Function at 0x5526f0
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60c378
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 0x10], esp
push 0x1e
mov ecx, dword [ebx + 0x31d8]
mov eax, dword [ebx]
xor esi, esi
push ecx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], esi
call dword [eax + 0x18]
mov edi, eax
mov eax, dword [ebx + 0x31e0]
cmp dword [eax + 0x38], esi
je 0x55275b
lea ecx, [eax + 0x48]
call fcn.00534cb0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edi, esi
je 0x5527d5
xor esi, esi
push edi
mov ecx, ebx
call fcn.00537c30
test eax, eax
jne 0x5527bc
inc esi
cmp esi, 5
jg 0x5527bc
mov edx, dword [ebx]
lea edi, [ebx + 0x31d8]
push edi
mov ecx, ebx
call dword [edx + 0x14]
mov ecx, dword [edi]
mov eax, dword [ebx]
push 0x1e
push ecx
mov ecx, ebx
call dword [eax + 0x18]
mov edi, eax
mov eax, dword [ebx + 0x31e0]
mov ecx, dword [eax + 0x38]
test ecx, ecx
je 0x552761
lea ecx, [eax + 0x48]
call fcn.00534cb0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
je 0x5527d5
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x3228], 1
mov eax, dword [ebx + 0x17c]
test eax, eax
je 0x552861
mov al, byte [eax + 0x150]
test al, al
mov byte [ebp - 0x12], al
je 0x552865
mov ecx, ebx
call fcn.00552440
mov edi, eax
test edi, edi
je 0x552865
mov ecx, dword [ebx + 0x17c]
mov al, byte [ecx + 0x151]
test al, al
jne 0x552874
cmp edi, 0x7559
jne 0x552874
cmp dword [ecx + 0x14c], 5
jne 0x552874
mov dl, byte [ecx + 0x152]
test dl, dl
jne 0x552874
mov dl, byte [ecx + 0x153]
test dl, dl
jne 0x552874
mov byte [ecx + 0x152], 1
mov edx, dword [ebx + 0x17c]
mov byte [edx + 0x153], 1
mov eax, dword [ebx + 0x17c]
mov dword [eax + 0x14c], 4
jmp 0x553bfb
mov byte [ebp - 0x12], 0
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x5528e9
mov eax, dword [eax + 0x10]
jmp 0x5528f2
mov edx, dword [ecx + 0x14c]
cmp edx, 5
jne 0x5528ac
cmp edi, 0x7580
jne 0x5528ac
cmp byte [ecx + 0x152], 0
jne 0x5528ac
mov byte [ecx + 0x152], 1
mov ecx, dword [ebx + 0x17c]
mov dword [ecx + 0x14c], 4
jmp 0x553bfb
test al, al
jne 0x5528d4
cmp edx, 4
jne 0x5528d4
mov al, byte [ecx + 0x152]
test al, al
je 0x5528d4
mov al, byte [ecx + 0x153]
test al, al
je 0x5528d4
mov dword [ecx + 0x14c], edx
mov edi, 0x7559
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x24]
cmp eax, 2
jne 0x5529cd
mov edx, dword [ebx + 0x17c]
cmp dword [edx], 0
je 0x552957
push 1
mov ecx, ebx
call fcn.00554ff0
test eax, eax
jne 0x553eef
cmp dword [ebx + 0x3230], 0xc8
je 0x55294d
mov eax, dword [ebx + 0x3218]
mov ecx, dword [ebx + 0x9c]
push eax
call fcn.0053e330
mov eax, 0x756d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 0x10
mov ecx, dword [ebx + 0x3354]
lea esi, [ebx + 0x3300]
push esi
push ecx
mov ecx, ebx
call fcn.005ac270
test eax, eax
jne 0x553eef
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x552982
mov eax, dword [eax]
jmp 0x55298a
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx]
mov edx, dword [ebx + 0x31d8]
lea ecx, [ebx + 0x3310]
lea edi, [ebx + 0x3308]
push 1
push ecx
push edi
push eax
push esi
push edx
mov ecx, ebx
call fcn.005ac6c0
test eax, eax
je 0x5529c5
cmp eax, 0x757e
jne 0x553eef
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
jmp 0x553c02
push edi
mov ecx, ebx
call fcn.005ad220
mov esi, dword [ebp + 8]
test esi, esi
je 0x5529dd
mov ecx, ebx
call fcn.00554210
jmp 0x5529e6
mov edx, dword [ebx]
push 0
mov ecx, ebx
call dword [edx + 0x20]
test eax, eax
jne 0x553eef
push esi
mov ecx, ebx
call fcn.00553f10
mov esi, eax
test esi, esi
jne 0x552a96
cmp dword [ebx + 0x3230], 0xce
jne 0x552a96
mov edi, dword [ebx + 0x323c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x552a96
mov eax, dword [ebx + 0xb4]
test eax, eax
jne 0x552a41
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.005e3927
or dword [ebp - 0x28], 1
mov eax, dword [eax]
push str.sciencedirect.com
push eax
call fcn.005c7380
mov edi, eax
mov al, byte [ebp - 0x28]
add esp, 8
test al, 1
je 0x552a62
lea ecx, [ebp - 0x2c]
call fcn.005e38b9
test edi, edi
je 0x552a96
cmp dword [ebx + 0x31d4], 2
je 0x552a96
mov ecx, dword [ebx + 0x31e0]
test ecx, ecx
je 0x552a80
mov edx, dword [ecx]
push 2
call dword [edx + 0xc]
mov eax, dword [ebx]
mov ecx, ebx
mov dword [ebx + 0x31d4], 2
call dword [eax + 0x1c]
jmp 0x553c02
cmp dword [ebx + 0x3230], 0xc8
jne 0x552af9
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x552af9
mov eax, dword [ebx + 0x54]
xor edi, edi
cmp eax, edi
jg 0x552afb
jl 0x552abc
cmp dword [ebx + 0x50], edi
ja 0x552afb
mov al, byte [ebx + 0x31e5]
test al, al
jne 0x552afb
mov eax, dword [ebx + 0x3250]
mov ecx, dword [ebx + 0x3254]
mov edx, eax
or edx, ecx
je 0x552afb
mov edx, dword [ebx + 0x31f0]
add eax, 1
adc ecx, edi
cmp eax, edx
jne 0x552afb
cmp ecx, dword [ebx + 0x31f4]
jne 0x552afb
mov esi, 0x7542
jmp 0x552d05
xor edi, edi
cmp esi, edi
je 0x552f4f
cmp esi, 0x7563
jne 0x552b20
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7581
jne 0x552b3d
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7566
jne 0x552d05
mov eax, dword [ebx + 0xb0]
push str..dailymotion.com
mov ecx, dword [eax]
push ecx
call fcn.005c7380
add esp, 8
test eax, eax
jne 0x552b81
mov edx, dword [ebx + 0xb0]
push str..dmcdn.net
mov eax, dword [edx]
push eax
call fcn.005c7380
add esp, 8
test eax, eax
je 0x552d05
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 8]
cmp eax, edi
je 0x552d05
mov edx, dword [ecx + 0x144]
test dh, 1
je 0x552d05
push 0x2e
push eax
call fcn.005c8240
add esp, 8
cmp eax, edi
je 0x552d05
push 0x6a5ef8
push eax
call fcn.005c8740
add esp, 8
test eax, eax
jne 0x552d05
mov ecx, dword [0x6cc564]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebx + 0xb0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
mov eax, dword [edx + 8]
push eax
push 0x6a1fe8
push ecx
call fcn.005dc6eb
mov edx, dword [ebp - 0x28]
add esp, 0xc
push 0x2e
push edx
call fcn.005c8240
add esp, 8
cmp eax, edi
je 0x552cf9
mov byte [eax], 0
mov eax, dword [0x6cc564]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
push ecx
push str._s.mnft
push edx
mov byte [ebp - 4], 2
call fcn.005dc6eb
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
add esp, 0xc
mov eax, dword [eax + 8]
test eax, eax
je 0x552c48
push eax
call fcn.005dfce5
add esp, 4
mov al, byte [0x6d0ab8]
test esi, esi
mov byte [ebp - 0x12], al
jne 0x552c57
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005dfcbc
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x552c83
push str.URL::set_fileName__:_Not_enough_memory__n
call fcn.005a0160
jmp 0x552ca2
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x1c]
mov edx, dword [ebx]
lea eax, [ebx + 0x31d8]
push eax
mov ecx, ebx
call dword [edx + 0x14]
mov esi, eax
test esi, esi
je 0x552cea
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.005e38b9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.005526f0
mov esi, eax
jmp 0x552cbd
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov ecx, dword [0x6cc564]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebx + 0xb0]
lea edx, [ebp - 0x18]
push edi
push edx
mov byte [ebp - 4], 3
call fcn.00566570
mov eax, dword [ebp - 0x18]
push eax
call fcn.0048d320
add esp, 4
cmp esi, 0x7565
je 0x552d42
cmp esi, 0x7542
jne 0x552e44
mov ecx, dword [ebx + 0xb0]
mov dl, byte [ecx + 0x2ef]
test dl, dl
jne 0x552dcd
test al, al
je 0x552dcd
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x1c]
mov edx, dword [ebx]
lea eax, [ebx + 0x31d8]
push eax
mov ecx, ebx
call dword [edx + 0x14]
mov edi, eax
test edi, edi
je 0x552d92
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp + 8]
push ecx
mov byte [eax + 0x2ef], 1
mov ecx, ebx
call fcn.005526f0
mov esi, eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x7542
jne 0x552e44
cmp dword [ebp + 8], edi
jne 0x552e44
cmp dword [ebx + 0x54], edi
jl 0x552e58
jg 0x552de6
cmp dword [ebx + 0x50], edi
jbe 0x552e44
cmp dword [ecx + 0x2c8], edi
je 0x552e44
mov edx, dword [ebx + 0x31e0]
mov eax, dword [edx + 0xd8]
push eax
push edi
call fcn.005a6500
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x1c]
mov edx, dword [ebx]
lea eax, [ebx + 0x31d8]
push eax
mov ecx, ebx
call dword [edx + 0x14]
mov edi, eax
test edi, edi
je 0x552e3d
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
jmp 0x552da3
cmp dword [ebx + 0x54], edi
jg 0x552ef8
jl 0x552e58
cmp dword [ebx + 0x50], edi
ja 0x552ef8
mov al, byte [ebx + 0x31e5]
test al, al
jne 0x552ef8
cmp esi, 0x7565
je 0x552e8e
cmp esi, 0x7566
je 0x552e8e
cmp esi, 0x7542
je 0x552e8e
cmp esi, 0x756e
je 0x552e8e
cmp esi, 0x755e
jne 0x552ef8
mov eax, dword [ebx + 0xb0]
mov byte [ebx + 0x31e4], 1
mov byte [ebx + 0x31e5], 1
mov cl, byte [eax + 0x305]
test cl, cl
je 0x552eb3
mov byte [eax + 0x307], 1
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
mov edx, dword [ebx]
lea eax, [ebx + 0x31d8]
push eax
mov ecx, ebx
call dword [edx + 0x14]
mov edi, eax
test edi, edi
je 0x552eef
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
push eax
jmp 0x552da3
mov ecx, dword [ebx + 0x31f8]
cmp ecx, edi
je 0x552dac
call fcn.00580060
test al, al
jne 0x552dac
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x306]
test cl, cl
je 0x552dac
mov cl, byte [eax + 0x307]
test cl, cl
jne 0x552dac
mov cl, byte [eax + 0x308]
test cl, cl
jne 0x552dac
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.005e38b9
cmp dword [ebx + 0x31f8], edi
je 0x5536c7
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0xbc]
cmp eax, edi
jne 0x552f77
cmp esi, edi
je 0x5536c7
cmp eax, edi
je 0x552f8d
push str.text_html
push eax
call fcn.005c8740
add esp, 8
test eax, eax
sete byte [ebp - 0x11]
jmp 0x552f91
mov byte [ebp - 0x11], 0
mov ecx, dword [ebx + 0x31f8]
call fcn.00580060
test al, al
jne 0x5536c7
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x306]
test cl, cl
je 0x5536c7
mov cl, byte [eax + 0x307]
test cl, cl
jne 0x5536c7
mov cl, byte [eax + 0x308]
test cl, cl
jne 0x5536c7
mov al, byte [ebp - 0x11]
test al, al
jne 0x552fe3
cmp esi, edi
je 0x5536c7
mov eax, dword [0x6cc564]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x40], edi
mov word [ebp - 0x44], di
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x28]
push eax
lea edx, [ebp - 0x34]
push ecx
lea eax, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x20]
push ecx
mov ecx, dword [ebx + 0x31f8]
lea eax, [ebp - 0x24]
push edx
push eax
mov byte [ebp - 4], 9
call fcn.0057ff80
test al, al
je 0x55367f
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x307], 1
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x305], 1
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x308], 1
mov ecx, dword [ebx + 0x31f8]
call fcn.0057ff50
mov eax, dword [ebx + 0xb0]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebx + 0xb0]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebx + 0xb0]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], esi
mov eax, dword [esi]
test eax, eax
je 0x5530a0
push eax
call fcn.005dfce5
add esp, 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005dfcbc
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi], edx
jne 0x553129
push str.URL::set_serverName__:_Not_enough_memory__n
mov ecx, esi
call fcn.005a0160
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.005e38b9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.005e38b9
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.005e38b9
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.005e38b9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov eax, 0x753b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, dword [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x17c], 0
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 4]
test eax, eax
je 0x553172
push eax
call fcn.005dfce5
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x55317d
mov dword [edi + 4], edx
jmp 0x5531dc
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x553193
mov eax, dword [ebp - 0x2c]
mov dword [eax + 4], edx
jmp 0x5531dc
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005dfcbc
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 4], edx
jne 0x5531bd
push str.URL::set_serverPath__:_Not_enough_memory__n
jmp 0x5530c4
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [eax + 8]
test eax, eax
je 0x5531f8
push eax
call fcn.005dfce5
add esp, 4
mov cl, byte [0x6d0ab8]
test esi, esi
mov byte [ebp - 0x12], cl
jne 0x553208
lea esi, [ebp - 0x12]
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005dfcbc
mov ecx, dword [ebp - 0x3c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 8], edx
jne 0x553232
push str.URL::set_fileName__:_Not_enough_memory__n
jmp 0x5530c4
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0xb0]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x55326d
push eax
call fcn.005dfce5
add esp, 4
xor edx, edx
cmp esi, edx
jne 0x553278
mov dword [edi + 0x1c], edx
jmp 0x5532d9
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x55328e
mov ecx, dword [ebp - 0x2c]
mov dword [ecx + 0x1c], edx
jmp 0x5532d9
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005dfcbc
mov ecx, dword [ebp - 0x2c]
mov edx, eax
add esp, 4
test edx, edx
mov dword [ecx + 0x1c], edx
jne 0x5532ba
push str.URL::set_Cookie__:_Not_enough_memory__n
call fcn.005a0160
jmp 0x5532d9
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0xb0]
push 0x6d0ab8
add ecx, 0xc4
call fcn.005e3a42
mov ecx, dword [ebx + 0xb0]
mov byte [ecx + 0x2f5], 0
mov esi, dword [ebx + 0xb0]
mov eax, dword [esi + 0x18]
test eax, eax
je 0x553312
push eax
call fcn.005dfce5
add esp, 4
mov edx, 0x6d0ab8
test edx, edx
jne 0x553320
mov dword [esi + 0x18], edx
jmp 0x553386
mov edi, 0x6d0ab8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x553336
mov dword [esi + 0x18], eax
jmp 0x553386
mov edi, 0x6d0ab8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.005dfcbc
mov edx, eax
add esp, 4
test edx, edx
mov dword [esi + 0x18], edx
jne 0x553364
push str.URL::set_Referer__:_Not_enough_memory__n
mov ecx, esi
call fcn.005a0160
jmp 0x553386
mov edi, 0x6d0ab8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x31e0]
test eax, eax
je 0x5533cc
mov eax, dword [eax + 0xd8]
test eax, eax
je 0x5533cc
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x408]
test edx, edx
jne 0x5533b0
push eax
call fcn.005a63d0
mov ecx, dword [ebx + 0xb0]
mov eax, dword [ecx + 0x408]
test eax, eax
je 0x5533cc
push str.Referer
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x5533d6
lea eax, [ebp - 0x44]
push eax
call fcn.005c7292
add esp, 4
test eax, eax
je 0x553444
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x5533ed
lea eax, [ebp - 0x44]
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005a47b0
mov eax, dword [ebx + 0x31e0]
test eax, eax
je 0x553444
mov eax, dword [eax + 0xd8]
test eax, eax
je 0x553419
mov ecx, dword [ebx + 0xb0]
push eax
call fcn.005a2a00
mov eax, dword [ebx + 0x31e0]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x553444
mov edx, dword [eax + 0xd8]
mov eax, dword [ecx]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edx
push 0x13c9
push 0x111
push eax
call esi
jmp 0x55344a
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebx + 0xb0]
push 0x6d0ab8
mov byte [ecx + 0x176], 1
mov ecx, dword [ebx + 0xb0]
add ecx, 0x160
call fcn.005e3a42
mov edx, dword [ebx + 0xb0]
mov byte [edx + 0x15e], 0
mov eax, dword [ebx + 0xb0]
mov byte [eax + 0x2fa], 0
mov ecx, dword [ebx + 0xb0]
push ecx
mov byte [ebx + 0xc8], 0
call fcn.004f51a0
add esp, 4
mov ecx, ebx
call fcn.0054d900
mov eax, dword [ebx + 0xac]
test eax, eax
jne 0x553539
mov edx, dword [ebx + 0xa0]
mov eax, dword [edx]
mov eax, dword [eax]
test eax, eax
je 0x5534cf
push 0
push 0x1478
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e0]
test eax, eax
je 0x553539
mov eax, dword [eax + 0xd8]
test eax, eax
je 0x553539
mov ecx, dword [ebx + 0xb0]
push 0
push 0
push eax
call fcn.005a22c0
mov eax, dword [ebx + 0x31e0]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x553516
mov edx, dword [eax + 0xd8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31e0]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x553539
mov edx, dword [eax + 0xd8]
mov eax, dword [ecx]
push edx
push 0x1395
push 0x111
push eax
call esi
mov eax, dword [ebx + 0x31d0]
test eax, eax
je 0x553562
push eax
mov byte [ebp - 4], 0xa
call fcn.005dfce5
add esp, 4
jmp 0x55355b
mov dword [ebp - 4], 9
mov ecx, dword [ebx + 0xb0]
mov dword [ebx + 0x31d0], 0
call fcn.005a4d80
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x1c]
mov eax, dword [ebx]
lea ecx, [ebx + 0x31d8]
push ecx
mov ecx, ebx
call dword [eax + 0x14]
mov esi, eax
test esi, esi
jne 0x553622
mov edx, dword [ebp + 8]
mov ecx, ebx
push edx
call fcn.005526f0
mov esi, eax
test esi, esi
jne 0x553622
mov eax, dword [ebx + 0xb0]
mov eax, dword [eax + 0xbc]
test eax, eax
je 0x553622
push str.text_html
push eax
call fcn.005c8740
add esp, 8
test eax, eax
je 0x553622
mov eax, dword [ebx + 0x31e0]
test eax, eax
je 0x553622
mov eax, dword [eax + 0xd8]
test eax, eax
je 0x553622
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x408]
test edx, edx
jne 0x5535f3
push eax
call fcn.005a63d0
mov ebx, dword [ebx + 0xb0]
mov eax, dword [ebx + 0x408]
test eax, eax
je 0x553622
lea ecx, [ebp + 8]
push 4
push ecx
push 4
push 0
mov edx, eax
push str.noSyntRef
push edx
mov dword [ebp + 8], 1
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.005e38b9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.005e38b9
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.005e38b9
