Function at 0x407840
Capabilities:
Create thread

Disassembly:
push esi
mov dword [edi], eax
call fcn.004c73f0
push str.MARKAN.SK10317_6B5S7G9Wp7C7
push eax
mov dword [edi + 4], eax
call fcn.004c7630
add esp, 8
mov dword [edi + 0xc], eax
cmp eax, 1
je 0x40789d
mov ecx, dword [edi + 4]
push ecx
call fcn.004c7470
add esp, 4
push eax
push 0x6cfd00
push 0xe3
push str..CXHRSock.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.CXHRSOCK::StartXHRSock
call fcn.00401070
mov edx, dword [edi + 4]
push edx
call fcn.004c7400
add esp, 0x10
pop esi
ret
cmp dword [edi + 0x122c], 0
push ebx
push ebp
mov ebp, dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
je 0x407a2c
call fcn.004c7660
lea ecx, [edi + 0x1124]
push ecx
lea edx, [edi + 0x1020]
push edx
push eax
mov dword [edi + 0x10], eax
call fcn.004c7700
add esp, 0xc
mov dword [edi + 0xc], eax
cmp eax, 1
mov eax, dword [edi + 0x10]
push eax
je 0x4078fc
call fcn.004c7470
add esp, 4
push eax
push 0x6cfd00
push 0xee
push str..CXHRSock.cpp
call ebp
jmp 0x4079fb
call fcn.004c7670
add esp, 4
mov ebx, eax
push ebx
push str.PFX_contains__d_certificates
push 0xf6
push str..CXHRSock.cpp
call ebp
mov ecx, eax
mov esi, str.CXHRSOCK::StartXHRSock
call fcn.00401070
add esp, 0xc
test ebx, ebx
jne 0x40793b
mov ecx, dword [edi + 0x10]
push ecx
call fcn.004c7400
add esp, 4
pop ebp
pop ebx
pop esi
ret
xor esi, esi
add ebx, 0xffffffff
js 0x407964
mov edx, dword [edi + 0x10]
push esi
push edx
call fcn.004c76d0
add esp, 8
mov dword [edi + 0x14], eax
test eax, eax
je 0x40795f
push eax
call fcn.004c7400
add esp, 4
inc esi
cmp esi, ebx
jle 0x407942
mov eax, dword [edi + 0x10]
push str.127.0.0.1
push eax
call fcn.004c76a0
add esp, 8
mov dword [edi + 0x14], eax
test eax, eax
jne 0x4079bf
mov ecx, dword [edi + 0x10]
push ecx
call fcn.004c7470
add esp, 4
push eax
push 0x6cfd00
push 0x10b
push str..CXHRSock.cpp
call ebp
mov ecx, eax
mov esi, str.CXHRSOCK::StartXHRSock
call fcn.00401070
mov edx, dword [edi + 4]
push edx
call fcn.004c7400
mov eax, dword [edi + 0x10]
push eax
call fcn.004c7400
add esp, 0x14
pop ebp
pop ebx
pop esi
ret
mov ecx, dword [edi + 4]
push eax
push ecx
call fcn.004c7590
add esp, 8
mov dword [edi + 0xc], eax
cmp eax, 1
je 0x407a20
mov edx, dword [edi + 0x14]
push edx
call fcn.004c7400
mov eax, dword [edi + 4]
push eax
call fcn.004c7470
add esp, 8
push eax
push 0x6cfd00
push 0x114
push str..CXHRSock.cpp
call ebp
mov ecx, eax
mov esi, str.CXHRSOCK::StartXHRSock
call fcn.00401070
mov ecx, dword [edi + 4]
push ecx
call fcn.004c7400
mov edx, dword [edi + 0x10]
push edx
call fcn.004c7400
add esp, 0x14
pop ebp
pop ebx
pop esi
ret
mov eax, dword [edi + 0x14]
push eax
call fcn.004c7400
add esp, 4
mov ecx, dword [edi + 4]
push str.127.0.0.1
push ecx
call fcn.004c7440
mov edx, dword [edi + 0x18]
mov eax, dword [edi]
mov ecx, dword [edi + 4]
push edx
push eax
push ecx
call fcn.004c7520
mov edx, dword [edi + 4]
add esp, 0x14
mov dword [edi + 0xc], eax
cmp eax, 1
je 0x407a98
push edx
call fcn.004c7470
add esp, 4
push eax
push 0x6cfd00
push 0x121
push str..CXHRSock.cpp
call ebp
mov ecx, eax
mov esi, str.CXHRSOCK::StartXHRSock
call fcn.00401070
mov eax, dword [edi + 4]
push eax
call fcn.004c7400
mov ecx, dword [edi + 0x10]
push ecx
call fcn.004c7400
add esp, 0x14
pop ebp
pop ebx
pop esi
ret
push 0x2710
push edx
call fcn.004c7490
mov eax, dword [edi + 4]
push 0x2710
push eax
call fcn.004c74c0
add esp, 0x10
cmp dword [edi + 0x1228], 0
jne 0x407b6f
mov ebx, dword [sym.imp.WS2_32.dll_WSAGetLastError]
jmp 0x407ad0
push 0x1000
lea eax, [edi + 0x20]
push 0
push eax
call sub.MSVCR90.dll_memset
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 4]
push ecx
push edx
call fcn.004c74f0
add esp, 0x14
mov dword [edi + 8], eax
test eax, eax
jne 0x407b45
mov eax, dword [edi + 4]
push eax
call ebx
push eax
push str.__d_____d_
push 0x130
push str..CXHRSock.cpp
call ebp
mov ecx, eax
mov esi, str.CXHRSOCK::StartXHRSock
call fcn.00401070
mov ecx, dword [edi + 4]
push ecx
call fcn.004c7470
add esp, 0x14
push eax
push 0x6cfd00
push 0x131
push str..CXHRSock.cpp
call ebp
mov ecx, eax
call fcn.00401070
add esp, 0xc
jmp 0x407b62
push 0
push 0
push eax
push 0x4071d0
push 0
push 0
call sub.MSVCR90.dll__beginthreadex
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [edi + 0x1228], 0
je 0x407ad0
mov edx, dword [edi + 4]
push edx
call fcn.004c7400
add esp, 4
cmp dword [edi + 0x122c], 0
je 0x407b90
mov eax, dword [edi + 0x10]
push eax
call fcn.004c7400
add esp, 4
pop ebp
pop ebx
pop esi
ret