Function at 0x4d5324
Capabilities:
Connect to http server
Create http request
Make an http request with a cookie
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push dword [ebp + 8]
call fcn.004d6524
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4d5392
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push dword [ebp + 8]
call fcn.004d6726
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4d53c1
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx]
test eax, eax
jne 0x4d53da
mov eax, 0x760402
push eax
push 1
mov ebx, 0x178
call fcn.006052f0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x760402
push dword [ebp - 0x2c]
call fcn.004cce90
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4d541e
push ebx
call fcn.005fffbe
add esp, 4
cmp dword [ebp - 0x30], 0
je 0x4d54fb
push reloc.wsock32.dll_connect
push 0
push 0x763de2
push 1
mov ebx, 0x168
call fcn.00603590
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00605400
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00605400
add esp, 0x10
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push 1
push dword [ebp - 0x2c]
call dword [sym.imp.wininet.dll_InternetOpenA]
nop
nop
nop
nop
cmp dword [ebp - 0x38], esp
je 0x4d54bd
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4d54d0
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4d54e0
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4d54f0
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc], eax
jmp 0x4d55fb
push reloc.wsock32.dll_connect
push 0
push 0x763de2
push 1
mov ebx, 0x168
call fcn.00603590
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp + 0x14]
push dword [ebx]
push str.http
mov ecx, 2
call fcn.004c5686
add esp, 8
mov dword [ebp - 0x30], eax
push reloc.wsock32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x4d5549
mov eax, 0x760402
push eax
push 1
mov ebx, 0x168
call fcn.00603590
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4d556f
push ebx
call fcn.005fffbe
add esp, 4
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00605400
add esp, 0x10
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], esp
push 0
push dword [ebp - 0x38]
push dword [ebp - 0x34]
push 3
push dword [ebp - 0x2c]
call dword [sym.imp.wininet.dll_InternetOpenA]
nop
nop
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x4d55c2
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4d55d5
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4d55e5
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4d55f5
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4d5667
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4d563a
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x4d64dc
push dword [ebp + 8]
call fcn.004d6ac2
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], esp
push 0
push 0
push 3
push 0x760402
push 0x760402
push dword [ebp - 0x2c]
push dword [ebp - 8]
push dword [ebp - 0xc]
call dword [sym.imp.wininet.dll_InternetConnectA]
nop
nop
nop
nop
cmp dword [ebp - 0x30], esp
je 0x4d56b3
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4d5744
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d56e2
push 6
call fcn.005fffca
add esp, 4
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4d5717
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x4d64dc
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00605400
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00605400
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push 0
push bind
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push str.HTTP_1.1
push dword [ebp - 4]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push dword [ebp - 0x14]
call dword [sym.imp.wininet.dll_HttpOpenRequestA]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x4d57c5
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4d57d8
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4d57e8
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4d589e
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d581a
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d583c
push 6
call fcn.005fffca
add esp, 4
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4d5871
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x4d64dc
push reloc.wsock32.dll_bind
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
push str.Accept:
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d58d7
mov eax, 0x760402
push eax
push 4
mov ebx, 0x148
call fcn.00604050
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4d592d
push str.Accept:_image_gif__image_x_xbitmap__image_jpeg__image_pjpeg__application_x_shockwave_flash__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword____r_n
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 2
call fcn.004c5686
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d5927
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push reloc.wsock32.dll_bind
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
push str.Referer:
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5966
mov eax, 0x760402
push eax
push 4
mov ebx, 0x148
call fcn.00604050
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4d59c6
push 0x7638d8
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.Referer:
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 4
call fcn.004c5686
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d59c0
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push reloc.wsock32.dll_bind
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
push str.Accept_Language:
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d59ff
mov eax, 0x760402
push eax
push 4
mov ebx, 0x148
call fcn.00604050
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4d5a55
push str.Accept_Language:_zh_cn_r_n
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 2
call fcn.004c5686
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d5a4f
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push 0x760402
mov ebx, dword [ebp + 0xc]
push dword [ebx]
call fcn.004cce90
add esp, 8
cmp eax, 0
je 0x4d5ad7
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5a85
mov eax, 0x760402
push eax
push 1
mov ebx, 0x150
call fcn.00604270
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x763f11
push dword [ebp - 0x30]
call fcn.004cce90
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4d5ac9
push ebx
call fcn.005fffbe
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x4d5ad7
xor eax, eax
jmp 0x4d5adc
mov eax, 1
test eax, eax
je 0x4d5b77
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5af9
mov eax, 0x760402
push eax
push 1
mov ebx, 0x130
call fcn.006015a0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00605400
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
push dword [ebp - 0x18]
call dword [sym.imp.wininet.dll_HttpSendRequestA]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x4d5b62
push 6
call fcn.005fffca
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4d5b72
push ebx
call fcn.005fffbe
add esp, 4
jmp 0x4d5e6c
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5b8c
mov eax, 0x760402
push eax
push 1
mov ebx, 0x150
call fcn.00604270
add esp, 0x10
mov dword [ebp - 0x38], eax
push str.POST
push dword [ebp - 0x38]
call fcn.004cce90
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4d5bd0
push ebx
call fcn.005fffbe
add esp, 4
cmp dword [ebp - 0x3c], 0
je 0x4d5da4
push 0x760402
mov ebx, dword [ebp + 0x24]
push dword [ebx]
call fcn.004cce90
add esp, 8
cmp eax, 0
je 0x4d5d17
push reloc.wsock32.dll_bind
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
push str.Content_Type:
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5c2e
mov eax, 0x760402
push eax
push 4
mov ebx, 0x148
call fcn.00604050
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4d5c84
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 2
call fcn.004c5686
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d5c7e
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5c99
mov eax, 0x760402
push eax
push 1
mov ebx, 0x130
call fcn.006015a0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x168
call fcn.00603590
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x7638d8
push dword [ebp - 0x30]
push str.Content_Length:
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
mov ecx, 4
call fcn.004c5686
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4d5cfb
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp + 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d5d11
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5d2c
mov eax, 0x760402
push eax
push 1
mov ebx, 0x130
call fcn.006015a0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x4d5d57
mov eax, 0x760402
push eax
push 1
mov ebx, 0x130
call fcn.006015a0
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 0x30]
mov ebx, dword [ebp + 0x24]
push dword [ebx]
push dword [ebp - 0x2c]
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
push dword [ebp - 0x18]
call dword [sym.imp.wininet.dll_HttpSendRequestA]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x4d5d9f
push 6
call fcn.005fffca
add esp, 4
jmp 0x4d5e6c
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d5dc6
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d5de8
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x18]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d5e0a
push 6
call fcn.005fffca
add esp, 4
push 0x80000301
push 0
push 0
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4d5e3f
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x4d64dc
push 0
mov ebx, 0x274
call fcn.00605420
add esp, 4
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push 0x800
push 1
mov ebx, 0x1bc
call fcn.00603860
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4d5eb6
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0
mov ebx, 0x350
call fcn.00604120
add esp, 4
push reloc.wsock32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4d5edf
mov eax, 0x760403
push eax
push 1
mov ebx, 0x194
call fcn.006031d0
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], esp
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x4d5f09
add eax, 8
push eax
push dword [ebp - 0x18]
call dword [sym.imp.wininet.dll_InternetReadFile]
nop
nop
nop
nop
cmp dword [ebp - 0x30], esp
je 0x4d5f29
push 6
call fcn.005fffca
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x24]
push reloc.wsock32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4d5f46
mov eax, 0x760403
push eax
push 2
mov ebx, 0x1a0
call fcn.00603e00
add esp, 0x1c
mov dword [ebp - 0x2c], eax
push reloc.wsock32.dll_getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4d5f6f
mov eax, 0x760403
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x298
call fcn.00605470
add esp, 0x1c
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4d5f9c
push ebx
call fcn.005fffbe
add esp, 4
cmp dword [ebp - 0x24], 0
jne 0x4d5eba
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x28c
call fcn.00605550
add esp, 0x10
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x2bc
call fcn.006055b0
add esp, 0x10
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x294
call fcn.00605600
add esp, 0x1c
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4d6019
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x278
call fcn.006056e0
add esp, 0x10
push 0x80000301
push 0
push 0x400
push 1
mov ebx, 0x184
call fcn.00601800
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d6070
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
mov dword [ebp - 0x2c], esp
push 0
mov eax, 0x400
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov ebx, dword [ebp + 0x2c]
push dword [ebx]
push 0x16
push dword [ebp - 0x18]
call dword [sym.imp.wininet.dll_HttpQueryInfoA]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d60b3
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x18]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d60d5
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x14]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d60f7
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x2c], esp
push dword [ebp - 0xc]
call dword [sym.imp.wininet.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x4d6119
push 6
call fcn.005fffca
add esp, 4
push reloc.wsock32.dll_bind
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
push str.Set_Cookie:
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d6152
mov eax, 0x760402
push eax
push 4
mov ebx, 0x148
call fcn.00604050
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jle 0x4d64bd
push 0
mov ebx, 0x274
call fcn.00605420
add esp, 4
mov dword [ebp - 0x1c], eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d619c
mov eax, 0x760402
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x2a0
call fcn.006056f0
add esp, 0x1c
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x28c
call fcn.00605550
add esp, 0x10
push reloc.wsock32.dll_bind
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 2
mov ebx, 0x2b4
call fcn.00605860
add esp, 0x1c
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x4d64a1
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x2a4
call fcn.006059c0
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d623f
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push reloc.wsock32.dll_bind
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
push str.Set_Cookie:
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d627e
mov eax, 0x760402
push eax
push 4
mov ebx, 0x148
call fcn.00604050
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jle 0x4d648a
push 0
push 0
push 0
push 0x80000301
push 0
push 0xc
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d62d1
mov eax, 0x760402
push eax
push 4
mov ebx, 0x17c
call fcn.00605bd0
add esp, 0x34
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp + 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4d62fd
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], eax
push reloc.wsock32.dll_bind
push 0
push 1
push 0x80000301
push 0
push 1
push reloc.wsock32.dll_connect
push 0
push 0x763f79
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d633c
mov eax, 0x760402
push eax
push 4
mov ebx, 0x148
call fcn.00604050
add esp, 0x34
mov dword [ebp - 0x28], eax
push dword [ebp - 8]
push str.http:__
mov ecx, 2
call fcn.004c5686
add esp, 8
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
fsub qword [0x760425]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
call fcn.004c58cd
push 0x80000301
push 0
push eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d63a1
mov eax, 0x760402
push eax
push 2
mov ebx, 0x134
call fcn.00601540
add esp, 0x1c
mov dword [ebp - 0x40], eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d63cc
mov eax, 0x760402
push eax
push 1
mov ebx, 0x130
call fcn.006015a0
add esp, 0x10
mov dword [ebp - 0x4c], eax
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x28]
fstp qword [ebp - 0x54]
fsub qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
call fcn.004c58cd
push 0x80000301
push 0
push eax
push reloc.wsock32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x4d641c
mov eax, 0x760402
push eax
push 2
mov ebx, 0x138
call fcn.006015c0
add esp, 0x1c
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], esp
push dword [ebp - 0x60]
push dword [ebp - 0x40]
push dword [ebp - 0x2c]
call dword [sym.imp.wininet.dll_InternetSetCookieA]
nop
nop
nop
nop
cmp dword [ebp - 0x64], esp
je 0x4d645a
push 6
call fcn.005fffca
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4d646a
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4d647a
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x4d648a
push ebx
call fcn.005fffbe
add esp, 4
push 0
mov ebx, 0x350
call fcn.00604120
add esp, 4
jmp 0x4d61d5
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x278
call fcn.006056e0
add esp, 0x10
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4d64d7
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.005fffc4
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x4d64dc
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4d64ed
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4d64fd
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4d650d
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4d651d
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x2c