Function at 0x5547a0
Capabilities:
Check http status code
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x609e8e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x29c4
call fcn.005c4f90
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], edi
mov eax, dword [edi + 0x3218]
mov dword [ebp - 4], 0
push eax
call fcn.00556f30
mov esi, eax
mov eax, dword [edi + 0x3218]
mov ecx, esi
push 0xf
add ecx, eax
push str.content_length:
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554906
mov al, byte [ebp + 8]
test al, al
je 0x5548d4
mov edx, dword [edi + 0x3218]
lea ebx, [edi + 0x31f0]
push ebx
push str._I64d
lea eax, [esi + edx + 0xf]
push eax
call fcn.005c670c
mov eax, dword [ebx]
xor edx, edx
add esp, 0xc
cmp eax, edx
jne 0x55489b
cmp dword [ebx + 4], edx
jne 0x55489b
mov ecx, dword [edi + 0x3218]
lea esi, [esi + ecx + 0xf]
cmp byte [esi], 0x20
jne 0x55484e
inc esi
jmp 0x554846
cmp byte [esi], 0x30
jne 0x554864
mov eax, dword [edi + 0x31e0]
cmp eax, edx
je 0x554864
mov byte [eax + 0x86d], 1
cmp dword [edi + 0x4c], edx
jl 0x55489b
jg 0x554870
cmp dword [edi + 0x48], edx
jbe 0x55489b
mov ecx, dword [edi + 0x54]
mov eax, dword [edi + 0x50]
cmp ecx, edx
jl 0x55489b
jg 0x554880
cmp eax, edx
jbe 0x55489b
cmp eax, dword [edi + 0x60]
jne 0x55489b
cmp ecx, dword [edi + 0x64]
jne 0x55489b
mov eax, dword [edi + 0x31e0]
cmp eax, edx
je 0x55489b
mov byte [eax + 0x250], 1
cmp dword [edi + 0x31f4], edx
jg 0x555292
jl 0x5548b5
cmp dword [edi + 0x31f0], edx
jae 0x555292
mov dword [edi + 0x31f0], edx
mov dword [edi + 0x31f4], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi + 0x3218]
lea edx, [edi + 0x3248]
push edx
push str._I64d
lea ecx, [esi + eax + 0xf]
push ecx
call fcn.005c670c
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi + 0x31d4]
mov bl, byte [ebp + 8]
test eax, eax
jne 0x5549b8
test bl, bl
je 0x5549b8
mov ecx, dword [edi + 0x3218]
mov edx, esi
push 0xe
add edx, ecx
push str.accept_ranges:
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x5549b8
mov eax, dword [edi + 0xac]
test eax, eax
jne 0x5549b8
mov eax, dword [edi + 0x3218]
mov ecx, edi
lea esi, [esi + eax + 0xe]
push esi
call fcn.00556f30
add esi, eax
push str.none
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x55499b
mov ecx, dword [edi + 0x31e0]
test ecx, ecx
je 0x55497e
mov edx, dword [ecx]
push 2
call dword [edx + 0xc]
mov dword [edi + 0x31d4], 2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [edi + 0x31d4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov eax, esi
push 0xe
add eax, edx
push str.Content_Range:
push eax
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554a8e
test bl, bl
je 0x554a8e
mov ecx, dword [edi + 0x3218]
push 0x2f
lea edx, [esi + ecx + 0xe]
push edx
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554a1e
mov cl, byte [eax + 1]
inc eax
cmp cl, 0xd
je 0x554a1e
cmp cl, 0xa
je 0x554a1e
lea ecx, [edi + 0x3250]
push ecx
push str._I64d
push eax
call fcn.005c670c
add esp, 0xc
mov edx, dword [edi + 0x3218]
push 0x2d
lea eax, [esi + edx + 0xe]
push eax
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x555292
mov cl, byte [eax + 1]
inc eax
cmp cl, 0xd
je 0x555292
cmp cl, 0xa
je 0x555292
add edi, 0x3258
push edi
push str._I64d
push eax
call fcn.005c670c
add esp, 0xc
test eax, eax
jg 0x555292
mov dword [edi], 0
mov dword [edi + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov ecx, esi
push 0x12
add ecx, edx
push str.Transfer_Encoding:
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554b0c
test bl, bl
je 0x554b0c
mov edx, dword [edi + 0x3218]
lea esi, [esi + edx + 0x12]
test esi, esi
je 0x555292
cmp byte [esi], 0x20
jne 0x554aca
inc esi
jmp 0x554ac2
push 7
push str.chunked
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554af8
mov byte [edi + 0xc8], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x2c
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554b08
inc eax
mov esi, eax
jmp 0x554aba
mov edx, dword [edi + 0x3218]
mov eax, esi
push 0x15
add eax, edx
push str.Server:_BestHop_2.4.4
push eax
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554b56
test bl, bl
je 0x554b56
mov edi, dword [edi + 0x31e0]
test edi, edi
je 0x555292
mov byte [edi + 0x250], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov ecx, esi
push 0x1b
add ecx, edx
push str.Server:_MediaFire_HTTP_lrbd
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554b78
test bl, bl
jne 0x554b2e
mov ecx, dword [edi + 0x3218]
mov edx, esi
push 0x11
add edx, ecx
push str.Content_Encoding:
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554c1c
test bl, bl
je 0x554c1c
mov eax, dword [edi + 0x3218]
lea esi, [esi + eax + 0x11]
cmp byte [esi], 0x20
jne 0x554bb0
inc esi
jmp 0x554ba8
push 4
push str.gzip
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x554be4
mov ecx, dword [edi + 0xb0]
mov byte [ecx + 0x302], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 6
push str.x_gzip
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555292
mov edx, dword [edi + 0xb0]
mov byte [edx + 0x302], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov eax, esi
push 0x11
add eax, edx
push str.WWW_Authenticate:
push eax
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x5553aa
mov ecx, dword [edi + 0x3218]
lea ebx, [esi + ecx + 0x11]
mov al, byte [ebx]
mov dword [ebp - 0x18], ebx
cmp al, 0x20
je 0x5553a4
cmp al, 9
je 0x5553a4
mov esi, ebx
push 5
push str.realm
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555161
add esi, 5
mov al, byte [esi]
test al, al
je 0x554c87
cmp al, 0x3d
je 0x554c87
inc esi
jmp 0x554c7a
cmp byte [esi], 0
je 0x554d14
mov al, byte [esi + 1]
inc esi
test al, al
je 0x554d14
push esi
mov ecx, edi
call fcn.00556f30
add esi, eax
cmp byte [esi], 0
je 0x554d14
cmp byte [esi], 0x22
jne 0x554cbe
mov al, byte [esi + 1]
inc esi
test al, al
je 0x554d14
push 0x22
push esi
call fcn.005c4b80
jmp 0x554cdb
push 0x6a0cc0
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x554ce2
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x554d14
sub eax, esi
mov edi, eax
test edi, edi
jle 0x554d11
mov edx, dword [ebp - 0x14]
push edi
mov ecx, dword [edx + 0xb0]
add ecx, 0x180
call fcn.005e1559
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x14]
push 5
push str.Basic
push ebx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
je 0x555292
mov ecx, dword [edi + 0xb0]
push 6
push str.Digest
push ebx
mov byte [ecx + 0x176], 0
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x55521f
push str.NTLM
push ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x55521f
push 0x6a0cc0
push ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x554d8f
push 0x6b8470
push ebx
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555292
sub eax, dword [ebp - 0x18]
mov ebx, eax
test ebx, ebx
je 0x555292
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xb0]
mov byte [eax + 0x177], 1
mov ecx, dword [0x6ca27c]
mov dword [ebp + 8], ecx
lea edx, [ebx + 1]
lea ecx, [ebp + 8]
push edx
mov byte [ebp - 4], 1
call fcn.005e1559
mov esi, dword [ebp - 0x18]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x6ce7c8
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp + 8]
mov esi, dword [eax + 0xb0]
add esi, 0x2ac
mov ecx, esi
call fcn.005e1315
push str.nonce
push edi
call fcn.005c4c40
mov edx, eax
add esp, 8
test edx, edx
je 0x554e79
mov edi, str.nonce
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554e79
inc eax
push 0x22
push eax
call fcn.005c4b80
mov edi, eax
add esp, 8
test edi, edi
je 0x554e79
inc edi
push 0x22
push edi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554e79
sub eax, edi
mov ebx, eax
lea ecx, [ebx + 1]
push ecx
mov ecx, esi
call fcn.005e1559
mov ecx, ebx
mov esi, edi
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp + 8]
push 0x6ce7c8
mov ecx, dword [ebx + 0xb0]
add ecx, 0x2b4
mov dword [ebp - 0x28], ecx
call fcn.005e1315
push str.realm
push esi
call fcn.005c4c40
mov edx, eax
add esp, 8
test edx, edx
je 0x554f17
mov edi, str.realm
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554f17
inc eax
push 0x22
push eax
call fcn.005c4b80
mov esi, eax
add esp, 8
test esi, esi
je 0x554f17
inc esi
push 0x22
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554f17
mov ecx, dword [ebp - 0x28]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.005e1559
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2bc
push 0x6ce7c8
mov dword [ebp - 0x28], ecx
call fcn.005e1315
push 0x6bf600
push esi
call fcn.005c4c40
mov edx, eax
add esp, 8
test edx, edx
je 0x554fb2
mov edi, 0x6bf600
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554fb2
inc eax
push 0x22
push eax
call fcn.005c4b80
mov esi, eax
add esp, 8
test esi, esi
je 0x554fb2
inc esi
push 0x22
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554fb2
mov ecx, dword [ebp - 0x28]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.005e1559
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2b8
push 0x6ce7c8
mov dword [ebp - 0x28], ecx
call fcn.005e1315
push str.algorithm
push esi
call fcn.005c4c40
mov edx, eax
add esp, 8
test edx, edx
je 0x55504d
mov edi, str.algorithm
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x55504d
inc eax
push 0x22
push eax
call fcn.005c4b80
mov esi, eax
add esp, 8
test esi, esi
je 0x55504d
inc esi
push 0x22
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x55504d
mov ecx, dword [ebp - 0x28]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.005e1559
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2c0
push 0x6ce7c8
mov dword [ebp - 0x28], ecx
call fcn.005e1315
push str.opaque
push esi
call fcn.005c4c40
mov edx, eax
add esp, 8
test edx, edx
je 0x5550e8
mov edi, str.opaque
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x5550e8
inc eax
push 0x22
push eax
call fcn.005c4b80
mov esi, eax
add esp, 8
test esi, esi
je 0x5550e8
inc esi
push 0x22
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x5550e8
mov ecx, dword [ebp - 0x28]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.005e1559
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebp + 8]
push str.stale
push eax
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x5551c6
add eax, 5
push 0x3d
push eax
call fcn.005c4b80
mov esi, eax
add esp, 8
test esi, esi
je 0x5551c6
mov ecx, dword [0x6ca27c]
inc esi
mov dword [ebp - 0x18], ecx
push 0x2c
push esi
mov byte [ebp - 4], 2
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x555196
sub eax, esi
lea ecx, [ebp - 0x18]
mov ebx, eax
lea edx, [ebx + 1]
push edx
call fcn.005e1559
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x14]
jmp 0x55519f
push 0x20
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
jne 0x555183
push 9
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x554d14
mov cl, byte [eax + 1]
inc eax
test cl, cl
je 0x554d14
mov esi, eax
jmp 0x554c5f
push esi
lea ecx, [ebp - 0x18]
call fcn.005e1315
mov eax, dword [ebp - 0x18]
push str.true
push eax
call fcn.005c6000
add esp, 8
test eax, eax
jne 0x5551ba
mov byte [ebx + 0x3288], al
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.005e118c
mov ecx, dword [ebx + 0xb0]
lea edx, [ebp - 0x50]
push edx
mov dword [ecx + 0x2c4], 1
call fcn.005c63ab
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebx + 0xb0]
add esp, 4
add ecx, 0x2b0
push eax
push 0x6b84d8
push ecx
call fcn.005d9fbb
add esp, 0xc
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi + 0x3298]
test eax, eax
jne 0x5552a5
mov eax, dword [edi + 0x329c]
test eax, eax
jne 0x5552a5
mov esi, dword [ebp - 0x18]
push 0x6a0cc0
push esi
xor ebx, ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x55525c
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555260
sub eax, esi
mov ebx, eax
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov ecx, ebx
mov edx, dword [eax + 0xb0]
mov edi, dword [edx + 0x2a8]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [eax + 0xb0]
mov ecx, dword [eax + 0x2a8]
mov byte [ecx + ebx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x20
push ebx
call fcn.005c4b80
mov esi, eax
add esp, 8
xor ebx, ebx
mov dword [ebp - 0x18], esi
test esi, esi
mov dword [ebp + 8], ebx
je 0x5552ed
inc esi
push 0x6a0cc0
push esi
mov dword [ebp - 0x18], esi
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x5552e6
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x5552ed
sub eax, esi
mov ebx, eax
mov dword [ebp + 8], ebx
mov edi, dword [ebp - 0x14]
mov eax, dword [edi + 0x3290]
test eax, eax
je 0x555325
push eax
mov byte [ebp - 4], 3
call fcn.005dd5b6
add esp, 4
jmp 0x555315
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 4], eax
mov edi, edx
mov dword [edx + 0x3290], eax
test ebx, ebx
jne 0x555372
mov eax, dword [edi + 0x88]
test eax, eax
je 0x555372
mov eax, dword [edi + 0x3298]
test eax, eax
je 0x555351
lea eax, [edi + 0x32d8]
mov ecx, edi
push eax
call fcn.0055b8b0
mov dword [edi + 0x3298], ebx
xor eax, eax
mov dword [edi + 0x3298], eax
mov dword [edi + 0x329c], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebx + 1]
push ecx
call fcn.005dd58d
mov edx, dword [ebp - 0x14]
mov ecx, ebx
mov edi, eax
add esp, 4
mov dword [edx + 0x3290], eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [edx + 0x3290]
jmp 0x55528e
inc ebx
jmp 0x554c48
mov ecx, dword [edi + 0x3218]
mov edx, esi
push 0x13
add edx, ecx
push str.Proxy_Authenticate:
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x55570c
mov eax, dword [edi + 0x3218]
lea esi, [esi + eax + 0x13]
mov al, byte [esi]
cmp al, 0x20
je 0x555706
cmp al, 9
je 0x555706
push 5
push str.Basic
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
je 0x555292
push 6
push str.Digest
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555554
push str.NTLM
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x555554
mov eax, dword [edi + 0x17c]
cmp dword [eax + 8], 2
je 0x555554
push 0x6a0cc0
push esi
mov dword [eax + 8], 3
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x55546d
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555292
sub eax, esi
mov ebx, eax
test ebx, ebx
je 0x555292
mov ecx, dword [0x6ca27c]
mov dword [ebp - 0x18], ecx
lea edx, [ebx + 1]
lea ecx, [ebp - 0x18]
push edx
mov byte [ebp - 4], 5
call fcn.005e1559
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov eax, dword [0x6ca27c]
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 6
mov ecx, dword [ecx + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 1
jne 0x5554cc
mov eax, str.HTTP
jmp 0x5554fe
cmp eax, 4
jne 0x5554d8
mov eax, str.RTMP
jmp 0x5554fe
cmp eax, 5
jne 0x5554e4
mov eax, str.RTMPT
jmp 0x5554fe
cmp eax, 2
jne 0x5554f0
mov eax, str.HTTPS
jmp 0x5554fe
test eax, eax
mov eax, 0x6bf5a4
je 0x5554fe
mov eax, 0x6bf5a0
mov edx, dword [ecx]
push edx
push eax
lea eax, [ebp + 8]
push 0x6a5600
push eax
call fcn.005d9fbb
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
add esp, 0x10
push ecx
mov ecx, dword [eax + 0x17c]
push edx
call fcn.0057b6d0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.005e118c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [edi + 0x17c]
mov dword [ecx + 8], 2
mov eax, dword [edi + 0x32a4]
test eax, eax
jne 0x5555f5
mov eax, dword [edi + 0x32a8]
test eax, eax
jne 0x5555f5
mov edx, dword [edi + 0x17c]
push str.NTLM
mov eax, dword [edx + 0x10c]
push eax
call fcn.005c6000
add esp, 8
test eax, eax
je 0x555292
push 0x6a0cc0
push esi
xor ebx, ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x5555c1
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x5555c5
sub eax, esi
mov ebx, eax
mov eax, dword [ebp - 0x14]
mov ecx, ebx
mov edx, dword [eax + 0x17c]
mov edi, dword [edx + 0x10c]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [eax + 0x17c]
mov ecx, dword [eax + 0x10c]
jmp 0x55528e
push 0x20
push esi
call fcn.005c4b80
mov esi, eax
add esp, 8
xor ebx, ebx
mov dword [ebp - 0x18], esi
test esi, esi
mov dword [ebp + 8], ebx
je 0x55563d
inc esi
push 0x6a0cc0
push esi
mov dword [ebp - 0x18], esi
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x555636
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x55563d
sub eax, esi
mov ebx, eax
mov dword [ebp + 8], ebx
mov edi, dword [ebp - 0x14]
mov eax, dword [edi + 0x32ac]
test eax, eax
je 0x555675
push eax
mov byte [ebp - 4], 7
call fcn.005dd5b6
add esp, 4
jmp 0x555665
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 4], eax
mov edi, edx
mov dword [edx + 0x32ac], eax
test ebx, ebx
jne 0x5556c2
mov eax, dword [edi + 0x88]
test eax, eax
je 0x5556c2
mov eax, dword [edi + 0x32a4]
test eax, eax
je 0x5556a1
lea eax, [edi + 0x32b4]
mov ecx, edi
push eax
call fcn.0055b8b0
mov dword [edi + 0x32a4], ebx
xor eax, eax
mov dword [edi + 0x32a4], eax
mov dword [edi + 0x32a8], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebx + 1]
push ecx
call fcn.005dd58d
mov ecx, ebx
mov dword [edi + 0x32ac], eax
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [eax + 0x32ac]
mov byte [ebx + ecx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc esi
jmp 0x5553d6
mov ecx, dword [edi + 0x3218]
mov edx, esi
push 9
add edx, ecx
push str.Location:
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x5557cb
test bl, bl
je 0x5557cb
mov eax, dword [edi + 0x31d0]
test eax, eax
je 0x555749
push eax
call fcn.005dd5b6
add esp, 4
mov eax, dword [edi + 0x3218]
mov ecx, edi
lea esi, [esi + eax + 9]
push esi
call fcn.00556f30
add esi, eax
push 0x6a0cc0
push esi
xor ebx, ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x555783
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555787
sub eax, esi
mov ebx, eax
lea ecx, [ebx + 1]
push ecx
call fcn.005dd58d
mov ecx, ebx
mov dword [edi + 0x31d0], eax
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [eax + 0x31d0]
mov byte [ebx + ecx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [edi + 0x3218]
mov edx, esi
push 0x14
add edx, ecx
push str.Content_Disposition:
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x55686b
test bl, bl
je 0x55686b
mov eax, dword [edi + 0x3230]
cmp eax, 0xc8
je 0x55580d
cmp eax, 0xce
jne 0x555292
mov eax, dword [edi + 0x3218]
push str.attachment
mov byte [ebp + 0xb], 0
lea ecx, [esi + eax + 0x14]
push ecx
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555831
mov byte [ebp + 0xb], 1
mov edx, dword [edi + 0x3218]
mov ecx, edi
lea eax, [esi + edx + 0x14]
push eax
call fcn.005546d0
mov ecx, dword [edi + 0x3218]
push str.filename
lea edx, [esi + ecx + 0x14]
push edx
call fcn.005c4c40
mov edi, eax
add esp, 8
test edi, edi
jne 0x5558d5
mov ebx, dword [ebp - 0x14]
push 0x6bf56c
mov eax, dword [ebx + 0x3218]
lea ecx, [esi + eax + 0x14]
push ecx
call fcn.005c6490
add esp, 8
mov edi, eax
test edi, edi
je 0x5558b0
push 8
push str.filename
push edi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
je 0x5558ac
mov al, byte [edi + 2]
add edi, 2
test al, al
jne 0x5558a4
xor edi, edi
jmp 0x55587e
push 0x6bf56c
push edi
jmp 0x555874
test edi, edi
jne 0x5558d8
mov al, byte [ebp + 0xb]
test al, al
je 0x555292
mov ecx, ebx
call fcn.005545e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [ebp - 0x14]
push 0x3d
push edi
call fcn.005c4b80
mov esi, eax
add esp, 8
test esi, esi
je 0x555292
mov al, byte [esi + 1]
inc esi
cmp al, 0xd
je 0x555292
cmp al, 0xa
je 0x555292
push esi
mov ecx, ebx
call fcn.00556f30
add esi, eax
cmp byte [esi], 0
je 0x555292
mov al, byte [esi]
mov byte [ebp + 0xb], 1
cmp al, 0x22
jne 0x5559a6
inc esi
push 0x22
push esi
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x5559a6
mov byte [ebp + 0xb], 0
sub eax, esi
mov edi, eax
mov edx, dword [0x6ca27c]
mov dword [ebp - 0x18], edx
push edi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.005e1559
mov ecx, edi
mov ebx, eax
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov al, byte [ebp + 0xb]
and ecx, 3
test al, al
rep movsb byte es:[edi], byte [esi]
je 0x555980
mov ecx, dword [ebp - 0x18]
push 0x3b
push ecx
call fcn.005c4b80
add esp, 8
test eax, eax
je 0x555980
mov byte [eax], 0
push 8
push str._UTF_8_
push ebx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555a03
lea edx, [ebp - 0x18]
push edx
push ebx
call fcn.005a4f80
add esp, 8
jmp 0x555af5
push 0x6a0cc0
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x555936
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x555936
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
je 0x555292
cmp edi, 0x100
jle 0x55593a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0xa
push str.ISO_8859
push ebx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555a42
mov eax, dword [ebp - 0x18]
lea ecx, [ebp + 8]
add eax, 0xa
push eax
call fcn.005e11fa
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa
push ecx
lea ecx, [ebp - 0x18]
call fcn.005e12c5
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x555af0
push 9
push str.ISO_8859_
push ebx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555a9a
mov edx, dword [ebp - 0x18]
lea ecx, [ebp + 8]
add edx, 9
push edx
call fcn.005e11fa
mov eax, dword [ebp + 8]
push 0x6bf544
push eax
mov byte [ebp - 4], 0xb
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555a91
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x555a91
push eax
lea ecx, [ebp - 0x18]
call fcn.005e1315
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x555af0
push 0xb
push str.windows_125
push ebx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555af5
mov ecx, dword [ebp - 0x18]
add ecx, 0xb
push ecx
lea ecx, [ebp + 8]
call fcn.005e11fa
mov edx, dword [ebp + 8]
push 0x6bf544
push edx
mov byte [ebp - 4], 0xc
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555ae9
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x555ae9
push eax
lea ecx, [ebp - 0x18]
call fcn.005e1315
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
call fcn.005e118c
mov ebx, dword [ebp - 0x18]
xor esi, esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], esi
mov word [ebp - 0x20], si
call fcn.00401070
cmp ebx, esi
je 0x555b5b
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x555b5b
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push eax
push 0xffffffffffffffff
push ebx
push eax
push eax
call esi
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x555b61
lea eax, [eax + eax + 2]
push eax
call fcn.005dd58d
add esp, 4
mov dword [ebp - 0x24], eax
test eax, eax
je 0x555b61
mov ecx, dword [ebp - 0x1c]
push ecx
push eax
push 0xffffffffffffffff
push ebx
push 0
push 0
call esi
mov dword [ebp - 0x1c], eax
jmp 0x555b61
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, dword [ebp - 0x14]
lea edx, [ebp - 0x18]
push edx
mov byte [ebp - 4], 0xd
mov ecx, dword [edi + 0xb0]
add ecx, 0xc4
call fcn.005e12c5
mov eax, dword [ebp - 0x18]
push 7
push str.utf_8
push eax
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555c30
mov ecx, dword [ebp - 0x18]
add ecx, 7
push ecx
lea ecx, [ebp + 8]
call fcn.005e11fa
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xe
call fcn.00401070
test ebx, ebx
je 0x555bfd
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x555bfd
push eax
push eax
push 0xffffffffffffffff
push ebx
push eax
push eax
call esi
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x555bfd
lea edx, [eax + eax + 2]
push edx
call fcn.005dd58d
add esp, 4
mov dword [ebp - 0x24], eax
test eax, eax
je 0x555bfd
mov ecx, dword [ebp - 0x1c]
push ecx
push eax
push 0xffffffffffffffff
push ebx
push 0
push 0
call esi
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp - 0x14]
lea edx, [ebp + 8]
push edx
mov ecx, dword [esi + 0xb0]
add ecx, 0xc4
call fcn.005e12c5
mov eax, dword [esi + 0xb0]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xd
mov byte [eax + 0x2f5], 1
call fcn.005e118c
mov edi, esi
mov ecx, dword [edi + 0xb0]
push 0
push 1
lea edx, [ebp - 0x24]
push 1
mov eax, dword [ecx + 0xc4]
push edx
mov dl, byte [ecx + 0x2f5]
neg dl
sbb edx, edx
and edx, 0xfde9
push edx
push eax
call fcn.00594ff0
mov eax, dword [edi + 0xb0]
mov edx, dword [eax + 0xbc]
test edx, edx
je 0x555cb7
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x555cb7
push 9
push str.text_html
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555cb7
mov esi, dword [ebp - 0x14]
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx + 0xbc]
push eax
call fcn.005dd5b6
mov edx, dword [esi + 0xb0]
add esp, 4
mov dword [edx + 0xbc], 0
mov eax, dword [ebp - 0x14]
xor edi, edi
cmp dword [eax + 0xac], edi
jne 0x556840
mov ecx, dword [eax + 0x31e0]
mov edx, dword [ecx + 0x18]
cmp edx, edi
je 0x555d2e
mov ecx, dword [eax + 0xb0]
cmp dword [ecx + 0x3c], edi
jne 0x555d2e
mov eax, dword [ecx + 0x144]
test ah, 0x20
mov eax, dword [ebp - 0x24]
je 0x555d0e
cmp eax, edi
jne 0x555cf5
lea eax, [ebp - 0x20]
mov edx, dword [edx]
push eax
push 0x148f
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x556840
cmp eax, edi
jne 0x555d15
lea eax, [ebp - 0x20]
push eax
mov eax, dword [edx]
push 0x13bc
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x556840
mov eax, dword [eax + 0xb0]
cmp dword [eax + 0x3c], edi
je 0x556840
mov ecx, dword [eax + 0x34]
cmp ecx, edi
je 0x555d48
mov eax, ecx
jmp 0x555d4b
add eax, 0x38
lea ecx, [ebp - 0x494]
lea edx, [ebp - 0x294]
push ecx
push edx
lea ecx, [ebp - 0x894]
lea edx, [ebp - 0x64]
push ecx
push edx
push eax
call fcn.005c5908
mov eax, dword [ebp - 0x24]
add esp, 0x14
cmp eax, edi
jne 0x555d77
lea eax, [ebp - 0x20]
push 0x25
push eax
call fcn.005c4fbf
add esp, 8
test eax, eax
je 0x555dca
mov eax, dword [ebp - 0x24]
cmp eax, edi
jne 0x555d90
lea eax, [ebp - 0x20]
push eax
call fcn.005c4b4a
add esp, 4
cmp eax, 0x7d0
jae 0x555dca
mov eax, dword [ebp - 0x24]
cmp eax, edi
jne 0x555daa
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x29d4]
push eax
call fcn.005c4cea
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x29d4]
push ecx
push edx
call fcn.00594e10
add esp, 0x10
mov eax, dword [ebp - 0x24]
cmp eax, edi
jne 0x555dd4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x894]
lea ecx, [ebp - 0x64]
push eax
push ecx
lea edx, [ebp - 0x1a34]
push 0x6a2164
push edx
call fcn.005c5a8c
add esp, 0x14
lea eax, [ebp - 0x294]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], edi
push eax
mov dword [ebp - 0x38], edi
mov word [ebp - 0x3c], di
call fcn.00401f60
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0xf
push ecx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x44], edi
mov word [ebp - 0x48], di
call fcn.00401f60
lea edx, [ebp - 0x494]
mov byte [ebp - 4], 0x10
test edx, edx
je 0x555ecd
lea eax, [ebp - 0x494]
push eax
call fcn.005c4b4a
add esp, 4
test eax, eax
je 0x555ecd
mov eax, dword [ebp - 0x40]
cmp eax, edi
je 0x555e63
push eax
call fcn.005c4b4a
add esp, 4
mov esi, eax
jmp 0x555e65
xor esi, esi
lea ecx, [ebp - 0x494]
push ecx
call fcn.005c4b4a
add eax, esi
lea edx, [eax + eax + 2]
push edx
call fcn.005dd58d
mov esi, eax
add esp, 8
cmp esi, edi
je 0x555ecd
mov eax, dword [ebp - 0x40]
cmp eax, edi
je 0x555ea6
push eax
push esi
call fcn.005c4cea
lea eax, [ebp - 0x494]
push eax
push esi
call fcn.005c4cc0
add esp, 0x10
jmp 0x555eb6
lea ecx, [ebp - 0x494]
push ecx
push esi
call fcn.005c4cea
add esp, 8
lea ecx, [ebp - 0x40]
call fcn.00401070
push esi
mov dword [ebp - 0x40], esi
call fcn.005c4b4a
add esp, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
cmp eax, edi
mov ecx, eax
jne 0x555ed9
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 0x40]
cmp eax, edi
jne 0x555ee3
lea eax, [ebp - 0x3c]
push ecx
push eax
call fcn.005c722c
add esp, 8
test eax, eax
jne 0x555f34
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x40]
cmp eax, edi
jne 0x555f3e
lea eax, [ebp - 0x3c]
push 0x5f
push eax
call fcn.005c4a9a
add esp, 8
cmp eax, edi
je 0x55616b
mov esi, dword [ebp - 0x40]
xor ebx, ebx
xor eax, eax
cmp esi, ebx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], ebx
mov word [ebp - 0x30], bx
je 0x555fbd
cmp eax, ebx
je 0x555fbd
push esi
call fcn.005c4b4a
add esp, 4
test eax, eax
je 0x555fbd
mov eax, dword [ebp - 0x34]
cmp eax, esi
ja 0x555fbd
push eax
call fcn.005c4b4a
mov edx, dword [ebp - 0x34]
add esp, 4
lea eax, [edx + eax*2]
cmp eax, esi
jb 0x555fbd
push esi
lea ecx, [ebp - 0x70]
call fcn.0040d680
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.00401f50
push eax
lea ecx, [ebp - 0x34]
call fcn.00401f60
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x10
call fcn.00401070
jmp 0x556006
lea ecx, [ebp - 0x34]
call fcn.00401070
cmp esi, ebx
je 0x556006
push esi
call fcn.005c4b4a
add esp, 4
test eax, eax
je 0x556006
push esi
call fcn.005c4b4a
lea ecx, [eax + eax + 2]
push ecx
call fcn.005dd58d
add esp, 8
cmp eax, ebx
mov dword [ebp - 0x34], eax
je 0x556006
push esi
call fcn.005c4b4a
mov edx, dword [ebp - 0x34]
push esi
push edx
mov dword [ebp - 0x2c], eax
call fcn.005c4cea
add esp, 0xc
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 0x12
cmp eax, ebx
jne 0x556014
lea eax, [ebp - 0x30]
push 0x5f
push eax
call fcn.005c4a9a
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x55615f
mov word [esi], bx
add esi, 2
mov edi, 1
mov ax, word [esi]
cmp ax, bx
je 0x55605d
cmp ax, 0x2e
je 0x55605d
and eax, 0xffff
push eax
call fcn.005c51cc
add esp, 4
test eax, eax
je 0x55615f
add esi, 2
jmp 0x556034
cmp edi, ebx
je 0x55615f
cmp word [esi], 0x2e
jne 0x55615f
cmp esi, ebx
je 0x5560ec
push esi
call fcn.005c4b4a
add esp, 4
test eax, eax
je 0x5560ec
mov eax, dword [ebp - 0x34]
cmp eax, ebx
je 0x556094
push eax
call fcn.005c4b4a
add esp, 4
mov edi, eax
jmp 0x556096
xor edi, edi
push esi
call fcn.005c4b4a
add eax, edi
lea eax, [eax + eax + 2]
push eax
call fcn.005dd58d
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x5560ec
mov eax, dword [ebp - 0x34]
cmp eax, ebx
je 0x5560cb
push eax
push edi
call fcn.005c4cea
push esi
push edi
call fcn.005c4cc0
add esp, 0x10
jmp 0x5560d5
push esi
push edi
call fcn.005c4cea
add esp, 8
lea ecx, [ebp - 0x34]
call fcn.00401070
push edi
mov dword [ebp - 0x34], edi
call fcn.005c4b4a
add esp, 4
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
cmp eax, ebx
mov ecx, eax
jne 0x5560f8
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 0x34]
cmp eax, ebx
jne 0x556102
lea eax, [ebp - 0x30]
push ecx
push eax
call fcn.005c722c
add esp, 8
test eax, eax
jne 0x55615f
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x10
call fcn.00401070
mov edi, dword [ebp - 0x14]
mov ecx, dword [edi + 0xb0]
mov eax, dword [ecx + 0x144]
test ah, 0x20
je 0x556205
lea edx, [ebp - 0x694]
lea eax, [ebp - 0x294]
push edx
lea ecx, [ebp - 0x894]
push eax
lea edx, [ebp - 0x64]
push ecx
lea eax, [ebp - 0x1a34]
push edx
push eax
call fcn.005c5908
lea ecx, [ebp - 0x694]
lea edx, [ebp - 0x494]
push ecx
push edx
call fcn.005c722c
add esp, 0x1c
test eax, eax
je 0x556205
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi + 0x31e0]
xor ebx, ebx
cmp dword [eax + 0x15c], ebx
je 0x55629e
lea ecx, [ebp - 0x694]
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x894]
push edx
lea ecx, [ebp - 0x64]
push eax
lea edx, [ebp - 0x1a34]
push ecx
push edx
call fcn.005c5908
lea eax, [ebp - 0x694]
lea ecx, [ebp - 0x494]
push eax
push ecx
call fcn.005c722c
add esp, 0x1c
test eax, eax
jne 0x5567d3
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x40]
cmp eax, ebx
jne 0x5562a8
lea eax, [ebp - 0x3c]
push str.manuallogin.html
push eax
call fcn.005c505f
add esp, 8
test eax, eax
jne 0x556399
lea edx, [ebp - 0x694]
lea eax, [ebp - 0x294]
push edx
lea ecx, [ebp - 0x894]
push eax
lea edx, [ebp - 0x64]
push ecx
lea eax, [ebp - 0x1a34]
push edx
push eax
call fcn.005c5908
lea ecx, [ebp - 0x694]
push 0x6a6314
push ecx
call fcn.005c722c
add esp, 0x1c
test eax, eax
jne 0x55633e
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea edx, [ebp - 0x694]
push 0x6a7c00
push edx
call fcn.005c722c
add esp, 8
test eax, eax
jne 0x556399
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0xa94]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x894]
push ecx
lea eax, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x1a34]
push eax
push ecx
call fcn.005c5908
lea edx, [ebp - 0xa94]
lea eax, [ebp - 0x494]
push edx
push eax
call fcn.005c722c
add esp, 0x1c
test eax, eax
jne 0x5564ba
mov eax, dword [edi + 0xb0]
mov cl, byte [eax + 0x15c]
test cl, cl
jne 0x555ef1
test byte [eax + 0x144], 0x40
jne 0x555ef1
mov esi, dword [ebp - 0x40]
cmp esi, ebx
jne 0x556407
lea esi, [ebp - 0x3c]
lea ecx, [ebp - 0x294]
push ecx
call fcn.005c4b4a
push eax
lea edx, [ebp - 0x294]
push esi
push edx
call fcn.005c53e6
add esp, 0x10
test eax, eax
jne 0x5564ba
mov esi, dword [ebp - 0x40]
cmp esi, ebx
jne 0x556436
lea esi, [ebp - 0x3c]
lea eax, [ebp - 0x294]
push eax
call fcn.005c4b4a
mov edx, eax
push esi
mov dword [ebp + 8], edx
call fcn.005c4b4a
mov ecx, dword [ebp + 8]
add esp, 8
cmp ecx, eax
jae 0x5564ba
mov esi, dword [ebp - 0x40]
cmp esi, ebx
jne 0x556461
lea esi, [ebp - 0x3c]
lea edx, [ebp - 0x294]
push edx
call fcn.005c4b4a
add esp, 4
cmp word [esi + eax*2], 0x5f
jne 0x5564ba
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi + 0xb0]
mov cl, byte [eax + 0x2f9]
test cl, cl
jne 0x5567d3
mov eax, dword [0x6cee7c]
lea ecx, [ebp + 8]
lea edx, [ebp - 0x50]
push ecx
push edx
push ebx
push ebx
push str.notaskfn2
push eax
mov dword [ebp + 8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x5564fe
cmp dword [ebp - 0x50], 1
je 0x5567d3
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x58], bx
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x13
cmp eax, ebx
mov edi, eax
jne 0x556518
lea edi, [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
jne 0x556522
lea eax, [ebp - 0x48]
mov ebx, dword [0x6cfe18]
test ebx, ebx
je 0x5566d3
test eax, eax
je 0x5566d3
lea ecx, [ebp - 0x494]
test ecx, ecx
je 0x5566d3
test edi, edi
je 0x5566d3
xor esi, esi
push eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x80], esi
mov word [ebp - 0x84], si
call fcn.00401f60
lea edx, [ebp - 0x494]
lea ecx, [ebp - 0x94]
push edx
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x8c], esi
mov word [ebp - 0x90], si
call fcn.00401f60
push edi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x74], esi
mov word [ebp - 0x78], si
call fcn.00401f60
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x16
call fcn.00401070
push esi
push ebx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x68], esi
mov word [ebp - 0x6c], si
call fcn.00402890
mov ebx, dword [ebp - 0x88]
mov byte [ebp - 4], 0x17
cmp ebx, esi
jne 0x5565e0
lea ebx, [ebp - 0x84]
mov edi, dword [ebp - 0x94]
cmp edi, esi
jne 0x5565f0
lea edi, [ebp - 0x90]
mov eax, dword [ebp - 0x7c]
cmp eax, esi
jne 0x5565fa
lea eax, [ebp - 0x78]
mov esi, dword [ebp - 0x68]
push eax
call fcn.005c4b4a
mov edx, eax
push edi
mov dword [ebp - 0x28], edx
call fcn.005c4b4a
mov edi, eax
push ebx
add edi, esi
call fcn.005c4b4a
mov ecx, dword [ebp - 0x28]
add edi, ecx
lea ebx, [eax + edi + 4]
lea esi, [ebx + ebx]
push esi
call fcn.005dd58d
mov edi, eax
add esp, 0x10
test edi, edi
mov dword [ebp - 0x5c], edi
je 0x55669d
mov ecx, esi
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp - 0x7c]
test eax, eax
mov esi, eax
jne 0x556654
lea esi, [ebp - 0x78]
mov eax, dword [ebp - 0x94]
test eax, eax
mov edx, eax
jne 0x556666
lea edx, [ebp - 0x90]
mov ecx, dword [ebp - 0x88]
test ecx, ecx
jne 0x556676
lea ecx, [ebp - 0x84]
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x556680
lea eax, [ebp - 0x6c]
push esi
push edx
push ecx
push eax
mov eax, dword [ebp - 0x5c]
push ebx
push eax
call fcn.005c4ada
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.005c4b4a
add esp, 0x1c
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x16
call fcn.00401070
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x15
call fcn.00401070
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x14
call fcn.00401070
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x13
call fcn.00401070
xor ebx, ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov word [ebp - 0x30], bx
call fcn.00401070
mov edx, 0x6a00fc
test edx, edx
je 0x55673b
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x55673b
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push ebx
push 0xffffffffffffffff
push edx
push ebx
push ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x2c], eax
je 0x55673b
lea eax, [eax + eax + 2]
push eax
call fcn.005dd58d
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x34], eax
je 0x55673e
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
push 0xffffffffffffffff
push 0x6a00fc
push ebx
push ebx
call esi
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
cmp eax, ebx
jne 0x556745
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
jne 0x55674f
lea ecx, [ebp - 0x58]
push 0x50024
push eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 7
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x34]
jne 0x5567bd
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call fcn.00401070
mov edi, dword [ebp - 0x14]
xor ebx, ebx
mov ecx, dword [edi + 0xb0]
lea edx, [ebp - 0x1a34]
push edx
call fcn.005a2080
mov eax, dword [edi + 0x31e0]
mov eax, dword [eax + 0xd8]
cmp eax, ebx
je 0x556801
mov ecx, dword [edi + 0xb0]
push eax
call fcn.005a02d0
mov eax, dword [edi + 0x31e0]
mov ecx, dword [eax + 0x14]
cmp ecx, ebx
je 0x556828
mov edx, dword [eax + 0xd8]
mov eax, dword [ecx]
push edx
push 0x13c9
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e118c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov ecx, esi
push 0xd
add ecx, edx
push str.Content_Type:
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x556bc7
test bl, bl
je 0x556bc7
mov eax, dword [edi + 0x3230]
cmp eax, 0xc8
je 0x5568b4
cmp eax, 0xce
je 0x5568b4
cmp eax, 0x130
jne 0x555292
mov edx, dword [edi + 0xb0]
mov eax, dword [edx + 0xbc]
test eax, eax
je 0x5568cd
push eax
call fcn.005dd5b6
add esp, 4
mov eax, dword [edi + 0x3218]
mov ecx, edi
lea esi, [esi + eax + 0xd]
push esi
call fcn.00556f30
add esi, eax
push 0x6a0cc0
push esi
xor ebx, ebx
call fcn.005c4c40
push 0x3b
push esi
mov edi, eax
call fcn.005c4b80
add esp, 0x10
cmp eax, edi
mov dword [ebp + 8], eax
jae 0x556906
test eax, eax
jne 0x55690a
test edi, edi
jne 0x556910
test eax, eax
mov edi, eax
je 0x556916
sub edi, esi
mov ebx, edi
jmp 0x55692c
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x55692c
sub eax, esi
mov ebx, eax
lea ecx, [ebx + 5]
push ecx
call fcn.005dd58d
mov edx, dword [ebp - 0x14]
add esp, 4
mov ecx, dword [edx + 0xb0]
mov dword [ecx + 0xbc], eax
mov eax, dword [edx + 0xb0]
mov ecx, ebx
mov edi, dword [eax + 0xbc]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [edx + 0xb0]
mov eax, dword [ecx + 0xbc]
mov byte [eax + ebx], 0
mov edx, dword [edx + 0xb0]
mov al, byte [edx + 0x14d]
test al, al
je 0x5569d8
mov ecx, dword [edx + 0xbc]
push 9
push str.text_html
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x5569d8
mov esi, dword [ebp - 0x14]
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0xbc]
push eax
call fcn.005dd5b6
mov eax, dword [esi + 0xb0]
add esp, 4
mov dword [eax + 0xbc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0x14]
xor eax, eax
mov edx, dword [ecx + 0xb0]
or ecx, 0xffffffff
mov edi, dword [edx + 0xc4]
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x556a48
mov edx, dword [edx + 0xbc]
push 9
push str.text_html
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x556a48
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 0xbc]
push eax
call fcn.005dd5b6
mov ecx, dword [esi + 0xb0]
add esp, 4
mov dword [ecx + 0xbc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [ebp - 0x14]
push str.application_vnd.lumberjack.manifest
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + 0xbc]
push eax
call fcn.005c6000
add esp, 8
test eax, eax
jne 0x556ac9
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax + 0x144]
test ch, 1
je 0x556ac9
mov eax, dword [eax + 0xbc]
push eax
call fcn.005dd5b6
mov ecx, dword [ebx + 0xb0]
add esp, 4
mov dword [ecx + 0xbc], 0
mov edx, dword [ebx + 0xb0]
mov dword [edx + 0x2e8], 1
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x2ec], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0xb0]
push 0x14
push str.multipart_byteranges
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
je 0x556b0d
mov eax, dword [ebx + 0xb0]
push 0x16
push str.multipart_x_byteranges
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555292
mov eax, dword [ebp + 8]
test eax, eax
je 0x555292
push str.boundary
push eax
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x555292
push 0x3d
push eax
call fcn.005c4b80
mov esi, eax
add esp, 8
test esi, esi
je 0x555292
inc esi
mov ecx, ebx
push esi
call fcn.00556f30
add esi, eax
push 0x6a0cc0
push esi
xor edi, edi
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x556b74
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x556b78
sub eax, esi
mov edi, eax
add ebx, 0x323c
push edi
mov ecx, ebx
call fcn.005e1559
mov ecx, edi
mov edi, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x555292
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x3240], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov ecx, esi
push 0xb
add ecx, edx
push str.Set_Cookie:
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x556c0e
test bl, bl
je 0x556c0e
mov edx, dword [edi + 0x3218]
mov ecx, edi
lea eax, [esi + edx + 0xb]
push eax
call fcn.00559fb0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov ecx, esi
push 5
add ecx, edx
push str.ETag:
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x556ca1
mov edx, dword [edi + 0x3218]
mov ecx, edi
lea esi, [esi + edx + 5]
push esi
call fcn.00556f30
add esi, eax
push 0x6a0cc0
push esi
xor ebx, ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x556c66
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x556c6a
sub eax, esi
mov ebx, eax
mov ecx, dword [edi + 0xb0]
push ebx
add ecx, 0xf0
call fcn.005e1559
mov ecx, ebx
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov ecx, esi
push 4
add ecx, edx
push str.P3P:
push ecx
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x556d05
mov edx, dword [edi + 0x3218]
mov ecx, edi
lea esi, [esi + edx + 4]
push esi
call fcn.00556f30
push 0x23
add esi, eax
push str.policyref_http:__p3p.yahoo.com_w3c_
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555292
mov byte [edi + 0x3241], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov eax, esi
push 5
add eax, edx
push str.Date:
push eax
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x556de1
test bl, bl
je 0x556de1
mov ecx, dword [edi + 0x3218]
lea esi, [esi + ecx + 5]
mov ecx, edi
push esi
call fcn.00556f30
add esi, eax
push 0x6a0cc0
push esi
xor ebx, ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x556d69
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x556d6d
sub eax, esi
mov ebx, eax
lea edx, [ebx + 1]
push edx
call fcn.005dd58d
mov ecx, ebx
mov edi, eax
mov edx, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov dword [ebp + 8], eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x28]
mov byte [eax + ebx], 0
call fcn.0055be80
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x28]
push esi
mov byte [ebp - 4], 0x19
call fcn.0055bec0
mov ecx, dword [ebp - 0x14]
push esi
mov edx, dword [ecx + 0xb0]
mov dword [edx + 0x334], eax
call fcn.005dd5b6
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.0055beb0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x3218]
mov eax, esi
push 0xe
add eax, edx
push str.Last_Modified:
push eax
call fcn.005c6ee0
add esp, 0xc
test eax, eax
jne 0x555292
mov eax, dword [edi + 0xac]
test eax, eax
jne 0x555292
test bl, bl
je 0x555292
mov ecx, dword [edi + 0x3218]
lea esi, [esi + ecx + 0xe]
mov ecx, edi
push esi
call fcn.00556f30
add esi, eax
push 0x6a0cc0
push esi
xor ebx, ebx
call fcn.005c4c40
add esp, 8
test eax, eax
jne 0x556e53
push 0x6b8470
push esi
call fcn.005c4c40
add esp, 8
test eax, eax
je 0x556e57
sub eax, esi
mov ebx, eax
lea edx, [ebx + 1]
push edx
call fcn.005dd58d
mov ecx, ebx
mov edi, eax
mov edx, ecx
mov dword [ebp + 8], eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xb0]
mov eax, dword [ecx + 0x20]
test eax, eax
jne 0x556ec4
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x31e0]
mov edx, dword [eax + 0xd8]
mov eax, dword [ebp + 8]
push edx
push eax
call fcn.005a15c0
mov esi, dword [ebp + 8]
push esi
call fcn.005dd5b6
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [ebp + 8]
push ebx
push eax
push esi
call fcn.005c6ee0
add esp, 0xc
test eax, eax
je 0x556efd
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x31e0]
mov edx, dword [ecx + 0x158]
test edx, edx
jne 0x556efd
push esi
add eax, 0x3204
push 0x69ffbc
push eax
call fcn.005d9fbb
add esp, 0xc
push esi
call fcn.005dd5b6
mov ecx, dword [ebp - 0xc]
add esp, 4
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4