Function at 0x4b1b40
Capabilities:
Terminate process

Disassembly:
sub esp, 0x24
mov eax, dword [esp + 0x28]
push ebx
mov ebx, dword [esp + 0x38]
push ebp
push esi
push edi
push 3
mov dword [esp + 0x34], eax
xor edi, edi
mov eax, dword [esp + 0x40]
push 0x624f1c
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
push edx
xor edx, edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call fcn.004b0c00
mov esi, eax
add esp, 0xc
mov dword [esp + 0x28], esi
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add eax, 0xfffffffe
cmp eax, 3
ja case.default.0x4b1b96
jmp dword [eax*4 + 0x4b20ec]
push 2
push 0x624f20
push dword [ecx]
call fcn.0058c240
add esp, 0xc
test eax, eax
je 0x4b1bcd
mov eax, dword [esi]
push 2
push 0x624f24
push dword [eax]
call fcn.0058c240
add esp, 0xc
test eax, eax
jne 0x4b1c80
mov dword [esp + 0x18], 1
jmp 0x4b1c80
push 3
push 0x624f28
push dword [ecx]
call fcn.0058c240
add esp, 0xc
test eax, eax
je 0x4b1c06
mov eax, dword [esi]
push 3
push 0x624f2c
push dword [eax]
call fcn.0058c240
add esp, 0xc
test eax, eax
jne 0x4b1c80
mov dword [esp + 0x18], 2
jmp 0x4b1c80
push 4
push 0x624f30
push dword [ecx]
call fcn.0058c240
add esp, 0xc
test eax, eax
je 0x4b1bcd
mov eax, dword [esi]
push 4
push str.HTTP
push dword [eax]
call fcn.0058c240
add esp, 0xc
test eax, eax
jne 0x4b1c80
mov dword [esp + 0x18], 1
jmp 0x4b1c80
push 5
push 0x624f40
push dword [ecx]
call fcn.0058c240
add esp, 0xc
test eax, eax
je 0x4b1c06
mov eax, dword [esi]
push 5
push str.HTTPS
push dword [eax]
call fcn.0058c240
add esp, 0xc
test eax, eax
jne 0x4b1c80
mov dword [esp + 0x18], 2
jmp 0x4b1c80
mov dword [esp + 0x18], edi
mov eax, dword [esi + 4]
xor edx, edx
push 1
push 0x624f50
mov esi, dword [eax + 4]
mov ecx, dword [eax]
push esi
mov dword [esp + 0x30], ecx
call fcn.004b0c00
mov ebp, eax
add esp, 0xc
mov dword [esp + 0x20], ebp
mov eax, dword [ebp]
sub esi, dword [eax + 4]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4b1cfe
lea eax, [esi + 2]
push eax
call fcn.0058db11
mov ecx, eax
add esp, 4
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
test ecx, ecx
je 0x4b1fe7
test esi, esi
jne 0x4b1cdd
mov byte [ecx], 0x2f
mov eax, dword [eax]
mov byte [eax + 1], 0
jmp 0x4b1cfe
mov eax, dword [ebp]
lea edx, [esi + 2]
push esi
mov eax, dword [eax + 4]
add eax, dword [esp + 0x28]
push eax
call fcn.00401000
mov eax, dword [esp + 0x1c]
add esp, 8
mov eax, dword [eax]
mov byte [esi + eax], 0
mov ecx, dword [ebp]
xor edx, edx
push 1
push 0x624fb0
push dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004b0c00
mov ebp, eax
add esp, 0xc
cmp dword [ebp + 8], 1
jne 0x4b1d3a
cmp dword [esp + 0x18], 2
mov eax, 0x50
mov ecx, 0x1bb
cmove eax, ecx
movzx esi, ax
mov dword [esp + 0x14], esi
jmp 0x4b1dae
mov eax, dword [ebp + 4]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
cmp byte [ecx + eax - 1], 0x5d
jne 0x4b1d64
cmp dword [esp + 0x18], 2
mov eax, 0x50
mov ecx, 0x1bb
cmove eax, ecx
movzx esi, ax
mov dword [esp + 0x14], esi
jmp 0x4b1dae
lea eax, [ecx + 1]
push eax
call fcn.0058db11
mov esi, eax
add esp, 4
test esi, esi
je 0x4b2028
mov eax, dword [ebp + 4]
mov ecx, esi
mov edx, dword [eax + 4]
push edx
push dword [eax]
inc edx
call fcn.00401000
mov eax, dword [ebp + 4]
push esi
mov eax, dword [eax + 4]
mov byte [esi + eax], 0
call fcn.0058d50c
add esp, 0xc
movzx eax, ax
mov dword [esp + 0x14], eax
push esi
call fcn.0058c812
add esp, 4
mov ecx, dword [ebp]
mov eax, dword [ecx]
cmp byte [eax], 0x5b
jne 0x4b1e0d
mov eax, dword [esp + 0x20]
push ecx
push 1
push 0x625010
mov eax, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
call fcn.004b4410
mov esi, eax
add esp, 0xc
test esi, esi
jle 0x4b1e47
lea eax, [esi + 2]
push eax
call fcn.0058db11
mov edi, eax
add esp, 4
test edi, edi
je 0x4b2069
lea eax, [esi + 1]
mov ecx, edi
push eax
mov dword [esp + 0x20], eax
lea edx, [esi + 2]
mov eax, dword [ebp]
push dword [eax]
call fcn.00401000
mov byte [esi + edi + 1], 0
jmp 0x4b1e44
mov eax, dword [ecx + 4]
mov dword [esp + 0x1c], eax
lea esi, [eax + 1]
push esi
call fcn.0058db11
mov edi, eax
add esp, 4
test edi, edi
je 0x4b20aa
mov eax, dword [ebp]
mov edx, esi
push dword [esp + 0x1c]
mov ecx, edi
push dword [eax]
call fcn.00401000
mov eax, dword [esp + 0x24]
mov byte [eax + edi], 0
add esp, 8
mov eax, dword [ebp]
test eax, eax
je 0x4b1e62
nop
mov esi, dword [eax + 8]
push eax
call fcn.0058c812
add esp, 4
mov eax, esi
test esi, esi
jne 0x4b1e50
push ebp
call fcn.0058c812
mov ebp, dword [esp + 0x24]
add esp, 4
mov eax, dword [ebp]
test eax, eax
je 0x4b1e88
mov esi, dword [eax + 8]
push eax
call fcn.0058c812
add esp, 4
mov eax, esi
test esi, esi
jne 0x4b1e76
push ebp
call fcn.0058c812
mov ebp, dword [esp + 0x2c]
add esp, 4
mov eax, dword [ebp]
test eax, eax
je 0x4b1eb2
nop dword [eax]
mov esi, dword [eax + 8]
push eax
call fcn.0058c812
add esp, 4
mov eax, esi
test esi, esi
jne 0x4b1ea0
push ebp
call fcn.0058c812
add esp, 4
test ebx, ebx
je 0x4b1fa9
xorps xmm0, xmm0
movups xmmword [ebx], xmm0
movq qword [ebx + 0x10], xmm0
mov dword [ebx + 0x18], 0
test edi, edi
je 0x4b1fa9
cmp byte [edi], 0x5b
jne 0x4b1f67
mov esi, dword [esp + 0x1c]
mov edx, esi
push ecx
push 0x6250cc
mov ecx, edi
call fcn.004b44a0
add esp, 8
mov byte [esi + edi - 1], 0
test eax, eax
jle 0x4b1f19
mov byte [eax + edi], 0
inc eax
add eax, edi
push eax
call fcn.0058d50c
add esp, 4
mov esi, eax
jmp 0x4b1f1c
or esi, 0xffffffff
mov eax, 0x17
lea ebp, [ebx + 8]
mov word [ebx], ax
lea ecx, [edi + 1]
mov eax, dword [0x62b164]
test eax, eax
jne 0x4b1f40
call fcn.004b4b30
mov eax, dword [0x62b164]
lea ecx, [edi + 1]
cmp eax, 1
jne 0x4b1f4f
push ebp
push ecx
push 0x17
call dword [0x62b170]
test esi, esi
js 0x4b1f56
mov dword [ebx + 0x18], esi
mov esi, dword [esp + 0x14]
push esi
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebx + 2], ax
jmp 0x4b1fad
lea eax, [ebx + 4]
mov ecx, 2
push eax
mov edx, edi
mov word [ebx], cx
call fcn.004b4c00
mov esi, dword [esp + 0x18]
add esp, 4
test eax, eax
jne 0x4b1f9c
push ecx
push ebx
mov edx, esi
mov ecx, edi
call fcn.004b4ed0
add esp, 8
test eax, eax
jg 0x4b1f9c
xor eax, eax
mov word [ebx], ax
push esi
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebx + 2], ax
jmp 0x4b1fad
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4b1fb8
mov word [eax], si
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4b1fce
mov dword [eax], edi
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
test edi, edi
je 0x4b1fdb
push edi
call fcn.0058c812
add esp, 4
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x1597
mov edx, 0x624f54
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
push 0x1597
push 0x624f70
push 0x624f8c
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.005885bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x15b4
mov edx, 0x624fb4
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
push 0x15b4
push 0x624fd0
push 0x624fec
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.005885bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x15c3
mov edx, 0x625014
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
push 0x15c3
push 0x625030
push 0x62504c
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.005885bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x15cd
mov edx, 0x625070
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
push 0x15cd
push 0x62508c
push 0x6250a8
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.005885bd
nop
popfd
sbb ecx, dword [ebx]
ficomp dword [ebx]
dec ebx
add byte [eax], dl
sbb al, 0x4b
add byte [esi + 0x1c], al
dec ebx
add ah, cl
int3