Function at 0x4e67cf
Capabilities:
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5a9f14
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x694240]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
mov eax, dword [0x694240]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi + 4]
mov ebx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
test ecx, ecx
je 0x4e6a47
cmp ecx, 0xffffffff
je 0x4e6a47
xor eax, eax
mov esi, 0x800000
cmp dword [edi + 0x70], 2
push 0
cmove eax, esi
or eax, 0x4000000
push eax
push 0x697680
push edx
push 0x659fd4
push ebx
push 0x65a054
push ecx
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [edi + 8], eax
test eax, eax
je 0x4e6a31
cmp eax, 0xffffffff
je 0x4e6a31
push SysReAllocString
push 0xd
push 0x65a06c
push eax
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
test eax, eax
jne 0x4e6892
mov dword [esp + 0x10], 0x65a07c
lea eax, [esp + 0x10]
push 0x6914e8
push eax
call fcn.00572d44
cmp dword [edi + 0xa0], 0
jbe 0x4e69c9
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], eax
mov byte [esp + 0x14], al
mov dword [esp + 0x48], eax
mov eax, dword [edi + 0x70]
dec eax
je 0x4e68cd
dec eax
jne 0x4e68e4
mov esi, 0x65a040
jmp 0x4e68d2
mov esi, 0x65a038
push esi
call fcn.00475345
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.004796e9
lea esi, [edi + 0xc]
cmp dword [esi + 0x14], 0x10
jb 0x4e68ef
mov esi, dword [esi]
push esi
call fcn.00475345
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.004795b3
cmp dword [edi + 0x70], 1
jne 0x4e690e
cmp word [edi + 0x6c], 0x50
je 0x4e695e
cmp dword [edi + 0x70], 2
jne 0x4e691f
mov eax, 0x1bb
cmp word [edi + 0x6c], ax
je 0x4e695e
xor eax, eax
and dword [esp + 0x2e], eax
and dword [esp + 0x32], eax
mov word [esp + 0x2c], ax
movzx eax, word [edi + 0x6c]
push eax
lea eax, [esp + 0x30]
push 0x65a050
push eax
call fcn.005720e1
lea eax, [esp + 0x38]
push eax
call fcn.00475345
add esp, 0x10
lea ecx, [esp + 0x14]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.004795b3
push ebx
call fcn.00475345
pop ecx
push eax
push ebx
lea ecx, [esp + 0x1c]
call fcn.004795b3
mov eax, dword [edi + 0x9c]
mov esi, dword [eax]
cmp esi, eax
je 0x4e69b7
mov ecx, dword [esi + 8]
lea edx, [ecx + 0x18]
cmp dword [edx + 0x14], 0x10
jb 0x4e698a
mov edx, dword [edx]
cmp dword [ecx + 0x14], 0x10
jb 0x4e6992
mov ecx, dword [ecx]
cmp dword [esp + 0x28], 0x10
lea eax, [esp + 0x14]
push edx
cmovae eax, dword [esp + 0x18]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetSetCookieA]
test eax, eax
je 0x4e69f9
mov esi, dword [esi]
cmp esi, dword [edi + 0x9c]
jne 0x4e697c
or dword [esp + 0x48], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.00479762
mov ecx, edi
call fcn.004e5fb5
xor eax, eax
push eax
push eax
push eax
push eax
push dword [edi + 8]
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x4e6a0f
mov dword [esp + 0x10], 0x65a0f0
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e688c
mov dword [esp + 0x10], 0x65a0d8
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e688c
mov al, 1
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.005712ac
mov esp, ebp
pop ebp
ret 8
mov dword [esp + 0x10], 0x65a058
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e688c
mov dword [esp + 0x10], 0x659fbc
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e688c