Function at 0x4064d1
Capabilities:
Connect socket
Download and write a file
Receive and write data from server to client
Receive data
Receive data on socket
Send data
Send data on socket
Send http request
Send http request with host header
Write file on windows

Disassembly:
mov eax, 0x41d876
call fcn.004128c4
sub esp, 0x274
mov eax, dword [0x4280c8]
push edi
mov edi, dword [ebp + 8]
push dword [edi + 0x38]
mov dword [ebp - 0x10], eax
push dword [edi + 0x3c]
push str.CDownloadThread::DoMyTask_m_download_d__m_end_d_n
call fcn.0040b1f8
mov eax, dword [edi + 0x38]
add esp, 0xc
cmp dword [edi + 0x3c], eax
jle 0x406514
cmp eax, 0xffffffff
jle 0x406514
xor eax, eax
jmp 0x406d18
mov eax, dword [0x42a308]
cmp eax, 1
push ebx
push esi
je 0x406801
test eax, eax
je 0x406801
cmp eax, 2
jne 0x406548
push str.CDownloadThread::DoMyTask_NET_PROXYHTTP_n
call fcn.0040b1f8
pop ecx
push 0x10
push 0x429e30
jmp 0x406806
cmp eax, 3
jne 0x406813
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_n
call fcn.0040b1f8
pop ecx
push 0x10
push 0x429e30
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
jne 0x406813
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_connect_proxy_server_OK._n
call fcn.0040b1f8
pop ecx
push 0
push 4
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
mov byte [ebp - 0x268], 5
mov byte [ebp - 0x267], 2
mov byte [ebp - 0x266], 0
mov byte [ebp - 0x265], 2
call dword [sym.imp.WS2_32.dll_send]
mov esi, 0x258
push esi
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0040f270
mov ebx, dword [sym.imp.WS2_32.dll_recv]
add esp, 0xc
push 0
push esi
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call ebx
cmp byte [ebp - 0x268], 5
jne 0x406813
cmp byte [ebp - 0x267], 0
je 0x4065fe
cmp byte [ebp - 0x267], 2
jne 0x406813
push 0x421da0
call fcn.0040b1f8
cmp byte [ebp - 0x267], 2
pop ecx
jne 0x4066db
push 0x42a330
call fcn.0040f390
mov dword [ebp - 0x27c], eax
mov dword [esp], 0x42a370
call fcn.0040f390
mov dword [ebp - 0x278], eax
mov al, byte [ebp - 0x27c]
mov byte [ebp - 0x267], al
lea eax, [ebp - 0x266]
mov dword [esp], 0x42a330
push eax
mov byte [ebp - 0x268], 1
call fcn.0040f420
mov al, byte [ebp - 0x278]
mov byte [ebp - 0x167], al
lea eax, [ebp - 0x166]
push 0x42a370
push eax
call fcn.0040f420
add esp, 0x10
push 0
push 0x201
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_send]
push esi
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0040f270
add esp, 0xc
push 0
push esi
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call ebx
cmp byte [ebp - 0x268], 1
jne 0x4067f4
cmp byte [ebp - 0x267], 0
jne 0x4067f4
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_Proxy_Authorization_OK._n
call fcn.0040b1f8
pop ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + 4]
movzx eax, word [eax + 2]
push eax
mov byte [ebp - 0x268], 5
mov byte [ebp - 0x267], 1
mov byte [ebp - 0x266], 0
mov byte [ebp - 0x265], 1
mov dword [ebp - 0x274], ecx
call dword [sym.imp.WS2_32.dll_ntohs]
push 4
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0040fb80
push 2
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0040fb80
add esp, 0x18
push 0
push 0xa
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_send]
push esi
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0040f270
add esp, 0xc
push 0
push esi
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call ebx
cmp byte [ebp - 0x268], 5
jne 0x406813
cmp byte [ebp - 0x267], 0
jne 0x406813
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_connect_site_OK._n
call fcn.0040b1f8
pop ecx
push dword [ebp + 0x18]
push str.CDownloadThread::DoMyTask_connect__S_OK._n
call fcn.0040b1f8
mov eax, dword [0x4291ac]
pop ecx
pop ecx
mov ebx, 0x4291ac
mov ecx, ebx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x274], eax
and dword [ebp - 4], 0
mov edx, 0x10000
lea esi, [ebp - 0x274]
call fcn.00406038
mov dword [ebp - 0x27c], eax
mov eax, dword [edi + 0x38]
cmp eax, 0xffffffff
jne 0x40682a
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x40], 2
jge 0x406822
mov eax, 0x7fff0000
jmp 0x40682a
push 0x421d84
call fcn.0040b1f8
pop ecx
jmp 0x406813
push 0x10
push dword [ebp + 0x14]
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
je 0x40679b
mov eax, edi
call fcn.00406330
or eax, 0xffffffff
jmp 0x406d16
mov eax, dword [edi + 0x3c]
add eax, 0x1ffff
mov ecx, dword [edi + 0x3c]
test ecx, ecx
mov dword [ebp - 0x26c], eax
mov byte [ebp - 0x26d], 0
jne 0x406850
mov esi, dword [ebp + 0xc]
lea edx, [eax + 1]
cmp edx, dword [esi + 0x30]
jne 0x406850
mov byte [ebp - 0x26d], 1
cmp dword [0x42a308], 2
jne 0x406980
mov esi, dword [ebp + 0x14]
cmp word [esi + 2], 0x50
jne 0x4068b3
cmp byte [ebp - 0x26d], 0
push dword [ebp + 0x18]
je 0x406892
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push dword [ebp + 0x18]
push str.GET_http:___s_s_HTTP_1.0_r_nAccept:___r_nAccept_Encoding:_identity_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.00405c39
add esp, 0x14
jmp 0x406934
push eax
push ecx
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push dword [ebp + 0x18]
push str.GET_http:___s_s_HTTP_1.1_r_nAccept:___r_nAccept_Encoding:_identity_r_nRange:_bytes_12d__12d_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.00405c39
add esp, 0x1c
jmp 0x406934
mov eax, dword [0x4291ac]
mov ecx, ebx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 1
movzx eax, word [esi + 2]
push eax
push dword [ebp + 0x18]
lea eax, [ebp + 0x14]
push str._s:_d
push eax
call fcn.00405c39
add esp, 0x10
cmp byte [ebp - 0x26d], 0
push dword [ebp + 0x18]
lea eax, [ebp - 0x274]
je 0x406908
push dword [ebp + 0x1c]
push dword [ebp + 0x14]
push str.GET_http:___s_s_HTTP_1.0_r_nAccept:___r_nAccept_Encoding:_identity_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.00405c39
add esp, 0x14
jmp 0x406925
push dword [ebp - 0x26c]
push dword [edi + 0x3c]
push dword [ebp + 0x1c]
push dword [ebp + 0x14]
push str.GET_http:___s_s_HTTP_1.1_r_nAccept:___r_nAccept_Encoding:_identity_r_nRange:_bytes_12d__12d_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.00405c39
add esp, 0x1c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0x14]
add eax, 0xfffffff0
call fcn.00402528
cmp byte [0x42a3b0], 0
mov esi, 0x421c04
je 0x406971
push str.Proxy_Authorization:_Basic
lea eax, [ebp - 0x274]
push eax
call fcn.00407344
push 0x42a3b0
lea eax, [ebp - 0x274]
push eax
call fcn.00407344
push esi
lea eax, [ebp - 0x274]
push eax
call fcn.00407344
push esi
lea eax, [ebp - 0x274]
push eax
call fcn.00407344
jmp 0x4069be
cmp byte [ebp - 0x26d], 0
push dword [ebp + 0x18]
je 0x4069a5
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push str.GET__s_HTTP_1.0_r_nAccept:___r_nAccept_Encoding:_identity_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nConnection:_Keep_Alive_r_n_r_n
push eax
call fcn.00405c39
add esp, 0x10
jmp 0x4069be
push eax
push ecx
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push str.GET__s_HTTP_1.1_r_nAccept:___r_nAccept_Encoding:_identity_r_nRange:_bytes_d__d_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nConnection:_Keep_Alive_r_n_r_n
push eax
call fcn.00405c39
add esp, 0x18
mov esi, dword [ebp - 0x274]
mov eax, dword [esi - 0xc]
push 0
push eax
push esi
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_send]
push esi
push str.CDownloadThread::DoMyTask_send_:_n_t_S_n
call fcn.0040b1f8
mov eax, dword [ebp - 0x27c]
mov ebx, dword [edi + 0x30]
pop ecx
pop ecx
call fcn.0040647d
test eax, eax
mov dword [ebp - 0x26c], eax
jg 0x406a01
or esi, 0xffffffff
jmp 0x406d06
lea esi, [ebp - 0x274]
call fcn.004072e4
push dword [ebp - 0x274]
push str.CDownloadThread::DoMyTask_recv_header_:_n_t_S_n
call fcn.0040b1f8
pop ecx
pop ecx
mov ebx, str.Content_Range:_bytes
push ebx
xor ecx, ecx
call fcn.004071ff
push eax
push str.CDownloadThread::DoMyTask_ContentRange_:_n_t_d_n
mov dword [ebp - 0x26c], eax
call fcn.0040b1f8
cmp dword [ebp - 0x26c], 0
pop ecx
pop ecx
jg 0x406a50
cmp byte [ebp - 0x26d], 0
je 0x4069f9
cmp dword [edi + 0x38], 0xffffffff
jne 0x406b07
push ebx
xor ecx, ecx
lea esi, [ebp - 0x274]
call fcn.004071ff
cmp eax, 0xffffffff
mov dword [ebp - 0x26c], eax
je 0x406c6d
push 0xa
lea ecx, [ebp - 0x278]
push ecx
mov ecx, dword [ebp - 0x27c]
lea eax, [eax + ecx + 0x15]
push eax
call fcn.0040f907
push 0xa
lea eax, [ebp - 0x278]
push eax
mov eax, dword [ebp - 0x278]
inc eax
push eax
call fcn.0040f907
mov dword [edi + 0x38], eax
push 0xa
lea eax, [ebp - 0x278]
push eax
mov eax, dword [ebp - 0x278]
inc eax
push eax
call fcn.0040f907
mov ebx, eax
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x30], ebx
mov dword [eax + 0x3c], 0
mov ecx, dword [edi + 0x38]
lea esi, [ecx + 1]
add esp, 0x24
cmp esi, ebx
jge 0x406b07
mov edx, dword [eax + 0x40]
cmp edx, 1
jle 0x406b07
mov eax, ebx
sub eax, ecx
dec eax
lea ecx, [edx - 1]
xor edx, edx
div ecx
mov dword [ebp + 0x1c], esi
add eax, 0x1ffff
and eax, 0xfffe0000
cmp esi, ebx
mov dword [ebp + 0x14], eax
jb 0x406c09
push 0
mov esi, edi
call fcn.00402cdc
test eax, eax
jne 0x406d00
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [edi + 0x18]
push eax
mov dword [ebp + 0x18], eax
call esi
mov eax, dword [edi + 0x38]
sub eax, dword [edi + 0x3c]
push dword [ebp + 0x18]
inc eax
mov dword [ebp - 0x26c], eax
call ebx
xor ecx, ecx
cmp dword [ebp - 0x26c], ecx
jle 0x406ce1
mov eax, 0x10000
cmp dword [ebp - 0x26c], eax
jle 0x406b60
mov dword [ebp - 0x26c], eax
push ecx
push dword [ebp - 0x26c]
push dword [ebp - 0x27c]
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
mov dword [ebp - 0x26c], eax
jle 0x406ce9
push dword [ebp + 0x18]
call esi
mov eax, dword [edi + 0x3c]
mov edx, dword [edi + 0x38]
mov ecx, dword [ebp - 0x26c]
sub edx, eax
cmp ecx, edx
jle 0x406ba4
lea ecx, [edx + 1]
mov dword [ebp - 0x26c], ecx
xor esi, esi
cmp ecx, esi
jle 0x406cf5
add eax, ecx
mov dword [edi + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [ebp + 0x18]
mov dword [edi + 0x40], eax
call ebx
push esi
lea eax, [ebp - 0x26c]
push eax
push dword [ebp - 0x26c]
push dword [ebp - 0x27c]
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [ebp - 0x26c]
mov eax, dword [ebp + 0xc]
add eax, 0x3c
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
push esi
mov esi, edi
call fcn.00402cdc
test eax, eax
je 0x406b1e
jmp 0x406d00
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp + 0x18], eax
add eax, 0x20000
cmp eax, ebx
jb 0x406c22
lea eax, [ebx - 1]
mov dword [ebp + 0x18], eax
push 0
mov esi, edi
call fcn.00402cdc
test eax, eax
jne 0x406b07
push 0x44
call fcn.0040f0e1
test eax, eax
pop ecx
je 0x406c51
push dword [ebp + 0x18]
mov edi, dword [ebp + 0x1c]
mov esi, eax
call fcn.004062b3
mov edi, dword [ebp + 8]
jmp 0x406c53
xor eax, eax
push dword [ebp + 0xc]
mov esi, eax
call fcn.00402ded
mov eax, dword [ebp + 0x18]
inc eax
cmp eax, ebx
mov dword [ebp + 0x1c], eax
jb 0x406c06
jmp 0x406b07
push str.Location:
xor ecx, ecx
lea esi, [ebp - 0x274]
call fcn.004071ff
cmp eax, 0xffffffff
mov dword [ebp - 0x26c], eax
je 0x406cd2
add eax, 0xa
mov ecx, eax
mov dl, 0xd
mov dword [ebp - 0x26c], eax
call fcn.004071db
mov edx, dword [ebp - 0x26c]
mov ecx, eax
lea eax, [ebp + 0x18]
push eax
sub ecx, edx
mov eax, esi
call fcn.0040722d
mov byte [ebp - 4], 2
push dword [eax]
mov eax, dword [ebp + 0xc]
add eax, 0x34
call fcn.00405c98
mov eax, dword [ebp + 0x18]
add eax, 0xfffffff0
call fcn.00402528
xor esi, esi
inc esi
jmp 0x406d06
mov esi, dword [ebp + 0xc]
xor eax, eax
call fcn.00402f87
jmp 0x4069f9
mov dword [ebp - 0x26c], ecx
jmp 0x406d00
mov dword [ebp - 0x26c], 1
jmp 0x406d00
push dword [ebp + 0x18]
call ebx
mov dword [ebp - 0x26c], esi
mov esi, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x274]
add eax, 0xfffffff0
call fcn.00402528
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
call fcn.004120cb
leave
ret 0x18