Function at 0x41dbc0
Capabilities:
Connect to http server
Create http request
Query remote server for available data
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6e8
mov eax, dword [0x6fb05c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov eax, dword [esi]
mov edx, dword [eax + 0x60]
push edi
push 6
mov ecx, esi
mov dword [ebp - 0x6e0], esi
call edx
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0x60]
push 7
mov ecx, esi
mov dword [ebp - 0x6e8], edi
call edx
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x6dc], esi
call fcn.00430930
mov ebx, eax
mov ecx, esi
mov dword [ebp - 0x6d0], ebx
call fcn.00430930
mov esi, eax
mov dword [ebp - 0x6d4], esi
mov ecx, 0x5cb723
mov eax, ebx
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x41dc50
test dl, dl
je 0x41dc4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x41dc50
add eax, 2
add ecx, 2
test dl, dl
jne 0x41dc30
xor eax, eax
jmp 0x41dc55
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
je 0x41e1d4
mov ecx, 0x5cb736
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x41dc86
test dl, dl
je 0x41dc82
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x41dc86
add eax, 2
add ecx, 2
test dl, dl
jne 0x41dc66
xor eax, eax
jmp 0x41dc8b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x41e1d4
lea eax, [ebp - 0x528]
push eax
mov ecx, 0x6fd290
call fcn.00426280
push 0x11
lea ecx, [ebp - 0x55b]
push ebx
push ecx
mov word [ebp - 0x567], 0x111
call fcn.0053ef70
push 0x11
lea edx, [ebp - 0x54a]
push esi
push edx
call fcn.0053ef70
push 0x11
lea eax, [ebp - 0x539]
push 0x5cc4c0
push eax
call fcn.0053ef70
push 0x10
lea ecx, [ebp - 0x516]
push str.DSTCLIENT002
push ecx
call fcn.0053ef70
push 0x11
push ebx
push 0x71a03c
call fcn.0053ef70
push 0x11
push esi
push 0x71a04d
call fcn.0053ef70
add esp, 0x48
push 9
mov ecx, 0x70a870
call fcn.00448d10
mov edx, dword [eax + 0x350]
push 0x70d014
mov ecx, 0x70d010
mov dword [0x70d0a4], edx
call fcn.004de3b0
mov al, byte [0x70d0a4]
mov byte [ebp - 0x506], al
cmp al, 3
jne 0x41e116
push 0x3ff
lea eax, [ebp - 0x503]
push edi
push eax
mov dword [ebp - 0x6e4], edi
mov byte [ebp - 0x504], 0
call fcn.0059eb30
push 0xff
lea ecx, [ebp - 0x103]
push edi
push ecx
mov byte [ebp - 0x104], 0
call fcn.0059eb30
add esp, 0x18
push edi
push edi
push edi
push edi
push str.BUDDY
mov dword [ebp - 0x6d8], edi
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
test ebx, ebx
jne 0x41de5e
push 0xff
push eax
lea edx, [ebp - 0x66b]
push edx
mov byte [ebp - 0x66c], al
call fcn.0059eb30
add esp, 0xc
push 0x66d
mov ecx, 0x70d178
call fcn.004dfa40
push eax
lea eax, [ebp - 0x66c]
push str._s__004_
push eax
call fcn.0059f1bf
lea ecx, [ebp - 0x66c]
push ecx
push 1
push 0x179c
push 0x70a870
call fcn.0044c830
add esp, 0x1c
push 1
mov ecx, 0x70a870
mov edi, eax
call fcn.00448cc0
mov esi, eax
test esi, esi
je 0x41e271
test edi, edi
je 0x41e271
movzx edx, word [esi + 0x1ee]
mov dword [ebp - 0x6d0], edx
fild dword [ebp - 0x6d0]
fadd dword [esi + 0x1c8]
mov ebx, dword [edi]
call fcn.0059f560
fld dword [esi + 0x1c4]
push eax
call fcn.0059f560
push eax
mov eax, dword [ebx + 0x24]
mov ecx, edi
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0059eb13
mov esp, ebp
pop ebp
ret
push 0
push 0
push 3
push 0x5cb737
push 0x5cb747
push 0
push str.www.google.com
push ebx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov edi, eax
test edi, edi
jne 0x41df42
push 0xff
push eax
lea ecx, [ebp - 0x66b]
push ecx
mov byte [ebp - 0x66c], al
call fcn.0059eb30
add esp, 0xc
push 0x66d
mov ecx, 0x70d178
call fcn.004dfa40
push eax
lea edx, [ebp - 0x66c]
push str._s__005_
push edx
call fcn.0059f1bf
lea eax, [ebp - 0x66c]
push eax
push 1
push 0x179c
push 0x70a870
call fcn.0044c830
add esp, 0x1c
push 1
mov ecx, 0x70a870
mov edi, eax
call fcn.00448cc0
mov esi, eax
test esi, esi
je 0x41e271
test edi, edi
je 0x41e271
movzx ecx, word [esi + 0x1ee]
mov ebx, dword [edi]
mov dword [ebp - 0x6d0], ecx
fild dword [ebp - 0x6d0]
fadd dword [esi + 0x1c8]
call fcn.0059f560
fld dword [esi + 0x1c4]
push eax
call fcn.0059f560
mov edx, dword [ebx + 0x24]
push eax
mov ecx, edi
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0059eb13
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x54a]
push eax
lea ecx, [ebp - 0x55b]
push ecx
lea edx, [ebp - 0x104]
push str.Auth_AuthUsrInfoChk.aspx_USRID_sUSRPWD_s
push edx
call fcn.0059f1bf
add esp, 0x10
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x104]
push eax
push str.POST
push edi
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
push 0
push 0
push 0
mov esi, eax
push 0
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
push 0
push 0
lea ecx, [ebp - 0x6d8]
push ecx
push esi
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
mov eax, dword [ebp - 0x6d8]
lea edx, [ebp - 0x6e4]
push edx
push eax
lea ecx, [ebp - 0x504]
push ecx
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call esi
push ebx
call esi
cmp byte [ebp - 0x504], 0x30
je 0x41e06a
push 0xff
lea edx, [ebp - 0x66b]
push 0
push edx
mov byte [ebp - 0x66c], 0
call fcn.0059eb30
add esp, 0xc
push 0x66d
mov ecx, 0x70d178
call fcn.004dfa40
push eax
lea eax, [ebp - 0x66c]
push str._s__001_
push eax
call fcn.0059f1bf
lea ecx, [ebp - 0x66c]
push ecx
push 1
push 0x179c
push 0x70a870
call fcn.0044c830
add esp, 0x1c
push 1
mov ecx, 0x70a870
mov edi, eax
call fcn.00448cc0
mov esi, eax
test esi, esi
je 0x41e271
test edi, edi
je 0x41e271
movzx edx, word [esi + 0x1ee]
mov dword [ebp - 0x6d0], edx
fild dword [ebp - 0x6d0]
jmp 0x41de2c
mov ecx, dword [ebp - 0x6d0]
push 0x11
push ecx
lea edx, [ebp - 0x6bf]
push edx
mov word [ebp - 0x6cb], 0x7311
call fcn.0053ef70
mov eax, dword [ebp - 0x6d4]
push 0x11
push eax
lea ecx, [ebp - 0x6ae]
push ecx
call fcn.0053ef70
push 0x10
lea edx, [ebp - 0x67a]
push str.DSTCLIENT002
push edx
call fcn.0053ef70
lea eax, [ebp - 0x504]
add esp, 0x24
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e0c0
sub eax, edx
inc eax
push eax
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x669]
push ecx
call fcn.0053ef70
mov dl, byte [0x70d0a4]
mov eax, dword [0x6fcf24]
add esp, 0xc
push 0x163
lea ecx, [ebp - 0x6cc]
push ecx
mov ecx, 0x71b608
mov byte [ebp - 0x66a], dl
mov dword [ebp - 0x6c3], eax
call fcn.0053d6c0
mov ebx, dword [ebp - 0x6d0]
jmp 0x41e135
mov edx, dword [0x6fcf24]
push 0x63
lea eax, [ebp - 0x568]
push eax
mov ecx, 0x71b608
mov dword [ebp - 0x55f], edx
call fcn.0053d6c0
push 0x11
push ebx
push 0x6fc9d8
call fcn.0053ef70
add esp, 0xc
push 0x123
mov ecx, 0x70d178
call fcn.004dfa40
push eax
push 3
push 0x17a3
push 0x70a870
call fcn.0044c830
add esp, 0x10
push 1
mov ecx, 0x70a870
mov edi, eax
call fcn.00448cc0
mov esi, eax
test esi, esi
je 0x41e1bb
test edi, edi
je 0x41e1bb
movzx ecx, word [esi + 0x1ee]
mov ebx, dword [edi]
mov dword [ebp - 0x6d4], ecx
fild dword [ebp - 0x6d4]
fadd dword [esi + 0x1c8]
call fcn.0059f560
fld dword [esi + 0x1c4]
push eax
call fcn.0059f560
mov edx, dword [ebx + 0x24]
push eax
mov ecx, edi
call edx
mov ebx, dword [ebp - 0x6d0]
push 1
mov ecx, 0x6fcef0
call fcn.00413bf0
push ebx
mov ecx, 0x718fc0
call fcn.00508890
jmp 0x41e244
push 0x16a
mov ecx, 0x70d178
call fcn.004dfa40
push eax
push 1
push 0x1787
push 0x70a870
call fcn.0044c830
add esp, 0x10
push 1
mov ecx, 0x70a870
mov edi, eax
call fcn.00448cc0
mov esi, eax
test esi, esi
je 0x41e244
test edi, edi
je 0x41e244
movzx eax, word [esi + 0x1ee]
mov ebx, dword [edi]
mov dword [ebp - 0x6d4], eax
fild dword [ebp - 0x6d4]
fadd dword [esi + 0x1c8]
call fcn.0059f560
fld dword [esi + 0x1c4]
push eax
call fcn.0059f560
mov edx, dword [ebx + 0x24]
push eax
mov ecx, edi
call edx
mov ecx, dword [ebp - 0x6e8]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3c]
push 0
call edx
mov ecx, dword [ebp - 0x6dc]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3c]
push 0
call edx
mov ecx, dword [ebp - 0x6e0]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 1
call edx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0059eb13
mov esp, ebp
pop ebp
ret