Function at 0x53f060
Capabilities:
Initialize winsock library
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55e3f4
mov eax, dword fs:[0]
push eax
sub esp, 0xa20
mov eax, dword [0x5a5014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 4], 1
push 0x5b30a0
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
movzx eax, byte [0x5a61dd]
test eax, eax
je 0x53f0ee
push str.redirectorsocks.txt
lea ecx, [ebp - 0x108]
call fcn.00455e60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x108]
push ecx
call fcn.004557e0
mov ecx, eax
call fcn.004547c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x108]
call fcn.00457990
mov edx, dword [ebp + 8]
push edx
call fcn.005104f0
add esp, 4
test eax, eax
jbe 0x53f2c6
push 0x38
push 0
push 0x5b3510
call fcn.00505a60
add esp, 0xc
mov dword [ebp - 0x1d0], 0x38
lea eax, [ebp - 0x1d0]
push eax
push 0x5b3510
push 0
push 2
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.WS2_32.dll_WSAStringToAddressA]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jge 0x53f2c6
mov dword [ebp - 0x1d0], 0x38
lea edx, [ebp - 0x1d0]
push edx
push 0x5b3510
push 0
push 0x17
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.WS2_32.dll_WSAStringToAddressA]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jge 0x53f2c6
mov dword [ebp - 0x618], 4
lea ecx, [ebp - 0x618]
push ecx
lea edx, [ebp - 0x6d0]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x288]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53f2b2
push 0x5c
push 0x573c50
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53f1ff
push 0x5c
push 0x573c88
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x364], eax
jmp 0x53f209
mov dword [ebp - 0x364], 0x573cc0
lea edx, [ebp - 0x288]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x8bc]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
mov dword [ebp - 0x620], ecx
mov byte [ebp - 4], 4
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push 0x573d04
push 0x573cfc
push 0x9c1
push 0x573cf8
mov edx, dword [ebp - 0x364]
push edx
push 0x573c4c
mov ecx, dword [ebp - 0x620]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x8bc]
call fcn.0041daa0
jmp 0x53f1bc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x288]
call fcn.0040eae0
call fcn.00545580
mov eax, dword [ebp + 0xc]
push eax
call fcn.005104f0
add esp, 4
test eax, eax
jbe 0x53f5e4
mov dword [ebp - 0x63c], 1
lea ecx, [ebp - 0x63c]
push ecx
lea edx, [ebp - 0x774]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28c]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53f408
push 0x5c
push 0x573d28
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53f358
push 0x5c
push 0x573d60
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x360], eax
jmp 0x53f362
mov dword [ebp - 0x360], 0x573d98
lea edx, [ebp - 0x28c]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x958]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x640]
mov dword [ebp - 0x644], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp + 0xc]
push edx
push str.site_redirect_to:
push 0x573dd4
push 0x9ca
push 0x573dd0
mov eax, dword [ebp - 0x360]
push eax
push 0x573d24
mov ecx, dword [ebp - 0x644]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x958]
call fcn.0041daa0
jmp 0x53f315
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28c]
call fcn.0040eae0
push 0x38
push 0
push 0x5b34d8
call fcn.00505a60
add esp, 0xc
mov dword [ebp - 0x1d0], 0x38
lea ecx, [ebp - 0x1d0]
push ecx
push 0x5b34d8
push 0
push 2
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.WS2_32.dll_WSAStringToAddressA]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jge 0x53f5dd
mov dword [ebp - 0x1d0], 0x38
lea eax, [ebp - 0x1d0]
push eax
push 0x5b34d8
push 0
push 0x17
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.WS2_32.dll_WSAStringToAddressA]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jge 0x53f5db
mov dword [ebp - 0x648], 4
lea edx, [ebp - 0x648]
push edx
lea eax, [ebp - 0x778]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x290]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x290]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x53f5c7
push 0x5c
push 0x573df4
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53f514
push 0x5c
push 0x573e2c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x35c], eax
jmp 0x53f51e
mov dword [ebp - 0x35c], 0x573e64
lea eax, [ebp - 0x290]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x964]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x64c], eax
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x650], edx
mov byte [ebp - 4], 8
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.WSAStringToAddress_failed__err
push 0x573ea0
push 0x9d5
push 0x573e9c
mov eax, dword [ebp - 0x35c]
push eax
push 0x573df0
mov ecx, dword [ebp - 0x650]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x964]
call fcn.0041daa0
jmp 0x53f4d1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x290]
call fcn.0040eae0
call fcn.00545580
jmp 0x53f5e4
mov byte [0x5b34c9], 1
mov dword [ebp - 0x654], 1
lea ecx, [ebp - 0x654]
push ecx
lea edx, [ebp - 0x77c]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x284]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53f712
push 0x5c
push 0x573ecc
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53f662
push 0x5c
push 0x573f04
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x358], eax
jmp 0x53f66c
mov dword [ebp - 0x358], 0x573f3c
lea edx, [ebp - 0x284]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x97c]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x658], eax
mov ecx, dword [ebp - 0x658]
mov dword [ebp - 0x65c], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp + 8]
push edx
push str.redirect_to:
push 0x573f78
push 0x9df
push 0x573f74
mov eax, dword [ebp - 0x358]
push eax
push 0x573ec8
mov ecx, dword [ebp - 0x65c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x97c]
call fcn.0041daa0
jmp 0x53f61f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x284]
call fcn.0040eae0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, 0x5b36d4
call fcn.00457650
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x780], esp
push 0x573f90
call fcn.00455e60
mov dword [ebp - 0x790], eax
mov byte [ebp - 4], 0xb
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x794], esp
mov edx, dword [ebp + 8]
push edx
call fcn.00455e60
lea eax, [ebp - 0x988]
push eax
mov byte [ebp - 4], 1
call fcn.00547800
add esp, 0x34
mov dword [ebp - 0x660], eax
mov ecx, dword [ebp - 0x660]
mov dword [ebp - 0x664], ecx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x664]
call fcn.0041dce0
mov dword [ebp - 0x668], eax
mov edx, dword [ebp - 0x668]
push edx
mov ecx, 0x5b36ec
call fcn.00455770
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x988]
call fcn.0041fed0
lea ecx, [ebp + 0x10]
call fcn.00420980
test eax, eax
jbe 0x53f95e
push 0x5b35d4
lea eax, [ebp + 0x10]
push eax
call fcn.00547270
add esp, 8
mov dword [ebp - 0x66c], 1
lea ecx, [ebp - 0x66c]
push ecx
lea edx, [ebp - 0x78c]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x294]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53f94a
push 0x5c
push 0x573f98
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53f85d
push 0x5c
push 0x573fd0
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x348], eax
jmp 0x53f867
mov dword [ebp - 0x348], 0x574008
lea edx, [ebp + 0x10]
push edx
lea eax, [ebp - 0x150]
push eax
call fcn.005479c0
add esp, 8
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x670]
mov dword [ebp - 0x678], ecx
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x294]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x994]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x674], eax
mov ecx, dword [ebp - 0x674]
mov dword [ebp - 0x67c], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x678]
push edx
push str.process_name_s___
push 0x574044
push 0x9e9
push 0x574040
mov eax, dword [ebp - 0x348]
push eax
push 0x573f94
mov ecx, dword [ebp - 0x67c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x994]
call fcn.0041daa0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x150]
call fcn.00457990
jmp 0x53f81a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x294]
call fcn.0040eae0
jmp 0x53fa90
mov dword [ebp - 0x398], 1
lea ecx, [ebp - 0x398]
push ecx
lea edx, [ebp - 0x798]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x298]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53fa81
push 0x5c
push 0x574064
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53f9dc
push 0x5c
push 0x57409c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x314], eax
jmp 0x53f9e6
mov dword [ebp - 0x314], 0x5740d4
lea edx, [ebp - 0x298]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x9a0]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x3a0], ecx
mov byte [ebp - 4], 0x11
push str.not_found_process
push 0x574110
push 0x9ec
push 0x57410c
mov edx, dword [ebp - 0x314]
push edx
push 0x574060
mov ecx, dword [ebp - 0x3a0]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x9a0]
call fcn.0041daa0
jmp 0x53f999
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x298]
call fcn.0040eae0
mov eax, dword [ebp + 0xc]
push eax
mov ecx, 0x5b3704
call fcn.00457650
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x79c], esp
push 0x57412c
call fcn.00455e60
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 0x12
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7a4], esp
mov edx, dword [ebp + 0xc]
push edx
call fcn.00455e60
lea eax, [ebp - 0x9ac]
push eax
mov byte [ebp - 4], 1
call fcn.00547800
add esp, 0x34
mov dword [ebp - 0x3a4], eax
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp - 0x3a8], ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x3a8]
call fcn.0041dce0
mov dword [ebp - 0x3ac], eax
mov edx, dword [ebp - 0x3ac]
push edx
mov ecx, 0x5b371c
call fcn.00455770
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9ac]
call fcn.0041fed0
lea ecx, [ebp + 0x28]
call fcn.00420980
test eax, eax
jbe 0x53fccd
push 0x5b35e0
lea eax, [ebp + 0x28]
push eax
call fcn.00547270
add esp, 8
mov dword [ebp - 0x3b0], 1
lea ecx, [ebp - 0x3b0]
push ecx
lea edx, [ebp - 0x7a8]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x29c]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53fcb9
push 0x5c
push 0x574134
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53fbcc
push 0x5c
push 0x57416c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x354], eax
jmp 0x53fbd6
mov dword [ebp - 0x354], 0x5741a4
lea edx, [ebp + 0x28]
push edx
lea eax, [ebp - 0x168]
push eax
call fcn.005479c0
add esp, 8
mov dword [ebp - 0x3b4], eax
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp - 0x3bc], ecx
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x29c]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x9b8]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x3b8], eax
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp - 0x3c0], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x3bc]
push edx
push str.site_process_name_s___
push 0x5741e0
push 0x9f8
push 0x5741dc
mov eax, dword [ebp - 0x354]
push eax
push 0x574130
mov ecx, dword [ebp - 0x3c0]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x9b8]
call fcn.0041daa0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x168]
call fcn.00457990
jmp 0x53fb89
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x29c]
call fcn.0040eae0
jmp 0x53fdff
mov dword [ebp - 0x3c4], 1
lea ecx, [ebp - 0x3c4]
push ecx
lea edx, [ebp - 0x7ac]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2a0]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53fdf0
push 0x5c
push 0x574204
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53fd4b
push 0x5c
push 0x57423c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x368], eax
jmp 0x53fd55
mov dword [ebp - 0x368], 0x574274
lea edx, [ebp - 0x2a0]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x9c4]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x3c8], eax
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x3cc], ecx
mov byte [ebp - 4], 0x18
push str.not_found_site_process
push 0x5742b0
push 0x9fb
push 0x5742ac
mov edx, dword [ebp - 0x368]
push edx
push 0x574200
mov ecx, dword [ebp - 0x3cc]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x9c4]
call fcn.0041daa0
jmp 0x53fd08
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2a0]
call fcn.0040eae0
mov ecx, 0x5b365c
call fcn.00420980
test eax, eax
jbe 0x53ff9e
push 0x5b365c
lea eax, [ebp - 0x180]
push eax
call fcn.00547930
add esp, 8
mov dword [ebp - 0x3d0], eax
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], ecx
mov byte [ebp - 4], 0x19
push 0x5b35f8
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00547270
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x180]
call fcn.00455260
mov dword [ebp - 0x3d8], 1
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0x7b0]
push ecx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea edx, [ebp - 0x2a4]
push edx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2a4]
call fcn.0040b660
movzx eax, al
test eax, eax
jne 0x53ff8f
push 0x5c
push 0x5742d4
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53fedc
push 0x5c
push 0x57430c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x36c], eax
jmp 0x53fee6
mov dword [ebp - 0x36c], 0x574344
lea ecx, [ebp - 0x2a4]
push ecx
call fcn.004e8f50
push eax
lea edx, [ebp - 0x9d0]
push edx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 4], 0x1b
push 0x5b365c
push str.bypass_process_name_s___
push 0x574380
push 0xa00
push 0x57437c
mov ecx, dword [ebp - 0x36c]
push ecx
push 0x5742d0
mov ecx, dword [ebp - 0x3e0]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x9d0]
call fcn.0041daa0
jmp 0x53fe99
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2a4]
call fcn.0040eae0
push 0x5b3644
lea edx, [ebp - 0x198]
push edx
call fcn.00547930
add esp, 8
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 4], 0x1c
push 0x5b35ec
mov ecx, dword [ebp - 0x3e8]
push ecx
call fcn.00547270
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x198]
call fcn.00455260
mov dword [ebp - 0x3ec], 1
lea edx, [ebp - 0x3ec]
push edx
lea eax, [ebp - 0x7b4]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x2a8]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2a8]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x54011c
push 0x5c
push 0x5743a8
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540069
push 0x5c
push 0x5743e0
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x370], eax
jmp 0x540073
mov dword [ebp - 0x370], 0x574418
lea eax, [ebp - 0x2a8]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x9dc]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x3f0], eax
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x3f4], edx
mov byte [ebp - 4], 0x1e
push 0x5b3644
push str.limit_processs_name_s___
push 0x574454
push 0xa05
push 0x574450
mov eax, dword [ebp - 0x370]
push eax
push 0x5743a4
mov ecx, dword [ebp - 0x3f4]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x9dc]
call fcn.0041daa0
jmp 0x540026
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2a8]
call fcn.0040eae0
mov dword [ebp - 0x3f8], 1
lea ecx, [ebp - 0x3f8]
push ecx
lea edx, [ebp - 0x7b8]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x2ac]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x54025c
push 0x5c
push 0x57447c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5401a9
push 0x5c
push 0x5744b4
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x374], eax
jmp 0x5401b3
mov dword [ebp - 0x374], 0x5744ec
lea edx, [ebp - 0x2ac]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x9e8]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x3fc], eax
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x400], ecx
mov byte [ebp - 4], 0x20
mov edx, dword [0x5b34cc]
push edx
push str.limit_speed_
push 0x574528
push 0xa07
push 0x574524
mov eax, dword [ebp - 0x374]
push eax
push 0x574478
mov ecx, dword [ebp - 0x400]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x9e8]
call fcn.0041daa0
jmp 0x540166
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.0040eae0
mov dword [ebp - 0x404], 1
lea ecx, [ebp - 0x404]
push ecx
lea edx, [ebp - 0x7bc]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2b0]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x54039c
push 0x5c
push 0x574544
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5402e9
push 0x5c
push 0x57457c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x378], eax
jmp 0x5402f3
mov dword [ebp - 0x378], 0x5745b4
lea edx, [ebp - 0x2b0]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0xa24]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x408]
mov dword [ebp - 0x40c], ecx
mov byte [ebp - 4], 0x22
mov edx, dword [0x5b34cc]
push edx
push str.limit_speed__
push 0x5745f0
push 0xa09
push 0x5745ec
mov eax, dword [ebp - 0x378]
push eax
push 0x574540
mov ecx, dword [ebp - 0x40c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xa24]
call fcn.0041daa0
jmp 0x5402a6
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2b0]
call fcn.0040eae0
mov dword [ebp - 0x410], 2
lea ecx, [ebp - 0x410]
push ecx
lea edx, [ebp - 0x7c0]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1fc]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x5404dc
push 0x5c
push 0x57460c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540429
push 0x5c
push 0x574644
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x37c], eax
jmp 0x540433
mov dword [ebp - 0x37c], 0x57467c
lea edx, [ebp - 0x1fc]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x9f4]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x414], eax
mov ecx, dword [ebp - 0x414]
mov dword [ebp - 0x418], ecx
mov byte [ebp - 4], 0x24
push 0x5b3674
push str.default_gateway__
push 0x5746b8
push 0xa0b
push 0x5746b4
mov edx, dword [ebp - 0x37c]
push edx
push 0x574608
mov ecx, dword [ebp - 0x418]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x9f4]
call fcn.0041daa0
jmp 0x5403e6
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1fc]
call fcn.0040eae0
mov dword [ebp - 0x41c], 2
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x7c4]
push ecx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea edx, [ebp - 0x200]
push edx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x200]
call fcn.0040b660
movzx eax, al
test eax, eax
jne 0x54061c
push 0x5c
push 0x5746d8
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540569
push 0x5c
push 0x574710
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x380], eax
jmp 0x540573
mov dword [ebp - 0x380], 0x574748
lea ecx, [ebp - 0x200]
push ecx
call fcn.004e8f50
push eax
lea edx, [ebp - 0xa00]
push edx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x424], eax
mov byte [ebp - 4], 0x26
push 0x5b36a4
push str.dns_server__
push 0x574784
push 0xa0d
push 0x574780
mov ecx, dword [ebp - 0x380]
push ecx
push 0x5746d4
mov ecx, dword [ebp - 0x424]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xa00]
call fcn.0041daa0
jmp 0x540526
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x200]
call fcn.0040eae0
mov dword [ebp - 0x428], 2
lea edx, [ebp - 0x428]
push edx
lea eax, [ebp - 0x7c8]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x204]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x204]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x54075d
push 0x5c
push 0x5747a0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5406a9
push 0x5c
push 0x5747d8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x384], eax
jmp 0x5406b3
mov dword [ebp - 0x384], 0x574810
lea eax, [ebp - 0x204]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0xa0c]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x42c], eax
mov edx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], edx
mov byte [ebp - 4], 0x28
movzx eax, byte [0x5b34bb]
push eax
push str.open_icmp_redirector__
push 0x57484c
push 0xa0f
push 0x574848
mov ecx, dword [ebp - 0x384]
push ecx
push 0x57479c
mov ecx, dword [ebp - 0x430]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xa0c]
call fcn.0041daa0
jmp 0x540666
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x204]
call fcn.0040eae0
mov dword [ebp - 0x434], 2
lea edx, [ebp - 0x434]
push edx
lea eax, [ebp - 0x7cc]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x208]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x208]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x54089e
push 0x5c
push 0x574870
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5407ea
push 0x5c
push 0x5748a8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x388], eax
jmp 0x5407f4
mov dword [ebp - 0x388], 0x5748e0
lea eax, [ebp - 0x208]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0xa18]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x438], eax
mov edx, dword [ebp - 0x438]
mov dword [ebp - 0x43c], edx
mov byte [ebp - 4], 0x2a
movzx eax, byte [0x5b34d3]
push eax
push str.open_icmp_delay__
push 0x57491c
push 0xa11
push 0x574918
mov ecx, dword [ebp - 0x388]
push ecx
push 0x57486c
mov ecx, dword [ebp - 0x43c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa18]
call fcn.0041daa0
jmp 0x5407a7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x208]
call fcn.0040eae0
mov dword [ebp - 0x440], 2
lea edx, [ebp - 0x440]
push edx
lea eax, [ebp - 0x784]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x20c]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x5409dd
push 0x5c
push 0x57493c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x54092b
push 0x5c
push 0x574974
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x38c], eax
jmp 0x540935
mov dword [ebp - 0x38c], 0x5749ac
lea eax, [ebp - 0x20c]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x7d8]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x444], eax
mov edx, dword [ebp - 0x444]
mov dword [ebp - 0x448], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [0x5b34d4]
push eax
push str.icmp_delay___
push 0x5749e8
push 0xa13
push 0x5749e4
mov ecx, dword [ebp - 0x38c]
push ecx
push 0x574938
mov ecx, dword [ebp - 0x448]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041d9e0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x7d8]
call fcn.0041daa0
jmp 0x5408e8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20c]
call fcn.0040eae0
mov dword [ebp - 0x44c], 2
lea edx, [ebp - 0x44c]
push edx
lea eax, [ebp - 0x788]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x210]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x210]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x540b1e
push 0x5c
push 0x574a04
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540a6a
push 0x5c
push 0x574a3c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x390], eax
jmp 0x540a74
mov dword [ebp - 0x390], 0x574a74
lea eax, [ebp - 0x210]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x450], eax
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x454], edx
mov byte [ebp - 4], 0x2e
movzx eax, byte [0x5b34d2]
push eax
push str.icmp_porxy___
push 0x574ab0
push 0xa15
push 0x574aac
mov ecx, dword [ebp - 0x390]
push ecx
push 0x574a00
mov ecx, dword [ebp - 0x454]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x7e4]
call fcn.0041daa0
jmp 0x540a27
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x210]
call fcn.0040eae0
mov dword [ebp - 0x458], 2
lea edx, [ebp - 0x458]
push edx
lea eax, [ebp - 0x698]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x214]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x214]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x540c5f
push 0x5c
push 0x574acc
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540bab
push 0x5c
push 0x574b04
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x34c], eax
jmp 0x540bb5
mov dword [ebp - 0x34c], 0x574b3c
lea eax, [ebp - 0x214]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x7f0]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x45c], eax
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x460], edx
mov byte [ebp - 4], 0x30
movzx eax, byte [0x5b34cb]
push eax
push str.ipv6_redirector_status__
push 0x574b78
push 0xa17
push 0x574b74
mov ecx, dword [ebp - 0x34c]
push ecx
push 0x574ac8
mov ecx, dword [ebp - 0x460]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x7f0]
call fcn.0041daa0
jmp 0x540b68
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x214]
call fcn.0040eae0
mov dword [ebp - 0x464], 2
lea edx, [ebp - 0x464]
push edx
lea eax, [ebp - 0x69c]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x218]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x218]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x540da0
push 0x5c
push 0x574ba0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540cec
push 0x5c
push 0x574bd8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x350], eax
jmp 0x540cf6
mov dword [ebp - 0x350], 0x574c10
lea eax, [ebp - 0x218]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x7fc]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x468], eax
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x46c], edx
mov byte [ebp - 4], 0x32
movzx eax, byte [0x5b34ba]
push eax
push str.open_tcp_debug___
push 0x574c4c
push 0xa19
push 0x574c48
mov ecx, dword [ebp - 0x350]
push ecx
push 0x574b9c
mov ecx, dword [ebp - 0x46c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x7fc]
call fcn.0041daa0
jmp 0x540ca9
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x218]
call fcn.0040eae0
mov dword [ebp - 0x470], 2
lea edx, [ebp - 0x470]
push edx
lea eax, [ebp - 0x6a0]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x21c]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x540ee1
push 0x5c
push 0x574c6c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540e2d
push 0x5c
push 0x574ca4
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2cc], eax
jmp 0x540e37
mov dword [ebp - 0x2cc], 0x574cdc
lea eax, [ebp - 0x21c]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x808]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x474], eax
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x478], edx
mov byte [ebp - 4], 0x34
movzx eax, byte [0x5b34b9]
push eax
push str.local_dns_resolver___
push 0x574d18
push 0xa1b
push 0x574d14
mov ecx, dword [ebp - 0x2cc]
push ecx
push 0x574c68
mov ecx, dword [ebp - 0x478]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x808]
call fcn.0041daa0
jmp 0x540dea
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x21c]
call fcn.0040eae0
mov dword [ebp - 0x47c], 2
lea edx, [ebp - 0x47c]
push edx
lea eax, [ebp - 0x6a4]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x220]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x220]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x541022
push 0x5c
push 0x574d3c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x540f6e
push 0x5c
push 0x574d74
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2d0], eax
jmp 0x540f78
mov dword [ebp - 0x2d0], 0x574dac
lea eax, [ebp - 0x220]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x814]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x480], eax
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x484], edx
mov byte [ebp - 4], 0x36
movzx eax, byte [0x5b34b8]
push eax
push str.only_proxy_http___
push 0x574de8
push 0xa1d
push 0x574de4
mov ecx, dword [ebp - 0x2d0]
push ecx
push 0x574d38
mov ecx, dword [ebp - 0x484]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x814]
call fcn.0041daa0
jmp 0x540f2b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x220]
call fcn.0040eae0
movzx edx, byte [0x5b34bb]
test edx, edx
je 0x541046
mov dword [0x5b34b4], 1
movzx eax, byte [0x5b34d3]
test eax, eax
je 0x54105b
mov dword [0x5b34b4], 2
movzx ecx, byte [0x5b34d2]
test ecx, ecx
je 0x541070
mov dword [0x5b34b4], 3
mov dword [ebp - 0x488], 2
lea edx, [ebp - 0x488]
push edx
lea eax, [ebp - 0x6a8]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x224]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x224]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x5411a0
push 0x5c
push 0x574e08
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5410ee
push 0x5c
push 0x574e40
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2d4], eax
jmp 0x5410f8
mov dword [ebp - 0x2d4], 0x574e78
lea eax, [ebp - 0x224]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x820]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x48c], eax
mov edx, dword [ebp - 0x48c]
mov dword [ebp - 0x490], edx
mov byte [ebp - 4], 0x38
mov eax, dword [0x5b34b4]
push eax
push str.icmp_mode__
push 0x574eb4
push 0xa2b
push 0x574eb0
mov ecx, dword [ebp - 0x2d4]
push ecx
push 0x574e04
mov ecx, dword [ebp - 0x490]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041d9e0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x820]
call fcn.0041daa0
jmp 0x5410ab
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x224]
call fcn.0040eae0
mov ecx, 0x5b3734
call fcn.00420980
test eax, eax
jne 0x5411cc
push 0x5b36ec
mov ecx, 0x5b3734
call fcn.00455770
mov dword [ebp - 0x494], 1
lea edx, [ebp - 0x494]
push edx
lea eax, [ebp - 0x6ac]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x228]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x228]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x5412fd
push 0x5c
push 0x574ed0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x54124a
push 0x5c
push 0x574f08
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2d8], eax
jmp 0x541254
mov dword [ebp - 0x2d8], 0x574f40
lea eax, [ebp - 0x228]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x82c]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x498], eax
mov edx, dword [ebp - 0x498]
mov dword [ebp - 0x49c], edx
mov byte [ebp - 4], 0x3a
push 0x5b3734
push str.icmp_redirector_address__
push 0x574f7c
push 0xa32
push 0x574f78
mov eax, dword [ebp - 0x2d8]
push eax
push 0x574ecc
mov ecx, dword [ebp - 0x49c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x82c]
call fcn.0041daa0
jmp 0x541207
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x228]
call fcn.0040eae0
mov ecx, 0x5b368c
call fcn.00420980
test eax, eax
jbe 0x541329
push 0x574fa0
mov ecx, 0x5b368c
call fcn.004556d0
mov dword [ebp - 0x4a0], 2
lea ecx, [ebp - 0x4a0]
push ecx
lea edx, [ebp - 0x6b0]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x22c]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x54145a
push 0x5c
push 0x574fa8
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5413a7
push 0x5c
push 0x574fe0
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2dc], eax
jmp 0x5413b1
mov dword [ebp - 0x2dc], 0x575018
lea edx, [ebp - 0x22c]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x838]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], ecx
mov byte [ebp - 4], 0x3c
push 0x5b368c
push str.dns__
push 0x575054
push 0xa39
push 0x575050
mov edx, dword [ebp - 0x2dc]
push edx
push 0x574fa4
mov ecx, dword [ebp - 0x4a8]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x838]
call fcn.0041daa0
jmp 0x541364
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x22c]
call fcn.0040eae0
mov dword [ebp - 0x4ac], 2
lea eax, [ebp - 0x4ac]
push eax
lea ecx, [ebp - 0x6b4]
push ecx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea edx, [ebp - 0x230]
push edx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x230]
call fcn.0040b660
movzx eax, al
test eax, eax
jne 0x54159b
push 0x5c
push 0x575068
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5414e7
push 0x5c
push 0x5750a0
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2e0], eax
jmp 0x5414f1
mov dword [ebp - 0x2e0], 0x5750d8
lea ecx, [ebp - 0x230]
push ecx
call fcn.004e8f50
push eax
lea edx, [ebp - 0x844]
push edx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 0x3e
movzx ecx, byte [0x5b34d0]
push ecx
push str.bypassdns__
push 0x575114
push 0xa3b
push 0x575110
mov edx, dword [ebp - 0x2e0]
push edx
push 0x575064
mov ecx, dword [ebp - 0x4b4]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x844]
call fcn.0041daa0
jmp 0x5414a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
call fcn.0040eae0
mov eax, dword [ebp + 0x40]
mov dword [0x5a61ec], eax
mov ecx, dword [ebp + 0x44]
mov dword [0x5a61e8], ecx
mov dword [ebp - 0x4b8], 1
lea edx, [ebp - 0x4b8]
push edx
lea eax, [ebp - 0x6b8]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x234]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x5416e9
push 0x5c
push 0x575130
call fcn.00507b30
add esp, 8
test eax, eax
je 0x541639
push 0x5c
push 0x575168
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2e4], eax
jmp 0x541643
mov dword [ebp - 0x2e4], 0x5751a0
lea eax, [ebp - 0x234]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x850]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4bc], eax
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c0], edx
mov byte [ebp - 4], 0x40
mov eax, dword [ebp + 0x40]
push eax
push str.tcp_port__
push 0x5751dc
push 0xa41
push 0x5751d8
mov ecx, dword [ebp - 0x2e4]
push ecx
push 0x57512c
mov ecx, dword [ebp - 0x4c0]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x850]
call fcn.0041daa0
jmp 0x5415f6
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x234]
call fcn.0040eae0
mov dword [ebp - 0x4c4], 1
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x6bc]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x238]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x238]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x541828
push 0x5c
push 0x5751f4
call fcn.00507b30
add esp, 8
test eax, eax
je 0x541776
push 0x5c
push 0x57522c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2e8], eax
jmp 0x541780
mov dword [ebp - 0x2e8], 0x575264
lea eax, [ebp - 0x238]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x85c]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4c8], eax
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4cc], edx
mov byte [ebp - 4], 0x42
mov eax, dword [0x5a61e8]
push eax
push str.site_tcp_port__
push 0x5752a0
push 0xa43
push 0x57529c
mov ecx, dword [ebp - 0x2e8]
push ecx
push 0x5751f0
mov ecx, dword [ebp - 0x4cc]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x85c]
call fcn.0041daa0
jmp 0x541733
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x238]
call fcn.0040eae0
mov dword [ebp - 0x4d0], 2
lea edx, [ebp - 0x4d0]
push edx
lea eax, [ebp - 0x6c0]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x23c]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x23c]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x541967
push 0x5c
push 0x5752c0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5418b5
push 0x5c
push 0x5752f8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2ec], eax
jmp 0x5418bf
mov dword [ebp - 0x2ec], 0x575330
lea eax, [ebp - 0x23c]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x868]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4d4], eax
mov edx, dword [ebp - 0x4d4]
mov dword [ebp - 0x4d8], edx
mov byte [ebp - 4], 0x44
mov eax, dword [0x5a61e0]
push eax
push str.tls_dns_port__
push 0x57536c
push 0xa45
push 0x575368
mov ecx, dword [ebp - 0x2ec]
push ecx
push 0x5752bc
mov ecx, dword [ebp - 0x4d8]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x868]
call fcn.0041daa0
jmp 0x541872
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x23c]
call fcn.0040eae0
mov ecx, 0x5b374c
call fcn.00420980
test eax, eax
jbe 0x541ad7
push str.:22583
mov ecx, 0x5b374c
call fcn.004556d0
mov dword [ebp - 0x4dc], 2
lea edx, [ebp - 0x4dc]
push edx
lea eax, [ebp - 0x6c4]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x240]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x240]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x541ac8
push 0x5c
push 0x575390
call fcn.00507b30
add esp, 8
test eax, eax
je 0x541a15
push 0x5c
push 0x5753c8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2f0], eax
jmp 0x541a1f
mov dword [ebp - 0x2f0], 0x575400
lea eax, [ebp - 0x240]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x874]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4e0], eax
mov edx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], edx
mov byte [ebp - 4], 0x46
push 0x5b374c
push str.bypass__ingress__
push 0x57543c
push 0xa4b
push 0x575438
mov eax, dword [ebp - 0x2f0]
push eax
push 0x57538c
mov ecx, dword [ebp - 0x4e4]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x874]
call fcn.0041daa0
jmp 0x5419d2
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x240]
call fcn.0040eae0
call dword [sym.imp.nfapi.dll_void___cdecl_nfapi::nf_adjustProcessPriviledges_void_]
movzx ecx, byte [0x5b34ca]
test ecx, ecx
je 0x541af5
push 1
push 0
call dword [sym.imp.nfapi.dll_void___cdecl_nfapi::nf_setOptions_unsigned_long_int__unsigned_long_int_]
add esp, 8
mov ecx, 0x5b3878
call fcn.004154c0
movzx edx, al
test edx, edx
jne 0x541c43
mov dword [ebp - 0x4e8], 4
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0x6c8]
push ecx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea edx, [ebp - 0x244]
push edx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x244]
call fcn.0040b660
movzx eax, al
test eax, eax
jne 0x541c2d
push 0x5c
push 0x57545c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x541b88
push 0x5c
push 0x575494
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2f4], eax
jmp 0x541b92
mov dword [ebp - 0x2f4], 0x5754cc
lea ecx, [ebp - 0x244]
push ecx
call fcn.004e8f50
push eax
lea edx, [ebp - 0x880]
push edx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4f0], eax
mov byte [ebp - 4], 0x48
push str.failed_to_initialize_the_event_handler
push 0x575508
push 0xa58
push 0x575504
mov ecx, dword [ebp - 0x2f4]
push ecx
push 0x575458
mov ecx, dword [ebp - 0x4f0]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x880]
call fcn.0041daa0
jmp 0x541b45
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x244]
call fcn.0040eae0
push 0
call fcn.0051a2a8
push 0x5b3878
mov ecx, 0x5b362c
call fcn.00455700
push eax
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_init_char_const___class_nfapi::NF_EventHandler__]
add esp, 8
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
je 0x541db8
mov dword [ebp - 0x4f4], 4
lea edx, [ebp - 0x4f4]
push edx
lea eax, [ebp - 0x6cc]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x248]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x248]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x541da2
push 0x5c
push 0x57553c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x541ced
push 0x5c
push 0x575574
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x2fc], eax
jmp 0x541cf7
mov dword [ebp - 0x2fc], 0x5755ac
lea eax, [ebp - 0x248]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x88c]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x4f8], eax
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0x4fc], edx
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x2f8]
push eax
push str.failed_to_connect_to_driver
push 0x5755e8
push 0xa61
push 0x5755e4
mov ecx, dword [ebp - 0x2fc]
push ecx
push 0x575538
mov ecx, dword [ebp - 0x4fc]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429a00
add esp, 8
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x88c]
call fcn.0041daa0
jmp 0x541caa
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
call fcn.0040eae0
push 0
call fcn.0051a2a8
movzx edx, byte [0x5b34bb]
test edx, edx
jne 0x541dce
movzx eax, byte [0x5b34d3]
test eax, eax
je 0x541de6
push 0x5b3c38
call dword [sym.imp.nfapi.dll_void___cdecl_nfapi::nf_setIPEventHandler_class_nfapi::NF_IPEventHandler__]
add esp, 4
mov ecx, 0x5b3c38
call fcn.0041acb0
movzx ecx, byte [0x5b34d0]
test ecx, ecx
jne 0x541f45
mov ecx, 0x5b36a4
call fcn.00420980
test eax, eax
jbe 0x541f45
push 0xa
mov ecx, 0x5b3838
call fcn.00414190
mov dword [ebp - 0x500], 2
lea edx, [ebp - 0x500]
push edx
lea eax, [ebp - 0x770]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x24c]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x24c]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x541f36
push 0x5c
push 0x575610
call fcn.00507b30
add esp, 8
test eax, eax
je 0x541e91
push 0x5c
push 0x575648
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x300], eax
jmp 0x541e9b
mov dword [ebp - 0x300], 0x575680
lea eax, [ebp - 0x24c]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x898]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x504], eax
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x508], edx
mov byte [ebp - 4], 0x4c
push str.open__dns_redirector
push 0x5756bc
push 0xa6f
push 0x5756b8
mov eax, dword [ebp - 0x300]
push eax
push 0x57560c
mov ecx, dword [ebp - 0x508]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x898]
call fcn.0041daa0
jmp 0x541e4e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24c]
call fcn.0040eae0
imul eax, dword [0x5b34cc], 0x3e8
cdq
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edx
imul eax, dword [0x5b34cc], 0x3e8
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
push 0x5b34c4
lea ecx, [ebp - 0x58]
push ecx
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addFlowCtl_struct_nfapi::_NF_FLOWCTL_DATA___unsigned_int__]
add esp, 8
test eax, eax
je 0x5420b3
mov dword [ebp - 0x50c], 4
lea edx, [ebp - 0x50c]
push edx
lea eax, [ebp - 0x6d4]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x250]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x250]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x5420a4
push 0x5c
push 0x5756e0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x541fff
push 0x5c
push 0x575718
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x304], eax
jmp 0x542009
mov dword [ebp - 0x304], 0x575750
lea eax, [ebp - 0x250]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x8a4]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x510], eax
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x514], edx
mov byte [ebp - 4], 0x4e
push 0x575794
push 0x57578c
push 0xa7b
push 0x575788
mov eax, dword [ebp - 0x304]
push eax
push 0x5756dc
mov ecx, dword [ebp - 0x514]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x8a4]
call fcn.0041daa0
jmp 0x541fbc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x250]
call fcn.0040eae0
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
push 0x5b34c0
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addFlowCtl_struct_nfapi::_NF_FLOWCTL_DATA___unsigned_int__]
add esp, 8
test eax, eax
je 0x54220f
mov dword [ebp - 0x518], 4
lea edx, [ebp - 0x518]
push edx
lea eax, [ebp - 0x6d8]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x254]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x542200
push 0x5c
push 0x5757c4
call fcn.00507b30
add esp, 8
test eax, eax
je 0x54215b
push 0x5c
push 0x5757fc
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x308], eax
jmp 0x542165
mov dword [ebp - 0x308], 0x575834
lea eax, [ebp - 0x254]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x8b0]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x51c], eax
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x520], edx
mov byte [ebp - 4], 0x50
push str.unable_to_add_flow_control_context
push 0x575870
push 0xa84
push 0x57586c
mov eax, dword [ebp - 0x308]
push eax
push 0x5757c0
mov ecx, dword [ebp - 0x520]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x8b0]
call fcn.0041daa0
jmp 0x542118
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x254]
call fcn.0040eae0
xorps xmm0, xmm0
movlpd qword [ebp - 0x90], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0x88], xmm0
push 0x5b34bc
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addFlowCtl_struct_nfapi::_NF_FLOWCTL_DATA___unsigned_int__]
add esp, 8
test eax, eax
je 0x542374
mov dword [ebp - 0x524], 4
lea edx, [ebp - 0x524]
push edx
lea eax, [ebp - 0x6dc]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x258]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x258]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x542365
push 0x5c
push 0x5758a0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5422c0
push 0x5c
push 0x5758d8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x30c], eax
jmp 0x5422ca
mov dword [ebp - 0x30c], 0x575910
lea eax, [ebp - 0x258]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x970]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x528], eax
mov edx, dword [ebp - 0x528]
mov dword [ebp - 0x52c], edx
mov byte [ebp - 4], 0x52
push str.unable_to_add_site_flow_control_context
push 0x57594c
push 0xa8d
push 0x575948
mov eax, dword [ebp - 0x30c]
push eax
push 0x57589c
mov ecx, dword [ebp - 0x52c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x970]
call fcn.0041daa0
jmp 0x54227d
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x258]
call fcn.0040eae0
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b327f], 0
mov ecx, 2
mov word [0x5b323d], cx
push 0x57597c
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [0x5b325f], eax
push str.255.0.0.0
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [0x5b326f], eax
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b327f], 0
mov edx, 0x17
mov word [0x5b323d], dx
push 0x5b325f
push str.0:0:0:0:0:ffff:7f00:001
call fcn.005449a0
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
lea ecx, [ebp - 0x638]
call fcn.0041dcb0
mov byte [ebp - 4], 0x53
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x6e0], esp
push str._tu_
push eax
call fcn.00429cd0
add esp, 8
push 0x5b3794
lea ecx, [ebp - 0x638]
push ecx
call fcn.00429d10
add esp, 0x18
lea ecx, [ebp - 0x638]
call fcn.0041dd00
test eax, eax
jbe 0x542911
mov dword [ebp - 0x1ec], 0
jmp 0x542486
mov edx, dword [ebp - 0x1ec]
add edx, 1
mov dword [ebp - 0x1ec], edx
lea ecx, [ebp - 0x638]
call fcn.0041dd00
cmp dword [ebp - 0x1ec], eax
jae 0x542911
lea ecx, [ebp - 0x2bc]
call fcn.0041dcb0
mov byte [ebp - 4], 0x54
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x6e4], esp
push 0x5759b0
push eax
call fcn.00429cd0
add esp, 8
mov ecx, dword [ebp - 0x1ec]
push ecx
lea ecx, [ebp - 0x638]
call fcn.0041dce0
push eax
lea edx, [ebp - 0x2bc]
push edx
call fcn.00429d10
add esp, 0x18
lea ecx, [ebp - 0x2bc]
call fcn.0041dd00
cmp eax, 2
jne 0x5428fd
lea ecx, [ebp - 0x74c]
call fcn.00409680
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x534], eax
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x1cc]
or ecx, 1
mov dword [ebp - 0x1cc], ecx
mov edx, dword [ebp - 0x534]
push edx
push 0x5759b4
push 0
lea ecx, [ebp - 0x2bc]
call fcn.0041dce0
push eax
call fcn.00429db0
add esp, 0xc
movzx eax, al
test eax, eax
jne 0x5425be
lea ecx, [ebp - 0x744]
call fcn.00409680
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp - 0x538]
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 4], 0x56
mov edx, dword [ebp - 0x1cc]
or edx, 2
mov dword [ebp - 0x1cc], edx
mov eax, dword [ebp - 0x53c]
push eax
push 0x5759b8
push 0
lea ecx, [ebp - 0x2bc]
call fcn.0041dce0
push eax
call fcn.00429db0
add esp, 0xc
movzx ecx, al
test ecx, ecx
jne 0x5425be
mov dword [ebp - 0x310], 0
jmp 0x5425c8
mov dword [ebp - 0x310], 1
mov dl, byte [ebp - 0x310]
mov byte [ebp - 0x1d5], dl
mov dword [ebp - 4], 0x55
mov eax, dword [ebp - 0x1cc]
and eax, 2
je 0x5425f8
and dword [ebp - 0x1cc], 0xfffffffd
lea ecx, [ebp - 0x744]
call fcn.004096d0
mov dword [ebp - 4], 0x54
mov ecx, dword [ebp - 0x1cc]
and ecx, 1
je 0x54261c
and dword [ebp - 0x1cc], 0xfffffffe
lea ecx, [ebp - 0x74c]
call fcn.004096d0
movzx edx, byte [ebp - 0x1d5]
test edx, edx
je 0x5428fd
lea ecx, [ebp - 0x688]
call fcn.0041dcb0
mov byte [ebp - 4], 0x57
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x6e8], esp
push 0x5759bc
push eax
call fcn.00429cd0
add esp, 8
push 1
lea ecx, [ebp - 0x2bc]
call fcn.0041dce0
push eax
lea ecx, [ebp - 0x688]
push ecx
call fcn.00429d10
add esp, 0x18
mov dword [ebp - 0x540], 2
lea edx, [ebp - 0x540]
push edx
lea eax, [ebp - 0x6ec]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x25c]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x25c]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x5427cf
push 0x5c
push 0x5759c4
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5426f0
push 0x5c
push 0x5759fc
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x394], eax
jmp 0x5426fa
mov dword [ebp - 0x394], 0x575a34
lea eax, [ebp - 0x25c]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x8c8]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x544], eax
mov edx, dword [ebp - 0x544]
mov dword [ebp - 0x548], edx
mov byte [ebp - 4], 0x59
push 0
lea ecx, [ebp - 0x2bc]
call fcn.0041dce0
push eax
push 0x575a8c
push 1
lea ecx, [ebp - 0x2bc]
call fcn.0041dce0
push eax
push str.bypass__address__:
push 0x575a70
push 0xab4
push 0x575a6c
mov eax, dword [ebp - 0x394]
push eax
push 0x5759c0
mov ecx, dword [ebp - 0x548]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x8c8]
call fcn.0041daa0
jmp 0x5426ad
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x25c]
call fcn.0040eae0
mov dword [ebp - 0x1f0], 0
jmp 0x5427f9
mov ecx, dword [ebp - 0x1f0]
add ecx, 1
mov dword [ebp - 0x1f0], ecx
lea ecx, [ebp - 0x688]
call fcn.0041dd00
cmp dword [ebp - 0x1f0], eax
jae 0x5428ee
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b327f], 0
mov edx, 2
mov word [0x5b323d], dx
lea ecx, [ebp - 0x754]
call fcn.00409680
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x550], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x550]
push ecx
push str.t_tu_
push 0
lea ecx, [ebp - 0x2bc]
call fcn.0041dce0
push eax
call fcn.00429db0
add esp, 0xc
movzx edx, al
test edx, edx
je 0x542890
mov dword [ebp - 0x318], 6
jmp 0x54289a
mov dword [ebp - 0x318], 0x11
mov eax, dword [ebp - 0x318]
mov dword [0x5b3230], eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x754]
call fcn.004096d0
mov ecx, dword [ebp - 0x1f0]
push ecx
lea ecx, [ebp - 0x688]
call fcn.0041dce0
mov ecx, eax
call fcn.00455700
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [0x5b325f], eax
push 1
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
jmp 0x5427ea
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x688]
call fcn.0041fed0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x2bc]
call fcn.0041fed0
jmp 0x542477
lea ecx, [ebp - 0x62c]
call fcn.0041dcb0
mov byte [ebp - 4], 0x5b
push 1
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x6f0], esp
push 0x575a98
push edx
call fcn.00429cd0
add esp, 8
push 0x5b377c
lea eax, [ebp - 0x62c]
push eax
call fcn.00429d10
add esp, 0x18
lea ecx, [ebp - 0x62c]
call fcn.0041dd00
test eax, eax
jbe 0x542e00
mov dword [ebp - 0x1f4], 0
jmp 0x54297d
mov ecx, dword [ebp - 0x1f4]
add ecx, 1
mov dword [ebp - 0x1f4], ecx
lea ecx, [ebp - 0x62c]
call fcn.0041dd00
cmp dword [ebp - 0x1f4], eax
jae 0x542e00
lea ecx, [ebp - 0x2c8]
call fcn.0041dcb0
mov byte [ebp - 4], 0x5c
push 1
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x6f4], esp
push 0x575a9c
push edx
call fcn.00429cd0
add esp, 8
mov eax, dword [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x62c]
call fcn.0041dce0
push eax
lea ecx, [ebp - 0x2c8]
push ecx
call fcn.00429d10
add esp, 0x18
lea ecx, [ebp - 0x2c8]
call fcn.0041dd00
cmp eax, 2
jne 0x542dec
lea ecx, [ebp - 0x764]
call fcn.00409680
mov dword [ebp - 0x554], eax
mov edx, dword [ebp - 0x554]
mov dword [ebp - 0x558], edx
mov byte [ebp - 4], 0x5d
mov eax, dword [ebp - 0x1cc]
or eax, 4
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x558]
push ecx
push 0x575aa0
push 0
lea ecx, [ebp - 0x2c8]
call fcn.0041dce0
push eax
call fcn.00429db0
add esp, 0xc
movzx edx, al
test edx, edx
jne 0x542ab5
lea ecx, [ebp - 0x75c]
call fcn.00409680
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x560], eax
mov dword [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x1cc]
or ecx, 8
mov dword [ebp - 0x1cc], ecx
mov edx, dword [ebp - 0x560]
push edx
push 0x575aa4
push 0
lea ecx, [ebp - 0x2c8]
call fcn.0041dce0
push eax
call fcn.00429db0
add esp, 0xc
movzx eax, al
test eax, eax
jne 0x542ab5
mov dword [ebp - 0x31c], 0
jmp 0x542abf
mov dword [ebp - 0x31c], 1
mov cl, byte [ebp - 0x31c]
mov byte [ebp - 0x1d6], cl
mov dword [ebp - 4], 0x5d
mov edx, dword [ebp - 0x1cc]
and edx, 8
je 0x542aef
and dword [ebp - 0x1cc], 0xfffffff7
lea ecx, [ebp - 0x75c]
call fcn.004096d0
mov dword [ebp - 4], 0x5c
mov eax, dword [ebp - 0x1cc]
and eax, 4
je 0x542b13
and dword [ebp - 0x1cc], 0xfffffffb
lea ecx, [ebp - 0x764]
call fcn.004096d0
movzx ecx, byte [ebp - 0x1d6]
test ecx, ecx
je 0x542dec
lea ecx, [ebp - 0x694]
call fcn.0041dcb0
mov byte [ebp - 4], 0x5f
push 1
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x6f8], esp
push 0x575aa8
push edx
call fcn.00429cd0
add esp, 8
push 1
lea ecx, [ebp - 0x2c8]
call fcn.0041dce0
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00429d10
add esp, 0x18
mov dword [ebp - 0x564], 2
lea ecx, [ebp - 0x564]
push ecx
lea edx, [ebp - 0x6fc]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x260]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x542cc6
push 0x5c
push 0x575ab0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x542be7
push 0x5c
push 0x575ae8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x320], eax
jmp 0x542bf1
mov dword [ebp - 0x320], 0x575b20
lea edx, [ebp - 0x260]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x568], eax
mov ecx, dword [ebp - 0x568]
mov dword [ebp - 0x56c], ecx
mov byte [ebp - 4], 0x61
push 0
lea ecx, [ebp - 0x2c8]
call fcn.0041dce0
push eax
push str._flag_:
push 1
lea ecx, [ebp - 0x2c8]
call fcn.0041dce0
push eax
push str.bypass__port__:
push 0x575b5c
push 0xada
push 0x575b58
mov edx, dword [ebp - 0x320]
push edx
push 0x575aac
mov ecx, dword [ebp - 0x56c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x8d4]
call fcn.0041daa0
jmp 0x542ba4
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x260]
call fcn.0040eae0
mov dword [ebp - 0x1f8], 0
jmp 0x542cf0
mov eax, dword [ebp - 0x1f8]
add eax, 1
mov dword [ebp - 0x1f8], eax
lea ecx, [ebp - 0x694]
call fcn.0041dd00
cmp dword [ebp - 0x1f8], eax
jae 0x542ddd
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b327f], 0
lea ecx, [ebp - 0x76c]
call fcn.00409680
mov dword [ebp - 0x570], eax
mov ecx, dword [ebp - 0x570]
mov dword [ebp - 0x574], ecx
mov byte [ebp - 4], 0x62
mov edx, dword [ebp - 0x574]
push edx
push 0x575b80
push 0
lea ecx, [ebp - 0x2c8]
call fcn.0041dce0
push eax
call fcn.00429db0
add esp, 0xc
movzx eax, al
test eax, eax
je 0x542d7b
mov dword [ebp - 0x324], 6
jmp 0x542d85
mov dword [ebp - 0x324], 0x11
mov ecx, dword [ebp - 0x324]
mov dword [0x5b3230], ecx
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x76c]
call fcn.004096d0
mov edx, dword [ebp - 0x1f8]
push edx
lea ecx, [ebp - 0x694]
call fcn.0041dce0
push eax
call fcn.00429ec0
add esp, 4
push eax
call dword [sym.imp.WS2_32.dll_htons]
mov word [0x5b323b], ax
push 1
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
jmp 0x542ce1
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x694]
call fcn.0041fed0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x2c8]
call fcn.0041fed0
jmp 0x54296e
mov dword [ebp - 0x1e4], 0
jmp 0x542e1b
mov eax, dword [ebp - 0x1e4]
add eax, 1
mov dword [ebp - 0x1e4], eax
mov ecx, 0x5b35f8
call fcn.0041dd00
cmp dword [ebp - 0x1e4], eax
jae 0x54317b
mov ecx, dword [ebp - 0x1e4]
push ecx
mov ecx, 0x5b35f8
call fcn.0041dce0
mov ecx, eax
call fcn.00420980
test eax, eax
jbe 0x543176
mov dword [ebp - 0x578], 1
lea edx, [ebp - 0x578]
push edx
lea eax, [ebp - 0x700]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x264]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x264]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x542fca
push 0x5c
push 0x575b88
call fcn.00507b30
add esp, 8
test eax, eax
je 0x542ecf
push 0x5c
push 0x575bc0
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x328], eax
jmp 0x542ed9
mov dword [ebp - 0x328], 0x575bf8
mov eax, dword [ebp - 0x1e4]
push eax
mov ecx, 0x5b35f8
call fcn.0041dce0
push eax
lea ecx, [ebp - 0x1b0]
push ecx
call fcn.005479c0
add esp, 8
mov dword [ebp - 0x57c], eax
mov edx, dword [ebp - 0x57c]
mov dword [ebp - 0x584], edx
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x264]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x8e0]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x580], eax
mov edx, dword [ebp - 0x580]
mov dword [ebp - 0x588], edx
mov byte [ebp - 4], 0x65
mov eax, dword [ebp - 0x584]
push eax
push str.add_bypass_app_:
push 0x575c34
push 0xaec
push 0x575c30
mov ecx, dword [ebp - 0x328]
push ecx
push 0x575b84
mov ecx, dword [ebp - 0x588]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x8e0]
call fcn.0041daa0
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x1b0]
call fcn.00457990
jmp 0x542e8c
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x264]
call fcn.0040eae0
push 0x575c50
lea ecx, [ebp - 0x70]
call fcn.00420aa0
mov byte [ebp - 4], 0x66
mov edx, dword [ebp - 0x1e4]
push edx
mov ecx, 0x5b35f8
call fcn.0041dce0
push eax
lea ecx, [ebp - 0x70]
call fcn.00420a00
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b3230], 6
mov eax, 2
mov word [0x5b323d], ax
mov dword [0x5b327f], 0
lea ecx, [ebp - 0x70]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b3230], 6
mov ecx, 0x17
mov word [0x5b323d], cx
mov dword [0x5b327f], 0
lea ecx, [ebp - 0x70]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b3230], 0x11
mov edx, 2
mov word [0x5b323d], dx
mov dword [0x5b327f], 0
lea ecx, [ebp - 0x70]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b3230], 0x11
mov eax, 0x17
mov word [0x5b323d], ax
mov dword [0x5b327f], 0
lea ecx, [ebp - 0x70]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x70]
call fcn.00455260
jmp 0x542e0c
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov ecx, 2
mov word [0x5b323d], cx
mov dword [0x5b3230], 0x11
mov dword [0x5b327f], 2
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
movzx edx, byte [0x5b34b9]
test edx, edx
je 0x543352
mov dword [ebp - 0x58c], 2
lea eax, [ebp - 0x58c]
push eax
lea ecx, [ebp - 0x704]
push ecx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea edx, [ebp - 0x268]
push edx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x268]
call fcn.0040b660
movzx eax, al
test eax, eax
jne 0x5432f1
push 0x5c
push 0x575c58
call fcn.00507b30
add esp, 8
test eax, eax
je 0x54324c
push 0x5c
push 0x575c90
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x32c], eax
jmp 0x543256
mov dword [ebp - 0x32c], 0x575cc8
lea ecx, [ebp - 0x268]
push ecx
call fcn.004e8f50
push eax
lea edx, [ebp - 0x8ec]
push edx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x594], eax
mov byte [ebp - 4], 0x68
push str.open_filter_ipv6_dns_udp_packet
push 0x575d04
push 0xb1b
push 0x575d00
mov ecx, dword [ebp - 0x32c]
push ecx
push 0x575c54
mov ecx, dword [ebp - 0x594]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x8ec]
call fcn.0041daa0
jmp 0x543209
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x268]
call fcn.0040eae0
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov edx, 0x17
mov word [0x5b323d], dx
mov dword [0x5b3230], 0x11
push 0x35
call dword [sym.imp.WS2_32.dll_htons]
mov word [0x5b323b], ax
mov dword [0x5b327f], 2
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
call fcn.0040aeb0
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x1dc], 0
jmp 0x543378
mov eax, dword [ebp - 0x1dc]
add eax, 1
mov dword [ebp - 0x1dc], eax
mov ecx, 0x5b35d4
call fcn.0041dd00
cmp dword [ebp - 0x1dc], eax
jae 0x5437db
mov ecx, dword [ebp - 0x1dc]
push ecx
mov ecx, 0x5b35d4
call fcn.0041dce0
mov ecx, eax
call fcn.00420980
test eax, eax
jbe 0x5436a4
mov dword [ebp - 0x598], 1
lea edx, [ebp - 0x598]
push edx
lea eax, [ebp - 0x70c]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x26c]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x26c]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x543527
push 0x5c
push 0x575d30
call fcn.00507b30
add esp, 8
test eax, eax
je 0x54342c
push 0x5c
push 0x575d68
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x330], eax
jmp 0x543436
mov dword [ebp - 0x330], 0x575da0
mov eax, dword [ebp - 0x1dc]
push eax
mov ecx, 0x5b35d4
call fcn.0041dce0
push eax
lea ecx, [ebp - 0x1c8]
push ecx
call fcn.005479c0
add esp, 8
mov dword [ebp - 0x59c], eax
mov edx, dword [ebp - 0x59c]
mov dword [ebp - 0x5a4], edx
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x26c]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x8f8]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x5a0], eax
mov edx, dword [ebp - 0x5a0]
mov dword [ebp - 0x5a8], edx
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0x5a4]
push eax
push str.add_game_app_:
push 0x575ddc
push 0xb2b
push 0x575dd8
mov ecx, dword [ebp - 0x330]
push ecx
push 0x575d2c
mov ecx, dword [ebp - 0x5a8]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x8f8]
call fcn.0041daa0
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x1c8]
call fcn.00457990
jmp 0x5433e9
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x26c]
call fcn.0040eae0
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
movzx edx, byte [0x5b34b8]
test edx, edx
je 0x543566
push 0x1bb
call dword [sym.imp.WS2_32.dll_htons]
mov word [0x5b323b], ax
mov dword [0x5b3230], 6
mov byte [0x5b3238], 2
mov dword [0x5b327f], 0x210
push 0x575df8
lea ecx, [ebp - 0xc0]
call fcn.00420aa0
mov byte [ebp - 4], 0x6c
mov eax, dword [ebp - 0x1dc]
push eax
mov ecx, 0x5b35d4
call fcn.0041dce0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00420a00
lea ecx, [ebp - 0xc0]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
movzx ecx, byte [0x5b34b8]
test ecx, ecx
je 0x543690
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
push 0x50
call dword [sym.imp.WS2_32.dll_htons]
mov word [0x5b323b], ax
mov dword [0x5b3230], 6
mov byte [0x5b3238], 2
mov dword [0x5b327f], 0x210
push 0x575dfc
lea ecx, [ebp - 0xa8]
call fcn.00420aa0
mov byte [ebp - 4], 0x6d
mov edx, dword [ebp - 0x1dc]
push edx
mov ecx, 0x5b35d4
call fcn.0041dce0
push eax
lea ecx, [ebp - 0xa8]
call fcn.00420a00
lea ecx, [ebp - 0xa8]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0xa8]
call fcn.00455260
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xc0]
call fcn.00455260
jmp 0x5437d6
mov dword [ebp - 0x5ac], 3
lea eax, [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0x710]
push ecx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea edx, [ebp - 0x270]
push edx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x270]
call fcn.0040b660
movzx eax, al
test eax, eax
jne 0x5437c7
push 0x5c
push 0x575e04
call fcn.00507b30
add esp, 8
test eax, eax
je 0x543722
push 0x5c
push 0x575e3c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x334], eax
jmp 0x54372c
mov dword [ebp - 0x334], 0x575e74
lea ecx, [ebp - 0x270]
push ecx
call fcn.004e8f50
push eax
lea edx, [ebp - 0x904]
push edx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x5b4], eax
mov byte [ebp - 4], 0x6f
push str.add_game_app_size___0
push 0x575eb0
push 0xb46
push 0x575eac
mov ecx, dword [ebp - 0x334]
push ecx
push 0x575e00
mov ecx, dword [ebp - 0x5b4]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x904]
call fcn.0041daa0
jmp 0x5436df
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x270]
call fcn.0040eae0
jmp 0x543369
mov dword [ebp - 0x1e0], 0
jmp 0x5437f6
mov edx, dword [ebp - 0x1e0]
add edx, 1
mov dword [ebp - 0x1e0], edx
mov ecx, 0x5b35e0
call fcn.0041dd00
cmp dword [ebp - 0x1e0], eax
jae 0x543c59
mov eax, dword [ebp - 0x1e0]
push eax
mov ecx, 0x5b35e0
call fcn.0041dce0
mov ecx, eax
call fcn.00420980
test eax, eax
jbe 0x543b22
mov dword [ebp - 0x5b8], 1
lea ecx, [ebp - 0x5b8]
push ecx
lea edx, [ebp - 0x714]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x274]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x5439a5
push 0x5c
push 0x575ed4
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5438aa
push 0x5c
push 0x575f0c
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x338], eax
jmp 0x5438b4
mov dword [ebp - 0x338], 0x575f44
mov edx, dword [ebp - 0x1e0]
push edx
mov ecx, 0x5b35e0
call fcn.0041dce0
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.005479c0
add esp, 8
mov dword [ebp - 0x5bc], eax
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp - 0x5c4], ecx
mov byte [ebp - 4], 0x71
lea edx, [ebp - 0x274]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0x910]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x5c0], eax
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c8], ecx
mov byte [ebp - 4], 0x72
mov edx, dword [ebp - 0x5c4]
push edx
push str.add_site_app_:
push 0x575f80
push 0xb4e
push 0x575f7c
mov eax, dword [ebp - 0x338]
push eax
push 0x575ed0
mov ecx, dword [ebp - 0x5c8]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x910]
call fcn.0041daa0
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x138]
call fcn.00457990
jmp 0x543867
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x274]
call fcn.0040eae0
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
movzx ecx, byte [0x5b34b3]
test ecx, ecx
je 0x5439e4
push 0x1bb
call dword [sym.imp.WS2_32.dll_htons]
mov word [0x5b323b], ax
mov dword [0x5b3230], 6
mov byte [0x5b3238], 2
mov dword [0x5b327f], 0x210
push 0x575f9c
lea ecx, [ebp - 0xf0]
call fcn.00420aa0
mov byte [ebp - 4], 0x73
mov edx, dword [ebp - 0x1e0]
push edx
mov ecx, 0x5b35e0
call fcn.0041dce0
push eax
lea ecx, [ebp - 0xf0]
call fcn.00420a00
lea ecx, [ebp - 0xf0]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
movzx eax, byte [0x5b34b3]
test eax, eax
je 0x543b0e
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
push 0x50
call dword [sym.imp.WS2_32.dll_htons]
mov word [0x5b323b], ax
mov dword [0x5b3230], 6
mov byte [0x5b3238], 2
mov dword [0x5b327f], 0x210
push 0x575fa0
lea ecx, [ebp - 0xd8]
call fcn.00420aa0
mov byte [ebp - 4], 0x74
mov ecx, dword [ebp - 0x1e0]
push ecx
mov ecx, 0x5b35e0
call fcn.0041dce0
push eax
lea ecx, [ebp - 0xd8]
call fcn.00420a00
lea ecx, [ebp - 0xd8]
call fcn.0043b920
push eax
push 0x5b3283
call fcn.0051a2be
add esp, 8
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0xd8]
call fcn.00455260
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xf0]
call fcn.00455260
jmp 0x543c54
mov dword [ebp - 0x5cc], 3
lea edx, [ebp - 0x5cc]
push edx
lea eax, [ebp - 0x718]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x278]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x278]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x543c45
push 0x5c
push 0x575fa8
call fcn.00507b30
add esp, 8
test eax, eax
je 0x543ba0
push 0x5c
push 0x575fe0
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x33c], eax
jmp 0x543baa
mov dword [ebp - 0x33c], 0x576018
lea eax, [ebp - 0x278]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x91c]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x5d0], eax
mov edx, dword [ebp - 0x5d0]
mov dword [ebp - 0x5d4], edx
mov byte [ebp - 4], 0x76
push str.add_site_app_size___0
push 0x576054
push 0xb67
push 0x576050
mov eax, dword [ebp - 0x33c]
push eax
push 0x575fa4
mov ecx, dword [ebp - 0x5d4]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x91c]
call fcn.0041daa0
jmp 0x543b5d
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x278]
call fcn.0040eae0
jmp 0x5437e7
movzx ecx, byte [0x5b34ba]
test ecx, ecx
je 0x543cb9
movzx edx, byte [0x5b34b8]
test edx, edx
jne 0x543cb9
movzx eax, byte [0x5b34b3]
test eax, eax
jne 0x543cb9
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov dword [0x5b3230], 6
mov byte [0x5b3238], 2
mov dword [0x5b327f], 0x210
push 0
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
mov ecx, 0x5b3624
call fcn.0041d430
movzx ecx, al
test ecx, ecx
jne 0x543f3c
lea edx, [ebp - 0x1e8]
push edx
mov ecx, 0x5b3624
call fcn.0041d490
jmp 0x543cec
lea ecx, [ebp - 0x1e8]
call fcn.0041d500
lea eax, [ebp - 0x71c]
push eax
mov ecx, 0x5b3624
call fcn.0041d460
push eax
lea ecx, [ebp - 0x1e8]
call fcn.0041d340
movzx ecx, al
test ecx, ecx
je 0x543f3c
push 0x38
push 0
lea edx, [ebp - 0x48]
push edx
call fcn.00505a60
add esp, 0xc
mov dword [ebp - 0x1d0], 0x38
lea ecx, [ebp - 0x1e8]
call fcn.0041d320
add eax, 0x18
mov ecx, eax
call fcn.00455700
mov dword [ebp - 0x5f0], eax
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x720], esp
push 0x576074
call fcn.00455e60
mov dword [ebp - 0x724], eax
mov byte [ebp - 4], 0x77
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x728], esp
lea ecx, [ebp - 0x1e8]
call fcn.0041d320
push eax
mov ecx, esi
call fcn.00456b10
lea eax, [ebp - 0x928]
push eax
mov byte [ebp - 4], 0x5b
call fcn.00547800
add esp, 0x34
mov dword [ebp - 0x5d8], eax
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp - 0x5dc], ecx
mov byte [ebp - 4], 0x78
mov ecx, dword [ebp - 0x5dc]
call fcn.0041dce0
mov dword [ebp - 0x5e0], eax
mov edx, dword [ebp - 0x5e0]
push edx
lea ecx, [ebp - 0x120]
call fcn.00456b10
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x928]
call fcn.0041fed0
push 1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x72c], esp
push 0x576078
call fcn.00455e60
mov dword [ebp - 0x730], eax
mov byte [ebp - 4], 0x7b
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x734], esp
lea ecx, [ebp - 0x1e8]
call fcn.0041d320
push eax
mov ecx, esi
call fcn.00456b10
lea eax, [ebp - 0x934]
push eax
mov byte [ebp - 4], 0x7a
call fcn.00547800
add esp, 0x34
mov dword [ebp - 0x5e4], eax
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp - 0x5e8], ecx
mov ecx, dword [ebp - 0x5e8]
call fcn.0041dce0
mov dword [ebp - 0x5ec], eax
mov ecx, dword [ebp - 0x5ec]
call fcn.00455700
push eax
call fcn.0051b1d2
add esp, 4
mov dword [ebp - 0x5f4], eax
lea ecx, [ebp - 0x934]
call fcn.0041fed0
lea edx, [ebp - 0x1d0]
push edx
lea eax, [ebp - 0x48]
push eax
push 0
push 2
mov ecx, dword [ebp - 0x5f0]
push ecx
call dword [sym.imp.WS2_32.dll_WSAStringToAddressA]
mov dword [ebp - 0x1d4], eax
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov edx, 2
mov word [0x5b323d], dx
mov dword [0x5b3230], 6
mov dword [0x5b327f], 0x402
mov byte [0x5b3238], 2
lea ecx, [ebp - 0x120]
call fcn.00455700
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [0x5b325f], eax
movzx eax, word [ebp - 0x5f4]
push eax
call dword [sym.imp.WS2_32.dll_htons]
mov word [0x5b323b], ax
push 0x10
lea ecx, [ebp - 0x48]
push ecx
push 0x5b3493
call fcn.00505bc0
add esp, 0xc
push 1
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x120]
call fcn.00457990
jmp 0x543ce1
cmp dword [0x5b34b4], 0
je 0x5440c6
push 0x283
push 0
push 0x5b3230
call fcn.00505a60
add esp, 0xc
mov edx, 2
mov word [0x5b323d], dx
mov dword [0x5b3230], 1
mov byte [0x5b3238], 2
mov dword [0x5b327f], 0x80
push 1
push 0x5b3230
call dword [sym.imp.nfapi.dll_enum__NF_STATUS___cdecl_nfapi::nf_addRuleEx_struct_nfapi::_NF_RULE_EX___int_]
add esp, 8
mov dword [ebp - 0x5f8], 2
lea eax, [ebp - 0x5f8]
push eax
lea ecx, [ebp - 0x738]
push ecx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea edx, [ebp - 0x27c]
push edx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x27c]
call fcn.0040b660
movzx eax, al
test eax, eax
jne 0x5440b7
push 0x5c
push 0x576080
call fcn.00507b30
add esp, 8
test eax, eax
je 0x544012
push 0x5c
push 0x5760b8
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x340], eax
jmp 0x54401c
mov dword [ebp - 0x340], 0x5760f0
lea ecx, [ebp - 0x27c]
push ecx
call fcn.004e8f50
push eax
lea edx, [ebp - 0x940]
push edx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x600], eax
mov byte [ebp - 4], 0x7d
push str.icmp_ruler_open
push 0x57612c
push 0xb9b
push 0x576128
mov ecx, dword [ebp - 0x340]
push ecx
push 0x57607c
mov ecx, dword [ebp - 0x600]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x940]
call fcn.0041daa0
jmp 0x543fcf
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x27c]
call fcn.0040eae0
mov dword [ebp - 0x604], 2
lea edx, [ebp - 0x604]
push edx
lea eax, [ebp - 0x73c]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0x280]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x280]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x5441e9
push 0x5c
push 0x576148
call fcn.00507b30
add esp, 8
test eax, eax
je 0x544144
push 0x5c
push 0x576180
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0x344], eax
jmp 0x54414e
mov dword [ebp - 0x344], 0x5761b8
lea eax, [ebp - 0x280]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x94c]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0x608], eax
mov edx, dword [ebp - 0x608]
mov dword [ebp - 0x60c], edx
mov byte [ebp - 4], 0x7f
push str.started
push 0x5761f4
push 0xb9f
push 0x5761f0
mov eax, dword [ebp - 0x344]
push eax
push 0x576144
mov ecx, dword [ebp - 0x60c]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x94c]
call fcn.0041daa0
jmp 0x544101
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x280]
call fcn.0040eae0
mov byte [0x5b34d1], 1
push 0x544de0
lea ecx, [ebp - 0xa2c]
push ecx
call fcn.00429ef0
add esp, 8
push eax
lea ecx, [ebp - 0x614]
call fcn.00429f10
mov dword [ebp - 0x610], eax
mov edx, dword [ebp - 0x610]
push edx
mov ecx, 0x5b3830
call fcn.00413bf0
lea ecx, [ebp - 0x614]
call fcn.00413ba0
push 1
call fcn.005195d0
add esp, 4
push eax
call fcn.0051a5f0
add esp, 4
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x62c]
call fcn.0041fed0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x638]
call fcn.0041fed0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
call fcn.00455260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x28]
call fcn.00455260
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a1084
mov esp, ebp
pop ebp
ret