Function at 0x430560
Capabilities:
Reference http user-agent string
Set http header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
jmp 0x43056b
push eax
mov eax, esp
push eax
mov ecx, esp
push eax
mov edx, esp
mov dword [ebp - 0x24], edx
push eax
mov dword [ebp - 0x28], esp
push eax
mov edi, esp
push eax
mov dword [ebp - 0x18], esp
push eax
mov dword [ebp - 0x10], esp
push eax
mov ebx, esp
push eax
mov dword [ebp - 0x2c], esp
push eax
mov dword [ebp - 0x30], esp
push eax
mov dword [ebp - 0x34], esp
push eax
mov dword [ebp - 0x38], esp
push eax
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x40], eax
mov esi, dword [ebp + 0x14]
mov dword [eax], esi
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
mov dword [edx], eax
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xf9f57cf0
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
lea ecx, str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_119.0.0.0_Safari_537.36
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call eax
mov dword [edi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x406457c2
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [esi]
mov dword [ebp - 0x1c], edi
mov edx, dword [edi]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x50
mov dword [esp + 0xc], 0
call eax
mov esi, dword [ebp - 0x18]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x507048c2
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
mov edx, dword [esi]
lea esi, str.POST
xor edi, edi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call eax
mov edi, dword [ebp - 0x10]
mov dword [edi], eax
mov dword [ebx], 0x493e0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xe268a0c1
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, dword [ebx]
mov edx, dword [ebx]
mov esi, dword [ebx]
mov eax, dword [ebx]
mov ebx, dword [edi]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call dword [ebp - 0x20]
sub esp, 8
mov dword [esp], 0x96
mov dword [esp + 4], 1
call fcn.00457787
add esp, 8
mov esi, dword [ebp - 0x2c]
mov dword [esi], eax
mov eax, dword [esi]
lea ecx, str.Content_Type:_multipart_form_data__boundary_s_r_n
lea edx, str.be85de5ipdocierre1
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xab3372e8
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [esi]
mov edx, dword [edi]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call eax
cmp dword [0x4787d8], 0
setne al
test al, 1
jne 0x430786
jmp 0x430800
sub esp, 8
mov dword [esp], 0x100
mov dword [esp + 4], 1
call fcn.00457787
add esp, 8
mov esi, dword [ebp - 0x30]
mov dword [esi], eax
mov eax, dword [0x4787d4]
mov ecx, dword [esi]
lea edx, str.Cookie:___cf_mw_byp_hs
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [esi]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov eax, dword [esi]
sub esp, 4
mov dword [esp], eax
call fcn.00457bd5
add esp, 4
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xb72f0de
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
xor esi, esi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0
call eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov edi, dword [ebp - 0x38]
mov dword [edi], 0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x59886bc0
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx]
mov esi, dword [ebp - 0x10]
mov esi, dword [esi]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call eax
cmp eax, 0
setne al
test al, 1
jne 0x4308c0
jmp 0x4308b2
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x4309b8
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x76b029a
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0
call eax
cmp eax, 0
jne 0x430906
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x4309b8
jmp 0x430908
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0
setne al
test al, 1
jne 0x430917
jmp 0x430940
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x430942
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0
setne al
test al, 1
jne 0x430951
jmp 0x43097a
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
mov eax, dword [ebp - 0x10]
cmp dword [eax], 0
je 0x4309af
jmp 0x430984
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044f280
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x4309af
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret