Function at 0x49dc39
Capabilities:
Check for time delay via gettickcount
Check http status code
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57cb12
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x59c8
call fcn.004fc580
mov eax, dword [0x602c60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x590c], ebx
xor esi, esi
cmp dword [ebx + 0x210], esi
je 0x49dc92
push 0x1000
lea eax, [ebx + 0x258]
push eax
call fcn.0049b297
mov dword [ebp - 0x58cc], esi
mov dword [ebp - 0x58c8], esi
mov dword [ebp - 0x58c4], esi
mov dword [ebp - 0x58c0], esi
push 0x602968
lea ecx, [ebp - 0x58ec]
call fcn.00431ef7
xor edi, edi
inc edi
mov dword [ebp - 4], edi
lea eax, [ebx + 0x258]
push eax
lea ecx, [ebp - 0x58e4]
call fcn.0043479c
mov byte [ebp - 4], 2
mov dword [ebp - 0x58e8], edi
mov dword [ebp - 0x5900], esi
xor eax, eax
mov word [ebp - 0x854], ax
mov edi, 0x7fe
push edi
push esi
lea eax, [ebp - 0x852]
push eax
call fcn.004fc1f0
lea eax, [ebx + 0x1258]
push eax
push str._s.rmsm
lea eax, [ebp - 0x854]
push eax
call fcn.0050241d
xor eax, eax
mov word [ebp - 0x1054], ax
push edi
push esi
lea eax, [ebp - 0x1052]
push eax
call fcn.004fc1f0
lea eax, [ebx + 0x1258]
push eax
push str._s.cfg
lea eax, [ebp - 0x1054]
push eax
call fcn.0050241d
mov dword [ebp - 0x5910], esi
push 0x2710
lea eax, [ebp - 0x5910]
push eax
lea eax, [ebp - 0x58c4]
push eax
lea eax, [ebx + 0x258]
push eax
call fcn.0049cb7a
add esp, 0x40
test eax, eax
jne 0x49de0b
push 0x602968
lea ecx, [ebp - 0x58dc]
call fcn.00431ef7
mov byte [ebp - 4], 4
push dword [ebp - 0x5910]
push 0x5a4940
lea eax, [ebp - 0x58dc]
push eax
call fcn.00433c96
add esp, 0xc
mov edi, dword [ebp - 0x58dc]
push edi
push 0x59a2c0
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push esi
push esi
push 0x20
mov ecx, ebx
call fcn.00499544
mov byte [ebp - 4], 2
lea ecx, [edi - 0x10]
call fcn.004310e3
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x58e4]
add ecx, 0xfffffff0
call fcn.004310e3
mov dword [ebp - 4], 7
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58ec]
add ecx, 0xfffffff0
call fcn.004310e3
mov eax, esi
jmp 0x49ec87
lea eax, [ebp - 0x854]
push eax
call fcn.0050210b
lea edi, [ebx + 0x1258]
push edi
call fcn.004987f9
push edi
call fcn.00498796
add esp, 0xc
test al, al
je 0x49df9e
push edi
call fcn.004987c0
pop ecx
cmp eax, dword [ebp - 0x58c4]
jne 0x49df9e
cmp edx, dword [ebp - 0x58c0]
jne 0x49df9e
lea eax, [ebp - 0x1054]
push eax
call fcn.0050210b
pop ecx
push esi
push 0x59a2c0
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push esi
push esi
push 5
mov ecx, ebx
call fcn.00499544
test eax, eax
je 0x49df7d
cmp dword [ebx + 0x214], esi
je 0x49df7d
mov eax, dword [ebx + 0x20c]
cmp eax, 2
jne 0x49deef
lea eax, [ebx + 0x2258]
push eax
lea esi, [ebx + 0x2358]
mov eax, 0x4088
call fcn.004fc580
mov ecx, 0x1022
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
add ebx, 0x218
push ebx
mov ecx, dword [0x606424]
call fcn.0049a286
jmp 0x49df7d
cmp eax, 1
lea eax, [ebx + 0x2258]
push eax
jne 0x49df3d
lea esi, [ebx + 0x63e0]
mov eax, 0x2528
call fcn.004fc580
mov ecx, 0x94a
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
add ebx, 0x218
push ebx
mov ecx, dword [0x606424]
call fcn.0049a137
jmp 0x49df7d
lea esi, [ebx + 0x2358]
mov eax, 0x4088
call fcn.004fc580
mov ecx, 0x1022
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
add ebx, 0x218
push ebx
mov ecx, dword [0x606424]
call fcn.00499feb
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x58e4]
add ecx, 0xfffffff0
call fcn.004310e3
mov dword [ebp - 4], 9
xor esi, esi
inc esi
jmp 0x49ddf2
mov dword [ebp - 0x58d4], esi
mov dword [ebp - 0x58d0], esi
mov dword [ebp - 0x58e0], esi
mov byte [ebp - 4], 0xa
wait
lea eax, [ebp - 0x854]
push eax
call fcn.00498796
pop ecx
test al, al
je 0x49e09f
lea ecx, [ebp - 0x59ac]
call fcn.00498858
mov byte [ebp - 4], 0xb
push esi
lea eax, [ebp - 0x1054]
push eax
lea ecx, [ebp - 0x59ac]
call fcn.00499ce4
test eax, eax
jne 0x49dfff
lea eax, [ebp - 0x854]
push eax
call fcn.004987f9
pop ecx
jmp 0x49e077
xor eax, eax
mov word [ebp - 0x387c], ax
push 0xfe
push esi
lea eax, [ebp - 0x387a]
push eax
call fcn.004fc1f0
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0x377c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, 0x108
push edi
lea eax, [ebp - 0x387c]
push eax
lea ecx, [ebp - 0x59ac]
call fcn.004988f3
cmp eax, edi
jne 0x49e05f
mov eax, dword [ebp - 0x377c]
cmp eax, dword [ebp - 0x58c4]
jne 0x49e05f
mov eax, dword [ebp - 0x3778]
cmp eax, dword [ebp - 0x58c0]
je 0x49e06c
lea eax, [ebp - 0x854]
push eax
call fcn.004987f9
pop ecx
lea ecx, [ebp - 0x59ac]
call fcn.00498950
lea eax, [ebp - 0x854]
push eax
call fcn.004987c0
pop ecx
mov dword [ebp - 0x58cc], eax
mov dword [ebp - 0x58c8], edx
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x59ac]
call fcn.00499ca9
mov edi, 0x59a2c0
cmp dword [ebp - 0x58e8], esi
je 0x49ec1b
xor eax, eax
mov word [ebp - 0x58bc], ax
push 0x3fe
push esi
lea eax, [ebp - 0x58ba]
push eax
call fcn.004fc1f0
push 0x1c40
push esi
lea eax, [ebp - 0x54bc]
push eax
call fcn.004fc1f0
mov dword [ebp - 0x596c], esi
push 0x38
push esi
lea eax, [ebp - 0x5968]
push eax
call fcn.004fc1f0
add esp, 0x24
mov dword [ebp - 0x596c], 0x3c
lea eax, [ebp - 0x409c]
mov dword [ebp - 0x5938], eax
lea eax, [ebp - 0x54bc]
mov dword [ebp - 0x595c], eax
lea eax, [ebp - 0x4cbc]
mov dword [ebp - 0x5948], eax
lea eax, [ebp - 0x58bc]
mov dword [ebp - 0x5968], eax
lea eax, [ebp - 0x48bc]
mov dword [ebp - 0x5940], eax
lea eax, [ebp - 0x50bc]
mov dword [ebp - 0x5950], eax
mov eax, 0x200
mov dword [ebp - 0x594c], eax
mov dword [ebp - 0x593c], eax
mov dword [ebp - 0x5964], eax
mov dword [ebp - 0x5944], eax
mov dword [ebp - 0x5958], eax
mov dword [ebp - 0x5934], eax
lea eax, [ebp - 0x596c]
push eax
push esi
push esi
push dword [ebp - 0x58e4]
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x49ebed
push esi
call fcn.004989af
pop ecx
mov dword [ebp - 0x58d4], eax
mov dword [ebp - 0x58d8], 0xa
cmp dword [ebp - 0x58d4], esi
jne 0x49e1d7
mov eax, dword [ebp - 0x58d8]
dec dword [ebp - 0x58d8]
test eax, eax
je 0x49ebe6
push esi
call fcn.004989af
pop ecx
mov dword [ebp - 0x58d4], eax
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x49e1a4
mov eax, 0x7530
push eax
push eax
push 0xea60
push 0x3a98
push dword [ebp - 0x58d4]
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
movzx eax, word [ebp - 0x5954]
mov dword [ebp - 0x5980], eax
push esi
push eax
push dword [ebp - 0x595c]
push dword [ebp - 0x58d4]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x58e0], eax
mov dword [ebp - 0x58d8], 0xa
cmp dword [ebp - 0x58e0], esi
jne 0x49e272
mov eax, dword [ebp - 0x58d8]
dec dword [ebp - 0x58d8]
test eax, eax
je 0x49ebdf
movzx eax, word [ebp - 0x5954]
mov dword [ebp - 0x5924], eax
push esi
push eax
push dword [ebp - 0x595c]
push dword [ebp - 0x58d4]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x58e0], eax
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x49e225
mov eax, 0x1bb
xor ecx, ecx
cmp word [ebp - 0x5954], ax
sete cl
push ecx
push 1
push esi
push 0x5a46b4
push dword [ebp - 0x5938]
push dword [ebp - 0x5940]
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push eax
push dword [ebp - 0x58e0]
call fcn.00498ac5
add esp, 0x18
mov dword [ebp - 0x58d0], eax
mov dword [ebp - 0x58d8], 0xa
cmp dword [ebp - 0x58d0], esi
jne 0x49e324
mov eax, dword [ebp - 0x58d8]
dec dword [ebp - 0x58d8]
test eax, eax
je 0x49ebd8
mov eax, 0x1bb
xor ecx, ecx
cmp word [ebp - 0x5954], ax
sete cl
push ecx
push 1
push esi
push 0x5a46b4
push dword [ebp - 0x5938]
push dword [ebp - 0x5940]
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push eax
push dword [ebp - 0x58e0]
call fcn.00498ac5
add esp, 0x18
mov dword [ebp - 0x58d0], eax
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x49e2bd
push esi
push dword [ebp - 0x58cc]
push dword [ebp - 0x58d0]
call fcn.00498aff
xor eax, eax
mov word [ebp - 0x166c], ax
push 0x616
push esi
lea eax, [ebp - 0x166a]
push eax
call fcn.004fc1f0
push str.Accept:___r_nConnection:_Keep_Alive_r_n
lea eax, [ebp - 0x166c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x166c]
push eax
push dword [ebp - 0x58d0]
call fcn.00498c7a
add esp, 0x28
cmp dword [ebp - 0x5900], esi
jne 0x49e3b0
push 0x5a4934
push edi
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push dword [ebp - 0x58cc]
push 2
mov ecx, ebx
call fcn.00499544
jmp 0x49e402
xor eax, eax
mov word [ebp - 0x54], ax
push 7
pop ecx
lea edi, [ebp - 0x52]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str.0MB_s
lea eax, [ebp - 0x54]
push eax
call fcn.0050241d
pop ecx
pop ecx
lea eax, [ebp - 0x54]
push eax
push eax
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push dword [ebp - 0x58cc]
push 4
mov ecx, ebx
call fcn.00499544
mov edi, 0x59a2c0
push dword [ebp - 0x58d0]
call fcn.00498ba0
pop ecx
test eax, eax
je 0x49eb91
mov dword [ebp - 0x58e8], esi
mov dword [ebp - 0x5900], esi
push dword [ebp - 0x58d0]
call fcn.00499db0
pop ecx
cmp eax, 0x12e
jne 0x49e4e7
push dword [ebp - 0x58d0]
lea eax, [ebp - 0x58dc]
push eax
call fcn.0049b59d
pop ecx
pop ecx
mov byte [ebp - 4], 0xc
push dword [ebp - 0x58dc]
lea eax, [ebx + 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebx + 0x210], esi
lea eax, [ebp - 0x58d0]
push eax
call fcn.00498c9c
lea eax, [ebp - 0x58e0]
push eax
call fcn.00498c9c
lea eax, [ebp - 0x58d4]
push eax
call fcn.00498c9c
add esp, 0xc
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
mov esi, eax
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x58dc]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x58e4]
add ecx, 0xfffffff0
call fcn.004310e3
mov dword [ebp - 4], 0xf
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58ec]
add ecx, 0xfffffff0
call fcn.004310e3
mov eax, esi
wait
jmp 0x49ec87
cmp eax, 0xc8
je 0x49e500
cmp eax, 0xce
je 0x49e500
mov dword [ebp - 0x58e8], esi
jmp 0x49eb4d
mov dword [ebp - 0x58dc], esi
lea ecx, [ebp - 0x59ac]
call fcn.00498858
mov byte [ebp - 4], 0x10
push esi
lea eax, [ebp - 0x854]
push eax
lea ecx, [ebp - 0x59ac]
call fcn.00499ce4
test eax, eax
je 0x49eb0b
lea ecx, [ebp - 0x59d8]
call fcn.00498858
mov byte [ebp - 4], 0x11
push 1
lea eax, [ebp - 0x1054]
push eax
lea ecx, [ebp - 0x59d8]
call fcn.00499ce4
test eax, eax
je 0x49ea89
xor eax, eax
mov word [ebp - 0x3774], ax
push 0xfe
push esi
lea eax, [ebp - 0x3772]
push eax
call fcn.004fc1f0
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0x3674]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebx + 0x218]
push eax
lea eax, [ebp - 0x3774]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x58c4]
mov dword [ebp - 0x3674], eax
mov eax, dword [ebp - 0x58c0]
mov dword [ebp - 0x3670], eax
push 0x108
lea eax, [ebp - 0x3774]
push eax
lea ecx, [ebp - 0x59d8]
call fcn.0049888e
lea ecx, [ebp - 0x59d8]
call fcn.00498950
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5908], eax
mov dword [ebp - 0x5904], esi
mov dword [ebp - 0x58f4], esi
mov dword [ebp - 0x58f0], esi
mov dword [ebp - 0x58dc], 0x2000
mov byte [ebp - 0x366c], 0
push 0x1fff
push esi
lea eax, [ebp - 0x366b]
push eax
call fcn.004fc1f0
add esp, 0xc
mov edi, 0x2000
mov ecx, ebx
call fcn.00499528
test eax, eax
je 0x49e87a
mov eax, dword [ebp - 0x58c8]
cmp eax, dword [ebp - 0x58c0]
ja 0x49e87a
jb 0x49e64f
mov eax, dword [ebp - 0x58cc]
cmp eax, dword [ebp - 0x58c4]
jae 0x49e87a
lea eax, [ebp - 0x58dc]
push eax
lea eax, [ebp - 0x366c]
push eax
push dword [ebp - 0x58d0]
call fcn.00498c51
add esp, 0xc
test eax, eax
je 0x49e86b
push dword [ebp - 0x58dc]
lea eax, [ebp - 0x366c]
push eax
lea ecx, [ebp - 0x59ac]
call fcn.0049888e
push edi
push esi
lea eax, [ebp - 0x366c]
push eax
call fcn.004fc1f0
add esp, 0xc
mov eax, dword [ebp - 0x58dc]
add dword [ebp - 0x58cc], eax
adc dword [ebp - 0x58c8], esi
mov dword [ebp - 0x58dc], edi
add dword [ebp - 0x58f4], edi
adc dword [ebp - 0x58f0], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
sub eax, dword [ebp - 0x5908]
sbb ecx, dword [ebp - 0x5904]
mov dword [ebp - 0x58fc], eax
mov dword [ebp - 0x58f8], ecx
cmp ecx, esi
jg 0x49e719
jl 0x49e6ea
cmp eax, esi
jae 0x49e6fb
add eax, 0xffffffff
adc ecx, esi
mov dword [ebp - 0x58fc], eax
mov dword [ebp - 0x58f8], ecx
cmp dword [ebp - 0x58f8], esi
jl 0x49e61a
jg 0x49e719
cmp dword [ebp - 0x58fc], 0x3e8
jb 0x49e61a
mov eax, dword [ebp - 0x58f4]
mov dword [ebp - 0x5974], eax
mov eax, dword [ebp - 0x58f0]
mov dword [ebp - 0x591c], eax
and eax, 0x7fffffff
mov dword [ebp - 0x5970], eax
fild qword [ebp - 0x5974]
and dword [ebp - 0x591c], 0x80000000
mov dword [ebp - 0x5920], esi
fild qword [ebp - 0x5920]
fchs
faddp st(1)
fmul qword [0x59c0d8]
fild qword [ebp - 0x58fc]
fdivp st(1)
call fcn.004fdf16
mov dword [ebp - 0x5930], eax
mov dword [ebp - 0x592c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5908], eax
mov dword [ebp - 0x5904], esi
mov dword [ebp - 0x58f4], esi
mov dword [ebp - 0x58f0], esi
xor eax, eax
mov word [ebp - 0x34], ax
push 7
pop ecx
lea edi, [ebp - 0x32]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x5930]
mov dword [ebp - 0x597c], eax
mov eax, dword [ebp - 0x592c]
mov dword [ebp - 0x5914], eax
and eax, 0x7fffffff
mov dword [ebp - 0x5978], eax
fild qword [ebp - 0x597c]
and dword [ebp - 0x5914], 0x80000000
mov dword [ebp - 0x5918], esi
fild qword [ebp - 0x5918]
fchs
faddp st(1)
fld qword [0x5a4920]
fmul st(1), st(0)
fxch st(1)
fstp qword [ebp - 0x5928]
fld qword [ebp - 0x5928]
fld qword [0x5a4918]
fcomp st(1)
fnstsw ax
push ecx
push ecx
test ah, 0x41
lea eax, [ebp - 0x34]
jp 0x49e822
fmulp st(1)
fstp qword [esp]
push str._.2f_MB_s
jmp 0x49e82c
fstp st(1)
fstp qword [esp]
push str._.2f_KB_s
push eax
call fcn.0050241d
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
push eax
push ecx
push ecx
fld qword [ebp - 0x5928]
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push dword [ebp - 0x58cc]
push 4
mov ecx, ebx
call fcn.00499544
jmp 0x49e615
xor eax, eax
inc eax
mov dword [ebp - 0x58e8], eax
mov dword [ebp - 0x5900], eax
lea ecx, [ebp - 0x59ac]
call fcn.00498950
mov edi, dword [ebp - 0x58cc]
cmp edi, dword [ebp - 0x58c4]
jne 0x49e9f6
mov eax, dword [ebp - 0x58c8]
cmp eax, dword [ebp - 0x58c0]
jne 0x49e9f6
lea eax, [ebp - 0x1054]
push eax
call fcn.004987f9
pop ecx
lea eax, [ebx + 0x1258]
push 3
push eax
lea eax, [ebp - 0x854]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push 0x5a48e0
push 0x59a2c0
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push edi
push 5
mov ecx, ebx
call fcn.00499544
test eax, eax
je 0x49ea75
cmp dword [ebx + 0x214], esi
je 0x49ea75
mov eax, dword [ebx + 0x20c]
cmp eax, 2
jne 0x49e964
lea eax, [ebx + 0x2258]
push eax
lea esi, [ebx + 0x2358]
mov eax, 0x4088
call fcn.004fc580
mov ecx, 0x1022
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
lea eax, [ebx + 0x218]
push eax
mov ecx, dword [0x606424]
call fcn.0049a286
jmp 0x49e9f2
cmp eax, 1
lea eax, [ebx + 0x2258]
push eax
jne 0x49e9b2
lea esi, [ebx + 0x63e0]
mov eax, 0x2528
call fcn.004fc580
mov ecx, 0x94a
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
lea eax, [ebx + 0x218]
push eax
mov ecx, dword [0x606424]
call fcn.0049a137
jmp 0x49e9f2
lea esi, [ebx + 0x2358]
mov eax, 0x4088
call fcn.004fc580
mov ecx, 0x1022
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
lea eax, [ebx + 0x218]
push eax
mov ecx, dword [0x606424]
call fcn.00499feb
xor esi, esi
jmp 0x49ea75
cmp dword [ebx + 0x8914], esi
je 0x49ea26
push 0x5a48d4
push 0x59a2c0
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push edi
push 7
jmp 0x49ea6e
cmp dword [ebx + 0x890c], esi
je 0x49ea75
lea eax, [ebp - 0x854]
push eax
call fcn.004987f9
lea eax, [ebp - 0x1054]
push eax
call fcn.004987f9
pop ecx
pop ecx
push 0x5a48c8
push 0x59a2c0
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push edi
push 6
mov ecx, ebx
call fcn.00499544
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x59d8]
call fcn.00499ca9
jmp 0x49eb39
push 0x5a48b4
push edi
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push dword [ebp - 0x58cc]
push 0x20
mov ecx, ebx
call fcn.00499544
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x59d8]
call fcn.00499ca9
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x59ac]
call fcn.00499ca9
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x58e4]
add ecx, 0xfffffff0
call fcn.004310e3
mov dword [ebp - 4], 0x13
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58ec]
add ecx, 0xfffffff0
call fcn.004310e3
xor eax, eax
jmp 0x49e4e1
push 0x5a48b4
push edi
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push dword [ebp - 0x58cc]
push 0x20
mov ecx, ebx
call fcn.00499544
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x59ac]
call fcn.00499ca9
mov edi, 0x59a2c0
lea eax, [ebp - 0x58d0]
push eax
call fcn.00498c9c
lea eax, [ebp - 0x58e0]
push eax
call fcn.00498c9c
lea eax, [ebp - 0x58d4]
push eax
call fcn.00498c9c
add esp, 0xc
cmp dword [ebp - 0x58e8], esi
je 0x49ec1b
mov eax, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x49e0a4
cmp dword [ebp - 0x58e8], esi
je 0x49ebd1
mov eax, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x58d0]
push eax
call fcn.00498c9c
lea eax, [ebp - 0x58e0]
push eax
call fcn.00498c9c
lea eax, [ebp - 0x58d4]
push eax
call fcn.00498c9c
add esp, 0xc
jmp 0x49e0a4
push 0x5a48a0
jmp 0x49ebf2
push 0x5a4880
jmp 0x49ebf2
push 0x5a4860
jmp 0x49ebf2
push 0x5a4848
jmp 0x49ebf2
push 0x5a4828
push edi
push ecx
push ecx
fldz
fstp qword [esp]
push dword [ebp - 0x58c0]
push dword [ebp - 0x58c4]
push dword [ebp - 0x58c8]
push dword [ebp - 0x58cc]
push 0x20
mov ecx, ebx
call fcn.00499544
wait
mov dword [ebp - 4], 2
xor esi, esi
cmp dword [ebp - 0x58d0], esi
je 0x49ec39
push dword [ebp - 0x58d0]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x58e0], esi
je 0x49ec4d
push dword [ebp - 0x58e0]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x58d4], esi
je 0x49ec61
push dword [ebp - 0x58d4]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x58e4]
add ecx, 0xfffffff0
call fcn.004310e3
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58ec]
add ecx, 0xfffffff0
call fcn.004310e3
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004fb958
leave
ret