Function at 0x40892c
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports
Set socket configuration

Disassembly:
push ebp
xor edx, edx
mov ebp, esp
push edi
push esi
push ebx
mov edi, 9
mov ebx, ecx
sub esp, 0x2fc
movzx eax, word [ecx + 0xe]
div edi
lea eax, [ecx + 0x54]
mov dword [ebp - 0x2cc], eax
xor eax, eax
push dword [ebp - 0x2cc]
mov dword [ebp - 0x2b8], edx
dec edx
setne al
lea eax, [eax + eax*4 + 2]
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x280]
push eax
push dword [ebp - 0x2c0]
call fcn.0040afd1
add esp, 0x10
test eax, eax
mov dword [ebp - 0x2c8], eax
je 0x4089b6
push edi
push edi
mov ecx, ebx
push 0x190
push str.Limit_overflow
call fcn.0040a69c
mov dword [ebp - 0x2c8], 1
pop eax
pop edx
jmp 0x40a5af
push ecx
push 0x10200
push 8
push dword [section..bss]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp dword [ebp - 0x2b8], 1
mov dword [ebp - 0x28c], eax
mov edx, 3
mov eax, 0x14
mov dword [ebx + 0x78], 0
mov dword [ebx + 0x1c], 0
pop esi
mov dword [ebp - 0x2d8], 0x200
mov dword [ebp - 0x290], 0
cmove eax, edx
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x28c]
add eax, 0x100
mov dword [ebp - 0x298], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x2b8], 1
je 0x408a4f
mov dword [ebx + 0x1c], 0
jmp 0x408a6c
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x408a6c
push edx
push eax
push 0
push 0
call fcn.0040a5c0
add esp, 0x10
test eax, eax
jne 0x40948c
mov eax, dword [0x465ae4]
mov dword [ebx + 0x34], 0
xor esi, esi
mov dword [ebx + 0x7c], 0
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0x300]
call eax
mov edi, dword [ebp - 0x298]
mov dword [ebp - 0x2d0], eax
push eax
mov eax, 0x1ffe
sub eax, esi
push eax
push edi
push ebx
call dword [ebx + 0x4c]
add esp, 0x10
test eax, eax
jg 0x408b01
test esi, esi
jne 0x408b6c
cmp dword [ebp - 0x2d8], 0x200
jne 0x409195
push str.___.256s_r_n
push dword [ebx]
push 0x439e7f
push 0x45c2c0
call fcn.00403e78
mov dword [esp], 4
push 0x42a890
push pe_nt_image_headers32
push 0xffff
push dword [ebx]
call dword [sym.imp.WS2_32.dll_setsockopt]
add esp, 0xc
jmp 0x409195
add edi, eax
mov esi, edi
sub esi, dword [ebp - 0x298]
mov byte [edi], 0
cmp esi, 0x20
jle 0x408b2a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x2d0]
xor edx, edx
div esi
cmp eax, 0x400
ja 0x408ab5
push eax
push eax
push 0x43a1a9
push dword [ebp - 0x298]
call fcn.004034b5
add esp, 0x10
test eax, eax
mov dword [ebx + 0x18], eax
jne 0x408b6c
push eax
push eax
push 0x439e91
push dword [ebp - 0x298]
call fcn.004034b5
add esp, 0x10
test eax, eax
mov dword [ebx + 0x18], eax
je 0x4094a6
add eax, 3
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x298]
sub eax, dword [ebx + 0x18]
push edi
push edi
push 0x439e94
push dword [ebp - 0x298]
lea eax, [esi + eax - 4]
mov dword [ebx + 0x34], eax
call fcn.004034d9
add esp, 0x10
test byte [0x46579e], 1
mov dword [ebx + 0x3c], eax
je 0x408be9
cmp dword [0x472c48], 0
jle 0x408be9
push ecx
push ecx
push str.Accept_Encoding
push dword [ebp - 0x298]
call fcn.0040e91a
add esp, 0x10
test eax, eax
mov dword [ebp - 0x288], eax
je 0x408be9
push edx
push edx
push 0x439ebb
push eax
call fcn.004034d9
add esp, 0x10
test eax, eax
mov eax, 8
cmove eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebx + 0xc], eax
push eax
push eax
push 0x439ec0
push dword [ebp - 0x298]
call fcn.004034b5
add esp, 0x10
test eax, eax
je 0x408c1c
or dword [ebx + 0xc], 0x200
or dword [ebp - 0x2a4], 0x200
cmp dword [ebp - 0x2d8], 0x200
mov edx, str._Keep_Alive_r_n_.4000s
mov eax, str.__r_n_.4000s
cmovne eax, edx
push eax
push dword [ebx]
push dword [ebp - 0x298]
push 0x45c2c0
call fcn.00403e78
mov eax, dword [ebp - 0x28c]
add esp, 0xc
mov edx, 4
cmp byte [eax + 0x108], 0x3a
mov eax, 0xb
cmovne eax, edx
add eax, dword [ebp - 0x298]
push eax
lea eax, [ebx + 0x80]
push 0x439ec9
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp - 0x28c]
add esp, 0x10
lea edx, [ebx + 0x81]
mov eax, dword [eax + 0x100]
cmp eax, 0x4e4e4f43
jne 0x408ca0
lea edx, [ebx + 0x85]
jmp 0x408cd9
cmp eax, 0x20544547
je 0x408cd9
cmp eax, 0x54534f50
je 0x4094fb
xor ecx, ecx
cmp eax, 0x44414548
sete cl
mov dword [ebp - 0x2b4], ecx
je 0x409505
push edi
push edi
push 0x195
push str.Error._Unsupported_method.
jmp 0x4094ed
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x294], 4
push edi
push edi
push 0x20
push edx
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x408d01
mov byte [eax], 0
cmp dword [ebp - 0x2b8], 1
jne 0x408d22
mov eax, dword [ebp - 0x298]
mov dword [ebx + 0x2c], esi
mov ecx, ebx
mov dword [ebx + 8], eax
call fcn.0040e976
jmp 0x40913c
push ecx
push ecx
push 0xd
push dword [ebp - 0x298]
call fcn.004033da
add esp, 0x10
test eax, eax
mov edi, eax
je 0x408dd0
mov byte [eax], 0
mov eax, dword [0x465ae0]
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x28c]
add eax, 0x105
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x290], 0
je 0x408dcb
mov eax, dword [ebp - 0x290]
cmp byte [eax + 9], 0x2f
jne 0x408dbb
add eax, 9
push edx
push edx
push eax
push dword [ebp - 0x298]
call fcn.004034d9
add esp, 0x10
test eax, eax
mov dword [ebp - 0x2a8], eax
je 0x408dbb
push eax
push eax
push 0x439ecf
push dword [ebp - 0x2ac]
call fcn.0040343e
add esp, 0x10
cmp dword [ebp - 0x2a8], eax
jb 0x408e86
mov eax, dword [ebp - 0x290]
mov eax, dword [eax]
mov dword [ebp - 0x290], eax
jmp 0x408d67
mov byte [edi], 0xd
jmp 0x408dda
mov dword [ebp - 0x2a8], 0
push ecx
push ecx
push 0x439ed2
push dword [ebp - 0x298]
call fcn.0040e91a
add esp, 0x10
test eax, eax
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x290], 0
je 0x408eb3
push edx
push edx
push 0xd
push eax
call fcn.004033da
add esp, 0x10
test eax, eax
mov edi, eax
mov dword [ebp - 0x290], 0
je 0x408eb3
mov byte [eax], 0
push eax
push eax
push 0x3a
push dword [ebp - 0x288]
call fcn.004033da
add esp, 0x10
test eax, eax
mov edx, eax
je 0x408e46
mov byte [eax], 0
mov eax, dword [0x465ae0]
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x408ea9
mov eax, dword [ebp - 0x290]
push ecx
push ecx
push dword [ebp - 0x288]
mov dword [ebp - 0x2ac], edx
add eax, 9
push eax
call fcn.00403416
add esp, 0x10
test eax, eax
mov edx, dword [ebp - 0x2ac]
jne 0x408e9f
jmp 0x408e88
xor edx, edx
mov eax, dword [ebp - 0x290]
mov eax, dword [eax + 4]
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0x290]
mov dword [ebx + 0x7c], eax
jmp 0x408ea9
mov eax, dword [ebp - 0x290]
mov eax, dword [eax]
jmp 0x408e4b
test edx, edx
mov byte [edi], 0xd
je 0x408eb3
mov byte [edx], 0x3a
mov eax, dword [ebx + 0x28]
cmp dword [eax + 3], 0x2f2f3a70
jne 0x408f8d
add eax, 7
push edx
push edx
push 0x3a
push eax
mov edi, 0x50
call fcn.004033da
add esp, 0x10
test eax, eax
mov ecx, eax
je 0x408f37
lea eax, [eax + 1]
sub esp, 0xc
mov dword [ebp - 0x294], ecx
push eax
call fcn.00410bc8
mov edi, eax
mov eax, dword [ebp - 0x28c]
add esp, 0xc
push 0x48
push dword [ebx + 0x28]
lea edx, [eax + 0x2100]
push edx
mov dword [ebp - 0x290], edx
call fcn.00428fcc
mov ecx, dword [ebp - 0x294]
mov edx, dword [ebp - 0x290]
add esp, 0x10
mov eax, ecx
sub eax, dword [ebx + 0x28]
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + eax + 0x2100], 0
mov dword [ebx + 0x28], edx
push eax
push eax
mov eax, dword [ebx + 0x28]
push edi
add eax, 7
push eax
call fcn.0040deb4
add esp, 0x10
test eax, eax
mov edi, eax
jg 0x408f60
push eax
push eax
push 0x190
push 0x439ed7
jmp 0x4090fb
push ecx
push esi
push dword [ebp - 0x298]
push eax
call fcn.0040a8ab
pop esi
pop eax
push dword [ebp - 0x28c]
push edi
mov ecx, ebx
call fcn.0040e32a
push eax
push edi
call fcn.0040aa80
add esp, 0x10
jmp 0x409471
sub esp, 0xc
push eax
call fcn.00428f74
mov edx, dword [ebx + 0x28]
mov dword [ebx + 0x2c], eax
add esp, 0x10
cmp byte [edx + eax - 1], 0x5c
jne 0x408fb1
lea ecx, [eax - 1]
mov dword [ebx + 0x2c], ecx
mov byte [edx + eax - 1], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x28c]
cmp dword [eax + 0x100], 0x54534f50
jne 0x408fd8
mov eax, dword [ebp - 0x2a4]
or eax, 1
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x298]
mov edi, dword [ebp - 0x294]
cmp dword [eax + edi + 3], 0x2f2f3a70
jne 0x40902f
lea eax, [eax + edi + 8]
push edx
push edx
push 0x2f
push eax
call fcn.004033da
add esp, 0x10
test eax, eax
mov dword [ebp - 0x288], eax
je 0x409017
sub eax, dword [ebp - 0x298]
mov dword [ebp - 0x294], eax
jmp 0x40902f
add dword [ebp - 0x294], 6
mov eax, dword [ebp - 0x298]
mov edi, dword [ebp - 0x294]
mov byte [eax + edi + 1], 0x20
cmp dword [ebp - 0x2a8], 0
je 0x409069
mov eax, dword [ebp - 0x2a8]
push ecx
push ecx
push 0x2f
inc eax
push eax
call fcn.004033da
mov edx, eax
sub edx, dword [ebp - 0x298]
add esp, 0x10
test eax, eax
cmove edx, dword [ebp - 0x294]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x294], edx
mov eax, dword [ebx + 0x2c]
mov edi, dword [ebp - 0x298]
mov edx, eax
sub edx, dword [ebp - 0x294]
sub edi, edx
push edx
push eax
push dword [ebx + 0x28]
push edi
call fcn.00428f18
mov eax, dword [ebx + 0x2c]
add esp, 0x10
mov ecx, eax
sub ecx, dword [ebp - 0x294]
add esi, ecx
mov dword [ebp - 0x2ac], esi
lea esi, [edi + eax]
test byte [esi], 0xdf
je 0x4090a8
inc esi
jmp 0x4090a0
mov byte [esi], 0
push ecx
push ecx
push str._nAUTHORIZATION
push edi
call fcn.004034d9
add esp, 0x10
test eax, eax
mov dword [ebp - 0x288], eax
je 0x4091bb
add eax, 8
push edx
push edx
push 0xa
push eax
call fcn.004033da
sub eax, dword [ebp - 0x288]
add esp, 0x10
cmp eax, 0x200
jbe 0x4091bb
jmp 0x40965e
push esi
push esi
push 0x190
push str.Resolving_error
mov ecx, ebx
call fcn.0040a69c
pop edx
pop ecx
jmp 0x409471
mov ecx, ebx
call fcn.004074aa
mov eax, dword [ebx + 0xc]
test ah, 4
je 0x4093c2
and ah, 0xfb
push ecx
push ecx
push 5
push str.0_r_n_r_n
mov ecx, ebx
mov dword [ebx + 0xc], eax
call fcn.00429114
test eax, eax
pop esi
pop edi
jle 0x4093c2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x2d0]
add dword [ebp - 0x2bc], eax
cmp dword [ebx + 0x3c], 0
je 0x409195
dec dword [ebp - 0x2d8]
je 0x409195
mov esi, dword [ebp - 0x2f4]
dec esi
test esi, esi
jle 0x409195
movzx eax, word [ebx + 0xe]
and eax, 1
cmp dword [eax*4 + 0x465360], 0
je 0x409195
push ecx
push dword [ebx]
push 0x493e0
push 0
call fcn.0040a5c0
add esp, 0x10
cmp eax, 0
je 0x409162
jg 0x408a3d
cmp dword [ebp - 0x2b8], 1
jne 0x4093c2
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x409439
sub esp, 0xc
push eax
call fcn.0040aa80
jmp 0x409436
mov eax, esi
sub eax, edi
cmp eax, 0x1c00
jg 0x4094e0
push edx
push edx
push 0x3f
push edi
call fcn.004033da
add esp, 0x10
test eax, eax
mov dword [ebx + 0x14], eax
je 0x4095a7
lea edx, [eax + 1]
mov dword [ebx + 0x14], edx
mov byte [eax], 0
mov eax, dword [ebx + 0x14]
cmp byte [eax - 2], 0x2f
je 0x409514
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x409206
mov byte [eax], 0
add dword [ebx + 0x18], 4
lea eax, [esi + 1]
mov ecx, ebx
mov dword [ebx + 0x1c], 0
mov dword [ebx + 4], edi
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x28c]
add eax, 0x8000
mov dword [ebx + 0x20], eax
call fcn.00404f96
push eax
push eax
mov eax, dword [ebx + 0x2c]
push str.___admin__
add eax, edi
push eax
call fcn.00428eb0
add esp, 0x10
test eax, eax
jne 0x4095b3
push eax
push eax
mov eax, dword [ebx + 0x2c]
push str.___wmail__
add eax, edi
push eax
call fcn.00428eb0
add esp, 0x10
test eax, eax
jne 0x409602
push eax
push eax
mov eax, dword [ebx + 0x2c]
push str.___ip2country__
add eax, edi
push eax
call fcn.00428eb0
add esp, 0x10
test eax, eax
jne 0x409645
test byte [0x4657a3], 2
je 0x409298
cmp dword [0x4652e8], 0
jg 0x409698
cmp dword [ebp - 0x290], 0
je 0x4092b1
mov eax, dword [ebp - 0x290]
cmp byte [eax + 8], 0
jne 0x40977d
sub esp, 0xc
push edi
call fcn.00408674
add esp, 0x10
test eax, eax
mov esi, eax
je 0x4094e0
cmp byte [eax - 1], 0x5c
jne 0x4098ad
test byte [ebx + 0xc], 1
jne 0x409812
push eax
push dword [0x42a4c4]
push 0x439f8e
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x290]
add eax, 9
cmp dword [ebp - 0x290], 0
mov dword [ebp - 0x2c4], eax
mov eax, str.Undefined_default
cmovne eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2d4], eax
push eax
push eax
lea eax, [ebp - 0x268]
push eax
push edi
call fcn.004150d2
add esp, 0x10
cmp eax, 0xffffffff
mov edx, eax
je 0x409c13
test esi, esi
jne 0x4098b4
sub esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
add esp, 0xc
test byte [ebp - 0x268], 2
jne 0x409925
push esi
push esi
push dword [0x42a4c0]
push edi
call fcn.004034d9
add esp, 0x10
cmp dword [ebp - 0x2a8], 0
mov esi, eax
jne 0x409937
test esi, esi
mov eax, dword [ebp - 0x268]
je 0x409944
test al, 0x10
je 0x4094b4
mov eax, edi
mov dl, byte [eax]
test dl, dl
jne 0x40995e
mov word [eax], 0x2f
lea esi, [eax + 2]
push eax
mov eax, dword [ebx + 0x2c]
add eax, edi
push eax
push str.HTTP_1.0_301__r_nLocation:__s_r_n_r_n
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
pop edx
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00429114
pop esi
pop edi
mov ecx, ebx
call fcn.0042320e
cmp dword [ebp - 0x2bc], 0
jne 0x4093e4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x290]
mov edx, 0x439e6f
add eax, 9
cmp dword [ebp - 0x290], 0
cmove eax, edx
push edx
push edx
push dword [ebp - 0x2bc]
push eax
push dword [ebx + 0x44]
push dword [ebx + 0x40]
push str.HTTP__in:_u_out:_u__s_Time:_u_r_n
push dword [ebp - 0x28c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
push str.___.256s_r_n
push dword [ebx]
push dword [ebp - 0x28c]
push 0x45c2c0
call fcn.00403e78
add esp, 0x10
mov ecx, dword [ebp - 0x280]
test ecx, ecx
je 0x409471
mov edx, dword [ebp - 0x27c]
test edx, edx
je 0x409471
mov eax, dword [ebx + 0x44]
add eax, dword [ebx + 0x40]
add eax, 0x3ff
sar eax, 0xa
add dword [ecx + 4], eax
add dword [edx + 4], eax
imul edx, dword [ebp - 0x2c0], 0xc
mov edx, dword [edx + 0x465fa8]
add dword [edx + 4], eax
push eax
push dword [ebp - 0x28c]
push 0
push dword [section..bss]
call dword [sym.imp.KERNEL32.dll_HeapFree]
pop eax
jmp 0x40a5af
sub esp, 0xc
push dword [ebx + 0x1c]
call fcn.0040aa80
mov dword [ebx + 0x1c], 0
add esp, 0x10
jmp 0x408a6c
cmp esi, 0x1ffd
jle 0x408a98
jmp 0x4094e0
push ecx
push ecx
push 0x2e
push edi
call fcn.00403472
add esp, 0x10
test eax, eax
mov dword [ebp - 0x288], eax
je 0x409aee
mov cl, byte [eax + 1]
test cl, cl
mov byte [ebp - 0x294], cl
jne 0x40996c
push ecx
push ecx
push 0x190
push dword [0x42f4e8]
mov ecx, ebx
call fcn.0040a69c
pop ecx
pop esi
jmp 0x409195
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x294], 5
jmp 0x408ced
sub esp, 0xc
push dword [0x42a4c4]
call fcn.00428f74
add eax, 8
add esp, 0x10
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x2b0]
cmp eax, 0x1ffd
mov dword [ebp - 0x2c4], eax
jg 0x4091f8
mov ecx, dword [ebp - 0x2ac]
push eax
add ecx, edi
mov eax, ecx
sub eax, dword [ebx + 0x14]
inc eax
push eax
mov eax, dword [ebp - 0x2c4]
push ecx
add eax, edi
push eax
call fcn.00428e8c
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0x2b0]
add esp, 0x10
add ecx, esi
cmp esi, eax
cmovae esi, ecx
mov ecx, dword [ebx + 0x18]
cmp eax, ecx
ja 0x40958d
add ecx, dword [ebp - 0x2b0]
mov dword [ebx + 0x18], ecx
add eax, dword [ebp - 0x2b0]
mov dword [ebx + 0x14], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2ac], eax
jmp 0x4091f8
mov dword [ebx + 0x14], 0x46530c
jmp 0x4091f8
test byte [0x46579e], 4
je 0x4095c9
cmp dword [ebx + 0x48], 0x4225d0
jne 0x409672
push eax
push eax
push dword [ebp - 0x2cc]
push 0x10
call fcn.00410ff0
add esp, 0x10
test eax, eax
jle 0x409672
sub esp, 0xc
mov ecx, ebx
push 0x10
call fcn.0040a9be
add esp, 0xc
test eax, eax
jne 0x409672
mov ecx, ebx
call fcn.0040b728
jmp 0x409471
mov eax, dword [0x4657a0]
test ah, 0x40
je 0x409615
cmp dword [ebx + 0x48], 0x4225d0
jne 0x409672
test ah, 0x20
je 0x409672
push eax
push eax
push dword [ebp - 0x2cc]
push 8
call fcn.00410ff0
add esp, 0x10
test eax, eax
jle 0x409672
sub esp, 0xc
mov ecx, ebx
push 8
call fcn.0040a9be
add esp, 0xc
test eax, eax
jne 0x409672
jmp 0x409684
test byte [0x4657a2], 0x80
je 0x409282
mov ecx, ebx
call fcn.00412bc8
jmp 0x409471
push edi
push edi
mov ecx, ebx
push 0x64
push 0
call fcn.004107a6
pop eax
pop edx
jmp 0x4094e0
push esi
push esi
push 0x190
push dword [0x42f554]
jmp 0x4090fb
sub esp, 0xc
mov ecx, ebx
push 0
call fcn.004266be
add esp, 0xc
jmp 0x409471
mov eax, dword [ebx + 0x2c]
push esi
push esi
push str._dns_query
add eax, edi
push eax
call fcn.004033f7
add esp, 0x10
test eax, eax
jne 0x409298
mov eax, dword [ebx + 0x14]
cmp eax, 0x46530c
je 0x4096f1
cmp dword [eax], 0x3d736e64
jne 0x4096f1
mov esi, dword [ebp - 0x28c]
add eax, 4
push ecx
push ecx
push eax
lea edx, [esi + 0x2100]
push edx
mov dword [ebx + 0x18], edx
call fcn.00424730
mov dword [ebp - 0x288], eax
sub eax, dword [ebx + 0x18]
add esp, 0x10
mov dword [ebx + 0x34], eax
cmp dword [ebx + 0x34], 0x10
jle 0x4094e0
lea eax, [ebp - 0x288]
push esi
push 4
mov dword [ebx + 0x2c], 0
mov dword [ebp - 0x288], ebx
push eax
push dword [0x4652e8]
call fcn.00403625
pop edi
mov edx, dword [ebx + 0x2c]
cmp edx, 0
jne 0x409736
sub esp, 0xc
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0xc
jmp 0x40971e
jle 0x4090ef
mov eax, dword [ebp - 0x28c]
push edi
push edx
push str.HTTP_1.0_200_Ok_r_nContent_Length:__u_r_nContent_Type:_application_dns_message_r_n_r_n
add eax, 0x2500
push eax
mov dword [ebp - 0x288], eax
call dword [sym.imp.USER32.dll_wsprintfA]
pop edx
pop ecx
push eax
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00429114
push dword [ebx + 0x2c]
push dword [ebx + 0x18]
mov ecx, ebx
call fcn.00429114
jmp 0x409102
mov eax, dword [ebp - 0x28c]
sub esp, 0xc
mov ecx, ebx
add eax, 0x9000
mov dword [ebp - 0x284], eax
lea eax, [ebp - 0x284]
push eax
call fcn.0040767c
add esp, 0xc
test eax, eax
mov dword [ebp - 0x288], eax
je 0x409f58
push ebx
push dword [ebp - 0x284]
push 0xff
push eax
call fcn.0041083c
add esp, 0x10
test eax, eax
je 0x409f58
push eax
push eax
mov eax, dword [ebp - 0x290]
mov esi, dword [ebp - 0x290]
push dword [ebp - 0x288]
movsx eax, byte [eax + 8]
add eax, dword [esi + 4]
push eax
call fcn.00408885
add esp, 0x10
test eax, eax
je 0x409f58
test al, 0x20
jne 0x409f58
and eax, 7
cmp eax, 5
jne 0x409f7b
jmp 0x409f58
sub esp, 0xc
push dword [0x42a4c4]
call fcn.00428f74
add eax, 8
add esp, 0x10
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x2b0]
cmp eax, 0x1ffd
jg 0x4092db
mov ecx, dword [ebp - 0x2ac]
sub esp, 4
add eax, edi
add ecx, edi
mov edx, ecx
sub ecx, esi
inc ecx
push ecx
push edx
push eax
call fcn.00428e8c
mov eax, dword [ebx + 0x18]
add esp, 0x10
cmp esi, eax
ja 0x409870
add eax, dword [ebp - 0x2b0]
mov dword [ebx + 0x18], eax
mov eax, dword [ebx + 8]
cmp esi, eax
ja 0x4092db
add eax, dword [ebp - 0x2b0]
xor ecx, ecx
mov dword [ebx + 8], eax
mov eax, dword [ebx + 0x20]
add eax, ecx
mov edx, eax
mov eax, dword [eax]
test eax, eax
je 0x4092db
cmp esi, eax
ja 0x4098a8
cmp eax, dword [ebx + 0x18]
jae 0x4098a8
add eax, dword [ebp - 0x2b0]
mov dword [edx], eax
add ecx, 4
jmp 0x409886
xor esi, esi
jmp 0x4092f1
cmp byte [ebp - 0x23c], 0x2e
jne 0x4098fa
cmp byte [ebp - 0x23b], 0x2f
jg 0x4098fa
push eax
push eax
lea eax, [ebp - 0x268]
mov dword [ebp - 0x2ac], edx
push eax
push edx
call fcn.0041517c
add esp, 0x10
test eax, eax
mov edx, dword [ebp - 0x2ac]
jne 0x4098b4
sub esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
add esp, 0xc
jmp 0x409c26
push eax
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x2ac], edx
push eax
push 0x439f8e
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
add dword [ebx + 8], eax
mov edx, dword [ebp - 0x2ac]
jmp 0x40933e
test byte [0x46579d], 0x10
jne 0x409e35
jmp 0x409358
test eax, eax
je 0x409f8c
jmp 0x409378
test byte [0x46579d], 0x20
je 0x409386
mov esi, eax
shr esi, 2
and esi, 1
jmp 0x409386
cmp dl, 0x5c
jne 0x409966
mov byte [eax], 0x2f
inc eax
jmp 0x409390
mov ecx, dword [eax]
mov edx, ecx
and dh, 0xdf
cmp byte [ebp - 0x294], 0x61
cmovge ecx, edx
mov edx, ecx
and edx, 0xffdfffff
cmp byte [eax + 2], 0x61
cmovge ecx, edx
mov edx, ecx
and edx, 0xdfffffff
cmp byte [eax + 3], 0x61
cmovge ecx, edx
cmp dword [ebp - 0x2a4], 0
je 0x4099c9
push edx
push edx
push eax
push dword [0x43344c]
mov dword [ebp - 0x294], ecx
call fcn.004034d9
add esp, 0x10
test eax, eax
mov ecx, dword [ebp - 0x294]
jne 0x409fa9
mov edx, dword [str..HTM.GIF.JPG.JPE.TXT.CSS.CLA.JS]
mov dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x4099f2
cmp eax, ecx
je 0x4099f2
inc dword [ebp - 0x2ac]
jmp 0x4099d9
test esi, esi
jne 0x409a63
cmp ecx, 0x4d54532e
sete dl
cmp ecx, 0x5448532e
sete al
or dl, al
jne 0x409a14
cmp ecx, 0x5053412e
jne 0x409a52
cmp dword [ebp - 0x2b4], 0
je 0x409109
mov eax, dword [0x4657c0]
cmp dword [ebx + 4], eax
mov edx, 0x194
mov eax, 0xc8
push dword [0x42a598]
cmove eax, edx
push eax
push str.HTTP_1.0__u_Ok_r_nContent_Type:_text_html_r_n_s_r_n_r_n
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
pop edx
pop ecx
push eax
push edi
jmp 0x4093b9
test byte [0x465798], 0x80
je 0x409a63
cmp ecx, 0x4d54482e
je 0x409a14
mov eax, ecx
and eax, 0xfbffffff
cmp eax, 0x5048502e
je 0x409a79
cmp ecx, 0x4d54502e
jne 0x409a7f
or dword [ebx + 0xc], 4
jmp 0x409a9e
test esi, esi
je 0x409afc
cmp dword [ebp - 0x2ac], 3
jg 0x409a9e
test byte [ebp - 0x268], 4
jne 0x409a9e
test byte [0x465799], 0x40
jne 0x409afc
test byte [ebx + 0xc], 4
je 0x409abb
test byte [0x4657a4], 2
je 0x409abb
sub esp, 0xc
push dword [0x4657b0]
jmp 0x409fbc
mov eax, dword [str..fcgi]
test eax, eax
je 0x409fc8
cmp byte [eax], 0
je 0x409fc8
push edx
push edx
push eax
push edi
call fcn.004034d9
add esp, 0x10
test eax, eax
je 0x409fc8
sub esp, 0xc
push edi
jmp 0x409fbc
test esi, esi
jne 0x409a9e
mov dword [ebp - 0x2ac], 9
push eax
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push 0x439ffc
push dword [ebx + 0x20]
call fcn.004051d7
add esp, 0x10
test eax, eax
mov dword [ebp - 0x294], eax
je 0x409b84
mov eax, dword [ebp - 0x28c]
sub esp, 0xc
lea esi, [eax + 0x2100]
movzx eax, word [ebp - 0x26c]
push eax
movzx eax, word [ebp - 0x26e]
push eax
movzx eax, word [ebp - 0x270]
push eax
push str._2.2u:_2.2u:_2.2u_GMT
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp - 0x294]
add esp, 0x18
push esi
push edx
call fcn.004034d9
add esp, 0x10
test eax, eax
je 0x409b84
push eax
push eax
push 0x11
push str.HTTP_1.0_304__r_n_r_n
jmp 0x4093b9
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x2ac], 8
mov eax, dword [eax*4 + 0x42a760]
mov dword [ebp - 0x2b0], eax
jle 0x409e1b
mov edx, dword [0x4656e8]
test edx, edx
je 0x409e1b
mov eax, dword [ebp - 0x288]
test eax, eax
je 0x409e1b
cmp byte [eax + 1], 0
je 0x409e1b
mov eax, dword [eax]
lea esi, [edi + 0x4000]
mov byte [edi + 0x4004], 0
mov dword [ebp - 0x2b0], esi
mov dword [edi + 0x4000], eax
push ecx
push ecx
push esi
push edx
call fcn.004034d9
add esp, 0x10
test eax, eax
je 0x409fd4
push edx
push edx
push 0x3b
push eax
call fcn.004033da
add esp, 0x10
test eax, eax
jne 0x409df2
jmp 0x409fd4
mov eax, dword [ebx + 0x1c]
test eax, eax
jne 0x409ded
test esi, esi
je 0x409d91
test byte [0x46579b], 0x20
jne 0x409e35
mov dword [esi], 0x2a
push eax
push eax
lea eax, [ebp - 0x268]
push eax
push edi
call fcn.004150d2
add esp, 0x10
mov dword [ebp - 0x2ac], eax
inc eax
je 0x409d8e
mov ecx, ebx
call fcn.0040b61c
cmp word [ebp - 0x23c], 0x2e
jne 0x409c89
push eax
push eax
lea eax, [ebp - 0x268]
push eax
push dword [ebp - 0x2ac]
call fcn.0041517c
add esp, 0x10
test eax, eax
jne 0x409c5f
jmp 0x409d6f
test byte [ebp - 0x268], 2
je 0x409c9b
test byte [0x46579d], 0x10
jne 0x409c69
lea eax, [ebp - 0x278]
push esi
push esi
push eax
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test byte [ebp - 0x268], 0x10
movzx ecx, word [ebp - 0x272]
pop eax
mov eax, 0x439e6f
movzx esi, word [ebp - 0x26e]
pop edx
mov edx, 0x439e6d
cmove edx, eax
movzx eax, word [ebp - 0x26c]
mov dword [ebp - 0x288], edx
mov dword [ebp - 0x294], eax
movzx eax, word [ebp - 0x270]
push dword [ebp - 0x294]
push esi
mov dword [ebp - 0x298], eax
movzx eax, word [ebp - 0x276]
push dword [ebp - 0x298]
push ecx
mov dword [ebp - 0x2a0], eax
movzx eax, word [ebp - 0x278]
push dword [ebp - 0x2a0]
push eax
push dword [ebp - 0x294]
push esi
push dword [ebp - 0x298]
push ecx
push dword [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x23c]
push edx
push eax
push dword [ebp - 0x248]
push dword [ebp - 0x248]
push edx
push eax
push edx
push eax
push edx
push eax
push str._tr__td__a_href__s_s___.64s_s__a___td__td__a_href__s_s_u___u__a___td__td__a_href__s_s_4.4u__2.2u__2.2u__2.2u:_2.2u:_2.2u___4.4u__2.2u__2.2u__2.2u:_2.2u:_2.2u__a___td___tr_
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x58
mov ecx, ebx
push eax
push edi
call fcn.00429114
test eax, eax
pop ecx
pop esi
jg 0x409c69
sub esp, 0xc
push dword [ebp - 0x2ac]
call dword [sym.imp.KERNEL32.dll_FindClose]
push edi
mov ecx, ebx
call fcn.0040b636
add esp, 0xc
jmp 0x4093c2
mov byte [esi], 0
push ecx
push ecx
push 0x2e
push edi
call fcn.004033da
add esp, 0x10
test eax, eax
mov dword [ebp - 0x288], eax
je 0x409dd0
push edx
push edx
push 0x5c
push eax
call fcn.004033da
add esp, 0x10
test eax, eax
mov dword [ebx + 0x1c], eax
je 0x409dd0
test esi, esi
mov byte [eax - 1], 0
je 0x409319
mov byte [esi], 0
jmp 0x409319
test esi, esi
jne 0x409e35
push esi
push esi
push 0x5c
push edi
call fcn.00403472
add esp, 0x10
test eax, eax
mov esi, eax
jne 0x409fec
jmp 0x409e35
mov byte [eax], 0
jmp 0x409e35
inc eax
push ecx
push 0x40
push eax
push dword [ebp - 0x2b0]
call fcn.00428fcc
pop esi
pop eax
push 0x3b
push dword [ebp - 0x2b0]
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x409e1b
mov byte [eax], 0
push esi
push esi
push 0
push edi
call fcn.00414cf5
test eax, eax
mov dword [ebp - 0x294], eax
pop edx
pop ecx
jns 0x409ef8
mov eax, dword [0x4657c0]
cmp dword [ebx + 4], eax
je 0x409ed2
sub esp, 0xc
push edi
call fcn.00428f74
add esp, 0x10
cmp eax, 0x320
mov dword [ebp - 0x294], eax
jle 0x409e70
mov dword [edi + 0x320], 0x2e2e
mov dword [ebp - 0x294], 0x322
mov eax, dword [ebp - 0x294]
push ecx
push dword [ebp - 0x2d4]
push str.__s__r_nError._File_not_found._r_n
lea esi, [edi + eax]
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [0x4657c0]
add esp, 0x10
test eax, eax
je 0x409edf
push edx
push edx
push str..php
push eax
call fcn.004034d9
add esp, 0x10
test eax, eax
jne 0x40a00d
push eax
push eax
push str..pht
push dword [0x4657c0]
call fcn.004034d9
add esp, 0x10
test eax, eax
jne 0x40a00d
jmp 0x40a02c
mov edi, dword [ebx + 0x1c]
mov eax, dword [ebp - 0x294]
mov byte [edi + eax], 0x28
push eax
push eax
mov ecx, ebx
mov eax, dword [ebx + 0x2c]
push 0x194
add eax, edi
push eax
call fcn.0040a69c
jmp 0x4093c0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x29c], eax
push eax
push eax
push str.Range
push dword [ebx + 0x20]
call fcn.004051d7
add esp, 0x10
test eax, eax
mov dword [ebp - 0x288], eax
je 0x40a190
cmp byte [eax], 0x62
mov edx, 0
mov ecx, 6
cmove edx, ecx
mov edi, edx
mov dword [ebp - 0x2a8], edx
add edi, eax
cmp byte [edi], 0x2d
jne 0x40a07b
jmp 0x40a190
sub esp, 0xc
push dword [0x42e1e8]
call fcn.00428f74
pop edx
pop ecx
push eax
push dword [0x42e1e8]
mov ecx, ebx
call fcn.00429114
jmp 0x409102
mov eax, dword [ebp - 0x290]
mov eax, dword [eax + 4]
mov dword [ebx + 0x28], eax
jmp 0x4092b1
push eax
push eax
push dword [0x42a4c0]
push dword [ebp - 0x2c4]
call fcn.004034d9
add esp, 0x10
mov esi, eax
jmp 0x409378
and dword [ebx + 0xc], 0xfffffff7
mov dword [ebp - 0x2a4], 0
jmp 0x4099c9
mov ecx, ebx
call fcn.00428186
jmp 0x409d86
mov ecx, ebx
call fcn.0040863e
jmp 0x4093c2
mov eax, dword [ebp - 0x2ac]
mov eax, dword [eax*4 + 0x42a760]
mov dword [ebp - 0x2b0], eax
jmp 0x409e1b
mov eax, dword [ebx + 8]
push edx
inc esi
push edx
push str..asi
dec eax
push eax
mov dword [ebx + 0x1c], eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
add dword [ebx + 8], eax
jmp 0x409319
mov eax, dword [ebx + 0x2c]
lea edx, [edi + eax - 4]
add eax, edi
mov dword [ebx + 0x14], edx
mov dword [edx], 0x3d727265
push str.__r_n_.4000s
or dword [ebx + 0xc], 4
push dword [ebx]
jmp 0x40a03f
mov edx, dword [ebx]
mov eax, dword [ebx + 0x2c]
push str.__r_n_.4000s
mov dword [ebx + 0x1c], edi
add eax, edi
push edx
mov dword [ebx + 0x14], eax
push eax
push 0x45c2c0
call fcn.00403e78
mov byte [esi], 0
mov esi, dword [0x4657c0]
add esp, 0x10
mov edi, dword [ebp - 0x28c]
mov dword [ebx + 4], esi
test edi, edi
je 0x40a06e
test esi, esi
je 0x40a06e
cld
lodsb al, byte [esi]
stosb byte es:[edi], al
or al, al
jne 0x40a068
xor esi, esi
mov edi, dword [ebp - 0x28c]
jmp 0x409319
test byte [0x46579f], 0x40
je 0x40a100
mov edx, dword [0x465b6c]
lea eax, [edx + 1]
mov dword [0x465b6c], eax
mov eax, dword [0x4657a8]
mov dword [ebp - 0x2c4], eax
mov eax, dword [0x46557c]
mov dword [ebp - 0x2d4], eax
xor eax, eax
cmp eax, dword [ebp - 0x2c4]
jge 0x40a0fa
mov esi, dword [ebp - 0x2d4]
mov ecx, dword [esi + eax*4]
cmp ebx, ecx
je 0x40a0f7
cmp ecx, 1
jbe 0x40a0f7
mov esi, dword [ebx + 0x58]
cmp dword [ecx + 0x58], esi
jne 0x40a0f7
push eax
push eax
mov ecx, ebx
push 0x190
push str.Only_one_stream_enabled
mov dword [0x465b6c], edx
call fcn.0040a69c
push eax
push dword [ebp - 0x294]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x409d86
inc eax
jmp 0x40a0aa
mov dword [0x465b6c], edx
sub esp, 0xc
push edi
call fcn.00410be2
push 0
push edx
push eax
push dword [ebp - 0x294]
call fcn.00411e8a
mov dword [ebp - 0x2e0], eax
mov esi, eax
mov eax, dword [ebp - 0x2a8]
add eax, dword [ebp - 0x288]
add esp, 0x18
mov edi, edx
push 0x2d
mov dword [ebp - 0x2e8], edx
push eax
call fcn.004033da
add esp, 0x10
test eax, eax
je 0x40a3ca
sub esp, 0xc
inc eax
push eax
call fcn.00410be2
mov ecx, edx
add esp, 0x10
mov dword [ebp - 0x2ec], eax
or ecx, eax
mov dword [ebp - 0x2f0], edx
je 0x40a3ca
cmp edx, dword [ebp - 0x29c]
jl 0x40a3af
jg 0x40a3ca
cmp eax, dword [ebp - 0x2a0]
jb 0x40a3af
jmp 0x40a3ca
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2a0]
push edx
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x28c]
add eax, 0x2500
push eax
push dword [ebp - 0x29c]
push dword [ebp - 0x2a0]
mov dword [ebp - 0x2c4], eax
call fcn.00411e3c
movzx eax, word [ebp - 0x270]
movzx edi, word [ebp - 0x26c]
mov edx, 0xc8
movzx esi, word [ebp - 0x26e]
movzx ecx, word [ebp - 0x278]
mov dword [ebp - 0x2a8], eax
movzx eax, word [ebp - 0x276]
mov dword [ebp - 0x2f8], eax
movzx eax, word [ebp - 0x272]
mov dword [ebp - 0x2dc], eax
movzx eax, word [ebp - 0x274]
mov dword [ebp - 0x2fc], eax
pop eax
mov eax, dword [0x4657c0]
cmp dword [ebx + 4], eax
mov eax, 0x194
push dword [0x42a598]
push dword [ebp - 0x2b0]
push edi
mov edi, dword [ebp - 0x2fc]
push esi
mov esi, dword [ebp - 0x2f8]
cmovne eax, edx
mov edx, dword [ebp - 0x28c]
push dword [ebp - 0x2a8]
push ecx
push dword [esi*4 + 0x42a7fc]
push dword [ebp - 0x2dc]
add edx, 0x2100
mov dword [ebp - 0x2d4], edx
push dword [edi*4 + 0x42a830]
push dword [ebp - 0x2c4]
push eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
push str.HTTP_1.1__u_Ok_r_nContent_Length:__s_r_nLast_modified:__3.3s___u__3.3s__4.4u__2.2u:_2.2u:_2.2u_GMT_r_nContent_Type:__s_r_nConnection:_Keep_Alive_r_n_s_r_n_r_n
push edx
mov dword [ebp - 0x2dc], eax
call eax
mov edx, dword [str.Server:_SHS]
mov dword [ebp - 0x2a8], eax
add esp, 0x40
sub eax, 2
cmp byte [edx], 0
cmovne eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x2ac], 8
mov dword [ebp - 0x2a8], eax
je 0x40a37a
push eax
push dword [ebp - 0x2c4]
push dword [ebp - 0x24c]
push dword [ebp - 0x248]
call fcn.00411e3c
add esp, 0x10
cmp dword [ebp - 0x2e0], 0
je 0x40a3f3
mov eax, dword [ebp - 0x28c]
lea edi, [eax + 0x251e]
push eax
push edi
push dword [ebp - 0x2f0]
push dword [ebp - 0x2ec]
call fcn.00411e3c
mov eax, dword [ebp - 0x28c]
add esp, 0xc
lea esi, [eax + 0x253c]
push esi
push dword [ebp - 0x2e8]
push dword [ebp - 0x2e0]
call fcn.00411e3c
pop eax
mov eax, dword [ebp - 0x28c]
push dword [ebp - 0x2c4]
push edi
mov edi, dword [ebp - 0x2a8]
push esi
push str.Content_Range:_bytes__s__s__s_r_n_r_n
lea eax, [eax + edi + 0x20fe]
push eax
mov eax, dword [ebp - 0x2dc]
call eax
mov esi, dword [ebp - 0x2a8]
add esp, 0x20
lea eax, [esi + eax - 2]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x28c]
mov byte [eax + 0x210b], 0x36
jmp 0x40a40d
push esi
push 0
push 8
push dword [ebp - 0x294]
call fcn.0040364b
add dword [ebp - 0x2a0], 0xfffffff8
mov dword [ebp - 0x2a4], 0
adc dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x2a8], 9
pop edi
jmp 0x40a40d
sub eax, esi
sbb edx, edi
add eax, 1
adc edx, 0
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], edx
jmp 0x40a1a4
mov eax, dword [ebp - 0x2a0]
sub dword [ebp - 0x2a0], esi
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x29c]
sbb dword [ebp - 0x29c], edi
mov dword [ebp - 0x2f0], eax
jmp 0x40a1a4
cmp dword [ebp - 0x2a4], 0
je 0x40a40d
mov eax, dword [0x433448]
cmp dword [ebp - 0x248], eax
ja 0x40a4c2
and dword [ebx + 0xc], 0xfffffff7
push eax
push eax
mov ecx, ebx
push dword [ebp - 0x2a8]
push dword [ebp - 0x2d4]
call fcn.00429114
cmp dword [ebp - 0x2b4], 0
pop edx
pop ecx
jne 0x40a4ab
test eax, eax
jle 0x40a4ab
test byte [ebx + 0xc], 8
je 0x40a442
mov dword [ebx + 0x48], 0x422d59
cmp dword [ebp - 0x2e4], 0x10000
mov eax, 0x10000
push esi
cmovbe eax, dword [ebp - 0x2e4]
push eax
push dword [ebp - 0x28c]
push dword [ebp - 0x294]
call fcn.004035ff
test eax, eax
mov esi, eax
pop edi
jle 0x40a4ab
push eax
push eax
mov ecx, ebx
push esi
push dword [ebp - 0x28c]
call fcn.00429114
test eax, eax
pop edx
pop ecx
jle 0x40a4ab
mov eax, esi
cdq
sub dword [ebp - 0x2a0], esi
sbb dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 0
jg 0x40a442
jl 0x40a4ab
cmp dword [ebp - 0x2a0], 0
ja 0x40a442
sub esp, 0xc
push dword [ebp - 0x294]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0xc
jmp 0x40913c
mov ecx, ebx
call fcn.004231b4
test eax, eax
je 0x40a40d
movzx eax, word [ebp - 0x270]
movzx edi, word [ebp - 0x26c]
mov edx, 0xc8
movzx esi, word [ebp - 0x26e]
movzx ecx, word [ebp - 0x278]
push dword [0x42a598]
push dword [ebp - 0x2b0]
mov dword [ebp - 0x2a8], eax
movzx eax, word [ebp - 0x276]
push edi
push esi
push dword [ebp - 0x2a8]
push ecx
mov dword [ebp - 0x2c4], eax
movzx eax, word [ebp - 0x272]
mov edi, dword [ebp - 0x2c4]
mov dword [ebp - 0x2ac], eax
movzx eax, word [ebp - 0x274]
push dword [edi*4 + 0x42a7fc]
push dword [ebp - 0x2ac]
mov dword [ebp - 0x2e0], eax
mov eax, dword [0x4657c0]
cmp dword [ebx + 4], eax
mov esi, dword [ebp - 0x2e0]
mov eax, 0x194
push dword [esi*4 + 0x42a830]
cmovne eax, edx
push eax
push str.HTTP_1.1__u_Ok_r_nLast_modified:__3.3s___u__3.3s__4.4u__2.2u:_2.2u:_2.2u_GMT_r_nContent_Type:__s_r_n_s_r_n
push dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x2dc]
call eax
mov esi, eax
mov eax, dword [ebp - 0x28c]
add esp, 0x2c
push 0x24
push str.Content_Encoding:_gzip_r_n_r_n
mov dword [ebx + 0x3c], 0
lea eax, [eax + esi + 0x2100]
push eax
call fcn.00428f18
lea eax, [esi + 0x24]
add esp, 0x10
mov dword [ebp - 0x2a8], eax
jmp 0x40a411
mov eax, dword [ebp - 0x2c8]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret