Function at 0x40f120
Capabilities:
Create http request

Disassembly:
push 0xffffffffffffffff
push 0x443784
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
mov eax, dword [0x44f1a0]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44f1a0]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x1a0]
mov eax, dword [esp + 0x1a4]
push 0xffffffffffffffff
push ebp
xor ebx, ebx
call fcn.00401709
push ebp
mov dword [ebp + 0xc4], ebx
call fcn.0040ebd0
test al, al
je 0x40ff5e
mov ecx, ebp
call fcn.0040ed60
test al, al
je 0x40ff5e
push ebp
call fcn.0040ee70
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [esp + 0x2c], vtable.RC::RCInternetSession.0
call dword [sym.imp.WININET.dll_InternetOpenW]
mov esi, eax
mov dword [esp + 0x1c], esi
push 4
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1a0], ebx
mov edi, dword [sym.imp.WININET.dll_InternetSetOptionW]
push 2
push esi
mov dword [esp + 0x24], 0x7d0
call edi
push 4
lea ecx, [esp + 0x18]
push ecx
push 3
push esi
mov dword [esp + 0x24], 3
call edi
push 4
lea edx, [esp + 0x18]
push edx
push 5
push esi
mov dword [esp + 0x24], 0x2710
call edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
lea ecx, [esp + 0xc8]
mov byte [esp + 0x198], 1
call fcn.0040e880
lea edi, [esp + 0xc8]
lea esi, [esp + 0x20]
mov byte [esp + 0x198], 2
call fcn.00423430
test al, al
jne 0x40f264
cmp dword [esp + 0xe0], 8
jb 0x40f254
mov eax, dword [esp + 0xcc]
push eax
call fcn.0042bbfa
add esp, 4
mov dword [esp + 0xe0], 7
jmp 0x40ff33
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov esi, 7
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], bx
mov dword [esp + 0xa8], 0xf
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
push ebp
lea edi, [esp + 0x40]
mov byte [esp + 0x19c], 5
call fcn.00410d10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x1a4], 6
call fcn.0040336e
mov byte [esp + 0x198], 5
cmp dword [esp + 0x54], 0x10
jb 0x40f2ea
mov ecx, dword [esp + 0x40]
push ecx
call fcn.0042bbfa
add esp, 4
push 1
push 0x4470d4
lea eax, [esp + 0x98]
call fcn.00413830
push 0xb
push str.action_type
lea eax, [esp + 0x98]
call fcn.00413830
push 1
push 0x4470e4
lea eax, [esp + 0x98]
call fcn.00413830
push 5
push str.login
lea eax, [esp + 0x98]
call fcn.00413830
mov ecx, dword [esp + 0x94]
mov edi, 0x10
cmp dword [esp + 0xa8], edi
jae 0x40f352
lea ecx, [esp + 0x94]
mov eax, dword [esp + 0xa4]
lea edx, [esp + 0x2c]
push edx
push eax
lea edx, [esp + 0x28]
push edx
lea edx, [esp + 0xb8]
call fcn.00423490
test al, al
jne 0x40f438
cmp dword [esp + 0xa8], edi
jb 0x40f391
mov eax, dword [esp + 0x94]
push eax
call fcn.0042bbfa
add esp, 4
mov ebp, 8
cmp dword [esp + 0xc4], ebp
mov dword [esp + 0xa8], 0xf
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
jb 0x40f3c8
mov ecx, dword [esp + 0xb0]
push ecx
call fcn.0042bbfa
add esp, 4
mov edi, 7
lea esi, [esp + 0x2c]
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], bx
call fcn.00413300
cmp dword [esp + 0xe0], ebp
jb 0x40f405
mov edx, dword [esp + 0xcc]
push edx
call fcn.0042bbfa
add esp, 4
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov dword [esp + 0xe0], edi
mov dword [esp + 0xdc], ebx
mov word [esp + 0xcc], bx
je 0x40f42a
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [esp + 0x18]
call fcn.004282b0
jmp 0x40ff5e
push 0x4460fc
lea eax, [esp + 0xb0]
call fcn.00408b70
test eax, eax
je 0x40f511
cmp dword [esp + 0xa8], edi
jb 0x40f46a
mov eax, dword [esp + 0x94]
push eax
call fcn.0042bbfa
add esp, 4
mov ebp, 8
cmp dword [esp + 0xc4], ebp
mov dword [esp + 0xa8], 0xf
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
jb 0x40f4a1
mov ecx, dword [esp + 0xb0]
push ecx
call fcn.0042bbfa
add esp, 4
mov edi, 7
lea esi, [esp + 0x2c]
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], bx
call fcn.00413300
cmp dword [esp + 0xe0], ebp
jb 0x40f4de
mov edx, dword [esp + 0xcc]
push edx
call fcn.0042bbfa
add esp, 4
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov dword [esp + 0xe0], edi
mov dword [esp + 0xdc], ebx
mov word [esp + 0xcc], bx
je 0x40f503
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [esp + 0x18]
call fcn.004282b0
jmp 0x40ff5e
mov dword [esp + 0xfc], esi
mov dword [esp + 0xf8], ebx
mov word [esp + 0xe8], bx
mov dword [esp + 0x118], esi
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], bx
mov byte [esp + 0x198], 8
xor edi, edi
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x40f5bf
mov ecx, dword [esp + 0x34]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x40f5bf
lea esi, [esp + 0x2c]
call fcn.00413370
push str.dict
mov esi, eax
call fcn.00408b70
test eax, eax
jne 0x40f591
push 0xffffffffffffffff
lea ecx, [esp + 0x104]
push ecx
jmp 0x40f5ab
push str.tgid
mov eax, esi
call fcn.00408b70
test eax, eax
jne 0x40f5b5
push 0xffffffffffffffff
lea edx, [esp + 0xe8]
push edx
xor ebx, ebx
lea eax, [esi + 0x1c]
call fcn.00401709
add edi, 1
mov esi, 7
jmp 0x40f547
cmp dword [esp + 0x114], ebx
je 0x40fe41
cmp dword [esp + 0xf8], ebx
je 0x40fe41
lea esi, [esp + 0x2c]
call fcn.00413460
mov eax, str.tgid
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.00401633
lea eax, [esp + 0xe4]
push eax
mov ecx, esi
push ecx
lea edx, [esp + 0x60]
push edx
mov byte [esp + 0x1a4], 9
call fcn.004134a0
push eax
lea esi, [esp + 0x30]
mov byte [esp + 0x19c], 0xa
call fcn.004133b0
lea esi, [esp + 0x58]
call fcn.004246b0
mov byte [esp + 0x198], 8
cmp dword [esp + 0x54], 8
jb 0x40f655
mov eax, dword [esp + 0x40]
push eax
call fcn.0042bbfa
add esp, 4
push ebp
lea edi, [esp + 0x40]
call fcn.00410d10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x1a4], 0xb
call fcn.0040336e
mov byte [esp + 0x198], 8
cmp dword [esp + 0x54], 0x10
jb 0x40f693
mov ecx, dword [esp + 0x40]
push ecx
call fcn.0042bbfa
add esp, 4
lea edx, [esp + 0x90]
push edx
mov edx, 0x4470d4
call fcn.004132e0
lea eax, [esp + 0x90]
push eax
mov edx, str.action_type
call fcn.004132e0
lea ecx, [esp + 0x90]
push ecx
mov edx, 0x4470e4
call fcn.004132e0
lea edx, [esp + 0x90]
push edx
mov edx, str.logout
call fcn.004132e0
lea eax, [esp + 0x100]
push eax
lea ecx, [esp + 0x13c]
push ecx
lea ecx, [esp + 0xec]
mov edx, ebp
call fcn.00410a30
lea edx, [esp + 0x90]
push edx
mov edx, 0x4470d4
mov byte [esp + 0x19c], 0xc
call fcn.004132e0
lea eax, [esp + 0x90]
push eax
mov edx, str.value2
call fcn.004132e0
lea ecx, [esp + 0x90]
push ecx
mov edx, 0x4470e4
call fcn.004132e0
push ebx
lea edx, [esp + 0x13c]
push edx
or eax, 0xffffffff
lea esi, [esp + 0x98]
call fcn.00413740
push 0x44684a
lea ecx, [esp + 0x158]
call fcn.00403205
mov eax, esi
push eax
mov edx, 0x4470d4
mov byte [esp + 0x19c], 0xd
call fcn.004132e0
mov ecx, esi
push ecx
mov edx, str.value3
call fcn.004132e0
mov edx, esi
push edx
mov edx, 0x4470e4
call fcn.004132e0
push ebx
lea eax, [esp + 0x158]
push eax
or eax, 0xffffffff
call fcn.00413740
lea ecx, [esp + 0x100]
push ecx
push ebp
lea ecx, [esp + 0xec]
lea edi, [esp + 0x178]
call fcn.0040fff0
mov edx, esi
push edx
mov edx, 0x4470d4
mov byte [esp + 0x19c], 0xe
call fcn.004132e0
mov eax, esi
push eax
mov edx, str.value
call fcn.004132e0
mov ecx, esi
push ecx
mov edx, 0x4470e4
call fcn.004132e0
push ebx
mov edx, edi
push edx
or eax, 0xffffffff
call fcn.00413740
push 0x44684a
lea ecx, [esp + 0x120]
call fcn.00403205
mov byte [esp + 0x198], 0xf
cmp dword [esp + 0x130], ebx
je 0x40f851
mov eax, esi
push eax
mov edx, 0x4470d4
call fcn.004132e0
mov ecx, esi
push ecx
mov edx, str.ui_value
call fcn.004132e0
mov edx, esi
push edx
mov edx, 0x4470e4
call fcn.004132e0
push ebx
lea eax, [esp + 0x120]
push eax
or eax, 0xffffffff
call fcn.00413740
mov ecx, dword [esp + 0x94]
mov esi, 0x10
cmp dword [esp + 0xa8], esi
jae 0x40f86d
lea ecx, [esp + 0x94]
mov eax, dword [esp + 0xa4]
lea edx, [esp + 0x2c]
push edx
push eax
lea edx, [esp + 0x28]
push edx
lea edx, [esp + 0xb8]
call fcn.00423490
test al, al
jne 0x40fa6e
cmp dword [esp + 0x134], esi
jb 0x40f8ac
mov eax, dword [esp + 0x120]
push eax
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x188], esi
mov edi, 0xf
mov dword [esp + 0x134], edi
mov dword [esp + 0x130], ebx
mov byte [esp + 0x120], bl
jb 0x40f8df
mov ecx, dword [esp + 0x174]
push ecx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x16c], esi
mov dword [esp + 0x188], edi
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
jb 0x40f90d
mov edx, dword [esp + 0x158]
push edx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x150], esi
mov dword [esp + 0x16c], edi
mov dword [esp + 0x168], ebx
mov byte [esp + 0x158], bl
jb 0x40f93b
mov eax, dword [esp + 0x13c]
push eax
call fcn.0042bbfa
add esp, 4
mov dword [esp + 0x150], edi
mov edi, 8
cmp dword [esp + 0x118], edi
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
jb 0x40f96e
mov ecx, dword [esp + 0x104]
push ecx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xfc], edi
mov ebp, 7
mov dword [esp + 0x118], ebp
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], bx
jb 0x40f9a2
mov edx, dword [esp + 0xe8]
push edx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xa8], esi
mov dword [esp + 0xfc], ebp
mov dword [esp + 0xf8], ebx
mov word [esp + 0xe8], bx
jb 0x40f9d1
mov eax, dword [esp + 0x94]
push eax
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xc4], edi
mov dword [esp + 0xa8], 0xf
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
jb 0x40fa03
mov ecx, dword [esp + 0xb0]
push ecx
call fcn.0042bbfa
add esp, 4
lea esi, [esp + 0x2c]
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], bx
call fcn.00413300
cmp dword [esp + 0xe0], edi
jb 0x40fa3b
mov edx, dword [esp + 0xcc]
push edx
call fcn.0042bbfa
add esp, 4
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xdc], ebx
mov word [esp + 0xcc], bx
je 0x40fa60
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [esp + 0x18]
call fcn.004282b0
jmp 0x40ff5e
push 0x4460fc
lea eax, [esp + 0xb0]
call fcn.00408b70
test eax, eax
je 0x40fc63
cmp dword [esp + 0x134], esi
jb 0x40faa0
mov eax, dword [esp + 0x120]
push eax
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x188], esi
mov ebp, 0xf
mov dword [esp + 0x134], ebp
mov dword [esp + 0x130], ebx
mov byte [esp + 0x120], bl
jb 0x40fad3
mov ecx, dword [esp + 0x174]
push ecx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x16c], esi
mov dword [esp + 0x188], ebp
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
jb 0x40fb01
mov edx, dword [esp + 0x158]
push edx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x150], esi
mov dword [esp + 0x16c], ebp
mov dword [esp + 0x168], ebx
mov byte [esp + 0x158], bl
jb 0x40fb2f
mov eax, dword [esp + 0x13c]
push eax
call fcn.0042bbfa
add esp, 4
mov edi, 8
cmp dword [esp + 0x118], edi
mov dword [esp + 0x150], ebp
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
jb 0x40fb62
mov ecx, dword [esp + 0x104]
push ecx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xfc], edi
mov dword [esp + 0x118], 7
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], bx
jb 0x40fb95
mov edx, dword [esp + 0xe8]
push edx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xa8], esi
mov dword [esp + 0xfc], 7
mov dword [esp + 0xf8], ebx
mov word [esp + 0xe8], bx
jb 0x40fbc8
mov eax, dword [esp + 0x94]
push eax
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xc4], edi
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
jb 0x40fbf6
mov ecx, dword [esp + 0xb0]
push ecx
call fcn.0042bbfa
add esp, 4
lea esi, [esp + 0x2c]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], bx
call fcn.00413300
cmp dword [esp + 0xe0], edi
jb 0x40fc32
mov edx, dword [esp + 0xcc]
push edx
call fcn.0042bbfa
add esp, 4
lea esi, [esp + 0x20]
mov dword [esp + 0xe0], 7
mov dword [esp + 0xdc], ebx
mov word [esp + 0xcc], bx
call fcn.00423410
lea ecx, [esp + 0x18]
call fcn.004282b0
jmp 0x40ff5e
cmp dword [esp + 0x134], esi
jb 0x40fc7c
mov eax, dword [esp + 0x120]
push eax
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x188], esi
mov ebp, 0xf
mov dword [esp + 0x134], ebp
mov dword [esp + 0x130], ebx
mov byte [esp + 0x120], bl
jb 0x40fcaf
mov ecx, dword [esp + 0x174]
push ecx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x16c], esi
mov dword [esp + 0x188], ebp
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
jb 0x40fcdd
mov edx, dword [esp + 0x158]
push edx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0x150], esi
mov dword [esp + 0x16c], ebp
mov dword [esp + 0x168], ebx
mov byte [esp + 0x158], bl
jb 0x40fd0b
mov eax, dword [esp + 0x13c]
push eax
call fcn.0042bbfa
add esp, 4
mov edi, 8
cmp dword [esp + 0x118], edi
mov dword [esp + 0x150], ebp
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
jb 0x40fd3e
mov ecx, dword [esp + 0x104]
push ecx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xfc], edi
mov dword [esp + 0x118], 7
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], bx
jb 0x40fd71
mov edx, dword [esp + 0xe8]
push edx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xa8], esi
mov dword [esp + 0xfc], 7
mov dword [esp + 0xf8], ebx
mov word [esp + 0xe8], bx
jb 0x40fda4
mov eax, dword [esp + 0x94]
push eax
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xc4], edi
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
jb 0x40fdd2
mov ecx, dword [esp + 0xb0]
push ecx
call fcn.0042bbfa
add esp, 4
lea esi, [esp + 0x2c]
mov dword [esp + 0xc4], 7
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], bx
call fcn.00413300
cmp dword [esp + 0xe0], edi
jb 0x40fe0e
mov edx, dword [esp + 0xcc]
push edx
call fcn.0042bbfa
add esp, 4
lea esi, [esp + 0x20]
mov dword [esp + 0xe0], 7
mov dword [esp + 0xdc], ebx
mov word [esp + 0xcc], bx
call fcn.00423410
lea ecx, [esp + 0x18]
call fcn.004282b0
mov al, 1
jmp 0x40ff60
cmp dword [esp + 0x118], 8
jb 0x40fe5b
mov eax, dword [esp + 0x104]
push eax
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xfc], 8
mov dword [esp + 0x118], esi
mov dword [esp + 0x114], ebx
mov word [esp + 0x104], bx
jb 0x40fe8b
mov ecx, dword [esp + 0xe8]
push ecx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xa8], 0x10
mov dword [esp + 0xfc], esi
mov dword [esp + 0xf8], ebx
mov word [esp + 0xe8], bx
jb 0x40febb
mov edx, dword [esp + 0x94]
push edx
call fcn.0042bbfa
add esp, 4
cmp dword [esp + 0xc4], 8
mov dword [esp + 0xa8], 0xf
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
jb 0x40feee
mov eax, dword [esp + 0xb0]
push eax
call fcn.0042bbfa
add esp, 4
mov edi, 7
lea esi, [esp + 0x2c]
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], bx
call fcn.00413300
cmp dword [esp + 0xe0], 8
jb 0x40ff2c
mov ecx, dword [esp + 0xcc]
push ecx
call fcn.0042bbfa
add esp, 4
mov dword [esp + 0xe0], edi
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
mov word [esp + 0xcc], bx
mov dword [esp + 0xdc], ebx
je 0x40ff53
push eax
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x40ff5e
push eax
call esi
xor al, al
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.0042b9ba
add esp, 0x188
ret 8