Function at 0x436810
Capabilities:
Create http request

Disassembly:
push 0xffffffffffffffff
push 0x45103a
mov eax, dword fs:[0]
push eax
mov eax, 0x498c
call fcn.0043b380
mov eax, dword [0x464630]
xor eax, esp
mov dword [esp + 0x4988], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x464630]
xor eax, esp
push eax
lea eax, [esp + 0x49a0]
mov dword fs:[0], eax
mov ebx, 7
xor edi, edi
xor eax, eax
mov esi, ecx
mov dword [esp + 0x140], ebx
mov dword [esp + 0x13c], edi
mov word [esp + 0x12c], ax
xor ecx, ecx
push 9
mov word [esp + 0xa4], cx
push str.sogou_ime
lea ecx, [esp + 0xa4]
mov dword [esp + 0x49b0], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], edi
call fcn.00401a4b
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
add eax, 0x4c
push edi
xor edx, edx
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x49b4], 1
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], edi
mov word [esp + 0x3c], dx
call fcn.004017f0
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
xor ecx, ecx
add eax, 0x68
push edi
mov word [esp + 0x8c], cx
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0x49b4], 2
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa0], edi
call fcn.004017f0
xor edx, edx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
mov word [esp + 0x68], dx
xor eax, eax
mov dword [esp + 0x108], ebx
mov dword [esp + 0x104], edi
mov word [esp + 0xf4], ax
xor ecx, ecx
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xcc], edi
mov word [esp + 0xbc], cx
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
add eax, 0xbc
push edi
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x49b4], 6
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], edi
mov word [esp + 0x58], dx
call fcn.004017f0
push 0x27fe
lea ecx, [esp + 0x1a2]
xor eax, eax
push edi
push ecx
mov byte [esp + 0x49b4], bl
mov word [esp + 0x1a8], ax
call fcn.0043ae00
add esp, 0xc
lea edx, [esp + 0xb8]
push edx
lea eax, [esp + 0xf4]
push eax
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x38]
push edx
mov ecx, esi
call fcn.00435f60
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
xor ecx, ecx
add eax, 0x84
push edi
mov word [esp + 0xe0], cx
push eax
lea ecx, [esp + 0xe0]
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xf4], edi
call fcn.004017f0
mov byte [esp + 0x49a8], 8
cmp dword [esp + 0x40], edi
je 0x436da5
cmp dword [esp + 0xe8], edi
je 0x436da5
mov eax, dword [esi + 0x10]
add eax, 0x20
mov ebp, 8
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa0]
cmp dword [esp + 0xb4], ebp
jae 0x436a28
lea eax, [esp + 0xa0]
push edi
push edi
push edi
push edi
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [esi + 0x1c], eax
cmp eax, edi
jne 0x436a47
mov dword [esp + 0x14], 0xffffffff
jmp 0x436dad
push 0x1ffe
lea eax, [esp + 0x29a2]
xor edx, edx
push edi
push eax
mov word [esp + 0x29a8], dx
call fcn.0043ae00
mov eax, dword [esp + 0xc8]
add esp, 0xc
cmp dword [esp + 0xd0], ebp
jae 0x436a7e
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x29a0]
push 0x1000
push ecx
call fcn.0043ab78
mov eax, dword [esp + 0x74]
add esp, 0xc
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], edi
cmp dword [esp + 0x7c], ebp
jae 0x436aaa
lea eax, [esp + 0x68]
push 0x4e20
push edi
push edi
push 0x456464
lea edx, [esp + 0x29ac]
push edx
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x40]
push ecx
mov ecx, esi
call fcn.00435d60
test eax, eax
je 0x436ae5
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x14], 0xfffffffd
jmp 0x436d2c
push 0x52
lea eax, [esp + 0x14a]
xor edx, edx
push edi
push eax
mov word [esp + 0x150], dx
call fcn.0043ae00
mov eax, dword [esp + 0x3c]
add esp, 0xc
cmp dword [esp + 0x44], ebp
jae 0x436b10
lea eax, [esp + 0x30]
push eax
push 0x29
lea ecx, [esp + 0x14c]
push ecx
mov ecx, esi
call fcn.00435510
push str.Accept:_image_gif__image_x_xbitmap__image_jpeg__image_pjpeg__application_x_shockwave_flash__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword__application_xamlxml__application_vnd.ms_xpsdocument__application_x_ms_xbap__application_x_ms_application____r_n
lea edx, [esp + 0x1a0]
push 0x1400
push edx
call fcn.0043abf5
push str.Accept_Language:_zh_cn_r_n
lea eax, [esp + 0x1ac]
push 0x1400
push eax
call fcn.0043ab78
push 0x4561a0
lea ecx, [esp + 0x1b8]
push 0x1400
push ecx
call fcn.0043ab78
lea edx, [esp + 0x168]
push edx
lea eax, [esp + 0x1c4]
push 0x1400
push eax
call fcn.0043ab78
push 0x456194
lea ecx, [esp + 0x1d0]
push 0x1400
push ecx
call fcn.0043ab78
push str.Accept_Encoding:_gzip__deflate_r_n
lea edx, [esp + 0x1dc]
push 0x1400
push edx
call fcn.0043ab78
add esp, 0x48
cmp dword [esp + 0x5c], edi
jbe 0x436bdc
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0x60], ebp
jae 0x436bc6
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x1a0]
push 0x1400
push eax
call fcn.0043ab78
add esp, 0xc
lea ecx, [esp + 0x23]
push ecx
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x1c]
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x38], edi
mov dword [esp + 0x24], edi
call fcn.004355b0
mov ebp, dword [esp + 0x14]
xor edx, edx
mov eax, ebp
mov word [esp + 0x110], dx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x120], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x436c20
sub eax, edx
sar eax, 1
push eax
push ebp
lea ecx, [esp + 0x114]
call fcn.00401a4b
mov byte [esp + 0x49a8], 9
cmp dword [esp + 0x120], edi
je 0x436c7b
push 0x45613c
lea eax, [esp + 0x1a0]
push 0x1400
push eax
call fcn.0043ab78
push ebp
lea ecx, [esp + 0x1ac]
push 0x1400
push ecx
call fcn.0043ab78
add esp, 0x18
lea eax, [esp + 0x19c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x436c85
mov ebp, dword [esp + 0x18]
sub eax, edx
push 0x20000000
sar eax, 1
push eax
lea edx, [esp + 0x1a4]
push edx
push ebp
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
test eax, eax
jne 0x436cd5
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0x10c]
mov dword [esp + 0x14], 0xfffffffc
mov byte [esp + 0x49a8], 8
call fcn.004016e7
jmp 0x436d2c
cmp dword [esp + 0x98], 8
mov eax, dword [esp + 0x84]
jae 0x436ced
lea eax, [esp + 0x84]
lea ecx, [esp + 0x144]
push ecx
push eax
lea edx, [esp + 0xdc]
push edx
push ebp
mov ecx, esi
call fcn.00436270
cmp dword [esp + 0x124], 8
mov dword [esp + 0x14], eax
mov byte [esp + 0x49a8], 8
jb 0x436d2c
mov eax, dword [esp + 0x110]
push eax
call fcn.0043a3dd
add esp, 4
cmp dword [esp + 0x1c], edi
je 0x436db1
cmp dword [esp + 0x14], edi
jne 0x436db1
push 0x56
lea edx, [esp + 0x14a]
xor ecx, ecx
push edi
push edx
mov word [esp + 0x150], cx
call fcn.0043ae00
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x148]
push ecx
push ebp
mov ecx, esi
mov dword [esp + 0x24], 0x56
call fcn.00435860
test eax, eax
jne 0x436db1
cmp word [esp + 0x144], di
je 0x436db1
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x144]
shr edx, 1
push 0x456130
push ecx
mov word [esp + edx*2 + 0x14c], ax
call fcn.0043b3ab
add esp, 8
jmp 0x436db1
mov dword [esp + 0x14], 0xfffffffe
mov ebp, dword [esp + 0x18]
cmp ebp, edi
je 0x436dbc
push ebp
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x436dcb
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [esi + 0x28]
push edx
mov ecx, esi
call fcn.00435cc0
push 0x14
call fcn.0043a403
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0x49a8], 0xa
cmp eax, edi
je 0x436dfd
mov ecx, dword [esi + 0x18]
push ecx
mov ecx, eax
call fcn.00434ad0
jmp 0x436dff
xor eax, eax
mov byte [esp + 0x49a8], 8
cmp eax, edi
je 0x436e16
mov ecx, dword [esi + 0x18]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 8]
call eax
push 0x14
call fcn.0043a403
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0x49a8], 0xb
cmp eax, edi
je 0x436e3d
mov ecx, dword [esi + 0x14]
push ecx
mov ecx, eax
call fcn.004349b0
jmp 0x436e3f
xor eax, eax
mov byte [esp + 0x49a8], 8
cmp eax, edi
je 0x436e54
mov ecx, dword [esi + 0x14]
push eax
call fcn.00430940
mov esi, 8
cmp dword [esp + 0xec], esi
jb 0x436e72
mov edx, dword [esp + 0xd8]
push edx
call fcn.0043a3dd
add esp, 4
xor eax, eax
mov dword [esp + 0xec], ebx
mov dword [esp + 0xe8], edi
mov word [esp + 0xd8], ax
cmp dword [esp + 0x60], esi
jb 0x436e9d
mov ecx, dword [esp + 0x4c]
push ecx
call fcn.0043a3dd
add esp, 4
xor edx, edx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], edi
mov word [esp + 0x4c], dx
cmp dword [esp + 0xd0], esi
jb 0x436ec5
mov eax, dword [esp + 0xbc]
push eax
call fcn.0043a3dd
add esp, 4
xor ecx, ecx
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xcc], edi
mov word [esp + 0xbc], cx
cmp dword [esp + 0x108], esi
jb 0x436ef6
mov edx, dword [esp + 0xf4]
push edx
call fcn.0043a3dd
add esp, 4
xor eax, eax
mov dword [esp + 0x108], ebx
mov dword [esp + 0x104], edi
mov word [esp + 0xf4], ax
cmp dword [esp + 0x7c], esi
jb 0x436f21
mov ecx, dword [esp + 0x68]
push ecx
call fcn.0043a3dd
add esp, 4
xor edx, edx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
mov word [esp + 0x68], dx
cmp dword [esp + 0x98], esi
jb 0x436f49
mov eax, dword [esp + 0x84]
push eax
call fcn.0043a3dd
add esp, 4
xor ecx, ecx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x94], edi
mov word [esp + 0x84], cx
cmp dword [esp + 0x44], esi
jb 0x436f74
mov edx, dword [esp + 0x30]
push edx
call fcn.0043a3dd
add esp, 4
xor eax, eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], edi
mov word [esp + 0x30], ax
cmp dword [esp + 0xb4], esi
jb 0x436f9c
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.0043a3dd
add esp, 4
xor edx, edx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb0], edi
mov word [esp + 0xa0], dx
cmp dword [esp + 0x140], esi
jb 0x436fcd
mov eax, dword [esp + 0x12c]
push eax
call fcn.0043a3dd
add esp, 4
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x49a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4988]
xor ecx, esp
call fcn.0043a84e
add esp, 0x4998
ret