Function at 0x426b3d
Capabilities:
Reference google public dns server

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x14
call fcn.004ca16c
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x95e3d2
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
push 8
call fcn.004ca16c
add esp, 4
mov dword [ebp - 0x28], eax
mov edi, eax
mov esi, 0x56fe5a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
push 0x10
call fcn.004ca16c
add esp, 4
mov dword [ebp - 0x34], eax
mov edi, eax
mov esi, 0x95e3da
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
push 0x10
call fcn.004ca16c
add esp, 4
mov dword [ebp - 0x44], eax
mov edi, eax
mov esi, 0x95e3da
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
jmp 0x426c22
push 1
push 1
push 0x9f22d4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
push 1
push 1
push 0x9f22d8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
push 1
push 1
push 0x9f22c8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
push 1
push 1
push 0x9f22cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
push 0
push 1
push 0xffffffffffffffff
push 6
push 0x16015b3f
push 0x52015ac8
call fcn.004ca184
add esp, 0x18
push 0x95bef6
push dword [0x9f224c]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push dword [0x9f2374]
push 1
mov ebx, 0x4cd830
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push 0x95bf03
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x426cfc
push ebx
call fcn.004ca160
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95c067
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x426d21
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426d35
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cead0
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426d5b
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x426d6b
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [0x9f23d4]
test ebx, ebx
je 0x426d82
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23d4], eax
push 0x56fd2c
push dword [0x9f23d4]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x426ded
mov ebx, dword [0x9f2358]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 1
push 0xff
push 0xffffff
call fcn.0040eab1
mov dword [ebp - 0x4c], eax
push 1
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
jmp 0x426e4d
push 0x56fd2c
push dword [0x9f23d4]
call fcn.00401021
add esp, 8
cmp eax, 0
je 0x426e4d
mov ebx, dword [0x9f2358]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 1
push 0xff
push 0x80e000
call fcn.0040eab1
mov dword [ebp - 0x4c], eax
push 1
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x95bef6
push dword [0x9f224c]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push dword [0x9f2374]
push 1
mov ebx, 0x4cd830
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push 0x95bf03
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x426eb2
push ebx
call fcn.004ca160
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95ce1c
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x426ed7
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426eeb
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cead0
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426f11
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x426f21
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x426f35
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x95bef6
push dword [0x9f224c]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95c02c
push reloc.WS2_32.dll_connect
push 0
push 0x95bf54
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426f85
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cead0
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426fab
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x426fbf
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95ce29
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23a4]
test eax, eax
jne 0x426fea
mov eax, 0x56fd2c
push eax
push 3
mov ebx, 0x4cccf0
call fcn.004ca166
add esp, 0x28
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x427022
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42701e
imul eax, dword [ebx]
jmp 0x427013
mov ecx, eax
test ecx, ecx
je 0x427041
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42703a
push ebx
push eax
call fcn.004ca160
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x427028
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebx]
test eax, eax
je 0x427083
push eax
mov ebx, eax
call fcn.00401661
inc eax
push eax
call fcn.004ca16c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x427094
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebx]
test eax, eax
je 0x4270ce
push eax
mov ebx, eax
call fcn.00401661
inc eax
push eax
call fcn.004ca16c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4270df
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 2
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebx]
test eax, eax
je 0x427119
push eax
mov ebx, eax
call fcn.00401661
inc eax
push eax
call fcn.004ca16c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x42712a
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x570493
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040745a
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x42716e
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x427182
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x570493
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00412eb1
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4271c6
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4271da
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x95bef6
push dword [0x9f224c]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push dword [0x9f2374]
push 1
mov ebx, 0x4cd830
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push 0x95bf03
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x427243
push ebx
call fcn.004ca160
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.ipsj
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x427268
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x42727c
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cead0
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4272a2
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4272b2
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [0x9f23b8]
test ebx, ebx
je 0x4272c9
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23b8], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 8
call fcn.004ca16c
add esp, 4
mov dword [ebp - 0x54], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x6c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
push 0x9f23b8
call fcn.00402b63
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x4273ff
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x427412
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427422
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x427432
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x427442
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x427452
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x427462
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x427472
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x427482
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x54]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x4ca2e0
call fcn.004ca166
add esp, 0x10
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x90]
test eax, eax
jne 0x4274bb
mov eax, 0x56fe5a
push eax
push 1
mov ebx, 0x4cd830
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x4274e7
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [0x9f237c]
test ebx, ebx
je 0x427501
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f237c], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 0x9f2318
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x42755d
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95ce2b
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x42758e
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4275b4
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x5c], 0xffffffff
je 0x427bc3
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 0x9f23d8
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x104]
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4275f0
push ebx
call fcn.004ca160
add esp, 4
mov eax, 0x95ce31
xor ecx, ecx
test eax, eax
je 0x4275fe
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x4c]
xor ebx, ebx
test eax, eax
je 0x42760f
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x427626
dec eax
test ecx, ecx
je 0x427626
call fcn.0040429b
add esp, 0xc
test eax, eax
mov eax, 0
sete al
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x427646
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x50], 0
jne 0x42770b
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 0x9f2318
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4276a6
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95d026
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x64]
test eax, eax
jne 0x4276d7
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x4276fd
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x68], 0xffffffff
jne 0x42770b
xor eax, eax
jmp 0x427710
mov eax, 1
test eax, eax
je 0x427bc3
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 0x9f2318
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x42776e
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95d026
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x42779f
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4277c5
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x427827
push 1
push 1
push 0x9f2344
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
push 1
push 1
push 0x9f2348
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
push 1
push 1
push 0x9f234c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
push 1
push 1
push 0x9f2350
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.steamwebhelper.exe
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f237c]
test eax, eax
jne 0x42785a
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
jne 0x4278fb
push 1
push 0
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x95d048
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
push 0x9f237c
call fcn.0040745a
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4278b6
push ebx
call fcn.004ca160
add esp, 4
push str.___steamwebhelper.exe_:_Valve_Corp._
push dword [ebp - 0x50]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4278de
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [0x9f237c]
test ebx, ebx
je 0x4278f5
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f237c], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.steamcommunity.com
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23dc]
test eax, eax
jne 0x42792e
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
jne 0x4279a5
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.store.steampowered.com
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23dc]
test eax, eax
jne 0x427981
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffff
jne 0x4279a5
xor eax, eax
jmp 0x4279aa
mov eax, 1
test eax, eax
je 0x427a5d
push str._store.steampowered.com
push dword [0x9f2274]
push str._steamcommunity.com_r_n
push dword [0x9f2278]
push str._Copyright__c__1993_2009_Microsoft_Corp._r_n_r_n_This_is_a_sample_HOSTS_file_used_by_Microsoft_TCP_IP_for_Windows._r_n_r_n_This_file_contains_the_mappings_of_IP_addresses_to_host_names._Each_r_n_entry_should_be_kept_on_an_individual_line._The_IP_address_should_r_n_be_placed_in_the_first_column_followed_by_the_corresponding_host_name._r_n_The_IP_address_and_the_host_name_should_be_separated_by_at_least_one_r_n_space._r_n_r_n_Additionally__comments__such_as_these__may_be_inserted_on_individual_r_n_lines_or_following_the_machine_name_denoted_by_a__symbol._r_n_r_n_For_example:_r_n_r_n______102.54.94.97_____rhino.acme.com___________source_server_r_n_______38.25.63.10_____x.acme.com_______________x_client_host_r_n_r_n_localhost_name_resolution_is_handled_within_DNS_itself._r_n_t127.0.0.1_______localhost_r_n_t::1_____________localhost_r_n_r_n
mov ecx, 5
call fcn.004016cc
add esp, 0x14
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4279f0
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cce80
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x427a16
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x427a29
mov eax, 0x56fe5a
push eax
push reloc.WS2_32.dll_connect
push 0
push str.C:WINDOWS_system32driversetchosts
push 2
mov ebx, 0x4cdd90
call fcn.004ca166
add esp, 0x1c
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x427a58
push ebx
call fcn.004ca160
add esp, 4
jmp 0x427bc3
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.steamcommunity.com
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23dc]
test eax, eax
jne 0x427a90
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
jne 0x427b0a
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.store.steampowered.com
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23dc]
test eax, eax
jne 0x427ae3
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffff
jne 0x427b0a
mov eax, 1
jmp 0x427b0f
mov eax, 0
test eax, eax
je 0x427bc3
push str._store.steampowered.com
push dword [0x9f2274]
push str._steamcommunity.com_r_n
push dword [0x9f2278]
push 0x570374
push dword [0x9f23dc]
mov ecx, 6
call fcn.004016cc
add esp, 0x18
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x427b5b
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cce80
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x427b81
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x427b94
mov eax, 0x56fe5a
push eax
push reloc.WS2_32.dll_connect
push 0
push str.C:WINDOWS_system32driversetchosts
push 2
mov ebx, 0x4cdd90
call fcn.004ca166
add esp, 0x1c
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x427bc3
push ebx
call fcn.004ca160
add esp, 4
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x95d048
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
mov eax, 0x95d42a
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 0x9f237c
call fcn.004062d8
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x427c10
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x427c20
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x427c34
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95d42d
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x427c5d
mov eax, 0x56fd2c
push eax
push 3
mov ebx, 0x4cccf0
call fcn.004ca166
add esp, 0x28
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x427c95
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x427c91
imul eax, dword [ebx]
jmp 0x427c86
mov ecx, eax
test ecx, ecx
je 0x427cb4
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x427cad
push ebx
push eax
call fcn.004ca160
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x427c9b
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x28]
call fcn.00404347
xor ecx, ecx
push eax
lea eax, [ebp - 0x2c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x427e1b
mov ebx, dword [ebp - 0x28]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x2c]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov eax, 0x95d431
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x48]
call fcn.0040745a
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x427d37
push ebx
call fcn.004ca160
add esp, 4
push 0x95ce29
push dword [ebp - 0x58]
push dword [ebp - 0x30]
mov ecx, 3
call fcn.004016cc
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x427d62
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x427d76
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x28]
call fcn.00404347
cmp dword [ebp - 0x2c], eax
jne 0x427e13
push 0x56fe29
push dword [ebp - 0x30]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x427db7
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov eax, 0x95d435
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040745a
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x427dfb
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x427e0f
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
pop eax
pop ebx
pop ecx
jmp 0x427cd1
add esp, 0xc
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x427e3a
push eax
mov ebx, eax
call fcn.00401661
inc eax
push eax
call fcn.004ca16c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x9f23e0]
test ebx, ebx
je 0x427e4e
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23e0], eax
push 0x80000301
push 0
push 0x13
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23b8]
test eax, eax
jne 0x427e75
mov eax, 0x56fd2c
push eax
push 2
mov ebx, 0x4cc270
call fcn.004ca166
add esp, 0x1c
mov dword [ebp - 0x48], eax
push str.http:__yxk.zipao.cn_
push dword [ebp - 0x48]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x427eb9
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x4c], 0
jne 0x427f36
push 0x80000301
push 0
push 0x14
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23b8]
test eax, eax
jne 0x427ee4
mov eax, 0x56fd2c
push eax
push 2
mov ebx, 0x4cc270
call fcn.004ca166
add esp, 0x1c
mov dword [ebp - 0x50], eax
push str.http:__yxk.zipao.cn_
push dword [ebp - 0x50]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x427f28
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x54], 0
jne 0x427f36
xor eax, eax
jmp 0x427f3b
mov eax, 1
test eax, eax
je 0x42a028
push 0x95c039
push dword [ebp - 8]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x4281ff
push 1
push 1
call fcn.0042a258
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 5
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x427f96
mov eax, 0x56fd2c
push eax
push 3
mov ebx, 0x4cc300
call fcn.004ca166
add esp, 0x28
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x427fbc
push ebx
call fcn.004ca160
add esp, 4
push 0x95d44d
push dword [ebp - 0x4c]
push 0x95d450
mov ecx, 3
call fcn.004016cc
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x427fe9
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x427ffc
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cce80
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x428022
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [0x9f23e4]
test ebx, ebx
je 0x428039
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23e4], eax
push dword [ebp - 0x14]
push 0x95d453
push dword [ebp - 0x10]
push 0x95d456
push dword [ebp - 0x18]
push str.ss:__
mov ecx, 6
call fcn.004016cc
add esp, 0x18
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0042a738
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428083
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x428096
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4280bc
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [0x9f23e8]
test ebx, ebx
je 0x4280d3
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23e8], eax
push 0x9f237c
call fcn.0042a738
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4280f9
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42811f
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [0x9f23ec]
test ebx, ebx
je 0x428136
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23ec], eax
push str.zipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push dword [0x9f23ec]
push str.__cs
push dword [0x9f23e8]
push 0x95d471
mov ecx, 4
call fcn.004016cc
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4281a2
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4281b6
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4281ea
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4281fa
push ebx
call fcn.004ca160
add esp, 4
jmp 0x42a028
push 0x95c042
push dword [ebp - 8]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x4288ac
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x428243
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x95d475
push dword [ebp - 0x20]
push str.__k
push dword [ebp - 0x4c]
push str.__b_127.0.0.1__l_9111__m
push dword [ebp - 0x14]
push str.__p
push dword [ebp - 0x10]
push 0x95d471
mov ecx, 9
call fcn.004016cc
add esp, 0x24
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x42829e
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4282b4
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
push 0x80000301
push 0
push 5
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23b4]
test eax, eax
jne 0x4282db
mov eax, 0x56fd2c
push eax
push 2
mov ebx, 0x4cc270
call fcn.004ca166
add esp, 0x1c
mov dword [ebp - 0x48], eax
push 0x95d49d
push dword [ebp - 0x48]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42831f
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x428348
mov eax, str.8.8.8.8
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x42833f
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
jmp 0x428362
mov eax, str.8.8.8.8
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x42835e
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
call fcn.0041e98d
mov dword [ebp - 0x48], eax
push 0x56fd2c
push dword [ebp - 0x48]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428398
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x4283f8
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0x95d4ab
push dword [ebp - 0x38]
push str._proxyServer_127.0.0.1:9111__tunAddr_10.7.6.15__tunMask_255.255.255.0__tunGw_10.7.6.1__tunDns
mov ecx, 3
call fcn.004016cc
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4283ed
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
jmp 0x4284a4
call fcn.0041e98d
mov dword [ebp - 0x48], eax
push 0x56fd2c
push dword [ebp - 0x48]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42842e
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x4284a4
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
call fcn.0041e98d
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push str.__tunName
push dword [ebp - 0x38]
push str._proxyServer_127.0.0.1:9111__tunAddr_10.7.6.15__tunMask_255.255.255.0__tunGw_10.7.6.1__tunDns
mov ecx, 4
call fcn.004016cc
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428488
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x42849e
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
push 0x95bef6
push dword [0x9f224c]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23f0]
test eax, eax
jne 0x4284d4
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
push 0x95d528
push reloc.WS2_32.dll_connect
push 0
push 0x95bf54
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428500
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cebd0
call fcn.004ca166
add esp, 0x34
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428523
push ebx
call fcn.004ca160
add esp, 4
push str._tap_tunzipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x42857d
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428591
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4285c5
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xe6
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x95c9d1
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428618
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
push str._tap_tunzipaob.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x42867c
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428690
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4286c4
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xe6
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str.zipaob.exe
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428717
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
push 0x80000301
push 0
push 0x208
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov eax, str.10.7.6.1
push eax
mov ebx, dword [0x9f23f4]
test ebx, ebx
je 0x42875d
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23f4], eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 0x9f2280
push 0x9f23f4
call fcn.0042b60d
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42878f
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_connect
push 0
push str.C:WINDOWS_system32driversetchosts
push 1
mov ebx, 0x4cdd20
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4287c3
mov eax, 0x56fe5a
push eax
push 1
mov ebx, 0x4cd830
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4287e9
push ebx
call fcn.004ca160
add esp, 4
push str._Copyright__c__1993_2009_Microsoft_Corp._r_n_r_n_This_is_a_sample_HOSTS_file_used_by_Microsoft_TCP_IP_for_Windows._r_n_r_n_This_file_contains_the_mappings_of_IP_addresses_to_host_names._Each_r_n_entry_should_be_kept_on_an_individual_line._The_IP_address_should_r_n_be_placed_in_the_first_column_followed_by_the_corresponding_host_name._r_n_The_IP_address_and_the_host_name_should_be_separated_by_at_least_one_r_n_space._r_n_r_n_Additionally__comments__such_as_these__may_be_inserted_on_individual_r_n_lines_or_following_the_machine_name_denoted_by_a__symbol._r_n_r_n_For_example:_r_n_r_n______102.54.94.97_____rhino.acme.com___________source_server_r_n_______38.25.63.10_____x.acme.com_______________x_client_host_r_n_r_n_localhost_name_resolution_is_handled_within_DNS_itself._r_n_t127.0.0.1_______localhost_r_n_t::1_____________localhost_r_n_r_n0.0.0.0_facebook.com_r_n0.0.0.0_www.facebook.com_r_n0.0.0.0_youtube.com_r_n0.0.0.0_www.youtube.com_r_n0.0.0.0_twitter.com_r_n0.0.0.0_www.twitter.com_r_n0.0.0.0_search.twitter.com_r_n0.0.0.0_mobile.twitter.com_r_n0.0.0.0_google.cn_r_n0.0.0.0_www.google.cn_r_n0.0.0.0_google.com_r_n0.0.0.0_plus.google.com_r_n0.0.0.0_www.google.com_r_n0.0.0.0_www.google.com.hk_r_n0.0.0.0_twitch.tv_r_n0.0.0.0_www.twitch.tv_r_n0.0.0.0_zh_tw.twitch.tv_r_n0.0.0.0_wikipedia.org_r_n0.0.0.0_www.wikipedia.org_r_n0.0.0.0_co.uk_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_rthk.hk_r_n0.0.0.0_vimeo.com_r_n0.0.0.0_www.vimeo.com_r_n0.0.0.0_linkedin.com_r_n0.0.0.0_www.linkedin.com_r_n0.0.0.0_ftchinese.com_r_n0.0.0.0_www.ftchinese.com_r_n0.0.0.0_nbcsports.com_r_n0.0.0.0_www.nbcsports.com_r_n0.0.0.0_skysports.com_r_n0.0.0.0_www.skysports.com_r_n0.0.0.0_olympic.org_r_n0.0.0.0_www.olympic.org_r_n0.0.0.0_fiba.com_r_n0.0.0.0_www.fiba.com_r_n0.0.0.0_fiba.basketball_r_n0.0.0.0_www.fiba.basketball_r_n0.0.0.0_fifa.com_r_n0.0.0.0_www.fifa.com_r_n0.0.0.0_nicovideo.jp_r_n0.0.0.0_www.nicovideo.jp_r_n0.0.0.0_www.niconico.com_r_n0.0.0.0_grammy.com_r_n0.0.0.0_www.grammy.com_r_n0.0.0.0_fhm.com_r_n0.0.0.0_www.fhm.com_r_n0.0.0.0_festival_cannes.com_r_n0.0.0.0_www.festival_cannes.com_r_n0.0.0.0_ew.com_r_n0.0.0.0_www.ew.com_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_playboy.com_r_n0.0.0.0_www.playboy.com_r_n0.0.0.0_penthouse.com_r_n0.0.0.0_www.penthouse.com_r_n0.0.0.0_chosun.com_r_n0.0.0.0_chn.chosun.com_r_n0.0.0.0_oiktv.com_r_n0.0.0.0_www.oiktv.com_r_n0.0.0.0_digg.com_r_n0.0.0.0_www.digg.com_r_n0.0.0.0_greatfire.org_r_n0.0.0.0_amnesty.org_r_n0.0.0.0_rsf.org_r_n0.0.0.0_falundafa.org_r_n0.0.0.0_minghui.org_r_n0.0.0.0_thetibetpost.com_r_n0.0.0.0_tibet.net_r_n0.0.0.0_nytimes.com_r_n0.0.0.0_archive.org_r_n0.0.0.0_bloomberg.com_r_n0.0.0.0_yomiuri.co.jp_r_n0.0.0.0_lemonde.fr_r_n0.0.0.0_sponichi.co.jp_r_n0.0.0.0_theepochtimes.com_r_n0.0.0.0_epochtimes.com_r_n0.0.0.0_sbs.com.au_r_n0.0.0.0_boxun.com_r_n0.0.0.0_lesoir.be_r_n0.0.0.0_ntdtv.com_r_n0.0.0.0_radioaustralia.net.au_r_n0.0.0.0_urbansurvival.com_r_n0.0.0.0_wsj.com_r_n0.0.0.0_reuters.com_r_n0.0.0.0_rfa.org_r_n0.0.0.0_economist.com_r_n0.0.0.0_time.com_r_n0.0.0.0_ndr.de_r_n0.0.0.0_www.greatfire.org_r_n0.0.0.0_www.amnesty.org_r_n0.0.0.0_www.rsf.org_r_n0.0.0.0_www.falundafa.org_r_n0.0.0.0_www.minghui.org_r_n0.0.0.0_www.thetibetpost.com_r_n0.0.0.0_www.tibet.net_r_n0.0.0.0_www.nytimes.com_r_n0.0.0.0_www.archive.org_r_n0.0.0.0_www.bloomberg.com_r_n0.0.0.0_www.yomiuri.co.jp_r_n0.0.0.0_www.lemonde.fr_r_n0.0.0.0_www.sponichi.co.jp_r_n0.0.0.0_www.theepochtimes.com_r_n0.0.0.0_www.epochtimes.com_r_n0.0.0.0_www.sbs.com.au_r_n0.0.0.0_www.boxun.com_r_n0.0.0.0_www.lesoir.be_r_n0.0.0.0_www.ntdtv.com_r_n0.0.0.0_www.radioaustralia.net.au_r_n0.0.0.0_www.urbansurvival.com_r_n0.0.0.0_www.wsj.com_r_n0.0.0.0_www.reuters.com_r_n0.0.0.0_www.rfa.org_r_n0.0.0.0_www.economist.com_r_n0.0.0.0_www.time.com_r_n0.0.0.0_www.ndr.de
push dword [ebp - 0x4c]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428817
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x50], 0
je 0x428884
push reloc.WS2_32.dll_connect
push 0
push str._Copyright__c__1993_2009_Microsoft_Corp._r_n_r_n_This_is_a_sample_HOSTS_file_used_by_Microsoft_TCP_IP_for_Windows._r_n_r_n_This_file_contains_the_mappings_of_IP_addresses_to_host_names._Each_r_n_entry_should_be_kept_on_an_individual_line._The_IP_address_should_r_n_be_placed_in_the_first_column_followed_by_the_corresponding_host_name._r_n_The_IP_address_and_the_host_name_should_be_separated_by_at_least_one_r_n_space._r_n_r_n_Additionally__comments__such_as_these__may_be_inserted_on_individual_r_n_lines_or_following_the_machine_name_denoted_by_a__symbol._r_n_r_n_For_example:_r_n_r_n______102.54.94.97_____rhino.acme.com___________source_server_r_n_______38.25.63.10_____x.acme.com_______________x_client_host_r_n_r_n_localhost_name_resolution_is_handled_within_DNS_itself._r_n_t127.0.0.1_______localhost_r_n_t::1_____________localhost_r_n_r_n0.0.0.0_facebook.com_r_n0.0.0.0_www.facebook.com_r_n0.0.0.0_youtube.com_r_n0.0.0.0_www.youtube.com_r_n0.0.0.0_twitter.com_r_n0.0.0.0_www.twitter.com_r_n0.0.0.0_search.twitter.com_r_n0.0.0.0_mobile.twitter.com_r_n0.0.0.0_google.cn_r_n0.0.0.0_www.google.cn_r_n0.0.0.0_google.com_r_n0.0.0.0_plus.google.com_r_n0.0.0.0_www.google.com_r_n0.0.0.0_www.google.com.hk_r_n0.0.0.0_twitch.tv_r_n0.0.0.0_www.twitch.tv_r_n0.0.0.0_zh_tw.twitch.tv_r_n0.0.0.0_wikipedia.org_r_n0.0.0.0_www.wikipedia.org_r_n0.0.0.0_co.uk_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_rthk.hk_r_n0.0.0.0_vimeo.com_r_n0.0.0.0_www.vimeo.com_r_n0.0.0.0_linkedin.com_r_n0.0.0.0_www.linkedin.com_r_n0.0.0.0_ftchinese.com_r_n0.0.0.0_www.ftchinese.com_r_n0.0.0.0_nbcsports.com_r_n0.0.0.0_www.nbcsports.com_r_n0.0.0.0_skysports.com_r_n0.0.0.0_www.skysports.com_r_n0.0.0.0_olympic.org_r_n0.0.0.0_www.olympic.org_r_n0.0.0.0_fiba.com_r_n0.0.0.0_www.fiba.com_r_n0.0.0.0_fiba.basketball_r_n0.0.0.0_www.fiba.basketball_r_n0.0.0.0_fifa.com_r_n0.0.0.0_www.fifa.com_r_n0.0.0.0_nicovideo.jp_r_n0.0.0.0_www.nicovideo.jp_r_n0.0.0.0_www.niconico.com_r_n0.0.0.0_grammy.com_r_n0.0.0.0_www.grammy.com_r_n0.0.0.0_fhm.com_r_n0.0.0.0_www.fhm.com_r_n0.0.0.0_festival_cannes.com_r_n0.0.0.0_www.festival_cannes.com_r_n0.0.0.0_ew.com_r_n0.0.0.0_www.ew.com_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_playboy.com_r_n0.0.0.0_www.playboy.com_r_n0.0.0.0_penthouse.com_r_n0.0.0.0_www.penthouse.com_r_n0.0.0.0_chosun.com_r_n0.0.0.0_chn.chosun.com_r_n0.0.0.0_oiktv.com_r_n0.0.0.0_www.oiktv.com_r_n0.0.0.0_digg.com_r_n0.0.0.0_www.digg.com_r_n0.0.0.0_greatfire.org_r_n0.0.0.0_amnesty.org_r_n0.0.0.0_rsf.org_r_n0.0.0.0_falundafa.org_r_n0.0.0.0_minghui.org_r_n0.0.0.0_thetibetpost.com_r_n0.0.0.0_tibet.net_r_n0.0.0.0_nytimes.com_r_n0.0.0.0_archive.org_r_n0.0.0.0_bloomberg.com_r_n0.0.0.0_yomiuri.co.jp_r_n0.0.0.0_lemonde.fr_r_n0.0.0.0_sponichi.co.jp_r_n0.0.0.0_theepochtimes.com_r_n0.0.0.0_epochtimes.com_r_n0.0.0.0_sbs.com.au_r_n0.0.0.0_boxun.com_r_n0.0.0.0_lesoir.be_r_n0.0.0.0_ntdtv.com_r_n0.0.0.0_radioaustralia.net.au_r_n0.0.0.0_urbansurvival.com_r_n0.0.0.0_wsj.com_r_n0.0.0.0_reuters.com_r_n0.0.0.0_rfa.org_r_n0.0.0.0_economist.com_r_n0.0.0.0_time.com_r_n0.0.0.0_ndr.de_r_n0.0.0.0_www.greatfire.org_r_n0.0.0.0_www.amnesty.org_r_n0.0.0.0_www.rsf.org_r_n0.0.0.0_www.falundafa.org_r_n0.0.0.0_www.minghui.org_r_n0.0.0.0_www.thetibetpost.com_r_n0.0.0.0_www.tibet.net_r_n0.0.0.0_www.nytimes.com_r_n0.0.0.0_www.archive.org_r_n0.0.0.0_www.bloomberg.com_r_n0.0.0.0_www.yomiuri.co.jp_r_n0.0.0.0_www.lemonde.fr_r_n0.0.0.0_www.sponichi.co.jp_r_n0.0.0.0_www.theepochtimes.com_r_n0.0.0.0_www.epochtimes.com_r_n0.0.0.0_www.sbs.com.au_r_n0.0.0.0_www.boxun.com_r_n0.0.0.0_www.lesoir.be_r_n0.0.0.0_www.ntdtv.com_r_n0.0.0.0_www.radioaustralia.net.au_r_n0.0.0.0_www.urbansurvival.com_r_n0.0.0.0_www.wsj.com_r_n0.0.0.0_www.reuters.com_r_n0.0.0.0_www.rfa.org_r_n0.0.0.0_www.economist.com_r_n0.0.0.0_www.time.com_r_n0.0.0.0_www.ndr.de
push 1
mov ebx, 0x4cce80
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428855
mov eax, 0x56fe5a
push eax
push reloc.WS2_32.dll_connect
push 0
push str.C:WINDOWS_system32driversetchosts
push 2
mov ebx, 0x4cdd90
call fcn.004ca166
add esp, 0x1c
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428884
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
jmp 0x42a028
push 0x95c04b
push dword [ebp - 8]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x428c0f
mov eax, str.8112
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4288db
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov eax, str.127.0.0.2
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4288f5
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x428924
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x95d475
push dword [ebp - 0x20]
push str.__k
push dword [ebp - 0x4c]
push 0x95e357
push dword [ebp - 0x3c]
push 0x95e35c
push dword [ebp - 0x40]
push 0x95e361
push dword [ebp - 0x14]
push str.__p
push dword [ebp - 0x10]
push 0x95d471
mov ecx, 0xd
call fcn.004016cc
add esp, 0x34
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x42898f
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4289a5
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push str.__t_19998
push dword [ebp - 0x30]
push str.__p
push dword [ebp - 0x3c]
push 0x570493
push dword [ebp - 0x40]
push 0x95e370
mov ecx, 7
call fcn.004016cc
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x428a06
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
push str.zpm3zipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x428a66
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428a7a
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428aae
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x95c9d1
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428b01
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
push str.zpm3zipaob.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x428b65
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428b79
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428bad
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str.zipaob.exe
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428c00
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
jmp 0x42a028
push 0x95c054
push dword [ebp - 8]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x42a028
push 1
push 1
call fcn.0042a258
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push 5
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428c62
mov eax, 0x56fd2c
push eax
push 3
mov ebx, 0x4cc300
call fcn.004ca166
add esp, 0x28
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428c88
push ebx
call fcn.004ca160
add esp, 4
push 0x95d44d
push dword [ebp - 0x4c]
push 0x95d450
mov ecx, 3
call fcn.004016cc
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428cb5
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x428cc8
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cce80
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x428cee
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [0x9f23e4]
test ebx, ebx
je 0x428d05
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23e4], eax
push dword [ebp - 0x14]
push 0x95d453
push dword [ebp - 0x10]
push 0x95d456
push dword [ebp - 0x18]
push str.ss:__
mov ecx, 6
call fcn.004016cc
add esp, 0x18
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0042a738
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428d4f
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x428d62
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428d88
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [0x9f23e8]
test ebx, ebx
je 0x428d9f
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23e8], eax
push 0x9f237c
call fcn.0042a738
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x428dc5
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428deb
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [0x9f23ec]
test ebx, ebx
je 0x428e02
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23ec], eax
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x428e33
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x95d475
push dword [ebp - 0x20]
push str.__k
push dword [ebp - 0x4c]
push str.__b_127.0.0.1__l_9111__m
push dword [ebp - 0x14]
push str.__p
push dword [ebp - 0x10]
push 0x95d471
mov ecx, 9
call fcn.004016cc
add esp, 0x24
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x428e8e
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x428ea4
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
push 0x80000301
push 0
push 5
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23b4]
test eax, eax
jne 0x428ecb
mov eax, 0x56fd2c
push eax
push 2
mov ebx, 0x4cc270
call fcn.004ca166
add esp, 0x1c
mov dword [ebp - 0x48], eax
push 0x95d49d
push dword [ebp - 0x48]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428f0f
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x428f38
mov eax, str.8.8.8.8
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x428f2f
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
jmp 0x428f52
mov eax, str.8.8.8.8
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x428f4e
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
call fcn.0041e98d
mov dword [ebp - 0x48], eax
push 0x56fd2c
push dword [ebp - 0x48]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x428f88
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x428fe8
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0x95d4ab
push dword [ebp - 0x38]
push str._proxyServer_127.0.0.1:9111__tunAddr_10.7.6.15__tunMask_255.255.255.0__tunGw_10.7.6.1__tunDns
mov ecx, 3
call fcn.004016cc
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x428fdd
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
jmp 0x429094
call fcn.0041e98d
mov dword [ebp - 0x48], eax
push 0x56fd2c
push dword [ebp - 0x48]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42901e
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x429094
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
call fcn.0041e98d
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push str.__tunName
push dword [ebp - 0x38]
push str._proxyServer_127.0.0.1:9111__tunAddr_10.7.6.15__tunMask_255.255.255.0__tunGw_10.7.6.1__tunDns
mov ecx, 4
call fcn.004016cc
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x429078
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x42908e
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov eax, str.8112
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4290aa
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov eax, str.127.0.0.2
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4290c4
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4290f3
mov eax, 0x56fd2c
push eax
push 1
mov ebx, 0x4cc720
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x95d475
push dword [ebp - 0x20]
push str.__k
push dword [ebp - 0x4c]
push 0x95e357
push dword [ebp - 0x3c]
push 0x95e35c
push dword [ebp - 0x40]
push 0x95e361
push dword [ebp - 0x14]
push str.__p
push dword [ebp - 0x10]
push 0x95d471
mov ecx, 0xd
call fcn.004016cc
add esp, 0x34
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x42915e
push ebx
call fcn.004ca160
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x429174
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push str.__t_19998
push dword [ebp - 0x30]
push str.__p
push dword [ebp - 0x3c]
push 0x570493
push dword [ebp - 0x40]
push 0x95e370
mov ecx, 7
call fcn.004016cc
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x48]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4291d5
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
push str.A_NO
push dword [ebp - 4]
call fcn.00401021
add esp, 8
cmp eax, 0
je 0x42922a
push str.B_NO
push dword [ebp - 4]
call fcn.00401021
add esp, 8
cmp eax, 0
je 0x42922a
push str.AB_NO
push dword [ebp - 4]
call fcn.00401021
add esp, 8
cmp eax, 0
je 0x42922a
xor eax, eax
jmp 0x42922f
mov eax, 1
test eax, eax
je 0x42943a
push str.zpm3zipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x429291
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4292a5
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4292d9
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x95c9d1
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x42932c
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
push str.zpm3zipaob.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x429390
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4293a4
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4293d8
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str.zipaob.exe
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x42942b
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
jmp 0x42a028
push str.C_NO
push dword [ebp - 4]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x429516
push str.zipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push dword [0x9f23ec]
push str.__cs
push dword [0x9f23e8]
push 0x95d471
mov ecx, 4
call fcn.004016cc
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4294b9
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4294cd
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x429501
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x429511
push ebx
call fcn.004ca160
add esp, 4
jmp 0x42a028
push str.AC_NO
push dword [ebp - 4]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x429937
push 0x95bef6
push dword [0x9f224c]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x9f23f0]
test eax, eax
jne 0x42955f
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
push 0x95d528
push reloc.WS2_32.dll_connect
push 0
push 0x95bf54
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x42958b
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cebd0
call fcn.004ca166
add esp, 0x34
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4295ae
push ebx
call fcn.004ca160
add esp, 4
push str._tap_tunzipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x429608
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x42961c
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x429650
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xe6
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x95c9d1
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4296a3
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
push str._tap_tunzipaob.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x429707
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x42971b
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42974f
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xe6
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str.zipaob.exe
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4297a2
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
push 0x80000301
push 0
push 0x208
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov eax, str.10.7.6.1
push eax
mov ebx, dword [0x9f23f4]
test ebx, ebx
je 0x4297e8
push ebx
call fcn.004ca160
add esp, 4
pop eax
mov dword [0x9f23f4], eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
push 0x9f2280
push 0x9f23f4
call fcn.0042b60d
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42981a
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_connect
push 0
push str.C:WINDOWS_system32driversetchosts
push 1
mov ebx, 0x4cdd20
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x42984e
mov eax, 0x56fe5a
push eax
push 1
mov ebx, 0x4cd830
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x429874
push ebx
call fcn.004ca160
add esp, 4
push str._Copyright__c__1993_2009_Microsoft_Corp._r_n_r_n_This_is_a_sample_HOSTS_file_used_by_Microsoft_TCP_IP_for_Windows._r_n_r_n_This_file_contains_the_mappings_of_IP_addresses_to_host_names._Each_r_n_entry_should_be_kept_on_an_individual_line._The_IP_address_should_r_n_be_placed_in_the_first_column_followed_by_the_corresponding_host_name._r_n_The_IP_address_and_the_host_name_should_be_separated_by_at_least_one_r_n_space._r_n_r_n_Additionally__comments__such_as_these__may_be_inserted_on_individual_r_n_lines_or_following_the_machine_name_denoted_by_a__symbol._r_n_r_n_For_example:_r_n_r_n______102.54.94.97_____rhino.acme.com___________source_server_r_n_______38.25.63.10_____x.acme.com_______________x_client_host_r_n_r_n_localhost_name_resolution_is_handled_within_DNS_itself._r_n_t127.0.0.1_______localhost_r_n_t::1_____________localhost_r_n_r_n0.0.0.0_facebook.com_r_n0.0.0.0_www.facebook.com_r_n0.0.0.0_youtube.com_r_n0.0.0.0_www.youtube.com_r_n0.0.0.0_twitter.com_r_n0.0.0.0_www.twitter.com_r_n0.0.0.0_search.twitter.com_r_n0.0.0.0_mobile.twitter.com_r_n0.0.0.0_google.cn_r_n0.0.0.0_www.google.cn_r_n0.0.0.0_google.com_r_n0.0.0.0_plus.google.com_r_n0.0.0.0_www.google.com_r_n0.0.0.0_www.google.com.hk_r_n0.0.0.0_twitch.tv_r_n0.0.0.0_www.twitch.tv_r_n0.0.0.0_zh_tw.twitch.tv_r_n0.0.0.0_wikipedia.org_r_n0.0.0.0_www.wikipedia.org_r_n0.0.0.0_co.uk_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_rthk.hk_r_n0.0.0.0_vimeo.com_r_n0.0.0.0_www.vimeo.com_r_n0.0.0.0_linkedin.com_r_n0.0.0.0_www.linkedin.com_r_n0.0.0.0_ftchinese.com_r_n0.0.0.0_www.ftchinese.com_r_n0.0.0.0_nbcsports.com_r_n0.0.0.0_www.nbcsports.com_r_n0.0.0.0_skysports.com_r_n0.0.0.0_www.skysports.com_r_n0.0.0.0_olympic.org_r_n0.0.0.0_www.olympic.org_r_n0.0.0.0_fiba.com_r_n0.0.0.0_www.fiba.com_r_n0.0.0.0_fiba.basketball_r_n0.0.0.0_www.fiba.basketball_r_n0.0.0.0_fifa.com_r_n0.0.0.0_www.fifa.com_r_n0.0.0.0_nicovideo.jp_r_n0.0.0.0_www.nicovideo.jp_r_n0.0.0.0_www.niconico.com_r_n0.0.0.0_grammy.com_r_n0.0.0.0_www.grammy.com_r_n0.0.0.0_fhm.com_r_n0.0.0.0_www.fhm.com_r_n0.0.0.0_festival_cannes.com_r_n0.0.0.0_www.festival_cannes.com_r_n0.0.0.0_ew.com_r_n0.0.0.0_www.ew.com_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_playboy.com_r_n0.0.0.0_www.playboy.com_r_n0.0.0.0_penthouse.com_r_n0.0.0.0_www.penthouse.com_r_n0.0.0.0_chosun.com_r_n0.0.0.0_chn.chosun.com_r_n0.0.0.0_oiktv.com_r_n0.0.0.0_www.oiktv.com_r_n0.0.0.0_digg.com_r_n0.0.0.0_www.digg.com_r_n0.0.0.0_greatfire.org_r_n0.0.0.0_amnesty.org_r_n0.0.0.0_rsf.org_r_n0.0.0.0_falundafa.org_r_n0.0.0.0_minghui.org_r_n0.0.0.0_thetibetpost.com_r_n0.0.0.0_tibet.net_r_n0.0.0.0_nytimes.com_r_n0.0.0.0_archive.org_r_n0.0.0.0_bloomberg.com_r_n0.0.0.0_yomiuri.co.jp_r_n0.0.0.0_lemonde.fr_r_n0.0.0.0_sponichi.co.jp_r_n0.0.0.0_theepochtimes.com_r_n0.0.0.0_epochtimes.com_r_n0.0.0.0_sbs.com.au_r_n0.0.0.0_boxun.com_r_n0.0.0.0_lesoir.be_r_n0.0.0.0_ntdtv.com_r_n0.0.0.0_radioaustralia.net.au_r_n0.0.0.0_urbansurvival.com_r_n0.0.0.0_wsj.com_r_n0.0.0.0_reuters.com_r_n0.0.0.0_rfa.org_r_n0.0.0.0_economist.com_r_n0.0.0.0_time.com_r_n0.0.0.0_ndr.de_r_n0.0.0.0_www.greatfire.org_r_n0.0.0.0_www.amnesty.org_r_n0.0.0.0_www.rsf.org_r_n0.0.0.0_www.falundafa.org_r_n0.0.0.0_www.minghui.org_r_n0.0.0.0_www.thetibetpost.com_r_n0.0.0.0_www.tibet.net_r_n0.0.0.0_www.nytimes.com_r_n0.0.0.0_www.archive.org_r_n0.0.0.0_www.bloomberg.com_r_n0.0.0.0_www.yomiuri.co.jp_r_n0.0.0.0_www.lemonde.fr_r_n0.0.0.0_www.sponichi.co.jp_r_n0.0.0.0_www.theepochtimes.com_r_n0.0.0.0_www.epochtimes.com_r_n0.0.0.0_www.sbs.com.au_r_n0.0.0.0_www.boxun.com_r_n0.0.0.0_www.lesoir.be_r_n0.0.0.0_www.ntdtv.com_r_n0.0.0.0_www.radioaustralia.net.au_r_n0.0.0.0_www.urbansurvival.com_r_n0.0.0.0_www.wsj.com_r_n0.0.0.0_www.reuters.com_r_n0.0.0.0_www.rfa.org_r_n0.0.0.0_www.economist.com_r_n0.0.0.0_www.time.com_r_n0.0.0.0_www.ndr.de
push dword [ebp - 0x4c]
call fcn.00401021
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4298a2
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x50], 0
je 0x42990f
push reloc.WS2_32.dll_connect
push 0
push str._Copyright__c__1993_2009_Microsoft_Corp._r_n_r_n_This_is_a_sample_HOSTS_file_used_by_Microsoft_TCP_IP_for_Windows._r_n_r_n_This_file_contains_the_mappings_of_IP_addresses_to_host_names._Each_r_n_entry_should_be_kept_on_an_individual_line._The_IP_address_should_r_n_be_placed_in_the_first_column_followed_by_the_corresponding_host_name._r_n_The_IP_address_and_the_host_name_should_be_separated_by_at_least_one_r_n_space._r_n_r_n_Additionally__comments__such_as_these__may_be_inserted_on_individual_r_n_lines_or_following_the_machine_name_denoted_by_a__symbol._r_n_r_n_For_example:_r_n_r_n______102.54.94.97_____rhino.acme.com___________source_server_r_n_______38.25.63.10_____x.acme.com_______________x_client_host_r_n_r_n_localhost_name_resolution_is_handled_within_DNS_itself._r_n_t127.0.0.1_______localhost_r_n_t::1_____________localhost_r_n_r_n0.0.0.0_facebook.com_r_n0.0.0.0_www.facebook.com_r_n0.0.0.0_youtube.com_r_n0.0.0.0_www.youtube.com_r_n0.0.0.0_twitter.com_r_n0.0.0.0_www.twitter.com_r_n0.0.0.0_search.twitter.com_r_n0.0.0.0_mobile.twitter.com_r_n0.0.0.0_google.cn_r_n0.0.0.0_www.google.cn_r_n0.0.0.0_google.com_r_n0.0.0.0_plus.google.com_r_n0.0.0.0_www.google.com_r_n0.0.0.0_www.google.com.hk_r_n0.0.0.0_twitch.tv_r_n0.0.0.0_www.twitch.tv_r_n0.0.0.0_zh_tw.twitch.tv_r_n0.0.0.0_wikipedia.org_r_n0.0.0.0_www.wikipedia.org_r_n0.0.0.0_co.uk_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_rthk.hk_r_n0.0.0.0_vimeo.com_r_n0.0.0.0_www.vimeo.com_r_n0.0.0.0_linkedin.com_r_n0.0.0.0_www.linkedin.com_r_n0.0.0.0_ftchinese.com_r_n0.0.0.0_www.ftchinese.com_r_n0.0.0.0_nbcsports.com_r_n0.0.0.0_www.nbcsports.com_r_n0.0.0.0_skysports.com_r_n0.0.0.0_www.skysports.com_r_n0.0.0.0_olympic.org_r_n0.0.0.0_www.olympic.org_r_n0.0.0.0_fiba.com_r_n0.0.0.0_www.fiba.com_r_n0.0.0.0_fiba.basketball_r_n0.0.0.0_www.fiba.basketball_r_n0.0.0.0_fifa.com_r_n0.0.0.0_www.fifa.com_r_n0.0.0.0_nicovideo.jp_r_n0.0.0.0_www.nicovideo.jp_r_n0.0.0.0_www.niconico.com_r_n0.0.0.0_grammy.com_r_n0.0.0.0_www.grammy.com_r_n0.0.0.0_fhm.com_r_n0.0.0.0_www.fhm.com_r_n0.0.0.0_festival_cannes.com_r_n0.0.0.0_www.festival_cannes.com_r_n0.0.0.0_ew.com_r_n0.0.0.0_www.ew.com_r_n0.0.0.0_bbc.co.uk_r_n0.0.0.0_www.bbc.co.uk_r_n0.0.0.0_playboy.com_r_n0.0.0.0_www.playboy.com_r_n0.0.0.0_penthouse.com_r_n0.0.0.0_www.penthouse.com_r_n0.0.0.0_chosun.com_r_n0.0.0.0_chn.chosun.com_r_n0.0.0.0_oiktv.com_r_n0.0.0.0_www.oiktv.com_r_n0.0.0.0_digg.com_r_n0.0.0.0_www.digg.com_r_n0.0.0.0_greatfire.org_r_n0.0.0.0_amnesty.org_r_n0.0.0.0_rsf.org_r_n0.0.0.0_falundafa.org_r_n0.0.0.0_minghui.org_r_n0.0.0.0_thetibetpost.com_r_n0.0.0.0_tibet.net_r_n0.0.0.0_nytimes.com_r_n0.0.0.0_archive.org_r_n0.0.0.0_bloomberg.com_r_n0.0.0.0_yomiuri.co.jp_r_n0.0.0.0_lemonde.fr_r_n0.0.0.0_sponichi.co.jp_r_n0.0.0.0_theepochtimes.com_r_n0.0.0.0_epochtimes.com_r_n0.0.0.0_sbs.com.au_r_n0.0.0.0_boxun.com_r_n0.0.0.0_lesoir.be_r_n0.0.0.0_ntdtv.com_r_n0.0.0.0_radioaustralia.net.au_r_n0.0.0.0_urbansurvival.com_r_n0.0.0.0_wsj.com_r_n0.0.0.0_reuters.com_r_n0.0.0.0_rfa.org_r_n0.0.0.0_economist.com_r_n0.0.0.0_time.com_r_n0.0.0.0_ndr.de_r_n0.0.0.0_www.greatfire.org_r_n0.0.0.0_www.amnesty.org_r_n0.0.0.0_www.rsf.org_r_n0.0.0.0_www.falundafa.org_r_n0.0.0.0_www.minghui.org_r_n0.0.0.0_www.thetibetpost.com_r_n0.0.0.0_www.tibet.net_r_n0.0.0.0_www.nytimes.com_r_n0.0.0.0_www.archive.org_r_n0.0.0.0_www.bloomberg.com_r_n0.0.0.0_www.yomiuri.co.jp_r_n0.0.0.0_www.lemonde.fr_r_n0.0.0.0_www.sponichi.co.jp_r_n0.0.0.0_www.theepochtimes.com_r_n0.0.0.0_www.epochtimes.com_r_n0.0.0.0_www.sbs.com.au_r_n0.0.0.0_www.boxun.com_r_n0.0.0.0_www.lesoir.be_r_n0.0.0.0_www.ntdtv.com_r_n0.0.0.0_www.radioaustralia.net.au_r_n0.0.0.0_www.urbansurvival.com_r_n0.0.0.0_www.wsj.com_r_n0.0.0.0_www.reuters.com_r_n0.0.0.0_www.rfa.org_r_n0.0.0.0_www.economist.com_r_n0.0.0.0_www.time.com_r_n0.0.0.0_www.ndr.de
push 1
mov ebx, 0x4cce80
call fcn.004ca166
add esp, 0x10
mov dword [ebp - 0x48], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4298e0
mov eax, 0x56fe5a
push eax
push reloc.WS2_32.dll_connect
push 0
push str.C:WINDOWS_system32driversetchosts
push 2
mov ebx, 0x4cdd90
call fcn.004ca166
add esp, 0x1c
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42990f
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
jmp 0x42a028
push str.BC_NO
push dword [ebp - 4]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x429a13
push str.zipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push dword [0x9f23ec]
push str.__cs
push dword [0x9f23e8]
push 0x95d471
mov ecx, 4
call fcn.004016cc
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x4299b6
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4299ca
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4299fe
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x429a0e
push ebx
call fcn.004ca160
add esp, 4
jmp 0x42a028
push 0x56fd2c
push dword [ebp - 4]
call fcn.00401021
add esp, 8
cmp eax, 0
jne 0x42a028
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
push 0x9f2318
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x429a82
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95e3b7
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x429ab3
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x429ad9
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x5c], 0xffffffff
jne 0x429d5a
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
mov dword [ebp - 0x6c], 0
push 0
push dword [ebp - 0x6c]
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 0x9f2318
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x429b39
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95e3c0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x429b6a
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x429b90
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x78], 0xffffffff
jne 0x429d5a
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 0x9f2318
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x429c08
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95e3c6
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x90]
test eax, eax
jne 0x429c3c
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x429c68
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0x94], 0xffffffff
jne 0x429d5a
mov dword [ebp - 0x9c], 0
push 0
push dword [ebp - 0x9c]
mov dword [ebp - 0xa0], 0
push 0
push dword [ebp - 0xa0]
mov dword [ebp - 0xa4], 0
push 0
push dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0
push 0
lea eax, [ebp - 0xa8]
push eax
push 0x9f2318
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x429ce9
push ebx
call fcn.004ca160
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x95e3cc
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xac]
test eax, eax
jne 0x429d1d
mov eax, 0x56fd2c
push eax
push 4
mov ebx, 0x4cc560
call fcn.004ca166
add esp, 0x34
mov dword [ebp - 0xb0], eax
mov ebx, dword [ebp - 0xac]
test ebx, ebx
je 0x429d49
push ebx
call fcn.004ca160
add esp, 4
cmp dword [ebp - 0xb0], 0xffffffff
jne 0x429d5a
xor eax, eax
jmp 0x429d5f
mov eax, 1
test eax, eax
je 0x429f6a
push str.zpm3zipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 0
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x429dc1
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x429dd5
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x429e09
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, 0x95c9d1
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x429e5c
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
push str.zpm3zipaob.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
mov eax, 1
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
test eax, eax
jne 0x429ec0
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x429ed4
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x429f08
push ebx
call fcn.004ca160
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov eax, 1
mov ebx, 0x52be70
call fcn.004ca190
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov eax, str.zipaob.exe
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00401aaf
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x429f5b
push ebx
call fcn.004ca160
add esp, 4
push 1
push dword [ebp - 0x50]
call fcn.0042a9d9
jmp 0x42a028
push str.zipaoa.exe
push dword [0x9f2248]
mov ecx, 2
call fcn.004016cc
add esp, 8
mov dword [ebp - 0x48], eax
push dword [0x9f23ec]
push str.__cs
push dword [0x9f23e8]
push 0x95d471
mov ecx, 4
call fcn.004016cc
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x429fd0
mov eax, 0x56fd2c
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x429fe4
mov eax, 0x56fd2c
push eax
push 0x80000301
push 0
push 4
push 5
mov eax, 5
mov ebx, 0x52fe20
call fcn.004ca190
add esp, 0x40
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42a018
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x42a028
push ebx
call fcn.004ca160
add esp, 4
push 0
push 0xbb8
push 0xffffffffffffffff
push 8
push 0x160191f8
push 0x52015ac8
call fcn.004ca184
add esp, 0x18
push 0
push 0x9c4
push 0xffffffffffffffff
push 8
push 0x1601922a
push 0x52015ac8
call fcn.004ca184
add esp, 0x18
push 1
push 1
push 0x9f235c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
jmp 0x42a080
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x42a090
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x42a0a0
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42a0be
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42a0ba
imul eax, dword [ebx]
jmp 0x42a0af
mov ecx, eax
test ecx, ecx
je 0x42a0dd
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42a0d6
push ebx
push eax
call fcn.004ca160
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x42a0c4
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x42a0f5
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x42a105
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x42a115
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x42a125
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x42a135
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x42a145
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42a163
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42a15f
imul eax, dword [ebx]
jmp 0x42a154
mov ecx, eax
test ecx, ecx
je 0x42a182
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42a17b
push ebx
push eax
call fcn.004ca160
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x42a169
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x42a19a
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42a1b8
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42a1b4
imul eax, dword [ebx]
jmp 0x42a1a9
mov ecx, eax
test ecx, ecx
je 0x42a1d7
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42a1d0
push ebx
push eax
call fcn.004ca160
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x42a1be
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x42a1ef
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x42a1ff
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x42a20f
push ebx
call fcn.004ca160
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42a22d
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42a229
imul eax, dword [ebx]
jmp 0x42a21e
mov ecx, eax
test ecx, ecx
je 0x42a24c
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42a245
push ebx
push eax
call fcn.004ca160
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x42a233
call fcn.004ca160
add esp, 4
mov esp, ebp
pop ebp
ret