Function at 0x4668fc
Capabilities:
Connect to http server
Create http request
Get http content length
Parse url

Disassembly:
push ebp
lea ebp, [esp - 0x2468]
mov eax, 0x24e8
call fcn.00476c90
mov eax, dword [0x4f3bd0]
xor eax, ebp
mov dword [ebp + 0x2464], eax
push ebx
push esi
push edi
xor eax, eax
push 0x1fe
mov word [ebp + 0x2064], ax
xor esi, esi
lea eax, [ebp + 0x2066]
push esi
push eax
mov dword [ebp - 0x44], ecx
call fcn.00475570
xor eax, eax
mov edi, 0xfe
push edi
mov word [ebp + 0x2264], ax
lea eax, [ebp + 0x2266]
push esi
push eax
call fcn.00475570
xor eax, eax
push edi
mov word [ebp + 0x2364], ax
lea eax, [ebp + 0x2366]
push esi
push eax
call fcn.00475570
xor eax, eax
push 0x1046
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x2a]
push esi
push eax
call fcn.00475570
push 0x38
lea eax, [ebp - 0x7c]
push esi
push eax
call fcn.00475570
lea eax, [ebp + 0x2064]
mov dword [ebp - 0x70], eax
lea eax, [ebp + 0x2264]
mov dword [ebp - 0x64], eax
lea eax, [edi - 0x7e]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x58], eax
add esp, 0x3c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x80]
push eax
push esi
push esi
push dword [ebp + 0x2470]
lea ecx, [ebp + 0x2364]
mov dword [ebp - 0x80], 0x3c
mov dword [ebp - 0x6c], pe_nt_image_headers32
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x50], 0x824
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x4669f0
cmp dword [ebp - 0x74], 3
je 0x4669fa
cmp dword [ebp - 0x74], 4
jne 0x466b4c
mov edi, dword [sym.imp.WININET.dll_InternetSetOptionW]
push 4
lea eax, [ebp - 0x30]
push eax
xor ebx, ebx
cmp dword [ebp - 0x74], 4
push 2
push esi
sete bl
mov dword [ebp - 0x30], 0x1e
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 5
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 6
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 7
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 8
push esi
call edi
push esi
push esi
push esi
push esi
push str.Beacon
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x3c], eax
cmp eax, esi
je 0x466b4c
push esi
push esi
push 3
lea ecx, [ebp + 0x2364]
push ecx
lea ecx, [ebp + 0x2264]
push ecx
push dword [ebp - 0x68]
lea ecx, [ebp + 0x2064]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetConnectW]
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x34], eax
cmp eax, esi
je 0x466b47
xor eax, eax
push 0x1046
mov word [ebp + 0x101c], ax
lea eax, [ebp + 0x101e]
push esi
push eax
call fcn.00475570
add esp, 0xc
lea eax, [ebp + 0x101c]
cmp dword [ebp - 0x50], esi
je 0x466ac3
push dword [ebp - 0x54]
jmp 0x466ac8
push 0x4bd298
push eax
call fcn.00477b95
pop ecx
pop ecx
neg ebx
push esi
sbb ebx, ebx
and ebx, 0x800000
add ebx, 0x80000000
push ebx
push esi
push 0x4d3fa0
push str.HTTP_1.1
lea eax, [ebp + 0x101c]
push eax
push 0x4c4ca4
push dword [ebp - 0x34]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov ecx, dword [ebp - 0x44]
mov ebx, eax
push 1
push ebx
call fcn.00466627
test eax, eax
je 0x466b3b
push esi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x20000005
push ebx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], 4
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x466b5e
cmp dword [ebp - 0x38], esi
jne 0x466b5e
cmp ebx, esi
je 0x466b42
push ebx
call edi
push dword [ebp - 0x34]
call edi
push dword [ebp - 0x3c]
call edi
mov ecx, dword [ebp + 0x2470]
add ecx, 0xfffffff0
call fcn.00402870
xor eax, eax
jmp 0x466b6f
mov ecx, dword [ebp + 0x2470]
add ecx, 0xfffffff0
call fcn.00402870
xor eax, eax
inc eax
mov ecx, dword [ebp + 0x2464]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004755ea
add ebp, 0x2468
leave
ret 4