Function at 0x4c1db0
Capabilities:
Check http status code
Connect to http server

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5646cd
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push esi
push edi
mov eax, dword [0x5d6024]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov eax, dword [ebp + 0x38]
mov dword [eax], 0
mov eax, dword [ebp + 0x18]
push dword [edi + 0x68]
mov esi, dword [eax]
mov eax, dword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [edi + 0x34], 0
mov byte [edi + 0x38], 0
mov dword [ebp - 0x2c], eax
call eax
push edi
push 0
push 3
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push dword [ebp + 0x14]
push esi
push dword [ebp + 8]
call dword [sym.imp.WININET.dll_InternetConnectW]
mov ecx, dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x40], ecx
test eax, eax
jne 0x4c1e48
mov ecx, edi
call fcn.004c2a10
test eax, eax
je 0x4c1e50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x34
push dword [edi + 0x68]
mov dword [edi + 4], eax
call ecx
cmp dword [edi + 4], 0
jne 0x4c1e61
mov eax, dword [edi + 0x2c]
test eax, eax
jne 0x4c28f2
mov eax, dword [edi + 4]
mov dword [ebp - 0x58], eax
mov dword [edi + 8], eax
mov dword [ebp - 0x60], 0x595120
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 0
movzx eax, byte [ebp + 0x30]
shl eax, 0x17
add eax, 0x8440c000
mov dword [ebp - 0x90], 0x594fe8
mov dword [ebp + 0x18], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x8c], 0
mov ecx, dword [eax]
sub ecx, 0x10
call fcn.00408b00
add eax, 0x10
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp + 0x28]
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
test ecx, ecx
je 0x4c1ecb
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00419140
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x30]
mov edi, dword [edi + 8]
push dword [eax + 0x68]
mov dword [eax + 0x34], 6
mov byte [eax + 0x38], 0
call dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
push eax
push dword [ebp + 0x18]
lea eax, [ebp - 0x90]
push eax
push 0x583918
push str.HTTP_1.0
push esi
push dword [ebp + 0x10]
push edi
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov ecx, dword [sym.imp.WININET.dll_InternetCloseHandle]
or edi, 0xffffffff
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x34], ecx
test eax, eax
jne 0x4c1f2e
mov ecx, esi
call fcn.004c2a10
mov dword [ebp + 0x18], eax
test eax, eax
je 0x4c1f37
jmp 0x4c28ae
push dword [esi + 0x68]
mov dword [esi + 4], eax
call dword [ebp - 0x40]
cmp dword [esi + 4], 0
jne 0x4c1f4b
mov eax, dword [esi + 0x2c]
mov dword [ebp + 0x18], eax
test eax, eax
jne 0x4c28ae
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x68]
mov eax, dword [esi + 4]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x70], 0x595118
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x70], 0x59517c
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], ecx
mov byte [ebp - 4], 4
cmp byte [ebp + 0x30], 0
mov ecx, dword [sym.imp.WININET.dll_InternetQueryOptionW]
mov eax, dword [sym.imp.WININET.dll_InternetSetOptionW]
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x4c], eax
je 0x4c1fcb
cmp byte [esi + 0x98], 0
je 0x4c1fcb
lea eax, [ebp + 0x18]
mov dword [ebp + 0x18], 4
push eax
lea eax, [ebp + 0x30]
push eax
push 0x1f
push dword [esi + 4]
call ecx
push dword [ebp + 0x18]
or dword [ebp + 0x30], 0x13380
lea eax, [ebp + 0x30]
push eax
push 0x1f
push dword [esi + 4]
call dword [ebp - 0x4c]
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp + 0x34]
cmp dword [eax], 0
jbe 0x4c2056
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 8
lea eax, [ebp + 0x30]
mov edx, dword [ebp + 0x34]
push dword [edx]
push str.Range:_bytes_u__r_n
push eax
call fcn.004087a0
mov esi, dword [ebp + 0x30]
lea ecx, [ebp - 0x14]
add esp, 0xc
push dword [esi - 0xc]
push esi
call fcn.00419140
mov byte [ebp - 4], 6
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4c2053
