Function at 0x4fc9c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
mov eax, dword [0x6a9a60]
xor eax, esp
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x64]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x6c]
xor ebp, ebp
mov dword [esp + 0x10], eax
mov byte [esp + 0xe], 0
mov byte [esp + 0xf], 0
mov dword [esp + 0x24], 0
push edi
test esi, esi
je 0x4fcc42
mov edi, esi
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x4fca00
sub edi, ecx
cmp edi, 0x7a1200
ja 0x4fcc42
lea eax, [edi*2 + 2]
push eax
call dword [0x6a9a78]
mov ebx, eax
add esp, 4
mov eax, dword [esp + 0x14]
mov dword [eax + 0x28], ebx
test ebx, ebx
je 0x4fd1d1
lea eax, [edi + 1]
add eax, ebx
mov dword [esp + 0x18], eax
push 0x29
mov byte [eax], 0
lea eax, [esp + 0x40]
push eax
push esi
call fcn.004fb6e0
mov edx, dword [esp + 0x84]
add esp, 0xc
test al, al
je 0x4fcbb4
lea ebp, [esp + 0x3c]
mov byte [esp + 0x13], 1
lea ecx, [ebp + 1]
nop
mov al, byte [ebp]
inc ebp
test al, al
jne 0x4fca70
lea eax, [esp + 0x3c]
sub ebp, ecx
push 0x62176c
push eax
call fcn.004d51d0
add esp, 8
test eax, eax
je 0x4fcbb0
add esi, 5
mov ecx, ebx
sub ecx, esi
nop dword [eax + eax]
mov al, byte [esi]
lea esi, [esi + 1]
mov byte [ecx + esi - 1], al
test al, al
jne 0x4fcaa0
xor ebp, ebp
push 0x62176c
mov dword [esp + 0x1c], ebp
call dword [0x6a9a84]
mov edi, dword [esp + 0x18]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x4fd1d1
mov al, byte [ebx]
cmp al, 0x2f
jne 0x4fccfe
cmp byte [ebx + 1], al
jne 0x4fcb55
mov cl, byte [ebx + 2]
add ebx, 2
mov al, cl
cmp cl, 0x2f
je 0x4fcb4d
cmp cl, 0x61
jl 0x4fcaf5
cmp cl, 0x7a
jle 0x4fcafd
mov al, cl
sub al, 0x41
cmp al, 0x19
ja 0x4fcb1b
mov al, byte [ebx + 1]
cmp al, 0x3a
je 0x4fcb08
cmp al, 0x7c
jne 0x4fcb1b
mov dl, byte [ebx + 2]
mov al, cl
cmp dl, 0x2f
je 0x4fcb4d
cmp dl, 0x5c
je 0x4fcb4d
test dl, dl
je 0x4fcb4d
push 0xa
push ebx
push str.localhost_
call fcn.004d53b0
add esp, 0xc
test eax, eax
jne 0x4fcb47
push 0xa
push ebx
push str.127.0.0.1_
call fcn.004d53b0
add esp, 0xc
test eax, eax
je 0x4fcc42
mov al, byte [ebx + 9]
add ebx, 9
cmp al, 0x2f
jne 0x4fccfe
mov al, byte [ebx + 1]
lea edx, [ebx + 1]
cmp al, 0x61
jl 0x4fcb63
cmp al, 0x7a
jle 0x4fcb6d
sub al, 0x41
cmp al, 0x19
ja 0x4fccfe
mov al, byte [ebx + 2]
cmp al, 0x3a
je 0x4fcb7c
cmp al, 0x7c
jne 0x4fccfe
mov al, byte [ebx + 3]
cmp al, 0x2f
je 0x4fcb8f
cmp al, 0x5c
je 0x4fcb8f
test al, al
jne 0x4fccfe
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4fcb94
sub ecx, esi
lea eax, [ecx + 1]
push eax
push edx
push ebx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
jmp 0x4fccfe
mov edx, dword [esp + 0x78]
cmp byte [esp + 0x13], 0
mov byte [ebx], 0
je 0x4fcc5a
inc esi
xor eax, eax
add esi, ebp
je 0x4fcc42
nop dword [eax]
cmp byte [esi], 0x2f
jne 0x4fcbe0
cmp eax, 4
jge 0x4fcbe0
inc eax
add esi, 1
jne 0x4fcbd0
dec eax
cmp eax, 2
ja 0x4fcc42
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x2c], eax
call fcn.004cc960
add esp, 4
test eax, eax
jne 0x4fcc1b
mov eax, dword [esp + 0x78]
test al, 8
jne 0x4fcc1b
pop edi
pop esi
pop ebp
mov eax, 5
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.004b3004
add esp, 0x5c
ret
lea edi, [esp + 0x3c]
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x4fcc22
lea eax, [esp + 0x3c]
sub edi, ecx
push 0x63379c
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcspn]
add esp, 8
cmp eax, edi
je 0x4fcc78
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.004b3004
add esp, 0x5c
ret
test edx, 0x204
je 0x4fcc42
test dl, 4
mov ebp, str.https
mov eax, 0
cmove ebp, eax
mov dword [esp + 0x28], ebp
jmp 0x4fcc7c
mov edx, dword [esp + 0x78]
mov al, byte [esi]
mov ecx, esi
test al, al
je 0x4fcc98
cmp al, 0x2f
je 0x4fcc98
cmp al, 0x3f
je 0x4fcc98
cmp al, 0x23
je 0x4fcc98
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x4fcc84
mov edi, esi
sub edi, ecx
je 0x4fccb3
mov ebp, dword [esp + 0x18]
push edi
push ecx
push ebp
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebp], 0
jmp 0x4fccbb
test edx, 0x400
je 0x4fcc42
mov edi, esi
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x4fccc0
sub edi, ecx
push edi
push esi
push ebx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x34]
add esp, 0xc
mov byte [edi + ebx], 0
test eax, eax
je 0x4fccfa
push eax
call dword [0x6a9a84]
mov edi, dword [esp + 0x18]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x4fd1d1
jmp 0x4fccfe
mov edi, dword [esp + 0x14]
mov esi, ebx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x4fcd03
push 0x63379c
push ebx
sub esi, ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcspn]
add esp, 8
cmp eax, esi
jne 0x4fcc42
mov eax, dword [esp + 0x78]
test al, al
jns 0x4fce25
cmp byte [ebx], 0
je 0x4fce25
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4fcd40
sub ecx, edx
lea eax, [ecx + ecx*2]
push eax
call dword [0x6a9a78]
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
je 0x4fd1d1
cmp byte [ebx], 0
mov dh, 1
mov byte [esp + 0x12], 1
mov esi, eax
mov edi, ebx
je 0x4fce19
cmp edi, ebx
jae 0x4fcd83
mov al, byte [edi]
mov byte [esi], al
jmp 0x4fce0a
mov dl, byte [edi]
cmp dl, 0x20
je 0x4fcdf5
xor ecx, ecx
movzx eax, dh
cmp dl, 0x3f
movzx ebp, dl
push ebp
cmovne ecx, eax
mov byte [esp + 0x23], cl
call fcn.004fd400
add esp, 4
test eax, eax
jne 0x4fcde4
push ebp
call fcn.004fd4a0
add esp, 4
test eax, eax
jne 0x4fcde4
push ebp
call fcn.004fd440
add esp, 4
test eax, eax
jne 0x4fcde4
movzx eax, byte [edi]
push eax
push str.___02x
push 4
push esi
call fcn.004e1fa0
mov dh, byte [esp + 0x2f]
mov eax, 3
add esp, 0x10
add esi, eax
jmp 0x4fce0b
mov al, byte [edi]
mov dh, byte [esp + 0x1f]
mov byte [esi], al
mov eax, 1
add esi, eax
jmp 0x4fce0b
test dh, dh
je 0x4fce07
mov word [esi], 0x3225
mov byte [esi + 2], 0x30
add esi, 3
jmp 0x4fce0b
mov byte [esi], 0x2b
inc esi
inc edi
cmp byte [edi], 0
jne 0x4fcd76
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
mov ebx, eax
mov byte [esi], 0
mov dword [edi + 0x2c], eax
push 0x23
push ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
test eax, eax
je 0x4fce52
mov byte [eax], 0
inc eax
cmp byte [eax], 0
je 0x4fce52
push eax
call dword [0x6a9a84]
add esp, 4
mov dword [edi + 0x24], eax
test eax, eax
je 0x4fd1d1
push 0x3f
push ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
test eax, eax
je 0x4fce7a
mov byte [eax], 0
inc eax
push eax
call dword [0x6a9a84]
add esp, 4
mov dword [edi + 0x20], eax
test eax, eax
je 0x4fd1d1
cmp byte [ebx], 0
je 0x4fcf13
test byte [esp + 0x78], 0x10
jne 0x4fceee
push ebx
call fcn.00507280
mov esi, eax
add esp, 4
test esi, esi
je 0x4fd1d1
mov edx, ebx
mov ecx, esi
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4fcec1
test al, al
je 0x4fcebd
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4fcec1
add ecx, 2
add edx, 2
test al, al
jne 0x4fcea1
xor eax, eax
jmp 0x4fcec6
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fcee4
cmp byte [esp + 0x12], 0
je 0x4fcedd
push dword [edi + 0x2c]
call dword [0x6a9a7c]
add esp, 4
mov ebx, esi
mov dword [edi + 0x2c], esi
jmp 0x4fcf01
push esi
call dword [0x6a9a7c]
add esp, 4
cmp byte [esp + 0x12], 0
jne 0x4fcf01
push ebx
call dword [0x6a9a84]
add esp, 4
mov ebx, eax
mov dword [edi + 0x1c], ebx
test ebx, ebx
je 0x4fd1d1
mov dword [edi + 0x2c], 0
mov ebp, dword [esp + 0x18]
test ebp, ebp
je 0x4fd2a0
mov esi, ebp
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x4fcf24
push 0x63379c
push ebp
sub esi, ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcspn]
add esp, 8
cmp eax, esi
jne 0x4fcc42
xor edi, edi
push 0x40
push ebp
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x28], edi
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
mov ebx, ebp
test esi, esi
je 0x4fd017
mov edi, dword [esp + 0x14]
inc esi
mov ebp, esi
mov eax, dword [edi]
test eax, eax
je 0x4fcf92
push eax
call fcn.004cc960
add esp, 4
test eax, eax
je 0x4fcf92
test dword [eax + 0x48], 0x400
je 0x4fcf92
lea eax, [esp + 0x20]
jmp 0x4fcf94
xor eax, eax
push eax
lea eax, [esp + 0x30]
sub esi, ebx
push eax
lea eax, [esp + 0x2c]
dec esi
push eax
push esi
push ebx
call fcn.004cd620
add esp, 0x14
test eax, eax
mov eax, dword [esp + 0x24]
je 0x4fcfbb
mov edi, 3
jmp 0x4fd01b
mov ebx, dword [esp + 0x78]
test eax, eax
je 0x4fcfd2
test bl, 0x20
je 0x4fcfcf
mov edi, 8
jmp 0x4fd01f
mov dword [edi + 4], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4fcfdd
mov dword [edi + 8], eax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4fcfe8
mov dword [edi + 0xc], eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x16]
push eax
push str.__45_0123456789abcdefABCDEF:.__c_n
push ebp
call fcn.004c7170
add esp, 0x10
cmp eax, 1
jne 0x4fd0aa
mov al, byte [esp + 0x12]
cmp al, 0x5d
jne 0x4fd056
mov esi, dword [esp + 0x18]
jmp 0x4fd095
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x78]
push eax
call dword [0x6a9a7c]
push dword [esp + 0x30]
call dword [0x6a9a7c]
push dword [esp + 0x28]
call dword [0x6a9a7c]
add esp, 0xc
test edi, edi
je 0x4fcfe8
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.004b3004
add esp, 0x5c
ret
cmp al, 0x25
jne 0x4fcc42
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x16]
push eax
lea eax, [esi + ebp]
push str._____c_n
push eax
call fcn.004c7170
add esp, 0x10
cmp eax, 1
jne 0x4fcc42
cmp byte [esp + 0x12], 0x5d
jne 0x4fcc42
add esi, dword [esp + 0x18]
add esi, ebp
test esi, esi
je 0x4fd0de
mov al, byte [esi]
test al, al
je 0x4fd0de
cmp al, 0x3a
je 0x4fd0bb
jmp 0x4fcc42
push 0x3a
push ebp
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
test esi, esi
je 0x4fd0de
mov al, byte [esi + 1]
lea edi, [esi + 1]
test al, al
jne 0x4fd15a
mov byte [esi], al
movzx eax, byte [esp + 0x13]
xor eax, 1
shl eax, 2
test eax, eax
jne 0x4fcc47
mov edi, dword [esp + 0x14]
mov ecx, ebp
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4fd0e7
sub ecx, edx
jne 0x4fd0fa
test ebx, 0x400
jne 0x4fd10c
push ebp
push edi
call fcn.004fc7f0
add esp, 8
test eax, eax
jne 0x4fcc47
push ebp
call dword [0x6a9a84]
add esp, 4
mov dword [edi + 0x10], eax
test eax, eax
je 0x4fd1d1
test ebx, 0x200
je 0x4fd2a0
cmp dword [esp + 0x28], 0
jne 0x4fd2a0
push 4
push ebp
push str.ftp.
call fcn.004d53b0
add esp, 0xc
test eax, eax
je 0x4fd201
mov ecx, 0x62d920
jmp 0x4fd28c
movzx eax, al
push eax
call fcn.004fd420
add esp, 4
test eax, eax
je 0x4fd1e9
push 0xa
lea eax, [esp + 0x34]
push eax
push edi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov edi, eax
add esp, 0xc
lea ecx, [edi - 1]
cmp ecx, 0xfffe
ja 0x4fd1e9
mov eax, dword [esp + 0x30]
cmp byte [eax], 0
jne 0x4fd1e9
push edi
mov byte [esi], 0
push 0x62ed24
mov byte [eax], 0
lea eax, [esp + 0x3c]
push 7
push eax
call fcn.004e1fa0
mov eax, dword [esp + 0x24]
mov dword [eax + 0x30], edi
lea eax, [esp + 0x44]
push eax
call dword [0x6a9a84]
mov edi, dword [esp + 0x28]
add esp, 0x14
mov dword [edi + 0x18], eax
test eax, eax
jne 0x4fd0e2
pop edi
pop esi
pop ebp
mov eax, 7
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.004b3004
add esp, 0x5c
ret
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.004b3004
add esp, 0x5c
ret
push 5
push ebp
push str.dict.
call fcn.004d53b0
add esp, 0xc
test eax, eax
je 0x4fd21c
mov ecx, str.dict
jmp 0x4fd28c
push 5
push ebp
push str.ldap.
call fcn.004d53b0
add esp, 0xc
test eax, eax
je 0x4fd237
mov ecx, str.ldap
jmp 0x4fd28c
push 5
push ebp
push str.imap.
call fcn.004d53b0
add esp, 0xc
test eax, eax
je 0x4fd252
mov ecx, str.imap
jmp 0x4fd28c
push 5
push ebp
push str.smtp.
call fcn.004d53b0
add esp, 0xc
test eax, eax
je 0x4fd26d
mov ecx, str.smtp
jmp 0x4fd28c
push 5
push ebp
push str.pop3.
call fcn.004d53b0
add esp, 0xc
mov ecx, str.pop3
test eax, eax
mov edx, str.http
cmove ecx, edx
push ecx
call dword [0x6a9a84]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x4fd1d1
push dword [edi + 0x28]
call dword [0x6a9a7c]
push dword [edi + 0x2c]
mov dword [edi + 0x28], 0
call dword [0x6a9a7c]
mov ecx, dword [esp + 0x70]
add esp, 8
mov dword [edi + 0x2c], 0
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004b3004
add esp, 0x5c
ret