Function at 0x402960
Capabilities:
Prepare http request
Receive http response

Disassembly:
sub esp, 0x20
mov eax, dword [esp + 0x28]
push eax
push 0x9a8420
mov byte [esp + 0xb], 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov dword [ecx], 0
test eax, eax
je 0x402990
mov dword [eax], 0x9a8420
mov eax, dword [esp + 0x44]
test eax, eax
je 0x40299e
mov dword [eax], 0
push ebx
mov ebx, dword [esp + 0x34]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
push edi
lea esp, [esp]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0x9a3408
push 0x99e3f0
xor esi, esi
push 0x9a8420
mov dword [esp + 0x64], esi
call fcn.00402200
add esp, 0x14
test al, al
je 0x402c9e
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
push esi
push ecx
push 0x99e3f0
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov edi, eax
mov dword [esp + 0x24], edi
cmp edi, esi
je 0x402c88
movzx eax, byte [esp + 0x1c]
neg eax
sbb eax, eax
and eax, 0x800000
push eax
lea ecx, [esp + 0x2c]
push ecx
push esi
push esi
push 0x9a3408
push 0x4164c8
push edi
mov dword [esp + 0x44], 0x4055bc
mov dword [esp + 0x48], esi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov esi, eax
test esi, esi
je 0x402c4f
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
push 4
lea edx, [esp + 0x18]
push edx
push 0x1f
push esi
mov dword [esp + 0x24], 0x3100
call edi
push 4
lea eax, [esp + 0x18]
push eax
push 0x3f
push esi
mov dword [esp + 0x24], 2
call edi
push str.Content_Type:_application_x_www_form_urlencoded_r_n
push 0x9993d8
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [esp + 0x44]
lea edi, [ebx + ecx - 1]
push edi
push ebx
push str.Range:_bytes_u__u_r_n
push 0x9943c0
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0x9943c0
push 0x9993d8
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
push 0x41b4e0
call ebp
push eax
push 0x41b4e0
call ebp
movsx edx, byte [0x41b4e0]
neg edx
sbb edx, edx
push eax
and edx, 0x41b4e0
push edx
push 0x9993d8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push 0x9993d8
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x402b54
mov eax, dword [esp + 0x34]
push 0x9a8420
push eax
push esi
call fcn.004028d0
add esp, 0xc
test al, al
je 0x402c38
push 1
call fcn.00401980
add esp, 4
push 0
push 0x41b4e0
call ebp
push eax
push 0x41b4e0
call ebp
movsx ecx, byte [0x41b4e0]
neg ecx
sbb ecx, ecx
push eax
and ecx, 0x41b4e0
push ecx
push 0x9993d8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push 0x9993d8
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x402c38
push 0
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x402c34
push esi
call fcn.00402430
push esi
mov dword [esp + 0x28], eax
call fcn.00402290
mov ecx, eax
push ecx
mov dword [esp + 0x5c], ecx
call fcn.00401970
lea edx, [ecx - 0x12c]
add esp, 0xc
cmp edx, 0x63
ja 0x402bef
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push 0x99e3f0
push esi
call fcn.00402470
add esp, 0x10
test eax, eax
je 0x402c42
mov ecx, dword [esp + 0x50]
cmp ecx, 0x12e
je 0x402bd6
cmp ecx, 0x12f
je 0x402bd6
mov ecx, dword [esp + 0x54]
mov byte [esp + 0x13], 1
test ecx, ecx
je 0x402bd2
mov dword [ecx], eax
push 0x10
jmp 0x402c3a
push eax
push 0x9a8420
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edi, dword [esp + 0x24]
jmp 0x402c59
cmp ecx, 0xce
jne 0x402c30
mov edx, dword [esp + 0x44]
cmp dword [esp + 0x20], edx
jne 0x402c2c
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
push eax
push ecx
push edi
push ebx
push edx
push esi
call fcn.00402610
add esp, 0x18
push esi
mov byte [esp + 0x17], al
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edi, dword [esp + 0x24]
jmp 0x402c59
push 0x11
jmp 0x402c3a
push 0xe
jmp 0x402c3a
push 3
jmp 0x402c3a
push 0xd
call fcn.00401950
add esp, 4
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edi, dword [esp + 0x24]
jmp 0x402c59
push 0xc
call fcn.00401950
add esp, 4
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [esp + 0x50], 0x12e
je 0x4029b0
cmp dword [esp + 0x50], 0x12f
je 0x4029b0
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
push 0xb
call fcn.00401950
mov al, byte [esp + 0x17]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
push 0xa
call fcn.00401950
mov al, byte [esp + 0x17]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret