Function at 0x10021b40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x44
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
mov dword [esp + 0x28], ebx
push edi
cmp dword [ebp + 0xe4], 0xa
jb 0x10021b90
push 0xa
push str.attachment__b
push dword [ebp + 0xe0]
call dword [sym.imp.msvcrt.dll__strnicmp]
add esp, 0xc
test eax, eax
jne 0x10021b90
cmp dword [ebp + 0xe4], 0xa
je 0x10021b8c
mov eax, dword [ebp + 0xe0]
movsx eax, byte [eax + 0xa]
xor eax, 0x2f
test al, al
jne 0x10021b90
mov al, 1
jmp 0x10021b92
xor al, al
mov edi, dword [sym.imp.msvcrt.dll_free]
mov byte [ebp + 0xcc], al
cmp dword [ebp + 0xc], ebx
je 0x10021bb0
test dword [ebp + 0x74], 0x2080
jne 0x10021c86
mov eax, dword [ebp + 4]
lea edx, [ebp + 0xe0]
lea ecx, [esp + 0x1c]
mov eax, dword [eax + 0xc]
push dword [eax + ebp + 0x9c]
push str.filename
call fcn.10009040
mov esi, eax
add esp, 8
mov eax, dword [ebp + 8]
cmp eax, 0x10059da0
je 0x10021be6
push eax
call edi
add esp, 4
mov eax, dword [esi]
mov dword [ebp + 8], eax
mov eax, dword [esi + 4]
mov dword [ebp + 0xc], eax
mov eax, dword [esi + 8]
mov dword [ebp + 0x10], eax
mov al, byte [esi + 0xc]
mov byte [ebp + 0x14], al
mov dword [esi + 8], ebx
mov dword [esi + 4], ebx
mov ebx, 1
mov dword [esi], 0x10059da0
cmp dword [ebp + 0xc], 0
jne 0x10021c86
mov eax, dword [ebp + 4]
lea edx, [ebp + 0x7c]
lea ecx, [esp + 0x30]
mov eax, dword [eax + 0xc]
add edx, eax
push dword [eax + ebp + 0x9c]
push str.name
call fcn.10009040
mov esi, eax
add esp, 8
mov eax, dword [ebp + 8]
cmp eax, 0x10059da0
je 0x10021c49
push eax
call edi
add esp, 4
mov eax, dword [esi]
mov ebx, 3
mov dword [ebp + 8], eax
mov eax, dword [esi + 4]
mov dword [ebp + 0xc], eax
mov eax, dword [esi + 8]
mov dword [ebp + 0x10], eax
mov al, byte [esi + 0xc]
mov byte [ebp + 0x14], al
mov dword [esi], 0x10059da0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
cmp dword [ebp + 0xc], 0
jne 0x10021c86
mov byte [esp + 0x12], 0
jmp 0x10021c90
mov byte [esp + 0x12], 1
test bl, 2
je 0x10021ca4
mov eax, dword [esp + 0x30]
and ebx, 0xfffffffd
cmp eax, 0x10059da0
je 0x10021ca4
push eax
call edi
add esp, 4
test bl, 1
je 0x10021cbd
mov eax, dword [esp + 0x1c]
and ebx, 0xfffffffe
cmp eax, 0x10059da0
je 0x10021cbd
push eax
call edi
add esp, 4
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + ebp + 0xe8]
test edx, edx
je 0x10021cde
mov eax, dword [edx + 0xc]
add edx, 0x4c
mov eax, dword [eax + 8]
add edx, eax
mov eax, dword [ecx + 8]
jmp 0x10021ce6
mov eax, dword [ecx + 8]
lea edx, [ebp + 0x44]
add edx, eax
mov ecx, dword [0x10059df0]
push 1
push dword [eax + ebp + 0x34]
push edx
push dword [eax + ebp + 0x28]
lea ecx, [ecx + 0x1134]
call fcn.10039d20
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 8]
mov dword [ecx + ebp + 0x94], eax
mov eax, dword [ebp + 4]
mov edi, dword [eax + 8]
mov esi, dword [edi + ebp + 0x94]
test esi, esi
je 0x10021f61
mov esi, dword [esi + 0x14]
mov ecx, dword [edi + ebp + 0x90]
cmp esi, ecx
je 0x10021d75
test ecx, ecx
je 0x10021d57
mov eax, dword [ecx + 0xc]
add ecx, 0x14
mov eax, dword [eax + 8]
add ecx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add dword [eax + ecx], 0xffffffff
jne 0x10021d57
add ecx, 0xfffffff8
je 0x10021d57
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [edi + ebp + 0x90], esi
test esi, esi
je 0x10021d75
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + 8]
mov eax, dword [ecx + esi + 0x14]
add ecx, esi
mov eax, dword [eax + 4]
inc dword [eax + ecx + 0x14]
mov eax, dword [ebp + 4]
mov edi, dword [eax + 8]
mov eax, dword [edi + ebp + 0x94]
mov esi, dword [eax + 0x14]
cmp byte [esi + 0x16], 0
jne 0x10021d98
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 8]
mov esi, dword [eax + esi + 0x94]
mov ecx, dword [edi + ebp + 0x8c]
cmp esi, ecx
je 0x10021de6
test ecx, ecx
je 0x10021dc8
mov eax, dword [ecx + 0xc]
add ecx, 0x14
mov eax, dword [eax + 8]
add ecx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add dword [eax + ecx], 0xffffffff
jne 0x10021dc8
add ecx, 0xfffffff8
je 0x10021dc8
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [edi + ebp + 0x8c], esi
test esi, esi
je 0x10021de6
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + 8]
mov eax, dword [ecx + esi + 0x14]
add ecx, esi
mov eax, dword [eax + 4]
inc dword [eax + ecx + 0x14]
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
mov eax, dword [eax + ebp + 0x94]
mov ecx, dword [eax + 0x58]
mov eax, dword [eax + 0x5c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x2c], eax
test eax, eax
jle 0x10021e3d
lea edi, [eax + eax]
lea eax, [edi + 2]
cmp dword [ebp + 0x30], eax
jae 0x10021e1d
push eax
lea ecx, [ebp + 0x28]
call fcn.10004970
test eax, eax
je 0x10021e3d
mov eax, dword [ebp + 0x28]
mov ecx, dword [esp + 0x2c]
push edi
push dword [esp + 0x20]
mov dword [ebp + 0x2c], ecx
xor ecx, ecx
push eax
mov word [edi + eax], cx
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x10021e4c
mov eax, dword [ebp + 0x28]
xor ecx, ecx
mov dword [ebp + 0x2c], 0
mov word [eax], cx
mov eax, dword [ebp + 4]
mov edi, dword [eax + 8]
mov eax, dword [edi + ebp + 0x94]
mov ecx, dword [edi + ebp + 0x98]
mov esi, dword [eax + 0x78]
cmp esi, ecx
je 0x10021e93
test ecx, ecx
je 0x10021e7e
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
add dword [eax + ecx + 4], 0xffffffff
jne 0x10021e7e
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [edi + ebp + 0x98], esi
test esi, esi
je 0x10021e93
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
inc dword [eax + esi + 4]
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 8]
mov eax, dword [eax + ebp + 0x94]
mov al, byte [eax + 0x24]
or byte [ebp + 0x7f], al
mov eax, dword [ecx + 8]
mov eax, dword [eax + ebp + 0x94]
mov al, byte [eax + 0x25]
or byte [ebp + 0x44], al
mov eax, dword [ecx + 8]
mov eax, dword [eax + ebp + 0x94]
cmp dword [eax + 0x4c], 0
je 0x10021f1e
cmp byte [esp + 0x12], 0
jne 0x10021f1e
mov ecx, dword [eax + 0x48]
mov edi, dword [eax + 0x4c]
mov al, byte [eax + 0x54]
mov dword [esp + 0x2c], ecx
mov byte [ebp + 0x24], al
test edi, edi
jle 0x10021f11
lea eax, [edi + 1]
cmp dword [ebp + 0x20], eax
jae 0x10021efa
push eax
lea ecx, [ebp + 0x18]
call fcn.10003580
test eax, eax
je 0x10021f11
mov ecx, dword [esp + 0x2c]
mov eax, dword [ebp + 0x18]
push edi
push ecx
mov dword [ebp + 0x1c], edi
push eax
mov byte [eax + edi], 0
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x10021f1e
mov eax, dword [ebp + 0x18]
mov dword [ebp + 0x1c], 0
mov byte [eax], 0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + 8]
mov edx, dword [ecx + ebp + 0x94]
lea esi, [ecx + ebp]
cmp dword [edx + 0x6c], 0
je 0x10021f3e
movzx eax, byte [edx + 0x35]
push eax
lea eax, [edx + 0x68]
jmp 0x10021f58
mov ecx, dword [ecx + ebp + 0x90]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + 8]
add ecx, eax
movzx eax, byte [ecx + 0x8c]
push eax
lea eax, [ecx + 0x7c]
push eax
lea ecx, [esi + 4]
call fcn.100205b0
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 8]
cmp dword [ecx + ebp + 0x90], 0
jne 0x10021fe9
push dword [ecx + ebp + 0x34]
mov eax, dword [edx + 0xc]
add eax, 0xc
add eax, ebp
push eax
push dword [ecx + ebp + 0x28]
mov ecx, dword [0x10059df0]
lea ecx, [ecx + 0x1134]
call fcn.100396e0
mov ecx, dword [ebp + 4]
mov esi, eax
mov edi, dword [ecx + 8]
mov ecx, dword [edi + ebp + 0x90]
cmp esi, ecx
je 0x10021fe9
test ecx, ecx
je 0x10021fcb
mov eax, dword [ecx + 0xc]
add ecx, 0x14
mov eax, dword [eax + 8]
add ecx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add dword [eax + ecx], 0xffffffff
jne 0x10021fcb
add ecx, 0xfffffff8
je 0x10021fcb
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [edi + ebp + 0x90], esi
test esi, esi
je 0x10021fe9
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + 8]
mov eax, dword [ecx + esi + 0x14]
add ecx, esi
mov eax, dword [eax + 4]
inc dword [eax + ecx + 0x14]
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + 8]
cmp dword [edx + ebp + 0x8c], 0
jne 0x100220ff
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + ebp + 0xe8]
add eax, ebp
test ecx, ecx
je 0x10022042
mov eax, dword [ecx + 0xc]
mov edi, dword [eax + 8]
mov edi, dword [edi + ecx + 0x94]
test edi, edi
je 0x10022031
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + 8]
mov eax, dword [ecx + edi + 0x14]
add ecx, edi
mov eax, dword [eax + 4]
inc dword [eax + ecx + 0x14]
mov esi, dword [esp + 0x2c]
mov eax, edi
mov dword [esp + 0x14], eax
mov edx, 4
jmp 0x10022087
push dword [edx + ebp + 0x34]
mov ecx, dword [0x10059df0]
add eax, 0xc
push eax
push dword [edx + ebp + 0x28]
lea ecx, [ecx + 0x1134]
call fcn.10039810
mov esi, eax
test esi, esi
je 0x10022078
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + 8]
mov eax, dword [ecx + esi + 0x14]
add ecx, esi
mov eax, dword [eax + 4]
inc dword [eax + ecx + 0x14]
mov edi, dword [esp + 0x2c]
mov eax, esi
mov dword [esp + 0x14], esi
mov edx, 8
mov ecx, dword [ebp + 4]
or edx, ebx
mov dword [esp + 0x1c], edx
mov ebx, edx
mov ecx, dword [ecx + 8]
add ecx, 0x8c
add ecx, ebp
mov dword [esp + 0x2c], ecx
mov ecx, dword [ecx]
cmp eax, ecx
je 0x10022107
test ecx, ecx
je 0x100220df
mov ecx, dword [ecx + 0xc]
mov edx, dword [esp + 0x2c]
mov ecx, dword [ecx + 8]
mov ebx, dword [edx]
mov edx, dword [esp + 0x1c]
add ebx, ecx
mov ecx, dword [ebx + 0x14]
mov ecx, dword [ecx + 4]
add dword [ecx + ebx + 0x14], 0xffffffff
jne 0x100220df
lea ecx, [ebx + 0xc]
test ecx, ecx
je 0x100220df
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2c]
mov ebx, edx
mov dword [ecx], eax
test eax, eax
je 0x10022107
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx + 8]
add ecx, eax
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 4]
inc dword [eax + ecx + 0x14]
jmp 0x10022107
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x2c]
test bl, 8
je 0x10022134
and ebx, 0xfffffff7
test esi, esi
je 0x10022134
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + 8]
add ecx, 0x14
add ecx, esi
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add dword [eax + ecx], 0xffffffff
jne 0x10022134
add ecx, 0xfffffff8
je 0x10022134
mov eax, dword [ecx]
push 1
call dword [eax]
test bl, 4
je 0x10022161
and ebx, 0xfffffffb
test edi, edi
je 0x10022161
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + 8]
add ecx, 0x14
add ecx, edi
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add dword [eax + ecx], 0xffffffff
jne 0x10022161
add ecx, 0xfffffff8
je 0x10022161
mov eax, dword [ecx]
push 1
call dword [eax]
mov cl, byte [ebp + 0x70]
movzx eax, cl
sub eax, 5
je 0x10022bb9
sub eax, 1
je 0x10022aa8
sub eax, 1
je 0x10022a4b
mov esi, dword [ebp + 4]
mov edx, dword [esi + 8]
cmp byte [edx + ebp + 0x2d], 0
jne 0x1002238a
cmp cl, 1
je 0x100221ae
cmp cl, 2
jne 0x1002238a
cmp byte [ebp + 0xcc], 0
jne 0x1002238a
mov eax, dword [esi + 0xc]
push dword [edx + ebp + 0x34]
mov ecx, dword [0x10059df0]
add eax, 0xc
add eax, ebp
add ecx, 0x1134
push eax
push dword [edx + ebp + 0x28]
call fcn.100396e0
test eax, eax
je 0x1002229f
cmp byte [eax + 0x19], 0
je 0x1002229f
lea esi, [ebp + 0x18]
mov edx, dword [0x10059df0]
push ecx
mov ecx, esi
lea edx, [edx + 0x11a0]
call fcn.1000a520
add esp, 4
test al, al
je 0x10022378
mov edx, dword [0x10059df0]
push ecx
lea ecx, [ebp + 0xa8]
lea edx, [edx + 0x11f0]
call fcn.1000a520
add esp, 4
test al, al
jne 0x10022b6c
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
mov ecx, dword [eax + ebp + 0x8c]
test ecx, ecx
je 0x10022321
mov eax, dword [ecx + 0xc]
or ebx, 0x10
push 0
mov esi, dword [eax + 8]
mov al, byte [esi + ecx + 0x58]
add esi, ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x17], al
lea edx, [esi + 0x4c]
call fcn.10008540
mov ecx, dword [esi + 0x4c]
add esp, 4
add ecx, dword [eax]
mov edi, dword [eax + 4]
mov dword [esp + 0x2c], ecx
test edi, edi
jle 0x100222db
lea eax, [edi + 0x10]
push eax
mov dword [esp + 0x20], eax
call dword [sym.imp.msvcrt.dll_malloc]
mov esi, eax
add esp, 4
test esi, esi
je 0x100222db
push edi
push dword [esp + 0x30]
mov byte [edi + esi], 0
push esi
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x28]
add esp, 0xc
jmp 0x100222e4
cmp dword [ebp + 0x1c], 3
jne 0x1002238a
mov eax, dword [sym.imp.msvcrt.dll__strnicmp]
lea esi, [ebp + 0x18]
push 3
push 0x1005471c
push dword [esi]
call eax
add esp, 0xc
test eax, eax
jne 0x1002238a
cmp byte [ebp + 0x70], 1
jne 0x100221e5
mov al, 6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
xor eax, eax
mov esi, 0x10059da0
xor edi, edi
mov edx, dword [0x10059df0]
mov dword [esp + 0x38], eax
mov al, byte [esp + 0x13]
push ecx
lea edx, [edx + 0x11f0]
mov byte [esp + 0x41], 1
lea ecx, [esp + 0x34]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], edi
mov byte [esp + 0x40], al
call fcn.1000a520
add esp, 4
test al, al
je 0x10022325
mov byte [esp + 0x13], 1
jmp 0x1002232a
mov esi, dword [esp + 0x30]
mov byte [esp + 0x13], 0
test bl, 0x10
je 0x10022344
and ebx, 0xffffffef
cmp esi, 0x10059da0
je 0x10022344
push esi
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
cmp byte [esp + 0x13], 0
jne 0x10022b6c
mov eax, dword [ebp + 4]
mov byte [ebp + 0x70], 4
mov byte [ebp + 0x7d], 1
mov eax, dword [eax + 8]
and dword [eax + ebp + 0x88], 0xffffffe7
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
or dword [eax + ebp + 0x88], 0x104
jmp 0x1002238a
mov eax, dword [0x10059df0]
cmp byte [eax + 0x1177], 0
jne 0x10022b6c
mov esi, dword [ebp + 0xac]
sub esi, 0xb
mov edi, dword [sym.imp.msvcrt.dll__strnicmp]
js 0x100223d2
mov eax, dword [ebp + 0xa8]
push 0xb
add eax, esi
push 0x10054976
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x100223d2
test esi, esi
je 0x10022469
mov eax, dword [ebp + 0xa8]
movsx eax, byte [eax + esi - 1]
xor eax, 0x2e
test al, al
je 0x10022469
mov esi, dword [ebp + 0xac]
sub esi, 0xf
js 0x1002240c
mov eax, dword [ebp + 0xa8]
push 0xf
add eax, esi
push 0x10054986
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x1002240c
test esi, esi
je 0x10022469
mov eax, dword [ebp + 0xa8]
movsx eax, byte [eax + esi - 1]
xor eax, 0x2e
test al, al
je 0x10022469
cmp dword [ebp + 0xac], 0x10
jne 0x1002242b
push 0x10
push str.drive.google.com
push dword [ebp + 0xa8]
call edi
add esp, 0xc
test eax, eax
je 0x10022469
cmp dword [ebp + 0xac], 0xf
jne 0x1002244a
push 0xf
push str.docs.google.com
push dword [ebp + 0xa8]
call edi
add esp, 0xc
test eax, eax
je 0x10022469
cmp dword [ebp + 0xac], 0x16
jne 0x10022475
push 0x16
push str.youtube.googleapis.com
push dword [ebp + 0xa8]
call edi
add esp, 0xc
test eax, eax
jne 0x10022475
mov ecx, ebp
call fcn.1003b480
jmp 0x10022838
mov esi, dword [ebp + 0xac]
sub esi, 0xc
js 0x100224af
mov eax, dword [ebp + 0xa8]
push 0xc
add eax, esi
push 0x100549d6
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x100224af
test esi, esi
je 0x1002250d
mov eax, dword [ebp + 0xa8]
movsx eax, byte [eax + esi - 1]
xor eax, 0x2e
test al, al
je 0x1002250d
mov esi, dword [ebp + 0xac]
sub esi, 0xd
js 0x100224e9
mov eax, dword [ebp + 0xa8]
push 0xd
add eax, esi
push 0x100549e6
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x100224e9
test esi, esi
je 0x1002250d
mov eax, dword [ebp + 0xa8]
movsx eax, byte [esi + eax - 1]
xor eax, 0x2e
test al, al
je 0x1002250d
mov ecx, dword [ebp + 0xac]
sub ecx, 0xa
js 0x10022524
mov eax, dword [ebp + 0xa8]
push 0xa
add eax, ecx
push str..fbcdn.net
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x10022524
mov ecx, ebp
call fcn.1001aaa0
cmp al, 6
je 0x10022838
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov esi, dword [ebp + 0xac]
sub esi, 0xd
js 0x1002255e
mov eax, dword [ebp + 0xa8]
push 0xd
add eax, esi
push 0x100549f6
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x1002255e
test esi, esi
je 0x10022582
mov eax, dword [ebp + 0xa8]
movsx eax, byte [esi + eax - 1]
xor eax, 0x2e
test al, al
je 0x10022582
mov ecx, dword [ebp + 0xac]
sub ecx, 0x11
js 0x10022599
mov eax, dword [ebp + 0xa8]
push 0x11
add eax, ecx
push str..cdninstagram.com
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x10022599
mov ecx, ebp
call fcn.10026c70
cmp al, 6
je 0x10022838
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov esi, dword [ebp + 0xac]
sub esi, 0xc
js 0x100225d3
mov eax, dword [ebp + 0xa8]
push 0xc
add eax, esi
push 0x10054a1a
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x100225d3
test esi, esi
je 0x1002261b
mov eax, dword [ebp + 0xa8]
movsx eax, byte [eax + esi - 1]
xor eax, 0x2e
test al, al
je 0x1002261b
mov ecx, dword [ebp + 0xac]
sub ecx, 0x14
js 0x100225f7
mov eax, dword [ebp + 0xa8]
push 0x14
add eax, ecx
push str._vimeo.akamaized.net
push eax
call edi
add esp, 0xc
test eax, eax
je 0x1002261b
mov ecx, dword [ebp + 0xac]
sub ecx, 0x17
js 0x10022632
mov eax, dword [ebp + 0xa8]
push 0x17
add eax, ecx
push str._adaptive.akamaized.net
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x10022632
mov ecx, ebp
call fcn.10038dc0
cmp al, 6
je 0x10022838
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov esi, dword [ebp + 0xac]
sub esi, 5
js 0x10022681
mov eax, dword [ebp + 0xa8]
push 5
add eax, esi
push 0x10054a5a
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x10022681
test esi, esi
je 0x1002266c
mov eax, dword [ebp + 0xa8]
movsx eax, byte [eax + esi - 1]
xor eax, 0x2e
test al, al
jne 0x10022681
call fcn.10029f60
cmp al, 6
je 0x10022838
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov ecx, dword [ebp + 0xac]
sub ecx, 0x15
js 0x10022706
mov eax, dword [ebp + 0xa8]
push 0x15
add eax, ecx
push str._hls_media.sndcdn.com
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x10022706
cmp dword [ebp + 0x1c], 3
jne 0x10022706
push 3
push 0x10054a78
push dword [ebp + 0x18]
call edi
add esp, 0xc
test eax, eax
jne 0x10022706
mov eax, dword [ebp + 4]
lea edx, [ebp + 0x44]
lea ecx, [esp + 0x1c]
mov eax, dword [eax + 8]
add edx, eax
call fcn.100085f0
mov ecx, dword [eax]
test ecx, ecx
js 0x10022706
mov eax, dword [ebp + 4]
mov edx, dword [eax + 8]
lea eax, [ecx + 7]
cmp eax, dword [edx + ebp + 0x48]
ja 0x10022706
mov eax, dword [edx + ebp + 0x44]
push 7
add eax, ecx
push str._media_
push eax
call dword [sym.imp.msvcrt.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x10022b6c
mov esi, dword [ebp + 0xac]
sub esi, 0xa
js 0x10022740
mov eax, dword [ebp + 0xa8]
push 0xa
add eax, esi
push 0x10054a86
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x10022740
test esi, esi
je 0x10022786
mov eax, dword [ebp + 0xa8]
movsx eax, byte [eax + esi - 1]
xor eax, 0x2e
test al, al
je 0x10022786
mov esi, dword [ebp + 0xac]
sub esi, 8
js 0x10022838
mov eax, dword [ebp + 0xa8]
push 8
add eax, esi
push 0x10054a96
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x10022838
test esi, esi
je 0x10022786
mov eax, dword [ebp + 0xa8]
movsx eax, byte [eax + esi - 1]
xor eax, 0x2e
test al, al
jne 0x10022838
mov eax, dword [ebp + 4]
lea edx, [ebp + 0x44]
push 0x10054aa0
lea ecx, [esp + 0x34]
mov dword [esp + 0x34], 0x10059da0
mov dword [esp + 0x38], 0
mov eax, dword [eax + 8]
add edx, eax
mov dword [esp + 0x3c], 0
mov word [esp + 0x40], 0
call fcn.10008970
mov eax, dword [esp + 0x38]
add esp, 4
mov esi, dword [esp + 0x30]
test eax, eax
je 0x10022826
push 0xa
push eax
lea edx, [esp + 0x34]
mov ecx, esi
call fcn.1000a9b0
add esp, 8
test eax, eax
je 0x10022826
cmp eax, dword [esp + 0x34]
jae 0x10022826
cmp byte [esi + eax], 0x2d
jne 0x10022826
cmp dword [esp + 0x2c], 0x100
jbe 0x10022818
cmp esi, 0x10059da0
je 0x10022b6c
push esi
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov dword [ebp + 0x38], 0
mov dword [ebp + 0x3c], 0
cmp esi, 0x10059da0
je 0x10022838
push esi
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
mov ecx, dword [eax + ebp + 0x90]
test ecx, ecx
je 0x10022857
push ebp
call fcn.1001ef10
cmp al, 6
jne 0x10022bc5
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
mov ecx, dword [eax + ebp + 0x8c]
test ecx, ecx
je 0x1002287f
cmp ecx, dword [eax + ebp + 0x90]
je 0x1002287f
push ebp
call fcn.1001ef10
cmp al, 6
jne 0x10022bc5
cmp byte [ebp + 0x7d], 0
je 0x1002291d
mov ecx, dword [0x10059df0]
push ebp
call fcn.10013760
test al, al
je 0x10022b6c
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
cmp dword [eax + ebp + 0x78], 0
jne 0x10022901
cmp dword [ebp + 0xc], 0
jne 0x10022901
lea edx, [ebp + 0x44]
add edx, eax
lea ecx, [esp + 0x40]
call fcn.10008690
mov esi, eax
mov eax, dword [ebp + 8]
cmp eax, 0x10059da0
je 0x100228d4
push eax
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
mov eax, dword [esi]
mov dword [ebp + 8], eax
mov eax, dword [esi + 4]
mov dword [ebp + 0xc], eax
mov eax, dword [esi + 8]
mov dword [ebp + 0x10], eax
mov al, byte [esi + 0xc]
mov byte [ebp + 0x14], al
mov dword [esi], 0x10059da0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
jmp 0x10022906
test bl, 0x20
je 0x1002297a
mov eax, dword [esp + 0x40]
cmp eax, 0x10059da0
je 0x1002297a
push eax
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
jmp 0x1002297a
test dword [ebp + 0x74], 0x10000
jne 0x1002295e
cmp byte [esp + 0x12], 0
jne 0x1002297a
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 8]
test byte [eax + ebp + 0x2c], 1
je 0x1002297a
mov eax, dword [ecx + 0xc]
cmp dword [eax + ebp + 0x90], 0x18
jne 0x1002297a
push 0x18
push str.application_octet_stream
push dword [eax + ebp + 0x8c]
call edi
add esp, 0xc
test eax, eax
jne 0x1002297a
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
and dword [eax + ebp + 0x88], 0xffffffeb
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
or dword [eax + ebp + 0x88], 8
cmp dword [ebp + 0xc], 0
je 0x100229f2
lea ecx, [ebp + 8]
call fcn.1000a440
cmp dword [ebp + 0x1c], 0
jne 0x100229f2
mov esi, dword [ebp + 8]
lea edx, [ebp + 8]
mov bl, byte [ebp + 0x14]
lea ecx, [esp + 0x30]
push 0xffffffffffffffff
call fcn.10008230
add esp, 4
mov edx, dword [eax + 4]
add esi, dword [eax]
mov dword [esp + 0x2c], edx
mov byte [ebp + 0x24], bl
test edx, edx
jle 0x100229e5
lea eax, [edx + 1]
cmp dword [ebp + 0x20], eax
jae 0x100229ce
push eax
lea ecx, [ebp + 0x18]
call fcn.10003580
test eax, eax
je 0x100229e5
mov edx, dword [esp + 0x2c]
mov eax, dword [ebp + 0x18]
push edx
push esi
mov dword [ebp + 0x1c], edx
push eax
mov byte [eax + edx], 0
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x100229f2
mov eax, dword [ebp + 0x18]
mov dword [ebp + 0x1c], 0
mov byte [eax], 0
cmp byte [ebp + 0x7c], 0
je 0x10022a37
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
test byte [eax + ebp + 0x88], 0x10
je 0x10022a37
cmp dword [ebp + 0x1c], 3
jne 0x10022a37
mov eax, dword [sym.imp.msvcrt.dll__strnicmp]
push 3
push 0x10054ac4
push dword [ebp + 0x18]
call eax
add esp, 0xc
test eax, eax
jne 0x10022a37
mov eax, dword [ebp + 4]
mov eax, dword [eax + 8]
or dword [eax + ebp + 0x88], 0x8000000
mov ecx, dword [0x10059df0]
push ebp
call fcn.100149f0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebp + 0xe8]
test eax, eax
je 0x10022a60
mov byte [eax + 0x19], 1
push 0x1b8
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
test eax, eax
je 0x10022a99
push 1
push 0
push 0
push ebp
mov ecx, eax
call fcn.1000b250
test eax, eax
je 0x10022bc2
test eax, eax
mov byte [eax + 0x19], 1
setne al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
xor eax, eax
test eax, eax
setne al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0xc]
cmp dword [eax + ebp + 0x20], 0
lea esi, [eax + ebp]
je 0x10022baf
mov eax, dword [ecx + 8]
lea edx, [ebp + 0x44]
add edx, eax
lea ecx, [esi + 0x1c]
call fcn.10008310
test al, al
je 0x10022baf
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + 8]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + ebp + 0x20]
cmp ecx, dword [edx + ebp + 0x48]
jne 0x10022b01
push ecx
push dword [edx + ebp + 0x44]
push dword [eax + ebp + 0x1c]
call dword [sym.imp.msvcrt.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x10022baf
mov eax, dword [ebp + 4]
mov ecx, dword [eax + 0xc]
add ecx, ebp
mov edx, dword [ecx + 0xe8]
test edx, edx
je 0x10022b76
mov eax, dword [edx + 0xc]
mov edi, dword [ecx + 0x20]
mov ebx, dword [ecx + 0x1c]
mov esi, dword [eax + 0xc]
mov al, byte [ecx + 0x28]
add esi, edx
mov byte [esi + 0x30], al
test edi, edi
jle 0x10022b5f
lea eax, [edi + 1]
cmp dword [esi + 0x2c], eax
jae 0x10022b40
push eax
lea ecx, [esi + 0x24]
call fcn.10003580
test eax, eax
je 0x10022b5f
mov eax, dword [esi + 0x24]
push edi
push ebx
mov dword [esi + 0x28], edi
push eax
mov byte [eax + edi], 0
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov eax, dword [esi + 0x24]
mov dword [esi + 0x28], 0
mov byte [eax], 0
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
push 0x1b8
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
test eax, eax
je 0x10022a99
push 1
push 0
push 0
push ebp
mov ecx, eax
call fcn.1000b250
test eax, eax
je 0x10022bc2
test eax, eax
mov byte [eax + 0x18], 1
setne al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret
mov ecx, ebp
call fcn.10024e50
test al, al
setne al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret