Function at 0x40f8c2
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Delete file
Get file size
Get local ipv4 addresses
Get socket information
Move file
Send data
Send data on socket
Send http request

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x74]
push ebx
mov ebx, ecx
sub esp, 0xd4
mov eax, dword [0x42e650]
mov dword [ecx + 0x38], eax
mov ecx, 0x5c
mov dword [ebp - 0xb0], eax
xor eax, eax
test edi, edi
je 0x40f8f1
jecxz 0x40f8f1
cld
rep stosb byte es:[edi], al
mov eax, dword [ebx + 0x40]
mov dword [ebp - 0x9c], eax
add eax, 0x4000
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x4400
mov dword [ebx + 0x54], eax
push str.:_NO_CACHE_r_n
push dword [ebp - 0x9c]
call fcn.004034dd
add esp, 0x10
mov esi, eax
test eax, eax
jne 0x40f943
push ecx
push ecx
push str._nCACHE_CONTROL:
push dword [ebp - 0x9c]
call fcn.004034dd
add esp, 0x10
mov esi, eax
push eax
push eax
push str.Authorization
push dword [ebp - 0x9c]
call fcn.0040f867
mov dword [ebp - 0xc0], eax
pop eax
pop edx
push str.If_modified_since
push dword [ebp - 0x9c]
call fcn.0040f867
add esp, 0x10
mov dword [ebp - 0xc8], eax
test byte [0x46c97f], 0x10
je 0x40f997
push eax
push eax
push str._nCookie
push dword [ebp - 0x9c]
call fcn.004034dd
add esp, 0x10
mov dword [ebp - 0x1c], eax
push eax
push eax
push str._nProxy_Authorization:
push dword [ebp - 0x9c]
call fcn.004034dd
add esp, 0x10
mov edi, eax
test eax, eax
je 0x40fa27
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
sub esp, 0xc
mov dword [eax + 0x4400], 0x4403c1
lea eax, [edi + 0x16]
mov dword [ecx + 0x4404], eax
mov eax, ecx
mov ecx, ebx
add eax, 0x4418
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
call fcn.004078c4
mov dword [ebp - 0x34], eax
add esp, 0xc
test eax, eax
je 0x40fa0e
push ebx
push dword [ebp - 0x94]
push 0x10
push eax
call fcn.00411e0c
add esp, 0x10
mov dword [ebp - 0x3c], eax
push eax
lea eax, [edi + 1]
push dword [ebx + 0x60]
push dword [ebp - 0x9c]
push eax
call fcn.0041365b
add esp, 0x10
mov dword [ebx + 0x60], eax
test byte [0x46c97b], 0x40
je 0x40fa80
cmp dword [ebp - 0x3c], 0
jne 0x40fa80
mov eax, dword [0x46c980]
mov dword [ebx + 0x6c], 0
bt eax, 0x14
jb 0x40fa51
test byte [0x46c97c], 0x80
jne 0x40fa75
bt eax, 0x15
jae 0x40fa75
test byte [ebx + 0x35], 8
jne 0x40fa75
sub esp, 0xc
push dword [ebp - 0x9c]
mov ecx, ebx
call fcn.00408afc
add esp, 0xc
jmp 0x41126e
push esi
push esi
push 0x65
push str.HTTP_1.1_407_deny_r_nProxy_Authenticate:_Basic_realm_Proxy__r_nContent_Type:_text_plain_r_n_r_nAccess_denyed
jmp 0x40fae5
mov eax, dword [ebp - 0x9c]
add eax, 6
test byte [0x46c97e], 0x80
je 0x40faa7
push ecx
push ecx
push dword [ebp - 0xa0]
push eax
call fcn.0040f39e
add esp, 0x10
mov edi, eax
jmp 0x40fab6
push edx
push edx
push 0x20
push eax
call fcn.0040ecec
add esp, 0x10
mov edi, eax
cmp dword [0x46ce14], 0
je 0x40faf1
push eax
push eax
lea eax, [ebx + 0x88]
push eax
push edi
call fcn.0040f755
add esp, 0x10
test eax, eax
je 0x40faf1
mov dword [ebx + 0x6c], 0
push esi
push esi
push 0x4d
push str.HTTP_1.1_400_deny_r_n_r_nContent_Type:_text_html_r_n_r_n_h1_Virus._Access_denyed__h1_
mov ecx, ebx
call fcn.0042d3ac
jmp 0x40fce0
cmp dword [0x46c884], 0
je 0x40fbbc
mov dword [ebx + 0x5c], 0
mov dword [ebp - 0x88], 0
mov eax, dword [0x46c98c]
inc dword [0x46cd50]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], eax
mov eax, dword [0x46c75c]
mov dword [ebp - 0xc4], eax
xor eax, eax
cmp dword [ebp - 0xac], eax
jle 0x40fb74
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + eax*4]
cmp edx, 1
jbe 0x40fb71
mov ecx, dword [edx + 0x34]
and ecx, 0xf0000
cmp ecx, 0x10000
jne 0x40fb71
mov ecx, dword [ebx + 0x14]
cmp dword [edx + 0x14], ecx
jne 0x40fb71
cmp dword [edx + 0x5c], edi
jne 0x40fb71
inc dword [ebp - 0xa8]
inc eax
jmp 0x40fb37
call fcn.0040aabb
mov eax, dword [ebp - 0xa8]
cmp dword [0x46c884], eax
jg 0x40fbbc
push ecx
push dword [ebx]
push 1
push 1
call fcn.0040bd38
add esp, 0x10
test eax, eax
jne 0x41123f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp eax, dword [0x42e650]
jle 0x40fb0f
jmp 0x41123f
cmp dword [0x42e594], 0
mov dword [ebx + 0x5c], edi
je 0x40fbf4
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xbc], eax
test byte [0x46c97e], 0x80
jne 0x40fbf4
push edx
push edi
push dword [ebp - 0x9c]
push eax
call fcn.0040f4dc
inc dword [ebp - 0x4c]
add esp, 0x10
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x60]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xac]
mov dword [ebp - 0x94], eax
push eax
push eax
push str.HOST
push dword [ebp - 0x9c]
call fcn.0040f867
add esp, 0x10
mov dword [ebp - 0xa8], eax
test eax, eax
jne 0x40fc79
push eax
push eax
push str.tp:__
push dword [ebp - 0x9c]
call fcn.004034b9
mov ecx, dword [ebp - 0x9c]
add esp, 0x10
add ecx, 8
mov dword [ebp - 0xa8], ecx
test eax, eax
je 0x40fc5f
add eax, 5
mov dword [ebp - 0xa8], eax
push eax
push eax
push 0x4404be
push dword [ebp - 0xa8]
call fcn.00403442
add esp, 0x10
mov dword [ebp - 0x2c], eax
jmp 0x40fcaa
push eax
push eax
push 0xd
push dword [ebp - 0xa8]
call fcn.004033de
add esp, 0x10
mov dword [ebp - 0x30], eax
test eax, eax
je 0x411121
mov edx, eax
sub edx, dword [ebp - 0xa8]
cmp edx, 0x40
ja 0x411121
mov byte [eax], 0
push eax
push dword [ebp - 0x30]
push dword [0x42e4b4]
push dword [ebp - 0xa8]
call fcn.0040f340
add esp, 0x10
test eax, eax
je 0x40fce7
mov dword [ebx + 0x6c], 0
mov ecx, ebx
push edi
push edi
push 0x190
push str.Access_denied
call fcn.0040b170
pop ebx
pop esi
jmp 0x41126e
mov eax, dword [0x46cb44]
test eax, eax
je 0x40fd14
cmp byte [eax], 0
je 0x40fd14
push ecx
push dword [ebp - 0x30]
push dword [0x42e4b0]
push dword [ebp - 0xa8]
call fcn.0040f340
add esp, 0x10
test eax, eax
jne 0x40fd14
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0
jne 0x40fd63
mov dword [ebp - 0xb8], 0x50
mov eax, dword [ebp - 0x9c]
cmp dword [eax + 4], 0x3a707466
jne 0x40fd63
push edx
push edx
push 0x4404d0
push eax
mov dword [ebp - 0x60], 0xffffffff
call fcn.004034b9
add esp, 0x10
mov dword [ebp - 0xb8], 0x15
test eax, eax
jne 0x40ff58
mov dword [ebx + 0x6c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [eax], 0x20544547
jne 0x40fe96
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0xa8]
cmp eax, 0xfe
jg 0x40fe96
or esi, dword [ebp - 0xc8]
jne 0x40fe96
cmp dword [ebp - 0x1c], 0
jne 0x40fe96
cmp dword [0x42e594], 0
je 0x40fe96
push esi
push esi
push 0
push dword [ebp - 0xa0]
call fcn.0040357d
pop edx
pop ecx
mov dword [ebp - 0x70], eax
test eax, eax
js 0x40fdf4
push edi
push edi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
pop edx
pop ecx
test eax, eax
jne 0x410972
sub esp, 0xc
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x70], 0
add esp, 0xc
jmp 0x40fe96
test byte [0x46c97e], 0x80
jne 0x40fe0b
test byte [0x46c97d], 4
jne 0x40fe52
jmp 0x40fe96
cmp dword [ebp - 0x4c], 0
jne 0x40fdfd
mov eax, dword [ebp - 0x9c]
push edx
push edi
lea esi, [eax + 0x4200]
push eax
push esi
call fcn.0040f4dc
pop ecx
push dword [ebp - 0xa0]
mov dword [ebp - 0x50], eax
inc dword [ebp - 0x4c]
call fcn.0040f544
pop eax
pop edx
push dword [ebp - 0xa0]
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileA]
pop ecx
pop esi
test eax, eax
je 0x40fdfd
jmp 0x40fdac
cmp dword [ebp - 0x50], 0
je 0x40fe96
mov eax, dword [ebp - 0x9c]
push edi
push dword [0x42e594]
lea esi, [eax + 0x4200]
push str._s_8.8X.asi
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
pop eax
pop edx
mov dword [ebp - 0x50], 0
push dword [ebp - 0xa0]
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileA]
pop ecx
test eax, eax
pop esi
jmp 0x40fda6
cmp dword [ebp - 0x20], 0
je 0x40ff58
mov eax, dword [0x46cb44]
mov dword [ebp - 0xa8], eax
mov eax, dword [0x42e684]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x46cb60]
test eax, eax
je 0x40ff58
sub esp, 0xc
push eax
call fcn.0042d208
mov edi, dword [ebp - 0x9c]
add esp, 0xc
push eax
add edi, 0x4200
push dword [0x46cb60]
push edi
call fcn.0041251f
mov edx, edi
add esp, 0x10
sub edx, eax
mov eax, dword [ebp - 0x9c]
lea esi, [eax + edx - 0x1d]
mov dword [ebp - 0x90], esi
mov eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x90]
mov al, byte [eax]
cmp al, 0xa
je 0x40ff31
test al, al
je 0x40ff31
lea eax, [edx + 1]
inc dword [ebp - 0x9c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x9c]
mov al, byte [eax - 1]
mov byte [edx], al
jmp 0x40feff
push ecx
push edi
push str._nProxy_Authorization:_Basic__s_r
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp - 0x90]
add dword [ebp - 0xac], eax
mov dword [ebp - 0x9c], esi
mov byte [edx + eax], 0xa
add esp, 0x10
mov eax, dword [ebp - 0xa8]
cmp byte [eax], 0x5b
jne 0x40ff89
push edx
push edx
push 0x4404f3
push eax
call fcn.004034b9
add esp, 0x10
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x41002f
inc dword [ebp - 0xa4]
jmp 0x40fff8
push eax
push eax
push 0x3a
push dword [ebp - 0xa8]
call fcn.004033de
add esp, 0x10
mov dword [ebp - 0xa4], eax
test eax, eax
jne 0x40fff8
mov eax, dword [ebp - 0x9c]
lea esi, [eax + 0xb]
push eax
push eax
push 0x3a
push esi
call fcn.004033de
add esp, 0x10
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x41002f
push eax
push eax
push 0x2f
push esi
call fcn.004033de
add esp, 0x10
cmp dword [ebp - 0xa4], eax
jae 0x41002f
cmp dword [ebp - 0xb8], 0x15
jne 0x40fff8
push edi
push edi
push 0x40
push esi
call fcn.004033de
add esp, 0x10
cmp dword [ebp - 0xa4], eax
jbe 0x41002f
mov eax, dword [ebp - 0xa4]
sub esp, 0xc
mov byte [eax], 0
inc eax
push eax
call fcn.004123ba
add esp, 0x10
cmp dword [0x42e68c], eax
je 0x411121
test eax, eax
je 0x41002f
cmp dword [ebp - 0x20], 0
cmovne eax, dword [ebp - 0xb8]
mov dword [ebp - 0xb8], eax
push ecx
push ecx
push 0x20
push dword [ebp - 0xa8]
call fcn.0040ecec
add esp, 0x10
mov edi, eax
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x410056
movsx ecx, byte [eax]
mov byte [eax], 0
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebx + 0x50]
mov dword [ebp - 0x74], eax
test eax, eax
jle 0x410085
cmp dword [ebx + 0x48], edi
jne 0x410077
push edx
push eax
push 0
push 0
call fcn.0040bd38
add esp, 0x10
test eax, eax
je 0x4100ee
sub esp, 0xc
push dword [ebp - 0x74]
call fcn.0040be6c
add esp, 0x10
mov dword [ebx + 0x50], 0
mov ecx, ebx
call fcn.0040b1f8
push esi
push esi
push dword [ebp - 0xb8]
push dword [ebp - 0xa8]
call fcn.0040edf0
add esp, 0x10
mov dword [ebp - 0x74], eax
test eax, eax
jle 0x411121
mov dword [ebx + 0x50], eax
push edx
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
inc dword [ebp - 0x28]
mov dword [ebp - 0x88], 0x10
push eax
call dword [sym.imp.WS2_32.dll_getsockname]
mov eax, dword [ebp - 0x80]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x58], eax
movzx eax, word [ebp - 0x82]
mov dword [ebx + 0x4c], eax
pop ecx
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4100fd
mov cl, byte [ebp - 0xb4]
mov byte [eax], cl
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x410107
mov byte [eax], 0xd
cmp dword [ebp - 0xa4], 0
je 0x410119
mov eax, dword [ebp - 0xa4]
mov byte [eax], 0x3a
cmp dword [ebp - 0x20], 0
jne 0x410827
cmp dword [ebp - 0x60], 0
je 0x41077a
push eax
push eax
push 0x40
push dword [ebp - 0x9c]
call fcn.004033de
mov edi, dword [ebp - 0x9c]
add esp, 0x10
mov dword [ebp - 0x8c], eax
add edi, 0xa
test eax, eax
je 0x41018d
mov byte [eax], 0
mov eax, dword [ebp - 0x8c]
lea esi, [eax + 1]
push eax
push eax
push 0x3a
push edi
call fcn.004033de
add esp, 0x10
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x410181
mov byte [eax], 0
inc eax
mov dword [ebp - 0x90], eax
jmp 0x41019e
mov dword [ebp - 0x90], str.shs_
jmp 0x41019e
mov dword [ebp - 0x90], str.shs_
mov esi, edi
mov edi, str.anonymous
cmp dword [ebp - 0xc0], 0
je 0x4101e1
mov eax, dword [ebp - 0xa0]
mov edi, dword [ebp - 0xc0]
sub esp, 0xc
mov ecx, ebx
mov dword [eax + 0x404], edi
add eax, 0x418
mov dword [eax - 0x18], 0x4403c1
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
call fcn.004078c4
mov edi, eax
add esp, 0xc
push eax
push eax
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
add esp, 0x10
cmp eax, 0x12b
jbe 0x410216
cmp dword [ebp - 0x24], 0
jne 0x411151
push eax
push eax
push 0x190
push str.Error._Cant_send_request...
jmp 0x411148
mov edx, dword [sym.imp.USER32.dll_wsprintfA]
push ecx
push edi
mov dword [ebp - 0xcc], edx
push str.USER__s_r_n
push dword [ebp - 0x94]
call edx
push 0
push eax
mov eax, dword [sym.imp.WS2_32.dll_send]
push dword [ebp - 0x94]
mov dword [ebp - 0xc4], eax
push dword [ebp - 0x74]
call eax
add dword [ebp - 0x64], eax
pop edi
pop eax
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
add esp, 0x10
mov edi, eax
cmp eax, 0xe6
je 0x4102dd
cmp eax, 0x14b
mov edx, dword [ebp - 0xcc]
jne 0x4101fb
push eax
push dword [ebp - 0x90]
push str.PASS__s_r_n
push dword [ebp - 0x94]
call edx
push 0
push eax
mov eax, dword [ebp - 0xc4]
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call eax
add dword [ebp - 0x64], eax
pop eax
pop edx
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
mov ecx, 0x64
add esp, 0x10
cdq
idiv ecx
cmp eax, 2
jbe 0x4102dd
sub esp, 0xc
push dword [0x432990]
call fcn.0042d208
pop edx
pop ecx
push eax
push dword [0x432990]
jmp 0x411133
mov eax, dword [ebp - 0x94]
cmp byte [eax + 3], 0x2d
jne 0x4102f7
sub esp, 0xc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0xc
push 0
push 8
push str.TYPE_I_r_n
push dword [ebp - 0x74]
call dword [sym.imp.WS2_32.dll_send]
add dword [ebp - 0x64], eax
push eax
push eax
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
mov eax, dword [ebp - 0x8c]
add esp, 0x10
test eax, eax
je 0x41033e
cmp dword [ebp - 0xa4], 0
mov byte [eax], 0x40
je 0x41033e
mov eax, dword [ebp - 0xa4]
mov byte [eax], 0x3a
push eax
push eax
push 0x20
push esi
call fcn.004033de
add esp, 0x10
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x4101fb
mov byte [eax], 0
push ecx
push ecx
push 0x2f
push esi
call fcn.004033de
add esp, 0x10
mov dword [ebp - 0x90], eax
test eax, eax
je 0x4101fb
sub esp, 0xc
push eax
call fcn.0040f21f
mov eax, dword [ebp - 0xa4]
add esp, 0x10
cmp byte [eax - 1], 0x2f
je 0x410402
push esi
push dword [ebp - 0x90]
push str.SIZE__s_r_n
push dword [ebp - 0x94]
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
push eax
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call dword [sym.imp.WS2_32.dll_send]
add dword [ebp - 0x64], eax
pop eax
pop edx
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
add esp, 0x10
cmp eax, 0xd5
jne 0x410402
mov eax, dword [ebp - 0x94]
add eax, 3
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cmp byte [eax], 0x20
jne 0x4103f3
inc eax
jmp 0x4103df
sub esp, 0xc
push eax
call fcn.004123ba
add esp, 0x10
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x24], 0
jne 0x410443
mov eax, dword [sym.imp.WS2_32.dll_send]
push 0
push 6
mov dword [ebp - 0xc4], eax
push 0x44051d
push dword [ebp - 0x74]
call eax
add dword [ebp - 0x64], eax
push ecx
push ecx
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
add esp, 0x10
cmp eax, 0xe3
je 0x41048c
jmp 0x4101fb
push esi
push dword [ebp - 0x68]
push str.REST__u_r_n
push dword [ebp - 0x94]
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
push eax
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call dword [sym.imp.WS2_32.dll_send]
add dword [ebp - 0x64], eax
pop eax
pop edx
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
add esp, 0x10
cmp eax, 0x190
jbe 0x410408
jmp 0x4101fb
push ecx
push ecx
push 0x28
push dword [ebp - 0x94]
call fcn.004033de
add esp, 0x10
test eax, eax
jne 0x4104b1
mov dword [ebp - 0x8c], 0
jmp 0x4101fb
sub esp, 0xc
lea esi, [ebp - 0x8c]
inc eax
push esi
mov dword [ebp - 0x8c], eax
call fcn.004125ec
mov dword [esp], esi
inc dword [ebp - 0x8c]
mov dword [ebp - 0x80], eax
call fcn.004124dc
mov word [ebp - 0x82], ax
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [esp], eax
mov dword [ebp - 0x8c], eax
call fcn.004123ba
add esp, 0xc
mov edx, str.RETR__s_r_n
shl eax, 8
or word [ebp - 0x82], ax
mov eax, dword [ebp - 0xa4]
cmp byte [eax - 1], 0x2f
mov eax, str.LIST__s_r_n
push dword [ebp - 0x90]
cmovne eax, edx
push eax
push dword [ebp - 0x94]
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
push eax
mov eax, dword [ebp - 0xc4]
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call eax
add dword [ebp - 0x64], eax
add esp, 0xc
push 6
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x60], eax
pop edx
test eax, eax
jle 0x4101fb
mov word [ebp - 0x84], 2
sub esp, 0xc
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
