Function at 0x4ec9ac
Capabilities:
Check for time delay via gettickcount
Check http status code
Contain obfuscated stackstrings
Get http request uri
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
sub esp, 0x9a8
lea ebp, [esp - 4]
mov eax, dword [0x70b744]
xor eax, ebp
mov dword [ebp + 0x9a8], eax
push 0x320
mov eax, 0x5da2fa
call fcn.005234e3
mov esi, ecx
mov dword [ebp - 0x64], esi
mov eax, dword [ebp + 0x9b4]
mov dword [ebp - 0x50], eax
mov edi, dword [ebp + 0x9bc]
or dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], 1
xor ebx, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x68], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x11], bl
mov byte [ebp - 0x25], bl
cmp edi, ebx
je 0x4eca12
mov dword [ebp - 0x34], edi
jmp 0x4eca18
lea eax, [ebp - 0x68]
mov dword [ebp - 0x34], eax
cmp dword [ebp + 0x9c0], ebx
jne 0x4eca2c
mov eax, dword [esi + 0x21c]
mov dword [ebp + 0x9c0], eax
mov byte [ebp - 0x1d], bl
mov byte [ebp + 0x898], bl
mov dword [ebp - 4], ebx
cmp byte [esi + 0x248], bl
jne 0x4ed802
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp + 0x9b8]
jae 0x4ed802
cmp dword [ebp - 0x1c], ebx
jne 0x4eca62
cmp dword [ebp - 0x24], 1
jne 0x4ed802
cmp byte [ebp - 0x11], bl
jne 0x4ed802
cmp dword [esi + 0x298], ebx
jne 0x4ed439
mov eax, dword [esi + 0x364]
cmp eax, ebx
je 0x4eca8e
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [esi + 0x364], ebx
mov byte [ebp - 0x1d], 1
mov dword [ebp - 0x70], 0x67cff0
mov dword [ebp - 0x6c], ebx
mov byte [ebp + 0x834], bl
push 0x63
push ebx
lea eax, [ebp + 0x835]
push eax
call fcn.00522720
add esp, 0xc
push 0x63
push dword [ebp - 0x24]
lea eax, [ebp + 0x834]
push eax
mov ecx, esi
call fcn.004eb571
push ebx
push 0x84400100
lea eax, [ebp - 0x70]
push eax
push ebx
push ebx
lea eax, [ebp + 0x834]
push eax
push 0x67cfe4
push dword [esi + 0x360]
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [esi + 0x364], eax
cmp eax, ebx
jne 0x4ecb1b
push esi
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
push str._NC.ReadHttp.NoFileIn
call fcn.004ac9bc
mov byte [ebp - 4], 1
mov byte [ebp - 4], bl
mov ecx, 0x721f18
call fcn.004bc4ff
cmp dword [ebp - 0x24], 1
je 0x4ecb74
cmp dword [esi + 0x184], 8
je 0x4ecb74
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x250]
cmp eax, 0x1388
jae 0x4ecb49
cmp dword [esi + 0x19c], 0x98968c
jg 0x4ecb5e
mov eax, dword [esi + 0x184]
cmp eax, 0xa
je 0x4ecb5e
cmp eax, 0xc
je 0x4ecb5e
cmp eax, 0xd
jne 0x4ecb74
mov eax, 0x1f40
cmp dword [esi + 0x184], 0xd
jne 0x4ecb71
mov eax, 0x7530
push eax
jmp 0x4ecb86
cmp dword [ebp + 0x9c0], 0x1f40
jbe 0x4ecb97
push dword [ebp + 0x9c0]
push dword [esi + 0x364]
mov ecx, dword [0x752bb0]
call fcn.004f60b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x2c8], eax
push ebx
push ebx
push ebx
push ebx
push dword [esi + 0x364]
call dword [sym.imp.WININET.dll_HttpSendRequestA]
mov dword [ebp - 0x1c], eax
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x1c], ebx
jne 0x4ece04
cmp dword [ebp - 0x24], 1
je 0x4ecc2f
push dword [esi + 0x364]
mov ecx, dword [0x752bb0]
call fcn.004f6110
test al, al
jne 0x4ecc2f
mov dword [ebp - 0x24], 1
push dword [esi + 0x364]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [esi + 0x364], ebx
push esi
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
push str._NC.ReadHttp.GetBlockTimeout
call fcn.004ac9bc
mov byte [ebp - 4], 2
mov byte [ebp - 4], bl
mov ecx, 0x721f18
call fcn.004bc4ff
dec dword [esi + 0x19c]
jmp 0x4eca38
call edi
mov edi, eax
push ebx
push str.readDatahttp.SendRequest.
lea ecx, [ebp - 0x1d8]
call fcn.004ac9bc
mov byte [ebp - 4], 3
push ebx
push edi
lea ecx, [ebp - 0x23c]
call fcn.004ac6f7
mov byte [ebp - 4], 4
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
lea eax, [ebp - 0x1d8]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 5
mov byte [ebp - 4], 4
mov ecx, esi
call fcn.004ea560
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x23c]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x1d8]
call fcn.004ac66a
push dword [esi + 0x364]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [esi + 0x364], ebx
push ebx
cmp edi, 0x2ef1
jne 0x4ecd28
push str._NC.ReadHttp.Failed1.
lea ecx, [ebp - 0x124]
call fcn.004ac9bc
mov byte [ebp - 4], 6
push esi
push ebx
push ebx
push edi
lea ecx, [ebp - 0x2a8]
call fcn.004ac6f7
mov byte [ebp - 4], 7
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
lea eax, [ebp - 0x124]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 8
mov byte [ebp - 4], 7
mov ecx, 0x721f30
call fcn.004cc5c3
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2a8]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x124]
jmp 0x4ecdba
cmp edi, 2
jne 0x4ecd50
push dword [0x7224e8]
lea eax, [ebp + 0x834]
push eax
call dword [sym.imp.WININET.dll_InternetGoOnlineA]
test eax, eax
je 0x4ecdbf
mov dword [ebp - 0x1c], 1
jmp 0x4eca38
push str._NC.ReadHttp.Failed1.
lea ecx, [ebp - 0x16c]
call fcn.004ac9bc
mov byte [ebp - 4], 9
push esi
push ebx
push ebx
push edi
lea ecx, [ebp - 0xb8]
call fcn.004ac6f7
mov byte [ebp - 4], 0xa
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
lea eax, [ebp - 0x16c]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
mov ecx, 0x721f18
call fcn.004bc4ff
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb8]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x16c]
call fcn.004ac66a
cmp dword [esi + 0x298], ebx
jne 0x4ed256
xor edi, edi
inc edi
cmp dword [ebp - 0x24], edi
je 0x4ed256
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
push str._NC.ReadHttp.Retry
call fcn.004ac807
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], bl
mov ecx, 0x721f30
call fcn.004cbdaf
mov dword [ebp - 0x24], edi
jmp 0x4eca38
push dword [esi + 0x364]
mov ecx, dword [0x752bb0]
call fcn.004f6110
or dword [ebp - 0x24], 0xffffffff
push 0x64
push ebx
lea eax, [ebp + 0x7d0]
push eax
call fcn.00522720
add esp, 0xc
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x38], 0x63
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x7d0]
push eax
push 0x13
push dword [esi + 0x364]
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
push ebx
sub esp, 0x24
mov edi, esp
mov dword [ebp - 0x2c], esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
lea eax, [ebp + 0x7d0]
push eax
call fcn.00410b44
mov byte [ebp - 4], 0xd
push edi
mov byte [ebp - 4], bl
call fcn.004ae0cb
add esp, 0x20
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], bl
call fcn.004dc194
add esp, 0x28
mov edi, eax
cmp edi, ebx
jle 0x4ecf79
cmp edi, 0xc8
je 0x4ecf79
push 0x3e8
push ebx
lea eax, [ebp + 0x3e8]
push eax
call fcn.00522720
add esp, 0xc
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x38], 0x3e7
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x3e8]
push eax
push 0x14
push dword [esi + 0x364]
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
lea eax, [ebp + 0x3e8]
push eax
call fcn.00410b44
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x218]
push eax
mov byte [ebp - 4], bl
call fcn.004ae022
add esp, 0x20
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x18], 8
jb 0x4ecf19
mov eax, dword [eax + 4]
jmp 0x4ecf1c
add eax, 4
push eax
push edi
push str.Could_not_establish_a_connection:__d___s
lea eax, [ebp - 0x1b4]
push eax
call fcn.004ad306
add esp, 0x10
mov byte [ebp - 4], 0x12
push ebx
push 1
lea ecx, [ebp - 0x218]
call fcn.00410779
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
lea eax, [ebp - 0x1b4]
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0x12
mov ecx, 0x721f18
call fcn.0041122b
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x1b4]
call fcn.004ac66a
mov byte [ebp + 0x3e7], bl
mov dword [ebp - 0x38], 0x3e6
push ebx
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp]
push eax
push 0x16
push dword [esi + 0x364]
mov edi, dword [sym.imp.WININET.dll_HttpQueryInfoA]
call edi
test eax, eax
je 0x4ecfc3
cmp dword [esi + 0x19c], 0x989683
jl 0x4ecfc3
push str.X_Measure
lea eax, [ebp]
push eax
call fcn.00526200
pop ecx
pop ecx
test eax, eax
jne 0x4ecfc9
mov dword [esi + 0x2c8], ebx
