Function at 0x416e08
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2d8
mov eax, dword [0x472008]
xor eax, ebp
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 0x288], edx
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x250], eax
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x278], ecx
push esi
mov esi, eax
mov dword [ebp - 0x21c], esi
push edi
mov edi, eax
mov dword [ebp - 0x280], edi
test edx, edx
jne 0x416ea6
mov ecx, 0x80070057
mov ebx, ecx
call fcn.00419094
jmp 0x417500
test ebx, ebx
je 0x416e95
test ecx, ecx
je 0x416e95
push 0x3c
lea eax, [ebp - 0x2d4]
push 0
push eax
call sub.msvcrt.dll_memset
or dword [ebp - 0x2c0], 0xffffffff
lea eax, [ebp - 0x2d4]
or dword [ebp - 0x2a4], 0xffffffff
add esp, 0xc
mov dword [ebp - 0x2d4], 0x3c
push eax
push 0
push 0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
jne 0x416f02
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.00418df2
mov ebx, eax
mov ecx, ebx
jmp 0x416e9c
push ecx
mov ecx, dword [ebp - 0x2c4]
lea eax, [ebp - 0x274]
push eax
push 0x2f
pop edx
call fcn.004192e7
mov ebx, eax
test ebx, ebx
js 0x416efe
xor eax, eax
mov esi, 0x407098
cmp dword [ebp - 0x2c8], 2
sete al
mov dword [ebp - 0x27c], eax
test eax, eax
jne 0x416f3e
mov esi, 0x4070a4
xor ebx, ebx
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
movzx eax, word [ebp - 0x2bc]
push 0x407078
push ecx
push 0x112
push ebx
push ecx
push esi
push eax
push 0x4070b0
push 0x4000000
call fcn.00414b7e
add esp, 0x10
xor edx, edx
mov ecx, eax
call fcn.00449ee7
push ebx
push ebx
push ebx
inc ebx
push ebx
push 0x4070cc
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0041507b
mov esi, dword [ebp - 0x21c]
test esi, esi
je 0x416eef
xor eax, eax
push eax
push eax
push eax
push eax
push 0x4070cc
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
push eax
lea ecx, [ebp - 0x224]
call fcn.0041507b
cmp dword [ebp - 0x224], edi
je 0x416eef
xor eax, eax
lea edi, [ebp - 0x248]
stosd dword es:[edi], eax
xor esi, esi
push 6
pop ecx
mov dword [ebp - 0x284], esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x268]
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x298]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x298]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x41713d
cmp dword [ebp - 0x298], 0
mov ecx, dword [ebp - 0x294]
mov esi, ecx
mov eax, dword [ebp - 0x28c]
mov edi, dword [ebp - 0x290]
mov dword [ebp - 0x238], esi
mov dword [ebp - 0x230], eax
je 0x41708d
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x137
push 0
push ecx
push 0x4070f8
push 0x4000000
call fcn.00414b7e
pop ecx
pop ecx
xor edx, edx
mov ecx, eax
call fcn.00449ee7
mov ecx, dword [ebp - 0x294]
mov eax, ebx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], 3
mov dword [ebp - 0x254], ebx
jmp 0x417093
mov eax, dword [ebp - 0x284]
test ecx, ecx
je 0x4170e1
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x143
push 0
push ecx
push 0x407114
push 0x4000000
call fcn.00414b7e
pop ecx
pop ecx
xor edx, edx
mov ecx, eax
call fcn.00449ee7
or dword [ebp - 0x268], 2
mov eax, ebx
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x254], ebx
test eax, eax
jne 0x417197
test edi, edi
jne 0x417420
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
mov esi, 0x4000000
push 0x407078
push ecx
push 0x14f
push edi
push ecx
push 0x407134
push esi
call fcn.00414b7e
pop ecx
pop ecx
xor edx, edx
mov ecx, eax
call fcn.00449ee7
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], 3
mov dword [ebp - 0x254], ebx
jmp 0x41719c
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x15b
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x40714c
mov esi, 0x4000000
push esi
call fcn.00414b7e
add esp, 0xc
xor edx, edx
mov ecx, eax
call fcn.00449ee7
mov edi, dword [ebp - 0x280]
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], 3
mov dword [ebp - 0x254], ebx
jmp 0x41719c
mov esi, 0x4000000
xor ebx, ebx
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x168
push ebx
push ecx
push 0x40717c
push esi
call fcn.00414b7e
pop ecx
pop ecx
xor edx, edx
mov ecx, eax
call fcn.00449ee7
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x268]
push eax
push dword [ebp - 0x234]
push dword [ebp - 0x224]
call dword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x41722a
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x250], eax
mov esi, dword [ebp - 0x21c]
lea eax, [ebp - 0x248]
push 0xc
push eax
push 0x26
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x41729e
jmp 0x416eef
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x183
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x407190
push esi
call fcn.00414b7e
add esp, 0xc
xor edx, edx
mov ecx, eax
call fcn.00449ee7
test edi, edi
jne 0x417427
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x19e
push ebx
push ecx
push 0x4071dc
push esi
call fcn.00414b7e
pop ecx
pop ecx
xor edx, edx
mov ecx, eax
call fcn.00449ee7
mov esi, dword [ebp - 0x21c]
mov eax, dword [ebp - 0x26c]
push ebx
push dword [ebp - 0x2bc]
push dword [eax]
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
push eax
lea ecx, [ebp - 0x220]
call fcn.0041507b
cmp dword [ebp - 0x220], 0
je 0x416eef
mov eax, dword [ebp - 0x27c]
neg eax
sbb eax, eax
and eax, 0x800000
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x2a8]
push 0x4071f8
push dword [ebp - 0x220]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
push eax
lea ecx, [ebp - 0x218]
call fcn.0041507b
cmp dword [ebp - 0x218], 0
je 0x416eef
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x218]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x416eef
push ebx
push dword [ebp - 0x218]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x416eef
push 0x208
lea eax, [ebp - 0x214]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x24c], 0x206
lea eax, [ebp - 0x24c]
push ebx
push eax
lea eax, [ebp - 0x214]
push eax
push ebx
push 0x36
push dword [ebp - 0x218]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x416eef
mov eax, dword [ebp - 0x24c]
and eax, 0xfffffffe
cmp eax, 0x208
jae 0x4175eb
xor ecx, ecx
lea edx, [ebp - 0x228]
mov word [ebp + eax - 0x214], cx
lea ecx, [ebp - 0x214]
call fcn.00418e2d
mov ebx, eax
test ebx, ebx
js 0x416efe
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [ebp - 0x234]
push eax
push dword [ebp + 4]
lea eax, [ebp - 0x214]
push 0x407078
push ecx
push 0x1c9
push 0
push ecx
push eax
push ebx
push 0x407204
push 0x4000000
call fcn.00414b7e
add esp, 0x10
xor edx, edx
mov ecx, eax
call fcn.00449ee7
lea edx, [ebp - 0x22c]
mov ecx, ebx
call fcn.00416d08
mov ebx, eax
test ebx, ebx
jns 0x417477
mov ecx, ebx
call fcn.00419094
jmp 0x4174fa
xor ebx, ebx
mov esi, 0x4000000
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x18a
push ebx
push ecx
push 0x4071c4
push esi
call fcn.00414b7e
pop ecx
pop ecx
xor edx, edx
mov ecx, eax
call fcn.00449ee7
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x248], 3
mov dword [ebp - 0x244], edi
mov dword [ebp - 0x240], eax
jmp 0x417209
mov ecx, dword [ebp - 0x22c]
xor esi, esi
inc esi
test ecx, ecx
je 0x4174dd
push 0xffffffffffffffff
lea eax, [ebp - 0x214]
push eax
push 0xffffffffffffffff
push ecx
push esi
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
jne 0x4174dd
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 4]
push 0x407078
push ecx
push 0x1d0
push 0
push ecx
push dword [ebp - 0x234]
push 0x407220
push 0x4000000
call fcn.00414b7e
add esp, 0xc
xor edx, edx
mov ecx, eax
call fcn.00449ee7
xor esi, esi
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x278]
mov dword [eax], esi
mov eax, dword [ebp - 0x228]
and dword [ebp - 0x228], 0
mov dword [ecx], eax
mov esi, dword [ebp - 0x21c]
mov ecx, ebx
call fcn.004190b1
mov eax, dword [ebp - 0x250]
test eax, eax
je 0x417518
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x417529
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x41753a
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
test edi, edi
je 0x417545
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 0x238]
test eax, eax
je 0x417556
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebp - 0x228]
test ecx, ecx
je 0x417565
call fcn.00418f57
mov ecx, dword [ebp - 0x22c]
test ecx, ecx
je 0x417574
call fcn.00418f57
cmp dword [ebp - 0x218], 0
je 0x417589
push dword [ebp - 0x218]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x220], 0
je 0x41759e
push dword [ebp - 0x220]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x224], 0
je 0x4175b3
push dword [ebp - 0x224]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test esi, esi
je 0x4175be
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push 0
lea ecx, [ebp - 0x274]
call fcn.0041e483
lea ecx, [ebp - 0x26c]
call fcn.0041b95f
mov ecx, dword [ebp - 8]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00451d90
mov esp, ebp
pop ebp
ret 4
call fcn.00452175
int3