Function at 0x45fde0
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49c68b
mov eax, dword fs:[0]
push eax
sub esp, 0x828
mov eax, dword [0x4c3718]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x800], eax
cmp dword [ebx + 0x14], 0x10
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x82c], eax
mov dword [ebx + 0x10], 0
jb 0x45fe37
mov eax, dword [ebx]
jmp 0x45fe39
mov eax, ebx
mov byte [eax], 0
mov dword [ebp - 0x824], 0
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x828], 0
call fcn.00461850
neg eax
sbb esi, esi
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x820]
and esi, 0x20
push eax
lea eax, [ebp - 0x824]
add esi, 0x20
push eax
call fcn.00461800
push 0x20a
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.00474170
push esi
push dword [ebp - 0x820]
lea eax, [ebp - 0x21c]
push dword [ebp - 0x824]
push str.Mozilla_5.0__compatible__MSIE_9.0__Windows_NT__d._d__WOW_d__Trident_5.0_
push 0xffffffffffffffff
push 0x104
push eax
call fcn.00404390
add esp, 0x34
lea eax, [ebp - 0x21c]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov esi, eax
mov dword [ebp - 0x834], esi
test esi, esi
je 0x460108
push 0x2710
push 0x2710
push 0x2710
push 0x2710
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
push 0
push dword [ebp + 0x18]
push edi
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x830], eax
test eax, eax
je 0x460100
mov ecx, dword [ebp + 0x1c]
neg ecx
sbb ecx, ecx
and ecx, 0x800000
push ecx
push 0
push 0
push 0
push dword [ebp - 0x800]
push str.POST
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
test edi, edi
je 0x4600f8
push 0x32
xor eax, eax
mov dword [ebp - 0x804], 7
push str.Content_Type:application_x_www_form_urlencoded_r_n_r_n
lea ecx, [ebp - 0x818]
mov dword [ebp - 0x808], 0
mov word [ebp - 0x818], ax
call fcn.00404000
mov ecx, dword [ebp - 0x82c]
lea esi, [ebp - 0x818]
cmp dword [ebp - 0x804], 8
push 0
cmovae esi, dword [ebp - 0x818]
mov eax, dword [ecx + 0x10]
push eax
push eax
mov dword [ebp - 4], 0
call fcn.004610a0
push eax
push dword [ebp - 0x808]
push esi
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x45ffe5
mov eax, dword [ebp - 0x804]
cmp eax, 8
jb 0x4600d6
inc eax
lea ecx, [ebp - 0x818]
push eax
push dword [ebp - 0x818]
call fcn.00404150
jmp 0x4600d6
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x45ffbe
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov dword [ebp - 0x81c], 0
push 0x5dd
lea eax, [ebp - 0x7fc]
push 0
push eax
call fcn.00474170
add esp, 0xc
lea eax, [ebp - 0x81c]
push eax
push edi
call esi
test eax, eax
je 0x460074
cmp dword [ebp - 0x81c], 0
je 0x460074
lea eax, [ebp - 0x800]
mov dword [ebp - 0x800], 0
push eax
push 0x5dc
lea eax, [ebp - 0x7fc]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x460074
push dword [ebp - 0x800]
lea eax, [ebp - 0x7fc]
mov ecx, ebx
push eax
call fcn.0040c950
cmp dword [ebp - 0x81c], 0
ja 0x460002
mov eax, dword [ebp - 0x804]
cmp eax, 8
jb 0x4600d6
mov ecx, dword [ebp - 0x818]
inc eax
cmp eax, 0x7fffffff
jbe 0x460092
call fcn.00478b61
add eax, eax
cmp eax, 0x1000
jb 0x4600cd
test byte [ebp - 0x818], 0x1f
je 0x4600a9
call fcn.00478b61
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x4600b5
call fcn.00478b61
sub ecx, eax
cmp ecx, 4
jae 0x4600c1
call fcn.00478b61
cmp ecx, 0x23
jbe 0x4600cb
call fcn.00478b61
mov ecx, eax
push ecx
call fcn.004729a5
add esp, 4
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor eax, eax
push edi
mov dword [ebp - 0x804], 7
mov dword [ebp - 0x808], eax
mov word [ebp - 0x818], ax
call esi
push dword [ebp - 0x830]
call esi
push dword [ebp - 0x834]
call esi
mov eax, dword [ebx + 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00472961
mov esp, ebp
pop ebp
ret