Function at 0x10008000
Capabilities:
Check http status code
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x382c
call fcn.1001a150
mov eax, dword [0x10029494]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edx, str.ENTERING________________________________________________EHOnLineModuleNeo
mov esi, 0x1002c2c8
call fcn.10001830
call fcn.1000aa60
push 0
push 0
push 0
push 0
push str.OTPDoQuery
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ebx, eax
test ebx, ebx
jne 0x1000806e
mov edx, str.ERROR_____________hSession__WinHttpOpen__________FAILED
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0x186a0
push 0x186a0
push 0x186a0
push 0x186a0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
jne 0x100080c0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edx, str.ERROR_____________bResults__WinHttpSetTimeouts__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0x1002bac0
lea eax, [ebp - 0x3808]
push 0x400
push eax
call fcn.1000bb31
add esp, 0xc
push 0
push 0x1bb
lea ecx, [ebp - 0x3808]
push ecx
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov esi, eax
mov dword [ebp - 0x381c], esi
test esi, esi
jne 0x1000812d
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edx, str.ERROR_____________hConnect__WinHttpConnect__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x3008]
call fcn.10009d10
test eax, eax
jne 0x1000816f
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edx, str.ERROR_____________GetServerUploadSystemName___________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push str._downloads_online.php_sysname
lea edx, [ebp - 0x1808]
push 0x400
push edx
call fcn.1000bb31
add esp, 0xc
lea eax, [ebp - 0x3008]
push eax
lea ecx, [ebp - 0x1808]
push 0x400
push ecx
call fcn.1000c903
add esp, 0xc
lea edx, [ebp - 0x1808]
push edx
lea eax, [ebp - 0x2008]
push 0x400
push eax
call fcn.1000bb31
add esp, 0xc
push 0x800000
push 0
push 0
push 0
lea ecx, [ebp - 0x2008]
push ecx
push 0x100214c4
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
test edi, edi
jne 0x1000821a
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push ebx
call edi
push esi
call edi
mov edx, str.ERROR_____________hRequest__WinHttpOpenRequest__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 4
lea edx, [ebp - 0x3828]
push edx
push 0x1f
push edi
mov dword [ebp - 0x3828], 0x3300
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x10008275
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push esi
call ebx
push edi
call ebx
mov edx, str.ERROR_____________bResults__WinHttpSetOption__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0
push 0
push 0
push 0
push 0
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x100082c7
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push esi
call ebx
push edi
call ebx
mov edx, str.ERROR_____________bResults__WinHttpSendRequest__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x1000830f
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push esi
call ebx
push edi
call ebx
mov edx, str.ERROR_____________bResults__WinHttpReceiveResponse__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0
lea eax, [ebp - 0x382c]
push eax
lea ecx, [ebp - 0x3820]
push ecx
push 0
push 0x20000013
push edi
mov dword [ebp - 0x3820], 0
mov dword [ebp - 0x382c], 4
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x10008380
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push esi
call ebx
push edi
call ebx
mov edx, str.ERROR_____________bResults__WinHttpQueryHeaders__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x3820], 0xc8
je 0x100083c7
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push esi
call ebx
push edi
call ebx
mov edx, str.ERROR_____________dwStatusCode___HTTP_STATUS_OK__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0x1002d2c8
lea edx, [ebp - 0x2808]
push 0x400
push edx
call fcn.1000bb31
add esp, 0xc
lea eax, [ebp - 0x2808]
push eax
lea ecx, [ebp - 0x808]
push 0x400
push ecx
call fcn.1000bb31
add esp, 0xc
push str.getfileOnline.txt
lea edx, [ebp - 0x808]
push 0x400
push edx
call fcn.1000c903
add esp, 0xc
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea eax, [ebp - 0x808]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3814], eax
cmp eax, 0xffffffff
jne 0x100084b0
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push esi
call ebx
push edi
call ebx
push str.ERROR______________hFile__INVALID_HANDLE_VALUE___FileName__
lea ecx, [ebp - 0x1008]
push 0x400
push ecx
call fcn.1000bb31
add esp, 0xc
lea edx, [ebp - 0x808]
push edx
lea eax, [ebp - 0x1008]
push 0x400
push eax
call fcn.1000c903
add esp, 0xc
lea edx, [ebp - 0x1008]
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.Leaving______________________________________________________________EHOnLineModuleNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x380c]
push ecx
push edi
mov dword [ebp - 0x380c], 0
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x100084b0
mov eax, dword [ebp - 0x380c]
test eax, eax
je 0x1000858b
push eax
mov dword [ebp - 0x3810], 0
call fcn.1000ba7a
mov ecx, dword [ebp - 0x380c]
add esp, 4
lea edx, [ebp - 0x3810]
push edx
push ecx
push eax
push edi
mov dword [ebp - 0x3824], eax
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x10008577
mov eax, dword [ebp - 0x3810]
mov ecx, dword [ebp - 0x3824]
push 0
lea edx, [ebp - 0x3818]
push edx
mov edx, dword [ebp - 0x3814]
push eax
push ecx
push edx
mov dword [ebp - 0x3818], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x10008554
mov edx, str.ERROR____________________WriteFile_failed_for_response_file
mov esi, 0x1002c2c8
call fcn.10001830
mov esi, dword [ebp - 0x381c]
mov eax, dword [ebp - 0x3810]
cmp eax, dword [ebp - 0x3818]
je 0x10008577
mov edx, str.ERROR_____________________dwBytes_dwBytesWritten__failed_for_response_file
mov esi, 0x1002c2c8
call fcn.10001830
mov esi, dword [ebp - 0x381c]
mov ecx, dword [ebp - 0x3824]
push ecx
call fcn.1000bd44
add esp, 4
jmp 0x100084b0
mov edx, dword [ebp - 0x3814]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push esi
call ebx
push edi
call ebx
mov edx, str.LEAVING________________________________________________EHOnLineModuleNeo
mov esi, 0x1002c2c8
call fcn.10001830
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov al, 1
pop ebx
call fcn.1000bb22
mov esp, ebp
pop ebp
ret