Function at 0x56b3c0
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x62c388
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
mov ebx, ecx
mov ecx, dword [ebx + 0x31e0]
push esi
lea esi, [ebx + 0x31e0]
push edi
xor eax, eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], eax
mov eax, dword [ebx]
push 0x1e
push ecx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
call dword [eax + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x56b433
lea ecx, [eax + 0x28]
call fcn.0054b6d0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edi, 0x2751
je 0x56b443
cmp edi, 0x2743
jne 0x56b4a9
mov eax, dword [ebx + 0xb0]
test dword [eax + 0x14c], 0x400000
jne 0x56b4a9
mov dl, byte [eax + 0x16b]
push esi
test dl, dl
sete dl
mov byte [eax + 0x16b], dl
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x18]
mov eax, dword [esi]
mov edx, dword [ebx]
push 0x1e
push eax
mov ecx, ebx
call dword [edx + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x56b4a9
lea ecx, [eax + 0x28]
call fcn.0054b6d0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
je 0x56b528
mov dword [ebp - 0x24], 0
push edi
mov ecx, ebx
call fcn.0054f0c0
test eax, eax
jne 0x56b50f
mov eax, dword [ebp - 0x24]
inc eax
cmp eax, 5
mov dword [ebp - 0x24], eax
jg 0x56b50f
mov edx, dword [ebx]
push esi
mov ecx, ebx
call dword [edx + 0x18]
mov ecx, dword [esi]
mov eax, dword [ebx]
push 0x1e
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x56b4b4
lea ecx, [eax + 0x28]
call fcn.0054b6d0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
je 0x56b528
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x3230], 1
mov eax, dword [ebx + 0x184]
test eax, eax
je 0x56b575
mov cl, byte [eax + 0x15c]
test cl, cl
mov byte [ebp - 0x12], cl
je 0x56b579
mov ecx, ebx
call fcn.0056b110
mov edi, eax
test edi, edi
je 0x56b70a
cmp edi, 0x7585
jne 0x56b608
mov ecx, ebx
call fcn.005652a0
mov edx, dword [ebx]
push esi
jmp 0x56cced
mov byte [ebp - 0x12], 0
test eax, eax
je 0x56b70a
mov cl, byte [eax + 0x137]
test cl, cl
je 0x56b70a
mov ecx, dword [ebx + 0x3444]
test ecx, ecx
je 0x56b70a
mov eax, dword [ecx + 0x335c]
lea edx, [ecx + 0x3308]
push edx
push eax
call fcn.005cbc20
test eax, eax
jne 0x56cfd1
mov ecx, dword [ebx + 0x3444]
push 1
lea edx, [ecx + 0x3318]
lea eax, [ecx + 0x3310]
push edx
mov edx, dword [ebx + 0x184]
push eax
mov eax, dword [edx]
lea edx, [ecx + 0x3308]
push eax
mov eax, dword [esi]
push edx
push eax
call fcn.005cc0f0
test eax, eax
je 0x56b6f8
cmp eax, 0x757e
jne 0x56cfd1
mov ecx, ebx
call fcn.005652a0
mov edx, dword [ebx]
push esi
jmp 0x56cced
mov ecx, dword [ebx + 0x184]
mov al, byte [ecx + 0x15d]
test al, al
jne 0x56b696
cmp edi, 0x7559
jne 0x56b696
cmp dword [ecx + 0x154], 5
jne 0x56b696
mov dl, byte [ecx + 0x15e]
test dl, dl
jne 0x56b696
mov dl, byte [ecx + 0x15f]
test dl, dl
jne 0x56b696
mov byte [ecx + 0x15e], 1
mov ecx, dword [ebx + 0x184]
mov byte [ecx + 0x15f], 1
mov edx, dword [ebx + 0x184]
mov ecx, ebx
mov dword [edx + 0x154], 4
call fcn.005652a0
mov eax, dword [ebx]
push esi
mov ecx, ebx
call dword [eax + 0x18]
test eax, eax
jne 0x56cfd1
mov ecx, dword [ebp + 8]
push ecx
mov ecx, ebx
call fcn.0056b3c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ecx + 0x154]
cmp edx, 5
jne 0x56b6bb
cmp edi, 0x7580
jne 0x56b6bb
cmp byte [ecx + 0x15e], 0
jne 0x56b6bb
mov byte [ecx + 0x15e], 1
jmp 0x56b651
test al, al
jne 0x56b6e3
cmp edx, 4
jne 0x56b6e3
mov al, byte [ecx + 0x15e]
test al, al
je 0x56b6e3
mov al, byte [ecx + 0x15f]
test al, al
je 0x56b6e3
mov dword [ecx + 0x154], edx
mov edi, 0x7559
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x3444]
lea edx, [ecx + 0x3310]
push edx
call fcn.005ccef0
mov eax, dword [ebx + 0xb4]
mov byte [ebp - 0x11], 1
test eax, eax
je 0x56b71d
mov eax, dword [eax + 0x10]
jmp 0x56b726
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x56b7fe
mov ecx, dword [ebx + 0x184]
mov byte [ebp - 0x11], 0
cmp dword [ecx], 0
je 0x56b78f
push 1
mov ecx, ebx
