Function at 0x10049530
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10095371
mov eax, dword fs:[0]
push eax
sub esp, 0x9c4
mov eax, dword [0x100c1490]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x9c0], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9a8], eax
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x9b0], ebx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x9a4], ecx
mov dword [ebp - 0x9b8], 0
mov dword [ebp - 0x99c], 0
mov dword [ebp - 0x9b4], 0
test eax, eax
je 0x10049bc9
cmp byte [eax], 0
je 0x10049bc9
mov dword [ebp - 4], 0
test edi, edi
je 0x100495cc
mov dword [edi], 0
mov dword [edi + 4], 0
test ebx, ebx
je 0x100495d3
mov byte [ebx], 0
test ecx, ecx
je 0x100495da
mov byte [ecx], 0
push 0
push 0
push 0
push 1
push str.Dev_Client
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x99c], eax
test eax, eax
jne 0x10049618
push str.Could_not_open_internet_handle
lea ecx, [ebp - 0x894]
call fcn.10048da0
push 0x100bad88
lea eax, [ebp - 0x894]
push eax
call fcn.10063854
mov dword [ebp - 0x9ac], 0x1388
push 4
lea ecx, [ebp - 0x9ac]
push ecx
push 6
push eax
mov esi, dword [sym.imp.WININET.dll_InternetSetOptionA]
call esi
mov dword [ebp - 0x9ac], 0x1388
push 4
lea eax, [ebp - 0x9ac]
push eax
push 2
push dword [ebp - 0x99c]
call esi
push 0x100
mov esi, dword [ebp - 0x9a8]
push esi
push 0x100c2798
call fcn.10057310
add esp, 0xc
push 0x1004a670
push dword [ebp - 0x99c]
call dword [sym.imp.WININET.dll_InternetSetStatusCallback]
push 0
push 0x40200
push 0
push 0
push esi
push dword [ebp - 0x99c]
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0x9b4], eax
test eax, eax
jne 0x100496c0
push str.Could_not_open_URL
lea ecx, [ebp - 0x914]
call fcn.10048da0
push 0x100bad88
lea eax, [ebp - 0x914]
push eax
call fcn.10063854
push str._login.php
push 0x100c2798
call fcn.100547c0
add esp, 8
test eax, eax
je 0x100496f7
push str.Could_not_open_redirectURL
lea ecx, [ebp - 0x994]
call fcn.10048da0
push 0x100bad88
lea eax, [ebp - 0x994]
push eax
call fcn.10063854
test edi, edi
je 0x10049763
push str._id
push 0x100c2798
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x10049752
push str.id
push 0x100c2798
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x10049752
push str._people_
push 0x100c2798
call fcn.100547c0
add esp, 8
test eax, eax
je 0x10049763
push 0x2f
add eax, 8
push eax
call fcn.100640a0
add esp, 8
test eax, eax
je 0x10049763
inc eax
jmp 0x10049755
add eax, 4
push eax
call fcn.10068489
mov dword [edi], eax
mov dword [edi + 4], edx
add esp, 4
test ebx, ebx
je 0x100497cc
mov esi, dword [ebp + 0x14]
test esi, esi
je 0x100497cc
push str._people_
push 0x100c2798
call fcn.100547c0
add esp, 8
mov dword [ebp - 0x9a0], eax
test eax, eax
je 0x100497cc
add eax, 8
mov dword [ebp - 0x9a0], eax
push esi
push eax
push ebx
call fcn.10057310
push 0x2f
push ebx
call fcn.100644c0
add esp, 0x14
mov dword [ebp - 0x9a0], eax
test eax, eax
je 0x100497b3
mov byte [eax], 0
mov eax, ebx
mov dword [ebp - 0x9a0], eax
mov cl, byte [eax]
test cl, cl
je 0x100497cc
cmp cl, 0x2d
jne 0x100497c9
mov byte [eax], 0x20
inc eax
jmp 0x100497b5
cmp dword [ebp - 0x9a4], 0
je 0x1004983a
mov esi, dword [ebp + 0x1c]
test esi, esi
je 0x1004983a
push str._id
push 0x100c2798
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x1004983a
push str.id
push 0x100c2798
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x1004983a
push str._people_
push 0x100c2798
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x1004983a
push 0x2f
push 0x100c2798
call fcn.100644c0
push esi
push eax
push dword [ebp - 0x9a4]
call fcn.10057310
add esp, 0x14
test edi, edi
je 0x10049845
mov eax, dword [edi]
or eax, dword [edi + 4]
je 0x10049860
test ebx, ebx
je 0x10049b26
cmp dword [ebp + 0x14], 0
je 0x10049b26
cmp byte [ebx], 0
jne 0x10049b26
xor esi, esi
mov dword [ebp - 0x9bc], esi
mov eax, dword [0x100c1470]
mov dword [ebp - 0x998], eax
mov byte [ebp - 4], 1
push 0x800
push esi
lea eax, [ebp - 0x814]
push eax
call fcn.100638d0
add esp, 0xc
mov eax, dword [0x100c1470]
mov dword [ebp - 0x9cc], eax
mov byte [ebp - 4], 2
mov eax, dword [0x100c1470]
mov dword [ebp - 0x9c8], eax
mov byte [ebp - 4], 3
nop word [eax + eax]
lea eax, [ebp - 0x9a8]
push eax
push 0x7ff
lea eax, [ebp - 0x814]
push eax
push dword [ebp - 0x9b4]
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x10049913
mov ecx, dword [ebp - 0x9a8]
lea eax, [ecx - 1]
cmp eax, 0x7fe
ja 0x10049913
cmp esi, 0x100000
jae 0x10049913
mov byte [ebp + ecx - 0x814], 0
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x998]
call fcn.1005e030
add esi, dword [ebp - 0x9a8]
mov dword [ebp - 0x9bc], esi
jmp 0x100498b0
push str.window.location.replace__http:__www.facebook.com_
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
mov esi, eax
test esi, esi
je 0x1004997d
add esi, 0x34
push 0x22
push esi
call fcn.100640a0
add esp, 8
mov dword [ebp - 0x9c4], eax
test eax, eax
je 0x1004997d
mov byte [eax], 0
mov ecx, dword [ebp - 0x9a4]
test ecx, ecx
je 0x10049963
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x10049963
push eax
push esi
push ecx
call fcn.10057310
add esp, 0xc
mov ecx, dword [ebp - 0x9c0]
mov eax, dword [ecx]
push dword [ebp + 0x14]
push ebx
push edi
push esi
call dword [eax + 0xc]
mov eax, dword [ebp - 0x9c4]
mov byte [eax], 0x22
test edi, edi
je 0x10049a03
mov eax, dword [edi]
or eax, dword [edi + 4]
jne 0x10049a03
push str._profile_id_:
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
test eax, eax
je 0x100499a8
add eax, 0x10
jmp 0x100499f5
push str.amp_profile_id
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
test eax, eax
je 0x100499c4
add eax, 0x10
jmp 0x100499f5
push str.amp_fid
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x100499f2
push str.amp_cid
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
test eax, eax
je 0x10049a03
add eax, 9
push eax
call fcn.10068489
mov dword [edi], eax
mov dword [edi + 4], edx
add esp, 4
test ebx, ebx
je 0x10049af9
mov esi, dword [ebp + 0x14]
test esi, esi
je 0x10049af9
push str._H1_id_profile_name_
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x10049a5b
push str._h2_class_public_
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
test eax, eax
jne 0x10049a5b
push str._title
push dword [ebp - 0x998]
call fcn.100547c0
add esp, 8
test eax, eax
je 0x10049a85
push 0x3e
push eax
call fcn.100640a0
add esp, 8
test eax, eax
je 0x10049a85
push esi
inc eax
push eax
push ebx
call fcn.10057310
push 0x3c
push ebx
call fcn.100640a0
add esp, 0x14
test eax, eax
je 0x10049a85
mov byte [eax], 0
test edi, edi
je 0x10049af9
mov eax, dword [edi]
or eax, dword [edi + 4]
jne 0x10049af9
cmp byte [ebx], al
je 0x10049af9
push str.href_http:__www.facebook.com_profile.php_id
push dword [ebp - 0x998]
call fcn.100547c0
mov esi, eax
add esp, 8
test esi, esi
je 0x10049af3
add esi, 0x2d
push 0x1009a00c
push esi
call fcn.100547c0
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x10049b90
mov byte [ebx], 0
push dword [ebp - 0x9b0]
push esi
call fcn.100547c0
add esp, 8
mov byte [ebx], 0x3e
test eax, eax
je 0x10049b90
push esi
call fcn.10068489
add esp, 4
mov dword [edi], eax
mov dword [edi + 4], edx
mov ebx, dword [ebp - 0x9b0]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9c8]
call fcn.1005dd90
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9cc]
call fcn.1005dd90
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x998]
call fcn.1005dd90
test edi, edi
je 0x10049b31
mov eax, dword [edi]
or eax, dword [edi + 4]
je 0x10049b53
test ebx, ebx
je 0x10049b3a
cmp byte [ebx], 0
je 0x10049b53
mov eax, dword [ebp - 0x9a4]
test eax, eax
je 0x10049b49
cmp byte [eax], 0
je 0x10049b53
mov dword [ebp - 0x9b8], 1
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x9b4]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
test eax, eax
je 0x10049b74
push eax
call esi
mov eax, dword [ebp - 0x99c]
test eax, eax
je 0x10049b81
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x9b8]
jmp 0x10049bcb
push str.href_http:__www.facebook.com_profile.php_id
push esi
jmp 0x10049a9f
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1005ff5d
mov esp, ebp
pop ebp
ret 0x18