Function at 0x405634
Capabilities:
Connect socket
Download and write a file
Receive and write data from server to client
Receive data
Receive data on socket
Send data
Send data on socket
Send http request
Send http request with host header
Write file on windows

Disassembly:
mov eax, 0x41968c
call fcn.0040fe54
sub esp, 0x274
mov eax, dword [0x4220b8]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [edi + 0x38]
cmp dword [edi + 0x3c], eax
jle 0x405664
cmp eax, 0xffffffff
jle 0x405664
xor eax, eax
jmp 0x405e51
mov eax, dword [0x423d98]
cmp eax, 1
push ebx
push esi
je 0x40593a
test eax, eax
je 0x40593a
cmp eax, 2
jne 0x405698
push str.CDownloadThread::DoMyTask_NET_PROXYHTTP_n
call fcn.00409014
pop ecx
push 0x10
push 0x4238c0
jmp 0x40593f
cmp eax, 3
jne 0x40594c
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_n
call fcn.00409014
pop ecx
push 0x10
push 0x4238c0
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
jne 0x40594c
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_connect_proxy_server_OK._n
call fcn.00409014
pop ecx
push 0
push 4
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
mov byte [ebp - 0x268], 5
mov byte [ebp - 0x267], 2
mov byte [ebp - 0x266], 0
mov byte [ebp - 0x265], 2
call dword [sym.imp.WS2_32.dll_send]
mov esi, 0x258
push esi
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0040cae0
mov ebx, dword [sym.imp.WS2_32.dll_recv]
add esp, 0xc
push 0
push esi
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call ebx
cmp byte [ebp - 0x268], 5
jne 0x40594c
cmp byte [ebp - 0x267], 0
je 0x40574e
cmp byte [ebp - 0x267], 2
jne 0x40594c
push 0x41d4d0
call fcn.00409014
cmp byte [ebp - 0x267], 2
pop ecx
jne 0x40582b
push 0x423dc0
call fcn.0040cc00
mov dword [ebp - 0x27c], eax
mov dword [esp], 0x423e00
call fcn.0040cc00
mov dword [ebp - 0x278], eax
mov al, byte [ebp - 0x27c]
mov byte [ebp - 0x267], al
lea eax, [ebp - 0x266]
mov dword [esp], 0x423dc0
push eax
mov byte [ebp - 0x268], 1
call fcn.0040cc90
mov al, byte [ebp - 0x278]
mov byte [ebp - 0x167], al
lea eax, [ebp - 0x166]
push 0x423e00
push eax
call fcn.0040cc90
add esp, 0x10
push 0
push 0x201
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_send]
push esi
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0040cae0
add esp, 0xc
push 0
push esi
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call ebx
cmp byte [ebp - 0x268], 1
jne 0x40592d
cmp byte [ebp - 0x267], 0
jne 0x40592d
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_Proxy_Authorization_OK._n
call fcn.00409014
pop ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + 4]
movzx eax, word [eax + 2]
push eax
mov byte [ebp - 0x268], 5
mov byte [ebp - 0x267], 1
mov byte [ebp - 0x266], 0
mov byte [ebp - 0x265], 1
mov dword [ebp - 0x274], ecx
call dword [sym.imp.WS2_32.dll_ntohs]
push 4
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0040d3f0
push 2
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0040d3f0
add esp, 0x18
push 0
push 0xa
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_send]
push esi
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.0040cae0
add esp, 0xc
push 0
push esi
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x30]
call ebx
cmp byte [ebp - 0x268], 5
jne 0x40594c
cmp byte [ebp - 0x267], 0
jne 0x40594c
push str.CDownloadThread::DoMyTask_NET_PROXYSOCKS_connect_site_OK._n
call fcn.00409014
pop ecx
mov eax, dword [0x422e4c]
mov ebx, 0x422e4c
mov ecx, ebx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x274], eax
and dword [ebp - 4], 0
mov edx, 0x10000
lea esi, [ebp - 0x274]
call fcn.00406400
mov dword [ebp - 0x27c], eax
mov eax, dword [edi + 0x38]
cmp eax, 0xffffffff
jne 0x405963
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x40], 2
jge 0x40595b
mov eax, 0x7fff0000
jmp 0x405963
push 0x41d4b4
call fcn.00409014
pop ecx
jmp 0x40594c
push 0x10
push dword [ebp + 0x14]
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
je 0x4058e3
mov eax, edi
call fcn.00405493
or eax, 0xffffffff
jmp 0x405e4f
mov eax, dword [edi + 0x3c]
add eax, 0x1ffff
mov ecx, dword [edi + 0x3c]
test ecx, ecx
mov dword [ebp - 0x26c], eax
mov byte [ebp - 0x26d], 0
jne 0x405989
mov esi, dword [ebp + 0xc]
lea edx, [eax + 1]
cmp edx, dword [esi + 0x30]
jne 0x405989
mov byte [ebp - 0x26d], 1
cmp dword [0x423d98], 2
jne 0x405ab9
mov esi, dword [ebp + 0x14]
cmp word [esi + 2], 0x50
jne 0x4059ec
cmp byte [ebp - 0x26d], 0
push dword [ebp + 0x18]
je 0x4059cb
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push dword [ebp + 0x18]
push str.GET_http:___s_s_HTTP_1.0_r_nAccept:___r_nAccept_Encoding:_identity_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.0040633d
add esp, 0x14
jmp 0x405a6d
push eax
push ecx
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push dword [ebp + 0x18]
push str.GET_http:___s_s_HTTP_1.1_r_nAccept:___r_nAccept_Encoding:_identity_r_nRange:_bytes_12d__12d_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.0040633d
add esp, 0x1c
jmp 0x405a6d
mov eax, dword [0x422e4c]
mov ecx, ebx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 1
movzx eax, word [esi + 2]
push eax
push dword [ebp + 0x18]
lea eax, [ebp + 0x14]
push str._s:_d
push eax
call fcn.0040633d
add esp, 0x10
cmp byte [ebp - 0x26d], 0
push dword [ebp + 0x18]
lea eax, [ebp - 0x274]
je 0x405a41
push dword [ebp + 0x1c]
push dword [ebp + 0x14]
push str.GET_http:___s_s_HTTP_1.0_r_nAccept:___r_nAccept_Encoding:_identity_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.0040633d
add esp, 0x14
jmp 0x405a5e
push dword [ebp - 0x26c]
push dword [edi + 0x3c]
push dword [ebp + 0x1c]
push dword [ebp + 0x14]
push str.GET_http:___s_s_HTTP_1.1_r_nAccept:___r_nAccept_Encoding:_identity_r_nRange:_bytes_12d__12d_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nProxy_Connection:_Keep_Alive_r_n
push eax
call fcn.0040633d
add esp, 0x1c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0x14]
add eax, 0xfffffff0
call fcn.0040252e
cmp byte [0x423e40], 0
mov esi, 0x41d38c
je 0x405aaa
push str.Proxy_Authorization:_Basic
lea eax, [ebp - 0x274]
push eax
call fcn.00406465
push 0x423e40
lea eax, [ebp - 0x274]
push eax
call fcn.00406465
push esi
lea eax, [ebp - 0x274]
push eax
call fcn.00406465
push esi
lea eax, [ebp - 0x274]
push eax
call fcn.00406465
jmp 0x405af7
cmp byte [ebp - 0x26d], 0
push dword [ebp + 0x18]
je 0x405ade
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push str.GET__s_HTTP_1.0_r_nAccept:___r_nAccept_Encoding:_identity_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nConnection:_Keep_Alive_r_n_r_n
push eax
call fcn.0040633d
add esp, 0x10
jmp 0x405af7
push eax
push ecx
push dword [ebp + 0x1c]
lea eax, [ebp - 0x274]
push str.GET__s_HTTP_1.1_r_nAccept:___r_nAccept_Encoding:_identity_r_nRange:_bytes_d__d_r_nUser_Agent:_HttpRange_r_nHost:__s_r_nConnection:_Keep_Alive_r_n_r_n
push eax
call fcn.0040633d
add esp, 0x18
mov esi, dword [ebp - 0x274]
mov eax, dword [esi - 0xc]
push 0
push eax
push esi
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_send]
push esi
push str.CDownloadThread::DoMyTask_send_:_n_t_S_n
call fcn.00409014
mov eax, dword [ebp - 0x27c]
mov ebx, dword [edi + 0x30]
pop ecx
pop ecx
call fcn.004055e0
test eax, eax
mov dword [ebp - 0x26c], eax
jg 0x405b3a
or esi, 0xffffffff
jmp 0x405e3f
lea esi, [ebp - 0x274]
call fcn.0040639c
push dword [ebp - 0x274]
push str.CDownloadThread::DoMyTask_recv_header_:_n_t_S_n
call fcn.00409014
pop ecx
pop ecx
mov ebx, str.Content_Range:_bytes
push ebx
xor ecx, ecx
call fcn.004062a4
push eax
push str.CDownloadThread::DoMyTask_ContentRange_:_n_t_d_n
mov dword [ebp - 0x26c], eax
call fcn.00409014
cmp dword [ebp - 0x26c], 0
pop ecx
pop ecx
jg 0x405b89
cmp byte [ebp - 0x26d], 0
je 0x405b32
cmp dword [edi + 0x38], 0xffffffff
jne 0x405c40
push ebx
xor ecx, ecx
lea esi, [ebp - 0x274]
call fcn.004062a4
cmp eax, 0xffffffff
mov dword [ebp - 0x26c], eax
je 0x405da6
push 0xa
lea ecx, [ebp - 0x278]
push ecx
mov ecx, dword [ebp - 0x27c]
lea eax, [eax + ecx + 0x15]
push eax
call fcn.0040d177
push 0xa
lea eax, [ebp - 0x278]
push eax
mov eax, dword [ebp - 0x278]
inc eax
push eax
call fcn.0040d177
mov dword [edi + 0x38], eax
push 0xa
lea eax, [ebp - 0x278]
push eax
mov eax, dword [ebp - 0x278]
inc eax
push eax
call fcn.0040d177
mov ebx, eax
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x30], ebx
mov dword [eax + 0x3c], 0
mov ecx, dword [edi + 0x38]
lea esi, [ecx + 1]
add esp, 0x24
cmp esi, ebx
jge 0x405c40
mov edx, dword [eax + 0x40]
cmp edx, 1
jle 0x405c40
mov eax, ebx
sub eax, ecx
dec eax
lea ecx, [edx - 1]
xor edx, edx
div ecx
mov dword [ebp + 0x1c], esi
add eax, 0x1ffff
and eax, 0xfffe0000
cmp esi, ebx
mov dword [ebp + 0x14], eax
jb 0x405d42
push 0
mov esi, edi
call fcn.00402ce2
test eax, eax
jne 0x405e39
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [edi + 0x18]
push eax
mov dword [ebp + 0x18], eax
call esi
mov eax, dword [edi + 0x38]
sub eax, dword [edi + 0x3c]
push dword [ebp + 0x18]
inc eax
mov dword [ebp - 0x26c], eax
call ebx
xor ecx, ecx
cmp dword [ebp - 0x26c], ecx
jle 0x405e1a
mov eax, 0x10000
cmp dword [ebp - 0x26c], eax
jle 0x405c99
mov dword [ebp - 0x26c], eax
push ecx
push dword [ebp - 0x26c]
push dword [ebp - 0x27c]
push dword [edi + 0x30]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
mov dword [ebp - 0x26c], eax
jle 0x405e22
push dword [ebp + 0x18]
call esi
mov eax, dword [edi + 0x3c]
mov edx, dword [edi + 0x38]
mov ecx, dword [ebp - 0x26c]
sub edx, eax
cmp ecx, edx
jle 0x405cdd
lea ecx, [edx + 1]
mov dword [ebp - 0x26c], ecx
xor esi, esi
cmp ecx, esi
jle 0x405e2e
add eax, ecx
mov dword [edi + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [ebp + 0x18]
mov dword [edi + 0x40], eax
call ebx
push esi
lea eax, [ebp - 0x26c]
push eax
push dword [ebp - 0x26c]
push dword [ebp - 0x27c]
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [ebp - 0x26c]
mov eax, dword [ebp + 0xc]
add eax, 0x3c
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
push esi
mov esi, edi
call fcn.00402ce2
test eax, eax
je 0x405c57
jmp 0x405e39
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp + 0x18], eax
add eax, 0x20000
cmp eax, ebx
jb 0x405d5b
lea eax, [ebx - 1]
mov dword [ebp + 0x18], eax
push 0
mov esi, edi
call fcn.00402ce2
test eax, eax
jne 0x405c40
push 0x44
call fcn.0040c951
test eax, eax
pop ecx
je 0x405d8a
push dword [ebp + 0x18]
mov edi, dword [ebp + 0x1c]
mov esi, eax
call fcn.00405416
mov edi, dword [ebp + 8]
jmp 0x405d8c
xor eax, eax
push dword [ebp + 0xc]
mov esi, eax
call fcn.00402df3
mov eax, dword [ebp + 0x18]
inc eax
cmp eax, ebx
mov dword [ebp + 0x1c], eax
jb 0x405d3f
jmp 0x405c40
push str.Location:
xor ecx, ecx
lea esi, [ebp - 0x274]
call fcn.004062a4
cmp eax, 0xffffffff
mov dword [ebp - 0x26c], eax
je 0x405e0b
add eax, 0xa
mov ecx, eax
mov dl, 0xd
mov dword [ebp - 0x26c], eax
call fcn.00406280
mov edx, dword [ebp - 0x26c]
mov ecx, eax
lea eax, [ebp + 0x18]
push eax
sub ecx, edx
mov eax, esi
call fcn.004062d2
mov byte [ebp - 4], 2
push dword [eax]
mov eax, dword [ebp + 0xc]
add eax, 0x34
call fcn.004051e8
mov eax, dword [ebp + 0x18]
add eax, 0xfffffff0
call fcn.0040252e
xor esi, esi
inc esi
jmp 0x405e3f
mov esi, dword [ebp + 0xc]
xor eax, eax
call fcn.00402f8d
jmp 0x405b32
mov dword [ebp - 0x26c], ecx
jmp 0x405e39
mov dword [ebp - 0x26c], 1
jmp 0x405e39
push dword [ebp + 0x18]
call ebx
mov dword [ebp - 0x26c], esi
mov esi, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x274]
add eax, 0xfffffff0
call fcn.0040252e
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
call fcn.0040f65e
leave
ret 0x18