Function at 0x433da0
Capabilities:
Contain obfuscated stackstrings
Delete file
Get file size
Initialize winhttp library
Inspect section memory permissions
Move file
Prepare http request
Read and send data from client to server
Read file on windows
Read http header
Receive http response
Send data
Send http request
Set http header
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45924c
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x32690
call fcn.0043ced0
mov eax, dword [0x472008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
sub esp, 0x18
mov dword [ebp - 0x32450], edi
mov ecx, esp
mov dword [ebp - 0x32654], esp
lea esi, [edi + 0xc]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x433e12
mov eax, dword [ecx]
jmp 0x433e14
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push esi
mov word [eax], dx
call fcn.00401e20
sub esp, 0x18
mov dword [ebp - 4], 0
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x433e54
mov eax, dword [ecx]
jmp 0x433e56
mov eax, ecx
push 4
xor edx, edx
push str.url:
mov word [eax], dx
call fcn.00403e00
mov dword [ebp - 4], 0xffffffff
call fcn.00404730
xor eax, eax
add esp, 0x30
cmp dword [edi + 0x1c], eax
jne 0x433ee8
push 9
push str.url_empty
lea ecx, [ebp - 0x3244c]
mov dword [ebp - 0x32438], 7
mov dword [ebp - 0x3243c], eax
mov word [ebp - 0x3244c], ax
call fcn.00403e00
lea eax, [ebp - 0x3244c]
mov dword [ebp - 4], 1
push eax
push 0x1f4
mov ecx, edi
call fcn.00433cd0
mov ecx, dword [ebp - 0x32438]
mov esi, eax
cmp ecx, 8
jb 0x4353ad
push 2
inc ecx
push ecx
push dword [ebp - 0x3244c]
call fcn.004035c0
add esp, 0xc
jmp 0x4353ad
mov dword [ebp - 0x3246c], 7
mov dword [ebp - 0x32470], 0
mov word [ebp - 0x32480], ax
xor eax, eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x32484], 7
mov dword [ebp - 0x32488], 0
mov word [ebp - 0x32498], ax
mov dword [ebp - 0x3249c], 7
mov dword [ebp - 0x324a0], eax
mov word [ebp - 0x324b0], ax
mov dword [ebp - 0x32454], 7
mov dword [ebp - 0x32458], eax
mov word [ebp - 0x32468], ax
lea eax, [ebp - 0x32468]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x324b0]
push eax
lea eax, [ebp - 0x32498]
push eax
lea eax, [ebp - 0x32480]
push eax
push esi
call fcn.00435c20
add esp, 0x14
cmp dword [ebp - 0x32470], 0
jne 0x43402d
push str.protocol_empty
lea ecx, [ebp - 0x3244c]
call fcn.004025f0
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 6
push eax
push 0x1f4
mov ecx, edi
call fcn.00433cd0
mov ecx, dword [ebp - 0x32438]
mov esi, eax
cmp ecx, 8
jb 0x433fd1
push 2
inc ecx
push ecx
push dword [ebp - 0x3244c]
call fcn.004035c0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x32438], 7
mov word [ebp - 0x3244c], ax
mov eax, dword [ebp - 0x32454]
mov dword [ebp - 0x3243c], 0
cmp eax, 8
jb 0x43400b
push 2
inc eax
push eax
push dword [ebp - 0x32468]
call fcn.004035c0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x32454], 7
mov dword [ebp - 0x32458], 0
mov word [ebp - 0x32468], ax
jmp 0x43538c
cmp dword [ebp - 0x32488], 0
jne 0x434068
push str.host_empty
lea ecx, [ebp - 0x3244c]
call fcn.004025f0
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 7
push eax
push 0x1f4
mov ecx, edi
call fcn.00433cd0
lea ecx, [ebp - 0x3244c]
jmp 0x43537a
cmp dword [ebp - 0x32458], 0
jne 0x434081
push 0x45bd6c
lea ecx, [ebp - 0x32468]
call fcn.00413c30
cmp dword [ebp - 0x3246c], 8
lea eax, [ebp - 0x32480]
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
cmovae eax, dword [ebp - 0x32480]
push eax
push 0x45e414
call esi
test eax, eax
jne 0x4340ab
xor bl, bl
jmp 0x4340d1
cmp dword [ebp - 0x3246c], 8
lea eax, [ebp - 0x32480]
cmovae eax, dword [ebp - 0x32480]
push eax
push str.https
call esi
test eax, eax
jne 0x43534d
mov bl, 1
cmp dword [ebp - 0x324a0], 0
jne 0x4340ee
test bl, bl
mov eax, 0x50
mov ecx, 0x1bb
cmovne eax, ecx
movzx eax, ax
jmp 0x434130
lea eax, [ebp - 0x324b0]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.0040cf30
add esp, 8
push 0xa
push 0
push eax
mov byte [ebp - 4], 0xa
call fcn.00435ef0
add esp, 0xc
lea ecx, [ebp - 0x3242c]
mov esi, eax
call fcn.00402850
movzx eax, si
mov dword [ebp - 4], 5
mov dword [ebp - 0x32434], eax
test ax, ax
je 0x435337
push str.libcef_dll_mt_
lea ecx, [ebp - 0x324c8]
call fcn.004025f0
push str.1.1.0
lea ecx, [ebp - 0x3244c]
mov byte [ebp - 4], 0xd
call fcn.00406980
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.0040c720
add esp, 8
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x324c8]
mov byte [ebp - 4], 0xf
call fcn.004039c0
lea ecx, [ebp - 0x3242c]
call fcn.00401c60
lea ecx, [ebp - 0x3244c]
mov byte [ebp - 4], 0xd
call fcn.00402850
cmp dword [ebp - 0x324b4], 8
lea eax, [ebp - 0x324c8]
push 0
cmovae eax, dword [ebp - 0x324c8]
push 0
push 0
push 0
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [edi + 0x8c], eax
test eax, eax
jne 0x434217
push str.Failed_to_initialize_WinHTTP
lea ecx, [ebp - 0x3244c]
call fcn.004025f0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x3244c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3244c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x324c8]
jmp 0x43537c
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test bl, bl
je 0x434253
push 4
lea ecx, [ebp - 0x32430]
mov dword [ebp - 0x32430], 0xa00
push ecx
push 0x54
push eax
call esi
test eax, eax
jne 0x434253
push str.Failed_to_set_WinHTTP_option
lea ecx, [ebp - 0x3244c]
call fcn.004025f0
mov byte [ebp - 4], 0x11
jmp 0x4341ec
cmp dword [ebp - 0x32484], 8
lea eax, [ebp - 0x32498]
push 0
push dword [ebp - 0x32434]
cmovae eax, dword [ebp - 0x32498]
push eax
push dword [edi + 0x8c]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x32434], eax
mov dword [edi + 0x90], eax
test eax, eax
jne 0x4342cc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x12
push str.Failed_to_connect:
push eax
call fcn.00433460
add esp, 0x14
lea ecx, [ebp - 0x3242c]
mov byte [ebp - 4], 0x14
call fcn.00401c60
jmp 0x4341ec
cmp dword [ebp - 0x32454], 8
lea edx, [ebp - 0x32468]
lea ecx, [edi + 0x3c]
cmovae edx, dword [ebp - 0x32468]
cmp dword [ecx + 0x14], 8
jb 0x4342eb
mov ecx, dword [ecx]
test bl, bl
mov dword [ebp - 0x32430], 0x800100
mov eax, 0x100
cmovne eax, dword [ebp - 0x32430]
push eax
push 0
push 0
push 0
push edx
push ecx
push dword [ebp - 0x32434]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [edi + 0x94], eax
test eax, eax
jne 0x434362
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x15
push str.Failed_to_open_request:
push eax
call fcn.00433460
add esp, 0x14
lea ecx, [ebp - 0x3242c]
mov byte [ebp - 4], 0x17
call fcn.00401c60
jmp 0x4341ec
push 4
push edi
push 3
push eax
call esi
push 4
lea eax, [edi + 4]
push eax
push 6
push dword [edi + 0x94]
call esi
push 4
lea eax, [edi + 8]
push eax
push 5
push dword [edi + 0x94]
call esi
push 4
lea eax, [ebp - 0x32564]
mov dword [ebp - 0x32564], 2
push eax
push 0x58
push dword [edi + 0x8c]
call esi
push str.Connection:_close_r_n
lea ecx, [ebp - 0x324e0]
call fcn.004025f0
cmp dword [ebp - 0x324cc], 8
lea eax, [ebp - 0x324e0]
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
cmovae eax, dword [ebp - 0x324e0]
push 0x20000000
push 0xffffffffffffffff
push eax
push dword [edi + 0x94]
mov byte [ebp - 4], 0x18
call ebx
test eax, eax
jne 0x43445a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x19
push str.Failed_to_add_noKeepLiveheaders:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x3242c]
call fcn.00401c60
lea eax, [ebp - 0x3244c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3244c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x324e0]
call fcn.00401c60
lea ecx, [ebp - 0x324c8]
jmp 0x43537c
cmp dword [edi + 0x34], 0
je 0x4344b4
cmp dword [edi + 0x38], 8
lea eax, [edi + 0x24]
jb 0x43446b
mov eax, dword [eax]
push 0x20000000
push 0xffffffffffffffff
push eax
push dword [edi + 0x94]
call ebx
test eax, eax
jne 0x4344b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x1c
push str.Failed_to_add_reqHeader:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x1e
jmp 0x434419
cmp byte [edi + 0xa4], 0
jne 0x43451a
mov eax, dword [edi + 0xa0]
push 0
push eax
push eax
push dword [edi + 0x9c]
push 0
push 0
push dword [edi + 0x94]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x434e00
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x1f
push str.Failed_to_send_request:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x21
jmp 0x434419
cmp dword [edi + 0x64], 0
je 0x434a2c
call fcn.00409b30
push edx
push eax
lea eax, [ebp - 0x32514]
push eax
call fcn.00409b90
lea eax, [ebp - 0x32514]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x3255c]
push 0x45e640
push eax
call fcn.00433350
lea eax, [ebp - 0x32514]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x3242c]
push eax
call fcn.0040c720
push eax
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x24
push str.____
push eax
call fcn.00433460
add esp, 0x2c
lea ecx, [ebp - 0x3242c]
mov byte [ebp - 4], 0x26
call fcn.00401c60
lea eax, [ebp - 0x3255c]
push eax
lea eax, [ebp - 0x32684]
push 0x45e6cc
push eax
call fcn.00433350
push str._r_nContent_Disposition:_form_data__name_file___filename_example.txt__r_nContent_Type:_application_octet_stream_r_n_r_n
push eax
lea eax, [ebp - 0x324fc]
mov byte [ebp - 4], 0x27
push eax
call fcn.0040e160
add esp, 0x18
lea ecx, [ebp - 0x32684]
mov byte [ebp - 4], 0x29
call fcn.00402850
cmp dword [edi + 0x68], 8
mov eax, dword [ebp - 0x324ec]
mov dword [ebp - 0x32434], eax
lea eax, [edi + 0x54]
jb 0x4345e9
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 1
push connect
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x43467f
push str.CreateFile_error
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x3242c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3242c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x324fc]
call fcn.00402850
lea ecx, [ebp - 0x3244c]
call fcn.00401c60
lea ecx, [ebp - 0x3255c]
call fcn.00402850
lea ecx, [ebp - 0x32514]
call fcn.00402850
lea ecx, [ebp - 0x324e0]
call fcn.00401c60
lea ecx, [ebp - 0x324c8]
jmp 0x43537c
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
mov dword [ebp - 0x32654], ebx
test ebx, ebx
jne 0x4346b4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.GetFileSize_error
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x2b
jmp 0x43461d
lea eax, [ebp - 0x3255c]
push eax
lea eax, [ebp - 0x3242c]
push str._r_n__
push eax
call fcn.00433350
push str.___r_n
push eax
lea eax, [ebp - 0x32544]
mov byte [ebp - 4], 0x2c
push eax
call fcn.0040e160
add esp, 0x18
lea ecx, [ebp - 0x3242c]
mov byte [ebp - 4], 0x2e
call fcn.00402850
mov ecx, dword [ebp - 0x32534]
lea eax, [ebp - 0x3244c]
add ebx, dword [ebp - 0x32434]
push eax
lea eax, [ebp - 0x32684]
mov dword [ebp - 0x32450], ecx
push str.Content_Type:_multipart_form_data__boundary
push eax
add ebx, ecx
call fcn.0040e3b0
push 0x45b974
push eax
lea eax, [ebp - 0x3252c]
mov byte [ebp - 4], 0x2f
push eax
call fcn.00404ed0
add esp, 0x18
lea ecx, [ebp - 0x32684]
mov byte [ebp - 4], 0x31
call fcn.00401c60
cmp dword [ebp - 0x32518], 8
lea eax, [ebp - 0x3252c]
push 0x20000000
cmovae eax, dword [ebp - 0x3252c]
push 0xffffffffffffffff
push eax
push dword [edi + 0x94]
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x4347f1
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x32
push str.Failed_to_WinHttpAddRequestHeaders:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x3266c]
call fcn.00401c60
lea eax, [ebp - 0x3242c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3242c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x3252c]
call fcn.00401c60
lea ecx, [ebp - 0x32544]
call fcn.00402850
jmp 0x43463d
push 0
push ebx
push 0
push 0
push 0
push 0
push dword [edi + 0x94]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x434848
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x35
push str.Failed_to_send_request1:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x37
jmp 0x4347ab
cmp dword [ebp - 0x324e8], 0x10
lea eax, [ebp - 0x324fc]
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
cmovae eax, dword [ebp - 0x324fc]
push 0
push dword [ebp - 0x32434]
push eax
push dword [edi + 0x94]
call ebx
test eax, eax
jne 0x4348b3
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x38
push str.Failed_to_WinHttpWriteData:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x3a
jmp 0x4347ab
cmp dword [ebp - 0x32654], 0
jbe 0x434985
push 0
lea eax, [ebp - 0x32430]
push eax
push 0x32000
lea eax, [ebp - 0x32414]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x434929
mov eax, dword [ebp - 0x32430]
test eax, eax
je 0x434985
lea ecx, [ebp - 0x3256c]
push ecx
push eax
lea eax, [ebp - 0x32414]
push eax
push dword [edi + 0x94]
call ebx
test eax, eax
je 0x434949
push 0
lea eax, [ebp - 0x32430]
push eax
push 0x32000
lea eax, [ebp - 0x32414]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4348e0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.Failed_to_ReadFile
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x3b
jmp 0x4347b6
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x3c
push str.Failed_to_htto_write_data:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x3e
jmp 0x4347ab
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x32530], 0x10
lea eax, [ebp - 0x32544]
push 0
push dword [ebp - 0x32450]
cmovae eax, dword [ebp - 0x32544]
push eax
push dword [edi + 0x94]
call ebx
test eax, eax
jne 0x4349ea
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x3f
push str.Failed_to_htto_write_data2:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x41
jmp 0x4347ab
lea ecx, [ebp - 0x3252c]
call fcn.00401c60
lea ecx, [ebp - 0x32544]
call fcn.00402850
lea ecx, [ebp - 0x324fc]
call fcn.00402850
lea ecx, [ebp - 0x3244c]
call fcn.00401c60
lea ecx, [ebp - 0x3255c]
call fcn.00402850
lea ecx, [ebp - 0x32514]
jmp 0x434df7
call fcn.00409b30
push edx
push eax
lea eax, [ebp - 0x32544]
push eax
call fcn.00409b90
lea eax, [ebp - 0x32544]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x3255c]
push 0x45e640
push eax
call fcn.00433350
lea eax, [ebp - 0x32544]
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.0040c720
push eax
lea eax, [ebp - 0x324fc]
mov byte [ebp - 4], 0x44
push str.____
push eax
call fcn.00433460
add esp, 0x2c
lea ecx, [ebp - 0x3266c]
mov byte [ebp - 4], 0x46
call fcn.00401c60
lea eax, [ebp - 0x3255c]
push eax
lea eax, [ebp - 0x32684]
push 0x45e6cc
push eax
call fcn.00433350
push str._r_nContent_Disposition:_form_data__name_file___filename_example.txt__r_nContent_Type:_application_octet_stream_r_n_r_n
push eax
lea eax, [ebp - 0x3252c]
mov byte [ebp - 4], 0x47
push eax
call fcn.0040e160
add esp, 0x18
lea ecx, [ebp - 0x32684]
mov byte [ebp - 4], 0x49
call fcn.00402850
mov eax, dword [ebp - 0x3251c]
mov esi, dword [edi + 0x88]
mov dword [ebp - 0x32430], eax
lea eax, [ebp - 0x3255c]
push eax
lea eax, [ebp - 0x3242c]
mov dword [ebp - 0x32450], esi
push str._r_n__
push eax
call fcn.00433350
push str.___r_n
push eax
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x4a
push eax
call fcn.0040e160
add esp, 0x18
lea ecx, [ebp - 0x3242c]
mov byte [ebp - 4], 0x4c
call fcn.00402850
mov ecx, dword [ebp - 0x3243c]
lea eax, [ebp - 0x324fc]
add esi, dword [ebp - 0x32430]
mov dword [ebp - 0x32654], ecx
add esi, ecx
push eax
lea eax, [ebp - 0x3269c]
push str.Content_Type:_multipart_form_data__boundary
push eax
call fcn.0040e3b0
push 0x45b974
push eax
lea eax, [ebp - 0x32514]
mov byte [ebp - 4], 0x4d
push eax
call fcn.00404ed0
add esp, 0x18
lea ecx, [ebp - 0x3269c]
mov byte [ebp - 4], 0x4f
call fcn.00401c60
cmp dword [ebp - 0x32500], 8
lea eax, [ebp - 0x32514]
push 0x20000000
cmovae eax, dword [ebp - 0x32514]
push 0xffffffffffffffff
push eax
push dword [edi + 0x94]
call ebx
test eax, eax
jne 0x434c4f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x50
push str.Failed_to_WinHttpAddRequestHeaders:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3266c]
call fcn.00401c60
lea eax, [ebp - 0x3242c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3242c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x32514]
call fcn.00401c60
lea ecx, [ebp - 0x3244c]
call fcn.00402850
lea ecx, [ebp - 0x3252c]
call fcn.00402850
lea ecx, [ebp - 0x324fc]
call fcn.00401c60
lea ecx, [ebp - 0x3255c]
call fcn.00402850
lea ecx, [ebp - 0x32544]
jmp 0x434664
push 0
push esi
push 0
push 0
push 0
push 0
push dword [edi + 0x94]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x434c9f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x53
push str.Failed_to_send_request1:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x55
jmp 0x434be2
cmp dword [ebp - 0x32518], 0x10
lea eax, [ebp - 0x3252c]
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
cmovae eax, dword [ebp - 0x3252c]
push 0
push dword [ebp - 0x32430]
push eax
push dword [edi + 0x94]
call esi
test eax, eax
jne 0x434d03
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x56
push str.Failed_to_WinHttpWriteData:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x58
jmp 0x434be2
mov eax, dword [ebp - 0x32450]
test eax, eax
je 0x434d5c
lea ecx, [ebp - 0x3256c]
push ecx
push eax
push dword [edi + 0x84]
push dword [edi + 0x94]
call esi
test eax, eax
jne 0x434d5c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x59
push str.Failed_to_htto_write_data:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x5b
jmp 0x434be2
cmp dword [ebp - 0x32438], 0x10
lea eax, [ebp - 0x3244c]
push 0
push dword [ebp - 0x32654]
cmovae eax, dword [ebp - 0x3244c]
push eax
push dword [edi + 0x94]
call esi
test eax, eax
jne 0x434dba
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3266c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x5c
push str.Failed_to_htto_write_data2:
push eax
call fcn.00433460
add esp, 0x14
mov byte [ebp - 4], 0x5e
jmp 0x434be2
lea ecx, [ebp - 0x32514]
call fcn.00401c60
lea ecx, [ebp - 0x3244c]
call fcn.00402850
lea ecx, [ebp - 0x3252c]
call fcn.00402850
lea ecx, [ebp - 0x324fc]
call fcn.00401c60
lea ecx, [ebp - 0x3255c]
call fcn.00402850
lea ecx, [ebp - 0x32544]
mov byte [ebp - 4], 0x18
call fcn.00402850
push 0
push dword [edi + 0x94]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x434e6b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3269c]
push eax
call fcn.00435f80
push eax
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x5f
push str.Failed_to_receive_response:
push eax
call fcn.00433460
add esp, 0x14
lea ecx, [ebp - 0x3269c]
mov byte [ebp - 4], 0x61
call fcn.00401c60
lea eax, [ebp - 0x3242c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3242c]
jmp 0x43443d
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
lea eax, [ebp - 0x32568]
push 0
push eax
lea eax, [ebp - 0x32560]
mov dword [ebp - 0x32560], 0
push eax
push 0
push 0x20000013
push dword [edi + 0x94]
mov dword [ebp - 0x32568], 4
call esi
test eax, eax
jne 0x434ebe
push str.Failed_to_Query_status_code
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x62
jmp 0x434e4d
mov eax, dword [ebp - 0x32560]
push 0
mov dword [ebp - 0x32430], eax
lea eax, [ebp - 0x32650]
push eax
push 0
push 0
push 0x16
push dword [edi + 0x94]
mov dword [ebp - 0x32650], 0
call esi
test eax, eax
jne 0x434f13
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x434f13
push str.Failed_to_get_response_headers_size
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x63
jmp 0x434e4d
mov eax, dword [ebp - 0x32650]
xor ecx, ecx
shr eax, 1
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00423d44
add esp, 4
mov dword [edi + 0x98], eax
lea ecx, [ebp - 0x32650]
push 0
push ecx
push eax
push 0
push 0x16
push dword [edi + 0x94]
call esi
test eax, eax
jne 0x434f6d
push str.Failed_to_get_response_headers
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x64
jmp 0x434e4d
push dword [edi + 0x98]
lea ecx, [ebp - 0x3259c]
call fcn.004025f0
cmp dword [edi + 0x7c], 0
lea ebx, [edi + 0x6c]
mov byte [ebp - 4], 0x65
jne 0x435108
push 0xb0
lea eax, [ebp - 0x3264c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3264c]
push 1
push 3
call fcn.004335d0
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov byte [ebp - 4], 0x66
mov dword [ebp - 0x32434], 0
nop dword [eax + eax]
lea eax, [ebp - 0x32434]
push eax
push 0x400
lea eax, [ebp - 0x414]
push eax
push dword [edi + 0x94]
call esi
test eax, eax
je 0x4350be
mov eax, dword [ebp - 0x32434]
test eax, eax
je 0x43501c
push 0
push eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x3263c]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
cmp dword [ebp - 0x32434], 0
ja 0x434fd0
push 0x4c
call fcn.00403fdb
mov esi, eax
add esp, 4
test esi, esi
je 0x435044
push 0x4c
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, esi
call fcn.004337d0
mov esi, eax
jmp 0x435046
xor esi, esi
mov eax, dword [ebp - 0x32430]
lea ecx, [esi + 0x1c]
mov dword [esi], eax
lea eax, [ebp - 0x3259c]
push eax
call fcn.004339c0
lea eax, [ebp - 0x3242c]
push eax
lea ecx, [ebp - 0x3264c]
call fcn.00429820
lea eax, [ebp - 0x3242c]
mov byte [ebp - 4], 0x68
push eax
lea eax, [ebp - 0x3269c]
push eax
call fcn.0040c720
add esp, 8
lea ecx, [esi + 0x34]
push eax
call fcn.00413bb0
lea ecx, [ebp - 0x3269c]
call fcn.00401c60
lea ecx, [ebp - 0x3242c]
call fcn.00402850
lea ecx, [ebp - 0x3264c]
call fcn.00425640
lea ecx, [ebp - 0x3259c]
jmp 0x43443f
push str.Failed_to_ReadData
lea ecx, [ebp - 0x3244c]
call fcn.004025f0
lea eax, [ebp - 0x3244c]
mov byte [ebp - 4], 0x67
push eax
push 0x1f4
mov ecx, edi
call fcn.00433cd0
lea ecx, [ebp - 0x3244c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x3264c]
call fcn.00425640
lea ecx, [ebp - 0x3259c]
jmp 0x43443f
push str..temp
lea eax, [ebp - 0x32584]
push ebx
push eax
call fcn.00404f30
add esp, 0xc
cmp dword [ebp - 0x32570], 8
lea eax, [ebp - 0x32584]
push 0
cmovae eax, dword [ebp - 0x32584]
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
mov byte [ebp - 4], 0x69
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x43519f
push str.Create_save_File_error
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x3242c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3242c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x32584]
call fcn.00401c60
lea ecx, [ebp - 0x3259c]
jmp 0x43443f
mov dword [ebp - 0x324e4], 0
nop dword [eax]
lea eax, [ebp - 0x324e4]
push eax
push 0x400
lea eax, [ebp - 0x414]
push eax
push dword [edi + 0x94]
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x4352f7
mov eax, dword [ebp - 0x324e4]
test eax, eax
je 0x435210
push 0
lea ecx, [ebp - 0x32450]
mov dword [ebp - 0x32450], 0
push ecx
push eax
lea eax, [ebp - 0x414]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x43522e
cmp dword [ebp - 0x324e4], 0
ja 0x4351b0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call fcn.00408b50
add esp, 4
test al, al
je 0x435257
cmp dword [ebx + 0x14], 8
jb 0x43524e
mov eax, dword [ebx]
jmp 0x435250
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.Failed_to_write_to_file
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x6c
jmp 0x435169
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x32570], 8
lea esi, [ebp - 0x32584]
mov ecx, ebx
cmovae esi, dword [ebp - 0x32584]
call fcn.00401c50
push eax
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x435297
push str.rename_file_fail
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x6d
jmp 0x435169
push 0x4c
call fcn.00403fdb
mov esi, eax
add esp, 4
test esi, esi
je 0x4352bf
push 0x4c
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, esi
call fcn.004337d0
mov esi, eax
jmp 0x4352c1
xor esi, esi
mov eax, dword [ebp - 0x32430]
lea ecx, [esi + 0x1c]
mov dword [esi], eax
lea eax, [ebp - 0x3259c]
push eax
call fcn.004339c0
push ebx
lea ecx, [esi + 0x34]
call fcn.004339c0
lea ecx, [ebp - 0x32584]
call fcn.00401c60
lea ecx, [ebp - 0x3259c]
jmp 0x43443f
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.Failed_to_ReadData
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0x6b
jmp 0x435169
push str.port_error
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 0xc
jmp 0x435361
push str.protocol_not_support
lea ecx, [ebp - 0x3242c]
call fcn.004025f0
mov byte [ebp - 4], 8
lea eax, [ebp - 0x3242c]
mov ecx, edi
push eax
push 0x1f4
call fcn.00433cd0
lea ecx, [ebp - 0x3242c]
mov esi, eax
call fcn.00401c60
lea ecx, [ebp - 0x32468]
call fcn.00401c60
lea ecx, [ebp - 0x324b0]
call fcn.00401c60
lea ecx, [ebp - 0x32498]
call fcn.00401c60
lea ecx, [ebp - 0x32480]
call fcn.00401c60
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040219c
mov esp, ebp
pop ebp
ret