Function at 0x436780
Capabilities:
Create http request

Disassembly:
push 0xffffffffffffffff
push 0x450d8f
mov eax, dword fs:[0]
push eax
mov eax, 0x4970
call fcn.0043b0f0
mov eax, dword [0x463630]
xor eax, esp
mov dword [esp + 0x496c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x463630]
xor eax, esp
push eax
lea eax, [esp + 0x4984]
mov dword fs:[0], eax
mov ebx, 7
xor edi, edi
xor eax, eax
mov esi, ecx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x120], edi
mov word [esp + 0x110], ax
xor ecx, ecx
push 9
mov word [esp + 0x88], cx
push str.sogou_ime
lea ecx, [esp + 0x88]
mov dword [esp + 0x4994], edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], edi
call fcn.00401a4d
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
add eax, 0x4c
push edi
xor edx, edx
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x4998], 1
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], edi
mov word [esp + 0x3c], dx
call fcn.004017f2
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
xor ecx, ecx
add eax, 0x68
push edi
mov word [esp + 0x70], cx
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x4998], 2
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edi
call fcn.004017f2
xor edx, edx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], edi
mov word [esp + 0x4c], dx
xor eax, eax
mov dword [esp + 0xec], ebx
mov dword [esp + 0xe8], edi
mov word [esp + 0xd8], ax
xor ecx, ecx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb0], edi
mov word [esp + 0xa0], cx
push 0x27fe
lea eax, [esp + 0x186]
push edi
push eax
mov byte [esp + 0x4998], 6
mov word [esp + 0x18c], dx
call fcn.0043ab70
add esp, 0xc
lea ecx, [esp + 0x9c]
push ecx
lea edx, [esp + 0xd8]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
call fcn.00435ed0
mov eax, dword [esi + 0x10]
add eax, 0x84
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xcc], edi
push 0xffffffffffffffff
push edi
xor edx, edx
push eax
lea ecx, [esp + 0xc4]
mov word [esp + 0xc8], dx
call fcn.004017f2
mov byte [esp + 0x498c], bl
cmp dword [esp + 0x40], edi
je 0x436cb5
cmp dword [esp + 0xcc], edi
je 0x436cb5
mov eax, dword [esi + 0x10]
add eax, 0x20
mov ebp, 8
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x84]
cmp dword [esp + 0x98], ebp
jae 0x436966
lea eax, [esp + 0x84]
push edi
push edi
push edi
push edi
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [esi + 0x1c], eax
cmp eax, edi
jne 0x436985
mov dword [esp + 0x14], 0xffffffff
jmp 0x436cbd
push 0x1ffe
lea ecx, [esp + 0x2986]
xor eax, eax
push edi
push ecx
mov word [esp + 0x298c], ax
call fcn.0043ab70
mov eax, dword [esp + 0xac]
add esp, 0xc
cmp dword [esp + 0xb4], ebp
jae 0x4369bc
lea eax, [esp + 0xa0]
push eax
lea edx, [esp + 0x2984]
push 0x1000
push edx
call fcn.0043a8e8
mov eax, dword [esp + 0x58]
add esp, 0xc
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], edi
cmp dword [esp + 0x60], ebp
jae 0x4369e8
lea eax, [esp + 0x4c]
push 0x4e20
push edi
push edi
push 0x455464
lea ecx, [esp + 0x2990]
push ecx
push eax
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x40]
push eax
mov ecx, esi
call fcn.00435cd0
test eax, eax
je 0x436a23
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x14], 0xfffffffd
jmp 0x436c3c
push 0x52
lea edx, [esp + 0x12e]
xor ecx, ecx
push edi
push edx
mov word [esp + 0x134], cx
call fcn.0043ab70
mov eax, dword [esp + 0x3c]
add esp, 0xc
cmp dword [esp + 0x44], ebp
jae 0x436a4e
lea eax, [esp + 0x30]
push eax
push 0x29
lea eax, [esp + 0x130]
push eax
mov ecx, esi
call fcn.00435480
push str.Accept:_image_gif__image_x_xbitmap__image_jpeg__image_pjpeg__application_x_shockwave_flash__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword__application_xamlxml__application_vnd.ms_xpsdocument__application_x_ms_xbap__application_x_ms_application____r_n
lea ecx, [esp + 0x184]
push 0x1400
push ecx
call fcn.0043a965
push str.Accept_Language:_zh_cn_r_n
lea edx, [esp + 0x190]
push 0x1400
push edx
call fcn.0043a8e8
push 0x4551a0
lea eax, [esp + 0x19c]
push 0x1400
push eax
call fcn.0043a8e8
lea ecx, [esp + 0x14c]
push ecx
lea edx, [esp + 0x1a8]
push 0x1400
push edx
call fcn.0043a8e8
push 0x455194
lea eax, [esp + 0x1b4]
push 0x1400
push eax
call fcn.0043a8e8
push str.Accept_Encoding:_gzip__deflate_r_n
lea ecx, [esp + 0x1c0]
push 0x1400
push ecx
call fcn.0043a8e8
add esp, 0x48
lea edx, [esp + 0x23]
push edx
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push edx
mov ecx, esi
mov dword [esp + 0x38], edi
mov dword [esp + 0x24], edi
call fcn.00435520
mov ebp, dword [esp + 0x14]
xor eax, eax
mov word [esp + 0xf4], ax
mov eax, ebp
mov dword [esp + 0x108], ebx
mov dword [esp + 0x104], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x436b34
sub eax, edx
sar eax, 1
push eax
push ebp
lea ecx, [esp + 0xf8]
call fcn.00401a4d
mov byte [esp + 0x498c], 8
cmp dword [esp + 0x104], edi
je 0x436b8f
push 0x45513c
lea ecx, [esp + 0x184]
push 0x1400
push ecx
call fcn.0043a8e8
push ebp
lea edx, [esp + 0x190]
push 0x1400
push edx
call fcn.0043a8e8
add esp, 0x18
lea eax, [esp + 0x180]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x436ba0
mov ebp, dword [esp + 0x18]
sub eax, edx
push 0x20000000
sar eax, 1
push eax
lea eax, [esp + 0x188]
push eax
push ebp
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
test eax, eax
jne 0x436bef
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0xf0]
mov dword [esp + 0x14], 0xfffffffc
mov byte [esp + 0x498c], bl
call fcn.004016dd
jmp 0x436c3c
cmp dword [esp + 0x7c], 8
mov eax, dword [esp + 0x68]
jae 0x436bfe
lea eax, [esp + 0x68]
lea ecx, [esp + 0x128]
push ecx
push eax
lea edx, [esp + 0xc0]
push edx
push ebp
mov ecx, esi
call fcn.004361e0
cmp dword [esp + 0x108], 8
mov dword [esp + 0x14], eax
mov byte [esp + 0x498c], bl
jb 0x436c3c
mov eax, dword [esp + 0xf4]
push eax
call fcn.0043a14d
add esp, 4
cmp dword [esp + 0x1c], edi
je 0x436cc1
cmp dword [esp + 0x14], edi
jne 0x436cc1
push 0x56
lea edx, [esp + 0x12e]
xor ecx, ecx
push edi
push edx
mov word [esp + 0x134], cx
call fcn.0043ab70
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x12c]
push ecx
push ebp
mov ecx, esi
mov dword [esp + 0x24], 0x56
call fcn.004357d0
test eax, eax
jne 0x436cc1
cmp word [esp + 0x128], di
je 0x436cc1
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x128]
shr edx, 1
push 0x455130
push ecx
mov word [esp + edx*2 + 0x130], ax
call fcn.0043b11b
add esp, 8
jmp 0x436cc1
mov dword [esp + 0x14], 0xfffffffe
mov ebp, dword [esp + 0x18]
cmp ebp, edi
je 0x436ccc
push ebp
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x436cdb
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [esi + 0x28]
push edx
mov ecx, esi
call fcn.00435c30
push 0x14
call fcn.0043a173
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0x498c], 9
cmp eax, edi
je 0x436d0d
mov ecx, dword [esi + 0x18]
push ecx
mov ecx, eax
call fcn.00434a50
jmp 0x436d0f
xor eax, eax
mov byte [esp + 0x498c], bl
cmp eax, edi
je 0x436d25
mov ecx, dword [esi + 0x18]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 8]
call eax
push 0x14
call fcn.0043a173
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0x498c], 0xa
cmp eax, edi
je 0x436d4c
mov ecx, dword [esi + 0x14]
push ecx
mov ecx, eax
call fcn.00434930
jmp 0x436d4e
xor eax, eax
mov byte [esp + 0x498c], bl
cmp eax, edi
je 0x436d62
mov ecx, dword [esi + 0x14]
push eax
call fcn.004308d0
mov esi, 8
cmp dword [esp + 0xd0], esi
jb 0x436d80
mov edx, dword [esp + 0xbc]
push edx
call fcn.0043a14d
add esp, 4
xor eax, eax
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xcc], edi
mov word [esp + 0xbc], ax
cmp dword [esp + 0xb4], esi
jb 0x436db1
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.0043a14d
add esp, 4
xor edx, edx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb0], edi
mov word [esp + 0xa0], dx
cmp dword [esp + 0xec], esi
jb 0x436de2
mov eax, dword [esp + 0xd8]
push eax
call fcn.0043a14d
add esp, 4
xor ecx, ecx
mov dword [esp + 0xec], ebx
mov dword [esp + 0xe8], edi
mov word [esp + 0xd8], cx
cmp dword [esp + 0x60], esi
jb 0x436e0d
mov edx, dword [esp + 0x4c]
push edx
call fcn.0043a14d
add esp, 4
xor eax, eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], edi
mov word [esp + 0x4c], ax
cmp dword [esp + 0x7c], esi
jb 0x436e2f
mov ecx, dword [esp + 0x68]
push ecx
call fcn.0043a14d
add esp, 4
xor edx, edx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
mov word [esp + 0x68], dx
cmp dword [esp + 0x44], esi
jb 0x436e51
mov eax, dword [esp + 0x30]
push eax
call fcn.0043a14d
add esp, 4
xor ecx, ecx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], edi
mov word [esp + 0x30], cx
cmp dword [esp + 0x98], esi
jb 0x436e79
mov edx, dword [esp + 0x84]
push edx
call fcn.0043a14d
add esp, 4
xor eax, eax
mov dword [esp + 0x98], ebx
mov dword [esp + 0x94], edi
mov word [esp + 0x84], ax
cmp dword [esp + 0x124], esi
jb 0x436eaa
mov ecx, dword [esp + 0x110]
push ecx
call fcn.0043a14d
add esp, 4
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x4984]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x496c]
xor ecx, esp
call fcn.0043a5be
add esp, 0x497c
ret