Function at 0x47f2b0
Capabilities:
Send data
Send data on socket
Send http request
Send http request with host header
Set socket configuration

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x5c
mov ebp, dword [esp + 0x70]
mov eax, dword [ebp + 0x10]
movzx ecx, byte [ebp + 0xd4]
mov byte [ebp + 0x9f], 1
mov dword [esp + 0x30], eax
lea eax, [ebp + 0x24]
mov dword [esp + 0x24], eax
test cl, cl
jne case.0x47f3be.3
cmp dword [ebp + 0xa4], 0x15
ja case.0x47f2ee.10
mov eax, dword [ebp + 0xa4]
jmp dword [eax*4 + 0x549538]
mov eax, dword [ebp + 0x5c]
cmp eax, dword [ebp + 0x58]
jne 0x47f337
test eax, eax
lea esi, [eax + 0x400]
jne 0x47f30f
mov edx, dword [ebp + 0x10]
mov esi, dword [edx + 0x6c]
shr esi, 1
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.00488a00
test eax, eax
je 0x4811ad
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x58], esi
cmp byte [ebp + 0x9d], 0
jne case.0x47f3be.9
mov dword [ebp + 0xa8], 0
mov byte [ebp + 0x9f], 0
add esp, 0x5c
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
lea edx, [esp + 0x40]
mov eax, ebp
call fcn.00481b70
test eax, eax
mov edi, eax
je 0x47f37c
cmp byte [eax], 0
jne 0x480eaf
mov edi, dword [ebp + 0xa4]
test edi, edi
jne 0x47f50d
cmp byte [ebp + 0x9d], 0
jne 0x47fe43
movzx ecx, byte [ebp + 0xd4]
test cl, cl
jne case.0x47f3be.3
mov ebx, dword [ebp + 0x8c]
test ebx, ebx
jne 0x47f3c5
lea ebx, [ebp + 0x24]
cmp dword [ebp + 0xa4], 0x13
ja case.0x47f3be.3
mov eax, dword [ebp + 0xa4]
jmp dword [eax*4 + 0x549590]
call fcn.00488c10
sub eax, dword [ebp + 0x88]
cmp eax, ebx
jg 0x4801d2
cmp byte [ebp + 0xd4], 0
jne case.0x47f3be.3
jmp 0x47f3ac
mov dword [ebp + 0xa8], 1
jmp case.0x47f3be.3
xor edx, edx
mov eax, ebp
call fcn.00481b70
test eax, eax
je 0x480864
cmp byte [eax], 0
je 0x480243
mov edx, eax
mov eax, ebp
call fcn.0047dbf0
test eax, eax
jne 0x480d47
mov ecx, str._html__head__title_Request_malformed__title___head__body_Your_HTTP_request_was_syntactically_incorrect.__body___html_
mov edx, 0x190
mov eax, ebp
call fcn.00481890
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f39e
xor edx, edx
mov eax, ebp
call fcn.00481b70
test eax, eax
mov ebx, eax
je 0x480180
mov ecx, 1
mov edx, eax
mov eax, ebp
call fcn.00481cd0
test eax, eax
movzx ecx, byte [ebp + 0xd4]
je 0x47f2d7
cmp byte [ebx], 0
jne 0x47f2d7
sub ebx, dword [ebp + 0x3c]
mov dword [ebp + 0xa4], 3
mov dword [ebp + 0x6c], ebx
jmp 0x47f2d7
mov eax, dword [ebp + 0x1c]
test eax, eax
jne 0x47ff70
mov edi, dword [esp + 0x24]
lea edx, [esp + 0x44]
mov byte [ebp + 0x94], 1
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], edx
mov dword [esp + 0x44], 0
mov dword [esp + 0x1c], edi
mov edx, dword [ebp + 0x34]
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x2c]
mov dword [esp + 0xc], edx
mov edx, dword [ebp + 0x30]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [eax + 4]
mov dword [esp], edx
call dword [eax]
test eax, eax
je 0x4808b0
mov eax, dword [ebp + 0xa4]
cmp eax, 0x13
jne 0x47ff70
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
cmp dword [ebp + 0x80], 0x19
jne case.0x47f2ee.10
mov dword [ebp + 0xa4], 6
mov eax, dword [ebp + 0x98]
lea esi, [esp + 0x44]
mov dword [esp + 0x44], 0
mov dword [esp + 0x10], 4
jmp 0x47f9a8
xor edx, edx
mov eax, ebp
call fcn.00481b70
test eax, eax
je 0x480880
cmp byte [eax], 0
jne 0x480d20
cmp byte [ebp + 0xd4], 0
mov dword [ebp + 0xa4], 9
jne case.0x47f3be.3
jmp 0x47f2db
xor edx, edx
mov eax, ebp
call fcn.00481b70
test eax, eax
mov ebx, eax
je 0x4801c0
mov ecx, 0x10
mov edx, eax
mov eax, ebp
call fcn.00481cd0
test eax, eax
movzx ecx, byte [ebp + 0xd4]
je 0x47f2d7
cmp byte [ebx], 0
jne 0x47f2d7
test cl, cl
mov dword [ebp + 0xa4], 9
jne case.0x47f3be.3
jmp 0x47f2db
mov ebx, dword [ebp + 0x1c]
test ebx, ebx
jne 0x47f659
mov edi, dword [esp + 0x24]
lea esi, [esp + 0x44]
mov byte [ebp + 0x94], 1
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], esi
mov dword [esp + 0x44], 0
mov dword [esp + 0x1c], edi
mov edx, dword [ebp + 0x34]
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x2c]
mov dword [esp + 0xc], edx
mov edx, dword [ebp + 0x30]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [eax + 4]
mov dword [esp], edx
call dword [eax]
test eax, eax
je 0x480940
mov eax, dword [ebp + 0xa4]
cmp eax, 0x13
je 0x47f50d
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
je 0x47f397
mov eax, ebp
call fcn.0047d020
test eax, eax
je 0x47fe30
mov dword [ebp + 0xa4], 0xa
mov eax, dword [ebp + 0x98]
lea edx, [esp + 0x44]
mov dword [esp + 0x44], 1
mov dword [esp + 0x10], 4
mov dword [esp + 8], 1
mov dword [esp + 0xc], edx
mov dword [esp + 4], 6
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_setsockopt]
sub esp, 0x14
jmp 0x47f397
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x98]
lea esi, [esp + 0x44]
mov edx, dword [edx + 0x14]
mov dword [esp + 0x44], 0
mov dword [esp + 0x10], 4
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], 6
test edx, edx
mov dword [esp], eax
je 0x480d5d
call dword [sym.imp.WS2_32.dll_setsockopt]
sub esp, 0x14
mov dword [ebp + 0xa4], 0x15
mov dword [esp + 4], ebp
mov eax, dword [ebp + 0x1c]
mov dword [esp], eax
call fcn.0048ac80
cmp eax, 1
jne 0x47fe43
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x47f50d
mov dword [ebp + 0x1c], 0
mov dword [esp], eax
call sym.xmrig.exe_MHD_destroy_response
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov eax, dword [ebp + 0x1c]
mov edi, dword [eax + 0xc]
test edi, edi
je 0x47ffd0
add eax, 0x1c
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp + 0x1c]
sub esp, 4
mov edx, dword [eax + 0x3c]
or edx, dword [eax + 0x38]
jne 0x47ffdc
mov esi, dword [eax + 0xc]
test esi, esi
je 0x47f792
add eax, 0x1c
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
movzx ecx, byte [ebp + 0xd4]
mov dword [ebp + 0xa4], 0x10
jmp 0x47f2d7
mov ebx, dword [ebp + 0x5c]
xor ecx, ecx
mov esi, dword [ebp + 0x70]
mov edi, dword [ebp + 0x74]
test ebx, ebx
jne 0x4805e0
mov edx, edi
or edx, esi
je 0x480150
mov eax, edi
and eax, esi
cmp eax, 0xffffffff
jne 0x47f39e
mov esi, dword [ebp + 0x5c]
test esi, esi
jne 0x47f39e
cmp byte [ebp + 0x9d], 0
je 0x47f39e
mov eax, 9
test cl, cl
mov dword [ebp + 0xa4], eax
jne case.0x47f3be.3
jmp 0x47f2db
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x480192
add eax, 0x1c
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [ebp + 0x1c]
sub esp, 4
mov ebx, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
mov edi, ebx
or edi, eax
mov edi, dword [esi + 0xc]
je 0x4803d0
mov ecx, dword [ebp + 0x78]
mov edx, ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x7c]
xor eax, edx
xor ebx, ecx
or ebx, eax
je 0x4803d0
test edi, edi
je 0x4801b0
mov ebx, dword [ebp + 0x60]
test ebx, ebx
je 0x480d91
lea edi, [ebx - 0xc]
mov edx, dword [esi + 0x44]
mov eax, dword [esi + 0x40]
mov dword [esp + 0x34], edi
mov edi, dword [ebp + 0x40]
cmp edx, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
lea ebx, [edi + 0xa]
ja 0x481146
jae 0x48113c
mov edi, dword [esi + 0x50]
xor edx, edx
mov eax, edi
add eax, dword [esp + 0x38]
adc edx, dword [esp + 0x3c]
cmp edx, ecx
jb 0x481146
ja 0x47f8ba
cmp eax, dword [esp + 0x28]
jbe 0x481146
mov edx, dword [esp + 0x28]
sub edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
sub edi, edx
cmp edi, eax
cmova edi, eax
add edx, dword [esi + 4]
mov dword [esp], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
cmp edi, 0xfffffffe
je 0x481608
cmp edi, 0xffffffff
je 0x48129f
mov eax, dword [esi + 0x3c]
or eax, dword [esi + 0x38]
je 0x48129f
test edi, edi
je 0x48133d
cmp edi, 0xffffff
mov eax, 0xffffff
lea esi, [esp + 0x44]
cmovg edi, eax
mov dword [esp + 8], str._X_r_n
mov dword [esp + 4], 0xa
mov dword [esp + 0xc], edi
mov dword [esp], esi
mov ebx, 0xa
call fcn.0047cd50
mov edx, dword [ebp + 0x40]
sub ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 4], esi
add edx, ebx
mov dword [esp], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp + 0x40]
mov edx, 0xa0d
mov word [eax + edi + 0xa], dx
mov eax, edi
mov dword [ebp + 0x64], ebx
cdq
add dword [ebp + 0x78], edi
adc dword [ebp + 0x7c], edx
add edi, 0xc
mov dword [ebp + 0x68], edi
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x47f988
add eax, 0x1c
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
mov dword [ebp + 0xa4], 0xe
mov eax, dword [ebp + 0x98]
mov dword [esp + 0x44], 1
mov dword [esp + 0x10], 4
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], 6
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_setsockopt]
movzx ecx, byte [ebp + 0xd4]
sub esp, 0x14
jmp 0x47f2d7
cmp byte [ebp + 0xa0], 0
jne 0x47fb32
mov eax, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x10]
mov byte [ebp + 0xa0], 1
test eax, eax
je 0x47fa01
mov dword [esp], eax
call sym.xmrig.exe_MHD_destroy_response
mov dword [ebp + 0x1c], 0
lea esi, [ebx + 0x9c]
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub esp, 4
cmp byte [ebp + 0xd4], 0
jne 0x480321
test byte [ebx + 0xdc], 4
jne 0x47fa6b
mov edi, dword [ebx + 0xd4]
cmp dword [ebp + 0x8c], edi
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
je 0x4812a4
test eax, eax
je 0x481453
mov dword [eax + 8], edx
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
test eax, eax
je 0x48145b
mov dword [eax + 0xc], edx
mov dword [ebp + 8], 0
mov dword [ebp + 0xc], 0
mov eax, dword [ebp + 4]
mov edx, dword [ebp]
test eax, eax
je 0x481239
mov dword [eax], edx
mov eax, dword [ebp]
mov edx, dword [ebp + 4]
test eax, eax
je 0x481231
mov dword [eax + 4], edx
mov dword [ebp], 0
mov dword [ebp + 4], 0
mov eax, dword [ebx + 0x18]
mov dword [ebp + 4], 0
mov dword [ebp], eax
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x480d89
mov eax, dword [ebx + 0x18]
mov dword [eax + 4], ebp
mov dword [ebx + 0x18], ebp
mov byte [ebp + 0xdc], 0
mov byte [ebp + 0x9f], 0
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
test byte [ebx + 0xdc], 4
je 0x47fb32
cmp dword [ebx + 0xbc], 0xffffffff
je 0x47fb32
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x549411
mov eax, dword [ebx + 0xc0]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_send]
sub esp, 0x10
test eax, eax
jg 0x47fb32
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
je 0x47fb32
mov dword [esp + 4], str.Failed_to_signal_end_of_connection_via_inter_thread_communication_channel
mov dword [esp], ebx
call fcn.00488450
mov byte [ebp + 0x9f], 0
add esp, 0x5c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebp
call fcn.0047d020
test eax, eax
je 0x47fe30
cmp byte [ebp + 0xb0], 0
je 0x480260
mov eax, dword [ebp + 0x68]
cmp dword [ebp + 0x64], eax
je 0x480260
mov dword [ebp + 0xa4], 0x11
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x47fbc6
nop
lea esi, [esi]
test byte [ebx + 0xc], 1
je 0x47fbc0
mov eax, dword [ebx + 4]
cmp eax, str.Cookie
je 0x480410
test eax, eax
je 0x47fbc0
mov dword [esp + 4], eax
mov dword [esp], str.Cookie
call fcn.00488ca0
test eax, eax
jne 0x480410
mov ebx, dword [ebx]
test ebx, ebx
jne 0x47fb90
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xe4]
test eax, eax
jle 0x47fed0
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x47fed0
mov dword [esp + 4], eax
mov dword [esp], str.HTTP_1.1
call fcn.00488ca0
test eax, eax
je 0x47fed0
mov ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x47fc37
test byte [ebx + 0xc], 1
je 0x47fc31
mov eax, dword [ebx + 4]
cmp eax, str.Host
je 0x47febc
test eax, eax
je 0x47fc31
mov dword [esp + 4], eax
mov dword [esp], str.Host
call fcn.00488ca0
test eax, eax
jne 0x47febc
mov ebx, dword [ebx]
test ebx, ebx
jne 0x47fc01
mov dword [ebp + 0xa4], 9
mov byte [ebp + 0x9d], 1
mov dword [esp + 4], str.Received_HTTP_1.1_request_without__Host_header._n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov dword [esp + 8], 0
mov dword [esp + 4], str._html__head__title_quot_Host:quot__header_required__title___head__body_In_HTTP_1.1__requests_must_include_a_quot_Host:quot__header__and_your_HTTP_1.1_request_lacked_such_a_header.__body___html_
mov dword [esp], 0xc5
call sym.xmrig.exe_MHD_create_response_from_buffer
mov dword [esp + 4], 0x190
mov ebx, eax
mov dword [esp + 8], eax
mov dword [esp], ebp
call sym.xmrig.exe_MHD_queue_response
mov dword [esp], ebx
call sym.xmrig.exe_MHD_destroy_response
cmp dword [ebp + 0xa4], 0x13
movzx ecx, byte [ebp + 0xd4]
je 0x47f2d7
test cl, cl
mov dword [ebp + 0xa4], 4
jne case.0x47f3be.3
jmp 0x47f2db
mov eax, dword [ebp + 0x58]
cmp dword [ebp + 0x5c], eax
jne 0x48169f
test eax, eax
lea esi, [eax + 0x400]
jne 0x47fcde
mov edx, dword [ebp + 0x10]
mov esi, dword [edx + 0x6c]
shr esi, 1
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.00488a00
test eax, eax
je 0x480892
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x58], esi
cmp dword [ebp + 0x5c], esi
jb 0x47f337
nop
mov dword [ebp + 0xa8], 2
jmp case.0x47f3be.3
cmp dword [ebp + 0xac], 0x66
je 0x4805b0
mov eax, dword [ebp + 0x98]
lea esi, [esp + 0x44]
mov dword [esp + 0x44], 0
mov dword [esp + 0x10], 4
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
mov dword [esp + 4], 6
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_setsockopt]
mov eax, dword [ebp + 0x1c]
sub esp, 0x14
mov dword [esp], eax
call sym.xmrig.exe_MHD_destroy_response
mov edi, dword [esp + 0x30]
mov dword [ebp + 0x1c], 0
mov edx, dword [edi + 0x38]
test edx, edx
je 0x47fdb1
cmp byte [ebp + 0x94], 0
je 0x47fdb1
mov eax, dword [esp + 0x24]
mov byte [ebp + 0x94], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov eax, dword [edi + 0x3c]
mov dword [esp], eax
call dword [edi + 0x38]
cmp dword [ebp + 0x38], 1
mov ebx, dword [ebp + 0x10]
jne 0x480014
cmp byte [ebp + 0x9d], 0
jne 0x480014
mov dword [ebp + 0x34], 0
mov dword [ebp + 0xa4], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x6c], 0
mov dword [ebp + 0x38], 0
mov eax, dword [ebx + 0x6c]
shr eax, 1
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.00488ad0
mov dword [ebp + 0x3c], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x6c]
shr eax, 1
mov dword [ebp + 0x58], eax
jmp 0x4800a5
mov dword [esp + 4], str.Closing_connection__failed_to_create_response_header__n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov ebx, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov esi, dword [ebp + 0x1c]
test byte [ebx + 0xdd], 0x10
je 0x480590
test esi, esi
je 0x47fe7d
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x47fea9
cmp byte [ebp + 0x94], 0
je 0x47fea9
mov edi, dword [esp + 0x24]
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov eax, dword [ebx + 8]
test eax, eax
je 0x47fc37
mov esi, esi
lea edi, [edi]
mov ebx, dword [ebp + 0x14]
mov dword [ebp + 0x70], 0
mov dword [ebp + 0x74], 0
test ebx, ebx
je 0x47fc95
lea esi, [esi]
test byte [ebx + 0xc], 1
je 0x47ff20
mov eax, dword [ebx + 4]
cmp eax, str.Transfer_Encoding
je 0x480550
test eax, eax
je 0x47ff20
mov dword [esp + 4], eax
mov dword [esp], str.Transfer_Encoding
call fcn.00488ca0
test eax, eax
jne 0x480550
mov ebx, dword [ebx]
test ebx, ebx
jne 0x47fef0
mov ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x47fc95
test byte [ebx + 0xc], 1
je 0x47ff61
mov eax, dword [ebx + 4]
cmp eax, str.Content_Length
je 0x481029
test eax, eax
je 0x47ff61
mov dword [esp + 4], eax
mov dword [esp], str.Content_Length
call fcn.00488ca0
test eax, eax
jne 0x481029
mov ebx, dword [ebx]
test ebx, ebx
jne 0x47ff31
jmp 0x47fc95
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x480370
mov dword [esp + 4], str.POST
mov eax, dword [ebp + 0x2c]
mov dword [esp], eax
call fcn.00488ca0
test eax, eax
je 0x48111c
mov dword [ebp + 0x70], 0
mov dword [ebp + 0x74], 0
mov eax, 9
mov byte [ebp + 0x9d], 1
cmp byte [ebp + 0xd4], 0
mov dword [ebp + 0xa4], eax
jne case.0x47f3be.3
jmp 0x47f2db
mov edx, dword [eax + 0x3c]
or edx, dword [eax + 0x38]
je 0x480360
mov eax, ebp
call fcn.0047dd30
cmp eax, 1
jne 0x47f397
mov eax, dword [ebp + 0x1c]
mov ebx, dword [eax + 0xc]
test ebx, ebx
je 0x480005
add eax, 0x1c
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
mov dword [ebp + 0xa4], 0xc
jmp 0x47f67d
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
test byte [ebx + 0xdd], 0x10
mov esi, dword [ebp + 0x1c]
je 0x4803b0
test esi, esi
je 0x48004b
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x480077
cmp byte [ebp + 0x94], 0
je 0x480077
mov edi, dword [esp + 0x24]
mov dword [esp + 0xc], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov eax, dword [ebp + 0x20]
mov byte [ebp + 0x94], 0
mov dword [esp], eax
call fcn.00488930
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x58], 0
mov dword [ebp + 0x5c], 0
mov byte [ebp + 0x94], 0
mov dword [ebp + 0x24], 0
mov dword [ebp + 0x80], 0
mov dword [ebp + 0xac], 0
mov dword [ebp + 0x14], 0
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x78], 0
mov dword [ebp + 0x7c], 0
mov byte [ebp + 0xb0], 0
mov dword [ebp + 0xb8], 0
mov dword [ebp + 0xbc], 0
mov dword [ebp + 0xc0], 0
mov dword [ebp + 0xc4], 0
mov dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x60], 0
mov dword [ebp + 0x64], 0
mov dword [ebp + 0x68], 0
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
cmp byte [ebp + 0xb0], 0
mov eax, 9
je 0x47f7f7
cmp byte [ebp + 0x9d], 1
sbb eax, eax
and eax, 0xfffffffe
add eax, 9
jmp 0x47f7f7
cmp dword [ebp + 0xa4], 2
je 0x47f38a
jmp 0x47f50d
mov edx, dword [eax + 0x38]
mov eax, dword [eax + 0x3c]
mov edi, eax
or edi, edx
je 0x480360
xor edx, dword [ebp + 0x78]
xor eax, dword [ebp + 0x7c]
or eax, edx
je 0x47f792
lea esi, [esp + 0x44]
jmp 0x47f988
cmp dword [ebp + 0xa4], 8
je 0x47f38a
jmp 0x47f50d
mov ebx, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov esi, dword [ebp + 0x1c]
test byte [ebx + 0xdd], 0x10
je 0x4803ec
test esi, esi
je 0x48020c
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x480237
cmp byte [ebp + 0x94], 0
je 0x480237
lea edx, [ebp + 0x24]
mov dword [esp + 0xc], 2
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
jmp case.0x47f3be.3
sub eax, dword [ebp + 0x3c]
mov dword [ebp + 0xa4], 3
movzx ecx, byte [ebp + 0xd4]
mov dword [ebp + 0x6c], eax
jmp 0x47f2d7
mov dword [ebp + 0xa4], 0x12
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov dword [ebp + 0xa8], 3
jmp case.0x47f3be.3
cmp byte [ebp + 0x9d], 0
je 0x47f344
mov esi, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov edi, dword [ebp + 0x1c]
test byte [esi + 0xdd], 0x10
jne 0x4802da
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
test edi, edi
je 0x4802ed
mov dword [ebp + 0x1c], 0
mov dword [esp], edi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [esi + 0x38]
test eax, eax
je 0x480315
cmp byte [ebp + 0x94], 0
je 0x480315
mov dword [esp + 0xc], 1
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov edx, dword [esi + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
jmp 0x47f3af
mov eax, dword [ebp + 4]
mov edx, dword [ebp]
test eax, eax
je 0x481229
mov dword [eax], edx
mov eax, dword [ebp]
mov edx, dword [ebp + 4]
test eax, eax
je 0x481221
mov dword [eax + 4], edx
mov dword [ebp], 0
mov dword [ebp + 4], 0
mov byte [ebp + 0xd4], 0
jmp 0x47fa9a
mov dword [ebp + 0xa4], 0x10
jmp 0x47f2db
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x48039a
mov dword [esp + 4], str.HTTP_1.1
mov dword [esp], eax
call fcn.00488ca0
test eax, eax
jne 0x48134c
mov eax, dword [ebp + 0x1c]
test eax, eax
jne 0x47ff7b
mov eax, dword [ebp + 0x74]
or eax, dword [ebp + 0x70]
cmp eax, 1
sbb eax, eax
and eax, 3
add eax, 6
jmp 0x47ffb0
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
jmp 0x480038
test edi, edi
je 0x47f792
add esi, 0x1c
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
jmp 0x47f792
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
jmp 0x4801f9
mov esi, dword [ebx + 8]
test esi, esi
je 0x47fbc6
mov dword [esp], esi
call sub.msvcrt.dll_strlen
add eax, 1
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004889a0
test eax, eax
mov ebx, eax
je 0x480e7b
mov dword [esp], esi
call sub.msvcrt.dll_strlen
add eax, 1
mov dword [esp + 4], esi
mov dword [esp], ebx
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcpy
jmp 0x480467
add ebx, 1
movzx edx, byte [ebx]
cmp dl, 0x20
je 0x480464
lea eax, [edx - 0x3b]
mov esi, ebx
test al, 0xfd
je 0x4804ac
cmp dl, 0x2c
setne cl
test dl, dl
setne al
test cl, al
jne 0x480497
jmp 0x4804ac
lea eax, [edx - 0x3b]
test al, 0xfd
je 0x4804ac
add esi, 1
movzx edx, byte [esi]
test dl, dl
setne cl
cmp dl, 0x2c
setne al
test cl, al
jne 0x480490
cmp byte [esi - 1], 0x20
lea eax, [esi - 1]
jne 0x4804d3
cmp eax, ebx
jae 0x4804c4
jmp 0x4804d3
cmp eax, ebx
jb 0x4804d0
sub eax, 1
mov byte [eax + 1], 0
cmp byte [eax], 0x20
je 0x4804c0
movzx edx, byte [esi]
cmp dl, 0x3d
mov byte [esi], 0
mov byte [esp + 0x28], dl
je 0x4807c0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004889a0
test eax, eax
je 0x480790
mov dword [eax + 4], ebx
mov dword [eax + 8], 0x548f90
mov dword [eax + 0xc], 2
mov dword [eax], 0
mov ecx, dword [ebp + 0x18]
movzx edx, byte [esp + 0x28]
test ecx, ecx
je 0x481111
mov dword [ecx], eax
mov dword [ebp + 0x18], eax
test dl, dl
je 0x47fbc6
lea ebx, [esi + 1]
test ebx, ebx
jne 0x480467
jmp 0x47fbc6
mov eax, dword [ebx + 8]
test eax, eax
je 0x47ff26
mov dword [ebp + 0x70], 0xffffffff
mov dword [ebp + 0x74], 0xffffffff
mov dword [esp + 4], str.chunked
mov dword [esp], eax
call fcn.00488ca0
test eax, eax
je 0x47fc95
mov byte [ebp + 0xb0], 1
jmp 0x47fc95
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
jmp 0x47fe6a
mov eax, dword [ebp + 0x1c]
mov dword [ebp + 0xa4], 4
mov dword [esp], eax
call sym.xmrig.exe_MHD_destroy_response
mov dword [ebp + 0x1c], 0
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov eax, dword [ebp + 0x1c]
test eax, eax
jne 0x47f7c3
mov eax, dword [ebp + 0x3c]
movzx ecx, byte [ebp + 0xb0]
mov dword [esp + 0x34], eax
lea esi, [esi]
test cl, cl
je 0x480611
mov eax, edi
and eax, esi
cmp eax, 0xffffffff
je 0x4809d0
mov eax, esi
mov edx, edi
add eax, 0xffffffff
adc edx, 0xffffffff
cmp edx, 0xffffffff
jb 0x480629
cmp eax, 0xfffffffd
ja 0x480780
xor edx, edx
cmp edx, edi
jb 0x480780
ja 0x480640
cmp ebx, esi
jbe 0x480780
lea esi, [esi]
mov dword [esp + 0x28], 0
mov edi, dword [esp + 0x24]
mov byte [ebp + 0x94], 1
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x44], esi
mov dword [esp + 0x1c], edi
lea edi, [esp + 0x44]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x34]
mov dword [esp + 0x14], edi
mov edx, dword [ebp + 0x34]
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x2c]
mov dword [esp + 0xc], edx
mov edx, dword [ebp + 0x30]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [eax + 4]
mov dword [esp], edx
call dword [eax]
test eax, eax
je 0x481463
mov eax, dword [esp + 0x44]
cmp esi, eax
jae 0x4806c9
mov eax, dword [0x5769c0]
mov dword [esp + 0xc], str.libmicrohttpd_API_violation
mov dword [esp + 8], 0x9b3
mov dword [esp + 4], str.T:_Bin_prep_mhd_src_libmicrohttpd_0.9.58_src_microhttpd_connection.c
mov dword [esp], eax
call dword [0x5769c4]
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4806f0
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x28], 0
test byte [edx + 0xdc], 8
je 0x4806f0
cmp byte [ebp + 0xd4], 0
je 0x481194
nop
movzx ecx, byte [ebp + 0xb0]
sub esi, eax
mov eax, esi
test cl, cl
je 0x48070d
xor edi, edi
add dword [ebp + 0xc0], esi
adc dword [ebp + 0xc4], edi
mov edi, dword [ebp + 0x74]
mov esi, dword [ebp + 0x70]
sub ebx, eax
add dword [esp + 0x34], eax
mov edx, edi
and edx, esi
cmp edx, 0xffffffff
je 0x48072e
xor edx, edx
sub esi, eax
sbb edi, edx
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x74], edi
cmp dword [esp + 0x28], 1
je 0x480600
test ebx, ebx
je 0x480754
mov eax, dword [esp + 0x34]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov dword [ebp + 0x5c], ebx
cmp dword [ebp + 0xa4], 0x13
movzx ecx, byte [ebp + 0xd4]
je 0x47f2d7
mov esi, dword [ebp + 0x70]
mov edi, dword [ebp + 0x74]
jmp 0x47f7c3
mov esi, ebx
jmp 0x480640
mov dword [esp + 4], str.Not_enough_memory_in_pool_to_allocate_header_record__n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov ecx, str._html__head__title_Request_too_big__title___head__body_Your_HTTP_header_was_too_big_for_the_memory_constraints_of_this_webserver.__body___html_
mov edx, 0x1af
mov eax, ebp
call fcn.00481890
jmp 0x47fbc6
movzx ecx, byte [esi + 1]
lea edx, [esi + 1]
xor edi, edi
mov dword [esp + 0x28], edx
test cl, cl
mov eax, ecx
je 0x480800
test edi, edi
jne 0x4807e7
cmp al, 0x3b
je 0x480e6c
cmp al, 0x2c
je 0x480e6c
cmp al, 0x22
je 0x480851
add edx, 1
movzx eax, byte [edx]
test al, al
jne 0x4807d3
xor edi, edi
cmp cl, 0x22
je 0x48116e
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004889a0
test eax, eax
je 0x480790
mov esi, dword [esp + 0x28]
mov dword [eax + 4], ebx
mov dword [eax + 0xc], 2
mov dword [eax], 0
mov dword [eax + 8], esi
mov edx, dword [ebp + 0x18]
test edx, edx
je 0x48127c
mov dword [edx], eax
mov ebx, edi
mov dword [ebp + 0x18], eax
jmp 0x48053d
add edx, 1
movzx eax, byte [edx]
xor edi, 1
test al, al
jne 0x4807d3
jmp 0x4807f5
cmp dword [ebp + 0xa4], 1
je 0x47f38a
jmp 0x47f50d
cmp dword [ebp + 0xa4], 7
je 0x47f38a
jmp 0x47f50d
mov eax, dword [ebp + 0x10]
test byte [eax + 0xdc], 8
jne 0x481289
mov esi, dword [ebp + 0x58]
jmp 0x47fd06
mov dword [esp + 4], str.Application_reported_internal_error__closing_connection._n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov ebx, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov esi, dword [ebp + 0x1c]
test byte [ebx + 0xdd], 0x10
je 0x4811ec
test esi, esi
je 0x4808fd
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x480929
cmp byte [ebp + 0x94], 0
je 0x480929
mov edi, dword [esp + 0x24]
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
mov eax, dword [ebp + 0xa4]
jmp 0x47f504
mov dword [esp + 4], str.Application_reported_internal_error__closing_connection._n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov ebx, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov esi, dword [ebp + 0x1c]
test byte [ebx + 0xdd], 0x10
je 0x4811cd
test esi, esi
je 0x48098d
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x4809b9
cmp byte [ebp + 0x94], 0
je 0x4809b9
mov edi, dword [esp + 0x24]
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
mov eax, dword [ebp + 0xa4]
jmp 0x47f650
mov eax, dword [ebp + 0xb8]
mov esi, dword [ebp + 0xc0]
mov edx, dword [ebp + 0xbc]
mov edi, dword [ebp + 0xc4]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
mov eax, esi
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x2c]
or eax, edi
setne byte [esp + 0x38]
xor ecx, esi
mov eax, ecx
xor edx, edi
or eax, edx
sete cl
test byte [esp + 0x38], cl
je 0x480a1b
cmp ebx, 1
ja 0x4815a5
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
cmp edi, edx
jb 0x480e88
ja 0x480a35
cmp esi, eax
jb 0x480e88
test ebx, ebx
je 0x480754
mov edi, dword [esp + 0x34]
movzx eax, byte [edi]
cmp al, 0xd
sete cl
cmp al, 0xa
sete dl
or cl, dl
jne 0x4816c0
cmp al, 0x3b
je 0x4816c0
cmp ebx, 1
jbe 0x481756
movzx eax, byte [edi + 1]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4816a6
cmp al, 0x3b
je 0x4816a6
cmp ebx, 2
je 0x481778
movzx eax, byte [edi + 2]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4816f0
cmp al, 0x3b
je 0x4816f0
cmp ebx, 3
je 0x481767
movzx eax, byte [edi + 3]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4816e4
cmp al, 0x3b
je 0x4816e4
cmp ebx, 4
je 0x481745
movzx eax, byte [edi + 4]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4816d8
cmp al, 0x3b
je 0x4816d8
cmp ebx, 5
je 0x481734
movzx eax, byte [edi + 5]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4816cc
cmp al, 0x3b
je 0x4816cc
cmp ebx, 6
je 0x481708
movzx eax, byte [edi + 6]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4816fc
cmp al, 0x3b
je 0x4816fc
cmp ebx, 7
je 0x481798
movzx eax, byte [edi + 7]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x481789
cmp al, 0x3b
je 0x481789
cmp ebx, 8
je 0x4817d8
movzx eax, byte [edi + 8]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4817c9
cmp al, 0x3b
je 0x4817c9
cmp ebx, 9
je 0x4817b8
movzx eax, byte [edi + 9]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4817a9
cmp al, 0x3b
je 0x4817a9
cmp ebx, 0xa
je 0x481825
movzx eax, byte [edi + 0xa]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x481816
cmp al, 0x3b
je 0x481816
cmp ebx, 0xb
je 0x481847
movzx eax, byte [edi + 0xb]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x481807
cmp al, 0x3b
je 0x481807
cmp ebx, 0xc
je 0x481836
movzx eax, byte [edi + 0xc]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4817f8
cmp al, 0x3b
je 0x4817f8
cmp ebx, 0xd
je 0x481871
movzx eax, byte [edi + 0xd]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x4817e9
cmp al, 0x3b
je 0x4817e9
cmp ebx, 0xe
je 0x4813d1
movzx eax, byte [edi + 0xe]
cmp al, 0xa
sete cl
cmp al, 0xd
sete dl
or cl, dl
jne 0x481725
cmp al, 0x3b
je 0x481725
cmp ebx, 0xf
mov ecx, 0xf
mov esi, 0x10
je 0x4813db
movzx eax, byte [edi + 0xf]
cmp al, 0xd
sete cl
cmp al, 0xa
sete dl
or cl, dl
jne 0x481719
cmp al, 0x3b
je 0x481719
mov esi, 0x11
mov ecx, 0x10
mov eax, dword [esp + 0x34]
mov edi, ecx
cmp byte [eax + ecx], 0x3b
je 0x481676
cmp ebx, esi
ja 0x480cee
cmp ecx, 1
jne 0x480739
cmp ebx, 2
jne 0x480739
mov eax, dword [esp + 0x34]
cmp byte [eax], 0x30
jne 0x481867
cmp edi, 0x10
jne 0x4814fe
mov dword [esp + 4], str.Received_malformed_HTTP_request__bad_chunked_encoding_._Closing_connection._n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov dword [esp + 4], 1
mov dword [esp], ebp
call fcn.0047e180
jmp 0x480757
mov edx, eax
mov eax, ebp
call fcn.0047dbf0
test eax, eax
jne 0x4810fb
mov ecx, str._html__head__title_Request_malformed__title___head__body_Your_HTTP_request_was_syntactically_incorrect.__body___html_
mov edx, 0x190
mov eax, ebp
call fcn.00481890
jmp 0x47f397
mov dword [ebp + 0xa4], 2
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
call dword [sym.imp.WS2_32.dll_setsockopt]
sub esp, 0x14
cmp byte [ebp + 0xb0], 0
je 0x48120b
mov dword [ebp + 0xa4], 0xf
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov dword [ebx + 0x1c], ebp
jmp 0x47fab8
mov edx, dword [ebp + 0x10]
mov eax, 0x2000016
cmp dword [edx + 0x6c], 0x2000016
cmovbe eax, dword [edx + 0x6c]
mov ebx, eax
jmp 0x480dcf
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004889a0
test eax, eax
jne 0x481241
shr ebx, 1
cmp ebx, 0x7f
ja 0x480db0
mov dword [esp + 4], str.Closing_connection__out_of_memory__n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov ebx, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov esi, dword [ebp + 0x1c]
test byte [ebx + 0xdd], 0x10
je 0x481410
test esi, esi
je 0x480e23
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x480e4e
cmp byte [ebp + 0x94], 0
je 0x480e4e
lea edx, [ebp + 0x24]
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
mov eax, dword [ebp + 0x1c]
add eax, 0x1c
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
jmp 0x47f397
mov byte [edx], 0
lea edi, [edx + 1]
movzx ecx, byte [esi + 1]
jmp 0x4807f7
mov dword [esp + 4], str.Not_enough_memory_in_pool_to_parse_cookies__n
jmp 0x480798
sub eax, esi
sbb edx, edi
mov esi, eax
cmp edx, 0
ja 0x480780
cmp esi, ebx
ja 0x480780
xor eax, eax
cmp ebx, esi
seta al
mov dword [esp + 0x28], eax
jmp 0x480648
mov esi, dword [esp + 0x40]
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], 0x20
mov dword [esp], edi
mov dword [esp + 8], esi
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memchr
test eax, eax
je 0x4812c5
lea ebx, [eax + 1]
mov byte [eax], 0
mov dword [ebp + 0x2c], edi
mov edx, ebx
sub edx, edi
cmp byte [eax + 1], 0x20
je 0x480efc
jmp 0x480f00
add ebx, 1
mov edx, ebx
sub edx, edi
cmp byte [ebx], 0x20
jne 0x480f00
cmp esi, edx
ja 0x480ef0
cmp esi, edx
je 0x4813e2
lea eax, [edi + esi - 1]
movzx ecx, byte [eax]
cmp eax, ebx
mov byte [esp + 0x34], cl
seta cl
cmp byte [esp + 0x34], 0x20
mov edi, ecx
jne 0x480f4e
test cl, cl
je 0x480f4e
mov edi, edx
jmp 0x480f34
test dl, dl
je 0x480f44
sub eax, 1
movzx ecx, byte [eax]
cmp eax, ebx
seta dl
cmp cl, 0x20
je 0x480f30
mov byte [esp + 0x34], cl
mov ecx, edi
mov edi, edx
mov edx, ecx
cmp byte [esp + 0x34], 0x20
je 0x480f6c
mov ecx, edi
test cl, cl
jne 0x480f64
jmp 0x480f6c
cmp eax, ebx
jbe 0x480f6c
sub eax, 1
cmp byte [eax], 0x20
jne 0x480f60
cmp eax, ebx
jbe 0x48142f
lea edx, [eax + 1]
mov byte [eax], 0
sub eax, ebx
mov dword [ebp + 0x34], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x3f
mov dword [esp], ebx
call sub.msvcrt.dll_memchr
mov edx, eax
mov eax, dword [esp + 0x28]
mov edi, ebx
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x480fc9
mov esi, dword [esp + 0x28]
mov byte [ebp + 0x94], 1
mov dword [esp + 8], ebp
mov dword [esp + 4], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esi + 0x4c]
mov dword [esp], eax
call dword [esi + 0x48]
mov edx, dword [esp + 0x34]
mov dword [ebp + 0x24], eax
test edx, edx
je 0x480ff7
lea esi, [esp + 0x44]
lea eax, [edx + 1]
mov byte [edx], 0
mov dword [esp + 0xc], 0x481e50
mov dword [esp + 4], 8
mov dword [esp + 0x10], esi
mov dword [esp + 8], eax
mov dword [esp], ebp
call fcn.00488560
test edi, edi
je 0x481010
mov dword [esp + 8], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 4], ebp
mov eax, dword [edi + 0x54]
mov dword [esp], eax
call dword [edi + 0x50]
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0xa4], 1
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov ebx, dword [ebx + 8]
test ebx, ebx
je 0x47fc95
lea eax, [ebp + 0x70]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00488ef0
add eax, ebx
cmp eax, ebx
je 0x481052
cmp byte [eax], 0
je 0x47fc95
mov dword [ebp + 0x70], 0
mov dword [ebp + 0x74], 0
mov dword [esp + 4], str.Failed_to_parse__Content_Length_header._Closing_connection._n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov ebx, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov esi, dword [ebp + 0x1c]
test byte [ebx + 0xdd], 0x10
jne 0x4810b0
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
test esi, esi
je 0x4810c3
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x4810ef
cmp byte [ebp + 0x94], 0
je 0x4810ef
mov edi, dword [esp + 0x24]
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
jmp 0x47fc95
mov dword [ebp + 0xa4], 8
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov dword [ebp + 0x14], eax
mov dword [ebp + 0x18], eax
jmp 0x480532
mov dword [esp + 4], 0x548f8c
mov eax, dword [ebp + 0x2c]
mov dword [esp], eax
call fcn.00488ca0
test eax, eax
jne 0x47ff96
jmp 0x48039a
cmp eax, dword [esp + 0x28]
jbe 0x47f897
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esi + 8]
mov dword [esp], eax
call dword [esi + 0xc]
mov edi, eax
jmp 0x47f8e0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
add eax, esi
cmp byte [eax], 0x22
jne 0x480800
mov byte [eax], 0
lea eax, [esi + 2]
mov dword [esp + 0x28], eax
jmp 0x480800
mov dword [esp + 4], str.WARNING:_incomplete_upload_processing_and_connection_not_suspended_may_result_in_hung_connection._n
mov dword [esp], edx
call fcn.00488450
mov eax, dword [esp + 0x44]
jmp 0x4806f0
cmp dword [ebp + 0x30], 1
mov ecx, str._html__head__title_Request_too_big__title___head__body_Your_HTTP_header_was_too_big_for_the_memory_constraints_of_this_webserver.__body___html_
mov eax, ebp
sbb edx, edx
and edx, 0xffffffef
add edx, 0x1af
call fcn.00481890
jmp 0x47f3af
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
jmp 0x48097a
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
jmp 0x4808ea
mov dword [ebp + 0xa4], 0xd
movzx ecx, byte [ebp + 0xd4]
jmp 0x47f2d7
mov dword [ebx + 0x14], edx
jmp 0x480342
mov dword [ebx + 0x10], edx
jmp 0x480331
mov dword [ebx + 0xc], edx
jmp 0x47fa8c
mov dword [ebx + 8], edx
jmp 0x47fa7b
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x40], eax
mov edx, dword [esi + 0x3c]
or edx, dword [esi + 0x38]
jne 0x481858
mov dword [eax], 0xa0d30
mov eax, dword [ebp + 0x78]
mov edx, dword [ebp + 0x7c]
mov dword [ebp + 0x68], 3
mov dword [ebp + 0x64], 0
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], edx
lea esi, [esp + 0x44]
jmp 0x47f96f
mov dword [ebp + 0x14], eax
mov dword [ebp + 0x18], eax
mov ebx, edi
jmp 0x48053d
mov ecx, str._html__head__title_Internal_server_error__title___head__body_Please_ask_the_developer_of_this_Web_server_to_carefully_read_the_GNU_libmicrohttpd_documentation_about_connection_management_and_blocking.__body___html_
mov edx, 0x1f4
mov eax, ebp
call fcn.00481890
jmp 0x47f3af
mov eax, dword [ebp + 0x40]
jmp 0x481253
test eax, eax
je 0x48164e
mov dword [eax + 8], edx
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
test eax, eax
jne 0x47fa5a
mov dword [ebx + 0x24], edx
jmp 0x47fa5d
mov eax, dword [esp + 0x28]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov ebx, dword [ebp + 0x1c]
test byte [eax + 0xdd], 0x10
je 0x48162f
test ebx, ebx
je 0x481300
mov dword [ebp + 0x1c], 0
mov dword [esp], ebx
call sym.xmrig.exe_MHD_destroy_response
mov edi, dword [esp + 0x28]
mov eax, dword [edi + 0x38]
test eax, eax
je 0x47fea9
cmp byte [ebp + 0x94], 0
je 0x47fea9
mov esi, dword [esp + 0x24]
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov edx, dword [edi + 0x3c]
mov dword [esp], edx
call eax
jmp 0x47fea9
mov dword [ebp + 0xa4], 0xf
jmp 0x480e55
mov ebx, dword [ebp + 0x14]
test ebx, ebx
jne 0x481382
jmp 0x48038f
test eax, eax
je 0x481378
mov dword [esp + 4], eax
mov dword [esp], str.Expect
call fcn.00488ca0
test eax, eax
jne 0x481392
mov ebx, dword [ebx]
test ebx, ebx
je 0x48038f
test byte [ebx + 0xc], 1
je 0x481378
mov eax, dword [ebx + 4]
cmp eax, str.Expect
jne 0x481360
mov eax, dword [ebx + 8]
test eax, eax
je 0x48038f
mov dword [esp + 4], str.100_continue
mov dword [esp], eax
call fcn.00488ca0
test eax, eax
je 0x48038f
cmp dword [ebp + 0x80], 0x18
ja 0x48038f
mov dword [ebp + 0xa4], 5
jmp 0x47f67d
mov ecx, 0xe
mov esi, 0xf
mov edi, ecx
jmp 0x480ccb
mov eax, dword [esp + 0x28]
mov dword [ebp + 0x34], 0x548f90
xor edi, edi
xor edx, edx
mov ebx, 0x548f90
mov esi, dword [eax + 0x48]
test esi, esi
jne 0x480fa2
jmp 0x481010
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
jmp 0x480e10
sub esi, edx
mov dword [ebp + 0x34], 0x548f90
mov dword [esp + 4], 0x3f
mov dword [esp + 8], esi
mov dword [esp], ebx
call sub.msvcrt.dll_memchr
mov edx, eax
jmp 0x480f95
mov dword [ebx + 0x28], edx
jmp 0x47fa4c
mov dword [ebx + 0x2c], edx
jmp 0x47fa5d
mov dword [esp + 4], str.Application_reported_internal_error__closing_connection._n
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.00488450
mov ebx, dword [ebp + 0x10]
mov dword [ebp + 0xa4], 0x13
mov dword [ebp + 0xa8], 3
mov esi, dword [ebp + 0x1c]
test byte [ebx + 0xdd], 0x10
jne 0x4814b3
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
test esi, esi
je 0x4814c6
mov dword [ebp + 0x1c], 0
mov dword [esp], esi
call sym.xmrig.exe_MHD_destroy_response
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x4814f2
cmp byte [ebp + 0x94], 0
je 0x4814f2
mov edi, dword [esp + 0x24]
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov edx, dword [ebx + 0x3c]
mov dword [esp], edx
call eax
mov byte [ebp + 0x94], 0
jmp 0x480757
lea eax, [ebp + 0xb8]
mov dword [esp + 4], edi
mov dword [esp + 0x28], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00489260
cmp eax, edi
jne 0x480cf7
mov eax, dword [esp + 0x34]
add eax, esi
cmp ebx, esi
jbe 0x481547
movzx edx, byte [eax]
mov ecx, dword [esp + 0x28]
cmp dl, 0xd
je 0x481621
cmp dl, 0xa
je 0x481621
sub ebx, esi
mov dword [ebp + 0xc0], 0
mov dword [ebp + 0xc4], 0
mov edx, dword [ebp + 0xb8]
mov ecx, dword [ebp + 0xbc]
je 0x48158a
or ecx, edx
jne 0x481656
mov dword [ebp + 0x70], 0
mov dword [ebp + 0x74], 0
mov dword [esp + 0x34], eax
jmp 0x480739
or ecx, edx
jne 0x480754
mov dword [ebp + 0x70], 0
mov dword [ebp + 0x74], 0
jmp 0x480754
mov eax, dword [esp + 0x34]
movzx eax, byte [eax]
cmp al, 0xd
je 0x4815b8
cmp al, 0xa
jne 0x480cf7
mov eax, dword [esp + 0x34]
movzx eax, byte [eax + 1]
cmp al, 0xd
je 0x48166c
cmp al, 0xa
je 0x48166c
mov eax, 1
sub ebx, eax
add dword [esp + 0x34], eax
mov dword [ebp + 0xc0], 0
mov dword [ebp + 0xc4], 0
mov dword [ebp + 0xb8], 0
mov dword [ebp + 0xbc], 0
jmp 0x480a35
mov eax, dword [ebp + 0x78]
mov edx, dword [ebp + 0x7c]
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], edx
mov dword [esp + 4], str.Closing_connection__application_error_generating_response__n
jmp 0x480dde
mov eax, dword [esp + 0x34]
lea esi, [ecx + 2]
add eax, esi
jmp 0x481547
mov dword [esp + 4], 1
mov eax, dword [ebp + 0x98]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_shutdown]
sub esp, 8
jmp 0x4812ed
mov dword [ebx + 0x20], edx
jmp 0x4812af
movzx ecx, byte [ebp + 0xb0]
mov esi, dword [ebp + 0x70]
mov edi, dword [ebp + 0x74]
mov dword [esp + 0x34], eax
jmp 0x480600
mov eax, 2
jmp 0x4815d5
cmp ecx, ebx
jae 0x4813db
mov edx, eax
jmp 0x48168e
movzx eax, byte [edx + ecx]
cmp al, 0xd
je 0x481697
cmp al, 0xa
je 0x481697
mov esi, ecx
add ecx, 1
cmp ecx, ebx
jb 0x481682
add esi, 2
jmp 0x480ccb
mov esi, eax
jmp 0x47fd06
mov esi, 2
mov ecx, 1
cmp al, 0x3b
jne 0x4813db
mov edi, ecx
mov edx, dword [esp + 0x34]
jmp 0x48168e
mov esi, 1
xor ecx, ecx
jmp 0x480cbb
mov esi, 6
mov ecx, 5
jmp 0x4816b0
mov esi, 5
mov ecx, 4
jmp 0x4816b0
mov esi, 4
mov ecx, 3
jmp 0x4816b0
mov esi, 3
mov ecx, 2
jmp 0x4816b0
mov esi, 7
mov ecx, 6
jmp 0x4816b0
mov ecx, 6
mov esi, 7
mov edi, ecx
jmp 0x480ccb
mov esi, 0x10
mov ecx, 0xf
jmp 0x4816b0
mov esi, 0xf
mov ecx, 0xe
jmp 0x4816b0
mov ecx, 5
mov esi, 6
mov edi, ecx
jmp 0x480ccb
mov ecx, 4
mov esi, 5
mov edi, ecx
jmp 0x480ccb
mov ecx, 1
mov esi, 2
mov edi, ecx
jmp 0x480ccb
mov ecx, 3
mov esi, 4
mov edi, ecx
jmp 0x480ccb
mov ecx, 2
mov esi, 3
mov edi, ecx
jmp 0x480ccb
mov esi, 8
mov ecx, 7
jmp 0x4816b0
mov ecx, 7
mov esi, 8
mov edi, ecx
jmp 0x480ccb
mov esi, 0xa
mov ecx, 9
jmp 0x4816b0
mov ecx, 9
mov esi, 0xa
mov edi, ecx
jmp 0x480ccb
mov esi, 9
mov ecx, 8
jmp 0x4816b0
mov ecx, 8
mov esi, 9
mov edi, ecx
jmp 0x480ccb
mov esi, 0xe
mov ecx, 0xd
jmp 0x4816b0
mov esi, 0xd
mov ecx, 0xc
jmp 0x4816b0
mov esi, 0xc
mov ecx, 0xb
jmp 0x4816b0
mov esi, 0xb
mov ecx, 0xa
jmp 0x4816b0
mov ecx, 0xa
mov esi, 0xb
mov edi, ecx
jmp 0x480ccb
mov ecx, 0xc
mov esi, 0xd
mov edi, ecx
jmp 0x480ccb
mov ecx, 0xb
mov esi, 0xc
mov edi, ecx
jmp 0x480ccb
mov eax, dword [ebp + 0x78]
mov ecx, dword [ebp + 0x7c]
mov dword [esp + 0x28], eax
jmp 0x47f86e
mov ebx, 2
jmp 0x48073d
mov ecx, 0xd
mov esi, 0xe
mov edi, ecx
jmp 0x480ccb