Function at 0x4e03a0
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d73f5
mov eax, dword fs:[0]
push eax
mov eax, 0x255c
call fcn.0056d570
mov eax, dword [0x634254]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, dword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [ebp - 0x2530], ebx
test ebx, ebx
je 0x4e0420
lea edi, [ebx + 0xc]
mov dword [ebp - 0x2520], edi
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x54], 0
test ecx, ecx
je 0x4e0414
mov edx, dword [ecx]
push eax
push 1
push 0
push dword [ebx + 8]
call dword [edx]
mov edi, dword [sym.imp.KERNEL32.DLL_SetLastError]
push 0
call edi
jmp 0x4e0460
mov eax, dword [0x651200]
test al, 1
jne 0x4e0456
or eax, 1
mov dword [0x651200], eax
mov ecx, 0x651210
mov dword [ebp - 4], 0
call fcn.004e5050
push 0x5de020
call fcn.0056d44b
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2520], 0x651210
lea ecx, [ebp - 0x2504]
call fcn.004dfe70
mov eax, 0x50
mov dword [ebp - 0xb4], 2
push 4
push str.http
mov dword [ebp - 0xb0], 4
lea edx, [eax - 0x2f]
mov word [ebp - 0xb8], ax
call fcn.004e5150
add esp, 8
cmp dword [esi + 0x14], 8
jb 0x4e04a5
mov esi, dword [esi]
lea ecx, [ebp - 0x2504]
call fcn.004dfe70
push esi
call fcn.004df6e0
mov esi, eax
test ebx, ebx
je 0x4e04e2
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x54], 1
test ecx, ecx
je 0x4e04de
mov edx, dword [ecx]
push eax
push esi
push 1
push dword [ebx + 8]
call dword [edx]
push 0
call edi
test esi, esi
je 0x4e1531
xor eax, eax
mov dword [ebp - 0x98], 0
lea esi, [ebp - 0x24c2]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
lea ecx, [esi + 2]
mov word [ebp - 0x98], ax
nop word [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4e0520
sub esi, ecx
mov eax, 0xa
sar esi, 1
cmp esi, 7
ja 0x4e0567
mov dword [ebp - 0x88], esi
lea eax, [ebp - 0x24c2]
add esi, esi
push esi
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.00570d00
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0x98], ax
jmp 0x4e0626
cmp esi, 0x7ffffffe
ja 0x4e1b08
mov edi, esi
or edi, 7
cmp edi, 0x7ffffffe
jbe 0x4e0591
mov dword [ebp - 0x2508], SysStringLen
mov eax, 0xfffffffe
jmp 0x4e05b3
cmp edi, eax
cmovb edi, eax
mov dword [ebp - 0x2508], edi
lea eax, [edi + 1]
cmp eax, 0x7fffffff
ja 0x4e1b03
add eax, eax
cmp eax, 0x1000
jb 0x4e05da
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x4e1b03
push ecx
call fcn.005a1c68
add esp, 4
test eax, eax
je 0x4e1b0d
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x4e05f5
test eax, eax
je 0x4e05f3
push eax
call fcn.005a1c68
mov edi, eax
add esp, 4
test edi, edi
je 0x4e1b1e
jmp 0x4e05f5
xor edi, edi
mov eax, dword [ebp - 0x2508]
mov dword [ebp - 0x88], esi
add esi, esi
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x24c2]
push esi
push eax
push edi
call fcn.00570780
add esp, 0xc
mov dword [ebp - 0x98], edi
xor eax, eax
mov word [esi + edi], ax
mov dword [ebp - 4], 1
lea edi, [ebp - 0x20bc]
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x58], 0
lea ecx, [edi + 2]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x4e0651
sub edi, ecx
sar edi, 1
mov dword [ebp - 0x2508], edi
cmp edi, 7
ja 0x4e06a3
lea esi, [edi + edi]
mov dword [ebp - 0x58], edi
push esi
lea eax, [ebp - 0x20bc]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.00570d00
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0x68], ax
mov ecx, dword [ebp - 0x54]
mov edi, dword [ebp - 0x58]
mov dword [ebp - 0x2514], ecx
mov dword [ebp - 0x2508], edi
jmp 0x4e0773
cmp edi, 0x7ffffffe
ja 0x4e1b2f
mov esi, edi
or esi, 7
cmp esi, 0x7ffffffe
jbe 0x4e06ce
mov esi, SysReAllocString
mov eax, 0xfffffffe
mov dword [ebp - 0x2514], esi
jmp 0x4e06f6
cmp esi, 0xa
mov eax, 0xa
cmovb esi, eax
mov dword [ebp - 0x2514], esi
lea eax, [esi + 1]
cmp eax, 0x7fffffff
ja 0x4e1b03
add eax, eax
cmp eax, 0x1000
jb 0x4e071f
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x4e1b03
push ecx
call fcn.005a1c68
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4e1b34
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4e073e
test eax, eax
je 0x4e073c
push eax
call fcn.005a1c68
add esp, 4
mov dword [ebp - 0x2510], eax
test eax, eax
je 0x4e1b45
jmp 0x4e0744
xor eax, eax
mov dword [ebp - 0x2510], eax
mov dword [ebp - 0x54], esi
lea ecx, [ebp - 0x20bc]
lea esi, [edi + edi]
mov dword [ebp - 0x58], edi
push esi
push ecx
push eax
call fcn.00570780
mov eax, dword [ebp - 0x2510]
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x68], eax
mov word [esi + eax], cx
mov ecx, dword [ebp - 0x2514]
lea esi, [ebp - 0x10ba]
mov byte [ebp - 4], 2
lea edx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4e0780
sub esi, edx
mov eax, ecx
sar esi, 1
sub eax, edi
mov dword [ebp - 0x2518], esi
cmp esi, eax
ja 0x4e07d9
mov eax, dword [ebp - 0x2508]
add edi, esi
cmp ecx, 8
mov dword [ebp - 0x58], edi
lea esi, [ebp - 0x68]
cmovae esi, dword [ebp - 0x68]
lea ecx, [esi + eax*2]
mov eax, dword [ebp - 0x2518]
add eax, eax
push eax
lea eax, [ebp - 0x10ba]
push eax
push ecx
call fcn.00570d00
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x4e0984
mov eax, SysReAllocString
sub eax, edi
cmp eax, esi
jb 0x4e1b56
lea edx, [edi + esi]
or edx, 7
cmp edx, 0x7ffffffe
jbe 0x4e0808
mov eax, SysReAllocString
mov dword [ebp - 0x252c], eax
mov eax, 0xfffffffe
jmp 0x4e085d
mov eax, ecx
shr eax, 1
mov dword [ebp - 0x2508], eax
mov eax, SysReAllocString
sub eax, dword [ebp - 0x2508]
cmp ecx, eax
jbe 0x4e0833
mov eax, SysReAllocString
mov dword [ebp - 0x252c], eax
mov eax, 0xfffffffe
jmp 0x4e085d
mov eax, dword [ebp - 0x2508]
add eax, ecx
cmp edx, eax
cmovb edx, eax
mov dword [ebp - 0x252c], edx
lea eax, [edx + 1]
cmp eax, 0x7fffffff
ja 0x4e1b03
add eax, eax
cmp eax, 0x1000
jb 0x4e0892
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x4e1b03
push ecx
call fcn.005a1c68
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4e1b5b
mov edx, dword [ebp - 0x252c]
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
mov ecx, dword [ebp - 0x2514]
jmp 0x4e08bd
test eax, eax
je 0x4e08bb
push eax
call fcn.005a1c68
add esp, 4
mov dword [ebp - 0x2524], eax
test eax, eax
je 0x4e1b6c
mov ecx, dword [ebp - 0x2514]
mov edx, dword [ebp - 0x252c]
jmp 0x4e08c3
xor eax, eax
mov dword [ebp - 0x2524], eax
mov dword [ebp - 0x54], edx
lea ebx, [edi + esi]
mov dword [ebp - 0x58], ebx
lea edx, [edi + edi]
lea ebx, [eax + ebx*2]
mov dword [ebp - 0x2508], ebx
lea edi, [edx + eax]
mov ebx, dword [ebp - 0x2530]
mov dword [ebp - 0x2518], edi
push edx
cmp ecx, 8
jb 0x4e0952
mov edi, dword [ebp - 0x68]
push edi
push eax
call fcn.00570780
lea eax, [esi + esi]
push eax
lea eax, [ebp - 0x10ba]
push eax
push dword [ebp - 0x2518]
call fcn.00570780
mov eax, dword [ebp - 0x2508]
xor ecx, ecx
add esp, 0x18
mov word [eax], cx
mov eax, dword [ebp - 0x2514]
lea ecx, [eax*2 + 2]
cmp ecx, 0x1000
jb 0x4e0946
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x4e1b7d
mov edi, edx
push ecx
push edi
call fcn.0056d0c8
add esp, 8
jmp 0x4e097b
lea ecx, [ebp - 0x68]
push ecx
push eax
call fcn.00570780
lea eax, [esi + esi]
push eax
lea eax, [ebp - 0x10ba]
push eax
push edi
call fcn.00570780
mov eax, dword [ebp - 0x2508]
add esp, 0x18
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x2524]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0xb4], 3
mov ecx, 0x800100
movzx edi, word [ebp - 0xb8]
mov eax, 0x100
push 0
push 0
push 0
push 0
cmove eax, ecx
push 0x6143c0
mov dword [ebp - 0x2518], eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov esi, eax
mov dword [ebp - 0x252c], esi
xor eax, eax
mov byte [ebp - 4], 3
test esi, esi
setne al
mov dword [ebp - 0x2510], eax
test ebx, ebx
je 0x4e0a0a
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x54], 2
test ecx, ecx
je 0x4e09fc
mov edx, dword [ecx]
push eax
push dword [ebp - 0x2510]
push 2
push dword [ebx + 8]
call dword [edx]
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
mov eax, dword [ebp - 0x2510]
test eax, eax
jne 0x4e0ab6
test esi, esi
je 0x4e0a1d
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x4e0a57
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0a4d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b7d
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x4e0aab
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0aa1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b7d
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov eax, dword [ebp - 0x2510]
jmp 0x4e1533
cmp dword [ebp - 0x84], 8
lea eax, [ebp - 0x98]
push 0
cmovae eax, dword [ebp - 0x98]
push edi
push eax
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov edi, eax
mov dword [ebp - 0x2528], edi
xor eax, eax
mov byte [ebp - 4], 4
test edi, edi
setne al
mov dword [ebp - 0x2510], eax
test ebx, ebx
je 0x4e0b27
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x54], 3
test ecx, ecx
je 0x4e0b19
mov edx, dword [ecx]
push eax
push dword [ebp - 0x2510]
push 3
push dword [ebx + 8]
call dword [edx]
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
mov eax, dword [ebp - 0x2510]
test eax, eax
jne 0x4e0bd4
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e0b3c
push edi
call ebx
test esi, esi
je 0x4e0b43
push esi
call ebx
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x4e0b7d
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0b73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b7d
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x4e0aab
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0aa1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b7d
jmp 0x4e0aa1
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2520]
mov byte [ebp - 4], 5
mov eax, dword [eax + 0x44]
sub eax, 0
je 0x4e0c4a
sub eax, 1
je 0x4e0c2d
sub eax, 1
je 0x4e0c1f
push 3
push 0x6143d4
lea ecx, [ebp - 0x80]
call fcn.00407684
mov edx, dword [ebp - 0x80]
jmp 0x4e0c6a
mov edx, dword [0x6143e8]
mov ax, word [0x6143ec]
jmp 0x4e0c56
mov eax, dword [0x6143e0]
mov edx, dword [str.POST]
mov dword [ebp - 0x7c], eax
xor eax, eax
mov dword [ebp - 0x70], 4
mov word [ebp - 0x78], ax
jmp 0x4e0c67
mov edx, dword [0x6143d4]
mov ax, word [0x6143d8]
mov word [ebp - 0x7c], ax
xor eax, eax
mov word [ebp - 0x7a], ax
mov dword [ebp - 0x70], 3
mov dword [ebp - 0x80], edx
push dword [ebp - 0x2518]
cmp dword [ebp - 0x54], 8
lea ecx, [ebp - 0x68]
push 0
cmovae ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x80]
cmp dword [ebp - 0x6c], 8
push 0
push str.HTTP_1.1
push ecx
cmovae eax, edx
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
mov dword [ebp - 0x2568], edi
xor eax, eax
mov byte [ebp - 4], 6
test edi, edi
setne al
mov dword [ebp - 0x2510], eax
test ebx, ebx
je 0x4e0cd0
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push dword [ebp - 0x2510]
mov ecx, ebx
push 4
call fcn.004e0330
mov eax, dword [ebp - 0x2510]
test eax, eax
jne 0x4e0de4
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e0ce5
push edi
call ebx
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e0d1f
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0d15
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e0d40
push eax
call ebx
test esi, esi
je 0x4e0d47
push esi
call ebx
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x4e0d81
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0d77
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x4e0aab
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0dcf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
mov eax, dword [ebp - 0x2510]
add esp, 8
jmp 0x4e1533
mov ecx, dword [ebp - 0x2520]
cmp dword [ecx + 0x1c], 0
je 0x4e0eb6
cmp dword [ecx + 0x20], 8
lea eax, [ecx + 0xc]
jb 0x4e0dff
mov eax, dword [eax]
push 0x20000000
push 0xffffffffffffffff
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov dword [ebp - 0x2508], eax
test ebx, ebx
je 0x4e0e34
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push dword [ebp - 0x2508]
mov ecx, ebx
push 5
call fcn.004e0330
mov eax, dword [ebp - 0x2508]
test eax, eax
jne 0x4e0eb0
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e0e45
push edi
call ebx
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e0e7f
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0e75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e0ea0
push eax
call ebx
test esi, esi
je 0x4e14a7
push esi
call ebx
jmp 0x4e14a7
mov ecx, dword [ebp - 0x2520]
xor eax, eax
cmp dword [ecx + 0x44], 1
mov dword [ebp - 0x2510], eax
jne 0x4e0ecd
mov eax, dword [ecx + 0x34]
mov dword [ebp - 0x2510], eax
push 0
push eax
push 0
push 0
push 0
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [ebp - 0x2508], eax
test ebx, ebx
je 0x4e0f05
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push dword [ebp - 0x2508]
mov ecx, ebx
push 6
call fcn.004e0330
mov eax, dword [ebp - 0x2508]
test eax, eax
jne 0x4e0f81
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e0f16
push edi
call ebx
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e0f50
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e0f46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e0f71
push eax
call ebx
test esi, esi
je 0x4e14a7
push esi
call ebx
jmp 0x4e14a7
mov eax, dword [ebp - 0x2520]
cmp dword [eax + 0x44], 1
jne 0x4e10f3
cmp dword [eax + 0x34], 0
je 0x4e10f3
add eax, 0x24
mov dword [ebp - 0x2518], 0
cmp dword [eax + 0x14], 0x10
jb 0x4e0fb0
mov eax, dword [eax]
lea ecx, [ebp - 0x2518]
push ecx
push dword [ebp - 0x2510]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
mov dword [ebp - 0x2508], eax
test ebx, ebx
je 0x4e0feb
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push dword [ebp - 0x2508]
mov ecx, ebx
push 7
call fcn.004e0330
mov eax, dword [ebp - 0x2508]
test eax, eax
jne 0x4e10f3
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e1000
push edi
call ebx
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e103a
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1030
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b82
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e105b
push eax
call ebx
test esi, esi
je 0x4e1062
push esi
call ebx
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x4e109c
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1092
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b82
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x4e1531
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1527
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b82
jmp 0x4e1527
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov dword [ebp - 0x2508], eax
test ebx, ebx
je 0x4e1122
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push dword [ebp - 0x2508]
mov ecx, ebx
push 8
call fcn.004e0330
mov eax, dword [ebp - 0x2508]
test eax, eax
jne 0x4e119e
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e1133
push edi
call ebx
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e116d
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1163
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e118e
push eax
call ebx
test esi, esi
je 0x4e14a7
push esi
call ebx
jmp 0x4e14a7
xor eax, eax
mov dword [ebp - 0x253c], 0
mov dword [ebp - 0x2524], eax
mov dword [ebp - 0x2558], eax
mov dword [ebp - 0x2554], eax
mov dword [ebp - 0x2514], eax
mov dword [ebp - 0x2550], eax
mov eax, dword [ebp - 0x2520]
mov byte [ebp - 4], 7
mov edx, dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov esi, dword [eax + 0x3c]
mov esi, dword [esi]
cmp byte [esi + 0xd], 0
jne 0x4e134e
xor ebx, ebx
nop dword [eax]
mov dword [ebp - 0x253c], 0x64
lea ecx, [esi + 0x10]
cmp dword [esi + 0x24], 8
jb 0x4e1206
mov ecx, dword [esi + 0x10]
push 0
lea eax, [ebp - 0x253c]
push eax
push 0
push ecx
push 0xffff
push edi
call edx
mov ecx, dword [ebp - 0x253c]
test ecx, ecx
je 0x4e12eb
mov edx, dword [ebp - 0x2554]
add ecx, 2
sub edx, ebx
mov byte [ebp - 0x2509], 0
cmp ecx, edx
jae 0x4e1249
lea eax, [ecx + ebx]
mov dword [ebp - 0x2554], eax
jmp 0x4e12a9
jbe 0x4e12a9
mov eax, dword [ebp - 0x2514]
sub eax, ebx
cmp ecx, eax
jbe 0x4e127e
lea eax, [ebp - 0x2509]
push eax
push ecx
lea ecx, [ebp - 0x2558]
call fcn.00465a98
mov eax, dword [ebp - 0x2550]
mov ebx, dword [ebp - 0x2558]
mov dword [ebp - 0x2514], eax
jmp 0x4e12a9
sub ecx, edx
push ecx
push 0
push dword [ebp - 0x2554]
mov dword [ebp - 0x2518], ecx
call fcn.005713c0
mov edx, dword [ebp - 0x2554]
add esp, 0xc
add edx, dword [ebp - 0x2518]
mov dword [ebp - 0x2554], edx
cmp dword [esi + 0x24], 8
lea ecx, [esi + 0x10]
jb 0x4e12b5
mov ecx, dword [esi + 0x10]
push 0
lea eax, [ebp - 0x253c]
push eax
mov eax, dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
push ebx
push ecx
push 0xffff
push edi
call eax
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4e12d2
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [esi + 0x28]
call fcn.00407684
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x4e1314
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x4e1310
nop dword [eax]
cmp esi, dword [eax + 8]
jne 0x4e1310
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4e1300
mov esi, eax
jmp 0x4e132c
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x4e132c
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x4e1320
cmp byte [esi + 0xd], 0
mov edx, dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
je 0x4e11f0
mov eax, dword [ebp - 0x2520]
mov dword [ebp - 0x2524], ebx
mov ebx, dword [ebp - 0x2530]
lea ecx, [ebp - 0x255c]
mov dword [eax + 4], 0
push ecx
lea ecx, [ebp - 0x2560]
mov dword [ebp - 0x255c], 0
push ecx
add eax, 4
mov dword [ebp - 0x2560], 4
push eax
push 0
push 0x20000005
push edi
call edx
mov esi, eax
test ebx, ebx
je 0x4e139c
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push esi
push 9
mov ecx, ebx
call fcn.004e0330
test esi, esi
je 0x4e13f8
push 0x40
lea eax, [ebp - 0x50]
push 0
push eax
call fcn.005713c0
add esp, 0xc
mov dword [ebp - 0x2564], 0x40
lea eax, [ebp - 0x2564]
push 0
push eax
lea eax, [ebp - 0x50]
push eax
mov eax, dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
push 0
push 0x13
push edi
call eax
mov esi, eax
mov dword [ebp - 0x2518], esi
test ebx, ebx
je 0x4e13f0
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push esi
push 9
mov ecx, ebx
call fcn.004e0330
test esi, esi
jne 0x4e154f
mov ecx, dword [ebp - 0x2524]
test ecx, ecx
je 0x4e1432
mov edx, dword [ebp - 0x2514]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x4e1428
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e143f
push edi
call esi
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e1479
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e146f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e149a
push eax
call esi
mov eax, dword [ebp - 0x252c]
test eax, eax
je 0x4e14a7
push eax
call esi
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x4e14e1
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e14d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x4e1531
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1527
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056d855
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x50]
push eax
call fcn.0057d9f1
mov ecx, dword [ebp - 0x2520]
add esp, 4
cmp dword [ecx], 0
mov dword [ecx + 8], eax
je 0x4e16b5
mov ecx, dword [ebp - 0x2524]
test ecx, ecx
je 0x4e15a7
mov edx, dword [ebp - 0x2514]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x4e159d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e15b4
push edi
call esi
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e15ee
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e15e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e160f
push eax
call esi
mov eax, dword [ebp - 0x252c]
test eax, eax
je 0x4e161c
push eax
call esi
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x4e1656
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e164c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x4e16aa
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e16a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov eax, dword [ebp - 0x2518]
jmp 0x4e1533
test ebx, ebx
je 0x4e16c2
mov eax, dword [ebx]
push dword [ecx + 4]
mov ecx, ebx
call dword [eax]
xor esi, esi
mov dword [ebp - 0x2508], 0
xor eax, eax
mov dword [ebp - 0x2530], esi
mov dword [ebp - 0x254c], esi
mov dword [ebp - 0x2548], eax
mov dword [ebp - 0x2510], eax
mov dword [ebp - 0x2544], eax
mov byte [ebp - 4], 8
nop dword [eax]
nop word [eax + eax]
lea eax, [ebp - 0x2538]
mov dword [ebp - 0x2538], 0
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov dword [ebp - 0x251c], eax
test ebx, ebx
je 0x4e1757
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x54], 9
test ecx, ecx
je 0x4e1749
mov edx, dword [ecx]
push eax
push dword [ebp - 0x251c]
push 9
push dword [ebx + 8]
call dword [edx]
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
mov eax, dword [ebp - 0x251c]
test eax, eax
je 0x4e1915
xor eax, eax
cmp eax, dword [ebp - 0x2538]
sbb eax, eax
neg eax
mov dword [ebp - 0x251c], eax
test ebx, ebx
je 0x4e17aa
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x54], 0xb
test ecx, ecx
je 0x4e179c
mov edx, dword [ecx]
push eax
push dword [ebp - 0x251c]
push 0xb
push dword [ebx + 8]
call dword [edx]
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
mov eax, dword [ebp - 0x251c]
test eax, eax
je 0x4e1915
mov eax, dword [ebp - 0x2548]
mov edx, eax
mov esi, dword [ebp - 0x2538]
mov ecx, dword [ebp - 0x2530]
inc esi
sub edx, ecx
mov byte [ebp - 0x2509], 0
cmp esi, edx
jae 0x4e17d9
lea eax, [ecx + esi]
jmp 0x4e1836
jbe 0x4e183c
mov eax, dword [ebp - 0x2510]
sub eax, ecx
cmp esi, eax
jbe 0x4e181a
lea eax, [ebp - 0x2509]
push eax
push esi
lea ecx, [ebp - 0x254c]
call fcn.00465a98
mov eax, dword [ebp - 0x2544]
mov esi, dword [ebp - 0x254c]
mov dword [ebp - 0x2510], eax
mov eax, dword [ebp - 0x2548]
mov dword [ebp - 0x2530], esi
jmp 0x4e1842
mov eax, dword [ebp - 0x2548]
sub esi, edx
push esi
push 0
push eax
call fcn.005713c0
mov eax, dword [ebp - 0x2548]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x2548], eax
mov esi, dword [ebp - 0x2530]
sub eax, esi
je 0x4e190f
lea eax, [ebp - 0x2518]
mov dword [ebp - 0x2518], 0
push eax
push dword [ebp - 0x2538]
push esi
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov dword [ebp - 0x251c], eax
test ebx, ebx
je 0x4e18a8
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x54], 0xc
test ecx, ecx
je 0x4e189a
mov edx, dword [ecx]
push eax
push dword [ebp - 0x251c]
push 0xc
push dword [ebx + 8]
call dword [edx]
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
mov eax, dword [ebp - 0x251c]
test eax, eax
je 0x4e1915
test ebx, ebx
je 0x4e18d3
mov ecx, dword [ebp - 0x2520]
mov eax, dword [ebx]
push dword [ecx + 4]
mov ecx, ebx
push dword [ebp - 0x2518]
push dword [ebp - 0x2508]
push esi
call dword [eax + 4]
mov eax, dword [ebp - 0x251c]
mov esi, dword [ebp - 0x2520]
mov edx, dword [ebp - 0x2508]
mov ecx, dword [ebp - 0x2538]
add edx, ecx
mov dword [ebp - 0x2508], edx
cmp dword [esi + 4], edx
mov esi, dword [ebp - 0x2530]
je 0x4e1902
test ecx, ecx
jne 0x4e1700
jmp 0x4e1915
mov eax, 1
mov dword [ebp - 0x251c], eax
jmp 0x4e1915
mov eax, dword [ebp - 0x251c]
mov ecx, dword [ebp - 0x2520]
test eax, eax
mov edx, dword [ebx]
setne al
movzx eax, al
push dword [ecx + 4]
mov ecx, ebx
push eax
call dword [edx + 8]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push dword [ebp - 0x251c]
mov ecx, ebx
push 0xd
call fcn.004e0330
mov ebx, dword [ebp - 0x251c]
test ebx, ebx
jne 0x4e198b
test esi, esi
je 0x4e13f8
mov ecx, dword [ebp - 0x2510]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x4e197c
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push ecx
push esi
call fcn.0056d0c8
add esp, 8
jmp 0x4e13f8
test esi, esi
je 0x4e19bf
mov ecx, dword [ebp - 0x2510]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x4e19b5
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push ecx
push esi
call fcn.0056d0c8
add esp, 8
mov ecx, dword [ebp - 0x2524]
test ecx, ecx
je 0x4e19f9
mov edx, dword [ebp - 0x2514]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x4e19ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x4e1a06
push edi
call esi
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x4e1a40
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1a36
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x2528]
mov dword [ebp - 0x6c], 7
test eax, eax
je 0x4e1a61
push eax
call esi
mov eax, dword [ebp - 0x252c]
test eax, eax
je 0x4e1a6e
push eax
call esi
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x4e1aa8
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1a9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x4e1afc
mov ecx, dword [ebp - 0x98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4e1af2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1b87
push edx
push ecx
call fcn.0056d0c8
add esp, 8
mov eax, ebx
jmp 0x4e1533
call fcn.00407541
call fcn.004072dc
push 0x630328
lea eax, [ebp - 0x2509]
push eax
call fcn.0057134b
push 0x630328
lea eax, [ebp - 0x2531]
push eax
call fcn.0057134b
call fcn.004072dc
push 0x630328
lea eax, [ebp - 0x253d]
push eax
call fcn.0057134b
push 0x630328
lea eax, [ebp - 0x253e]
push eax
call fcn.0057134b
call fcn.004072dc
push 0x630328
lea eax, [ebp - 0x2531]
push eax
call fcn.0057134b
push 0x630328
lea eax, [ebp - 0x2509]
push eax
call fcn.0057134b
call fcn.0057b201
call fcn.0057b201
call fcn.0057b201
int3