Function at 0x41c930
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x440f2d
mov eax, dword fs:[0]
push eax
mov eax, 0x1438
call fcn.004169f0
mov eax, dword [0x453160]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1370], ecx
mov ecx, dword [ebp - 0x1370]
add ecx, 8
call fcn.00402f88
test eax, eax
ja 0x41c991
mov eax, dword [ebp - 0x1370]
mov dword [eax + 0xf8], 3
xor al, al
jmp 0x4205a4
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x12b0]
call fcn.00401dcd
mov dword [ebp - 4], 0
push 0x449784
lea ecx, [ebp - 0x12b0]
call fcn.0040335f
push eax
call fcn.00416ec6
add esp, 8
test eax, eax
jne 0x41c9d6
push 0x449784
lea ecx, [ebp - 0x12b0]
call fcn.00401e1a
jmp 0x41ca39
push str.POST
lea ecx, [ebp - 0x12b0]
call fcn.0040335f
push eax
call fcn.00416ec6
add esp, 8
test eax, eax
jne 0x41ca05
push str.POST
lea ecx, [ebp - 0x12b0]
call fcn.00401e1a
jmp 0x41ca39
mov edx, dword [ebp - 0x1370]
mov dword [edx + 0xf8], 0x57
mov byte [ebp - 0x1395], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12b0]
call fcn.0040336a
mov al, byte [ebp - 0x1395]
jmp 0x4205a4
mov byte [ebp - 0x1371], 1
mov eax, dword [ebp - 0x1370]
cmp dword [eax], 0
jne 0x41cab4
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x1370]
add ecx, 0x114
call fcn.0040335f
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1370]
cmp dword [edx], 0
jne 0x41cab4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
mov byte [ebp - 0x139d], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12b0]
call fcn.0040336a
mov al, byte [ebp - 0x139d]
jmp 0x4205a4
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x184]
push eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ecx + 0x180]
push edx
mov eax, dword [ebp - 0x1370]
mov ecx, dword [eax + 0x17c]
push ecx
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x178]
push eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ecx]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
mov ax, word [0x44b22c]
mov word [ebp - 0x218], ax
push 0x206
push 0
lea ecx, [ebp - 0x216]
push ecx
call fcn.004104a0
add esp, 0xc
mov dx, word [0x44b22c]
mov word [ebp - 0x1258], dx
push 0xa26
push 0
lea eax, [ebp - 0x1256]
push eax
call fcn.004104a0
add esp, 0xc
push 0x3c
push 0
lea ecx, [ebp - 0x136c]
push ecx
call fcn.004104a0
add esp, 0xc
mov dword [ebp - 0x136c], 0x3c
lea edx, [ebp - 0x218]
mov dword [ebp - 0x135c], edx
mov dword [ebp - 0x1358], 0x104
lea eax, [ebp - 0x1258]
mov dword [ebp - 0x1340], eax
mov dword [ebp - 0x133c], 0x514
mov dword [ebp - 0x1364], 1
lea ecx, [ebp - 0x136c]
push ecx
push 0
mov ecx, dword [ebp - 0x1370]
add ecx, 8
call fcn.00402f88
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 8
call fcn.0040335f
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x420579
lea edx, [ebp - 0x218]
push edx
mov ecx, dword [ebp - 0x1370]
add ecx, 0x20
call fcn.00401e1a
mov dword [ebp - 0x13bc], 0
push 0
movzx eax, word [ebp - 0x1354]
push eax
lea ecx, [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x13bc], eax
cmp dword [ebp - 0x13bc], 0
je 0x420577
cmp dword [ebp - 0x1360], 2
jne 0x41cc2d
mov dword [ebp - 0x13d8], 0x800000
jmp 0x41cc37
mov dword [ebp - 0x13d8], 0
mov ecx, dword [ebp - 0x13d8]
mov dword [ebp - 0x13e4], ecx
mov dword [ebp - 0x1378], 0
mov edx, dword [ebp - 0x13e4]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x1340]
push eax
lea ecx, [ebp - 0x12b0]
call fcn.0040335f
push eax
mov ecx, dword [ebp - 0x13bc]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x1378], eax
cmp dword [ebp - 0x1378], 0
je 0x42056a
mov edx, dword [ebp - 0x1370]
movzx eax, byte [edx + 4]
test eax, eax
jne 0x41ccc6
cmp dword [ebp - 0x1360], 2
jne 0x41ccc6
mov dword [ebp - 0x1280], 0x3100
push 4
lea ecx, [ebp - 0x1280]
push ecx
push 0x1f
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
adc eax, sym.imp.WINHTTP.dll_WinHttpSetOption
mov byte [ebp - 0x1379], 0
mov dword [ebp - 0x13c0], 0
pushal
xor eax, eax
xor ebx, ebx
je 0x41f2e5
add byte [ecx - 0x7d], al
lds eax, [edi]
dec eax
mov cl, ah
push cs
dec edi
xchg ecx, eax
rcl dword [0x1cda9857], cl
pop esi
lahf
loope 0x41cd1a
cmpsd dword gs:[esi], dword es:[edi]
call 0xeff03928
xor dword [ebx - 0x4b], esi
idiv dword [eax]
jp 0x41ccc1
invalid
arpl word [ebp - 0x5395d71a], sp
out dx, al
das
jno 0x41ccd7
cmc
js 0x41cce2
cld
cmp eax, 0x4503c17f
xchg al, cl
or cl, byte [ebp + ecx*4 - 0x31]
adc dword [ebx - 0x6b], edx
salc
sbb byte [edx - 0x64], bl
fstp qword [edi]
popal
mov dword [0xaa6826e5], eax
in al, dx
sub eax, 0x35f3b16f
jbe 0x41cd03
cli
cmp al, 0x7d
mov edi, 0xc6844301
inc ebx
test dh, al
or byte [edx - 0x74], cl
int 0xf
push ecx
xchg ebx, eax
aam 0x16
pop eax
lcall 0x24e3, 0xa15f1ddc
test al, 0xea
sub al, 0x6d
scasd eax, dword es:[edi]
int1
xor esi, dword [esi + esi*4 - 8]
cmp bh, byte [ebx - 0x43]
inc dword [ecx - 0x7d]
les eax, [esi]
dec eax
mov cl, bl
or eax, 0x14d3914f
push esi
cwde
ficomp dword [ebx]
pop ebp
lahf
loope 0x41cdaa
ljmp 0x7433:0xf1af6d2c
cmpsb byte fs:[esi], byte es:[edi]
call 0xefef38b8
xor dword [ebx - 0x4c], esi
idiv byte [eax]
jp 0x41cd50
std
aas
add edx, 0xca884604
or ecx, dword [ebp - 0x71]
rcl dword [edx]
push esp
xchg esi, eax
fcomp dword [edx]
pop ebx
popfd
fbld tbyte [ecx]
bound esp, qword [esi - 0x125495d8]
das
jno 0x41cd66
hlt
popal
movzx eax, byte [ebp - 0x1379]
test eax, eax
jne 0x42054b
mov ecx, dword [ebp - 0x13c0]
mov dword [ebp - 0x140c], ecx
mov edx, dword [ebp - 0x13c0]
add edx, 1
mov dword [ebp - 0x13c0], edx
cmp dword [ebp - 0x140c], 3
jae 0x42054b
mov ecx, dword [ebp - 0x1370]
add ecx, 0xc8
call fcn.00402f88
test eax, eax
jbe 0x41f37e
push 0x1000000
mov ecx, dword [ebp - 0x1370]
add ecx, 0xc8
call fcn.00402f88
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0xc8
call fcn.0040335f
push eax
mov eax, dword [ebp - 0x1378]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x41f37e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0xa8
call fcn.00402f88
test eax, eax
jbe 0x41f40e
push str.Cookie:
lea ecx, [ebp - 0x12c8]
call fcn.0040332e
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x1370]
add edx, 0xa8
push edx
lea ecx, [ebp - 0x12c8]
call fcn.00403d8e
push 0x1000000
lea ecx, [ebp - 0x12c8]
call fcn.00402f88
push eax
lea ecx, [ebp - 0x12c8]
call fcn.0040335f
push eax
mov eax, dword [ebp - 0x1378]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x41f3ff
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12c8]
call fcn.0040336a
mov ecx, dword [ebp - 0x1370]
add ecx, 0xe0
call fcn.00402f88
test eax, eax
jbe 0x41f592
xor edx, edx
mov dword [ebp - 0x1330], edx
mov dword [ebp - 0x132c], edx
mov dword [ebp - 0x1328], edx
mov dword [ebp - 0x1330], 3
mov ax, word [0x44b22c]
mov word [ebp - 0x830], ax
push 0x206
push 0
lea ecx, [ebp - 0x82e]
push ecx
call fcn.004104a0
add esp, 0xc
mov ecx, dword [ebp - 0x1370]
add ecx, 0xe0
call fcn.0040335f
push eax
push 0x104
lea edx, [ebp - 0x830]
push edx
call fcn.00409765
add esp, 0xc
lea eax, [ebp - 0x830]
mov dword [ebp - 0x132c], eax
push 0xc
lea ecx, [ebp - 0x1330]
push ecx
push 0x26
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x41f4c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x130
call fcn.00402f88
test eax, eax
jbe 0x41f592
mov ecx, dword [ebp - 0x1370]
add ecx, 0x130
call fcn.00402f88
shl eax, 1
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x130
call fcn.0040335f
push eax
push 0x1002
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x41f52f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x148
call fcn.00402f88
test eax, eax
jbe 0x41f592
mov ecx, dword [ebp - 0x1370]
add ecx, 0x148
call fcn.00402f88
shl eax, 1
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x148
call fcn.0040335f
push eax
push 0x1003
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x41f592
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
movzx edx, byte [ebp + 0xc]
test edx, edx
je 0x41f5d2
mov dword [ebp - 0x1278], 2
push 4
lea eax, [ebp - 0x1278]
push eax
push 0x3f
mov ecx, dword [ebp - 0x1378]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x41f5d2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x1370]
mov dword [edx + 0xf8], eax
mov byte [ebp - 0x137a], 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x1378]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x41f602
mov byte [ebp - 0x137a], 1
jmp 0x41f8b8
xor ecx, ecx
mov dword [ebp - 0x12f4], ecx
mov dword [ebp - 0x12f0], ecx
mov dword [ebp - 0x12ec], ecx
mov dword [ebp - 0x12e8], ecx
lea edx, [ebp - 0x12f4]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x41f8a6
cmp dword [ebp - 0x12f0], 0
je 0x41f76b
xor eax, eax
mov dword [ebp - 0x1324], eax
mov dword [ebp - 0x1320], eax
mov dword [ebp - 0x131c], eax
mov dword [ebp - 0x1318], eax
mov dword [ebp - 0x1314], eax
mov dword [ebp - 0x1310], eax
mov dword [ebp - 0x1324], 3
mov dword [ebp - 0x1320], 1
mov ecx, dword [ebp - 0x12f0]
mov dword [ebp - 0x131c], ecx
mov dword [ebp - 0x1310], 1
mov dword [ebp - 0x1314], 0
mov dword [ebp - 0x1318], 0
xor edx, edx
mov dword [ebp - 0x1300], edx
mov dword [ebp - 0x12fc], edx
mov dword [ebp - 0x12f8], edx
lea eax, [ebp - 0x1300]
push eax
lea ecx, [ebp - 0x1324]
push ecx
mov ecx, dword [ebp - 0x1370]
add ecx, 8
call fcn.0040335f
push eax
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x41f754
push 0xc
lea ecx, [ebp - 0x1300]
push ecx
push 0x26
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x41f726
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x1378]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x41f726
mov byte [ebp - 0x137a], 1
cmp dword [ebp - 0x12fc], 0
je 0x41f73c
mov ecx, dword [ebp - 0x12fc]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 0x12f8], 0
je 0x41f752
mov edx, dword [ebp - 0x12f8]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x41f766
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
jmp 0x41f862
cmp dword [ebp - 0x12ec], 0
je 0x41f862
xor edx, edx
mov dword [ebp - 0x130c], edx
mov dword [ebp - 0x1308], edx
mov dword [ebp - 0x1304], edx
mov dword [ebp - 0x130c], 3
mov ax, word [0x44b22c]
mov word [ebp - 0x628], ax
push 0x206
push 0
lea ecx, [ebp - 0x626]
push ecx
call fcn.004104a0
add esp, 0xc
mov edx, dword [ebp - 0x12ec]
push edx
push 0x104
lea eax, [ebp - 0x628]
push eax
call fcn.00409765
add esp, 0xc
lea ecx, [ebp - 0x628]
mov dword [ebp - 0x1308], ecx
cmp dword [ebp - 0x12e8], 0
je 0x41f834
mov dx, word [0x44b22c]
mov word [ebp - 0x420], dx
push 0x206
push 0
lea eax, [ebp - 0x41e]
push eax
call fcn.004104a0
add esp, 0xc
mov ecx, dword [ebp - 0x12e8]
push ecx
push 0x104
lea edx, [ebp - 0x420]
push edx
call fcn.00409765
add esp, 0xc
lea eax, [ebp - 0x420]
mov dword [ebp - 0x1304], eax
push 0xc
lea ecx, [ebp - 0x130c]
push ecx
push 0x26
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x41f862
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
cmp dword [ebp - 0x12f0], 0
je 0x41f878
mov edx, dword [ebp - 0x12f0]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 0x12ec], 0
je 0x41f88e
mov eax, dword [ebp - 0x12ec]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 0x12e8], 0
je 0x41f8a4
mov ecx, dword [ebp - 0x12e8]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x41f8b8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x1370]
mov dword [edx + 0xf8], eax
movzx eax, byte [ebp - 0x137a]
test eax, eax
je 0x420546
mov ecx, dword [ebp - 0x1370]
cmp dword [ecx + 0xc0], 0
je 0x41f924
mov dword [ebp - 0x127c], 0
lea edx, [ebp - 0x127c]
push edx
mov eax, dword [ebp - 0x1370]
mov ecx, dword [eax + 0xc4]
push ecx
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0xc0]
push eax
mov ecx, dword [ebp - 0x1378]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x41f924
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x1370]
mov dword [edx + 0xf8], eax
push 0
mov eax, dword [ebp - 0x1378]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x420534
mov dword [ebp - 0x12e4], 0
mov dword [ebp - 0x13a8], 0
push 0
lea ecx, [ebp - 0x12e4]
push ecx
push 0
push 0
push 0x16
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov dword [ebp - 0x13a8], eax
cmp dword [ebp - 0x13a8], 0
jne 0x41f996
cmp dword [ebp - 0x13a8], 0
jne 0x41fdb5
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x41fdb5
xor ecx, ecx
mov eax, dword [ebp - 0x12e4]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004084f3
add esp, 4
mov dword [ebp - 0x1414], eax
mov eax, dword [ebp - 0x1414]
mov dword [ebp - 0x138c], eax
cmp dword [ebp - 0x138c], 0
je 0x41fdb5
mov ecx, dword [ebp - 0x12e4]
shl ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x138c]
push edx
call fcn.004104a0
add esp, 0xc
push 0
lea eax, [ebp - 0x12e4]
push eax
mov ecx, dword [ebp - 0x138c]
push ecx
push 0
push 0x16
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x41fd6f
mov eax, dword [ebp - 0x138c]
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x38
call fcn.00401e1a
push 1
lea ecx, [ebp - 0x1264]
call fcn.0040150e
lea ecx, [ebp - 0x1264]
call fcn.00401f44
mov byte [ebp - 4], 2
push 0x44b22c
lea ecx, [ebp - 0x1298]
call fcn.0040332e
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1370]
movzx edx, byte [ecx + 0x12c]
test edx, edx
jne 0x41fad5
push str.charset_A_Za_z0_9___
lea ecx, [ebp - 0x1298]
call fcn.00401e1a
push 0
lea eax, [ebp - 0x1264]
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x38
push ecx
push 1
push 0
lea edx, [ebp - 0x1298]
push edx
call fcn.0041be30
add esp, 0x18
movzx eax, al
test eax, eax
je 0x41fad5
lea ecx, [ebp - 0x1264]
call fcn.00401fc3
test eax, eax
jbe 0x41fad5
push 0
lea ecx, [ebp - 0x1264]
call fcn.00401fcf
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x68
call fcn.00402f2e
push str.Content_Length:__0_9_
lea ecx, [ebp - 0x1298]
call fcn.00401e1a
push 0
lea ecx, [ebp - 0x1264]
push ecx
mov edx, dword [ebp - 0x1370]
add edx, 0x38
push edx
push 1
push 0
lea eax, [ebp - 0x1298]
push eax
call fcn.0041be30
add esp, 0x18
movzx ecx, al
test ecx, ecx
je 0x41fb4a
lea ecx, [ebp - 0x1264]
call fcn.00401fc3
test eax, eax
jbe 0x41fb4a
push 0
lea ecx, [ebp - 0x1264]
call fcn.00401fcf
mov ecx, eax
call fcn.0040335f
push eax
call fcn.00408c04
add esp, 4
mov edx, dword [ebp - 0x1370]
mov dword [edx + 0x8c], eax
push str.Location:__0_9_
lea ecx, [ebp - 0x1298]
call fcn.00401e1a
push 0
lea eax, [ebp - 0x1264]
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x38
push ecx
push 1
push 0
lea edx, [ebp - 0x1298]
push edx
call fcn.0041be30
add esp, 0x18
movzx eax, al
test eax, eax
je 0x41fbb5
lea ecx, [ebp - 0x1264]
call fcn.00401fc3
test eax, eax
jbe 0x41fbb5
push 0
lea ecx, [ebp - 0x1264]
call fcn.00401fcf
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x160
call fcn.00402f2e
push str.Set_Cookie:_b.__n
lea ecx, [ebp - 0x1298]
call fcn.00401e1a
push 0
lea ecx, [ebp - 0x1264]
push ecx
mov edx, dword [ebp - 0x1370]
add edx, 0x38
push edx
push 1
push 0
lea eax, [ebp - 0x1298]
push eax
call fcn.0041be30
add esp, 0x18
movzx ecx, al
test ecx, ecx
je 0x41fd51
lea ecx, [ebp - 0x1264]
call fcn.00401fc3
test eax, eax
jbe 0x41fd51
mov dword [ebp - 0x13b4], 0
jmp 0x41fc24
mov edx, dword [ebp - 0x13b4]
add edx, 1
mov dword [ebp - 0x13b4], edx
lea ecx, [ebp - 0x1264]
call fcn.00401fc3
cmp dword [ebp - 0x13b4], eax
jae 0x41fc89
mov eax, dword [ebp - 0x13b4]
push eax
lea ecx, [ebp - 0x1264]
call fcn.00401fcf
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x90
call fcn.00403d8e
lea ecx, [ebp - 0x1264]
call fcn.00401fc3
sub eax, 1
cmp dword [ebp - 0x13b4], eax
je 0x41fc87
push 0x449868
mov ecx, dword [ebp - 0x1370]
add ecx, 0x90
call fcn.00403b80
jmp 0x41fc15
push 0x449870
lea ecx, [ebp - 0x142c]
call fcn.0040332e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x142c]
push ecx
mov edx, dword [ebp - 0x1370]
add edx, 0x90
push edx
lea eax, [ebp - 0x1444]
push eax
call fcn.004221e0
add esp, 0xc
mov dword [ebp - 0x13e8], eax
mov ecx, dword [ebp - 0x13e8]
push ecx
mov ecx, dword [ebp - 0x1370]
add ecx, 0x90
call fcn.00401df5
lea ecx, [ebp - 0x1444]
call fcn.0040336a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x142c]
call fcn.0040336a
mov ecx, dword [ebp - 0x1370]
add ecx, 0x90
call fcn.00402f88
test eax, eax
jbe 0x41fd51
mov ecx, dword [ebp - 0x1370]
add ecx, 0x90
call fcn.00402f88
sub eax, 1
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x90
call fcn.00403dda
movzx edx, word [eax]
cmp edx, 0x3b
je 0x41fd51
push 0x4454c0
mov ecx, dword [ebp - 0x1370]
add ecx, 0x90
call fcn.00403b80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1298]
call fcn.0040336a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1264]
call fcn.00401fbe
mov eax, dword [ebp - 0x138c]
mov dword [ebp - 0x13cc], eax
mov ecx, dword [ebp - 0x13cc]
push ecx
call fcn.00408c3d
add esp, 4
cmp dword [ebp - 0x13cc], 0
jne 0x41fd9f
mov dword [ebp - 0x13dc], 0
jmp 0x41fdb5
mov dword [ebp - 0x138c], 0x8123
mov edx, dword [ebp - 0x138c]
mov dword [ebp - 0x13dc], edx
mov dword [ebp - 0x12e4], 0
push 0
lea eax, [ebp - 0x12e4]
push eax
push 0
push 0
push 0x13
mov ecx, dword [ebp - 0x1378]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov dword [ebp - 0x13a8], eax
cmp dword [ebp - 0x13a8], 0
jne 0x41fe06
cmp dword [ebp - 0x13a8], 0
jne 0x41fee1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x41fee1
xor ecx, ecx
mov eax, dword [ebp - 0x12e4]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004084f3
add esp, 4
mov dword [ebp - 0x13ec], eax
mov eax, dword [ebp - 0x13ec]
mov dword [ebp - 0x13a4], eax
cmp dword [ebp - 0x13a4], 0
je 0x41fee1
mov ecx, dword [ebp - 0x12e4]
shl ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x13a4]
push edx
call fcn.004104a0
add esp, 0xc
push 0
lea eax, [ebp - 0x12e4]
push eax
mov ecx, dword [ebp - 0x13a4]
push ecx
push 0
push 0x13
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x41fe9b
mov eax, dword [ebp - 0x13a4]
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0xfc
call fcn.00401e1a
mov ecx, dword [ebp - 0x13a4]
mov dword [ebp - 0x13d4], ecx
mov edx, dword [ebp - 0x13d4]
push edx
call fcn.00408c3d
add esp, 4
cmp dword [ebp - 0x13d4], 0
jne 0x41fecb
mov dword [ebp - 0x1400], 0
jmp 0x41fee1
mov dword [ebp - 0x13a4], 0x8123
mov eax, dword [ebp - 0x13a4]
mov dword [ebp - 0x1400], eax
mov dword [ebp - 0x139c], 0x2800
mov dword [ebp - 0x1380], 0
mov ecx, dword [ebp - 0x1370]
cmp dword [ecx + 0x80], 0
je 0x41ff35
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x80]
mov dword [ebp - 0x13f0], eax
mov ecx, dword [ebp - 0x13f0]
push ecx
call fcn.00408c3d
add esp, 4
mov edx, dword [ebp - 0x1370]
mov dword [edx + 0x80], 0
mov eax, dword [ebp - 0x139c]
push eax
call fcn.004084f3
add esp, 4
mov dword [ebp - 0x1410], eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ebp - 0x1410]
mov dword [ecx + 0x80], edx
mov eax, dword [ebp - 0x1370]
cmp dword [eax + 0x80], 0
jne 0x41ff77
mov byte [ebp - 0x1371], 0
jmp 0x42054b
mov ecx, dword [ebp - 0x139c]
push ecx
push 0
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x80]
push eax
call fcn.004104a0
add esp, 0xc
mov dword [ebp - 0x12e4], 0
lea ecx, [ebp - 0x12e4]
push ecx
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x4201e5
mov eax, dword [ebp - 0x1380]
push eax
mov ecx, dword [ebp - 0x1370]
call fcn.00420960
mov ecx, dword [ebp - 0x12e4]
add ecx, 1
push ecx
call fcn.004084f3
add esp, 4
mov dword [ebp - 0x13f8], eax
mov edx, dword [ebp - 0x13f8]
mov dword [ebp - 0x1394], edx
cmp dword [ebp - 0x1394], 0
je 0x4201e3
mov eax, dword [ebp - 0x12e4]
add eax, 1
push eax
push 0
mov ecx, dword [ebp - 0x1394]
push ecx
call fcn.004104a0
add esp, 0xc
mov dword [ebp - 0x1268], 0
lea edx, [ebp - 0x1268]
push edx
mov eax, dword [ebp - 0x12e4]
push eax
mov ecx, dword [ebp - 0x1394]
push ecx
mov edx, dword [ebp - 0x1378]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x42019d
mov eax, dword [ebp - 0x1268]
add eax, dword [ebp - 0x1380]
cmp eax, dword [ebp - 0x139c]
jbe 0x420162
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x13ac], edx
mov eax, dword [ebp - 0x139c]
shl eax, 1
push eax
call fcn.004084f3
add esp, 4
mov dword [ebp - 0x1408], eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ebp - 0x1408]
mov dword [ecx + 0x80], edx
mov eax, dword [ebp - 0x1370]
cmp dword [eax + 0x80], 0
jne 0x4200cd
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ebp - 0x13ac]
mov dword [ecx + 0x80], edx
mov byte [ebp - 0x1371], 0
jmp 0x420204
mov eax, dword [ebp - 0x139c]
shl eax, 1
mov dword [ebp - 0x139c], eax
mov ecx, dword [ebp - 0x139c]
push ecx
push 0
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x80]
push eax
call fcn.004104a0
add esp, 0xc
mov ecx, dword [ebp - 0x1380]
push ecx
mov edx, dword [ebp - 0x13ac]
push edx
mov eax, dword [ebp - 0x1370]
mov ecx, dword [eax + 0x80]
push ecx
call fcn.00409950
add esp, 0xc
mov edx, dword [ebp - 0x13ac]
mov dword [ebp - 0x13c8], edx
mov eax, dword [ebp - 0x13c8]
push eax
call fcn.00408c3d
add esp, 4
cmp dword [ebp - 0x13c8], 0
jne 0x42014c
mov dword [ebp - 0x13e0], 0
jmp 0x420162
mov dword [ebp - 0x13ac], 0x8123
mov ecx, dword [ebp - 0x13ac]
mov dword [ebp - 0x13e0], ecx
mov edx, dword [ebp - 0x1268]
push edx
mov eax, dword [ebp - 0x1394]
push eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ecx + 0x80]
add edx, dword [ebp - 0x1380]
push edx
call fcn.00409950
add esp, 0xc
mov eax, dword [ebp - 0x1380]
add eax, dword [ebp - 0x1268]
mov dword [ebp - 0x1380], eax
mov ecx, dword [ebp - 0x1394]
mov dword [ebp - 0x13d0], ecx
mov edx, dword [ebp - 0x13d0]
push edx
call fcn.00408c3d
add esp, 4
cmp dword [ebp - 0x13d0], 0
jne 0x4201cd
mov dword [ebp - 0x13f4], 0
jmp 0x4201e3
mov dword [ebp - 0x1394], 0x8123
mov eax, dword [ebp - 0x1394]
mov dword [ebp - 0x13f4], eax
jmp 0x4201f7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
cmp dword [ebp - 0x12e4], 0
ja 0x41ff95
mov edx, dword [ebp - 0x1380]
push edx
mov ecx, dword [ebp - 0x1370]
call fcn.00420960
mov eax, dword [ebp - 0x1370]
mov ecx, dword [ebp - 0x1380]
mov dword [eax + 0x84], ecx
mov dword [ebp - 0x13b8], 0
mov dword [ebp - 0x13b0], 1
push 5
push 0x449874
mov ecx, dword [ebp - 0x1370]
add ecx, 0x68
call fcn.0040335f
push eax
call fcn.00417032
add esp, 0xc
test eax, eax
jne 0x420272
mov dword [ebp - 0x13b8], 0xfde9
mov dword [ebp - 0x13b0], 0
push 0
push 0
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x84]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ecx + 0x80]
push edx
mov eax, dword [ebp - 0x13b0]
push eax
mov ecx, dword [ebp - 0x13b8]
push ecx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x1384], eax
cmp dword [ebp - 0x1384], 0
jg 0x420305
mov dword [ebp - 0x13b8], 0
mov dword [ebp - 0x13b0], 1
push 0
push 0
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x84]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ecx + 0x80]
push edx
mov eax, dword [ebp - 0x13b0]
push eax
mov ecx, dword [ebp - 0x13b8]
push ecx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x1384], eax
cmp dword [ebp - 0x1384], 0
jle 0x420413
xor ecx, ecx
mov eax, dword [ebp - 0x1384]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004084f3
add esp, 4
mov dword [ebp - 0x13fc], eax
mov eax, dword [ebp - 0x13fc]
mov dword [ebp - 0x1388], eax
cmp dword [ebp - 0x1388], 0
je 0x420413
mov ecx, dword [ebp - 0x1384]
shl ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x1388]
push edx
call fcn.004104a0
add esp, 0xc
mov eax, dword [ebp - 0x1384]
push eax
mov ecx, dword [ebp - 0x1388]
push ecx
mov edx, dword [ebp - 0x1370]
mov eax, dword [edx + 0x84]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1370]
mov edx, dword [ecx + 0x80]
push edx
mov eax, dword [ebp - 0x13b0]
push eax
mov ecx, dword [ebp - 0x13b8]
push ecx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x1384], eax
cmp dword [ebp - 0x1384], 0
jle 0x4203cd
mov edx, dword [ebp - 0x1388]
push edx
mov ecx, dword [ebp - 0x1370]
add ecx, 0x50
call fcn.00401e1a
mov eax, dword [ebp - 0x1388]
mov dword [ebp - 0x13c4], eax
mov ecx, dword [ebp - 0x13c4]
push ecx
call fcn.00408c3d
add esp, 4
cmp dword [ebp - 0x13c4], 0
jne 0x4203fd
mov dword [ebp - 0x1404], 0
jmp 0x420413
mov dword [ebp - 0x1388], 0x8123
mov edx, dword [ebp - 0x1388]
mov dword [ebp - 0x1404], edx
mov byte [ebp - 0x1379], 1
push 0x449784
lea eax, [ebp - 0x12b0]
push eax
call fcn.00417e60
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x420532
movzx edx, byte [ebp + 0xc]
test edx, edx
jne 0x420532
push str._html_
lea ecx, [ebp - 0x12e0]
call fcn.0040332e
mov byte [ebp - 4], 5
push 1
lea ecx, [ebp - 0x1274]
call fcn.0040150e
lea ecx, [ebp - 0x1274]
call fcn.00401f44
mov byte [ebp - 4], 6
push 0
lea eax, [ebp - 0x1274]
push eax
mov ecx, dword [ebp - 0x1370]
add ecx, 0x50
push ecx
push 1
push 0
lea edx, [ebp - 0x12e0]
push edx
call fcn.0041be30
add esp, 0x18
movzx eax, al
test eax, eax
je 0x420514
lea ecx, [ebp - 0x1274]
call fcn.00401fc3
test eax, eax
jbe 0x420514
push str.__html_
lea ecx, [ebp - 0x12e0]
call fcn.00401e1a
push 0
lea ecx, [ebp - 0x1274]
push ecx
mov edx, dword [ebp - 0x1370]
add edx, 0x50
push edx
push 1
push 0
lea eax, [ebp - 0x12e0]
push eax
call fcn.0041be30
add esp, 0x18
movzx ecx, al
test ecx, ecx
je 0x4204fd
lea ecx, [ebp - 0x1274]
call fcn.00401fc3
test eax, eax
ja 0x420514
mov edx, dword [ebp - 0x1370]
mov dword [edx + 0xf8], 0xd
mov byte [ebp - 0x1379], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1274]
call fcn.00401fbe
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12e0]
call fcn.0040336a
jmp 0x420546
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1370]
mov dword [ecx + 0xf8], eax
jmp 0x41f2e6
movzx edx, byte [ebp - 0x1379]
test edx, edx
jne 0x42055d
mov byte [ebp - 0x1371], 0
mov eax, dword [ebp - 0x1378]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov ecx, dword [ebp - 0x13bc]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x420580
mov byte [ebp - 0x1371], 0
mov dl, byte [ebp - 0x1371]
mov byte [ebp - 0x138d], dl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12b0]
call fcn.0040336a
mov al, byte [ebp - 0x138d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00408550
mov esp, ebp
pop ebp
ret 8