7559
jne 0x56a8e6
cmp dword [ecx + 0x154], 5
jne 0x56a8e6
mov dl, byte [ecx + 0x15e]
test dl, dl
jne 0x56a8e6
mov dl, byte [ecx + 0x15f]
test dl, dl
jne 0x56a8e6
mov byte [ecx + 0x15e], 1
mov ecx, dword [ebx + 0x184]
mov byte [ecx + 0x15f], 1
mov edx, dword [ebx + 0x184]
mov ecx, ebx
mov dword [edx + 0x154], 4
call fcn.005644f0
mov eax, dword [ebx]
push esi
mov ecx, ebx
call dword [eax + 0x18]
test eax, eax
jne 0x56c221
mov ecx, dword [ebp + 8]
push ecx
mov ecx, ebx
call fcn.0056a610
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ecx + 0x154]
cmp edx, 5
jne 0x56a90b
cmp edi, 0x7580
jne 0x56a90b
cmp byte [ecx + 0x15e], 0
jne 0x56a90b
mov byte [ecx + 0x15e], 1
jmp 0x56a8a1
test al, al
jne 0x56a933
cmp edx, 4
jne 0x56a933
mov al, byte [ecx + 0x15e]
test al, al
je 0x56a933
mov al, byte [ecx + 0x15f]
test al, al
je 0x56a933
mov dword [ecx + 0x154], edx
mov edi, 0x7559
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x3444]
lea edx, [ecx + 0x3310]
push edx
call fcn.005cc0d0
mov eax, dword [ebx + 0xb4]
mov byte [ebp - 0x11], 1
test eax, eax
je 0x56a96d
mov eax, dword [eax + 0x10]
jmp 0x56a976
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x56aa4e
mov ecx, dword [ebx + 0x184]
mov byte [ebp - 0x11], 0
cmp dword [ecx], 0
je 0x56a9df
push 1
mov ecx, ebx
call fcn.0056d3c0
test eax, eax
jne 0x56c221
cmp dword [ebx + 0x3238], 0xc8
je 0x56a9d5
mov edx, dword [ebx + 0x3220]
mov ecx, dword [ebx + 0x9c]
push edx
call fcn.00554c40
mov eax, 0x756d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 0x10
mov eax, dword [ebx + 0x335c]
lea esi, [ebx + 0x3308]
push esi
push eax
mov ecx, ebx
call fcn.005cae00
test eax, eax
jne 0x56c221
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x56aa0a
mov eax, dword [eax]
jmp 0x56aa12
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx]
lea edx, [ebx + 0x3318]
lea edi, [ebx + 0x3310]
push 1
push edx
push edi
push eax
mov eax, dword [ebx + 0x31e0]
push esi
push eax
mov ecx, ebx
call fcn.005cb2d0
test eax, eax
je 0x56aa46
cmp eax, 0x757e
jne 0x56c221
jmp 0x56bf2d
push edi
mov ecx, ebx
call fcn.005cc0d0
mov edi, dword [ebp + 8]
test edi, edi
je 0x56aa5e
mov ecx, ebx
call fcn.0056c540
jmp 0x56aa67
mov edx, dword [ebx]
push 0
mov ecx, ebx
call dword [edx + 0x20]
test eax, eax
jne 0x56c221
push edi
mov ecx, ebx
call fcn.0056c240
mov esi, eax
mov al, byte [ebp - 0x11]
test al, al
je 0x56aae1
cmp esi, 0x757e
jne 0x56aae1
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x56aa97
mov eax, dword [eax + 0x10]
jmp 0x56aaa0
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x56ab8f
mov ecx, ebx
call fcn.005644f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
test eax, eax
jne 0x56c221
push edi
mov ecx, ebx
call fcn.0056a610
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test esi, esi
jne 0x56ab8f
cmp dword [ebx + 0x3238], 0xce
jne 0x56ab8f
mov edi, dword [ebx + 0x3244]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56ab8f
mov eax, dword [ebx + 0xb4]
test eax, eax
jne 0x56ab2e
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00602b44
or dword [ebp - 0x28], 1
mov eax, dword [eax]
push str.sciencedirect.com
push eax
call fcn.005e6490
mov edi, eax
mov al, byte [ebp - 0x28]
add esp, 8
test al, 1
je 0x56ab4f
lea ecx, [ebp - 0x2c]
call fcn.00602ad6
test edi, edi
je 0x56ab8f
cmp dword [ebx + 0x31dc], 2
je 0x56ab8f
mov ecx, dword [ebx + 0x31e8]
test ecx, ecx
je 0x56ab6d
mov edx, dword [ecx]
push 2
call dword [edx + 0xc]
mov ecx, ebx
mov dword [ebx + 0x31dc], 2
call fcn.005644f0
push str.Restart_type_11_n
mov ecx, ebx
call fcn.0054c4f0
jmp 0x56bf34
cmp dword [ebx + 0x3238], 0xc8
jne 0x56abf2
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x56abf2
mov eax, dword [ebx + 0x54]
xor edi, edi
cmp eax, edi
jg 0x56abf4
jl 0x56abb5
cmp dword [ebx + 0x50], edi
ja 0x56abf4
mov al, byte [ebx + 0x31ed]
test al, al
jne 0x56abf4
mov eax, dword [ebx + 0x3258]
mov ecx, dword [ebx + 0x325c]
mov edx, eax
or edx, ecx
je 0x56abf4
mov edx, dword [ebx + 0x31f8]
add eax, 1
adc ecx, edi
cmp eax, edx
jne 0x56abf4
cmp ecx, dword [ebx + 0x31fc]
jne 0x56abf4
mov esi, 0x7542
jmp 0x56ae0a
xor edi, edi
cmp esi, edi
je 0x56b102
cmp esi, 0x7563
jne 0x56ac19
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7581
jne 0x56ac36
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7566
jne 0x56ae0a
mov eax, dword [ebx + 0xb0]
push str..dailymotion.com
mov ecx, dword [eax]
push ecx
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56ac7a
mov edx, dword [ebx + 0xb0]
push str..dmcdn.net
mov eax, dword [edx]
push eax
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56ae0a
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 8]
cmp eax, edi
je 0x56ae0a
mov edx, dword [ecx + 0x14c]
test dh, 1
je 0x56ae0a
push 0x2e
push eax
call fcn.005e7360
add esp, 8
cmp eax, edi
je 0x56ae0a
push 0x6a44bc
push eax
call fcn.005e6820
add esp, 8
test eax, eax
jne 0x56ae0a
mov ecx, dword [0x6cc708]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebx + 0xb0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
mov eax, dword [edx + 8]
push eax
push 0x6a00a0
push ecx
call fcn.005fb90b
mov edx, dword [ebp - 0x28]
add esp, 0xc
push 0x2e
push edx
call fcn.005e7360
add esp, 8
cmp eax, edi
je 0x56adfe
mov byte [eax], 0
mov eax, dword [0x6cc708]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
push ecx
push str._s.mnft
push edx
mov byte [ebp - 4], 2
call fcn.005fb90b
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
add esp, 0xc
mov eax, dword [eax + 8]
test eax, eax
je 0x56ad41
push eax
call fcn.005fef05
add esp, 4
mov al, byte [0x6d0c38]
test esi, esi
mov byte [ebp - 0x12], al
jne 0x56ad50
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005feedc
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x56ad7c
push str.URL::set_fileName__:_Not_enough_memory__n
call fcn.005be7e0
jmp 0x56ad9b
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebx
call fcn.005644f0
push str.Restart_type_12_n
mov ecx, ebx
call fcn.0054c4f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov esi, eax
test esi, esi
je 0x56adef
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.00602ad6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.0056a610
mov esi, eax
jmp 0x56adc2
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [0x6cc708]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebx + 0xb0]
lea edx, [ebp - 0x18]
push edi
push edx
mov byte [ebp - 4], 3
call fcn.005814e0
mov eax, dword [ebp - 0x18]
push eax
call fcn.004989f0
add esp, 4
cmp esi, 0x7565
je 0x56ae47
cmp esi, 0x7542
jne 0x56afaa
mov ecx, dword [ebx + 0xb0]
mov dl, byte [ecx + 0x303]
test dl, dl
jne 0x56af23
test al, al
je 0x56af23
mov ecx, ebx
call fcn.005644f0
push str.Restart_type_14_n
mov ecx, ebx
call fcn.0054c4f0
cmp esi, 0x7542
jne 0x56aeb3
mov eax, dword [ebx + 0xb4]
cmp eax, edi
je 0x56ae8d
mov eax, dword [eax + 0x10]
jmp 0x56ae96
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 2
jne 0x56aeb3
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x158], edi
jne 0x56aeb3
mov dword [eax + 0x158], 1
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x56aee8
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp + 8]
push ecx
mov byte [eax + 0x303], 1
mov ecx, ebx
call fcn.0056a610
mov esi, eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7542
jne 0x56afaa
cmp dword [ebp + 8], edi
jne 0x56afaa
cmp dword [ebx + 0x54], edi
jl 0x56afbe
jg 0x56af40
cmp dword [ebx + 0x50], edi
jbe 0x56afaa
cmp dword [ecx + 0x2dc], edi
je 0x56afaa
mov edx, dword [ebx + 0x31e8]
mov eax, dword [edx + 0xb8]
push eax
push edi
call fcn.005c5080
mov ecx, ebx
call fcn.005644f0
push str.Restart_type_15_n
mov ecx, ebx
call fcn.0054c4f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x56afa3
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
jmp 0x56aef9
cmp dword [ebx + 0x54], edi
jg 0x56b0ab
jl 0x56afbe
cmp dword [ebx + 0x50], edi
ja 0x56b0ab
mov al, byte [ebx + 0x31ed]
test al, al
jne 0x56b0ab
cmp esi, 0x7565
je 0x56aff8
cmp esi, 0x7566
je 0x56aff8
cmp esi, 0x7542
je 0x56aff8
cmp esi, 0x756e
je 0x56aff8
cmp esi, 0x755e
jne 0x56b0ab
mov eax, dword [ebx + 0xb0]
mov byte [ebx + 0x31ec], 1
mov byte [ebx + 0x31ed], 1
mov cl, byte [eax + 0x31a]
test cl, cl
je 0x56b01d
mov byte [eax + 0x31c], 1
mov ecx, ebx
call fcn.005644f0
push str.Restart_type_16_n
mov ecx, ebx
call fcn.0054c4f0
cmp esi, 0x7542
jne 0x56b06d
mov eax, dword [ebx + 0xb4]
cmp eax, edi
je 0x56b047
mov eax, dword [eax + 0x10]
jmp 0x56b050
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x56b06d
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x158], edi
jne 0x56b06d
mov dword [eax + 0x158], 1
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x56b0a2
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
push eax
jmp 0x56aef9
mov ecx, dword [ebx + 0x3200]
cmp ecx, edi
je 0x56af02
call fcn.0059cb00
test al, al
jne 0x56af02
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31b]
test cl, cl
je 0x56af02
mov cl, byte [eax + 0x31c]
test cl, cl
jne 0x56af02
mov cl, byte [eax + 0x31d]
test cl, cl
jne 0x56af02
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00602ad6
cmp dword [ebx + 0x3200], edi
je 0x56b88a
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0xbc]
cmp eax, edi
jne 0x56b12a
cmp esi, edi
je 0x56b88a
cmp eax, edi
je 0x56b140
push str.text_html
push eax
call fcn.005e6820
add esp, 8
test eax, eax
sete byte [ebp - 0x11]
jmp 0x56b144
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0x3200]
call fcn.0059cb00
test al, al
jne 0x56b88a
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31b]
test cl, cl
je 0x56b88a
mov cl, byte [eax + 0x31c]
test cl, cl
jne 0x56b88a
mov cl, byte [eax + 0x31d]
test cl, cl
jne 0x56b88a
mov al, byte [ebp - 0x11]
test al, al
jne 0x56b196
cmp esi, edi
je 0x56b88a
mov eax, dword [0x6cc708]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x44], edi
mov word [ebp - 0x48], di
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x28]
push eax
lea edx, [ebp - 0x34]
push ecx
lea eax, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x20]
push ecx
mov ecx, dword [ebx + 0x3200]
lea eax, [ebp - 0x24]
push edx
push eax
mov byte [ebp - 4], 9
call fcn.0059ca20
test al, al
je 0x56b842
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x31c], 1
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x31a], 1
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x31d], 1
mov ecx, dword [ebx + 0x3200]
call fcn.0059c9f0
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebx + 0xb0]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebx + 0xb0]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], esi
mov eax, dword [esi]
test eax, eax
je 0x56b253
push eax
call fcn.005fef05
add esp, 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005feedc
