Function at 0x4a9bc4
Capabilities:
Create http request

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x18
push 0
push 0
dec ecx
jne 0x4a9bcd
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x30], ecx
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x28], eax
xor eax, eax
push ebp
push 0x4aa5f7
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x34], 0x80004005
mov eax, dword [ebp - 0x30]
mov byte [eax], 0
xor ecx, ecx
push ebp
push 0x4aa58f
push dword fs:[ecx]
mov dword fs:[ecx], esp
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
call fcn.00406f68
mov byte [ebp - 0x35], 0
mov edx, dword [ebp - 4]
mov eax, 0x4aa618
call fcn.00407efc
test eax, eax
jle 0x4a9c79
xor eax, eax
push ebp
push 0x4a9c6f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 4]
mov ecx, 0
call fcn.0040763c
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x10]
mov dl, 1
call fcn.0047bc74
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.0041b6b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a9c79
cmp byte [0x4b9310], 0
jne 0x4a9c8f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aa599
xor eax, eax
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x36], 0
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.00406f68
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa628
call fcn.00407efc
dec eax
je 0x4a9ce3
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa63c
call fcn.00407efc
dec eax
je 0x4a9ce3
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa650
call fcn.00407efc
dec eax
je 0x4a9ce3
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa668
call fcn.00407efc
dec eax
jne 0x4a9d27
mov byte [ebp - 0x35], 1
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4a9cf3
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x60]
push eax
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa684
call fcn.00407efc
mov edx, eax
inc edx
mov ecx, ebx
mov eax, dword [ebp - 0x10]
call fcn.00407d50
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.0041b9f4
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x10]
call fcn.00406f68
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x10]
call fcn.0041b6b8
mov edx, dword [ebp - 0x64]
mov eax, 0x4aa694
call fcn.00407efc
test eax, eax
jne 0x4a9d75
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa6a4
call fcn.00407efc
dec eax
jne 0x4a9d65
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4aa6b8
call fcn.00407be0
jmp 0x4a9d75
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4aa6d0
call fcn.00407be0
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0x10]
call fcn.0041b6b8
mov edx, dword [ebp - 0x68]
mov eax, 0x4aa6ec
call fcn.00407efc
dec eax
je 0x4a9df0
cmp byte [ebp + 0xc], 0
je 0x4a9df0
lea eax, [ebp - 0x74]
push eax
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa694
call fcn.00407efc
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00407d50
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x70]
call fcn.0041b6b8
mov ecx, dword [ebp - 0x70]
lea eax, [ebp - 0x6c]
mov edx, 0x4aa704
call fcn.00407be0
mov edx, dword [ebp - 0x6c]
mov eax, 0x80000000
call fcn.0045a858
test al, al
je 0x4a9df0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aa599
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.004aa904
test al, al
jne 0x4a9e11
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 4]
call fcn.00406f68
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 0x14]
call fcn.0041b8f4
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x14]
call fcn.00406f68
mov bl, 1
cmp dword [ebp - 0x14], 0
je 0x4a9e80
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4a9e3b
sub eax, 4
mov eax, dword [eax]
mov edx, eax
test edx, edx
jle 0x4a9e80
mov esi, 1
mov eax, dword [ebp - 0x14]
movzx eax, word [eax + esi*2 - 2]
cmp ax, 0x61
jb 0x4a9e5a
cmp ax, 0x7a
jbe 0x4a9e7c
cmp ax, 0x30
jb 0x4a9e66
cmp ax, 0x39
jbe 0x4a9e7c
cmp ax, 0x2e
je 0x4a9e7c
cmp ax, 0x2d
je 0x4a9e7c
cmp ax, 0x5f
je 0x4a9e7c
xor ebx, ebx
jmp 0x4a9e80
inc esi
dec edx
jne 0x4a9e46
test bl, bl
je 0x4a9f2c
xor esi, esi
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.00406f68
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa738
call fcn.00407efc
dec eax
jne 0x4a9ea9
mov al, 1
jmp 0x4a9ed8
mov edi, dword [ebp - 0x10]
test edi, edi
je 0x4a9eb5
sub edi, 4
mov edi, dword [edi]
lea eax, [ebp - 0x7c]
push eax
mov ecx, 1
mov edx, edi
mov eax, dword [ebp - 0x10]
call fcn.00407d50
mov eax, dword [ebp - 0x7c]
mov edx, 0x4aa738
call fcn.00407d18
sete al
test al, al
je 0x4a9ee0
xor ebx, ebx
jmp 0x4a9f2c
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.00406f68
jmp 0x4a9f18
inc esi
mov edi, dword [ebp - 0x10]
test edi, edi
je 0x4a9efa
sub edi, 4
mov edi, dword [edi]
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa738
call fcn.00407efc
mov edx, eax
inc edx
mov ecx, edi
mov eax, dword [ebp - 0x10]
call fcn.00407d50
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa738
call fcn.00407efc
test eax, eax
jg 0x4a9eed
mov dword [ebp - 0x3c], esi
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0041b6b8
mov edx, dword [ebp - 0x80]
mov eax, 0x4aa748
call fcn.00407efc
dec eax
jne 0x4a9fc1
test bl, bl
je 0x4a9fc1
cmp dword [ebp - 0x3c], 1
jne 0x4a9fc1
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 4]
call fcn.0041b6b8
mov esi, dword [ebp - 4]
test esi, esi
je 0x4a9f68
sub esi, 4
mov esi, dword [esi]
push 0x4aa760
lea eax, [ebp - 0x88]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x4aa738
call fcn.00407efc
mov edx, eax
inc edx
mov ecx, esi
mov eax, dword [ebp - 0x24]
call fcn.00407d50
push dword [ebp - 0x88]
push 0x4aa760
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00407c68
mov eax, dword [ebp - 0x84]
mov edx, 0x4aa770
call fcn.00407efc
test eax, eax
jne 0x4a9fc1
mov byte [ebp - 0x35], 1
xor ecx, ecx
push ebp
push 0x4aa57b
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov edx, dword [ebp - 4]
mov eax, 0x4aa628
call fcn.00407efc
dec eax
je 0x4aa00f
mov edx, dword [ebp - 4]
mov eax, 0x4aa63c
call fcn.00407efc
dec eax
je 0x4aa00f
mov edx, dword [ebp - 4]
mov eax, 0x4aa650
call fcn.00407efc
dec eax
je 0x4aa00f
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa668
call fcn.00407efc
dec eax
jne 0x4aa05b
mov esi, dword [ebp - 4]
test esi, esi
je 0x4aa01b
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x90]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x4aa684
call fcn.00407efc
mov edx, eax
inc edx
mov ecx, esi
mov eax, dword [ebp - 4]
call fcn.00407d50
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x8c]
call fcn.0041b9f4
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 4]
call fcn.00406f68
cmp byte [ebp - 0x35], 0
jne 0x4aa068
mov eax, ebx
xor al, 1
mov byte [ebp - 0x35], al
test bl, bl
je 0x4aa078
cmp dword [ebp - 0x3c], 0
jle 0x4aa078
cmp byte [ebp - 0x35], 0
je 0x4aa083
lea eax, [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00406f68
mov byte [ebp - 0x36], 0
cmp byte [ebp - 0x35], 0
jne 0x4aa2c9
test bl, bl
je 0x4aa11c
cmp dword [ebp - 0x3c], 1
jl 0x4aa11c
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.00406f68
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 0x10]
call fcn.0041b6b8
mov edx, dword [ebp - 0x94]
mov eax, 0x4aa7c4
call fcn.00407efc
dec eax
jle 0x4aa0d8
lea eax, [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00406f68
jmp 0x4aa10a
mov edx, dword [ebp - 4]
mov eax, 0x4aa6a4
call fcn.00407efc
dec eax
jne 0x4aa0fa
lea eax, [ebp - 8]
mov ecx, dword [ebp - 4]
mov edx, 0x4aa6b8
call fcn.00407be0
jmp 0x4aa10a
lea eax, [ebp - 8]
mov ecx, dword [ebp - 4]
mov edx, 0x4aa6d0
call fcn.00407be0
call fcn.004062ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aa599
cmp byte [ebp - 0x36], 0
jne 0x4aa2c9
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.00406f68
lea eax, [ebp - 0xc]
call fcn.00406b40
mov byte [ebp - 0x36], 1
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x10]
call fcn.0041b6b8
mov edx, dword [ebp - 0x98]
mov eax, 0x4aa6d0
call fcn.00407efc
dec eax
je 0x4aa190
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa6a4
call fcn.00407efc
dec eax
jne 0x4aa180
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4aa6b8
call fcn.00407be0
jmp 0x4aa190
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4aa6d0
call fcn.00407be0
cmp byte [ebp + 0xc], 0
je 0x4aa1b8
test bl, bl
je 0x4aa1af
cmp dword [ebp - 0x3c], 0
jle 0x4aa1af
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x10]
call fcn.00406f68
mov byte [ebp - 0x36], 0
mov byte [ebp - 0x29], 0
jmp 0x4aa2c9
push 0
push 0
push 0
push 0
push 0x4aa7cc
call sub.wininet.dll_InternetOpenW
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4aa2c9
xor eax, eax
push ebp
push 0x4aa2c2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x420f200
push 0
push 0
mov eax, dword [ebp - 0x10]
call fcn.00407984
push eax
mov eax, dword [ebp - 0x4c]
push eax
call sub.wininet.dll_InternetOpenUrlW
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x4aa26c
call sub.kernel32.dll_GetLastError_2
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x2ee7
je 0x4aa2ab
push 0x4aa7e8
lea eax, [ebp - 0xa0]
call fcn.0045c830
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.00423210
push dword [ebp - 0x9c]
push dword [0x4b930c]
push 0x4aa804
push dword [ebp - 0x10]
lea eax, [ebp - 8]
mov edx, 5
call fcn.00407c68
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x36], 0
jmp 0x4aa2ab
xor eax, eax
push ebp
push 0x4aa2a4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x10]
call fcn.00406f68
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x36], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4aa2ab
mov eax, dword [ebp - 0x50]
push eax
call sub.wininet.dll_InternetCloseHandle
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4aa2c9
mov eax, dword [ebp - 0x4c]
push eax
call sub.wininet.dll_InternetCloseHandle
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4aa585
movzx eax, byte [ebp - 0x36]
or al, byte [ebp - 0x35]
je 0x4aa430
lea edx, [ebp - 0xa4]
mov eax, dword [ebp - 4]
call fcn.0041b9f4
cmp dword [ebp - 0xa4], 0
je 0x4aa430
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 4]
call fcn.0041b6b8
mov edx, dword [ebp - 0xa8]
mov eax, 0x4aa6d0
call fcn.00407efc
dec eax
jne 0x4aa35c
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4aa32b
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 4]
call fcn.0041b6b8
mov edx, dword [ebp - 0xac]
mov eax, 0x4aa6d0
call fcn.00407efc
mov edx, eax
add edx, 7
mov ecx, ebx
mov eax, dword [ebp - 4]
call fcn.00407d50
mov edx, dword [ebp - 4]
mov eax, edx
test eax, eax
je 0x4aa36a
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0x4aa3b9
mov eax, edx
test eax, eax
je 0x4aa379
sub eax, 4
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
cmp word [ecx + eax*2 - 2], 0x5c
jne 0x4aa388
mov al, 1
jmp 0x4aa39f
mov eax, edx
test eax, eax
je 0x4aa393
sub eax, 4
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
cmp word [ecx + eax*2 - 2], 0x2f
sete al
test al, al
je 0x4aa3b9
mov eax, edx
test eax, eax
je 0x4aa3ae
sub eax, 4
mov eax, dword [eax]
mov edx, eax
dec edx
lea eax, [ebp - 4]
call fcn.00407b08
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 4]
call fcn.0040a7fc
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0xb0]
call fcn.0047bafc
mov edx, dword [ebp - 0xb0]
lea eax, [ebp - 4]
call fcn.00406f68
lea ecx, [ebp - 0xb8]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
call fcn.0047eb38
mov edx, dword [ebp - 0xb8]
lea eax, [ebp - 8]
call fcn.00406f68
movzx eax, byte [0x4aa824]
push eax
lea eax, [ebp - 8]
push eax
mov eax, dword [0x4b956c]
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
mov edx, 0x4aa834
call fcn.004235e8
mov eax, dword [ebp - 0x30]
mov byte [eax], 1
jmp 0x4aa556
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.0041b6b8
mov edx, dword [ebp - 0xbc]
mov eax, 0x4aa694
call fcn.00407efc
test eax, eax
jne 0x4aa484
mov edx, dword [ebp - 8]
mov eax, 0x4aa6a4
call fcn.00407efc
dec eax
jne 0x4aa474
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, 0x4aa6b8
call fcn.00407be0
jmp 0x4aa484
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, 0x4aa6d0
call fcn.00407be0
cmp byte [ebp - 0x29], 0
je 0x4aa556
cmp byte [ebp + 0xc], 0
jne 0x4aa556
push 0
push 0
push 0
push 0
push 0x4aa7cc
call sub.wininet.dll_InternetOpenW
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4aa556
xor eax, eax
push ebp
push 0x4aa54f
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x420f200
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.00407984
push eax
mov eax, dword [ebp - 0x4c]
push eax
call sub.wininet.dll_InternetOpenUrlW
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x4aa52f
push 0x4aa7e8
lea eax, [ebp - 0xc4]
call fcn.0045c830
mov eax, dword [ebp - 0xc4]
lea edx, [ebp - 0xc0]
call fcn.00423210
push dword [ebp - 0xc0]
push dword [0x4b930c]
push 0x4aa804
push dword [ebp - 8]
lea eax, [ebp - 8]
mov edx, 5
call fcn.00407c68
jmp 0x4aa538
mov eax, dword [ebp - 0x50]
push eax
call sub.wininet.dll_InternetCloseHandle
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4aa556
mov eax, dword [ebp - 0x4c]
push eax
call sub.wininet.dll_InternetCloseHandle
ret
lea ecx, [ebp - 0xc8]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
call fcn.0047eb38
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x28]
call fcn.00406f20
xor eax, eax
mov dword [ebp - 0x34], eax
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4aa5fe
lea eax, [ebp - 0xc8]
mov edx, 5
call fcn.00406ba0
lea eax, [ebp - 0xb4]
call fcn.00406b64
lea eax, [ebp - 0xb0]
mov edx, 0x16
call fcn.00406ba0
lea eax, [ebp - 0x58]
call fcn.00406b64
lea eax, [ebp - 0x24]
call fcn.00406b40
lea eax, [ebp - 0x20]
call fcn.0040a1a4
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.00406ba0
ret