Function at 0x41ecbd
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x258
mov dword [ebp - 0x10], 0x26cfc4f5
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0xf0fd0d8d
jle 0x41ed5b
cmp eax, 0x2dfa41f8
jle 0x41edb6
cmp eax, 0x54ad69e2
jle 0x41eee0
cmp eax, 0x71c3109a
jg 0x41f03c
cmp eax, 0x54ad69e3
je 0x41f2e8
cmp eax, 0x5bfd41ce
je 0x41f317
cmp eax, 0x68cdac49
jne 0x41ece8
imul ebx, ebx, 0x2540000
add ebx, 0x6f900000
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0x2310
call fcn.0041c7d3
add esp, 8
mov dword [ebp - 0x10], 0x4f72e
jmp 0x41ece8
cmp eax, 0xc5b885ac
jg 0x41ee9d
cmp eax, 0xaf093425
jle 0x41ef2a
cmp eax, 0xb8f4343d
jle 0x41f07b
cmp eax, 0xb8f4343e
je 0x41f335
cmp eax, 0xbb321aef
je 0x41f36f
cmp eax, 0xc2fb37a8
jne 0x41ece8
cmp dword [ebp - 0x54], 0
mov eax, 0x2dfa41f9
je 0x41f404
mov eax, 0xdc5149cf
jmp 0x41f404
cmp eax, 0x37e80d6
jg 0x41ef94
cmp eax, 0xf62cb4e0
jle 0x41f0c1
cmp eax, 0xf62cb4e1
je 0x41f38f
cmp eax, 0xfd882732
je 0x41f3c7
cmp eax, 0x4f72e
jne 0x41ece8
shl ebx, 0xc
add ebx, 0xfffda09f
sub esp, 0x34
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], 0x26bd
mov dword [esp + 0x2c], 0x2ba0
mov dword [esp + 0x28], 0x10a7
mov dword [esp + 0x20], 0x9fb
mov dword [esp + 0x1c], 0x2af9
mov dword [esp + 0x18], 0x229e
mov dword [esp + 0x14], 0x4ab0
mov dword [esp + 0x10], 0x569a
mov dword [esp + 0xc], 0x2e87
mov dword [esp + 8], 0x551
mov dword [esp + 4], 0x154f
mov dword [esp], 0x1341
call fcn.0041b94b
add esp, 0x34
mov eax, dword [ebp - 0x60]
sub esp, 0x14
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0x2114
mov dword [esp + 0xc], 0x22d6
mov dword [esp], 0x4b78
call fcn.00418b51
add esp, 0x14
mov dword [ebp - 0x10], 0xcaf9a3c4
jmp 0x41ece8
cmp eax, 0xd047fbe6
jg 0x41efd3
cmp eax, 0xcc0729a8
jle 0x41f11f
cmp eax, 0xcc0729a9
je 0x41f3da
cmp eax, 0xcd3d190e
je 0x41f40c
cmp eax, 0xcfe746fe
jne 0x41ece8
mov dword [ebp - 0x10], 0x90bc63b1
jmp 0x41ece8
cmp eax, 0x371c40e3
jle 0x41f193
cmp eax, 0x371c40e4
je 0x41f418
cmp eax, 0x522edfbd
je 0x41f432
cmp eax, 0x52c8d077
jne 0x41ece8
push eax
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, 0x20
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xcaf9a3c4
jmp 0x41ece8
cmp eax, 0x90bc63b0
jle 0x41f1b8
cmp eax, 0x90bc63b1
je 0x41f444
cmp eax, 0xa0ec9b44
je 0x41f463
cmp eax, 0xaefbe83b
jne 0x41ece8
mov eax, dword [ebp - 0x4c]
sub esp, 0x14
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x264]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x100
mov dword [esp], 0
call fcn.004500ff
add esp, 0x14
mov dword [ebp - 0x10], 0x25e14778
jmp 0x41ece8
cmp eax, 0x25e14777
jle 0x41f25a
cmp eax, 0x25e14778
je 0x41f481
cmp eax, 0x26cfc4f5
je 0x41f4e6
cmp eax, 0x28dccfc4
jne 0x41ece8
push eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x78dccbf4
jmp 0x41ece8
cmp eax, 0xd18709b4
jle 0x41f296
cmp eax, 0xd18709b5
je 0x41f48d
cmp eax, 0xd7b4234c
je 0x41f499
cmp eax, 0xdc5149cf
jne 0x41ece8
mov eax, dword [ebp - 0x14]
mov ecx, 0x114
add eax, ecx
shr eax, 0xb
imul ecx, eax, 0xf60
imul eax, eax
imul edx, eax, 0x6ddf
dec edx
add ecx, 0x18fc00
mov dword [ebp - 0x14], ecx
mov ecx, 0xc2fb37a8
cmp edx, eax
je 0x41f51c
mov ecx, 0xcd3d190e
jmp 0x41f51c
cmp eax, 0x71c3109b
je 0x41f4ab
cmp eax, 0x75f568d0
je 0x41f4cc
cmp eax, 0x78dccbf4
jne 0x41ece8
imul eax, dword [ebp - 0x14], 0x5800
add eax, 0xffffff6c
shr eax, 0xc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x9027e669
jmp 0x41ece8
cmp eax, 0xaf093426
je 0x41f4f2
cmp eax, 0xb325a231
jne 0x41f63e
sub esp, 0xc
lea eax, [ebp - 0x264]
mov dword [esp], eax
mov dword [esp + 8], 0x200
mov dword [esp + 4], 0
call fcn.00444cd0
add esp, 0xc
mov dword [ebp - 0x10], 0xbb321aef
jmp 0x41ece8
cmp eax, 0xf0fd0d8e
je 0x41f524
cmp eax, 0xf2e36baa
jne 0x41ece8
shl ebx, 0xf
call fcn.00420e0b
sub esp, 0x10
mov dword [esp + 8], 0x3421
mov dword [esp + 4], 0x28c7
mov dword [esp], 0xd09
mov edi, 0xd0ca3eab
add ebx, 0x420000
mov dword [esp + 0xc], ebx
je 0x41f10f
mov edi, 0x52c8d077
call fcn.0041fbc8
add esp, 0x10
mov dword [ebp - 0x10], edi
jmp 0x41ece8
cmp eax, 0xc5b885ad
je 0x41f5fa
cmp eax, 0xcaf9a3c4
jne 0x41ece8
mov eax, dword [ebp - 0x50]
mov word [eax], 0
mov eax, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x467890
call fcn.004441d0
add esp, 0xc
mov eax, dword [ebp - 0x20]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x4678b0
mov dword [esp + 4], 0x10
call fcn.004227b0
add esp, 0x10
mov dword [ebp - 0x10], 0x54ad69e3
jmp 0x41ece8
cmp eax, 0x2dfa41f9
je 0x41f565
cmp eax, 0x2ece5c7f
jne 0x41ece8
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x10], 0x71c3109b
jmp 0x41ece8
cmp eax, 0x8b0a18bf
je 0x41f59b
cmp eax, 0x9027e669
jne 0x41ece8
mov eax, dword [ebp - 0x24]
mov word [eax + 6], 0
mov eax, dword [ebp - 0x24]
movzx ecx, word [0x4678be]
mov word [eax + 4], cx
mov ecx, dword [0x4678ba]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
sub esp, 0x10
mov ecx, 3
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0x4678c0
call fcn.004227b0
add esp, 0x10
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x24]
sub esp, 0x1c
xor esi, esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], esi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x28], eax
mov eax, 0x2ece5c7f
cmp dword [ebp - 0x28], esi
je 0x41f404
mov eax, 0x371c40e4
jmp 0x41f404
cmp eax, 0x37e80d7
je 0x41f5bc
cmp eax, 0xd7a6351
jne 0x41ece8
mov eax, dword [ebp - 0x28]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd7b4234c
jmp 0x41ece8
cmp eax, 0xd047fbe7
je 0x41f606
cmp eax, 0xd0ca3eab
jne 0x41ece8
mov eax, dword [ebp - 0x20]
sub esp, 0x14
xor edi, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], edi
mov dword [esp + 8], edi
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x30], eax
mov eax, 0xf0fd0d8e
cmp dword [ebp - 0x30], edi
je 0x41f404
mov eax, 0xaf093426
jmp 0x41f404
mov eax, dword [ebp - 0x14]
add eax, 0x5d
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x874f
shl eax, 0xc
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x52c8d077
cmp ecx, edx
je 0x41f404
mov eax, 0xd0ca3eab
jmp 0x41f404
imul ebx, ebx, 0xaf0
mov eax, 0xd0ca3eab
cmp ebx, 0x4f
jge 0x41f404
mov eax, 0x52c8d077
jmp 0x41f404
imul eax, dword [ebp - 0x14], 0x40bf
lea ecx, [eax + 0xf0]
imul eax, eax
imul edx, eax, 0x4873
shr ecx, 0xb
dec edx
add ecx, 0xffffff6e
mov dword [ebp - 0x14], ecx
mov ecx, 0xfd882732
cmp eax, edx
je 0x41f51c
mov ecx, 0xaefbe83b
jmp 0x41f51c
sub esp, 4
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00450770
add esp, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xb8f4343e
jmp 0x41ece8
mov eax, dword [ebp - 0x28]
sub esp, 0x1c
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xc2fb37a8
jmp 0x41ece8
shl ebx, 8
or ebx, 0xca
call fcn.00420e0b
jmp 0x41f4e6
mov edi, ebx
add edi, 0x26
mov ebx, edi
shr ebx, 0x1a
sub esp, 4
mov dword [esp], ebx
call fcn.00416d1a
add esp, 4
mov eax, 0xd0ca3eab
cmp edi, 0xb4000000
jb 0x41f404
mov eax, 0xcaf9a3c4
mov dword [ebp - 0x10], eax
jmp 0x41ece8
mov dword [ebp - 0x10], 0xd7a6351
jmp 0x41ece8
mov eax, dword [ebp - 0x14]
shl eax, 0x14
add eax, 0xf21119f3
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xf62cb4e1
jmp 0x41ece8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x8b0a18bf
jmp 0x41ece8
cmp dword [ebp - 0x34], 0
mov eax, 0x522edfbd
je 0x41f454
mov eax, 0xd18709b5
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
jmp 0x41ece8
mov eax, dword [ebp - 0x28]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x2ece5c7f
mov esi, dword [ebp - 0x58]
jmp 0x41ece8
mov dword [ebp - 0x10], 0xc5b885ad
jmp 0x41ece8
mov dword [ebp - 0x10], 0x28dccfc4
jmp 0x41ece8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0xa0ec9b44
jmp 0x41ece8
mov eax, dword [ebp - 0x34]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x522edfbd
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
jmp 0x41ece8
imul ebx, ebx, 0x608000
add ebx, 0xfff00000
sub esp, 4
mov dword [esp], ebx
call fcn.0041fc94
add esp, 4
mov dword [ebp - 0x10], 0xb325a231
jmp 0x41ece8
mov eax, dword [ebp - 0x14]
shr eax, 0x16
imul ecx, eax, 0x71
imul eax, eax
imul edx, eax, 0x6f73
dec edx
add ecx, 0xfffffe8d
mov dword [ebp - 0x14], ecx
mov ecx, 0xbb321aef
cmp eax, edx
je 0x41f51c
mov ecx, 0xd047fbe7
mov dword [ebp - 0x10], ecx
jmp 0x41ece8
mov edx, dword [ebp - 0x14]
shr edx, 1
lea eax, [edx - 0x51]
imul eax, eax
imul ecx, eax, 0x2651
mov edi, edx
shl edi, 4
sub edi, edx
sub edi, edx
dec ecx
add edi, 0xfffff769
mov dword [ebp - 0x14], edi
mov edx, 0x68cdac49
cmp eax, ecx
je 0x41f556
mov edx, 0xb2915a26
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x2c], 0
jmp 0x41ece8
imul eax, dword [ebp - 0x14], 0x4b
add eax, 0x3a
mov ecx, eax
imul ecx, eax
shr eax, 0xf
imul edx, ecx, 0x275b
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x90bc63b1
cmp edx, ecx
je 0x41f58c
mov eax, 0xd7b4234c
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], 0
jmp 0x41ece8
mov eax, dword [ebp - 0x30]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0xb2915a26
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2c], eax
jmp 0x41ece8
imul ebx, ebx, 0x22e2
add ebx, 0x139f20
shr ebx, 4
and ebx, 0xfffffffc
add ebx, 0xffffff8f
sub esp, 4
mov dword [esp], ebx
call fcn.0041c4f2
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x85
mov dword [esp], 0x6142
call fcn.0041c899
add esp, 0xc
mov dword [ebp - 0x10], 0x52c8d077
jmp 0x41ece8
mov eax, dword [ebp - 0x30]
sub esp, 0x10
lea ecx, [ebp - 0x264]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x50
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xcfe746fe
jmp 0x41ece8
cmp eax, 0xb2915a26
jne 0x41ece8
mov dword [ebp - 0x48], ebx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov eax, ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret