Function at 0x4f4c90
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x611775
mov eax, dword fs:[0]
push eax
sub esp, 0x200
mov eax, dword [0x6ba394]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x208], edx
mov edi, ecx
mov dword [ebp - 0x1f0], edi
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x1f8], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x20c], 0
mov eax, dword [eax]
mov dword [ebp - 0x1f4], eax
mov ecx, eax
mov eax, dword [0x6cbb98]
cmp eax, dword [ecx + 4]
jle 0x4f4d4b
push 0x6cbb98
call fcn.005b1800
add esp, 4
cmp dword [0x6cbb98], 0xffffffff
jne 0x4f4d45
push str.UserCheck_data_GetUserCheckIncidentData
mov ecx, 0x6cbb9c
mov dword [ebp - 4], 0
call fcn.004347d0
push 0x623fd0
call fcn.005b1b57
push 0x6cbb98
call fcn.005b17c1
add esp, 8
mov ecx, dword [ebp - 0x1f4]
mov eax, dword [0x6cbbb4]
cmp eax, dword [ecx + 4]
jle 0x4f4dc7
push 0x6cbbb4
call fcn.005b1800
add esp, 4
cmp dword [0x6cbbb4], 0xffffffff
jne 0x4f4dc1
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 1
push eax
call fcn.0058dee4
push eax
push str.EP_Forensics__
push 0x6cbbb8
mov byte [ebp - 4], 2
call fcn.00438d70
mov eax, dword [ebp - 0x30]
add esp, 0x10
cmp eax, 8
jb 0x4f4daa
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.00434bd0
push 0x623f70
call fcn.005b1b57
push 0x6cbbb4
call fcn.005b17c1
add esp, 8
mov ecx, dword [ebp - 0x1f4]
mov eax, dword [0x6cbbd0]
cmp eax, dword [ecx + 4]
jle 0x4f4e17
push 0x6cbbd0
call fcn.005b1800
add esp, 4
cmp dword [0x6cbbd0], 0xffffffff
jne 0x4f4e17
push str.Content_Type:_application_x_www_form_urlencoded_r_nCache_Control:_no_cache
mov ecx, 0x6cbbd4
mov dword [ebp - 4], 3
call fcn.004347d0
push 0x623f10
call fcn.005b1b57
push 0x6cbbd0
call fcn.005b17c1
add esp, 8
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 5
cmp dword [esi + 0x10], eax
je 0x4f4e59
cmp dword [esi + 0x14], 8
jb 0x4f4e5b
mov esi, dword [esi]
jmp 0x4f4e5b
xor esi, esi
cmp dword [ebx + 0x10], 0
je 0x4f4e6b
cmp dword [ebx + 0x14], 8
jb 0x4f4e6d
mov ebx, dword [ebx]
jmp 0x4f4e6d
xor ebx, ebx
xor ecx, ecx
mov eax, 0x6cbbb8
test esi, esi
push 0
setne cl
cmp dword [0x6cbbcc], 8
push ebx
cmovae eax, dword [0x6cbbb8]
push esi
lea ecx, [ecx*2 + 1]
push ecx
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ebx, eax
mov dword [ebp - 0x204], ebx
test ebx, ebx
jne 0x4f4ef9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_in_WinHttpOpen__error__u_
push str.GWEventResolver::HttpPostRequest
push 1
call fcn.00587c13
xor eax, eax
mov dword [edi + 0x14], 7
add esp, 0x10
mov dword [edi + 0x10], ebx
mov word [edi], ax
mov ecx, edi
lea eax, [ebp - 0x2c]
push eax
call fcn.00434450
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x4f5273
inc ecx
push ecx
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2c]
call fcn.00434bd0
jmp 0x4f5273
mov eax, dword [ebp - 0x208]
cmp dword [eax + 0x14], 8
jb 0x4f4f07
mov eax, dword [eax]
push 0
push 0x50
push eax
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov esi, eax
mov dword [ebp - 0x200], esi
test esi, esi
jne 0x4f4f89
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_in_WinHttpConnect__error__u_
push str.GWEventResolver::HttpPostRequest
push 1
call fcn.00587c13
xor eax, eax
mov dword [edi + 0x14], 7
add esp, 0x10
mov dword [edi + 0x10], esi
mov word [edi], ax
mov ecx, edi
lea eax, [ebp - 0x2c]
push eax
call fcn.00434450
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x4f4f69
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x18], 7
push ebx
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x4f5273
cmp dword [0x6cbbb0], 8
mov eax, 0x6cbb9c
push 0
cmovae eax, dword [0x6cbb9c]
push 0
push 0
push str.HTTP_1.1
push eax
push 0x66905c
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov ebx, eax
mov dword [ebp - 0x1fc], ebx
test ebx, ebx
jne 0x4f5009
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_in_WinHttpOpenRequest__error__u_
push str.GWEventResolver::HttpPostRequest
push 1
call fcn.00587c13
xor eax, eax
mov dword [edi + 0x14], 7
add esp, 0x10
mov dword [edi + 0x10], ebx
mov word [edi], ax
mov ecx, edi
lea eax, [ebp - 0x2c]
push eax
call fcn.00434450
lea ecx, [ebp - 0x2c]
call fcn.00413860
push esi
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x4f5269
mov eax, dword [ebp - 0x1f8]
cmp dword [eax + 0x14], 8
jb 0x4f5017
mov eax, dword [eax]
lea ecx, [ebp - 0xe0]
push 3
mov dword [ebp - 0xe4], ecx
lea ecx, [ebp - 0xe4]
push eax
call fcn.004cc480
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
push dword [ebp - 0xe4]
call fcn.004337e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xe0]
mov eax, dword [ebp - 0xe4]
cmp eax, ecx
je 0x4f5060
push eax
call fcn.005c9cbb
add esp, 4
cmp dword [ebp - 0x48], 0x10
lea ecx, [ebp - 0x5c]
mov eax, dword [ebp - 0x4c]
mov edx, 0x6cbbd4
cmovae ecx, dword [ebp - 0x5c]
cmp dword [0x6cbbe8], 8
push 0
cmovae edx, dword [0x6cbbd4]
push eax
push eax
push ecx
push dword [0x6cbbe4]
push edx
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x4f50d6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_in_WinHttpSendRequest__error__u_
push str.GWEventResolver::HttpPostRequest
push 1
call fcn.00587c13
xor eax, eax
mov dword [edi + 0x14], 7
add esp, 0x10
mov dword [edi + 0x10], 0
mov word [edi], ax
mov ecx, edi
lea eax, [ebp - 0x2c]
push eax
call fcn.00434450
jmp 0x4f524a
push 0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x4f5100
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_in_WinHttpReceiveResponse__error__u_
jmp 0x4f5230
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x1f0], 0
push eax
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x4f5224
mov eax, dword [ebp - 0x1f0]
test eax, eax
je 0x4f523f
inc eax
push eax
call fcn.005b1ceb
mov ecx, dword [ebp - 0x1f0]
mov esi, eax
inc ecx
push ecx
push 0
push esi
call fcn.005ca820
add esp, 0x10
lea eax, [ebp - 0x1f8]
push eax
push dword [ebp - 0x1f0]
push esi
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x4f5201
cmp dword [ebp - 0x1f8], 0
jbe 0x4f5201
push 0xfde9
lea eax, [ebp - 0x1e8]
push esi
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1ec], eax
call fcn.00464730
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x44]
push dword [ebp - 0x1ec]
call fcn.004347d0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1e8]
mov eax, dword [ebp - 0x1ec]
cmp eax, ecx
je 0x4f51c0
push eax
call fcn.005c9cbb
add esp, 4
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0041d9d0
push esi
call fcn.005b1ce6
mov byte [ebp - 4], 8
add esp, 4
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x4f51f2
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.00434bd0
cmp dword [ebp - 0x1f0], 0
ja 0x4f5100
jmp 0x4f523f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_in_WinHttpReadData__error__u_
push str.GWEventResolver::HttpPostRequest
push 1
call fcn.00587c13
push esi
call fcn.005b1ce6
add esp, 0x14
jmp 0x4f523f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_in_WinHttpQueryDataAvailable__error__u_
push str.GWEventResolver::HttpPostRequest
push 1
call fcn.00587c13
add esp, 0x10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.004344c0
lea ecx, [ebp - 0x5c]
call fcn.00433e00
lea ecx, [ebp - 0x2c]
call fcn.00413860
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push ebx
call esi
push dword [ebp - 0x200]
call esi
push dword [ebp - 0x204]
call esi
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b168a
mov esp, ebp
pop ebp
ret