Function at 0x4343e0
Capabilities:
Connect to http server
Read and send data from client to server
Read file via mapping
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e3d1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x32b4
call fcn.0048db70
mov dword [ebp - 0x14], 0
mov eax, dword [0x4b83c0]
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x310c], ecx
mov edx, dword [0x4b6594]
mov dword [ebp - 0x3104], edx
mov eax, dword [ebp - 0x3104]
mov dword [ebp - 0x30fc], eax
mov ecx, dword [ebp - 0x30fc]
mov dword [ebp - 0x3108], ecx
mov edx, dword [ebp - 0x310c]
shl edx, 5
add edx, dword [ebp - 0x3108]
mov dword [ebp - 0x3108], edx
mov eax, dword [ebp - 0x3108]
mov dword [ebp - 0x3100], eax
mov ecx, dword [0x4b83c0]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x3120], edx
mov eax, dword [0x4b6594]
mov dword [ebp - 0x3118], eax
mov ecx, dword [ebp - 0x3118]
mov dword [ebp - 0x3110], ecx
mov edx, dword [ebp - 0x3110]
mov dword [ebp - 0x311c], edx
mov eax, dword [ebp - 0x3120]
shl eax, 5
add eax, dword [ebp - 0x311c]
mov dword [ebp - 0x311c], eax
mov ecx, dword [ebp - 0x311c]
mov dword [ebp - 0x3114], ecx
mov edx, dword [ebp - 0x3114]
cmp dword [edx + 0x18], 0x10
jb 0x4344cc
mov eax, dword [ebp - 0x3114]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x32a4], ecx
jmp 0x4344db
mov edx, dword [ebp - 0x3114]
add edx, 4
mov dword [ebp - 0x32a4], edx
push 0
push 0
push 3
push 0
push 0
mov eax, dword [ebp - 0x3100]
mov cx, word [eax + 0x1c]
push ecx
mov edx, dword [ebp - 0x32a4]
push edx
mov eax, dword [0x4b8398]
push eax
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4349c7
xor ecx, ecx
cmp dword [0x4b84f4], 0
sete cl
movzx edx, cl
test edx, edx
je 0x43452f
mov dword [ebp - 0x32a8], 0x4a2b44
jmp 0x43455b
cmp dword [0x4b84f8], 0x10
jb 0x434545
mov eax, dword [0x4b84e4]
mov dword [ebp - 0x32ac], eax
jmp 0x43454f
mov dword [ebp - 0x32ac], 0x4b84e4
mov ecx, dword [ebp - 0x32ac]
mov dword [ebp - 0x32a8], ecx
push 0
push 0x200100
push 0
push 0
push str.HTTP_1.1
mov edx, dword [ebp - 0x32a8]
push edx
push str.POST
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4349bd
mov dword [ebp - 0x1a0], 0x400
push 0x2e
push str.g_Version:__i
lea ecx, [ebp - 0x30b4]
push ecx
call fcn.0048cc64
add esp, 0xc
push 0x20000000
push 0xffffffffffffffff
lea edx, [ebp - 0x30b4]
push edx
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov dword [ebp - 0x1a4], eax
push 0x4b8354
push str.g_SetID
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.00430780
add esp, 0xc
push 0x4b8364
push str.g_AffiliateID
mov edx, dword [ebp - 0x18]
push edx
call fcn.00430780
add esp, 0xc
push 0x4b8374
push str.g_ResourceID
mov eax, dword [ebp - 0x18]
push eax
call fcn.00430780
add esp, 0xc
movzx ecx, byte [0x4b8391]
test ecx, ecx
je 0x434636
push str.true
push str.g_BConnect
mov edx, dword [ebp - 0x18]
push edx
call fcn.00430780
add esp, 0xc
mov byte [0x4b8391], 0
xor eax, eax
cmp dword [0x4b8510], 0
sete al
movzx ecx, al
test ecx, ecx
jne 0x434682
cmp dword [0x4b8514], 0x10
jb 0x434660
mov edx, dword [0x4b8500]
mov dword [ebp - 0x32b0], edx
jmp 0x43466a
mov dword [ebp - 0x32b0], 0x4b8500
mov eax, dword [ebp - 0x32b0]
push eax
push str.g_UID
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.00430780
add esp, 0xc
push 0x310
push 0
lea edx, [ebp - 0x2cb4]
push edx
call fcn.0048d000
add esp, 0xc
lea eax, [ebp - 0x19c]
push eax
call fcn.00433730
add esp, 4
lea ecx, [ebp - 0x19c]
push ecx
push 0x310
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x94], eax
push 0
push 0
push 0
push 0xf001f
mov edx, dword [ebp - 0x94]
push edx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x30b8], eax
cmp dword [ebp - 0x30b8], 0
je 0x434723
push 0x310
mov eax, dword [ebp - 0x30b8]
push eax
lea ecx, [ebp - 0x2cb4]
push ecx
call fcn.0048ccc0
add esp, 0xc
mov edx, dword [ebp - 0x30b8]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x90], 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30c0], esp
mov dword [ebp - 0x3130], ecx
push 0
push 0
mov ecx, dword [ebp - 0x3130]
call fcn.004236e0
lea edx, [ebp - 0x2bac]
push edx
call fcn.0048bc60
add esp, 4
push eax
lea eax, [ebp - 0x2bac]
push eax
mov ecx, dword [ebp - 0x3130]
call fcn.004241c0
mov ecx, dword [ebp - 0x3130]
mov dword [ebp - 0x32b4], ecx
lea ecx, [ebp - 0x8c]
call fcn.004349e0
mov dword [ebp - 0x32b8], eax
mov dword [ebp - 4], 0
lea edx, [ebp - 0x90]
push edx
push 3
lea ecx, [ebp - 0x8c]
call fcn.00433e90
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x434819
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x3274], eax
push 0
push 0
lea ecx, [ebp - 0x30dc]
call fcn.004236e0
mov ecx, dword [ebp - 0x3274]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x30dc]
call fcn.004241c0
lea eax, [ebp - 0x30dc]
mov dword [ebp - 0x3278], eax
mov byte [ebp - 4], 1
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x3278]
push ecx
mov ecx, 0x4b84fc
call fcn.00423530
mov byte [ebp - 4], 0
push 0
push 1
lea ecx, [ebp - 0x30dc]
call fcn.004236e0
xor edx, edx
cmp dword [0x4b8510], 0
sete dl
movzx eax, dl
test eax, eax
je 0x434838
mov dword [ebp - 0x32bc], str.CannotFindUID
jmp 0x434865
cmp dword [0x4b8514], 0x10
jb 0x43484f
mov ecx, dword [0x4b8500]
mov dword [ebp - 0x32c0], ecx
jmp 0x434859
mov dword [ebp - 0x32c0], 0x4b8500
mov edx, dword [ebp - 0x32c0]
mov dword [ebp - 0x32bc], edx
mov eax, dword [ebp - 0x32bc]
push eax
push str.g_InstalledUID
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.00430780
add esp, 0xc
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.WININET.dll_HttpSendRequestA]
cmp eax, 1
jne 0x4349a1
mov dword [ebp - 0x30bc], 0x400
push str.g_Upgrade
lea eax, [ebp - 0x30b4]
push eax
call fcn.0048e090
add esp, 8
push 0
lea ecx, [ebp - 0x30bc]
push ecx
lea edx, [ebp - 0x30b4]
push edx
push 0xffff
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
cmp eax, 1
jne 0x43499a
lea ecx, [ebp - 0x30b4]
push ecx
call fcn.0048bc60
add esp, 4
test eax, eax
je 0x43499a
lea edx, [ebp - 0x29a4]
push edx
mov eax, dword [ebp - 0x30bc]
push eax
lea ecx, [ebp - 0x30b4]
push ecx
call fcn.0044cf60
add esp, 0xc
push 0xffffffffffffffff
mov edx, dword [0x4b8474]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x30bc]
mov dword [ebp - 0x328c], eax
push 0
push 0
lea ecx, [ebp - 0x30f8]
call fcn.004236e0
mov ecx, dword [ebp - 0x328c]
push ecx
lea edx, [ebp - 0x29a4]
push edx
lea ecx, [ebp - 0x30f8]
call fcn.004241c0
lea eax, [ebp - 0x30f8]
mov dword [ebp - 0x3290], eax
mov byte [ebp - 4], 2
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x3290]
push ecx
mov ecx, 0x4b8478
call fcn.00423530
mov byte [ebp - 4], 0
push 0
push 1
lea ecx, [ebp - 0x30f8]
call fcn.004236e0
mov edx, dword [0x4b8474]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c]
call fcn.00434c50
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
call fcn.00451880
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret