Function at 0x48ff09
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov dword [ebp - 0x14], 0x1001
mov dword [ebp - 0x48], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0
mov eax, dword [ebp + 8]
push eax
call sub.ntdll.dll_strlen
add esp, 4
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 1
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0
jne 0x48ff95
mov dword [ebp - 0x48], 0x13
jmp 0x4902c7
mov eax, dword [ebp - 0x10]
imul eax, eax, 3
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x58]
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x64], eax
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0
jne 0x48ffc5
mov dword [ebp - 0x48], 0x13
jmp 0x4902c2
mov eax, dword [ebp - 0x58]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0
jne 0x48ffec
mov dword [ebp - 0x48], 0x13
jmp 0x4902bd
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x10]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00409000
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x490027
mov edx, dword [ebp - 4]
mov al, byte [edx]
xor al, 0x4c
mov ecx, dword [ebp - 4]
mov byte [ecx], al
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x490006
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0048fbff
add esp, 0x10
mov dword [ebp - 0xc], eax
push str.info
mov ecx, dword [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call fcn.00409000
mov eax, dword [ebp - 0xc]
add eax, 6
cmp eax, dword [ebp - 0x58]
jle 0x49006b
mov dword [ebp - 0x48], 0xb
jmp 0x4902b8
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x18]
add eax, 5
push eax
call sub.ntdll.dll_memcpy
add esp, 0xc
mov ecx, dword [ebp - 0xc]
add ecx, 5
mov dword [ebp - 0xc], ecx
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x4900b6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], 5
jmp 0x4902b3
push 0
push 0
push 3
push 0
push 0
push 0x50
push str.qsys.f.360.cn
mov edx, dword [ebp - 0x54]
push edx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x4900ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], 8
jmp 0x4902ae
mov dword [ebp - 0x5c], 0x4400040
push 0
mov eax, dword [ebp - 0x5c]
push eax
push 0
push 0
push str.HTTP_1.0
push str._getfileinfo.php
push str.POST
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x490131
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], 9
jmp 0x4902a9
push 0xa0000000
push 0xd
push str.Accept:___r_n
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
test eax, eax
jne 0x49015d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], 0xc
jmp 0x4902a4
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
push 0x31
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x49018c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], 0xa
jmp 0x49029f
mov eax, 1
test eax, eax
je 0x4901d4
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x4901c1
mov dword [ebp - 0x48], 4
jmp 0x49029a
cmp dword [ebp - 8], 0
jne 0x4901c9
jmp 0x4901d4
mov edx, dword [ebp - 0x50]
add edx, dword [ebp - 8]
mov dword [ebp - 0x50], edx
jmp 0x49018c
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp + 0x10]
jge 0x4901e7
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0x50]
mov byte [ecx], 0
jmp 0x4901f3
mov dword [ebp - 0x48], 0xb
jmp 0x490295
lea edx, [ebp - 8]
push edx
push 0x20
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.WININET.dll_InternetReadFile]
cmp dword [ebp - 8], 0
je 0x490216
mov dword [ebp - 0x48], 0xb
jmp 0x490293
cmp dword [ebp - 0x54], 0
je 0x490226
mov edx, dword [ebp - 0x54]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - 0x20], 0
je 0x490236
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - 0x4c], 0
je 0x490246
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - 0x18], 0
je 0x49025e
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x6c]
push eax
call fcn.004a90a8
add esp, 4
cmp dword [ebp - 0x1c], 0
je 0x490276
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x70], ecx
mov edx, dword [ebp - 0x70]
push edx
call fcn.004a90a8
add esp, 4
cmp dword [ebp - 0x24], 0
je 0x49028e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.004a90a8
add esp, 4
mov eax, dword [ebp - 0x48]
jmp 0x4902cc
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
jmp 0x490216
mov esp, ebp
pop ebp
ret