Function at 0x41f3fb
Capabilities:
Check http status code
Connect to http server
Create http request
Parse url
Read data from internet
Receive data
Resolve function by parsing pe exports
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x66dc
call fcn.005918e0
mov eax, dword [0x6c45ac]
xor eax, esp
mov dword [esp + 0x66d8], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
test ebx, ebx
je 0x41f50d
push dword [ebx + 0x10]
push 0x1a2
push str.CQhHttpTransfer::HttpThreadProc
push str.__s__d___HttpThreadProc::lpszUrl___s
call fcn.0040a649
push 8
xor edx, edx
lea edi, [esp + 0xac]
pop ecx
xor eax, eax
mov dword [esp + 0x28], edx
mov esi, 0x208
mov dword [esp + 0x30], edx
push esi
rep stosd dword es:[edi], eax
push edx
lea eax, [esp + 0x4d8]
mov dword [esp + 0x34], edx
push eax
mov dword [esp + 0x5c], edx
call fcn.005a88e0
add esp, 0x1c
lea eax, [esp + 0x2b8]
xor edi, edi
push esi
push edi
push eax
call fcn.005a88e0
add esp, 0xc
lea eax, [esp + 0x26d8]
push 0x2000
push edi
push eax
call fcn.005a88e0
add esp, 0xc
mov dword [esp + 0x38], edi
push dword [ebx + 0x10]
call fcn.005b93d0
pop ecx
push 0x3c
pop esi
push esi
lea eax, [esp + 0x48]
push edi
push eax
call fcn.005a88e0
lea eax, [esp + 0x2c4]
mov dword [esp + 0x50], esi
mov dword [esp + 0x60], eax
add esp, 0xc
lea eax, [esp + 0x26d8]
mov dword [esp + 0x58], 0x104
mov dword [esp + 0x70], eax
xor esi, esi
lea eax, [esp + 0x44]
mov dword [esp + 0x74], 0x1000
push eax
push esi
push dword [ebx + 0x10]
call fcn.005b93d0
pop ecx
push eax
push dword [ebx + 0x10]
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
jne 0x41f527
call dword [sym.imp.KERNEL32.dll_GetLastError]
or eax, 0xffffffff
mov ecx, dword [esp + 0x66e4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00590be8
mov esp, ebp
pop ebp
ret 4
cmp dword [esp + 0x50], 4
jne 0x41f538
mov dword [esp + 0x34], 1
jmp 0x41f543
cmp dword [esp + 0x50], 3
jne 0x41f50d
mov dword [esp + 0x34], esi
movzx edi, word [esp + 0x5c]
push esi
push esi
push esi
push esi
push 0x6284b4
mov dword [esp + 0x44], edi
call dword [sym.imp.WININET.dll_InternetOpenW]
mov esi, eax
mov dword [esp + 0x2c], esi
test esi, esi
jne 0x41f56d
push 0xfffffffffffffffd
pop esi
jmp 0x41fa94
xor eax, eax
push eax
push eax
push 3
push eax
push eax
push edi
lea eax, [esp + 0x2d0]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetConnectW]
mov esi, eax
mov dword [esp + 0x28], esi
test esi, esi
je 0x41fad3
cmp dword [ebx + 0x70], 1
jne 0x41f5a0
mov eax, str.POST
jmp 0x41f5bc
cmp dword [ebx + 0x70], 2
je 0x41f5b7
cmp dword [ebx + 0x20], 0
jbe 0x41f5b7
cmp dword [ebx + 0x1c], 0
mov eax, str.POST
jne 0x41f5bc
mov eax, 0x62acf4
push eax
lea eax, [esp + 0x9c]
push eax
call fcn.005b9a4c
cmp dword [ebx + 0x78], 0
mov edx, 0x800c8200
mov eax, 0x80048200
pop ecx
cmove edx, eax
cmp dword [esp + 0x38], 0
pop ecx
je 0x41f5fb
mov ecx, ebx
or edx, 0x800000
call fcn.0041ee85
test eax, eax
jne 0x41f5fb
or edx, 0x1000
push 0
push edx
push 0
push 0
push str.HTTP_1.0
lea eax, [esp + 0x26ec]
push eax
lea eax, [esp + 0xb0]
push eax
push esi
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov edi, eax
test edi, edi
je 0x41face
lea eax, [esp + 0x4c0]
push str.Accept:___r_nUser_Agent:_Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__r_nConnection:close_r_n
push eax
call fcn.0041fffa
pop ecx
pop ecx
push 0xa0000000
push 0xffffffffffffffff
lea eax, [esp + 0x4c8]
push eax
push edi
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
mov esi, dword [ebx + 0x24]
jmp 0x41f6a9
and dword [esp + 0x90], 0
lea ecx, [esp + 0x80]
and dword [esp + 0x94], 0
push esi
call fcn.00404267
cmp dword [esp + 0x94], 0x10
lea eax, [esp + 0x80]
push 0x20000000
cmovae eax, dword [esp + 0x84]
push 0xffffffffffffffff
push eax
push edi
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
lea ecx, [esp + 0x80]
call fcn.00404812
add esi, 0x18
cmp esi, dword [ebx + 0x28]
jne 0x41f657
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x18], 4
mov dword [esp + 0x20], eax
xor esi, esi
lea eax, [esp + 0x18]
mov dword [esp + 0x10], esi
push eax
lea eax, [esp + 0x14]
push eax
push 0x1f
push edi
call dword [sym.imp.WININET.dll_InternetQueryOptionW]
or dword [esp + 0x10], 0x3180
lea eax, [esp + 0x10]
push 4
push eax
push 0x1f
push edi
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push dword [ebx + 0x20]
push dword [ebx + 0x1c]
push esi
push esi
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestW]
mov esi, eax
test esi, esi
jne 0x41f752
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x2f0d
jne 0x41f752
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 4
push eax
lea eax, [esp + 0x18]
push eax
push 0x1f
push edi
call dword [sym.imp.WININET.dll_InternetQueryOptionW]
or dword [esp + 0x14], 0x100
lea eax, [esp + 0x14]
push 4
push eax
push 0x1f
push edi
call dword [sym.imp.WININET.dll_InternetSetOptionW]
mov eax, dword [esp + 0x20]
cmp eax, 2
jl 0x41f6b2
push 0
push dword [ebx + 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x41fa60
test esi, esi
je 0x41f9b3
push 0x200
lea eax, [esp + 0xbc]
push 0
push eax
call fcn.005a88e0
add esp, 0xc
mov dword [esp + 0x3c], 0x100
xor esi, esi
lea eax, [esp + 0x3c]
and dword [esp + 0x18], esi
push esi
push eax
lea eax, [esp + 0xc0]
push eax
push 0x13
push edi
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x41f7bd
lea eax, [esp + 0xb8]
push eax
call fcn.005b8d95
pop ecx
mov esi, eax
cmp esi, 0xc8
je 0x41f850
cmp esi, 0x197
je 0x41f7dd
cmp esi, 0x193
jne 0x41fa64
cmp dword [esp + 0x38], 0
jne 0x41fa64
call fcn.0041fafb
test al, al
je 0x41fa64
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call esi
mov eax, dword [esp + 0x28]
test eax, eax
je 0x41f809
push eax
call esi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], 1
test eax, eax
je 0x41f81c
push eax
call esi
xor ecx, ecx
push ecx
push ecx
push 3
push ecx
push ecx
push dword [esp + 0x44]
mov eax, ecx
lea ecx, [esp + 0x2d0]
push ecx
push eax
mov dword [esp + 0x4c], eax
call dword [sym.imp.WININET.dll_InternetConnectW]
mov esi, eax
mov dword [esp + 0x28], esi
test esi, esi
jne 0x41f593
jmp 0x41fad7
push 0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0xc0]
push eax
push 5
push edi
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x41f880
lea eax, [esp + 0xb8]
push eax
call fcn.005b8d95
pop ecx
mov dword [esp + 0x18], eax
jmp 0x41f886
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
push ecx
mov ecx, esp
lea eax, [ebx + 0x30]
push ecx
push eax
mov dword [esp + 0x40], ecx
call fcn.0041fde5
lea edx, [ebx + 0x38]
mov ecx, edi
call fcn.0041f22a
xor esi, esi
lea eax, [esp + 0x46e0]
and dword [esp + 0x1c], esi
push 0x2001
push esi
push eax
call fcn.005a88e0
add esp, 0x14
push 0x2001
lea eax, [esp + 0x46dc]
push 0
push eax
call fcn.005a88e0
and dword [esp + 0x1c], 0
lea eax, [esp + 0x1c]
add esp, 0xc
push eax
push 0x2000
lea eax, [esp + 0x46e0]
push eax
push edi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x41f95c
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x14]
push eax
push esi
call fcn.005bb5b4
push dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov esi, eax
lea eax, [esp + 0x46e4]
add ecx, esi
push eax
push ecx
call fcn.005a8a40
mov eax, dword [esp + 0x28]
add esp, 0x14
add eax, dword [esp + 0x10]
mov dword [esp + 0x14], eax
cmp eax, 0x500000
jbe 0x41f93f
push dword [ebx + 8]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0
push dword [ebx + 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x41faac
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x41f97a
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x41fab8
mov eax, dword [esp + 0x14]
cmp eax, ecx
jne 0x41fab8
xor ecx, ecx
mov dword [esp + 0x10], ecx
test ecx, ecx
jne 0x41f8be
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x41f995
push dword [ebx + 0x18]
push eax
push esi
push 0xc8
call ecx
mov dword [esp + 0x40], 1
test esi, esi
je 0x41f9ab
push 0
push esi
call fcn.005bb5b4
pop ecx
pop ecx
mov dword [esp + 0x1c], 0xc8
push 0x1001
lea eax, [esp + 0x6cc]
push 0
push eax
call fcn.005a88e0
mov esi, dword [sym.imp.WININET.dll_HttpQueryInfoA]
lea eax, [esp + 0x30]
add esp, 0xc
mov dword [esp + 0x24], 0x1000
push 0
push eax
lea eax, [esp + 0x6d0]
push eax
push reloc.WLDAP32.dll_Ordinal_22
push edi
call esi
lea eax, [esp + 0x6c8]
push eax
call fcn.005acdf0
pop ecx
push eax
lea eax, [esp + 0x6cc]
push eax
lea ecx, [ebx + 0x40]
call fcn.0040464f
push 0x1001
lea eax, [esp + 0x16d4]
push 0
push eax
call fcn.005a88e0
add esp, 0xc
mov dword [esp + 0x24], 0x1000
lea eax, [esp + 0x24]
push 0
push eax
lea eax, [esp + 0x16d8]
push eax
push 0x16
push edi
call esi
lea eax, [esp + 0x16d0]
push eax
call fcn.005acdf0
pop ecx
push eax
lea eax, [esp + 0x16d4]
push eax
lea ecx, [ebx + 0x58]
call fcn.0040464f
mov esi, dword [esp + 0x1c]
test edi, edi
je 0x41fa6f
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [esp + 0x28]
test eax, eax
je 0x41fa7e
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x41fa8d
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [esp + 0x40], 0
jne 0x41faa5
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x41faa5
push dword [ebx + 0x18]
push 0
push 0
push esi
call ecx
mov eax, esi
jmp 0x41f510
push 0
push esi
call fcn.005bb5b4
pop ecx
pop ecx
jmp 0x41fa60
push 0xfffffffffffffffa
pop eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
test esi, esi
jne 0x41faac
push 0xfffffffffffffffa
pop esi
jmp 0x41fa64
push 0xfffffffffffffffb
pop esi
jmp 0x41fa6f
mov edi, dword [esp + 0x18]
push 0xfffffffffffffffc
jmp 0x41facb