Function at 0x464686
Capabilities:
Connect to http server
Create http request
Get http content length
Parse url

Disassembly:
push ebp
lea ebp, [esp - 0x2468]
mov eax, 0x24e8
call fcn.00471870
mov eax, dword [0x4ed820]
xor eax, ebp
mov dword [ebp + 0x2464], eax
push ebx
push esi
push edi
xor eax, eax
push 0x1fe
mov word [ebp + 0x2064], ax
xor esi, esi
lea eax, [ebp + 0x2066]
push esi
push eax
mov dword [ebp - 0x44], ecx
call fcn.004701a0
xor eax, eax
mov edi, 0xfe
push edi
mov word [ebp + 0x2264], ax
lea eax, [ebp + 0x2266]
push esi
push eax
call fcn.004701a0
xor eax, eax
push edi
mov word [ebp + 0x2364], ax
lea eax, [ebp + 0x2366]
push esi
push eax
call fcn.004701a0
xor eax, eax
push 0x1046
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x2a]
push esi
push eax
call fcn.004701a0
push 0x38
lea eax, [ebp - 0x7c]
push esi
push eax
call fcn.004701a0
lea eax, [ebp + 0x2064]
mov dword [ebp - 0x70], eax
lea eax, [ebp + 0x2264]
mov dword [ebp - 0x64], eax
lea eax, [edi - 0x7e]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x58], eax
add esp, 0x3c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x80]
push eax
push esi
push esi
push dword [ebp + 0x2470]
lea ecx, [ebp + 0x2364]
mov dword [ebp - 0x80], 0x3c
mov dword [ebp - 0x6c], 0x100
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x50], 0x824
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x46477a
cmp dword [ebp - 0x74], 3
je 0x464784
cmp dword [ebp - 0x74], 4
jne 0x4648d6
mov edi, dword [sym.imp.WININET.dll_InternetSetOptionW]
push 4
lea eax, [ebp - 0x30]
push eax
xor ebx, ebx
cmp dword [ebp - 0x74], 4
push 2
push esi
sete bl
mov dword [ebp - 0x30], 0x1e
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 5
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 6
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 7
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 8
push esi
call edi
push esi
push esi
push esi
push esi
push str.Beacon
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x3c], eax
cmp eax, esi
je 0x4648d6
push esi
push esi
push 3
lea ecx, [ebp + 0x2364]
push ecx
lea ecx, [ebp + 0x2264]
push ecx
push dword [ebp - 0x68]
lea ecx, [ebp + 0x2064]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetConnectW]
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x34], eax
cmp eax, esi
je 0x4648d1
xor eax, eax
push 0x1046
mov word [ebp + 0x101c], ax
lea eax, [ebp + 0x101e]
push esi
push eax
call fcn.004701a0
add esp, 0xc
lea eax, [ebp + 0x101c]
cmp dword [ebp - 0x50], esi
je 0x46484d
push dword [ebp - 0x54]
jmp 0x464852
push 0x4b9ccc
push eax
call fcn.004727c6
pop ecx
pop ecx
neg ebx
push esi
sbb ebx, ebx
and ebx, 0x800000
add ebx, 0x80000000
push ebx
push esi
push 0x4cdf90
push str.HTTP_1.1
lea eax, [ebp + 0x101c]
push eax
push 0x4bee94
push dword [ebp - 0x34]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov ecx, dword [ebp - 0x44]
mov ebx, eax
push 1
push ebx
call fcn.00464499
test eax, eax
je 0x4648c5
push esi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x20000005
push ebx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], 4
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x4648e8
cmp dword [ebp - 0x38], esi
jne 0x4648e8
cmp ebx, esi
je 0x4648cc
push ebx
call edi
push dword [ebp - 0x34]
call edi
push dword [ebp - 0x3c]
call edi
mov ecx, dword [ebp + 0x2470]
add ecx, 0xfffffff0
call fcn.0040290e
xor eax, eax
jmp 0x4648f9
mov ecx, dword [ebp + 0x2470]
add ecx, 0xfffffff0
call fcn.0040290e
xor eax, eax
inc eax
mov ecx, dword [ebp + 0x2464]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047021a
add ebp, 0x2468
leave
ret 4