push eax
push eax
lea eax, [ebp - 0x84]
push 0x10
push eax
push dword [ebp - 0x60]
call dword [sym.imp.WS2_32.dll_connect]
add esp, 0x14
test eax, eax
js 0x4105c2
push eax
push eax
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f1ed
add esp, 0x10
sub eax, 0x64
cmp eax, 0x63
ja 0x4105c2
mov eax, dword [ebp - 0xa4]
cmp byte [eax - 1], 0x2f
jne 0x410695
mov ecx, ebx
call fcn.0040c38c
xor edx, edx
jmp 0x41063b
sub esp, 0xc
push dword [ebp - 0x90]
call fcn.0040f2db
add esp, 0x10
test eax, eax
je 0x4101fb
sub esp, 0xc
push dword [ebx]
call fcn.0040be6c
jmp 0x410380
mov eax, dword [ebp - 0x9c]
add dword [ebp - 0x68], edi
mov ecx, ebx
mov byte [eax + edi], 0
lea eax, [eax + edi + 0x14]
push edx
push edx
push eax
push dword [ebp - 0x9c]
call fcn.0040c314
mov dword [ebp - 0x90], eax
mov esi, eax
sub eax, dword [ebp - 0x9c]
sub edi, eax
pop ecx
mov edx, edi
pop edi
test edx, edx
jle 0x410679
mov edi, dword [ebp - 0x9c]
mov ecx, edx
test edi, edi
je 0x410638
test esi, esi
je 0x410638
jecxz 0x410638
cld
rep movsb byte es:[edi], byte [esi]
sub dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x9c]
sub esp, 0xc
push dword [0x42e650]
push dword [ebp - 0x70]
add eax, edx
push 0x8000
push eax
push dword [ebp - 0x60]
mov dword [ebp - 0xa0], edx
call fcn.0040f16d
mov edx, dword [ebp - 0xa0]
add esp, 0x20
lea edi, [edx + eax]
test edi, edi
jg 0x4105ea
jmp 0x41067d
xor edx, edx
jmp 0x410638
sub esp, 0xc
push dword [ebp - 0x9c]
mov ecx, ebx
call fcn.0040c3a6
add esp, 0xc
jmp 0x411151
cmp dword [0x42e594], 0
je 0x4106ff
cmp dword [ebp - 0xc0], 0
jne 0x4106ff
cmp dword [ebp - 0x70], 0
jg 0x4106ff
cmp dword [ebp - 0x6c], 0
jg 0x4106ff
mov eax, dword [0x46c954]
test eax, eax
je 0x4106c1
cmp eax, dword [ebp - 0x58]
jbe 0x4106ff
cmp dword [ebp - 0x24], 0
je 0x4106eb
push esi
push esi
push 1
push dword [ebp - 0xbc]
call fcn.0040357d
sub esp, 0xc
mov dword [ebp - 0x6c], eax
push 2
push 0
push eax
call fcn.0040364f
add esp, 0x14
jmp 0x4106ff
sub esp, 0xc
push dword [ebp - 0xbc]
call fcn.0040f588
add esp, 0x10
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x24], 0
jne 0x410741
mov edx, dword [ebp - 0x58]
mov ecx, str.HTTP_1.0_200_r_nContent_type:_application_octet_stream_r_n_r_n
mov eax, str.HTTP_1.0_200_r_nContent_Length:__u_r_nContent_type:_application_octet_stream_r_n_r_n
mov esi, dword [ebp - 0x6c]
test edx, edx
cmove eax, ecx
push ecx
push edx
push eax
push dword [ebp - 0x94]
call dword [sym.imp.USER32.dll_wsprintfA]
push esi
push eax
push dword [ebp - 0x94]
push ebx
call fcn.0040f1bc
mov dword [ebp - 0x68], 0
add esp, 0x20
lea eax, [ebp - 0x74]
lea edx, [ebp - 0x60]
mov ecx, dword [eax]
xchg dword [edx], ecx
mov dword [eax], ecx
mov eax, dword [0x46ce14]
test eax, eax
je 0x410f65
push edx
push edx
push dword [0x42f9c8]
push eax
mov dword [ebp - 0x48], 1
call fcn.0040f5b8
add esp, 0x10
mov dword [ebp - 0x44], eax
jmp 0x410f65
push eax
push eax
mov eax, dword [ebp - 0x9c]
push 0x2f
add eax, 0xc
push eax
call fcn.004033de
mov edi, dword [ebp - 0x9c]
add esp, 0x10
mov dword [ebp - 0xa0], edi
test eax, eax
je 0x4107de
cmp byte [eax + 4], 0xd
je 0x4107de
cmp byte [edi + 8], 0x3a
mov dl, byte [edi + 9]
je 0x4107b6
cmp dl, 0x3a
jne 0x4107de
jmp 0x4107bb
cmp dl, 0x3a
jne 0x4107c0
mov byte [eax - 1], 0x20
dec eax
mov ecx, dword [ebp - 0x9c]
lea edi, [eax - 4]
mov dword [ebp - 0xa0], edi
mov edx, dword [ecx]
mov dword [eax - 4], edx
mov eax, edi
sub eax, ecx
sub dword [ebp - 0xac], eax
push eax
push eax
push str._nProxy_Connection:
push dword [ebp - 0xa0]
call fcn.004034dd
add esp, 0x10
mov dword [ebp - 0x90], eax
test eax, eax
je 0x410833
sub dword [ebp - 0xac], 6
mov ecx, dword [ebp - 0xac]
lea edi, [eax + 1]
lea esi, [eax + 7]
sub eax, dword [ebp - 0xa0]
sub ecx, eax
test edi, edi
je 0x410825
test esi, esi
je 0x410825
jecxz 0x410825
cld
rep movsb byte es:[edi], byte [esi]
jmp 0x410833
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp dword [eax], 0x4e4e4f43
jne 0x410891
cmp dword [ebp - 0x20], 0
jne 0x41085a
push eax
push 0x10
push str.HTTP_1.1_200_r_n_r_n
push ebx
call fcn.0040b3a1
add esp, 0x10
jmp 0x41086e
push 0
push dword [ebx + 0x60]
push dword [ebp - 0x9c]
push dword [ebp - 0x74]
call dword [sym.imp.WS2_32.dll_send]
push edi
mov ecx, ebx
push edi
push dword [ebp - 0x9c]
push dword [ebp - 0x74]
call fcn.0040f264
mov eax, dword [ebx + 0x70]
add dword [ebp - 0x68], eax
mov eax, dword [ebx + 0x74]
add dword [ebp - 0x64], eax
jmp 0x41114f
push esi
push esi
push str.Content_Length
push dword [ebp - 0xa0]
call fcn.0040f867
add esp, 0x10
mov dword [ebp - 0x90], eax
test eax, eax
je 0x4108c1
sub esp, 0xc
push eax
call fcn.004123ba
sub eax, dword [ebx + 0x68]
mov dword [ebp - 0x54], eax
jmp 0x41091f
test byte [ebx + 0x34], 8
jne 0x410922
test byte [0x46c97e], 2
je 0x410922
cmp dword [0x4797b8], 0
jle 0x410922
push ecx
push ecx
push 0x440561
push dword [ebp - 0xa0]
call fcn.004034b9
add esp, 0x10
mov dword [ebp - 0x8c], eax
test eax, eax
je 0x410922
add eax, 2
push edx
push edx
push str.Accept_Encoding:_gzip_r_n_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ebp - 0xa0]
lea eax, [edx + eax + 2]
mov dword [ebp - 0xac], eax
add esp, 0x10
mov eax, dword [ebp - 0xac]
push 0
push eax
push dword [ebp - 0xa0]
push dword [ebp - 0x74]
call dword [sym.imp.WS2_32.dll_send]
test eax, eax
js 0x4101fb
add dword [ebp - 0x64], eax
cmp dword [ebp - 0x54], 0
mov eax, dword [0x42e650]
jle 0x410972
sub esp, 0xc
push eax
push 0
push 0xfa0
push dword [ebp - 0xa0]
push dword [ebx]
call fcn.0040f16d
add esp, 0x20
sub dword [ebp - 0x54], eax
test eax, eax
jg 0x410928
mov dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov edx, 0x1388
sub esp, 0xc
push dword [0x42e650]
push dword [ebp - 0x70]
sub edx, eax
add eax, dword [ebp - 0x94]
push edx
push eax
push dword [ebp - 0x74]
call fcn.0040f16d
add esp, 0x20
mov esi, dword [ebp - 0x88]
test eax, eax
mov edi, eax
jg 0x4109ef
test esi, esi
jne 0x410a64
cmp dword [ebp - 0x28], 0
jne 0x4109de
cmp dword [ebp - 0x90], 0
jne 0x4109de
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x410077
mov byte [eax], 0
jmp 0x410077
push eax
push eax
push 0x190
push str.Error._Cant_receive_header...
jmp 0x411148
add esi, eax
add dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x88], esi
mov byte [eax + esi], 0
push eax
push eax
push 0x4405bc
push dword [ebp - 0x94]
call fcn.004034b9
add esp, 0x10
mov esi, eax
test eax, eax
je 0x410a2e
cmp byte [eax - 1], 0xd
je 0x410a74
cmp byte [eax + 3], 0xd
jne 0x410a74
inc esi
jmp 0x410a74
push eax
push eax
push 0x4405c0
push dword [ebp - 0x94]
call fcn.004034b9
add esp, 0x10
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x410a52
mov esi, eax
dec esi
jmp 0x410a74
mov esi, dword [ebp - 0x88]
cmp esi, 0x1387
jle 0x41097c
cmp dword [ebp - 0x24], 0
jne 0x411151
add esi, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
sub esp, 0xc
add eax, 9
push eax
call fcn.004123ba
movsx edi, byte [esi + 1]
add esp, 0x10
mov byte [esi + 1], 0
mov dword [ebp - 0xb4], eax
cmp dword [ebx + 0x6c], 0
mov eax, edi
mov byte [ebp - 0xa4], al
je 0x410abd
push eax
push eax
push str.Connection:_Keep_Alive
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
mov dword [ebx + 0x6c], eax
sub esp, 0xc
push 0x43e6bc
push 0
push dword [ebp - 0x74]
push dword [ebp - 0x94]
push dword [0x463464]
call fcn.00403f0e
mov al, byte [ebp - 0xa4]
add esp, 0x20
mov byte [esi + 1], al
test byte [ebx + 0x34], 8
jne 0x410b83
cmp dword [0x4797b8], 0
jle 0x410b83
push ecx
push ecx
push str.Content_Encoding
push dword [ebp - 0x94]
call fcn.0040f867
add esp, 0x10
mov dword [ebp - 0x8c], eax
test eax, eax
je 0x410b83
push edx
push edx
push str.gzip
push eax
call fcn.00403494
add esp, 0x10
test eax, eax
je 0x410b3e
mov ecx, ebx
call fcn.004249ba
test eax, eax
jne 0x410b59
jmp 0x410b83
push ecx
push ecx
push 0x4405f0
push dword [ebp - 0x8c]
call fcn.00403494
add esp, 0x10
test eax, eax
jne 0x410b31
jmp 0x410b83
mov eax, dword [ebx + 0x6c]
test eax, eax
je 0x410b7c
push edx
push dword [ebp - 0x88]
push dword [ebp - 0x94]
push eax
call fcn.0041365b
add esp, 0x10
mov dword [ebp - 0x88], eax
mov dword [ebx + 0x6c], 0
cmp dword [ebp - 0xb4], 0xce
jne 0x410bad
push eax
push eax
push str.Content_Length
push dword [ebp - 0x94]
call fcn.0040f867
add esp, 0x10
mov dword [ebp - 0x34], eax
test eax, eax
jne 0x410bd1
jmp 0x410bef
cmp dword [ebp - 0x24], 0
je 0x410b8f
push ecx
push ecx
push str._nContent_Range:
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
test eax, eax
jne 0x410b8f
jmp 0x411151
sub esp, 0xc
push eax
call fcn.004123ba
add esp, 0x10
test eax, eax
je 0x410be6
mov dword [ebp - 0x58], eax
jmp 0x410bef
mov dword [ebp - 0x58], 0xffffffff
jmp 0x410bf5
cmp dword [ebp - 0x58], 0
jg 0x410c68
mov dword [ebp - 0xb0], 5
mov eax, dword [ebx + 0x6c]
test eax, eax
je 0x410c68
push ecx
push dword [ebp - 0x88]
push dword [ebp - 0x94]
push eax
call fcn.0041365b
mov dword [ebp - 0x88], eax
pop eax
pop edx
push str.Keep_Alive:
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
mov dword [ebp - 0x34], eax
test eax, eax
je 0x410c57
push edx
push dword [ebp - 0x88]
push dword [ebp - 0x94]
push eax
call fcn.0041365b
add esp, 0x10
mov dword [ebp - 0x88], eax
mov dword [ebx + 0x6c], 0
mov dword [ebp - 0xb0], 5
cmp dword [0x46ce14], 0
je 0x410ce3
test byte [0x46c982], 2
je 0x410c9c
push eax
push eax
push dword [0x42f9c8]
push dword [0x46ce14]
mov dword [ebp - 0x48], 1
call fcn.0040f5b8
add esp, 0x10
mov dword [ebp - 0x44], eax
jmp 0x410ce3
push ecx
push ecx
push str._nContent_type:_application
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
test eax, eax
jne 0x410c7a
cmp byte [esi + 3], 0x4d
jne 0x410cc1
cmp byte [esi + 4], 0x5a
je 0x410c7a
test byte [0x46c982], 1
je 0x410ce3
push edx
push edx
push str._nContent_type:_text_html
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
test eax, eax
jne 0x410c7a
cmp dword [ebp - 0xb4], 0x12b
jle 0x410cfb
mov dword [ebp - 0x5c], 0
jmp 0x410e05
test byte [0x46c97b], 4
jne 0x410d58
push eax
push eax
push str.:_NO_CACHE_r_n
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
test eax, eax
jne 0x410cef
push eax
push eax
push str._nCACHE_CONTROL:_Private
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
test eax, eax
jne 0x410cef
test byte [0x46c97f], 0x10
je 0x410d58
push eax
push eax
push str._nCACHE_CONTROL:
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
test eax, eax
jne 0x410cef
cmp dword [0x42e594], 0
je 0x410e05
cmp dword [ebp - 0xc0], 0
jne 0x410e05
cmp dword [ebp - 0x70], 0
jg 0x410e05
mov eax, dword [0x46c954]
test eax, eax
je 0x410d8a
cmp eax, dword [ebp - 0x58]
jbe 0x410ddf
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x6c]
je 0x410dbb
test eax, eax
jne 0x410ddf
push eax
push eax
push 1
push dword [ebp - 0xbc]
call fcn.0040357d
sub esp, 0xc
mov dword [ebp - 0x6c], eax
push 2
push 0
push eax
call fcn.0040364f
add esp, 0x14
jmp 0x410ddf
test eax, eax
jne 0x410ddf
cmp dword [ebp - 0xb4], 0xce
je 0x410ddf
sub esp, 0xc
push dword [ebp - 0xbc]
call fcn.0040f588
add esp, 0x10
mov dword [ebp - 0x6c], eax
test byte [0x46c97b], 4
je 0x410e05
push eax
push eax
push str._nEXPIRES:
push dword [ebp - 0x94]
call fcn.004034dd
add esp, 0x10
test eax, eax
je 0x410e05
mov byte [eax + 1], 0x4e
push eax
push eax
push str._nContent_type:
push dword [ebp - 0x94]
call fcn.004034dd
pop edx
pop ecx
push 0x440679
push dword [ebp - 0x94]
mov dword [ebp - 0x34], eax
call fcn.004034dd
mov edx, dword [ebp - 0x94]
add esp, 0x10
cmp dword [ebp - 0x24], 0
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x8c], edx
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xc4], eax
je 0x410e9a
lea eax, [esi + 3]
mov dword [ebp - 0xcc], eax
sub eax, edx
mov edx, dword [ebp - 0xc4]
sub edx, eax
mov dword [ebp - 0x88], edx
mov eax, edx
lea edx, [esi + 3]
mov dword [ebp - 0x94], edx
test eax, eax
jle 0x410f0d
test ecx, ecx
jle 0x410f0d
sub esp, 4
push eax
push edx
push ecx
call fcn.0040f5ea
add esp, 0x10
jmp 0x410f0d
test ecx, ecx
jle 0x410f0d
mov eax, dword [ebp - 0xc4]
sub edx, esi
lea edi, [edx + eax - 3]
test edi, edi
jle 0x410f0d
push edx
push eax
lea eax, [esi + 3]
push eax
push ecx
call fcn.0040f5ea
mov eax, dword [ebp - 0x58]
add esp, 0x10
test eax, eax
je 0x410f0d
cmp eax, dword [ebp - 0x88]
jg 0x410f0d
push eax
push eax
lea eax, [ebx + 0x88]
push eax
push dword [ebp - 0x44]
call fcn.0040f627
mov dword [ebp - 0x44], 0
add esp, 0x10
test eax, eax
jle 0x410f0d
push ecx
push ecx
mov ecx, ebx
push 0x4d
push str.HTTP_1.1_400_deny_r_n_r_nContent_Type:_text_html_r_n_r_n_h1_Virus._Access_denyed__h1_
call fcn.0042d3ac
mov byte [esi + 4], 0
mov dword [ebx + 0x6c], 0
pop esi
pop edi
jmp 0x411158
mov eax, dword [ebp - 0x88]
test eax, eax
jle 0x410f37
push dword [ebp - 0x6c]
push eax
push dword [ebp - 0x94]
push ebx
call fcn.0040f1bc
add esp, 0x10
test eax, eax
jns 0x410f37
mov byte [esi + 4], 0
jmp 0x411158
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x24], 0
mov dword [ebp - 0x94], eax
jne 0x410f4f
cmp dword [ebp - 0x58], 0
jne 0x410f5d
mov dword [ebp - 0x58], 0
mov dword [ebx + 0x6c], 0
sub esi, eax
add esi, 3
sub dword [ebp - 0x68], esi
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x411243
cmp eax, dword [ebp - 0x68]
jle 0x411043
mov eax, dword [ebp - 0xb0]
sub esp, 0xc
push eax
push dword [ebp - 0x70]
push 0x2000
push dword [ebp - 0x94]
push dword [ebp - 0x74]
call fcn.0040f16d
add esp, 0x20
mov edi, eax
test eax, eax
jle 0x411043
add dword [ebp - 0x68], eax
cmp dword [ebp - 0xa4], 0
mov eax, 0xc
cmove eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x44]
test eax, eax
jle 0x411005
push edx
push edi
push dword [ebp - 0x94]
push eax
call fcn.0040f5ea
mov eax, dword [ebp - 0x58]
add esp, 0x10
test eax, eax
je 0x411005
cmp eax, dword [ebp - 0x68]
jg 0x411005
push eax
push eax
lea eax, [ebx + 0x88]
push eax
push dword [ebp - 0x44]
call fcn.0040f627
mov dword [ebp - 0x44], 0
add esp, 0x10
test eax, eax
jg 0x411024
push dword [ebp - 0x6c]
push edi
push dword [ebp - 0x94]
push ebx
call fcn.0040f1bc
add esp, 0x10
test eax, eax
jns 0x41102d
mov eax, dword [0x42e680]
mov dword [ebp - 0x24], eax
mov dword [ebx + 0x6c], 0
jmp 0x411043
cmp dword [ebp - 0x74], 0
je 0x410f65
mov ecx, ebx
call fcn.0040b1f8
jmp 0x410f65
mov eax, dword [ebp - 0x58]
test eax, eax
jle 0x411158
cmp eax, dword [ebp - 0x68]
jle 0x411158
mov eax, dword [0x42e680]
cmp dword [ebp - 0x24], eax
jge 0x411158
mov eax, dword [ebp - 0x94]
mov byte [eax], 0
mov eax, dword [ebp - 0x60]
test eax, eax
jle 0x411087
sub esp, 0xc
push eax
call fcn.0040be6c
mov dword [ebp - 0x60], 0
jmp 0x4110b4
mov esi, dword [ebp - 0x9c]
push eax
push dword [ebp - 0x68]
mov eax, dword [ebx + 0x60]
push str.Range:_bytes_u__r_n_r_n
lea eax, [esi + eax - 2]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebx + 0x60]
lea eax, [edx + eax - 2]
mov dword [ebp - 0xac], eax
mov dword [ebx + 0x60], eax
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x24]
add esp, 0x10
test eax, eax
je 0x4110c4
mov byte [eax], 0
mov eax, dword [ebp - 0x70]
test eax, eax
jle 0x4110df
sub esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x70], 0
add esp, 0xc
mov eax, dword [ebp - 0x74]
test eax, eax
jle 0x4110f9
sub esp, 0xc
push eax
call fcn.0040be6c
mov dword [ebp - 0x74], 0
add esp, 0x10
push dword [ebp - 0x58]
push dword [ebp - 0x68]
push str.Broken.__u_of__u_loaded._Try_continue...
push dword [0x463464]
call fcn.0040423a
add esp, 0x10
mov dword [ebp - 0xa4], 0
jmp 0x410085
cmp dword [ebp - 0xc8], 0
je 0x41113c
push eax
push eax
push 0x10
push str.HTTP_1.0_304_r_n_r_n
mov ecx, ebx
call fcn.0042d3ac
jmp 0x41114f
push edi
push edi
push 0x190
push str.Error._Cant_connect...
mov ecx, ebx
call fcn.0040b170
pop ecx
pop esi
mov dword [ebx + 0x6c], 0
mov eax, dword [ebp - 0x60]
test eax, eax
jle 0x41116b
sub esp, 0xc
push eax
call fcn.0040be6c
add esp, 0x10
mov ecx, ebx
call fcn.00424f78
mov eax, dword [ebp - 0x70]
test eax, eax
jle 0x411186
sub esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0xc
mov eax, dword [ebp - 0x6c]
test eax, eax
jle 0x4111ba
sub esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x46c954]
add esp, 0xc
test eax, eax
je 0x4111ba
cmp eax, dword [ebp - 0x68]
jae 0x4111ba
sub esp, 0xc
push dword [ebp - 0xbc]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
add esp, 0xc
mov eax, dword [ebp - 0x44]
test eax, eax
jle 0x4111d3
push edx
push edx
lea edx, [ebx + 0x88]
push edx
push eax
call fcn.0040f627
add esp, 0x10
mov edx, dword [ebp - 0x3c]
mov eax, 0x44013f
test edx, edx
je 0x4111e2
lea eax, [edx + 5]
sub esp, 0xc
push eax
push dword [ebp - 0x64]
push dword [ebx + 0x74]
push 0x4406fb
push dword [ebp - 0x9c]
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebx + 0x10]
add esp, 0x14
push str.___.256s_r_n
push eax
push dword [ebx]
push dword [ebp - 0x9c]
push dword [0x463464]
call fcn.00403f0e
mov eax, dword [ebp - 0x74]
add esp, 0x20
test eax, eax
jle 0x41123f
cmp dword [ebx + 0x6c], 0
jne 0x41123f
sub esp, 0xc
push eax
call fcn.0040be6c
mov dword [ebx + 0x50], 0
add esp, 0x10
xor eax, eax
jmp 0x41126e
cmp dword [ebp - 0xb4], 0x12b
mov eax, dword [ebp - 0xb0]
jle 0x410f7f
cmp dword [ebp - 0x34], 0
mov eax, 3
cmovne eax, dword [ebp - 0xb0]
jmp 0x410f7f
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret