Function at 0x574ef0
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x639f59
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x70a308]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x5c], esi
xor eax, eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x28], 0xbb8
mov eax, dword [esi + 0xb0]
cmp byte [eax + 0x173], 0
je 0x574f4f
cmp byte [eax + 0x337], 0
mov eax, 5
jne 0x574f54
mov eax, 0xf
lea ebx, [esi + 0x31e0]
mov edx, dword [esi]
push eax
mov eax, dword [ebx]
push eax
mov ecx, esi
mov edx, dword [edx + 0x1c]
call edx
mov edi, eax
mov dword [ebp - 0x24], edi
mov eax, dword [esi + 0x31e8]
cmp dword [eax + 0x1c], 0
jne 0x575059
cmp edi, 0x2751
je 0x574f90
cmp edi, 0x2743
jne 0x57506b
mov eax, dword [esi + 0xb0]
test dword [eax + 0x14c], 0x2400000
jne 0x57506b
mov dword [ebp - 0x30], edi
xor ecx, ecx
cmp byte [eax + 0x173], cl
sete cl
mov byte [eax + 0x173], cl
mov edx, dword [esi]
push ebx
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov edx, dword [esi]
push 0x1e
mov eax, dword [ebx]
push eax
mov ecx, esi
mov edx, dword [edx + 0x1c]
call edx
mov edi, eax
mov dword [ebp - 0x24], edi
mov eax, dword [esi + 0x31e8]
cmp dword [eax + 0x1c], 0
jne 0x575059
cmp dword [ebp - 0x30], edi
jne 0x574fff
mov eax, dword [esi + 0xb0]
xor ecx, ecx
cmp byte [eax + 0x173], cl
sete cl
mov byte [eax + 0x173], cl
test edi, edi
je 0x5750e8
mov dword [ebp - 0x60], 0
mov edi, edi
push edi
mov ecx, esi
call fcn.0054c670
test eax, eax
jne 0x5750e0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp eax, 5
jg 0x5750e0
mov edx, dword [esi]
push ebx
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov edx, dword [esi]
push 0x1e
mov eax, dword [ebx]
push eax
mov ecx, esi
mov edx, dword [edx + 0x1c]
call edx
mov edi, eax
mov dword [ebp - 0x24], edi
mov eax, dword [esi + 0x31e8]
cmp dword [eax + 0x1c], 0
je 0x575010
lea ecx, [eax + 0x28]
call fcn.00545640
mov eax, 0x7540
jmp 0x576f49
cmp edi, 0x274c
jne 0x574fff
mov eax, dword [esi + 0xb0]
cmp byte [eax + 0x173], 0
je 0x575007
test dword [eax + 0x14c], 0x400000
jne 0x575007
mov byte [eax + 0x173], 0
mov edx, dword [esi]
push ebx
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov edx, dword [esi]
push 0x1e
mov eax, dword [ebx]
push eax
mov ecx, esi
mov edx, dword [edx + 0x1c]
call edx
mov edi, eax
mov dword [ebp - 0x24], edi
mov eax, dword [esi + 0x31e8]
cmp dword [eax + 0x1c], 0
jne 0x575059
cmp edi, 0x274c
jne 0x574fff
mov eax, dword [esi + 0xb0]
mov byte [eax + 0x173], 1
jmp 0x575007
test edi, edi
jne 0x5752ec
mov dword [esi + 0x3234], 1
add dword [ebp - 0x28], 0x7d0
mov eax, dword [esi + 0x184]
test eax, eax
je 0x575168
mov cl, byte [eax + 0x15c]
mov byte [ebp - 0x35], cl
test cl, cl
je 0x57516c
mov ecx, esi
call fcn.005657d0
mov edi, eax
mov dword [ebp - 0x24], edi
test edi, edi
je 0x575305
cmp edi, 0x7585
jne 0x5751fb
push str.Restart_type_002_n
mov ecx, esi
call fcn.0054c540
mov ecx, esi
call fcn.00566f90
mov eax, dword [esi]
push ebx
mov ecx, esi
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x576f49
mov eax, dword [ebp + 8]
push eax
mov ecx, esi
call fcn.00574ef0
jmp 0x576f49
mov byte [ebp - 0x35], 0
test eax, eax
je 0x575305
cmp byte [eax + 0x137], 0
je 0x575305
mov ecx, dword [esi + 0x3454]
test ecx, ecx
je 0x575305
lea edx, [ecx + 0x3310]
push edx
mov eax, dword [ecx + 0x3364]
push eax
call fcn.005be1f0
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x576f49
mov ecx, dword [esi + 0x3454]
push 1
lea edx, [ecx + 0x3320]
push edx
lea eax, [ecx + 0x3318]
push eax
mov edx, dword [esi + 0x184]
mov eax, dword [edx]
push eax
lea edx, [ecx + 0x3310]
push edx
mov eax, dword [ebx]
push eax
call fcn.005c0f50
mov dword [ebp - 0x24], eax
test eax, eax
je 0x5752f3
cmp eax, 0x757e
jne 0x576f49
push str.Restart_type_005_n
jmp 0x575292
mov ecx, dword [esi + 0x184]
mov al, byte [ecx + 0x15d]
test al, al
jne 0x57525a
cmp edi, 0x7559
jne 0x57525a
cmp dword [ecx + 0x154], 5
jne 0x57525a
cmp byte [ecx + 0x15e], al
jne 0x57525a
cmp byte [ecx + 0x15f], al
jne 0x57525a
mov byte [ecx + 0x15e], 1
mov ecx, dword [esi + 0x184]
mov byte [ecx + 0x15f], 1
mov edx, dword [esi + 0x184]
mov dword [edx + 0x154], 4
push str.Restart_type_003_n
jmp 0x575135
mov edx, dword [ecx + 0x154]
cmp edx, 5
jne 0x5752c5
cmp edi, 0x7580
jne 0x5752c5
cmp byte [ecx + 0x15e], 0
jne 0x5752c5
mov byte [ecx + 0x15e], 1
mov ecx, dword [esi + 0x184]
mov dword [ecx + 0x154], 4
push str.Restart_type_004_n
mov ecx, esi
call fcn.0054c540
mov ecx, esi
call fcn.00566f90
push ebx
mov edx, dword [esi]
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x576f49
mov ecx, dword [ebp + 8]
push ecx
mov ecx, esi
call fcn.00574ef0
jmp 0x576f49
test al, al
jne 0x5752ec
cmp edx, 4
jne 0x5752ec
cmp byte [ecx + 0x15e], al
je 0x5752ec
cmp byte [ecx + 0x15f], al
je 0x5752ec
mov dword [ecx + 0x154], edx
mov edi, 0x7559
mov dword [ebp - 0x24], edi
mov eax, edi
jmp 0x576f49
mov ecx, dword [esi + 0x3454]
lea edx, [ecx + 0x3318]
push edx
call fcn.005be7a0
add dword [ebp - 0x28], 0x153
mov byte [ebp - 0x36], 1
mov eax, dword [esi + 0xb4]
test eax, eax
je 0x57531f
mov eax, dword [eax + 0x10]
jmp 0x575328
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x575402
mov byte [ebp - 0x36], 0
mov ecx, dword [esi + 0x184]
cmp dword [ecx], 0
je 0x575386
push 1
mov ecx, esi
call fcn.00572090
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x576f49
cmp dword [esi + 0x323c], 0xc8
je 0x57537c
mov edx, dword [esi + 0x3224]
push edx
mov ecx, dword [esi + 0x9c]
call fcn.00554e70
mov eax, 0x756d
jmp 0x576f49
mov dword [esi + 0x8c], 0x10
lea eax, [esi + 0x3310]
push eax
mov eax, dword [esi + 0x3364]
push eax
mov ecx, esi
call fcn.005be1f0
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x576f49
mov eax, dword [esi + 0xb4]
test eax, eax
je 0x5753b4
mov eax, dword [eax]
jmp 0x5753bc
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx]
lea edi, [esi + 0x3318]
push 1
lea edx, [esi + 0x3320]
push edx
push edi
push eax
lea eax, [esi + 0x3310]
push eax
mov eax, dword [ebx]
push eax
mov ecx, esi
call fcn.005c0f50
mov dword [ebp - 0x24], eax
test eax, eax
je 0x5753fa
cmp eax, 0x757e
jne 0x576f49
push str.Restart_type_006_n
jmp 0x575292
push edi
mov ecx, esi
call fcn.005be7a0
mov ecx, esi
cmp dword [ebp + 8], 0
je 0x575411
call fcn.00564dc0
jmp 0x57541a
mov edx, dword [esi]
push 0
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x576f49
mov ecx, dword [ebp + 8]
push ecx
mov ecx, esi
call fcn.00571cf0
mov edi, eax
mov dword [ebp - 0x24], edi
cmp edi, 0x757e
jne 0x5754d7
mov eax, dword [esi + 0xb4]
test eax, eax
je 0x575450
mov eax, dword [eax + 0x10]
jmp 0x575459
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0x24]
cmp eax, 2
jne 0x57556f
mov edx, dword [esi + 0x3214]
mov eax, edx
lea ebx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x575470
sub eax, ebx
je 0x5754ae
mov eax, dword [esi + 0xb0]
mov ecx, dword [eax]
mov eax, edx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x5754a5
test dl, dl
je 0x5754a1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x5754a5
add eax, 2
add ecx, 2
test dl, dl
jne 0x575485
xor eax, eax
jmp 0x5754aa
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x5754b8
cmp byte [ebp - 0x36], 0
je 0x57556f
push str.Restart_type_007_n
mov ecx, esi
call fcn.0054c540
mov ecx, esi
call fcn.00566f90
lea eax, [esi + 0x31e0]
push eax
jmp 0x5752a1
cmp edi, 0x7586
jne 0x575506
mov eax, dword [esi + 0xb4]
test eax, eax
je 0x5754ee
mov eax, dword [eax + 0x10]
jmp 0x5754f7
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0x24]
cmp eax, 2
jne 0x57556f
push str.Restart_type_007b_n
jmp 0x575135
test edi, edi
jne 0x57556f
cmp dword [esi + 0x323c], 0xce
jne 0x57556f
mov eax, dword [esi + 0x3248]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x575520
sub eax, edx
je 0x57556f
mov eax, dword [esi + 0xb4]
test eax, eax
jne 0x57554e
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx]
push edx
lea ecx, [ebp - 0x30]
call fcn.004030e0
mov byte [ebp - 4], 1
or dword [ebp - 0x50], 1
mov eax, dword [eax]
push str.sciencedirect.com
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
je 0x57556f
cmp dword [esi + 0x31dc], 2
je 0x57556f
mov bl, 1
jmp 0x575571
xor bl, bl
mov dword [ebp - 4], 0
test byte [ebp - 0x50], 1
je 0x57558a
and dword [ebp - 0x50], 0xfffffffe
lea ecx, [ebp - 0x30]
call fcn.00402550
test bl, bl
je 0x5755ca
mov ecx, dword [esi + 0x31e8]
test ecx, ecx
je 0x5755a1
mov eax, dword [ecx]
push 2
mov edx, dword [eax + 0xc]
call edx
mov dword [esi + 0x31dc], 2
mov ecx, esi
call fcn.00566f90
push str.Restart_type_11_n
mov ecx, esi
call fcn.0054c540
lea eax, [esi + 0x31e0]
push eax
jmp 0x5752a1
cmp dword [esi + 0x323c], 0xc8
jne 0x57571f
mov edx, dword [esi + 0x48]
or edx, dword [esi + 0x4c]
jne 0x57571f
cmp dword [esi + 0x54], edx
jg 0x57571f
jl 0x5755fa
cmp dword [esi + 0x50], edx
ja 0x57571f
cmp byte [esi + 0x31ed], 0
jne 0x57571f
mov eax, dword [esi + 0x3260]
mov ecx, dword [esi + 0x3264]
mov edx, eax
or edx, ecx
je 0x57571f
add eax, 1
adc ecx, 0
cmp eax, dword [esi + 0x31f8]
jne 0x57571f
cmp ecx, dword [esi + 0x31fc]
jne 0x57571f
mov edi, 0x7542
mov dword [ebp - 0x24], edi
mov eax, dword [esi + 0xb0]
mov ecx, dword [eax + 0x308]
cmp ecx, 0x40
je 0x575660
cmp ecx, 0x80
jne 0x575749
mov ecx, dword [esi + 0x31e8]
test ecx, ecx
je 0x575749
cmp byte [ecx + 0x250], 0
je 0x575749
cmp byte [ecx + 0x251], 0
jne 0x575749
mov byte [ecx + 0x251], 1
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 8]
push str._tmp_dashinit
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
je 0x575700
lea ecx, [ebp - 0x28]
call fcn.004024e0
mov byte [ebp - 4], 2
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 8]
push edx
push 0x64edec
lea eax, [ebp - 0x28]
push eax
call fcn.00402f60
add esp, 0xc
push 0x64f8bc
push str._tmp_dashinit
lea ecx, [ebp - 0x28]
call fcn.00402bf0
push 1
mov ecx, dword [ebp - 0x28]
push ecx
mov ecx, dword [esi + 0xb0]
call fcn.00425db0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00402550
mov ecx, esi
call fcn.00566f90
push str.Restart_type_s020s1_n
mov ecx, esi
call fcn.0054c540
lea eax, [esi + 0x31e0]
push eax
jmp 0x5752a1
test edi, edi
je 0x575e5b
cmp edi, 0x7563
jne 0x575736
mov eax, edi
jmp 0x576f49
cmp edi, 0x7581
jne 0x575643
mov eax, edi
jmp 0x576f49
cmp byte [eax + 0x178], 0
jne 0x575799
cmp dword [eax + 0x2ec], 0
jl 0x575799
jg 0x575766
cmp dword [eax + 0x2e8], 0
jbe 0x575799
mov ebx, 0x100
test dword [eax + 0x14c], ebx
je 0x57579e
mov byte [eax + 0x178], 1
mov ecx, esi
call fcn.00566f90
push str.Restart_type_s021s2_n
mov ecx, esi
call fcn.0054c540
lea eax, [esi + 0x31e0]
push eax
jmp 0x5752a1
mov ebx, 0x100
cmp byte [eax + 0x19a], 0
je 0x5757de
cmp byte [eax + 0x199], 0
jne 0x5757de
test dword [eax + 0x14c], ebx
je 0x5757de
mov byte [eax + 0x199], 1
mov ecx, esi
call fcn.00566f90
push str.Restart_type_s021s3_n
mov ecx, esi
call fcn.0054c540
lea eax, [esi + 0x31e0]
push eax
jmp 0x5752a1
cmp dword [eax + 0x310], 0
jne 0x5759b7
test dword [eax + 0x14c], ebx
je 0x5759b7
test edi, edi
je 0x5759b7
mov eax, dword [eax]
push str.youtube.com
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
jne 0x575831
mov edx, dword [esi + 0xb0]
mov eax, dword [edx]
push str.googlevideo.com
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
je 0x5759b7
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 8]
push str.sourceyt_otf
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
jne 0x57586b
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx + 8]
push str._sourceyt_otf
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
je 0x5759b7
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 8]
push str.otf1
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
jne 0x5758a5
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 8]
push str._otf1
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
je 0x5759b7
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx + 8]
push str.sq
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
jne 0x5759b7
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 8]
push str._sq
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
jne 0x5759b7
mov ecx, esi
call fcn.00566f90
push str.Restart_type_s020y_n
mov ecx, esi
call fcn.0054c540
mov eax, dword [esi + 0xb0]
mov dword [eax + 0x310], 0x200
mov ecx, dword [esi + 0xb0]
mov byte [ecx + 0x314], 1
mov eax, dword [esi + 0x31e8]
test eax, eax
je 0x575933
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x575933
push eax
mov ecx, dword [esi + 0xb0]
call fcn.005b29a0
lea ecx, [ebp - 0x28]
call fcn.004024e0
mov byte [ebp - 4], 3
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 8]
push eax
push str._ssq0
lea ecx, [ebp - 0x28]
push ecx
call fcn.00402f60
add esp, 0xc
push 0
mov edx, dword [ebp - 0x28]
push edx
mov ecx, dword [esi + 0xb0]
call fcn.00425db0
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov ebx, eax
mov dword [ebp - 0x24], ebx
test ebx, ebx
je 0x575997
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00402550
mov eax, ebx
jmp 0x576f49
mov ecx, dword [ebp + 8]
push ecx
mov ecx, esi
call fcn.00574ef0
mov esi, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00402550
mov eax, esi
jmp 0x576f49
cmp edi, 0x7566
jne 0x575b33
mov edx, dword [esi + 0xb0]
mov eax, dword [edx]
push str..dailymotion.com
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
jne 0x5759fb
mov eax, dword [esi + 0xb0]
mov eax, dword [eax]
push str..dmcdn.net
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
je 0x575b33
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx + 8]
test eax, eax
je 0x575b33
test dword [ecx + 0x14c], ebx
je 0x575b33
push 0x2e
push eax
call fcn.005fad90
add esp, 8
test eax, eax
je 0x575b33
push 0x657aa0
push eax
call fcn.005fa111
add esp, 8
test eax, eax
jne 0x575b33
lea ecx, [ebp - 0x30]
call fcn.004024e0
mov byte [ebp - 4], 4
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 8]
push edx
push 0x64edec
lea eax, [ebp - 0x30]
push eax
call fcn.00402f60
push 0x2e
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.005fad90
add esp, 0x14
test eax, eax
je 0x575b27
mov byte [eax], 0
lea ecx, [ebp - 0x28]
call fcn.004024e0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x30]
push edx
push str._s.mnft
lea eax, [ebp - 0x28]
push eax
call fcn.00402f60
add esp, 0xc
push 0
mov ecx, dword [ebp - 0x28]
push ecx
mov ecx, dword [esi + 0xb0]
call fcn.00425db0
mov ecx, esi
call fcn.00566f90
push str.Restart_type_12_n
mov ecx, esi
call fcn.0054c540
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov ebx, eax
mov dword [ebp - 0x24], ebx
test ebx, ebx
je 0x575afb
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00402550
mov eax, ebx
jmp 0x576f49
mov ecx, dword [ebp + 8]
push ecx
mov ecx, esi
call fcn.00574ef0
mov esi, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00402550
mov eax, esi
jmp 0x576f49
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00402550
cmp dword [esi + 0x54], 0
jg 0x575bb1
jl 0x575b41
cmp dword [esi + 0x50], 0
ja 0x575bb1
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0x364]
lea ebx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x575b50
sub eax, ebx
je 0x575bb1
cmp byte [edx + 0x335], cl
jne 0x575bb1
cmp edi, 0x7565
je 0x575b8b
cmp edi, 0x7566
je 0x575b8b
cmp edi, 0x7542
je 0x575b8b
cmp edi, 0x756e
je 0x575b8b
cmp edi, 0x755e
jne 0x575bb1
mov byte [edx + 0x335], 1
mov ecx, esi
call fcn.00566f90
push str.Restart__type_18_n
mov ecx, esi
call fcn.0054c540
lea eax, [esi + 0x31e0]
push eax
jmp 0x5752a1
lea ecx, [ebp - 0x34]
call fcn.004024e0
mov byte [ebp - 4], 6
push 0
lea edx, [ebp - 0x34]
push edx
mov ecx, dword [esi + 0xb0]
call fcn.0057a620
mov eax, dword [ebp - 0x34]
push eax
call fcn.0049ef90
add esp, 4
cmp edi, 0x7565
je 0x575bee
cmp edi, 0x7542
jne 0x575d13
mov ecx, dword [esi + 0xb0]
cmp byte [ecx + 0x317], 0
jne 0x575ca4
test al, al
je 0x575ca4
mov ecx, esi
call fcn.00566f90
push str.Restart_type_14_n
mov ecx, esi
call fcn.0054c540
cmp edi, 0x7542
jne 0x575c5a
mov eax, dword [esi + 0xb4]
test eax, eax
je 0x575c33
mov eax, dword [eax + 0x10]
jmp 0x575c3c
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 2
jne 0x575c5a
mov eax, dword [esi + 0xb0]
cmp dword [eax + 0x160], 0
jne 0x575c5a
mov dword [eax + 0x160], 1
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov ebx, eax
mov dword [ebp - 0x24], ebx
test ebx, ebx
jne 0x575fa3
mov ecx, dword [esi + 0xb0]
mov byte [ecx + 0x317], 1
mov edx, dword [ebp + 8]
push edx
mov ecx, esi
call fcn.00574ef0
mov esi, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.00402550
mov eax, esi
jmp 0x576f49
cmp edi, 0x7542
jne 0x575d13
cmp dword [ebp + 8], 0
jne 0x575d13
cmp dword [esi + 0x54], 0
jl 0x575d29
jg 0x575cc0
cmp dword [esi + 0x50], 0
jbe 0x575d13
cmp dword [ecx + 0x2f0], 0
je 0x575d13
mov eax, dword [esi + 0x31e8]
mov edx, dword [eax + 0xb8]
push edx
push 0
call fcn.005b2600
mov ecx, esi
call fcn.00566f90
push str.Restart_type_15_n
mov ecx, esi
call fcn.0054c540
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov ebx, eax
mov dword [ebp - 0x24], ebx
test ebx, ebx
jne 0x575fa3
push eax
jmp 0x575c88
cmp dword [esi + 0x54], 0
jg 0x575e17
jl 0x575d29
cmp dword [esi + 0x50], 0
ja 0x575e17
cmp byte [esi + 0x31ed], 0
jne 0x575e17
mov eax, dword [esi + 0xb0]
cmp byte [eax + 0x32e], 0
je 0x575e17
cmp byte [eax + 0x330], 0
jne 0x575e17
cmp edi, 0x7565
je 0x575d82
cmp edi, 0x7566
je 0x575d82
cmp edi, 0x7542
je 0x575d82
cmp edi, 0x756e
je 0x575d82
cmp edi, 0x755e
jne 0x575e17
mov byte [esi + 0x31ec], 1
mov byte [esi + 0x31ed], 1
cmp byte [eax + 0x32e], 0
je 0x575da0
mov byte [eax + 0x330], 1
mov ecx, esi
call fcn.00566f90
push str.Restart_type_16_n
mov ecx, esi
call fcn.0054c540
cmp edi, 0x7542
jne 0x575df1
mov eax, dword [esi + 0xb4]
test eax, eax
je 0x575dca
mov eax, dword [eax + 0x10]
jmp 0x575dd3
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 2
jne 0x575df1
mov eax, dword [esi + 0xb0]
cmp dword [eax + 0x160], 0
jne 0x575df1
mov dword [eax + 0x160], 1
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov ebx, eax
mov dword [ebp - 0x24], ebx
test ebx, ebx
jne 0x575fa3
mov ecx, dword [ebp + 8]
push ecx
jmp 0x575c88
mov ecx, dword [esi + 0x3200]
test ecx, ecx
je 0x575eb3
call fcn.0058d910
test al, al
jne 0x575ea0
mov eax, dword [esi + 0xb0]
cmp byte [eax + 0x32f], 0
je 0x575ea0
cmp byte [eax + 0x330], 0
jne 0x575ea0
cmp byte [eax + 0x331], 0
jne 0x575ea0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.00402550
cmp dword [esi + 0x3200], 0
je 0x57653f
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0xbc]
test eax, eax
jne 0x575e88
test edi, edi
je 0x57653f
test eax, eax
je 0x576002
push str.text_html
push eax
call fcn.005fa111
add esp, 8
test eax, eax
sete bl
jmp 0x576004
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.00402550
mov eax, edi
jmp 0x576f49
mov eax, dword [esi + 0x3208]
test eax, eax
jne 0x575ec2
mov eax, 0x64f8bc
push eax
lea ecx, [ebp - 0x28]
call fcn.004030e0
mov byte [ebp - 4], 7
push 0x64f8bc
mov ecx, dword [esi + 0xb0]
call fcn.0044e1c0
mov eax, dword [esi + 0x31e8]
test eax, eax
je 0x575ef9
push 0x64f8bc
lea ecx, [eax + 0x184]
call fcn.00402fc0
mov ecx, esi
call fcn.0056a340
mov edi, dword [esi + 0x31e8]
test edi, edi
je 0x575fe2
cmp byte [edi + 0x252], 0
jne 0x575fe2
mov eax, dword [esi + 0x3208]
test eax, eax
je 0x575fe2
mov ecx, eax
lea ebx, [ecx + 1]
mov edi, edi
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x575f30
sub ecx, ebx
je 0x575fe2
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x575f42
sub eax, edx
mov edx, eax
mov eax, dword [ebp - 0x28]
lea ebx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x575f53
sub eax, ebx
cmp edx, eax
je 0x575fe2
mov byte [edi + 0x252], 1
mov ecx, esi
call fcn.00566f90
push str.Restart_type_23_n
mov ecx, esi
call fcn.0054c540
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov eax, dword [edx + 0x18]
call eax
mov ebx, eax
mov dword [ebp - 0x24], ebx
test ebx, ebx
je 0x575fb6
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.00402550
mov eax, ebx
jmp 0x576f49
mov ecx, dword [ebp + 8]
push ecx
mov ecx, esi
call fcn.00574ef0
mov esi, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.00402550
mov eax, esi
jmp 0x576f49
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.00402550
mov eax, dword [ebp - 0x24]
jmp 0x576f49
xor bl, bl
mov ecx, dword [esi + 0x3200]
call fcn.0058d910
test al, al
jne 0x57653f
mov eax, dword [esi + 0xb0]
cmp byte [eax + 0x32f], 0
je 0x57653f
cmp byte [eax + 0x330], 0
jne 0x57653f
cmp byte [eax + 0x331], 0
jne 0x57653f
test bl, bl
jne 0x576050
test edi, edi
je 0x57653f
lea ecx, [ebp - 0x4c]
call fcn.004024e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x48]
call fcn.004024e0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x44]
call fcn.004024e0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x30]
call fcn.004024e0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x34]
call fcn.004024e0
mov byte [ebp - 4], 0xc
xor edi, edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], edi
xor eax, eax
mov word [ebp - 0x1c], ax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x4c]
push edx
mov ecx, dword [esi + 0x3200]
call fcn.0058dad0
test al, al
je 0x5764f7
mov eax, dword [esi + 0xb0]
mov byte [eax + 0x330], 1
mov ecx, dword [esi + 0xb0]
mov byte [ecx + 0x32e], 1
mov edx, dword [esi + 0xb0]
mov byte [edx + 0x331], 1
mov ecx, dword [esi + 0x3200]
call fcn.0058dac0
mov eax, dword [esi + 0xb0]
mov ecx, dword [ebp - 0x54]
mov dword [eax + 0x24], ecx
mov eax, dword [esi + 0xb0]
mov edx, dword [ebp - 0x3c]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [esi + 0xb0]
call fcn.0044e240
mov ebx, eax
cmp ebx, edi
je 0x57617f
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x20]
call fcn.004011f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x34]
call fcn.00402550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x30]
call fcn.00402550
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x44]
call fcn.00402550
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x48]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4c]
call fcn.00402550
mov eax, ebx
jmp 0x576f49
mov ecx, dword [ebp - 0x48]
push ecx
mov ecx, dword [esi + 0xb0]
call fcn.0044e2b0
mov ebx, eax
cmp ebx, edi
jne 0x576130
push edi
mov edx, dword [ebp - 0x44]
push edx
mov ecx, dword [esi + 0xb0]
call fcn.00425db0
mov ebx, eax
cmp ebx, edi
jne 0x576130
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [esi + 0xb0]
call fcn.0044e1c0
push 0x64f8bc
mov ecx, dword [esi + 0xb0]
add ecx, 0xc4
call fcn.00402fc0
mov ecx, dword [esi + 0xb0]
mov byte [ecx + 0x31d], 0
push 0x64f8bc
mov ecx, dword [esi + 0xb0]
call fcn.0044e140
mov eax, dword [esi + 0x31e8]
cmp eax, edi
je 0x576230
mov eax, dword [eax + 0xb8]
cmp eax, edi
je 0x576230
mov ecx, dword [esi + 0xb0]
cmp dword [ecx + 0x460], edi
jne 0x576214
push eax
call fcn.005b24a0
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0x460]
cmp eax, edi
je 0x576230
push str.Referer
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ebx, dword [ebp - 0x20]
cmp ebx, edi
mov eax, ebx
jne 0x57623c
lea eax, [ebp - 0x1c]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x576240
sub eax, edx
sar eax, 1
je 0x5762b1
cmp ebx, edi
mov eax, ebx
jne 0x57625a
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [esi + 0xb0]
call fcn.005b1480
mov eax, dword [esi + 0x31e8]
cmp eax, edi
je 0x5762b1
mov eax, dword [eax + 0xb8]
cmp eax, edi
je 0x576286
push eax
mov ecx, dword [esi + 0xb0]
call fcn.005b2970
mov eax, dword [esi + 0x31e8]
mov ecx, dword [eax + 0x14]
cmp ecx, edi
je 0x5762b1
mov eax, dword [eax + 0xb8]
push eax
push 0x13c9
push 0x111
mov ecx, dword [ecx]
push ecx
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
call ebx
jmp 0x5762b7
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esi + 0xb0]
mov byte [edx + 0x196], 1
push 0x64f8bc
mov ecx, dword [esi + 0xb0]
add ecx, 0x180
call fcn.00402fc0
mov eax, dword [esi + 0xb0]
mov byte [eax + 0x17c], 0
mov ecx, dword [esi + 0xb0]
mov byte [ecx + 0x323], 0
mov byte [esi + 0xc8], 0
mov edx, dword [esi + 0xb0]
push edx
call fcn.00501aa0
add esp, 4
mov ecx, esi
call fcn.00567260
cmp dword [esi + 0xac], edi
jne 0x5763a1
mov eax, dword [esi + 0xa0]
mov eax, dword [eax]
cmp dword [eax], edi
je 0x576339
push edi
push 0x1478
push 0x111
mov ecx, dword [eax]
push ecx
call ebx
mov eax, dword [esi + 0x31e8]
cmp eax, edi
je 0x5763a1
mov eax, dword [eax + 0xb8]
cmp eax, edi
je 0x5763a1
push edi
push edi
push eax
mov ecx, dword [esi + 0xb0]
call fcn.005b4d40
mov eax, dword [esi + 0x31e8]
mov ecx, dword [eax + 0x14]
cmp ecx, edi
je 0x57637e
mov edx, dword [eax + 0xb8]
push edx
push 0x1395
push 0x111
mov eax, dword [ecx]
push eax
call ebx
mov eax, dword [esi + 0x31e8]
mov ecx, dword [eax + 0x18]
cmp ecx, edi
je 0x5763a1
mov edx, dword [eax + 0xb8]
push edx
push 0x1395
push 0x111
mov eax, dword [ecx]
push eax
call ebx
cmp dword [esi + 0x31d8], edi
je 0x5763d5
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x31d8]
push eax
call fcn.005cfa9b
add esp, 4
mov dword [ebp - 4], 0xd
jmp 0x5763d5
mov dword [esi + 0x31d8], 0
mov ecx, dword [esi + 0xb0]
call fcn.005aebb0
mov ecx, esi
call fcn.00566f90
push str.Restart_type_17_n
mov ecx, esi
call fcn.0054c540
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov edx, dword [edx + 0x18]
call edx
mov edi, eax
test edi, edi
jne 0x5764a8
mov eax, dword [ebp + 8]
push eax
mov ecx, esi
call fcn.00574ef0
mov edi, eax
test edi, edi
jne 0x5764a8
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx + 0xbc]
test eax, eax
je 0x5764a8
push str.text_html
push eax
call fcn.005fa111
add esp, 8
test eax, eax
je 0x5764a8
mov eax, dword [esi + 0x31e8]
test eax, eax
je 0x5764a8
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x5764a8
mov ecx, dword [esi + 0xb0]
cmp dword [ecx + 0x460], edi
jne 0x576476
push eax
call fcn.005b24a0
mov esi, dword [esi + 0xb0]
cmp dword [esi + 0x460], 0
je 0x5764a8
mov dword [ebp - 0x28], 1
push 4
lea edx, [ebp - 0x28]
push edx
push 4
push 0
push str.noSyntRef
mov eax, dword [esi + 0x460]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x20]
call fcn.004011f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x34]
call fcn.00402550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x30]
call fcn.00402550
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x44]
call fcn.00402550
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x48]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4c]
call fcn.00402550
mov eax, edi
jmp 0x576f49
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x20]
call fcn.004011f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x34]
call fcn.00402550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x30]
call fcn.00402550
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x44]
call fcn.00402550
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x48]
call fcn.00402550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4c]
call fcn.00402550
mov edx, dword [esi + 0x323c]
cmp edx, 0xc8
jne 0x576567
mov ecx, dword [esi + 0x48]
or ecx, dword [esi + 0x4c]
jne 0x576567
mov eax, dword [esi + 0x31f8]
mov dword [esi + 0x48], eax
mov ecx, dword [esi + 0x31fc]
mov dword [esi + 0x4c], ecx
cmp edx, 0xce
jne 0x57665f
mov eax, dword [esi + 0x48]
or eax, dword [esi + 0x4c]
jne 0x5765ad
cmp dword [esi + 0x54], eax
jg 0x5765ad
jl 0x576587
cmp dword [esi + 0x50], eax
ja 0x5765ad
mov eax, dword [esi + 0x31f8]
mov ecx, dword [esi + 0x31fc]
mov edi, eax
or edi, ecx
je 0x5765ad
mov edi, dword [esi + 0x3260]
or edi, dword [esi + 0x3264]
jne 0x5765ad
mov dword [esi + 0x48], eax
mov dword [esi + 0x4c], ecx
cmp edx, 0xce
jne 0x57665f
mov ecx, dword [esi + 0x48]
or ecx, dword [esi + 0x4c]
jne 0x57665f
mov eax, dword [esi + 0x50]
mov edi, dword [esi + 0x54]
test edi, edi
jg 0x57664d
jl 0x5765d9
test eax, eax
ja 0x576609
mov ebx, dword [esi + 0x3260]
mov ecx, dword [esi + 0x3264]
mov edx, ebx
or edx, ecx
je 0x576609
mov edx, dword [esi + 0x31f8]
mov eax, dword [esi + 0x31fc]
cmp ecx, eax
jg 0x576609
jl 0x576601
cmp ebx, edx
jae 0x576609
mov dword [esi + 0x48], edx
mov dword [esi + 0x4c], eax
jmp 0x57665f
test edi, edi
jg 0x57664d
jl 0x576615
cmp dword [esi + 0x50], 0
ja 0x57664d
mov edx, dword [esi + 0x31f8]
mov ebx, dword [esi + 0x31fc]
mov eax, edx
or eax, ebx
je 0x57664d
mov eax, edx
add eax, 1
mov ecx, ebx
adc ecx, 0
mov edi, dword [esi + 0x3260]
cmp edi, eax
jne 0x57664d
mov eax, dword [esi + 0x3264]
cmp eax, ecx
jne 0x57664d
mov dword [esi + 0x48], edx
mov dword [esi + 0x4c], ebx
jmp 0x57665f
mov ecx, dword [esi + 0x3260]
mov dword [esi + 0x48], ecx
mov edx, dword [esi + 0x3264]
mov dword [esi + 0x4c], edx
mov edx, dword [esi + 0x323c]
cmp edx, 0xc8
je 0x576675
cmp edx, 0xce
jne 0x576699
mov eax, dword [esi + 0x48]
or eax, dword [esi + 0x4c]
jne 0x576699
mov ecx, dword [esi + 0x3278]
mov eax, dword [esi + 0x327c]
test eax, eax
jl 0x576699
jg 0x576693
test ecx, ecx
jbe 0x576699
mov dword [esi + 0x48], ecx
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0xb0]
xor edi, edi
cmp dword [eax + 0x310], edi
je 0x5766e7
mov eax, dword [esi + 0x31e8]
cmp eax, edi
je 0x5766e7
cmp dword [eax + 0x40], edi
je 0x5766e7
cmp edx, 0xc8
jne 0x5766e1
mov ecx, dword [esi + 0x31f8]
mov eax, dword [esi + 0x31fc]
cmp eax, edi
jl 0x5766e1
jg 0x5766d6
cmp ecx, edi
jbe 0x5766e1
sub ecx, 1
sbb eax, edi
mov dword [esi + 0x60], ecx
mov dword [esi + 0x64], eax
mov dword [esi + 0x48], edi
mov dword [esi + 0x4c], edi
mov edi, dword [esi + 0x48]
mov eax, dword [esi + 0x4c]
mov ecx, edi
or ecx, eax
je 0x5767c9
mov eax, dword [esi + 0x31e8]
mov ecx, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov ebx, ecx
or ebx, edx
je 0x5767c9
cmp ecx, edi
jne 0x576720
cmp edx, dword [esi + 0x4c]
je 0x5767c9
mov edi, dword [eax + 0xc8]
or edi, dword [eax + 0xcc]
je 0x5767c9
cmp byte [esi + 0x3244], 0
jne 0x576d2d
cmp dword [esi + 0x323c], 0xce
jne 0x57677f
mov edi, dword [esi + 0x3260]
mov ebx, dword [esi + 0x3264]
sub ecx, 1
sbb edx, 0
cmp edi, ecx
jne 0x57677f
cmp ebx, edx
jne 0x57677f
mov edx, dword [esi + 0x3268]
or edx, dword [esi + 0x326c]
jne 0x57677f
mov dword [esi + 0x3268], edi
mov dword [esi + 0x326c], ebx
mov edi, dword [esi + 0x3268]
mov ecx, dword [esi + 0x326c]
mov edx, edi
or edx, ecx
je 0x576a65
mov ebx, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov dword [ebp - 0x3c], edx
mov ecx, ebx
sub ecx, 1
sbb edx, 0
cmp edi, ecx
jne 0x576a65
cmp dword [esi + 0x326c], edx
jne 0x576a65
mov dword [esi + 0x48], ebx
mov eax, dword [ebp - 0x3c]
mov dword [esi + 0x4c], eax
cmp byte [esi + 0x3244], 0
jne 0x576d2d
mov eax, dword [esi + 0xb0]
mov edi, dword [eax + 0xbc]
xor ebx, ebx
cmp edi, ebx
je 0x576d04
mov eax, dword [eax + 0x108]
mov dword [ebp - 0x3c], eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5767f8
sub eax, edx
je 0x576d04
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x576810
sub eax, edx
je 0x576d04
mov dword [ebp - 0x58], 1
push 0x3b
mov edx, dword [ebp - 0x3c]
push edx
call fcn.005f9b50
add esp, 8
test eax, eax
je 0x576889
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 0xbc]
push 0x3b
push eax
call fcn.005f9b50
add esp, 8
test eax, eax
jne 0x576889
mov edi, dword [esi + 0xb0]
mov ecx, dword [edi + 0xbc]
mov eax, ecx
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x576867
sub eax, dword [ebp - 0x3c]
mov edi, dword [edi + 0x108]
push eax
push ecx
push edi
call fcn.005ffd4c
add esp, 0xc
test eax, eax
jne 0x576889
mov dword [ebp - 0x58], ebx
mov edx, dword [esi + 0xb0]
mov edi, dword [edx + 0x108]
mov eax, edi
lea ecx, [eax + 1]
mov dword [ebp - 0x3c], ecx
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5768a0
sub eax, dword [ebp - 0x3c]
push eax
mov edx, dword [edx + 0xbc]
push edx
push edi
call fcn.005ffd4c
add esp, 0xc
test eax, eax
je 0x576d04
cmp dword [ebp - 0x58], ebx
je 0x576d04
mov byte [ebp - 0x29], 1
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 0x108]
push 9
push str.text_html
push eax
call fcn.005fd020
add esp, 0xc
test eax, eax
jne 0x576914
push 9
push str.text_html
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005fd020
add esp, 0xc
test eax, eax
je 0x576914
mov byte [ebp - 0x29], 0
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 0x108]
push 0xa
push str.text_plain
push eax
call fcn.005fd020
add esp, 0xc
test eax, eax
jne 0x576958
push 9
push str.text_html
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005fd020
add esp, 0xc
test eax, eax
je 0x576958
mov byte [ebp - 0x29], 0
mov eax, dword [esi + 0xb0]
mov eax, dword [eax + 0x108]
push 0x15
push str.application_x_mpegURL
push eax
call fcn.005ffd4c
add esp, 0xc
test eax, eax
jne 0x5769d0
push 0x1d
push str.application_vnd.apple.mpegurl
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005ffd4c
add esp, 0xc
test eax, eax
je 0x5769b6
push str.video_MP2T
mov eax, dword [esi + 0xb0]
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005fa111
add esp, 8
test eax, eax
jne 0x5769d0
mov byte [ebp - 0x29], 0
push 0x64f8bc
mov ecx, dword [esi + 0xb0]
add ecx, 0x108
call fcn.00402fc0
push 9
push str.text_html
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0xbc]
push eax
call fcn.005fd020
add esp, 0xc
test eax, eax
je 0x576c67
mov ecx, dword [esi + 0xb0]
mov eax, dword [ecx]
push 0x6545c8
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
jne 0x576a2c
mov edx, dword [esi + 0xb0]
mov eax, dword [edx]
push 0x6545b4
push eax
call fcn.005f9c10
add esp, 8
test eax, eax
je 0x576c67
mov eax, dword [esi + 0xb0]
mov edi, dword [eax + 8]
cmp edi, ebx
je 0x576c67
mov ecx, 0xe
mov eax, str.videoplayback_
cmp ecx, 4
jb 0x576bd4
mov edx, dword [edi]
cmp edx, dword [eax]
jne 0x576c67
sub ecx, 4
add eax, 4
add edi, 4
jmp 0x576a47
cmp dword [esi + 0x323c], 0xce
jne 0x576abe
mov edi, dword [esi + 0x3280]
mov ecx, dword [esi + 0x3284]
mov edx, edi
or edx, ecx
je 0x576abe
mov ebx, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov dword [ebp - 0x3c], edx
mov ecx, ebx
sub ecx, edi
sbb edx, dword [esi + 0x3284]
mov edi, dword [esi + 0x31f8]
cmp edi, ecx
jne 0x576abe
mov ecx, dword [esi + 0x31fc]
cmp ecx, edx
jne 0x576abe
mov dword [esi + 0x48], ebx
mov edx, dword [ebp - 0x3c]
mov dword [esi + 0x4c], edx
jmp 0x5767c9
mov edx, dword [esi + 0xb0]
cmp dword [eax + 0x13c], 0
je 0x576aeb
cmp byte [edx + 0x333], 0
jne 0x576adf
cmp byte [edx + 0x172], 0
je 0x576aeb
mov byte [esi + 0x3244], 1
jmp 0x5767c9
mov bl, byte [esi + 0x3251]
test bl, bl
je 0x576b29
mov ecx, dword [eax + 0xd0]
mov eax, dword [eax + 0xd4]
mov edi, dword [esi + 0x3260]
cmp edi, ecx
jne 0x576b29
mov edi, dword [esi + 0x3264]
cmp edi, eax
jne 0x576b29
cmp dword [esi + 0x323c], 0xce
jne 0x576b29
mov dword [esi + 0x48], ecx
jmp 0x5767c6
mov ecx, dword [esi + 0x50]
mov eax, dword [esi + 0x54]
test eax, eax
jg 0x576b86
jl 0x576b39
test ecx, ecx
ja 0x576b7c
cmp byte [esi + 0x31ed], 0
jne 0x576b7c
cmp byte [edx + 0x32e], 0
je 0x576b7c
cmp byte [edx + 0x330], 0
jne 0x576b7c
mov byte [esi + 0x31ec], 1
mov byte [esi + 0x31ed], 1
cmp byte [edx + 0x32e], 0
je 0x576b72
mov byte [edx + 0x330], 1
push str.Restart_type_21a_n
jmp 0x5754bd
test eax, eax
jl 0x576bc3
jg 0x576b86
test ecx, ecx
jbe 0x576bc3
cmp byte [esi + 0x31f4], 0
jne 0x576bc3
test bl, bl
jne 0x576bc3
mov byte [esi + 0x3251], 1
mov dword [edx + 0x2f0], 1
mov eax, dword [esi + 0xb0]
cmp byte [eax + 0x32e], bl
je 0x576bb9
mov byte [eax + 0x330], 1
push str.Restart_type_21b_n
jmp 0x5754bd
mov ecx, esi
call fcn.00566f90
mov eax, 0x757a
jmp 0x576f49
mov cl, byte [eax]
cmp cl, byte [edi]
jne 0x576c67
mov dl, byte [eax + 1]
cmp dl, byte [edi + 1]
jne 0x576c67
push 6
push str.video_
mov eax, dword [esi + 0xb0]
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005fd020
add esp, 0xc
test eax, eax
jne 0x576c48
push 6
push str.audio_
mov edx, dword [esi + 0xb0]
mov eax, dword [edx + 0xbc]
push eax
call fcn.005fd020
add esp, 0xc
test eax, eax
jne 0x576c48
push str.application_octet_stream
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005fa111
add esp, 8
test eax, eax
jne 0x576c67
mov byte [ebp - 0x29], 0
push 0x64f8bc
mov ecx, dword [esi + 0xb0]
add ecx, 0x108
call fcn.00402fc0
jmp 0x576d04
cmp byte [ebp - 0x29], 0
je 0x576d04
mov ecx, dword [esi + 0x31e8]
cmp dword [ecx + 0x13c], ebx
je 0x576cae
mov eax, dword [esi + 0xb0]
cmp byte [eax + 0x333], 0
jne 0x576c97
cmp byte [eax + 0x172], 0
je 0x576cae
mov eax, dword [ecx + 0xc8]
or eax, dword [ecx + 0xcc]
je 0x576d04
mov byte [esi + 0x3244], 1
jmp 0x576d04
push 9
push str.text_html
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005fd020
add esp, 0xc
test eax, eax
je 0x576bc3
mov eax, dword [esi + 0x48]
mov edx, dword [esi + 0x4c]
mov ecx, eax
or ecx, edx
je 0x576bc3
mov ecx, dword [esi + 0xb0]
cmp eax, dword [ecx + 0x128]
jne 0x576bc3
cmp edx, dword [ecx + 0x12c]
jne 0x576bc3
mov byte [ebp - 0x29], 0
cmp byte [esi + 0x3244], 0
jne 0x576d2f
mov edx, dword [esi + 0x320c]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x576d18
sub eax, edi
je 0x576d2f
push edx
mov ecx, esi
call fcn.00565cd0
jmp 0x576d2f
xor ebx, ebx
push 0x64f8bc
lea ecx, [esi + 0x320c]
call fcn.00402fc0
cmp byte [esi + 0x3244], 0
je 0x576e9e
mov byte [esi + 0x3244], 0
lea ecx, [esi + 0x10]
call fcn.00554f50
mov eax, dword [esi + 0x31e8]
cmp dword [eax + 0xb0], ebx
setne byte [ebp - 0x35]
lea ecx, [eax + 0x28]
call fcn.005464d0
mov eax, dword [esi + 0x31e8]
mov dword [eax + 0xc8], ebx
mov dword [eax + 0xcc], ebx
mov eax, dword [esi + 0x31e8]
mov dword [eax + 0xd0], ebx
mov dword [eax + 0xd4], ebx
mov eax, dword [esi + 0x31e8]
mov dword [eax + 0x1c0], ebx
mov dword [eax + 0x1c4], ebx
mov dword [esi + 0x3240], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x31f8], ebx
mov dword [esi + 0x31fc], ebx
mov dword [esi + 0x3258], ebx
mov dword [esi + 0x325c], ebx
mov dword [esi + 0x3260], ebx
mov dword [esi + 0x3264], ebx
mov dword [esi + 0x3268], ebx
mov dword [esi + 0x326c], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x3278], ebx
mov dword [esi + 0x327c], ebx
mov eax, dword [esi + 0x31e8]
cmp eax, ebx
je 0x576e26
mov byte [eax + 0x871], 0
push str.Restart_type_008_n
mov ecx, esi
call fcn.0054c540
mov ecx, esi
call fcn.00566f90
mov edx, dword [esi]
lea eax, [esi + 0x31e0]
push eax
mov ecx, esi
mov edx, dword [edx + 0x18]
call edx
mov dword [ebp - 0x24], eax
cmp eax, ebx
jne 0x576f49
mov eax, dword [ebp + 8]
push eax
mov ecx, esi
call fcn.00574ef0
mov edi, eax
mov dword [ebp - 0x24], edi
cmp edi, ebx
jne 0x5752ec
cmp byte [ebp - 0x35], 0
je 0x576e90
mov ecx, dword [esi + 0xb0]
mov edx, dword [ecx + 0x30]
push edx
push esi
mov ecx, dword [esi + 0x31e8]
add ecx, 0x28
call fcn.00546660
mov edi, eax
mov dword [ebp - 0x24], edi
mov ecx, esi
call fcn.0054c7f0
mov eax, edi
jmp 0x576f49
mov dword [esi + 0x8c], 6
mov dword [esi + 0xa8], ebx
push 1
mov eax, dword [0x7103e0]
push eax
mov ecx, esi
call fcn.0054cc90
cmp dword [esi + 0xac], ebx
jne 0x576eeb
mov eax, dword [esi + 0x31e8]
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x576eeb
mov edx, dword [eax + 0xb8]
push edx
mov eax, dword [ebp]
push eax
push 0x111
mov ecx, dword [ecx]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp byte [ebp - 0x35], 0
je 0x576f28
mov esi, dword [esi + 0x184]
mov eax, 4
cmp dword [esi + 0x154], eax
jne 0x576f28
cmp byte [esi + 0x15e], 0
je 0x576f28
mov dword [ebp - 0x3c], eax
push eax
lea edx, [ebp - 0x3c]
push edx
push eax
push ebx
push str.SocksType
mov eax, dword [0x70f604]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor eax, eax
jmp 0x576f49
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005f85e7
mov esp, ebp
pop ebp
ret 4