Function at 0x411ae0
Capabilities:
Check http status code
Create http request
Download and write a file
Get http content length
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
sub esp, 0xbc
mov eax, dword [0x4a7534]
xor eax, esp
mov dword [esp + 0xb8], eax
push ebx
push ebp
mov ebp, dword [esp + 0xc8]
push esi
mov esi, dword [esp + 0xd0]
xor eax, eax
push edi
push 0x7e
push eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
mov byte [esp + 0x1b], al
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], eax
mov word [esp + 0x50], ax
lea eax, [esp + 0x52]
mov edi, edx
push eax
mov ebx, ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x50], 4
call fcn.004498f0
add esp, 0xc
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.0046d2f0
test al, al
je 0x411c00
lea ecx, [esp + 0x14]
push ecx
push ebp
mov ecx, edi
call fcn.0046e540
test al, al
jne 0x411bb8
push 0
push 0
push ebp
mov ecx, edi
call fcn.0046e300
mov edi, dword [esi]
add edi, 8
call fcn.00447a33
mov edx, dword [eax]
mov eax, dword [edi]
push edx
push str.OpenLocal
mov ecx, esi
call eax
push 0x483974
mov ecx, ebp
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
mov ecx, dword [esp + 0x1c]
mov esi, eax
call fcn.0046d3a0
push eax
mov ecx, esi
call fcn.0046c360
jmp 0x4120b5
cmp dword [esp + 0x14], 0x1400000
jbe 0x411c00
push 0
push 0
push ebp
mov ecx, edi
call fcn.0046e300
test al, al
jne 0x411bf8
mov ecx, ebp
call fcn.0046c290
mov edi, dword [esi]
add edi, 8
call fcn.00447a33
mov ecx, dword [eax]
mov edx, dword [edi]
push ecx
push str.DelLocal
mov ecx, esi
call edx
push 0x48399c
jmp 0x411b92
mov dword [esp + 0x14], 0
push 0
push 0
push 0
push 0
push str.SOGOU_UPDATER
call dword [sym.imp.WININET.dll_InternetOpenW]
test eax, eax
mov dword [esp + 0x18], eax
jne 0x411c52
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 8]
push edi
push 0x4839b4
mov ecx, esi
call edx
push edi
push str.InetOpen
mov ecx, ebp
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
mov ecx, eax
call fcn.0046c380
jmp 0x4120b5
mov edi, dword [sym.imp.WININET.dll_InternetSetOptionW]
push 4
lea ecx, [esp + 0x2c]
push ecx
push 5
push eax
mov dword [esp + 0x38], 0x4e20
call edi
mov eax, dword [esp + 0x18]
push 4
lea edx, [esp + 0x2c]
push edx
push 7
push eax
call edi
mov edx, dword [esp + 0x18]
push 4
lea ecx, [esp + 0x2c]
push ecx
push 2
push edx
call edi
mov ecx, dword [esp + 0x18]
push 4
lea eax, [esp + 0x2c]
push eax
push 6
push ecx
call edi
mov eax, dword [esp + 0x18]
push 4
lea edx, [esp + 0x2c]
push edx
push 8
push eax
call edi
mov eax, dword [esp + 0x14]
test eax, eax
jbe 0x411ccf
push eax
push str.Range:bytes_d_
lea ecx, [esp + 0x50]
push 0x40
push ecx
call fcn.00446633
add esp, 0x10
lea ecx, [esp + 0x48]
jmp 0x411cd3
xor ecx, ecx
xor eax, eax
mov edx, dword [esp + 0x18]
mov edi, dword [sym.imp.WININET.dll_InternetOpenUrlW]
push 0
push 0x84000000
push eax
push ecx
push ebx
push edx
call edi
test eax, eax
mov dword [esp + 0x20], eax
jne 0x411d7c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
mov dword [esp + 0x34], eax
mov eax, dword [edx + 8]
push str.InetOpenUrlRange
mov ecx, esi
call eax
cmp dword [esp + 0x14], 0
jbe 0x411d69
mov ecx, dword [esp + 0x18]
push 0
push 0x84000000
push 0
push 0
push ebx
push ecx
mov dword [esp + 0x2c], 0
call edi
test eax, eax
mov dword [esp + 0x20], eax
jne 0x411d78
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 8]
push edi
push 0x483a24
mov ecx, esi
call eax
push 0x483a3c
push edi
mov ecx, ebp
call fcn.0046c520
mov ecx, eax
call fcn.0046c360
jmp 0x4120b5
mov ecx, dword [esp + 0x30]
push ecx
push str.InternetOpenUrl
jmp 0x411c38
mov eax, dword [esp + 0x20]
push 0
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x44]
push ecx
push 0x20000013
push eax
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 4
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x411dca
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 8]
push edi
push 0x483a80
mov ecx, esi
call eax
push edi
push str.HttpQueryInfo
jmp 0x411c38
mov eax, dword [esp + 0x3c]
cmp eax, 0x1a0
jne 0x411ed6
mov edx, dword [esi]
push eax
mov eax, dword [edx + 8]
push str.HttpQInfo
mov ecx, esi
call eax
mov ecx, dword [esp + 0x1c]
push 0
push 0
push ebp
call fcn.0046e300
test al, al
jne 0x411e23
mov ecx, ebp
call fcn.0046c290
mov edi, dword [esi]
add edi, 8
call fcn.00447a33
mov ecx, dword [eax]
mov edx, dword [edi]
push ecx
push str.DelLocal
mov ecx, esi
call edx
push 0x483ab0
jmp 0x411b92
mov eax, dword [esp + 0x18]
push 0
push 0x84000000
push 0
push 0
push ebx
push eax
call edi
test eax, eax
mov dword [esp + 0x20], eax
jne 0x411e60
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 8]
push edi
push 0x483a24
mov ecx, esi
call eax
push edi
push str.InetOpenUrl
jmp 0x411c38
push 0
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x44]
push edx
push 0x20000013
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x411eb4
cmp dword [esp + 0x3c], 0xc8
jne 0x411eb4
mov dword [esp + 0x14], 0
mov edx, dword [esp + 0x20]
push 0
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x3c]
push ecx
push 0x20000005
push edx
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x411f06
mov dword [esp + 0x34], eax
jmp 0x411f31
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 8]
push edi
push 0x483a80
mov ecx, esi
call edx
push edi
push str.HttpQInfoFail
jmp 0x411c38
cmp eax, 0xc8
je 0x411e8e
cmp eax, 0xce
je 0x411e8e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 8]
push edi
push str.HttpQInfoUnkn
mov ecx, esi
call edx
push edi
push str.HttpQInfoFail
jmp 0x411c38
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x411f31
mov eax, 0x51eb851f
mul ecx
mov ebx, edx
shr ebx, 4
cmp ebx, 0x400
jae 0x411f29
mov ebx, 0x400
jmp 0x411f36
cmp ebx, 0x20000
jbe 0x411f36
mov ebx, 0x20000
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [esp + 0x1c]
mov edi, eax
push 0x483b24
mov dword [esp + 0x3c], edi
mov dword [esp + 0x28], 0
call fcn.0046d380
push eax
lea eax, [esp + 0x34]
push eax
call fcn.00446c9e
add esp, 0xc
cmp dword [esp + 0x2c], 0
jne 0x411f99
mov edi, dword [esi]
add edi, 8
call fcn.00447a33
mov ecx, dword [eax]
mov edx, dword [edi]
push ecx
push str.OpenLocal
mov ecx, esi
call edx
push 0x483b2c
jmp 0x41203d
test esi, esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], ecx
je 0x411fba
mov edx, dword [esp + 0x34]
mov eax, dword [esi]
mov eax, dword [eax + 4]
push ecx
add ecx, edx
push ecx
mov ecx, esi
call eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
mov edi, edi
test eax, eax
jbe 0x41200c
add dword [esp + 0x30], eax
test esi, esi
je 0x411fe5
mov eax, dword [esp + 0x30]
mov edx, dword [esi]
mov edx, dword [edx + 4]
push eax
mov eax, dword [esp + 0x38]
add ecx, eax
push ecx
mov ecx, esi
call edx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
push ecx
push eax
push 1
push edi
call fcn.0044735e
mov edx, dword [esp + 0x3c]
push edx
mov edi, eax
call fcn.00447fa0
add esp, 0x14
cmp edi, dword [esp + 0x24]
jb 0x412038
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x24]
push eax
push ebx
push edi
push ecx
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x412064
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x24]
test eax, eax
jbe 0x41209c
mov ecx, dword [esp + 0x14]
jmp 0x411fc0
push 0x483b40
mov ecx, ebp
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
mov ecx, dword [esp + 0x1c]
mov esi, eax
call fcn.0046d3a0
push eax
mov ecx, esi
call fcn.0046c360
mov edi, dword [esp + 0x38]
jmp 0x4120a1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 8]
push edi
push str.InetRFile
mov ecx, esi
call eax
push edi
push 0x483b64
mov ecx, ebp
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
mov ecx, eax
call fcn.0046c380
mov edi, dword [esp + 0x38]
jmp 0x4120a1
mov byte [esp + 0x13], 1
test edi, edi
je 0x4120b5
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4120c6
push eax
call fcn.00446f88
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
je 0x4120d7
push eax
call esi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4120e2
push eax
call esi
mov ecx, dword [esp + 0xc8]
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0044610a
add esp, 0xbc
ret