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi], edx
jne 0x56b2dc
push str.URL::set_serverName__:_Not_enough_memory__n
mov ecx, esi
call fcn.005be7e0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00602ad6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00602ad6
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00602ad6
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00602ad6
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov eax, 0x753b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x190], 0
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 4]
test eax, eax
je 0x56b325
push eax
call fcn.005fef05
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x56b330
mov dword [edi + 4], edx
jmp 0x56b38f
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x56b346
mov eax, dword [ebp - 0x2c]
mov dword [eax + 4], edx
jmp 0x56b38f
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005feedc
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 4], edx
jne 0x56b370
push str.URL::set_serverPath__:_Not_enough_memory__n
jmp 0x56b277
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [eax + 8]
test eax, eax
je 0x56b3ab
push eax
call fcn.005fef05
add esp, 4
mov cl, byte [0x6d0c38]
test esi, esi
mov byte [ebp - 0x12], cl
jne 0x56b3bb
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005feedc
mov ecx, dword [ebp - 0x3c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x56b3e5
push str.URL::set_fileName__:_Not_enough_memory__n
jmp 0x56b277
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x56b420
push eax
call fcn.005fef05
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x56b42b
mov dword [edi + 0x1c], edx
jmp 0x56b48c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x56b441
mov ecx, dword [ebp - 0x2c]
mov dword [ecx + 0x1c], edx
jmp 0x56b48c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005feedc
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 0x1c], edx
jne 0x56b46d
push str.URL::set_Cookie__:_Not_enough_memory__n
call fcn.005be7e0
jmp 0x56b48c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
push 0x6d0c38
add ecx, 0xc4
call fcn.00602c5f
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x309], 0
mov esi, dword [ebx + 0xb0]
mov eax, dword [esi + 0x18]
test eax, eax
je 0x56b4c5
push eax
call fcn.005fef05
add esp, 4
mov edx, 0x6d0c38
test edx, edx
jne 0x56b4d3
mov dword [esi + 0x18], edx
jmp 0x56b539
mov edi, 0x6d0c38
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x56b4e9
mov dword [esi + 0x18], eax
jmp 0x56b539
mov edi, 0x6d0c38
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005feedc
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0x18], edx
jne 0x56b517
push str.URL::set_Referer__:_Not_enough_memory__n
mov ecx, esi
call fcn.005be7e0
jmp 0x56b539
mov edi, 0x6d0c38
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56b57f
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56b57f
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x420]
test edx, edx
jne 0x56b563
push eax
call fcn.005c4f50
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x420]
test eax, eax
je 0x56b57f
push str.Referer
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x56b589
lea eax, [ebp - 0x48]
push eax
call fcn.005e639f
add esp, 4
test eax, eax
je 0x56b5f7
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x56b5a0
lea eax, [ebp - 0x48]
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005c2f90
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56b5f7
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56b5cc
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005c1170
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x56b5f7
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edx
push 0x13c9
push 0x111
push eax
call esi
jmp 0x56b5fd
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebx + 0xb0]
push 0x6d0c38
mov byte [ecx + 0x18a], 1
mov ecx, dword [ebx + 0xb0]
add ecx, 0x174
call fcn.00602c5f
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x170], 0
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x30f], 0
mov ecx, dword [ebx + 0xb0]
push ecx
mov byte [ebx + 0xc8], 0
call fcn.00503d10
add esp, 4
mov ecx, ebx
call fcn.005649a0
mov eax, dword [ebx + 0xac]
test eax, eax
jne 0x56b6ec
mov edx, dword [ebx + 0xa0]
mov eax, dword [edx]
mov eax, dword [eax]
test eax, eax
je 0x56b682
push 0
push 0x1478
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56b6ec
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56b6ec
mov ecx, dword [ebx + 0xb0]
push 0
push 0
push eax
call fcn.005c09d0
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x56b6c9
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x56b6ec
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31d8]
test eax, eax
je 0x56b715
push eax
mov byte [ebp - 4], 0xa
call fcn.005fef05
add esp, 4
jmp 0x56b70e
mov dword [ebp - 4], 9
mov ecx, dword [ebx + 0xb0]
mov dword [ebx + 0x31d8], 0
call fcn.005c3560
mov ecx, ebx
call fcn.005644f0
push str.Restart_type_17_n
mov ecx, ebx
call fcn.0054c4f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov esi, eax
test esi, esi
jne 0x56b7e5
mov ecx, dword [ebp + 8]
push ecx
mov ecx, ebx
call fcn.0056a610
mov esi, eax
test esi, esi
jne 0x56b7e5
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + 0xbc]
test eax, eax
je 0x56b7e5
push str.text_html
push eax
call fcn.005e6820
add esp, 8
test eax, eax
je 0x56b7e5
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56b7e5
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56b7e5
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x420]
test edx, edx
jne 0x56b7b2
push eax
call fcn.005c4f50
mov ebx, dword [ebx + 0xb0]
mov eax, dword [ebx + 0x420]
test eax, eax
je 0x56b7e5
lea eax, [ebp + 8]
push 4
push eax
mov dword [ebp + 8], 1
mov ecx, dword [ebx + 0x420]
push 4
push 0
push str.noSyntRef
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00602ad6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00602ad6
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00602ad6
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00602ad6
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00602ad6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00602ad6
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00602ad6
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00602ad6
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov edx, dword [ebx + 0x3238]
cmp edx, 0xc8
jne 0x56b8b4
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x56b8b4
mov ecx, dword [ebx + 0x31f8]
mov eax, dword [ebx + 0x31fc]
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], eax
cmp edx, 0xce
jne 0x56b9af
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x56b8fe
cmp dword [ebx + 0x54], edi
jg 0x56b8fe
jl 0x56b8d6
cmp dword [ebx + 0x50], edi
ja 0x56b8fe
mov eax, dword [ebx + 0x31f8]
mov ecx, dword [ebx + 0x31fc]
mov esi, eax
or esi, ecx
je 0x56b8fe
mov esi, dword [ebx + 0x3258]
mov edi, dword [ebx + 0x325c]
or esi, edi
jne 0x56b8fe
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], ecx
cmp edx, 0xce
jne 0x56b9af
mov edx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or edx, eax
jne 0x56b9af
mov edi, dword [ebx + 0x54]
mov eax, dword [ebx + 0x50]
test edi, edi
jg 0x56b99d
jl 0x56b928
test eax, eax
ja 0x56b958
mov esi, dword [ebx + 0x3258]
mov ecx, dword [ebx + 0x325c]
mov eax, esi
or eax, ecx
je 0x56b958
mov eax, dword [ebx + 0x31fc]
mov edx, dword [ebx + 0x31f8]
cmp ecx, eax
jg 0x56b958
jl 0x56b950
cmp esi, edx
jae 0x56b958
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], eax
jmp 0x56b9af
test edi, edi
jg 0x56b99d
jl 0x56b965
mov eax, dword [ebx + 0x50]
test eax, eax
ja 0x56b99d
mov edx, dword [ebx + 0x31f8]
mov edi, dword [ebx + 0x31fc]
mov ecx, edx
or ecx, edi
je 0x56b99d
mov esi, dword [ebx + 0x3258]
mov eax, edx
add eax, 1
mov ecx, edi
adc ecx, 0
cmp esi, eax
jne 0x56b99d
mov eax, dword [ebx + 0x325c]
cmp eax, ecx
jne 0x56b99d
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], edi
jmp 0x56b9af
mov ecx, dword [ebx + 0x3258]
mov edx, dword [ebx + 0x325c]
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], edx
mov edx, dword [ebx + 0x3238]
cmp edx, 0xc8
je 0x56b9c5
cmp edx, 0xce
jne 0x56b9eb
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x56b9eb
mov eax, dword [ebx + 0x3274]
mov ecx, dword [ebx + 0x3270]
test eax, eax
jl 0x56b9eb
jg 0x56b9e5
test ecx, ecx
jbe 0x56b9eb
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], eax
mov eax, dword [ebx + 0xb0]
xor esi, esi
mov dword [ebp - 0x28], eax
cmp dword [eax + 0x2fc], esi
je 0x56ba3c
mov eax, dword [ebx + 0x31e8]
cmp eax, esi
je 0x56ba3c
cmp dword [eax + 0x40], esi
je 0x56ba3c
cmp edx, 0xc8
jne 0x56ba36
mov eax, dword [ebx + 0x31fc]
mov ecx, dword [ebx + 0x31f8]
cmp eax, esi
jl 0x56ba36
jg 0x56ba2b
cmp ecx, esi
jbe 0x56ba36
sub ecx, 1
sbb eax, esi
mov dword [ebx + 0x60], ecx
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x4c], esi
mov esi, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
mov ecx, esi
or ecx, eax
je 0x56bb22
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov edi, ecx
or edi, edx
je 0x56bb22
cmp ecx, esi
jne 0x56ba75
cmp edx, dword [ebx + 0x4c]
je 0x56bb22
mov esi, dword [eax + 0xc8]
mov edi, dword [eax + 0xcc]
or esi, edi
je 0x56bb22
cmp byte [ebx + 0x3240], 0
jne 0x56bb22
cmp dword [ebx + 0x3238], 0xce
jne 0x56bad8
mov edi, dword [ebx + 0x3258]
mov esi, dword [ebx + 0x325c]
sub ecx, 1
sbb edx, 0
cmp edi, ecx
jne 0x56bad8
cmp esi, edx
jne 0x56bad8
mov edx, dword [ebx + 0x3260]
mov ecx, dword [ebx + 0x3264]
or edx, ecx
jne 0x56bad8
mov dword [ebx + 0x3260], edi
mov dword [ebx + 0x3264], esi
mov esi, dword [ebx + 0x3260]
mov ecx, dword [ebx + 0x3264]
mov edx, esi
or edx, ecx
je 0x56bddd
mov edi, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov ecx, edi
mov dword [ebp - 0x3c], edx
sub ecx, 1
sbb edx, 0
cmp esi, ecx
jne 0x56bddd
cmp dword [ebx + 0x3264], edx
jne 0x56bddd
mov eax, dword [ebp - 0x3c]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x4c], eax
mov al, byte [ebx + 0x3240]
test al, al
jne 0x56bfed
mov eax, dword [ebp - 0x28]
mov esi, dword [eax + 0xbc]
test esi, esi
je 0x56bfc7
mov edx, dword [eax + 0x108]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56bfc7
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56bfc7
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
push edx
call fcn.005e9bc0
add esp, 0xc
test eax, eax
je 0x56bfc7
mov ecx, dword [ebx + 0xb0]
push 9
push str.text_html
mov byte [ebp - 0x11], 1
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56bbce
mov edx, dword [ebx + 0xb0]
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x56bbce
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0xb0]
push 0xa
push 0x6a2f30
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56bc12
mov edx, dword [ebx + 0xb0]
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x56bc12
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0xb0]
push 0x15
push str.application_x_mpegURL
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e9bc0
add esp, 0xc
test eax, eax
jne 0x56bc8a
mov edx, dword [ebx + 0xb0]
push 0x1d
push str.application_vnd.apple.mpegurl
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e9bc0
add esp, 0xc
test eax, eax
je 0x56bc70
mov ecx, dword [ebx + 0xb0]
push str.video_MP2T
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e6820
add esp, 8
test eax, eax
jne 0x56bc8a
mov ecx, dword [ebx + 0xb0]
push 0x6d0c38
add ecx, 0x108
mov byte [ebp - 0x11], 0
call fcn.00602c5f
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x56bd7a
mov edx, dword [ebx + 0xb0]
push str..youtube.com
mov eax, dword [edx]
push eax
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56bce6
mov ecx, dword [ebx + 0xb0]
push str..googlevideo.com
mov edx, dword [ecx]
push edx
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56bd7a
mov eax, dword [ebx + 0xb0]
mov esi, dword [eax + 8]
test esi, esi
je 0x56bd7a
mov ecx, 7
mov edi, str.videoplayback_
xor edx, edx
repe cmpsw word [esi], word es:[edi]
jne 0x56bd7a
mov eax, dword [eax + 0xbc]
push 6
push str.video_
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56bd60
mov ecx, dword [ebx + 0xb0]
push 6
push str.audio_
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56bd60
mov eax, dword [ebx + 0xb0]
push str.application_octet_stream
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e6820
add esp, 8
test eax, eax
jne 0x56bd7a
mov ecx, dword [ebx + 0xb0]
push 0x6d0c38
add ecx, 0x108
mov byte [ebp - 0x11], 0
call fcn.00602c5f
mov al, byte [ebp - 0x11]
test al, al
je 0x56bfc7
mov ecx, dword [ebx + 0x31e8]
mov eax, dword [ecx + 0x13c]
test eax, eax
je 0x56bf68
mov eax, dword [ebx + 0xb0]
mov dl, byte [eax + 0x31f]
test dl, dl
jne 0x56bdb7
mov dl, byte [eax + 0x16a]
test dl, dl
je 0x56bf68
mov edx, dword [ecx + 0xc8]
lea eax, [ecx + 0xc8]
mov ecx, dword [ecx + 0xcc]
or edx, ecx
je 0x56bfc7
mov byte [ebx + 0x3240], 1
jmp 0x56bfc7
cmp dword [ebx + 0x3238], 0xce
jne 0x56be38
mov esi, dword [ebx + 0x3278]
mov ecx, dword [ebx + 0x327c]
mov edx, esi
or edx, ecx
je 0x56be38
mov edi, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov ecx, edi
mov dword [ebp - 0x3c], edx
sub ecx, esi
mov esi, dword [ebx + 0x327c]
sbb edx, esi
mov esi, dword [ebx + 0x31f8]
cmp esi, ecx
jne 0x56be38
mov ecx, dword [ebx + 0x31fc]
cmp ecx, edx
jne 0x56be38
mov edx, dword [ebp - 0x3c]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x4c], edx
jmp 0x56bb22
mov ecx, dword [eax + 0x13c]
mov esi, dword [ebp - 0x28]
test ecx, ecx
je 0x56be65
mov cl, byte [esi + 0x31f]
test cl, cl
jne 0x56be59
mov cl, byte [esi + 0x16a]
test cl, cl
je 0x56be65
mov byte [ebx + 0x3240], 1
jmp 0x56bb22
mov dl, byte [ebx + 0x324d]
test dl, dl
je 0x56bea3
mov ecx, dword [eax + 0xd0]
mov edi, dword [ebx + 0x3258]
mov eax, dword [eax + 0xd4]
cmp edi, ecx
jne 0x56bea3
mov edi, dword [ebx + 0x325c]
cmp edi, eax
jne 0x56bea3
cmp dword [ebx + 0x3238], 0xce
jne 0x56bea3
mov dword [ebx + 0x48], ecx
jmp 0x56bb1f
mov eax, dword [ebx + 0x54]
mov ecx, dword [ebx + 0x50]
test eax, eax
jg 0x56beef
jl 0x56beb3
test ecx, ecx
ja 0x56bedd
cmp byte [ebx + 0x31ed], 0
jne 0x56bedd
mov byte [ebx + 0x31ec], 1
mov byte [ebx + 0x31ed], 1
mov al, byte [esi + 0x31a]
test al, al
je 0x56bf2d
mov byte [esi + 0x31c], 1
jmp 0x56bf2d
test eax, eax
jl 0x56bfa8
jg 0x56beef
test ecx, ecx
jbe 0x56bfa8
mov al, byte [ebx + 0x31f4]
test al, al
jne 0x56bfa8
test dl, dl
jne 0x56bfa8
mov byte [ebx + 0x324d], 1
mov dword [esi + 0x2dc], 1
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31a]
test cl, cl
je 0x56bf2d
mov byte [eax + 0x31c], 1
mov ecx, ebx
call fcn.005644f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
test eax, eax
jne 0x56c221
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.0056a610
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x56bfa8
mov ecx, dword [ebx + 0x48]
mov edx, dword [ebx + 0x4c]
mov eax, ecx
or eax, edx
je 0x56bfa8
mov eax, dword [ebx + 0xb0]
add eax, 0x128
cmp ecx, dword [eax]
jne 0x56bfa8
cmp edx, dword [eax + 4]
je 0x56bfc7
mov ecx, ebx
call fcn.005644f0
mov eax, 0x757a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebx + 0x3240]
test al, al
jne 0x56bfed
mov edx, dword [ebx + 0x320c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56bfed
push edx
mov ecx, ebx
call fcn.00575ad0
push 0x6d0c38
lea ecx, [ebx + 0x320c]
xor esi, esi
call fcn.00602c5f
mov al, byte [ebx + 0x3240]
test al, al
je 0x56c168
lea ecx, [ebx + 0x10]
mov byte [ebx + 0x3240], 0
call fcn.00554e30
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0xb0]
cmp ecx, esi
lea ecx, [eax + 0x28]
setne byte [ebp - 0x12]
call fcn.00541a50
mov ecx, dword [ebx + 0x31e8]
mov dword [ecx + 0xc8], esi
mov dword [ecx + 0xcc], esi
mov edx, dword [ebx + 0x31e8]
mov dword [edx + 0xd0], esi
mov dword [edx + 0xd4], esi
mov eax, dword [ebx + 0x31e8]
mov dword [eax + 0x1c0], esi
mov dword [eax + 0x1c4], esi
mov eax, dword [ebx + 0x31e8]
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x68], esi
mov dword [ebx + 0x70], esi
mov dword [ebx + 0x58], esi
mov dword [ebx + 0x31f8], esi
mov dword [ebx + 0x3250], esi
mov dword [ebx + 0x3258], esi
mov dword [ebx + 0x3260], esi
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x3270], esi
cmp eax, esi
mov dword [ebx + 0x323c], esi
mov dword [ebx + 0x90], esi
mov dword [ebx + 0x54], esi
mov dword [ebx + 0x64], esi
mov dword [ebx + 0x6c], esi
mov dword [ebx + 0x74], esi
mov dword [ebx + 0x5c], esi
mov dword [ebx + 0x31fc], esi
mov dword [ebx + 0x3254], esi
mov dword [ebx + 0x325c], esi
mov dword [ebx + 0x3264], esi
mov dword [ebx + 0x4c], esi
mov dword [ebx + 0x3274], esi
je 0x56c0e9
mov byte [eax + 0x85d], 0
mov ecx, ebx
call fcn.005644f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
cmp eax, esi
jne 0x56c221
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.0056a610
mov edi, eax
cmp edi, esi
je 0x56c12a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebp - 0x12]
test al, al
je 0x56c14c
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x30]
mov ecx, dword [ebx + 0x31e8]
push edx
push ebx
add ecx, 0x28
call fcn.00543a50
mov edi, eax
mov ecx, ebx
call fcn.00550790
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 6
mov dword [ebx + 0xa8], esi
mov eax, dword [0x6d2588]
push 1
push eax
mov ecx, ebx
call fcn.0054c420
cmp dword [ebx + 0xac], esi
jne 0x56c1b6
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x18]
cmp ecx, esi
je 0x56c1b6
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x13f8
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov al, byte [ebp - 0x12]
test al, al
je 0x56c1f6
mov ebx, dword [ebx + 0x184]
mov eax, 4
cmp dword [ebx + 0x154], eax
jne 0x56c1f6
mov cl, byte [ebx + 0x15e]
test cl, cl
je 0x56c1f6
mov edx, dword [0x6d12f4]
lea ecx, [ebp + 8]
push eax
push ecx
push eax
push esi
push str.SocksType
push edx
mov dword [ebp + 8], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4