Function at 0x4e6c4e
Capabilities:
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5a9f14
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x694240]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
mov eax, dword [0x694240]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi + 4]
mov ebx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
test ecx, ecx
je 0x4e6f27
cmp ecx, 0xffffffff
je 0x4e6f27
xor eax, eax
mov esi, 0x800000
cmp dword [edi + 0x70], 2
push 0
cmove eax, esi
or eax, 0x4400040
push eax
push 0x69767c
push edx
push 0x65a0b0
push ebx
push 0x65a0bc
push ecx
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [edi + 8], eax
test eax, eax
je 0x4e6f11
cmp eax, 0xffffffff
je 0x4e6f11
push SysReAllocString
push 0xd
push 0x65a170
push eax
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
test eax, eax
jne 0x4e6d11
mov dword [esp + 0x10], 0x65a180
lea eax, [esp + 0x10]
push 0x6914e8
push eax
call fcn.00572d44
cmp dword [edi + 0xa0], 0
jbe 0x4e6e4c
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], eax
mov byte [esp + 0x14], al
mov dword [esp + 0x48], eax
mov eax, dword [edi + 0x70]
dec eax
je 0x4e6d4c
dec eax
jne 0x4e6d63
mov esi, 0x65a1a4
jmp 0x4e6d51
mov esi, 0x65a19c
push esi
call fcn.00475345
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.004796e9
lea esi, [edi + 0xc]
cmp dword [esi + 0x14], 0x10
jb 0x4e6d6e
mov esi, dword [esi]
push esi
call fcn.00475345
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.004795b3
cmp dword [edi + 0x70], 1
jne 0x4e6d8d
cmp word [edi + 0x6c], 0x50
je 0x4e6ddd
cmp dword [edi + 0x70], 2
jne 0x4e6d9e
mov eax, 0x1bb
cmp word [edi + 0x6c], ax
je 0x4e6ddd
xor eax, eax
and dword [esp + 0x2e], eax
and dword [esp + 0x32], eax
mov word [esp + 0x2c], ax
movzx eax, word [edi + 0x6c]
push eax
lea eax, [esp + 0x30]
push 0x65a140
push eax
call fcn.005720e1
lea eax, [esp + 0x38]
push eax
call fcn.00475345
add esp, 0x10
lea ecx, [esp + 0x14]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.004795b3
push ebx
call fcn.00475345
pop ecx
push eax
push ebx
lea ecx, [esp + 0x1c]
call fcn.004795b3
mov eax, dword [edi + 0x9c]
mov esi, dword [eax]
cmp esi, eax
je 0x4e6e3a
mov ecx, dword [esi + 8]
lea edx, [ecx + 0x18]
cmp dword [edx + 0x14], 0x10
jb 0x4e6e09
mov edx, dword [edx]
cmp dword [ecx + 0x14], 0x10
jb 0x4e6e11
mov ecx, dword [ecx]
cmp dword [esp + 0x28], 0x10
lea eax, [esp + 0x14]
push edx
cmovae eax, dword [esp + 0x18]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetSetCookieA]
test eax, eax
je 0x4e6ec9
mov esi, dword [esi]
cmp esi, dword [edi + 0x9c]
jne 0x4e6dfb
or dword [esp + 0x48], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.00479762
mov ecx, edi
call fcn.004e6b56
inc eax
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, edi
mov ebx, eax
call fcn.004e6b56
inc eax
mov ecx, edi
push eax
push ebx
call fcn.004e6b8c
mov ecx, edi
mov esi, eax
call fcn.004e5fb5
push esi
push ebx
push 0x31
push 0x65a108
push dword [edi + 8]
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x4e6edf
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x2f88
je 0x4e6edf
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [esp + 0x10], 0x65a15c
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e6d0b
mov dword [esp + 0x10], 0x65a144
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e6d0b
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov al, 1
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.005712ac
mov esp, ebp
pop ebp
ret 8
mov dword [esp + 0x10], 0x65a0c4
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e6d0b
mov dword [esp + 0x10], 0x65a098
lea eax, [esp + 0x10]
push 0x6914e8
jmp 0x4e6d0b