Function at 0x473074
Capabilities:
Create http request
Download and write a file
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ecx
push edx
push edi
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0xffffffff
push 0
lea edx, [ebp - 8]
push edx
call dword [sym.imp.wininet.dll_InternetGetConnectedState]
mov eax, dword [ebp - 8]
test eax, 0x20
jne 0x473234
push 0
push 0
push 0
push 0
call 0x473074
dec eax
add byte [edx], al
add byte [eax], al
call dword [sym.imp.wininet.dll_InternetOpenW]
test eax, eax
je 0x473234
mov dword [ebp - 0x24], eax
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push dword [ebp - 0x24]
call dword [sym.imp.wininet.dll_InternetOpenUrlW]
test eax, eax
je 0x473234
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0x104
lea edx, [ebp - 0xc]
push edx
lea edx, [ebp - 8]
push edx
push dword [0x404f70]
push 0x13
push eax
call dword [sym.imp.wininet.dll_HttpQueryInfoW]
call 0x4730d6
xor al, byte [eax]
xor byte [eax], al
xor byte [eax], al
add byte [eax], al
push dword [0x404f70]
call dword [sym.imp.kernel32.dll_lstrcmpW]
test eax, eax
jne 0x473234
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 4
lea edx, [ebp - 0xc]
push edx
lea edx, [ebp - 8]
push edx
lea edx, [ebp - 0x28]
push edx
push 0x20000005
push dword [ebp - 0x2c]
call dword [sym.imp.wininet.dll_HttpQueryInfoW]
cmp dword [ebp + 0xc], 0
je 0x473234
push 0
push pe_nt_image_headers32
push 2
push 0
push 0
push 0x40000000
push dword [ebp + 0xc]
call dword [sym.imp.kernel32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x473234
mov dword [ebp - 4], eax
push 0x6000
call fcn.0046bf84
mov dword [ebp - 0x18], eax
add eax, 0x2000
mov dword [ebp - 0x14], eax
add eax, 0x2000
mov dword [ebp - 0x10], eax
push 0
push dword [ebp - 0x10]
call fcn.0046bc82
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 0
je 0x473213
mov edi, dword [ebp - 0x18]
mov ecx, 0x800
xor eax, eax
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x1c]
push edx
push 0xfff
push dword [ebp - 0x18]
push dword [ebp - 0x2c]
call dword [sym.imp.wininet.dll_InternetReadFile]
cmp eax, 0
je 0x47320e
cmp dword [ebp - 0x1c], 0
je 0x47320e
push 0
lea edx, [ebp - 8]
push edx
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
push dword [ebp - 4]
call dword [sym.imp.kernel32.dll_WriteFile]
mov eax, dword [ebp - 0x1c]
add dword [ebp - 0x20], eax
push dword [ebp - 0x20]
nop
call 0x4731f8
jb 0x4731d4
add byte gs:[ebx], ah
add byte gs:[ecx], ch
jbe 0x4731de
imul eax, dword [eax], 0x67006e
and byte [eax], al
and eax, 0x20006400
add byte [edx], ah
jns 0x4731f0
je 0x4731f2
add byte gs:[ebx], dh
add byte [eax], al
push dword [ebp - 0x14]
call dword [sym.imp.user32.dll_wsprintfW]
add esp, 0xc
push 1
push dword [ebp - 0x14]
call fcn.0046bc82
jmp 0x473178
push 1
push dword [ebp - 0x10]
call fcn.0046bc82
push dword [ebp - 0x18]
call fcn.0046bff1
push dword [ebp - 4]
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x2c], 0
je 0x473243
push dword [ebp - 0x2c]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
cmp dword [ebp - 0x24], 0
je 0x473252
push dword [ebp - 0x24]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x28]
pop edi
pop edx
pop ecx
leave
ret 8