Function at 0x409c3f
Capabilities:
Connect to http server
Create http request
Make an http request with a cookie
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push dword [ebp + 8]
call fcn.0040ae3f
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x409cad
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push dword [ebp + 8]
call fcn.0040b041
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x409cdc
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx]
test eax, eax
jne 0x409cf5
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x178
call fcn.0040ea70
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x41a20c
push dword [ebp - 0x2c]
call fcn.00401c4a
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x409d39
push ebx
call fcn.0040e012
add esp, 4
cmp dword [ebp - 0x30], 0
je 0x409e16
push reloc.WSOCK32.dll_connect
push 0
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.0_
push 1
mov ebx, 0x168
call fcn.0040f570
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00410400
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00410400
add esp, 0x10
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push 1
push dword [ebp - 0x2c]
call dword [sym.imp.WININET.dll_InternetOpenA]
nop
nop
nop
nop
cmp dword [ebp - 0x38], esp
je 0x409dd8
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x409deb
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x409dfb
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x409e0b
push ebx
call fcn.0040e012
add esp, 4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc], eax
jmp 0x409f16
push reloc.WSOCK32.dll_connect
push 0
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.0_
push 1
mov ebx, 0x168
call fcn.0040f570
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp + 0x14]
push dword [ebx]
push str.http
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x30], eax
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x409e64
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x168
call fcn.0040f570
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x409e8a
push ebx
call fcn.0040e012
add esp, 4
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00410400
add esp, 0x10
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], esp
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x34]
push 3
push dword [ebp - 0x2c]
call dword [sym.imp.WININET.dll_InternetOpenA]
nop
nop
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x409edd
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x409ef0
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x409f00
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x409f10
push ebx
call fcn.0040e012
add esp, 4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x409f82
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x409f55
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x40adf7
push dword [ebp + 8]
call fcn.0040b3dd
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], esp
push 0
push 0
push 3
push 0x41a20c
push 0x41a20c
push dword [ebp - 0x2c]
push dword [ebp - 8]
push dword [ebp - 0xc]
call dword [sym.imp.WININET.dll_InternetConnectA]
nop
nop
nop
nop
cmp dword [ebp - 0x30], esp
je 0x409fce
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40a05f
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x409ffd
push 6
call fcn.0040e01e
add esp, 4
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a032
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x40adf7
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00410400
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00410400
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push 0
push connect
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push str.HTTP_1.1
push dword [ebp - 4]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x40a0e0
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40a0f3
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40a103
push ebx
call fcn.0040e012
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x40a1b9
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40a135
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40a157
push 6
call fcn.0040e01e
add esp, 4
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a18c
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x40adf7
push connect
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
push str.Accept:
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x40a1f2
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x148
call fcn.0040fec0
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x40a248
push str.Accept:_image_gif__image_x_xbitmap__image_jpeg__image_pjpeg__application_x_shockwave_flash__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword____r_n
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a242
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push connect
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
push str.Referer:
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x40a281
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x148
call fcn.0040fec0
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x40a2e1
push 0x420289
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.Referer:
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 4
call fcn.0040106b
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a2db
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push connect
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
push str.Accept_Language:
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x40a31a
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x148
call fcn.0040fec0
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x40a370
push str.Accept_Language:_zh_cn_r_n
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a36a
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push 0x41a20c
mov ebx, dword [ebp + 0xc]
push dword [ebx]
call fcn.00401c4a
add esp, 8
cmp eax, 0
je 0x40a3f2
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x40a3a0
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x150
call fcn.00410420
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x420673
push dword [ebp - 0x30]
call fcn.00401c4a
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40a3e4
push ebx
call fcn.0040e012
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x40a3f2
xor eax, eax
jmp 0x40a3f7
mov eax, 1
test eax, eax
je 0x40a492
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x40a414
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x130
call fcn.0040fcf0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00410400
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_HttpSendRequestA]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x40a47d
push 6
call fcn.0040e01e
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40a48d
push ebx
call fcn.0040e012
add esp, 4
jmp 0x40a787
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x40a4a7
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x150
call fcn.00410420
add esp, 0x10
mov dword [ebp - 0x38], eax
push str.POST
push dword [ebp - 0x38]
call fcn.00401c4a
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40a4eb
push ebx
call fcn.0040e012
add esp, 4
cmp dword [ebp - 0x3c], 0
je 0x40a6bf
push 0x41a20c
mov ebx, dword [ebp + 0x24]
push dword [ebx]
call fcn.00401c4a
add esp, 8
cmp eax, 0
je 0x40a632
push connect
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
push str.Content_Type:
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x40a549
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x148
call fcn.0040fec0
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x40a59f
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a599
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x40a5b4
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x130
call fcn.0040fcf0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x168
call fcn.0040f570
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x420289
push dword [ebp - 0x30]
push str.Content_Length:
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 4
call fcn.0040106b
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40a616
push ebx
call fcn.0040e012
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a62c
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x40a647
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x130
call fcn.0040fcf0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x40a672
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x130
call fcn.0040fcf0
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 0x30]
mov ebx, dword [ebp + 0x24]
push dword [ebx]
push dword [ebp - 0x2c]
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_HttpSendRequestA]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x40a6ba
push 6
call fcn.0040e01e
add esp, 4
jmp 0x40a787
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40a6e1
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40a703
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40a725
push 6
call fcn.0040e01e
add esp, 4
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a75a
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x40adf7
push 0
mov ebx, 0x274
call fcn.004104a0
add esp, 4
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push 0x800
push 1
mov ebx, 0x1bc
call fcn.0040e740
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40a7d1
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0
mov ebx, 0x350
call fcn.0040f840
add esp, 4
push htons
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40a7fa
mov eax, 0x42008e
push eax
push 1
mov ebx, 0x194
call fcn.0040f3a0
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], esp
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x40a824
add eax, 8
push eax
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_InternetReadFile]
nop
nop
nop
nop
cmp dword [ebp - 0x30], esp
je 0x40a844
push 6
call fcn.0040e01e
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x24]
push htons
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x40a861
mov eax, 0x42008e
push eax
push 2
mov ebx, 0x1a0
call fcn.00410270
add esp, 0x1c
mov dword [ebp - 0x2c], eax
push htons
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x40a88a
mov eax, 0x42008e
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x298
call fcn.004104f0
add esp, 0x1c
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40a8b7
push ebx
call fcn.0040e012
add esp, 4
cmp dword [ebp - 0x24], 0
jne 0x40a7d5
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x28c
call fcn.004105d0
add esp, 0x10
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x2bc
call fcn.00410630
add esp, 0x10
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x294
call fcn.00410680
add esp, 0x1c
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a934
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x278
call fcn.00410760
add esp, 0x10
push 0x80000301
push 0
push 0x400
push 1
mov ebx, 0x184
call fcn.0040ed70
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40a98b
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
mov dword [ebp - 0x2c], esp
push 0
mov eax, 0x400
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
push 0x16
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40a9ce
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40a9f0
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40aa12
push 6
call fcn.0040e01e
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40aa34
push 6
call fcn.0040e01e
add esp, 4
push connect
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
push str.Set_Cookie:
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40aa6d
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x148
call fcn.0040fec0
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jle 0x40add8
push 0
mov ebx, 0x274
call fcn.004104a0
add esp, 4
mov dword [ebp - 0x1c], eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40aab7
mov eax, 0x41a20c
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x2a0
call fcn.00410770
add esp, 0x1c
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x28c
call fcn.004105d0
add esp, 0x10
push connect
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x2b4
call fcn.004108e0
add esp, 0x1c
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x40adbc
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x2a4
call fcn.00410a40
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ab5a
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push connect
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
push str.Set_Cookie:
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40ab99
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x148
call fcn.0040fec0
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jle 0x40ada5
push 0
push 0
push 0
push 0x80000301
push 0
push 0xc
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40abec
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x17c
call fcn.00410c50
add esp, 0x34
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ac18
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push connect
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.WSOCK32.dll_connect
push 0
push 0x4206db
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40ac57
mov eax, 0x41a20c
push eax
push 4
mov ebx, 0x148
call fcn.0040fec0
add esp, 0x34
mov dword [ebp - 0x28], eax
push dword [ebp - 8]
push str.http:__
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
fsub qword [0x4202e9]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
call fcn.00403b67
push 0x80000301
push 0
push eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40acbc
mov eax, 0x41a20c
push eax
push 2
mov ebx, 0x134
call fcn.00410db0
add esp, 0x1c
mov dword [ebp - 0x40], eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40ace7
mov eax, 0x41a20c
push eax
push 1
mov ebx, 0x130
call fcn.0040fcf0
add esp, 0x10
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x28]
fstp qword [ebp - 0x54]
fsub qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
call fcn.00403b67
push 0x80000301
push 0
push eax
push reloc.WSOCK32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x40ad37
mov eax, 0x41a20c
push eax
push 2
mov ebx, 0x138
call fcn.00410e10
add esp, 0x1c
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], esp
push dword [ebp - 0x60]
push dword [ebp - 0x40]
push dword [ebp - 0x2c]
call dword [sym.imp.WININET.dll_InternetSetCookieA]
nop
nop
nop
nop
cmp dword [ebp - 0x64], esp
je 0x40ad75
push 6
call fcn.0040e01e
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40ad85
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40ad95
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40ada5
push ebx
call fcn.0040e012
add esp, 4
push 0
mov ebx, 0x350
call fcn.0040f840
add esp, 4
jmp 0x40aaf0
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x278
call fcn.00410760
add esp, 0x10
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x40adf2
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0040e018
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x40adf7
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40ae08
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40ae18
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ae28
push ebx
call fcn.0040e012
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ae38
push ebx
call fcn.0040e012
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x2c