Function at 0x434880
Capabilities:
Check internet connectivity via wininet
Connect to http server
Create http request
Read data from internet
Receive data
Reference http user-agent string
Send data
Send http request
Send http request with host header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x446e62
mov eax, dword fs:[0]
push eax
sub esp, 0x6b0
mov eax, dword [0x45b080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x4a0], 4
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x6ac]
mov dword [eax + 0x1b8], 0
push 0
lea ecx, [ebp - 0x4a4]
push ecx
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x44f584
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [ebp - 0x6ac]
cmp dword [eax], 0
je 0x43496f
mov ecx, dword [ebp - 0x6ac]
add ecx, 0xcc
push ecx
mov edx, dword [ebp - 0x6ac]
add edx, 4
push edx
push 0x44f598
lea eax, [ebp - 0x644]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
push 0
lea ecx, [ebp - 0x644]
push ecx
push 3
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x49c], eax
jmp 0x4349b2
mov eax, dword [ebp - 0x4a4]
and eax, 4
jne 0x434997
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x47c]
push ecx
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x49c], eax
jmp 0x4349b2
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0
jne 0x4349d3
push 0x44f5bc
call sym.nsUninstall.exe_public:_static_class_CNsLog____cdecl_CNsLog::Instance_void_
mov ecx, eax
call sym.nsUninstall.exe_public:_void___thiscall_CNsLog::WriteLog_wchar_t_const__
xor eax, eax
jmp 0x43505b
mov dword [ebp - 0x4ac], 0xbb8
push 4
lea eax, [ebp - 0x4ac]
push eax
push 2
mov ecx, dword [ebp - 0x49c]
push ecx
call dword [sym.imp.WININET.dll_InternetSetOptionW]
lea esi, [ebp - 0x480]
call fcn.004057a0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x494]
push edx
mov ecx, dword [ebp + 8]
call fcn.004057c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x494]
call fcn.00412700
push 0x44f5e8
push 0x44f5ec
lea ecx, [ebp - 0x494]
call fcn.0040e4b0
push 0
push 0x44f5fc
lea ecx, [ebp - 0x494]
call fcn.00412630
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0
jle 0x434b0c
mov eax, dword [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x650]
push ecx
lea ecx, [ebp - 0x494]
call fcn.00412750
mov dword [ebp - 0x6b0], eax
mov edx, dword [ebp - 0x6b0]
mov dword [ebp - 0x6b4], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x6b4]
push eax
lea ecx, [ebp - 0x480]
call fcn.00407590
mov byte [ebp - 4], 1
lea eax, [ebp - 0x650]
call fcn.004059b0
lea eax, [ebp - 0x494]
call fcn.004058f0
sub eax, dword [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x654]
push ecx
lea ecx, [ebp - 0x494]
call fcn.004137f0
mov dword [ebp - 0x6b8], eax
mov edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x6bc], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x6bc]
push eax
lea ecx, [ebp - 0x494]
call fcn.00407590
mov byte [ebp - 4], 1
lea eax, [ebp - 0x654]
call fcn.004059b0
jmp 0x434b2e
lea ecx, [ebp - 0x494]
push ecx
lea ecx, [ebp - 0x480]
call fcn.00407590
mov edx, 0x44f600
lea edi, [ebp - 0x494]
call fcn.00405870
mov dword [ebp - 0x48c], 0
mov edx, dword [ebp - 0x6ac]
mov eax, dword [ebp - 0x48c]
cmp eax, dword [edx + 0x1b0]
jge 0x434c23
push 0
push SysReAllocString
push 3
push 0
push 0
movzx ecx, word [ebp + 0x14]
push ecx
lea eax, [ebp - 0x480]
call fcn.004059d0
push eax
mov edx, dword [ebp - 0x49c]
push edx
call dword [sym.imp.WININET.dll_InternetConnectW]
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0
je 0x434b94
jmp 0x434c23
mov eax, dword [ebp - 0x48c]
add eax, 1
mov dword [ebp - 0x48c], eax
mov ecx, dword [ebp - 0x6ac]
mov edx, dword [ebp - 0x48c]
cmp edx, dword [ecx + 0x1b0]
jl 0x434c0b
push 0x44f604
call sym.nsUninstall.exe_public:_static_class_CNsLog____cdecl_CNsLog::Instance_void_
mov ecx, eax
call sym.nsUninstall.exe_public:_void___thiscall_CNsLog::WriteLog_wchar_t_const__
mov eax, dword [ebp - 0x49c]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x658], 0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x494]
call fcn.004059b0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x480]
call fcn.004059b0
mov eax, dword [ebp - 0x658]
jmp 0x43505b
mov ecx, dword [ebp - 0x6ac]
mov edx, dword [ecx + 0x1b4]
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x434b38
mov eax, dword [ebp - 0x6ac]
cmp dword [eax], 0
je 0x434c8e
mov ecx, dword [ebp - 0x6ac]
add ecx, 0xe4
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, dword [ebp - 0x6ac]
add edx, 0xe4
push edx
push 0x2b
mov eax, dword [ebp - 0x4b0]
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionW]
mov ecx, dword [ebp - 0x6ac]
add ecx, 0x148
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, dword [ebp - 0x6ac]
add edx, 0x148
push edx
push 0x2c
mov eax, dword [ebp - 0x4b0]
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push 0
push SysReAllocString
push 0x45d084
push 0
push 0x44f63c
lea eax, [ebp - 0x494]
call fcn.004059d0
push eax
push 0x44f650
mov ecx, dword [ebp - 0x4b0]
push ecx
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0
jne 0x434d2f
push 0x44f658
call sym.nsUninstall.exe_public:_static_class_CNsLog____cdecl_CNsLog::Instance_void_
mov ecx, eax
call sym.nsUninstall.exe_public:_void___thiscall_CNsLog::WriteLog_wchar_t_const__
mov edx, dword [ebp - 0x4b0]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x49c]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x65c], 0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x494]
call fcn.004059b0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x480]
call fcn.004059b0
mov eax, dword [ebp - 0x65c]
jmp 0x43505b
xor ecx, ecx
mov word [ebp - 0x3fc], cx
push 0x3e6
push 0
lea edx, [ebp - 0x3fa]
push edx
call fcn.00415590
add esp, 0xc
push 0x44f688
lea eax, [ebp - 0x3fc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x44f710
lea ecx, [ebp - 0x3fc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x44f750
lea edx, [ebp - 0x3fc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x44f7a0
lea eax, [ebp - 0x3fc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x44f794
lea ecx, [ebp - 0x3fc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x480]
call fcn.004059d0
push eax
lea edx, [ebp - 0x3fc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x44f7f8
lea eax, [ebp - 0x3fc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x44f800
lea ecx, [ebp - 0x3fc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0xa0000000
lea edx, [ebp - 0x3fc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea eax, [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x484]
push ecx
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x484]
push edx
call dword [sym.imp.WININET.dll_HttpSendRequestW]
mov eax, dword [ebp - 0x484]
push eax
mov ecx, dword [ebp - 0x6ac]
call sym.nsUninstall.exe_public:_int___thiscall_CNsNet::isGzip_void__
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x498], 0x4000
mov ecx, dword [ebp - 0x498]
cmp ecx, dword [ebp + 0x10]
jl 0x434e5a
mov edx, dword [ebp + 0x10]
sub edx, 1
mov dword [ebp - 0x498], edx
mov dword [ebp - 0x488], 0
mov eax, dword [ebp + 0x10]
push eax
push 0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00415590
add esp, 0xc
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x6ac]
movzx ecx, byte [eax + 0x1ac]
test ecx, ecx
jne 0x434f6f
mov edx, dword [ebp - 0x488]
add edx, dword [ebp - 0x498]
cmp edx, dword [ebp + 0x10]
jge 0x434f6f
mov dword [ebp - 0x648], 0
lea eax, [ebp - 0x648]
push eax
mov ecx, dword [ebp - 0x498]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x484]
push eax
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x434f41
push 0x44f854
call sym.nsUninstall.exe_public:_static_class_CNsLog____cdecl_CNsLog::Instance_void_
mov ecx, eax
call sym.nsUninstall.exe_public:_void___thiscall_CNsLog::WriteLog_wchar_t_const__
mov ecx, dword [ebp - 0x484]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [ebp - 0x4b0]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x49c]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x660], 0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x494]
call fcn.004059b0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x480]
call fcn.004059b0
mov eax, dword [ebp - 0x660]
jmp 0x43505b
cmp dword [ebp - 0x648], 0
jne 0x434f4c
jmp 0x434f6f
mov ecx, dword [ebp - 0x488]
add ecx, dword [ebp - 0x648]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x648]
mov dword [ebp - 0x10], edx
jmp 0x434e7c
mov eax, dword [ebp - 0x10]
mov byte [eax], 0
mov ecx, dword [ebp - 0x6ac]
mov edx, dword [ebp - 0x488]
mov dword [ecx + 0x1b8], edx
cmp dword [ebp - 0x490], 0
je 0x435003
mov dword [ebp - 0x64c], 0
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x64c]
push ecx
mov edx, dword [ebp - 0x488]
push edx
mov eax, dword [ebp + 0xc]
push eax
call sym.nsUninstall.exe_public:_static_class_CNsZlib____cdecl_CNsZlib::Instance_void_
mov ecx, eax
call sym.nsUninstall.exe_public:_long_int___thiscall_CNsZlib::DecodeGZipBuffer_unsigned_char___long_int__unsigned_char____long_int__
cmp dword [ebp - 0x64c], 0
je 0x435003
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x64c]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00415fa0
add esp, 0xc
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov byte [ecx], 0
mov edx, dword [ebp - 0x6ac]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x1b8], eax
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.0041554c
add esp, 4
mov edx, dword [ebp - 0x484]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x4b0]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [ebp - 0x49c]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x664], 1
mov byte [ebp - 4], 0
lea eax, [ebp - 0x494]
call fcn.004059b0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x480]
call fcn.004059b0
mov eax, dword [ebp - 0x664]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004144ca
mov esp, ebp
pop ebp
ret 0x10