Function at 0x4dec50
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x564896
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x24fc
call fcn.00527220
push ebx
mov ebx, ecx
push esi
push edi
mov edi, dword [ebx + 0x2eb0]
mov dword [ebp - 0x10], esp
test edi, edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 4], 0
jne 0x4decc8
mov al, byte [ebx + 0x2e81]
test al, al
jne 0x4dfb13
mov al, byte [ebx + 0x2e82]
test al, al
jne 0x4dfb13
mov byte [ebx + 0x2e82], 1
mov eax, 0x755e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x4ded0d
mov al, byte [ebx + 0x2e81]
test al, al
jne 0x4dfb13
mov al, byte [ebx + 0x2e82]
test al, al
jne 0x4dfb13
mov byte [ebx + 0x2e82], 1
mov eax, 0x755e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x2e84]
test eax, eax
jne 0x4ded63
push 0x38
call fcn.0054276d
mov ecx, eax
add esp, 4
mov dword [ebp - 0x38], ecx
test ecx, ecx
mov byte [ebp - 4], 1
je 0x4ded57
mov eax, dword [ebx + 0x7c]
mov edx, dword [eax + 0x34]
push edx
mov edx, dword [eax + 0x1c]
push edx
mov edx, dword [eax + 0x18]
push edx
mov edx, dword [eax + 0x24]
push edx
mov edx, dword [eax + 0x14]
push edx
mov edx, dword [eax + 8]
push edx
mov edx, dword [eax + 4]
mov eax, dword [eax]
push edx
push eax
call fcn.004fd000
jmp 0x4ded59
xor eax, eax
mov byte [ebp - 4], 0
mov dword [ebx + 0x2e84], eax
mov ecx, ebx
call fcn.004e6240
mov ecx, dword [0x5c2a74]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebx + 0x2eb0]
push 0x7cf
lea eax, [ebp - 0x1d3c]
push edx
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x44], 0x7d0
call fcn.005270a0
add esp, 0xc
lea ecx, [ebp - 0x1168]
mov byte [ebp - 0x156d], 0
call fcn.004c8f20
lea ecx, [ebp - 0x1d3c]
push 0
push ecx
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 3
call fcn.004c9080
test eax, eax
jne 0x4dee7b
mov edx, dword [0x5c2a74]
mov dword [ebp - 0x14], edx
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x1d3c]
push eax
push ecx
mov ecx, ebx
mov byte [ebp - 4], 4
call fcn.004e6a30
and eax, 0xff
mov dword [ebp - 0x38], eax
jne 0x4dedfd
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
jmp 0x4dee42
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x1d3c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x1d3c]
push ecx
lea ecx, [ebp - 0x1168]
call fcn.004c9080
test eax, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
jne 0x4dee76
call fcn.005421be
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 2
call fcn.004c8f60
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.005421be
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.005421be
mov edx, dword [ebx + 0x7c]
push 0x5a4038
mov dword [edx + 0x1e0], 0
mov eax, dword [ebx + 0x7c]
mov cl, byte [ebp - 0x4c]
mov byte [eax + 0x1e4], cl
mov edx, dword [ebp - 0x1160]
push edx
call fcn.0052f680
add esp, 8
test eax, eax
je 0x4deec3
lea eax, [ebp - 0x44]
push 0x2000000
push eax
mov eax, dword [ebp - 0x1138]
push eax
push eax
call dword [sym.imp.WININET.dll_InternetCanonicalizeUrlA]
mov ecx, dword [ebp - 0x1138]
push 0x2f
push ecx
call fcn.00526d20
add esp, 8
test eax, eax
je 0x4deede
inc eax
mov dword [ebp - 0x20], eax
jmp 0x4deee7
mov edx, dword [ebp - 0x1138]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x1148]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4deff4
mov esi, dword [ebx + 0x7c]
mov dword [ebp - 0x14], edx
mov eax, dword [esi + 0xc]
test eax, eax
je 0x4def15
push eax
call fcn.00542796
add esp, 4
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0xc], edx
jne 0x4def44
push str.URL::set_userName:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
jmp 0x4df8f5
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebp - 0x1140]
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4defdc
mov esi, dword [ebx + 0x7c]
mov edi, edx
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 0x10]
test eax, eax
je 0x4def90
push eax
call fcn.00542796
add esp, 4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0x10], edx
jne 0x4defbc
push str.URL::set_password:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
jmp 0x4df8f5
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x2e7c]
test ecx, ecx
je 0x4df1d6
call fcn.004ea240
jmp 0x4df1dd
mov ecx, dword [ebp - 0x1160]
push 0x5a4038
push ecx
call fcn.0052f680
add esp, 8
test eax, eax
je 0x4df0f9
mov edx, dword [ebx + 0x7c]
cmp dword [edx + 0x24], 2
jne 0x4df035
mov eax, dword [ebp - 0x1160]
push 0x5a407c
push eax
call fcn.0052f680
add esp, 8
test eax, eax
je 0x4df0f9
mov ecx, dword [ebx + 0x7c]
cmp dword [ecx + 0x24], 1
jne 0x4df05a
mov edx, dword [ebp - 0x1160]
push 0x5a4030
push edx
call fcn.0052f680
add esp, 8
test eax, eax
je 0x4df0f9
mov eax, dword [ebx + 0x7c]
mov esi, dword [ebp - 0x1154]
mov ecx, dword [eax]
mov edi, ecx
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x4df08b
test al, al
je 0x4df087
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x4df08b
add esi, 2
add edi, 2
test al, al
jne 0x4df067
xor eax, eax
jmp 0x4df090
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4df1dd
push str.rapidshare.com
push ecx
call fcn.005271a0
add esp, 8
test eax, eax
je 0x4df0c6
mov eax, dword [ebp - 0x1154]
push str.rapidshare.com
push eax
call fcn.005271a0
add esp, 8
test eax, eax
jne 0x4df1dd
mov ecx, dword [ebx + 0x7c]
push str.rapidshare.de
mov edx, dword [ecx]
push edx
call fcn.005271a0
add esp, 8
test eax, eax
je 0x4df0f9
mov eax, dword [ebp - 0x1154]
push str.rapidshare.de
push eax
call fcn.005271a0
add esp, 8
test eax, eax
jne 0x4df1dd
mov esi, dword [ebx + 0x7c]
mov eax, dword [esi + 0xc]
test eax, eax
je 0x4df10c
push eax
call fcn.00542796
add esp, 4
mov edi, str.anonymous
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0xc], edx
jne 0x4df13d
push str.URL::set_userName:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
jmp 0x4df8f5
mov edi, str.anonymous
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebx + 0x7c]
mov eax, dword [esi + 0x10]
test eax, eax
je 0x4df172
push eax
call fcn.00542796
add esp, 4
mov edi, str.IEUser_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0x10], edx
jne 0x4df1a3
push str.URL::set_password:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
jmp 0x4df8f5
mov edi, str.IEUser_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x2e7c]
test ecx, ecx
je 0x4df1d6
call fcn.004ea240
jmp 0x4df1dd
mov ecx, ebx
call fcn.004de120
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00542347
mov edx, dword [ebp - 0x1130]
lea ecx, [ebp - 0x1c]
push edx
call fcn.0054259a
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + 8]
push eax
push ecx
call fcn.00526f6c
add esp, 8
test eax, eax
je 0x4df295
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x4df317
mov eax, dword [ebx + 0x7c]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [eax + 8]
test eax, eax
je 0x4df237
push eax
call fcn.00542796
add esp, 4
mov dl, byte [0x5c6ff0]
test esi, esi
mov byte [ebp - 0x15], dl
jne 0x4df247
lea esi, [ebp - 0x15]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov ecx, dword [ebp - 0x14]
add esp, 4
mov edx, eax
test edx, edx
mov dword [ecx + 8], edx
jne 0x4df276
push str.URL::set_fileName__:_Not_enough_memory__n
call fcn.00507f00
jmp 0x4df8f5
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0x2e88]
test edi, edi
je 0x4df7b2
mov edx, dword [ebx + 0x7c]
mov al, byte [edx + 0x343]
test al, al
je 0x4df7b2
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edi, dword [edx]
not ecx
dec ecx
mov esi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea ecx, [esi + ecx + 0x10]
push ecx
call fcn.0054276d
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x7c]
add esp, 4
mov ecx, dword [eax + 0x14]
cmp ecx, 0x50
jne 0x4df2eb
cmp dword [eax + 0x24], 1
