Function at 0x40d6c0
Capabilities:
Prepare http request
Set http header

Disassembly:
push ebp
lea ebp, [esp - 0x1140]
mov eax, 0x1140
call fcn.005e00d0
push 0xffffffffffffffff
push 0x606e71
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp + 0x113c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0x1148]
mov edx, dword [ebp + 0x1158]
mov esi, dword [ebp + 0x1150]
mov ebx, ecx
mov ecx, dword [ebp + 0x1154]
xor edi, edi
cmp byte [0x6ada40], 0
mov dword [ebp - 0x40], eax
mov eax, dword [ebp + 0x115c]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp + 0x1164]
mov dword [ebp - 0x44], edx
mov edx, dword [ebp + 0x1174]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x38], edx
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x3c], edi
jne 0x40d766
push 0x6ada40
call fcn.004e7aa0
add esp, 4
push edi
xor eax, eax
push 0x60fa24
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x70], edi
mov word [ebp - 0x80], ax
call fcn.0040b1a0
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x84]
push ecx
lea ecx, [ebx + 0x230]
mov byte [ebp - 4], 1
mov dword [ebx + 0x22c], edi
call fcn.0040b0a0
cmp dword [ebp - 0x6c], 8
mov dword [ebx + 0x228], edi
mov byte [ebp - 4], 0
jb 0x40d7c2
mov edx, dword [ebp - 0x80]
push edx
call fcn.005e0d9a
add esp, 4
mov ecx, dword [ebp + 0x114c]
push 0x200
lea edx, [ebx + 0x20]
xor eax, eax
push edi
push edx
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x70], edi
mov word [ebp - 0x80], ax
mov dword [ebx + 0xc], ecx
mov dword [ebx + 0x10], 0xfffffffe
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x18], edi
call fcn.005dfd60
mov eax, dword [ebp + 0x1168]
mov ecx, dword [ebp + 0x116c]
add esp, 0xc
mov dword [ebx + 0x220], eax
mov dword [ebx + 0x224], ecx
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov dword [ebx + 0x458], edi
cmp esi, edi
je 0x40d83a
cmp byte [esi], 0
je 0x40d83a
push esi
lea edx, [ebx + 0x24c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x40d841
mov byte [ebx + 0x24c], 0
push 0x3c
lea eax, [ebp - 0xc0]
push edi
push eax
call fcn.005dfd60
or eax, 0xffffffff
lea ecx, [ebp + 0x410]
lea esi, [ebx + 0x47c]
push str.WinHttpCrackURL__SendRequest_
push esi
mov dword [ebp - 0xc0], 0x3c
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], 0x100
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xb8], eax
call fcn.004085b0
add esp, 0x14
cmp dword [0x6acea4], edi
je 0x40d8aa
push esi
push 0x60e7f4
push edi
call fcn.004f0f30
add esp, 0xc
cmp dword [0x6acea0], edi
je 0x40d8d6
mov edx, dword [ebp - 0x38]
push edx
push str._PROC___s__
push edi
call fcn.004f0f30
mov eax, dword [ebp - 0x40]
add esp, 0xc
push eax
push 0x610bcc
push edi
call fcn.004f0f30
add esp, 0xc
mov edx, dword [ebp - 0x40]
lea ecx, [ebp - 0xc0]
push ecx
push edi
push edi
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x40e467
push 0x610bac
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], edi
je 0x40d916
push esi
push 0x60e7f4
push edi
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebp - 0xa8]
mov edx, dword [ebx + 0x464]
push edi
push eax
lea ecx, [ebp + 0x410]
push ecx
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebx + 0x468], eax
cmp eax, edi
je 0x40e467
xor eax, eax
cmp dword [ebp - 0xb4], 2
push 0x610b84
setne al
push esi
dec eax
and eax, 0x800000
mov edi, eax
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], 0
je 0x40d97b
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x40d9a3
cmp byte [eax], 0
je 0x40d9a3
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebx + 0x468]
push edi
push 0
push 0
push 0
push ecx
push str.POST
push edx
jmp 0x40d9e5
cmp dword [ebp + 0x1178], 0
push edi
push 0
push 0
push 0
jne 0x40d9c8
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebx + 0x468]
push eax
push 0x610b70
push ecx
jmp 0x40d9e5
mov edx, dword [ebp - 0x94]
mov eax, dword [ebx + 0x468]
push edx
push 0x610b70
mov dword [ebx + 0x458], 1
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebx + 0x46c], eax
test eax, eax
je 0x40e467
push 0x610b3c
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], 0
je 0x40da20
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
push esi
lea ecx, [ebx + 0x350]
push 0x60e7f4
push ecx
call fcn.004f0f30
mov edx, dword [ebx + 0x46c]
add esp, 0xc
push 0
push 0x7f4000
push 0x40bd30
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetStatusCallback]
test eax, eax
jne 0x40e467
mov edi, dword [ebp - 0x4c]
test edi, edi
je 0x40db0f
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x40db0f
cmp word [edi], 0
je 0x40db0f
cmp word [eax], 0
je 0x40db0f
push str.WinHttpSetCredentials_1_
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], 0
je 0x40daa7
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
cmp dword [0x6ada3c], 0
jne 0x40dad1
call fcn.004dcdb0
test eax, eax
je 0x40dac7
push edi
push str._Proxy_authentication_set_1_:__s:_n
call fcn.005e1b3a
add esp, 8
mov dword [0x6ada3c], 1
cmp dword [0x6acea4], 0
je 0x40daea
push edi
push str._Proxy_authentication_set_1_:__S:
push 0
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebx + 0x46c]
push 0
push eax
push edi
push 1
push 1
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSetCredentials]
test eax, eax
je 0x40e467
jmp 0x40dcdd
push 0x103
lea edx, [ebp + 0xd2d]
push 0
push edx
mov byte [ebp + 0xd2c], 0
call fcn.005dfd60
push 0x103
lea eax, [ebp + 0x1039]
push 0
push eax
mov byte [ebp + 0x1038], 0
call fcn.005dfd60
push str.Reading_ProxyUserName_and_ProxyPassword_from_HKLMSoftwareMicroWorld...
push esi
call fcn.004085b0
add esp, 0x20
cmp dword [0x6acea4], 0
je 0x40db6a
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp + 0xd2c]
push edx
push str.ProxyUserName
push 0x60d9ec
mov edi, 0x104
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x34], edi
call fcn.004d5770
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x1038]
push ecx
push str.ProxyPassword
push 0x60d9ec
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x34], edi
call fcn.004d5770
cmp byte [ebp + 0xd2c], 0
je 0x40dcdd
cmp byte [ebp + 0x1038], 0
je 0x40dcdd
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp + 0xd2c]
xor edi, edi
push eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], edi
call fcn.004e33e0
add esp, 8
cmp eax, edi
je 0x40dcbd
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp + 0x1038]
push edx
call fcn.004e33e0
add esp, 8
cmp eax, edi
je 0x40dcbd
push str.WinHttpSetCredentials_2_
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], edi
je 0x40dc30
push esi
push 0x60e7f4
push edi
call fcn.004f0f30
add esp, 0xc
cmp dword [0x6ada38], edi
jne 0x40dc5c
call fcn.004dcdb0
cmp eax, edi
je 0x40dc52
mov eax, dword [ebp - 0x18]
push eax
push str._Proxy_authentication_set_2_:__s:_n
call fcn.005e1b3a
add esp, 8
mov dword [0x6ada38], 1
cmp dword [0x6acea4], edi
je 0x40dc76
mov ecx, dword [ebp - 0x18]
push ecx
push str._Proxy_authentication_set_2_:__S:
push edi
call fcn.004f0f30
add esp, 0xc
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x46c]
push edi
push edx
push eax
push 1
push 1
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSetCredentials]
test eax, eax
jne 0x40dcbd
mov eax, dword [ebp - 0x18]
cmp eax, edi
je 0x40dca4
push eax
call fcn.005e0865
add esp, 4
mov eax, dword [ebp - 0x28]
cmp eax, edi
je 0x40e467
push eax
call fcn.005e0865
add esp, 4
jmp 0x40e467
mov eax, dword [ebp - 0x18]
cmp eax, edi
je 0x40dccd
push eax
call fcn.005e0865
add esp, 4
mov eax, dword [ebp - 0x28]
cmp eax, edi
je 0x40dcdd
push eax
call fcn.005e0865
add esp, 4
mov ecx, str.Connection:_Close
lea edx, [ebp + 0x208]
jmp 0x40dcf0
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40dcf0
mov eax, dword [ebx + 0x46c]
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0x20000000
push 0xffffffffffffffff
lea edx, [ebp + 0x208]
push edx
push eax
call edi
mov esi, dword [ebp + 0x1170]
cmp esi, 2
jne 0x40dd56
mov ecx, str.X_Nimbus_APIKey:_2162EB2F_62A6_4141_A24E_AB1B5C7C3EAF
lea edx, [ebp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40dd31
mov edx, dword [ebx + 0x46c]
push 0x20000000
push 0xffffffffffffffff
lea ecx, [ebp]
push ecx
push edx
call edi
cmp esi, 1
jne 0x40de67
push 0x103
lea eax, [ebp + 0xf35]
push 0
push eax
mov byte [ebp + 0xf34], 0
call fcn.005dfd60
add esp, 0xc
mov ecx, str.X_Nimbus_UUID:
lea edx, [ebp + 0xa20]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40dd87
lea ecx, [ebp + 0xa20]
push 0x6ada40
push ecx
call fcn.004e39d0
mov eax, dword [ebx + 0x46c]
add esp, 8
push 0x20000000
push 0xffffffffffffffff
lea edx, [ebp + 0xa20]
push edx
push eax
call edi
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp + 0xf34]
push edx
push str.NCId
push 0x60d9ec
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x30], 0x104
call fcn.004d5770
mov ecx, str.X_Nimbus_ClientID:
lea edx, [ebp + 0xa20]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40ddf4
cmp byte [ebp + 0xf34], al
jne 0x40de3a
lea eax, [ebp + 0xa20]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x40de16
mov edi, eax
mov ecx, 0x12
mov esi, str.45403B8E_207A_45CF_AF7F_1050D4AAE746
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
jmp 0x40de50
lea eax, [ebp + 0xf34]
push eax
lea ecx, [ebp + 0xa20]
push ecx
call fcn.004e39d0
add esp, 8
mov eax, dword [ebx + 0x46c]
push 0x20000000
push 0xffffffffffffffff
lea edx, [ebp + 0xa20]
push edx
push eax
call edi
mov ecx, 0x1bb
cmp word [ebp - 0xa8], cx
jne 0x40df43
test byte [0x6ada34], 1
mov dword [ebp - 0x48], 0
jne 0x40dea2
or dword [0x6ada34], 1
mov byte [ebp - 4], 2
call fcn.004d99e0
mov dword [0x6ada30], eax
mov byte [ebp - 4], 0
mov eax, dword [ebx + 0x46c]
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
push 4
lea edx, [ebp - 0x48]
push edx
push 0x1f
push eax
mov dword [ebp - 0x48], 0x3300
call esi
test eax, eax
jne 0x40deca
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x6ada30], 0
jne 0x40df16
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x40df16
cmp byte [eax], 0
je 0x40df16
push 0
push str.abusedb
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x40df16
mov edx, dword [ebx + 0x464]
push 4
lea ecx, [ebp - 0x2c]
push ecx
push 0x54
push edx
mov dword [ebp - 0x2c], 0x20
call esi
test eax, eax
jne 0x40df16
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [ebx + 0x46c]
push 0
push 0
push 0x2f
push eax
call esi
test eax, eax
jne 0x40df2f
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebx + 0x47c]
push 0x6107d0
push ecx
call fcn.004085b0
add esp, 8
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x40e3ea
cmp byte [eax], 0
je 0x40e3ea
push str.ThisIsDataStream_
push eax
call fcn.004dd6e0
add esp, 8
test eax, eax
je 0x40e201
push 0x103
lea edx, [ebp + 0xe31]
push 0
push edx
mov byte [ebp + 0xe30], 0
call fcn.005dfd60
push 0x103
lea eax, [ebp + 0xc29]
push 0
push eax
mov byte [ebp + 0xc28], 0
call fcn.005dfd60
lea esi, [ebx + 0x47c]
push 0x610788
push esi
call fcn.004085b0
add esp, 0x20
cmp dword [0x6acea4], 0
je 0x40dfce
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
mov ecx, dword [ebx + 0x46c]
push 0x20000000
push 0xffffffffffffffff
push str.Content_Type:_multipart_form_data__boundary____________ThIs_Is_tHe_bouNdaRY__
push ecx
call edi
test eax, eax
je 0x40e467
mov edx, dword [ebx + 0x46c]
push 0xa0000000
push 0xffffffffffffffff
push str.User_Agent:_VirusTotal_Uploader_2.0
push edx
call edi
test eax, eax
je 0x40e467
mov eax, dword [ebx + 0x46c]
push 0xa0000000
push 0xffffffffffffffff
push str.Cache_Control:_no_cache
push eax
call edi
test eax, eax
je 0x40e467
push str.IsFilePresent__
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], 0
je 0x40e04c
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
mov edi, dword [ebp - 0x1c]
push 1
push 0
push 0
push 0
push 0
push edi
call fcn.004e8950
add esp, 0x18
test eax, eax
jne 0x40e1f5
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40e086
cmp byte [eax], 0
je 0x40e086
push eax
lea ecx, [ebp + 0xe30]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x40e098
push 0
lea edx, [ebp + 0xe30]
push edx
push edi
call fcn.004e8ec0
add esp, 0xc
push str.ReadFromFile__
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], 0
je 0x40e0bf
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
mov ecx, edi
push ecx
call fcn.004f1610
mov edi, eax
test edi, edi
jbe 0x40e467
cmp dword [ebp - 0x20], 0
je 0x40e467
cmp dword [ebp + 0x1160], 0
je 0x40e0ef
mov ecx, ebx
call fcn.004093b0
lea edx, [ebp + 0xe30]
push edx
lea eax, [ebp + 0xc28]
push str.______________ThIs_Is_tHe_bouNdaRY___r_nContent_Disposition:_form_data_name_archivo__filename__s__r_nContent_Type:_application_x_msdownload_r_n_r_n
push eax
call fcn.005dfb23
add esp, 0xc
lea ecx, [ebp + 0xc28]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
lea eax, [esi + edi + 0x2a]
mov dword [ebp - 0x30], eax
inc eax
push eax
mov dword [ebp - 0x2c], eax
call fcn.005ddec6
add esp, 4
mov dword [ebx + 0x880], eax
test eax, eax
je 0x40e467
mov edx, dword [ebp - 0x2c]
push edx
push 0
push eax
call fcn.005dfd60
mov ecx, dword [ebx + 0x880]
push esi
lea eax, [ebp + 0xc28]
push eax
push ecx
call fcn.005e13c0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebx + 0x880]
push edi
push edx
add eax, esi
push eax
call fcn.005e13c0
add edi, esi
add edi, dword [ebx + 0x880]
mov ecx, 0xa
mov esi, str._r_n______________ThIs_Is_tHe_bouNdaRY_____r_n
rep movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x47c]
push str.WinHttpSendRequest_POST_
push eax
movsw word es:[edi], word [esi]
call fcn.004085b0
add esp, 0x2c
cmp dword [0x6acea4], 0
je 0x40e1b7
lea eax, [ebx + 0x47c]
push eax
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebx + 0x880]
mov edx, dword [ebx + 0x46c]
push ebx
push eax
push eax
push ecx
push 0
push 0
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x40e467
lea eax, [ebx + 0x47c]
push eax
push 0x60e7f4
lea eax, [ebx + 0x350]
push eax
jmp 0x40e45b
mov dword [ebp - 0x3c], 1
jmp 0x40e467
lea esi, [ebx + 0x47c]
push str.WinHttpAddRequestHeadersData
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], 0
je 0x40e22e
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
mov esi, dword [ebp - 0x24]
push str.analyticdata:
push esi
call fcn.004dd6e0
add esp, 8
test eax, eax
je 0x40e2c8
push str.fname
push esi
call fcn.004dd6e0
add esp, 8
test eax, eax
je 0x40e2c8
mov ecx, dword [ebx + 0x46c]
push 0x20000000
push 0xffffffffffffffff
push str.Accept:__
push ecx
call edi
test eax, eax
je 0x40e467
mov edx, dword [ebx + 0x46c]
push 0x20000000
push 0xffffffffffffffff
push str.Accept_Encoding:_gzip_deflate
push edx
call edi
test eax, eax
je 0x40e467
cmp dword [ebp + 0x1170], 2
push 0x20000000
push 0xffffffffffffffff
jne 0x40e2b1
mov eax, dword [ebx + 0x46c]
push str.Content_Type:_application_json
push eax
jmp 0x40e300
mov ecx, dword [ebx + 0x46c]
push str.Content_Type:_application_octet_stream
push ecx
call edi
test eax, eax
jne 0x40e30a
jmp 0x40e467
push str.fname
push esi
call fcn.004dd6e0
add esp, 8
test eax, eax
jne 0x40e2ed
push 0x60c81c
push str.fname
push esi
call fcn.004e9030
add esp, 0xc
mov edx, dword [ebx + 0x46c]
push 0x20000000
push 0xffffffffffffffff
push str.Content_Type:_text_plain
push edx
call edi
test eax, eax
je 0x40e467
mov eax, dword [ebp - 0x1c]
add eax, 0x11
push eax
call fcn.005e0909
mov esi, eax
add esp, 4
test esi, esi
jbe 0x40e467
cmp dword [ebp - 0x24], 0
je 0x40e467
cmp dword [ebp + 0x1160], 0
je 0x40e33d
mov ecx, ebx
call fcn.004093b0
lea edi, [esi + 1]
push edi
call fcn.005ddec6
add esp, 4
mov dword [ebx + 0x880], eax
test eax, eax
je 0x40e467
push edi
push 0
push eax
call fcn.005dfd60
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebx + 0x880]
push esi
push ecx
push edx
call fcn.005e13c0
lea eax, [ebx + 0x47c]
push str.WinHttpSendRequest_POSTDATA_
push eax
call fcn.004085b0
add esp, 0x20
cmp dword [0x6acea4], 0
je 0x40e3a4
lea eax, [ebx + 0x47c]
push eax
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebx + 0x880]
mov ecx, dword [ebx + 0x46c]
push ebx
push esi
push esi
push eax
push 0
push 0
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x40e467
lea eax, [ebx + 0x47c]
push eax
lea edx, [ebx + 0x350]
push 0x60e7f4
push edx
call fcn.004f0f30
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40e463
cmp dword [ebp + 0x1178], 0
lea esi, [ebx + 0x47c]
jne 0x40e400
push str.WinHttpSendRequest_GET_
jmp 0x40e405
push str.WinHttpSendRequest_HEAD_
push esi
call fcn.004085b0
add esp, 8
cmp dword [0x6acea4], 0
je 0x40e427
push esi
push 0x60e7f4
push 0
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebx + 0x46c]
push ebx
push 0
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x40e467
push 0x6aceb4
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push esi
push 0x60e7f4
lea ecx, [ebx + 0x350]
push ecx
call fcn.004f0f30
add esp, 0xc
mov byte [ebp - 0x11], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [ebp - 0x20]
xor esi, esi
cmp eax, esi
je 0x40e484
push eax
call fcn.005e0865
add esp, 4
mov dword [ebp - 0x20], esi
cmp byte [ebp - 0x11], 0
jne 0x40e568
lea edx, [ebp + 0x610]
push edi
push edx
call fcn.004086b0
add esp, 8
cmp dword [ebp - 0x3c], esi
jne 0x40e4bf
lea eax, [ebp + 0x610]
push eax
lea eax, [ebx + 0x47c]
push eax
push str._s_failed___s
lea ecx, [ebp + 0x818]
push ecx
jmp 0x40e4d3
push edi
lea eax, [ebx + 0x47c]
push eax
push str._s_failed__File_Absent___u_
lea edx, [ebp + 0x818]
push edx
call fcn.004085b0
add esp, 0x10
xor eax, eax
mov word [ebp - 0x64], ax
lea eax, [ebp + 0x818]
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x54], esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x40e4f4
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp + 0x818]
push ecx
lea ecx, [ebp - 0x68]
call fcn.0040b1a0
push 0xffffffffffffffff
push esi
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebx + 0x230]
mov byte [ebp - 4], 3
mov dword [ebx + 0x22c], 1
call fcn.0040b0a0
cmp dword [ebp - 0x50], 8
mov dword [ebx + 0x228], edi
mov byte [ebp - 4], 0
jb 0x40e54f
mov eax, dword [ebp - 0x64]
push eax
call fcn.005e0d9a
add esp, 4
xor ecx, ecx
mov word [ebp - 0x64], cx
push 2
mov ecx, ebx
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x54], esi
call fcn.00408d20
mov al, byte [ebp - 0x11]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x113c]
xor ecx, ebp
call fcn.005dfbbe
add ebp, 0x1140
mov esp, ebp
pop ebp
ret 0x34