Function at 0x569210
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x62ba38
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
mov ebx, ecx
mov ecx, dword [ebx + 0x31e0]
push esi
lea esi, [ebx + 0x31e0]
push edi
xor eax, eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], eax
mov eax, dword [ebx]
push 0x1e
push ecx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
call dword [eax + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x569283
lea ecx, [eax + 0x28]
call fcn.005495d0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edi, 0x2751
je 0x569293
cmp edi, 0x2743
jne 0x5692f9
mov eax, dword [ebx + 0xb0]
test dword [eax + 0x14c], 0x400000
jne 0x5692f9
mov dl, byte [eax + 0x16b]
push esi
test dl, dl
sete dl
mov byte [eax + 0x16b], dl
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x18]
mov eax, dword [esi]
mov edx, dword [ebx]
push 0x1e
push eax
mov ecx, ebx
call dword [edx + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x5692f9
lea ecx, [eax + 0x28]
call fcn.005495d0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
je 0x569378
mov dword [ebp - 0x24], 0
push edi
mov ecx, ebx
call fcn.0054cf10
test eax, eax
jne 0x56935f
mov eax, dword [ebp - 0x24]
inc eax
cmp eax, 5
mov dword [ebp - 0x24], eax
jg 0x56935f
mov edx, dword [ebx]
push esi
mov ecx, ebx
call dword [edx + 0x18]
mov ecx, dword [esi]
mov eax, dword [ebx]
push 0x1e
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
mov edi, eax
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x569304
lea ecx, [eax + 0x28]
call fcn.005495d0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
je 0x569378
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x3230], 1
mov eax, dword [ebx + 0x184]
test eax, eax
je 0x5693c5
mov cl, byte [eax + 0x15c]
test cl, cl
mov byte [ebp - 0x12], cl
je 0x5693c9
mov ecx, ebx
call fcn.00568f60
mov edi, eax
test edi, edi
je 0x56955a
cmp edi, 0x7585
jne 0x569458
mov ecx, ebx
call fcn.005630d0
mov edx, dword [ebx]
push esi
jmp 0x56aacd
mov byte [ebp - 0x12], 0
test eax, eax
je 0x56955a
mov cl, byte [eax + 0x137]
test cl, cl
je 0x56955a
mov ecx, dword [ebx + 0x3444]
test ecx, ecx
je 0x56955a
mov eax, dword [ecx + 0x335c]
lea edx, [ecx + 0x3308]
push edx
push eax
call fcn.005c9bd0
test eax, eax
jne 0x56adb1
mov ecx, dword [ebx + 0x3444]
push 1
lea edx, [ecx + 0x3318]
lea eax, [ecx + 0x3310]
push edx
mov edx, dword [ebx + 0x184]
push eax
mov eax, dword [edx]
lea edx, [ecx + 0x3308]
push eax
mov eax, dword [esi]
push edx
push eax
call fcn.005ca0a0
test eax, eax
je 0x569548
cmp eax, 0x757e
jne 0x56adb1
mov ecx, ebx
call fcn.005630d0
mov edx, dword [ebx]
push esi
jmp 0x56aacd
mov ecx, dword [ebx + 0x184]
mov al, byte [ecx + 0x15d]
test al, al
jne 0x5694e6
cmp edi, 0x7559
jne 0x5694e6
cmp dword [ecx + 0x154], 5
jne 0x5694e6
mov dl, byte [ecx + 0x15e]
test dl, dl
jne 0x5694e6
mov dl, byte [ecx + 0x15f]
test dl, dl
jne 0x5694e6
mov byte [ecx + 0x15e], 1
mov ecx, dword [ebx + 0x184]
mov byte [ecx + 0x15f], 1
mov edx, dword [ebx + 0x184]
mov ecx, ebx
mov dword [edx + 0x154], 4
call fcn.005630d0
mov eax, dword [ebx]
push esi
mov ecx, ebx
call dword [eax + 0x18]
test eax, eax
jne 0x56adb1
mov ecx, dword [ebp + 8]
push ecx
mov ecx, ebx
call fcn.00569210
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ecx + 0x154]
cmp edx, 5
jne 0x56950b
cmp edi, 0x7580
jne 0x56950b
cmp byte [ecx + 0x15e], 0
jne 0x56950b
mov byte [ecx + 0x15e], 1
jmp 0x5694a1
test al, al
jne 0x569533
cmp edx, 4
jne 0x569533
mov al, byte [ecx + 0x15e]
test al, al
je 0x569533
mov al, byte [ecx + 0x15f]
test al, al
je 0x569533
mov dword [ecx + 0x154], edx
mov edi, 0x7559
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x3444]
lea edx, [ecx + 0x3310]
push edx
call fcn.005caea0
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x569569
mov eax, dword [eax + 0x10]
jmp 0x569572
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x569646
mov ecx, dword [ebx + 0x184]
cmp dword [ecx], 0
je 0x5695d7
push 1
mov ecx, ebx
call fcn.0056bf50
test eax, eax
jne 0x56adb1
cmp dword [ebx + 0x3238], 0xc8
je 0x5695cd
mov edx, dword [ebx + 0x3220]
mov ecx, dword [ebx + 0x9c]
push edx
call fcn.00553840
mov eax, 0x756d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 0x10
mov eax, dword [ebx + 0x335c]
lea esi, [ebx + 0x3308]
push esi
push eax
mov ecx, ebx
call fcn.005c9bd0
test eax, eax
jne 0x56adb1
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x569602
mov eax, dword [eax]
jmp 0x56960a
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx]
lea edx, [ebx + 0x3318]
lea edi, [ebx + 0x3310]
push 1
push edx
push edi
push eax
mov eax, dword [ebx + 0x31e0]
push esi
push eax
mov ecx, ebx
call fcn.005ca0a0
test eax, eax
je 0x56963e
cmp eax, 0x757e
jne 0x56adb1
jmp 0x56aabd
push edi
mov ecx, ebx
call fcn.005caea0
mov esi, dword [ebp + 8]
test esi, esi
je 0x569656
mov ecx, ebx
call fcn.0056b0d0
jmp 0x56965f
mov edx, dword [ebx]
push 0
mov ecx, ebx
call dword [edx + 0x20]
test eax, eax
jne 0x56adb1
push esi
mov ecx, ebx
call fcn.0056add0
mov esi, eax
test esi, esi
jne 0x56971f
cmp dword [ebx + 0x3238], 0xce
jne 0x56971f
mov edi, dword [ebx + 0x3244]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56971f
mov eax, dword [ebx + 0xb4]
test eax, eax
jne 0x5696be
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.0060193a
or dword [ebp - 0x28], 1
mov eax, dword [eax]
push str.sciencedirect.com
push eax
call fcn.005e5290
mov edi, eax
mov al, byte [ebp - 0x28]
add esp, 8
test al, 1
je 0x5696df
lea ecx, [ebp - 0x2c]
call fcn.006018cc
test edi, edi
je 0x56971f
cmp dword [ebx + 0x31dc], 2
je 0x56971f
mov ecx, dword [ebx + 0x31e8]
test ecx, ecx
je 0x5696fd
mov edx, dword [ecx]
push 2
call dword [edx + 0xc]
mov ecx, ebx
mov dword [ebx + 0x31dc], 2
call fcn.005630d0
push str.Restart_type_11_n
mov ecx, ebx
call fcn.0054b0f0
jmp 0x56aac4
cmp dword [ebx + 0x3238], 0xc8
jne 0x569782
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x569782
mov eax, dword [ebx + 0x54]
xor edi, edi
cmp eax, edi
jg 0x569784
jl 0x569745
cmp dword [ebx + 0x50], edi
ja 0x569784
mov al, byte [ebx + 0x31ed]
test al, al
jne 0x569784
mov eax, dword [ebx + 0x3258]
mov ecx, dword [ebx + 0x325c]
mov edx, eax
or edx, ecx
je 0x569784
mov edx, dword [ebx + 0x31f8]
add eax, 1
adc ecx, edi
cmp eax, edx
jne 0x569784
cmp ecx, dword [ebx + 0x31fc]
jne 0x569784
mov esi, 0x7542
jmp 0x56999a
xor edi, edi
cmp esi, edi
je 0x569c92
cmp esi, 0x7563
jne 0x5697a9
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7581
jne 0x5697c6
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7566
jne 0x56999a
mov eax, dword [ebx + 0xb0]
push str..dailymotion.com
mov ecx, dword [eax]
push ecx
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56980a
mov edx, dword [ebx + 0xb0]
push str..dmcdn.net
mov eax, dword [edx]
push eax
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56999a
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 8]
cmp eax, edi
je 0x56999a
mov edx, dword [ecx + 0x14c]
test dh, 1
je 0x56999a
push 0x2e
push eax
call fcn.005e6160
add esp, 8
cmp eax, edi
je 0x56999a
push 0x6c94b4
push eax
call fcn.005e5520
add esp, 8
test eax, eax
jne 0x56999a
mov ecx, dword [0x6f175c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebx + 0xb0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
mov eax, dword [edx + 8]
push eax
push 0x6c5098
push ecx
call fcn.005fa6fb
mov edx, dword [ebp - 0x28]
add esp, 0xc
push 0x2e
push edx
call fcn.005e6160
add esp, 8
cmp eax, edi
je 0x56998e
mov byte [eax], 0
mov eax, dword [0x6f175c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
push ecx
push str._s.mnft
push edx
mov byte [ebp - 4], 2
call fcn.005fa6fb
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
add esp, 0xc
mov eax, dword [eax + 8]
test eax, eax
je 0x5698d1
push eax
call fcn.005fdcf6
add esp, 4
mov al, byte [0x6f5cb8]
test esi, esi
mov byte [ebp - 0x12], al
jne 0x5698e0
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005fdccd
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x56990c
push str.URL::set_fileName__:_Not_enough_memory__n
call fcn.005bd640
jmp 0x56992b
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebx
call fcn.005630d0
push str.Restart_type_12_n
mov ecx, ebx
call fcn.0054b0f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov esi, eax
test esi, esi
je 0x56997f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.006018cc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.006018cc
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.00569210
mov esi, eax
jmp 0x569952
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.006018cc
mov ecx, dword [0x6f175c]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebx + 0xb0]
lea edx, [ebp - 0x18]
push edi
push edx
mov byte [ebp - 4], 3
call fcn.00580150
mov eax, dword [ebp - 0x18]
push eax
call fcn.00498d70
add esp, 4
cmp esi, 0x7565
je 0x5699d7
cmp esi, 0x7542
jne 0x569b3a
mov ecx, dword [ebx + 0xb0]
mov dl, byte [ecx + 0x303]
test dl, dl
jne 0x569ab3
test al, al
je 0x569ab3
mov ecx, ebx
call fcn.005630d0
push str.Restart_type_14_n
mov ecx, ebx
call fcn.0054b0f0
cmp esi, 0x7542
jne 0x569a43
mov eax, dword [ebx + 0xb4]
cmp eax, edi
je 0x569a1d
mov eax, dword [eax + 0x10]
jmp 0x569a26
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 2
jne 0x569a43
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x158], edi
jne 0x569a43
mov dword [eax + 0x158], 1
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x569a78
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.006018cc
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp + 8]
push ecx
mov byte [eax + 0x303], 1
mov ecx, ebx
call fcn.00569210
mov esi, eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.006018cc
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7542
jne 0x569b3a
cmp dword [ebp + 8], edi
jne 0x569b3a
cmp dword [ebx + 0x54], edi
jl 0x569b4e
jg 0x569ad0
cmp dword [ebx + 0x50], edi
jbe 0x569b3a
cmp dword [ecx + 0x2dc], edi
je 0x569b3a
mov edx, dword [ebx + 0x31e8]
mov eax, dword [edx + 0xb8]
push eax
push edi
call fcn.005c3e60
mov ecx, ebx
call fcn.005630d0
push str.Restart_type_15_n
mov ecx, ebx
call fcn.0054b0f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x569b33
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.006018cc
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
jmp 0x569a89
cmp dword [ebx + 0x54], edi
jg 0x569c3b
jl 0x569b4e
cmp dword [ebx + 0x50], edi
ja 0x569c3b
mov al, byte [ebx + 0x31ed]
test al, al
jne 0x569c3b
cmp esi, 0x7565
je 0x569b88
cmp esi, 0x7566
je 0x569b88
cmp esi, 0x7542
je 0x569b88
cmp esi, 0x756e
je 0x569b88
cmp esi, 0x755e
jne 0x569c3b
mov eax, dword [ebx + 0xb0]
mov byte [ebx + 0x31ec], 1
mov byte [ebx + 0x31ed], 1
mov cl, byte [eax + 0x31a]
test cl, cl
je 0x569bad
mov byte [eax + 0x31c], 1
mov ecx, ebx
call fcn.005630d0
push str.Restart_type_16_n
mov ecx, ebx
call fcn.0054b0f0
cmp esi, 0x7542
jne 0x569bfd
mov eax, dword [ebx + 0xb4]
cmp eax, edi
je 0x569bd7
mov eax, dword [eax + 0x10]
jmp 0x569be0
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0x24]
cmp eax, 2
jne 0x569bfd
mov eax, dword [ebx + 0xb0]
cmp dword [eax + 0x158], edi
jne 0x569bfd
mov dword [eax + 0x158], 1
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov edi, eax
test edi, edi
je 0x569c32
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.006018cc
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
push eax
jmp 0x569a89
mov ecx, dword [ebx + 0x3200]
cmp ecx, edi
je 0x569a92
call fcn.0059b7a0
test al, al
jne 0x569a92
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31b]
test cl, cl
je 0x569a92
mov cl, byte [eax + 0x31c]
test cl, cl
jne 0x569a92
mov cl, byte [eax + 0x31d]
test cl, cl
jne 0x569a92
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.006018cc
cmp dword [ebx + 0x3200], edi
je 0x56a41a
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0xbc]
cmp eax, edi
jne 0x569cba
cmp esi, edi
je 0x56a41a
cmp eax, edi
je 0x569cd0
push str.text_html
push eax
call fcn.005e5520
add esp, 8
test eax, eax
sete byte [ebp - 0x11]
jmp 0x569cd4
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0x3200]
call fcn.0059b7a0
test al, al
jne 0x56a41a
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31b]
test cl, cl
je 0x56a41a
mov cl, byte [eax + 0x31c]
test cl, cl
jne 0x56a41a
mov cl, byte [eax + 0x31d]
test cl, cl
jne 0x56a41a
mov al, byte [ebp - 0x11]
test al, al
jne 0x569d26
cmp esi, edi
je 0x56a41a
mov eax, dword [0x6f175c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x44], edi
mov word [ebp - 0x48], di
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x28]
push eax
lea edx, [ebp - 0x34]
push ecx
lea eax, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x20]
push ecx
mov ecx, dword [ebx + 0x3200]
lea eax, [ebp - 0x24]
push edx
push eax
mov byte [ebp - 4], 9
call fcn.0059b6c0
test al, al
je 0x56a3d2
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x31c], 1
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x31a], 1
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x31d], 1
mov ecx, dword [ebx + 0x3200]
call fcn.0059b690
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebx + 0xb0]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebx + 0xb0]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], esi
mov eax, dword [esi]
test eax, eax
je 0x569de3
push eax
call fcn.005fdcf6
add esp, 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005fdccd
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi], edx
jne 0x569e6c
push str.URL::set_serverName__:_Not_enough_memory__n
mov ecx, esi
call fcn.005bd640
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.006018cc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.006018cc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.006018cc
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.006018cc
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.006018cc
mov eax, 0x753b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x190], 0
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 4]
test eax, eax
je 0x569eb5
push eax
call fcn.005fdcf6
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x569ec0
mov dword [edi + 4], edx
jmp 0x569f1f
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x569ed6
mov eax, dword [ebp - 0x2c]
mov dword [eax + 4], edx
jmp 0x569f1f
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005fdccd
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 4], edx
jne 0x569f00
push str.URL::set_serverPath__:_Not_enough_memory__n
jmp 0x569e07
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [eax + 8]
test eax, eax
je 0x569f3b
push eax
call fcn.005fdcf6
add esp, 4
mov cl, byte [0x6f5cb8]
test esi, esi
mov byte [ebp - 0x12], cl
jne 0x569f4b
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005fdccd
mov ecx, dword [ebp - 0x3c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x569f75
push str.URL::set_fileName__:_Not_enough_memory__n
jmp 0x569e07
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x569fb0
push eax
call fcn.005fdcf6
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x569fbb
mov dword [edi + 0x1c], edx
jmp 0x56a01c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x569fd1
mov ecx, dword [ebp - 0x2c]
mov dword [ecx + 0x1c], edx
jmp 0x56a01c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005fdccd
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 0x1c], edx
jne 0x569ffd
push str.URL::set_Cookie__:_Not_enough_memory__n
call fcn.005bd640
jmp 0x56a01c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
push 0x6f5cb8
add ecx, 0xc4
call fcn.00601a55
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x309], 0
mov esi, dword [ebx + 0xb0]
mov eax, dword [esi + 0x18]
test eax, eax
je 0x56a055
push eax
call fcn.005fdcf6
add esp, 4
mov edx, 0x6f5cb8
test edx, edx
jne 0x56a063
mov dword [esi + 0x18], edx
jmp 0x56a0c9
mov edi, 0x6f5cb8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x56a079
mov dword [esi + 0x18], eax
jmp 0x56a0c9
mov edi, 0x6f5cb8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005fdccd
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0x18], edx
jne 0x56a0a7
push str.URL::set_Referer__:_Not_enough_memory__n
mov ecx, esi
call fcn.005bd640
jmp 0x56a0c9
mov edi, 0x6f5cb8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56a10f
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56a10f
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x420]
test edx, edx
jne 0x56a0f3
push eax
call fcn.005c3d30
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x420]
test eax, eax
je 0x56a10f
push str.Referer
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x56a119
lea eax, [ebp - 0x48]
push eax
call fcn.005e519b
add esp, 4
test eax, eax
je 0x56a187
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x56a130
lea eax, [ebp - 0x48]
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005c1d60
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56a187
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56a15c
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005bff40
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x56a187
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edx
push 0x13c9
push 0x111
push eax
call esi
jmp 0x56a18d
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebx + 0xb0]
push 0x6f5cb8
mov byte [ecx + 0x18a], 1
mov ecx, dword [ebx + 0xb0]
add ecx, 0x174
call fcn.00601a55
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x170], 0
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x30f], 0
mov ecx, dword [ebx + 0xb0]
push ecx
mov byte [ebx + 0xc8], 0
call fcn.00503ca0
add esp, 4
mov ecx, ebx
call fcn.00563580
mov eax, dword [ebx + 0xac]
test eax, eax
jne 0x56a27c
mov edx, dword [ebx + 0xa0]
mov eax, dword [edx]
mov eax, dword [eax]
test eax, eax
je 0x56a212
push 0
push 0x1478
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56a27c
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56a27c
mov ecx, dword [ebx + 0xb0]
push 0
push 0
push eax
call fcn.005bf7a0
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x56a259
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x56a27c
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31d8]
test eax, eax
je 0x56a2a5
push eax
mov byte [ebp - 4], 0xa
call fcn.005fdcf6
add esp, 4
jmp 0x56a29e
mov dword [ebp - 4], 9
mov ecx, dword [ebx + 0xb0]
mov dword [ebx + 0x31d8], 0
call fcn.005c2330
mov ecx, ebx
call fcn.005630d0
push str.Restart_type_17_n
mov ecx, ebx
call fcn.0054b0f0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov esi, eax
test esi, esi
jne 0x56a375
mov ecx, dword [ebp + 8]
push ecx
mov ecx, ebx
call fcn.00569210
mov esi, eax
test esi, esi
jne 0x56a375
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + 0xbc]
test eax, eax
je 0x56a375
push str.text_html
push eax
call fcn.005e5520
add esp, 8
test eax, eax
je 0x56a375
mov eax, dword [ebx + 0x31e8]
test eax, eax
je 0x56a375
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x56a375
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x420]
test edx, edx
jne 0x56a342
push eax
call fcn.005c3d30
mov ebx, dword [ebx + 0xb0]
mov eax, dword [ebx + 0x420]
test eax, eax
je 0x56a375
lea eax, [ebp + 8]
push 4
push eax
mov dword [ebp + 8], 1
mov ecx, dword [ebx + 0x420]
push 4
push 0
push str.noSyntRef
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.006018cc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.006018cc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.006018cc
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.006018cc
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.006018cc
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.006018cc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.006018cc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.006018cc
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.006018cc
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.006018cc
mov edx, dword [ebx + 0x3238]
cmp edx, 0xc8
jne 0x56a444
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x56a444
mov ecx, dword [ebx + 0x31f8]
mov eax, dword [ebx + 0x31fc]
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], eax
cmp edx, 0xce
jne 0x56a53f
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x56a48e
cmp dword [ebx + 0x54], edi
jg 0x56a48e
jl 0x56a466
cmp dword [ebx + 0x50], edi
ja 0x56a48e
mov eax, dword [ebx + 0x31f8]
mov ecx, dword [ebx + 0x31fc]
mov esi, eax
or esi, ecx
je 0x56a48e
mov esi, dword [ebx + 0x3258]
mov edi, dword [ebx + 0x325c]
or esi, edi
jne 0x56a48e
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], ecx
cmp edx, 0xce
jne 0x56a53f
mov edx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or edx, eax
jne 0x56a53f
mov edi, dword [ebx + 0x54]
mov eax, dword [ebx + 0x50]
test edi, edi
jg 0x56a52d
jl 0x56a4b8
test eax, eax
ja 0x56a4e8
mov esi, dword [ebx + 0x3258]
mov ecx, dword [ebx + 0x325c]
mov eax, esi
or eax, ecx
je 0x56a4e8
mov eax, dword [ebx + 0x31fc]
mov edx, dword [ebx + 0x31f8]
cmp ecx, eax
jg 0x56a4e8
jl 0x56a4e0
cmp esi, edx
jae 0x56a4e8
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], eax
jmp 0x56a53f
test edi, edi
jg 0x56a52d
jl 0x56a4f5
mov eax, dword [ebx + 0x50]
test eax, eax
ja 0x56a52d
mov edx, dword [ebx + 0x31f8]
mov edi, dword [ebx + 0x31fc]
mov ecx, edx
or ecx, edi
je 0x56a52d
mov esi, dword [ebx + 0x3258]
mov eax, edx
add eax, 1
mov ecx, edi
adc ecx, 0
cmp esi, eax
jne 0x56a52d
mov eax, dword [ebx + 0x325c]
cmp eax, ecx
jne 0x56a52d
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], edi
jmp 0x56a53f
mov ecx, dword [ebx + 0x3258]
mov edx, dword [ebx + 0x325c]
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], edx
mov edx, dword [ebx + 0x3238]
cmp edx, 0xc8
je 0x56a555
cmp edx, 0xce
jne 0x56a57b
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x56a57b
mov eax, dword [ebx + 0x3274]
mov ecx, dword [ebx + 0x3270]
test eax, eax
jl 0x56a57b
jg 0x56a575
test ecx, ecx
jbe 0x56a57b
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], eax
mov eax, dword [ebx + 0xb0]
xor esi, esi
mov dword [ebp - 0x28], eax
cmp dword [eax + 0x2fc], esi
je 0x56a5cc
mov eax, dword [ebx + 0x31e8]
cmp eax, esi
je 0x56a5cc
cmp dword [eax + 0x40], esi
je 0x56a5cc
cmp edx, 0xc8
jne 0x56a5c6
mov eax, dword [ebx + 0x31fc]
mov ecx, dword [ebx + 0x31f8]
cmp eax, esi
jl 0x56a5c6
jg 0x56a5bb
cmp ecx, esi
jbe 0x56a5c6
sub ecx, 1
sbb eax, esi
mov dword [ebx + 0x60], ecx
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x4c], esi
mov esi, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
mov ecx, esi
or ecx, eax
je 0x56a6b2
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov edi, ecx
or edi, edx
je 0x56a6b2
cmp ecx, esi
jne 0x56a605
cmp edx, dword [ebx + 0x4c]
je 0x56a6b2
mov esi, dword [eax + 0xc8]
mov edi, dword [eax + 0xcc]
or esi, edi
je 0x56a6b2
cmp byte [ebx + 0x3240], 0
jne 0x56a6b2
cmp dword [ebx + 0x3238], 0xce
jne 0x56a668
mov edi, dword [ebx + 0x3258]
mov esi, dword [ebx + 0x325c]
sub ecx, 1
sbb edx, 0
cmp edi, ecx
jne 0x56a668
cmp esi, edx
jne 0x56a668
mov edx, dword [ebx + 0x3260]
mov ecx, dword [ebx + 0x3264]
or edx, ecx
jne 0x56a668
mov dword [ebx + 0x3260], edi
mov dword [ebx + 0x3264], esi
mov esi, dword [ebx + 0x3260]
mov ecx, dword [ebx + 0x3264]
mov edx, esi
or edx, ecx
je 0x56a96d
mov edi, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov ecx, edi
mov dword [ebp - 0x3c], edx
sub ecx, 1
sbb edx, 0
cmp esi, ecx
jne 0x56a96d
cmp dword [ebx + 0x3264], edx
jne 0x56a96d
mov eax, dword [ebp - 0x3c]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x4c], eax
mov al, byte [ebx + 0x3240]
test al, al
jne 0x56ab7d
mov eax, dword [ebp - 0x28]
mov esi, dword [eax + 0xbc]
test esi, esi
je 0x56ab57
mov edx, dword [eax + 0x108]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56ab57
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56ab57
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
push edx
call fcn.005e89c0
add esp, 0xc
test eax, eax
je 0x56ab57
mov ecx, dword [ebx + 0xb0]
push 9
push str.text_html
mov byte [ebp - 0x11], 1
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56a75e
mov edx, dword [ebx + 0xb0]
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56a75e
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0xb0]
push 0xa
push 0x6c7f28
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56a7a2
mov edx, dword [ebx + 0xb0]
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56a7a2
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0xb0]
push 0x15
push str.application_x_mpegURL
mov eax, dword [ecx + 0x108]
push eax
call fcn.005e89c0
add esp, 0xc
test eax, eax
jne 0x56a81a
mov edx, dword [ebx + 0xb0]
push 0x1d
push str.application_vnd.apple.mpegurl
mov eax, dword [edx + 0xbc]
push eax
call fcn.005e89c0
add esp, 0xc
test eax, eax
je 0x56a800
mov ecx, dword [ebx + 0xb0]
push str.video_MP2T
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e5520
add esp, 8
test eax, eax
jne 0x56a81a
mov ecx, dword [ebx + 0xb0]
push 0x6f5cb8
add ecx, 0x108
mov byte [ebp - 0x11], 0
call fcn.00601a55
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56a90a
mov edx, dword [ebx + 0xb0]
push str..youtube.com
mov eax, dword [edx]
push eax
call fcn.005e5290
add esp, 8
test eax, eax
jne 0x56a876
mov ecx, dword [ebx + 0xb0]
push str..googlevideo.com
mov edx, dword [ecx]
push edx
call fcn.005e5290
add esp, 8
test eax, eax
je 0x56a90a
mov eax, dword [ebx + 0xb0]
mov esi, dword [eax + 8]
test esi, esi
je 0x56a90a
mov ecx, 7
mov edi, str.videoplayback_
xor edx, edx
repe cmpsw word [esi], word es:[edi]
jne 0x56a90a
mov eax, dword [eax + 0xbc]
push 6
push str.video_
push eax
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56a8f0
mov ecx, dword [ebx + 0xb0]
push 6
push str.audio_
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005e74f0
add esp, 0xc
test eax, eax
jne 0x56a8f0
mov eax, dword [ebx + 0xb0]
push str.application_octet_stream
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e5520
add esp, 8
test eax, eax
jne 0x56a90a
mov ecx, dword [ebx + 0xb0]
push 0x6f5cb8
add ecx, 0x108
mov byte [ebp - 0x11], 0
call fcn.00601a55
mov al, byte [ebp - 0x11]
test al, al
je 0x56ab57
mov ecx, dword [ebx + 0x31e8]
mov eax, dword [ecx + 0x13c]
test eax, eax
je 0x56aaf8
mov eax, dword [ebx + 0xb0]
mov dl, byte [eax + 0x31f]
test dl, dl
jne 0x56a947
mov dl, byte [eax + 0x16a]
test dl, dl
je 0x56aaf8
mov edx, dword [ecx + 0xc8]
lea eax, [ecx + 0xc8]
mov ecx, dword [ecx + 0xcc]
or edx, ecx
je 0x56ab57
mov byte [ebx + 0x3240], 1
jmp 0x56ab57
cmp dword [ebx + 0x3238], 0xce
jne 0x56a9c8
mov esi, dword [ebx + 0x3278]
mov ecx, dword [ebx + 0x327c]
mov edx, esi
or edx, ecx
je 0x56a9c8
mov edi, dword [eax + 0xd0]
mov edx, dword [eax + 0xd4]
mov ecx, edi
mov dword [ebp - 0x3c], edx
sub ecx, esi
mov esi, dword [ebx + 0x327c]
sbb edx, esi
mov esi, dword [ebx + 0x31f8]
cmp esi, ecx
jne 0x56a9c8
mov ecx, dword [ebx + 0x31fc]
cmp ecx, edx
jne 0x56a9c8
mov edx, dword [ebp - 0x3c]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x4c], edx
jmp 0x56a6b2
mov ecx, dword [eax + 0x13c]
mov esi, dword [ebp - 0x28]
test ecx, ecx
je 0x56a9f5
mov cl, byte [esi + 0x31f]
test cl, cl
jne 0x56a9e9
mov cl, byte [esi + 0x16a]
test cl, cl
je 0x56a9f5
mov byte [ebx + 0x3240], 1
jmp 0x56a6b2
mov dl, byte [ebx + 0x324d]
test dl, dl
je 0x56aa33
mov ecx, dword [eax + 0xd0]
mov edi, dword [ebx + 0x3258]
mov eax, dword [eax + 0xd4]
cmp edi, ecx
jne 0x56aa33
mov edi, dword [ebx + 0x325c]
cmp edi, eax
jne 0x56aa33
cmp dword [ebx + 0x3238], 0xce
jne 0x56aa33
mov dword [ebx + 0x48], ecx
jmp 0x56a6af
mov eax, dword [ebx + 0x54]
mov ecx, dword [ebx + 0x50]
test eax, eax
jg 0x56aa7f
jl 0x56aa43
test ecx, ecx
ja 0x56aa6d
cmp byte [ebx + 0x31ed], 0
jne 0x56aa6d
mov byte [ebx + 0x31ec], 1
mov byte [ebx + 0x31ed], 1
mov al, byte [esi + 0x31a]
test al, al
je 0x56aabd
mov byte [esi + 0x31c], 1
jmp 0x56aabd
test eax, eax
jl 0x56ab38
jg 0x56aa7f
test ecx, ecx
jbe 0x56ab38
mov al, byte [ebx + 0x31f4]
test al, al
jne 0x56ab38
test dl, dl
jne 0x56ab38
mov byte [ebx + 0x324d], 1
mov dword [esi + 0x2dc], 1
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x31a]
test cl, cl
je 0x56aabd
mov byte [eax + 0x31c], 1
mov ecx, ebx
call fcn.005630d0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
test eax, eax
jne 0x56adb1
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.00569210
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005e74f0
add esp, 0xc
test eax, eax
je 0x56ab38
mov ecx, dword [ebx + 0x48]
mov edx, dword [ebx + 0x4c]
mov eax, ecx
or eax, edx
je 0x56ab38
mov eax, dword [ebx + 0xb0]
add eax, 0x128
cmp ecx, dword [eax]
jne 0x56ab38
cmp edx, dword [eax + 4]
je 0x56ab57
mov ecx, ebx
call fcn.005630d0
mov eax, 0x757a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebx + 0x3240]
test al, al
jne 0x56ab7d
mov edx, dword [ebx + 0x320c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x56ab7d
push edx
mov ecx, ebx
call fcn.00574660
push 0x6f5cb8
lea ecx, [ebx + 0x320c]
xor esi, esi
call fcn.00601a55
mov al, byte [ebx + 0x3240]
test al, al
je 0x56acf8
lea ecx, [ebx + 0x10]
mov byte [ebx + 0x3240], 0
call fcn.00553a30
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0xb0]
cmp ecx, esi
lea ecx, [eax + 0x28]
setne byte [ebp - 0x12]
call fcn.005406c0
mov ecx, dword [ebx + 0x31e8]
mov dword [ecx + 0xc8], esi
mov dword [ecx + 0xcc], esi
mov edx, dword [ebx + 0x31e8]
mov dword [edx + 0xd0], esi
mov dword [edx + 0xd4], esi
mov eax, dword [ebx + 0x31e8]
mov dword [eax + 0x1c0], esi
mov dword [eax + 0x1c4], esi
mov eax, dword [ebx + 0x31e8]
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x68], esi
mov dword [ebx + 0x70], esi
mov dword [ebx + 0x58], esi
mov dword [ebx + 0x31f8], esi
mov dword [ebx + 0x3250], esi
mov dword [ebx + 0x3258], esi
mov dword [ebx + 0x3260], esi
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x3270], esi
cmp eax, esi
mov dword [ebx + 0x323c], esi
mov dword [ebx + 0x90], esi
mov dword [ebx + 0x54], esi
mov dword [ebx + 0x64], esi
mov dword [ebx + 0x6c], esi
mov dword [ebx + 0x74], esi
mov dword [ebx + 0x5c], esi
mov dword [ebx + 0x31fc], esi
mov dword [ebx + 0x3254], esi
mov dword [ebx + 0x325c], esi
mov dword [ebx + 0x3264], esi
mov dword [ebx + 0x4c], esi
mov dword [ebx + 0x3274], esi
je 0x56ac79
mov byte [eax + 0x85d], 0
mov ecx, ebx
call fcn.005630d0
mov edx, dword [ebx]
lea eax, [ebx + 0x31e0]
push eax
mov ecx, ebx
call dword [edx + 0x18]
cmp eax, esi
jne 0x56adb1
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.00569210
mov edi, eax
cmp edi, esi
je 0x56acba
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebp - 0x12]
test al, al
je 0x56acdc
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x30]
mov ecx, dword [ebx + 0x31e8]
push edx
push ebx
add ecx, 0x28
call fcn.005426c0
mov edi, eax
mov ecx, ebx
call fcn.0054f390
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 6
mov dword [ebx + 0xa8], esi
mov eax, dword [0x6f75d0]
push 1
push eax
mov ecx, ebx
call fcn.0054b020
cmp dword [ebx + 0xac], esi
jne 0x56ad46
mov eax, dword [ebx + 0x31e8]
mov ecx, dword [eax + 0x18]
cmp ecx, esi
je 0x56ad46
mov edx, dword [eax + 0xb8]
mov eax, dword [ecx]
push edx
push 0x13f8
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov al, byte [ebp - 0x12]
test al, al
je 0x56ad86
mov ebx, dword [ebx + 0x184]
mov eax, 4
cmp dword [ebx + 0x154], eax
jne 0x56ad86
mov cl, byte [ebx + 0x15e]
test cl, cl
je 0x56ad86
mov edx, dword [0x6f6360]
lea ecx, [ebp + 8]
push eax
push ecx
push eax
push esi
push str.SocksType
push edx
mov dword [ebp + 8], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4