Function at 0x1002d720
Capabilities:
Check http status code
Connect to http server
Create http request
Print debug messages
Query remote server for available data
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x10090988
push 0x1005aa50
mov eax, dword fs:[0]
push eax
sub esp, 0x64c
mov eax, dword [0x1009cbc0]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, ecx
mov dword [ebp - 0x654], esi
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x65c], str.application_x_www_form_urlencoded
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x650], 4
mov dword [ebp - 0x638], 0
xor eax, eax
mov word [ebp - 0x634], ax
push 0x40e
push eax
lea eax, [ebp - 0x632]
push eax
call fcn.10055aa0
mov byte [ebp - 0x224], 0
push 0x207
push 0
lea eax, [ebp - 0x223]
push eax
call fcn.10055aa0
add esp, 0x18
mov dword [ebp - 0x64c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
mov eax, dword [0x100e28b4]
test eax, eax
jle 0x1002d82a
dec eax
mov dword [0x100e28b4], eax
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
xor eax, eax
jmp 0x1002de71
mov dword [0x100e28b4], 0xa8c0
push 0
push 0
push 0
push 0
lea eax, [esi + 0x208]
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov edi, eax
mov dword [ebp - 0x648], edi
test edi, edi
jne 0x1002d90c
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
jne 0x1002d895
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x1002d8f1
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002d8d0
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostStatisticEx
push 1
mov edx, 0xb5a
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002d8e8
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
lea eax, [ebx + 0x1e]
jmp 0x1002de71
push 0
push 0
push 3
push 0
push 0
push 0x1bb
push str.stats.mbamupdates.com
push edi
call dword [sym.imp.WININET.dll_InternetConnectW]
mov ebx, eax
mov dword [ebp - 0x644], ebx
test ebx, ebx
jne 0x1002d99b
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002d87b
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002d8d0
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostStatisticEx
push 1
mov edx, 0xb60
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002d8e8
push 0
push 0x800000
lea eax, [ebp - 0x65c]
push eax
push 0
push 0
push str._v1_collection_clients
push str.POST
push ebx
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov esi, eax
mov dword [ebp - 0x63c], esi
test esi, esi
jne 0x1002da32
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002d87b
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002d8d0
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostStatisticEx
push 1
mov edx, 0xb66
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002d8e8
push 0x20000000
push 0xffffffffffffffff
push str.Content_Type:_application_x_www_form_urlencoded_r_n
push esi
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
test eax, eax
jne 0x1002dab1
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002d87b
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002d8d0
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostStatisticEx
push 1
mov edx, 0xb69
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002d8e8
mov ecx, dword [ebp - 0x654]
lea eax, [ecx + 0xc30]
push eax
lea eax, [ecx + 0xa28]
push eax
lea eax, [ecx + 0x820]
push eax
lea eax, [ecx + 0x618]
push eax
push str.uuid_sosversion_sarch_slanguage_s_r_n
lea eax, [ebp - 0x634]
push eax
call fcn.10004ef0
add esp, 0x18
lea ecx, [ebp - 0x634]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002daf0
sub ecx, edx
sar ecx, 1
push 0xffffffffffffffff
lea eax, [ebp - 0x634]
push eax
lea eax, [ecx + 1]
push eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x64c]
push eax
call fcn.10052d14
add esp, 0x14
test eax, eax
je 0x1002dbd0
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
jne 0x1002db5a
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x1002dbb6
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002db95
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostStatisticEx
push 1
mov edx, 0xb70
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002dbad
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
mov eax, edi
jmp 0x1002de71
push 0x208
lea eax, [ebp - 0x224]
push eax
call fcn.10053a0a
add esp, 8
push eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x1002dc63
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002d87b
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002d8d0
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostStatisticEx
push 1
mov edx, 0xb74
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002d8e8
push 0
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x640]
push eax
push 0x20000013
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x1002dceb
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002d87b
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002d8d0
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostStatisticEx
push 1
mov edx, 0xb77
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002d8e8
cmp dword [ebp - 0x640], 0xc8
je 0x1002dd7f
push 0
push 0
lea eax, [ebp - 0x638]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
test eax, eax
je 0x1002dd5c
lea eax, [ebp - 0x638]
push eax
push 0x104
lea eax, [ebp - 0x224]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1002dd5c
cmp dword [ebp - 0x638], 0
jbe 0x1002dd5c
push 0xffffffffffffffff
lea eax, [ebp - 0x224]
push eax
push 0x208
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x64c]
push eax
call fcn.1005410f
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
lea eax, [esi + 0x1e]
jmp 0x1002de71
mov dword [ebp - 4], 0
call fcn.1002ddab
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x1002de71
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1005132c
mov esp, ebp
pop ebp
ret