Function at 0x538080
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55d9f9
mov eax, dword fs:[0]
push eax
mov eax, 0x100c
call fcn.004a22e0
mov eax, dword [0x5a5014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xe5c], 0
push 0x535ea0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.005479f0
xor eax, eax
mov byte [ebp - 0xe77], al
push 1
lea ecx, [ebp - 0xe77]
call fcn.00537fe0
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea ecx, [ebp - 0x6c]
call fcn.00411d00
mov dword [ebp - 4], 0
push str.Proxy_Address
lea ecx, [ebp - 0xb94]
call fcn.00455e60
mov byte [ebp - 4], 1
push 0x5782c0
lea ecx, [ebp - 0xb7c]
call fcn.00455e60
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf64], esp
push 0x572929
call fcn.00455e60
push 0
lea ecx, [ebp - 0xb94]
push ecx
push 0x61
lea edx, [ebp - 0xb7c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb7c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb94]
call fcn.00457990
push str.site_proxy_address
lea ecx, [ebp - 0xbc4]
call fcn.00455e60
mov byte [ebp - 4], 3
push 0x5782dc
lea ecx, [ebp - 0xbac]
call fcn.00455e60
mov byte [ebp - 4], 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xfb0], esp
push 0x57292a
call fcn.00455e60
push 0
lea eax, [ebp - 0xbc4]
push eax
push 0
lea ecx, [ebp - 0xbac]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xbac]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xbc4]
call fcn.00457990
push str.Process_Names
lea ecx, [ebp - 0xbf4]
call fcn.00455e60
mov byte [ebp - 4], 5
push 0x5782fc
lea ecx, [ebp - 0xbdc]
call fcn.00455e60
mov byte [ebp - 4], 6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xfb8], esp
push 0x57292b
call fcn.00455e60
push 0
lea edx, [ebp - 0xbf4]
push edx
push 0x70
lea eax, [ebp - 0xbdc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xbdc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xbf4]
call fcn.00457990
push str.site_process_names
lea ecx, [ebp - 0xc24]
call fcn.00455e60
mov byte [ebp - 4], 7
push 0x578318
lea ecx, [ebp - 0xc0c]
call fcn.00455e60
mov byte [ebp - 4], 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf18], esp
push 0x572953
call fcn.00455e60
push 0
lea ecx, [ebp - 0xc24]
push ecx
push 0
lea edx, [ebp - 0xc0c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xc0c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc24]
call fcn.00457990
push str.Pipe_Guid
lea ecx, [ebp - 0xc54]
call fcn.00455e60
mov byte [ebp - 4], 9
push 0x578334
lea ecx, [ebp - 0xc3c]
call fcn.00455e60
mov byte [ebp - 4], 0xa
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf1c], esp
push 0x572966
call fcn.00455e60
push 0
lea eax, [ebp - 0xc54]
push eax
push 0x67
lea ecx, [ebp - 0xc3c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc3c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc54]
call fcn.00457990
push str.print_help
lea ecx, [ebp - 0x9cc]
call fcn.00455e60
mov byte [ebp - 4], 0xb
push 0x578348
lea ecx, [ebp - 0xc6c]
call fcn.00455e60
mov byte [ebp - 4], 0xc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf20], esp
push 0x572967
call fcn.00455e60
push 0
lea edx, [ebp - 0x9cc]
push edx
push 0x68
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xc6c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9cc]
call fcn.00457990
push 0x578350
lea ecx, [ebp - 0xcb4]
call fcn.00455e60
mov byte [ebp - 4], 0xd
push 0x578354
lea ecx, [ebp - 0xc9c]
call fcn.00455e60
mov byte [ebp - 4], 0xe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf24], esp
push 0x572979
call fcn.00455e60
push 0
lea ecx, [ebp - 0xcb4]
push ecx
push 0x6d
lea edx, [ebp - 0xc9c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xc9c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcb4]
call fcn.00457990
push str.Tcp_Port
lea ecx, [ebp - 0xce4]
call fcn.00455e60
mov byte [ebp - 4], 0xf
push 0x578368
lea ecx, [ebp - 0xccc]
call fcn.00455e60
mov byte [ebp - 4], 0x10
push 0x2254
push 0
lea eax, [ebp - 0xce4]
push eax
push 0x74
lea ecx, [ebp - 0xccc]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a130
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xccc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xce4]
call fcn.00457990
push 0x57836c
lea ecx, [ebp - 0xd14]
call fcn.00455e60
mov byte [ebp - 4], 0x11
push 0x578378
lea ecx, [ebp - 0xcfc]
call fcn.00455e60
mov byte [ebp - 4], 0x12
push 0x225f
push 0
lea edx, [ebp - 0xd14]
push edx
push 0
lea eax, [ebp - 0xcfc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a130
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xcfc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd14]
call fcn.00457990
push str.limit_Process_Names
lea ecx, [ebp - 0xd44]
call fcn.00455e60
mov byte [ebp - 4], 0x13
push 0x578398
lea ecx, [ebp - 0xd2c]
call fcn.00455e60
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf28], esp
push 0x57297a
call fcn.00455e60
push 0
lea ecx, [ebp - 0xd44]
push ecx
push 0x6c
lea edx, [ebp - 0xd2c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xd2c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd44]
call fcn.00457990
push 0x5783a8
lea ecx, [ebp - 0xd74]
call fcn.00455e60
mov byte [ebp - 4], 0x15
push 0x5783b4
lea ecx, [ebp - 0xd5c]
call fcn.00455e60
mov byte [ebp - 4], 0x16
push 0
push 0
lea eax, [ebp - 0xd74]
push eax
push 0x73
lea ecx, [ebp - 0xd5c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a130
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd5c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd74]
call fcn.00457990
push 0x5783c0
lea ecx, [ebp - 0xb4]
call fcn.00455e60
mov byte [ebp - 4], 0x17
push 0x5783d0
lea ecx, [ebp - 0xd8c]
call fcn.00455e60
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf2c], esp
push 0x57297b
call fcn.00455e60
push 0
lea edx, [ebp - 0xb4]
push edx
push 0x6e
lea eax, [ebp - 0xd8c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xd8c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00457990
push 0x5783e0
lea ecx, [ebp - 0xe4]
call fcn.00455e60
mov byte [ebp - 4], 0x19
push 0x5783e4
lea ecx, [ebp - 0xcc]
call fcn.00455e60
mov byte [ebp - 4], 0x1a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf30], esp
push 0x57298e
call fcn.00455e60
push 0
lea ecx, [ebp - 0xe4]
push ecx
push 0
lea edx, [ebp - 0xcc]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xcc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe4]
call fcn.00457990
push 0x5783e8
lea ecx, [ebp - 0x114]
call fcn.00455e60
mov byte [ebp - 4], 0x1b
push 0x5783f4
lea ecx, [ebp - 0xfc]
call fcn.00455e60
mov byte [ebp - 4], 0x1c
push 0
push 0
lea eax, [ebp - 0x114]
push eax
push 0x62
lea ecx, [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xfc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x114]
call fcn.00457990
push str.dns_server
lea ecx, [ebp - 0x144]
call fcn.00455e60
mov byte [ebp - 4], 0x1d
push 0x57840c
lea ecx, [ebp - 0x12c]
call fcn.00455e60
mov byte [ebp - 4], 0x1e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 0x57298f
call fcn.00455e60
push 0
lea edx, [ebp - 0x144]
push edx
push 0
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x12c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x144]
call fcn.00457990
push str.ipv6_dns_server
lea ecx, [ebp - 0x174]
call fcn.00455e60
mov byte [ebp - 4], 0x1f
push 0x578424
lea ecx, [ebp - 0x15c]
call fcn.00455e60
mov byte [ebp - 4], 0x20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf38], esp
push 0x5729a1
call fcn.00455e60
push 0
lea ecx, [ebp - 0x174]
push ecx
push 0
lea edx, [ebp - 0x15c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x15c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x174]
call fcn.00457990
push 0x57842c
lea ecx, [ebp - 0x1a4]
call fcn.00455e60
mov byte [ebp - 4], 0x21
push 0x57843c
lea ecx, [ebp - 0x18c]
call fcn.00455e60
mov byte [ebp - 4], 0x22
mov eax, dword [0x5a61e0]
push eax
push 0
lea ecx, [ebp - 0x1a4]
push ecx
push 0
lea edx, [ebp - 0x18c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a130
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x18c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1a4]
call fcn.00457990
push str.open_icmp_redirector
lea ecx, [ebp - 0x1d4]
call fcn.00455e60
mov byte [ebp - 4], 0x23
push 0x578464
lea ecx, [ebp - 0x1bc]
call fcn.00455e60
mov byte [ebp - 4], 0x24
push 0
push 0
lea eax, [ebp - 0x1d4]
push eax
push 0
lea ecx, [ebp - 0x1bc]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1bc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1d4]
call fcn.00457990
push 0x57846c
lea ecx, [ebp - 0x204]
call fcn.00455e60
mov byte [ebp - 4], 0x25
push 0x57847c
lea ecx, [ebp - 0x1ec]
call fcn.00455e60
mov byte [ebp - 4], 0x26
push 0
push 0
lea edx, [ebp - 0x204]
push edx
push 0
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1ec]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x204]
call fcn.00457990
push 0x57848c
lea ecx, [ebp - 0x234]
call fcn.00455e60
mov byte [ebp - 4], 0x27
push 0x578498
lea ecx, [ebp - 0x21c]
call fcn.00455e60
mov byte [ebp - 4], 0x28
push 0
push 0
lea ecx, [ebp - 0x234]
push ecx
push 0
lea edx, [ebp - 0x21c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a130
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x21c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x234]
call fcn.00457990
push 0x5784a4
lea ecx, [ebp - 0x264]
call fcn.00455e60
mov byte [ebp - 4], 0x29
push 0x5784b0
lea ecx, [ebp - 0x24c]
call fcn.00455e60
mov byte [ebp - 4], 0x2a
push 0
push 0
lea eax, [ebp - 0x264]
push eax
push 0
lea ecx, [ebp - 0x24c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a130
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x24c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x264]
call fcn.00457990
push str.icmp_address
lea ecx, [ebp - 0x3b4]
call fcn.00455e60
mov byte [ebp - 4], 0x2b
push 0x5784cc
lea ecx, [ebp - 0x27c]
call fcn.00455e60
mov byte [ebp - 4], 0x2c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf3c], esp
push 0x5729a2
call fcn.00455e60
push 0
lea edx, [ebp - 0x3b4]
push edx
push 0
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x27c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3b4]
call fcn.00457990
push str.ingress_address
lea ecx, [ebp - 0x2ac]
call fcn.00455e60
mov byte [ebp - 4], 0x2d
push 0x5784e8
lea ecx, [ebp - 0x294]
call fcn.00455e60
mov byte [ebp - 4], 0x2e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf40], esp
push 0x5729a3
call fcn.00455e60
push 0
lea ecx, [ebp - 0x2ac]
push ecx
push 0
lea edx, [ebp - 0x294]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x294]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ac]
call fcn.00457990
push 0x5784f8
lea ecx, [ebp - 0x2dc]
call fcn.00455e60
mov byte [ebp - 4], 0x2f
push 0x578504
lea ecx, [ebp - 0x2c4]
call fcn.00455e60
mov byte [ebp - 4], 0x30
push 0
push 0
lea eax, [ebp - 0x2dc]
push eax
push 0
lea ecx, [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x2c4]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2dc]
call fcn.00457990
push 0x578510
lea ecx, [ebp - 0x30c]
call fcn.00455e60
mov byte [ebp - 4], 0x31
push 0x578514
lea ecx, [ebp - 0x2f4]
call fcn.00455e60
mov byte [ebp - 4], 0x32
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf44], esp
push 0x5729c5
call fcn.00455e60
push 0
lea edx, [ebp - 0x30c]
push edx
push 0
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2f4]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30c]
call fcn.00457990
push str.open_ipv6
lea ecx, [ebp - 0x33c]
call fcn.00455e60
mov byte [ebp - 4], 0x33
push 0x578524
lea ecx, [ebp - 0x324]
call fcn.00455e60
mov byte [ebp - 4], 0x34
push 0
push 0
lea ecx, [ebp - 0x33c]
push ecx
push 0
lea edx, [ebp - 0x324]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x324]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x33c]
call fcn.00457990
push 0x57852c
lea ecx, [ebp - 0x36c]
call fcn.00455e60
mov byte [ebp - 4], 0x35
push 0x578538
lea ecx, [ebp - 0x354]
call fcn.00455e60
mov byte [ebp - 4], 0x36
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf48], esp
push 0x5729c6
call fcn.00455e60
push 0
lea eax, [ebp - 0x36c]
push eax
push 0
lea ecx, [ebp - 0x354]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x354]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x36c]
call fcn.00457990
push 0x578544
lea ecx, [ebp - 0x39c]
call fcn.00455e60
mov byte [ebp - 4], 0x37
push 0x578554
lea ecx, [ebp - 0x384]
call fcn.00455e60
mov byte [ebp - 4], 0x38
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf4c], esp
push 0x5729c7
call fcn.00455e60
push 0
lea edx, [ebp - 0x39c]
push edx
push 0
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x384]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x39c]
call fcn.00457990
push 0x578564
lea ecx, [ebp - 0x3e4]
call fcn.00455e60
mov byte [ebp - 4], 0x39
push 0x578578
lea ecx, [ebp - 0x3cc]
call fcn.00455e60
mov byte [ebp - 4], 0x3a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf50], esp
push 0x5729db
call fcn.00455e60
push 0
lea ecx, [ebp - 0x3e4]
push ecx
push 0
lea edx, [ebp - 0x3cc]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x3cc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3e4]
call fcn.00457990
push 0x57858c
lea ecx, [ebp - 0x414]
call fcn.00455e60
mov byte [ebp - 4], 0x3b
push 0x57859c
lea ecx, [ebp - 0x3fc]
call fcn.00455e60
mov byte [ebp - 4], 0x3c
push 0
push 0
lea eax, [ebp - 0x414]
push eax
push 0
lea ecx, [ebp - 0x3fc]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x3fc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x414]
call fcn.00457990
push 0x5785ac
lea ecx, [ebp - 0x444]
call fcn.00455e60
mov byte [ebp - 4], 0x3d
push 0x5785b8
lea ecx, [ebp - 0x42c]
call fcn.00455e60
mov byte [ebp - 4], 0x3e
push 0
push 0
lea edx, [ebp - 0x444]
push edx
push 0
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x42c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x444]
call fcn.00457990
push 0x5785c4
lea ecx, [ebp - 0x474]
call fcn.00455e60
mov byte [ebp - 4], 0x3f
push 0x5785d8
lea ecx, [ebp - 0x45c]
call fcn.00455e60
mov byte [ebp - 4], 0x40
push 0
push 0
lea ecx, [ebp - 0x474]
push ecx
push 0
lea edx, [ebp - 0x45c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x45c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x474]
call fcn.00457990
push 0x5785f8
lea ecx, [ebp - 0x4a4]
call fcn.00455e60
mov byte [ebp - 4], 0x41
push 0x578604
lea ecx, [ebp - 0x48c]
call fcn.00455e60
mov byte [ebp - 4], 0x42
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf54], esp
push str.mxnetfilter
call fcn.00455e60
push 0
lea eax, [ebp - 0x4a4]
push eax
push 0
lea ecx, [ebp - 0x48c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x48c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a4]
call fcn.00457990
push str.only_htttp_proxy
lea ecx, [ebp - 0x4d4]
call fcn.00455e60
mov byte [ebp - 4], 0x43
push 0x578624
lea ecx, [ebp - 0x4bc]
call fcn.00455e60
mov byte [ebp - 4], 0x44
push 0
push 0
lea edx, [ebp - 0x4d4]
push edx
push 0
lea eax, [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x4bc]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4d4]
call fcn.00457990
push 0x578630
lea ecx, [ebp - 0x504]
call fcn.00455e60
mov byte [ebp - 4], 0x45
push 0x578640
lea ecx, [ebp - 0x4ec]
call fcn.00455e60
mov byte [ebp - 4], 0x46
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf58], esp
push 0x5729eb
call fcn.00455e60
push 0
lea ecx, [ebp - 0x504]
push ecx
push 0
lea edx, [ebp - 0x4ec]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a0b0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x4ec]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x504]
call fcn.00457990
push str.Debug
lea ecx, [ebp - 0x534]
call fcn.00455e60
mov byte [ebp - 4], 0x47
push 0x578658
lea ecx, [ebp - 0x51c]
call fcn.00455e60
mov byte [ebp - 4], 0x48
push 0
push 0
lea eax, [ebp - 0x534]
push eax
push 0x64
lea ecx, [ebp - 0x51c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a170
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x51c]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x534]
call fcn.00457990
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00412c10
push 0x578660
lea ecx, [ebp - 0x564]
call fcn.00455e60
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0xe5c]
or ecx, 1
mov dword [ebp - 0xe5c], ecx
lea edx, [ebp - 0x564]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
movzx eax, al
test eax, eax
je 0x5390d8
push 0x578664
lea ecx, [ebp - 0x54c]
call fcn.00455e60
mov dword [ebp - 4], 0x4a
mov ecx, dword [ebp - 0xe5c]
or ecx, 2
mov dword [ebp - 0xe5c], ecx
lea edx, [ebp - 0x54c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
mov ecx, eax
call fcn.00420980
test eax, eax
jbe 0x5390d8
mov dword [ebp - 0xea4], 1
jmp 0x5390e2
mov dword [ebp - 0xea4], 0
mov al, byte [ebp - 0xea4]
mov byte [ebp - 0xe78], al
mov dword [ebp - 4], 0x49
mov ecx, dword [ebp - 0xe5c]
and ecx, 2
je 0x539112
and dword [ebp - 0xe5c], 0xfffffffd
lea ecx, [ebp - 0x54c]
call fcn.00457990
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0xe5c]
and edx, 1
je 0x539136
and dword [ebp - 0xe5c], 0xfffffffe
lea ecx, [ebp - 0x564]
call fcn.00457990
movzx eax, byte [ebp - 0xe78]
test eax, eax
je 0x53917e
push 0x578668
lea ecx, [ebp - 0x57c]
call fcn.00455e60
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x57c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b3764
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x57c]
call fcn.00457990
push 0x57866c
lea ecx, [ebp - 0x594]
call fcn.00455e60
mov byte [ebp - 4], 0x4c
lea edx, [ebp - 0x594]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov al, byte [eax]
movzx ecx, al
push ecx
push 0x5b3764
call fcn.00547bb0
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x594]
call fcn.00457990
call fcn.00546bc0
mov dword [ebp - 0xf0c], 2
lea edx, [ebp - 0xf0c]
push edx
lea eax, [ebp - 0xf5c]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0xe88]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0xe88]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x53932a
push str.debug
lea ecx, [ebp - 0x5ac]
call fcn.00455e60
mov byte [ebp - 4], 0x4e
push 0x5c
push 0x578678
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53925a
push 0x5c
push 0x5786b0
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0xe94], eax
jmp 0x539264
mov dword [ebp - 0xe94], 0x5786e8
lea eax, [ebp - 0xe88]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0xfd0]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0xf10], eax
mov edx, dword [ebp - 0xf10]
mov dword [ebp - 0xf14], edx
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov cl, byte [eax]
movzx edx, cl
push edx
push str.log_leve_:
push 0x578724
push 0xe14
push 0x578720
mov eax, dword [ebp - 0xe94]
push eax
push 0x578674
mov ecx, dword [ebp - 0xf14]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0xfd0]
call fcn.0041daa0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x5ac]
call fcn.00457990
jmp 0x539203
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe88]
call fcn.0040eae0
push 0x578740
lea ecx, [ebp - 0x5c4]
call fcn.00455e60
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x5c4]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe79], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5c4]
call fcn.00457990
movzx edx, byte [ebp - 0xe79]
test edx, edx
je 0x5393b6
push 0x57874c
lea ecx, [ebp - 0x5dc]
call fcn.00455e60
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x5dc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov cl, byte [eax]
mov byte [0x5a61dd], cl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5dc]
call fcn.00457990
mov dword [ebp - 0xeb4], 2
lea edx, [ebp - 0xeb4]
push edx
lea eax, [ebp - 0xf60]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0xe8c]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xe8c]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x539518
push str.super_debug
lea ecx, [ebp - 0x5f4]
call fcn.00455e60
mov byte [ebp - 4], 0x53
push 0x5c
push 0x57875c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x539448
push 0x5c
push 0x578794
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0xe98], eax
jmp 0x539452
mov dword [ebp - 0xe98], 0x5787cc
lea eax, [ebp - 0xe8c]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0xfe8]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0xeb8], eax
mov edx, dword [ebp - 0xeb8]
mov dword [ebp - 0xebc], edx
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov cl, byte [eax]
movzx edx, cl
push edx
push str.super_log__:
push 0x578808
push 0xe1b
push 0x578804
mov eax, dword [ebp - 0xe98]
push eax
push 0x578758
mov ecx, dword [ebp - 0xebc]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da40
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xfe8]
call fcn.0041daa0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x5f4]
call fcn.00457990
jmp 0x5393f1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe8c]
call fcn.0040eae0
push 0x57882c
lea ecx, [ebp - 0x624]
call fcn.00455e60
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0xe5c]
or ecx, 4
mov dword [ebp - 0xe5c], ecx
lea edx, [ebp - 0x624]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
movzx eax, al
test eax, eax
je 0x5395b6
push str.test
lea ecx, [ebp - 0x60c]
call fcn.00455e60
mov dword [ebp - 4], 0x56
mov ecx, dword [ebp - 0xe5c]
or ecx, 8
mov dword [ebp - 0xe5c], ecx
push 0x578834
lea edx, [ebp - 0x60c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
call fcn.00429440
add esp, 8
movzx eax, al
test eax, eax
je 0x5395b6
mov dword [ebp - 0xe9c], 1
jmp 0x5395c0
mov dword [ebp - 0xe9c], 0
mov cl, byte [ebp - 0xe9c]
mov byte [ebp - 0xe5e], cl
mov dword [ebp - 4], 0x55
mov edx, dword [ebp - 0xe5c]
and edx, 8
je 0x5395f0
and dword [ebp - 0xe5c], 0xfffffff7
lea ecx, [ebp - 0x60c]
call fcn.00457990
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xe5c]
and eax, 4
je 0x539614
and dword [ebp - 0xe5c], 0xfffffffb
lea ecx, [ebp - 0x624]
call fcn.00457990
movzx ecx, byte [ebp - 0xe5e]
test ecx, ecx
je 0x53a6c6
push 0x578840
lea ecx, [ebp - 0x63c]
call fcn.00455e60
mov byte [ebp - 4], 0x57
lea edx, [ebp - 0x63c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe5f], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x63c]
call fcn.00457990
movzx eax, byte [ebp - 0xe5f]
test eax, eax
je 0x5397c0
mov dword [ebp - 0xec0], 2
lea ecx, [ebp - 0xec0]
push ecx
lea edx, [ebp - 0xf9c]
push edx
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea eax, [ebp - 0xe90]
push eax
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xe90]
call fcn.0040b660
movzx ecx, al
test ecx, ecx
jne 0x53978d
push 0x5c
push 0x57884c
call fcn.00507b30
add esp, 8
test eax, eax
je 0x5396e8
push 0x5c
push 0x578884
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0xea0], eax
jmp 0x5396f2
mov dword [ebp - 0xea0], 0x5788bc
lea edx, [ebp - 0xe90]
push edx
call fcn.004e8f50
push eax
lea eax, [ebp - 0xff4]
push eax
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0xec4], eax
mov ecx, dword [ebp - 0xec4]
mov dword [ebp - 0xec8], ecx
mov byte [ebp - 4], 0x59
push str._g_pipname___a_address_and_port_like:127.0.0.1:19728__p_process_kk_eyes.exe___t_local_tcp_proxy_port__d_log_level_default_0___l_limit_process_kk_eyes.exe___s_limit_speed_default_0_kb_s___n_default_gateway____dns_dns__b_bypass_dns____rdns_dns_redirector_address___icmp_default_0_open_icmp_redirector_value_is_1____icmpaddress_icmp_redirector_adress_default_redirector_address____bypass_port_bypass_port__u_or_t__port1__u_or_t_port2_...___bypass_address_bypass_address__u_or_t__address1__u_or_t_address2_...____site_address_site_address_and_prot_127.0.0.1:19738____site_process_site_process
push 0x5788f8
push 0xe21
push 0x5788f4
mov edx, dword [ebp - 0xea0]
push edx
push 0x578848
mov ecx, dword [ebp - 0xec8]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xff4]
call fcn.0041daa0
jmp 0x5396a5
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe90]
call fcn.0040eae0
mov dword [ebp - 0xecc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00411d50
mov eax, dword [ebp - 0xecc]
jmp 0x53aad2
push str.limit_process
lea ecx, [ebp - 0x654]
call fcn.00455e60
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x654]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b3644
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x654]
call fcn.00457990
push str.limit_speed
lea ecx, [ebp - 0x66c]
call fcn.00455e60
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x66c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a510
mov edx, dword [eax]
mov dword [0x5b34cc], edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x66c]
call fcn.00457990
push 0x578b80
lea ecx, [ebp - 0x684]
call fcn.00455e60
mov byte [ebp - 4], 0x5c
lea eax, [ebp - 0x684]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe60], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x684]
call fcn.00457990
movzx ecx, byte [ebp - 0xe60]
test ecx, ecx
je 0x5398b7
push str.default_gateway
lea ecx, [ebp - 0x69c]
call fcn.00455e60
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x69c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b3674
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x69c]
call fcn.00457990
push 0x578ba0
lea ecx, [ebp - 0x6b4]
call fcn.00455e60
mov byte [ebp - 4], 0x5e
lea eax, [ebp - 0x6b4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe61], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6b4]
call fcn.00457990
movzx ecx, byte [ebp - 0xe61]
test ecx, ecx
je 0x539937
push str.drive_name
lea ecx, [ebp - 0x6cc]
call fcn.00455e60
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6cc]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b362c
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6cc]
call fcn.00457990
push 0x578bb8
lea ecx, [ebp - 0x6e4]
call fcn.00455e60
mov byte [ebp - 4], 0x60
lea eax, [ebp - 0x6e4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe62], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e4]
call fcn.00457990
movzx ecx, byte [ebp - 0xe62]
test ecx, ecx
je 0x5399b7
push 0x578bbc
lea ecx, [ebp - 0x6fc]
call fcn.00455e60
mov byte [ebp - 4], 0x61
lea edx, [ebp - 0x6fc]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b368c
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6fc]
call fcn.00457990
push 0x578bc0
lea ecx, [ebp - 0x714]
call fcn.00455e60
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x714]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe63], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x714]
call fcn.00457990
movzx ecx, byte [ebp - 0xe63]
test ecx, ecx
je 0x539c2c
push str.rdns
lea ecx, [ebp - 0x72c]
call fcn.00455e60
mov byte [ebp - 4], 0x63
lea edx, [ebp - 0x72c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
lea ecx, [ebp - 0x84]
call fcn.00456b10
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x72c]
call fcn.00457990
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf68], esp
push 0x578bd0
call fcn.00455e60
mov dword [ebp - 0xf6c], eax
mov byte [ebp - 4], 0x66
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf70], esp
lea eax, [ebp - 0x84]
push eax
call fcn.00456b10
lea ecx, [ebp - 0x1000]
push ecx
mov byte [ebp - 4], 0x65
call fcn.00547800
add esp, 0x34
mov dword [ebp - 0xed0], eax
mov edx, dword [ebp - 0xed0]
mov dword [ebp - 0xed4], edx
mov ecx, dword [ebp - 0xed4]
call fcn.0041dd00
cmp eax, 2
jne 0x539ab3
mov dword [ebp - 0xeb0], 1
jmp 0x539abd
mov dword [ebp - 0xeb0], 0
mov al, byte [ebp - 0xeb0]
mov byte [ebp - 0xe64], al
lea ecx, [ebp - 0x1000]
call fcn.0041fed0
movzx ecx, byte [ebp - 0xe64]
test ecx, ecx
je 0x539c0c
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf74], esp
push 0x578bd4
call fcn.00455e60
mov dword [ebp - 0xf78], eax
mov byte [ebp - 4], 0x67
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf7c], esp
lea edx, [ebp - 0x84]
push edx
call fcn.00456b10
lea eax, [ebp - 0xfc4]
push eax
mov byte [ebp - 4], 0x65
call fcn.00547800
add esp, 0x34
mov dword [ebp - 0xed8], eax
mov ecx, dword [ebp - 0xed8]
mov dword [ebp - 0xedc], ecx
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0xedc]
call fcn.0041dce0
mov dword [ebp - 0xee0], eax
mov edx, dword [ebp - 0xee0]
push edx
mov ecx, 0x5b36a4
call fcn.00455770
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xfc4]
call fcn.0041fed0
push 1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xfb4], esp
push 0x578bd8
call fcn.00455e60
mov dword [ebp - 0xf80], eax
mov byte [ebp - 4], 0x69
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf84], esp
lea eax, [ebp - 0x84]
push eax
call fcn.00456b10
lea ecx, [ebp - 0x1018]
push ecx
mov byte [ebp - 4], 0x65
call fcn.00547800
add esp, 0x34
mov dword [ebp - 0xee4], eax
mov edx, dword [ebp - 0xee4]
mov dword [ebp - 0xee8], edx
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0xee8]
call fcn.0041dce0
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0xeec]
push eax
call fcn.00429ec0
add esp, 4
mov dword [0x5a61e4], eax
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x1018]
call fcn.0041fed0
jmp 0x539c1d
lea ecx, [ebp - 0x84]
push ecx
mov ecx, 0x5b36a4
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x84]
call fcn.00457990
push 0x578bdc
lea ecx, [ebp - 0x744]
call fcn.00455e60
mov byte [ebp - 4], 0x6b
lea edx, [ebp - 0x744]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe65], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x744]
call fcn.00457990
movzx eax, byte [ebp - 0xe65]
test eax, eax
je 0x539cac
push str.r6dns
lea ecx, [ebp - 0x75c]
call fcn.00455e60
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x75c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b36bc
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x75c]
call fcn.00457990
push 0x578bec
lea ecx, [ebp - 0x774]
call fcn.00455e60
mov byte [ebp - 4], 0x6d
lea edx, [ebp - 0x774]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe66], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x774]
call fcn.00457990
movzx eax, byte [ebp - 0xe66]
test eax, eax
je 0x539d2c
push str.icmpaddress
lea ecx, [ebp - 0x78c]
call fcn.00455e60
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x78c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b3734
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x78c]
call fcn.00457990
push 0x578c04
lea ecx, [ebp - 0x7a4]
call fcn.00455e60
mov byte [ebp - 4], 0x6f
lea edx, [ebp - 0x7a4]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe67], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7a4]
call fcn.00457990
movzx eax, byte [ebp - 0xe67]
test eax, eax
je 0x539dac
push str.ingressaddress
lea ecx, [ebp - 0x7bc]
call fcn.00455e60
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x7bc]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b3734
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7bc]
call fcn.00457990
push 0x578c24
lea ecx, [ebp - 0x7d4]
call fcn.00455e60
mov byte [ebp - 4], 0x71
lea edx, [ebp - 0x7d4]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe68], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7d4]
call fcn.00457990
movzx eax, byte [ebp - 0xe68]
test eax, eax
je 0x539e29
push str.ipv6
lea ecx, [ebp - 0x7ec]
call fcn.00455e60
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x7ec]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov dl, byte [eax]
mov byte [0x5b34cb], dl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7ec]
call fcn.00457990
push 0x578c34
lea ecx, [ebp - 0x804]
call fcn.00455e60
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0x804]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe69], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x804]
call fcn.00457990
movzx ecx, byte [ebp - 0xe69]
test ecx, ecx
je 0x539ea5
push str.tls_dns_port
lea ecx, [ebp - 0x81c]
call fcn.00455e60
mov byte [ebp - 4], 0x74
lea edx, [ebp - 0x81c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a510
mov eax, dword [eax]
mov dword [0x5a61e0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x81c]
call fcn.00457990
push str.teredo_enable
lea ecx, [ebp - 0x834]
call fcn.00455e60
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x834]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov dl, byte [eax]
mov byte [0x5b34ca], dl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x834]
call fcn.00457990
push str.icmp
lea ecx, [ebp - 0x84c]
call fcn.00455e60
mov byte [ebp - 4], 0x76
lea eax, [ebp - 0x84c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov cl, byte [eax]
mov byte [0x5b34bb], cl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x84c]
call fcn.00457990
push str.bypassdns
lea ecx, [ebp - 0x864]
call fcn.00455e60
mov byte [ebp - 4], 0x77
lea edx, [ebp - 0x864]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov al, byte [eax]
mov byte [0x5b34d0], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x864]
call fcn.00457990
push 0x578c78
lea ecx, [ebp - 0x87c]
call fcn.00455e60
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x87c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe6a], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x87c]
call fcn.00457990
movzx edx, byte [ebp - 0xe6a]
test edx, edx
je 0x539fd2
push str.bypass_port
lea ecx, [ebp - 0x894]
call fcn.00455e60
mov byte [ebp - 4], 0x79
lea eax, [ebp - 0x894]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b377c
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x894]
call fcn.00457990
push 0x578c90
lea ecx, [ebp - 0xc84]
call fcn.00455e60
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xc84]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe6b], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc84]
call fcn.00457990
movzx edx, byte [ebp - 0xe6b]
test edx, edx
je 0x53a052
push str.bypass_address
lea ecx, [ebp - 0x8ac]
call fcn.00455e60
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x8ac]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b3794
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8ac]
call fcn.00457990
push 0x578cb0
lea ecx, [ebp - 0x8c4]
call fcn.00455e60
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x8c4]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe6c], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8c4]
call fcn.00457990
movzx edx, byte [ebp - 0xe6c]
test edx, edx
je 0x53a0cf
push 0x578cbc
lea ecx, [ebp - 0x8dc]
call fcn.00455e60
mov byte [ebp - 4], 0x7d
lea eax, [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a510
mov ecx, dword [eax]
mov dword [0x5a61e8], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8dc]
call fcn.00457990
push 0x578cc8
lea ecx, [ebp - 0x8f4]
call fcn.00455e60
mov byte [ebp - 4], 0x7e
lea edx, [ebp - 0x8f4]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe6d], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8f4]
call fcn.00457990
movzx eax, byte [ebp - 0xe6d]
test eax, eax
je 0x53a14c
push str.tcp_debug
lea ecx, [ebp - 0x90c]
call fcn.00455e60
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x90c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov dl, byte [eax]
mov byte [0x5b34ba], dl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x90c]
call fcn.00457990
push 0x578ce0
lea ecx, [ebp - 0x924]
call fcn.00455e60
mov byte [ebp - 4], 0x80
lea eax, [ebp - 0x924]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe6e], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x924]
call fcn.00457990
movzx ecx, byte [ebp - 0xe6e]
test ecx, ecx
je 0x53a1fb
push str.redirector_address
lea ecx, [ebp - 0x93c]
call fcn.00455e60
mov byte [ebp - 4], 0x81
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
lea ecx, [ebp - 0x954]
call fcn.00456b10
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x93c]
call fcn.00457990
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf88], esp
lea eax, [ebp - 0x954]
push eax
call fcn.00456b10
call fcn.005442b0
add esp, 0x18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x954]
call fcn.00457990
push 0x578d08
lea ecx, [ebp - 0x96c]
call fcn.00455e60
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x96c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe6f], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x96c]
call fcn.00457990
movzx edx, byte [ebp - 0xe6f]
test edx, edx
je 0x53a278
push str.open_icmpdelay
lea ecx, [ebp - 0x984]
call fcn.00455e60
mov byte [ebp - 4], 0x85
lea eax, [ebp - 0x984]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov cl, byte [eax]
mov byte [0x5b34d3], cl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x984]
call fcn.00457990
push 0x578d28
lea ecx, [ebp - 0x99c]
call fcn.00455e60
mov byte [ebp - 4], 0x86
lea edx, [ebp - 0x99c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe70], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x99c]
call fcn.00457990
movzx eax, byte [ebp - 0xe70]
test eax, eax
je 0x53a2f5
push str.icmpdelay
lea ecx, [ebp - 0x9b4]
call fcn.00455e60
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x9b4]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a510
mov edx, dword [eax]
mov dword [0x5b34d4], edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9b4]
call fcn.00457990
push 0x578d40
lea ecx, [ebp - 0x9e4]
call fcn.00455e60
mov byte [ebp - 4], 0x88
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe71], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9e4]
call fcn.00457990
movzx ecx, byte [ebp - 0xe71]
test ecx, ecx
je 0x53a371
push str.icmp_relay
lea ecx, [ebp - 0x9fc]
call fcn.00455e60
mov byte [ebp - 4], 0x89
lea edx, [ebp - 0x9fc]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov al, byte [eax]
mov byte [0x5b34d2], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9fc]
call fcn.00457990
push 0x578d58
lea ecx, [ebp - 0xa14]
call fcn.00455e60
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0xa14]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe72], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa14]
call fcn.00457990
movzx edx, byte [ebp - 0xe72]
test edx, edx
je 0x53a3ee
push str.local_dns_resolver
lea ecx, [ebp - 0xa2c]
call fcn.00455e60
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0xa2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov cl, byte [eax]
mov byte [0x5b34b9], cl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa2c]
call fcn.00457990
push 0x578d80
lea ecx, [ebp - 0xa44]
call fcn.00455e60
mov byte [ebp - 4], 0x8c
lea edx, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe73], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa44]
call fcn.00457990
movzx eax, byte [ebp - 0xe73]
test eax, eax
je 0x53a482
push str.only_http
lea ecx, [ebp - 0xa5c]
call fcn.00455e60
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0xa5c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a360
mov dl, byte [eax]
mov byte [ebp - 0xe5d], dl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa5c]
call fcn.00457990
mov al, byte [ebp - 0xe5d]
mov byte [0x5b34b8], al
mov cl, byte [ebp - 0xe5d]
mov byte [0x5b34b3], cl
push 0x578d98
lea ecx, [ebp - 0xa74]
call fcn.00455e60
mov byte [ebp - 4], 0x8e
lea edx, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe74], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa74]
call fcn.00457990
movzx eax, byte [ebp - 0xe74]
test eax, eax
je 0x53a502
push str.bypass_process
lea ecx, [ebp - 0xa8c]
call fcn.00455e60
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0xa8c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
mov ecx, 0x5b365c
call fcn.00455770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa8c]
call fcn.00457990
push str.site_tcp
lea ecx, [ebp - 0xb1c]
call fcn.00455e60
mov byte [ebp - 4], 0x90
push 0x578dc4
lea ecx, [ebp - 0xb04]
call fcn.00455e60
mov byte [ebp - 4], 0x91
push str.site_process
lea ecx, [ebp - 0xaec]
call fcn.00455e60
mov byte [ebp - 4], 0x92
push str.process
lea ecx, [ebp - 0xad4]
call fcn.00455e60
mov byte [ebp - 4], 0x93
push str.site_address
lea ecx, [ebp - 0xabc]
call fcn.00455e60
mov byte [ebp - 4], 0x94
push str.address
lea ecx, [ebp - 0xaa4]
call fcn.00455e60
mov byte [ebp - 4], 0x95
lea edx, [ebp - 0xb1c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a510
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xb04]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a510
mov edx, dword [eax]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xf8c], esp
lea eax, [ebp - 0xaec]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
push esi
call fcn.00547930
add esp, 8
mov dword [ebp - 0xf90], eax
mov byte [ebp - 4], 0x96
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xf94], esp
lea ecx, [ebp - 0xad4]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
push esi
call fcn.00547930
add esp, 8
mov dword [ebp - 0xf98], eax
mov byte [ebp - 4], 0x97
lea edx, [ebp - 0xabc]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
mov ecx, eax
call fcn.00455700
push eax
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
mov ecx, eax
call fcn.00455700
push eax
mov byte [ebp - 4], 0x95
call fcn.0053f060
add esp, 0x40
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0xaa4]
call fcn.00457990
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0xabc]
call fcn.00457990
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0xad4]
call fcn.00457990
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xaec]
call fcn.00457990
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xb04]
call fcn.00457990
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb1c]
call fcn.00457990
call fcn.0051b574
push 1
call fcn.00544a00
add esp, 4
mov dword [ebp - 0xef0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00411d50
mov eax, dword [ebp - 0xef0]
jmp 0x53aad2
push 0x578df8
lea ecx, [ebp - 0xb34]
call fcn.00455e60
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0xb34]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00411f30
mov byte [ebp - 0xe75], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb34]
call fcn.00457990
movzx edx, byte [ebp - 0xe75]
test edx, edx
je 0x53aabd
push str.guid
lea ecx, [ebp - 0xb4c]
call fcn.00455e60
mov byte [ebp - 4], 0x99
lea eax, [ebp - 0xb4c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0042a1b0
push eax
lea ecx, [ebp - 0xb64]
call fcn.00456b10
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0xb4c]
call fcn.00457990
push str..pipe_s
lea ecx, [ebp - 0xe58]
call fcn.00428800
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0xb64]
push ecx
lea ecx, [ebp - 0xe58]
call fcn.0042b040
lea edx, [ebp - 0x9c]
push edx
lea ecx, [ebp - 0xe58]
call fcn.00428900
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x5b37b8
call fcn.0054a400
mov byte [ebp - 0xe76], al
movzx ecx, byte [ebp - 0xe76]
test ecx, ecx
jne 0x53a8f4
mov dword [ebp - 0xef4], 5
lea edx, [ebp - 0xef4]
push edx
lea eax, [ebp - 0xfac]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0xe80]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0xe80]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x53a8e0
push 0x5c
push 0x578e18
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53a82b
push 0x5c
push 0x578e50
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0xea8], eax
jmp 0x53a835
mov dword [ebp - 0xea8], 0x578e88
lea eax, [ebp - 0xe80]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0xfdc]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0xef8], eax
mov edx, dword [ebp - 0xef8]
mov dword [ebp - 0xefc], edx
mov byte [ebp - 4], 0x9f
lea eax, [ebp - 0x9c]
push eax
push str.named_pipe_start_failed_pip:
push str.__F_
push 0xeb0
push 0x578ec0
mov ecx, dword [ebp - 0xea8]
push ecx
push 0x578e14
mov ecx, dword [ebp - 0xefc]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0xfdc]
call fcn.0041daa0
jmp 0x53a7e8
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xe80]
call fcn.0040eae0
call fcn.00545580
mov dword [ebp - 0xf00], 2
lea edx, [ebp - 0xf00]
push edx
lea eax, [ebp - 0xfa0]
push eax
mov ecx, dword [0x5a61f0]
call fcn.00429850
push eax
lea ecx, [ebp - 0xe84]
push ecx
call fcn.004e8f50
mov ecx, eax
call fcn.00429870
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0xe84]
call fcn.0040b660
movzx edx, al
test edx, edx
jne 0x53aa27
push 0x5c
push 0x578ef0
call fcn.00507b30
add esp, 8
test eax, eax
je 0x53a972
push 0x5c
push 0x578f28
call fcn.00507b30
add esp, 8
add eax, 1
mov dword [ebp - 0xeac], eax
jmp 0x53a97c
mov dword [ebp - 0xeac], 0x578f60
lea eax, [ebp - 0xe84]
push eax
call fcn.004e8f50
push eax
lea ecx, [ebp - 0x100c]
push ecx
call fcn.00429930
add esp, 0xc
mov dword [ebp - 0xf04], eax
mov edx, dword [ebp - 0xf04]
mov dword [ebp - 0xf08], edx
mov byte [ebp - 4], 0xa1
lea eax, [ebp - 0x9c]
push eax
push str.pipe_start_pip_:
push 0x578f9c
push 0xeb4
push 0x578f98
mov ecx, dword [ebp - 0xeac]
push ecx
push 0x578eec
mov ecx, dword [ebp - 0xf08]
call fcn.0041da80
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da00
mov ecx, eax
call fcn.0041da60
mov ecx, eax
call fcn.0041da60
push eax
call fcn.00429960
add esp, 8
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x100c]
call fcn.0041daa0
jmp 0x53a92f
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xe84]
call fcn.0040eae0
push 0x53aaf0
lea ecx, [ebp - 0xdbc]
call fcn.0042b060
mov byte [ebp - 4], 0xa2
lea edx, [ebp - 0xdbc]
push edx
lea eax, [ebp - 0xfa8]
push eax
mov ecx, 0x5b37b8
call fcn.0054ab20
lea ecx, [ebp - 0xfa8]
call fcn.0040f1d0
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xdbc]
call fcn.0041cd80
mov ecx, 0x5b37ac
call fcn.0040e9b0
push 1
call fcn.00544a00
add esp, 4
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x9c]
call fcn.00457990
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0xe58]
call fcn.0041cd30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb64]
call fcn.00457990
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00411d50
jmp 0x53aad0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a1084
mov esp, ebp
pop ebp
ret