Function at 0x492c90
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bc1a0
mov eax, dword fs:[0]
push eax
sub esp, 0x68c
mov eax, dword [0x61f138]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, ecx
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x47c], 0
lea ecx, [ebp - 0x9c]
push 0x12
push str.sims.aeroadmin.com
mov dword [ebp - 0x4a4], eax
mov byte [eax + 0x71], 1
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0xf
mov byte [ebp - 0x9c], 0
call fcn.004462c0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 1
call fcn.00491120
mov byte [ebp - 4], 2
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x488]
push 0
push eax
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0
call fcn.004988b0
mov ecx, dword [ebp - 0x4b0]
lea eax, [ebp - 0x4b0]
add esp, 8
push eax
push 0x4988d0
lea eax, [ebp - 0x488]
push eax
call fcn.004901d0
mov dword [ebp - 0x4dc], eax
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4d4], 0
push 0x14
mov byte [ebp - 4], 3
call fcn.0056eed3
mov esi, eax
add esp, 4
lea eax, [ebp - 0x4b0]
mov byte [esi + 4], 0
mov dword [esi], vtable.boost::asio::executor::impl_class_boost::asio::io_context::executor_type__class_std::allocator_void__.0
mov dword [esi + 8], 1
mov dword [esi + 0xc], eax
mov byte [ebp - 4], 4
mov ecx, esi
mov eax, dword [esi]
call dword [eax]
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 0x4cc], 1
mov byte [ebp - 4], 6
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
mov byte [ebp - 4], 5
push dword [ebp - 0x4a4]
push ecx
lea ecx, [ebp - 0x4d8]
call fcn.004966c0
push ecx
lea eax, [ebp - 0x4b0]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x158]
call fcn.00497fc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x528]
mov dword [ebp - 0x494], 0
mov byte [ebp - 0x490], 0
mov dword [ebp - 0x48c], 0x5e4408
call fcn.00448740
mov dword [ebp - 0x528], 0x5f1ec8
mov dword [ebp - 0x4f0], 0xffffffff
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0
lea eax, [ebp - 0x4ec]
mov byte [ebp - 4], 0xa
push eax
push 0x80
mov ecx, eax
call fcn.00461bf0
mov eax, dword [ebp - 0x51c]
mov ecx, dword [ebp - 0x4ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4fc]
mov dword [eax], 0
mov eax, dword [ebp - 0x518]
mov ecx, dword [ebp - 0x4ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x508]
lea edx, [ecx + 0x80]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x4f8]
mov dword [eax], edx
mov dword [ebp - 0x578], 0x5ec80c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x570]
mov dword [ebp - 0x47c], 0x40
mov dword [ebp - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x574], 0
call fcn.00436840
lea eax, [ebp - 0x528]
mov dword [ebp - 0x534], 0
push 0x20
lea ecx, [ebp - 0x570]
mov dword [ebp - 0x538], eax
call fcn.00448cd0
cmp dword [ebp - 0x538], 0
mov byte [ebp - 0x530], al
jne 0x492f3e
mov eax, dword [ebp - 0x564]
lea ecx, [ebp - 0x570]
push 0
or eax, 4
push eax
call fcn.004367c0
push 1
push ecx
lea eax, [ebp - 0x528]
mov dword [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00448670
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x38]
push 4
push str.http
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
call fcn.004462c0
xor eax, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00441720
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0xb8]
call fcn.00441720
mov dword [ebp - 0xf0], 0x400
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0xe4], 6
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x24]
cmp edx, 0x10
jb 0x493062
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x493058
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945c6
push edx
push ecx
call fcn.0056eec5
add esp, 8
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0xf0]
push eax
push ecx
lea eax, [ebp - 0x4c8]
push eax
call fcn.00495a80
mov edx, dword [ebp - 0x4c8]
mov eax, dword [ebp - 0x4c0]
mov ebx, dword [ebp - 0x4c4]
mov dword [ebp - 0x478], edx
mov dword [ebp - 0x4bc], edx
mov dword [ebp - 0x4b8], ebx
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4c0], 0
xor esi, esi
mov dword [ebp - 0x588], 0
mov dword [ebp - 0x584], esi
mov dword [ebp - 0x580], esi
mov byte [ebp - 4], 0x15
mov esi, dword [ebp - 0x494]
test esi, esi
je 0x493357
mov ecx, dword [ebp - 0x48c]
lea edx, [ebp - 0x38]
push esi
push edx
mov eax, dword [ecx]
call dword [eax + 0x14]
mov edx, str.resolve___failed:_n
mov byte [ebp - 4], 0x16
mov ecx, 0x6c4ae8
call fcn.00449a40
cmp dword [ebp - 0x24], 0x10
lea edx, [ebp - 0x38]
push dword [ebp - 0x28]
cmovae edx, dword [ebp - 0x38]
mov ecx, eax
call fcn.0044d730
add esp, 4
mov edx, 0x5f19a0
mov ecx, eax
call fcn.00449a40
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x24]
cmp edx, 0x10
jb 0x493174
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x49316a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945cb
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov byte [ebp - 4], 0x18
test ebx, ebx
je 0x49319d
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ebx + 4], eax
jne 0x49319d
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
lock xadd dword [ebx + 8], esi
dec esi
jne 0x49319d
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x4931db
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4931d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945d0
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x493230
mov ecx, dword [ebp - 0xd0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x493226
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945d5
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x5e8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x5ec], eax
lea eax, [ebp - 0x5d0]
mov byte [ebp - 4], 0x19
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0055c7c7
mov eax, dword [ebp - 0x578]
add esp, 4
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x578]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x57c], eax
lea eax, [ebp - 0x570]
mov byte [ebp - 4], 0x1a
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0055c7c7
add esp, 4
lea ecx, [ebp - 0x528]
call fcn.00494620
lea ecx, [ebp - 0x158]
call fcn.00496160
lea ecx, [ebp - 0x4dc]
call fcn.004959c0
push 0x6c4d5c
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x493309
call dword [sym.imp.WS2_32.dll_WSACleanup]
lea ecx, [ebp - 0x4b0]
call fcn.00438af0
mov edx, dword [ebp - 0x88]
cmp edx, 0x10
jb 0x494555
mov ecx, dword [ebp - 0x9c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x493348
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945da
push edx
push ecx
call fcn.0056eec5
add esp, 8
jmp 0x494555
mov ecx, 0x2af9
mov byte [ebp - 0x40], 1
mov eax, dword [ebp - 0x40]
or edi, 0xffffffff
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], 0x5e4408
lea esp, [esp]
test ecx, ecx
je 0x493851
test edx, edx
je 0x4933a2
xor eax, eax
cmp edx, eax
jne 0x493591
cmp dword [ebp - 0x47c], eax
jne 0x493591
mov edx, str.connect___failed_n
mov ecx, 0x6c4ae8
call fcn.00449a40
mov byte [ebp - 4], 0x1f
xor esi, esi
mov byte [ebp - 4], 0x20
test ebx, ebx
je 0x4933dd
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x4933dd
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
lock xadd dword [ebx + 8], edi
dec edi
jne 0x4933dd
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x49341b
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x493411
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945df
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x493470
mov ecx, dword [ebp - 0xd0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x493466
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945e4
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x5e8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x5ec], eax
lea eax, [ebp - 0x5d0]
mov byte [ebp - 4], 0x21
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0055c7c7
mov eax, dword [ebp - 0x578]
add esp, 4
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x578]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x57c], eax
lea eax, [ebp - 0x570]
mov byte [ebp - 4], 0x22
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0055c7c7
add esp, 4
lea ecx, [ebp - 0x528]
call fcn.00494620
lea ecx, [ebp - 0x158]
call fcn.00496160
lea ecx, [ebp - 0x4dc]
call fcn.004959c0
push 0x6c4d5c
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x493549
call dword [sym.imp.WS2_32.dll_WSACleanup]
lea ecx, [ebp - 0x4b0]
call fcn.00438af0
mov edx, dword [ebp - 0x88]
cmp edx, 0x10
jb 0x494555
mov ecx, dword [ebp - 0x9c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x493348
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4945e9
jmp 0x493348
cmp dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], al
mov dword [ebp - 0x18], 0x5e4408
je 0x4935f4
mov eax, dword [ebp - 0x158]
push 0
push 0
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
je 0x4935cf
sub esp, 8
mov ecx, eax
push dword [ebp - 0x154]
call fcn.00491ae0
mov ecx, dword [ebp - 0x154]
lea eax, [ebp - 0x20]
push eax
push 0
lea edx, [ebp - 0x150]
call fcn.00491390
mov eax, dword [ebp - 0x20]
add esp, 8
mov dword [ebp - 0x498], eax
jmp 0x493615
xor ecx, ecx
mov byte [ebp - 0xf8], al
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x498], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x5e4408
mov esi, dword [ebp - 0x148]
mov dword [ebp - 0x154], 0xffffffff
mov byte [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x493667
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x493667
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x493667
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x498], 0
jne 0x4945ee
test ebx, ebx
je 0x493680
lock inc dword [ebx + 4]
mov eax, dword [ebp - 0x478]
mov esi, dword [ebp - 0x47c]
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x44], eax
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, 0x6bca1af3
imul ecx
mov dword [ebp - 0x3c], esi
inc esi
sar edx, 5
mov eax, edx
mov dword [ebp - 0x40], ebx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x47c], esi
mov dword [ebp - 0x4b4], esi
cmp esi, eax
jne 0x49370f
xor eax, eax
mov esi, ebx
xor ebx, ebx
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], ebx
mov byte [ebp - 4], 0x1c
test esi, esi
je 0x493701
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x493701
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x493701
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
xor eax, eax
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 0x1d
lea edi, [ebp - 0x1a4]
imul esi, dword [ebp - 0x3c], 0x4c
mov ecx, 7
mov eax, dword [ebp - 0x484]
add esi, dword [eax]
cmp dword [ebp - 0x154], 0xffffffff
rep movsd dword es:[edi], dword [esi]
jne 0x4937d2
cmp word [ebp - 0x1a4], 2
lea eax, [ebp - 0x494]
mov ecx, dword [ebp - 0x158]
mov esi, 0x17
push eax
push 6
push 1
mov edi, 2
lea eax, [ebp - 0x154]
cmove esi, edi
lea ecx, [ecx + 0x14]
push esi
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00491c30
cmp dword [eax], 0
jne 0x4937c2
mov dword [ebp - 0x138], esi
mov ecx, 7
mov dword [ebp - 0x6c], edi
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x130]
mov byte [ebp - 0x134], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x68], 0
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x498], eax
test eax, eax
jne 0x49380f
cmp word [ebp - 0x1a4], 2
lea edx, [ebp - 0x1a4]
mov ecx, 0x10
mov eax, 0x1c
cmove eax, ecx
lea ecx, [ebp - 0x494]
push ecx
mov ecx, dword [ebp - 0x154]
push eax
call fcn.004914f0
mov eax, dword [ebp - 0x494]
add esp, 8
mov dword [ebp - 0x498], eax
mov byte [ebp - 4], 0x1e
or edi, 0xffffffff
mov esi, dword [ebp - 0x40]
test esi, esi
je 0x49383c
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x49383c
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x49383c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x498]
mov edx, dword [ebp - 0x478]
jmp 0x493380
mov esi, dword [ebp - 0x4a0]
lea eax, [ebp - 0x1d4]
push eax
mov ecx, dword [esi + 0x7c]
call fcn.0052ad40
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 0x23
mov ecx, dword [esi + 0x78]
push eax
call fcn.0052ad40
mov byte [ebp - 4], 0x24
call fcn.005025a0
lea ecx, [ebp - 0x27c]
push ecx
mov ecx, eax
call fcn.00492090
mov byte [ebp - 4], 0x25
call fcn.005025a0
lea ecx, [ebp - 0x1bc]
push ecx
mov ecx, eax
call fcn.00456c80
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
lea edx, [ebp - 0x234]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x264]
call fcn.004c65b0
lea edx, [ebp - 0x27c]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x204]
call fcn.004c65b0
mov byte [ebp - 4], 0x2c
call fcn.005025a0
push 0
add eax, 0x260
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00449440
add eax, 4
lea ecx, [ebp - 0x24c]
push eax
call fcn.004412c0
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x47c], 0x6c0
call fcn.00445c30
lea edx, [ebp - 0x24c]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1ec]
call fcn.004c65b0
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x2f
call fcn.00445c30
cmp dword [ebp - 0x1c0], 8
lea edx, [ebp - 0x1d4]
cmovae edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x480], edx
xor esi, esi
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x484], eax
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4939c0
sub ecx, dword [ebp - 0x484]
sar ecx, 1
cmp esi, ecx
jae 0x493a15
movzx eax, word [edx + esi*2]
push eax
lea eax, [ebp - 0x1c]
push str._04X
push eax
call fcn.00496840
lea ecx, [ebp - 0x1c]
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4939f3
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x170]
call fcn.00446440
mov edx, dword [ebp - 0x480]
inc esi
jmp 0x4939b2
cmp dword [ebp - 0x1a8], 8
lea edx, [ebp - 0x1bc]
cmovae edx, dword [ebp - 0x1bc]
xor esi, esi
mov dword [ebp - 0x480], edx
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x484], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x493a40
sub ecx, dword [ebp - 0x484]
sar ecx, 1
cmp esi, ecx
jae 0x493a95
movzx eax, word [edx + esi*2]
push eax
lea eax, [ebp - 0x34]
push str._04X
push eax
call fcn.00496860
lea ecx, [ebp - 0x34]
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493a73
sub ecx, edx
lea eax, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x188]
call fcn.00446440
mov edx, dword [ebp - 0x480]
inc esi
jmp 0x493a31
mov eax, 0x10624dd3
imul dword [0x6c4e0c]
sar edx, 6
mov ecx, edx
add edx, 0x4345
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
shl eax, 5
add eax, ecx
mov dword [ebp - 0x18], eax
call fcn.0051e130
mov dword [ebp - 0x480], eax
cmp dword [eax + 0x14], 0x10
jb 0x493ad3
mov eax, dword [eax]
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x1dc], 0
jbe 0x493b2a
lea eax, [ebp - 0x1ec]
mov edx, str.licKey
push eax
lea ecx, [ebp - 0x68]
call fcn.00464a00
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1a0]
push 0x5f1a04
mov edx, eax
mov dword [ebp - 0x47c], 0x6c1
call fcn.00464b30
add esp, 4
mov dword [ebp - 0x484], eax
mov dword [ebp - 4], 0x31
mov esi, 0x6c3
jmp 0x493b6f
push 1
push 0x5f1a04
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.004462c0
lea eax, [ebp - 0x108]
mov dword [ebp - 4], 0x32
mov dword [ebp - 0x484], eax
mov esi, 0x6c4
cmp dword [ebp - 0x1f4], 0
mov dword [ebp - 0x47c], esi
mov dword [ebp - 0x478], esi
jbe 0x493bdb
lea eax, [ebp - 0x204]
mov edx, str.simsEmailFrom
push eax
lea ecx, [ebp - 0x354]
call fcn.00464a00
add esp, 4
mov dword [ebp - 4], 0x33
lea ecx, [ebp - 0x33c]
or esi, 8
mov edx, eax
push 0x5f1a04
mov dword [ebp - 0x47c], esi
call fcn.00464b30
add esp, 4
mov dword [ebp - 0x498], eax
mov dword [ebp - 4], 0x34
mov esi, dword [ebp - 0x478]
or esi, 0x18
jmp 0x493c0f
push 1
push 0x5f1a04
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
call fcn.004462c0
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x498], eax
or esi, 0x20
lea edx, [ebp - 0x18]
mov dword [ebp - 0x47c], esi
lea ecx, [ebp - 0x324]
mov dword [ebp - 0x478], esi
call fcn.0048b530
mov esi, eax
mov edx, 0x6c4e0c
mov dword [ebp - 4], 0x36
lea ecx, [ebp - 0x30c]
call fcn.0048b530
push eax
mov edx, str.simsAeroAdminID
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2f4]
call fcn.00464ac0
add esp, 4
push 0x5f1a04
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x2dc]
call fcn.00464b30
add esp, 4
push str.simsComputerName
mov edx, eax
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x36c]
call fcn.00464b30
add esp, 4
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x3a
push ecx
mov edx, eax
lea ecx, [ebp - 0x2c4]
call fcn.00496750
add esp, 4
push 0x5f1a04
mov edx, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x2ac]
call fcn.00464b30
add esp, 4
push str.simsEmailTo
mov edx, eax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x294]
call fcn.00464b30
add esp, 4
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x3d
push ecx
mov edx, eax
lea ecx, [ebp - 0x474]
call fcn.00496750
add esp, 4
push 0x5f1a04
mov edx, eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x45c]
call fcn.00464b30
add esp, 4
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x444]
push dword [ebp - 0x498]
mov edx, eax
call fcn.00464ba0
add esp, 4
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x42c]
push str.simsMessage
mov edx, eax
call fcn.00464b30
add esp, 4
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x41
push ecx
mov edx, eax
lea ecx, [ebp - 0x414]
call fcn.00496750
add esp, 4
push 0x5f1a04
mov edx, eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3fc]
call fcn.00464b30
add esp, 4
push str.lang
mov edx, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3e4]
call fcn.00464b30
add esp, 4
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x3cc]
push dword [ebp - 0x480]
mov edx, eax
call fcn.00464b30
add esp, 4
push 0x5f1a04
mov edx, eax
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3b4]
call fcn.00464b30
add esp, 4
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x39c]
push dword [ebp - 0x484]
mov edx, eax
call fcn.00464ba0
add esp, 4
push 0x5f19c0
mov edx, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x384]
call fcn.00464b30
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x50]
call fcn.00464ba0
add esp, 4
lea ecx, [ebp - 0x84]
push eax
call fcn.004483b0
lea ecx, [ebp - 0x50]
call fcn.004414e0
lea ecx, [ebp - 0x384]
call fcn.004414e0
lea ecx, [ebp - 0x39c]
call fcn.004414e0
lea ecx, [ebp - 0x3b4]
call fcn.004414e0
lea ecx, [ebp - 0x3cc]
call fcn.004414e0
lea ecx, [ebp - 0x3e4]
call fcn.004414e0
lea ecx, [ebp - 0x3fc]
call fcn.004414e0
lea ecx, [ebp - 0x414]
call fcn.004414e0
lea ecx, [ebp - 0x42c]
call fcn.004414e0
lea ecx, [ebp - 0x444]
call fcn.004414e0
lea ecx, [ebp - 0x45c]
call fcn.004414e0
lea ecx, [ebp - 0x474]
call fcn.004414e0
lea ecx, [ebp - 0x294]
call fcn.004414e0
lea ecx, [ebp - 0x2ac]
call fcn.004414e0
lea ecx, [ebp - 0x2c4]
call fcn.004414e0
lea ecx, [ebp - 0x36c]
call fcn.004414e0
lea ecx, [ebp - 0x2dc]
call fcn.004414e0
lea ecx, [ebp - 0x2f4]
call fcn.004414e0
lea ecx, [ebp - 0x30c]
call fcn.004414e0
lea ecx, [ebp - 0x324]
call fcn.004414e0
mov eax, dword [ebp - 0x478]
test al, 0x20
je 0x493f0b
and eax, 0xffffffdf
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x478], eax
call fcn.004414e0
mov eax, dword [ebp - 0x478]
test al, 0x10
je 0x493f29
and eax, 0xffffffef
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0x478], eax
call fcn.004414e0
mov eax, dword [ebp - 0x478]
test al, 8
je 0x493f47
and eax, 0xfffffff7
lea ecx, [ebp - 0x354]
mov dword [ebp - 0x478], eax
call fcn.004414e0
mov eax, dword [ebp - 0x478]
test al, 4
je 0x493f65
and eax, 0xfffffffb
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x478], eax
call fcn.004414e0
mov eax, dword [ebp - 0x478]
test al, 2
je 0x493f83
and eax, 0xfffffffd
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x478], eax
call fcn.004414e0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 4], 0x2f
test al, 1
je 0x493f96
lea ecx, [ebp - 0x68]
call fcn.004414e0
sub esp, 8
lea ecx, [ebp - 0x698]
call fcn.00443510
mov edx, str.Header:
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x688]
call fcn.00449a40
cmp dword [ebp - 0x70], 0x10
lea edx, [ebp - 0x84]
push dword [ebp - 0x74]
cmovae edx, dword [ebp - 0x84]
mov ecx, eax
call fcn.0044d730
add esp, 4
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0x698]
push eax
call fcn.004433d0
push 0xe8
mov edx, str.dialogsims.cpp
mov byte [ebp - 4], 0x4a
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x68]
call fcn.004414e0
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 0x2f
call fcn.0043aef0
mov esi, dword [ebp - 0x74]
lea ecx, [ebp - 0x578]
mov edx, str.POST__sims_sims_new.php_HTTP_1.1_r_n
call fcn.00449a40
mov edx, str.Host:
mov ecx, eax
call fcn.00449a40
cmp dword [ebp - 0x88], 0x10
lea edx, [ebp - 0x9c]
push dword [ebp - 0x8c]
cmovae edx, dword [ebp - 0x9c]
mov ecx, eax
call fcn.0044d730
add esp, 4
mov edx, 0x5f1c74
mov ecx, eax
call fcn.00449a40
mov edx, str.User_Agent:_Mozilla_5.0__Windows__U__Windows_NT_6.1__ru__rv:1.9.2.25__Gecko_20111212_Firefox_3.6.25__r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Accept_Language:_ru_ru_ru_q0.8_en_us_q0.5_en_q0.3_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Accept_Encoding:_gzip_deflate_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Accept_Charset:_windows_1251_utf_8_q0.7__q0.7_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Keep_Alive:_1_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Connection:_close_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Referer:_http:__900100.net_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Content_Type:_application_x_www_form_urlencoded_r_n
mov ecx, eax
call fcn.00449a40
mov edx, str.Content_Length:
mov ecx, eax
call fcn.00449a40
push esi
mov ecx, eax
call fcn.00456240
mov edx, str._r_n_r_n
mov ecx, eax
call fcn.00449a40
cmp dword [ebp - 0x70], 0x10
lea edx, [ebp - 0x84]
push dword [ebp - 0x74]
cmovae edx, dword [ebp - 0x84]
mov ecx, eax
call fcn.0044d730
mov eax, dword [ebp - 0x508]
mov edx, 0
add esp, 4
mov byte [ebp - 0xf8], dl
mov dword [ebp - 0x44], edx
mov esi, edx
mov dword [ebp - 0x3c], 0x5e4408
mov ecx, dword [eax]
mov eax, dword [ebp - 0x50c]
mov eax, dword [eax]
sub ecx, eax
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x480], ecx
mov dword [ebp - 0x40], eax
je 0x4941b2
lea ecx, [ecx]
test edx, edx
mov dword [ebp - 0x18], 0
mov eax, 0x10000
cmovne eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
jne 0x4941b2
mov eax, dword [ebp - 0x484]
cmp esi, ecx
mov edx, esi
cmovae edx, ecx
add eax, edx
sub ecx, edx
cmp ecx, dword [ebp - 0x18]
mov dword [ebp - 0x49c], eax
lea eax, [ebp - 0x44]
cmovae ecx, dword [ebp - 0x18]
push eax
push ecx
lea eax, [ebp - 0x49c]
mov dword [ebp - 0x498], ecx
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.00498c50
mov ecx, dword [ebp - 0x480]
add esi, eax
mov edx, dword [ebp - 0x44]
cmp esi, ecx
jb 0x494150
mov eax, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x4fc]
mov eax, dword [eax]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x50c]
mov eax, dword [eax]
mov dword [ebp - 0x47c], eax
mov eax, dword [ecx]
add eax, dword [ebp - 0x47c]
cmp eax, dword [ebp - 0x484]
jae 0x49421a
mov eax, dword [ebp - 0x51c]
mov ecx, dword [ebp - 0x4ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [ebp - 0x47c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4fc]
mov ecx, dword [ebp - 0x484]
sub ecx, dword [ebp - 0x47c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x4fc]
mov eax, dword [ebp - 0x50c]
mov eax, dword [eax]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x508]
mov eax, dword [eax]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x480]
add eax, esi
cmp eax, dword [ebp - 0x484]
jbe 0x494252
mov esi, dword [ebp - 0x484]
sub esi, dword [ebp - 0x480]
sub dword [ecx], esi
mov eax, dword [ebp - 0x50c]
add dword [eax], esi
test edx, edx
jne 0x4945fb
lea eax, [ebp - 0x528]
push ecx
mov dword [ebp - 0x18], eax
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x494]
push eax
push dword [ebp - 0x4a4]
lea ecx, [ebp - 0x158]
call fcn.00498130
add esp, 0xc
call fcn.00438a80
push eax
push 2
lea ecx, [ebp - 0x44]
call fcn.00436dd0
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x44]
jne 0x4942d5
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 8]
mov eax, edx
mov esi, dword [ecx + 0xc]
or eax, esi
jne 0x4942c5
cmp dword [ebp - 0x48c], ecx
sete al
test al, al
jne 0x494305
jmp 0x4942d5
mov eax, dword [ebp - 0x48c]
cmp dword [eax + 8], edx
jne 0x4942d5
cmp dword [eax + 0xc], esi
je 0x494305
mov edx, str.read___failed_n
mov ecx, 0x6c4ae8
call fcn.00449a40
mov ecx, dword [ebp - 0x4a0]
push 1
mov eax, dword [ecx + 0x84]
push dword [eax + 0x10]
push dword [ecx + 0x10]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
sub esp, 8
lea ecx, [ebp - 0x698]
call fcn.00443510
lea eax, [ebp - 0x528]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [ebp - 0x688]
call fcn.00495680
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x698]
call fcn.004433d0
push 0xfb
mov edx, str.dialogsims.cpp
mov byte [ebp - 4], 0x4c
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x68]
call fcn.004414e0
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 0x2f
call fcn.0043aef0
mov esi, dword [ebp - 0x154]
cmp esi, 0xffffffff
jne 0x49439b
push 0x5e4408
push 0x2719
lea ecx, [ebp - 0x44]
call fcn.00436dd0
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48c], eax
jmp 0x4943fe
push 0
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push 2
push esi
call dword [sym.imp.WS2_32.dll_shutdown]
push 0x5e4408
mov esi, eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00436dd0
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ebp - 0x494], edx
mov dword [ebp - 0x490], ecx
mov dword [ebp - 0x48c], eax
test esi, esi
jne 0x494404
xor edx, edx
mov dword [ebp - 0x48c], 0x5e4408
mov byte [ebp - 0xf8], dl
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x494], edx
test edx, edx
jne 0x494608
lea ecx, [ebp - 0x158]
call fcn.00495360
mov ecx, dword [ebp - 0x4a0]
push 1
mov eax, dword [ecx + 0x80]
push dword [eax + 0x10]
push dword [ecx + 0x10]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [ebp - 0x1ec]
call fcn.004414e0
lea ecx, [ebp - 0x204]
call fcn.004414e0
lea ecx, [ebp - 0x264]
call fcn.004414e0
lea ecx, [ebp - 0x21c]
call fcn.004414e0
lea ecx, [ebp - 0x188]
call fcn.004414e0
lea ecx, [ebp - 0x170]
call fcn.004414e0
lea ecx, [ebp - 0x84]
call fcn.004414e0
lea ecx, [ebp - 0x1bc]
call fcn.00445c30
lea ecx, [ebp - 0x27c]
call fcn.00445c30
lea ecx, [ebp - 0x234]
call fcn.00445c30
lea ecx, [ebp - 0x1d4]
call fcn.00445c30
mov byte [ebp - 4], 0x4d
xor esi, esi
mov byte [ebp - 4], 0x4e
test ebx, ebx
je 0x4944dd
mov eax, edi
lock xadd dword [ebx + 4], eax
jne 0x4944dd
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
lock xadd dword [ebx + 8], edi
dec edi
jne 0x4944dd
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
lea ecx, [ebp - 0xb8]
call fcn.004414e0
lea ecx, [ebp - 0xd0]
call fcn.004414e0
lea ecx, [ebp - 0x5e8]
call fcn.004448e0
lea ecx, [ebp - 0x578]
call fcn.00444870
lea ecx, [ebp - 0x528]
call fcn.00494620
lea ecx, [ebp - 0x158]
call fcn.00496160
lea ecx, [ebp - 0x4dc]
call fcn.004959c0
push 0x6c4d5c
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x49453f
call dword [sym.imp.WS2_32.dll_WSACleanup]
lea ecx, [ebp - 0x4b0]
call fcn.00438af0
lea ecx, [ebp - 0x9c]
call fcn.004414e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0056eeb4
mov esp, ebp
pop ebp
ret
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
mov edx, str.close
lea ecx, [ebp - 0x20]
call fcn.004389a0
mov edx, str.write
lea ecx, [ebp - 0x44]
call fcn.004389a0
mov edx, str.shutdown
lea ecx, [ebp - 0x494]
call fcn.004389a0
int3