Function at 0x418890
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x58cdee
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5f4760]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x78]
xor ebx, ebx
cmp dword [0x6038f4], ebx
jne 0x4188db
xor eax, eax
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret
mov ecx, dword [esp + 0x70]
mov eax, dword [ebp + 0x81b0]
push ecx
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x38], eax
call fcn.00406380
mov dword [esp + 0x68], ebx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 0xc]
cmp eax, ebx
jl 0x41895d
push 0x5d54f8
push ecx
call fcn.004a4912
add esp, 8
cmp eax, ebx
je 0x41895d
sub eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x41895d
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
lea edx, [esp + 0x18]
call fcn.00408930
mov byte [esp + 0x68], 1
lea ebx, [esp + 0x14]
call fcn.00406760
mov byte [esp + 0x68], 0
lea edx, [esp + 0x28]
push edx
call fcn.00403090
xor ebx, ebx
mov eax, dword [esp + 0x74]
push eax
lea edi, [esp + 0x48]
lea ecx, [esp + 0x40]
call fcn.004165b0
xor eax, eax
call fcn.004618e0
mov edi, eax
mov eax, dword [esp + 0x40]
cmp eax, ebx
mov dword [esp + 0x54], edi
jg 0x418cd0
mov esi, dword [esp + 0x3c]
jl 0x418996
cmp esi, edi
ja 0x418cd0
cmp eax, ebx
jl 0x418cd0
jg 0x4189a8
cmp esi, ebx
jb 0x418cd0
mov edx, dword [esp + 0x48]
cmp edx, ebx
jl 0x418cd0
mov ecx, dword [esp + 0x44]
jg 0x4189c2
cmp ecx, ebx
jb 0x418cd0
cmp edx, ebx
jg 0x418cd0
jl 0x4189d4
cmp ecx, edi
ja 0x418cd0
cmp eax, edx
jl 0x4189e8
jg 0x4189de
cmp esi, ecx
jb 0x4189e8
mov eax, ecx
or eax, edx
jne 0x418cd0
mov eax, esi
or eax, dword [esp + 0x40]
mov eax, ecx
jne 0x418a10
or eax, edx
jne 0x418a14
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], ebx
mov dword [esp + 0x18], 0xc8
mov dword [esp + 0x28], 0x5d57b8
jmp 0x418a76
or eax, edx
je 0x418a1c
cmp ecx, edi
jne 0x418a34
cmp edx, ebx
jne 0x418a34
mov eax, edi
sub eax, 1
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x44]
mov eax, ebx
sbb eax, 0
mov dword [esp + 0x48], eax
mov edx, eax
cmp esi, edi
jne 0x418a54
cmp dword [esp + 0x40], ebx
jne 0x418a54
mov eax, edi
sub eax, 1
mov dword [esp + 0x3c], eax
mov esi, dword [esp + 0x3c]
mov eax, ebx
sbb eax, 0
mov dword [esp + 0x40], eax
mov eax, ecx
sub eax, esi
mov dword [esp + 0x4c], eax
mov eax, edx
sbb eax, dword [esp + 0x40]
mov dword [esp + 0x18], 0xce
mov dword [esp + 0x50], eax
mov dword [esp + 0x28], str.Partial_Content
cmp dword [0x603e10], 0
je 0x418ac8
mov esi, dword [esp + 0x74]
lea ecx, [esp + 0x24]
push ecx
call fcn.00415250
mov byte [esp + 0x68], 3
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
mov ecx, dword [ebp + 0xc]
push edx
push eax
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
push str.__s____s___d_0____
mov ecx, 0x603ba4
call fcn.0040af00
add esp, 0x10
mov byte [esp + 0x68], 0
lea edx, [esp + 0x24]
push edx
call fcn.00403090
cmp dword [0x604348], 0
je 0x418ad8
cmp dword [esp + 0x7c], 2
jne 0x418af0
mov esi, dword [esp + 0x74]
lea eax, [esp + 0x24]
push eax
call fcn.00415250
lea ecx, [esp + 0x24]
push ecx
call fcn.00403090
mov esi, dword [esp + 0x74]
lea edx, [esp + 0x20]
push edx
call fcn.00415250
mov byte [esp + 0x68], 4
mov esi, dword [esp + 0x30]
cmp dword [esi + 0x2c], 0
je 0x418b1a
lea edi, [esp + 0x20]
call fcn.004171e0
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [ebp + 8]
push ebx
push edi
push eax
push ecx
mov ecx, dword [ebp + 0xc]
push str.__s___d_0__u____
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp + 0x10]
mov dword [eax + 4], ecx
mov ecx, dword [ebp + 0x14]
mov dword [eax + 8], edx
mov edx, dword [esp + 0xa0]
push edx
mov ebx, 0x604408
mov dword [eax + 0xc], ecx
call fcn.00446ca0
add esp, 0x28
xor eax, eax
call fcn.004618f0
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00406380
mov bl, 5
mov byte [esp + 0x68], bl
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x3c]
push 0
push ecx
mov edx, esp
mov dword [esp + 0x38], esp
push eax
push edx
mov dword [esi + 0x1005c], 1
mov dword [esi + 0x10068], 0
mov dword [esi + 0x10070], edi
mov dword [esi + 0x10074], ecx
call fcn.00406380
mov byte [esp + 0x70], 6
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ecx
mov ecx, 0x5d2b98
call fcn.00402fe0
mov byte [esp + 0x74], 7
push ecx
mov edx, esp
mov dword [esp + 0x44], esp
push edx
mov ecx, 0x5d2b98
call fcn.00402fe0
mov byte [esp + 0x78], 8
push ecx
mov eax, esp
mov dword [esp + 0x4c], esp
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.00406380
mov byte [esp + 0x7c], 9
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
push edx
push eax
push ecx
push edi
xor eax, eax
push eax
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
push edx
mov edx, dword [esp + 0x54]
push eax
mov eax, dword [esp + 0x48]
push ecx
push edx
push eax
lea ecx, [esp + 0x58]
push ecx
mov byte [esp + 0xa8], bl
call fcn.00416450
mov byte [esp + 0xa8], 0xa
mov edx, dword [esp + 0x5c]
push 0x7fff
push edx
lea eax, [ebp + 0x150]
push eax
call fcn.004a5b40
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx - 0xc]
add esp, 0x4c
mov dword [ebp + 0x8150], eax
mov dword [ebp + 0x815c], 2
mov dword [ebp + 0x8154], 0
mov byte [esp + 0x68], bl
lea edx, [esp + 0x1c]
push edx
call fcn.00403090
mov byte [esp + 0x68], 4
lea eax, [esp + 0x2c]
push eax
call fcn.00403090
mov byte [esp + 0x68], 0
lea ecx, [esp + 0x20]
push ecx
call fcn.00403090
mov dword [esp + 0x68], 0xffffffff
lea edx, [esp + 0x14]
push edx
call fcn.00403090
mov eax, 1
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret
mov esi, dword [esp + 0x74]
lea eax, [esp + 0x28]
push eax
call fcn.00415250
mov byte [esp + 0x68], 2
mov ecx, dword [esp + 0x28]
mov edx, dword [ebp + 8]
push 0x190
push ecx
mov ecx, dword [ebp + 0xc]
push str.__s___d_0____
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp + 0x10]
mov dword [eax + 4], ecx
mov ecx, dword [ebp + 0x14]
mov dword [eax + 8], edx
push 3
mov ebx, 0x604408
mov dword [eax + 0xc], ecx
call fcn.00446ca0
push str.Bad_Request
push 0x190
mov esi, ebp
call fcn.00417b20
add esp, 0x28
mov esi, eax
mov byte [esp + 0x68], 0
lea edx, [esp + 0x28]
push edx
call fcn.00403090
mov dword [esp + 0x68], 0xffffffff
lea eax, [esp + 0x14]
push eax
call fcn.00403090
mov eax, esi
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret