Function at 0x4b13d0
Capabilities:
Terminate process

Disassembly:
sub esp, 0x24
mov eax, dword [esp + 0x28]
push ebx
mov ebx, dword [esp + 0x38]
push ebp
push esi
push edi
push 3
mov dword [esp + 0x34], eax
xor edi, edi
mov eax, dword [esp + 0x40]
push 0x61d2bc
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
push edx
xor edx, edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call fcn.004b0490
mov esi, eax
add esp, 0xc
mov dword [esp + 0x28], esi
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add eax, 0xfffffffe
cmp eax, 3
ja case.default.0x4b1426
jmp dword [eax*4 + 0x4b197c]
push 2
push 0x61d2c0
push dword [ecx]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
je 0x4b145d
mov eax, dword [esi]
push 2
push 0x61d2c4
push dword [eax]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
jne 0x4b1510
mov dword [esp + 0x18], 1
jmp 0x4b1510
push 3
push 0x61d2c8
push dword [ecx]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
je 0x4b1496
mov eax, dword [esi]
push 3
push 0x61d2cc
push dword [eax]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
jne 0x4b1510
mov dword [esp + 0x18], 2
jmp 0x4b1510
push 4
push 0x61d2d0
push dword [ecx]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
je 0x4b145d
mov eax, dword [esi]
push 4
push str.HTTP
push dword [eax]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
jne 0x4b1510
mov dword [esp + 0x18], 1
jmp 0x4b1510
push 5
push 0x61d2e0
push dword [ecx]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
je 0x4b1496
mov eax, dword [esi]
push 5
push str.HTTPS
push dword [eax]
call fcn.0058b9b0
add esp, 0xc
test eax, eax
jne 0x4b1510
mov dword [esp + 0x18], 2
jmp 0x4b1510
mov dword [esp + 0x18], edi
mov eax, dword [esi + 4]
xor edx, edx
push 1
push 0x61d2f0
mov esi, dword [eax + 4]
mov ecx, dword [eax]
push esi
mov dword [esp + 0x30], ecx
call fcn.004b0490
mov ebp, eax
add esp, 0xc
mov dword [esp + 0x20], ebp
mov eax, dword [ebp]
sub esi, dword [eax + 4]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4b158e
lea eax, [esi + 2]
push eax
call fcn.0058d200
mov ecx, eax
add esp, 4
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
test ecx, ecx
je 0x4b1877
test esi, esi
jne 0x4b156d
mov byte [ecx], 0x2f
mov eax, dword [eax]
mov byte [eax + 1], 0
jmp 0x4b158e
mov eax, dword [ebp]
lea edx, [esi + 2]
push esi
mov eax, dword [eax + 4]
add eax, dword [esp + 0x28]
push eax
call fcn.00401000
mov eax, dword [esp + 0x1c]
add esp, 8
mov eax, dword [eax]
mov byte [esi + eax], 0
mov ecx, dword [ebp]
xor edx, edx
push 1
push 0x61d350
push dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004b0490
mov ebp, eax
add esp, 0xc
cmp dword [ebp + 8], 1
jne 0x4b15ca
cmp dword [esp + 0x18], 2
mov eax, 0x50
mov ecx, 0x1bb
cmove eax, ecx
movzx esi, ax
mov dword [esp + 0x14], esi
jmp 0x4b163e
mov eax, dword [ebp + 4]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
cmp byte [ecx + eax - 1], 0x5d
jne 0x4b15f4
cmp dword [esp + 0x18], 2
mov eax, 0x50
mov ecx, 0x1bb
cmove eax, ecx
movzx esi, ax
mov dword [esp + 0x14], esi
jmp 0x4b163e
lea eax, [ecx + 1]
push eax
call fcn.0058d200
mov esi, eax
add esp, 4
test esi, esi
je 0x4b18b8
mov eax, dword [ebp + 4]
mov ecx, esi
mov edx, dword [eax + 4]
push edx
push dword [eax]
inc edx
call fcn.00401000
mov eax, dword [ebp + 4]
push esi
mov eax, dword [eax + 4]
mov byte [esi + eax], 0
call fcn.0058cc7c
add esp, 0xc
movzx eax, ax
mov dword [esp + 0x14], eax
push esi
call fcn.0058bf82
add esp, 4
mov ecx, dword [ebp]
mov eax, dword [ecx]
cmp byte [eax], 0x5b
jne 0x4b169d
mov eax, dword [esp + 0x20]
push ecx
push 1
push 0x61d3b0
mov eax, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
call fcn.004b3c70
mov esi, eax
add esp, 0xc
test esi, esi
jle 0x4b16d7
lea eax, [esi + 2]
push eax
call fcn.0058d200
mov edi, eax
add esp, 4
test edi, edi
je 0x4b18f9
lea eax, [esi + 1]
mov ecx, edi
push eax
mov dword [esp + 0x20], eax
lea edx, [esi + 2]
mov eax, dword [ebp]
push dword [eax]
call fcn.00401000
mov byte [esi + edi + 1], 0
jmp 0x4b16d4
mov eax, dword [ecx + 4]
mov dword [esp + 0x1c], eax
lea esi, [eax + 1]
push esi
call fcn.0058d200
mov edi, eax
add esp, 4
test edi, edi
je 0x4b193a
mov eax, dword [ebp]
mov edx, esi
push dword [esp + 0x1c]
mov ecx, edi
push dword [eax]
call fcn.00401000
mov eax, dword [esp + 0x24]
mov byte [eax + edi], 0
add esp, 8
mov eax, dword [ebp]
test eax, eax
je 0x4b16f2
nop
mov esi, dword [eax + 8]
push eax
call fcn.0058bf82
add esp, 4
mov eax, esi
test esi, esi
jne 0x4b16e0
push ebp
call fcn.0058bf82
mov ebp, dword [esp + 0x24]
add esp, 4
mov eax, dword [ebp]
test eax, eax
je 0x4b1718
mov esi, dword [eax + 8]
push eax
call fcn.0058bf82
add esp, 4
mov eax, esi
test esi, esi
jne 0x4b1706
push ebp
call fcn.0058bf82
mov ebp, dword [esp + 0x2c]
add esp, 4
mov eax, dword [ebp]
test eax, eax
je 0x4b1742
nop dword [eax]
mov esi, dword [eax + 8]
push eax
call fcn.0058bf82
add esp, 4
mov eax, esi
test esi, esi
jne 0x4b1730
push ebp
call fcn.0058bf82
add esp, 4
test ebx, ebx
je 0x4b1839
xorps xmm0, xmm0
movups xmmword [ebx], xmm0
movq qword [ebx + 0x10], xmm0
mov dword [ebx + 0x18], 0
test edi, edi
je 0x4b1839
cmp byte [edi], 0x5b
jne 0x4b17f7
mov esi, dword [esp + 0x1c]
mov edx, esi
push ecx
push 0x61d46c
mov ecx, edi
call fcn.004b3d00
add esp, 8
mov byte [esi + edi - 1], 0
test eax, eax
jle 0x4b17a9
mov byte [eax + edi], 0
inc eax
add eax, edi
push eax
call fcn.0058cc7c
add esp, 4
mov esi, eax
jmp 0x4b17ac
or esi, 0xffffffff
mov eax, 0x17
lea ebp, [ebx + 8]
mov word [ebx], ax
lea ecx, [edi + 1]
mov eax, dword [0x6234e4]
test eax, eax
jne 0x4b17d0
call fcn.004b4390
mov eax, dword [0x6234e4]
lea ecx, [edi + 1]
cmp eax, 1
jne 0x4b17df
push ebp
push ecx
push 0x17
call dword [0x6234f0]
test esi, esi
js 0x4b17e6
mov dword [ebx + 0x18], esi
mov esi, dword [esp + 0x14]
push esi
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebx + 2], ax
jmp 0x4b183d
lea eax, [ebx + 4]
mov ecx, 2
push eax
mov edx, edi
mov word [ebx], cx
call fcn.004b4460
mov esi, dword [esp + 0x18]
add esp, 4
test eax, eax
jne 0x4b182c
push ecx
push ebx
mov edx, esi
mov ecx, edi
call fcn.004b4730
add esp, 8
test eax, eax
jg 0x4b182c
xor eax, eax
mov word [ebx], ax
push esi
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebx + 2], ax
jmp 0x4b183d
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4b1848
mov word [eax], si
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4b185e
mov dword [eax], edi
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
test edi, edi
je 0x4b186b
push edi
call fcn.0058bf82
add esp, 4
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x1597
mov edx, 0x61d2f4
xor ecx, ecx
call fcn.004b47e0
add esp, 0xc
push 0x1597
push 0x61d310
push 0x61d32c
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.00587d2d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x15b4
mov edx, 0x61d354
xor ecx, ecx
call fcn.004b47e0
add esp, 0xc
push 0x15b4
push 0x61d370
push 0x61d38c
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.00587d2d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x15c3
mov edx, 0x61d3b4
xor ecx, ecx
call fcn.004b47e0
add esp, 0xc
push 0x15c3
push 0x61d3d0
push 0x61d3ec
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.00587d2d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x15cd
mov edx, 0x61d410
xor ecx, ecx
call fcn.004b47e0
add esp, 0xc
push 0x15cd
push 0x61d42c
push 0x61d448
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.00587d2d
nop
sub eax, 0x6a004b14
adc al, 75
add byte [eax - 0x29ffb4ec], ah
adc al, 0x4b
add ah, cl
int3