Function at 0x703e0838
Capabilities:
Connect to http server
Create http request
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0xb4
mov dword [esp + 0x14], 0x81
mov dword [esp + 0x10], 0x9d
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0xb
lea eax, [ebp - 0x98]
mov dword [esp + 4], eax
mov dword [esp], 0x7062868c
call fcn.703e1084
lea eax, [ebp - 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetOpenW]
call eax
sub esp, 0x14
mov dword [ebp - 0x10], eax
mov dword [esp + 0x14], 0x8c
mov dword [esp + 0x10], 0x95
mov dword [esp + 0xc], 0x41
mov dword [esp + 8], 0xc
lea eax, [ebp - 0x80]
mov dword [esp + 4], eax
mov dword [esp], 0x706286c0
call fcn.703e0250
lea eax, [ebp - 0x80]
mov dword [esp], eax
call fcn.703e1124
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 0x70626180
mov dword [esp + 0xc], 0x70626180
mov dword [esp + 8], 0x1bb
mov dword [esp + 4], str.www.google.com
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetConnectW]
call eax
sub esp, 0x20
mov dword [ebp - 0x14], eax
mov dword [esp + 0x14], 0xd0
mov dword [esp + 0x10], 0x15
mov dword [esp + 0xc], 0x21
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x73]
mov dword [esp + 4], eax
mov dword [esp], 0x70628674
call fcn.703e0250
lea eax, [ebp - 0x73]
mov dword [esp], eax
call fcn.703e1124
mov dword [ebp - 0x18], 0x200
or dword [ebp - 0x18], 0x400000
or dword [ebp - 0x18], 0x400000
or dword [ebp - 0x18], 0x200000
or dword [ebp - 0x18], 0x4000
or dword [ebp - 0x18], 0x8000
or dword [ebp - 0x18], 0x4000000
or dword [ebp - 0x18], 0x100
or dword [ebp - 0x18], 0x800
or dword [ebp - 0x18], 0x80000000
or dword [ebp - 0x18], 0x2000
or dword [ebp - 0x18], 0x1000
or dword [ebp - 0x18], 0x80
or dword [ebp - 0x18], 0x800000
mov dword [esp + 0x14], 0xa6
mov dword [esp + 0x10], 0xf3
mov dword [esp + 0xc], 0x21
mov dword [esp + 8], 8
lea eax, [ebp - 0x62]
mov dword [esp + 4], eax
mov dword [esp], 0x70628570
call fcn.703e1084
lea ebx, [ebp - 0x62]
mov dword [esp + 0x14], 0xa3
mov dword [esp + 0x10], 0xb9
mov dword [esp + 0xc], 0x81
mov dword [esp + 8], 3
lea eax, [ebp - 0x50]
mov dword [esp + 4], eax
mov dword [esp], 0x70628624
call fcn.703e1084
lea eax, [ebp - 0x50]
mov dword [esp + 0x1c], 0
mov edx, dword [ebp - 0x18]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], str.https:__www.google.com_
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x706261d0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_HttpOpenRequestW]
call eax
sub esp, 0x20
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x1f
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 4
lea eax, [ebp - 0x48]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x44]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetQueryOptionW]
call eax
sub esp, 0x10
test eax, eax
setne al
test al, al
je 0x703e0b19
mov eax, dword [ebp - 0x44]
or ah, 0x20
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or ah, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or ah, 2
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or ah, 1
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
or al, 0x80
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x48]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x44]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_InternetSetOptionW]
call eax
sub esp, 0x10
mov dword [esp + 0x14], 0xad
mov dword [esp + 0x10], 0xf1
mov dword [esp + 0xc], 0x11
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x3e]
mov dword [esp + 4], eax
mov dword [esp], str.KTa_S_e
call fcn.703e0250
lea eax, [ebp - 0x3e]
mov dword [esp], eax
call fcn.703e1124
mov word [ebp - 0xa], 0
jmp 0x703e0bec
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.WININET.DLL_HttpSendRequestW]
call eax
sub esp, 0x14
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 0xc3
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x2d]
mov dword [esp + 4], eax
mov dword [esp], 0x706285f4
call fcn.703e0250
lea eax, [ebp - 0x2d]
mov dword [esp], eax
call fcn.703e1124
mov dword [esp], 0xea60
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
movzx eax, word [ebp - 0xa]
add eax, 1
mov word [ebp - 0xa], ax
cmp word [ebp - 0xa], 2
jle 0x703e0b62
nop
mov ebx, dword [ebp - 4]
leave
ret