cmp byte [0x722270], bl
jne 0x4ed0c4
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x54], ebx
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x45]
push eax
push 0x42
push dword [esi + 0x364]
call edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4ed0bd
mov eax, dword [ebp - 0x44]
inc eax
push eax
call fcn.004fed14
pop ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.004288f2
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x44]
mov byte [eax + ecx], bl
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x60]
push 0x42
push dword [esi + 0x364]
call edi
test eax, eax
je 0x4ed0b2
push ebx
push dword [ebp - 0x60]
lea ecx, [ebp - 0x94]
call fcn.004ac807
mov byte [ebp - 4], 0x15
push ebx
push str.HTTP_via:
lea ecx, [ebp - 0x1fc]
call fcn.004ac9bc
mov byte [ebp - 4], 0x16
push ebx
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x18], esp
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x1fc]
push ecx
push eax
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
mov ecx, 0x721f18
call fcn.004112c4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1fc]
call fcn.004ac66a
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x94]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x60]
call fcn.00448c99
mov byte [0x722270], 1
mov edi, dword [esi + 0x364]
neg edi
sbb edi, edi
not edi
and edi, dword [ebp - 0x40]
push dword [0x7224e8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4ed11b
push ebx
lea ecx, [ebp - 0x32c]
call fcn.004cb9f4
mov byte [ebp - 4], 0x18
push ebx
push 7
push edi
push dword [esi + 0x364]
push dword [0x7224e8]
call dword [sym.imp.WININET.dll_InternetErrorDlg]
mov edi, eax
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x32c]
call fcn.004cbcf8
jmp 0x4ed11d
xor edi, edi
cmp edi, 0x2f00
jne 0x4ed159
push esi
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push str._NC.ReadHttp.Resend
call fcn.004ac9bc
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], bl
mov ecx, 0x721f30
call fcn.004cc5c3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x58], eax
jmp 0x4ecb97
cmp edi, ebx
je 0x4ed25e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push ebx
push str.readDatahttp.InternetErrorDlg.Error.
lea ecx, [ebp - 0x94]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1a
push ebx
push edi
lea ecx, [ebp - 0xb8]
call fcn.004ac6f7
mov byte [ebp - 4], 0x1b
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
lea eax, [ebp - 0x94]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x1b
mov ecx, esi
call fcn.004ea560
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb8]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x94]
call fcn.004ac66a
push dword [esi + 0x364]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [esi + 0x364], ebx
push ebx
push 0x67d1f8
lea ecx, [ebp - 0x94]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1d
push esi
push ebx
push ebx
push edi
lea ecx, [ebp - 0xb8]
call fcn.004ac6f7
mov byte [ebp - 4], 0x1e
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
lea eax, [ebp - 0x94]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x1e
mov ecx, 0x721f18
call fcn.004bc4ff
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xb8]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x94]
call fcn.004ac66a
or eax, 0xffffffff
jmp 0x4ed897
mov dword [ebp - 0x3c], 0x10
push ebx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x998]
push eax
push 5
push dword [esi + 0x364]
mov edi, dword [sym.imp.WININET.dll_HttpQueryInfoA]
call edi
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x998]
push eax
call fcn.00526509
pop ecx
mov dword [esi + 0x298], eax
mov dword [ebp - 0x3c], 4
push ebx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x898]
push eax
push 0x13
push dword [esi + 0x364]
call edi
mov dword [ebp - 0x1c], eax
push 0x67d1f4
lea eax, [ebp + 0x898]
push eax
call fcn.00526410
pop ecx
pop ecx
mov dword [ebp - 0x3c], 0xfa
push ebx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x898]
push eax
call fcn.005235d0
pop ecx
lea eax, [ebp + eax + 0x898]
push eax
push 0x29
push dword [esi + 0x364]
call edi
push 3
push 0x67d1f0
lea eax, [ebp + 0x898]
push eax
call fcn.00520c6b
add esp, 0xc
test eax, eax
je 0x4ed439
push 3
push 0x67d1ec
lea eax, [ebp + 0x898]
push eax
call fcn.00520c6b
add esp, 0xc
test eax, eax
je 0x4ed439
push 3
push 0x67d1e8
lea eax, [ebp + 0x898]
push eax
call fcn.00520c6b
add esp, 0xc
test eax, eax
je 0x4ed439
push ebx
push str.readDatahttp.WrongStatus.
lea ecx, [ebp - 0x100]
call fcn.004ac9bc
mov byte [ebp - 4], 0x20
push ebx
lea eax, [ebp + 0x898]
push eax
lea ecx, [ebp - 0x284]
call fcn.004ac807
mov byte [ebp - 4], 0x21
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
lea eax, [ebp - 0x100]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x21
mov ecx, esi
call fcn.004ea560
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x284]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x100]
call fcn.004ac66a
mov dword [ebp - 0x1c], ebx
push ebx
push str._NC.ReadHttp.WrongStatus.
lea ecx, [ebp - 0x190]
call fcn.004ac9bc
mov byte [ebp - 4], 0x23
push esi
push ebx
push ebx
lea eax, [ebp + 0x898]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.004ac807
mov byte [ebp - 4], 0x24
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
lea eax, [ebp - 0x190]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x24
mov ecx, 0x721f18
call fcn.004bc4ff
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x2cc]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x190]
call fcn.004ac66a
mov eax, dword [esi + 0x298]
cmp eax, ebx
jne 0x4ed498
cmp dword [ebp - 0x24], 1
je 0x4ed498
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push str.readDatahttp.NoData
call fcn.004ac9bc
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ea560
mov dword [ebp - 0x1c], ebx
push esi
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push str._NC.ReadHttp.Failed3
call fcn.004ac9bc
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], bl
mov ecx, 0x721f18
call fcn.004bc4ff
jmp 0x4eca38
cmp dword [ebp - 0x1c], ebx
je 0x4eca38
mov edi, dword [ebp + 0x9b8]
sub edi, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edi
cmp edi, eax
jbe 0x4ed4b3
mov edi, eax
mov eax, dword [ebp - 0x34]
mov dword [eax], ebx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp + 0x9c0]
add eax, ecx
mov dword [ebp - 0x40], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x40]
sub ecx, eax
cmp ecx, ebx
jg 0x4ed4de
cmp edi, dword [ebp - 0x2c]
jae 0x4ed4de
mov byte [ebp - 0x11], 1
cmp byte [ebp - 0x11], bl
jne 0x4ed501
push dword [ebp - 0x34]
push edi
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x30]
add eax, ecx
push eax
push dword [esi + 0x364]
call dword [sym.imp.WININET.dll_InternetReadFile]
mov dword [ebp - 0x1c], eax
jmp 0x4ed527
push esi
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push str._NC.ReadHttp.Timeout
call fcn.004ac9bc
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], bl
mov ecx, 0x721f18
call fcn.004bc4ff
cmp dword [ebp - 0x1c], ebx
je 0x4ed623
cmp byte [ebp - 0x1d], bl
je 0x4ed61a
push 2
push 0x67c84c
push dword [ebp - 0x50]
call fcn.00520c6b
add esp, 0xc
test eax, eax
je 0x4ed61a
push 3
pop edi
push edi
push 0x67d1f0
lea eax, [ebp + 0x898]
push eax
call fcn.00520c6b
add esp, 0xc
test eax, eax
je 0x4ed5a1
push edi
push 0x67d1ec
lea eax, [ebp + 0x898]
push eax
call fcn.00520c6b
add esp, 0xc
test eax, eax
je 0x4ed5a1
push edi
push 0x67d1e8
lea eax, [ebp + 0x898]
push eax
call fcn.00520c6b
add esp, 0xc
test eax, eax
jne 0x4ed61a
cmp dword [esi + 0x15c], 4
jne 0x4ed5b6
cmp dword [esi + 0x19c], 0x989682
jg 0x4ed61a
push esi
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push str._NC.ReadHttp.WrongMC
call fcn.004ac9bc
cmp byte [ebp - 0x25], bl
jne 0x4ed602
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], bl
mov ecx, 0x721f30
call fcn.004cc5c3
mov byte [ebp - 0x25], 1
mov dword [esi + 0x298], ebx
dec dword [esi + 0x19c]
mov dword [esi + 0x158], edi
mov dword [esi + 0x15c], edi
jmp 0x4eca38
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], bl
mov ecx, 0x721f18
call fcn.004bc4ff
or dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jne 0x4ed706
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push ebx
push str.readDatahttp.NoSuccess.
lea ecx, [ebp - 0x148]
call fcn.004ac9bc
mov byte [ebp - 4], 0x2b
push ebx
push edi
lea ecx, [ebp - 0x2f0]
call fcn.004ac7aa
mov byte [ebp - 4], 0x2c
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
lea eax, [ebp - 0x148]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x2c
mov ecx, esi
call fcn.004ea560
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x2f0]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x148]
call fcn.004ac66a
push ebx
push str._NC.ReadHttp.Failed4.
lea ecx, [ebp - 0xdc]
call fcn.004ac9bc
mov byte [ebp - 4], 0x2e
push esi
push ebx
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.004ac7aa
mov byte [ebp - 4], 0x2f
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
lea eax, [ebp - 0xdc]
push eax
push ecx
call fcn.004adc57
add esp, 0xc
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x2f
mov ecx, 0x721f18
call fcn.004bc4ff
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x260]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0xdc]
call fcn.004ac66a
cmp dword [esi + 0x2c8], ebx
je 0x4ed764
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0x2710
jbe 0x4ed764
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [esi + 0x2c8]
je 0x4ed75e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
imul eax, eax, 0x3e8
xor edx, edx
div ecx
mov dword [ebp - 0x2c], eax
lea ecx, [esi + 0x2c4]
mov edx, dword [esi + 0x2c0]
lea edi, [edx + 1]
mov eax, dword [ecx]
imul eax, edx
add eax, dword [ebp - 0x2c]
xor edx, edx
div edi
mov dword [ecx], eax
mov dword [esi + 0x2c0], edi
mov dword [esi + 0x2c8], ebx
mov byte [ebp - 0x1d], bl
mov edi, dword [ebp - 0x34]
mov eax, dword [edi]
add dword [ebp - 0x30], eax
sub dword [esi + 0x298], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, dword [ebp - 0x40]
jbe 0x4ed7b5
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp + 0x9b8]
jae 0x4ed7b5
mov byte [ebp - 0x11], 1
push esi
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push str._NC.ReadHttp.Timeout2
call fcn.004ac9bc
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], bl
mov ecx, 0x721f18
call fcn.004bc4ff
cmp dword [ebp - 0x1c], ebx
je 0x4ed7c6
cmp dword [edi], ebx
jne 0x4ed7c6
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [esi + 0x248], bl
jne 0x4ed802
cmp dword [ebp - 0x1c], ebx
je 0x4eca38
mov eax, dword [ebp + 0x9b8]
cmp dword [ebp - 0x30], eax
jae 0x4eca38
mov eax, dword [esi + 0x298]
cmp eax, ebx
jbe 0x4eca38
cmp byte [ebp - 0x11], bl
je 0x4ed4a1
jmp 0x4eca38
or dword [ebp - 4], 0xffffffff
jmp 0x4ed817
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], ebx
je 0x4ed842
cmp eax, dword [ebp + 0x9b8]
jne 0x4ed842
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
cmp eax, 5
jbe 0x4ed83d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x250], eax
mov dword [ebp - 0x24], ebx
jmp 0x4ed873
cmp byte [ebp - 0x11], bl
je 0x4ed873
mov dword [ebp - 0x24], 1
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push str.readDatahttp.Timedout
call fcn.004ac9bc
mov dword [ebp - 4], 0x33
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004ea560
lea edi, [esi + 0x298]
cmp dword [edi], ebx
je 0x4ed882
cmp dword [ebp - 0x1c], ebx
jne 0x4ed894
add esi, 0x364
push dword [esi]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [edi], ebx
mov dword [esi], ebx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x9a8]
xor ecx, ebp
call fcn.0051d721
add ebp, 0x9ac
leave
ret 0x10