Function at 0x1002dea0
Capabilities:
Check http status code
Connect to http server
Create http request
Print debug messages
Query remote server for available data
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100909b0
push 0x1005aa50
mov eax, dword fs:[0]
push eax
sub esp, 0x64c
mov eax, dword [0x1009cbc0]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, ecx
mov dword [ebp - 0x654], esi
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x65c], str.application_x_www_form_urlencoded
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x650], 4
mov dword [ebp - 0x638], 0
xor eax, eax
mov word [ebp - 0x634], ax
push 0x40e
push eax
lea eax, [ebp - 0x632]
push eax
call fcn.10055aa0
mov byte [ebp - 0x224], 0
push 0x207
push 0
lea eax, [ebp - 0x223]
push eax
call fcn.10055aa0
add esp, 0x18
mov dword [ebp - 0x64c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
push 0
push 0
push 0
push 0
lea eax, [esi + 0x208]
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov edi, eax
mov dword [ebp - 0x648], edi
test edi, edi
jne 0x1002e059
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
jne 0x1002dfe2
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x1002e03e
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002e01d
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostLicenseEx
push 1
mov edx, 0xbaf
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002e035
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
lea eax, [ebx + 0x1e]
jmp 0x1002e5b7
push 0
push 0
push 3
push 0
push 0
push 0x1bb
push str.stats.mbamupdates.com
push edi
call dword [sym.imp.WININET.dll_InternetConnectW]
mov ebx, eax
mov dword [ebp - 0x644], ebx
test ebx, ebx
jne 0x1002e0e8
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002dfc8
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002e01d
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostLicenseEx
push 1
mov edx, 0xbb5
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002e035
push 0
push 0x800000
lea eax, [ebp - 0x65c]
push eax
push 0
push 0
push str._v1_collection_license
push str.POST
push ebx
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov esi, eax
mov dword [ebp - 0x63c], esi
test esi, esi
jne 0x1002e17f
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002dfc8
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002e01d
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostLicenseEx
push 1
mov edx, 0xbbb
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002e035
push 0x20000000
push 0xffffffffffffffff
push str.Content_Type:_application_x_www_form_urlencoded_r_n
push esi
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
test eax, eax
jne 0x1002e1fe
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002dfc8
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002e01d
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostLicenseEx
push 1
mov edx, 0xbbe
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002e035
mov ecx, dword [ebp - 0x654]
lea eax, [ecx + 0xa28]
push eax
lea eax, [ecx + 0x820]
push eax
lea eax, [ecx + 0x618]
push eax
push str.uuid_skey_sid_s_r_n
lea eax, [ebp - 0x634]
push eax
call fcn.10004ef0
add esp, 0x14
lea ecx, [ebp - 0x634]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002e236
sub ecx, edx
sar ecx, 1
push 0xffffffffffffffff
lea eax, [ebp - 0x634]
push eax
lea eax, [ecx + 1]
push eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x64c]
push eax
call fcn.10052d14
add esp, 0x14
test eax, eax
je 0x1002e316
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
jne 0x1002e2a0
push str.Memory_allocation_error_in_log_file_n
call fcn.10052604
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x1002e2fc
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002e2db
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostLicenseEx
push 1
mov edx, 0xbc4
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002e2f3
push str.Error__d_in_swprintf_s_n
call fcn.10052604
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.10052152
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
mov eax, edi
jmp 0x1002e5b7
push 0x208
lea eax, [ebp - 0x224]
push eax
call fcn.10053a0a
add esp, 8
push eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x1002e3a9
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002dfc8
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002e01d
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostLicenseEx
push 1
mov edx, 0xbc8
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002e035
push 0
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x640]
push eax
push 0x20000013
push esi
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x1002e431
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.1005218a
add esp, 4
mov esi, eax
test esi, esi
je 0x1002dfc8
push 0x100865c0
push 0xffff
push esi
call fcn.10052136
add esp, 0xc
push edi
test eax, eax
jle 0x1002e01d
mov byte [esi + 0xffff], 0
push esi
push str.MbaePostLicenseEx
push 1
mov edx, 0xbcb
mov ecx, str...StandAloneSvcExploitFiles.cpp
call fcn.10001cf0
add esp, 0x10
jmp 0x1002e035
cmp dword [ebp - 0x640], 0xc8
je 0x1002e4c5
push 0
push 0
lea eax, [ebp - 0x638]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
test eax, eax
je 0x1002e4a2
lea eax, [ebp - 0x638]
push eax
push 0x104
lea eax, [ebp - 0x224]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1002e4a2
cmp dword [ebp - 0x638], 0
jbe 0x1002e4a2
push 0xffffffffffffffff
lea eax, [ebp - 0x224]
push eax
push 0x208
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x64c]
push eax
call fcn.1005410f
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x1009cbc0
call fcn.10062b20
add esp, 0xc
lea eax, [esi + 0x1e]
jmp 0x1002e5b7
mov dword [ebp - 4], 0
call fcn.1002e4f1
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x1002e5b7
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1005132c
mov esp, ebp
pop ebp
ret