Function at 0x48aa10
Capabilities:
Connect to http server
Create http request
Parse url
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4ac
mov eax, dword [0x4e26d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp + 0x18]
push 0x3c
mov dword [ebp - 0x460], eax
lea eax, [ebp - 0x4ac]
push 0
push eax
mov dword [ebp - 0x464], 0
call fcn.00498640
add esp, 0xc
mov dword [ebp - 0x4ac], 0x3c
cmp dword [0x4e22e4], 8
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x4a8], eax
lea ecx, [ebp - 0x4ac]
lea eax, [ebp - 0x42c]
mov dword [ebp - 0x4a4], 0x10
mov dword [ebp - 0x49c], eax
lea eax, [ebp - 0x22c]
push ecx
mov dword [ebp - 0x480], eax
mov eax, 0x4e22d0
cmovae eax, dword [0x4e22d0]
push 0
push dword [0x4e22e0]
mov dword [ebp - 0x498], 0x100
push eax
mov dword [ebp - 0x47c], 0x100
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
jne 0x48aaf6
mov eax, 2
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0049653f
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x451], 0
lea eax, [ebp - 0x2c]
mov ecx, str.https
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48ab2b
test dx, dx
je 0x48ab27
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48ab2b
add eax, 4
add ecx, 4
test dx, dx
jne 0x48ab05
xor eax, eax
jmp 0x48ab30
sbb eax, eax
or eax, 1
test eax, eax
jne 0x48ab3d
mov byte [ebp - 0x451], 1
jmp 0x48ab78
mov ecx, str.http
lea eax, [ebp - 0x2c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48ab6b
test dx, dx
je 0x48ab67
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48ab6b
add eax, 4
add ecx, 4
test dx, dx
jne 0x48ab45
xor eax, eax
jmp 0x48ab70
sbb eax, eax
or eax, 1
test eax, eax
jne 0x48aae3
push ebx
push 0x4e22e8
lea eax, [ebp - 0x444]
push 0x4c7420
push eax
call fcn.00431cb0
add esp, 0xc
lea eax, [ebp - 0x444]
cmp dword [ebp - 0x430], 8
cmovae eax, dword [ebp - 0x444]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov ebx, eax
test ebx, ebx
je 0x48afb6
push esi
mov dword [ebp - 0x448], ebx
call fcn.00448900
push 0
push 0
push 3
push 0
push 0
push dword [ebp - 0x494]
lea eax, [ebp - 0x42c]
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetConnectW]
mov esi, eax
test esi, esi
je 0x48af7e
push edi
mov dword [ebp - 0x450], esi
call fcn.00448900
cmp byte [ebp - 0x451], 0
mov eax, 0xa80000
push 0
mov ecx, 0x280000
cmovne ecx, eax
lea eax, [ebp - 0x22c]
push ecx
push 0
push 0
push 0
push eax
push 0x4da338
push esi
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov edi, eax
test edi, edi
je 0x48af63
mov dword [ebp - 0x44c], edi
call fcn.00448900
cmp dword [ebp - 0x460], 0
jle 0x48ac6f
mov esi, dword [sym.imp.WININET.dll_InternetSetOptionW]
lea eax, [ebp - 0x460]
push 4
push eax
push 2
push edi
call esi
push 4
lea eax, [ebp - 0x460]
push eax
push 5
push edi
call esi
mov eax, dword [ebp - 0x458]
cmp dword [eax + 0x10], 0
je 0x48ac92
push eax
push 0x4c7474
push edi
call fcn.0048a940
add esp, 0xc
test al, al
je 0x48aea5
mov eax, dword [ebp - 0x470]
cmp dword [eax + 0x10], 0
je 0x48acb5
push eax
push str.X_Origin
push edi
call fcn.0048a940
add esp, 0xc
test al, al
je 0x48aea5
push 0
push 0
push 0
push 0
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
je 0x48aea5
mov ebx, dword [sym.imp.WININET.dll_HttpQueryInfoW]
lea eax, [ebp - 0x464]
push 0
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x464], 8
push eax
push 0x13
push edi
call ebx
test eax, eax
je 0x48aea5
xor eax, eax
mov ecx, 0x4c7534
mov word [ebp - 6], ax
lea eax, [ebp - 0xc]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48ad2a
test dx, dx
je 0x48ad26
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48ad2a
add eax, 4
add ecx, 4
test dx, dx
jne 0x48ad04
xor eax, eax
jmp 0x48ad2f
sbb eax, eax
or eax, 1
test eax, eax
je 0x48adb0
mov ecx, 0x4c753c
lea eax, [ebp - 0xc]
jmp 0x48ad40
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48ad66
test dx, dx
je 0x48ad62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48ad66
add eax, 4
add ecx, 4
test dx, dx
jne 0x48ad40
xor esi, esi
jmp 0x48ad6b
sbb esi, esi
or esi, 1
lea ecx, [ebp - 0x44c]
call fcn.0048a920
lea ecx, [ebp - 0x450]
call fcn.0048a920
lea ecx, [ebp - 0x448]
call fcn.0048a920
lea ecx, [ebp - 0x444]
call fcn.0040544a
xor eax, eax
test esi, esi
pop edi
setne al
pop esi
inc eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0049653f
mov esp, ebp
pop ebp
ret
push 0x12
mov dword [ebp - 0x45c], 0x12
call fcn.00492cd0
mov esi, eax
add esp, 4
mov dword [ebp - 0x458], esi
test esi, esi
je 0x48aea5
mov ecx, str.Location
mov edx, esi
sub edx, ecx
lea ecx, [ecx]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x48ade0
push 0
lea eax, [ebp - 0x45c]
push eax
push esi
push 0xffff
push edi
call ebx
test eax, eax
jne 0x48ae88
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x48ae9c
mov eax, dword [ebp - 0x45c]
test eax, eax
je 0x48ae9c
shr eax, 1
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00492cd0
add esp, 4
lea ecx, [ebp - 0x458]
push eax
call fcn.00429d69
mov esi, dword [ebp - 0x458]
test esi, esi
je 0x48aea5
mov ecx, str.Location
mov edx, esi
sub edx, ecx
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x48ae62
push 0
lea eax, [ebp - 0x45c]
push eax
push esi
push 0xffff
push edi
call ebx
test eax, eax
je 0x48ae9c
push str._id
push esi
call fcn.0049cfdb
mov edi, eax
add esp, 8
test edi, edi
jne 0x48aee7
push esi
call fcn.00492cb0
add esp, 4
lea ecx, [ebp - 0x44c]
call fcn.0048a920
lea ecx, [ebp - 0x450]
call fcn.0048a920
lea ecx, [ebp - 0x448]
call fcn.0048a920
lea ecx, [ebp - 0x444]
call fcn.0040544a
pop edi
pop esi
mov eax, 2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0049653f
mov esp, ebp
pop ebp
ret
add edi, 8
push 0x4c7470
push edi
call fcn.0049cfdb
add esp, 8
mov ebx, eax
push esi
test ebx, ebx
je 0x48ae9d
mov ecx, dword [ebp - 0x46c]
call fcn.00405454
mov ecx, dword [ebp - 0x468]
sub ebx, edi
sar ebx, 1
push ebx
push edi
call fcn.0040576a
push esi
call fcn.00492cb0
add esp, 4
lea ecx, [ebp - 0x44c]
call fcn.0048a920
lea ecx, [ebp - 0x450]
call fcn.0048a920
lea ecx, [ebp - 0x448]
call fcn.0048a920
lea ecx, [ebp - 0x444]
call fcn.0040544a
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0049653f
mov esp, ebp
pop ebp
ret
call fcn.00448900
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
call fcn.00448900
push ebx
call esi
jmp 0x48aec6
call fcn.00448900
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - 0x430], 8
jb 0x48afa1
push dword [ebp - 0x444]
call fcn.00492cb0
add esp, 4
pop esi
mov eax, 2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0049653f
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x430], 8
jb 0x48afcd
push dword [ebp - 0x444]
call fcn.00492cb0
add esp, 4
mov ecx, dword [ebp - 4]
mov eax, 2
xor ecx, ebp
pop ebx
call fcn.0049653f
mov esp, ebp
pop ebp
ret