je 0x4df301
cmp ecx, 0x1bb
jne 0x4df6a7
cmp dword [eax + 0x24], 2
jne 0x4df6a7
lea edx, [ebp - 0x3c]
push 0x5c6ff0
push edx
call fcn.00527718
add esp, 8
jmp 0x4df6b9
mov ecx, dword [ebx + 0x7c]
push 0x5c
mov edx, dword [ecx + 0x30]
push edx
call fcn.00526d20
add esp, 8
mov dword [ebp - 0x24], eax
inc eax
push eax
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov esi, dword [ebp - 0x1c]
test eax, eax
mov eax, dword [ebx + 0x7c]
je 0x4df666
mov dword [ebp - 0x14], eax
mov eax, dword [eax + 8]
test eax, eax
je 0x4df358
push eax
call fcn.00542796
add esp, 4
mov cl, byte [0x5c6ff0]
test esi, esi
mov byte [ebp - 0x15], cl
jne 0x4df368
lea esi, [ebp - 0x15]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov ecx, dword [ebp - 0x14]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x4df397
push str.URL::set_fileName__:_Not_enough_memory__n
call fcn.00507f00
jmp 0x4df8f5
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebx + 0x2e88]
test edx, edx
je 0x4df419
mov ecx, dword [ebx + 0x7c]
xor eax, eax
mov edi, dword [ecx]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, edx
mov esi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esi + ecx + 0x100]
push edx
call fcn.0054276d
mov ecx, dword [ebx + 0x7c]
add esp, 4
mov esi, eax
mov eax, dword [ebx + 0x2e88]
mov edx, dword [ecx]
push eax
push edx
push str.The_server_sent_new_location_and_new_filename_n__Old_URL:__s_s___n
push esi
call fcn.00527718
add esp, 0x10
mov ecx, ebx
push esi
call fcn.004cfa50
push esi
call fcn.00542796
add esp, 4
mov edi, dword [ebp - 0x1130]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x4df295
mov eax, dword [ebp - 0x24]
push 0x2e
push eax
call fcn.00526d20
mov ecx, dword [ebx + 0x7c]
add esp, 8
mov esi, eax
mov edx, dword [ecx + 0x34]
test edx, edx
je 0x4df467
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 3
jbe 0x4df467
push 0x2e
push edx
call fcn.00526d20
add esp, 8
mov esi, eax
mov edi, dword [ebp - 0x20]
push 0x2e
push edi
call fcn.00526d20
add esp, 8
test eax, eax
je 0x4df295
test esi, esi
je 0x4df497
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
neg eax
sbb eax, eax
neg eax
test eax, eax
je 0x4df295
mov eax, dword [ebx + 0x7c]
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x4df295
lea edx, [ebp - 0x156c]
lea ecx, [ebp - 0x146c]
push edx
lea edx, [ebp - 0x1268]
push ecx
push edx
mov edx, dword [eax + 0x34]
lea ecx, [ebp - 0x28]
push ecx
push edx
call fcn.0052776a
mov eax, dword [0x5c2a74]
add esp, 0x14
mov dword [ebp - 0x24], eax
push edi
lea ecx, [ebp - 0x24]
push 0x5a3e24
push ecx
mov byte [ebp - 4], 5
call fcn.0053afda
add esp, 0xc
push 0x25
push edi
call fcn.00526d60
add esp, 8
test eax, eax
je 0x4df543
mov edi, dword [ebp - 0x20]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x7d0
jae 0x4df543
mov edi, dword [ebp - 0x20]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x250c]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp - 0x250c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x24]
push ecx
push edx
call fcn.00505f10
add esp, 8
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x1268]
push eax
lea edx, [ebp - 0x28]
push ecx
push edx
lea eax, [ebp - 0x136c]
push 0x5a47ec
push eax
call fcn.00527718
add esp, 0x14
lea ecx, [ebp - 0x136c]
push ecx
mov ecx, dword [ebx + 0x7c]
call fcn.00509b70
mov edx, dword [ebx + 0x2e7c]
mov eax, dword [edx + 0x64]
test eax, eax
je 0x4df631
mov ecx, dword [ebx + 0x7c]
mov edx, dword [ecx + 0x3c0]
test edx, edx
jne 0x4df599
push eax
call fcn.0050a460
mov esi, dword [ebx + 0x7c]
mov eax, dword [esi + 0x3c0]
test eax, eax
je 0x4df631
mov edx, dword [esi + 0x34]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push 1
push eax
mov eax, dword [esi + 0x3c0]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push str.LocalNameForSave
push eax
call esi
mov ecx, dword [0x5c2a74]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebx + 0x7c]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 6
mov eax, dword [edx + 0x34]
push eax
push 0x5a3e24
push ecx
call fcn.0053afda
mov edx, dword [ebp - 0x14]
add esp, 0xc
push edx
call fcn.00507990
mov edx, dword [ebp - 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push eax
push eax
mov eax, dword [ebx + 0x7c]
push str.EncLNFS
mov ecx, dword [eax + 0x3c0]
push ecx
call esi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.005421be
mov eax, dword [ebx + 0x2e7c]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4df655
mov edx, dword [eax + 0x64]
mov eax, dword [ecx]
push edx
push 0x13c9
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.005421be
jmp 0x4df295
mov dword [ebp - 0x14], eax
mov eax, dword [eax + 8]
test eax, eax
je 0x4df679
push eax
call fcn.00542796
add esp, 4
mov cl, byte [0x5c6ff0]
test esi, esi
mov byte [ebp - 0x15], cl
jne 0x4df689
lea esi, [ebp - 0x15]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov ecx, dword [ebp - 0x14]
add esp, 4
mov edx, eax
jmp 0x4df260
push ecx
lea eax, [ebp - 0x3c]
push str.:_ld
push eax
call fcn.00527718
add esp, 0xc
mov ecx, dword [ebx + 0x7c]
mov eax, dword [ecx + 0x24]
cmp eax, 1
mov eax, 0x5a407c
je 0x4df6ce
mov eax, 0x5a4030
mov edx, dword [ebx + 0x2e88]
mov ecx, dword [ecx]
mov edi, dword [ebp - 0x14]
push edx
lea edx, [ebp - 0x3c]
push edx
push ecx
push eax
push str._s:___s_s_s
push edi
call fcn.00527718
mov esi, dword [ebx + 0x7c]
add esp, 0x18
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4df701
push eax
call fcn.00542796
add esp, 4
test edi, edi
jne 0x4df70a
mov dword [esi + 0x18], edi
jmp 0x4df76a
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x4df71e
mov dword [esi + 0x18], eax
jmp 0x4df76a
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0x18], edx
jne 0x4df74a
push str.URL::set_Referer__:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
jmp 0x4df76a
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x2e7c]
test eax, eax
je 0x4df792
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4df792
mov edx, dword [eax + 0x64]
mov eax, dword [ecx]
push edx
push 0x13ce
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00542796
mov edx, dword [ebx + 0x7c]
add esp, 4
mov byte [edx + 0x342], 0
mov eax, dword [ebx + 0x7c]
mov byte [eax + 0x344], 0
mov ecx, dword [ebp - 0x20]
mov byte [ecx], 0
mov ecx, dword [ebx + 0x2e84]
test ecx, ecx
je 0x4dfb29
lea edx, [ebp - 0x1d3c]
push edx
call fcn.004fd320
test eax, eax
jne 0x4dfb29
mov al, byte [ebx + 0x2e81]
test al, al
jne 0x4dfaf8
mov al, byte [ebx + 0x2e82]
test al, al
jne 0x4dfaf8
mov eax, dword [0x5c2a74]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x34]
push eax
lea edx, [ebp - 0x24]
push ecx
lea eax, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x38]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x28]
push edx
lea ecx, [ebp - 0x2c]
push eax
push ecx
mov ecx, dword [ebx + 0x2e84]
mov byte [ebp - 4], 0xc
call fcn.004fd260
test al, al
je 0x4dfab0
mov ecx, dword [ebx + 0x2e84]
mov byte [ebx + 0x2e82], 1
call fcn.004fd230
mov eax, dword [ebx + 0x7c]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x24], edx
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x14], ecx
mov esi, dword [ebx + 0x7c]
mov edx, dword [ebp - 0x2c]
mov eax, dword [esi]
mov dword [ebp - 0x14], edx
test eax, eax
je 0x4df880
push eax
call fcn.00542796
add esp, 4
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi], edx
jne 0x4df926
push str.URL::set_serverName__:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xb
call fcn.005421be
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xa
call fcn.005421be
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.005421be
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.005421be
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.005421be
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.005421be
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 2
call fcn.004c8f60
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.005421be
mov eax, 0x753b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0x7c]
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x14], edi
mov eax, dword [edi + 4]
test eax, eax
je 0x4df95f
push eax
call fcn.00542796
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x4df96a
mov dword [edi + 4], edx
jmp 0x4df9c9
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x4df980
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], edx
jmp 0x4df9c9
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov ecx, dword [ebp - 0x14]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 4], edx
jne 0x4df9aa
push str.URL::set_serverPath__:_Not_enough_memory__n
jmp 0x4df8a8
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ebx, dword [ebx + 0x7c]
mov esi, dword [ebp - 0x20]
mov eax, dword [ebx + 8]
test eax, eax
je 0x4df9df
push eax
call fcn.00542796
add esp, 4
mov cl, byte [0x5c6ff0]
test esi, esi
mov byte [ebp - 0x15], cl
jne 0x4df9ef
lea esi, [ebp - 0x15]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [ebx + 8], edx
jne 0x4dfa18
push str.URL::set_fileName__:_Not_enough_memory__n
mov ecx, ebx
jmp 0x4df8a8
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp - 4], 0xb
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x30]
call fcn.005421be
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xa
call fcn.005421be
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.005421be
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.005421be
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.005421be
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.005421be
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 2
call fcn.004c8f60
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.005421be
mov eax, 0x755e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xb
call fcn.005421be
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xa
call fcn.005421be
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.005421be
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.005421be
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.005421be
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.005421be
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 2
call fcn.004c8f60
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.005421be
mov eax, 0x7547
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x7c]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x4dfc11
mov ecx, dword [ebp - 0x1154]
mov edx, dword [eax]
push ecx
push edx
call fcn.005271a0
add esp, 8
test eax, eax
jne 0x4dfc11
mov eax, dword [ebx + 0x7c]
mov edx, dword [ebp - 0x1154]
mov ecx, dword [eax]
push ecx
push edx
call fcn.005271a0
add esp, 8
test eax, eax
jne 0x4dfc11
mov eax, dword [ebx + 0x7c]
push 0x2e
mov ecx, dword [eax]
push ecx
call fcn.00526d60
mov esi, eax
add esp, 8
test esi, esi
je 0x4dfba8
inc esi
push 0x2e
push esi
call fcn.00526d60
add esp, 8
test eax, eax
je 0x4dfba8
mov edx, dword [ebp - 0x1154]
push esi
push edx
call fcn.005271a0
add esp, 8
test eax, eax
jne 0x4dfc11
mov eax, dword [ebp - 0x1154]
push 0x2e
push eax
call fcn.00526d60
mov esi, eax
add esp, 8
test esi, esi
je 0x4dfbe2
inc esi
push 0x2e
push esi
call fcn.00526d60
add esp, 8
test eax, eax
je 0x4dfbe2
mov ecx, dword [ebx + 0x7c]
push esi
mov edx, dword [ecx]
push edx
call fcn.005271a0
add esp, 8
test eax, eax
jne 0x4dfc11
mov eax, dword [ebx + 0x7c]
mov byte [ebp - 4], 0xd
mov eax, dword [eax + 0x1c]
push eax
call fcn.00542796
add esp, 4
jmp 0x4dfc00
mov ecx, dword [ebx + 0x7c]
mov dword [ebp - 4], 3
mov dword [ecx + 0x1c], 0
mov esi, dword [ebx + 0x7c]
mov edi, dword [ebp - 0x1154]
mov dword [ebp - 0x38], edi
mov eax, dword [esi]
test eax, eax
je 0x4dfc2c
push eax
call fcn.00542796
add esp, 4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi], edx
jne 0x4dfc57
push str.URL::set_serverName__:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
jmp 0x4df8f5
mov edi, dword [ebp - 0x38]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x114c]
mov ecx, dword [ebx + 0x7c]
and eax, 0xffff
mov dword [ecx + 0x14], eax
mov esi, dword [ebx + 0x7c]
mov edi, dword [ebp - 0x1138]
mov eax, dword [esi + 4]
mov dword [ebp - 0x14], edi
test eax, eax
je 0x4dfca4
push eax
call fcn.00542796
add esp, 4
xor edx, edx
cmp edi, edx
je 0x4dfd05
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4dfd05
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0054276d
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 4], edx
jne 0x4dfce3
push str.URL::set_serverPath__:_Not_enough_memory__n
mov ecx, esi
call fcn.00507f00
jmp 0x4df8f5
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4dfd08
mov dword [esi + 4], edx
mov ecx, dword [ebp - 0x1160]
mov edi, 0x5a4038
mov esi, ecx
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x4dfd39
test al, al
je 0x4dfd35
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x4dfd39
add esi, 2
add edi, 2
test al, al
jne 0x4dfd15
xor eax, eax
jmp 0x4dfd3e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4dfdb8
mov edi, 0x5a407c
mov esi, ecx
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x4dfd6d
test al, al
je 0x4dfd69
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x4dfd6d
add esi, 2
add edi, 2
test al, al
jne 0x4dfd49
xor eax, eax
jmp 0x4dfd72
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4dfd7d
mov eax, 1
jmp 0x4dfdb8
mov edi, 0x5a402c
mov esi, ecx
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x4dfdac
test al, al
je 0x4dfda8
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x4dfdac
add esi, 2
add edi, 2
test al, al
jne 0x4dfd84
xor eax, eax
jmp 0x4dfdb1
sbb eax, eax
sbb eax, 0xffffffff
neg eax
sbb eax, eax
add eax, 3
mov ecx, dword [ebx + 0x7c]
push 0x5c6ff0
mov dword [ecx + 0x24], eax
mov eax, dword [ebx + 0x7c]
mov byte [eax + 0x1ff], 1
mov ecx, dword [ebx + 0x7c]
add ecx, 0x1ec
call fcn.00542347
mov ecx, dword [ebx + 0x7c]
mov byte [ecx + 0x1e8], 0
mov edx, dword [ebx + 0x7c]
push edx
mov byte [ebx + 0x8c], 0
call fcn.0049dd80
add esp, 4
mov ecx, ebx
call fcn.004de120
mov eax, dword [ebx + 0x78]
test eax, eax
jne 0x4dfe84
mov eax, dword [ebx + 0x2e7c]
push 0
push 0
mov ecx, dword [eax + 0x64]
push ecx
mov ecx, dword [ebx + 0x7c]
call fcn.00508cd0
mov edx, dword [ebx + 0x70]
mov eax, dword [edx]
mov eax, dword [eax]
test eax, eax
je 0x4dfe3e
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0x1390
push 0x111
push eax
call esi
jmp 0x4dfe44
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebx + 0x2e7c]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4dfe64
mov edx, dword [eax + 0x64]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x2e7c]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x4dfe84
mov edx, dword [eax + 0x64]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x2eb0]
mov byte [ebp - 4], 0xf
push eax
call fcn.00542796
add esp, 4
jmp 0x4dfea2
mov ecx, dword [ebp - 0x1160]
push 0x5a4038
push ecx
mov dword [ebp - 4], 3
mov dword [ebx + 0x2eb0], 0
call fcn.0052f680
add esp, 8
test eax, eax
jne 0x4dff07
mov edx, dword [ebx + 0xa0]
cmp dword [edx], 0
jne 0x4dff07
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 2
call fcn.004c8f60
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.005421be
mov eax, 0x7563
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 2
call fcn.004c8f60
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.005421be
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret