Function at 0x6cfe0a84
Capabilities:
Connect to http server
Create http request
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0xb4
mov dword [esp + 0x14], 0x4a
mov dword [esp + 0x10], 0x65
mov dword [esp + 0xc], 0x11
mov dword [esp + 8], 0xb
lea eax, [ebp - 0x98]
mov dword [esp + 4], eax
mov dword [esp], 0x6d169678
call fcn.6cfe0298
lea eax, [ebp - 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetOpenW]
call eax
sub esp, 0x14
mov dword [ebp - 0x10], eax
mov dword [esp + 0x14], 0x3b
mov dword [esp + 0x10], 0x91
mov dword [esp + 0xc], 0x21
mov dword [esp + 8], 0xc
lea eax, [ebp - 0x80]
mov dword [esp + 4], eax
mov dword [esp], 0x6d1695e8
call fcn.6cfe19e0
lea eax, [ebp - 0x80]
mov dword [esp], eax
call fcn.6cfe1c24
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 0x6d167180
mov dword [esp + 0xc], 0x6d167180
mov dword [esp + 8], 0x1bb
mov dword [esp + 4], str.www.google.com
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetConnectW]
call eax
sub esp, 0x20
mov dword [ebp - 0x14], eax
mov dword [esp + 0x14], 0x2d
mov dword [esp + 0x10], 0x35
mov dword [esp + 0xc], 0x81
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x73]
mov dword [esp + 4], eax
mov dword [esp], 0x6d1695f4
call fcn.6cfe19e0
lea eax, [ebp - 0x73]
mov dword [esp], eax
call fcn.6cfe1c24
mov dword [ebp - 0x18], 0x200
or dword [ebp - 0x18], 0x400000
or dword [ebp - 0x18], 0x400000
or dword [ebp - 0x18], 0x200000
or dword [ebp - 0x18], 0x4000
or dword [ebp - 0x18], 0x8000
or dword [ebp - 0x18], 0x4000000
or dword [ebp - 0x18], 0x100
or dword [ebp - 0x18], 0x800
or dword [ebp - 0x18], 0x80000000
or dword [ebp - 0x18], 0x2000
or dword [ebp - 0x18], 0x1000
or dword [ebp - 0x18], 0x80
or dword [ebp - 0x18], 0x800000
mov dword [esp + 0x14], 0x7e
mov dword [esp + 0x10], 0x5f
mov dword [esp + 0xc], 9
mov dword [esp + 8], 8
lea eax, [ebp - 0x62]
mov dword [esp + 4], eax
mov dword [esp], 0x6d1695d4
call fcn.6cfe0298
lea ebx, [ebp - 0x62]
mov dword [esp + 0x14], 0xe
mov dword [esp + 0x10], 0x83
mov dword [esp + 0xc], 9
mov dword [esp + 8], 3
lea eax, [ebp - 0x50]
mov dword [esp + 4], eax
mov dword [esp], 0x6d1695d0
call fcn.6cfe0298
lea eax, [ebp - 0x50]
mov dword [esp + 0x1c], 0
mov edx, dword [ebp - 0x18]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], str.https:__www.google.com_
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x6d1671d0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_HttpOpenRequestW]
call eax
sub esp, 0x20
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x1f
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 4
lea eax, [ebp - 0x48]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x44]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetQueryOptionW]
call eax
sub esp, 0x10
test eax, eax
setne al
test al, al
je 0x6cfe0d65
mov eax, dword [ebp - 0x44]
or ah, 0x20
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or ah, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or ah, 2
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or ah, 1
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or al, 0x80
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x48]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x44]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetSetOptionW]
call eax
sub esp, 0x10
mov dword [esp + 0x14], 0x89
mov dword [esp + 0x10], 0x37
mov dword [esp + 0xc], 0x41
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x3e]
mov dword [esp + 4], eax
mov dword [esp], 0x6d1696c8
call fcn.6cfe19e0
lea eax, [ebp - 0x3e]
mov dword [esp], eax
call fcn.6cfe1c24
mov word [ebp - 0xa], 0
jmp 0x6cfe0e38
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_HttpSendRequestW]
call eax
sub esp, 0x14
mov dword [esp + 0x14], 0x7e
mov dword [esp + 0x10], 0x71
mov dword [esp + 0xc], 0x21
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x2d]
mov dword [esp + 4], eax
mov dword [esp], 0x6d169690
call fcn.6cfe19e0
lea eax, [ebp - 0x2d]
mov dword [esp], eax
call fcn.6cfe1c24
mov dword [esp], 0xea60
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
movzx eax, word [ebp - 0xa]
add eax, 1
mov word [ebp - 0xa], ax
cmp word [ebp - 0xa], 2
jle 0x6cfe0dae
nop
mov ebx, dword [ebp - 4]
leave
ret