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.005e38b9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.005e38b9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.005e38b9
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.005e38b9
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.005e38b9
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0
call fcn.005e38b9
mov esi, dword [ebx + 0x3230]
cmp esi, 0xc8
jne 0x5536f1
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x5536f1
mov ecx, dword [ebx + 0x31f0]
mov edx, dword [ebx + 0x31f4]
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], edx
cmp esi, 0xce
jne 0x5537a3
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x55373f
mov eax, dword [ebx + 0x54]
test eax, eax
jg 0x55373f
jl 0x553717
mov eax, dword [ebx + 0x50]
test eax, eax
ja 0x55373f
mov eax, dword [ebx + 0x31f0]
mov ecx, dword [ebx + 0x31f4]
mov edx, eax
or edx, ecx
je 0x55373f
mov edx, dword [ebx + 0x3250]
mov edi, dword [ebx + 0x3254]
or edx, edi
jne 0x55373f
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], ecx
cmp esi, 0xce
jne 0x5537a3
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x5537a3
mov eax, dword [ebx + 0x54]
test eax, eax
jg 0x553791
jl 0x553761
mov eax, dword [ebx + 0x50]
test eax, eax
ja 0x553791
mov edi, dword [ebx + 0x3250]
mov ecx, dword [ebx + 0x3254]
mov edx, edi
or edx, ecx
je 0x553791
mov eax, dword [ebx + 0x31f4]
mov edx, dword [ebx + 0x31f0]
cmp ecx, eax
jg 0x553791
jl 0x553789
cmp edi, edx
jae 0x553791
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], eax
jmp 0x5537a3
mov eax, dword [ebx + 0x3250]
mov ecx, dword [ebx + 0x3254]
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], ecx
cmp esi, 0xc8
je 0x5537b3
cmp esi, 0xce
jne 0x5537d9
mov edx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
or edx, eax
jne 0x5537d9
mov eax, dword [ebx + 0x326c]
mov ecx, dword [ebx + 0x3268]
test eax, eax
jl 0x5537d9
jg 0x5537d3
test ecx, ecx
jbe 0x5537d9
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], eax
mov edx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x4c]
mov ecx, edx
or ecx, eax
je 0x5538bc
mov edi, dword [ebx + 0x31e0]
mov eax, dword [edi + 0xf0]
mov ecx, dword [edi + 0xf4]
mov esi, eax
or esi, ecx
je 0x5538bc
cmp eax, edx
jne 0x553812
cmp ecx, dword [ebx + 0x4c]
je 0x5538bc
mov edx, dword [edi + 0xe8]
mov esi, dword [edi + 0xec]
or edx, esi
je 0x5538bc
mov dl, byte [ebx + 0x3238]
test dl, dl
jne 0x5538bc
cmp dword [ebx + 0x3230], 0xce
jne 0x553876
mov edx, dword [ebx + 0x3250]
mov esi, dword [ebx + 0x3254]
sub eax, 1
sbb ecx, 0
cmp edx, eax
jne 0x553876
cmp esi, ecx
jne 0x553876
mov eax, dword [ebx + 0x3258]
mov ecx, dword [ebx + 0x325c]
or eax, ecx
jne 0x553876
mov dword [ebx + 0x3258], edx
mov dword [ebx + 0x325c], esi
mov esi, dword [ebx + 0x3258]
mov eax, dword [ebx + 0x325c]
mov ecx, esi
or ecx, eax
je 0x553b7a
mov edx, dword [edi + 0xf0]
mov edi, dword [edi + 0xf4]
mov eax, edx
mov ecx, edi
sub eax, 1
sbb ecx, 0
cmp esi, eax
jne 0x553b7a
cmp dword [ebx + 0x325c], ecx
jne 0x553b7a
mov dword [ebx + 0x48], edx
mov dword [ebx + 0x4c], edi
mov al, byte [ebx + 0x3238]
test al, al
jne 0x553cbb
mov eax, dword [ebx + 0xb0]
mov edx, dword [eax + 0xbc]
test edx, edx
je 0x553c95
mov esi, dword [eax + 0x100]
or ecx, 0xffffffff
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x553c95
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x553c95
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push esi
call fcn.005cab90
add esp, 0xc
test eax, eax
je 0x553c95
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov byte [ebp - 0x11], 1
mov eax, dword [eax + 0x100]
push eax
call fcn.005c9620
add esp, 0xc
test eax, eax
jne 0x55396b
mov ecx, dword [ebx + 0xb0]
push 9
push str.text_html
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005c9620
add esp, 0xc
test eax, eax
je 0x55396b
mov byte [ebp - 0x11], 0
mov eax, dword [ebx + 0xb0]
push 0xa
push 0x6a4ac0
mov eax, dword [eax + 0x100]
push eax
call fcn.005c9620
add esp, 0xc
test eax, eax
jne 0x5539af
mov ecx, dword [ebx + 0xb0]
push 9
push str.text_html
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005c9620
add esp, 0xc
test eax, eax
je 0x5539af
mov byte [ebp - 0x11], 0
mov eax, dword [ebx + 0xb0]
push 0x15
push str.application_x_mpegURL
mov eax, dword [eax + 0x100]
push eax
call fcn.005cab90
add esp, 0xc
test eax, eax
jne 0x553a27
mov ecx, dword [ebx + 0xb0]
push 0x1d
push str.application_vnd.apple.mpegurl
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005cab90
add esp, 0xc
test eax, eax
je 0x553a0d
mov eax, dword [ebx + 0xb0]
push str.video_MP2T
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005c8740
add esp, 8
test eax, eax
jne 0x553a27
mov ecx, dword [ebx + 0xb0]
push 0x6d0ab8
add ecx, 0x100
mov byte [ebp - 0x11], 0
call fcn.005e3a42
mov edx, dword [ebx + 0xb0]
push 9
push str.text_html
mov eax, dword [edx + 0xbc]
push eax
call fcn.005c9620
add esp, 0xc
test eax, eax
je 0x553b17
mov ecx, dword [ebx + 0xb0]
push str..youtube.com
mov edx, dword [ecx]
push edx
call fcn.005c7380
add esp, 8
test eax, eax
jne 0x553a83
mov eax, dword [ebx + 0xb0]
push str..googlevideo.com
mov ecx, dword [eax]
push ecx
call fcn.005c7380
add esp, 8
test eax, eax
je 0x553b17
mov eax, dword [ebx + 0xb0]
mov esi, dword [eax + 8]
test esi, esi
je 0x553b17
mov ecx, 7
mov edi, str.videoplayback_
xor edx, edx
repe cmpsw word [esi], word es:[edi]
jne 0x553b17
mov eax, dword [eax + 0xbc]
push 6
push str.video_
push eax
call fcn.005c9620
add esp, 0xc
test eax, eax
jne 0x553afd
mov ecx, dword [ebx + 0xb0]
push 6
push str.audio_
mov edx, dword [ecx + 0xbc]
push edx
call fcn.005c9620
add esp, 0xc
test eax, eax
jne 0x553afd
mov eax, dword [ebx + 0xb0]
push str.application_octet_stream
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005c8740
add esp, 8
test eax, eax
jne 0x553b17
mov ecx, dword [ebx + 0xb0]
push 0x6d0ab8
add ecx, 0x100
mov byte [ebp - 0x11], 0
call fcn.005e3a42
mov al, byte [ebp - 0x11]
test al, al
je 0x553c95
mov ecx, dword [ebx + 0x31e0]
mov eax, dword [ecx + 0x15c]
test eax, eax
je 0x553c36
mov eax, dword [ebx + 0xb0]
mov dl, byte [eax + 0x30a]
test dl, dl
jne 0x553b54
mov dl, byte [eax + 0x15b]
test dl, dl
je 0x553c36
mov edx, dword [ecx + 0xe8]
lea eax, [ecx + 0xe8]
mov ecx, dword [ecx + 0xec]
or edx, ecx
je 0x553c95
mov byte [ebx + 0x3238], 1
jmp 0x553c95
mov eax, dword [ebx + 0x31e0]
mov ecx, dword [eax + 0x15c]
test ecx, ecx
je 0x553bb0
mov eax, dword [ebx + 0xb0]
mov cl, byte [eax + 0x30a]
test cl, cl
jne 0x553ba4
mov cl, byte [eax + 0x15b]
test cl, cl
je 0x553bb0
mov byte [ebx + 0x3238], 1
jmp 0x5538bc
mov eax, dword [ebx + 0x54]
test eax, eax
jg 0x553c76
jl 0x553bc8
mov eax, dword [ebx + 0x50]
test eax, eax
ja 0x553c76
mov al, byte [ebx + 0x31e5]
test al, al
jne 0x553c76
mov eax, dword [ebx + 0xb0]
mov byte [ebx + 0x31e4], 1
mov byte [ebx + 0x31e5], 1
mov cl, byte [eax + 0x305]
test cl, cl
je 0x553bfb
mov byte [eax + 0x307], 1
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x1c]
mov edx, dword [ebx]
lea eax, [ebx + 0x31d8]
push eax
mov ecx, ebx
call dword [edx + 0x14]
test eax, eax
jne 0x553eef
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.005526f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb0]
push 9
push str.text_html
mov ecx, dword [eax + 0xbc]
push ecx
call fcn.005c9620
add esp, 0xc
test eax, eax
je 0x553c76
mov ecx, dword [ebx + 0x48]
mov edx, dword [ebx + 0x4c]
mov eax, ecx
or eax, edx
je 0x553c76
mov eax, dword [ebx + 0xb0]
add eax, 0x120
cmp ecx, dword [eax]
jne 0x553c76
cmp edx, dword [eax + 4]
je 0x553c95
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x1c]
mov eax, 0x757a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebx + 0x3238]
test al, al
jne 0x553cbb
mov edx, dword [ebx + 0x3204]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x553cbb
push edx
mov ecx, ebx
call fcn.0055c180
push 0x6d0ab8
lea ecx, [ebx + 0x3204]
xor edi, edi
call fcn.005e3a42
mov al, byte [ebx + 0x3238]
test al, al
je 0x553e36
lea ecx, [ebx + 0x10]
mov byte [ebx + 0x3238], 0
call fcn.0053e4a0
mov eax, dword [ebx + 0x31e0]
mov ecx, dword [eax + 0xd0]
cmp ecx, edi
lea ecx, [eax + 0x48]
setne byte [ebp - 0x12]
call fcn.0052cfe0
mov eax, dword [ebx + 0x31e0]
mov dword [eax + 0xe8], edi
mov dword [eax + 0xec], edi
mov ecx, dword [ebx + 0x31e0]
mov dword [ecx + 0xf0], edi
mov dword [ecx + 0xf4], edi
mov edx, dword [ebx + 0x31e0]
mov dword [edx + 0x1d0], edi
mov dword [edx + 0x1d4], edi
mov eax, dword [ebx + 0x31e0]
mov dword [ebx + 0x50], edi
mov dword [ebx + 0x60], edi
mov dword [ebx + 0x68], edi
mov dword [ebx + 0x70], edi
mov dword [ebx + 0x58], edi
mov dword [ebx + 0x31f0], edi
mov dword [ebx + 0x3248], edi
mov dword [ebx + 0x3250], edi
mov dword [ebx + 0x3258], edi
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x3268], edi
cmp eax, edi
mov dword [ebx + 0x3234], edi
mov dword [ebx + 0x90], edi
mov dword [ebx + 0x54], edi
mov dword [ebx + 0x64], edi
mov dword [ebx + 0x6c], edi
mov dword [ebx + 0x74], edi
mov dword [ebx + 0x5c], edi
mov dword [ebx + 0x31f4], edi
mov dword [ebx + 0x324c], edi
mov dword [ebx + 0x3254], edi
mov dword [ebx + 0x325c], edi
mov dword [ebx + 0x4c], edi
mov dword [ebx + 0x326c], edi
je 0x553db7
mov byte [eax + 0x86d], 0
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
mov edx, dword [ebx]
lea eax, [ebx + 0x31d8]
push eax
mov ecx, ebx
call dword [edx + 0x14]
cmp eax, edi
jne 0x553eef
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.005526f0
mov esi, eax
cmp esi, edi
je 0x553df8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebp - 0x12]
test al, al
je 0x553e1a
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ecx + 0x30]
mov ecx, dword [ebx + 0x31e0]
push edx
push ebx
add ecx, 0x48
call fcn.0052dec0
mov esi, eax
mov ecx, ebx
call fcn.00539f50
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x8c], 6
mov dword [ebx + 0xa8], edi
mov eax, dword [0x6d22a0]
push 1
push eax
mov ecx, ebx
call fcn.005365f0
cmp dword [ebx + 0xac], edi
jne 0x553e84
mov eax, dword [ebx + 0x31e0]
mov ecx, dword [eax + 0x18]
cmp ecx, edi
je 0x553e84
mov edx, dword [eax + 0xd8]
mov eax, dword [ecx]
push edx
push 0x13f8
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov al, byte [ebp - 0x12]
test al, al
je 0x553ec4
mov ebx, dword [ebx + 0x17c]
mov eax, 4
cmp dword [ebx + 0x14c], eax
jne 0x553ec4
mov cl, byte [ebx + 0x152]
test cl, cl
je 0x553ec4
mov edx, dword [0x6d116c]
lea ecx, [ebp + 8]
push eax
push ecx
push eax
push edi
push str.SocksType
push edx
mov dword [ebp + 8], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4