Function at 0x41ebbc
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x54
mov dword [ebp - 0x10], 0x26cfc4f5
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
cmp eax, 0xf0fd0d8d
jg 0x41ec43
cmp eax, 0xc5b885ac
jg 0x41ecef
cmp eax, 0xaf093425
jle 0x41edd9
cmp eax, 0xb8f4343d
jle 0x41ee4c
cmp eax, 0xb8f4343e
je 0x41f187
cmp eax, 0xbb321aef
je 0x41f29f
cmp eax, 0xc2fb37a8
jne 0x41ebe4
push 0
push dword [ebp - 0x30]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xd7a6351
jmp 0x41ebe4
cmp eax, 0x2ece5c7e
jg 0x41ecac
cmp eax, 0x37e80d6
jg 0x41ed45
cmp eax, 0xf62cb4e0
jle 0x41ee72
cmp eax, 0xf62cb4e1
je 0x41f07f
cmp eax, 0xfd882732
je 0x41f0e4
cmp eax, 0x4f72e
jne 0x41ebe4
shr esi, 0xf
lea esi, [esi + esi*4]
shl esi, 4
add esi, 0x49
shr esi, 2
and esi, 0x7ffff8
mov eax, 0xb8f4343e
cmp esi, 0x8b
jae 0x41ef94
jmp 0x41f3ab
cmp eax, 0x54ad69e2
jg 0x41eda1
cmp eax, 0x3882f4bb
jle 0x41eebf
cmp eax, 0x3882f4bc
je 0x41f098
cmp eax, 0x522edfbd
je 0x41f124
cmp eax, 0x52c8d077
jne 0x41ebe4
mov dword [ebp - 0x10], 0xd0ca3eab
jmp 0x41ebe4
cmp eax, 0xd047fbe6
jg 0x41ee11
cmp eax, 0xcc0729a8
jle 0x41efed
cmp eax, 0xcc0729a9
je 0x41f19c
cmp eax, 0xcd3d190e
je 0x41f2f4
cmp eax, 0xcfe746fe
jne 0x41ebe4
cmp dword [ebp - 0x38], 0
mov eax, 0x522edfbd
je 0x41ed36
mov eax, 0x90bc63b1
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
jmp 0x41ebe4
cmp eax, 0x26cfc4f4
jg 0x41eefc
cmp eax, 0xd7a6351
je 0x41f064
cmp eax, 0x25e14778
jne 0x41f3b3
mov eax, dword [ebp - 0x28]
mov word [eax + 0x20], 0
push 0x20
push 0x4658a0
push dword [ebp - 0x28]
call fcn.00441d60
add esp, 0xc
push 6
push 0x4658c0
push 0x10
push dword [ebp - 0x28]
call fcn.004220a0
add esp, 0x10
mov dword [ebp - 0x10], 0xc5b885ad
jmp 0x41ebe4
cmp eax, 0x71c3109a
jle 0x41ef38
cmp eax, 0x71c3109b
je 0x41f0ad
cmp eax, 0x75f568d0
je 0x41f136
cmp eax, 0x78dccbf4
jne 0x41ebe4
mov dword [ebp - 0x10], 0xf62cb4e1
jmp 0x41ebe4
cmp eax, 0x90bc63b0
jle 0x41ef9e
cmp eax, 0x90bc63b1
je 0x41f0c8
cmp eax, 0xa0ec9b44
je 0x41f272
cmp eax, 0xaefbe83b
jne 0x41ebe4
mov dword [ebp - 0x10], 0xb8f4343e
jmp 0x41ebe4
cmp eax, 0xd18709b4
jle 0x41f02f
cmp eax, 0xd18709b5
je 0x41f1dc
cmp eax, 0xd7b4234c
je 0x41f330
cmp eax, 0xdc5149cf
jne 0x41ebe4
mov dword [ebp - 0x10], 0xd7b4234c
mov ebx, dword [ebp - 0x54]
jmp 0x41ebe4
cmp eax, 0xaf093426
je 0x41f284
cmp eax, 0xb325a231
je 0x41f1d0
cmp eax, 0xb2915a26
jne 0x41ebe4
jmp 0x41f3f3
cmp eax, 0xf0fd0d8e
je 0x41f206
cmp eax, 0xf2e36baa
jne 0x41ebe4
mov eax, esi
shr eax, 8
mov esi, eax
shl esi, 5
sub esi, eax
push esi
push 0x6153
push 0x2e77
call fcn.00412c68
add esp, 0xc
mov eax, 0xcc0729a9
cmp esi, 0xc
jae 0x41f3ab
mov eax, 0x54ad69e3
jmp 0x41f3ab
cmp eax, 0x2ece5c7f
je 0x41f228
cmp eax, 0x371c40e4
jne 0x41ebe4
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x30]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov ecx, 0xd7b4234c
test eax, eax
je 0x41eef4
mov ecx, 0xcd3d190e
mov dword [ebp - 0x10], ecx
jmp 0x41ebe4
cmp eax, 0x26cfc4f5
je 0x41f369
cmp eax, 0x28dccfc4
je 0x41f384
cmp eax, 0x2dfa41f9
jne 0x41ebe4
push dword [ebp - 0x30]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0xa0ec9b44
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x18], eax
jmp 0x41ebe4
cmp eax, 0x54ad69e3
je 0x41f253
cmp eax, 0x68cdac49
jne 0x41ebe4
imul esi, esi, 0xe6
add esi, 0xffff4354
push 0x642
push 0x1592
push 0x4b2f
push 0x1d22
push 0x5fe9
push esi
push 0x2eaf
call fcn.0041624c
add esp, 0x1c
call fcn.0041f418
mov eax, 0xb8f4343e
cmp esi, 0x6d
jge 0x41f3ab
mov eax, 0xc5b885ad
jmp 0x41f3ab
cmp eax, 0x8b0a18bf
je 0x41f2df
cmp eax, 0x9027e669
jne 0x41ebe4
mov eax, 3
push eax
push 0x4658d2
push eax
push dword [ebp - 0x2c]
call fcn.004220a0
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x38]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x78dccbf4
jmp 0x41ebe4
cmp eax, 0xc5b885ad
je 0x41f33f
cmp eax, 0xcaf9a3c4
jne 0x41ebe4
mov eax, dword [ebp - 0x14]
shr eax, 9
mov dword [ebp - 0x14], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x1357
dec edx
mov eax, 0xfd882732
cmp ecx, edx
je 0x41f3ab
mov eax, 0x52c8d077
jmp 0x41f3ab
cmp eax, 0xd047fbe7
je 0x41f35d
cmp eax, 0xd0ca3eab
jne 0x41ebe4
cmp dword [ebp - 0x34], 0
mov eax, 0xb2915a26
je 0x41f055
mov eax, 0x54ad69e3
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0
jmp 0x41ebe4
imul eax, dword [ebp - 0x14], 0x1c00
add eax, 0xffffc100
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xdc5149cf
jmp 0x41ebe4
cmp dword [ebp - 0x30], 0
mov eax, 0x2ece5c7f
je 0x41f3ab
mov eax, 0x371c40e4
jmp 0x41f3ab
shl esi, 4
add esi, 0xa1
mov dword [ebp - 0x10], 0x37e80d7
jmp 0x41ebe4
push dword [ebp - 0x38]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x522edfbd
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
jmp 0x41ebe4
push eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, 6
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x28dccfc4
jmp 0x41ebe4
mov edi, esi
add edi, 0x59
mov esi, edi
shr esi, 0x13
add esi, 0xffffffd2
push 0x533b
push esi
push 0x5930
push 0x2cad
call fcn.00418c9f
add esp, 0x10
mov eax, 0x75f568d0
cmp edi, 0x7800000
jae 0x41f3ab
mov eax, 0xb8f4343e
jmp 0x41f3ab
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x8b0a18bf
jmp 0x41ebe4
shl esi, 5
add esi, 0x1c56
push 0x12bb
push 0x2a34
push 0x5bd9
push esi
push 0x1767
call fcn.00416f4a
add esp, 0x14
push 0x5d7d
push 0x17c7
push esi
call fcn.00412c68
add esp, 0xc
mov eax, 0xb8f4343e
cmp esi, 0x4e
jb 0x41f3ab
mov eax, 0x68cdac49
jmp 0x41f3ab
push eax
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0x25e14778
jmp 0x41ebe4
shr esi, 6
add esi, 0xf8
push esi
push 0x2fb3
push 0x1189
push 0x47ca
call fcn.004183ea
add esp, 0x10
push 0x10e7
push esi
push 0x21af
call fcn.0041c927
add esp, 0xc
mov dword [ebp - 0x10], 0xbb321aef
jmp 0x41ebe4
mov eax, dword [ebp - 0x50]
mov word [eax], 0
mov eax, dword [ebp - 0x2c]
movzx ecx, word [0x4658d0]
mov word [eax + 4], cx
mov ecx, dword [0x4658cc]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x9027e669
jmp 0x41ebe4
imul eax, dword [ebp - 0x14], 0x184000
shr eax, 0xc
and eax, 0xfffffff0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb2915a26
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x24], eax
jmp 0x41ebe4
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x4d]
shr eax, 3
add eax, 0xfffffeaf
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa0ec9b44
mov dword [ebp - 0x18], 0
jmp 0x41ebe4
push 0
push 0x50
push dword [ebp - 0x20]
push dword [ebp - 0x34]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xaf093426
jmp 0x41ebe4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x71c3109b
jmp 0x41ebe4
imul eax, dword [ebp - 0x14], 0xd140
add eax, 0xffeb919d
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xd047fbe7
jmp 0x41ebe4
push 0x200
xor eax, eax
push eax
push dword [ebp - 0x20]
call fcn.00442860
add esp, 0xc
mov edi, dword [ebp + 8]
push edi
call fcn.0044e5a0
add esp, 4
push eax
push edi
push 0x100
push dword [ebp - 0x20]
xor eax, eax
push eax
call fcn.0044debf
add esp, 0x14
mov dword [ebp - 0x10], 0xaefbe83b
jmp 0x41ebe4
push dword [ebp - 0x34]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0xf0fd0d8e
jmp 0x41ebe4
mov eax, dword [ebp - 0x14]
mov ecx, 0x95
add eax, ecx
shr eax, 0xf
lea ecx, [eax + eax*8]
mov edx, eax
imul edx, eax
imul edi, edx, 0x2e51
shl ecx, 0x12
add ecx, 0xf1600000
dec edi
mov dword [ebp - 0x14], ecx
mov eax, 0x90bc63b1
cmp edi, edx
je 0x41f3ab
mov eax, 0xc2fb37a8
jmp 0x41f3ab
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x10], 0x2dfa41f9
jmp 0x41ebe4
xor eax, eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x28]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xcaf9a3c4
jmp 0x41ebe4
mov dword [ebp - 0x10], 0xcfe746fe
jmp 0x41ebe4
push eax
sub esp, 0x1fc
mov eax, esp
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xb325a231
jmp 0x41ebe4
mov ecx, dword [ebp - 0x14]
add ecx, 0xffffffbe
imul eax, ecx, 0x26000000
imul ecx, ecx
imul edx, ecx, 0x1bb3
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x5bfd41ce
cmp edx, ecx
je 0x41f3ab
mov eax, 0xd18709b5
mov dword [ebp - 0x10], eax
jmp 0x41ebe4
cmp eax, 0x37e80d7
jne 0x41ebe4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], ebx
add esi, 0x1ffff71
and esi, 0x1ffffe0
imul eax, esi, 0x7b
add eax, 0xffffffee
mov dword [ebp - 0x4c], eax
push eax
push 0x3bd0
call fcn.0041f88b
mov dword [ebp - 0x4c], esi
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], ebx
mov eax, dword [ebp - 0x20]
mov eax, ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret