Function at 0x47a1d5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x834
mov eax, 0x5c7a6d
call fcn.00595e89
mov esi, ecx
xor edi, edi
inc edi
mov dword [ebp - 4], edi
lea eax, [ebp - 0x820]
push str.wininet:_Beginning_file_download:
push eax
lea ecx, [ebp + 8]
call fcn.004046a1
mov byte [ebp - 4], 2
push 0x623984
push eax
lea eax, [ebp - 0x834]
push eax
call fcn.0040463d
add esp, 0x14
mov byte [ebp - 4], 3
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp - 0x838]
push eax
call fcn.004045e6
mov byte [ebp - 4], 4
add esp, 8
mov ecx, esp
mov dword [ebp - 0x81c], esp
push 0x61e054
push eax
push ecx
call fcn.0040463d
add esp, 0xc
mov byte [ebp - 4], 5
push 4
mov byte [ebp - 4], 4
call fcn.0040b216
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x838]
call fcn.00401752
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x834]
call fcn.00401752
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x820]
call fcn.00401752
xor ebx, ebx
cmp dword [ebp + 0x10], edi
mov dword [esi + 0x4c], ebx
jne 0x47a2de
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x818], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 6
mov byte [ebp - 4], 1
call fcn.0040c97a
cmp eax, edi
pop ecx
jne 0x47a2de
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x818], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 7
mov byte [ebp - 4], 1
call fcn.00465019
pop ecx
mov dword [esi + 0x50], eax
mov dword [esi + 0x48], edi
jmp 0x47a2e7
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x48], ebx
mov edi, 0x61b5f4
lea ecx, [esi + 0x3c]
push edi
mov dword [esi + 0x60], ebx
mov dword [esi + 0x38], 0xc8
call fcn.004014d3
call fcn.0047a8dc
test eax, eax
jne 0x47a329
mov byte [ebp - 4], bl
lea ecx, [ebp + 8]
call fcn.00401752
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401752
xor eax, eax
call fcn.00595f0c
ret 0x10
push ebx
push ebx
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x814]
push eax
push ebx
lea ecx, [ebp + 8]
call fcn.0040133e
push eax
call fcn.0047b81f
add esp, 0x10
lea eax, [ebp - 0x814]
mov ecx, esp
mov dword [ebp - 0x818], esp
push eax
call fcn.004015a6
mov byte [ebp - 4], 8
mov byte [ebp - 4], 1
call fcn.0047a9de
cmp eax, ebx
je 0x47a308
lea eax, [ebp - 0x840]
push eax
call fcn.00410e40
mov byte [ebp - 4], 9
push dword [esi + 0x48]
lea ecx, [ebp - 0x81c]
push ecx
mov ecx, eax
call fcn.004111e4
mov dword [ebp - 0x820], eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x824]
call fcn.004015a6
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x828]
push str.wininet:_sending_GET
push ecx
mov ecx, eax
call fcn.004046a1
mov byte [ebp - 4], 0xc
push str.__resume
push eax
lea eax, [ebp - 0x82c]
push eax
call fcn.0040463d
add esp, 0x14
mov byte [ebp - 4], 0xd
push dword [ebp - 0x820]
push eax
lea eax, [ebp - 0x830]
push eax
call fcn.004045e6
mov byte [ebp - 4], 0xe
add esp, 8
mov ecx, esp
mov dword [ebp - 0x818], esp
push 0x61d4fc
push eax
push ecx
call fcn.0040463d
add esp, 0xc
mov byte [ebp - 4], 0xf
push 8
mov byte [ebp - 4], 0xe
call fcn.0040b216
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x830]
call fcn.00401752
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x82c]
call fcn.00401752
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x828]
call fcn.00401752
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x824]
call fcn.00401752
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x81c]
call fcn.00401752
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x840]
call fcn.00410ee0
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x818], esp
push edi
call fcn.004015a6
mov byte [ebp - 4], 0x10
push ecx
lea eax, [ebp - 0x414]
mov ecx, esp
mov dword [ebp - 0x81c], esp
push eax
call fcn.004015a6
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x824], esp
push 0x635b00
call fcn.004015a6
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 1
mov ecx, esi
call fcn.0047aaed
cmp eax, ebx
jne 0x47a4d8
call fcn.0047a0c4
jmp 0x47a308
push ecx
mov eax, esp
mov dword [ebp - 0x818], esp
push str.wininet:_writing
push eax
lea ecx, [ebp + 0xc]
call fcn.004046a1
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
push 8
mov byte [ebp - 4], 1
call fcn.0040b216
push ebx
lea ecx, [ebp + 0xc]
call fcn.0040133e
push ecx
mov ecx, esp
mov dword [ebp - 0x818], esp
push eax
call fcn.004015a6
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 1
call fcn.0047b4ec
cmp eax, ebx
je 0x47a4ce
mov ecx, esi
call fcn.0047b244
test eax, eax
jne 0x47a583
call fcn.0047b7ab
call fcn.0047a0c4
cmp dword [ebp + 0x14], ebx
jne 0x47a563
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x818], esp
push eax
call fcn.004049a2
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 1
call fcn.0040cd4f
pop ecx
xor esi, esi
mov byte [ebp - 4], bl
lea ecx, [ebp + 8]
call fcn.00401752
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401752
mov eax, esi
jmp 0x47a321
call fcn.0047b7ab
call fcn.0047a0c4
push ecx
mov ecx, esp
mov dword [ebp - 0x818], esp
push str.wininet:_Finished_download.
call fcn.004015a6
mov byte [ebp - 4], 0x16
push 8
mov byte [ebp - 4], 1
call fcn.0040b216
xor esi, esi
inc esi
jmp 0x47a565