Function at 0x10358c20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x104151f4
mov eax, dword fs:[0]
push eax
sub esp, 0x534
mov eax, dword [0x104c5878]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x414], 0
mov dword [ebp - 4], 0
mov ecx, dword [ebx + 0x140]
mov dword [ebp - 0x530], ecx
mov eax, dword [ebx + 0x144]
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x53c], 0xffffffff
mov dword [ebp - 0x538], str.CONNECT
mov dword [ebp - 0x534], 9
mov dword [ebp - 0x52c], eax
mov byte [ebp - 4], 0
mov dword [ebp - 0x414], 1
mov byte [ebp - 4], 2
lea edx, [ebp - 0x4c4]
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4c8], 0xffffffff
mov dword [ebp - 0x418], edx
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0x4bc], str.CONNECT
mov dword [ebp - 0x4b8], 9
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x4b0], eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x4ac], str._HTTP_1.1_r_nHost:
mov dword [ebp - 0x4a8], 0x12
mov byte [ebp - 4], 2
mov dword [ebp - 0x414], 3
mov byte [ebp - 4], 6
lea eax, [ebp - 0x49c]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x498], eax
lea eax, [ebp - 0x494]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 0xffffffff
mov dword [ebp - 0x480], eax
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x478], eax
mov byte [ebp - 4], 0xa
mov eax, dword [ebx + 0x140]
mov dword [ebp - 0x474], eax
mov eax, dword [ebx + 0x144]
mov dword [ebp - 0x470], eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x414], 7
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x464]
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0xffffffff
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x45c]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x458], eax
lea eax, [ebp - 0x454]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x440], eax
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x438], eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x430], eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x42c], 0x104763a4
mov dword [ebp - 0x428], 3
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x414], 0xf
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x51c]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x518], eax
lea eax, [ebp - 0x514]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x510], eax
lea eax, [ebp - 0x50c]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x508], eax
lea eax, [ebp - 0x504]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x524], 0
mov dword [ebp - 0x520], 0xffffffff
mov dword [ebp - 0x4f0], eax
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x4e8], eax
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x4e0], eax
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x4d8], eax
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x4d4], str.Proxy_Connection:_Keep_Alive_r_nConnection:_Keep_Alive_r_n_r_n
mov dword [ebp - 0x4d0], 0x39
mov byte [ebp - 4], 0x14
mov edi, dword [ebp - 0x4f8]
mov dword [ebp - 0x414], 0x1f
test edi, edi
je 0x10359076
lea eax, [edi - 1]
jmp 0x1035907a
xor eax, eax
xor edi, edi
push eax
push dword [ebp - 0x4fc]
lea eax, [ebp - 0x410]
push eax
call fcn.103ce0b0
mov esi, dword [ebp - 0x4f0]
add esp, 0xc
test esi, esi
je 0x1035909f
lea eax, [esi - 1]
jmp 0x103590a1
xor eax, eax
push eax
push dword [ebp - 0x4f4]
lea eax, [ebp + edi - 0x411]
test edi, edi
lea ecx, [ebp - 0x410]
cmovne ecx, eax
push ecx
call fcn.103ce0b0
add esp, 0xc
test esi, esi
je 0x103590cc
lea eax, [esi - 1]
jmp 0x103590ce
xor eax, eax
lea esi, [eax - 1]
add esi, edi
test edi, edi
mov edi, dword [ebp - 0x4e8]
cmove esi, eax
test edi, edi
je 0x103590e7
lea eax, [edi - 1]
jmp 0x103590e9
xor eax, eax
push eax
push dword [ebp - 0x4ec]
lea eax, [ebp - 0x410]
add eax, esi
push eax
call fcn.103ce0b0
add esp, 0xc
test edi, edi
je 0x10359108
dec esi
add esi, edi
mov edi, dword [ebp - 0x4e0]
test edi, edi
je 0x10359117
lea eax, [edi - 1]
jmp 0x10359119
xor eax, eax
push eax
push dword [ebp - 0x4e4]
lea eax, [ebp - 0x410]
add eax, esi
push eax
call fcn.103ce0b0
add esp, 0xc
test edi, edi
je 0x10359138
dec edi
jmp 0x1035913a
xor edi, edi
add esi, edi
mov edi, dword [ebp - 0x4d8]
test edi, edi
je 0x1035914b
lea eax, [edi - 1]
jmp 0x1035914d
xor eax, eax
push eax
push dword [ebp - 0x4dc]
lea eax, [ebp - 0x410]
add eax, esi
push eax
call fcn.103ce0b0
add esp, 0xc
test edi, edi
je 0x1035916c
dec esi
add esi, edi
mov edi, dword [ebp - 0x4d0]
test edi, edi
je 0x1035917b
lea eax, [edi - 1]
jmp 0x1035917d
xor eax, eax
push eax
push dword [ebp - 0x4d4]
lea eax, [ebp - 0x410]
add eax, esi
push eax
call fcn.103ce0b0
add esp, 0xc
test edi, edi
je 0x1035919c
dec edi
jmp 0x1035919e
xor edi, edi
add edi, esi
mov esi, 0x1f
mov dword [ebp - 0x414], esi
and esi, 0xffffffef
mov dword [ebp - 0x414], esi
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x524]
call fcn.10367720
mov dword [ebp - 0x524], 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x51c]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x51c]
call fcn.10367720
mov dword [ebp - 0x51c], 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x514]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x514]
call fcn.10367720
mov dword [ebp - 0x514], 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x50c]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x50c]
call fcn.10367720
mov dword [ebp - 0x50c], 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x504]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x504]
call fcn.10367720
and esi, 0xfffffff7
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x414], esi
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x46c]
call fcn.10367720
mov dword [ebp - 0x46c], 0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x464]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x464]
call fcn.10367720
mov dword [ebp - 0x464], 0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x45c]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x45c]
call fcn.10367720
mov dword [ebp - 0x45c], 0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x454]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x454]
call fcn.10367720
mov dword [ebp - 0x454], 0
and esi, 0xfffffffb
mov dword [ebp - 0x414], esi
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x4a4]
call fcn.10367720
mov dword [ebp - 0x4a4], 0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x49c]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x49c]
call fcn.10367720
mov dword [ebp - 0x49c], 0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x494]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x494]
call fcn.10367720
and esi, 0xfffffffd
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x414], esi
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x4cc]
call fcn.10367720
mov dword [ebp - 0x4cc], 0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x4c4]
mov dword [ebp - 0x41c], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x4c4]
call fcn.10367720
and esi, 0xfffffffe
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x414], esi
mov dword [ebp - 4], 0xffffffff
xor ecx, ecx
call fcn.10367720
push ecx
push edi
lea eax, [ebp - 0x410]
mov dword [ebp - 0x540], 0
push eax
lea ecx, [ebx + 0xd4]
call fcn.10369110
test al, al
je 0x1035945e
xor esi, esi
mov dword [ebp - 0x418], esi
nop
push ecx
lea eax, [ebp - 0x418]
push eax
mov eax, 0x400
lea ecx, [ebx + 0xd4]
sub eax, esi
push eax
lea eax, [ebp - 0x410]
add eax, esi
push eax
call fcn.10369060
test al, al
je 0x1035945e
mov eax, dword [ebp - 0x418]
test eax, eax
je 0x10359480
add esi, eax
cmp esi, 0xc
jle 0x10359456
cmp dword [ebp + esi - 0x414], 0xa0d0a0d
je 0x1035949e
cmp esi, 0x400
jb 0x10359410
cmp dword [ebx + 0xe8], 0
jne 0x10359480
mov eax, dword [ebx + 0x174]
test eax, eax
je 0x10359480
push dword [ebx + 0x17c]
push 0xb
push 0
call eax
add esp, 0xc
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.103b6385
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x408]
mov dword [ebp - 0x41c], 5
mov dword [ebp - 0x420], eax
lea ecx, [ebp - 0x420]
lea eax, [ebp - 0x418]
push eax
call fcn.1035da00
xor edx, edx
cmp edx, 4
jae 0x103594e9
mov cl, byte [ebp + edx - 0x410]
mov al, cl
sub al, 0x61
cmp al, 0x19
ja 0x103594e6
sub cl, 0x20
mov byte [ebp + edx - 0x410], cl
inc edx
jmp 0x103594c8
cmp dword [ebp - 0x410], 0x50545448
jne 0x10359516
mov eax, 0x51eb851f
imul dword [ebp - 0x418]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jne 0x10359516
mov al, 1
jmp 0x10359482
mov eax, dword [ebx + 0x174]
test eax, eax
je 0x10359480
push dword [ebx + 0x17c]
push 9
jmp 0x10359479