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x10]
cmp word [esi + 0x42], 0
lea edx, [esi + 0x42]
jbe 0x4c20ef
lea ecx, [ebp + 0x18]
call fcn.004970c0
mov byte [ebp - 4], 0xa
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 0xc
lea eax, [ebp + 0x30]
push dword [ebp + 0x18]
push str.If_Modified_Since:__s_r_n
push eax
call fcn.004087a0
mov esi, dword [ebp + 0x30]
lea ecx, [ebp - 0x14]
add esp, 0xc
push dword [esi - 0xc]
push esi
call fcn.00419140
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4c20ce
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
mov eax, edi
mov edx, dword [ebp + 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c20ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [ebp + 0x30], edi
mov byte [ebp - 4], 0x10
mov eax, dword [esi + 0x8c]
cmp dword [eax - 0xc], 0
je 0x4c2201
push 0x40
push str.Content_Type:_application_x_www_form_urlencoded__charsetutf_8_r_n
lea ecx, [ebp - 0x14]
call fcn.00419140
mov edi, dword [esi + 0x8c]
lea ecx, [ebp + 0x30]
mov dword [ebp + 0x24], edi
call fcn.0047f040
test edi, edi
je 0x4c21e1
cmp word [edi], 0
je 0x4c21e1
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, eax
mov dword [ebp + 0x18], edx
test edx, edx
jle 0x4c21e1
mov edi, dword [ebp + 0x30]
mov ecx, 1
mov eax, dword [edi - 8]
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x4c21a3
push edx
lea ecx, [ebp + 0x30]
call fcn.0047f1c0
mov edi, dword [ebp + 0x30]
mov edx, dword [ebp + 0x18]
push 0
push 0
push edx
push edi
push 0xffffffffffffffff
push dword [ebp + 0x24]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push dword [edi - 8]
push edi
call fcn.00529bfd
add esp, 8
test eax, eax
js 0x4c290f
cmp eax, dword [edi - 8]
jg 0x4c290f
mov dword [edi - 0xc], eax
mov byte [eax + edi], 0
jmp 0x4c21e4
mov edi, dword [ebp + 0x30]
cmp dword [edi - 4], 1
jle 0x4c21f8
push dword [edi - 0xc]
lea ecx, [ebp + 0x30]
call fcn.0047f320
mov edi, dword [ebp + 0x30]
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], eax
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x4c220c
mov eax, dword [ecx]
call dword [eax]
lea eax, [esi + 0x9c]
mov dword [ebp - 0x78], eax
mov eax, dword [sym.imp.WININET.dll_HttpQueryInfoW]
mov dword [ebp + 0x14], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x28], eax
mov eax, dword [sym.imp.WININET.dll_HttpSendRequestW]
mov dword [ebp - 0x74], eax
nop dword [eax]
mov eax, dword [ebp - 0x14]
mov dword [ebp + 8], eax
mov eax, dword [eax - 0xc]
mov dword [ebp + 0x18], eax
test eax, eax
jne 0x4c2246
mov dword [ebp + 8], eax
mov dword [ebp + 0x18], eax
mov eax, dword [ebp - 0x10]
mov esi, dword [esi + 4]
push dword [eax + 0x68]
mov dword [eax + 0x34], 7
mov byte [eax + 0x38], 0
call dword [ebp - 0x2c]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp + 0x18]
push dword [ebp + 8]
push esi
call dword [ebp - 0x74]
mov esi, dword [ebp - 0x10]
test eax, eax
jne 0x4c2284
mov ecx, esi
call fcn.004c2a10
mov dword [ebp + 8], eax
test eax, eax
je 0x4c228a
jmp 0x4c229f
push dword [esi + 0x68]
call dword [ebp - 0x40]
cmp dword [esi + 0x30], 0
je 0x4c2299
mov dword [ebp + 8], 0
jmp 0x4c229f
mov eax, dword [esi + 0x2c]
mov dword [ebp + 8], eax
push 0
lea ecx, [ebp - 0x44]
mov dword [esi + 0x9c], 0
push ecx
lea eax, [esi + 0x9c]
mov dword [ebp - 0x44], 4
push eax
push 0x20000013
push dword [esi + 4]
call dword [ebp + 0x14]
test eax, eax
je 0x4c2811
push 0
lea eax, [ebp - 0x44]
mov dword [ebp + 0x24], 0
push eax
lea eax, [ebp + 0x24]
push eax
push 0x20000005
push dword [esi + 4]
call dword [ebp + 0x14]
neg eax
sbb ecx, ecx
and ecx, dword [ebp + 0x24]
cmp byte [esi + 0x62], 0
mov dword [ebp + 0x24], ecx
je 0x4c2332
cmp dword [esi + 0x9c], 0x130
je 0x4c2332
push 0
lea ecx, [ebp + 0x18]
mov dword [ebp + 0x18], 0x10
push ecx
lea eax, [esi + 0x52]
push eax
push 0x4000000b
push dword [esi + 4]
call dword [ebp + 0x14]
mov ecx, dword [ebp + 0x24]
test eax, eax
jne 0x4c2332
xorps xmm0, xmm0
movups xmmword [esi + 0x52], xmm0
mov eax, dword [esi + 0x8c]
cmp dword [eax - 0xc], 0
lea eax, [esi + 0x9c]
je 0x4c2409
cmp dword [eax], 0xc8
jne 0x4c2409
mov dword [ebp + 0x20], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp + 0x20]
push 0x410
call fcn.004b1730
mov esi, dword [ebp + 0x20]
lea eax, [ebp + 0x1c]
push 0
push eax
mov eax, dword [ebp - 0x10]
push esi
push 1
mov dword [ebp + 0x1c], 0x410
push dword [eax + 4]
call dword [ebp + 0x14]
test eax, eax
jne 0x4c23d3
call dword [ebp - 0x28]
mov dword [ebp + 0x18], eax
cmp eax, 0x7a
jne 0x4c271c
push esi
call fcn.00522af9
add esp, 4
mov dword [ebp + 0x20], 0
lea ecx, [ebp + 0x20]
push dword [ebp + 0x1c]
call fcn.004b1730
mov esi, dword [ebp + 0x20]
lea eax, [ebp + 0x1c]
push 0
push eax
mov eax, dword [ebp - 0x10]
push esi
push 1
push dword [eax + 4]
call dword [ebp + 0x14]
test eax, eax
je 0x4c2716
mov edx, dword [ebp + 0x1c]
test edx, edx
je 0x4c23ec
mov ecx, dword [ebp - 0x10]
shr edx, 1
push edx
push esi
lea ecx, [ecx + 0x90]
call fcn.00419140
mov byte [ebp - 4], 0x10
push esi
call fcn.00522af9
mov ecx, dword [ebp + 0x24]
add esp, 4
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x78]
mov dword [ebp + 0x20], 0
cmp byte [esi + 0x63], 0
je 0x4c247e
cmp dword [eax], 0xc8
jne 0x4c247e
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x18]
push 0x410
mov dword [ebp - 0x48], 0x410
call fcn.004b1730
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x48]
push 0
push eax
mov eax, dword [ebp - 0x10]
push esi
push 0x2f
push dword [eax + 4]
call dword [ebp + 0x14]
test eax, eax
je 0x4c2464
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x10]
shr eax, 1
push eax
push esi
lea ecx, [ecx + 0x94]
call fcn.00419140
mov byte [ebp - 4], 0x10
push esi
call fcn.00522af9
mov ecx, dword [ebp + 0x24]
add esp, 4
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x18], 0
mov eax, dword [esi + 0x9c]
add eax, 0xffffff38
cmp eax, 0xd2
ja case.0x4c2497.201
movzx eax, byte [eax + 0x4c2938]
jmp dword [eax*4 + 0x4c291c]
mov eax, dword [ebp + 0x34]
test ecx, ecx
jne 0x4c24b0
mov dword [eax], ecx
xor eax, eax
mov ecx, dword [ebp + 0x38]
mov dword [ecx], eax
jmp 0x4c24eb
mov eax, dword [eax]
add eax, ecx
mov ecx, dword [ebp + 0x38]
mov dword [ecx], eax
jmp 0x4c24eb
mov eax, dword [ebp + 0x38]
mov dword [eax], ecx
mov eax, dword [ebp + 0x34]
test ecx, ecx
je 0x4c24cf
cmp dword [eax], ecx
jae 0x4c2735
mov dword [eax], 0
jmp 0x4c24eb
mov dword [ebp + 0x18], 0xe0000012
jmp 0x4c252f
mov eax, dword [ebp + 8]
test eax, eax
je 0x4c27f0
mov ecx, dword [ebp + 8]
mov eax, ecx
mov dword [ebp + 0x18], eax
cmp ecx, 0x2f0d
je 0x4c2695
cmp ecx, 0x2f0c
je 0x4c2695
cmp ecx, 0x2f06
je 0x4c2695
cmp ecx, 0x2f05
je 0x4c2695
cmp ecx, 0xe0000012
jne 0x4c27e2
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0x26
lea eax, [ebp + 0x10]
push eax
push dword [esi + 0x9c]
push dword [esi + 4]
call fcn.004c3090
mov eax, dword [esi + 0x9c]
cmp eax, 0x197
mov dword [ebp + 8], eax
sete byte [ebp - 0x7c]
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp + 0x28], eax
mov byte [ebp - 4], 0x28
cmp dword [ebp + 8], 0x197
jne 0x4c25a8
lea eax, [ebp + 0x28]
push eax
push dword [esi + 4]
call fcn.004c3370
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x2a
call fcn.004092f0
mov ecx, eax
test ecx, ecx
je 0x4c2905
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp - 0x7c]
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0xc]
push dword [esi + 4]
call fcn.004c3210
test al, al
je 0x4c2765
mov byte [ebp - 4], 0x2a
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c262f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x28
or eax, 0xffffffff
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c264e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x26
or eax, 0xffffffff
mov edx, dword [ebp + 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c266d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
or eax, 0xffffffff
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c2230
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4c2230
cmp byte [esi + 0x81], 0
je 0x4c26e4
mov eax, dword [esi + 4]
lea ecx, [ebp + 0x18]
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x84], eax
push ecx
push 0x1f
push eax
mov dword [ebp + 0x18], 4
call dword [ebp - 0x80]
test eax, eax
je 0x4c26dc
or dword [ebp - 0x1c], 0x3f05
lea eax, [ebp - 0x1c]
push 4
push eax
push 0x1f
push dword [ebp - 0x84]
call dword [ebp - 0x4c]
test eax, eax
jne 0x4c2709
mov eax, dword [ebp + 8]
jmp 0x4c2814
mov edx, dword [esi + 0xc]
test edx, edx
je 0x4c26ff
push dword [esi + 4]
mov eax, dword [edx]
push ecx
push 0
mov ecx, edx
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp + 8]
jmp 0x4c2701
mov eax, ecx
test eax, eax
jne 0x4c27eb
lea ecx, [ebp - 0x14]
call fcn.00408bc0
jmp 0x4c2230
call dword [ebp - 0x28]
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 0x10
push esi
call fcn.00522af9
add esp, 4
mov dword [ebp + 0x20], 0
jmp 0x4c2817
mov dword [ebp + 0x18], 0xe0000010
jmp 0x4c2817
mov dword [ebp + 0x18], 0xe0000013
jmp 0x4c2817
mov dword [ebp + 0x18], 0xe0000016
jmp 0x4c2817
mov dword [ebp + 0x18], 0xe0000018
jmp 0x4c2817
mov byte [ebp - 4], 0x2a
or esi, 0xffffffff
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c2786
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov eax, esi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c27a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x26
mov eax, esi
mov edx, dword [ebp + 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c27c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov eax, esi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c2817
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4c2817
mov dword [ebp + 0x18], eax
test ecx, ecx
jne 0x4c2817
jmp 0x4c2801
mov dword [ebp + 0x18], ecx
jmp 0x4c2817
mov edx, dword [ebp + 0x34]
mov dword [ebp + 0x18], eax
mov dword [edx], 0
mov edx, dword [ebp + 0x38]
mov dword [edx], ecx
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], eax
jmp 0x4c2817
call dword [ebp - 0x28]
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 6
add edi, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edi + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4c2833
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
or edi, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4c2854
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov dword [ebp - 0x70], 0x59517c
mov byte [ebp - 4], 0x3b
mov esi, dword [ebp - 0x50]
test esi, esi
je 0x4c2894
push dword [ebp - 0x54]
call dword [ebp - 0x2c]
push esi
call dword [ebp - 0x34]
push 0xffffffffffffffff
push dword [ebp - 0x88]
mov dword [ebp - 0x6c], 0
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call esi
push 0xffffffffffffffff
push dword [ebp - 0x54]
call esi
xor esi, esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x70], 0x595118
test esi, esi
je 0x4c28ae
push esi
call dword [ebp - 0x34]
mov dword [ebp - 0x6c], 0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x4c28ca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x58]
push 0
push esi
mov dword [ebp - 0x60], 0x595120
call dword [sym.imp.WININET.dll_InternetSetStatusCallbackW]
push esi
call dword [ebp - 0x34]
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x34
push 0x80004005
call fcn.00408fc0
push 0x80070057
call fcn.00408fc0
nop dword [eax]
mov ebx, 0x9e004c24
and al, 76
add byte [ecx + 0x27], al
dec esp
add bh, dl
and al, 0x4c
add byte [ebp + 0x27], cl
dec esp
add byte [ecx + 0x27], bl
dec esp
add al, ah
and al, 0x4c
add byte [eax], al
push es
push es
push es
push es
push es
add dword [esi], eax
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
add al, byte [esi]
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
push es
add eax, dword [esi]
add al, 5
push es
push es
add eax, dword [esi]
push es
add eax, -858993460
int3