Function at 0x47c8d0
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x108
mov eax, dword [0x70e00c]
xor eax, esp
mov dword [esp + 0x104], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x14], edx
mov dword [esp + 0x34], edi
mov byte [ecx], 0
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x2c], 0
mov byte [esp + 0x67], 0
mov dword [esp + 0x30], 0x64
mov byte [eax], 0
mov eax, dword [edi + 0x350]
mov ecx, dword [esi]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x20], eax
mov eax, ecx
and eax, dword [esi + 4]
cmp eax, 0xffffffff
je 0x47c976
cmp byte [esi + 0x58], 0
jne 0x47c970
sub ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x20]
sbb eax, dword [esi + 0x24]
test eax, eax
jg 0x47c970
jl 0x47c96c
mov eax, dword [esp + 0x18]
cmp ecx, eax
jae 0x47c97c
mov eax, ecx
jmp 0x47c97c
mov eax, dword [esp + 0x18]
jmp 0x47c97c
mov eax, dword [edi + 0x350]
test eax, eax
je 0x47c9b9
mov edx, dword [edx + 0x2ec]
lea ecx, [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x18]
push eax
push dword [esi + 0xbc]
call fcn.0046cde0
add esp, 0xc
mov dword [esp + 0x24], eax
cmp eax, 0x51
je 0x47cb25
test eax, eax
jg 0x47cb6e
mov ecx, dword [esp + 0x60]
jmp 0x47c9bf
xor ecx, ecx
mov dword [esp + 0x60], ecx
mov eax, dword [esi + 0x20]
or eax, dword [esi + 0x24]
jne 0x47cb01
mov eax, dword [esi + 0x28]
or eax, dword [esi + 0x2c]
jne 0x47cb01
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edi, eax
mov dword [esp + 0x18], 0
mov eax, 0x10624dd3
mul edi
shr edx, 6
imul ecx, edx, 0x3e8
sub edi, ecx
imul ecx, edi, 0x3e8
mov edi, dword [esp + 0x34]
mov eax, dword [edi + 0x5ac]
cmp eax, dword [edi + 0x5b4]
jg 0x47cab4
jl 0x47ca29
mov eax, dword [edi + 0x5a8]
cmp eax, dword [edi + 0x5b0]
ja 0x47cab4
movups xmm0, xmmword [edi + 0x5c8]
movd eax, xmm0
movaps xmmword [esp + 0x50], xmm0
psrldq xmm0, 4
sub edx, eax
movd eax, xmm0
mov dword [esp + 0x20], edx
sbb dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
cmp eax, 0x863
jl 0x47ca6b
jg 0x47ca61
cmp edx, 0x7bd05af6
jb 0x47ca6b
or ecx, 0xffffffff
mov eax, accept
jmp 0x47caa8
sub ecx, dword [esp + 0x58]
push 0
push 0xf4240
push eax
push dword [esp + 0x2c]
mov dword [esp + 0x28], ecx
call fcn.0065e4b0
mov ecx, dword [esp + 0x18]
add ecx, eax
mov eax, 0
adc eax, edx
mov dword [esp + 0x18], eax
mov eax, ecx
mov edx, dword [esp + 0x18]
or eax, edx
jne 0x47caa4
lea ecx, [eax + 1]
jmp 0x47caa8
mov eax, dword [esp + 0x18]
mov dword [edi + 0x5a8], ecx
mov dword [edi + 0x5ac], eax
cmp dword [esi + 0xa0], 0
jle 0x47cafd
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edi, eax
mov dword [esp + 0x44], 0
mov eax, 0x10624dd3
mul edi
shr edx, 6
imul ecx, edx, 0x3e8
mov dword [esp + 0x40], edx
sub edi, ecx
imul eax, edi, 0x3e8
mov edi, dword [esp + 0x34]
mov dword [esp + 0x48], eax
movups xmm0, xmmword [esp + 0x40]
movups xmmword [esi + 0x90], xmm0
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x3c]
or dword [eax], 1
test ecx, ecx
jne 0x47cb82
cmp dword [esi + 0xb8], ecx
jne 0x47cb82
mov dl, 1
mov byte [esp + 0x13], dl
test dl, dl
jne 0x47cb8b
and dword [esi + 0xc4], 0xfffffffe
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x30]
test eax, eax
jg 0x47cb42
mov eax, dword [esp + 0x38]
mov dword [ecx + 0x548], 1
mov byte [eax], 1
mov eax, dword [esi + 0xc4]
and al, 3
cmp al, 2
jne 0x47cb6c
cmp byte [ecx + 0x29d], 0
je 0x47cb6c
push str.we_are_done_reading_and_this_is_set_to_close__stop_send_n
push edi
call fcn.0046c560
add esp, 8
and dword [esi + 0xc4], 0xfffffffd
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x104]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
mov byte [esp + 0x13], 0
test ecx, ecx
jle 0x47cb1e
mov eax, dword [esi + 0xbc]
mov byte [ecx + eax], 0
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0xbc]
mov dword [esi + 0x6c], eax
mov eax, dword [ecx + 0x2e0]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x47cbd6
lea edx, [esp + 0x67]
push edx
lea edx, [esp + 0x64]
push edx
push ecx
push edi
call eax
add esp, 0x10
mov dword [esp + 0x24], eax
test eax, eax
jne 0x47cb6e
mov ecx, dword [esp + 0x14]
cmp byte [esp + 0x67], al
jne 0x47cb29
cmp byte [esi + 0x58], 0
je 0x47cc65
lea eax, [esp + 0x1f]
mov byte [esp + 0x1f], 0
push eax
lea eax, [esp + 0x64]
mov edx, ecx
push eax
mov ecx, edi
call fcn.00485a40
mov ecx, eax
add esp, 8
mov dword [esp + 0x24], ecx
test ecx, ecx
jne 0x47d28a
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x2e0]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x47cc5a
cmp dword [esi + 0x14], ecx
jg 0x47cc5a
jl 0x47cc26
cmp dword [esi + 0x10], ecx
ja 0x47cc5a
cmp dword [esp + 0x60], 0
jle 0x47cc5a
lea ecx, [esp + 0x67]
push ecx
lea ecx, [esp + 0x64]
push ecx
push edx
push edi
call eax
mov ecx, eax
mov dword [esp + 0x34], eax
add esp, 0x10
test ecx, ecx
jne 0x47d28a
cmp byte [esp + 0x67], al
jne 0x47cb25
mov edx, dword [esp + 0x14]
cmp byte [esp + 0x1f], 0
jne 0x47d223
cmp dword [esi + 0x6c], 0
mov cl, byte [esp + 0x13]
je 0x47d18e
cmp byte [esi + 0x58], 0
jne 0x47d18e
cmp dword [esp + 0x60], 0
jg 0x47cc8c
test cl, cl
je 0x47d18e
cmp byte [edi + 0x388], 0
jne 0x47d3ca
cmp dword [esi + 0xb8], 0
jne 0x47cd4a
test cl, cl
jne 0x47cd4a
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x2e0]
test dword [eax + 0x40], 0x40003
je 0x47cd4a
cmp dword [edi + 0x140], 0
je 0x47ccf0
cmp byte [ecx + 0x29d], 0
jne 0x47d2d7
push str.Ignoring_the_response_body_n
push edi
mov byte [esi + 0xc9], 1
call fcn.0046c560
add esp, 8
mov eax, dword [edi + 0x49b0]
or eax, dword [edi + 0x49b4]
je 0x47cd1a
cmp byte [esi + 0x7c], 0
jne 0x47cd1a
cmp dword [edi + 0x288], 1
jne 0x47cd1a
cmp byte [esi + 0xc9], 0
je 0x47d2a0
cmp dword [edi + 0x27c], 0
je 0x47cd4a
cmp dword [edi + 0x49ac], 0
jne 0x47cd4a
push dword [esi + 0xb4]
mov ecx, edi
push dword [esi + 0xb0]
call fcn.0047c850
add esp, 8
test al, al
je 0x47d322
inc dword [esi + 0xb8]
cmp byte [edi + 0x390], 0
je 0x47cec1
cmp dword [esi + 0x5c], 0
je 0x47ce2a
cmp byte [edi + 0x378], 0
mov ecx, dword [esi + 0x68]
mov edx, dword [edi + 0x6dc]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], edx
je 0x47cde7
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0xa4]
test eax, eax
je 0x47cde7
push eax
push str.from
push str.Data
push str.__s__s__s_
lea eax, [esp + 0x78]
push 0xa0
push eax
call sym.hrkill.exe_curl_msnprintf
lea ecx, [esp + 0x80]
add esp, 0x18
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47cdc0
sub ecx, edx
lea eax, [esp + 0x68]
push ecx
push eax
xor edx, edx
mov ecx, edi
call fcn.0046cf30
add esp, 8
test eax, eax
jne 0x47ce01
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov eax, dword [edi + 0x1d0]
test eax, eax
je 0x47ce01
push dword [edi + 0x15c]
push ecx
push edx
push 3
push edi
call eax
add esp, 0x14
cmp dword [esi + 0x5c], 1
jne 0x47cec1
push dword [esp + 0x14]
mov edx, 3
mov ecx, edi
push dword [esp + 0x64]
push dword [esi + 0x6c]
call fcn.0046cf90
add esp, 0xc
jmp 0x47cec1
cmp byte [edi + 0x378], 0
mov ecx, dword [esp + 0x60]
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], edx
je 0x47cea7
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0xa4]
test eax, eax
je 0x47cea7
push eax
push str.from
push str.Data
push str.__s__s__s_
lea eax, [esp + 0x78]
push 0xa0
push eax
call sym.hrkill.exe_curl_msnprintf
lea ecx, [esp + 0x80]
add esp, 0x18
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47ce80
sub ecx, edx
lea eax, [esp + 0x68]
push ecx
push eax
xor edx, edx
mov ecx, edi
call fcn.0046cf30
add esp, 8
test eax, eax
jne 0x47cec1
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov eax, dword [edi + 0x1d0]
test eax, eax
je 0x47cec1
push dword [edi + 0x15c]
push ecx
push edx
push 3
push edi
call eax
add esp, 0x14
cmp byte [esi + 0xdc], 0
je 0x47cf53
mov edx, dword [esi + 0x6c]
lea eax, [esp + 0x60]
mov ecx, dword [esp + 0x14]
push eax
push dword [esp + 0x64]
call fcn.004a2ab0
add esp, 8
test eax, eax
jg 0x47d36f
cmp eax, 0xffffffff
jne 0x47cf53
mov eax, dword [esp + 0x14]
and dword [esi + 0xc4], 0xfffffffe
mov ecx, dword [eax + 0x38]
mov dword [esp + 0x18], ecx
test ecx, ecx
je 0x47cf53
push ecx
push str.Leftovers_after_chunking:__zu_bytes_n
push dword [eax]
call fcn.0046c560
mov eax, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [eax]
mov eax, dword [ecx + 0x64]
test eax, eax
je 0x47cf53
test byte [eax + 0x78], 1
je 0x47cf53
push dword [esp + 0x18]
push str.Rewinding__zu_bytes_n
push ecx
call fcn.0046c560
mov eax, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [esp + 0x18]
sub dword [eax + 0x344], ecx
mov byte [eax + 0x2b5], 1
cmp dword [esi + 0x5c], 0
je 0x47cf6c
cmp byte [esi + 0xc9], 0
jne 0x47cf6c
mov eax, dword [esi + 0x68]
add dword [esi + 0x20], eax
adc dword [esi + 0x24], 0
mov ecx, dword [esi + 0x10]
cmp ecx, 0xffffffff
jne 0x47cf7d
cmp dword [esi + 0x14], ecx
je 0x47d046
mov eax, dword [esp + 0x60]
cdq
add eax, dword [esi + 0x20]
adc edx, dword [esi + 0x24]
cmp edx, dword [esi + 0x14]
jl 0x47d046
jg 0x47cf9b
cmp eax, ecx
jb 0x47d046
mov ecx, dword [esp + 0x60]
mov edx, ecx
sub edx, dword [esi + 0x10]
add edx, dword [esi + 0x20]
mov dword [esp + 0x2c], edx
je 0x47d02d
cmp byte [esi + 0xc9], 0
jne 0x47d02d
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
test eax, eax
je 0x47d00c
test byte [eax + 0x78], 1
je 0x47d00c
mov eax, dword [esi + 0x10]
push ecx
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x14]
push eax
push dword [esi + 4]
push dword [esi]
push dword [edi + 0x49a4]
push edx
push str.Rewinding_stream_by_:__zu_bytes_on_url__s__size___I64d__maxdownload___I64d__bytecount___I64d__nread___zd__n
push edi
call fcn.0046c560
mov eax, dword [esp + 0x40]
add esp, 0x2c
mov ecx, dword [esp + 0x2c]
sub dword [eax + 0x344], ecx
mov byte [eax + 0x2b5], 1
jmp 0x47d02d
push dword [esi + 0x24]
mov eax, dword [esi + 0x10]
push dword [esi + 0x20]
push dword [esi + 0x14]
push eax
push dword [esi + 4]
push dword [esi]
push edx
push str.Excess_found_in_a_non_pipelined_read:_excess___zu__size___I64d__maxdownload___I64d__bytecount___I64d_n
push edi
call fcn.0046c560
add esp, 0x24
mov eax, dword [esi + 0x10]
mov ecx, 0
sub eax, dword [esi + 0x20]
cmovs eax, ecx
and dword [esi + 0xc4], 0xfffffffe
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
mov ecx, edi
cdq
add dword [esi + 0x20], eax
adc dword [esi + 0x24], edx
push dword [esi + 0x24]
push dword [esi + 0x20]
call fcn.00481120
add esp, 8
cmp byte [esi + 0xdc], 0
jne 0x47d18a
cmp dword [esp + 0x60], 0
jne 0x47d087
cmp dword [esi + 0x5c], 0
jne 0x47d08d
mov cl, byte [esp + 0x13]
test cl, cl
je 0x47d18e
cmp dword [esi + 0x5c], 0
je 0x47d10b
cmp byte [esi + 0xc9], 0
jne 0x47d10b
mov edx, dword [esi + 0x10]
mov eax, edx
mov ecx, dword [esi + 0x14]
and eax, ecx
cmp eax, 0xffffffff
je 0x47d0cb
xor eax, eax
cmp eax, ecx
jl 0x47d0cb
jg 0x47d0b2
cmp dword [esi + 0x68], edx
jbe 0x47d0cb
push dword [esi + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, 1
push dword [edi + 0x6dc]
call fcn.0046cd90
jmp 0x47d0fc
mov ecx, dword [esi + 0x68]
mov edx, dword [edi + 0x6dc]
test ecx, ecx
jne 0x47d0ec
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x20], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47d0e1
sub ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x18]
push edx
mov edx, 1
call fcn.0046cc00
add esp, 8
mov dword [esp + 0x24], eax
test eax, eax
jne 0x47cb6e
cmp dword [esi + 0x5c], 2
jge 0x47d177
cmp byte [esi + 0xc9], 0
jne 0x47d177
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x6c]
mov eax, dword [ecx + 0x2e0]
test dword [eax + 0x40], 0xc000
je 0x47d142
push dword [esp + 0x60]
call fcn.00492970
add esp, 4
mov dword [esp + 0x24], eax
jmp 0x47d17b
mov ecx, dword [esp + 0x60]
test ecx, ecx
jne 0x47d15e
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x20], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47d153
sub ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x18]
push edx
mov edx, 1
call fcn.0046cc00
add esp, 8
mov dword [esp + 0x24], eax
jmp 0x47d17b
mov eax, dword [esp + 0x24]
mov dword [esi + 0x5c], 0
test eax, eax
jne 0x47cb6e
mov cl, byte [esp + 0x13]
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x2e0]
cmp dword [eax + 0x34], 0
je 0x47d1b2
cmp dword [esp + 0x2c], 0
jbe 0x47d1b2
cmp byte [edx + 0x2b5], 0
je 0x47d411
test cl, cl
je 0x47d1bd
and dword [esi + 0xc4], 0xfffffffe
mov eax, dword [edx + 0x2e0]
test byte [eax + 0x40], 0x30
jne 0x47d20b
mov eax, dword [edx + 0x1fc]
test eax, eax
je 0x47cb25
push eax
call fcn.00503940
add esp, 4
test eax, eax
jne 0x47d207
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x22c]
test eax, eax
je 0x47cb25
push eax
call fcn.00503940
add esp, 4
test eax, eax
je 0x47cb25
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
mov eax, ecx
dec ecx
mov dword [esp + 0x30], ecx
test eax, eax
jne 0x47c931
jmp 0x47cb25
mov ecx, dword [esp + 0x60]
test ecx, ecx
jle 0x47cb25
mov eax, dword [edx]
mov eax, dword [eax + 0x64]
test eax, eax
je 0x47d26d
test byte [eax + 0x78], 1
je 0x47d26d
push dword [edi + 0x49a4]
push ecx
push str.Rewinding_stream_by_:__zd_bytes_on_url__s__zero_length_body__n
push edi
call fcn.0046c560
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov eax, dword [esp + 0x60]
sub dword [ecx + 0x344], eax
mov byte [ecx + 0x2b5], 1
jmp 0x47cb29
push dword [edi + 0x49a4]
push dword [esp + 0x64]
push str.Excess_found_in_a_non_pipelined_read:_excess___zd_url___s__zero_length_body__n
push edi
call fcn.0046c560
add esp, 0x10
jmp 0x47cb25
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x104]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
mov eax, dword [esi]
cmp eax, dword [edi + 0x49b0]
jne 0x47d2fb
mov eax, dword [esi + 4]
cmp eax, dword [edi + 0x49b4]
jne 0x47d2fb
push str.The_entire_document_is_already_downloaded
push edi
call fcn.0046c560
mov eax, dword [esp + 0x1c]
add esp, 8
cmp byte [eax + 0x29d], 1
je 0x47d2d7
mov byte [eax + 0x29d], 1
mov eax, dword [esp + 0x28]
and dword [esi + 0xc4], 0xfffffffe
mov byte [eax], 1
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x104]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
push str.HTTP_server_doesnt_seem_to_support_byte_ranges._Cannot_resume.
push edi
call fcn.0046c5e0
add esp, 8
mov eax, 0x21
pop edi
pop esi
mov ecx, dword [esp + 0x104]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x28]
push str.Simulate_a_HTTP_304_response__n
push edi
mov byte [eax], 1
mov dword [edi + 0x4a18], 0x130
call fcn.0046c560
mov eax, dword [esp + 0x1c]
add esp, 8
cmp byte [eax + 0x29d], 1
je 0x47cb6c
mov byte [eax + 0x29d], 1
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x104]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
cmp eax, 4
jne 0x47d39b
push str.Failed_writing_data
push edi
call fcn.0046c5e0
add esp, 8
mov eax, 0x17
pop edi
pop esi
mov ecx, dword [esp + 0x104]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
mov ecx, eax
call fcn.004a2fa0
push eax
push str._s_in_chunked_encoding
push edi
call fcn.0046c5e0
add esp, 0xc
mov eax, 0x38
pop edi
pop esi
mov ecx, dword [esp + 0x104]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x2e0]
mov eax, dword [eax + 0x44]
and eax, 0x200
sete dl
test eax, eax
jne 0x47d3f1
cmp dl, byte [ecx + 0x29d]
je 0x47d3f1
mov byte [ecx + 0x29d], dl
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10c]
pop edi
pop esi
mov byte [eax], 1
xor ecx, esp
mov eax, 8
call fcn.004aa758
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x60]
lea ecx, [esp + 0x67]
add dword [esi + 0x6c], eax
mov eax, dword [esp + 0x2c]
push ecx
mov dword [esp + 0x64], eax
lea ecx, [esp + 0x64]
mov eax, dword [edx + 0x2e0]
push ecx
push edx
push edi
mov eax, dword [eax + 0x34]
call eax
add esp, 0x10
test eax, eax
jne 0x47cb6e
cmp byte [esp + 0x67], al
je 0x47cb25
or dword [esi + 0xc4], 1
jmp 0x47cb25