Function at 0x425e70
Capabilities:
Read http header
Receive http response

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x524fad
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x58e5a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x24], edx
mov ebx, ecx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 0
call fcn.00410080
mov ecx, eax
test ecx, ecx
je 0x4262a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
xor edi, edi
mov dword [ebp - 4], 1
push edi
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], edi
push eax
push edi
push edi
push 0x13
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x425f16
call ebx
cmp eax, 0x7a
je 0x425f16
call ebx
mov edi, eax
test edi, edi
jle 0x425f87
movzx edi, di
or edi, 0x80070000
jmp 0x425f85
push dword [ebp - 0x20]
call fcn.004fc363
add esp, 4
mov ebx, eax
lea eax, [ebp - 0x20]
push 0
push eax
push ebx
push 0
push 0x13
push dword [ebp - 0x28]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x425f52
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jle 0x425f7c
movzx edi, di
or edi, 0x80070000
jmp 0x425f7c
test ebx, ebx
jne 0x425f5a
xor ecx, ecx
jmp 0x425f6f
mov ecx, ebx
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x425f60
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x14]
call fcn.0040d3a0
mov esi, dword [ebp - 0x14]
push ebx
call fcn.004e0ae1
add esp, 4
test edi, edi
js 0x426126
mov ecx, 0x5651d8
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x425fba
test dx, dx
je 0x425fb6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x425fba
add eax, 4
add ecx, 4
test dx, dx
jne 0x425f94
xor eax, eax
jmp 0x425fbf
sbb eax, eax
or eax, 1
test eax, eax
jne 0x426126
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0x1c]
push eax
push edi
mov dword [ebp - 0x1c], 0
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x426119
mov eax, dword [ebp - 0x1c]
inc eax
push eax
call fcn.004d2a98
mov ecx, dword [ebp - 0x1c]
mov ebx, eax
inc ecx
mov dword [ebp - 0x38], ebx
push ecx
push 0
push ebx
call fcn.004d52d0
add esp, 0x10
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push ebx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x426026
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov dword [ebp - 0x2c], edi
jmp 0x426101
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426030
mov eax, dword [ebp - 0x24]
sub ecx, edx
mov edx, ebx
mov dword [ebp - 0x34], ebx
mov eax, dword [eax]
sub edx, eax
mov dword [ebp - 0x30], edx
mov edi, dword [eax - 0xc]
mov dword [ebp - 0x20], edi
test ecx, ecx
js 0x4262aa
push ecx
push ebx
call fcn.004fb489
mov ebx, eax
mov ecx, SysReAllocString
sub ecx, ebx
add esp, 8
cmp ecx, edi
jl 0x4262aa
add edi, ebx
js 0x4262aa
mov eax, dword [ebp - 0x24]
mov ecx, 1
mov edx, dword [eax]
mov eax, dword [edx - 8]
sub ecx, dword [edx - 4]
sub eax, edi
or ecx, eax
jge 0x42609d
mov ecx, dword [ebp - 0x24]
push edi
call fcn.0042b5f0
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
ja 0x4260ab
add ecx, edx
jmp 0x4260ae
mov ecx, dword [ebp - 0x34]
add eax, edx
test ebx, ebx
je 0x4260e4
test eax, eax
je 0x4260d4
push ebx
test ecx, ecx
je 0x4260c9
push ecx
push eax
call fcn.004d4210
add esp, 0xc
jmp 0x4260e4
push 0
push eax
call fcn.004d52d0
add esp, 0xc
call fcn.004e08a8
mov dword [eax], 0x16
call fcn.004e0781
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx]
cmp edi, dword [eax - 8]
jg 0x4262aa
mov ebx, dword [ebp - 0x38]
mov dword [eax - 0xc], edi
mov eax, dword [ecx]
mov byte [edi + eax], 0
mov edi, dword [ebp - 0x2c]
push ebx
call fcn.004d2aa1
add esp, 4
cmp dword [ebp - 0x1c], 0
ja 0x425fc7
jmp 0x42626a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x42626a
mov ecx, 0x5651e0
mov eax, esi
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x426156
test dx, dx
je 0x426152
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x426156
add eax, 4
add ecx, 4
test dx, dx
jne 0x426130
xor eax, eax
jmp 0x42615b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x426169
mov edi, 0xe8
jmp 0x42626a
mov ecx, 0x5651d8
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x426196
test dx, dx
je 0x426192
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x426196
add eax, 4
add ecx, 4
test dx, dx
jne 0x426170
xor eax, eax
jmp 0x42619b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4261a6
xor edi, edi
jmp 0x42626a
mov ecx, 0x565ab8
mov eax, esi
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4261d6
test dx, dx
je 0x4261d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4261d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4261b0
xor eax, eax
jmp 0x4261db
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4261e7
lea edi, [eax + 5]
jmp 0x42626a
mov ecx, 0x5651e0
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x426216
test dx, dx
je 0x426212
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x426216
add eax, 4
add ecx, 4
test dx, dx
jne 0x4261f0
xor eax, eax
jmp 0x42621b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x426226
mov edi, 0x5b4
jmp 0x42626a
mov ecx, 0x565ac0
mov eax, esi
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x426256
test dx, dx
je 0x426252
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x426256
add eax, 4
add ecx, 4
test dx, dx
jne 0x426230
xor eax, eax
jmp 0x42625b
sbb eax, eax
or eax, 1
test eax, eax
mov edi, 0x1f
mov ecx, 0xb
cmove edi, ecx
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x426282
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d2a60
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0040fbc0
push 0x80070057
call fcn.0040fbc0
int3