Function at 0x409b40
Capabilities:
Check for peb beingdebugged flag
Check http status code

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x42a990
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push esi
push edi
mov eax, dword [0x437368]
xor eax, esp
push eax
lea eax, [esp + 0xc0]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp + 8]
xor ebx, ebx
mov eax, edi
mov dword [esp + 0x24], 4
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x2c], 0x42f430
mov dword [esp + 0x30], ebx
add esi, 8
lea ecx, [eax + 2]
mov edi, edi
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x409ba0
sub eax, ecx
sar eax, 1
push edi
mov edi, eax
mov eax, dword [esi + 0x14]
mov ecx, esi
call fcn.00409fc0
test eax, eax
jne 0x409bd3
mov eax, dword [ebp + 8]
mov cx, word [ebp + 0x18]
cmp word [eax + 0x24], cx
jne 0x409bd3
push 0
mov esi, eax
jmp 0x409c03
mov edx, dword [ebp + 0x14]
mov eax, edx
lea edi, [eax + 2]
jmp 0x409be0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x409be0
sub eax, edi
sar eax, 1
push eax
push edx
call fcn.00401560
mov esi, dword [ebp + 8]
mov dx, word [ebp + 0x18]
mov word [esi + 0x24], dx
push 1
call fcn.00409ef0
cmp dword [ebp + 0xc], ebx
mov eax, 0x84600100
je 0x409c17
mov eax, 0x84e03100
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x10]
push 0
push eax
lea eax, [esp + 0x34]
push eax
mov eax, dword [esi + 4]
push 0
push 0
push ecx
push edx
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov esi, eax
test esi, esi
jne 0x409c74
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, 0x42f49c
lea ebx, [esp + 0x60]
call fcn.0040a2d0
add esp, 4
push eax
lea ecx, [esp + 0x38]
push ecx
mov dword [esp + 0xd0], esi
call fcn.0040a6e0
push 0x4340d8
lea edx, [esp + 0x38]
push edx
call fcn.004166ab
mov eax, 0x42f438
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x409c80
mov ecx, dword [ebp + 0x24]
push ecx
sub eax, edx
mov edx, dword [ebp + 0x20]
push edx
sar eax, 1
push eax
push 0x42f438
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x409cee
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov edi, eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
mov ecx, 0x42f4bc
lea ebx, [esp + 0x60]
call fcn.0040a2d0
add esp, 4
push eax
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0xd0], 1
call fcn.0040a6e0
push 0x4340d8
lea ecx, [esp + 0x38]
push ecx
call fcn.004166ab
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0x20000013
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x409d53
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov edi, eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
mov ecx, 0x42f4dc
lea ebx, [esp + 0x60]
call fcn.0040a2d0
add esp, 4
push eax
lea edx, [esp + 0x38]
push edx
mov dword [esp + 0xd0], 2
call fcn.0040a6e0
push 0x4340d8
lea eax, [esp + 0x38]
push eax
call fcn.004166ab
cmp dword [esp + 0x18], 0xc8
je 0x409d66
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x409ddd
push 0
push 0
lea ecx, [esp + 0x1c]
push ecx
push esi
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
test eax, eax
je 0x409df9
mov eax, dword [esp + 0x14]
test eax, eax
mov edi, dword [esp + 0x10]
je 0x409dcc
add eax, edi
push eax
push ebx
mov dword [esp + 0x30], ebx
call fcn.00414eb4
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x409e3f
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x1c]
push edx
push ecx
lea eax, [edi + ebx]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x409e8e
add edi, dword [esp + 0x1c]
cmp dword [esp + 0x14], 0
mov dword [esp + 0x10], edi
jne 0x409d66
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ebx
mov dword [ecx], edi
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x28
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov edi, eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
mov ecx, 0x42f4f8
lea ebx, [esp + 0x60]
call fcn.0040a2d0
add esp, 4
push eax
lea edx, [esp + 0x38]
push edx
mov dword [esp + 0xd0], 3
call fcn.0040a6e0
push 0x4340d8
lea eax, [esp + 0x38]
push eax
call fcn.004166ab
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [esp + 0x28]
test eax, eax
je 0x409e57
push eax
call fcn.00414527
add esp, 4
mov edx, 0x42f530
lea eax, [esp + 0x5c]
call fcn.00401520
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x38]
push edx
mov dword [esp + 0xd0], 4
call fcn.0040a6e0
push 0x4340d8
lea eax, [esp + 0x38]
push eax
call fcn.004166ab
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov edi, eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebx
call fcn.00414527
add esp, 4
push edi
mov ecx, 0x42f594
lea ebx, [esp + 0xa4]
call fcn.0040a2d0
add esp, 4
push eax
lea ecx, [esp + 0x7c]
push ecx
mov dword [esp + 0xd0], 5
call fcn.0040a6e0
push 0x4340d8
lea edx, [esp + 0x7c]
push edx
call fcn.004166ab
int3