Function at 0x49495d
Capabilities:
Connect to http server
Create http request
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e714b
mov eax, dword fs:[0]
push eax
sub esp, 0x124
mov eax, dword [0x524330]
xor eax, ebp
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x128], ecx
mov dword [ebp - 4], 2
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0x84], eax
xor eax, eax
cmp dword [ebp - 0x84], 0
sete al
movzx eax, al
test eax, eax
jne 0x4949d3
mov eax, dword [ebp + 0x10]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0x88], eax
xor eax, eax
cmp dword [ebp - 0x88], 0
sete al
movzx eax, al
test eax, eax
je 0x494a30
and dword [ebp - 0x68], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x8c]
call fcn.0040110c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
sub eax, 0x10
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
call fcn.0040110c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
sub eax, 0x10
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
call fcn.0040110c
mov eax, dword [ebp - 0x68]
jmp 0x494ec4
push 0
push 0
push 0
push 0
push str.download_manager
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x494aa9
and dword [ebp - 0x6c], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x98]
call fcn.0040110c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
sub eax, 0x10
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
call fcn.0040110c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
sub eax, 0x10
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0xa0]
call fcn.0040110c
mov eax, dword [ebp - 0x6c]
jmp 0x494ec4
push 4
lea eax, [ebp - 0x10]
push eax
push 0x41
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x494b36
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x2ee9
jne 0x494b36
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
and dword [ebp - 0x70], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0xa4]
call fcn.0040110c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
sub eax, 0x10
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xa8]
call fcn.0040110c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
sub eax, 0x10
mov dword [ebp - 0xac], eax
mov ecx, dword [ebp - 0xac]
call fcn.0040110c
mov eax, dword [ebp - 0x70]
jmp 0x494ec4
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb0], eax
push 0
push 0
push 3
push 0
push 0
push 0x50
push dword [ebp - 0xb0]
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x494bc9
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
and dword [ebp - 0x74], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0xb4]
call fcn.0040110c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
sub eax, 0x10
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
call fcn.0040110c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
sub eax, 0x10
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0xbc]
call fcn.0040110c
mov eax, dword [ebp - 0x74]
jmp 0x494ec4
mov dword [ebp - 0x18], 0x8404f700
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc0], eax
push 0
push dword [ebp - 0x18]
push 0
push 0
push str.HTTP_1.1
push dword [ebp - 0xc0]
push 0x503700
push dword [ebp - 0x44]
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x494c73
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push dword [ebp - 0x44]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
and dword [ebp - 0x78], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
call fcn.0040110c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
sub eax, 0x10
mov dword [ebp - 0xc8], eax
mov ecx, dword [ebp - 0xc8]
call fcn.0040110c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
sub eax, 0x10
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xcc]
call fcn.0040110c
mov eax, dword [ebp - 0x78]
jmp 0x494ec4
push str.Content_Type:_application_x_www_form_urlencoded_r_nAccept_Encoding:_gzip
lea ecx, [ebp - 0x60]
call fcn.00405374
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xdc], eax
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x3c]
call fcn.00405374
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0x24], 0x10
jb 0x494cb9
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x12c], eax
jmp 0x494cc2
lea eax, [ebp - 0x38]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0x48], 0x10
jb 0x494cdc
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x130], eax
jmp 0x494ce5
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x130], eax
push dword [ebp - 0xec]
push dword [ebp - 0x12c]
push dword [ebp - 0xf0]
push dword [ebp - 0x130]
push dword [ebp - 0x1c]
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x494dbe
push dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x128]
call fcn.00494edd
mov dword [ebp - 0x64], eax
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push dword [ebp - 0x44]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push dword [ebp - 0x1c]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x3c]
call fcn.00406cea
mov byte [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x60]
call fcn.00406cea
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
call fcn.0040110c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
sub eax, 0x10
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0xf8]
call fcn.0040110c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
sub eax, 0x10
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0xfc]
call fcn.0040110c
mov eax, dword [ebp - 0x7c]
jmp 0x494ec4
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push dword [ebp - 0x44]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push dword [ebp - 0x1c]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
and dword [ebp - 0x80], 0
mov byte [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x3c]
call fcn.00406cea
mov byte [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x60]
call fcn.00406cea
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0x100], eax
mov ecx, dword [ebp - 0x100]
call fcn.0040110c
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
sub eax, 0x10
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x104]
call fcn.0040110c
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
sub eax, 0x10
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
call fcn.0040110c
mov eax, dword [ebp - 0x80]
jmp 0x494ec4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.004bc439
leave
ret 0xc