Function at 0x56ef90
Capabilities:
Check http status code
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x62b6b6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x29c4
call fcn.005e6510
push ebx
mov ebx, ecx
push esi
push edi
mov eax, dword [ebx + 0x3220]
mov dword [ebp - 0x10], esp
xor edi, edi
push eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], edi
call fcn.00571980
mov edx, dword [ebx + 0x3220]
mov esi, eax
mov ecx, esi
push 0xf
add ecx, edx
push str.content_length:
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f0f4
mov al, byte [ebp + 8]
test al, al
je 0x56f0c2
mov edx, dword [ebx + 0x3220]
lea edi, [ebx + 0x31f8]
push edi
push str._I64d
lea eax, [esi + edx + 0xf]
push eax
call fcn.005e68f0
mov eax, dword [edi]
xor edx, edx
add esp, 0xc
cmp eax, edx
jne 0x56f089
cmp dword [edi + 4], edx
jne 0x56f089
mov ecx, dword [ebx + 0x3220]
lea esi, [esi + ecx + 0xf]
cmp byte [esi], 0x20
jne 0x56f03c
inc esi
jmp 0x56f034
cmp byte [esi], 0x30
jne 0x56f052
mov eax, dword [ebx + 0x31e8]
cmp eax, edx
je 0x56f052
mov byte [eax + 0x85d], 1
cmp dword [ebx + 0x4c], edx
jl 0x56f089
jg 0x56f05e
cmp dword [ebx + 0x48], edx
jbe 0x56f089
mov ecx, dword [ebx + 0x54]
mov eax, dword [ebx + 0x50]
cmp ecx, edx
jl 0x56f089
jg 0x56f06e
cmp eax, edx
jbe 0x56f089
cmp eax, dword [ebx + 0x60]
jne 0x56f089
cmp ecx, dword [ebx + 0x64]
jne 0x56f089
mov eax, dword [ebx + 0x31e8]
cmp eax, edx
je 0x56f089
mov byte [eax + 0x241], 1
cmp dword [ebx + 0x31fc], edx
jg 0x56fa7b
jl 0x56f0a3
cmp dword [ebx + 0x31f8], edx
jae 0x56fa7b
mov dword [ebx + 0x31f8], edx
mov dword [ebx + 0x31fc], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0x3220]
lea edx, [ebx + 0x3250]
push edx
push str._I64d
lea ecx, [esi + eax + 0xf]
push ecx
call fcn.005e68f0
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx + 0x31dc], edi
jne 0x56f1a2
mov al, byte [ebp + 8]
test al, al
je 0x56f1a2
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0xe
add edx, ecx
push str.accept_ranges:
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f1a2
cmp dword [ebx + 0xac], edi
jne 0x56f1a2
mov eax, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + eax + 0xe]
push esi
call fcn.00571980
add esi, eax
push str.none
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56f185
mov ecx, dword [ebx + 0x31e8]
cmp ecx, edi
je 0x56f168
mov edx, dword [ecx]
push 2
call dword [edx + 0xc]
mov dword [ebx + 0x31dc], 2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x31dc], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0xe
add eax, edx
push str.Content_Range:
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f273
mov al, byte [ebp + 8]
test al, al
je 0x56f273
mov ecx, dword [ebx + 0x3220]
push 0x2f
lea edx, [esi + ecx + 0xe]
push edx
call fcn.005e63d0
add esp, 8
cmp eax, edi
je 0x56f20b
mov cl, byte [eax + 1]
inc eax
cmp cl, 0xd
je 0x56f20b
cmp cl, 0xa
je 0x56f20b
lea ecx, [ebx + 0x3258]
push ecx
push str._I64d
push eax
call fcn.005e68f0
add esp, 0xc
mov edx, dword [ebx + 0x3220]
push 0x2d
lea eax, [esi + edx + 0xe]
push eax
call fcn.005e63d0
add esp, 8
cmp eax, edi
je 0x56fa7b
mov cl, byte [eax + 1]
inc eax
cmp cl, 0xd
je 0x56fa7b
cmp cl, 0xa
je 0x56fa7b
add ebx, 0x3260
push ebx
push str._I64d
push eax
call fcn.005e68f0
add esp, 0xc
test eax, eax
jg 0x56fa7b
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0x12
add ecx, edx
push str.Transfer_Encoding:
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f2ed
mov edx, dword [ebx + 0x3220]
lea esi, [esi + edx + 0x12]
cmp esi, edi
je 0x56fa7b
cmp byte [esi], 0x20
jne 0x56f2ab
inc esi
jmp 0x56f2a3
push 7
push str.chunked
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f2d9
mov byte [ebx + 0xc8], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x2c
push esi
call fcn.005e63d0
add esp, 8
cmp eax, edi
je 0x56f2e9
inc eax
mov esi, eax
jmp 0x56f29b
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0x15
add eax, edx
push str.Server:_BestHop_2.4.4
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f33a
mov al, byte [ebp + 8]
test al, al
je 0x56f33a
mov ebx, dword [ebx + 0x31e8]
cmp ebx, edi
je 0x56fa7b
mov byte [ebx + 0x241], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0x1b
add ecx, edx
push str.Server:_MediaFire_HTTP_lrbd
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f35f
mov al, byte [ebp + 8]
test al, al
jne 0x56f312
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0x11
add edx, ecx
push str.Content_Encoding:
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f406
mov al, byte [ebp + 8]
test al, al
je 0x56f406
mov eax, dword [ebx + 0x3220]
lea esi, [esi + eax + 0x11]
cmp byte [esi], 0x20
jne 0x56f39a
inc esi
jmp 0x56f392
push 4
push str.gzip
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f3ce
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x317], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 6
push str.x_gzip
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fa7b
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x317], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0x11
add eax, edx
push str.WWW_Authenticate:
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fba0
mov ecx, dword [ebx + 0x3220]
lea edi, [esi + ecx + 0x11]
mov al, byte [edi]
mov dword [ebp - 0x14], edi
cmp al, 0x20
je 0x56fb9a
cmp al, 9
je 0x56fb9a
mov esi, edi
push 5
push str.realm
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56f947
add esi, 5
mov al, byte [esi]
test al, al
je 0x56f471
cmp al, 0x3d
je 0x56f471
inc esi
jmp 0x56f464
cmp byte [esi], 0
je 0x56f4fb
mov al, byte [esi + 1]
inc esi
test al, al
je 0x56f4fb
push esi
mov ecx, ebx
call fcn.00571980
add esi, eax
cmp byte [esi], 0
je 0x56f4fb
cmp byte [esi], 0x22
jne 0x56f4a8
mov al, byte [esi + 1]
inc esi
test al, al
je 0x56f4fb
push 0x22
push esi
call fcn.005e63d0
jmp 0x56f4c5
push 0x6a0db0
push esi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56f4cc
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56f4f8
sub eax, esi
mov edi, eax
test edi, edi
jle 0x56f4f8
mov ecx, dword [ebx + 0xb0]
push edi
add ecx, 0x194
call fcn.00602ea3
mov ecx, edi
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x14]
push 5
push str.Basic
push edi
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x56fa7b
mov eax, dword [ebx + 0xb0]
push 6
push str.Digest
push edi
mov byte [eax + 0x18a], 0
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fa05
push str.NTLM
push edi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56fa05
push 0x6a0db0
push edi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56f576
push 0x6b9cf8
push edi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56fa7b
sub eax, dword [ebp - 0x14]
mov ebx, eax
test ebx, ebx
je 0x56fa7b
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0xb0]
mov byte [edx + 0x18b], 1
mov eax, dword [0x6cc708]
mov dword [ebp + 8], eax
lea ecx, [ebx + 1]
mov byte [ebp - 4], 1
push ecx
lea ecx, [ebp + 8]
call fcn.00602ea3
mov esi, dword [ebp - 0x14]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x6d0c38
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp + 8]
mov esi, dword [eax + 0xb0]
add esi, 0x2c0
mov ecx, esi
call fcn.00602c5f
push str.nonce
push edi
call fcn.005e6490
mov edx, eax
add esp, 8
test edx, edx
je 0x56f65f
mov edi, str.nonce
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f65f
inc eax
push 0x22
push eax
call fcn.005e63d0
mov edi, eax
add esp, 8
test edi, edi
je 0x56f65f
inc edi
push 0x22
push edi
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f65f
sub eax, edi
mov ebx, eax
lea ecx, [ebx + 1]
push ecx
mov ecx, esi
call fcn.00602ea3
mov ecx, ebx
mov esi, edi
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp + 8]
push 0x6d0c38
mov ecx, dword [ebx + 0xb0]
add ecx, 0x2c8
mov dword [ebp - 0x20], ecx
call fcn.00602c5f
push str.realm
push esi
call fcn.005e6490
mov edx, eax
add esp, 8
test edx, edx
je 0x56f6fd
mov edi, str.realm
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f6fd
inc eax
push 0x22
push eax
call fcn.005e63d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56f6fd
inc esi
push 0x22
push esi
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f6fd
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00602ea3
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2d0
push 0x6d0c38
mov dword [ebp - 0x20], ecx
call fcn.00602c5f
push 0x6c16ac
push esi
call fcn.005e6490
mov edx, eax
add esp, 8
test edx, edx
je 0x56f798
mov edi, 0x6c16ac
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f798
inc eax
push 0x22
push eax
call fcn.005e63d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56f798
inc esi
push 0x22
push esi
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f798
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00602ea3
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2cc
push 0x6d0c38
mov dword [ebp - 0x20], ecx
call fcn.00602c5f
push str.algorithm
push esi
call fcn.005e6490
mov edx, eax
add esp, 8
test edx, edx
je 0x56f833
mov edi, str.algorithm
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f833
inc eax
push 0x22
push eax
call fcn.005e63d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56f833
inc esi
push 0x22
push esi
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f833
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00602ea3
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2d4
push 0x6d0c38
mov dword [ebp - 0x20], ecx
call fcn.00602c5f
push str.opaque
push esi
call fcn.005e6490
mov edx, eax
add esp, 8
test edx, edx
je 0x56f8ce
mov edi, str.opaque
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f8ce
inc eax
push 0x22
push eax
call fcn.005e63d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56f8ce
inc esi
push 0x22
push esi
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f8ce
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00602ea3
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
push str.stale
push eax
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56f9ac
add eax, 5
push 0x3d
push eax
call fcn.005e63d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56f9ac
mov ecx, dword [0x6cc708]
inc esi
mov dword [ebp - 0x14], ecx
push 0x2c
push esi
mov byte [ebp - 4], 2
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f97c
sub eax, esi
lea ecx, [ebp - 0x14]
mov ebx, eax
lea edx, [ebx + 1]
push edx
call fcn.00602ea3
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
jmp 0x56f985
push 0x20
push esi
call fcn.005e63d0
add esp, 8
test eax, eax
jne 0x56f969
push 9
push esi
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x56f4fb
mov cl, byte [eax + 1]
inc eax
test cl, cl
je 0x56f4fb
mov esi, eax
jmp 0x56f449
push esi
lea ecx, [ebp - 0x14]
call fcn.00602c5f
mov eax, dword [ebp - 0x14]
push str.true
push eax
call fcn.005e6820
add esp, 8
test eax, eax
jne 0x56f9a0
mov byte [ebx + 0x3290], al
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00602ad6
mov ecx, dword [ebx + 0xb0]
lea edx, [ebp - 0x18]
push edx
mov dword [ecx + 0x2d8], 1
call fcn.005e7c09
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
add esp, 4
add ecx, 0x2c4
push eax
push 0x6b9d60
push ecx
call fcn.005fb90b
add esp, 0xc
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0x32a0]
test eax, eax
jne 0x56fa8e
mov eax, dword [ebx + 0x32a4]
test eax, eax
jne 0x56fa8e
push 0x6a0db0
push edi
mov dword [ebp + 8], 0
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56fa44
push 0x6b9cf8
push edi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56fa49
sub eax, edi
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x14]
mov ecx, eax
mov edi, dword [edx + 0x2bc]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x2bc]
mov byte [edx + eax], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x20
push edi
call fcn.005e63d0
mov esi, eax
add esp, 8
xor edi, edi
mov dword [ebp - 0x18], esi
test esi, esi
mov dword [ebp + 8], edi
je 0x56fad6
inc esi
push 0x6a0db0
push esi
mov dword [ebp - 0x18], esi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56facf
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56fad6
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
mov eax, dword [ebx + 0x3298]
test eax, eax
je 0x56fb0b
push eax
mov byte [ebp - 4], 3
call fcn.005fef05
add esp, 4
jmp 0x56faf8
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp + 8]
xor eax, eax
mov ebx, ecx
mov dword [ebp - 4], eax
mov dword [ecx + 0x3298], eax
test edi, edi
jne 0x56fb58
mov eax, dword [ebx + 0x88]
test eax, eax
je 0x56fb58
mov eax, dword [ebx + 0x32a0]
test eax, eax
je 0x56fb37
lea edx, [ebx + 0x32e0]
mov ecx, ebx
push edx
call fcn.005773f0
mov dword [ebx + 0x32a0], edi
xor eax, eax
mov dword [ebx + 0x32a0], eax
mov dword [ebx + 0x32a4], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc edi
push edi
call fcn.005feedc
mov edx, dword [ebp + 8]
mov dword [ebx + 0x3298], eax
mov ecx, edx
mov edi, eax
mov eax, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x3298]
mov byte [ecx + edx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc edi
jmp 0x56f432
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0x13
add edx, ecx
push str.Proxy_Authenticate:
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fefd
mov eax, dword [ebx + 0x3220]
lea esi, [esi + eax + 0x13]
mov al, byte [esi]
cmp al, 0x20
je 0x56fef7
cmp al, 9
je 0x56fef7
push 5
push str.Basic
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x56fa7b
push 6
push str.Digest
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fd4a
push str.NTLM
push esi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56fd4a
mov eax, dword [ebx + 0x184]
cmp dword [eax + 8], 2
je 0x56fd4a
push 0x6a0db0
push esi
mov dword [eax + 8], 3
call fcn.005e6490
add esp, 8
cmp eax, edi
jne 0x56fc63
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
cmp eax, edi
je 0x56fa7b
sub eax, esi
mov ebx, eax
test ebx, ebx
je 0x56fa7b
mov ecx, dword [0x6cc708]
mov dword [ebp - 0x18], ecx
lea edx, [ebx + 1]
lea ecx, [ebp - 0x18]
push edx
mov byte [ebp - 4], 5
call fcn.00602ea3
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov eax, dword [0x6cc708]
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 4], 6
mov ecx, dword [ecx + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 1
jne 0x56fcc2
mov eax, str.HTTP
jmp 0x56fcf4
cmp eax, 4
jne 0x56fcce
mov eax, str.RTMP
jmp 0x56fcf4
cmp eax, 5
jne 0x56fcda
mov eax, str.RTMPT
jmp 0x56fcf4
cmp eax, 2
jne 0x56fce6
mov eax, str.HTTPS
jmp 0x56fcf4
test eax, eax
mov eax, 0x6c1650
je 0x56fcf4
mov eax, 0x6c164c
mov edx, dword [ecx]
push edx
push eax
lea eax, [ebp + 8]
push 0x6a5dcc
push eax
call fcn.005fb90b
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
add esp, 0x10
push ecx
mov ecx, dword [eax + 0x184]
push edx
call fcn.0059a260
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.00602ad6
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x184]
mov dword [ecx + 8], 2
mov eax, dword [ebx + 0x32ac]
cmp eax, edi
jne 0x56fdeb
cmp dword [ebx + 0x32b0], edi
jne 0x56fdeb
mov edx, dword [ebx + 0x184]
push str.NTLM
mov eax, dword [edx + 0x10c]
push eax
call fcn.005e6820
add esp, 8
test eax, eax
je 0x56fa7b
push 0x6a0db0
push esi
mov dword [ebp + 8], edi
call fcn.005e6490
add esp, 8
cmp eax, edi
jne 0x56fdb6
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
cmp eax, edi
je 0x56fdbb
sub eax, esi
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0x184]
mov ecx, eax
mov edi, dword [edx + 0x10c]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x184]
mov edx, dword [ecx + 0x10c]
jmp 0x56fa77
push 0x20
push esi
call fcn.005e63d0
mov esi, eax
add esp, 8
xor edi, edi
mov dword [ebp - 0x18], esi
test esi, esi
mov dword [ebp + 8], edi
je 0x56fe33
inc esi
push 0x6a0db0
push esi
mov dword [ebp - 0x18], esi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56fe2c
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56fe33
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
mov eax, dword [ebx + 0x32b4]
test eax, eax
je 0x56fe68
push eax
mov byte [ebp - 4], 7
call fcn.005fef05
add esp, 4
jmp 0x56fe55
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp + 8]
xor eax, eax
mov ebx, ecx
mov dword [ebp - 4], eax
mov dword [ecx + 0x32b4], eax
test edi, edi
jne 0x56feb5
mov eax, dword [ebx + 0x88]
test eax, eax
je 0x56feb5
mov eax, dword [ebx + 0x32ac]
test eax, eax
je 0x56fe94
lea edx, [ebx + 0x32bc]
mov ecx, ebx
push edx
call fcn.005773f0
mov dword [ebx + 0x32ac], edi
xor eax, eax
mov dword [ebx + 0x32ac], eax
mov dword [ebx + 0x32b0], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc edi
push edi
call fcn.005feedc
mov edx, dword [ebp + 8]
mov dword [ebx + 0x32b4], eax
mov ecx, edx
mov edi, eax
mov eax, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x32b4]
mov byte [edx + ecx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc esi
jmp 0x56fbcc
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 9
add edx, ecx
push str.Location:
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56ffc3
mov al, byte [ebp + 8]
test al, al
je 0x56ffc3
mov eax, dword [ebx + 0x31d8]
cmp eax, edi
je 0x56ff3d
push eax
call fcn.005fef05
add esp, 4
mov eax, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + eax + 9]
push esi
call fcn.00571980
add esi, eax
xor edi, edi
push 0x6a0db0
push esi
mov dword [ebp + 8], edi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x56ff7a
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56ff81
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
inc edi
push edi
call fcn.005feedc
mov edx, dword [ebp + 8]
mov dword [ebx + 0x31d8], eax
mov ecx, edx
mov edi, eax
mov eax, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x31d8]
mov byte [edx + ecx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0x14
add edx, ecx
push str.Content_Disposition:
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x5712df
mov al, byte [ebp + 8]
test al, al
je 0x5712df
mov eax, dword [ebx + 0x3238]
cmp eax, 0xc8
je 0x570008
cmp eax, 0xce
jne 0x56fa7b
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x2fc], 0x20
je 0x56fa7b
mov ecx, dword [ebx + 0x3220]
push str.attachment
mov byte [ebp + 0xb], 0
lea edx, [esi + ecx + 0x14]
push edx
call fcn.005e6490
add esp, 8
test eax, eax
je 0x57003f
mov byte [ebp + 0xb], 1
mov eax, dword [ebx + 0x3220]
lea ecx, [esi + eax + 0x14]
push ecx
mov ecx, ebx
call fcn.0056eec0
mov edx, dword [ebx + 0x3220]
push str.filename
lea eax, [esi + edx + 0x14]
push eax
call fcn.005e6490
mov edi, eax
add esp, 8
test edi, edi
jne 0x5700e0
mov ecx, dword [ebx + 0x3220]
push 0x6c1618
lea edx, [esi + ecx + 0x14]
push edx
call fcn.005e7b20
add esp, 8
mov edi, eax
test edi, edi
je 0x5700bb
push 8
push str.filename
push edi
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x5700b7
mov al, byte [edi + 2]
add edi, 2
test al, al
jne 0x5700af
xor edi, edi
jmp 0x570089
push 0x6c1618
push edi
jmp 0x57007f
test edi, edi
jne 0x5700e0
mov al, byte [ebp + 0xb]
test al, al
je 0x56fa7b
mov ecx, ebx
call fcn.0056edd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x3d
push edi
call fcn.005e63d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56fa7b
mov al, byte [esi + 1]
inc esi
cmp al, 0xd
je 0x56fa7b
cmp al, 0xa
je 0x56fa7b
push esi
mov ecx, ebx
call fcn.00571980
add esi, eax
cmp byte [esi], 0
je 0x56fa7b
mov al, byte [esi]
mov byte [ebp + 0xb], 1
cmp al, 0x22
jne 0x5701b1
inc esi
push 0x22
push esi
call fcn.005e63d0
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
je 0x5701b1
mov byte [ebp + 0xb], 0
mov edi, dword [ebp - 0x18]
sub edi, esi
mov eax, dword [0x6cc708]
mov dword [ebp - 0x14], eax
push edi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call fcn.00602ea3
mov ecx, edi
mov ebx, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov al, byte [ebp + 0xb]
mov ecx, edx
and ecx, 3
test al, al
rep movsb byte es:[edi], byte [esi]
je 0x57018b
mov eax, dword [ebp - 0x14]
push 0x3b
push eax
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x57018b
mov byte [eax], 0
push 8
push str._UTF_8_
push ebx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x570214
lea ecx, [ebp - 0x14]
push ecx
push ebx
call fcn.005c6230
add esp, 8
jmp 0x570306
push 0x6a0db0
push esi
call fcn.005e6490
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x570141
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x570141
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
je 0x56fa7b
cmp edi, 0x100
jle 0x570146
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0xa
push str.ISO_8859
push ebx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x570253
mov edx, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add edx, 0xa
push edx
call fcn.00602b44
lea eax, [ebp + 8]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xa
call fcn.00602c0f
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x570301
push 9
push str.ISO_8859_
push ebx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x5702ab
mov ecx, dword [ebp - 0x14]
add ecx, 9
push ecx
lea ecx, [ebp + 8]
call fcn.00602b44
mov edx, dword [ebp + 8]
push 0x6c15f0
push edx
mov byte [ebp - 4], 0xb
call fcn.005e6490
add esp, 8
test eax, eax
je 0x5702a2
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x5702a2
push eax
lea ecx, [ebp - 0x14]
call fcn.00602c5f
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x570301
push 0xb
push str.windows_125
push ebx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x570306
mov eax, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add eax, 0xb
push eax
call fcn.00602b44
mov ecx, dword [ebp + 8]
push 0x6c15f0
push ecx
mov byte [ebp - 4], 0xc
call fcn.005e6490
add esp, 8
test eax, eax
je 0x5702fa
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x5702fa
push eax
lea ecx, [ebp - 0x14]
call fcn.00602c5f
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
call fcn.00602ad6
mov edx, dword [ebp - 0x14]
push 7
push str.utf_8
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x57057c
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x57057c
push str.filename
push edi
call fcn.005e6490
mov esi, eax
add esp, 8
test esi, esi
jne 0x57038a
push 0x6c1618
push edi
call fcn.005e7b20
add esp, 8
mov esi, eax
test esi, esi
je 0x57057c
push 8
push str.filename
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x570382
mov al, byte [esi + 2]
add esi, 2
test al, al
jne 0x57037a
xor esi, esi
jmp 0x570350
push 0x6c1618
push esi
jmp 0x570346
test esi, esi
je 0x57057c
push 0x3d
push esi
call fcn.005e63d0
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x570421
mov al, byte [ebx + 1]
inc ebx
cmp al, 0xd
je 0x570421
cmp al, 0xa
je 0x570421
mov ecx, dword [ebp - 0x1c]
push ebx
call fcn.00571980
lea esi, [eax + ebx]
mov al, byte [eax + ebx]
test al, al
je 0x570421
mov al, byte [esi]
mov byte [ebp + 0xb], 1
cmp al, 0x22
jne 0x570464
inc esi
push 0x22
push esi
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x570464
mov byte [ebp + 0xb], 0
sub eax, esi
mov edi, eax
push edi
lea ecx, [ebp - 0x14]
call fcn.00602ea3
mov ecx, edi
mov ebx, eax
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov al, byte [ebp + 0xb]
and ecx, 3
test al, al
rep movsb byte es:[edi], byte [esi]
je 0x570421
mov ecx, dword [ebp - 0x14]
push 0x3b
push ecx
call fcn.005e63d0
add esp, 8
test eax, eax
je 0x570421
mov byte [eax], 0
push 0xa
push str.ISO_8859
push ebx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x5704c9
mov edx, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add edx, 0xa
push edx
call fcn.00602b44
lea eax, [ebp + 8]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.00602c0f
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x570577
push 0x6a0db0
push esi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x5703e4
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x5703e4
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
je 0x5704aa
cmp edi, 0x100
jle 0x5703e8
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 9
push str.ISO_8859_
push ebx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x570521
mov ecx, dword [ebp - 0x14]
add ecx, 9
push ecx
lea ecx, [ebp + 8]
call fcn.00602b44
mov edx, dword [ebp + 8]
push 0x6c15f0
push edx
mov byte [ebp - 4], 0xe
call fcn.005e6490
add esp, 8
test eax, eax
je 0x570518
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x570518
push eax
lea ecx, [ebp - 0x14]
call fcn.00602c5f
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x570577
push 0xb
push str.windows_125
push ebx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x57057c
mov eax, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add eax, 0xb
push eax
call fcn.00602b44
mov ecx, dword [ebp + 8]
push 0x6c15f0
push ecx
mov byte [ebp - 4], 0xf
call fcn.005e6490
add esp, 8
test eax, eax
je 0x570570
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x570570
push eax
lea ecx, [ebp - 0x14]
call fcn.00602c5f
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
call fcn.00602ad6
mov esi, dword [ebp - 0x14]
xor ebx, ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
mov word [ebp - 0x28], bx
call fcn.00401070
cmp esi, ebx
je 0x5705e0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5705e0
push ebx
push ebx
push 0xffffffffffffffff
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, ebx
mov dword [ebp - 0x24], eax
je 0x5705e0
lea edx, [eax + eax + 2]
push edx
call fcn.005feedc
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x2c], eax
je 0x5705e0
mov ecx, dword [ebp - 0x24]
push ecx
push eax
push 0xffffffffffffffff
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x14]
push edx
mov byte [ebp - 4], 0x10
mov ecx, dword [eax + 0xb0]
add ecx, 0xc4
call fcn.00602c0f
mov ecx, dword [ebp - 0x14]
push 7
push str.utf_8
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x5706b1
mov edx, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add edx, 7
push edx
call fcn.00602b44
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.00401070
cmp esi, ebx
je 0x570680
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x570680
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push ebx
push 0xffffffffffffffff
push esi
push ebx
push ebx
call edi
cmp eax, ebx
mov dword [ebp - 0x24], eax
je 0x570680
lea eax, [eax + eax + 2]
push eax
call fcn.005feedc
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x2c], eax
je 0x570680
mov ecx, dword [ebp - 0x24]
push ecx
push eax
push 0xffffffffffffffff
push esi
push ebx
push ebx
call edi
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x1c]
lea edx, [ebp + 8]
push edx
mov ecx, dword [esi + 0xb0]
add ecx, 0xc4
call fcn.00602c0f
mov eax, dword [esi + 0xb0]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x10
mov byte [eax + 0x309], 1
call fcn.00602ad6
mov ecx, dword [ebp - 0x1c]
push 1
push ebx
push 1
mov ecx, dword [ecx + 0xb0]
lea edx, [ebp - 0x2c]
push 1
push edx
mov dl, byte [ecx + 0x309]
mov eax, dword [ecx + 0xc4]
neg dl
sbb edx, edx
and edx, 0xfde9
push edx
push eax
call fcn.005b5280
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xb0]
mov edx, dword [ecx + 0xbc]
cmp edx, ebx
je 0x57073b
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x57073b
push 9
push str.text_html
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x57073b
mov esi, dword [ebp - 0x1c]
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0xbc]
push eax
call fcn.005fef05
mov eax, dword [esi + 0xb0]
add esp, 4
mov dword [eax + 0xbc], ebx
mov edi, dword [ebp - 0x1c]
cmp dword [edi + 0xac], ebx
jne 0x5712b4
mov ecx, dword [edi + 0x31e8]
mov ecx, dword [ecx + 0x18]
cmp ecx, ebx
je 0x5707b0
mov eax, dword [edi + 0xb0]
cmp dword [eax + 0x3c], ebx
jne 0x5707b0
mov edx, dword [eax + 0x14c]
mov eax, dword [ebp - 0x2c]
test dh, 0x20
je 0x570790
cmp eax, ebx
jne 0x570777
lea eax, [ebp - 0x28]
mov edx, dword [ecx]
push eax
push 0x148f
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x5712b4
cmp eax, ebx
jne 0x570797
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ecx]
push 0x13bc
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x5712b4
mov eax, dword [edi + 0xb0]
cmp dword [eax + 0x3c], ebx
je 0x5712b4
mov ecx, dword [eax + 0x34]
cmp ecx, ebx
jne 0x5707c9
lea ecx, [eax + 0x38]
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x294]
push edx
push eax
lea edx, [ebp - 0x894]
lea eax, [ebp - 0x64]
push edx
push eax
push ecx
call fcn.005e7163
mov eax, dword [ebp - 0x2c]
add esp, 0x14
cmp eax, ebx
jne 0x5707f5
lea eax, [ebp - 0x28]
push 0x25
push eax
call fcn.005e699b
add esp, 8
test eax, eax
je 0x570848
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x57080e
lea eax, [ebp - 0x28]
push eax
call fcn.005e639f
add esp, 4
cmp eax, 0x7d0
jae 0x570848
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x570828
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x29d4]
push eax
push ecx
call fcn.005e6569
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x29d4]
push edx
push eax
call fcn.005b50a0
add esp, 0x10
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x570852
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x894]
push eax
lea edx, [ebp - 0x64]
push ecx
push edx
lea eax, [ebp - 0x1a34]
push 0x6a25d8
push eax
call fcn.005e72e7
add esp, 0x14
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x3c], ebx
push ecx
lea ecx, [ebp - 0x44]
mov word [ebp - 0x40], bx
call fcn.00402410
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x50]
push edx
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x4c], bx
call fcn.00402410
lea eax, [ebp - 0x494]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x57094b
lea ecx, [ebp - 0x494]
push ecx
call fcn.005e639f
add esp, 4
test eax, eax
je 0x57094b
mov eax, dword [ebp - 0x44]
cmp eax, ebx
je 0x5708e1
push eax
call fcn.005e639f
add esp, 4
mov esi, eax
jmp 0x5708e3
xor esi, esi
lea edx, [ebp - 0x494]
push edx
call fcn.005e639f
add eax, esi
lea eax, [eax + eax + 2]
push eax
call fcn.005feedc
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x57094b
mov eax, dword [ebp - 0x44]
cmp eax, ebx
je 0x570924
push eax
push esi
call fcn.005e6569
lea ecx, [ebp - 0x494]
push ecx
push esi
call fcn.005e653f
add esp, 0x10
jmp 0x570934
lea edx, [ebp - 0x494]
push edx
push esi
call fcn.005e6569
add esp, 8
lea ecx, [ebp - 0x44]
call fcn.00401070
push esi
mov dword [ebp - 0x44], esi
call fcn.005e639f
add esp, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov ecx, eax
jne 0x570957
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x570961
lea eax, [ebp - 0x40]
push ecx
push eax
call fcn.005e8a3c
add esp, 8
test eax, eax
jne 0x5709b2
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x5709bc
lea eax, [ebp - 0x40]
push 0x5f
push eax
call fcn.005e62ef
add esp, 8
cmp eax, ebx
je 0x570bea
mov esi, dword [ebp - 0x44]
xor eax, eax
cmp esi, ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x34], bx
je 0x570a39
cmp eax, ebx
je 0x570a39
push esi
call fcn.005e639f
add esp, 4
test eax, eax
je 0x570a39
mov eax, dword [ebp - 0x38]
cmp eax, esi
ja 0x570a39
push eax
call fcn.005e639f
mov ecx, dword [ebp - 0x38]
add esp, 4
lea edx, [ecx + eax*2]
cmp edx, esi
jb 0x570a39
push esi
lea ecx, [ebp - 0x70]
call fcn.0040e5a0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x14
call fcn.00402400
push eax
lea ecx, [ebp - 0x38]
call fcn.00402410
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x13
call fcn.00401070
jmp 0x570a82
lea ecx, [ebp - 0x38]
call fcn.00401070
cmp esi, ebx
je 0x570a82
push esi
call fcn.005e639f
add esp, 4
test eax, eax
je 0x570a82
push esi
call fcn.005e639f
lea eax, [eax + eax + 2]
push eax
call fcn.005feedc
add esp, 8
cmp eax, ebx
mov dword [ebp - 0x38], eax
je 0x570a82
push esi
call fcn.005e639f
mov ecx, dword [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x30], eax
call fcn.005e6569
add esp, 0xc
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 0x15
cmp eax, ebx
jne 0x570a90
lea eax, [ebp - 0x34]
push 0x5f
push eax
call fcn.005e62ef
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x570bdb
mov word [esi], bx
add esi, 2
mov edi, 1
mov ax, word [esi]
cmp ax, bx
je 0x570ad9
cmp ax, 0x2e
je 0x570ad9
and eax, 0xffff
push eax
call fcn.005e6a27
add esp, 4
test eax, eax
je 0x570bdb
add esi, 2
jmp 0x570ab0
cmp edi, ebx
je 0x570bdb
cmp word [esi], 0x2e
jne 0x570bdb
cmp esi, ebx
je 0x570b68
push esi
call fcn.005e639f
add esp, 4
test eax, eax
je 0x570b68
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x570b10
push eax
call fcn.005e639f
add esp, 4
mov edi, eax
jmp 0x570b12
xor edi, edi
push esi
call fcn.005e639f
add eax, edi
lea edx, [eax + eax + 2]
push edx
call fcn.005feedc
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x570b68
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x570b47
push eax
push edi
call fcn.005e6569
push esi
push edi
call fcn.005e653f
add esp, 0x10
jmp 0x570b51
push esi
push edi
call fcn.005e6569
add esp, 8
lea ecx, [ebp - 0x38]
call fcn.00401070
push edi
mov dword [ebp - 0x38], edi
call fcn.005e639f
add esp, 4
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov ecx, eax
jne 0x570b74
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x38]
cmp eax, ebx
jne 0x570b7e
lea eax, [ebp - 0x34]
push ecx
push eax
call fcn.005e8a3c
add esp, 8
test eax, eax
jne 0x570bdb
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00401070
mov edi, dword [ebp - 0x1c]
mov eax, dword [edi + 0xb0]
mov ecx, dword [eax + 0x14c]
test ch, 0x20
je 0x570c81
lea ecx, [ebp - 0x694]
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x894]
push edx
lea ecx, [ebp - 0x64]
push eax
lea edx, [ebp - 0x1a34]
push ecx
push edx
call fcn.005e7163
lea eax, [ebp - 0x694]
lea ecx, [ebp - 0x494]
push eax
push ecx
call fcn.005e8a3c
add esp, 0x1c
test eax, eax
je 0x570c81
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x31e8]
cmp dword [edx + 0x13c], ebx
je 0x570d19
lea eax, [ebp - 0x694]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x894]
push ecx
lea eax, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x1a34]
push eax
push ecx
call fcn.005e7163
lea edx, [ebp - 0x694]
lea eax, [ebp - 0x494]
push edx
push eax
call fcn.005e8a3c
add esp, 0x1c
test eax, eax
jne 0x571247
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x570d23
lea eax, [ebp - 0x40]
push str.manuallogin.html
push eax
call fcn.005e69c4
add esp, 8
test eax, eax
jne 0x570e14
lea ecx, [ebp - 0x694]
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x894]
push edx
lea ecx, [ebp - 0x64]
push eax
lea edx, [ebp - 0x1a34]
push ecx
push edx
call fcn.005e7163
lea eax, [ebp - 0x694]
push 0x6a6afc
push eax
call fcn.005e8a3c
add esp, 0x1c
test eax, eax
jne 0x570db9
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x694]
push 0x6a8420
push ecx
call fcn.005e8a3c
add esp, 8
test eax, eax
jne 0x570e14
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea edx, [ebp - 0xa94]
lea eax, [ebp - 0x294]
push edx
lea ecx, [ebp - 0x894]
push eax
lea edx, [ebp - 0x64]
push ecx
lea eax, [ebp - 0x1a34]
push edx
push eax
call fcn.005e7163
lea ecx, [ebp - 0xa94]
lea edx, [ebp - 0x494]
push ecx
push edx
call fcn.005e8a3c
add esp, 0x1c
test eax, eax
jne 0x570f2f
mov eax, dword [edi + 0xb0]
mov cl, byte [eax + 0x16e]
test cl, cl
jne 0x57096f
test byte [eax + 0x14c], 0x40
jne 0x57096f
mov esi, dword [ebp - 0x44]
cmp esi, ebx
jne 0x570e82
lea esi, [ebp - 0x40]
lea eax, [ebp - 0x294]
push eax
call fcn.005e639f
push eax
lea ecx, [ebp - 0x294]
push esi
push ecx
call fcn.005e6c41
add esp, 0x10
test eax, eax
jne 0x570f2f
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x570eb1
lea eax, [ebp - 0x40]
push eax
call fcn.005e639f
lea edx, [ebp - 0x294]
mov esi, eax
push edx
call fcn.005e639f
add esp, 8
cmp eax, esi
jae 0x570f2f
mov esi, dword [ebp - 0x44]
cmp esi, ebx
jne 0x570ed6
lea esi, [ebp - 0x40]
lea eax, [ebp - 0x294]
push eax
call fcn.005e639f
add esp, 4
cmp word [esi + eax*2], 0x5f
jne 0x570f2f
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [edi + 0xb0]
mov al, byte [ecx + 0x30e]
test al, al
jne 0x571247
mov ecx, dword [0x6d12f4]
lea edx, [ebp + 8]
lea eax, [ebp - 0x18]
push edx
push eax
push ebx
push ebx
push str.notaskfn2
push ecx
mov dword [ebp + 8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x570f74
cmp dword [ebp - 0x18], 1
je 0x571247
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x58], bx
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x16
cmp eax, ebx
mov esi, eax
jne 0x570f8e
lea esi, [ebp - 0x28]
mov eax, dword [ebp - 0x50]
cmp eax, ebx
jne 0x570f98
lea eax, [ebp - 0x4c]
mov edi, dword [0x6d23f8]
cmp edi, ebx
je 0x57114b
cmp eax, ebx
je 0x57114b
lea edx, [ebp - 0x494]
test edx, edx
je 0x57114b
cmp esi, ebx
je 0x57114b
push eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x84], bx
call fcn.00402410
lea eax, [ebp - 0x494]
lea ecx, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x8c], ebx
mov word [ebp - 0x90], bx
call fcn.00402410
push esi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x78], bx
call fcn.00402410
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x19
call fcn.00401070
push ebx
push edi
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x68], ebx
mov word [ebp - 0x6c], bx
call fcn.00402e00
mov eax, dword [ebp - 0x88]
mov byte [ebp - 4], 0x1a
cmp eax, ebx
mov ebx, eax
jne 0x571056
lea ebx, [ebp - 0x84]
mov edi, dword [ebp - 0x94]
test edi, edi
jne 0x571066
lea edi, [ebp - 0x90]
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x571070
lea eax, [ebp - 0x78]
mov esi, dword [ebp - 0x68]
push eax
call fcn.005e639f
mov edx, eax
push edi
mov dword [ebp - 0x20], edx
call fcn.005e639f
mov edi, eax
push ebx
add edi, esi
call fcn.005e639f
mov ecx, dword [ebp - 0x20]
add edi, ecx
lea ebx, [eax + edi + 4]
lea esi, [ebx + ebx]
push esi
call fcn.005feedc
mov edi, eax
add esp, 0x10
test edi, edi
mov dword [ebp - 0x5c], edi
je 0x571113
mov ecx, esi
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp - 0x7c]
test eax, eax
mov esi, eax
jne 0x5710ca
lea esi, [ebp - 0x78]
mov eax, dword [ebp - 0x94]
test eax, eax
mov edx, eax
jne 0x5710dc
lea edx, [ebp - 0x90]
mov ecx, dword [ebp - 0x88]
test ecx, ecx
jne 0x5710ec
lea ecx, [ebp - 0x84]
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x5710f6
lea eax, [ebp - 0x6c]
push esi
push edx
push ecx
push eax
mov eax, dword [ebp - 0x5c]
push ebx
push eax
call fcn.005e632f
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.005e639f
add esp, 0x1c
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x19
call fcn.00401070
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x18
call fcn.00401070
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x16
call fcn.00401070
xor ebx, ebx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x34], bx
call fcn.00401070
mov edx, 0x6a0028
test edx, edx
je 0x5711b1
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x5711b1
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push ebx
push 0xffffffffffffffff
push edx
push ebx
push ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x30], eax
je 0x5711b1
lea eax, [eax + eax + 2]
push eax
call fcn.005feedc
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x38], eax
je 0x5711b4
mov ecx, dword [ebp - 0x30]
push ecx
push eax
push 0xffffffffffffffff
push 0x6a0028
push ebx
push ebx
call esi
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
cmp eax, ebx
jne 0x5711bb
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
jne 0x5711c5
lea ecx, [ebp - 0x58]
push 0x50024
push eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 7
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x38]
jne 0x571233
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call fcn.00401070
mov edi, dword [ebp - 0x1c]
mov ecx, dword [edi + 0xb0]
lea edx, [ebp - 0x1a34]
push edx
call fcn.005c2f90
mov eax, dword [edi + 0x31e8]
mov eax, dword [eax + 0xb8]
cmp eax, ebx
je 0x571275
mov ecx, dword [edi + 0xb0]
push eax
call fcn.005c1170
mov eax, dword [edi + 0x31e8]
mov ecx, dword [eax + 0x14]
cmp ecx, ebx
je 0x57129c
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x13c9
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00602ad6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0xd
add ecx, edx
push str.Content_Type:
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x571603
mov al, byte [ebp + 8]
test al, al
je 0x571603
mov eax, dword [ebx + 0x3238]
cmp eax, 0xc8
je 0x57132b
cmp eax, 0xce
je 0x57132b
cmp eax, 0x130
jne 0x56fa7b
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + 0xbc]
cmp eax, edi
je 0x571344
push eax
call fcn.005fef05
add esp, 4
mov eax, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + eax + 0xd]
push esi
call fcn.00571980
add esi, eax
push 0x6a0db0
push esi
mov dword [ebp + 8], 0
call fcn.005e6490
push 0x3b
push esi
mov edi, eax
call fcn.005e63d0
add esp, 0x10
cmp eax, edi
mov dword [ebp - 0x20], eax
jae 0x571382
test eax, eax
jne 0x571386
test edi, edi
jne 0x57138c
test eax, eax
mov edi, eax
je 0x571393
sub edi, esi
mov dword [ebp + 8], edi
jmp 0x5713aa
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x5713aa
sub eax, esi
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
add ecx, 5
push ecx
call fcn.005feedc
mov edx, dword [ebx + 0xb0]
add esp, 4
mov dword [edx + 0xbc], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0xb0]
mov ecx, eax
mov edi, dword [edx + 0xbc]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0xbc]
mov byte [edx + eax], 0
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x155]
test cl, cl
je 0x571456
mov eax, dword [eax + 0xbc]
push 9
push str.text_html
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x571456
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0xbc]
push eax
call fcn.005fef05
mov edx, dword [ebx + 0xb0]
add esp, 4
mov dword [edx + 0xbc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0xb0]
or ecx, 0xffffffff
xor eax, eax
mov edi, dword [edx + 0xc4]
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x571488
mov eax, dword [edx + 0xbc]
push 9
push str.text_html
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x57141e
mov eax, dword [ebx + 0xb0]
push str.application_vnd.lumberjack.manifest
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e6820
add esp, 8
test eax, eax
jne 0x571506
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax + 0x14c]
test ch, 1
je 0x571506
mov eax, dword [eax + 0xbc]
push eax
call fcn.005fef05
mov edx, dword [ebx + 0xb0]
add esp, 4
mov dword [edx + 0xbc], 0
mov eax, dword [ebx + 0xb0]
mov dword [eax + 0x2fc], 1
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x300], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0xb0]
push 0x14
push str.multipart_byteranges
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x57154a
mov ecx, dword [ebx + 0xb0]
push 0x16
push str.multipart_x_byteranges
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fa7b
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x56fa7b
push str.boundary
push eax
call fcn.005e6490
add esp, 8
test eax, eax
je 0x56fa7b
push 0x3d
push eax
call fcn.005e63d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56fa7b
inc esi
mov ecx, ebx
push esi
call fcn.00571980
add esi, eax
push 0x6a0db0
push esi
xor edi, edi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x5715b1
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x5715b5
sub eax, esi
mov edi, eax
lea ecx, [ebx + 0x3244]
push edi
call fcn.00602ea3
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0x3244]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56fa7b
mov byte [ebx + 0x3248], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0xb
add ecx, edx
push str.Set_Cookie:
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x57164d
mov al, byte [ebp + 8]
test al, al
je 0x57164d
mov edx, dword [ebx + 0x3220]
mov ecx, ebx
lea eax, [esi + edx + 0xb]
push eax
call fcn.00575c30
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 5
add ecx, edx
push str.ETag:
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x5716e0
mov edx, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + edx + 5]
push esi
call fcn.00571980
add esi, eax
push 0x6a0db0
push esi
xor edi, edi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x5716a5
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x5716a9
sub eax, esi
mov edi, eax
mov ecx, dword [ebx + 0xb0]
push edi
add ecx, 0xf8
call fcn.00602ea3
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 4
add ecx, edx
push str.P3P:
push ecx
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x571744
mov edx, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + edx + 4]
push esi
call fcn.00571980
push 0x23
add esi, eax
push str.policyref_http:__p3p.yahoo.com_w3c_
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fa7b
mov byte [ebx + 0x3249], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 5
add eax, edx
push str.Date:
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x571827
mov al, byte [ebp + 8]
test al, al
je 0x571827
mov ecx, dword [ebx + 0x3220]
lea esi, [esi + ecx + 5]
mov ecx, ebx
push esi
call fcn.00571980
add esi, eax
xor edi, edi
push 0x6a0db0
push esi
mov dword [ebp + 8], edi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x5717ae
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x5717b5
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
inc edi
push edi
call fcn.005feedc
mov ecx, dword [ebp + 8]
mov edi, eax
mov edx, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov dword [ebp - 0x18], eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, edx
mov byte [eax + ecx], 0
lea ecx, [ebp - 0x20]
call fcn.005779c0
mov esi, dword [ebp - 0x18]
lea ecx, [ebp - 0x20]
push esi
mov byte [ebp - 4], 0x1c
call fcn.00577a00
mov edx, dword [ebx + 0xb0]
push esi
mov dword [edx + 0x34c], eax
call fcn.005fef05
add esp, 4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.005779f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0xe
add eax, edx
push str.Last_Modified:
push eax
call fcn.005e86f0
add esp, 0xc
test eax, eax
jne 0x56fa7b
cmp dword [ebx + 0xac], edi
jne 0x56fa7b
mov al, byte [ebp + 8]
test al, al
je 0x56fa7b
mov ecx, dword [ebx + 0x3220]
lea esi, [esi + ecx + 0xe]
mov ecx, ebx
push esi
call fcn.00571980
add esi, eax
xor edi, edi
push 0x6a0db0
push esi
mov dword [ebp + 8], edi
call fcn.005e6490
add esp, 8
test eax, eax
jne 0x57189d
push 0x6b9cf8
push esi
call fcn.005e6490
add esp, 8
test eax, eax
je 0x5718a4
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
inc edi
push edi
call fcn.005feedc
mov ecx, dword [ebp + 8]
mov edi, eax
mov edx, ecx
mov dword [ebp - 0x18], eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, edx
mov byte [eax + ecx], 0
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x20]
test eax, eax
jne 0x57190c
mov edx, dword [ebx + 0x31e8]
mov eax, dword [edx + 0xb8]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.005c24d0
mov esi, dword [ebp - 0x18]
push esi
call fcn.005fef05
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp + 8]
mov esi, dword [ebp - 0x18]
push ecx
push eax
push esi
call fcn.005e86f0
add esp, 0xc
test eax, eax
je 0x571946
mov edx, dword [ebx + 0x31e8]
mov eax, dword [edx + 0x138]
test eax, eax
jne 0x571946
push esi
add ebx, 0x320c
push 0x6a00a0
push ebx
call fcn.005fb90b
add esp, 0xc
push esi
call fcn.005fef05
mov ecx, dword [ebp - 0xc]
add esp, 4
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4