Function at 0x4c83a2
Capabilities:
Check http status code
Contain obfuscated stackstrings
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ed5f8
push 0x489ac0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, 0x1074
call fcn.00486a70
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x108c], ecx
mov dword [ebp - 0xf88], 0
mov dword [ebp - 0xf8c], 0
mov dword [ebp - 0xf90], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x224], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x223]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x120], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x11f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xf84], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xf83]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xf98], 0
mov byte [ebp - 0xe80], 0
mov ecx, 0x315
xor eax, eax
lea edi, [ebp - 0xe7f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x228], 3
mov byte [ebp - 0xf94], 0
mov dword [ebp - 4], 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x108c]
mov dword [ecx + 0x73c], eax
mov edx, dword [ebp - 0x108c]
cmp dword [edx + 0x73c], 0
jne 0x4c84c7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0xf88], 0x2001c042
jmp 0x4c8a24
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x108c]
mov dword [ecx + 0x740], eax
mov edx, dword [ebp - 0x108c]
cmp dword [edx + 0x740], 0
jne 0x4c850b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0xf88], 0x2001c042
jmp 0x4c8a24
push 1
lea eax, [ebp - 0xf98]
push eax
lea ecx, [ebp - 0x120]
push ecx
push str.E_K1_Dwb_I_
call fcn.004cc2c9
test eax, eax
jne 0x4c8538
mov dword [ebp - 0xf88], 0x2001c011
jmp 0x4c8a24
push 1
lea edx, [ebp - 0xf98]
push edx
lea eax, [ebp - 0xf84]
push eax
push str.Ll
call fcn.004cc2c9
test eax, eax
jne 0x4c8565
mov dword [ebp - 0xf88], 0x2001c011
jmp 0x4c8a24
push 2
push 0x4000000
push 0
push 0
push 0
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0xf84]
push edx
mov eax, dword [ebp - 0x108c]
mov ecx, dword [eax + 0x730]
push ecx
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov edx, dword [ebp - 0x108c]
mov dword [edx + 0x734], eax
mov eax, dword [ebp - 0x108c]
cmp dword [eax + 0x734], 0
jne 0x4c863e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf88], eax
cmp dword [ebp - 0xf88], 0x3e5
je 0x4c85e5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0xf88], 0x2001c045
jmp 0x4c8a24
push 0x3e8
mov ecx, dword [ebp - 0x108c]
mov edx, dword [ecx + 0x73c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0xf8c], eax
cmp dword [ebp - 0xf8c], 0
je 0x4c863e
cmp dword [ebp - 0xf8c], 0xffffffff
jne 0x4c8623
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf90], eax
jmp 0x4c862f
mov eax, dword [ebp - 0xf8c]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0xf88], 0x2001c031
jmp 0x4c8a24
mov byte [ebp - 0xfd4], 0x43
mov byte [ebp - 0xfd3], 0x6f
mov byte [ebp - 0xfd2], 0x6e
mov byte [ebp - 0xfd1], 0x74
mov byte [ebp - 0xfd0], 0x65
mov byte [ebp - 0xfcf], 0x6e
mov byte [ebp - 0xfce], 0x74
mov byte [ebp - 0xfcd], 0x2d
mov byte [ebp - 0xfcc], 0x54
mov byte [ebp - 0xfcb], 0x79
mov byte [ebp - 0xfca], 0x70
mov byte [ebp - 0xfc9], 0x65
mov byte [ebp - 0xfc8], 0x3a
mov byte [ebp - 0xfc7], 0x20
mov byte [ebp - 0xfc6], 0x74
mov byte [ebp - 0xfc5], 0x65
mov byte [ebp - 0xfc4], 0x78
mov byte [ebp - 0xfc3], 0x74
mov byte [ebp - 0xfc2], 0x2f
mov byte [ebp - 0xfc1], 0x70
mov byte [ebp - 0xfc0], 0x6c
mov byte [ebp - 0xfbf], 0x61
mov byte [ebp - 0xfbe], 0x69
mov byte [ebp - 0xfbd], 0x6e
mov byte [ebp - 0xfbc], 0
mov dword [ebp - 0xfdc], 0
mov dword [ebp - 0xf9c], 0
lea ecx, [ebp - 0xfd4]
push ecx
call fcn.0048ded0
add esp, 4
mov dword [ebp - 0xfdc], eax
lea edx, [ebp - 0xe80]
push edx
call fcn.0048ded0
add esp, 4
mov dword [ebp - 0xf9c], eax
mov eax, dword [ebp - 0xf9c]
push eax
lea ecx, [ebp - 0xe80]
push ecx
mov edx, dword [ebp - 0xfdc]
push edx
lea eax, [ebp - 0xfd4]
push eax
mov ecx, dword [ebp - 0x108c]
mov edx, dword [ecx + 0x734]
push edx
call dword [sym.imp.WININET.dll_HttpSendRequestA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4c87e7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf8c], eax
cmp dword [ebp - 0xf8c], 0x3e5
je 0x4c878e
mov dword [ebp - 0xf88], 0x2001c04c
jmp 0x4c8a24
push 0x3e8
mov eax, dword [ebp - 0x108c]
mov ecx, dword [eax + 0x740]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0xf8c], eax
cmp dword [ebp - 0xf8c], 0
je 0x4c87e7
cmp dword [ebp - 0xf8c], 0xffffffff
jne 0x4c87cc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf90], eax
jmp 0x4c87d8
mov edx, dword [ebp - 0xf8c]
mov dword [ebp - 0xf90], edx
mov dword [ebp - 0xf88], 0x2001c031
jmp 0x4c8a24
mov dword [ebp - 0xfb8], 0
mov dword [ebp - 0xfd8], 4
push 0
lea eax, [ebp - 0xfd8]
push eax
lea ecx, [ebp - 0xfb8]
push ecx
push 0x20000013
mov edx, dword [ebp - 0x108c]
mov eax, dword [edx + 0x734]
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
je 0x4c8847
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0xf88], 0x2001c050
jmp 0x4c8a24
push 0x64
push 0
lea ecx, [ebp - 0x1044]
push ecx
call fcn.00486aa0
add esp, 0xc
mov dword [ebp - 0xfd8], 0x64
push 0
lea edx, [ebp - 0xfd8]
push edx
lea eax, [ebp - 0x1044]
push eax
push 0x14
mov ecx, dword [ebp - 0x108c]
mov edx, dword [ecx + 0x734]
push edx
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
je 0x4c88ad
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xf8c], eax
mov dword [ebp - 0xf88], 0x2001c050
jmp 0x4c8a24
cmp dword [ebp - 0xfb8], 0xc8
je 0x4c88be
jmp 0x4c8a24
mov dword [ebp - 0x228], 4
mov dword [ebp - 0xfa0], 0
mov dword [ebp - 0xfe0], 0
push 0x28
push 0
lea eax, [ebp - 0x106c]
push eax
call fcn.00486aa0
add esp, 0xc
mov dword [ebp - 0x106c], 0x28
lea ecx, [ebp - 0xfb4]
mov dword [ebp - 0x1058], ecx
mov dword [ebp - 0x1054], 0x13
push 2
push 0
lea edx, [ebp - 0x106c]
push edx
mov eax, dword [ebp - 0x108c]
mov ecx, dword [eax + 0x734]
push ecx
call dword [sym.imp.WININET.dll_InternetReadFileExA]
test eax, eax
jne 0x4c895a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x4c8955
push 0xffffffffffffffff
mov edx, dword [ebp - 0x108c]
mov eax, dword [edx + 0x740]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x4c895a
jmp 0x4c8a24
mov ecx, dword [ebp - 0xfe0]
add ecx, 1
mov dword [ebp - 0xfe0], ecx
cmp dword [ebp - 0x1054], 0
jne 0x4c89ff
mov dword [ebp - 0xfa0], 1
mov byte [ebp - 0x1080], 0
xor edx, edx
mov dword [ebp - 0x107f], edx
mov dword [ebp - 0x107b], edx
mov dword [ebp - 0x1077], edx
mov dword [ebp - 0x1073], edx
mov word [ebp - 0x106f], dx
mov byte [ebp - 0x106d], dl
mov dword [ebp - 0x228], 4
mov dword [ebp - 0x1084], 0
lea eax, [ebp - 0xfb4]
push eax
push 0x50960c
push 0x14
lea ecx, [ebp - 0x1080]
push ecx
call fcn.004be590
add esp, 0x10
push 0x509610
lea edx, [ebp - 0x1080]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4c89ff
mov dword [ebp - 0x228], 4
mov eax, dword [ebp - 0x1054]
mov byte [ebp + eax - 0xfb4], 0
cmp dword [ebp - 0xfa0], 0
je 0x4c88dc
mov dword [ebp - 0xf88], 0
mov dword [ebp - 4], 0xffffffff
jmp 0x4c8a60
cmp dword [ebp + 8], 0
je 0x4c8a71
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x228]
mov dword [edx], eax
mov ecx, dword [ebp - 0x108c]
cmp dword [ecx + 0x734], 0
je 0x4c8aa3
mov edx, dword [ebp - 0x108c]
mov eax, dword [edx + 0x734]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [ebp - 0x108c]
mov dword [ecx + 0x734], 0
mov edx, dword [ebp - 0x108c]
cmp dword [edx + 0x73c], 0
je 0x4c8ad5
mov eax, dword [ebp - 0x108c]
mov ecx, dword [eax + 0x73c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x108c]
mov dword [edx + 0x73c], 0
mov eax, dword [ebp - 0x108c]
cmp dword [eax + 0x740], 0
je 0x4c8b07
mov ecx, dword [ebp - 0x108c]
mov edx, dword [ecx + 0x740]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x108c]
mov dword [eax + 0x740], 0
mov eax, dword [ebp - 0xf88]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4