Function at 0x492c40
Capabilities:
Receive http response

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, 9
push edi
mov edi, 0xa03678
mov dword [ebp - 8], edx
nop dword [eax]
cmp byte [edi - 8], 0
je 0x492e5d
mov ecx, dword [edi]
test ecx, ecx
je 0x492c8e
mov al, byte [ecx]
mov ebx, 1
sub al, 3
cmp bl, al
sbb ebx, ebx
and ebx, 0xffffe800
add ebx, 0x2000
mov dword [ebp - 0xc], ebx
jmp 0x492c91
mov ebx, dword [ebp - 0xc]
mov eax, dword [edi + 4]
cmp eax, 0x200000
ja 0x492e3e
je 0x492e38
cmp eax, 0x20000
je 0x492dec
cmp eax, 0x80000
jne 0x492e53
test ecx, ecx
je 0x492e53
movzx ebx, bx
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [edi]
mov esi, eax
add esp, 4
mov byte [ebp - 1], 0
mov edx, dword [ecx + 4]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492ce3
sub ecx, dword [ebp - 0x10]
shr ebx, 1
push ebx
push esi
push ecx
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edx, eax
test edx, edx
je case.default.0x492d57
xor eax, eax
mov word [esi + edx*2], ax
mov ecx, dword [edi]
mov bl, byte [ecx]
test bl, bl
jne 0x492d4d
xor ecx, ecx
test edx, edx
je 0x492d4b
nop
cmp word [esi + eax*2], 0x23
jne 0x492d36
movzx eax, word [esi + eax*2 + 2]
cmp eax, 0x45
je 0x492d45
cmp eax, 0x58
je 0x492d45
inc ecx
movzx eax, cx
cmp eax, edx
jb 0x492d20
mov ecx, dword [edi]
mov dl, byte [ebp - 1]
jmp 0x492d4f
mov ecx, dword [edi]
mov dl, 1
jmp 0x492d4f
mov ecx, dword [edi]
mov dl, al
movzx eax, bl
cmp eax, 6
ja case.default.0x492d57
jmp dword [eax*4 + 0x492e74]
test dl, dl
je case.default.0x492d57
mov ecx, esi
call fcn.00491ec0
jmp case.default.0x492d57
mov ecx, esi
call fcn.004917c0
jmp case.default.0x492d57
mov ecx, esi
call fcn.00491920
jmp case.default.0x492d57
mov ecx, esi
call fcn.00491a00
jmp case.default.0x492d57
mov ecx, esi
call fcn.00491c10
jmp case.default.0x492d57
mov edx, dword [ecx + 8]
mov ecx, esi
call fcn.00491e20
jmp case.default.0x492d57
mov edx, dword [ecx + 8]
mov ecx, esi
call fcn.00491e70
push esi
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
mov eax, dword [edi]
add esp, 4
mov eax, dword [eax + 4]
test eax, eax
je 0x492dd0
push eax
call esi
mov eax, dword [edi]
add esp, 4
dec word [0xa92824]
mov dword [eax + 4], 0
push dword [edi - 4]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov eax, dword [edi]
movzx eax, byte [eax + 1]
mov dword [eax*4 + 0x90a790], 0
jmp 0x492e50
test ecx, ecx
je 0x492e53
mov eax, dword [ecx + 4]
test eax, eax
je 0x492e04
push eax
call esi
add esp, 4
dec word [0xa92824]
movzx esi, bx
push 1
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov ecx, dword [edi]
add esp, 8
inc word [0xa92824]
mov dword [ecx + 4], eax
mov eax, dword [edi]
push 0
push esi
push dword [eax + 4]
push dword [edi - 4]
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x492e50
test ecx, ecx
je 0x492e53
jmp 0x492dd0
cmp eax, 0x400000
jne 0x492e53
push 0
push dword [edi - 4]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov edx, dword [ebp - 8]
dec byte [0x9eae26]
mov byte [edi - 8], 0
add edi, 0x14
sub edx, 1
mov dword [ebp - 8], edx
jne 0x492c60
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret