Function at 0x4616c0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Create tcp socket
Create udp socket
Get local ipv4 addresses
Get socket information
Get socket status
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x567edc
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x23710
call fcn.00528110
mov eax, dword [0x5c5ebc]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x23350], ecx
mov dword [ebp - 0x2334c], 0
call fcn.00460e70
test eax, eax
je 0x46171c
call fcn.00461150
test eax, eax
jne 0x461836
lea eax, [ebp - 0x230d0]
push eax
call fcn.0042d9b0
add esp, 4
mov dword [ebp - 0x23354], eax
mov ecx, dword [ebp - 0x23354]
mov dword [ebp - 0x23358], ecx
mov dword [ebp - 4], 0
push 0x580228
mov edx, dword [ebp - 0x23358]
push edx
lea eax, [ebp - 0x230d4]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2335c], eax
mov ecx, dword [ebp - 0x2335c]
call fcn.00415f60
push eax
push 0x580244
push 0x580248
push 0x580258
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x230d4]
call fcn.00415e20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230d0]
call fcn.00415e20
lea ecx, [ebp - 0x230d8]
push ecx
call fcn.0042d9b0
add esp, 4
mov dword [ebp - 0x23360], eax
mov edx, dword [ebp - 0x23360]
mov dword [ebp - 0x23364], edx
mov dword [ebp - 4], 1
push 0x580268
mov eax, dword [ebp - 0x23364]
push eax
lea ecx, [ebp - 0x230dc]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x23368], eax
mov ecx, dword [ebp - 0x23368]
call fcn.00415f60
push eax
push 0x580284
push 0x580288
push 0x58029c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x230dc]
call fcn.00415e20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230d8]
call fcn.00415e20
call fcn.0043c150
xor eax, eax
jmp 0x466408
push 0
push 0
mov edx, dword [ebp + 8]
push edx
push 0
push 0
mov ecx, 0x5c8578
call fcn.0044e330
test eax, eax
jne 0x461857
xor eax, eax
jmp 0x466408
lea ecx, [ebp - 0x3090]
call fcn.0048ed20
mov dword [ebp - 4], 2
mov eax, dword [ebp + 8]
add eax, 4
mov dword [ebp - 0x3094], eax
mov dword [ebp - 0x14], 0xffffffff
xor ecx, ecx
mov word [ebp - 0x2020], cx
push 0x2000
push 0
lea edx, [ebp - 0x201e]
push edx
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0x30b8], 0x50
lea ecx, [ebp - 0x30ac]
call fcn.004ef757
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30b4]
call fcn.00415d60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30b0]
call fcn.00415d60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2038]
call fcn.00415d60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2034]
call fcn.004ef757
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x303c]
call fcn.00415d60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3098]
call fcn.00415d60
mov byte [ebp - 4], 9
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x5210], 0
mov dword [ebp - 0x520c], 0
mov byte [ebp - 0x8230], 0
push 0x1000
push 0
lea eax, [ebp - 0x822f]
push eax
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0x51f8], 0
mov dword [ebp - 0x51e4], 0
mov dword [ebp - 0x5200], 1
mov ecx, dword [ebp + 8]
cmp dword [ecx], 2
jne 0x461a79
push 0x1000
lea edx, [ebp - 0x8230]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7870
mov dword [ebp - 0x2336c], eax
cmp dword [ebp - 0x2336c], 0
jne 0x4619b7
mov dword [ebp - 0x230e0], 0xffffffff
push 0x5b15cc
lea edx, [ebp - 0x230e0]
push edx
call fcn.005286d1
push 0x5802ac
lea eax, [ebp - 0x8230]
push eax
call fcn.0052b680
add esp, 8
test eax, eax
je 0x461a1e
lea ecx, [ebp - 0x8230]
push ecx
lea edx, [ebp - 0x230e4]
push edx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x23370], eax
mov eax, dword [ebp - 0x23370]
mov dword [ebp - 0x23374], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x23374]
push ecx
lea ecx, [ebp - 0x30ac]
call fcn.004244f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x230e4]
call fcn.00415e20
jmp 0x461a3f
lea ecx, [ebp - 0x30ac]
call fcn.0046b6e0
mov dword [ebp - 0x23378], eax
cmp dword [ebp - 0x23378], 0
jne 0x461a3d
jmp 0x461961
jmp 0x461a79
lea ecx, [ebp - 0x30ac]
call fcn.0046b6c0
mov dword [ebp - 0x2337c], eax
cmp dword [ebp - 0x2337c], 0x32
jle 0x461a74
mov dword [ebp - 0x230e8], 0xffffffff
push 0x5b15cc
lea edx, [ebp - 0x230e8]
push edx
call fcn.005286d1
jmp 0x461961
push 0x5802b0
lea ecx, [ebp - 0x30ac]
call fcn.00455eb0
mov dword [ebp - 0x8270], 0
push str.Keep_Alive
lea ecx, [ebp - 0x3098]
call fcn.00415e60
lea eax, [ebp - 0x3098]
push eax
push str.Proxy_Connection
lea ecx, [ebp - 0x30ac]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.0046b0d0
mov dword [ebp - 0x23380], eax
mov edx, dword [ebp - 0x23380]
mov dword [ebp - 0x8270], edx
cmp dword [ebp - 0x8270], 0
jl 0x461af0
push 1
mov eax, dword [ebp - 0x8270]
push eax
lea ecx, [ebp - 0x30ac]
call fcn.004efa25
lea ecx, [ebp - 0x8264]
call fcn.00415d60
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x303c]
push ecx
push str.Proxy_Authorization
lea edx, [ebp - 0x30ac]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.0046b0d0
mov dword [ebp - 0x23384], eax
mov eax, dword [ebp - 0x23384]
mov dword [ebp - 0x8270], eax
mov dword [ebp - 0x31d0], 0
mov dword [ebp - 0x51ec], 1
cmp dword [ebp - 0x8270], 0
jl 0x462b28
push 1
mov ecx, dword [ebp - 0x8270]
push ecx
lea ecx, [ebp - 0x30ac]
call fcn.004efa25
push 0x58031c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea edx, [ebp - 0x230f0]
push edx
lea ecx, [ebp - 0x303c]
call fcn.0044b1b0
mov dword [ebp - 0x23388], eax
push 0x58032c
mov ecx, dword [ebp - 0x23388]
call fcn.00411610
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x230e9], al
lea ecx, [ebp - 0x230f0]
call fcn.00415e20
movzx eax, byte [ebp - 0x230e9]
test eax, eax
je 0x462360
push str.basic
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea ecx, [ebp - 0x8e84]
push ecx
lea ecx, [ebp - 0x303c]
call fcn.004118f0
mov dword [ebp - 0x2338c], eax
mov byte [ebp - 4], 0xd
push 0x58034c
lea ecx, [ebp - 0x8e84]
call fcn.00412370
mov byte [ebp - 0x9288], 0
push 0x3ff
push 0
lea edx, [ebp - 0x9287]
push edx
call fcn.005281f0
add esp, 0xc
lea ecx, [ebp - 0x8e84]
call fcn.00415f60
push eax
lea eax, [ebp - 0x230f4]
push eax
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x23390], eax
push 0x400
mov ecx, dword [ebp - 0x23390]
call fcn.00412150
push eax
lea ecx, [ebp - 0x9288]
push ecx
call fcn.0052b270
add esp, 0xc
lea ecx, [ebp - 0x230f4]
call fcn.00412130
mov byte [ebp - 0x8e89], 0
lea edx, [ebp - 0x9288]
push edx
call fcn.00529140
add esp, 4
push eax
lea eax, [ebp - 0x9288]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.004c6d90
xor ecx, ecx
mov word [ebp - 0x8e80], cx
push 0x7fe
push 0
lea edx, [ebp - 0x8e7e]
push edx
call fcn.005281f0
add esp, 0xc
mov byte [ebp - 0x8678], 0
push 0x3ff
push 0
lea eax, [ebp - 0x8677]
push eax
call fcn.005281f0
add esp, 0xc
push 0x400
lea ecx, [ebp - 0x8e80]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x9288]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
push 0x400
lea eax, [ebp - 0x8678]
push eax
lea ecx, [ebp - 0x8e80]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
push eax
lea edx, [ebp - 0x8e80]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x8678]
push eax
call fcn.00529140
add esp, 4
push eax
lea ecx, [ebp - 0x9288]
push ecx
lea edx, [ebp - 0x8678]
push edx
call fcn.0052d241
add esp, 0xc
test eax, eax
jne 0x461d78
push 0
push 0
push 0x400
lea eax, [ebp - 0x9288]
push eax
lea ecx, [ebp - 0x8e80]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
push eax
lea edx, [ebp - 0x8e80]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x9288]
push eax
lea ecx, [ebp - 0x230f8]
push ecx
call fcn.004cb510
add esp, 8
mov dword [ebp - 0x23394], eax
mov edx, dword [ebp - 0x23394]
mov dword [ebp - 0x23398], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x23398]
push eax
lea ecx, [ebp - 0x8e84]
call fcn.00415e40
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230f8]
call fcn.00415e20
push 0
push 0x580350
lea ecx, [ebp - 0x8e84]
call fcn.00411820
mov dword [ebp - 0x867c], eax
cmp dword [ebp - 0x867c], 0
jl 0x461e8f
mov ecx, dword [ebp - 0x867c]
push ecx
push 0
lea edx, [ebp - 0x230fc]
push edx
lea ecx, [ebp - 0x8e84]
call fcn.00415e80
mov dword [ebp - 0x2339c], eax
mov eax, dword [ebp - 0x2339c]
mov dword [ebp - 0x233a0], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x233a0]
push ecx
lea ecx, [ebp - 0x30b4]
call fcn.00415e40
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230fc]
call fcn.00415e20
mov edx, dword [ebp - 0x867c]
add edx, 1
push edx
lea eax, [ebp - 0x23100]
push eax
lea ecx, [ebp - 0x8e84]
call fcn.004118f0
mov dword [ebp - 0x233a4], eax
mov ecx, dword [ebp - 0x233a4]
mov dword [ebp - 0x233a8], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x233a8]
push edx
lea ecx, [ebp - 0x30b0]
call fcn.00415e40
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x23100]
call fcn.00415e20
cmp dword [0x5c879c], 0
je 0x462351
lea ecx, [ebp - 0x3090]
call fcn.0048f570
push 0
lea ecx, [ebp - 0x30b0]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x30b4]
call fcn.00415f60
push eax
push 0x5c7ac0
lea ecx, [ebp - 0x3090]
call fcn.0048f690
mov dword [ebp - 0x233ac], eax
mov eax, dword [ebp - 0x233ac]
mov dword [ebp - 0x96ac], eax
cmp dword [ebp - 0x96ac], 0
jne 0x461f00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8e84]
call fcn.00415e20
jmp 0x462f47
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f440
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x96b0], eax
lea ecx, [ebp - 0x9294]
push ecx
push 1
push 8
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenThreadToken]
test eax, eax
jne 0x461f5d
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23104], 1
push 0x5b15cc
lea edx, [ebp - 0x23104]
push edx
call fcn.005286d1
mov dword [ebp - 0x9290], 0
lea eax, [ebp - 0x9298]
push eax
push 0
push 0
push 1
mov ecx, dword [ebp - 0x9294]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x461f9a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x94a4], eax
cmp dword [ebp - 0x94a4], 0x7a
je 0x461fc2
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23108], 1
push 0x5b15cc
lea edx, [ebp - 0x23108]
push edx
call fcn.005286d1
mov eax, dword [ebp - 0x9298]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x9290], eax
cmp dword [ebp - 0x9290], 0
jne 0x46200f
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x2310c], 1
push 0x5b15cc
lea ecx, [ebp - 0x2310c]
push ecx
call fcn.005286d1
lea edx, [ebp - 0x9298]
push edx
mov eax, dword [ebp - 0x9298]
push eax
mov ecx, dword [ebp - 0x9290]
push ecx
push 1
mov edx, dword [ebp - 0x9294]
push edx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x462075
mov eax, dword [ebp - 0x9290]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23110], 1
push 0x5b15cc
lea ecx, [ebp - 0x23110]
push ecx
call fcn.005286d1
mov edx, dword [ebp - 0x9290]
mov dword [ebp - 0x96b8], edx
xor eax, eax
mov word [ebp - 0x94a0], ax
push 0x1fc
push 0
lea ecx, [ebp - 0x949e]
push ecx
call fcn.005281f0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x96a8], dx
push 0x1fc
push 0
lea eax, [ebp - 0x96a6]
push eax
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0x96b4], 0xff
mov dword [ebp - 0x96bc], 0xff
lea ecx, [ebp - 0x929c]
push ecx
lea edx, [ebp - 0x96bc]
push edx
lea eax, [ebp - 0x96a8]
push eax
lea ecx, [ebp - 0x96b4]
push ecx
lea edx, [ebp - 0x94a0]
push edx
mov eax, dword [ebp - 0x96b8]
mov ecx, dword [eax]
push ecx
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
test eax, eax
jne 0x462149
mov edx, dword [ebp - 0x96b8]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23114], 1
push 0x5b15cc
lea eax, [ebp - 0x23114]
push eax
call fcn.005286d1
lea ecx, [ebp - 0x94a0]
push ecx
lea ecx, [ebp - 0x30b4]
call fcn.00415e60
mov edx, dword [ebp - 0x96b8]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x928c], 0
lea eax, [ebp - 0x9298]
push eax
push 0
push 0
push 2
mov ecx, dword [ebp - 0x9294]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x4621ae
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x94a4], eax
cmp dword [ebp - 0x94a4], 0x7a
je 0x4621d6
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23118], 1
push 0x5b15cc
lea edx, [ebp - 0x23118]
push edx
call fcn.005286d1
mov eax, dword [ebp - 0x9298]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x928c], eax
cmp dword [ebp - 0x928c], 0
jne 0x462223
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x2311c], 1
push 0x5b15cc
lea ecx, [ebp - 0x2311c]
push ecx
call fcn.005286d1
lea edx, [ebp - 0x9298]
push edx
mov eax, dword [ebp - 0x9298]
push eax
mov ecx, dword [ebp - 0x928c]
push ecx
push 2
mov edx, dword [ebp - 0x9294]
push edx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x462289
mov eax, dword [ebp - 0x928c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23120], 1
push 0x5b15cc
lea ecx, [ebp - 0x23120]
push ecx
call fcn.005286d1
mov dword [ebp - 0x96c0], 0
jmp 0x4622a4
mov edx, dword [ebp - 0x96c0]
add edx, 1
mov dword [ebp - 0x96c0], edx
mov eax, dword [ebp - 0x928c]
mov ecx, dword [ebp - 0x96c0]
cmp ecx, dword [eax]
jae 0x462321
mov dword [ebp - 0x96c4], 0xff
mov dword [ebp - 0x96c8], 0xff
lea edx, [ebp - 0x929c]
push edx
lea eax, [ebp - 0x96c8]
push eax
lea ecx, [ebp - 0x96a8]
push ecx
lea edx, [ebp - 0x96c4]
push edx
lea eax, [ebp - 0x94a0]
push eax
mov ecx, dword [ebp - 0x96c0]
mov edx, dword [ebp - 0x928c]
mov eax, dword [edx + ecx*8 + 4]
push eax
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
test eax, eax
jne 0x46230a
jmp 0x462295
lea ecx, [ebp - 0x94a0]
push ecx
lea ecx, [ebp - 0x2034]
call fcn.00455eb0
jmp 0x462295
mov edx, dword [ebp - 0x928c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0x9294]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8e84]
call fcn.00415e20
cmp dword [0x5c879c], 1
jne 0x4623bc
push 0x580354
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea ecx, [ebp - 0x23128]
push ecx
lea ecx, [ebp - 0x303c]
call fcn.0044b1b0
mov dword [ebp - 0x233b0], eax
mov edx, dword [ebp - 0x2334c]
or edx, 1
mov dword [ebp - 0x2334c], edx
push 0x580360
mov ecx, dword [ebp - 0x233b0]
call fcn.00411610
test eax, eax
jne 0x4623bc
mov dword [ebp - 0x233b4], 1
jmp 0x4623c6
mov dword [ebp - 0x233b4], 0
mov al, byte [ebp - 0x233b4]
mov byte [ebp - 0x23121], al
mov ecx, dword [ebp - 0x2334c]
and ecx, 1
je 0x4623ef
and dword [ebp - 0x2334c], 0xfffffffe
lea ecx, [ebp - 0x23128]
call fcn.00415e20
movzx edx, byte [ebp - 0x23121]
test edx, edx
je 0x462b26
cmp dword [ebp - 0x3088], 2
je 0x462b26
push 0x58036c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea eax, [ebp - 0xa6cc]
push eax
lea ecx, [ebp - 0x303c]
call fcn.004118f0
mov dword [ebp - 0x233b8], eax
mov byte [ebp - 4], 0x11
push 0x580378
lea ecx, [ebp - 0xa6cc]
call fcn.00412370
mov byte [ebp - 0xb6d0], 0
push 0xfff
push 0
lea ecx, [ebp - 0xb6cf]
push ecx
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0xb6d4], 0x1000
lea ecx, [ebp - 0xa6cc]
call fcn.00415f60
push eax
lea edx, [ebp - 0x2312c]
push edx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x233bc], eax
mov eax, dword [ebp - 0x233bc]
mov dword [ebp - 0x233c0], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xa6cc]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x23130]
push ecx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x233c4], eax
lea edx, [ebp - 0xb6d4]
push edx
lea eax, [ebp - 0xb6d0]
push eax
mov ecx, dword [ebp - 0x233c0]
call fcn.00412150
push eax
call fcn.00529140
add esp, 4
push eax
mov ecx, dword [ebp - 0x233c4]
call fcn.00412150
push eax
call fcn.0046bb40
add esp, 0x10
lea ecx, [ebp - 0x23130]
call fcn.00412130
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2312c]
call fcn.00412130
mov cl, byte [ebp - 0xb6c8]
mov byte [ebp - 0x233c8], cl
cmp byte [ebp - 0x233c8], 1
je 0x462534
cmp byte [ebp - 0x233c8], 3
je 0x462619
jmp 0x462afc
push 0x20
lea edx, [ebp - 0xb6d0]
push edx
lea eax, [ebp - 0xb6f4]
push eax
call fcn.005289e0
add esp, 0xc
lea ecx, [ebp - 0x3090]
call fcn.0048f570
lea ecx, [ebp - 0x3090]
call fcn.0048f4e0
mov dword [ebp - 0xa6d0], 0x1000
lea ecx, [ebp - 0xa6d0]
push ecx
lea edx, [ebp - 0xa6c8]
push edx
mov eax, dword [ebp - 0xb6d4]
push eax
lea ecx, [ebp - 0xb6d0]
push ecx
lea ecx, [ebp - 0x3090]
call fcn.0048f5f0
mov dword [ebp - 0x233cc], eax
cmp dword [ebp - 0x233cc], 0
jne 0x4625b6
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa6cc]
call fcn.00415e20
jmp 0x462f47
push 0x30
lea edx, [ebp - 0xa6c8]
push edx
lea eax, [ebp - 0xb728]
push eax
call fcn.005289e0
add esp, 0xc
mov dword [ebp - 0xb6f8], 0x1000
push 0x1000
push 0
lea ecx, [ebp - 0x3038]
push ecx
call fcn.005281f0
add esp, 0xc
push 2
lea edx, [ebp - 0xb6f8]
push edx
lea eax, [ebp - 0x3038]
push eax
mov ecx, dword [ebp - 0xa6d0]
push ecx
lea edx, [ebp - 0xa6c8]
push edx
call fcn.0046b740
add esp, 0x14
jmp 0x462b17
cmp dword [ebp - 0x3088], 0
jne 0x46263d
mov dword [ebp - 0x23134], 1
push 0x5b15cc
lea eax, [ebp - 0x23134]
push eax
call fcn.005286d1
push 0x40
lea ecx, [ebp - 0xb6d0]
push ecx
lea edx, [ebp - 0xbb88]
push edx
call fcn.005289e0
add esp, 0xc
mov dword [ebp - 0xa6d0], 0x1000
lea eax, [ebp - 0xa6d0]
push eax
lea ecx, [ebp - 0xa6c8]
push ecx
mov edx, dword [ebp - 0xb6d4]
push edx
lea eax, [ebp - 0xb6d0]
push eax
lea ecx, [ebp - 0x3090]
call fcn.0048f640
mov dword [ebp - 0x233d0], eax
cmp dword [ebp - 0x233d0], 0
jne 0x4626a9
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa6cc]
call fcn.00415e20
jmp 0x462f47
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f440
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0xbb8c], eax
lea ecx, [ebp - 0xb734]
push ecx
push 1
push 8
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenThreadToken]
test eax, eax
jne 0x462706
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23138], 1
push 0x5b15cc
lea edx, [ebp - 0x23138]
push edx
call fcn.005286d1
mov dword [ebp - 0xb730], 0
lea eax, [ebp - 0xb738]
push eax
push 0
push 0
push 1
mov ecx, dword [ebp - 0xb734]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x462743
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb944], eax
cmp dword [ebp - 0xb944], 0x7a
je 0x46276b
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x2313c], 1
push 0x5b15cc
lea edx, [ebp - 0x2313c]
push edx
call fcn.005286d1
mov eax, dword [ebp - 0xb738]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xb730], eax
cmp dword [ebp - 0xb730], 0
jne 0x4627b8
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23140], 1
push 0x5b15cc
lea ecx, [ebp - 0x23140]
push ecx
call fcn.005286d1
lea edx, [ebp - 0xb738]
push edx
mov eax, dword [ebp - 0xb738]
push eax
mov ecx, dword [ebp - 0xb730]
push ecx
push 1
mov edx, dword [ebp - 0xb734]
push edx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x46281e
mov eax, dword [ebp - 0xb730]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23144], 1
push 0x5b15cc
lea ecx, [ebp - 0x23144]
push ecx
call fcn.005286d1
mov edx, dword [ebp - 0xb730]
mov dword [ebp - 0xbb94], edx
xor eax, eax
mov word [ebp - 0xb940], ax
push 0x1fc
push 0
lea ecx, [ebp - 0xb93e]
push ecx
call fcn.005281f0
add esp, 0xc
xor edx, edx
mov word [ebp - 0xbb48], dx
push 0x1fc
push 0
lea eax, [ebp - 0xbb46]
push eax
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0xbb90], 0xff
mov dword [ebp - 0xbb98], 0xff
lea ecx, [ebp - 0xb73c]
push ecx
lea edx, [ebp - 0xbb98]
push edx
lea eax, [ebp - 0xbb48]
push eax
lea ecx, [ebp - 0xbb90]
push ecx
lea edx, [ebp - 0xb940]
push edx
mov eax, dword [ebp - 0xbb94]
mov ecx, dword [eax]
push ecx
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
test eax, eax
jne 0x4628f2
mov edx, dword [ebp - 0xbb94]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23148], 1
push 0x5b15cc
lea eax, [ebp - 0x23148]
push eax
call fcn.005286d1
lea ecx, [ebp - 0xb940]
push ecx
lea ecx, [ebp - 0x30b4]
call fcn.00415e60
mov edx, dword [ebp - 0xbb94]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0xb72c], 0
lea eax, [ebp - 0xb738]
push eax
push 0
push 0
push 2
mov ecx, dword [ebp - 0xb734]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x462957
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb944], eax
cmp dword [ebp - 0xb944], 0x7a
je 0x46297f
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x2314c], 1
push 0x5b15cc
lea edx, [ebp - 0x2314c]
push edx
call fcn.005286d1
mov eax, dword [ebp - 0xb738]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xb72c], eax
cmp dword [ebp - 0xb72c], 0
jne 0x4629cc
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23150], 1
push 0x5b15cc
lea ecx, [ebp - 0x23150]
push ecx
call fcn.005286d1
lea edx, [ebp - 0xb738]
push edx
mov eax, dword [ebp - 0xb738]
push eax
mov ecx, dword [ebp - 0xb72c]
push ecx
push 2
mov edx, dword [ebp - 0xb734]
push edx
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x462a32
mov eax, dword [ebp - 0xb72c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
mov dword [ebp - 0x23154], 1
push 0x5b15cc
lea ecx, [ebp - 0x23154]
push ecx
call fcn.005286d1
mov dword [ebp - 0xbb9c], 0
jmp 0x462a4d
mov edx, dword [ebp - 0xbb9c]
add edx, 1
mov dword [ebp - 0xbb9c], edx
mov eax, dword [ebp - 0xb72c]
mov ecx, dword [ebp - 0xbb9c]
cmp ecx, dword [eax]
jae 0x462aca
mov dword [ebp - 0xbba0], 0xff
mov dword [ebp - 0xbba4], 0xff
lea edx, [ebp - 0xb73c]
push edx
lea eax, [ebp - 0xbba4]
push eax
lea ecx, [ebp - 0xbb48]
push ecx
lea edx, [ebp - 0xbba0]
push edx
lea eax, [ebp - 0xb940]
push eax
mov ecx, dword [ebp - 0xbb9c]
mov edx, dword [ebp - 0xb72c]
mov eax, dword [edx + ecx*8 + 4]
push eax
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
test eax, eax
jne 0x462ab3
jmp 0x462a3e
lea ecx, [ebp - 0xb940]
push ecx
lea ecx, [ebp - 0x2034]
call fcn.00455eb0
jmp 0x462a3e
mov edx, dword [ebp - 0xb72c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0xb734]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
lea ecx, [ebp - 0x3090]
call fcn.0048f490
jmp 0x462b17
mov dword [ebp - 0x23158], 1
push 0x5b15cc
lea ecx, [ebp - 0x23158]
push ecx
call fcn.005286d1
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa6cc]
call fcn.00415e20
jmp 0x462b3b
cmp dword [ebp - 0x3088], 1
jne 0x462b3b
mov dword [ebp - 0x31d0], 1
lea edx, [ebp - 0x303c]
push edx
push 0x58037c
lea eax, [ebp - 0x30ac]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.0046b0d0
mov dword [ebp - 0x233d4], eax
cmp dword [ebp - 0x233d4], 0
jl 0x462b88
lea ecx, [ebp - 0x303c]
call fcn.00415f60
push eax
call fcn.00527fe6
add esp, 4
mov dword [ebp - 0x5210], eax
mov dword [ebp - 0x520c], edx
lea ecx, [ebp - 0x8264]
push ecx
push 0x58039c
lea edx, [ebp - 0x30ac]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.0046b0d0
mov dword [ebp - 0x233d8], eax
mov eax, dword [ebp - 0x233d8]
mov dword [ebp - 0x8270], eax
cmp dword [ebp - 0x8270], 0
jl 0x462bee
cmp dword [0x5d9a30], 0
jne 0x462bee
push 1
mov ecx, dword [ebp - 0x8270]
push ecx
lea ecx, [ebp - 0x30ac]
call fcn.004efa25
push 0x5803ac
lea ecx, [ebp - 0x8264]
call fcn.00415e60
cmp dword [0x5ec660], 0
je 0x462f47
lea edx, [ebp - 0x303c]
push edx
push str.X_Forwarded_For
lea eax, [ebp - 0x30ac]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.0046b0d0
mov dword [ebp - 0x233dc], eax
mov ecx, dword [ebp - 0x233dc]
mov dword [ebp - 0x8270], ecx
cmp dword [ebp - 0x8270], 0
jl 0x462df8
push 0x5803d0
lea ecx, [ebp - 0x2315c]
call fcn.00415da0
mov dword [ebp - 0x233e0], eax
mov edx, dword [ebp - 0x233e0]
mov dword [ebp - 0x233e4], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea edx, [ebp - 0x23160]
push edx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x233e8], eax
mov eax, dword [ebp - 0x233e8]
mov dword [ebp - 0x233ec], eax
mov byte [ebp - 4], 0x14
push 0x5803d8
lea ecx, [ebp - 0x23164]
call fcn.00415da0
mov dword [ebp - 0x233f0], eax
mov ecx, dword [ebp - 0x233f0]
mov dword [ebp - 0x233f4], ecx
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x303c]
push edx
push 0x5803dc
lea eax, [ebp - 0x23168]
push eax
call fcn.0043b3d0
add esp, 0xc
mov dword [ebp - 0x233f8], eax
mov ecx, dword [ebp - 0x233f8]
mov dword [ebp - 0x233fc], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x233f4]
push edx
mov eax, dword [ebp - 0x233fc]
push eax
lea ecx, [ebp - 0x2316c]
push ecx
call fcn.0043b320
add esp, 0xc
mov dword [ebp - 0x23400], eax
mov edx, dword [ebp - 0x23400]
mov dword [ebp - 0x23404], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x233ec]
push eax
mov ecx, dword [ebp - 0x23404]
push ecx
lea edx, [ebp - 0x23170]
push edx
call fcn.0043b320
add esp, 0xc
mov dword [ebp - 0x23408], eax
mov eax, dword [ebp - 0x23408]
mov dword [ebp - 0x2340c], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x233e4]
push ecx
mov edx, dword [ebp - 0x2340c]
push edx
lea eax, [ebp - 0xbba8]
push eax
call fcn.0043b320
add esp, 0xc
mov dword [ebp - 0x23410], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x23170]
call fcn.00415e20
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x2316c]
call fcn.00415e20
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x23168]
call fcn.00415e20
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x23164]
call fcn.00415e20
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x23160]
call fcn.00415e20
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x2315c]
call fcn.00415e20
lea ecx, [ebp - 0xbba8]
push ecx
mov edx, dword [ebp - 0x8270]
push edx
lea ecx, [ebp - 0x30ac]
call fcn.0046b700
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xbba8]
call fcn.00415e20
jmp 0x462f47
push 0x580400
lea ecx, [ebp - 0x23174]
call fcn.00415da0
mov dword [ebp - 0x23414], eax
mov eax, dword [ebp - 0x23414]
mov dword [ebp - 0x23418], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea eax, [ebp - 0x23178]
push eax
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2341c], eax
mov ecx, dword [ebp - 0x2341c]
mov dword [ebp - 0x23420], ecx
mov byte [ebp - 4], 0x21
push str.X_Forwarded_For:
lea ecx, [ebp - 0x2317c]
call fcn.00415da0
mov dword [ebp - 0x23424], eax
mov edx, dword [ebp - 0x23424]
mov dword [ebp - 0x23428], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x23420]
push eax
mov ecx, dword [ebp - 0x23428]
push ecx
lea edx, [ebp - 0x23180]
push edx
call fcn.0043b320
add esp, 0xc
mov dword [ebp - 0x2342c], eax
mov eax, dword [ebp - 0x2342c]
mov dword [ebp - 0x23430], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x23418]
push ecx
mov edx, dword [ebp - 0x23430]
push edx
lea eax, [ebp - 0xbbac]
push eax
call fcn.0043b320
add esp, 0xc
mov dword [ebp - 0x23434], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x23180]
call fcn.00415e20
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x2317c]
call fcn.00415e20
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x23178]
call fcn.00415e20
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x23174]
call fcn.00415e20
lea ecx, [ebp - 0x30ac]
call fcn.0046b6e0
mov dword [ebp - 0x23438], eax
push 1
lea ecx, [ebp - 0xbbac]
push ecx
mov edx, dword [ebp - 0x23438]
sub edx, 1
push edx
lea ecx, [ebp - 0x30ac]
call fcn.004efc7f
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xbbac]
call fcn.00415e20
mov eax, dword [ebp + 8]
push eax
mov ecx, 0x5c8578
call fcn.00451350
mov dword [ebp - 0x2343c], eax
cmp dword [ebp - 0x2343c], 0
je 0x463030
lea ecx, [ebp - 0x30b0]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x23188]
push ecx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x23440], eax
mov edx, dword [ebp - 0x23440]
mov dword [ebp - 0x23444], edx
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x2334c]
or eax, 2
mov dword [ebp - 0x2334c], eax
lea ecx, [ebp - 0x30b4]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x2318c]
push ecx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x23448], eax
mov edx, dword [ebp - 0x23448]
mov dword [ebp - 0x2344c], edx
mov dword [ebp - 4], 0x2a
mov eax, dword [ebp - 0x2334c]
or eax, 4
mov dword [ebp - 0x2334c], eax
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x23444]
call fcn.00412150
push eax
mov ecx, dword [ebp - 0x2344c]
call fcn.00412150
push eax
mov ecx, 0x5c8578
call fcn.0044e330
mov dword [ebp - 0x23450], eax
cmp dword [ebp - 0x23450], 1
je 0x463030
mov dword [ebp - 0x23454], 1
jmp 0x46303a
mov dword [ebp - 0x23454], 0
mov dl, byte [ebp - 0x23454]
mov byte [ebp - 0x23181], dl
mov dword [ebp - 4], 0x29
mov eax, dword [ebp - 0x2334c]
and eax, 4
je 0x46306a
and dword [ebp - 0x2334c], 0xfffffffb
lea ecx, [ebp - 0x2318c]
call fcn.00412130
mov dword [ebp - 4], 0xc
mov ecx, dword [ebp - 0x2334c]
and ecx, 2
je 0x46308e
and dword [ebp - 0x2334c], 0xfffffffd
lea ecx, [ebp - 0x23188]
call fcn.00412130
movzx edx, byte [ebp - 0x23181]
test edx, edx
je 0x46328b
mov dword [ebp - 0x51ec], 0
mov dword [ebp - 0xbbb0], 0
jmp 0x4630c2
mov eax, dword [ebp - 0xbbb0]
add eax, 1
mov dword [ebp - 0xbbb0], eax
lea ecx, [ebp - 0x2034]
call fcn.0046b6e0
mov dword [ebp - 0x23458], eax
mov ecx, dword [ebp - 0xbbb0]
cmp ecx, dword [ebp - 0x23458]
jge 0x46328b
lea ecx, [ebp - 0x30b0]
call fcn.00415f60
push eax
lea edx, [ebp - 0x23194]
push edx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x2345c], eax
mov eax, dword [ebp - 0x2345c]
mov dword [ebp - 0x23460], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0xbbb0]
push ecx
lea ecx, [ebp - 0x2034]
call fcn.00430f50
mov dword [ebp - 0x23464], eax
mov ecx, dword [ebp - 0x23464]
call fcn.00415f60
push eax
lea edx, [ebp - 0x23198]
push edx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x23468], eax
mov eax, dword [ebp - 0x23468]
mov dword [ebp - 0x2346c], eax
mov byte [ebp - 4], 0x2c
push 1
push 0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x23460]
call fcn.00412150
push eax
mov ecx, dword [ebp - 0x2346c]
call fcn.00412150
push eax
mov ecx, 0x5c8578
call fcn.0044e330
mov dword [ebp - 0x23470], eax
xor edx, edx
cmp dword [ebp - 0x23470], 1
sete dl
mov byte [ebp - 0x2318d], dl
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x23198]
call fcn.00412130
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x23194]
call fcn.00412130
movzx eax, byte [ebp - 0x2318d]
test eax, eax
je 0x463286
mov ecx, dword [ebp - 0xbbb0]
push ecx
lea ecx, [ebp - 0x2034]
call fcn.00430f50
mov dword [ebp - 0x23474], eax
push 0x58042c
mov edx, dword [ebp - 0x23474]
push edx
lea eax, [ebp - 0x2319c]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x23478], eax
mov ecx, dword [ebp - 0x23478]
mov dword [ebp - 0x2347c], ecx
mov byte [ebp - 4], 0x2d
lea edx, [ebp - 0x30b4]
push edx
mov eax, dword [ebp - 0x2347c]
push eax
lea ecx, [ebp - 0x231a0]
push ecx
call fcn.0043b320
add esp, 0xc
mov dword [ebp - 0x23480], eax
mov edx, dword [ebp - 0x23480]
mov dword [ebp - 0x23484], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x23484]
push eax
lea ecx, [ebp - 0x2038]
call fcn.00415e40
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x231a0]
call fcn.00415e20
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2319c]
call fcn.00415e20
mov dword [ebp - 0x51ec], 1
jmp 0x46328b
jmp 0x4630b3
call fcn.00460e70
mov dword [ebp - 0x23488], eax
cmp dword [ebp - 0x23488], 0
je 0x4632c0
call fcn.00461150
mov dword [ebp - 0x2348c], eax
cmp dword [ebp - 0x2348c], 0
je 0x4632c0
cmp dword [ebp - 0x51ec], 0
jne 0x463b16
lea ecx, [ebp - 0xbbb4]
call fcn.00415d60
mov byte [ebp - 4], 0x2f
cmp dword [0x5c879c], 0
jne 0x463770
mov ecx, dword [ebp - 0x5210]
or ecx, dword [ebp - 0x520c]
je 0x4633bf
mov edx, dword [ebp + 8]
cmp dword [edx], 2
jne 0x4633bf
mov dword [ebp - 0xc3c4], 0
cmp dword [ebp - 0x520c], 0
jg 0x463329
jl 0x46331b
cmp dword [ebp - 0x5210], 0x1000
jae 0x463329
mov eax, dword [ebp - 0x5210]
mov dword [ebp - 0xc3c4], eax
jmp 0x463333
mov dword [ebp - 0xc3c4], 0x1000
push 8
lea ecx, [ebp - 0xc3c4]
push ecx
lea edx, [ebp - 0x8230]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7cd0
mov dword [ebp - 0x23490], eax
cmp dword [ebp - 0x23490], 0
jne 0x463381
mov dword [ebp - 0x231a4], 0xffffffff
push 0x5b15cc
lea edx, [ebp - 0x231a4]
push edx
call fcn.005286d1
push 0
mov eax, dword [ebp - 0xc3c4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044d350
add esp, 0xc
mov edx, dword [ebp - 0xc3c4]
xor eax, eax
mov ecx, dword [ebp - 0x5210]
sub ecx, edx
mov edx, dword [ebp - 0x520c]
sbb edx, eax
mov dword [ebp - 0x5210], ecx
mov dword [ebp - 0x520c], edx
jmp 0x4632dc
xor eax, eax
mov word [ebp - 0xc3c0], ax
push 0x7fe
push 0
lea ecx, [ebp - 0xc3be]
push ecx
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0xbbc0], 0x400
lea edx, [ebp - 0xbbc0]
push edx
lea eax, [ebp - 0xc3c0]
push eax
push 0
push 0x10
mov ecx, dword [ebp + 8]
add ecx, 8
push ecx
call dword [sym.imp.WS2_32.dll_WSAAddressToStringW]
push 0x5cd160
lea ecx, [ebp - 0xbbbc]
call fcn.00415d80
mov dword [ebp - 0x23494], eax
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0xc3c0]
push edx
push 0x580430
lea ecx, [ebp - 0xbbbc]
call fcn.00424600
push 0x58043c
push str._MAC_
lea ecx, [ebp - 0xbbbc]
call fcn.00424600
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x231b0]
push eax
lea ecx, [ebp - 0x231ac]
push ecx
call fcn.00424380
mov ecx, eax
call fcn.0043ac10
mov dword [ebp - 0x23498], eax
mov edx, dword [ebp - 0x23498]
mov dword [ebp - 0x2349c], edx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x2349c]
call fcn.00415f60
push eax
push str._Time_
lea ecx, [ebp - 0xbbbc]
call fcn.00424600
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x231b0]
call fcn.00415e20
push 0x580470
push str._AuthResult_
lea ecx, [ebp - 0xbbbc]
call fcn.00424600
push 5
lea eax, [ebp - 0x231b8]
push eax
lea ecx, [ebp - 0xbbbc]
call fcn.0044b1b0
mov dword [ebp - 0x234a0], eax
push str.HTTP_
mov ecx, dword [ebp - 0x234a0]
call fcn.00411610
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x231b1], al
lea ecx, [ebp - 0x231b8]
call fcn.00415e20
movzx ecx, byte [ebp - 0x231b1]
test ecx, ecx
je 0x463583
push 0
push str._r_n_r_n
lea ecx, [ebp - 0xbbbc]
call fcn.00411820
mov dword [ebp - 0xc3c8], eax
cmp dword [ebp - 0xc3c8], 0
jl 0x463583
mov edx, dword [ebp - 0xc3c8]
add edx, 4
push edx
lea eax, [ebp - 0x231bc]
push eax
lea ecx, [ebp - 0xbbbc]
call fcn.004118f0
mov dword [ebp - 0x234a4], eax
mov ecx, dword [ebp - 0x234a4]
mov dword [ebp - 0x234a8], ecx
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x234a8]
push edx
lea ecx, [ebp - 0xbbbc]
call fcn.00415e40
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x231bc]
call fcn.00415e20
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x234ac], eax
push 0x5804a8
call fcn.00528324
add esp, 4
push eax
push str.CONNECT
mov ecx, dword [ebp - 0x234ac]
call fcn.00415f60
push eax
call fcn.0052f26c
add esp, 0xc
test eax, eax
jne 0x4635d1
push 0x5804d0
lea ecx, [ebp - 0xbbbc]
call fcn.00415e60
lea ecx, [ebp - 0xbbb8]
call fcn.00415d60
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xbbbc]
call fcn.00415f60
push eax
lea eax, [ebp - 0x231c0]
push eax
call fcn.00499e00
add esp, 8
mov dword [ebp - 0x234b0], eax
mov ecx, dword [ebp - 0x234b0]
mov dword [ebp - 0x234b4], ecx
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x234b4]
call fcn.00412150
push eax
call fcn.00529140
add esp, 4
push eax
mov edx, dword [0x5cd154]
push edx
push str.HTTP_1.1_407_Proxy_Authentication_Required_r_nServer:_Proxy_r_nProxy_Authenticate:_Basic_realm__s__r_nConnection:_Close_r_nProxy_Connection:_Close_r_nContent_Length:__d_r_n_r_n
lea eax, [ebp - 0xbbb8]
push eax
call fcn.004171c0
add esp, 0x10
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x231c0]
call fcn.00412130
lea ecx, [ebp - 0xbbbc]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x231c4]
push ecx
call fcn.00499e00
add esp, 8
mov dword [ebp - 0x234b8], eax
mov edx, dword [ebp - 0x234b8]
mov dword [ebp - 0x234bc], edx
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xbbb8]
call fcn.00415f60
push eax
lea eax, [ebp - 0x231c8]
push eax
call fcn.004cb330
add esp, 8
mov dword [ebp - 0x234c0], eax
mov ecx, dword [ebp - 0x234c0]
mov dword [ebp - 0x234c4], ecx
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x234bc]
push edx
mov eax, dword [ebp - 0x234c4]
push eax
lea ecx, [ebp - 0x231cc]
push ecx
call fcn.0046e790
add esp, 0xc
mov dword [ebp - 0x234c8], eax
mov edx, dword [ebp - 0x234c8]
mov dword [ebp - 0x234cc], edx
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x234cc]
call fcn.00412150
push eax
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c81b0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x231cc]
call fcn.00412130
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x231c8]
call fcn.00412130
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x231c4]
call fcn.00412130
mov dword [ebp - 0x231d0], 1
push 0x5b15cc
lea edx, [ebp - 0x231d0]
push edx
call fcn.005286d1
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xbbb8]
call fcn.00415e20
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xbbbc]
call fcn.00415e20
jmp 0x463b07
lea ecx, [ebp - 0xc3cc]
call fcn.00415d60
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0xc3cc]
push eax
push str.User_Agent
lea ecx, [ebp - 0x30ac]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.0046b0d0
mov dword [ebp - 0xc3d0], 0
mov dword [ebp - 0xc3d4], 0
cmp dword [ebp - 0xc3d4], 0xffffffff
je 0x463851
lea edx, [ebp - 0xc3d4]
push edx
push 0x580638
lea eax, [ebp - 0xc3d8]
push eax
mov ecx, 0x5ec668
call fcn.00411660
lea ecx, [ebp - 0xc3d8]
call fcn.004119e0
movzx ecx, al
test ecx, ecx
je 0x4637fa
lea ecx, [ebp - 0xc3d8]
call fcn.00415e20
jmp 0x463851
lea ecx, [ebp - 0xc3d8]
call fcn.00415f90
push eax
lea ecx, [ebp - 0xc3d8]
call fcn.00415f60
push eax
lea ecx, [ebp - 0xc3cc]
call fcn.00415f60
push eax
call fcn.0052f26c
add esp, 0xc
test eax, eax
jne 0x463841
mov dword [ebp - 0xc3d0], 1
lea ecx, [ebp - 0xc3d8]
call fcn.00415e20
jmp 0x463851
lea ecx, [ebp - 0xc3d8]
call fcn.00415e20
jmp 0x4637b1
cmp dword [ebp - 0xc3d0], 0
jne 0x463af8
mov dword [ebp - 0xd3dc], 0x1000
cmp dword [ebp - 0x31d0], 1
je 0x46387a
cmp dword [ebp - 0x3088], 1
je 0x4638dd
xor edx, edx
mov word [ebp - 0xdbe0], dx
push 0x7fe
push 0
lea eax, [ebp - 0xdbde]
push eax
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0xd3e0], 0x400
lea ecx, [ebp - 0xd3e0]
push ecx
lea edx, [ebp - 0xdbe0]
push edx
push 0
push 0x10
mov eax, dword [ebp + 8]
add eax, 8
push eax
call dword [sym.imp.WS2_32.dll_WSAAddressToStringW]
mov ecx, dword [0x5cd154]
push ecx
push str.HTTP_1.1_407_Unauthorized_r_nServer:_Proxy_r_nProxy_Authenticate:_NTLM_r_nProxy_Authenticate:_Basic_realm__s__r_nConnection:_Close_r_nProxy_Connection:_Close_r_nContent_Length:_0_r_nContent_Encouding:_gzip_r_n_r_n
lea edx, [ebp - 0xbbb4]
push edx
call fcn.004171c0
add esp, 0xc
cmp dword [ebp - 0x31d0], 0
jne 0x463947
cmp dword [ebp - 0x3088], 1
jne 0x463947
lea eax, [ebp - 0x3038]
push eax
lea ecx, [ebp - 0x231d4]
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x234d0], eax
mov edx, dword [ebp - 0x234d0]
mov dword [ebp - 0x234d4], edx
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x234d4]
mov ecx, dword [eax]
push ecx
push str.HTTP_1.1_407_Unauthorized_r_nServer:_Proxy_r_nProxy_Authenticate:_NTLM__s_r_nConnection:_keep_alive_r_nProxy_Connection:_keep_alive_r_nContent_Length:_0_r_nContent_Encoding:_gzip_r_n_r_n
lea edx, [ebp - 0xbbb4]
push edx
call fcn.004171c0
add esp, 0xc
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x231d4]
call fcn.00415e20
mov eax, dword [ebp - 0x5210]
or eax, dword [ebp - 0x520c]
je 0x463a2a
mov ecx, dword [ebp + 8]
cmp dword [ecx], 2
jne 0x463a2a
mov dword [ebp - 0xdbe4], 0
cmp dword [ebp - 0x520c], 0
jg 0x463994
jl 0x463986
cmp dword [ebp - 0x5210], 0x1000
jae 0x463994
mov edx, dword [ebp - 0x5210]
mov dword [ebp - 0xdbe4], edx
jmp 0x46399e
mov dword [ebp - 0xdbe4], 0x1000
push 8
lea eax, [ebp - 0xdbe4]
push eax
lea ecx, [ebp - 0x8230]
push ecx
mov edx, dword [ebp - 0x3094]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.004c7cd0
mov dword [ebp - 0x234d8], eax
cmp dword [ebp - 0x234d8], 0
jne 0x4639ec
mov dword [ebp - 0x231d8], 0xffffffff
push 0x5b15cc
lea ecx, [ebp - 0x231d8]
push ecx
call fcn.005286d1
push 0
mov edx, dword [ebp - 0xdbe4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0044d350
add esp, 0xc
mov ecx, dword [ebp - 0xdbe4]
xor edx, edx
mov eax, dword [ebp - 0x5210]
sub eax, ecx
mov ecx, dword [ebp - 0x520c]
sbb ecx, edx
mov dword [ebp - 0x5210], eax
mov dword [ebp - 0x520c], ecx
jmp 0x463947
lea ecx, [ebp - 0xbbb4]
call fcn.00415f60
push eax
lea edx, [ebp - 0x231dc]
push edx
call fcn.00499e00
add esp, 8
mov dword [ebp - 0x234dc], eax
mov eax, dword [ebp - 0x234dc]
mov dword [ebp - 0x234e0], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x234e0]
call fcn.00412150
push eax
mov ecx, dword [ebp - 0x3094]
mov edx, dword [ecx]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c81b0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x231dc]
call fcn.00412130
lea ecx, [ebp - 0x30ac]
call fcn.0045f120
cmp dword [ebp - 0x31d0], 1
je 0x463aa7
cmp dword [ebp - 0x3088], 1
je 0x463ac2
mov dword [ebp - 0x231e0], 1
push 0x5b15cc
lea eax, [ebp - 0x231e0]
push eax
call fcn.005286d1
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xc3cc]
call fcn.00415e20
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xbbb4]
call fcn.00415e20
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x8264]
call fcn.00415e20
mov byte [ebp - 4], 9
jmp 0x46190e
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xc3cc]
call fcn.00415e20
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xbbb4]
call fcn.00415e20
mov dword [ebp - 0x31cc], 0
mov dword [ebp - 0xdbe8], 0
jmp 0x463b3b
mov ecx, dword [ebp - 0xdbe8]
add ecx, 1
mov dword [ebp - 0xdbe8], ecx
lea ecx, [ebp - 0x30ac]
call fcn.0046b6c0
mov dword [ebp - 0x234e4], eax
mov edx, dword [ebp - 0xdbe8]
cmp edx, dword [ebp - 0x234e4]
jge 0x463b8b
mov eax, dword [ebp - 0xdbe8]
push eax
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x234e8], eax
mov ecx, dword [ebp - 0x234e8]
call fcn.00415f90
add eax, dword [ebp - 0x31cc]
mov dword [ebp - 0x31cc], eax
jmp 0x463b2c
push 0
mov ecx, dword [ebp - 0x31cc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0044d350
add esp, 0xc
xor eax, eax
mov word [ebp - 0x7228], ax
push 0x2000
push 0
lea ecx, [ebp - 0x7226]
push ecx
call fcn.005281f0
add esp, 0xc
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x234ec], eax
mov ecx, dword [ebp - 0x234ec]
call fcn.00415f60
push eax
lea edx, [ebp - 0x7228]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x7228]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x51f8], eax
xor ecx, ecx
mov word [ebp - 0x51e0], cx
push 0x2000
push 0
lea edx, [ebp - 0x51de]
push edx
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0x51fc], 0x50
lea eax, [ebp - 0x51fc]
push eax
lea ecx, [ebp - 0x51e0]
push ecx
lea edx, [ebp - 0x51f8]
push edx
lea eax, [ebp - 0x7228]
push eax
call fcn.00466430
add esp, 0x10
mov dword [ebp - 0x234f0], eax
mov ecx, dword [ebp - 0x234f0]
mov dword [ebp - 0x5200], ecx
lea edx, [ebp - 0x2020]
push edx
lea eax, [ebp - 0x51e0]
push eax
call fcn.00527f0e
add esp, 8
test eax, eax
jne 0x463c8f
mov ecx, dword [ebp - 0x51fc]
cmp ecx, dword [ebp - 0x30b8]
jne 0x463c8f
cmp dword [ebp - 0x14], 0xffffffff
jne 0x463da2
cmp dword [ebp - 0x14], 0xffffffff
je 0x463d4f
push 1
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.WS2_32.dll_shutdown]
mov eax, dword [ebp + 8]
cmp dword [eax], 2
jne 0x463d3e
mov ecx, dword [ebp - 0x23350]
cmp dword [ecx + 0x210], 0
je 0x463d3e
mov dword [ebp - 0xebec], 0x1000
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7850
mov dword [ebp - 0x234f4], eax
cmp dword [ebp - 0x234f4], 0
jne 0x463cea
jmp 0x463d3e
push 0
lea eax, [ebp - 0xebec]
push eax
lea ecx, [ebp - 0xebe8]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7cd0
mov dword [ebp - 0x234f8], eax
cmp dword [ebp - 0x234f8], 0
jne 0x463d1a
jmp 0x463d3e
cmp dword [0x5fa5b0], 0
je 0x463d39
push 1
mov eax, dword [ebp - 0xebec]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [0x5fa5b0]
add esp, 0xc
jmp 0x463ca5
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [ebp - 0x14], 0xffffffff
lea eax, [ebp - 0x51e0]
push eax
lea ecx, [ebp - 0x2020]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp - 0x51fc]
mov dword [ebp - 0x30b8], edx
push 0x580930
lea eax, [ebp - 0x51e0]
push eax
call fcn.0052a4e0
add esp, 8
test eax, eax
jne 0x463da2
mov dword [ebp - 0x231e4], 1
push 0x5b15cc
lea ecx, [ebp - 0x231e4]
push ecx
call fcn.005286d1
cmp dword [ebp - 0x5200], 0
jne 0x463dc6
mov dword [ebp - 0x231e8], 1
push 0x5b15cc
lea edx, [ebp - 0x231e8]
push edx
call fcn.005286d1
cmp dword [ebp - 0x5200], 1
je 0x463de1
cmp dword [ebp - 0x5200], 5
je 0x463de1
cmp dword [ebp - 0x5200], 6
jne 0x463e05
cmp dword [0x5ca8a8], 0
jne 0x463e05
mov dword [ebp - 0x231ec], 1
push 0x5b15cc
lea eax, [ebp - 0x231ec]
push eax
call fcn.005286d1
cmp dword [ebp - 0x5200], 2
jne 0x463e32
cmp dword [0x5ca8b0], 0
jne 0x463e32
mov dword [ebp - 0x231f0], 1
push 0x5b15cc
lea ecx, [ebp - 0x231f0]
push ecx
call fcn.005286d1
cmp dword [ebp - 0x5200], 3
jne 0x463e5f
cmp dword [0x5ca8b4], 0
jne 0x463e5f
mov dword [ebp - 0x231f4], 1
push 0x5b15cc
lea edx, [ebp - 0x231f4]
push edx
call fcn.005286d1
cmp dword [ebp - 0x5200], 4
jne 0x463e8c
cmp dword [0x5ca8dc], 0
jne 0x463e8c
mov dword [ebp - 0x231f8], 1
push 0x5b15cc
lea eax, [ebp - 0x231f8]
push eax
call fcn.005286d1
lea ecx, [ebp - 0x8274]
call fcn.00415d60
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x8274]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x231fc], esp
lea edx, [ebp - 0x8264]
push edx
call fcn.00415d80
mov dword [ebp - 0x234fc], eax
mov eax, dword [ebp - 0x234fc]
mov dword [ebp - 0x23500], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x30b8]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x23200], esp
lea edx, [ebp - 0x2020]
push edx
call fcn.00415da0
mov dword [ebp - 0x23504], eax
mov eax, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x3b
mov ecx, 0x5c8578
call fcn.00452ff0
mov dword [ebp - 0x23508], eax
cmp dword [ebp - 0x23508], 0
je 0x463ff7
push ecx
mov ecx, esp
mov dword [ebp - 0x23204], esp
lea edx, [ebp - 0x2038]
push edx
call fcn.00415d80
mov dword [ebp - 0x2350c], eax
mov eax, dword [ebp - 0x2350c]
mov dword [ebp - 0x23510], eax
mov byte [ebp - 4], 0x3d
push ecx
mov ecx, esp
mov dword [ebp - 0x23208], esp
lea edx, [ebp - 0x8274]
push edx
call fcn.00415d80
mov dword [ebp - 0x23514], eax
mov eax, dword [ebp - 0x23514]
mov dword [ebp - 0x23518], eax
mov byte [ebp - 4], 0x3e
push ecx
mov ecx, esp
mov dword [ebp - 0x2320c], esp
push 0x58063c
call fcn.00415da0
mov dword [ebp - 0x2351c], eax
mov ecx, dword [ebp - 0x2351c]
mov dword [ebp - 0x23520], ecx
mov byte [ebp - 4], 0x3f
push 0
push 0
push 0x193
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23524], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x23210], esp
mov edx, dword [ebp - 0x23524]
push edx
call fcn.00415d80
mov dword [ebp - 0x23528], eax
mov eax, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x3b
mov ecx, 0x5c8578
call fcn.004514c0
mov dword [ebp - 0x23214], 1
push 0x5b15cc
lea ecx, [ebp - 0x23214]
push ecx
call fcn.005286d1
mov dword [ebp - 0x826c], 0
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x2352c], eax
lea edx, [ebp - 0x826c]
push edx
push 0x580940
lea eax, [ebp - 0x23218]
push eax
mov ecx, dword [ebp - 0x2352c]
call fcn.00411660
lea ecx, [ebp - 0x23218]
call fcn.00415e20
cmp dword [ebp - 0x826c], 0
jge 0x464061
mov dword [ebp - 0x2321c], 1
push 0x5b15cc
lea ecx, [ebp - 0x2321c]
push ecx
call fcn.005286d1
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23530], eax
lea edx, [ebp - 0x826c]
push edx
push 0x580944
lea eax, [ebp - 0x8260]
push eax
mov ecx, dword [ebp - 0x23530]
call fcn.00411660
mov dword [ebp - 0x23534], eax
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x8274]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x23220], esp
lea edx, [ebp - 0x8260]
push edx
call fcn.00415d80
mov dword [ebp - 0x23538], eax
mov eax, dword [ebp + 8]
push eax
mov ecx, 0x5c8578
call fcn.00453ee0
mov dword [ebp - 0x2353c], eax
cmp dword [ebp - 0x2353c], 0
je 0x4641c2
push ecx
mov ecx, esp
mov dword [ebp - 0x23224], esp
lea edx, [ebp - 0x2038]
push edx
call fcn.00415d80
mov dword [ebp - 0x23540], eax
mov eax, dword [ebp - 0x23540]
mov dword [ebp - 0x23544], eax
mov byte [ebp - 4], 0x41
push ecx
mov ecx, esp
mov dword [ebp - 0x23228], esp
lea edx, [ebp - 0x8274]
push edx
call fcn.00415d80
mov dword [ebp - 0x23548], eax
mov eax, dword [ebp - 0x23548]
mov dword [ebp - 0x2354c], eax
mov byte [ebp - 4], 0x42
push ecx
mov ecx, esp
mov dword [ebp - 0x2322c], esp
push 0x580948
call fcn.00415da0
mov dword [ebp - 0x23550], eax
mov ecx, dword [ebp - 0x23550]
mov dword [ebp - 0x23554], ecx
mov byte [ebp - 4], 0x43
push 0
push 0
push 0x193
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23558], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x23230], esp
mov edx, dword [ebp - 0x23558]
push edx
call fcn.00415d80
mov dword [ebp - 0x2355c], eax
mov eax, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x40
mov ecx, 0x5c8578
call fcn.004514c0
mov dword [ebp - 0x23234], 1
push 0x5b15cc
lea ecx, [ebp - 0x23234]
push ecx
call fcn.005286d1
cmp dword [ebp - 0x5200], 5
jne 0x4642f6
lea ecx, [ebp - 0xec18]
call fcn.00460d70
mov dword [ebp - 0x23560], eax
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0xec18]
push edx
push 0
mov ecx, 0x5ca8a8
call fcn.0048bcd0
mov dword [ebp - 0xebf4], 0
mov dword [ebp - 0xebf0], 0
cmp dword [0x5ec65c], 0
je 0x464245
mov dword [ebp - 0xec2c], 0x10
lea eax, [ebp - 0xec2c]
push eax
lea ecx, [ebp - 0xec28]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.WS2_32.dll_getsockname]
mov ecx, dword [ebp - 0xec24]
mov dword [ebp - 0xebf0], ecx
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0xebf0]
push edx
lea eax, [ebp - 0xec18]
push eax
mov ecx, dword [ebp - 0x30b8]
push ecx
lea edx, [ebp - 0x2020]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.004c8720
mov dword [ebp - 0x23564], eax
cmp dword [ebp - 0x23564], 0
jne 0x4642a9
mov dword [ebp - 0x23238], 0xfffffffe
push 0x5b15cc
lea ecx, [ebp - 0x23238]
push ecx
call fcn.005286d1
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x30ac]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.00466a90
mov dword [ebp - 0x2323c], 1
push 0x5b15cc
lea ecx, [ebp - 0x2323c]
push ecx
call fcn.005286d1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xec18]
call fcn.00460d20
cmp dword [0x5ca8f8], 1
jne 0x46437a
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23568], eax
push 3
push 0x580954
mov ecx, dword [ebp - 0x23568]
call fcn.00415f60
push eax
call fcn.0052f26c
add esp, 0xc
test eax, eax
jne 0x46437a
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x30ac]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004684f0
mov dword [ebp - 0x2356c], eax
cmp dword [ebp - 0x2356c], 0
je 0x46437a
mov dword [ebp - 0x23240], 1
push 0x5b15cc
lea eax, [ebp - 0x23240]
push eax
call fcn.005286d1
lea ecx, [ebp - 0x825c]
call fcn.00460d70
mov dword [ebp - 0x23570], eax
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x825c]
push ecx
push 0
mov ecx, 0x5ca8a8
call fcn.0048bcd0
cmp dword [ebp - 0x5200], 4
jne 0x4643b5
mov dword [ebp - 0x8238], 0
cmp dword [ebp - 0x825c], 0
jne 0x464413
cmp dword [ebp - 0x5200], 2
je 0x4643d9
cmp dword [ebp - 0x5200], 3
je 0x4643d9
cmp dword [ebp - 0x5200], 6
jne 0x464413
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x30ac]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.0046a7a0
mov dword [ebp - 0x23244], 1
push 0x5b15cc
lea eax, [ebp - 0x23244]
push eax
call fcn.005286d1
cmp dword [ebp - 0x825c], 0
je 0x4644b8
cmp dword [ebp - 0x8238], 0
je 0x4644b8
lea ecx, [ebp - 0xec30]
call fcn.00415d60
mov byte [ebp - 4], 0x46
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x23248], esp
lea edx, [ebp - 0x825c]
push edx
call fcn.0046e4b0
mov dword [ebp - 0x23574], eax
lea eax, [ebp - 0xec30]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.0046aeb0
lea ecx, [ebp - 0xec30]
call fcn.00415f90
test eax, eax
jle 0x4644a9
lea ecx, [ebp - 0x30ac]
call fcn.0046b6c0
mov dword [ebp - 0x23578], eax
push 1
lea ecx, [ebp - 0xec30]
push ecx
mov edx, dword [ebp - 0x23578]
sub edx, 1
push edx
lea ecx, [ebp - 0x30ac]
call fcn.004efc7f
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xec30]
call fcn.00415e20
mov dword [ebp - 0x8234], 0
cmp dword [0x5ec65c], 0
je 0x4644fc
mov dword [ebp - 0xec44], 0x10
lea eax, [ebp - 0xec44]
push eax
lea ecx, [ebp - 0xec40]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.WS2_32.dll_getsockname]
mov ecx, dword [ebp - 0xec3c]
mov dword [ebp - 0x8234], ecx
lea edx, [ebp - 0x2020]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, 0x5c8578
call fcn.00452cf0
mov dword [ebp - 0x2357c], eax
mov ecx, dword [ebp - 0x2357c]
mov dword [ebp - 0x31c4], ecx
cmp dword [ebp - 0x14], 0xffffffff
jne 0x46465c
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x31c4], 0
je 0x464607
mov edx, dword [ebp - 0x31c4]
mov dword [ebp - 0xec48], edx
mov eax, dword [ebp - 0xec48]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [ebp - 0x23250]
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x23580], eax
mov edx, dword [ebp - 0x23580]
mov dword [ebp - 0x23584], edx
mov byte [ebp - 4], 0x47
mov eax, dword [ebp - 0x8234]
push eax
lea ecx, [ebp - 0x825c]
push ecx
mov edx, dword [ebp - 0x30b8]
push edx
mov ecx, dword [ebp - 0x23584]
call fcn.00415f60
push eax
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.004c8720
mov dword [ebp - 0x23588], eax
xor ecx, ecx
cmp dword [ebp - 0x23588], 0
sete cl
mov byte [ebp - 0x23249], cl
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x23250]
call fcn.00415e20
movzx edx, byte [ebp - 0x23249]
test edx, edx
je 0x464605
mov dword [ebp - 0x23254], 0xfffffffe
push 0x5b15cc
lea eax, [ebp - 0x23254]
push eax
call fcn.005286d1
jmp 0x46465c
mov ecx, dword [ebp - 0x8234]
push ecx
lea edx, [ebp - 0x825c]
push edx
mov eax, dword [ebp - 0x30b8]
push eax
lea ecx, [ebp - 0x2020]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c8720
mov dword [ebp - 0x2358c], eax
cmp dword [ebp - 0x2358c], 0
jne 0x46465c
mov dword [ebp - 0x23258], 0xfffffffe
push 0x5b15cc
lea eax, [ebp - 0x23258]
push eax
call fcn.005286d1
cmp dword [ebp - 0x825c], 0
je 0x464c16
cmp dword [ebp - 0x8238], 0
je 0x464c16
push 0x58095c
lea ecx, [ebp - 0x8248]
call fcn.00411610
test eax, eax
jne 0x464c16
lea ecx, [ebp - 0xec60]
call fcn.0044b230
mov dword [ebp - 0x23590], eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x823c]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x8240]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x8244]
call fcn.00415f60
push eax
lea ecx, [ebp - 0xec50]
push ecx
lea ecx, [ebp - 0xec60]
call fcn.0046bd20
mov dword [ebp - 0x23594], eax
mov byte [ebp - 4], 0x49
lea edx, [ebp - 0xec50]
push edx
push 0x580970
lea eax, [ebp - 0x2325c]
push eax
call fcn.0043b3d0
add esp, 0xc
mov dword [ebp - 0x23598], eax
mov ecx, dword [ebp - 0x23598]
mov dword [ebp - 0x2359c], ecx
mov byte [ebp - 4], 0x4a
push 0x580968
mov edx, dword [ebp - 0x2359c]
push edx
lea eax, [ebp - 0x23260]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x235a0], eax
mov ecx, dword [ebp - 0x235a0]
mov dword [ebp - 0x235a4], ecx
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x235a4]
push edx
lea ecx, [ebp - 0xec50]
call fcn.00415e40
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x23260]
call fcn.00415e20
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x2325c]
call fcn.00415e20
lea ecx, [ebp - 0xec4c]
call fcn.00415d60
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xec4c]
call fcn.00416520
mov dword [ebp - 0xec64], 0
jmp 0x4647aa
mov eax, dword [ebp - 0xec64]
add eax, 1
mov dword [ebp - 0xec64], eax
lea ecx, [ebp - 0x30ac]
call fcn.0046b6c0
mov dword [ebp - 0x235a8], eax
mov ecx, dword [ebp - 0xec64]
cmp ecx, dword [ebp - 0x235a8]
jge 0x4648d3
lea ecx, [ebp - 0xec68]
call fcn.00415d60
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0xec64]
push edx
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x235ac], eax
push 0x5809a8
mov eax, dword [ebp - 0x235ac]
push eax
call fcn.00431030
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x464821
lea edx, [ebp - 0xec50]
push edx
lea ecx, [ebp - 0xec4c]
call fcn.004115f0
mov eax, dword [ebp - 0xec64]
push eax
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x235b0], eax
lea ecx, [ebp - 0xec68]
push ecx
push 0x5809b0
mov ecx, dword [ebp - 0x235b0]
call fcn.00415f60
push eax
call fcn.0046ab70
add esp, 0xc
mov dword [ebp - 0x235b4], eax
cmp dword [ebp - 0x235b4], 0
jne 0x464892
mov edx, dword [ebp - 0xec64]
push edx
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x235b8], eax
mov eax, dword [ebp - 0x235b8]
push eax
lea ecx, [ebp - 0xec4c]
call fcn.004115f0
lea ecx, [ebp - 0xec4c]
call fcn.00415f90
cmp eax, 0x10000
jle 0x4648bf
mov dword [ebp - 0x23264], 0xffffffff
push 0x5b15cc
lea ecx, [ebp - 0x23264]
push ecx
call fcn.005286d1
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xec68]
call fcn.00415e20
jmp 0x46479b
lea ecx, [ebp - 0xec4c]
call fcn.00415f60
push eax
lea edx, [ebp - 0x23268]
push edx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x235bc], eax
mov eax, dword [ebp - 0x235bc]
mov dword [ebp - 0x235c0], eax
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x235c0]
call fcn.00412150
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c81b0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x23268]
call fcn.00412130
push 0x5809d0
lea ecx, [ebp - 0xec50]
call fcn.00415e60
mov edx, dword [ebp - 0x23350]
cmp dword [edx + 0x210], 0
je 0x464ad3
mov dword [ebp - 0x51f8], 0x1000
mov eax, dword [ebp - 0x51f8]
push eax
lea ecx, [ebp - 0x8230]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7870
mov dword [ebp - 0x235c4], eax
cmp dword [ebp - 0x235c4], 0
jne 0x4649a2
mov dword [ebp - 0x2326c], 1
push 0x5b15cc
lea eax, [ebp - 0x2326c]
push eax
call fcn.005286d1
push 0x5809d4
lea ecx, [ebp - 0x8230]
push ecx
call fcn.0052b680
add esp, 8
test eax, eax
jne 0x4649bf
jmp 0x464ad3
push 0x5809d8
call fcn.00529140
add esp, 4
push eax
push 0x5809ec
lea edx, [ebp - 0x8230]
push edx
call fcn.0055bb6c
add esp, 0xc
test eax, eax
jne 0x464ace
push str.Proxy_Authenticate:
call fcn.00529140
add esp, 4
lea eax, [ebp + eax - 0x8230]
push eax
lea ecx, [ebp - 0x23270]
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x235c8], eax
mov edx, dword [ebp - 0x235c8]
mov dword [ebp - 0x235cc], edx
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0x235cc]
push eax
lea ecx, [ebp - 0xec50]
call fcn.00415e40
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x23270]
call fcn.00415e20
lea ecx, [ebp - 0xec50]
call fcn.00442290
push 0x580a14
push 0x580a18
lea ecx, [ebp - 0xec50]
call fcn.00424600
push 5
push 0x580a20
lea ecx, [ebp - 0xec50]
call fcn.00415f60
push eax
call fcn.0052f26c
add esp, 0xc
test eax, eax
jne 0x464ace
push 5
lea ecx, [ebp - 0x23274]
push ecx
lea ecx, [ebp - 0xec50]
call fcn.004118f0
mov dword [ebp - 0x235d0], eax
mov edx, dword [ebp - 0x235d0]
mov dword [ebp - 0x235d4], edx
mov byte [ebp - 4], 0x50
mov eax, dword [ebp - 0x235d4]
push eax
lea ecx, [ebp - 0xec50]
call fcn.00415e40
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x23274]
call fcn.00415e20
jmp 0x46493e
lea ecx, [ebp - 0xec50]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x23278]
push ecx
lea ecx, [ebp - 0xec60]
call fcn.0046c2f0
mov dword [ebp - 0x235d8], eax
mov edx, dword [ebp - 0x235d8]
mov dword [ebp - 0x235dc], edx
mov byte [ebp - 4], 0x51
mov eax, dword [ebp - 0x235dc]
push eax
lea ecx, [ebp - 0xec50]
call fcn.00415e40
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x23278]
call fcn.00415e20
lea ecx, [ebp - 0xec50]
push ecx
push str.Proxy_Authorization:_NTLM
lea edx, [ebp - 0x2327c]
push edx
call fcn.0043b3d0
add esp, 0xc
mov dword [ebp - 0x235e0], eax
mov eax, dword [ebp - 0x235e0]
mov dword [ebp - 0x235e4], eax
mov byte [ebp - 4], 0x52
push 0x580a2c
mov ecx, dword [ebp - 0x235e4]
push ecx
lea edx, [ebp - 0x23280]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x235e8], eax
mov eax, dword [ebp - 0x235e8]
mov dword [ebp - 0x235ec], eax
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x235ec]
push ecx
lea ecx, [ebp - 0xec50]
call fcn.00415e40
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x23280]
call fcn.00415e20
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x2327c]
call fcn.00415e20
lea ecx, [ebp - 0x30ac]
call fcn.0046b6c0
mov dword [ebp - 0x235f0], eax
push 1
lea edx, [ebp - 0xec50]
push edx
mov eax, dword [ebp - 0x235f0]
sub eax, 1
push eax
lea ecx, [ebp - 0x30ac]
call fcn.004efc7f
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0xec4c]
call fcn.00415e20
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xec50]
call fcn.00415e20
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xec60]
call fcn.0044b270
cmp dword [ebp - 0x5200], 4
jne 0x464e36
mov ecx, dword [ebp + 8]
cmp dword [ecx], 2
jne 0x464ca0
mov edx, dword [ebp - 0x23350]
cmp dword [edx + 0x210], 0
je 0x464ca0
mov dword [ebp - 0x10084], 0x1000
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7850
mov dword [ebp - 0x235f4], eax
cmp dword [ebp - 0x235f4], 0
jne 0x464c69
jmp 0x464ca0
push 0
lea edx, [ebp - 0x10084]
push edx
lea eax, [ebp - 0x10080]
push eax
mov ecx, dword [ebp - 0x3094]
mov edx, dword [ecx]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7cd0
mov dword [ebp - 0x235f8], eax
cmp dword [ebp - 0x235f8], 0
jne 0x464c9e
jmp 0x464ca0
jmp 0x464c23
mov byte [ebp - 0xf068], 0
push 0x3ff
push 0
lea eax, [ebp - 0xf067]
push eax
call fcn.005281f0
add esp, 0xc
push str.HTTP_1.1_200_Connection_established_r_nProxy_agent:_CCProxy_r_n_r_n
lea ecx, [ebp - 0xf068]
push ecx
call fcn.0052a9d1
add esp, 8
lea edx, [ebp - 0xf068]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c81b0
mov dword [ebp - 0xf07c], 0x10
lea edx, [ebp - 0xf07c]
push edx
lea eax, [ebp - 0xf078]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.WS2_32.dll_getsockname]
mov eax, dword [ebp - 0xf074]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
push str.outgoing_via__s
lea ecx, [ebp - 0xf068]
push ecx
call fcn.0052a9d1
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x23284], esp
lea edx, [ebp - 0x2038]
push edx
call fcn.00415d80
mov dword [ebp - 0x235fc], eax
mov eax, dword [ebp - 0x235fc]
mov dword [ebp - 0x23600], eax
mov byte [ebp - 4], 0x54
push ecx
mov ecx, esp
mov dword [ebp - 0x23288], esp
lea edx, [ebp - 0xf068]
push edx
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x23604], eax
mov eax, dword [ebp - 0x23604]
mov dword [ebp - 0x23608], eax
mov byte [ebp - 4], 0x55
push ecx
mov ecx, esp
mov dword [ebp - 0x2328c], esp
push 0x580abc
call fcn.00415da0
mov dword [ebp - 0x2360c], eax
mov ecx, dword [ebp - 0x2360c]
mov dword [ebp - 0x23610], ecx
mov byte [ebp - 4], 0x56
push 0
push 0
push 0xc8
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23614], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x23290], esp
mov edx, dword [ebp - 0x23614]
push edx
call fcn.00415d80
mov dword [ebp - 0x23618], eax
mov eax, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x45
mov ecx, 0x5c8578
call fcn.004514c0
mov ecx, dword [ebp - 0x3094]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c81e0
mov dword [ebp - 0x23294], 1
push 0x5b15cc
lea edx, [ebp - 0x23294]
push edx
call fcn.005286d1
lea ecx, [ebp - 0x31c8]
call fcn.00415d60
mov byte [ebp - 4], 0x57
mov dword [ebp - 0x10088], 0
jmp 0x464e60
mov eax, dword [ebp - 0x10088]
add eax, 1
mov dword [ebp - 0x10088], eax
lea ecx, [ebp - 0x30ac]
call fcn.0046b6c0
mov dword [ebp - 0x2361c], eax
mov ecx, dword [ebp - 0x10088]
cmp ecx, dword [ebp - 0x2361c]
jge 0x464f0d
cmp dword [ebp - 0x10088], 0
jne 0x464ede
cmp dword [ebp - 0x825c], 1
jne 0x464eca
cmp dword [ebp - 0x8238], 1
jne 0x464eca
mov edx, dword [ebp - 0x10088]
push edx
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23620], eax
mov eax, dword [ebp - 0x23620]
push eax
lea ecx, [ebp - 0x31c8]
call fcn.004115f0
jmp 0x464edc
lea ecx, [ebp - 0x7228]
push ecx
lea ecx, [ebp - 0x31c8]
call fcn.00424520
jmp 0x464f08
mov edx, dword [ebp - 0x10088]
push edx
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23624], eax
mov eax, dword [ebp - 0x23624]
push eax
lea ecx, [ebp - 0x31c8]
call fcn.004115f0
jmp 0x464e51
lea ecx, [ebp - 0x31c8]
call fcn.00415f90
test eax, eax
je 0x464fb9
lea ecx, [ebp - 0x31c8]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x2329c]
push ecx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x23628], eax
mov edx, dword [ebp - 0x23628]
mov dword [ebp - 0x2362c], edx
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x2362c]
call fcn.00412150
push eax
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.004c81b0
mov dword [ebp - 0x23630], eax
xor ecx, ecx
cmp dword [ebp - 0x23630], 0
sete cl
mov byte [ebp - 0x23295], cl
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x2329c]
call fcn.00412130
movzx edx, byte [ebp - 0x23295]
test edx, edx
je 0x464fb9
mov dword [ebp - 0x232a0], 1
push 0x5b15cc
lea eax, [ebp - 0x232a0]
push eax
call fcn.005286d1
mov ecx, dword [ebp - 0x5210]
or ecx, dword [ebp - 0x520c]
je 0x4650b9
mov edx, dword [ebp + 8]
cmp dword [edx], 2
jne 0x4650b9
mov dword [ebp - 0x1008c], 0
cmp dword [ebp - 0x520c], 0
jg 0x465006
jl 0x464ff8
cmp dword [ebp - 0x5210], 0x1000
jae 0x465006
mov eax, dword [ebp - 0x5210]
mov dword [ebp - 0x1008c], eax
jmp 0x465010
mov dword [ebp - 0x1008c], 0x1000
push 8
lea ecx, [ebp - 0x1008c]
push ecx
lea edx, [ebp - 0x8230]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7cd0
mov dword [ebp - 0x23634], eax
cmp dword [ebp - 0x23634], 0
jne 0x46505e
mov dword [ebp - 0x232a4], 0xffffffff
push 0x5b15cc
lea edx, [ebp - 0x232a4]
push edx
call fcn.005286d1
mov eax, dword [ebp - 0x1008c]
push eax
lea ecx, [ebp - 0x8230]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7f70
push 0
mov eax, dword [ebp - 0x1008c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044d350
add esp, 0xc
mov edx, dword [ebp - 0x1008c]
xor eax, eax
mov ecx, dword [ebp - 0x5210]
sub ecx, edx
mov edx, dword [ebp - 0x520c]
sbb edx, eax
mov dword [ebp - 0x5210], ecx
mov dword [ebp - 0x520c], edx
jmp 0x464fb9
mov eax, dword [ebp - 0x5210]
or eax, dword [ebp - 0x520c]
jne 0x465387
lea ecx, [ebp - 0x303c]
push ecx
push 0x580ac8
lea edx, [ebp - 0x30ac]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.0046b0d0
mov dword [ebp - 0x23638], eax
cmp dword [ebp - 0x23638], 0
jl 0x465387
push 0x580aec
lea ecx, [ebp - 0x303c]
call fcn.00411610
test eax, eax
jne 0x465387
mov eax, dword [ebp + 8]
cmp dword [eax], 2
jne 0x465387
mov dword [ebp - 0x10094], 0x1000
mov ecx, dword [ebp - 0x10094]
push ecx
lea edx, [ebp - 0x8230]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7870
mov dword [ebp - 0x2363c], eax
cmp dword [ebp - 0x2363c], 0
jne 0x465176
mov dword [ebp - 0x232a8], 0xffffffff
push 0x5b15cc
lea edx, [ebp - 0x232a8]
push edx
call fcn.005286d1
lea eax, [ebp - 0x8230]
push eax
call fcn.00529140
add esp, 4
push eax
lea ecx, [ebp - 0x8230]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7f70
mov dword [ebp - 0x5210], 0
mov dword [ebp - 0x520c], 0
lea eax, [ebp - 0x5210]
push eax
push 0x580afc
lea ecx, [ebp - 0x8230]
push ecx
call fcn.0052f37c
add esp, 0xc
mov edx, dword [ebp - 0x5210]
or edx, dword [ebp - 0x520c]
jne 0x4651e5
mov dword [ebp - 0x23640], 1
jmp 0x4651ef
mov dword [ebp - 0x23640], 0
mov eax, dword [ebp - 0x23640]
mov dword [ebp - 0x10090], eax
mov ecx, dword [ebp - 0x5210]
or ecx, dword [ebp - 0x520c]
je 0x4652fb
mov edx, dword [ebp + 8]
cmp dword [edx], 2
jne 0x4652fb
mov dword [ebp - 0x10098], 0
cmp dword [ebp - 0x520c], 0
jg 0x465248
jl 0x46523a
cmp dword [ebp - 0x5210], 0x1000
jae 0x465248
mov eax, dword [ebp - 0x5210]
mov dword [ebp - 0x10098], eax
jmp 0x465252
mov dword [ebp - 0x10098], 0x1000
push 8
lea ecx, [ebp - 0x10098]
push ecx
lea edx, [ebp - 0x8230]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7cd0
mov dword [ebp - 0x23644], eax
cmp dword [ebp - 0x23644], 0
jne 0x4652a0
mov dword [ebp - 0x232ac], 0xffffffff
push 0x5b15cc
lea edx, [ebp - 0x232ac]
push edx
call fcn.005286d1
mov eax, dword [ebp - 0x10098]
push eax
lea ecx, [ebp - 0x8230]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7f70
push 0
mov eax, dword [ebp - 0x10098]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044d350
add esp, 0xc
mov edx, dword [ebp - 0x10098]
xor eax, eax
mov ecx, dword [ebp - 0x5210]
sub ecx, edx
mov edx, dword [ebp - 0x520c]
sbb edx, eax
mov dword [ebp - 0x5210], ecx
mov dword [ebp - 0x520c], edx
jmp 0x4651fb
mov dword [ebp - 0x10094], 0x1000
mov eax, dword [ebp - 0x10094]
push eax
lea ecx, [ebp - 0x8230]
push ecx
mov edx, dword [ebp - 0x3094]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.004c7870
mov dword [ebp - 0x23648], eax
cmp dword [ebp - 0x23648], 0
jne 0x465351
mov dword [ebp - 0x232b0], 0xffffffff
push 0x5b15cc
lea ecx, [ebp - 0x232b0]
push ecx
call fcn.005286d1
lea edx, [ebp - 0x8230]
push edx
call fcn.00529140
add esp, 4
push eax
lea eax, [ebp - 0x8230]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7f70
cmp dword [ebp - 0x10090], 0
je 0x465382
jmp 0x465387
jmp 0x465114
mov dword [ebp - 0x51e8], 0
mov dword [ebp - 0x31d4], 0
mov dword [ebp - 0x5208], 0
mov dword [ebp - 0x521c], 0
mov dword [ebp - 0x5218], 0
mov dword [ebp - 0x5214], 0
mov dword [ebp - 0x5210], 0
mov dword [ebp - 0x520c], 0
mov edx, dword [ebp + 8]
cmp dword [edx], 2
jne 0x465798
mov dword [ebp - 0x51f8], 0
push 0x1000
lea eax, [ebp - 0x8230]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7870
mov dword [ebp - 0x2364c], eax
cmp dword [ebp - 0x2364c], 0
jne 0x465432
mov dword [ebp - 0x232b4], 1
push 0x5b15cc
lea edx, [ebp - 0x232b4]
push edx
call fcn.005286d1
lea eax, [ebp - 0x8230]
push eax
call fcn.00529140
add esp, 4
mov dword [ebp - 0x51f8], eax
mov eax, dword [ebp - 0x51f8]
cdq
add eax, dword [ebp - 0x5218]
mov ecx, dword [ebp - 0x5214]
adc ecx, edx
mov dword [ebp - 0x5218], eax
mov dword [ebp - 0x5214], ecx
lea edx, [ebp - 0x8230]
push edx
lea eax, [ebp - 0x232bc]
push eax
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x23650], eax
mov ecx, dword [ebp - 0x23650]
mov dword [ebp - 0x23654], ecx
mov byte [ebp - 4], 0x59
lea edx, [ebp - 0x303c]
push edx
push str.content_type
mov ecx, dword [ebp - 0x23654]
call fcn.00415f60
push eax
call fcn.0046ab70
add esp, 0xc
mov dword [ebp - 0x23658], eax
mov eax, dword [ebp - 0x23658]
mov dword [ebp - 0x232b8], eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x232bc]
call fcn.00415e20
cmp dword [ebp - 0x232b8], 0
je 0x46553f
push 0x580b1c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea ecx, [ebp - 0x232c4]
push ecx
lea ecx, [ebp - 0x303c]
call fcn.0044b1b0
mov dword [ebp - 0x2365c], eax
push 0x580b30
mov ecx, dword [ebp - 0x2365c]
call fcn.00411610
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x232bd], al
lea ecx, [ebp - 0x232c4]
call fcn.00415e20
movzx edx, byte [ebp - 0x232bd]
test edx, edx
je 0x46553f
mov dword [ebp - 0x31d4], 1
lea eax, [ebp - 0x8230]
push eax
lea ecx, [ebp - 0x232cc]
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x23660], eax
mov edx, dword [ebp - 0x23660]
mov dword [ebp - 0x23664], edx
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x303c]
push eax
push 0x580b44
mov ecx, dword [ebp - 0x23664]
call fcn.00415f60
push eax
call fcn.0046ab70
add esp, 0xc
mov dword [ebp - 0x23668], eax
mov ecx, dword [ebp - 0x23668]
mov dword [ebp - 0x232c8], ecx
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x232cc]
call fcn.00415e20
cmp dword [ebp - 0x232c8], 0
je 0x4655d5
lea ecx, [ebp - 0x303c]
call fcn.00415f60
push eax
call fcn.00527fe6
add esp, 4
mov dword [ebp - 0x5210], eax
mov dword [ebp - 0x520c], edx
lea edx, [ebp - 0x8230]
push edx
lea eax, [ebp - 0x232d4]
push eax
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2366c], eax
mov ecx, dword [ebp - 0x2366c]
mov dword [ebp - 0x23670], ecx
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x303c]
push edx
push str.content_encoding
mov ecx, dword [ebp - 0x23670]
call fcn.00415f60
push eax
call fcn.0046ab70
add esp, 0xc
mov dword [ebp - 0x23674], eax
mov eax, dword [ebp - 0x23674]
mov dword [ebp - 0x232d0], eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x232d4]
call fcn.00415e20
cmp dword [ebp - 0x232d0], 0
je 0x4656ac
push 0x580b88
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea ecx, [ebp - 0x232dc]
push ecx
lea ecx, [ebp - 0x303c]
call fcn.0044b1b0
mov dword [ebp - 0x23678], eax
push 0x580b94
mov ecx, dword [ebp - 0x23678]
call fcn.00411610
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x232d5], al
lea ecx, [ebp - 0x232dc]
call fcn.00415e20
movzx edx, byte [ebp - 0x232d5]
test edx, edx
je 0x4656ac
mov dword [ebp - 0x5208], 1
lea eax, [ebp - 0x8230]
push eax
lea ecx, [ebp - 0x232e4]
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2367c], eax
mov edx, dword [ebp - 0x2367c]
mov dword [ebp - 0x23680], edx
mov byte [ebp - 4], 0x5c
lea eax, [ebp - 0x303c]
push eax
push 0x580ba0
mov ecx, dword [ebp - 0x23680]
call fcn.00415f60
push eax
call fcn.0046ab70
add esp, 0xc
mov dword [ebp - 0x23684], eax
mov ecx, dword [ebp - 0x23684]
mov dword [ebp - 0x232e0], ecx
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x232e4]
call fcn.00415e20
cmp dword [ebp - 0x232e0], 0
je 0x465740
push str.chunked
lea ecx, [ebp - 0x303c]
call fcn.00411610
test eax, eax
jne 0x465740
mov dword [ebp - 0x521c], 1
lea edx, [ebp - 0x8230]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c81b0
push 1
lea edx, [ebp - 0x8230]
push edx
call fcn.00529140
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0044d350
add esp, 0xc
push 0x580bd4
lea ecx, [ebp - 0x8230]
push ecx
call fcn.0052b680
add esp, 8
test eax, eax
jne 0x465793
jmp 0x465798
jmp 0x4653d7
mov dword [ebp - 0x51f4], 1
mov dword [ebp - 0x51f0], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5204], eax
lea ecx, [ebp - 0x8268]
call fcn.00415d60
mov byte [ebp - 4], 0x5d
mov edx, dword [ebp + 8]
cmp dword [edx], 2
jne 0x4660bc
cmp dword [0x5fa5b4], 0
jle 0x465813
mov esi, dword [0x5fa5b4]
imul esi, esi, 0x3e8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x5204]
cmp eax, esi
jle 0x465813
mov dword [ebp - 0x232e8], 1
push 0x5b15cc
lea eax, [ebp - 0x232e8]
push eax
call fcn.005286d1
mov dword [ebp - 0x31c0], 0
mov dword [ebp - 0x1009c], 0
jmp 0x465838
mov ecx, dword [ebp - 0x1009c]
add ecx, 1
mov dword [ebp - 0x1009c], ecx
mov edx, dword [ebp - 0x1009c]
cmp edx, dword [ebp - 0x31c0]
jae 0x46585c
mov eax, dword [ebp - 0x1009c]
mov ecx, dword [ebp + eax*4 - 0x31bc]
cmp ecx, dword [ebp - 0x14]
jne 0x46585a
jmp 0x46585c
jmp 0x465829
mov edx, dword [ebp - 0x1009c]
cmp edx, dword [ebp - 0x31c0]
jne 0x465892
cmp dword [ebp - 0x31c0], 0x40
jae 0x465892
mov eax, dword [ebp - 0x1009c]
mov ecx, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x31bc], ecx
mov edx, dword [ebp - 0x31c0]
add edx, 1
mov dword [ebp - 0x31c0], edx
xor eax, eax
jne 0x46581d
mov dword [ebp - 0x100a0], 0
jmp 0x4658b1
mov ecx, dword [ebp - 0x100a0]
add ecx, 1
mov dword [ebp - 0x100a0], ecx
mov edx, dword [ebp - 0x100a0]
cmp edx, dword [ebp - 0x31c0]
jae 0x4658da
mov eax, dword [ebp - 0x100a0]
mov ecx, dword [ebp - 0x3094]
mov edx, dword [ebp + eax*4 - 0x31bc]
cmp edx, dword [ecx]
jne 0x4658d8
jmp 0x4658da
jmp 0x4658a2
mov eax, dword [ebp - 0x100a0]
cmp eax, dword [ebp - 0x31c0]
jne 0x465915
cmp dword [ebp - 0x31c0], 0x40
jae 0x465915
mov ecx, dword [ebp - 0x100a0]
mov edx, dword [ebp - 0x3094]
mov eax, dword [edx]
mov dword [ebp + ecx*4 - 0x31bc], eax
mov ecx, dword [ebp - 0x31c0]
add ecx, 1
mov dword [ebp - 0x31c0], ecx
xor edx, edx
jne 0x465896
lea eax, [ebp - 0x51f4]
push eax
push 0
push 0
lea ecx, [ebp - 0x31c0]
push ecx
push 0xffffffffffffffff
call dword [sym.imp.WS2_32.dll_select]
test eax, eax
jne 0x465940
jmp 0x4657c7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5204], eax
lea edx, [ebp - 0x31c0]
push edx
mov eax, dword [ebp - 0x14]
push eax
call sub.WS2_32.dll___WSAFDIsSet
test eax, eax
je 0x465e90
mov dword [ebp - 0x200ac], 0x10000
mov byte [ebp - 0x200a8], 0
push 0x10000
push 0
lea ecx, [ebp - 0x200a7]
push ecx
call fcn.005281f0
add esp, 0xc
push 0
lea edx, [ebp - 0x200ac]
push edx
lea eax, [ebp - 0x200a8]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7cd0
mov dword [ebp - 0x23688], eax
cmp dword [ebp - 0x23688], 0
je 0x465da3
mov edx, dword [ebp - 0x200ac]
mov byte [ebp + edx - 0x200a8], 0
cmp dword [ebp - 0x31d4], 0
je 0x465d45
cmp dword [0x5d9a2c], 0
je 0x465a89
lea ecx, [ebp - 0x8268]
call fcn.004119e0
movzx eax, al
test eax, eax
je 0x465a89
cmp dword [ebp - 0x5208], 0
je 0x465a70
mov ecx, dword [ebp - 0x521c]
push ecx
mov edx, dword [ebp - 0x200ac]
push edx
lea eax, [ebp - 0x200a8]
push eax
lea ecx, [ebp - 0x232ec]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.0046b130
mov dword [ebp - 0x2368c], eax
mov edx, dword [ebp - 0x2368c]
mov dword [ebp - 0x23690], edx
mov byte [ebp - 4], 0x5e
lea eax, [ebp - 0x8268]
push eax
mov ecx, dword [ebp - 0x23690]
call fcn.00412150
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.0046ac70
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x232ec]
call fcn.00412130
jmp 0x465a89
lea ecx, [ebp - 0x8268]
push ecx
lea edx, [ebp - 0x200a8]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.0046ac70
lea ecx, [ebp - 0x200b0]
call fcn.00415d60
mov byte [ebp - 4], 0x5f
cmp dword [ebp - 0x5208], 0
je 0x465b42
mov eax, dword [ebp - 0x521c]
push eax
mov ecx, dword [ebp - 0x200ac]
push ecx
lea edx, [ebp - 0x200a8]
push edx
lea eax, [ebp - 0x232fc]
push eax
mov ecx, dword [ebp - 0x23350]
call fcn.0046b130
mov dword [ebp - 0x23694], eax
mov ecx, dword [ebp - 0x23694]
mov dword [ebp - 0x23698], ecx
mov byte [ebp - 4], 0x60
mov edx, dword [ebp - 0x2334c]
or edx, 8
mov dword [ebp - 0x2334c], edx
mov ecx, dword [ebp - 0x23698]
call fcn.00412150
push eax
lea eax, [ebp - 0x23300]
push eax
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2369c], eax
mov ecx, dword [ebp - 0x2369c]
mov dword [ebp - 0x236a0], ecx
mov dword [ebp - 4], 0x61
mov edx, dword [ebp - 0x2334c]
or edx, 0x10
mov dword [ebp - 0x2334c], edx
mov eax, dword [ebp - 0x236a0]
mov dword [ebp - 0x236a4], eax
jmp 0x465b8c
lea ecx, [ebp - 0x200a8]
push ecx
lea edx, [ebp - 0x23304]
push edx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x236a8], eax
mov eax, dword [ebp - 0x236a8]
mov dword [ebp - 0x236ac], eax
mov dword [ebp - 4], 0x62
mov ecx, dword [ebp - 0x2334c]
or ecx, 0x20
mov dword [ebp - 0x2334c], ecx
mov edx, dword [ebp - 0x236ac]
mov dword [ebp - 0x236a4], edx
mov eax, dword [ebp - 0x236a4]
mov dword [ebp - 0x232f8], eax
lea ecx, [ebp - 0x200b0]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x232f4], esp
mov edx, dword [ebp - 0x232f8]
push edx
call fcn.00415d80
mov dword [ebp - 0x236b0], eax
mov eax, dword [ebp + 8]
push eax
mov ecx, 0x5c8578
call fcn.004548b0
mov dword [ebp - 0x236b4], eax
mov ecx, dword [ebp - 0x236b4]
mov dword [ebp - 0x232f0], ecx
mov dword [ebp - 4], 0x61
mov edx, dword [ebp - 0x2334c]
and edx, 0x20
je 0x465bfe
and dword [ebp - 0x2334c], 0xffffffdf
lea ecx, [ebp - 0x23304]
call fcn.00415e20
mov dword [ebp - 4], 0x60
mov eax, dword [ebp - 0x2334c]
and eax, 0x10
je 0x465c22
and dword [ebp - 0x2334c], 0xffffffef
lea ecx, [ebp - 0x23300]
call fcn.00415e20
mov dword [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x2334c]
and ecx, 8
je 0x465c46
and dword [ebp - 0x2334c], 0xfffffff7
lea ecx, [ebp - 0x232fc]
call fcn.00412130
cmp dword [ebp - 0x232f0], 0
je 0x465d36
push ecx
mov ecx, esp
mov dword [ebp - 0x23308], esp
lea edx, [ebp - 0x2038]
push edx
call fcn.00415d80
mov dword [ebp - 0x236b8], eax
mov eax, dword [ebp - 0x236b8]
mov dword [ebp - 0x236bc], eax
mov byte [ebp - 4], 0x63
push ecx
mov ecx, esp
mov dword [ebp - 0x2330c], esp
lea edx, [ebp - 0x200b0]
push edx
call fcn.00415d80
mov dword [ebp - 0x236c0], eax
mov eax, dword [ebp - 0x236c0]
mov dword [ebp - 0x236c4], eax
mov byte [ebp - 4], 0x64
push ecx
mov ecx, esp
mov dword [ebp - 0x23310], esp
push 0x580bd8
call fcn.00415da0
mov dword [ebp - 0x236c8], eax
mov ecx, dword [ebp - 0x236c8]
mov dword [ebp - 0x236cc], ecx
mov byte [ebp - 4], 0x65
push 0
push 0
push 0x193
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x236d0], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x23314], esp
mov edx, dword [ebp - 0x236d0]
push edx
call fcn.00415d80
mov dword [ebp - 0x236d4], eax
mov eax, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x5f
mov ecx, 0x5c8578
call fcn.004514c0
mov dword [ebp - 0x23318], 1
push 0x5b15cc
lea ecx, [ebp - 0x23318]
push ecx
call fcn.005286d1
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x200b0]
call fcn.00415e20
mov edx, dword [ebp - 0x200ac]
xor eax, eax
add edx, dword [ebp - 0x5218]
mov ecx, dword [ebp - 0x5214]
adc ecx, eax
mov dword [ebp - 0x5218], edx
mov dword [ebp - 0x5214], ecx
mov edx, dword [ebp - 0x200ac]
push edx
lea eax, [ebp - 0x200a8]
push eax
mov ecx, dword [ebp - 0x3094]
mov edx, dword [ecx]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7f70
push 1
mov eax, dword [ebp - 0x200ac]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044d350
add esp, 0xc
jmp 0x465e90
push ecx
mov ecx, esp
mov dword [ebp - 0x2331c], esp
lea edx, [ebp - 0x2038]
push edx
call fcn.00415d80
mov dword [ebp - 0x236d8], eax
mov eax, dword [ebp - 0x236d8]
mov dword [ebp - 0x236dc], eax
mov byte [ebp - 4], 0x66
push ecx
mov ecx, esp
mov dword [ebp - 0x23320], esp
lea edx, [ebp - 0x8268]
push edx
call fcn.00415d80
mov dword [ebp - 0x236e0], eax
mov eax, dword [ebp - 0x236e0]
mov dword [ebp - 0x236e4], eax
mov byte [ebp - 4], 0x67
push ecx
mov ecx, esp
mov dword [ebp - 0x23324], esp
push 0x580be4
call fcn.00415da0
mov dword [ebp - 0x236e8], eax
mov ecx, dword [ebp - 0x236e8]
mov dword [ebp - 0x236ec], ecx
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x5214]
push edx
mov eax, dword [ebp - 0x5218]
push eax
push 0xc8
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x236f0], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x23328], esp
mov edx, dword [ebp - 0x236f0]
push edx
call fcn.00415d80
mov dword [ebp - 0x236f4], eax
mov eax, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x5d
mov ecx, 0x5c8578
call fcn.004514c0
mov dword [ebp - 0x2332c], 1
push 0x5b15cc
lea ecx, [ebp - 0x2332c]
push ecx
call fcn.005286d1
lea edx, [ebp - 0x31c0]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
call sub.WS2_32.dll___WSAFDIsSet
test eax, eax
je 0x4660b7
push 0x1000
lea edx, [ebp - 0x8230]
push edx
mov eax, dword [ebp - 0x3094]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x23350]
call fcn.004c7870
mov dword [ebp - 0x236f8], eax
cmp dword [ebp - 0x236f8], 0
jne 0x465ef7
mov dword [ebp - 0x23330], 0xffffffff
push 0x5b15cc
lea edx, [ebp - 0x23330]
push edx
call fcn.005286d1
push 0x580bf0
lea eax, [ebp - 0x8230]
push eax
call fcn.0052b680
add esp, 8
test eax, eax
jne 0x465f2a
lea ecx, [ebp - 0x8230]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x23350]
call fcn.004c81b0
jmp 0x4657c7
push ecx
mov ecx, esp
mov dword [ebp - 0x23334], esp
lea eax, [ebp - 0x2038]
push eax
call fcn.00415d80
mov dword [ebp - 0x236fc], eax
mov ecx, dword [ebp - 0x236fc]
mov dword [ebp - 0x23700], ecx
mov byte [ebp - 4], 0x69
push ecx
mov ecx, esp
mov dword [ebp - 0x23338], esp
lea edx, [ebp - 0x8268]
push edx
call fcn.00415d80
mov dword [ebp - 0x23704], eax
mov eax, dword [ebp - 0x23704]
mov dword [ebp - 0x23708], eax
mov byte [ebp - 4], 0x6a
push ecx
mov ecx, esp
mov dword [ebp - 0x2333c], esp
push 0x580bf4
call fcn.00415da0
mov dword [ebp - 0x2370c], eax
mov ecx, dword [ebp - 0x2370c]
mov dword [ebp - 0x23710], ecx
mov byte [ebp - 4], 0x6b
mov edx, dword [ebp - 0x5214]
push edx
mov eax, dword [ebp - 0x5218]
push eax
push 0xc8
push 0
lea ecx, [ebp - 0x30ac]
call fcn.00430f50
mov dword [ebp - 0x23714], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x23340], esp
mov edx, dword [ebp - 0x23714]
push edx
call fcn.00415d80
mov dword [ebp - 0x23718], eax
mov eax, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x5d
mov ecx, 0x5c8578
call fcn.004514c0
lea ecx, [ebp - 0x30ac]
call fcn.0045f120
lea ecx, [ebp - 0x8230]
push ecx
lea edx, [ebp - 0x23344]
push edx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2371c], eax
mov eax, dword [ebp - 0x2371c]
mov dword [ebp - 0x23720], eax
mov byte [ebp - 4], 0x6c
mov ecx, dword [ebp - 0x23720]
push ecx
lea ecx, [ebp - 0x30ac]
call fcn.004244f0
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x23344]
call fcn.00415e20
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x8268]
call fcn.00415e20
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x31c8]
call fcn.00415e20
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x825c]
call fcn.00460d20
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x8260]
call fcn.00415e20
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8274]
call fcn.00415e20
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x8264]
call fcn.00415e20
mov byte [ebp - 4], 9
jmp 0x46190e
jmp 0x4657c7
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x8268]
call fcn.00415e20
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x31c8]
call fcn.00415e20
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x825c]
call fcn.00460d20
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x8260]
call fcn.00415e20
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8274]
call fcn.00415e20
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x8264]
call fcn.00415e20
jmp 0x46635d
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x3090]
call fcn.0048f570
mov ecx, dword [ebp + 8]
push ecx
mov ecx, 0x5c8578
call fcn.00451040
mov dword [ebp - 0x23348], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3098]
call fcn.00415e20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x303c]
call fcn.00415e20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2034]
call fcn.004efa9a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2038]
call fcn.00415e20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30b0]
call fcn.00415e20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30b4]
call fcn.00415e20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30ac]
call fcn.004efa9a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3090]
call fcn.0048ed90
mov eax, dword [ebp - 0x23348]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.00527aad
mov esp, ebp
pop ebp
ret 4