Function at 0x4932e0
Capabilities:
Check if file exists
Connect to http server
Create http request
Parse url
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dff3d
mov eax, dword fs:[0]
push eax
sub esp, 0x90
push ebx
push esi
push edi
mov eax, dword [0x50b0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x2c], ebx
lea eax, [ebx + 0x20]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x38], eax
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x4934bb
mov eax, dword [ebx + 0x24]
lea ecx, [ebx + 0x24]
mov dword [ebp - 0x34], ecx
cmp dword [eax - 0xc], 0
jne 0x493344
push 3
push 0x4f6350
call fcn.00409c60
call fcn.0040a050
mov ecx, eax
test ecx, ecx
je 0x493d49
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x28], edi
mov dword [ebp - 4], 0
call fcn.0040a050
mov ecx, eax
test ecx, ecx
je 0x493d53
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 1
xorps xmm0, xmm0
movlpd qword [ebp - 0x94], xmm0
mov ecx, 1
mov dword [ebp - 0x8c], 0
movlpd qword [ebp - 0x80], xmm0
movlpd qword [ebp - 0x78], xmm0
mov dword [ebp - 0x70], 0
movlpd qword [ebp - 0x64], xmm0
mov dword [ebp - 0x98], 0x3c
mov eax, dword [edi - 8]
sub ecx, dword [edi - 4]
sub eax, 0x104
or eax, ecx
jge 0x4933dc
push 0x104
lea ecx, [ebp - 0x28]
call fcn.00409bc0
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x88], edi
mov ecx, 1
mov dword [ebp - 0x84], 0x104
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, 0x400
or eax, ecx
jge 0x493410
push 0x400
lea ecx, [ebp - 0x24]
call fcn.00409bc0
mov esi, dword [ebp - 0x24]
lea eax, [ebp - 0x98]
mov dword [ebp - 0x6c], esi
push eax
push 0
push 0
push dword [ebx + 0x20]
mov dword [ebp - 0x68], 0x400
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
push dword [edi - 8]
mov dword [ebp - 0x1c], eax
push edi
call fcn.004b30c6
add esp, 8
test eax, eax
js 0x493d3f
cmp eax, dword [edi - 8]
jg 0x493d3f
mov dword [edi - 0xc], eax
xor ecx, ecx
mov word [edi + eax*2], cx
push dword [esi - 8]
push esi
call fcn.004b30c6
add esp, 8
test eax, eax
js 0x493d3f
cmp eax, dword [esi - 8]
jg 0x493d3f
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
cmp dword [ebp - 0x1c], ecx
jne 0x4934e6
mov byte [ebp - 4], cl
or ebx, 0xffffffff
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49349f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4934bb
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
movq qword [eax], xmm0
mov dword [eax], 0
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
push 0
push 0
push 0
push dword [ebx + 0x18]
call dword [sym.imp.WININET.dll_InternetOpenW]
mov ecx, eax
mov dword [ebp - 0x30], ecx
test ecx, ecx
jne 0x493505
mov byte [ebp - 4], al
jmp 0x493485
mov eax, dword [ebx + 0x1c]
xorps xmm0, xmm0
movlpd qword [ebp - 0x50], xmm0
or ebx, 0xffffffff
cmp dword [eax - 0xc], 0
jne 0x49356e
cmp dword [0x50be74], ebx
jne 0x49355d
push ecx
lea ecx, [ebp - 0x1c]
call fcn.0047ec40
add esp, 4
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edx, dword [ebp - 0x1c]
neg eax
sbb eax, eax
add edx, 0xfffffff0
neg eax
mov dword [0x50be74], eax
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49355a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x30]
xor eax, eax
cmp dword [0x50be74], 1
setne al
mov dword [ebp - 0x54], eax
jmp 0x493578
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], 3
push 0xc
lea eax, [ebp - 0x54]
push eax
push 0x26
push ecx
call dword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
jne 0x4935d2
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4935a6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4935c2
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x30]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
jmp 0x4934bb
push 8
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 1
push eax
push 0x32
push 0
mov dword [ebp - 0x58], 0
call dword [sym.imp.WININET.dll_InternetSetOptionW]
mov eax, dword [ebp - 0x2c]
add eax, 0x40
cmp dword [eax], 0xffffffff
je 0x49360a
mov ecx, dword [ebp - 0x30]
push 4
push eax
push 2
push ecx
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push 1
push 0
push 3
push 0
push 0
push dword [ebp - 0x80]
push edi
push dword [ebp - 0x30]
call dword [sym.imp.WININET.dll_InternetConnectW]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x49358b
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 5
jle 0x493729
mov ecx, dword [ecx - 0x10]
test ecx, ecx
je 0x493657
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
je 0x493657
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
jmp 0x493675
call fcn.0040a050
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
test ecx, ecx
je 0x493d62
test eax, eax
je 0x493d3f
mov eax, dword [ecx]
push 2
push 5
call dword [eax]
test eax, eax
je 0x493d5d
add eax, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [eax - 8], 5
jl 0x493d3f
xor ecx, ecx
mov dword [eax - 0xc], 5
mov word [eax + 0xa], cx
test eax, eax
jne 0x4936c3
call fcn.004abdfd
mov dword [eax], 0x16
call fcn.004abcff
mov eax, dword [ebp - 0x1c]
jmp 0x4936d6
mov ecx, dword [ebp - 0x18]
movq xmm0, qword [ecx]
movq qword [eax], xmm0
mov cx, word [ecx + 8]
mov word [eax + 8], cx
mov dword [ebp - 0x44], 5
mov edx, 0x4f65f4
mov ecx, eax
mov di, word [ecx]
cmp di, word [edx]
mov edi, dword [ebp - 0x28]
jne 0x493717
cmp word [ecx], 0
je 0x493713
mov si, word [ecx + 2]
cmp si, word [edx + 2]
mov word [ebp - 0x1e], si
mov esi, dword [ebp - 0x24]
jne 0x493717
add ecx, 4
add edx, 4
cmp word [ebp - 0x1e], 0
jne 0x4936e4
xor ecx, ecx
jmp 0x49371c
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x49372c
mov dword [ebp - 0x18], 1
jmp 0x493733
mov eax, dword [ebp + 8]
mov dword [ebp - 0x18], 0
test byte [ebp - 0x44], 1
je 0x493750
lea edx, [eax - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x493750
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x18], 0
mov ecx, 0xc81000
push 1
mov eax, 0x680000
cmovne eax, ecx
push eax
mov eax, dword [ebp - 0x34]
push 0
push 0
push 0
push esi
push dword [eax]
push dword [ebp - 0x3c]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x4937cb
mov byte [ebp - 4], al
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49379a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4937b6
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x3c]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push dword [ebp - 0x30]
call esi
jmp 0x4934bb
call fcn.0040a050
mov ecx, eax
test ecx, ecx
je 0x493d62
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], esi
mov eax, dword [eax + 0x28]
mov edi, dword [eax]
mov dword [ebp - 0x1c], edi
cmp edi, eax
je 0x4938d4
call fcn.0040a050
mov ecx, eax
test ecx, ecx
je 0x493d49
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x4f65f0
mov dword [ebp - 0x14], eax
call fcn.004099b0
test al, al
jne 0x493832
push 1
push 0x4f65f0
lea ecx, [ebp - 0x14]
call fcn.00409c60
lea eax, [edi + 0x14]
push eax
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x34]
call fcn.0047e2f0
mov edx, dword [ebp - 0x14]
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49385e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi - 0xc], 0
je 0x493873
push 1
push 0x4ed8dc
lea ecx, [ebp - 0x20]
call fcn.0043eff0
mov eax, dword [edi + 0x10]
lea ecx, [ebp - 0x20]
push dword [eax - 0xc]
push eax
call fcn.0043eff0
push 1
push 0x4f663c
lea ecx, [ebp - 0x20]
call fcn.0043eff0
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x20]
push dword [eax - 0xc]
push eax
call fcn.0043eff0
lea ecx, [ebp - 0x1c]
call fcn.004086e0
mov edx, dword [ebp - 0x34]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4938c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
cmp edi, dword [eax + 0x28]
jne 0x4937f8
mov edi, dword [ebp - 0x2c]
mov ecx, 0
mov byte [ebp - 4], 2
mov edx, dword [edi + 0x34]
sub edx, dword [edi + 0x30]
push edx
cmovne ecx, dword [edi + 0x30]
push ecx
push dword [esi - 0xc]
push esi
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
je 0x493ccd
cmp dword [edi + 0x3c], 0
je 0x4939e0
call fcn.0040a050
mov ecx, eax
test ecx, ecx
je 0x493d6c
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 3
mov ecx, 1
mov dword [ebp - 0x34], 0x100
mov eax, dword [edi - 8]
sub ecx, dword [edi - 4]
sub eax, 0x100
or eax, ecx
jge 0x493954
push 0x100
lea ecx, [ebp - 0x1c]
call fcn.00409bc0
mov edi, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 0x34]
push eax
push edi
push 0x13
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
push dword [edi - 8]
mov dword [ebp - 0x14], eax
push edi
call fcn.004b30c6
add esp, 8
test eax, eax
js 0x493d3f
cmp eax, dword [edi - 8]
jg 0x493d3f
xor ecx, ecx
mov dword [edi - 0xc], eax
mov word [edi + eax*2], cx
cmp dword [ebp - 0x14], ecx
je 0x493cb2
push edi
call fcn.004bba25
add esp, 4
cmp eax, 0x12d
je 0x493b21
cmp eax, 0x12e
je 0x493b21
cmp eax, 0x12f
je 0x493b21
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4939dd
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x2c]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4939fb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, ebx
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x493a19
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x493a38
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 4
call fcn.004a6623
mov ecx, dword [ebp - 0x30]
add esp, 4
mov dword [eax], ecx
mov ecx, edi
push dword [ebp + 8]
push eax
call fcn.00493f00
push 4
call fcn.004a6623
mov ecx, dword [ebp - 0x3c]
add esp, 4
mov dword [eax], ecx
lea ecx, [edi + 8]
push dword [ebp + 8]
push eax
call fcn.00493f00
push 4
call fcn.004a6623
mov ecx, dword [ebp - 0x18]
add esp, 4
mov dword [eax], ecx
lea ecx, [edi + 0x10]
push dword [ebp + 8]
push eax
call fcn.00493f00
sub esp, 8
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov eax, dword [edi + 0x14]
test eax, eax
je 0x493aa5
lock inc dword [eax + 4]
mov eax, dword [edi + 0x10]
sub esp, 8
mov dword [ecx], eax
mov eax, dword [edi + 0x14]
mov dword [ecx + 4], eax
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov eax, dword [edi + 0xc]
test eax, eax
je 0x493acd
lock inc dword [eax + 4]
mov eax, dword [edi + 8]
sub esp, 8
mov dword [ecx], eax
mov eax, dword [edi + 0xc]
mov dword [ecx + 4], eax
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x493af5
lock inc dword [eax + 4]
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
mov ecx, dword [ebp + 8]
call fcn.004928f0
mov eax, dword [ebp + 8]
add esp, 0x18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.0040a050
mov ecx, eax
test ecx, ecx
je 0x493d76
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 4
mov edx, 1
mov dword [ebp - 0x48], 0x400
mov ecx, dword [eax - 8]
sub edx, dword [eax - 4]
sub ecx, 0x400
or ecx, edx
jge 0x493b6b
push 0x400
lea ecx, [ebp - 0x14]
call fcn.00409bc0
mov eax, dword [ebp - 0x14]
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
push 0x21
push dword [ebp - 0x18]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
push dword [ecx - 8]
push ecx
call fcn.004b30c6
mov edx, eax
add esp, 8
test edx, edx
js 0x493d3f
mov eax, dword [ebp - 0x14]
cmp edx, dword [eax - 8]
jg 0x493d3f
xor ecx, ecx
mov dword [eax - 0xc], edx
mov word [eax + edx*2], cx
cmp dword [ebp - 0x40], ecx
je 0x493c97
cmp dword [eax - 0xc], ecx
je 0x493c97
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x14]
push eax
call fcn.00408430
push dword [ebp - 0x18]
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
call ebx
push dword [ebp - 0x3c]
call ebx
push dword [ebp - 0x30]
call ebx
push dword [ebp + 8]
mov ecx, dword [ebp - 0x2c]
call fcn.004932e0
mov byte [ebp - 4], 3
or ebx, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x493c0d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x493c28
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x493c43
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, ebx
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x493c61
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x493c80
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea edx, [eax - 0x10]
mov byte [ebp - 4], 3
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x493cb2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, ebx
mov byte [ebp - 4], 2
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x493ccd
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x493ce8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, ebx
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x493d06
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x493d25
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x18]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push dword [ebp - 0x3c]
call esi
push dword [ebp - 0x30]
call esi
jmp 0x4934bb
push 0x80070057
call fcn.00409e30
push 0x80004005
call fcn.00409e30
push 0x80004005
call fcn.00409e30
call fcn.00408de0
push 0x80004005
call fcn.00409e30
push 0x80004005
call fcn.00409e30
push 0x80004005
call fcn.00409e30
int3