Function at 0x4c2470
Capabilities:
Copy file
Delete file
Download and write a file
Get file size
Move file
Query remote server for available data
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55f198
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push ebx
push esi
push edi
mov eax, dword [0x5d0074]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov ecx, dword [edi + 0xc]
lea ebx, [edi + 0xc]
test ecx, ecx
je 0x4c24b4
push dword [edi + 0x18]
mov eax, dword [ecx]
push dword [ebp + 0x10]
push 1
call dword [eax + 0xc]
cmp byte [ebx + 5], 0
jne 0x4c2a6b
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c24d3
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4c2a6b
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0x14]
test eax, eax
je 0x4c2506
cmp eax, esi
jne 0x4c2506
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c24f0
mov eax, dword [ecx]
push 0
push 1
call dword [eax + 0x14]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea eax, [edi + 0x1c]
xor dl, dl
push 0
mov ecx, eax
mov dword [ebp - 0x2c], eax
call fcn.00494c60
add esp, 4
mov dword [ebp + 0x14], eax
test eax, eax
je 0x4c254c
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c2a70
mov edx, dword [ecx]
push 0
push eax
push 0
call dword [edx + 0x24]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
xor eax, eax
mov dword [ebp - 0x40], 0xc
cmp eax, esi
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x38], 0
sbb eax, eax
neg eax
add eax, 2
mov dword [ebp + 0x14], eax
call fcn.004d2b10
mov dword [ebp - 4], 0
cmp byte [edi + 0x80], 0
je 0x4c25b6
test esi, esi
jne 0x4c25b6
sub esp, 8
lea ecx, [ebp - 0x6c]
push 0x590584
call fcn.004d2d00
sub esp, 8
lea ecx, [ebp - 0x6c]
push str.S_1_5_18
call fcn.004d2d00
lea ecx, [ebp - 0x6c]
call fcn.004d3140
mov dword [ebp - 0x3c], eax
mov ecx, dword [edi + 0x1c]
cmp dword [ecx - 4], 1
jle 0x4c25cd
push dword [ecx - 0xc]
lea ecx, [edi + 0x1c]
call fcn.004141b0
mov ecx, dword [edi + 0x1c]
push 0
push 0x80
push dword [ebp + 0x14]
xor edx, edx
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x3c], edx
cmove eax, edx
push eax
push edx
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x14], eax
cmp eax, 0xffffffff
je 0x4c2609
test esi, esi
je 0x4c2609
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.004d2bb0
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x34], 0x57dd44
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 1
cmp eax, 0xffffffff
jne 0x4c2673
cmp byte [ebx + 5], 0
jne 0x4c2669
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c2648
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4c2669
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebx]
mov edi, eax
test ecx, ecx
je 0x4c2a32
mov eax, dword [ecx]
push 0
push edi
push 0
call dword [eax + 0x24]
jmp 0x4c2a32
mov edi, 0xe0000008
jmp 0x4c2a32
mov ecx, dword [ebx]
test esi, esi
je 0x4c2680
test ecx, ecx
je 0x4c268b
push esi
jmp 0x4c2686
test ecx, ecx
je 0x4c268b
push 0
mov eax, dword [ecx]
call dword [eax + 0x18]
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
push 0xc800
call fcn.004b2f10
mov esi, dword [ebp - 0x1c]
lea eax, [edi + 0x38]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov edi, dword [edi + 4]
mov byte [eax], 0
mov eax, dword [ebp - 0x10]
push dword [eax + 0x68]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x10]
push 0
push 0
mov byte [eax + 0x41], 0
mov dword [eax + 0x34], 8
lea eax, [ebp - 0x20]
push eax
push edi
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
test eax, eax
jne 0x4c27c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x3e5
jne 0x4c27d6
mov edi, dword [ebp - 0x14]
cmp byte [edi], 0
jne 0x4c2742
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x4c2742
push edi
mov ecx, ebx
call fcn.004d2ac0
cmp byte [ebx + 5], 0
jne 0x4c2753
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c272f
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4c2753
mov eax, dword [ebp - 0x10]
push 0xa
push dword [eax + 0x68]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp byte [edi], 0
je 0x4c2703
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x30], 0
jne 0x4c27bc
mov edi, dword [eax + 0x2c]
jmp 0x4c27d6
mov edi, 0xe0000008
mov dword [ebp - 0x18], 0
cmp edi, 0x2ee2
je 0x4c2783
cmp edi, 0x2efe
je 0x4c2783
cmp edi, 0x2eff
je 0x4c2783
cmp edi, 0x2f83
jne 0x4c2a06
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x88], 0
je 0x4c2a06
lea ecx, [ebp + 0x10]
push ecx
push dword [ebp + 0xc]
mov ecx, eax
push dword [ebp + 0x14]
push dword [ebp + 8]
call fcn.004c31f0
mov edi, eax
test edi, edi
jne 0x4c2a06
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
jmp 0x4c26b0
mov eax, dword [eax + 0x2c]
test eax, eax
jle 0x4c27d4
mov dword [ebp - 0x20], eax
jmp 0x4c27d4
mov eax, dword [ebp - 0x10]
push dword [eax + 0x68]
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor edi, edi
mov dword [ebp - 0x18], 0
test edi, edi
jne 0x4c275f
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x4c292d
cmp eax, 0xc800
mov ecx, 0xc800
cmova eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
push dword [eax + 0x68]
mov edi, dword [eax + 4]
mov byte [eax + 0x38], 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x41], 0
mov dword [eax + 0x34], 3
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x24]
push esi
push edi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x4c28b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x3e5
jne 0x4c28c5
mov edi, dword [ebp - 0x14]
cmp byte [edi], 0
jne 0x4c2893
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x4c2893
push edi
mov ecx, ebx
call fcn.004d2ac0
cmp byte [ebx + 5], 0
jne 0x4c28a1
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c2880
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4c28a1
mov eax, dword [ebp - 0x10]
push 0xa
push dword [eax + 0x68]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp byte [edi], 0
je 0x4c2854
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x30], 0
jne 0x4c28ab
mov edi, dword [eax + 0x2c]
jmp 0x4c28c5
mov edi, 0xe0000008
jmp 0x4c275f
mov eax, dword [eax + 0x2c]
test eax, eax
jle 0x4c28c3
mov dword [ebp - 0x18], eax
jmp 0x4c28c3
mov eax, dword [ebp - 0x10]
push dword [eax + 0x68]
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor edi, edi
test edi, edi
jne 0x4c275f
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4c292d
push edi
lea ecx, [ebp - 0x28]
push ecx
push eax
push esi
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4c29e1
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c28fa
mov eax, dword [ecx]
push dword [ebp - 0x28]
call dword [eax + 0x18]
push dword [ebp - 0x14]
mov ecx, ebx
call fcn.004d2ac0
cmp byte [ebx + 5], 0
jne 0x4c2977
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebx]
lea eax, [edi + 0x38]
test ecx, ecx
je 0x4c26b0
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4c2977
mov eax, dword [ebp - 0x14]
jmp 0x4c26b0
cmp dword [ebp + 0x10], 0
mov edi, dword [ebp + 0x14]
jbe 0x4c299f
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, dword [ebp + 0x10]
jae 0x4c299f
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x88], 0
je 0x4c2981
lea ecx, [ebp + 0x10]
push ecx
push dword [ebp + 0xc]
mov ecx, eax
push edi
push dword [ebp + 8]
call fcn.004c31f0
mov edi, eax
test edi, edi
jne 0x4c2a06
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
jmp 0x4c26b0
mov edi, 0xe0000008
jmp 0x4c2a1e
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c2995
mov eax, dword [ecx]
push 0
push 0xe000000f
push 0
call dword [eax + 0x24]
mov edi, 0xe000000f
jmp 0x4c2a1e
test edi, edi
je 0x4c29b2
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x30], eax
mov edi, dword [ebp - 0x10]
push dword [edi + 0x18]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [edi + 0x18]
push dword [edi + 0x1c]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x4c29f3
push eax
push dword [edi + 0x18]
mov edi, dword [ebp - 0x2c]
push dword [edi]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4c29eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x4c2a0e
push dword [edi]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c2a02
mov eax, dword [ecx]
push 0
push 1
call dword [eax + 0x14]
xor edi, edi
jmp 0x4c2a1e
cmp edi, 0xe0000008
je 0x4c2a1e
mov ecx, dword [ebx]
test ecx, ecx
je 0x4c2a1e
mov eax, dword [ecx]
push 0
push edi
push 0
call dword [eax + 0x24]
mov byte [ebp - 4], 1
push esi
call fcn.00521576
add esp, 4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x34], 0x57dd44
test eax, eax
je 0x4c2a55
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x30], 0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, 0xe0000008
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10