Function at 0x42bd00
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d0eb6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb4
mov eax, dword [0x504530]
push ebx
push ebp
mov ebp, dword [esp + 0xcc]
push esi
push edi
mov dword [esp + 0xc0], eax
call fcn.004be803
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x10], edi
lea eax, [esp + 0x30]
xor ebx, ebx
push eax
xor ecx, ecx
mov dword [esp + 0xd0], ebx
call fcn.00481450
mov byte [esp + 0xcc], 1
mov ecx, dword [ebp + 0x4d4]
mov eax, dword [ecx + 0x1c]
push ebx
push eax
lea esi, [esp + 0x38]
call fcn.004815e0
test eax, eax
jne 0x42be4d
mov byte [esp + 0xcc], bl
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42bda6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42bdc7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42bde5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42be03
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42be21
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [edi - 0x10]
mov dword [esp + 0xcc], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42be46
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor eax, eax
jmp 0x42c786
cmp dword [ebp + 0x534], ebx
je 0x42be5d
lea esi, [ebp + 0x530]
jmp 0x42be6b
cmp dword [ebp + 0x540], ebx
je 0x42be7c
lea esi, [ebp + 0x53c]
lea ecx, [esp + 0x4c]
push esi
call fcn.00403e70
mov ecx, esi
call fcn.00403dd0
cmp dword [0x534434], ebx
je 0x42becf
mov eax, dword [esp + 0x4c]
push eax
lea ecx, [esp + 0x14]
push str.GET__s_HTTP_1.1_r_n
push ecx
call fcn.004058b0
mov esi, dword [ebp + 0x2c]
add esp, 0xc
push ebx
mov ebx, dword [esp + 0x14]
call fcn.0040e180
mov edx, dword [esp + 0x38]
push edx
lea eax, [esp + 0x14]
push str.Host:__s_r_n
push eax
call fcn.004058b0
mov ebx, dword [esp + 0x1c]
mov esi, dword [ebp + 0x2c]
add esp, 0xc
push 0
call fcn.0040e180
jmp 0x42bee6
mov ecx, dword [esp + 0x4c]
push ecx
lea edx, [esp + 0x14]
push str.GET__s_HTTP_1.0_r_n
push edx
call fcn.004058b0
add esp, 0xc
mov ecx, dword [esp + 0x4c]
mov eax, dword [ebp + 0x14]
push ecx
push eax
push str._s:_DOWNLOAD_REQUEST:__s
push 0x534540
mov eax, 3
call fcn.00478d50
mov ebx, dword [ebp + 0x2c]
add esp, 0x10
push 0x18
push str.Connection:_Keep_Alive_r_n
call fcn.0040e000
mov eax, dword [0x534270]
test eax, eax
je 0x42bf2d
mov ebx, dword [ebp + 0x2c]
push 0x14
push str.X_Features:_g2_1.0_r_n
call fcn.0040e000
mov eax, dword [ebp + 0x534]
test eax, eax
je 0x42bf40
push 0x3e
push str.Accept:_application_dime__application_tigertree_breadthfirst_r_n
jmp 0x42bf51
mov eax, dword [ebp + 0x540]
test eax, eax
je 0x42bf59
push 0x12
push str.Accept:_text_xml_r_n
mov ebx, dword [ebp + 0x2c]
call fcn.0040e000
mov edx, dword [ebp + 0x4e8]
mov esi, dword [ebp + 0x4ec]
mov eax, edx
and eax, esi
cmp eax, 0xffffffff
je 0x42bff8
mov eax, dword [ebp + 0x534]
test eax, eax
jne 0x42bff8
mov eax, dword [ebp + 0x540]
test eax, eax
jne 0x42bff8
mov eax, dword [ebp + 0x4f0]
mov edi, dword [ebp + 0x4c8]
mov ecx, dword [ebp + 0x4f4]
mov ebx, dword [edi + 0x18]
add eax, edx
adc ecx, esi
cmp eax, ebx
jne 0x42bfcc
cmp ecx, dword [edi + 0x1c]
jne 0x42bfcc
push esi
push edx
lea ecx, [esp + 0x18]
push str.Range:_bytes_I64i__r_n
push ecx
call fcn.004058b0
mov ebx, dword [esp + 0x20]
mov esi, dword [ebp + 0x2c]
add esp, 0x10
push 0
call fcn.0040e180
jmp 0x42c007
add eax, 0xffffffff
adc ecx, 0xffffffff
push ecx
push eax
push esi
push edx
lea edx, [esp + 0x20]
push str.Range:_bytes_I64i__I64i_r_n
push edx
call fcn.004058b0
mov ebx, dword [esp + 0x28]
mov esi, dword [ebp + 0x2c]
add esp, 0x18
push 0
call fcn.0040e180
jmp 0x42c007
mov ebx, dword [ebp + 0x2c]
push 0x11
push str.Range:_bytes0__r_n
call fcn.0040e000
mov eax, dword [ebp + 0x508]
test eax, eax
je 0x42c029
mov eax, dword [0x534410]
test eax, eax
je 0x42c029
mov ebx, dword [ebp + 0x2c]
push 0x1c
push str.Accept_Encoding:_backwards_r_n
call fcn.0040e000
lea esi, [esp + 0x18]
call fcn.00475690
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 2
call fcn.00403e70
mov byte [esp + 0xcc], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c06a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x42c113
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x14]
mov edi, str.User_Agent:
call fcn.0042f230
push 0x4db0f0
push eax
lea edx, [esp + 0x24]
mov bl, 3
push edx
mov byte [esp + 0xdc], bl
call fcn.0041c280
add esp, 0x10
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 4
call fcn.00403e70
mov byte [esp + 0xcc], bl
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c0df
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov byte [esp + 0xcc], 1
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c105
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x2c]
push 0
call fcn.0040e180
mov eax, dword [ebp + 0x510]
test eax, eax
jne 0x42c294
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x42c12e
push ebp
call fcn.00413e70
push 0x511880
lea edi, [esp + 0x1c]
call fcn.00447dc0
push 0xff
lea ecx, [esp + 0x20]
push ecx
mov bl, 5
mov ecx, eax
mov byte [esp + 0xd4], bl
call fcn.00405820
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 6
call fcn.00403e70
mov byte [esp + 0xcc], bl
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42c18d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov byte [esp + 0xcc], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c1b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x42c294
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.00414230
lea edx, [esp + 0x1c]
push edx
mov ecx, eax
mov edi, str.X_Nick:
mov byte [esp + 0xd4], 7
call fcn.0042f230
push 0x4db0f0
push eax
lea eax, [esp + 0x2c]
mov bl, 8
push eax
mov byte [esp + 0xe0], bl
call fcn.0041c280
add esp, 0x14
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 9
call fcn.00403e70
mov byte [esp + 0xcc], bl
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c23a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov byte [esp + 0xcc], 7
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c260
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov byte [esp + 0xcc], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c286
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x2c]
push 0
call fcn.0040e180
mov esi, dword [ebp + 0x4d4]
cmp word [esi + 0x3c], 0x50
jne 0x42c3a3
mov eax, dword [esi + 0x1c]
push 0x2f
push eax
call fcn.004ad64e
add esp, 8
test eax, eax
je 0x42c3a3
sub eax, dword [esi + 0x1c]
sar eax, 1
test eax, eax
jle 0x42c3a3
mov ecx, dword [ebp + 0x4d4]
inc eax
push eax
lea eax, [esp + 0x1c]
push eax
add ecx, 0x1c
call fcn.00405820
lea ecx, [esp + 0x1c]
push ecx
mov ecx, eax
mov edi, str.Referrer:
mov byte [esp + 0xd0], 0xa
call fcn.0042f230
push 0x4db0f0
push eax
lea edx, [esp + 0x20]
mov bl, 0xb
push edx
mov byte [esp + 0xdc], bl
call fcn.0041c280
add esp, 0x10
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 0xc
call fcn.00403e70
mov byte [esp + 0xcc], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c349
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov byte [esp + 0xcc], 0xa
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c36f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov byte [esp + 0xcc], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c395
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x2c]
push 0
call fcn.0040e180
mov ebx, dword [ebp + 0x2c]
push 0xe
push str.X_Queue:_0.1_r_n
call fcn.0040e000
mov eax, dword [ebp + 0x4d4]
mov ecx, dword [eax + 0x54]
test ecx, ecx
je 0x42c60e
mov eax, dword [0x533ff4]
test eax, eax
je 0x42c60e
mov eax, dword [ebp + 0x534]
test eax, eax
jne 0x42c60e
mov eax, dword [ebp + 0x540]
test eax, eax
jne 0x42c60e
mov ecx, dword [ebp + 0x4c8]
add ecx, 0x24
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, 1
call fcn.0049ac40
add esp, 8
mov byte [esp + 0xcc], 0xd
mov eax, dword [ebp + 0x2c]
push eax
mov edx, 0x4ddb24
call fcn.0040e150
push 0x4db0f0
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.0041c280
mov eax, dword [eax]
mov esi, dword [ebp + 0x2c]
add esp, 0xc
push 0
mov ebx, eax
call fcn.0040e180
lea ecx, [esp + 0x14]
call fcn.00403b90
mov eax, dword [ebp + 0x4d4]
mov ecx, dword [eax + 0x80]
mov edx, dword [ebp + 0x4c8]
push eax
cmp ecx, 1
lea eax, [ebp + 0x480]
lea ecx, [esp + 0x18]
jne 0x42c484
push 1
push 0xf
push eax
push ecx
push edx
call fcn.004337b0
mov byte [esp + 0xcc], 0xe
jmp 0x42c498
push 4
push 0xf
push eax
push ecx
push edx
call fcn.004337b0
mov byte [esp + 0xcc], 0xf
lea ecx, [esp + 0x10]
push eax
call fcn.00403e70
lea ecx, [esp + 0x14]
mov byte [esp + 0xcc], 0xd
call fcn.00403b90
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x42c4fa
mov ecx, dword [ebp + 0x2c]
push ecx
mov edx, 0x4ddb14
call fcn.0040e150
push 0x4db0f0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
call fcn.0041c280
mov eax, dword [eax]
mov esi, dword [ebp + 0x2c]
add esp, 0xc
push 0
mov ebx, eax
call fcn.0040e180
lea ecx, [esp + 0x14]
call fcn.00403b90
mov ecx, dword [ebp + 0x4c8]
mov edx, dword [ecx]
call dword [edx + 0x60]
test eax, eax
je 0x42c605
mov ecx, dword [ebp + 0x4c8]
mov eax, dword [ecx]
call dword [eax + 0x54]
test eax, eax
je 0x42c605
mov eax, 0x513e08
call fcn.00464710
test eax, eax
je 0x42c605
mov ecx, dword [0x513e2c]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [esp + 0x18]
call fcn.00409e90
mov byte [esp + 0xcc], 0x10
mov esi, dword [eax]
mov edx, dword [esp + 0x18]
xor eax, eax
mov ax, word [0x513e2a]
push edx
push eax
call dword [sym.imp.WS2_32.dll_htons]
movzx ecx, ax
push ecx
push esi
lea edx, [esp + 0x1c]
push str.http:___s:_i_uri_res_N2R__s
push edx
call fcn.004058b0
mov bl, 0xd
add esp, 0x14
lea ecx, [esp + 0x14]
mov byte [esp + 0xcc], bl
call fcn.00403b90
push 0
call fcn.004ad6ed
sub eax, 0xb4
push eax
lea edi, [esp + 0x1c]
call fcn.00479330
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 0x11
call fcn.00408130
mov ecx, edi
mov byte [esp + 0xcc], bl
call fcn.00403b90
mov eax, dword [ebp + 0x2c]
push eax
mov edx, 0x4ddb14
call fcn.0040e150
push 0x4db0f0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
call fcn.0041c280
mov eax, dword [eax]
mov esi, dword [ebp + 0x2c]
add esp, 0xc
push 0
mov ebx, eax
call fcn.0040e180
lea ecx, [esp + 0x1c]
call fcn.00403b90
lea ecx, [esp + 0x18]
call fcn.00403b90
mov ebx, dword [ebp + 0x2c]
push 2
push 0x4db3f0
call fcn.0040e000
push 2
mov esi, ebp
call fcn.00424940
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
or edi, 0xffffffff
lea ecx, [ebp + 0x560]
mov dword [ebp + 0x514], eax
mov dword [ebp + 0x520], ebx
mov dword [ebp + 0x524], ebx
mov dword [ebp + 0x528], ebx
mov dword [ebp + 0x52c], ebx
mov dword [ebp + 0x548], ebx
mov dword [ebp + 0x54c], ebx
mov dword [ebp + 0x550], ebx
mov dword [ebp + 0x558], edi
mov dword [ebp + 0x55c], edi
call fcn.00403dd0
lea ecx, [ebp + 0x530]
call fcn.00403dd0
mov edx, dword [ebp + 0x510]
mov esi, dword [ebp + 0x4d4]
lea eax, [esp + 0x20]
inc edx
push eax
mov dword [ebp + 0x510], edx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea ecx, [esi + 0x78]
push ecx
lea edx, [esp + 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov esi, dword [esi + 8]
mov edx, dword [esi + 8]
inc edx
mov ecx, ebp
mov dword [esi + 8], edx
call fcn.004137a0
mov byte [esp + 0xcc], bl
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c6e8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c708
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c725
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c742
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c75f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov dword [esp + 0xcc], edi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edi
dec edi
test edi, edi
jg 0x42c781
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, 1
mov ecx, dword [esp + 0xc4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xb4]
pop ebx
call fcn.004ae38e
add esp, 0xc0
ret 4