call fcn.0056e170
test eax, eax
jne 0x56cfd1
cmp dword [ebx + 0x3238], 0xc8
je 0x56b785
mov edx, dword [ebx + 0x3220]
mov ecx, dword [ebx + 0x9c]
push edx
call fcn.005559f0
mov eax, 0x756d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 0x10
mov eax, dword [ebx + 0x335c]
lea esi, [ebx + 0x3308]
push esi
push eax
mov ecx, ebx
call fcn.005cbc20
test eax, eax
jne 0x56cfd1
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x56b7ba
mov eax, dword [eax]
jmp 0x56b7c2
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx]
lea edx, [ebx + 0x3318]
lea edi, [ebx + 0x3310]
push 1
push edx
push edi
push eax
mov eax, dword [ebx + 0x31e0]
push esi
push eax
mov ecx, ebx
call fcn.005cc0f0
test eax, eax
je 0x56b7f6
cmp eax, 0x757e
jne 0x56cfd1
jmp 0x56ccdd
push edi
mov ecx, ebx
call fcn.005ccef0
mov edi, dword [ebp + 8]
test edi, edi
je 0x56b80e
mov ecx, ebx
call fcn.0056d2f0
jmp 0x56b817
mov edx, dword [ebx]
push 0
mov ecx, ebx
call dword [edx + 0x20]
test eax, eax
jne 0x56cfd1
push edi
mov ecx, ebx
call fcn.0056cff0
mov esi, eax
mov al, byte [ebp - 0x11]
test al, al
je 0x56b891
cmp esi, 0x757e
jne 0x56b891
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x56b847
mov eax, dword [eax + 0x10]
jmp 0x56b850
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x56b93f
mov ecx, ebx
call fcn.005652a0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
test eax, eax
jne 0x56cfd1
push edi
mov ecx, ebx
call fcn.0056b3c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test esi, esi
jne 0x56b93f
cmp dword [ebx + 0x3238], 0xce
jne 0x56b93f
mov edi, dword [ebx + 0x3244]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56b93f
mov eax, dword [ebx + 0xb4]
test eax, eax
jne 0x56b8de
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00603aaa
or dword [ebp - 0x28], 1
mov eax, dword [eax]
push str.sciencedirect.com
push eax
call fcn.005e72b0
mov edi, eax
mov al, byte [ebp - 0x28]
add esp, 8
test al, 1
je 0x56b8ff
lea ecx, [ebp - 0x2c]
call fcn.00603a3c
test edi, edi
je 0x56b93f
cmp dword [ebx + 0x31dc], 2
je 0x56b93f
mov ecx, dword [ebx + 0x31e8]
test ecx, ecx
je 0x56b91d
mov edx, dword [ecx]
push 2
call dword [edx + 0xc]
mov ecx, ebx
mov dword [ebx + 0x31dc], 2
call fcn.005652a0
push str.Restart_type_11_n
mov ecx, ebx
call fcn.0054d2a0
jmp 0x56cce4
cmp dword [ebx + 0x3238], 0xc8
jne 0x56b9a2
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x56b9a2
mov eax, dword [ebx + 0x54]
xor edi, edi
cmp eax, edi
jg 0x56b9a4
jl 0x56b965
cmp dword [ebx + 0x50], edi
ja 0x56b9a4
mov al, byte [ebx + 0x31ed]
test al, al
jne 0x56b9a4
mov eax, dword [ebx + 0x3258]
mov ecx, dword [ebx + 0x325c]
mov edx, eax
or edx, ecx
je 0x56b9a4
mov edx, dword [ebx + 0x31f8]
add eax, 1
adc ecx, edi
cmp eax, edx
jne 0x56b9a4
cmp ecx, dword [ebx + 0x31fc]
jne 0x56b9a4
mov esi, 0x7542
jmp 0x56bbba
xor edi, edi
cmp esi, edi
je 0x56beb2
cmp esi, 0x7563
jne 0x56b9c9
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7581
jne 0x56b9e6
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7566
jne 0x56bbba
mov eax, dword [ebx + 0xb0]
push str..dailymotion.com
mov ecx, dword [eax]
push ecx
call fcn.005e72b0
add esp, 8
test eax, eax
jne 0x56ba2a
mov edx, dword [ebx + 0xb0]
push str..dmcdn.net
mov eax, dword [edx]
push eax
call fcn.005e72b0
add esp, 8
test eax, eax
je 0x56bbba
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 8]
cmp eax, edi
je 0x56bbba
mov edx, dword [ecx + 0x14c]
test dh, 1
je 0x56bbba
push 0x2e
push eax
call fcn.005e8180
add esp, 8
cmp eax, edi
je 0x56bbba
push 0x6a54bc
push eax
call fcn.005e7640
add esp, 8
test eax, eax
jne 0x56bbba
mov ecx, dword [0x6cd768]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebx + 0xb0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
mov eax, dword [edx + 8]
push eax
push 0x6a10a0
push ecx
call fcn.005fc86b
mov edx, dword [ebp - 0x28]
add esp, 0xc
push 0x2e
push edx
call fcn.005e8180
add esp, 8
cmp eax, edi
je 0x56bbae
mov byte [eax], 0
mov eax, dword [0x6cd768]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
push ecx
push str._s.mnft
push edx
mov byte [ebp - 4], 2
call fcn.005fc86b
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
add esp, 0xc
mov eax, dword [eax + 8]
test eax, eax
je 0x56baf1
push eax
call fcn.005ffe68
add esp, 4
mov al, byte [0x6d1c98]
test esi, esi
mov byte [ebp - 0x12], al
jne 0x56bb00
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005ffe3f
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x56bb2c
push str.URL::set_fileName__:_Not_enough_memory__n
call fcn.005bf600
jmp 0x56bb4b
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebx
call fcn.005652a0
push str.Restart_type_12_n
mov ecx, ebx
call fcn.0054d2a0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov esi, eax
test esi, esi
je 0x56bb9f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.00603a3c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.0056b3c0
mov esi, eax
jmp 0x56bb72
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov ecx, dword [0x6cd768]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebx + 0xb0]
lea edx, [ebp - 0x18]
push edi
push edx
mov byte [ebp - 4], 3
call fcn.00582290
mov eax, dword [ebp - 0x18]
push eax
call fcn.00499310
add esp, 4
cmp esi, 0x7565
je 0x56bbf7
cmp esi, 0x7542
jne 0x56bd5a
mov ecx, dword [ebx + 0xb0]
mov dl, byte [ecx + 0x303]
test dl, dl
jne 0x56bcd3
test al, al
je 0x56bcd3
mov ecx, ebx
call fcn.005652a0
push str.Restart_type_14_n
mov ecx, ebx
call fcn.0054d2a0
cmp esi, 0x7542
jne 0x56bc63
mov eax, dword [ebx + 0xb4]
cmp eax, edi
je 0x56bc3d
mov eax, dword [eax + 0x10]
jmp 0x56bc46
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 2
jne 0x56bc63
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x158], edi
jne 0x56bc63
mov dword [eax + 0x158], 1
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x56bc98
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp + 8]
push ecx
mov byte [eax + 0x303], 1
mov ecx, ebx
call fcn.0056b3c0
mov esi, eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7542
jne 0x56bd5a
cmp dword [ebp + 8], edi
jne 0x56bd5a
cmp dword [ebx + 0x54], edi
jl 0x56bd6e
jg 0x56bcf0
cmp dword [ebx + 0x50], edi
jbe 0x56bd5a
cmp dword [ecx + 0x2dc], edi
je 0x56bd5a
mov edx, dword [ebx + 0x31e8]
mov eax, dword [edx + 0xb8]
push eax
push edi
call fcn.005c5ea0
mov ecx, ebx
call fcn.005652a0
push str.Restart_type_15_n
mov ecx, ebx
call fcn.0054d2a0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x56bd53
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
jmp 0x56bca9
cmp dword [ebx + 0x54], edi
jg 0x56be5b
jl 0x56bd6e
cmp dword [ebx + 0x50], edi
ja 0x56be5b
mov al, byte [ebx + 0x31ed]
test al, al
jne 0x56be5b
cmp esi, 0x7565
je 0x56bda8
cmp esi, 0x7566
je 0x56bda8
cmp esi, 0x7542
je 0x56bda8
cmp esi, 0x756e
je 0x56bda8
cmp esi, 0x755e
jne 0x56be5b
mov eax, dword [ebx + 0xb0]
mov byte [ebx + 0x31ec], 1
mov byte [ebx + 0x31ed], 1
mov cl, byte [eax + 0x31a]
test cl, cl
je 0x56bdcd
mov byte [eax + 0x31c], 1
mov ecx, ebx
call fcn.005652a0
push str.Restart_type_16_n
mov ecx, ebx
call fcn.0054d2a0
cmp esi, 0x7542
jne 0x56be1d
mov eax, dword [ebx + 0xb4]
cmp eax, edi
je 0x56bdf7
mov eax, dword [eax + 0x10]
jmp 0x56be00
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x56be1d
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x158], edi
jne 0x56be1d
mov dword [eax + 0x158], 1
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x56be52
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
push eax
jmp 0x56bca9
mov ecx, dword [ebx + 0x3200]
cmp ecx, edi
je 0x56bcb2
call fcn.0059d8e0
test al, al
jne 0x56bcb2
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31b]
test cl, cl
je 0x56bcb2
mov cl, byte [eax + 0x31c]
test cl, cl
jne 0x56bcb2
mov cl, byte [eax + 0x31d]
test cl, cl
jne 0x56bcb2
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00603a3c
cmp dword [ebx + 0x3200], edi
je 0x56c63a
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0xbc]
cmp eax, edi
jne 0x56beda
cmp esi, edi
je 0x56c63a
cmp eax, edi
je 0x56bef0
push str.text_html
push eax
call fcn.005e7640
add esp, 8
test eax, eax
sete byte [ebp - 0x11]
jmp 0x56bef4
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0x3200]
call fcn.0059d8e0
test al, al
jne 0x56c63a
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31b]
test cl, cl
je 0x56c63a
mov cl, byte [eax + 0x31c]
test cl, cl
jne 0x56c63a
mov cl, byte [eax + 0x31d]
test cl, cl
jne 0x56c63a
mov al, byte [ebp - 0x11]
test al, al
jne 0x56bf46
cmp esi, edi
je 0x56c63a
mov eax, dword [0x6cd768]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x44], edi
mov word [ebp - 0x48], di
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x28]
push eax
lea edx, [ebp - 0x34]
push ecx
lea eax, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x20]
push ecx
mov ecx, dword [ebx + 0x3200]
lea eax, [ebp - 0x24]
push edx
push eax
mov byte [ebp - 4], 9
call fcn.0059d800
test al, al
je 0x56c5f2
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x31c], 1
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x31a], 1
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x31d], 1
mov ecx, dword [ebx + 0x3200]
call fcn.0059d7d0
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebx + 0xb0]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebx + 0xb0]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], esi
mov eax, dword [esi]
test eax, eax
je 0x56c003
push eax
call fcn.005ffe68
add esp, 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005ffe3f
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi], edx
jne 0x56c08c
push str.URL::set_serverName__:_Not_enough_memory__n
mov ecx, esi
call fcn.005bf600
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00603a3c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00603a3c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00603a3c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00603a3c
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov eax, 0x753b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x190], 0
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 4]
test eax, eax
je 0x56c0d5
push eax
call fcn.005ffe68
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x56c0e0
mov dword [edi + 4], edx
jmp 0x56c13f
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x56c0f6
mov eax, dword [ebp - 0x2c]
mov dword [eax + 4], edx
jmp 0x56c13f
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005ffe3f
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 4], edx
jne 0x56c120
push str.URL::set_serverPath__:_Not_enough_memory__n
jmp 0x56c027
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [eax + 8]
test eax, eax
je 0x56c15b
push eax
call fcn.005ffe68
add esp, 4
mov cl, byte [0x6d1c98]
test esi, esi
mov byte [ebp - 0x12], cl
jne 0x56c16b
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005ffe3f
mov ecx, dword [ebp - 0x3c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x56c195
push str.URL::set_fileName__:_Not_enough_memory__n
jmp 0x56c027
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x56c1d0
push eax
call fcn.005ffe68
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x56c1db
mov dword [edi + 0x1c], edx
jmp 0x56c23c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x56c1f1
mov ecx, dword [ebp - 0x2c]
mov dword [ecx + 0x1c], edx
jmp 0x56c23c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005ffe3f
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 0x1c], edx
jne 0x56c21d
push str.URL::set_Cookie__:_Not_enough_memory__n
call fcn.005bf600
jmp 0x56c23c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
push 0x6d1c98
add ecx, 0xc4
call fcn.00603bc5
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x309], 0
mov esi, dword [ebx + 0xb0]
mov eax, dword [esi + 0x18]
test eax, eax
je 0x56c275
push eax
call fcn.005ffe68
add esp, 4
mov edx, 0x6d1c98
test edx, edx
jne 0x56c283
mov dword [esi + 0x18], edx
jmp 0x56c2e9
mov edi, 0x6d1c98
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x56c299
mov dword [esi + 0x18], eax
jmp 0x56c2e9
mov edi, 0x6d1c98
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005ffe3f
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0x18], edx
jne 0x56c2c7
push str.URL::set_Referer__:_Not_enough_memory__n
mov ecx, esi
call fcn.005bf600
jmp 0x56c2e9
mov edi, 0x6d1c98
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56c32f
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56c32f
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x420]
test edx, edx
jne 0x56c313
push eax
call fcn.005c5d70
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x420]
test eax, eax
je 0x56c32f
push str.Referer
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x56c339
lea eax, [ebp - 0x48]
push eax
call fcn.005e71bf
add esp, 4
test eax, eax
je 0x56c3a7
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x56c350
lea eax, [ebp - 0x48]
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005c3db0
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56c3a7
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56c37c
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005c1f90
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x56c3a7
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edx
push 0x13c9
push 0x111
push eax
call esi
jmp 0x56c3ad
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebx + 0xb0]
push 0x6d1c98
mov byte [ecx + 0x18a], 1
mov ecx, dword [ebx + 0xb0]
add ecx, 0x174
call fcn.00603bc5
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x170], 0
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x30f], 0
mov ecx, dword [ebx + 0xb0]
push ecx
mov byte [ebx + 0xc8], 0
call fcn.00504ac0
add esp, 4
mov ecx, ebx
call fcn.00565750
mov eax, dword [ebx + 0xac]
test eax, eax
jne 0x56c49c
mov edx, dword [ebx + 0xa0]
mov eax, dword [edx]
mov eax, dword [eax]
test eax, eax
je 0x56c432
push 0
push 0x1478
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56c49c
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56c49c
mov ecx, dword [ebx + 0xb0]
push 0
push 0
push eax
call fcn.005c17f0
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x56c479
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x56c49c
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31d8]
test eax, eax
je 0x56c4c5
push eax
mov byte [ebp - 4], 0xa
call fcn.005ffe68
add esp, 4
jmp 0x56c4be
mov dword [ebp - 4], 9
mov ecx, dword [ebx + 0xb0]
mov dword [ebx + 0x31d8], 0
call fcn.005c4380
mov ecx, ebx
call fcn.005652a0
push str.Restart_type_17_n
mov ecx, ebx
call fcn.0054d2a0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov esi, eax
test esi, esi
jne 0x56c595
mov ecx, dword [ebp + 8]
push ecx
mov ecx, ebx
call fcn.0056b3c0
mov esi, eax
test esi, esi
jne 0x56c595
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + 0xbc]
test eax, eax
je 0x56c595
push str.text_html
push eax
call fcn.005e7640
add esp, 8
test eax, eax
je 0x56c595
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56c595
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56c595
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x420]
test edx, edx
jne 0x56c562
push eax
call fcn.005c5d70
mov ebx, dword [ebx + 0xb0]
mov eax, dword [ebx + 0x420]
test eax, eax
je 0x56c595
lea eax, [ebp + 8]
push 4
push eax
mov dword [ebp + 8], 1
mov ecx, dword [ebx + 0x420]
push 4
push 0
push str.noSyntRef
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00603a3c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00603a3c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00603a3c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00603a3c
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00603a3c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00603a3c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00603a3c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00603a3c
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.00603a3c
mov edx, dword [ebx + 0x3238]
cmp edx, 0xc8
jne 0x56c664
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x56c664
mov ecx, dword [ebx + 0x31f8]
mov eax, dword [ebx + 0x31fc]
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], eax
cmp edx, 0xce
jne 0x56c75f
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x56c6ae
cmp dword [ebx + 0x54], edi
jg 0x56c6ae
jl 0x56c686
cmp dword [ebx + 0x50], edi
ja 0x56c6ae
mov eax, dword [ebx + 0x31f8]
mov ecx, dword [ebx + 0x31fc]
mov esi, eax
or esi, ecx
je 0x56c6ae
mov esi, dword [ebx + 0x3258]
mov edi, dword [ebx + 0x325c]
or esi, edi
jne 0x56c6ae
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], ecx
cmp edx, 0xce
jne 0x56c75f
mov edx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or edx, eax
jne 0x56c75f
mov edi, dword [ebx + 0x54]
mov eax, dword [ebx + 0x50]
test edi, edi
jg 0x56c74d
jl 0x56c6d8
test eax, eax
ja 0x56c708
mov esi, dword [ebx + 0x3258]
mov ecx, dword [ebx + 0x325c]
mov eax, esi
or eax, ecx
je 0x56c708
mov eax, dword [ebx + 0x31fc]
mov edx, dword [ebx + 0x31f8]
cmp ecx, eax
jg 0x56c708
jl 0x56c700
cmp esi, edx
jae 0x56c708
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], eax
jmp 0x56c75f
test edi, edi
jg 0x56c74d
jl 0x56c715
mov eax, dword [ebx + 0x50]
test eax, eax
ja 0x56c74d
mov edx, dword [ebx + 0x31f8]
mov edi, dword [ebx + 0x31fc]
mov ecx, edx
or ecx, edi
je 0x56c74d
mov esi, dword [ebx + 0x3258]
mov eax, edx
add eax, 1
mov ecx, edi
adc ecx, 0
cmp esi, eax
jne 0x56c74d
mov eax, dword [ebx + 0x325c]
cmp eax, ecx
jne 0x56c74d
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], edi
jmp 0x56c75f
mov ecx, dword [ebx + 0x3258]
mov edx, dword [ebx + 0x325c]
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], edx
mov edx, dword [ebx + 0x3238]
cmp edx, 0xc8
je 0x56c775
cmp edx, 0xce
jne 0x56c79b
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x56c79b
mov eax, dword [ebx + 0x3274]
mov ecx, dword [ebx + 0x3270]
test eax, eax
jl 0x56c79b
jg 0x56c795
test ecx, ecx
jbe 0x56c79b
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], eax
mov eax, dword [ebx + 0xb0]
xor esi, esi
mov dword [ebp - 0x28], eax
cmp dword [eax + 0x2fc], esi
je 0x56c7ec
mov eax, dword [ebx + 0x31e8]
cmp eax, esi
je 0x56c7ec
cmp dword [eax + 0x40], esi
je 0x56c7ec
cmp edx, 0xc8
jne 0x56c7e6
mov eax, dword [ebx + 0x31fc]
mov ecx, dword [ebx + 0x31f8]
cmp eax, esi
jl 0x56c7e6
jg 0x56c7db
cmp ecx, esi
jbe 0x56c7e6
sub ecx, 1
sbb eax, esi
mov dword [ebx + 0x60], ecx
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x4c], esi
mov esi, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
mov ecx, esi
or ecx, eax
je 0x56c8d2
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov edi, ecx
or edi, edx
je 0x56c8d2
cmp ecx, esi
jne 0x56c825
cmp edx, dword [ebx + 0x4c]
je 0x56c8d2
mov esi, dword [eax + 0xc8]
mov edi, dword [eax + 0xcc]
or esi, edi
je 0x56c8d2
cmp byte [ebx + 0x3240], 0
jne 0x56c8d2
cmp dword [ebx + 0x3238], 0xce
jne 0x56c888
mov edi, dword [ebx + 0x3258]
mov esi, dword [ebx + 0x325c]
sub ecx, 1
sbb edx, 0
cmp edi, ecx
jne 0x56c888
cmp esi, edx
jne 0x56c888
mov edx, dword [ebx + 0x3260]
mov ecx, dword [ebx + 0x3264]
or edx, ecx
jne 0x56c888
mov dword [ebx + 0x3260], edi
mov dword [ebx + 0x3264], esi
mov esi, dword [ebx + 0x3260]
mov ecx, dword [ebx + 0x3264]
mov edx, esi
or edx, ecx
je 0x56cb8d
mov edi, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov ecx, edi
mov dword [ebp - 0x3c], edx
sub ecx, 1
sbb edx, 0
cmp esi, ecx
jne 0x56cb8d
cmp dword [ebx + 0x3264], edx
jne 0x56cb8d
mov eax, dword [ebp - 0x3c]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x4c], eax
mov al, byte [ebx + 0x3240]
test al, al
jne 0x56cd9d
mov eax, dword [ebp - 0x28]
mov esi, dword [eax + 0xbc]
test esi, esi
je 0x56cd77
mov edx, dword [eax + 0x108]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56cd77
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56cd77
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
push edx
call fcn.005ea9e0
add esp, 0xc
test eax, eax
je 0x56cd77
mov ecx, dword [ebx + 0xb0]
push 9
push str.text_html
mov byte [ebp - 0x11], 1
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e9510
add esp, 0xc
test eax, eax
jne 0x56c97e
mov edx, dword [ebx + 0xb0]
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e9510
add esp, 0xc
test eax, eax
je 0x56c97e
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0xb0]
push 0xa
push 0x6a3f30
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e9510
add esp, 0xc
test eax, eax
jne 0x56c9c2
mov edx, dword [ebx + 0xb0]
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e9510
add esp, 0xc
test eax, eax
je 0x56c9c2
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0xb0]
push 0x15
push str.application_x_mpegURL
mov eax, dword [ecx + 0x108]
push eax
call fcn.005ea9e0
add esp, 0xc
test eax, eax
jne 0x56ca3a
mov edx, dword [ebx + 0xb0]
push 0x1d
push str.application_vnd.apple.mpegurl
mov eax, dword [edx + 0xbc]
push eax
call fcn.005ea9e0
add esp, 0xc
test eax, eax
je 0x56ca20
mov ecx, dword [ebx + 0xb0]
push str.video_MP2T
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e7640
add esp, 8
test eax, eax
jne 0x56ca3a
mov ecx, dword [ebx + 0xb0]
push 0x6d1c98
add ecx, 0x108
mov byte [ebp - 0x11], 0
call fcn.00603bc5
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e9510
add esp, 0xc
test eax, eax
je 0x56cb2a
mov edx, dword [ebx + 0xb0]
push str..youtube.com
mov eax, dword [edx]
push eax
call fcn.005e72b0
add esp, 8
test eax, eax
jne 0x56ca96
mov ecx, dword [ebx + 0xb0]
push str..googlevideo.com
mov edx, dword [ecx]
push edx
call fcn.005e72b0
add esp, 8
test eax, eax
je 0x56cb2a
mov eax, dword [ebx + 0xb0]
mov esi, dword [eax + 8]
test esi, esi
je 0x56cb2a
mov ecx, 7
mov edi, str.videoplayback_
xor edx, edx
repe cmpsw word [esi], word es:[edi]
jne 0x56cb2a
mov eax, dword [eax + 0xbc]
push 6
push str.video_
push eax
call fcn.005e9510
add esp, 0xc
test eax, eax
jne 0x56cb10
mov ecx, dword [ebx + 0xb0]
push 6
push str.audio_
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e9510
add esp, 0xc
test eax, eax
jne 0x56cb10
mov eax, dword [ebx + 0xb0]
push str.application_octet_stream
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e7640
add esp, 8
test eax, eax
jne 0x56cb2a
mov ecx, dword [ebx + 0xb0]
push 0x6d1c98
add ecx, 0x108
mov byte [ebp - 0x11], 0
call fcn.00603bc5
mov al, byte [ebp - 0x11]
test al, al
je 0x56cd77
mov ecx, dword [ebx + 0x31e8]
mov eax, dword [ecx + 0x13c]
test eax, eax
je 0x56cd18
mov eax, dword [ebx + 0xb0]
mov dl, byte [eax + 0x31f]
test dl, dl
jne 0x56cb67
mov dl, byte [eax + 0x16a]
test dl, dl
je 0x56cd18
mov edx, dword [ecx + 0xc8]
lea eax, [ecx + 0xc8]
mov ecx, dword [ecx + 0xcc]
or edx, ecx
je 0x56cd77
mov byte [ebx + 0x3240], 1
jmp 0x56cd77
cmp dword [ebx + 0x3238], 0xce
jne 0x56cbe8
mov esi, dword [ebx + 0x3278]
mov ecx, dword [ebx + 0x327c]
mov edx, esi
or edx, ecx
je 0x56cbe8
mov edi, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov ecx, edi
mov dword [ebp - 0x3c], edx
sub ecx, esi
mov esi, dword [ebx + 0x327c]
sbb edx, esi
mov esi, dword [ebx + 0x31f8]
cmp esi, ecx
jne 0x56cbe8
mov ecx, dword [ebx + 0x31fc]
cmp ecx, edx
jne 0x56cbe8
mov edx, dword [ebp - 0x3c]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x4c], edx
jmp 0x56c8d2
mov ecx, dword [eax + 0x13c]
mov esi, dword [ebp - 0x28]
test ecx, ecx
je 0x56cc15
mov cl, byte [esi + 0x31f]
test cl, cl
jne 0x56cc09
mov cl, byte [esi + 0x16a]
test cl, cl
je 0x56cc15
mov byte [ebx + 0x3240], 1
jmp 0x56c8d2
mov dl, byte [ebx + 0x324d]
test dl, dl
je 0x56cc53
mov ecx, dword [eax + 0xd0]
mov edi, dword [ebx + 0x3258]
mov eax, dword [eax + 0xd4]
cmp edi, ecx
jne 0x56cc53
mov edi, dword [ebx + 0x325c]
cmp edi, eax
jne 0x56cc53
cmp dword [ebx + 0x3238], 0xce
jne 0x56cc53
mov dword [ebx + 0x48], ecx
jmp 0x56c8cf
mov eax, dword [ebx + 0x54]
mov ecx, dword [ebx + 0x50]
test eax, eax
jg 0x56cc9f
jl 0x56cc63
test ecx, ecx
ja 0x56cc8d
cmp byte [ebx + 0x31ed], 0
jne 0x56cc8d
mov byte [ebx + 0x31ec], 1
mov byte [ebx + 0x31ed], 1
mov al, byte [esi + 0x31a]
test al, al
je 0x56ccdd
mov byte [esi + 0x31c], 1
jmp 0x56ccdd
test eax, eax
jl 0x56cd58
jg 0x56cc9f
test ecx, ecx
jbe 0x56cd58
mov al, byte [ebx + 0x31f4]
test al, al
jne 0x56cd58
test dl, dl
jne 0x56cd58
mov byte [ebx + 0x324d], 1
mov dword [esi + 0x2dc], 1
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31a]
test cl, cl
je 0x56ccdd
mov byte [eax + 0x31c], 1
mov ecx, ebx
call fcn.005652a0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
test eax, eax
jne 0x56cfd1
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.0056b3c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e9510
add esp, 0xc
test eax, eax
je 0x56cd58
mov ecx, dword [ebx + 0x48]
mov edx, dword [ebx + 0x4c]
mov eax, ecx
or eax, edx
je 0x56cd58
mov eax, dword [ebx + 0xb0]
add eax, 0x128
cmp ecx, dword [eax]
jne 0x56cd58
cmp edx, dword [eax + 4]
je 0x56cd77
mov ecx, ebx
call fcn.005652a0
mov eax, 0x757a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebx + 0x3240]
test al, al
jne 0x56cd9d
mov edx, dword [ebx + 0x320c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56cd9d
push edx
mov ecx, ebx
call fcn.00576880
push 0x6d1c98
lea ecx, [ebx + 0x320c]
xor esi, esi
call fcn.00603bc5
mov al, byte [ebx + 0x3240]
test al, al
je 0x56cf18
lea ecx, [ebx + 0x10]
mov byte [ebx + 0x3240], 0
call fcn.00555be0
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0xb0]
cmp ecx, esi
lea ecx, [eax + 0x28]
setne byte [ebp - 0x12]
call fcn.00542800
mov ecx, dword [ebx + 0x31e8]
mov dword [ecx + 0xc8], esi
mov dword [ecx + 0xcc], esi
mov edx, dword [ebx + 0x31e8]
mov dword [edx + 0xd0], esi
mov dword [edx + 0xd4], esi
mov eax, dword [ebx + 0x31e8]
mov dword [eax + 0x1c0], esi
mov dword [eax + 0x1c4], esi
mov eax, dword [ebx + 0x31e8]
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x68], esi
mov dword [ebx + 0x70], esi
mov dword [ebx + 0x58], esi
mov dword [ebx + 0x31f8], esi
mov dword [ebx + 0x3250], esi
mov dword [ebx + 0x3258], esi
mov dword [ebx + 0x3260], esi
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x3270], esi
cmp eax, esi
mov dword [ebx + 0x323c], esi
mov dword [ebx + 0x90], esi
mov dword [ebx + 0x54], esi
mov dword [ebx + 0x64], esi
mov dword [ebx + 0x6c], esi
mov dword [ebx + 0x74], esi
mov dword [ebx + 0x5c], esi
mov dword [ebx + 0x31fc], esi
mov dword [ebx + 0x3254], esi
mov dword [ebx + 0x325c], esi
mov dword [ebx + 0x3264], esi
mov dword [ebx + 0x4c], esi
mov dword [ebx + 0x3274], esi
je 0x56ce99
mov byte [eax + 0x85d], 0
mov ecx, ebx
call fcn.005652a0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
cmp eax, esi
jne 0x56cfd1
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.0056b3c0
mov edi, eax
cmp edi, esi
je 0x56ceda
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebp - 0x12]
test al, al
je 0x56cefc
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x30]
mov ecx, dword [ebx + 0x31e8]
push edx
push ebx
add ecx, 0x28
call fcn.00544800
mov edi, eax
mov ecx, ebx
call fcn.00551540
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 6
mov dword [ebx + 0xa8], esi
mov eax, dword [0x6d35f0]
push 1
push eax
mov ecx, ebx
call fcn.0054d1d0
cmp dword [ebx + 0xac], esi
jne 0x56cf66
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x18]
cmp ecx, esi
je 0x56cf66
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x13f8
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov al, byte [ebp - 0x12]
test al, al
je 0x56cfa6
mov ebx, dword [ebx + 0x184]
mov eax, 4
cmp dword [ebx + 0x154], eax
jne 0x56cfa6
mov cl, byte [ebx + 0x15e]
test cl, cl
je 0x56cfa6
mov edx, dword [0x6d2354]
lea ecx, [ebp + 8]
push eax
push ecx
push eax
push esi
push str.SocksType
push edx
mov dword [ebp + 8], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4