Function at 0x47df60
Capabilities:
Prepare http request
Set http header

Disassembly:
sub esp, 0x240
mov eax, dword [0x65f810]
xor eax, esp
mov dword [esp + 0x23c], eax
push ebp
push esi
mov esi, ecx
push edi
lea ebp, [esi + 4]
push ebp
call dword [sym.imp.KERNEL32.DLL_InterlockedIncrement]
push 0x3c
lea eax, [esp + 0x10]
push 0
push eax
call fcn.00578cb0
add esp, 0xc
cmp dword [esi + 0x5c], 8
mov dword [esp + 0xc], 0x3c
jb 0x47dfa7
mov eax, dword [esi + 0x48]
jmp 0x47dfaa
lea eax, [esi + 0x48]
lea edx, [esp + 0xc]
push edx
push 0
push 0
lea ecx, [esp + 0x54]
push eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], 0x100
mov dword [esp + 0x4c], 0xffffffff
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
jne 0x47e027
mov eax, dword [esi + 0x3c]
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test eax, eax
je 0x47dfee
push eax
call edi
mov eax, dword [esi + 0x40]
test eax, eax
je 0x47dff8
push eax
call edi
push ebp
call dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
test eax, eax
jne 0x47e00d
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x23c]
xor ecx, esp
call fcn.005792fc
add esp, 0x240
ret
mov ecx, dword [esp + 0x24]
xor eax, eax
cmp dword [esp + 0x18], 2
push 0
setne al
push ecx
lea edx, [esp + 0x50]
push edx
dec eax
and eax, 0x800000
mov edi, eax
mov eax, dword [esi + 0x38]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov ecx, dword [esp + 0x38]
push edi
push 0
push 0
push 0
push ecx
push 0x61da84
push eax
mov dword [esi + 0x3c], eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [esi + 0x40], eax
test eax, eax
jne 0x47e0af
push eax
push eax
push 0x7ec
lea ecx, [esi + 0x24]
call fcn.00456240
push ebp
call dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
test eax, eax
jne 0x47e095
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x23c]
xor ecx, esp
call fcn.005792fc
add esp, 0x240
ret
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0x20000000
push 0xffffffffffffffff
push str.Accept:_text_html_____q1
push eax
call edi
mov ecx, dword [esi + 0x40]
push 0x20000000
push 0xffffffffffffffff
push str.Accept_Language:_zh_CN_q1.0
push ecx
call edi
mov edx, dword [esi + 0x40]
push 0x20000000
push 0xffffffffffffffff
push 0x5f1d3c
push edx
call edi
mov eax, dword [esi + 0x40]
push 0x20000000
push 0xffffffffffffffff
push 0x5f3780
push eax
call edi
mov ecx, dword [esi + 0x40]
push 0
push 0x7e4c00
push 0x47d9a0
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSetStatusCallback]
cmp eax, 0xffffffff
jne 0x47e149
push 0
push 0
push 0x7ec
lea ecx, [esi + 0x24]
call fcn.00456240
mov eax, dword [esi + 0x3c]
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test eax, eax
je 0x47e136
push eax
call edi
mov eax, dword [esi + 0x40]
test eax, eax
je 0x47e080
push eax
call edi
jmp 0x47e080
mov ecx, dword [esi + 0x40]
push esi
push 0
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x47e184
push eax
push eax
push 0x7ec
lea ecx, [esi + 0x24]
call fcn.00456240
mov ecx, esi
call fcn.0047d970
mov ecx, esi
call fcn.0047d810
jmp 0x47e095
mov ecx, dword [esp + 0x248]
pop edi
pop esi
pop ebp
xor ecx, esp
mov eax, 1
call fcn.005792fc
add esp, 0x240
ret