Function at 0x413620
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42e090
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2224
call sub.ntdll.dll__chkstk
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
test esi, esi
mov dword [ebp - 0x10], esp
je 0x413959
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x413959
mov dl, byte [0x45ec20]
mov ecx, 0x3ff
xor eax, eax
lea edi, [ebp - 0x2233]
mov byte [ebp - 0x2234], dl
mov byte [ebp - 0x12c], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x12b]
mov byte [ebp - 0x230], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x22f]
lea edx, [ebp - 0x12c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x2234]
lea ecx, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x230]
push edx
push eax
push esi
mov dword [ebp + 8], 0
call fcn.004133f0
add esp, 0x14
mov dword [ebp - 4], 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.WININET.dll_InternetOpenA]
mov edi, eax
test edi, edi
mov dword [ebp - 0x18], edi
je 0x413945
mov ecx, dword [ebp - 0x24]
push 0
push 0
push 3
push 0
push 0
lea edx, [ebp - 0x12c]
push ecx
push edx
push edi
call dword [sym.imp.WININET.dll_InternetConnectA]
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x41393e
push 0
push 0x4400040
push 0
push 0
lea ecx, [ebp - 0x2234]
push str.HTTP_1.0
push ecx
push str.POST
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov esi, eax
test esi, esi
mov dword [ebp - 0x14], esi
je 0x413934
push 0xa0000000
push 0xd
push str.Accept:___r_n
push esi
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
test eax, eax
mov dword [ebp + 8], eax
je 0x41392d
mov edx, dword [ebp + 0x10]
push edx
push ebx
push 0x31
push str.Content_Type:_application_x_www_form_urlencoded_r_n
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
mov dword [ebp + 8], eax
jne 0x41379d
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x2f88
jne 0x41379d
mov dword [ebp + 8], 1
mov eax, dword [ebp + 8]
test eax, eax
je 0x413927
mov esi, dword [ebp - 0x14]
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x1234]
push 0x1000
push ecx
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x413922
lea edx, [ebp - 0x1234]
mov byte [ebp + eax - 0x1234], 0
test edx, edx
je 0x41379d
lea eax, [ebp - 0x1234]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
test eax, eax
mov dword [ebp - 0x28], eax
je 0x41379d
mov ebx, dword [ebp + 0x14]
mov edi, dword [ebx]
mov edx, dword [edi - 0xc]
lea ecx, [edi - 0xc]
cmp edx, 1
mov dword [ebp + 0xc], ecx
jg 0x41384e
mov edx, dword [edi - 8]
mov esi, dword [edi - 4]
lea ecx, [edx + eax]
cmp ecx, esi
jg 0x41384b
inc esi
cmp esi, eax
jb 0x413833
mov ecx, eax
add edi, edx
mov edx, ecx
lea esi, [ebp - 0x1234]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx]
mov edx, dword [ecx - 8]
add edx, eax
mov dword [ecx - 8], edx
mov eax, dword [ebx]
mov ecx, dword [eax - 8]
mov byte [ecx + eax], 0
jmp 0x41379d
mov ecx, dword [ebp + 0xc]
mov esi, dword [edi - 8]
mov dword [ebp - 0x20], esi
lea ebx, [esi + eax]
cmp ebx, esi
jl 0x41379d
cmp ebx, eax
jl 0x41379d
test ebx, ebx
je 0x4138bd
mov ecx, dword [ebp + 0x14]
push ebx
call fcn.00406d60
test eax, eax
je 0x41379d
mov edx, dword [ebp + 0x14]
lea ecx, [ebx + 1]
cmp ecx, esi
mov eax, dword [edx]
jb 0x41389e
mov ecx, esi
mov esi, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, eax
mov ecx, dword [ebp - 0x28]
sub ebx, esi
push ecx
mov ecx, dword [edx]
lea eax, [ebp - 0x1234]
inc ebx
push eax
add ecx, esi
push ebx
push ecx
call fcn.00406c30
mov ecx, dword [ebp + 0xc]
add esp, 0x10
cmp ecx, dword [0x436d00]
je 0x41379d
push ecx
call dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
test eax, eax
jg 0x41379d
mov edx, dword [ebp + 0xc]
push edx
call fcn.0042d5f4
add esp, 4
jmp 0x41379d
mov edi, dword [ebp - 0x18]
jmp 0x41392d
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret