Function at 0x460840
Capabilities:
Connect socket
Encode data using xor
Get socket status
Resolve dns
Set socket configuration

Disassembly:
push 0x5a4
mov eax, 0x47b594
call fcn.0046fd23
mov esi, ecx
mov dword [ebp - 0x534], esi
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0x53c], eax
inc ecx
xor eax, eax
mov dword [ebp - 0x554], esi
push eax
push ecx
mov dword [ebp - 4], eax
or dword [esi + 0x120], 0xffffffff
push 2
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x5ac], eax
pop eax
push eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x5b0], 0xb4
call dword [sym.imp.WS2_32.dll_socket]
mov dword [esi + 0x120], eax
cmp eax, 0xffffffff
je 0x461e50
cmp word [ebp + 0xc], 0
je 0x4608c3
push dword [ebp + 0xc]
call dword [sym.imp.WS2_32.dll_htons]
movzx eax, ax
xor edi, edi
jmp 0x4608e6
xor edi, edi
push edi
push str.mail
call dword [sym.imp.WS2_32.dll_getservbyname]
test eax, eax
jne 0x4608e2
push 0x19
call dword [sym.imp.WS2_32.dll_htons]
movzx eax, ax
jmp 0x4608e6
movzx eax, word [eax + 8]
push 2
pop ecx
push dword [ebp - 0x53c]
mov word [ebp - 0xec], cx
mov word [ebp - 0xea], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0xe8], eax
cmp eax, 0xffffffff
jne 0x460939
push dword [ebp - 0x53c]
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov ecx, eax
test ecx, ecx
je 0x46097c
movsx eax, word [ecx + 0xa]
push eax
mov eax, dword [ecx + 0xc]
push dword [eax]
lea eax, [ebp - 0xe8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x59c]
push eax
push 0x8004667e
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_ioctlsocket]
mov ecx, dword [esi + 0x120]
cmp eax, 0xffffffff
jne 0x4609a1
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x6c
lea ecx, [ebp - 0x598]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x69
lea ecx, [ebp - 0x5a0]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push 0x10
lea eax, [ebp - 0xec]
push eax
push ecx
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x461d8f
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
je 0x4609ec
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x68
lea ecx, [ebp - 0x594]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
mov eax, dword [esi + 0x120]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x420], ecx
lea ecx, [ebp - 0x5b0]
push ecx
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x41c], eax
push ecx
lea ecx, [ebp - 0x524]
inc eax
push ecx
push edi
push eax
call dword [sym.imp.WS2_32.dll_select]
mov ecx, eax
cmp ecx, 0xffffffff
jne 0x460a57
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x6d
lea ecx, [ebp - 0x590]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
mov eax, dword [esi + 0x120]
test ecx, ecx
jne 0x460a84
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x193
lea ecx, [ebp - 0x58c]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
lea ecx, [ebp - 0x524]
push ecx
push eax
call dword [sym.imp.WS2_32.dll___WSAFDIsSet]
test eax, eax
je 0x461dd1
mov edx, dword [ebp - 0x524]
mov ecx, edi
test edx, edx
je 0x460aee
mov eax, dword [esi + 0x120]
cmp dword [ebp + ecx*4 - 0x520], eax
je 0x460abc
inc ecx
cmp ecx, edx
jb 0x460aac
jmp 0x460aee
lea eax, [edx - 1]
cmp ecx, eax
jae 0x460ae7
lea eax, [ebp - 0x51c]
mov eax, dword [eax + ecx*4]
mov dword [ebp + ecx*4 - 0x520], eax
inc ecx
mov edx, dword [ebp - 0x524]
lea eax, [edx - 1]
cmp ecx, eax
lea eax, [ebp - 0x51c]
jb 0x460ac9
dec edx
mov dword [ebp - 0x524], edx
mov edx, dword [ebp - 0x420]
mov ecx, edi
test edx, edx
je 0x460b42
mov eax, dword [esi + 0x120]
cmp dword [ebp + ecx*4 - 0x41c], eax
je 0x460b10
inc ecx
cmp ecx, edx
jb 0x460b00
jmp 0x460b42
lea eax, [edx - 1]
cmp ecx, eax
jae 0x460b3b
lea eax, [ebp - 0x418]
mov eax, dword [eax + ecx*4]
mov dword [ebp + ecx*4 - 0x41c], eax
inc ecx
mov edx, dword [ebp - 0x420]
lea eax, [edx - 1]
cmp ecx, eax
lea eax, [ebp - 0x418]
jb 0x460b1d
dec edx
mov dword [ebp - 0x420], edx
mov eax, dword [ebp + 0x10]
cmp eax, 3
je 0x460b50
mov dword [esi + 0x168], eax
mov eax, dword [esi + 0x168]
cmp eax, 1
je 0x460b62
push 2
pop ecx
cmp eax, ecx
jne 0x460b7b
mov ecx, esi
call 0x4639f4
push 2
pop eax
cmp dword [esi + 0x168], eax
jne 0x460b7b
mov ecx, esi
call fcn.00463a3b
xor ecx, ecx
call fcn.0045f853
push eax
mov ecx, esi
call fcn.00463607
mov ecx, esi
call fcn.00463280
cmp dword [esi + 0x168], 1
jne 0x460ba8
mov ecx, esi
call 0x463334
mov ecx, esi
call fcn.00463280
cmp byte [ebp + 0x14], 0
je 0x461d8f
mov ecx, dword [esi + 0x11c]
mov edx, str.AUTH
call fcn.0045f87a
cmp al, 1
jne 0x461d8f
cmp dword [esi + 0xd8], edi
jne 0x460bee
push 0xcc
lea ecx, [ebp - 0x588]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
cmp dword [esi + 0xf0], edi
jne 0x460c12
push 0xcd
lea ecx, [ebp - 0x584]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
mov ecx, dword [esi + 0x11c]
mov edx, str.LOGIN
call fcn.0045f87a
cmp al, 1
jne 0x460d52
push 3
pop ecx
call fcn.0045f853
push str.AUTH_LOGIN_r_n
push 0x2800
push dword [esi + 0x118]
mov edi, eax
call fcn.0046468a
add esp, 0xc
mov ecx, esi
push edi
call fcn.00462be9
push edi
mov ecx, esi
call fcn.00463607
push 0xf
lea edx, [esi + 0xc8]
pop edi
cmp dword [edx + 0x14], edi
jbe 0x460c6c
mov edx, dword [edx]
push dword [esi + 0xd8]
lea ecx, [ebp - 0xac]
call fcn.0045f227
pop ecx
push 7
pop ecx
mov byte [ebp - 4], 1
call fcn.0045f853
cmp dword [ebp - 0x98], edi
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x528], eax
cmova ecx, dword [ebp - 0xac]
push ecx
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
add esp, 0x10
mov ecx, esi
push dword [ebp - 0x528]
call fcn.00462be9
push dword [ebp - 0x528]
mov ecx, esi
call fcn.00463607
lea edx, [esi + 0xe0]
cmp dword [edx + 0x14], edi
jbe 0x460ce3
mov edx, dword [edx]
push dword [esi + 0xf0]
lea ecx, [ebp - 0x64]
call fcn.0045f227
pop ecx
push 2
pop eax
push 8
pop ecx
mov byte [ebp - 4], al
call fcn.0045f853
cmp dword [ebp - 0x50], edi
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x530], eax
cmova ecx, dword [ebp - 0x64]
push ecx
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
mov edi, dword [ebp - 0x530]
add esp, 0x10
mov ecx, esi
push edi
call fcn.00462be9
push edi
mov ecx, esi
call fcn.00463607
lea ecx, [ebp - 0x64]
call fcn.0045f5fe
lea ecx, [ebp - 0xac]
jmp 0x461d8a
mov ecx, dword [esi + 0x11c]
mov edx, str.PLAIN
call fcn.0045f87a
cmp al, 1
jne 0x460e45
push 2
pop eax
mov ecx, eax
call fcn.0045f853
lea ecx, [esi + 0xe0]
mov dword [ebp - 0x544], eax
cmp dword [ecx + 0x14], 0xf
jbe 0x460d88
mov ecx, dword [ecx]
lea eax, [esi + 0xc8]
cmp dword [eax + 0x14], 0xf
mov edx, eax
jbe 0x460d9a
mov edx, dword [eax]
mov eax, edx
push ecx
push edx
push eax
push str._s_s_s
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
mov ecx, dword [esi + 0x118]
add esp, 0x18
mov edi, ecx
lea edx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x460dc0
sub edi, edx
call fcn.0045f957
mov edx, eax
xor eax, eax
mov dword [ebp - 0x530], edx
mov ecx, eax
test edi, edi
je 0x460dec
cmp byte [ecx + edx], 0x5e
jne 0x460de7
mov byte [ecx + edx], al
inc ecx
cmp ecx, edi
jb 0x460dde
push edi
lea ecx, [ebp - 0x64]
call fcn.0045f227
pop ecx
push dword [ebp - 0x530]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140.dll_Ordinal_266]
cmp dword [ebp - 0x50], 0xf
lea eax, [ebp - 0x64]
cmova eax, dword [ebp - 0x64]
push eax
push str.AUTH_PLAIN__s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
mov edi, dword [ebp - 0x544]
add esp, 0x14
mov ecx, esi
push edi
call fcn.00462be9
push edi
mov ecx, esi
call fcn.00463607
jmp 0x461d87
mov ecx, dword [esi + 0x11c]
mov edx, str.CRAM_MD5
call fcn.0045f87a
cmp al, 1
jne 0x4611c3
push 4
pop ecx
call fcn.0045f853
push str.AUTH_CRAM_MD5_r_n
push 0x2800
push dword [esi + 0x118]
mov dword [ebp - 0x528], eax
call fcn.0046468a
add esp, 0xc
mov ecx, esi
push dword [ebp - 0x528]
call fcn.00462be9
push dword [ebp - 0x528]
mov ecx, esi
call fcn.00463607
push dword [esi + 0x11c]
lea ecx, [ebp - 0x7c]
call fcn.0045f65b
push 0xffffffffffffffff
push 4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x7c]
call fcn.00463cf9
push eax
lea ecx, [ebp - 0x7c]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x4c]
call fcn.0045f3c8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
cmova ecx, dword [ebp - 0x4c]
call fcn.0045f957
lea ecx, [esi + 0xe0]
mov dword [ebp - 0x538], eax
cmp dword [ecx + 0x14], 0xf
jbe 0x460f09
mov ecx, dword [ecx]
call fcn.0045f957
cmp dword [ebp - 0x538], 0
mov edx, eax
mov dword [ebp - 0x528], edx
je 0x4611a7
test edx, edx
je 0x4611a7
mov esi, dword [esi + 0xf0]
cmp esi, 0x40
jle 0x460f67
lea ecx, [ebp - 0x308]
call fcn.00464b22
push esi
push edx
call fcn.00464b2a
lea ecx, [ebp - 0x308]
call fcn.00464be8
lea ecx, [ebp - 0x308]
call fcn.00464c8b
push 0x10
mov dword [ebp - 0x528], eax
pop esi
push 0x40
lea eax, [ebp - 0x19c]
push edi
push eax
call sub.VCRUNTIME140.dll_memset
push 0x40
lea eax, [ebp - 0x130]
push edi
push eax
call sub.VCRUNTIME140.dll_memset
mov edi, dword [ebp - 0x528]
lea eax, [ebp - 0x19c]
push esi
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
push esi
lea eax, [ebp - 0x130]
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x30
xor eax, eax
movups xmm0, xmmword [ebp + eax - 0x19c]
xorps xmm0, xmmword [str.6666666666666666]
movups xmmword [ebp + eax - 0x19c], xmm0
movups xmm0, xmmword [ebp + eax - 0x130]
xorps xmm0, xmmword [0x4a7ed0]
movups xmmword [ebp + eax - 0x130], xmm0
add eax, 0x10
cmp eax, 0x40
jl 0x460fac
lea ecx, [ebp - 0x230]
call fcn.00464b22
push 0x40
lea eax, [ebp - 0x19c]
push eax
call fcn.00464b2a
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x230]
push dword [ebp - 0x538]
call fcn.00464b2a
lea ecx, [ebp - 0x230]
call fcn.00464be8
lea ecx, [ebp - 0x230]
call fcn.00464c8b
mov esi, eax
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x530], esi
call fcn.00464b22
push 0x40
lea eax, [ebp - 0x130]
push eax
call fcn.00464b2a
push 0x10
push esi
lea ecx, [ebp - 0x29c]
call fcn.00464b2a
lea ecx, [ebp - 0x29c]
call fcn.00464be8
lea ecx, [ebp - 0x29c]
call fcn.00464ced
mov edx, eax
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461071
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x4c]
call fcn.00463f2b
push dword [ebp - 0x538]
mov esi, dword [sym.imp.mfc140.dll_Ordinal_266]
call esi
push edi
call esi
push dword [ebp - 0x530]
call esi
mov esi, dword [ebp - 0x534]
mov eax, closesocket
add esp, 0xc
lea ecx, [esi + 0xc8]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x461e6a
push 0xf
pop edi
cmp dword [ecx + 0x14], edi
jbe 0x4610c9
mov ecx, dword [ecx]
push 1
push 0x4a3754
push edx
push ecx
push ecx
push dword [ebp - 0x554]
lea ecx, [ebp - 0xac]
call fcn.004642b9
mov byte [ebp - 4], 6
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], edi
lea ecx, [ebp - 0xac]
push dword [ebp - 0x3c]
cmova eax, dword [ebp - 0x4c]
push eax
call fcn.00463ebf
push eax
lea ecx, [ebp - 0x64]
call fcn.0045f623
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463ded
lea ecx, [ebp - 0x64]
call fcn.0045f5fe
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 5
call fcn.0045f5fe
cmp dword [ebp - 0x38], edi
lea edx, [ebp - 0x4c]
push dword [ebp - 0x3c]
cmova edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x94]
call fcn.0045f227
pop ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
cmp dword [ebp - 0x68], edi
lea eax, [ebp - 0x7c]
cmova eax, dword [ebp - 0x7c]
push eax
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
add esp, 0x10
push 8
pop ecx
call fcn.0045f853
mov edi, eax
mov ecx, esi
push edi
call fcn.00462be9
push edi
mov ecx, esi
call fcn.00463607
lea ecx, [ebp - 0x4c]
call fcn.0045f5fe
lea ecx, [ebp - 0x7c]
jmp 0x461d8a
push 0xce
lea ecx, [ebp - 0x580]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
mov ecx, dword [esi + 0x11c]
mov edx, str.DIGEST_MD5
call fcn.0045f87a
cmp al, 1
jne 0x461db5
push 6
pop ecx
call fcn.0045f853
push str.AUTH_DIGEST_MD5_r_n
push 0x2800
push dword [esi + 0x118]
mov dword [ebp - 0x528], eax
call fcn.0046468a
add esp, 0xc
mov ecx, esi
push dword [ebp - 0x528]
call fcn.00462be9
push dword [ebp - 0x528]
mov ecx, esi
call fcn.00463607
push dword [esi + 0x11c]
lea ecx, [ebp - 0x64]
call fcn.0045f65b
push 0xffffffffffffffff
push 4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x64]
call fcn.00463cf9
push eax
lea ecx, [ebp - 0x64]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x7c]
call fcn.0045f3c8
push ecx
push str.nonce
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 8
call fcn.00463d49
test eax, eax
jns 0x461291
push 0xcf
lea ecx, [ebp - 0x57c]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push 0xffffffffffffffff
add eax, 7
lea ecx, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00463cf9
push ecx
push 0x4a3890
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 9
call fcn.00463d49
test eax, eax
jns 0x4612db
push 0xcf
lea ecx, [ebp - 0x56c]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push eax
push edi
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xdc]
call fcn.00463cf9
push eax
lea ecx, [ebp - 0xdc]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
xor eax, eax
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], al
push ecx
push str.realm
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa
call fcn.00463d49
test eax, eax
js 0x4613b8
push 0xffffffffffffffff
add eax, 7
lea ecx, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00463cf9
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
push ecx
push 0x4a3890
lea ecx, [ebp - 0x4c]
call fcn.00463d49
test eax, eax
jns 0x46138f
push 0xcf
lea ecx, [ebp - 0x5a4]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push eax
xor edi, edi
lea eax, [ebp - 0x94]
push edi
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463cf9
push eax
lea ecx, [ebp - 0x4c]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
jmp 0x4613ba
xor edi, edi
push edi
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
push 0x4a2a30
lea eax, [ebp - 0x34]
push 0x11
push eax
call fcn.0046468a
push 1
push str._08d
lea eax, [ebp - 0x20]
push 9
push eax
call fcn.0046468a
add esp, 0x24
lea ecx, [ebp - 0xac]
push str.auth
call fcn.0045f65b
lea eax, [ebp - 0x564]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x31c]
mov dword [ebp - 0x564], 0x80
push eax
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_getpeername]
test eax, eax
jne 0x46143f
push 0xd0
lea ecx, [ebp - 0x568]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push dword [ebp - 0x318]
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0045f65b
mov eax, closesocket
mov byte [ebp - 4], 0xc
sub eax, dword [ebp - 0xb4]
cmp eax, 5
jb 0x461e6a
push 0xf
pop edi
push dword [ebp - 0xb4]
cmp dword [ebp - 0xb0], edi
lea eax, [ebp - 0xc4]
cmova eax, dword [ebp - 0xc4]
push eax
push 5
push str.smtp_
push ecx
push dword [ebp - 0x554]
lea ecx, [ebp - 0x94]
call fcn.004642b9
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xc4]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
cmp dword [ebp - 0x38], edi
lea ecx, [ebp - 0x4c]
cmova ecx, dword [ebp - 0x4c]
call fcn.0045f957
lea ecx, [esi + 0xc8]
mov dword [ebp - 0x54c], eax
cmp dword [ecx + 0x14], edi
jbe 0x4614e4
mov ecx, dword [ecx]
call fcn.0045f957
lea ecx, [esi + 0xe0]
mov dword [ebp - 0x558], eax
cmp dword [ecx + 0x14], edi
jbe 0x4614fc
mov ecx, dword [ecx]
call fcn.0045f957
cmp dword [ebp - 0xc8], edi
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x550], eax
cmova ecx, dword [ebp - 0xdc]
call fcn.0045f957
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x540], eax
call fcn.0045f957
cmp dword [ebp - 0xb0], edi
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x538], eax
cmova ecx, dword [ebp - 0xc4]
call fcn.0045f957
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x53c], eax
call fcn.0045f957
cmp dword [ebp - 0x98], edi
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x528], eax
cmova ecx, dword [ebp - 0xac]
call fcn.0045f957
cmp dword [ebp - 0x54c], 0
mov dword [ebp - 0x560], eax
je 0x461d99
mov edx, dword [ebp - 0x558]
test edx, edx
je 0x461d99
cmp dword [ebp - 0x550], 0
je 0x461d99
cmp dword [ebp - 0x540], 0
je 0x461d99
cmp dword [ebp - 0x538], 0
je 0x461d99
cmp dword [ebp - 0x53c], 0
je 0x461d99
cmp dword [ebp - 0x528], 0
je 0x461d99
test eax, eax
je 0x461d99
lea ecx, [ebp - 0x1c4]
call fcn.00464b22
push dword [esi + 0xd8]
push edx
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x1c4]
call fcn.00464b2a
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x1c4]
push dword [ebp - 0x54c]
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x1c4]
call fcn.00464b2a
push dword [esi + 0xf0]
lea ecx, [ebp - 0x1c4]
push dword [ebp - 0x550]
call fcn.00464b2a
lea ecx, [ebp - 0x1c4]
call fcn.00464be8
lea ecx, [ebp - 0x1c4]
call fcn.00464c8b
mov edx, eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x548], edx
call fcn.00464b22
push 0x10
push edx
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x230]
call fcn.00464b2a
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x230]
push dword [ebp - 0x540]
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x230]
call fcn.00464b2a
lea ecx, [ebp - 0x34]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4616b9
sub ecx, edx
push ecx
push dword [ebp - 0x538]
lea ecx, [ebp - 0x230]
call fcn.00464b2a
lea ecx, [ebp - 0x230]
call fcn.00464be8
lea ecx, [ebp - 0x230]
call fcn.00464ced
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x544], eax
call fcn.00464b22
push 0xd
push str.AUTHENTICATE:
call fcn.00464b2a
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x29c]
push dword [ebp - 0x53c]
call fcn.00464b2a
lea ecx, [ebp - 0x29c]
call fcn.00464be8
lea ecx, [ebp - 0x29c]
call fcn.00464ced
push dword [ebp - 0x548]
mov dword [ebp - 0x530], eax
call dword [sym.imp.mfc140.dll_Ordinal_266]
pop ecx
mov ecx, dword [ebp - 0x544]
call fcn.0045f957
mov ecx, dword [ebp - 0x530]
mov dword [ebp - 0x55c], eax
call fcn.0045f957
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x548], eax
call fcn.00464b22
push 0x20
push dword [ebp - 0x55c]
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x158]
call fcn.00464b2a
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x158]
push dword [ebp - 0x540]
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x158]
call fcn.00464b2a
lea ecx, [ebp - 0x20]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4617c2
sub ecx, edx
push ecx
push dword [ebp - 0x528]
lea ecx, [ebp - 0x158]
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x158]
call fcn.00464b2a
lea ecx, [ebp - 0x34]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4617f5
sub ecx, edx
push ecx
push dword [ebp - 0x538]
lea ecx, [ebp - 0x158]
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x158]
call fcn.00464b2a
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x158]
push dword [ebp - 0x560]
call fcn.00464b2a
push 1
push 0x4a38b4
lea ecx, [ebp - 0x158]
call fcn.00464b2a
push 0x20
push dword [ebp - 0x548]
lea ecx, [ebp - 0x158]
call fcn.00464b2a
lea ecx, [ebp - 0x158]
call fcn.00464be8
lea ecx, [ebp - 0x158]
call fcn.00464ced
mov edx, eax
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x52c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461881
sub ecx, dword [ebp - 0x52c]
push ecx
push edx
lea ecx, [ebp - 0x7c]
call fcn.00463f2b
push dword [ebp - 0x54c]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x558]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x550]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x540]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x538]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x53c]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x528]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x560]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x55c]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x548]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x544]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push dword [ebp - 0x530]
call dword [sym.imp.mfc140.dll_Ordinal_266]
push str.charset
push dword [esi + 0x11c]
call dword [sym.imp.VCRUNTIME140.dll_strstr]
lea eax, [esi + 0xc8]
add esp, 0x38
cmp dword [eax + 0x14], edi
jbe 0x461949
mov eax, dword [eax]
push eax
push str.charsetutf_8_username__s_
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
add esp, 0x10
cmp dword [ebp - 0x3c], 0
je 0x4619ce
cmp dword [ebp - 0x38], edi
lea eax, [ebp - 0x4c]
cmova eax, dword [ebp - 0x4c]
push eax
push str._realm__s_
push 0x2800
push dword [esi + 0x11c]
call fcn.0046468a
mov edx, dword [esi + 0x11c]
add esp, 0x10
mov ecx, edx
mov dword [ebp - 0x52c], ecx
mov al, byte [edx]
inc edx
test al, al
jne 0x461999
mov edi, dword [esi + 0x118]
sub edx, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4619a9
mov esi, dword [ebp - 0x52c]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x534]
push 0xf
pop edi
cmp dword [ebp - 0xc8], edi
lea eax, [ebp - 0xdc]
cmova eax, dword [ebp - 0xdc]
push eax
push str._nonce__s_
push 0x2800
push dword [esi + 0x11c]
call fcn.0046468a
mov edx, dword [esi + 0x11c]
add esp, 0x10
mov ecx, edx
mov dword [ebp - 0x52c], ecx
mov al, byte [edx]
inc edx
test al, al
jne 0x461a08
mov edi, dword [esi + 0x118]
sub edx, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461a18
mov esi, dword [ebp - 0x52c]
lea eax, [ebp - 0x20]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x534]
push eax
push str._nc_s
push 0x2800
push dword [ecx + 0x11c]
call fcn.0046468a
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461a6a
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461a7a
mov ecx, esi
lea eax, [ebp - 0x34]
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
push eax
push str._cnonce__s_
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x2800
push dword [edx + 0x11c]
call fcn.0046468a
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461ad0
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461ae0
mov ecx, esi
lea eax, [ebp - 0xc4]
shr ecx, 2
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0xb0], 0xf
cmova eax, dword [ebp - 0xc4]
push eax
push str._digest_uri__s_
push 0x2800
push dword [edx + 0x11c]
call fcn.0046468a
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461b47
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461b57
mov ecx, esi
lea eax, [ebp - 0x7c]
shr ecx, 2
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x68], 0xf
cmova eax, dword [ebp - 0x7c]
push eax
push str._response_s
push 0x2800
push dword [edx + 0x11c]
call fcn.0046468a
mov edx, dword [ebp - 0x534]
add esp, 0x10
mov esi, dword [edx + 0x11c]
mov ecx, esi
mov dword [ebp - 0x52c], ecx
mov al, byte [esi]
inc esi
test al, al
jne 0x461bb5
mov edi, dword [edx + 0x118]
sub esi, ecx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461bc5
mov ecx, esi
lea eax, [ebp - 0xac]
shr ecx, 2
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x52c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x530]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x98], 0xf
cmova eax, dword [ebp - 0xac]
push eax
push str._qop_s
push 0x2800
push dword [edx + 0x11c]
call fcn.0046468a
mov ecx, dword [ebp - 0x534]
add esp, 0x10
mov edx, dword [ecx + 0x11c]
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x461c26
mov edi, dword [ecx + 0x118]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x461c36
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x534]
mov ecx, dword [esi + 0x118]
call fcn.0045f957
mov ecx, dword [esi + 0x118]
mov edi, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461c68
sub ecx, edx
mov edx, edi
push ecx
lea ecx, [ebp - 0x94]
call fcn.0045f227
pop ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00463ded
lea ecx, [ebp - 0x94]
call fcn.0045f5fe
push edi
call dword [sym.imp.mfc140.dll_Ordinal_266]
push 0xf
pop edi
cmp dword [ebp - 0x50], edi
lea eax, [ebp - 0x64]
cmova eax, dword [ebp - 0x64]
push eax
push str._s_r_n
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
add esp, 0x14
push 6
pop ecx
call fcn.0045f853
push eax
mov ecx, esi
mov dword [ebp - 0x52c], eax
call fcn.00462be9
push dword [ebp - 0x52c]
mov ecx, esi
call fcn.00463607
push 0x4a37e8
push 0x2800
push dword [esi + 0x118]
call fcn.0046468a
add esp, 0xc
push 8
pop ecx
call fcn.0045f853
push eax
mov ecx, esi
mov dword [ebp - 0x52c], eax
call fcn.00462be9
push dword [ebp - 0x52c]
mov ecx, esi
call fcn.00463607
lea ecx, [ebp - 0xc4]
call fcn.0045f5fe
lea ecx, [ebp - 0xac]
call fcn.0045f5fe
mov ecx, dword [ebp - 0x38]
cmp ecx, edi
jbe 0x461d69
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461d60
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x461d60
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0046f55c
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x38], edi
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x4c], al
call fcn.0045f5fe
lea ecx, [ebp - 0x7c]
call fcn.0045f5fe
lea ecx, [ebp - 0x64]
call fcn.0045f5fe
mov al, 1
call fcn.0046fc75
ret 0x18
push 0xce
lea ecx, [ebp - 0x570]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push 0x1a1
lea ecx, [ebp - 0x574]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
lea eax, [ebp - 0x420]
push eax
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll___WSAFDIsSet]
test eax, eax
je 0x4609ec
push dword [esi + 0x120]
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x6d
lea ecx, [ebp - 0x578]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
jmp 0x461e64
push 0x6a
lea ecx, [ebp - 0x5a8]
call fcn.0045f848
push 0x4ac264
mov eax, ecx
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
call fcn.0045f21b
int3