Function at 0x4023d7
Capabilities:
Create http request
Get http content length
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
xor esi, esi
push esi
push esi
push esi
push 1
push str.Mozilla_5.0__Macintosh__Intel_Mac_OS_X_10.9__rv:25.0__Gecko_20100101_Firefox_25.0
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x10], eax
cmp eax, esi
je 0x4025b3
push esi
push esi
push esi
push esi
push dword [ebp + 8]
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 4], eax
cmp eax, esi
je 0x4025aa
push dword [ebp + 8]
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov dword [ebp - 0xc], eax
cmp eax, esi
je 0x4025aa
mov ebx, dword [sym.imp.WININET.dll_HttpQueryInfoA]
mov esi, eax
push 6
mov edi, str.t.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x40245a
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x20000005
push dword [ebp - 4]
mov dword [ebp - 8], 4
call ebx
mov esi, dword [ebp - 0xc]
push 6
mov edi, str.m.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x402485
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x20000005
push dword [ebp - 4]
mov dword [ebp - 8], 4
call ebx
mov esi, dword [ebp - 0xc]
push 6
mov edi, str.r.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4024b0
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x20000005
push dword [ebp - 4]
mov dword [ebp - 8], 4
call ebx
mov esi, dword [ebp - 0xc]
push 6
mov edi, str.o.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4024db
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x20000005
push dword [ebp - 4]
mov dword [ebp - 8], 4
call ebx
mov esi, dword [ebp - 0xc]
push 6
mov edi, str.t.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
mov edx, 0x3a98
jne 0x40251c
mov eax, dword [ebp - 0x14]
cmp eax, edx
jbe 0x40251c
cmp dword [0x406054], eax
je 0x40251c
mov dword [0x406054], eax
push dword [ebp - 4]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push dword [ebp - 0x10]
call esi
mov al, 1
pop edi
pop esi
pop ebx
leave
ret
mov esi, dword [ebp - 0xc]
push 6
mov edi, str.m.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x402543
mov eax, dword [ebp - 0x18]
cmp eax, edx
jbe 0x402543
cmp dword [0x406470], eax
je 0x402543
mov dword [0x406470], eax
jmp 0x402505
mov esi, dword [ebp - 0xc]
push 6
mov edi, str.r.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x40256a
mov eax, dword [ebp - 0x1c]
cmp eax, edx
jbe 0x40256a
cmp dword [0x40646c], eax
je 0x40256a
mov dword [0x40646c], eax
jmp 0x402505
mov esi, dword [ebp - 0xc]
push 6
mov edi, str.o.exe
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4025aa
mov eax, dword [ebp - 0x20]
cmp eax, edx
jbe 0x4025aa
cmp dword [0x406468], eax
je 0x4025aa
push dword [ebp - 4]
mov dword [0x406468], eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov bl, 1
push dword [ebp - 0x10]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov al, bl
jmp 0x402517
push dword [ebp - 4]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
jmp 0x40259a