Function at 0x4c2068
Capabilities:
Create http request
Create thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffcd8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x310], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
call fcn.00404e50
mov eax, dword [ebp - 8]
call fcn.00404e50
xor eax, eax
push ebp
push 0x4c2462
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
push 0
push 0
push 0
push 0
push 0
call sub.wininet.dll_InternetOpenA
mov esi, eax
push 0
push 0x200000
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00404e60
mov edi, eax
push edi
push esi
call sub.wininet.dll_InternetOpenUrlA
mov ebx, eax
test ebx, ebx
je 0x4c2179
mov dword [ebp - 0x10], 0x105
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x125]
push eax
push 0x13
push ebx
call sub.wininet.dll_HttpQueryInfoA
push 0x4c2474
lea eax, [ebp - 0x125]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x4c2173
mov dword [ebp - 0x10], 0x105
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x125]
push eax
push 5
push ebx
call sub.wininet.dll_HttpQueryInfoA
lea edx, [ebp - 0x30c]
lea eax, [ebp - 0x125]
call fcn.00409ff0
mov eax, dword [ebp - 0x30c]
xor edx, edx
call fcn.00409284
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x4c2173
mov byte [ebp - 9], 1
push ebx
call sub.wininet.dll_InternetCloseHandle
push esi
call sub.wininet.dll_InternetCloseHandle
cmp byte [ebp - 9], 0
je 0x4c2427
mov edx, edi
lea eax, [ebp - 0x125]
call fcn.00409e40
mov eax, dword [ebp - 8]
call fcn.00404e60
mov edx, eax
lea eax, [ebp - 0x22a]
call fcn.00409e40
mov eax, dword [ebp - 0x18]
test eax, eax
jns 0x4c21b7
add eax, 0x1fffff
sar eax, 0x15
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 9
jle 0x4c21ca
mov dword [ebp - 0x1c], 9
mov eax, dword [ebp - 0x1c]
inc eax
push eax
mov eax, dword [ebp - 0x18]
pop edx
mov ecx, edx
cdq
idiv ecx
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x306]
mov edx, 0xdc
call fcn.00407954
mov esi, dword [ebp - 0x1c]
test esi, esi
jl 0x4c2253
inc esi
xor edi, edi
lea ebx, [ebp - 0x306]
lea eax, [ebp - 0x125]
mov dword [ebx], eax
lea eax, [ebp - 0x22a]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0x20]
imul edi
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [ebx + 0xc], eax
xor eax, eax
mov dword [ebx + 0x10], eax
mov byte [ebx + 0x14], 1
cmp edi, dword [ebp - 0x1c]
jne 0x4c2231
mov eax, dword [ebp - 0x18]
sub eax, dword [ebx + 8]
mov dword [ebx + 0xc], eax
lea eax, [ebp - 0x14]
push eax
push 0
push ebx
push 0x4c14f0
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push eax
call sub.kernel32.dll_CloseHandle_1
inc edi
add ebx, 0x16
dec esi
jne 0x4c21fb
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x32c]
xor edx, edx
call fcn.0043ed9c
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x32c]
mov edx, dword [ebp - 0x18]
call fcn.0043eda8
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x32c]
xor edx, edx
call fcn.0043edb8
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x32c]
call fcn.0044ddbc
xor ecx, ecx
push ebp
push 0x4c2418
push dword fs:[ecx]
mov dword fs:[ecx], esp
push 0x3e8
call sub.kernel32.dll_Sleep
xor eax, eax
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x1c]
test esi, esi
jl 0x4c2302
inc esi
lea ebx, [ebp - 0x2f6]
mov eax, dword [ebx]
add dword [ebp - 0x14], eax
cmp byte [ebx + 4], 0xff
jne 0x4c22fc
cmp byte [ebx + 5], 0
jne 0x4c22fc
mov byte [ebx + 5], 1
mov byte [ebx + 4], 1
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebx - 0x10]
push eax
push 0x4c14f0
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push eax
call sub.kernel32.dll_CloseHandle_1
add ebx, 0x16
dec esi
jne 0x4c22c5
lea eax, [ebp - 0x310]
push eax
lea edx, [ebp - 0x324]
mov eax, dword [ebp - 0x18]
call fcn.004c0858
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x320], eax
mov byte [ebp - 0x31c], 0xb
lea edx, [ebp - 0x328]
mov eax, dword [ebp - 0x14]
call fcn.004c0858
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x318], eax
mov byte [ebp - 0x314], 0xb
lea edx, [ebp - 0x320]
mov ecx, 1
mov eax, 0x4c2480
call fcn.0040a4e0
mov edx, dword [ebp - 0x310]
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x324]
call fcn.0044d8b0
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x324]
call fcn.0044ddbc
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x32c]
mov edx, dword [ebp - 0x14]
call fcn.0043edb8
mov eax, dword [0x4ce5c8]
mov eax, dword [eax + 0x32c]
call fcn.0044ddbc
mov eax, dword [ebp - 0x14]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x18]
cdq
cmp edx, dword [esp + 4]
jne 0x4c23bd
cmp eax, dword [esp]
pop edx
pop eax
jne 0x4c23cf
mov byte [ebp - 9], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c2427
mov dl, 1
mov esi, dword [ebp - 0x1c]
test esi, esi
jl 0x4c23f9
inc esi
lea eax, [ebp - 0x2f2]
cmp byte [eax], 1
je 0x4c23ef
cmp byte [eax], 0xff
jne 0x4c23f3
cmp byte [eax + 1], 0
jne 0x4c23f3
xor edx, edx
jmp 0x4c23f9
add eax, 0x16
dec esi
jne 0x4c23df
test dl, dl
je 0x4c240b
mov byte [ebp - 9], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c2427
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c229a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c2469
lea eax, [ebp - 0x328]
mov edx, 2
call fcn.004049c4
lea eax, [ebp - 0x310]
mov edx, 2
call fcn.004049c4
lea eax, [ebp - 8]
mov edx, 2
call fcn.004049c4
ret