Function at 0x4607e4
Capabilities:
Connect socket
Encode data using xor
Get socket status
Resolve dns
Set socket configuration

Disassembly:
push 0x5a4
mov eax, 0x47b328
call fcn.0046faf5
mov esi, ecx
mov dword [ebp - 0x534], esi
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0x53c], eax
inc ecx
xor eax, eax
mov dword [ebp - 0x554], esi
push eax
push ecx
mov dword [ebp - 4], eax
or dword [esi + 0x120], 0xffffffff
push 2
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x5ac], eax
pop eax
push eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x5b0], 0xb4
call dword [sym.imp.WS2_32.dll_socket]
mov dword [esi + 0x120], eax
cmp eax, 0xffffffff
je 0x461df4
cmp word [ebp + 0xc], 0
je 0x460867
push dword [ebp + 0xc]
call dword [sym.imp.WS2_32.dll_htons]
movzx eax, ax
xor edi, edi
jmp 0x46088a
xor edi, edi
push edi
push str.mail
call dword [sym.imp.WS2_32.dll_getservbyname]
test eax, eax
jne 0x460886
push 0x19
call dword [sym.imp.WS2_32.dll_htons]
movzx eax, ax
jmp 0x46088a
movzx eax, word [eax + 8]
push 2
pop ecx
push dword [ebp - 0x53c]
mov word [ebp - 0xec], cx
mov word [ebp - 0xea], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0xe8], eax
cmp eax, 0xffffffff
jne 0x4608dd
push dword [ebp - 0x53c]
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov ecx, eax
test ecx, ecx
je 0x460920
movsx eax, word [ecx + 0xa]
push eax
mov eax, dword [ecx + 0xc]
push dword [eax]
lea eax, [ebp - 0xe8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x59c]
push eax
push 0x8004667e
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_ioctlsocket]
mov ecx, dword [esi + 0x120]
cmp eax, 0xffffffff
jne 0x460945
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x6c
lea ecx, [ebp - 0x598]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x69
lea ecx, [ebp - 0x5a0]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push 0x10
lea eax, [ebp - 0xec]
push eax
push ecx
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x461d33
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
je 0x460990
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x68
lea ecx, [ebp - 0x594]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
mov eax, dword [esi + 0x120]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x420], ecx
lea ecx, [ebp - 0x5b0]
push ecx
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x41c], eax
push ecx
lea ecx, [ebp - 0x524]
inc eax
push ecx
push edi
push eax
call dword [sym.imp.WS2_32.dll_select]
mov ecx, eax
cmp ecx, 0xffffffff
jne 0x4609fb
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x6d
lea ecx, [ebp - 0x590]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
mov eax, dword [esi + 0x120]
test ecx, ecx
jne 0x460a28
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x193
lea ecx, [ebp - 0x58c]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
lea ecx, [ebp - 0x524]
push ecx
push eax
call dword [sym.imp.WS2_32.dll___WSAFDIsSet]
test eax, eax
je 0x461d75
mov edx, dword [ebp - 0x524]
mov ecx, edi
test edx, edx
je 0x460a92
mov eax, dword [esi + 0x120]
cmp dword [ebp + ecx*4 - 0x520], eax
je 0x460a60
inc ecx
cmp ecx, edx
jb 0x460a50
jmp 0x460a92
lea eax, [edx - 1]
cmp ecx, eax
jae 0x460a8b
lea eax, [ebp - 0x51c]
mov eax, dword [eax + ecx*4]
mov dword [ebp + ecx*4 - 0x520], eax
inc ecx
mov edx, dword [ebp - 0x524]
lea eax, [edx - 1]
cmp ecx, eax
lea eax, [ebp - 0x51c]
jb 0x460a6d
dec edx
mov dword [ebp - 0x524], edx
mov edx, dword [ebp - 0x420]
mov ecx, edi
test edx, edx
je 0x460ae6
mov eax, dword [esi + 0x120]
cmp dword [ebp + ecx*4 - 0x41c], eax
je 0x460ab4
inc ecx
cmp ecx, edx
jb 0x460aa4
jmp 0x460ae6
lea eax, [edx - 1]
cmp ecx, eax
jae 0x460adf
lea eax, [ebp - 0x418]
mov eax, dword [eax + ecx*4]
mov dword [ebp + ecx*4 - 0x41c], eax
inc ecx
mov edx, dword [ebp - 0x420]
lea eax, [edx - 1]
cmp ecx, eax
lea eax, [ebp - 0x418]
jb 0x460ac1
dec edx
mov dword [ebp - 0x420], edx
mov eax, dword [ebp + 0x10]
cmp eax, 3
je 0x460af4
mov dword [esi + 0x168], eax
mov eax, dword [esi + 0x168]
cmp eax, 1
je 0x460b06
push 2
pop ecx
cmp eax, ecx
jne 0x460b1f
mov ecx, esi
call 0x463995
push 2
pop eax
cmp dword [esi + 0x168], eax
jne 0x460b1f
mov ecx, esi
call fcn.004639dc
xor ecx, ecx
call fcn.0045f7f3
push eax
mov ecx, esi
call fcn.004635a8
mov ecx, esi
call fcn.00463221
cmp dword [esi + 0x168], 1
jne 0x460b4c
mov ecx, esi
call 0x4632d5
mov ecx, esi
call fcn.00463221
cmp byte [ebp + 0x14], 0
je 0x461d33
mov ecx, dword [esi + 0x11c]
mov edx, str.AUTH
call fcn.0045f81a
cmp al, 1
jne 0x461d33
cmp dword [esi + 0xd8], edi
jne 0x460b92
push 0xcc
lea ecx, [ebp - 0x588]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
cmp dword [esi + 0xf0], edi
jne 0x460bb6
push 0xcd
lea ecx, [ebp - 0x584]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
mov ecx, dword [esi + 0x11c]
mov edx, str.LOGIN
call fcn.0045f81a
cmp al, 1
jne 0x460cf6
push 3
pop ecx
call fcn.0045f7f3
push str.AUTH_LOGIN_r_n
push 0x2800
push dword [esi + 0x118]
mov edi, eax
call fcn.00464629
add esp, 0xc
mov ecx, esi
push edi
call fcn.00462b8a
push edi
mov ecx, esi
call fcn.004635a8
push 0xf
lea edx, [esi + 0xc8]
pop edi
cmp dword [edx + 0x14], edi
jbe 0x460c10
mov edx, dword [edx]
push dword [esi + 0xd8]
lea ecx, [ebp - 0xac]
call fcn.0045f1c7
pop ecx
push 7
pop ecx
mov byte [ebp - 4], 1
call fcn.0045f7f3
cmp dword [ebp - 0x98], edi
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x528], eax
cmova ecx, dword [ebp - 0xac]
push ecx
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
add esp, 0x10
mov ecx, esi
push dword [ebp - 0x528]
call fcn.00462b8a
push dword [ebp - 0x528]
mov ecx, esi
call fcn.004635a8
lea edx, [esi + 0xe0]
cmp dword [edx + 0x14], edi
jbe 0x460c87
mov edx, dword [edx]
push dword [esi + 0xf0]
lea ecx, [ebp - 0x64]
call fcn.0045f1c7
pop ecx
push 2
pop eax
push 8
pop ecx
mov byte [ebp - 4], al
call fcn.0045f7f3
cmp dword [ebp - 0x50], edi
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x530], eax
cmova ecx, dword [ebp - 0x64]
push ecx
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
mov edi, dword [ebp - 0x530]
add esp, 0x10
mov ecx, esi
push edi
call fcn.00462b8a
push edi
mov ecx, esi
call fcn.004635a8
lea ecx, [ebp - 0x64]
call fcn.0045f59e
lea ecx, [ebp - 0xac]
jmp 0x461d2e
mov ecx, dword [esi + 0x11c]
mov edx, str.PLAIN
call fcn.0045f81a
cmp al, 1
jne 0x460de9
push 2
pop eax
mov ecx, eax
call fcn.0045f7f3
lea ecx, [esi + 0xc8]
mov dword [ebp - 0x544], eax
cmp dword [ecx + 0x14], 0xf
mov edx, ecx
jbe 0x460d30
mov edx, dword [ecx]
mov ecx, edx
lea eax, [esi + 0xe0]
cmp dword [eax + 0x14], 0xf
jbe 0x460d3e
mov eax, dword [eax]
push eax
push ecx
push edx
push str._s_s_s
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
mov ecx, dword [esi + 0x118]
add esp, 0x18
mov edi, ecx
lea edx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x460d64
sub edi, edx
call fcn.0045f8f7
mov edx, eax
xor eax, eax
mov dword [ebp - 0x530], edx
mov ecx, eax
test edi, edi
je 0x460d90
cmp byte [ecx + edx], 0x5e
jne 0x460d8b
mov byte [ecx + edx], al
inc ecx
cmp ecx, edi
jb 0x460d82
push edi
lea ecx, [ebp - 0x64]
call fcn.0045f1c7
pop ecx
push dword [ebp - 0x530]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140.dll_Ordinal_266]
cmp dword [ebp - 0x50], 0xf
lea eax, [ebp - 0x64]
cmova eax, dword [ebp - 0x64]
push eax
push str.AUTH_PLAIN__s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
mov edi, dword [ebp - 0x544]
add esp, 0x14
mov ecx, esi
push edi
call fcn.00462b8a
push edi
mov ecx, esi
call fcn.004635a8
jmp 0x461d2b
mov ecx, dword [esi + 0x11c]
mov edx, str.CRAM_MD5
call fcn.0045f81a
cmp al, 1
jne 0x461167
push 4
pop ecx
call fcn.0045f7f3
push str.AUTH_CRAM_MD5_r_n
push 0x2800
push dword [esi + 0x118]
mov dword [ebp - 0x528], eax
call fcn.00464629
add esp, 0xc
mov ecx, esi
push dword [ebp - 0x528]
call fcn.00462b8a
push dword [ebp - 0x528]
mov ecx, esi
call fcn.004635a8
push dword [esi + 0x11c]
lea ecx, [ebp - 0x7c]
call fcn.0045f5fb
push 0xffffffffffffffff
push 4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x7c]
call fcn.00463c9a
push eax
lea ecx, [ebp - 0x7c]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x4c]
call fcn.0045f368
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
cmova ecx, dword [ebp - 0x4c]
call fcn.0045f8f7
lea ecx, [esi + 0xe0]
mov dword [ebp - 0x538], eax
cmp dword [ecx + 0x14], 0xf
jbe 0x460ead
mov ecx, dword [ecx]
call fcn.0045f8f7
cmp dword [ebp - 0x538], 0
mov edx, eax
mov dword [ebp - 0x528], edx
je 0x46114b
test edx, edx
je 0x46114b
mov esi, dword [esi + 0xf0]
cmp esi, 0x40
jle 0x460f0b
lea ecx, [ebp - 0x308]
call fcn.00464acb
push esi
push edx
call fcn.00464ad3
lea ecx, [ebp - 0x308]
call fcn.00464b91
lea ecx, [ebp - 0x308]
call fcn.00464c34
push 0x10
mov dword [ebp - 0x528], eax
pop esi
push 0x40
lea eax, [ebp - 0x19c]
push edi
push eax
call sub.VCRUNTIME140.dll_memset
push 0x40
lea eax, [ebp - 0x130]
push edi
push eax
call sub.VCRUNTIME140.dll_memset
mov edi, dword [ebp - 0x528]
lea eax, [ebp - 0x19c]
push esi
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
push esi
lea eax, [ebp - 0x130]
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x30
xor eax, eax
movups xmm0, xmmword [ebp + eax - 0x19c]
xorps xmm0, xmmword [str.6666666666666666]
movups xmmword [ebp + eax - 0x19c], xmm0
movups xmm0, xmmword [ebp + eax - 0x130]
xorps xmm0, xmmword [0x4a7ed0]
movups xmmword [ebp + eax - 0x130], xmm0
add eax, 0x10
cmp eax, 0x40
jl 0x460f50
lea ecx, [ebp - 0x230]
call fcn.00464acb
push 0x40
lea eax, [ebp - 0x19c]
push eax
call fcn.00464ad3
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x230]
push dword [ebp - 0x538]
call fcn.00464ad3
lea ecx, [ebp - 0x230]
call fcn.00464b91
lea ecx, [ebp - 0x230]
call fcn.00464c34
mov esi, eax
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x530], esi
call fcn.00464acb
push 0x40
lea eax, [ebp - 0x130]
push eax
call fcn.00464ad3
push 0x10
push esi
lea ecx, [ebp - 0x29c]
call fcn.00464ad3
lea ecx, [ebp - 0x29c]
call fcn.00464b91
lea ecx, [ebp - 0x29c]
call fcn.00464c98
mov edx, eax
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461015
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x4c]
call fcn.00463ecd
push dword [ebp - 0x538]
mov esi, dword [sym.imp.mfc140.dll_Ordinal_266]
call esi
push edi
call esi
push dword [ebp - 0x530]
call esi
mov esi, dword [ebp - 0x534]
mov eax, closesocket
add esp, 0xc
lea ecx, [esi + 0xc8]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x461e0e
push 0xf
pop edi
cmp dword [ecx + 0x14], edi
jbe 0x46106d
mov ecx, dword [ecx]
push 1
push 0x4a3774
push edx
push ecx
push ecx
push dword [ebp - 0x554]
lea ecx, [ebp - 0xac]
call fcn.00464258
mov byte [ebp - 4], 6
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], edi
lea ecx, [ebp - 0xac]
push dword [ebp - 0x3c]
cmova eax, dword [ebp - 0x4c]
push eax
call fcn.00463e61
push eax
lea ecx, [ebp - 0x64]
call fcn.0045f5c3
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463d8e
lea ecx, [ebp - 0x64]
call fcn.0045f59e
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 5
call fcn.0045f59e
cmp dword [ebp - 0x38], edi
lea edx, [ebp - 0x4c]
push dword [ebp - 0x3c]
cmova edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x94]
call fcn.0045f1c7
pop ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
cmp dword [ebp - 0x68], edi
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
add esp, 0x10
push 8
pop ecx
call fcn.0045f7f3
mov edi, eax
mov ecx, esi
push edi
call fcn.00462b8a
push edi
mov ecx, esi
call fcn.004635a8
lea ecx, [ebp - 0x4c]
call fcn.0045f59e
lea ecx, [ebp - 0x7c]
jmp 0x461d2e
push 0xce
lea ecx, [ebp - 0x580]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
mov ecx, dword [esi + 0x11c]
mov edx, str.DIGEST_MD5
call fcn.0045f81a
cmp al, 1
jne 0x461d59
push 6
pop ecx
call fcn.0045f7f3
push str.AUTH_DIGEST_MD5_r_n
push 0x2800
push dword [esi + 0x118]
mov dword [ebp - 0x528], eax
call fcn.00464629
add esp, 0xc
mov ecx, esi
push dword [ebp - 0x528]
call fcn.00462b8a
push dword [ebp - 0x528]
mov ecx, esi
call fcn.004635a8
push dword [esi + 0x11c]
lea ecx, [ebp - 0x64]
call fcn.0045f5fb
push 0xffffffffffffffff
push 4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x64]
call fcn.00463c9a
push eax
lea ecx, [ebp - 0x64]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x7c]
call fcn.0045f368
push ecx
push str.nonce
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 8
call fcn.00463cea
test eax, eax
jns 0x461235
push 0xcf
lea ecx, [ebp - 0x57c]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push 0xffffffffffffffff
add eax, 7
lea ecx, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00463c9a
push ecx
push 0x4a38b0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 9
call fcn.00463cea
test eax, eax
jns 0x46127f
push 0xcf
lea ecx, [ebp - 0x56c]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push eax
push edi
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xdc]
call fcn.00463c9a
push eax
lea ecx, [ebp - 0xdc]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
xor eax, eax
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], al
push ecx
push str.realm
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa
call fcn.00463cea
test eax, eax
js 0x46135c
push 0xffffffffffffffff
add eax, 7
lea ecx, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00463c9a
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
push ecx
push 0x4a38b0
lea ecx, [ebp - 0x4c]
call fcn.00463cea
test eax, eax
jns 0x461333
push 0xcf
lea ecx, [ebp - 0x5a4]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push eax
xor edi, edi
lea eax, [ebp - 0x94]
push edi
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463c9a
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
jmp 0x46135e
xor edi, edi
push edi
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
push 0x4a2a20
lea eax, [ebp - 0x34]
push 0x11
push eax
call fcn.00464629
push 1
push str._08d
lea eax, [ebp - 0x20]
push 9
push eax
call fcn.00464629
add esp, 0x24
lea ecx, [ebp - 0xac]
push str.auth
call fcn.0045f5fb
lea eax, [ebp - 0x564]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x31c]
mov dword [ebp - 0x564], 0x80
push eax
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_getpeername]
test eax, eax
jne 0x4613e3
push 0xd0
lea ecx, [ebp - 0x568]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push dword [ebp - 0x318]
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0045f5fb
mov eax, closesocket
mov byte [ebp - 4], 0xc
sub eax, dword [ebp - 0xb4]
cmp eax, 5
jb 0x461e0e
push 0xf
pop edi
push dword [ebp - 0xb4]
cmp dword [ebp - 0xb0], edi
lea eax, [ebp - 0xc4]
cmova eax, dword [ebp - 0xc4]
push eax
push 5
push str.smtp_
push ecx
push dword [ebp - 0x554]
lea ecx, [ebp - 0x94]
call fcn.00464258
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xc4]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
cmp dword [ebp - 0x38], edi
lea ecx, [ebp - 0x4c]
cmova ecx, dword [ebp - 0x4c]
call fcn.0045f8f7
lea ecx, [esi + 0xc8]
mov dword [ebp - 0x54c], eax
cmp dword [ecx + 0x14], edi
jbe 0x461488
mov ecx, dword [ecx]
call fcn.0045f8f7
lea ecx, [esi + 0xe0]
mov dword [ebp - 0x558], eax
cmp dword [ecx + 0x14], edi
jbe 0x4614a0
mov ecx, dword [ecx]
call fcn.0045f8f7
cmp dword [ebp - 0xc8], edi
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x550], eax
cmova ecx, dword [ebp - 0xdc]
call fcn.0045f8f7
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x540], eax
call fcn.0045f8f7
cmp dword [ebp - 0xb0], edi
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x538], eax
cmova ecx, dword [ebp - 0xc4]
call fcn.0045f8f7
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x53c], eax
call fcn.0045f8f7
cmp dword [ebp - 0x98], edi
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x528], eax
cmova ecx, dword [ebp - 0xac]
call fcn.0045f8f7
cmp dword [ebp - 0x54c], 0
mov dword [ebp - 0x560], eax
je 0x461d3d
mov edx, dword [ebp - 0x558]
test edx, edx
je 0x461d3d
cmp dword [ebp - 0x550], 0
je 0x461d3d
cmp dword [ebp - 0x540], 0
je 0x461d3d
cmp dword [ebp - 0x538], 0
je 0x461d3d
cmp dword [ebp - 0x53c], 0
je 0x461d3d
cmp dword [ebp - 0x528], 0
je 0x461d3d
test eax, eax
je 0x461d3d
lea ecx, [ebp - 0x1c4]
call fcn.00464acb
push dword [esi + 0xd8]
push edx
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x1c4]
call fcn.00464ad3
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x1c4]
push dword [ebp - 0x54c]
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x1c4]
call fcn.00464ad3
push dword [esi + 0xf0]
lea ecx, [ebp - 0x1c4]
push dword [ebp - 0x550]
call fcn.00464ad3
lea ecx, [ebp - 0x1c4]
call fcn.00464b91
lea ecx, [ebp - 0x1c4]
call fcn.00464c34
mov edx, eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x548], edx
call fcn.00464acb
push 0x10
push edx
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x230]
call fcn.00464ad3
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x230]
push dword [ebp - 0x540]
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x230]
call fcn.00464ad3
lea ecx, [ebp - 0x34]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46165d
sub ecx, edx
push ecx
push dword [ebp - 0x538]
lea ecx, [ebp - 0x230]
call fcn.00464ad3
lea ecx, [ebp - 0x230]
call fcn.00464b91
lea ecx, [ebp - 0x230]
call fcn.00464c98
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x544], eax
call fcn.00464acb
push 0xd
push str.AUTHENTICATE:
call fcn.00464ad3
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x29c]
push dword [ebp - 0x53c]
call fcn.00464ad3
lea ecx, [ebp - 0x29c]
call fcn.00464b91
lea ecx, [ebp - 0x29c]
call fcn.00464c98
push dword [ebp - 0x548]
mov dword [ebp - 0x530], eax
call dword [sym.imp.mfc140.dll_Ordinal_266]
pop ecx
mov ecx, dword [ebp - 0x544]
call fcn.0045f8f7
mov ecx, dword [ebp - 0x530]
mov dword [ebp - 0x55c], eax
call fcn.0045f8f7
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x548], eax
call fcn.00464acb
push 0x20
push dword [ebp - 0x55c]
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x158]
call fcn.00464ad3
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x158]
push dword [ebp - 0x540]
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x158]
call fcn.00464ad3
lea ecx, [ebp - 0x20]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461766
sub ecx, edx
push ecx
push dword [ebp - 0x528]
lea ecx, [ebp - 0x158]
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x158]
call fcn.00464ad3
lea ecx, [ebp - 0x34]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461799
sub ecx, edx
push ecx
push dword [ebp - 0x538]
lea ecx, [ebp - 0x158]
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x158]
call fcn.00464ad3
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x158]
push dword [ebp - 0x560]
call fcn.00464ad3
push 1
push 0x4a38d4
lea ecx, [ebp - 0x158]
call fcn.00464ad3
push 0x20
push dword [ebp - 0x548]
lea ecx, [ebp - 0x158]
call fcn.00464ad3
lea ecx, [ebp - 0x158]
call fcn.00464b91
lea ecx, [ebp - 0x158]
call fcn.00464c98
mov edx, eax
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x52c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461825
sub ecx, dword [ebp - 0x52c]
push ecx
push edx
lea ecx, [ebp - 0x7c]
call fcn.00463ecd
push dword [ebp - 0x54c]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x558]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x550]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x540]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x538]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x53c]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x528]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x560]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x55c]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x548]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x544]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x530]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push str.charset
push dword [esi + 0x11c]
call dword [sym.imp.VCRUNTIME140.dll_strstr]
lea eax, [esi + 0xc8]
add esp, 0x38
cmp dword [eax + 0x14], edi
jbe 0x4618ed
mov eax, dword [eax]
push eax
push str.charsetutf_8_username__s_
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
add esp, 0x10
cmp dword [ebp - 0x3c], 0
je 0x461972
cmp dword [ebp - 0x38], edi
lea eax, [ebp - 0x4c]
cmova eax, dword [ebp - 0x4c]
push eax
push str._realm__s_
push 0x2800
push dword [esi + 0x11c]
call fcn.00464629
mov edx, dword [esi + 0x11c]
add esp, 0x10
mov ecx, edx
mov dword [ebp - 0x52c], ecx
mov al, byte [edx]
inc edx
test al, al
jne 0x46193d
mov edi, dword [esi + 0x118]
sub edx, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x46194d
mov esi, dword [ebp - 0x52c]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x534]
push 0xf
pop edi
cmp dword [ebp - 0xc8], edi
lea eax, [ebp - 0xdc]
cmova eax, dword [ebp - 0xdc]
push eax
push str._nonce__s_
push 0x2800
push dword [esi + 0x11c]
call fcn.00464629
mov edx, dword [esi + 0x11c]
add esp, 0x10
mov ecx, edx
mov dword [ebp - 0x52c], ecx
mov al, byte [edx]
inc edx
test al, al
jne 0x4619ac
mov edi, dword [esi + 0x118]
sub edx, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4619bc
mov esi, dword [ebp - 0x52c]
lea eax, [ebp - 0x20]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x534]
push eax
push str._nc_s
push 0x2800
push dword [ecx + 0x11c]
call fcn.00464629
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461a0e
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461a1e
mov ecx, esi
lea eax, [ebp - 0x34]
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
push eax
push str._cnonce__s_
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x2800
push dword [edx + 0x11c]
call fcn.00464629
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461a74
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461a84
mov ecx, esi
lea eax, [ebp - 0xc4]
shr ecx, 2
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0xb0], 0xf
cmova eax, dword [ebp - 0xc4]
push eax
push str._digest_uri__s_
push 0x2800
push dword [edx + 0x11c]
call fcn.00464629
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461aeb
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461afb
mov ecx, esi
lea eax, [ebp - 0x7c]
shr ecx, 2
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x68], 0xf
cmova eax, dword [ebp - 0x7c]
push eax
push str._response_s
push 0x2800
push dword [edx + 0x11c]
call fcn.00464629
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461b59
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461b69
mov ecx, esi
lea eax, [ebp - 0xac]
shr ecx, 2
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x98], 0xf
cmova eax, dword [ebp - 0xac]
push eax
push str._qop_s
push 0x2800
push dword [edx + 0x11c]
call fcn.00464629
mov ecx, dword [ebp - 0x534]
add esp, 0x10
mov edx, dword [ecx + 0x11c]
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x461bca
mov edi, dword [ecx + 0x118]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461bda
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x534]
mov ecx, dword [esi + 0x118]
call fcn.0045f8f7
mov ecx, dword [esi + 0x118]
mov edi, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461c0c
sub ecx, edx
mov edx, edi
push ecx
lea ecx, [ebp - 0x94]
call fcn.0045f1c7
pop ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00463d8e
lea ecx, [ebp - 0x94]
call fcn.0045f59e
push edi
call dword [sym.imp.mfc140.dll_Ordinal_266]
push 0xf
pop edi
cmp dword [ebp - 0x50], edi
lea eax, [ebp - 0x64]
cmova eax, dword [ebp - 0x64]
push eax
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
add esp, 0x14
push 6
pop ecx
call fcn.0045f7f3
push eax
mov ecx, esi
mov dword [ebp - 0x52c], eax
call fcn.00462b8a
push dword [ebp - 0x52c]
mov ecx, esi
call fcn.004635a8
push 0x4a3808
push 0x2800
push dword [esi + 0x118]
call fcn.00464629
add esp, 0xc
push 8
pop ecx
call fcn.0045f7f3
push eax
mov ecx, esi
mov dword [ebp - 0x52c], eax
call fcn.00462b8a
push dword [ebp - 0x52c]
mov ecx, esi
call fcn.004635a8
lea ecx, [ebp - 0xc4]
call fcn.0045f59e
lea ecx, [ebp - 0xac]
call fcn.0045f59e
mov ecx, dword [ebp - 0x38]
cmp ecx, edi
jbe 0x461d0d
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461d04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x461d04
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0046f32e
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x38], edi
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x4c], al
call fcn.0045f59e
lea ecx, [ebp - 0x7c]
call fcn.0045f59e
lea ecx, [ebp - 0x64]
call fcn.0045f59e
mov al, 1
call fcn.0046fa47
ret 0x18
push 0xce
lea ecx, [ebp - 0x570]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push 0x1a1
lea ecx, [ebp - 0x574]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
lea eax, [ebp - 0x420]
push eax
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll___WSAFDIsSet]
test eax, eax
je 0x460990
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x6d
lea ecx, [ebp - 0x578]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
jmp 0x461e08
push 0x6a
lea ecx, [ebp - 0x5a8]
call fcn.0045f7e8
push 0x4ac194
mov eax, ecx
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
call fcn.0045f1bb
int3