Function at 0x56db20
Capabilities:
Check http status code
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x62bd56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x29c4
call fcn.005e5310
push ebx
mov ebx, ecx
push esi
push edi
mov eax, dword [ebx + 0x3220]
mov dword [ebp - 0x10], esp
xor edi, edi
push eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], edi
call fcn.00570510
mov edx, dword [ebx + 0x3220]
mov esi, eax
mov ecx, esi
push 0xf
add ecx, edx
push str.content_length:
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56dc84
mov al, byte [ebp + 8]
test al, al
je 0x56dc52
mov edx, dword [ebx + 0x3220]
lea edi, [ebx + 0x31f8]
push edi
push str._I64d
lea eax, [esi + edx + 0xf]
push eax
call fcn.005e55f0
mov eax, dword [edi]
xor edx, edx
add esp, 0xc
cmp eax, edx
jne 0x56dc19
cmp dword [edi + 4], edx
jne 0x56dc19
mov ecx, dword [ebx + 0x3220]
lea esi, [esi + ecx + 0xf]
cmp byte [esi], 0x20
jne 0x56dbcc
inc esi
jmp 0x56dbc4
cmp byte [esi], 0x30
jne 0x56dbe2
mov eax, dword [ebx + 0x31e8]
cmp eax, edx
je 0x56dbe2
mov byte [eax + 0x85d], 1
cmp dword [ebx + 0x4c], edx
jl 0x56dc19
jg 0x56dbee
cmp dword [ebx + 0x48], edx
jbe 0x56dc19
mov ecx, dword [ebx + 0x54]
mov eax, dword [ebx + 0x50]
cmp ecx, edx
jl 0x56dc19
jg 0x56dbfe
cmp eax, edx
jbe 0x56dc19
cmp eax, dword [ebx + 0x60]
jne 0x56dc19
cmp ecx, dword [ebx + 0x64]
jne 0x56dc19
mov eax, dword [ebx + 0x31e8]
cmp eax, edx
je 0x56dc19
mov byte [eax + 0x241], 1
cmp dword [ebx + 0x31fc], edx
jg 0x56e60b
jl 0x56dc33
cmp dword [ebx + 0x31f8], edx
jae 0x56e60b
mov dword [ebx + 0x31f8], edx
mov dword [ebx + 0x31fc], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0x3220]
lea edx, [ebx + 0x3250]
push edx
push str._I64d
lea ecx, [esi + eax + 0xf]
push ecx
call fcn.005e55f0
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx + 0x31dc], edi
jne 0x56dd32
mov al, byte [ebp + 8]
test al, al
je 0x56dd32
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0xe
add edx, ecx
push str.accept_ranges:
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56dd32
cmp dword [ebx + 0xac], edi
jne 0x56dd32
mov eax, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + eax + 0xe]
push esi
call fcn.00570510
add esi, eax
push str.none
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56dd15
mov ecx, dword [ebx + 0x31e8]
cmp ecx, edi
je 0x56dcf8
mov edx, dword [ecx]
push 2
call dword [edx + 0xc]
mov dword [ebx + 0x31dc], 2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x31dc], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0xe
add eax, edx
push str.Content_Range:
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56de03
mov al, byte [ebp + 8]
test al, al
je 0x56de03
mov ecx, dword [ebx + 0x3220]
push 0x2f
lea edx, [esi + ecx + 0xe]
push edx
call fcn.005e51d0
add esp, 8
cmp eax, edi
je 0x56dd9b
mov cl, byte [eax + 1]
inc eax
cmp cl, 0xd
je 0x56dd9b
cmp cl, 0xa
je 0x56dd9b
lea ecx, [ebx + 0x3258]
push ecx
push str._I64d
push eax
call fcn.005e55f0
add esp, 0xc
mov edx, dword [ebx + 0x3220]
push 0x2d
lea eax, [esi + edx + 0xe]
push eax
call fcn.005e51d0
add esp, 8
cmp eax, edi
je 0x56e60b
mov cl, byte [eax + 1]
inc eax
cmp cl, 0xd
je 0x56e60b
cmp cl, 0xa
je 0x56e60b
add ebx, 0x3260
push ebx
push str._I64d
push eax
call fcn.005e55f0
add esp, 0xc
test eax, eax
jg 0x56e60b
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0x12
add ecx, edx
push str.Transfer_Encoding:
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56de7d
mov edx, dword [ebx + 0x3220]
lea esi, [esi + edx + 0x12]
cmp esi, edi
je 0x56e60b
cmp byte [esi], 0x20
jne 0x56de3b
inc esi
jmp 0x56de33
push 7
push str.chunked
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56de69
mov byte [ebx + 0xc8], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x2c
push esi
call fcn.005e51d0
add esp, 8
cmp eax, edi
je 0x56de79
inc eax
mov esi, eax
jmp 0x56de2b
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0x15
add eax, edx
push str.Server:_BestHop_2.4.4
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56deca
mov al, byte [ebp + 8]
test al, al
je 0x56deca
mov ebx, dword [ebx + 0x31e8]
cmp ebx, edi
je 0x56e60b
mov byte [ebx + 0x241], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0x1b
add ecx, edx
push str.Server:_MediaFire_HTTP_lrbd
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56deef
mov al, byte [ebp + 8]
test al, al
jne 0x56dea2
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0x11
add edx, ecx
push str.Content_Encoding:
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56df96
mov al, byte [ebp + 8]
test al, al
je 0x56df96
mov eax, dword [ebx + 0x3220]
lea esi, [esi + eax + 0x11]
cmp byte [esi], 0x20
jne 0x56df2a
inc esi
jmp 0x56df22
push 4
push str.gzip
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56df5e
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x317], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 6
push str.x_gzip
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e60b
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x317], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0x11
add eax, edx
push str.WWW_Authenticate:
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e730
mov ecx, dword [ebx + 0x3220]
lea edi, [esi + ecx + 0x11]
mov al, byte [edi]
mov dword [ebp - 0x14], edi
cmp al, 0x20
je 0x56e72a
cmp al, 9
je 0x56e72a
mov esi, edi
push 5
push str.realm
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e4d7
add esi, 5
mov al, byte [esi]
test al, al
je 0x56e001
cmp al, 0x3d
je 0x56e001
inc esi
jmp 0x56dff4
cmp byte [esi], 0
je 0x56e08b
mov al, byte [esi + 1]
inc esi
test al, al
je 0x56e08b
push esi
mov ecx, ebx
call fcn.00570510
add esi, eax
cmp byte [esi], 0
je 0x56e08b
cmp byte [esi], 0x22
jne 0x56e038
mov al, byte [esi + 1]
inc esi
test al, al
je 0x56e08b
push 0x22
push esi
call fcn.005e51d0
jmp 0x56e055
push 0x6c5da8
push esi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56e05c
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56e088
sub eax, esi
mov edi, eax
test edi, edi
jle 0x56e088
mov ecx, dword [ebx + 0xb0]
push edi
add ecx, 0x194
call fcn.00601c99
mov ecx, edi
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x14]
push 5
push str.Basic
push edi
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56e60b
mov eax, dword [ebx + 0xb0]
push 6
push str.Digest
push edi
mov byte [eax + 0x18a], 0
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e595
push str.NTLM
push edi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56e595
push 0x6c5da8
push edi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56e106
push 0x6ded0c
push edi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56e60b
sub eax, dword [ebp - 0x14]
mov ebx, eax
test ebx, ebx
je 0x56e60b
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0xb0]
mov byte [edx + 0x18b], 1
mov eax, dword [0x6f175c]
mov dword [ebp + 8], eax
lea ecx, [ebx + 1]
mov byte [ebp - 4], 1
push ecx
lea ecx, [ebp + 8]
call fcn.00601c99
mov esi, dword [ebp - 0x14]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x6f5cb8
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp + 8]
mov esi, dword [eax + 0xb0]
add esi, 0x2c0
mov ecx, esi
call fcn.00601a55
push str.nonce
push edi
call fcn.005e5290
mov edx, eax
add esp, 8
test edx, edx
je 0x56e1ef
mov edi, str.nonce
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e1ef
inc eax
push 0x22
push eax
call fcn.005e51d0
mov edi, eax
add esp, 8
test edi, edi
je 0x56e1ef
inc edi
push 0x22
push edi
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e1ef
sub eax, edi
mov ebx, eax
lea ecx, [ebx + 1]
push ecx
mov ecx, esi
call fcn.00601c99
mov ecx, ebx
mov esi, edi
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp + 8]
push 0x6f5cb8
mov ecx, dword [ebx + 0xb0]
add ecx, 0x2c8
mov dword [ebp - 0x20], ecx
call fcn.00601a55
push str.realm
push esi
call fcn.005e5290
mov edx, eax
add esp, 8
test edx, edx
je 0x56e28d
mov edi, str.realm
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e28d
inc eax
push 0x22
push eax
call fcn.005e51d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56e28d
inc esi
push 0x22
push esi
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e28d
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00601c99
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2d0
push 0x6f5cb8
mov dword [ebp - 0x20], ecx
call fcn.00601a55
push 0x6e6710
push esi
call fcn.005e5290
mov edx, eax
add esp, 8
test edx, edx
je 0x56e328
mov edi, 0x6e6710
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e328
inc eax
push 0x22
push eax
call fcn.005e51d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56e328
inc esi
push 0x22
push esi
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e328
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00601c99
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2cc
push 0x6f5cb8
mov dword [ebp - 0x20], ecx
call fcn.00601a55
push str.algorithm
push esi
call fcn.005e5290
mov edx, eax
add esp, 8
test edx, edx
je 0x56e3c3
mov edi, str.algorithm
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e3c3
inc eax
push 0x22
push eax
call fcn.005e51d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56e3c3
inc esi
push 0x22
push esi
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e3c3
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00601c99
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov esi, dword [ebp + 8]
add ecx, 0x2d4
push 0x6f5cb8
mov dword [ebp - 0x20], ecx
call fcn.00601a55
push str.opaque
push esi
call fcn.005e5290
mov edx, eax
add esp, 8
test edx, edx
je 0x56e45e
mov edi, str.opaque
or ecx, 0xffffffff
xor eax, eax
push 0x3d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add edx, ecx
push edx
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e45e
inc eax
push 0x22
push eax
call fcn.005e51d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56e45e
inc esi
push 0x22
push esi
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e45e
mov ecx, dword [ebp - 0x20]
sub eax, esi
mov ebx, eax
lea eax, [ebx + 1]
push eax
call fcn.00601c99
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
push str.stale
push eax
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56e53c
add eax, 5
push 0x3d
push eax
call fcn.005e51d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56e53c
mov ecx, dword [0x6f175c]
inc esi
mov dword [ebp - 0x14], ecx
push 0x2c
push esi
mov byte [ebp - 4], 2
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e50c
sub eax, esi
lea ecx, [ebp - 0x14]
mov ebx, eax
lea edx, [ebx + 1]
push edx
call fcn.00601c99
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov ebx, dword [ebp - 0x1c]
jmp 0x56e515
push 0x20
push esi
call fcn.005e51d0
add esp, 8
test eax, eax
jne 0x56e4f9
push 9
push esi
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56e08b
mov cl, byte [eax + 1]
inc eax
test cl, cl
je 0x56e08b
mov esi, eax
jmp 0x56dfd9
push esi
lea ecx, [ebp - 0x14]
call fcn.00601a55
mov eax, dword [ebp - 0x14]
push str.true
push eax
call fcn.005e5520
add esp, 8
test eax, eax
jne 0x56e530
mov byte [ebx + 0x3290], al
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.006018cc
mov ecx, dword [ebx + 0xb0]
lea edx, [ebp - 0x18]
push edx
mov dword [ecx + 0x2d8], 1
call fcn.005e6a09
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
add esp, 4
add ecx, 0x2c4
push eax
push 0x6ded74
push ecx
call fcn.005fa6fb
add esp, 0xc
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0x32a0]
test eax, eax
jne 0x56e61e
mov eax, dword [ebx + 0x32a4]
test eax, eax
jne 0x56e61e
push 0x6c5da8
push edi
mov dword [ebp + 8], 0
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56e5d4
push 0x6ded0c
push edi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56e5d9
sub eax, edi
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x14]
mov ecx, eax
mov edi, dword [edx + 0x2bc]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x2bc]
mov byte [edx + eax], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x20
push edi
call fcn.005e51d0
mov esi, eax
add esp, 8
xor edi, edi
mov dword [ebp - 0x18], esi
test esi, esi
mov dword [ebp + 8], edi
je 0x56e666
inc esi
push 0x6c5da8
push esi
mov dword [ebp - 0x18], esi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56e65f
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56e666
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
mov eax, dword [ebx + 0x3298]
test eax, eax
je 0x56e69b
push eax
mov byte [ebp - 4], 3
call fcn.005fdcf6
add esp, 4
jmp 0x56e688
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp + 8]
xor eax, eax
mov ebx, ecx
mov dword [ebp - 4], eax
mov dword [ecx + 0x3298], eax
test edi, edi
jne 0x56e6e8
mov eax, dword [ebx + 0x88]
test eax, eax
je 0x56e6e8
mov eax, dword [ebx + 0x32a0]
test eax, eax
je 0x56e6c7
lea edx, [ebx + 0x32e0]
mov ecx, ebx
push edx
call fcn.005760f0
mov dword [ebx + 0x32a0], edi
xor eax, eax
mov dword [ebx + 0x32a0], eax
mov dword [ebx + 0x32a4], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc edi
push edi
call fcn.005fdccd
mov edx, dword [ebp + 8]
mov dword [ebx + 0x3298], eax
mov ecx, edx
mov edi, eax
mov eax, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x3298]
mov byte [ecx + edx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc edi
jmp 0x56dfc2
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0x13
add edx, ecx
push str.Proxy_Authenticate:
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56ea8d
mov eax, dword [ebx + 0x3220]
lea esi, [esi + eax + 0x13]
mov al, byte [esi]
cmp al, 0x20
je 0x56ea87
cmp al, 9
je 0x56ea87
push 5
push str.Basic
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56e60b
push 6
push str.Digest
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e8da
push str.NTLM
push esi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56e8da
mov eax, dword [ebx + 0x184]
cmp dword [eax + 8], 2
je 0x56e8da
push 0x6c5da8
push esi
mov dword [eax + 8], 3
call fcn.005e5290
add esp, 8
cmp eax, edi
jne 0x56e7f3
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
cmp eax, edi
je 0x56e60b
sub eax, esi
mov ebx, eax
test ebx, ebx
je 0x56e60b
mov ecx, dword [0x6f175c]
mov dword [ebp - 0x18], ecx
lea edx, [ebx + 1]
lea ecx, [ebp - 0x18]
push edx
mov byte [ebp - 4], 5
call fcn.00601c99
mov ecx, ebx
mov edi, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [eax + ebx], 0
mov eax, dword [0x6f175c]
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 4], 6
mov ecx, dword [ecx + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 1
jne 0x56e852
mov eax, str.HTTP
jmp 0x56e884
cmp eax, 4
jne 0x56e85e
mov eax, str.RTMP
jmp 0x56e884
cmp eax, 5
jne 0x56e86a
mov eax, str.RTMPT
jmp 0x56e884
cmp eax, 2
jne 0x56e876
mov eax, str.HTTPS
jmp 0x56e884
test eax, eax
mov eax, 0x6e66b4
je 0x56e884
mov eax, 0x6e66b0
mov edx, dword [ecx]
push edx
push eax
lea eax, [ebp + 8]
push 0x6cade4
push eax
call fcn.005fa6fb
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
add esp, 0x10
push ecx
mov ecx, dword [eax + 0x184]
push edx
call fcn.00598f00
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.006018cc
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x184]
mov dword [ecx + 8], 2
mov eax, dword [ebx + 0x32ac]
cmp eax, edi
jne 0x56e97b
cmp dword [ebx + 0x32b0], edi
jne 0x56e97b
mov edx, dword [ebx + 0x184]
push str.NTLM
mov eax, dword [edx + 0x10c]
push eax
call fcn.005e5520
add esp, 8
test eax, eax
je 0x56e60b
push 0x6c5da8
push esi
mov dword [ebp + 8], edi
call fcn.005e5290
add esp, 8
cmp eax, edi
jne 0x56e946
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
cmp eax, edi
je 0x56e94b
sub eax, esi
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0x184]
mov ecx, eax
mov edi, dword [edx + 0x10c]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x184]
mov edx, dword [ecx + 0x10c]
jmp 0x56e607
push 0x20
push esi
call fcn.005e51d0
mov esi, eax
add esp, 8
xor edi, edi
mov dword [ebp - 0x18], esi
test esi, esi
mov dword [ebp + 8], edi
je 0x56e9c3
inc esi
push 0x6c5da8
push esi
mov dword [ebp - 0x18], esi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56e9bc
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56e9c3
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
mov eax, dword [ebx + 0x32b4]
test eax, eax
je 0x56e9f8
push eax
mov byte [ebp - 4], 7
call fcn.005fdcf6
add esp, 4
jmp 0x56e9e5
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp + 8]
xor eax, eax
mov ebx, ecx
mov dword [ebp - 4], eax
mov dword [ecx + 0x32b4], eax
test edi, edi
jne 0x56ea45
mov eax, dword [ebx + 0x88]
test eax, eax
je 0x56ea45
mov eax, dword [ebx + 0x32ac]
test eax, eax
je 0x56ea24
lea edx, [ebx + 0x32bc]
mov ecx, ebx
push edx
call fcn.005760f0
mov dword [ebx + 0x32ac], edi
xor eax, eax
mov dword [ebx + 0x32ac], eax
mov dword [ebx + 0x32b0], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc edi
push edi
call fcn.005fdccd
mov edx, dword [ebp + 8]
mov dword [ebx + 0x32b4], eax
mov ecx, edx
mov edi, eax
mov eax, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x32b4]
mov byte [edx + ecx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc esi
jmp 0x56e75c
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 9
add edx, ecx
push str.Location:
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56eb53
mov al, byte [ebp + 8]
test al, al
je 0x56eb53
mov eax, dword [ebx + 0x31d8]
cmp eax, edi
je 0x56eacd
push eax
call fcn.005fdcf6
add esp, 4
mov eax, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + eax + 9]
push esi
call fcn.00570510
add esi, eax
xor edi, edi
push 0x6c5da8
push esi
mov dword [ebp + 8], edi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56eb0a
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56eb11
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
inc edi
push edi
call fcn.005fdccd
mov edx, dword [ebp + 8]
mov dword [ebx + 0x31d8], eax
mov ecx, edx
mov edi, eax
mov eax, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x31d8]
mov byte [edx + ecx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x3220]
mov edx, esi
push 0x14
add edx, ecx
push str.Content_Disposition:
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56fe6f
mov al, byte [ebp + 8]
test al, al
je 0x56fe6f
mov eax, dword [ebx + 0x3238]
cmp eax, 0xc8
je 0x56eb98
cmp eax, 0xce
jne 0x56e60b
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x2fc], 0x20
je 0x56e60b
mov ecx, dword [ebx + 0x3220]
push str.attachment
mov byte [ebp + 0xb], 0
lea edx, [esi + ecx + 0x14]
push edx
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56ebcf
mov byte [ebp + 0xb], 1
mov eax, dword [ebx + 0x3220]
lea ecx, [esi + eax + 0x14]
push ecx
mov ecx, ebx
call fcn.0056da50
mov edx, dword [ebx + 0x3220]
push str.filename
lea eax, [esi + edx + 0x14]
push eax
call fcn.005e5290
mov edi, eax
add esp, 8
test edi, edi
jne 0x56ec70
mov ecx, dword [ebx + 0x3220]
push 0x6e667c
lea edx, [esi + ecx + 0x14]
push edx
call fcn.005e6920
add esp, 8
mov edi, eax
test edi, edi
je 0x56ec4b
push 8
push str.filename
push edi
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56ec47
mov al, byte [edi + 2]
add edi, 2
test al, al
jne 0x56ec3f
xor edi, edi
jmp 0x56ec19
push 0x6e667c
push edi
jmp 0x56ec0f
test edi, edi
jne 0x56ec70
mov al, byte [ebp + 0xb]
test al, al
je 0x56e60b
mov ecx, ebx
call fcn.0056d960
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x3d
push edi
call fcn.005e51d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56e60b
mov al, byte [esi + 1]
inc esi
cmp al, 0xd
je 0x56e60b
cmp al, 0xa
je 0x56e60b
push esi
mov ecx, ebx
call fcn.00570510
add esi, eax
cmp byte [esi], 0
je 0x56e60b
mov al, byte [esi]
mov byte [ebp + 0xb], 1
cmp al, 0x22
jne 0x56ed41
inc esi
push 0x22
push esi
call fcn.005e51d0
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
je 0x56ed41
mov byte [ebp + 0xb], 0
mov edi, dword [ebp - 0x18]
sub edi, esi
mov eax, dword [0x6f175c]
mov dword [ebp - 0x14], eax
push edi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call fcn.00601c99
mov ecx, edi
mov ebx, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov al, byte [ebp + 0xb]
mov ecx, edx
and ecx, 3
test al, al
rep movsb byte es:[edi], byte [esi]
je 0x56ed1b
mov eax, dword [ebp - 0x14]
push 0x3b
push eax
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56ed1b
mov byte [eax], 0
push 8
push str._UTF_8_
push ebx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56eda4
lea ecx, [ebp - 0x14]
push ecx
push ebx
call fcn.005c5010
add esp, 8
jmp 0x56ee96
push 0x6c5da8
push esi
call fcn.005e5290
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x56ecd1
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x56ecd1
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
je 0x56e60b
cmp edi, 0x100
jle 0x56ecd6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0xa
push str.ISO_8859
push ebx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56ede3
mov edx, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add edx, 0xa
push edx
call fcn.0060193a
lea eax, [ebp + 8]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xa
call fcn.00601a05
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x56ee91
push 9
push str.ISO_8859_
push ebx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56ee3b
mov ecx, dword [ebp - 0x14]
add ecx, 9
push ecx
lea ecx, [ebp + 8]
call fcn.0060193a
mov edx, dword [ebp + 8]
push 0x6e6654
push edx
mov byte [ebp - 4], 0xb
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56ee32
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x56ee32
push eax
lea ecx, [ebp - 0x14]
call fcn.00601a55
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x56ee91
push 0xb
push str.windows_125
push ebx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56ee96
mov eax, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add eax, 0xb
push eax
call fcn.0060193a
mov ecx, dword [ebp + 8]
push 0x6e6654
push ecx
mov byte [ebp - 4], 0xc
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56ee8a
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x56ee8a
push eax
lea ecx, [ebp - 0x14]
call fcn.00601a55
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
call fcn.006018cc
mov edx, dword [ebp - 0x14]
push 7
push str.utf_8
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56f10c
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x56f10c
push str.filename
push edi
call fcn.005e5290
mov esi, eax
add esp, 8
test esi, esi
jne 0x56ef1a
push 0x6e667c
push edi
call fcn.005e6920
add esp, 8
mov esi, eax
test esi, esi
je 0x56f10c
push 8
push str.filename
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56ef12
mov al, byte [esi + 2]
add esi, 2
test al, al
jne 0x56ef0a
xor esi, esi
jmp 0x56eee0
push 0x6e667c
push esi
jmp 0x56eed6
test esi, esi
je 0x56f10c
push 0x3d
push esi
call fcn.005e51d0
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x56efb1
mov al, byte [ebx + 1]
inc ebx
cmp al, 0xd
je 0x56efb1
cmp al, 0xa
je 0x56efb1
mov ecx, dword [ebp - 0x1c]
push ebx
call fcn.00570510
lea esi, [eax + ebx]
mov al, byte [eax + ebx]
test al, al
je 0x56efb1
mov al, byte [esi]
mov byte [ebp + 0xb], 1
cmp al, 0x22
jne 0x56eff4
inc esi
push 0x22
push esi
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56eff4
mov byte [ebp + 0xb], 0
sub eax, esi
mov edi, eax
push edi
lea ecx, [ebp - 0x14]
call fcn.00601c99
mov ecx, edi
mov ebx, eax
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov al, byte [ebp + 0xb]
and ecx, 3
test al, al
rep movsb byte es:[edi], byte [esi]
je 0x56efb1
mov ecx, dword [ebp - 0x14]
push 0x3b
push ecx
call fcn.005e51d0
add esp, 8
test eax, eax
je 0x56efb1
mov byte [eax], 0
push 0xa
push str.ISO_8859
push ebx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56f059
mov edx, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add edx, 0xa
push edx
call fcn.0060193a
lea eax, [ebp + 8]
lea ecx, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.00601a05
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x56f107
push 0x6c5da8
push esi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56ef74
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56ef74
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
je 0x56f03a
cmp edi, 0x100
jle 0x56ef78
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 9
push str.ISO_8859_
push ebx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56f0b1
mov ecx, dword [ebp - 0x14]
add ecx, 9
push ecx
lea ecx, [ebp + 8]
call fcn.0060193a
mov edx, dword [ebp + 8]
push 0x6e6654
push edx
mov byte [ebp - 4], 0xe
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56f0a8
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x56f0a8
push eax
lea ecx, [ebp - 0x14]
call fcn.00601a55
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
jmp 0x56f107
push 0xb
push str.windows_125
push ebx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56f10c
mov eax, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add eax, 0xb
push eax
call fcn.0060193a
mov ecx, dword [ebp + 8]
push 0x6e6654
push ecx
mov byte [ebp - 4], 0xf
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56f100
mov cl, byte [eax + 2]
add eax, 2
test cl, cl
je 0x56f100
push eax
lea ecx, [ebp - 0x14]
call fcn.00601a55
mov byte [ebp - 4], 9
lea ecx, [ebp + 8]
call fcn.006018cc
mov esi, dword [ebp - 0x14]
xor ebx, ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
mov word [ebp - 0x28], bx
call fcn.00401070
cmp esi, ebx
je 0x56f170
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56f170
push ebx
push ebx
push 0xffffffffffffffff
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, ebx
mov dword [ebp - 0x24], eax
je 0x56f170
lea edx, [eax + eax + 2]
push edx
call fcn.005fdccd
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x2c], eax
je 0x56f170
mov ecx, dword [ebp - 0x24]
push ecx
push eax
push 0xffffffffffffffff
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x14]
push edx
mov byte [ebp - 4], 0x10
mov ecx, dword [eax + 0xb0]
add ecx, 0xc4
call fcn.00601a05
mov ecx, dword [ebp - 0x14]
push 7
push str.utf_8
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56f241
mov edx, dword [ebp - 0x14]
lea ecx, [ebp + 8]
add edx, 7
push edx
call fcn.0060193a
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.00401070
cmp esi, ebx
je 0x56f210
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56f210
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push ebx
push 0xffffffffffffffff
push esi
push ebx
push ebx
call edi
cmp eax, ebx
mov dword [ebp - 0x24], eax
je 0x56f210
lea eax, [eax + eax + 2]
push eax
call fcn.005fdccd
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x2c], eax
je 0x56f210
mov ecx, dword [ebp - 0x24]
push ecx
push eax
push 0xffffffffffffffff
push esi
push ebx
push ebx
call edi
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x1c]
lea edx, [ebp + 8]
push edx
mov ecx, dword [esi + 0xb0]
add ecx, 0xc4
call fcn.00601a05
mov eax, dword [esi + 0xb0]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x10
mov byte [eax + 0x309], 1
call fcn.006018cc
mov ecx, dword [ebp - 0x1c]
push 1
push ebx
push 1
mov ecx, dword [ecx + 0xb0]
lea edx, [ebp - 0x2c]
push 1
push edx
mov dl, byte [ecx + 0x309]
mov eax, dword [ecx + 0xc4]
neg dl
sbb edx, edx
and edx, 0xfde9
push edx
push eax
call fcn.005b3fc0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xb0]
mov edx, dword [ecx + 0xbc]
cmp edx, ebx
je 0x56f2cb
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56f2cb
push 9
push str.text_html
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56f2cb
mov esi, dword [ebp - 0x1c]
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0xbc]
push eax
call fcn.005fdcf6
mov eax, dword [esi + 0xb0]
add esp, 4
mov dword [eax + 0xbc], ebx
mov edi, dword [ebp - 0x1c]
cmp dword [edi + 0xac], ebx
jne 0x56fe44
mov ecx, dword [edi + 0x31e8]
mov ecx, dword [ecx + 0x18]
cmp ecx, ebx
je 0x56f340
mov eax, dword [edi + 0xb0]
cmp dword [eax + 0x3c], ebx
jne 0x56f340
mov edx, dword [eax + 0x14c]
mov eax, dword [ebp - 0x2c]
test dh, 0x20
je 0x56f320
cmp eax, ebx
jne 0x56f307
lea eax, [ebp - 0x28]
mov edx, dword [ecx]
push eax
push 0x148f
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x56fe44
cmp eax, ebx
jne 0x56f327
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ecx]
push 0x13bc
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x56fe44
mov eax, dword [edi + 0xb0]
cmp dword [eax + 0x3c], ebx
je 0x56fe44
mov ecx, dword [eax + 0x34]
cmp ecx, ebx
jne 0x56f359
lea ecx, [eax + 0x38]
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x294]
push edx
push eax
lea edx, [ebp - 0x894]
lea eax, [ebp - 0x64]
push edx
push eax
push ecx
call fcn.005e5f68
mov eax, dword [ebp - 0x2c]
add esp, 0x14
cmp eax, ebx
jne 0x56f385
lea eax, [ebp - 0x28]
push 0x25
push eax
call fcn.005e569b
add esp, 8
test eax, eax
je 0x56f3d8
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x56f39e
lea eax, [ebp - 0x28]
push eax
call fcn.005e519b
add esp, 4
cmp eax, 0x7d0
jae 0x56f3d8
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x56f3b8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x29d4]
push eax
push ecx
call fcn.005e5369
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x29d4]
push edx
push eax
call fcn.005b3de0
add esp, 0x10
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x56f3e2
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x894]
push eax
lea edx, [ebp - 0x64]
push ecx
push edx
lea eax, [ebp - 0x1a34]
push 0x6c75d0
push eax
call fcn.005e60ec
add esp, 0x14
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x3c], ebx
push ecx
lea ecx, [ebp - 0x44]
mov word [ebp - 0x40], bx
call fcn.004023c0
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x50]
push edx
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x4c], bx
call fcn.004023c0
lea eax, [ebp - 0x494]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x56f4db
lea ecx, [ebp - 0x494]
push ecx
call fcn.005e519b
add esp, 4
test eax, eax
je 0x56f4db
mov eax, dword [ebp - 0x44]
cmp eax, ebx
je 0x56f471
push eax
call fcn.005e519b
add esp, 4
mov esi, eax
jmp 0x56f473
xor esi, esi
lea edx, [ebp - 0x494]
push edx
call fcn.005e519b
add eax, esi
lea eax, [eax + eax + 2]
push eax
call fcn.005fdccd
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x56f4db
mov eax, dword [ebp - 0x44]
cmp eax, ebx
je 0x56f4b4
push eax
push esi
call fcn.005e5369
lea ecx, [ebp - 0x494]
push ecx
push esi
call fcn.005e533f
add esp, 0x10
jmp 0x56f4c4
lea edx, [ebp - 0x494]
push edx
push esi
call fcn.005e5369
add esp, 8
lea ecx, [ebp - 0x44]
call fcn.00401070
push esi
mov dword [ebp - 0x44], esi
call fcn.005e519b
add esp, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov ecx, eax
jne 0x56f4e7
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x56f4f1
lea eax, [ebp - 0x40]
push ecx
push eax
call fcn.005e783c
add esp, 8
test eax, eax
jne 0x56f542
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x56f54c
lea eax, [ebp - 0x40]
push 0x5f
push eax
call fcn.005e50eb
add esp, 8
cmp eax, ebx
je 0x56f77a
mov esi, dword [ebp - 0x44]
xor eax, eax
cmp esi, ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x34], bx
je 0x56f5c9
cmp eax, ebx
je 0x56f5c9
push esi
call fcn.005e519b
add esp, 4
test eax, eax
je 0x56f5c9
mov eax, dword [ebp - 0x38]
cmp eax, esi
ja 0x56f5c9
push eax
call fcn.005e519b
mov ecx, dword [ebp - 0x38]
add esp, 4
lea edx, [ecx + eax*2]
cmp edx, esi
jb 0x56f5c9
push esi
lea ecx, [ebp - 0x70]
call fcn.0040e5b0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x14
call fcn.004023b0
push eax
lea ecx, [ebp - 0x38]
call fcn.004023c0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x13
call fcn.00401070
jmp 0x56f612
lea ecx, [ebp - 0x38]
call fcn.00401070
cmp esi, ebx
je 0x56f612
push esi
call fcn.005e519b
add esp, 4
test eax, eax
je 0x56f612
push esi
call fcn.005e519b
lea eax, [eax + eax + 2]
push eax
call fcn.005fdccd
add esp, 8
cmp eax, ebx
mov dword [ebp - 0x38], eax
je 0x56f612
push esi
call fcn.005e519b
mov ecx, dword [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x30], eax
call fcn.005e5369
add esp, 0xc
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 0x15
cmp eax, ebx
jne 0x56f620
lea eax, [ebp - 0x34]
push 0x5f
push eax
call fcn.005e50eb
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x56f76b
mov word [esi], bx
add esi, 2
mov edi, 1
mov ax, word [esi]
cmp ax, bx
je 0x56f669
cmp ax, 0x2e
je 0x56f669
and eax, 0xffff
push eax
call fcn.005e582c
add esp, 4
test eax, eax
je 0x56f76b
add esi, 2
jmp 0x56f640
cmp edi, ebx
je 0x56f76b
cmp word [esi], 0x2e
jne 0x56f76b
cmp esi, ebx
je 0x56f6f8
push esi
call fcn.005e519b
add esp, 4
test eax, eax
je 0x56f6f8
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x56f6a0
push eax
call fcn.005e519b
add esp, 4
mov edi, eax
jmp 0x56f6a2
xor edi, edi
push esi
call fcn.005e519b
add eax, edi
lea edx, [eax + eax + 2]
push edx
call fcn.005fdccd
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x56f6f8
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x56f6d7
push eax
push edi
call fcn.005e5369
push esi
push edi
call fcn.005e533f
add esp, 0x10
jmp 0x56f6e1
push esi
push edi
call fcn.005e5369
add esp, 8
lea ecx, [ebp - 0x38]
call fcn.00401070
push edi
mov dword [ebp - 0x38], edi
call fcn.005e519b
add esp, 4
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov ecx, eax
jne 0x56f704
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x38]
cmp eax, ebx
jne 0x56f70e
lea eax, [ebp - 0x34]
push ecx
push eax
call fcn.005e783c
add esp, 8
test eax, eax
jne 0x56f76b
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00401070
mov edi, dword [ebp - 0x1c]
mov eax, dword [edi + 0xb0]
mov ecx, dword [eax + 0x14c]
test ch, 0x20
je 0x56f811
lea ecx, [ebp - 0x694]
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x894]
push edx
lea ecx, [ebp - 0x64]
push eax
lea edx, [ebp - 0x1a34]
push ecx
push edx
call fcn.005e5f68
lea eax, [ebp - 0x694]
lea ecx, [ebp - 0x494]
push eax
push ecx
call fcn.005e783c
add esp, 0x1c
test eax, eax
je 0x56f811
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [edi + 0x31e8]
cmp dword [edx + 0x13c], ebx
je 0x56f8a9
lea eax, [ebp - 0x694]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x894]
push ecx
lea eax, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x1a34]
push eax
push ecx
call fcn.005e5f68
lea edx, [ebp - 0x694]
lea eax, [ebp - 0x494]
push edx
push eax
call fcn.005e783c
add esp, 0x1c
test eax, eax
jne 0x56fdd7
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x56f8b3
lea eax, [ebp - 0x40]
push str.manuallogin.html
push eax
call fcn.005e56c4
add esp, 8
test eax, eax
jne 0x56f9a4
lea ecx, [ebp - 0x694]
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x894]
push edx
lea ecx, [ebp - 0x64]
push eax
lea edx, [ebp - 0x1a34]
push ecx
push edx
call fcn.005e5f68
lea eax, [ebp - 0x694]
push 0x6cbb14
push eax
call fcn.005e783c
add esp, 0x1c
test eax, eax
jne 0x56f949
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x694]
push 0x6cd448
push ecx
call fcn.005e783c
add esp, 8
test eax, eax
jne 0x56f9a4
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea edx, [ebp - 0xa94]
lea eax, [ebp - 0x294]
push edx
lea ecx, [ebp - 0x894]
push eax
lea edx, [ebp - 0x64]
push ecx
lea eax, [ebp - 0x1a34]
push edx
push eax
call fcn.005e5f68
lea ecx, [ebp - 0xa94]
lea edx, [ebp - 0x494]
push ecx
push edx
call fcn.005e783c
add esp, 0x1c
test eax, eax
jne 0x56fabf
mov eax, dword [edi + 0xb0]
mov cl, byte [eax + 0x16e]
test cl, cl
jne 0x56f4ff
test byte [eax + 0x14c], 0x40
jne 0x56f4ff
mov esi, dword [ebp - 0x44]
cmp esi, ebx
jne 0x56fa12
lea esi, [ebp - 0x40]
lea eax, [ebp - 0x294]
push eax
call fcn.005e519b
push eax
lea ecx, [ebp - 0x294]
push esi
push ecx
call fcn.005e5a46
add esp, 0x10
test eax, eax
jne 0x56fabf
mov eax, dword [ebp - 0x44]
cmp eax, ebx
jne 0x56fa41
lea eax, [ebp - 0x40]
push eax
call fcn.005e519b
lea edx, [ebp - 0x294]
mov esi, eax
push edx
call fcn.005e519b
add esp, 8
cmp eax, esi
jae 0x56fabf
mov esi, dword [ebp - 0x44]
cmp esi, ebx
jne 0x56fa66
lea esi, [ebp - 0x40]
lea eax, [ebp - 0x294]
push eax
call fcn.005e519b
add esp, 4
cmp word [esi + eax*2], 0x5f
jne 0x56fabf
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [edi + 0xb0]
mov al, byte [ecx + 0x30e]
test al, al
jne 0x56fdd7
mov ecx, dword [0x6f6360]
lea edx, [ebp + 8]
lea eax, [ebp - 0x18]
push edx
push eax
push ebx
push ebx
push str.notaskfn2
push ecx
mov dword [ebp + 8], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x56fb04
cmp dword [ebp - 0x18], 1
je 0x56fdd7
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x58], bx
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x16
cmp eax, ebx
mov esi, eax
jne 0x56fb1e
lea esi, [ebp - 0x28]
mov eax, dword [ebp - 0x50]
cmp eax, ebx
jne 0x56fb28
lea eax, [ebp - 0x4c]
mov edi, dword [0x6f7440]
cmp edi, ebx
je 0x56fcdb
cmp eax, ebx
je 0x56fcdb
lea edx, [ebp - 0x494]
test edx, edx
je 0x56fcdb
cmp esi, ebx
je 0x56fcdb
push eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x84], bx
call fcn.004023c0
lea eax, [ebp - 0x494]
lea ecx, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x8c], ebx
mov word [ebp - 0x90], bx
call fcn.004023c0
push esi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x78], bx
call fcn.004023c0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x19
call fcn.00401070
push ebx
push edi
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x68], ebx
mov word [ebp - 0x6c], bx
call fcn.00402ce0
mov eax, dword [ebp - 0x88]
mov byte [ebp - 4], 0x1a
cmp eax, ebx
mov ebx, eax
jne 0x56fbe6
lea ebx, [ebp - 0x84]
mov edi, dword [ebp - 0x94]
test edi, edi
jne 0x56fbf6
lea edi, [ebp - 0x90]
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x56fc00
lea eax, [ebp - 0x78]
mov esi, dword [ebp - 0x68]
push eax
call fcn.005e519b
mov edx, eax
push edi
mov dword [ebp - 0x20], edx
call fcn.005e519b
mov edi, eax
push ebx
add edi, esi
call fcn.005e519b
mov ecx, dword [ebp - 0x20]
add edi, ecx
lea ebx, [eax + edi + 4]
lea esi, [ebx + ebx]
push esi
call fcn.005fdccd
mov edi, eax
add esp, 0x10
test edi, edi
mov dword [ebp - 0x5c], edi
je 0x56fca3
mov ecx, esi
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp - 0x7c]
test eax, eax
mov esi, eax
jne 0x56fc5a
lea esi, [ebp - 0x78]
mov eax, dword [ebp - 0x94]
test eax, eax
mov edx, eax
jne 0x56fc6c
lea edx, [ebp - 0x90]
mov ecx, dword [ebp - 0x88]
test ecx, ecx
jne 0x56fc7c
lea ecx, [ebp - 0x84]
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x56fc86
lea eax, [ebp - 0x6c]
push esi
push edx
push ecx
push eax
mov eax, dword [ebp - 0x5c]
push ebx
push eax
call fcn.005e512b
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.005e519b
add esp, 0x1c
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x19
call fcn.00401070
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x18
call fcn.00401070
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x16
call fcn.00401070
xor ebx, ebx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x34], bx
call fcn.00401070
mov edx, 0x6c5020
test edx, edx
je 0x56fd41
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56fd41
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push ebx
push 0xffffffffffffffff
push edx
push ebx
push ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x30], eax
je 0x56fd41
lea eax, [eax + eax + 2]
push eax
call fcn.005fdccd
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x38], eax
je 0x56fd44
mov ecx, dword [ebp - 0x30]
push ecx
push eax
push 0xffffffffffffffff
push 0x6c5020
push ebx
push ebx
call esi
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
cmp eax, ebx
jne 0x56fd4b
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
jne 0x56fd55
lea ecx, [ebp - 0x58]
push 0x50024
push eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 7
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x38]
jne 0x56fdc3
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call fcn.00401070
mov edi, dword [ebp - 0x1c]
mov ecx, dword [edi + 0xb0]
lea edx, [ebp - 0x1a34]
push edx
call fcn.005c1d60
mov eax, dword [edi + 0x31e8]
mov eax, dword [eax + 0xb8]
cmp eax, ebx
je 0x56fe05
mov ecx, dword [edi + 0xb0]
push eax
call fcn.005bff40
mov eax, dword [edi + 0x31e8]
mov ecx, dword [eax + 0x14]
cmp ecx, ebx
je 0x56fe2c
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x13c9
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0xd
add ecx, edx
push str.Content_Type:
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x570193
mov al, byte [ebp + 8]
test al, al
je 0x570193
mov eax, dword [ebx + 0x3238]
cmp eax, 0xc8
je 0x56febb
cmp eax, 0xce
je 0x56febb
cmp eax, 0x130
jne 0x56e60b
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + 0xbc]
cmp eax, edi
je 0x56fed4
push eax
call fcn.005fdcf6
add esp, 4
mov eax, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + eax + 0xd]
push esi
call fcn.00570510
add esi, eax
push 0x6c5da8
push esi
mov dword [ebp + 8], 0
call fcn.005e5290
push 0x3b
push esi
mov edi, eax
call fcn.005e51d0
add esp, 0x10
cmp eax, edi
mov dword [ebp - 0x20], eax
jae 0x56ff12
test eax, eax
jne 0x56ff16
test edi, edi
jne 0x56ff1c
test eax, eax
mov edi, eax
je 0x56ff23
sub edi, esi
mov dword [ebp + 8], edi
jmp 0x56ff3a
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56ff3a
sub eax, esi
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
add ecx, 5
push ecx
call fcn.005fdccd
mov edx, dword [ebx + 0xb0]
add esp, 4
mov dword [edx + 0xbc], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0xb0]
mov ecx, eax
mov edi, dword [edx + 0xbc]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0xbc]
mov byte [edx + eax], 0
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x155]
test cl, cl
je 0x56ffe6
mov eax, dword [eax + 0xbc]
push 9
push str.text_html
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56ffe6
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0xbc]
push eax
call fcn.005fdcf6
mov edx, dword [ebx + 0xb0]
add esp, 4
mov dword [edx + 0xbc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0xb0]
or ecx, 0xffffffff
xor eax, eax
mov edi, dword [edx + 0xc4]
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x570018
mov eax, dword [edx + 0xbc]
push 9
push str.text_html
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56ffae
mov eax, dword [ebx + 0xb0]
push str.application_vnd.lumberjack.manifest
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e5520
add esp, 8
test eax, eax
jne 0x570096
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax + 0x14c]
test ch, 1
je 0x570096
mov eax, dword [eax + 0xbc]
push eax
call fcn.005fdcf6
mov edx, dword [ebx + 0xb0]
add esp, 4
mov dword [edx + 0xbc], 0
mov eax, dword [ebx + 0xb0]
mov dword [eax + 0x2fc], 1
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x300], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0xb0]
push 0x14
push str.multipart_byteranges
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x5700da
mov ecx, dword [ebx + 0xb0]
push 0x16
push str.multipart_x_byteranges
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e60b
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x56e60b
push str.boundary
push eax
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56e60b
push 0x3d
push eax
call fcn.005e51d0
mov esi, eax
add esp, 8
test esi, esi
je 0x56e60b
inc esi
mov ecx, ebx
push esi
call fcn.00570510
add esi, eax
push 0x6c5da8
push esi
xor edi, edi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x570141
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x570145
sub eax, esi
mov edi, eax
lea ecx, [ebx + 0x3244]
push edi
call fcn.00601c99
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0x3244]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56e60b
mov byte [ebx + 0x3248], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 0xb
add ecx, edx
push str.Set_Cookie:
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x5701dd
mov al, byte [ebp + 8]
test al, al
je 0x5701dd
mov edx, dword [ebx + 0x3220]
mov ecx, ebx
lea eax, [esi + edx + 0xb]
push eax
call fcn.005747c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 5
add ecx, edx
push str.ETag:
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x570270
mov edx, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + edx + 5]
push esi
call fcn.00570510
add esi, eax
push 0x6c5da8
push esi
xor edi, edi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x570235
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x570239
sub eax, esi
mov edi, eax
mov ecx, dword [ebx + 0xb0]
push edi
add ecx, 0xf8
call fcn.00601c99
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov ecx, esi
push 4
add ecx, edx
push str.P3P:
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x5702d4
mov edx, dword [ebx + 0x3220]
mov ecx, ebx
lea esi, [esi + edx + 4]
push esi
call fcn.00570510
push 0x23
add esi, eax
push str.policyref_http:__p3p.yahoo.com_w3c_
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e60b
mov byte [ebx + 0x3249], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 5
add eax, edx
push str.Date:
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x5703b7
mov al, byte [ebp + 8]
test al, al
je 0x5703b7
mov ecx, dword [ebx + 0x3220]
lea esi, [esi + ecx + 5]
mov ecx, ebx
push esi
call fcn.00570510
add esi, eax
xor edi, edi
push 0x6c5da8
push esi
mov dword [ebp + 8], edi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x57033e
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x570345
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
inc edi
push edi
call fcn.005fdccd
mov ecx, dword [ebp + 8]
mov edi, eax
mov edx, ecx
add esp, 4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov dword [ebp - 0x18], eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, edx
mov byte [eax + ecx], 0
lea ecx, [ebp - 0x20]
call fcn.005766c0
mov esi, dword [ebp - 0x18]
lea ecx, [ebp - 0x20]
push esi
mov byte [ebp - 4], 0x1c
call fcn.00576700
mov edx, dword [ebx + 0xb0]
push esi
mov dword [edx + 0x34c], eax
call fcn.005fdcf6
add esp, 4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.005766f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x3220]
mov eax, esi
push 0xe
add eax, edx
push str.Last_Modified:
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56e60b
cmp dword [ebx + 0xac], edi
jne 0x56e60b
mov al, byte [ebp + 8]
test al, al
je 0x56e60b
mov ecx, dword [ebx + 0x3220]
lea esi, [esi + ecx + 0xe]
mov ecx, ebx
push esi
call fcn.00570510
add esi, eax
xor edi, edi
push 0x6c5da8
push esi
mov dword [ebp + 8], edi
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x57042d
push 0x6ded0c
push esi
call fcn.005e5290
add esp, 8
test eax, eax
je 0x570434
sub eax, esi
mov edi, eax
mov dword [ebp + 8], edi
inc edi
push edi
call fcn.005fdccd
mov ecx, dword [ebp + 8]
mov edi, eax
mov edx, ecx
mov dword [ebp - 0x18], eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, edx
mov byte [eax + ecx], 0
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x20]
test eax, eax
jne 0x57049c
mov edx, dword [ebx + 0x31e8]
mov eax, dword [edx + 0xb8]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.005c12a0
mov esi, dword [ebp - 0x18]
push esi
call fcn.005fdcf6
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp + 8]
mov esi, dword [ebp - 0x18]
push ecx
push eax
push esi
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x5704d6
mov edx, dword [ebx + 0x31e8]
mov eax, dword [edx + 0x138]
test eax, eax
jne 0x5704d6
push esi
add ebx, 0x320c
push 0x6c5098
push ebx
call fcn.005fa6fb
add esp, 0xc
push esi
call fcn.005fdcf6
mov ecx, dword [ebp - 0xc]
add esp, 4
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4