Function at 0x465dc6
Capabilities:
Connect to http server
Create http request
Get http content length
Parse url

Disassembly:
push ebp
lea ebp, [esp - 0x2468]
mov eax, 0x24e8
call fcn.004760e0
mov eax, dword [0x4f2be0]
xor eax, ebp
mov dword [ebp + 0x2464], eax
push ebx
push esi
push edi
xor eax, eax
push 0x1fe
mov word [ebp + 0x2064], ax
xor esi, esi
lea eax, [ebp + 0x2066]
push esi
push eax
mov dword [ebp - 0x44], ecx
call fcn.00474a10
xor eax, eax
mov edi, 0xfe
push edi
mov word [ebp + 0x2264], ax
lea eax, [ebp + 0x2266]
push esi
push eax
call fcn.00474a10
xor eax, eax
push edi
mov word [ebp + 0x2364], ax
lea eax, [ebp + 0x2366]
push esi
push eax
call fcn.00474a10
xor eax, eax
push 0x1046
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x2a]
push esi
push eax
call fcn.00474a10
push 0x38
lea eax, [ebp - 0x7c]
push esi
push eax
call fcn.00474a10
lea eax, [ebp + 0x2064]
mov dword [ebp - 0x70], eax
lea eax, [ebp + 0x2264]
mov dword [ebp - 0x64], eax
lea eax, [edi - 0x7e]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x58], eax
add esp, 0x3c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x80]
push eax
push esi
push esi
push dword [ebp + 0x2470]
lea ecx, [ebp + 0x2364]
mov dword [ebp - 0x80], 0x3c
mov dword [ebp - 0x6c], pe_nt_image_headers32
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x50], 0x824
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x465eba
cmp dword [ebp - 0x74], 3
je 0x465ec4
cmp dword [ebp - 0x74], 4
jne 0x466016
mov edi, dword [sym.imp.WININET.dll_InternetSetOptionW]
push 4
lea eax, [ebp - 0x30]
push eax
xor ebx, ebx
cmp dword [ebp - 0x74], 4
push 2
push esi
sete bl
mov dword [ebp - 0x30], 0x1e
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 5
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 6
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 7
push esi
call edi
push 4
lea eax, [ebp - 0x30]
push eax
push 8
push esi
call edi
push esi
push esi
push esi
push esi
push str.Beacon
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x3c], eax
cmp eax, esi
je 0x466016
push esi
push esi
push 3
lea ecx, [ebp + 0x2364]
push ecx
lea ecx, [ebp + 0x2264]
push ecx
push dword [ebp - 0x68]
lea ecx, [ebp + 0x2064]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetConnectW]
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x34], eax
cmp eax, esi
je 0x466011
xor eax, eax
push 0x1046
mov word [ebp + 0x101c], ax
lea eax, [ebp + 0x101e]
push esi
push eax
call fcn.00474a10
add esp, 0xc
lea eax, [ebp + 0x101c]
cmp dword [ebp - 0x50], esi
je 0x465f8d
push dword [ebp - 0x54]
jmp 0x465f92
push 0x4bed84
push eax
call fcn.00477016
pop ecx
pop ecx
neg ebx
push esi
sbb ebx, ebx
and ebx, 0x800000
add ebx, 0x80000000
push ebx
push esi
push 0x4d2ec0
push str.HTTP_1.1
lea eax, [ebp + 0x101c]
push eax
push 0x4c3b8c
push dword [ebp - 0x34]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov ecx, dword [ebp - 0x44]
mov ebx, eax
push 1
push ebx
call fcn.0046545c
test eax, eax
je 0x466005
push esi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x20000005
push ebx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], 4
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x466028
cmp dword [ebp - 0x38], esi
jne 0x466028
cmp ebx, esi
je 0x46600c
push ebx
call edi
push dword [ebp - 0x34]
call edi
push dword [ebp - 0x3c]
call edi
mov ecx, dword [ebp + 0x2470]
add ecx, 0xfffffff0
call fcn.004029d4
xor eax, eax
jmp 0x466039
mov ecx, dword [ebp + 0x2470]
add ecx, 0xfffffff0
call fcn.004029d4
xor eax, eax
inc eax
mov ecx, dword [ebp + 0x2464]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00474a8a
add ebp, 0x2468
leave
ret 4