Function at 0x401587
Capabilities:
Send data
Send http request

Disassembly:
jmp 0x40ff20
push 0xffffffffffffffff
push 0x41f183
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc10
push ebx
push esi
push edi
mov esi, ecx
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x41c]
xor ebx, ebx
rep stosd dword es:[edi], eax
mov ecx, pe_nt_image_headers32
lea edi, [esp + 0x1c]
rep stosd dword es:[edi], eax
push str.Content_Type:_application_x_www_form_urlencoded_r_n
lea ecx, [esp + 0x10]
mov dword [esp + 0xc28], ebx
mov dword [esp + 0x14], 0x425c94
mov dword [esp + 0x18], ebx
call sub.MFC42u.DLL_CString::CString_1
lea eax, [esp + 0x41c]
push 0x400
push eax
mov ecx, esi
mov byte [esp + 0xc2c], 1
call fcn.004015eb
push ebx
push ebx
lea ecx, [esp + 0x24]
push 0x400
or edi, 0xffffffff
push ecx
lea edx, [esp + 0x42c]
push edi
push edx
push ebx
push 0x3b5
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [esi + 0xea94]
push ebx
cmp eax, ebx
jne 0x40ffef
mov ecx, dword [esp + 0xc30]
mov edx, dword [esi + 0xea68]
lea eax, [esp + 0x14]
push 0x4400040
push eax
push ebx
push str.HTTP_1.0
push ecx
push str.POST
push edx
jmp 0x410015
mov eax, dword [esi + 0xea90]
mov edx, dword [esp + 0xc30]
lea ecx, [esp + 0x14]
push eax
mov eax, dword [esi + 0xea68]
push ecx
push ebx
push str.HTTP_1.0
push edx
push str.POST
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
cmp eax, ebx
mov dword [esi + 0xea6c], eax
je 0x41004f
push connect
push str.Accept:_image_gif__image_x_xbitmap__image_jpeg__image_pjpeg__application_x_shockwave_flash__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword____r_n
call dword [sym.imp.MSVCRT.dll_wcslen]
mov ecx, dword [esi + 0xea6c]
add esp, 4
push eax
push str.Accept:_image_gif__image_x_xbitmap__image_jpeg__image_pjpeg__application_x_shockwave_flash__application_vnd.ms_excel__application_vnd.ms_powerpoint__application_msword____r_n
push ecx
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
test eax, eax
jne 0x410085
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0xc]
mov dword [esi + 0xea84], eax
mov byte [esp + 0xc24], bl
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0xc2c]
mov dword [esp + 0xc24], edi
call sub.MFC42u.DLL_CString::CString
xor eax, eax
jmp 0x410140
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [esp + 0xc]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ebp
mov ebp, dword [edx - 8]
lea eax, [esp + 0x20]
push ecx
mov ecx, dword [esi + 0xea6c]
push eax
push ebp
push edx
push ecx
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
pop ebp
jne 0x410114
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
push ebx
lea edx, [esp + 0x1c]
push ebx
push edx
push 0x400
mov dword [esi + 0xea84], eax
call edi
push eax
push ebx
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [esp + 0xc]
mov byte [esp + 0xc24], bl
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0xc2c]
mov dword [esp + 0xc24], 0xffffffff
call sub.MFC42u.DLL_CString::CString
xor eax, eax
jmp 0x410140
lea ecx, [esp + 0xc]
mov byte [esp + 0xc24], bl
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0xc2c]
mov dword [esp + 0xc24], 0xffffffff
call sub.MFC42u.DLL_CString::CString
mov eax, 1
mov ecx, dword [esp + 0xc1c]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xc1c
ret 4