Function at 0x494ba0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Parse pe header
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x592af6
mov eax, dword fs:[0]
push eax
sub esp, 0x6e4
mov eax, dword [0x5fae30]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [ebp + 0x30]
mov dword [ebp - 0x6cc], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x6a8], ecx
mov ecx, dword [ebp + 0x24]
mov dword [ebp - 0x6c8], edx
mov edx, dword [ebp + 0x28]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x6c0], ecx
mov ecx, dword [ebp + 0x38]
mov dword [ebp - 0x6bc], edx
mov edx, dword [ebp + 0x3c]
xor ebx, ebx
mov dword [ebp - 0x6b4], esi
mov dword [ebp - 0x6d0], edi
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x690], edx
mov dword [ebp - 0x680], ebx
call fcn.00401cb7
mov ecx, eax
call fcn.00402324
test al, al
je 0x494c66
mov ecx, dword [ebp - 0x690]
push ebx
add ecx, 0x360
call fcn.00408d19
jmp 0x4978b1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp esi, eax
jne 0x494cce
push 0x30
push str.CLocalRelay::NewConnection___Inside_traffic_loop
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x94], 0xf
mov dword [ebp - 0x98], ebx
mov byte [ebp - 0xa8], bl
call fcn.00402a36
lea eax, [ebp - 0xa8]
push ebx
push eax
mov dword [ebp - 4], ebx
call fcn.00404449
mov ecx, eax
call fcn.00403bd4
cmp dword [ebp - 0x94], 0x10
jb 0x494cc7
mov ecx, dword [ebp - 0xa8]
push ecx
call fcn.0053ed60
add esp, 4
xor al, al
jmp 0x4978b3
mov eax, 7
xor edx, edx
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x15c], ebx
mov word [ebp - 0x16c], dx
mov dword [ebp - 0x1c8], eax
xor eax, eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x1cc], ebx
mov word [ebp - 0x1dc], ax
mov ecx, dword [ebp - 0x690]
push esi
mov byte [ebp - 4], 2
call fcn.00405f6f
lea ecx, [ebp - 0x31c]
call fcn.004019a6
lea ecx, [ebp - 0x4a4]
push esi
push ecx
mov byte [ebp - 4], 3
call fcn.0040323d
mov ecx, eax
call fcn.0040538a
push eax
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 4
call fcn.00402996
lea ecx, [ebp - 0x4a4]
call fcn.00403fee
mov eax, 7
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x190], eax
xor edx, edx
xor eax, eax
mov byte [ebp - 0x6c4], bl
mov dword [ebp - 0x1b0], ebx
mov word [ebp - 0x1c0], dx
mov dword [ebp - 0x194], ebx
mov word [ebp - 0x1a4], ax
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2c0]
push ecx
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 5
call fcn.0040566e
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x2dc]
push edx
lea ecx, [ebp - 0x1c0]
call fcn.0040566e
call fcn.00401cb7
mov ecx, eax
call fcn.00406672
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.00405097
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov byte [ebp - 4], 6
call fcn.00406d02
mov esi, eax
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 7
call fcn.00406d02
add esp, 0x18
mov byte [ebp - 4], 8
cmp dword [esi + 0x14], 8
mov ecx, dword [esi + 0x10]
jb 0x494e07
mov esi, dword [esi]
push ecx
mov ecx, dword [eax + 0x10]
push esi
push ecx
push ebx
mov ecx, eax
call fcn.00407f13
test eax, eax
mov esi, 8
sete byte [ebp - 0x67a]
cmp dword [ebp - 0x24], esi
jb 0x494e34
mov edx, dword [ebp - 0x38]
push edx
call fcn.0053ed60
add esp, 4
xor eax, eax
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x38], ax
cmp dword [ebp - 0x94], esi
jb 0x494e5b
mov ecx, dword [ebp - 0xa8]
push ecx
call fcn.0053ed60
add esp, 4
xor edx, edx
mov dword [ebp - 0x94], 7
mov dword [ebp - 0x98], ebx
mov word [ebp - 0xa8], dx
mov byte [ebp - 4], 5
cmp dword [ebp - 0xb0], esi
jb 0x494e8f
mov eax, dword [ebp - 0xc4]
push eax
call fcn.0053ed60
add esp, 4
cmp byte [ebp - 0x67a], bl
je 0x494ea8
push ebx
push 0x5b60bc
lea ecx, [ebp - 0x1a4]
call fcn.00403594
xor ecx, ecx
push 0x11
mov word [ebp - 0xa8], cx
push str.peruserprivileges
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x94], 7
mov dword [ebp - 0x98], ebx
call fcn.00403594
lea edx, [ebp - 0xa8]
push edx
mov byte [ebp - 4], 9
call fcn.00407554
add esp, 4
cmp eax, 1
sete byte [ebp - 0x67a]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x94], esi
jb 0x494f0b
mov eax, dword [ebp - 0xa8]
push eax
call fcn.0053ed60
add esp, 4
cmp byte [ebp - 0x67a], bl
je 0x494f1a
mov byte [ebp - 0x6c4], 1
mov eax, dword [ebp - 0x6c4]
lea ecx, [ebp - 0x1a4]
push ecx
mov ecx, dword [ebp - 0x690]
lea edx, [ebp - 0x1c0]
push edx
push eax
call fcn.00404101
mov dword [ebp - 0xcc], 0xf
mov dword [ebp - 0xd0], ebx
mov byte [ebp - 0xe0], bl
mov ecx, dword [edi + 4]
xor esi, esi
sub ecx, dword [edi]
mov byte [ebp - 4], 0xa
je 0x494f91
lea ecx, [ecx]
mov edx, dword [edi]
mov al, byte [esi + edx]
cmp al, bl
je 0x494f91
cmp al, 0xff
je 0x494f91
mov byte [ebp - 0x6a0], al
mov eax, dword [ebp - 0x6a0]
push eax
push 1
lea ecx, [ebp - 0xe0]
call fcn.00405ea2
mov ecx, dword [edi + 4]
sub ecx, dword [edi]
inc esi
cmp esi, ecx
jb 0x494f60
mov ecx, dword [ebp - 0x6d0]
mov eax, dword [ecx + 4]
mov edi, dword [ecx]
cmp edi, eax
je 0x494fba
mov esi, eax
sub esi, eax
push esi
push eax
push edi
call fcn.0053f450
mov edx, dword [ebp - 0x6d0]
add esp, 0xc
add esi, edi
mov dword [edx + 4], esi
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6b4]
push 1
push edx
lea eax, [ebp - 0xfc]
push eax
mov dword [ebp - 0x6f0], ecx
call fcn.0040323d
mov ecx, eax
call fcn.004064bf
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x54]
push edx
mov byte [ebp - 4], 0xb
call fcn.00406d02
add esp, 8
mov ecx, dword [eax + 0x10]
push 0xc
push 0x5b60e4
push ecx
push ebx
mov ecx, eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x680], 1
call fcn.00407f13
mov edi, 0x10
test eax, eax
je 0x495158
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x70]
push eax
call fcn.00406d02
add esp, 8
mov ecx, dword [eax + 0x10]
push 0xa
push 0x5b6100
push ecx
push ebx
mov ecx, eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x680], 3
call fcn.00407f13
test eax, eax
je 0x495158
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x188]
push eax
call fcn.00406d02
add esp, 8
mov ecx, dword [eax + 0x10]
push 0xb
push str.firefox.exe
push ecx
push ebx
mov ecx, eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x680], 7
call fcn.00407f13
test eax, eax
je 0x495158
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0xc4]
push eax
call fcn.00406d02
add esp, 8
mov ecx, 0xf
push 0xa
mov dword [ebp - 4], ecx
mov dword [ebp - 0x680], ecx
mov ecx, dword [eax + 0x10]
push str.safari.exe
push ecx
push ebx
mov ecx, eax
call fcn.00407f13
test eax, eax
je 0x495158
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0xa8]
push eax
call fcn.00406d02
add esp, 8
mov ecx, dword [eax + 0x10]
push 9
push str.opera.exe
push ecx
push ebx
mov ecx, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x680], 0x1f
call fcn.00407f13
test eax, eax
je 0x495158
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x38]
push eax
call fcn.00406d02
push str.webkit2webprocess.exe
push eax
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x680], 0x3f
call fcn.00408459
add esp, 0x10
mov byte [ebp - 0x679], bl
test al, al
je 0x49515f
mov byte [ebp - 0x679], 1
test byte [ebp - 0x680], 0x20
mov esi, 8
je 0x495195
and dword [ebp - 0x680], 0xffffffdf
cmp dword [ebp - 0x24], esi
jb 0x495185
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0053ed60
add esp, 4
xor edx, edx
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x38], dx
test byte [ebp - 0x680], 0x10
je 0x4951d5
and dword [ebp - 0x680], 0xffffffef
cmp dword [ebp - 0x94], esi
jb 0x4951bc
mov eax, dword [ebp - 0xa8]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x94], 7
mov dword [ebp - 0x98], ebx
mov word [ebp - 0xa8], cx
test byte [ebp - 0x680], 8
je 0x495215
and dword [ebp - 0x680], 0xfffffff7
cmp dword [ebp - 0xb0], esi
jb 0x4951fc
mov edx, dword [ebp - 0xc4]
push edx
call fcn.0053ed60
add esp, 4
xor eax, eax
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], ebx
mov word [ebp - 0xc4], ax
test byte [ebp - 0x680], 4
je 0x495255
and dword [ebp - 0x680], 0xfffffffb
cmp dword [ebp - 0x174], esi
jb 0x49523c
mov ecx, dword [ebp - 0x188]
push ecx
call fcn.0053ed60
add esp, 4
xor edx, edx
mov dword [ebp - 0x174], 7
mov dword [ebp - 0x178], ebx
mov word [ebp - 0x188], dx
test byte [ebp - 0x680], 2
je 0x495286
and dword [ebp - 0x680], 0xfffffffd
cmp dword [ebp - 0x5c], esi
jb 0x495276
mov eax, dword [ebp - 0x70]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x60], ebx
mov word [ebp - 0x70], cx
test byte [ebp - 0x680], 1
mov dword [ebp - 4], 0xb
je 0x4952ae
and dword [ebp - 0x680], 0xfffffffe
cmp dword [ebp - 0x40], esi
jb 0x4952ae
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
cmp byte [ebp - 0x679], bl
je 0x4952c1
mov ecx, dword [ebp - 0x690]
call fcn.005174e0
mov dword [ebp - 0x78], 0xf
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 0x8c], bl
mov byte [ebp - 4], 0x12
call fcn.00405a33
test al, al
jne 0x4952f0
push 0x26
push str._Warning__Redirector_is_disabled_
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
cmp dword [ebp - 0xec], ebx
je 0x49538d
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.00406569
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x13
call fcn.0040373d
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x40], edi
jb 0x495337
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
push 2
push 0x5b61b0
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
mov eax, dword [ebp - 0x6b4]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.004080a8
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x14
call fcn.0040373d
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x40], edi
jb 0x495384
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
push 1
push 0x5b61b4
jmp 0x4953e1
push 5
push 0x5b61b8
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
mov eax, dword [ebp - 0x6b4]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.004080a8
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x15
call fcn.0040373d
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x40], edi
jb 0x4953da
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
push 1
push 0x5b61c0
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
mov esi, dword [ebp - 0x6a8]
mov eax, 0x7b6b
cmp word [esi], ax
jne 0x495423
mov ecx, 0x50
mov word [esi], cx
mov ecx, dword [ebp - 0x690]
push 1
call fcn.0040305d
push 7
push str._Panda
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
push 3
push 0x5b61cc
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
push 4
push str.New
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
mov edx, dword [ebp - 0x6a4]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.005062a0
push eax
lea edx, [ebp - 0x38]
push str.connection_to:
push edx
mov byte [ebp - 4], 0x16
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x17
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x495493
mov eax, dword [ebp - 0x38]
push eax
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x40], edi
jb 0x4954b5
mov ecx, dword [ebp - 0x54]
push ecx
call fcn.0053ed60
add esp, 4
cmp dword [ebp - 0xd0], ebx
je 0x4954f0
push 0x28
push 1
lea ecx, [ebp - 0x8c]
call fcn.00405ea2
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0xe0]
push edx
lea ecx, [ebp - 0x8c]
call fcn.0040373d
push 0x29
push 1
lea ecx, [ebp - 0x8c]
call fcn.00405ea2
push 0x3a
push 1
lea ecx, [ebp - 0x8c]
call fcn.00405ea2
movzx eax, word [esi]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.004080a8
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x18
call fcn.0040373d
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x40], edi
jb 0x495537
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004080a8
push eax
lea ecx, [ebp - 0x38]
push 0x5b61e8
push ecx
mov byte [ebp - 4], 0x19
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1a
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x495581
mov edx, dword [ebp - 0x38]
push edx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x40], edi
jb 0x4955a3
mov eax, dword [ebp - 0x54]
push eax
call fcn.0053ed60
add esp, 4
push 2
push 0x5b61f0
lea ecx, [ebp - 0x8c]
call fcn.00403dd2
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x78], edi
jae 0x4955c6
lea eax, [ebp - 0x8c]
mov ecx, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x690]
push ebx
push ebx
push 1
push ebx
push ecx
add esi, 0x360
push eax
mov ecx, esi
mov dword [ebp - 0x6a0], esi
call fcn.00404d1d
call fcn.00405a33
test al, al
jne 0x49572e
push ebx
mov ecx, esi
call fcn.00408d19
cmp dword [ebp - 0xd0], ebx
je 0x495625
lea edx, [ebp - 0xe0]
push edx
call fcn.004020a4
mov ecx, eax
call fcn.00403fb2
cmp eax, ebx
je 0x495625
mov ecx, dword [ebp - 0x6a4]
mov dword [ecx], eax
cmp dword [ebp - 0x78], edi
jb 0x495639
mov edx, dword [ebp - 0x8c]
push edx
call fcn.0053ed60
add esp, 4
mov esi, 8
mov dword [ebp - 0x78], 0xf
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 0x8c], bl
cmp dword [ebp - 0xe8], esi
jb 0x495665
mov eax, dword [ebp - 0xfc]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0xec], ebx
mov word [ebp - 0xfc], cx
cmp dword [ebp - 0xcc], edi
jb 0x495695
mov edx, dword [ebp - 0xe0]
push edx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0xcc], 0xf
mov dword [ebp - 0xd0], ebx
mov byte [ebp - 0xe0], bl
cmp dword [ebp - 0x190], esi
jb 0x4956c2
mov eax, dword [ebp - 0x1a4]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x190], 7
mov dword [ebp - 0x194], ebx
mov word [ebp - 0x1a4], cx
cmp dword [ebp - 0x1ac], esi
jb 0x4956f2
mov edx, dword [ebp - 0x1c0]
push edx
call fcn.0053ed60
add esp, 4
xor eax, eax
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x1ac], 7
mov dword [ebp - 0x1b0], ebx
mov word [ebp - 0x1c0], ax
call fcn.00403fee
cmp dword [ebp - 0x158], esi
jb 0x4978b1
mov ecx, dword [ebp - 0x16c]
push ecx
jmp 0x4978a9
cmp byte [ebp + 8], bl
je 0x49573e
mov ecx, dword [ebp - 0x690]
call fcn.004046b0
lea ecx, [ebp - 0x3c4]
call fcn.004019a6
mov edx, dword [ebp - 0x6b4]
push edx
lea eax, [ebp - 0x4a4]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040323d
mov ecx, eax
call fcn.0040538a
push eax
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 0x1c
call fcn.00402996
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0x1b
call fcn.00403fee
lea ecx, [ebp - 0x3bc]
push ecx
lea edx, [ebp - 0x54]
push edx
call fcn.00406d02
add esp, 8
mov ecx, dword [eax + 0x10]
push 0xc
push 0x5b61f4
push ecx
push ebx
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00407f13
test eax, eax
sete dl
mov esi, 8
mov byte [ebp - 0x6ec], dl
cmp dword [ebp - 0x40], esi
jb 0x4957d1
mov eax, dword [ebp - 0x54]
push eax
call fcn.0053ed60
add esp, 4
mov eax, 0xf
mov dword [ebp - 0x698], ebx
mov dword [ebp - 0x69c], ebx
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x108], ebx
mov byte [ebp - 0x118], bl
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x124], ebx
mov byte [ebp - 0x134], bl
lea ecx, [ebp - 0x688]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x69c]
push ecx
lea edx, [ebp - 0x698]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6d4], esp
push 0xffffffffffffffff
mov byte [ebp - 0x689], bl
push ebx
lea edx, [ebp - 0x314]
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], ebx
push edx
mov byte [ebp - 4], 0x1f
mov word [ecx], ax
call fcn.0040566e
call fcn.00403495
add esp, 0x30
mov byte [ebp - 0x689], al
cmp al, bl
jne 0x495b1f
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x118]
push edx
mov edx, dword [ebp - 0x6c4]
lea eax, [ebp - 0x69c]
push eax
lea ecx, [ebp - 0x698]
push ecx
push edx
lea eax, [ebp - 0x1c0]
push eax
call fcn.004083c8
add esp, 0x1c
mov byte [ebp - 0x689], al
cmp al, bl
je 0x4958e5
push 0x5b6210
lea ecx, [ebp - 0x38]
call fcn.00406802
or dword [ebp - 0x680], 0x40
lea ecx, [ebp - 0x38]
push ecx
mov byte [ebp - 4], 0x20
call fcn.00407554
add esp, 4
mov byte [ebp - 0x679], 1
cmp eax, 1
je 0x4958eb
mov byte [ebp - 0x679], bl
test byte [ebp - 0x680], 0x40
mov dword [ebp - 4], 0x1f
je 0x495913
and dword [ebp - 0x680], 0xffffffbf
cmp dword [ebp - 0x24], esi
jb 0x495913
mov edx, dword [ebp - 0x38]
push edx
call fcn.0053ed60
add esp, 4
cmp byte [ebp - 0x679], bl
je 0x495d7b
push 0x21
mov esi, 0xf
push str.Got_proxy_from_global_settings__
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], ebx
mov byte [ebp - 0x70], bl
call fcn.00402a36
mov eax, dword [ebp - 0x698]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov byte [ebp - 4], 0x21
call fcn.005062a0
push eax
lea edx, [ebp - 0x38]
push 0x5b6248
push edx
mov byte [ebp - 4], 0x22
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x23
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x495987
mov eax, dword [ebp - 0x38]
push eax
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x40], edi
jb 0x4959a5
mov ecx, dword [ebp - 0x54]
push ecx
call fcn.0053ed60
add esp, 4
movzx edx, word [ebp - 0x69c]
push edx
lea eax, [ebp - 0x54]
push eax
call fcn.004080a8
push eax
lea ecx, [ebp - 0x38]
push 0x5b6250
push ecx
mov byte [ebp - 4], 0x24
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x25
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x4959ed
mov edx, dword [ebp - 0x38]
push edx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x40], edi
jb 0x495a0b
mov eax, dword [ebp - 0x54]
push eax
call fcn.0053ed60
add esp, 4
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x54]
push 0x5b625c
push edx
call fcn.00408a0d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x26
call fcn.0040373d
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x40], edi
jb 0x495a48
mov eax, dword [ebp - 0x54]
push eax
call fcn.0053ed60
add esp, 4
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x54]
push 0x5b626c
push edx
call fcn.00408a0d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x27
call fcn.0040373d
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x40], edi
jb 0x495a85
mov eax, dword [ebp - 0x54]
push eax
call fcn.0053ed60
add esp, 4
mov ecx, dword [ebp - 0x688]
push ecx
lea edx, [ebp - 0x54]
push edx
call fcn.004080a8
push eax
lea eax, [ebp - 0x38]
push 0x5b627c
push eax
mov byte [ebp - 4], 0x28
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x29
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x495acc
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x40], edi
jb 0x495aea
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x5c], edi
jae 0x495af5
lea eax, [ebp - 0x70]
mov ecx, dword [ebp - 0x60]
push ebx
push ebx
push ebx
push ebx
push ecx
mov ecx, dword [ebp - 0x6a0]
push eax
call fcn.00404d1d
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x5c], edi
jb 0x495d7b
mov edx, dword [ebp - 0x70]
push edx
jmp 0x495d73
push 0x5b6288
lea ecx, [ebp - 0x38]
call fcn.00406802
or dword [ebp - 0x680], 0x80
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00407554
add esp, 4
cmp eax, 1
sete byte [ebp - 0x67a]
test byte [ebp - 0x680], 0x80
mov dword [ebp - 4], 0x1f
je 0x495b7b
and dword [ebp - 0x680], 0xffffff7f
cmp dword [ebp - 0x24], esi
jb 0x495b7b
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0053ed60
add esp, 4
cmp byte [ebp - 0x67a], bl
je 0x495d7b
push str.Got_proxy_from_per_app_settings__
lea ecx, [ebp - 0x70]
call fcn.00403dfa
mov edx, dword [ebp - 0x698]
push edx
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x2b
call fcn.005062a0
push eax
lea ecx, [ebp - 0x38]
push 0x5b62c0
push ecx
mov byte [ebp - 4], 0x2c
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2d
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x495bdf
mov edx, dword [ebp - 0x38]
push edx
call fcn.0053ed60
add esp, 4
mov esi, 0xf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x40], edi
jb 0x495c02
mov eax, dword [ebp - 0x54]
push eax
call fcn.0053ed60
add esp, 4
movzx ecx, word [ebp - 0x69c]
push ecx
lea edx, [ebp - 0x54]
push edx
call fcn.004080a8
push eax
lea eax, [ebp - 0x38]
push 0x5b62c8
push eax
mov byte [ebp - 4], 0x2e
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2f
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x495c4a
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x40], edi
jb 0x495c68
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x54]
push 0x5b62d4
push ecx
call fcn.00408a0d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x30
call fcn.0040373d
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x40], edi
jb 0x495ca5
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x54]
push 0x5b62e4
push ecx
call fcn.00408a0d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x31
call fcn.0040373d
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x40], edi
jb 0x495ce2
mov edx, dword [ebp - 0x54]
push edx
call fcn.0053ed60
add esp, 4
mov eax, dword [ebp - 0x688]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.004080a8
push eax
lea edx, [ebp - 0x38]
push 0x5b62f4
push edx
mov byte [ebp - 4], 0x32
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x33
call fcn.0040373d
cmp dword [ebp - 0x24], edi
jb 0x495d29
mov eax, dword [ebp - 0x38]
push eax
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x40], edi
jb 0x495d47
mov ecx, dword [ebp - 0x54]
push ecx
call fcn.0053ed60
add esp, 4
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x5c], edi
jae 0x495d52
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x6a0]
push ebx
push ebx
push ebx
push ebx
push edx
push eax
call fcn.00404d1d
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x5c], edi
jb 0x495d7b
mov eax, dword [ebp - 0x70]
push eax
call fcn.0053ed60
add esp, 4
mov ecx, dword [ebp - 0x690]
call fcn.00401311
test al, al
je 0x495ffb
cmp byte [ebp - 0x689], bl
jne 0x495ffb
mov esi, dword [ebp - 0x6b0]
mov eax, dword [esi]
cmp eax, dword [esi + 4]
jne 0x495e32
mov eax, dword [ebp - 0x6ac]
lea ecx, [ebp - 0x134]
cmp dword [eax], ebx
jne 0x495f49
mov dword [eax], 0x64
call fcn.0040583f
lea ecx, [ebp - 0x118]
call fcn.0040583f
lea ecx, [ebp - 0x3c4]
call fcn.00403fee
lea ecx, [ebp - 0x8c]
call fcn.0040583f
lea ecx, [ebp - 0xfc]
call fcn.00406dfc
lea ecx, [ebp - 0xe0]
call fcn.0040583f
lea ecx, [ebp - 0x1c0]
call fcn.00407248
lea ecx, [ebp - 0x31c]
call fcn.00403fee
lea ecx, [ebp - 0x1dc]
call fcn.00406dfc
lea ecx, [ebp - 0x16c]
call fcn.00406dfc
jmp 0x4978b1
mov edi, dword [ebp - 0x6ac]
cmp dword [edi], ebx
jne 0x495f43
push 7
push 0x5b6300
push eax
call fcn.00542ab4
add esp, 0xc
test eax, eax
je 0x495f43
mov ecx, dword [esi]
mov eax, dword [esi + 4]
sub eax, ecx
push eax
push ecx
call fcn.0040279d
add esp, 8
cmp al, bl
je 0x495f43
push ebx
push 1
lea ecx, [ebp - 0x540]
call fcn.004076c6
mov ecx, dword [esi]
mov eax, dword [esi + 4]
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x34
call fcn.00402c16
test al, al
jne 0x495ebb
lea ecx, [ebp - 0x540]
mov dword [edi], 0x1f4
mov byte [ebp - 4], 0x1f
call fcn.0040867a
lea ecx, [ebp - 0x134]
jmp 0x495dc5
mov dword [ebp - 0x94], 0xf
mov dword [ebp - 0x98], ebx
mov byte [ebp - 0xa8], bl
push 0x5b6308
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x35
call fcn.00403dfa
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x36
call fcn.00407b7b
push eax
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x37
call fcn.00401604
lea ecx, [ebp - 0x38]
call fcn.0040583f
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x35
call fcn.0040583f
cmp dword [ebp - 0x98], ebx
jne 0x495fb8
lea ecx, [ebp - 0xa8]
call fcn.0040583f
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x1f
call fcn.0040867a
lea ecx, [ebp - 0x134]
call fcn.0040583f
lea ecx, [ebp - 0x118]
call fcn.0040583f
lea ecx, [ebp - 0x3c4]
call fcn.00403fee
lea ecx, [ebp - 0x8c]
call fcn.0040583f
lea ecx, [ebp - 0xfc]
call fcn.00406dfc
lea ecx, [ebp - 0xe0]
call fcn.0040583f
lea ecx, [ebp - 0x1c0]
call fcn.00407248
lea ecx, [ebp - 0x31c]
call fcn.00403fee
lea ecx, [ebp - 0x1dc]
call fcn.00406dfc
lea ecx, [ebp - 0x16c]
call fcn.00406dfc
xor al, al
jmp 0x4978b3
mov ecx, dword [ebp - 0x690]
push ebx
call fcn.0040305d
lea eax, [ebp - 0xa8]
push eax
call fcn.004020a4
mov ecx, eax
call fcn.00403fb2
mov ecx, dword [ebp - 0x6a4]
mov dword [ecx], eax
lea ecx, [ebp - 0xa8]
call fcn.0040583f
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x1f
call fcn.0040867a
jmp 0x496007
mov esi, dword [ebp - 0x6b0]
mov edi, dword [ebp - 0x6ac]
mov byte [ebp - 0x691], bl
call fcn.004056b4
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
test al, al
je 0x496404
mov ecx, dword [ebp - 0x690]
call fcn.00404a2a
test al, al
jne 0x496404
mov eax, 0xf
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x204], ebx
mov byte [ebp - 0x214], bl
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e8], ebx
mov byte [ebp - 0x1f8], bl
mov ecx, dword [ebp - 0x688]
mov edx, dword [ebp - 0x698]
mov ax, word [ebp - 0x69c]
push 0xffffffffffffffff
mov dword [ebp - 0x218], ecx
push ebx
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x220], edx
mov word [ebp - 0x21c], ax
call fcn.004077b1
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x134]
push edx
lea ecx, [ebp - 0x1f8]
call fcn.004077b1
mov byte [ebp - 0x681], 1
call fcn.004056b4
lea ecx, [ebp - 0x16c]
push ecx
lea ecx, [ebp - 0x681]
push ecx
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x69c]
push ecx
lea ecx, [ebp - 0x698]
push ecx
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x689]
push ecx
mov edx, dword [eax]
lea ecx, [ebp - 0xe0]
push ecx
mov ecx, dword [ebp - 0x690]
push ecx
mov ecx, dword [ebp - 0x6c0]
push edi
push esi
push ecx
mov ecx, dword [ebp - 0x6b8]
push ecx
mov ecx, dword [ebp - 0x6c8]
mov edx, dword [edx + 8]
push ecx
mov ecx, dword [ebp - 0x6b4]
push ecx
mov ecx, dword [ebp - 0x6a8]
push ecx
mov ecx, dword [ebp - 0x6a4]
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp + 8]
push ecx
mov ecx, eax
call edx
cmp al, bl
jne 0x496156
lea ecx, [ebp - 0x220]
call fcn.004062df
jmp 0x495f43
cmp dword [edi], ebx
je 0x496170
lea ecx, [ebp - 0x220]
call fcn.004062df
lea ecx, [ebp - 0x134]
jmp 0x495dc5
cmp byte [ebp - 0x681], bl
je 0x4963f0
mov ecx, dword [ebp - 0x690]
call fcn.0040332d
cmp byte [ebp - 0x681], bl
je 0x4963f0
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x688]
jne 0x4961f7
mov ecx, dword [ebp - 0x220]
cmp ecx, dword [ebp - 0x698]
jne 0x4961f7
mov dx, word [ebp - 0x21c]
cmp dx, word [ebp - 0x69c]
jne 0x4961f7
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x214]
push ecx
call fcn.004014dd
add esp, 8
test al, al
jne 0x4961f7
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x1f8]
push eax
call fcn.004014dd
add esp, 8
test al, al
je 0x4963f0
push 0x5b6310
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x691], 1
call fcn.00406802
lea ecx, [ebp - 0x54]
push ecx
mov byte [ebp - 4], 0x39
call fcn.00407554
add esp, 4
cmp eax, 1
lea ecx, [ebp - 0x54]
sete byte [ebp - 0x67a]
mov byte [ebp - 4], 0x38
call fcn.00406dfc
cmp byte [ebp - 0x67a], bl
je 0x4963f0
push str.Got_proxy_from_COM__
lea ecx, [ebp - 0xc4]
call fcn.00403dfa
mov edx, dword [ebp - 0x698]
push edx
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x3a
call fcn.005062a0
push eax
lea ecx, [ebp - 0x54]
push 0x5b633c
push ecx
mov byte [ebp - 4], 0x3b
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x3c
call fcn.0040373d
lea ecx, [ebp - 0x54]
call fcn.0040583f
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x3a
call fcn.0040583f
movzx edx, word [ebp - 0x69c]
push edx
lea eax, [ebp - 0xa8]
push eax
call fcn.004080a8
push eax
lea ecx, [ebp - 0x54]
push 0x5b6344
push ecx
mov byte [ebp - 4], 0x3d
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x3e
call fcn.0040373d
lea ecx, [ebp - 0x54]
call fcn.0040583f
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x3a
call fcn.0040583f
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x188]
push 0x5b6350
push eax
call fcn.00408a0d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x3f
call fcn.0040373d
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x3a
call fcn.0040583f
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x70]
push 0x5b6360
push edx
call fcn.00408a0d
add esp, 0xc
mov byte [ebp - 4], 0x40
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
call fcn.0040373d
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x3a
call fcn.0040583f
mov eax, dword [ebp - 0x688]
push eax
lea ecx, [ebp - 0x150]
push ecx
call fcn.004080a8
push eax
lea edx, [ebp - 0x54]
push 0x5b6370
push edx
mov byte [ebp - 4], 0x41
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x42
call fcn.0040373d
lea ecx, [ebp - 0x54]
call fcn.0040583f
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x3a
call fcn.0040583f
cmp dword [ebp - 0xb0], 0x10
mov eax, dword [ebp - 0xc4]
jae 0x4963ce
lea eax, [ebp - 0xc4]
mov ecx, dword [ebp - 0xb4]
push ebx
push ebx
push ebx
push ebx
push ecx
mov ecx, dword [ebp - 0x6a0]
push eax
call fcn.00404d1d
lea ecx, [ebp - 0xc4]
call fcn.0040583f
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1f
call fcn.004062df
jmp 0x4966e7
call fcn.004056b4
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
test al, al
je 0x4966e7
mov ecx, dword [ebp - 0x690]
call fcn.00404a2a
test al, al
je 0x4966e7
mov edi, dword [ebp - 0x6cc]
mov ecx, dword [edi + 0xec]
push 1
push ecx
lea ecx, [ebp - 0x6e4]
call fcn.00530b60
mov ecx, dword [ebp - 0x690]
mov byte [ebp - 4], 0x43
call fcn.00516fa0
lea edx, [ebp - 0x6b8]
mov dword [ebp - 0x6b8], eax
push edx
lea eax, [ebp - 0x6d4]
push eax
lea ecx, [edi + 0xdc]
call fcn.0040710d
mov esi, dword [eax]
cmp esi, dword [edi + 0xe0]
je 0x4966d8
cmp dword [ebp - 0x688], 0xf
push 0xffffffffffffffff
setne cl
mov byte [ebp - 0x689], cl
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x698], edx
movzx eax, word [esi + 0x14]
mov dword [ebp - 0x69c], eax
lea eax, [esi + 0x1c]
push ebx
push eax
lea ecx, [ebp - 0x118]
call fcn.004077b1
push 0xffffffffffffffff
lea eax, [esi + 0x38]
push ebx
push eax
lea ecx, [ebp - 0x134]
call fcn.004077b1
mov ecx, dword [esi + 0x18]
mov dword [ebp - 0x688], ecx
push str.proxylog
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x691], 1
call fcn.00406802
lea edx, [ebp - 0x54]
push edx
mov byte [ebp - 4], 0x44
call fcn.00407554
add esp, 4
cmp eax, 1
lea ecx, [ebp - 0x54]
sete byte [ebp - 0x67a]
mov byte [ebp - 4], 0x43
call fcn.00406dfc
cmp byte [ebp - 0x67a], bl
je 0x4966d8
push str.Got_proxy_from_COM__from_map___
lea ecx, [ebp - 0xc4]
call fcn.00403dfa
mov eax, dword [ebp - 0x698]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov byte [ebp - 4], 0x45
call fcn.005062a0
push eax
lea edx, [ebp - 0x150]
push str.IP:
push edx
mov byte [ebp - 4], 0x46
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x47
call fcn.0040373d
lea ecx, [ebp - 0x150]
call fcn.0040583f
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x45
call fcn.0040583f
movzx eax, word [ebp - 0x69c]
push eax
lea ecx, [ebp - 0x38]
push ecx
call fcn.004080a8
push eax
lea edx, [ebp - 0x150]
push str.__port:
push edx
mov byte [ebp - 4], 0x48
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x49
call fcn.0040373d
lea ecx, [ebp - 0x150]
call fcn.0040583f
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x45
call fcn.0040583f
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0xa8]
push str.__username:
push ecx
call fcn.00408a0d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x4a
call fcn.0040373d
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x45
call fcn.0040583f
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x188]
push str.__password:
push eax
call fcn.00408a0d
add esp, 0xc
mov byte [ebp - 4], 0x4b
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
call fcn.0040373d
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x45
call fcn.0040583f
mov ecx, dword [ebp - 0x688]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.004080a8
push eax
lea eax, [ebp - 0x150]
push str.__type:
push eax
mov byte [ebp - 4], 0x4c
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x4d
call fcn.0040373d
lea ecx, [ebp - 0x150]
call fcn.0040583f
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x45
call fcn.0040583f
cmp dword [ebp - 0xb0], 0x10
mov eax, dword [ebp - 0xc4]
jae 0x4966b6
lea eax, [ebp - 0xc4]
mov ecx, dword [ebp - 0xb4]
push ebx
push ebx
push ebx
push ebx
push ecx
mov ecx, dword [ebp - 0x6a0]
push eax
call fcn.00404d1d
lea ecx, [ebp - 0xc4]
call fcn.0040583f
lea ecx, [ebp - 0x6e4]
mov byte [ebp - 4], 0x1f
call fcn.00530af0
mov esi, dword [ebp - 0x688]
cmp byte [ebp - 0x689], bl
je 0x496712
cmp esi, 0xe
jne 0x496712
mov ecx, dword [ebp - 0x6a0]
push 1
call fcn.00408d19
lea ecx, [ebp - 0x134]
jmp 0x495dc5
cmp byte [ebp + 8], bl
je 0x496731
mov edx, dword [ebp - 0x6c8]
mov ecx, dword [ebp - 0x690]
mov byte [edx], 1
call fcn.00516f30
mov esi, dword [ebp - 0x688]
mov edi, 0xf
cmp byte [ebp - 0x689], bl
je 0x49758b
cmp esi, edi
je 0x49758b
cmp esi, 0xb
je 0x49758b
cmp esi, 0xc
je 0x49758b
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xb4], ebx
mov byte [ebp - 0xc4], bl
mov edi, dword [ebp - 0x6a8]
movzx eax, word [edi]
push eax
mov byte [ebp - 4], 0x4e
call fcn.00408e77
add esp, 4
test al, al
je 0x4967e3
cmp esi, 1
je 0x49679c
cmp esi, 2
je 0x49679c
cmp esi, 3
je 0x49679c
cmp esi, 4
jne 0x4967e3
push str.proxysni
lea ecx, [ebp - 0x54]
call fcn.00406802
mov edx, dword [ebp - 0x6c4]
or dword [ebp - 0x680], 0x100
lea ecx, [ebp - 0x54]
push ecx
push edx
lea eax, [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x4f
call fcn.004088be
mov esi, dword [ebp - 0x688]
add esp, 0xc
mov byte [ebp - 0x679], 1
cmp eax, 1
je 0x4967e9
mov byte [ebp - 0x679], bl
test dword [ebp - 0x680], 0x100
mov dword [ebp - 4], 0x4e
je 0x496814
and dword [ebp - 0x680], 0xfffffeff
lea ecx, [ebp - 0x54]
call fcn.00406dfc
mov esi, dword [ebp - 0x688]
cmp byte [ebp - 0x679], bl
je 0x496895
mov eax, dword [ebp - 0x6b0]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
cmp ecx, eax
je 0x49686d
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x150]
push ecx
call fcn.00408337
add esp, 0xc
push eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x50
call fcn.00401604
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x4e
call fcn.0040583f
mov edx, dword [ebp - 0x6ac]
mov esi, dword [ebp - 0x688]
mov dword [edx], ebx
jmp 0x496895
mov eax, dword [ebp - 0x6ac]
cmp dword [eax], ebx
jne 0x496893
lea ecx, [ebp - 0xc4]
mov dword [eax], 0xbb8
call fcn.0040583f
lea ecx, [ebp - 0x134]
jmp 0x495dc5
mov dword [eax], ebx
cmp esi, 9
jne 0x4968c8
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x6a4]
mov dx, word [ebp - 0x69c]
mov dword [ecx], eax
lea ecx, [ebp - 0xc4]
mov word [edi], dx
call fcn.0040583f
lea ecx, [ebp - 0x134]
jmp 0x495dc5
cmp esi, 0xa
jne 0x4968dd
lea ecx, [ebp - 0xc4]
call fcn.0040583f
jmp 0x495f43
mov byte [ebp - 0x681], bl
mov byte [ebp - 0x6a0], bl
cmp esi, 4
je 0x496900
cmp esi, 3
je 0x496900
cmp esi, ebx
je 0x496900
cmp esi, 7
jne 0x496f45
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.00406d02
push 0x5b6408
mov edi, 0x200
or dword [ebp - 0x680], edi
push eax
mov byte [ebp - 4], 0x51
call fcn.00408459
add esp, 0x10
mov esi, 0x400
test al, al
jne 0x49696e
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x150]
push eax
call fcn.00406d02
or dword [ebp - 0x680], esi
push 0x5b6424
push eax
mov dword [ebp - 4], 0x52
call fcn.00408459
add esp, 0x10
mov byte [ebp - 0x679], bl
test al, al
je 0x496975
mov byte [ebp - 0x679], 1
test dword [ebp - 0x680], esi
je 0x496992
and dword [ebp - 0x680], 0xfffffbff
lea ecx, [ebp - 0x150]
call fcn.00406dfc
mov dword [ebp - 4], 0x4e
test dword [ebp - 0x680], edi
je 0x4969b3
and dword [ebp - 0x680], 0xfffffdff
lea ecx, [ebp - 0x54]
call fcn.00406dfc
mov edi, dword [ebp - 0x6cc]
cmp byte [ebp - 0x679], bl
je 0x496a55
mov ecx, dword [ebp - 0x6a4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6a8]
mov cx, word [eax]
mov dword [ebp - 0x6e4], edx
mov edx, dword [edi + 0xec]
push 1
mov word [ebp - 0x6e0], cx
push edx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x6dc], ebx
call fcn.00530b60
lea eax, [ebp - 0x6b4]
push eax
lea ecx, [ebp - 0x6d4]
push ecx
lea ecx, [edi + 0xf0]
call fcn.004056aa
mov eax, dword [eax]
cmp eax, dword [edi + 0xf4]
je 0x496a41
mov esi, dword [eax + 0x14]
lea edx, [ebp - 0x6e4]
push edx
lea ecx, [ebp - 0x6b8]
push ecx
lea ecx, [eax + 0x10]
call fcn.00406b04
cmp dword [eax], esi
je 0x496a41
mov byte [ebp - 0x681], 1
lea ecx, [ebp - 0x1c]
call fcn.00530af0
cmp byte [ebp - 0x681], bl
jne 0x496f3d
mov eax, dword [ebp - 0x6b0]
mov edx, dword [eax]
cmp edx, dword [eax + 4]
mov eax, dword [ebp - 0x6ac]
jne 0x496baf
cmp dword [eax], ebx
je 0x496ac5
mov esi, dword [ebp - 0x688]
mov dword [eax], ebx
cmp esi, ebx
je 0x496aa5
cmp esi, 7
je 0x496aa5
cmp esi, 3
je 0x496a8f
cmp esi, 4
jne 0x496f4b
mov ecx, dword [ebp - 0x690]
call fcn.004082c4
mov esi, dword [ebp - 0x688]
jmp 0x496f4b
mov ecx, dword [ebp - 0x690]
mov dword [ebp - 0x688], 0xf
call fcn.004082c4
mov esi, dword [ebp - 0x688]
jmp 0x496f4b
cmp byte [ebp - 0x691], bl
je 0x496b8d
lea ecx, [ebp - 0x220]
call fcn.004038b9
mov eax, dword [ebp - 0x688]
mov ecx, dword [ebp - 0x698]
mov dx, word [ebp - 0x69c]
push 0xffffffffffffffff
mov dword [ebp - 0x218], eax
push ebx
lea eax, [ebp - 0x118]
mov dword [ebp - 0x220], ecx
push eax
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x53
mov word [ebp - 0x21c], dx
call fcn.004077b1
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x1f8]
call fcn.004077b1
mov edx, dword [edi + 0xec]
push 1
push edx
lea ecx, [ebp - 0x1c]
call fcn.00530b60
mov ecx, dword [ebp - 0x690]
mov byte [ebp - 4], 0x54
call fcn.00516fa0
mov dword [ebp - 0x6b8], eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x6b8]
push ecx
lea ecx, [edi + 0xdc]
call fcn.00402ca2
mov ecx, eax
call fcn.0040485e
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x53
call fcn.00530af0
lea ecx, [ebp - 0x220]
call fcn.004062df
mov edx, dword [ebp - 0x6ac]
lea ecx, [ebp - 0xc4]
mov dword [edx], 0x64
call fcn.0040583f
lea ecx, [ebp - 0x134]
jmp 0x495dc5
mov byte [ebp - 0x679], bl
cmp dword [eax], ebx
je 0x496bc2
mov byte [ebp - 0x679], 1
mov dword [eax], ebx
mov esi, dword [ebp - 0x6b0]
mov eax, dword [esi]
push 7
push str.connect
push eax
call fcn.00542ab4
add esp, 0xc
test eax, eax
je 0x496daf
mov ecx, dword [esi]
mov eax, dword [esi + 4]
sub eax, ecx
push eax
push ecx
call fcn.0040279d
add esp, 8
mov byte [ebp - 0x681], al
cmp al, bl
je 0x496db6
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x54]
push ecx
call fcn.00406d02
or dword [ebp - 0x680], 0x800
push str.iexplore.exe
push eax
mov byte [ebp - 4], 0x55
call fcn.00408459
add esp, 0x10
test al, al
jne 0x496c67
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x150]
push eax
call fcn.00406d02
or dword [ebp - 0x680], 0x1000
push str.chrome.exe
push eax
mov dword [ebp - 4], 0x56
call fcn.00408459
add esp, 0x10
test al, al
je 0x496ca0
push 0x5b6478
call dword [sym.imp.WS2_32.dll_inet_addr]
mov ecx, dword [ebp - 0x6a4]
cmp dword [ecx], eax
je 0x496ca0
mov edx, dword [ebp - 0x6a8]
movzx eax, word [edx]
mov ecx, 0x2c56
cmp ax, cx
je 0x496ca0
mov edx, 0x1bb
mov byte [ebp - 0x67a], 1
cmp ax, dx
jne 0x496ca6
mov byte [ebp - 0x67a], bl
test dword [ebp - 0x680], 0x1000
je 0x496cc7
and dword [ebp - 0x680], 0xffffefff
lea ecx, [ebp - 0x150]
call fcn.00406dfc
test dword [ebp - 0x680], 0x800
mov dword [ebp - 4], 0x4e
je 0x496ce2
lea ecx, [ebp - 0x54]
call fcn.00406dfc
cmp byte [ebp - 0x67a], bl
je 0x496d5c
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6a8]
mov ax, word [edx]
mov dword [ebp - 0x6e4], ecx
mov word [ebp - 0x6e0], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi + 0xec]
push 1
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x6dc], eax
call fcn.00530b60
lea edx, [ebp - 0x6e4]
push edx
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0x6b4]
push ecx
lea ecx, [edi + 0xf0]
mov byte [ebp - 4], 0x57
call fcn.00401a73
mov ecx, eax
call fcn.00404a16
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4e
call fcn.00530af0
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov esi, dword [ebp - 0x690]
sub eax, ecx
push eax
push ecx
mov ecx, esi
call fcn.00405e39
mov ecx, eax
call fcn.00402c16
test al, al
jne 0x496e50
cmp byte [ebp - 0x679], bl
jne 0x496e58
mov edx, dword [ebp - 0x6ac]
lea ecx, [ebp - 0xc4]
mov dword [edx], 0x1f4
call fcn.0040583f
lea ecx, [ebp - 0x134]
jmp 0x495dc5
mov byte [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x6a8]
cmp word [eax], 0x50
jne 0x496e11
push str.forcehttp
lea ecx, [ebp - 0x54]
call fcn.00406802
mov edx, dword [ebp - 0x6c4]
or dword [ebp - 0x680], 0x2000
lea ecx, [ebp - 0x54]
push ecx
push edx
lea eax, [ebp - 0x1c0]
push eax
mov byte [ebp - 4], 0x5c
call fcn.004088be
add esp, 0xc
cmp eax, 1
jne 0x496e11
cmp byte [ebp - 0x6a0], bl
jne 0x496e11
mov ecx, dword [esi]
mov byte [ebp - 0x67a], al
cmp ecx, dword [esi + 4]
je 0x496e17
mov byte [ebp - 0x67a], bl
test dword [ebp - 0x680], 0x2000
mov dword [ebp - 4], 0x4e
je 0x496e32
lea ecx, [ebp - 0x54]
call fcn.00406dfc
cmp byte [ebp - 0x67a], bl
je 0x496f3d
mov esi, dword [ebp - 0x688]
mov byte [ebp - 0x681], 1
jmp 0x496f4b
cmp byte [ebp - 0x679], bl
je 0x496e69
mov esi, dword [ebp - 0x688]
mov byte [ebp - 0x681], bl
jmp 0x496f4b
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], ebx
mov byte [ebp - 0x70], bl
push str.host
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x58
call fcn.00403dfa
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x150]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x59
call fcn.00405e39
mov ecx, eax
call fcn.00407b7b
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x5a
call fcn.00401604
lea ecx, [ebp - 0x150]
call fcn.0040583f
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x58
call fcn.0040583f
cmp dword [ebp - 0x60], ebx
jne 0x496ee7
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x681], bl
mov byte [ebp - 4], 0x4e
call fcn.0040583f
mov esi, dword [ebp - 0x688]
jmp 0x496f4b
lea edx, [ebp - 0x70]
push edx
mov ecx, esi
call fcn.00404f3e
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x150]
push 0x5b648c
push ecx
call fcn.00408a0d
add esp, 0xc
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x5b
call fcn.00401604
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x58
call fcn.0040583f
lea edx, [ebp - 0x70]
push edx
mov ecx, esi
call fcn.00407892
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x4e
call fcn.0040583f
mov esi, dword [ebp - 0x688]
jmp 0x496f4b
mov edi, dword [ebp - 0x6cc]
cmp byte [ebp - 0x691], bl
je 0x496f9d
mov edx, dword [edi + 0xec]
push 1
push edx
lea ecx, [ebp - 0x1c]
call fcn.00530b60
mov ecx, dword [ebp - 0x690]
mov byte [ebp - 4], 0x5d
call fcn.00516fa0
mov dword [ebp - 0x6b8], eax
lea eax, [ebp - 0x6b8]
push eax
lea ecx, [edi + 0xdc]
call fcn.00405cd6
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4e
call fcn.00530af0
mov esi, dword [ebp - 0x688]
mov eax, 0xf
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x178], ebx
mov byte [ebp - 0x188], bl
mov byte [ebp - 4], 0x5f
cmp dword [ebp - 0x108], ebx
je 0x497059
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x54]
push eax
call fcn.0040320b
push eax
lea ecx, [ebp - 0x150]
push str.Basic
push ecx
mov byte [ebp - 4], 0x60
call fcn.0040367f
add esp, 0x18
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x61
call fcn.00401604
lea ecx, [ebp - 0x150]
call fcn.0040583f
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x5f
call fcn.0040583f
push str.Proxy_Authorization:
lea ecx, [ebp - 0x188]
call fcn.00402d2e
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x188]
call fcn.0040373d
push 0x5b64c8
lea ecx, [ebp - 0x188]
call fcn.0040765d
mov esi, dword [ebp - 0x688]
cmp esi, 2
je 0x497068
cmp esi, 4
je 0x497068
cmp esi, 7
jne 0x49707b
call fcn.00517a80
mov esi, dword [ebp - 0x688]
test al, al
je 0x497470
cmp esi, 1
je 0x497111
cmp esi, 2
je 0x497111
cmp esi, 3
je 0x497097
cmp esi, 4
jne 0x49709f
cmp byte [ebp - 0x681], bl
je 0x497111
cmp esi, ebx
je 0x4970b6
cmp esi, 3
je 0x4970b6
cmp esi, 4
je 0x4970b6
cmp esi, 7
jne 0x497470
cmp byte [ebp - 0x681], bl
je 0x497470
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x6a4]
mov dx, word [ebp - 0x69c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6a8]
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [ebp - 0x690]
mov word [eax], dx
call fcn.00406636
mov esi, dword [ebp - 0x688]
cmp esi, 4
je 0x497103
cmp esi, 7
jne 0x497470
mov edx, dword [ebp - 0x6c8]
mov byte [edx], 1
jmp 0x497470
mov ecx, dword [ebp - 0x6a8]
movzx edx, word [ecx]
push 0xa
lea eax, [ebp - 0x1c]
push eax
push edx
call fcn.0056a1d0
mov esi, 0xf
add esp, 0xc
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], ebx
mov byte [ebp - 0xa8], bl
mov byte [ebp - 4], 0x62
cmp dword [ebp - 0xd0], ebx
je 0x497163
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xa8]
call fcn.004077b1
jmp 0x4971b5
cmp dword [ebp - 0xb4], ebx
je 0x497182
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xa8]
call fcn.004077b1
jmp 0x4971b5
mov edx, dword [ebp - 0x6a4]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x150]
push ecx
call fcn.005062a0
add esp, 8
push eax
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x63
call fcn.00401604
lea ecx, [ebp - 0x150]
call fcn.0040583f
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], ebx
mov byte [ebp - 0x70], bl
mov byte [ebp - 4], 0x64
cmp byte [ebp - 0x6a0], bl
jne 0x497311
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x274]
call fcn.00403dfa
mov esi, eax
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x3fc]
push str.CONNECT
push ecx
mov byte [ebp - 4], 0x65
call fcn.00408a0d
push 0x5b64d8
push eax
lea edx, [ebp - 0x3e0]
push edx
mov byte [ebp - 4], 0x66
call fcn.00407c9d
push esi
push eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x67
call fcn.00407cd9
push 0x5b64cc
push eax
lea ecx, [ebp - 0x150]
push ecx
mov byte [ebp - 4], 0x68
call fcn.00407c9d
add esp, 0x30
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x69
call fcn.00401604
lea ecx, [ebp - 0x150]
call fcn.0040583f
lea ecx, [ebp - 0x54]
call fcn.0040583f
lea ecx, [ebp - 0x3e0]
call fcn.0040583f
lea ecx, [ebp - 0x3fc]
call fcn.0040583f
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x64
call fcn.0040583f
push str.User_Agent:_Mozilla_5.0__compatible_MSIE_7.0_Windows_NT_6.0__r_n
lea ecx, [ebp - 0x70]
call fcn.0040765d
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x258]
push 0x5b652c
push eax
call fcn.00408a0d
push 0x5b6528
push eax
lea ecx, [ebp - 0x274]
push ecx
mov byte [ebp - 4], 0x6a
call fcn.00407c9d
add esp, 0x18
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x6b
call fcn.004085c6
lea ecx, [ebp - 0x274]
call fcn.0040583f
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x64
call fcn.0040583f
push str.Proxy_Connection:_Keep_Alive_r_n
lea ecx, [ebp - 0x70]
call fcn.0040765d
cmp dword [ebp - 0x178], ebx
je 0x49730a
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x188]
push edx
lea ecx, [ebp - 0x70]
call fcn.0040373d
push 0x5b6554
jmp 0x497386
mov eax, dword [ebp - 0x6bc]
mov byte [eax], 1
mov eax, dword [ebp - 0x6b0]
mov esi, dword [eax + 4]
sub esi, dword [eax]
cmp dword [ebp - 0x178], ebx
je 0x497330
sub esi, 2
xor edi, edi
cmp esi, ebx
jle 0x497367
jmp 0x497340
mov ecx, dword [ebp - 0x6b0]
mov edx, dword [ecx]
mov al, byte [edi + edx]
mov byte [ebp - 0x6bc], al
mov ecx, dword [ebp - 0x6bc]
push ecx
push 1
lea ecx, [ebp - 0x70]
call fcn.00405ea2
inc edi
cmp edi, esi
jl 0x497340
cmp dword [ebp - 0x178], ebx
je 0x49738e
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x188]
push edx
lea ecx, [ebp - 0x70]
call fcn.0040373d
push 0x5b6558
lea ecx, [ebp - 0x70]
call fcn.0040765d
call fcn.004056b4
mov ecx, dword [ebp - 0x690]
mov edi, eax
mov esi, dword [edi]
call fcn.00516fa0
mov edx, dword [esi + 0x14]
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x258]
push ecx
mov ecx, edi
call edx
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x6c
call fcn.00401604
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x64
call fcn.0040583f
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x6a4]
mov dx, word [ebp - 0x69c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6a8]
xor esi, esi
mov word [eax], dx
cmp dword [ebp - 0x60], ebx
jbe 0x497417
mov edi, dword [ebp - 0x6d0]
lea esp, [esp]
push esi
lea ecx, [ebp - 0x70]
call fcn.00405367
push eax
mov ecx, edi
call fcn.00404eee
inc esi
cmp esi, dword [ebp - 0x60]
jb 0x497400
cmp byte [ebp - 0x6a0], bl
jne 0x497428
mov ecx, dword [ebp - 0x6c0]
mov byte [ecx], 1
mov edx, dword [ebp - 0x6a0]
mov ecx, dword [ebp - 0x690]
push edx
call fcn.00406555
mov eax, dword [ebp - 0x688]
cmp eax, 2
je 0x49744a
cmp eax, 4
jne 0x497453
mov eax, dword [ebp - 0x6c8]
mov byte [eax], 1
lea ecx, [ebp - 0x70]
call fcn.0040583f
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x5f
call fcn.0040583f
mov esi, dword [ebp - 0x688]
cmp esi, 5
je 0x497483
cmp esi, 8
je 0x497483
cmp esi, 6
jne 0x497564
mov dword [ebp - 0x6c0], ebx
call fcn.004056b4
mov edi, dword [ebp - 0x690]
mov edx, dword [eax + 8]
mov edx, dword [edx + 0xc]
lea ecx, [eax + 8]
mov eax, dword [ebp - 0x6d0]
push edi
push eax
lea eax, [ebp - 0x6c0]
push eax
call edx
cmp dword [ebp - 0x688], 5
jne 0x4974db
push 0x9c
call fcn.0053f7d7
add esp, 4
mov dword [ebp - 0x6d4], eax
mov byte [ebp - 4], 0x6d
cmp eax, ebx
je 0x4974ff
mov ecx, eax
call fcn.0052ea90
jmp 0x497501
push 0xb0
call fcn.0053f7d7
add esp, 4
mov dword [ebp - 0x6d4], eax
mov byte [ebp - 4], 0x6e
cmp eax, ebx
je 0x4974ff
mov ecx, eax
call fcn.0052dcb0
jmp 0x497501
xor eax, eax
mov ecx, dword [ebp - 0x69c]
mov edx, dword [ebp - 0x698]
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
push ecx
push edx
mov ecx, esi
mov byte [ebp - 4], 0x5f
call eax
cmp dword [ebp - 0x108], ebx
je 0x49753b
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x118]
push edx
mov ecx, esi
call fcn.0052c800
call fcn.00405ca4
mov ecx, dword [ebp - 0x6c0]
push ebx
mov byte [ebp - 0x6bc], al
mov eax, dword [ebp - 0x6bc]
push eax
push ecx
lea edx, [ebp - 0xe0]
push edx
push esi
mov ecx, edi
call fcn.00522380
lea ecx, [ebp - 0x188]
call fcn.0040583f
lea ecx, [ebp - 0x38]
call fcn.0040583f
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x1f
call fcn.0040583f
mov edi, 0xf
cmp dword [ebp - 0xd0], ebx
je 0x4975cd
mov eax, dword [ebp - 0x6f0]
mov esi, dword [ebp - 0x6a4]
cmp dword [esi], eax
jne 0x4975cd
cmp dword [ebp - 0x698], ebx
jne 0x4975cd
cmp word [ebp - 0x69c], bx
jne 0x4975cd
lea ecx, [ebp - 0xe0]
push ecx
call fcn.004020a4
mov ecx, eax
call fcn.00403fb2
cmp eax, ebx
je 0x4975cd
mov dword [esi], eax
lea ecx, [ebp - 0x5dc]
call fcn.00401e9c
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 0x6f
call fcn.00401e9c
mov dword [ebp - 0x228], edi
mov dword [ebp - 0x22c], ebx
mov byte [ebp - 0x23c], bl
mov edx, dword [ebp - 0x6b4]
push ebx
push edx
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x71
call fcn.0040323d
mov ecx, eax
call fcn.004064bf
push eax
lea ecx, [ebp - 0x38]
push ecx
mov byte [ebp - 4], 0x72
call fcn.00406569
add esp, 8
push eax
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x73
call fcn.00401604
cmp dword [ebp - 0x24], 0x10
jb 0x497648
mov edx, dword [ebp - 0x38]
push edx
call fcn.0053ed60
add esp, 4
cmp dword [ebp - 0x40], 8
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
mov byte [ebp - 4], 0x71
jb 0x497667
mov eax, dword [ebp - 0x54]
push eax
call fcn.0053ed60
add esp, 4
mov ecx, dword [ebp - 0x6ec]
push ecx
lea edx, [ebp - 0x6e8]
push edx
lea eax, [ebp - 0x5dc]
push eax
lea ecx, [ebp - 0x678]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6d4], esp
push 0xffffffffffffffff
mov byte [ebp - 0x6e8], bl
push ebx
lea edx, [ebp - 0x23c]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.004077b1
call fcn.00407577
add esp, 0x2c
cmp al, bl
je 0x4976d7
mov eax, dword [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x5dc]
push ecx
mov ecx, dword [ebp - 0x690]
lea edx, [ebp - 0x678]
push edx
call fcn.004018c0
push str.nocontent
lea ecx, [ebp - 0x38]
call fcn.00406802
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x74
call fcn.00407554
add esp, 4
cmp dword [ebp - 0x24], 8
mov esi, eax
mov byte [ebp - 4], 0x71
jb 0x49770c
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0053ed60
add esp, 4
cmp esi, ebx
je 0x49771b
mov ecx, dword [ebp - 0x690]
call fcn.00408fd0
push str.nonagle
lea ecx, [ebp - 0x38]
call fcn.00406802
lea edx, [ebp - 0x38]
push edx
mov byte [ebp - 4], 0x75
call fcn.00407554
add esp, 4
cmp dword [ebp - 0x24], 8
mov esi, eax
mov byte [ebp - 4], 0x71
jb 0x497750
mov eax, dword [ebp - 0x38]
push eax
call fcn.0053ed60
add esp, 4
cmp esi, ebx
je 0x49775f
mov ecx, dword [ebp - 0x690]
call fcn.00516eb0
cmp dword [ebp - 0x228], 0x10
jb 0x497777
mov ecx, dword [ebp - 0x23c]
push ecx
call fcn.0053ed60
add esp, 4
lea ecx, [ebp - 0x678]
mov dword [ebp - 0x228], edi
mov dword [ebp - 0x22c], ebx
mov byte [ebp - 0x23c], bl
mov byte [ebp - 4], 0x6f
call fcn.00407bcb
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x1f
call fcn.00407bcb
mov esi, 0x10
cmp dword [ebp - 0x120], esi
jb 0x4977c3
mov edx, dword [ebp - 0x134]
push edx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x124], ebx
mov byte [ebp - 0x134], bl
cmp dword [ebp - 0x104], esi
jb 0x4977ec
mov eax, dword [ebp - 0x118]
push eax
call fcn.0053ed60
add esp, 4
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0x104], edi
mov dword [ebp - 0x108], ebx
mov byte [ebp - 0x118], bl
call fcn.00403fee
cmp dword [ebp - 0x78], esi
jb 0x49781d
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.0053ed60
add esp, 4
cmp dword [ebp - 0xe8], 8
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 0x8c], bl
jb 0x497841
mov edx, dword [ebp - 0xfc]
push edx
call fcn.0053ed60
add esp, 4
xor eax, eax
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0xec], ebx
mov word [ebp - 0xfc], ax
cmp dword [ebp - 0xcc], esi
jb 0x497871
mov ecx, dword [ebp - 0xe0]
push ecx
call fcn.0053ed60
add esp, 4
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xd0], ebx
mov byte [ebp - 0xe0], bl
call fcn.00407248
lea ecx, [ebp - 0x31c]
call fcn.00403fee
cmp dword [ebp - 0x158], 8
jb 0x4978b1
mov edx, dword [ebp - 0x16c]
push edx
call fcn.0053ed60
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053fd20
mov esp, ebp
pop ebp
ret 0x38