Function at 0x4bdd50
Capabilities:
Check for time delay via gettickcount
Check http status code

Disassembly:
sub esp, 0x38
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x4c]
mov ebx, dword [edi]
xor ebp, ebp
mov dword [esp + 0x3c], ebp
mov eax, dword [ebx + 0x19c]
mov dword [esp + 0x30], eax
cmp eax, ebp
jne 0x4bdd79
mov dword [esp + 0x30], 0x36ee80
mov eax, dword [esp + 0x50]
mov ecx, dword [edi + eax*4 + 0xc8]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x28], ebp
mov dword [edi + 0x1a8], ebp
cmp dword [edi + 0x184], ebp
jne 0x4bdf9c
movzx esi, word [esp + 0x58]
mov edx, dword [esp + 0x54]
push esi
push edx
push str.Establish_HTTP_proxy_tunnel_to__s:_hu_n
push ebx
call fcn.004a7be0
mov eax, dword [ebx + 0xd4]
add esp, 0x10
cmp eax, ebp
je 0x4bdde1
push eax
call dword [0x595e18]
add esp, 4
mov dword [ebx + 0xd4], ebp
push 0xc
push 1
call dword [0x595e24]
mov ebp, eax
add esp, 8
test ebp, ebp
je 0x4be4db
mov eax, dword [esp + 0x54]
push esi
push eax
push str._s:_hu
call fcn.004adc20
add esp, 0xc
mov dword [esp + 0x24], eax
test eax, eax
je 0x4be4d1
push 1
push eax
push str.CONNECT
mov eax, edi
call fcn.004bae10
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4bdf6e
mov ecx, dword [esp + 0x4c]
cmp dword [ecx + 0xac], 1
mov esi, 0x57d3dd
mov edi, esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], 0x555648
je 0x4bde5b
mov dword [esp + 0x18], 0x55564c
push str.Host:
push ebx
call fcn.004ba8f0
add esp, 8
test eax, eax
jne 0x4bde89
mov edx, dword [esp + 0x24]
push edx
push str.Host:__s_r_n
call fcn.004adc20
mov edi, eax
add esp, 8
test edi, edi
je 0x4be4e8
push str.Proxy_Connection:
push ebx
call fcn.004ba8f0
add esp, 8
test eax, eax
jne 0x4bdea3
mov dword [esp + 0x1c], str.Proxy_Connection:_Keep_Alive_r_n
push str.User_Agent:
push ebx
call fcn.004ba8f0
add esp, 8
test eax, eax
jne 0x4bdec7
cmp dword [ebx + 0x394], eax
je 0x4bdec7
mov eax, dword [esp + 0x4c]
mov esi, dword [eax + 0x1c0]
mov ecx, dword [esp + 0x4c]
mov eax, dword [ecx + 0x1bc]
test eax, eax
jne 0x4bdeda
mov eax, 0x57d3dd
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x54]
push edx
push esi
push eax
mov eax, dword [esp + 0x24]
push edi
push eax
movzx eax, word [esp + 0x6c]
push eax
push ecx
push str.CONNECT__s:_hu_HTTP__s_r_n_s_s_s_s
push ebp
call fcn.004bba20
add esp, 0x24
mov esi, eax
test edi, edi
je 0x4bdf15
cmp byte [edi], 0
je 0x4bdf15
push edi
call dword [0x595e18]
add esp, 4
test esi, esi
jne 0x4bdf5a
mov edi, dword [esp + 0x4c]
push ebp
push edi
call fcn.004bbb20
mov esi, eax
add esp, 8
test esi, esi
jne 0x4bdf5a
push 0x54f374
push ebp
call fcn.004bba20
mov esi, eax
add esp, 8
test esi, esi
jne 0x4bdf5a
mov edx, dword [esp + 0x50]
push edx
push eax
lea eax, [ebx + 0x867c]
push eax
push edi
push ebp
call fcn.004bb1f0
add esp, 0x14
mov esi, eax
xor ebp, ebp
test esi, esi
je 0x4bdf6e
push str.Failed_sending_CONNECT_to_proxy
push ebx
call fcn.004a7c70
add esp, 8
mov ecx, dword [esp + 0x24]
push ecx
call dword [0x595e18]
push ebp
call fcn.0049efc0
add esp, 8
test esi, esi
jne 0x4be50a
mov edx, dword [esp + 0x4c]
mov dword [edx + 0x184], 1
mov edi, edx
xor ebp, ebp
mov eax, dword [edi + 0xbc]
mov ecx, dword [edi + 0xb8]
push eax
push ecx
call fcn.004c0330
push edx
push eax
call fcn.004c0360
mov edx, dword [esp + 0x40]
sub edx, eax
add esp, 0x10
test edx, edx
jle 0x4be514
cmp dword [ebx + 0x508], 2
jne 0x4bdfe8
mov eax, dword [esp + 0x34]
push ebp
push 0xffffffffffffffff
push eax
call fcn.004be840
add esp, 0xc
test eax, eax
je 0x4be5cb
xor ebp, ebp
lea esi, [ebx + 0x524]
mov dword [edi + 0x184], ebp
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x14], 1
jmp 0x4be010
cmp dword [esp + 0x14], 0
je 0x4be471
cmp dword [esp + 0x28], 0
jne 0x4be522
mov ecx, dword [edi + 0xbc]
mov edx, dword [edi + 0xb8]
push ecx
push edx
call fcn.004c0330
push edx
push eax
call fcn.004c0360
mov ecx, dword [esp + 0x40]
sub ecx, eax
add esp, 0x10
test ecx, ecx
jle 0x4be514
cmp ecx, 0x3e8
jl 0x4be05e
mov ecx, 0x3e8
mov eax, dword [esp + 0x34]
push ecx
push 0xffffffffffffffff
push eax
call fcn.004be840
add esp, 0xc
cmp eax, 0xffffffff
je 0x4be43c
test eax, eax
je 0x4be452
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x38]
mov edx, 0x4000
sub edx, dword [esp + 0x28]
push edx
push eax
push ecx
push edi
call fcn.004a7910
add esp, 0x14
cmp eax, 0x51
je 0x4be463
xor ecx, ecx
cmp eax, ecx
je 0x4be0b9
mov dword [esp + 0x14], ecx
jmp 0x4be452
mov eax, dword [esp + 0x20]
cmp eax, ecx
jg 0x4be0ee
mov dword [esp + 0x14], ecx
cmp dword [ebx + 0x120], ecx
je 0x4be0e4
cmp dword [ebx + 0x85c4], ecx
je 0x4be0e4
mov dword [edi + 0x1a8], 1
jmp 0x4be452
push str.Proxy_CONNECT_aborted
jmp 0x4be441
add dword [esp + 0x24], eax
cmp dword [esp + 0x14], 1
jle 0x4be197
mov edx, dword [esp + 0x40]
or edx, dword [esp + 0x44]
mov dword [esp + 0x24], ecx
lea ecx, [ebx + 0x524]
mov dword [esp + 0x18], ecx
je 0x4be146
cdq
sub dword [esp + 0x40], eax
mov eax, dword [esp + 0x44]
sbb eax, edx
mov dword [esp + 0x44], eax
test eax, eax
jg 0x4be452
jl 0x4be139
cmp dword [esp + 0x40], 0
ja 0x4be452
mov dword [esp + 0x14], 0
jmp 0x4be452
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x1c]
push ecx
push eax
push edx
push edi
mov dword [esp + 0x2c], 0
call fcn.004c1fc0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4be17f
push str.chunk_reading_DONE_n
push ebx
call fcn.004a7be0
mov dword [esp + 0x1c], 0
jmp 0x4be44f
mov eax, dword [esp + 0x1c]
push eax
push str.Read__zd_bytes_of_chunk__continue_n
push ebx
call fcn.004a7be0
add esp, 0xc
jmp 0x4be452
cmp eax, ecx
mov dword [esp + 0x1c], ecx
jle 0x4be452
jmp 0x4be1a7
xor ecx, ecx
mov edx, dword [esp + 0x18]
inc ebp
cmp byte [edx], 0xa
jne 0x4be350
cmp dword [ebx + 0x2d8], ecx
je 0x4be1cb
push edi
push ebp
push esi
push 1
push ebx
call fcn.004a7a50
add esp, 0x14
cmp dword [ebx + 0x2bc], 0
mov eax, 2
je 0x4be1de
mov eax, 3
push ebp
push esi
push eax
push edi
call fcn.004a7f40
add esp, 0x10
test eax, eax
jne 0x4be5cd
mov al, byte [esi]
cmp al, 0xd
je 0x4be36a
cmp al, 0xa
je 0x4be36a
mov al, byte [esi + ebp]
push 0x11
push esi
push str.WWW_Authenticate:
mov byte [esp + 0x1f], al
mov byte [esi + ebp], 0
call fcn.004a8da0
add esp, 0xc
test eax, eax
je 0x4be230
mov eax, dword [ebx + 0x90]
cmp eax, 0x191
je 0x4be251
push 0x13
push esi
push str.Proxy_authenticate:
call fcn.004a8da0
add esp, 0xc
test eax, eax
je 0x4be269
mov eax, dword [ebx + 0x90]
cmp eax, 0x197
jne 0x4be269
push esi
push eax
push edi
call fcn.004baf10
add esp, 0xc
test eax, eax
jne 0x4be5cd
jmp 0x4be338
push 0xf
push esi
push str.Content_Length:
call fcn.004a8da0
add esp, 0xc
test eax, eax
je 0x4be29a
push 0xa
lea ecx, [esi + 0xf]
push 0
push ecx
call fcn.0049cdf1
add esp, 0xc
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], edx
jmp 0x4be338
push str.close
push str.Connection:
push esi
call fcn.004bb470
add esp, 0xc
test eax, eax
je 0x4be2bb
mov dword [esp + 0x2c], 1
jmp 0x4be338
push str.chunked
push str.Transfer_Encoding:
push esi
call fcn.004bb470
add esp, 0xc
test eax, eax
je 0x4be2f0
push str.CONNECT_responded_chunked_n
push ebx
call fcn.004a7be0
push edi
mov dword [esp + 0x44], 1
call fcn.004c1fa0
add esp, 0xc
jmp 0x4be338
push str.close
push str.Proxy_Connection:
push esi
call fcn.004bb470
add esp, 0xc
test eax, eax
je 0x4be311
mov dword [esp + 0x2c], 1
jmp 0x4be338
lea edi, [ebx + 0x90]
push edi
lea edx, [esp + 0x40]
push edx
push str.HTTP_1._d__d
push esi
call fcn.00537f30
add esp, 0x10
cmp eax, 2
jne 0x4be338
mov eax, dword [edi]
mov dword [ebx + 0x8668], eax
mov cl, byte [esp + 0x13]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x4c]
mov byte [esi + ebp], cl
xor ebp, ebp
lea esi, [edx + 1]
mov ecx, dword [esp + 0x1c]
inc dword [esp + 0x18]
inc ecx
cmp ecx, eax
mov dword [esp + 0x1c], ecx
jl 0x4be1a5
jmp 0x4be452
xor ecx, ecx
cmp dword [ebx + 0x90], 0x197
lea eax, [ebx + 0x524]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], eax
jne 0x4be0b0
cmp dword [ebx + 0x85d4], ecx
jne 0x4be0b0
mov eax, dword [esp + 0x40]
or eax, dword [esp + 0x44]
mov dword [esp + 0x14], 2
je 0x4be3cd
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push str.Ignore__lld_bytes_of_response_body_n
push ebx
call fcn.004a7be0
mov eax, dword [esp + 0x30]
add esp, 0x10
sub eax, dword [esp + 0x1c]
jmp 0x4be115
cmp dword [esp + 0x38], ecx
je 0x4be0b0
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x1c]
mov dword [ebx + 0xc8], 1
push eax
push str._zd_bytes_of_chunk_left_n
push ebx
call fcn.004a7be0
add esp, 0xc
cmp byte [esi + 1], 0xa
jne 0x4be403
inc esi
inc dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
sub edx, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
push edx
lea eax, [esi + 1]
push eax
push edi
call fcn.004c1fc0
add esp, 0x10
cmp eax, 0xffffffff
je 0x4be167
mov ecx, dword [esp + 0x20]
push ecx
push str.Read__zd_bytes_of_chunk__continue_n
push ebx
call fcn.004a7be0
add esp, 0xc
jmp 0x4be452
push str.Proxy_CONNECT_aborted_due_to_select_poll_error
push ebx
mov dword [esp + 0x30], 1
call fcn.004a7c70
add esp, 8
push edi
call fcn.004ac2b0
add esp, 4
test eax, eax
jne 0x4be52f
cmp dword [esp + 0x24], 0x4000
jb 0x4be010
cmp dword [esp + 0x28], 0
jne 0x4be522
cmp dword [ebx + 0x8668], 0xc8
je 0x4be4ac
push edi
call fcn.004bb860
add esp, 4
test eax, eax
jne 0x4be5cd
cmp dword [edi + 0x150], eax
je 0x4be4ac
mov esi, 1
mov dword [esp + 0x2c], esi
jmp 0x4be4b4
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x4be4bd
cmp dword [ebx + 0xd4], 0
jne 0x4be53c
cmp dword [ebx + 0xd4], 0
je 0x4be559
xor ebp, ebp
jmp 0x4bdda2
push ebp
call dword [0x595e18]
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 0x1b
pop ebx
add esp, 0x38
ret
push ebp
call dword [0x595e18]
mov edx, dword [esp + 0x28]
push edx
call dword [0x595e18]
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 0x1b
pop ebx
add esp, 0x38
ret
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret
push str.Proxy_CONNECT_aborted_due_to_timeout
push ebx
call fcn.004a7c70
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 0x38
pop ebx
add esp, 0x38
ret
pop edi
pop esi
pop ebp
mov eax, 0x2a
pop ebx
add esp, 0x38
ret
mov ebp, dword [esp + 0x50]
mov eax, dword [edi + ebp*4 + 0xc8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [edi + ebp*4 + 0xc8], 0xffffffff
mov eax, dword [ebx + 0x90]
cmp eax, 0xc8
je 0x4be599
push eax
push str.Received_HTTP_code__d_from_proxy_after_CONNECT
push ebx
call fcn.004a7c70
add esp, 0xc
test esi, esi
je 0x4be58c
cmp dword [ebx + 0xd4], 0
je 0x4be58c
mov dword [edi + 0x1a8], 1
pop edi
pop esi
pop ebp
mov eax, 0x38
pop ebx
add esp, 0x38
ret
mov ecx, dword [edi + 0x1bc]
push ecx
call fcn.0049efc0
xor esi, esi
push str.Proxy_replied_OK_to_CONNECT_request_n
mov dword [edi + 0x1bc], esi
push ebx
mov dword [ebx + 0x85c8], 1
call fcn.004a7be0
add esp, 0xc
mov dword [ebx + 0xc8], esi
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret