Function at 0x413880
Capabilities:
Initialize winhttp library
Prepare http request
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x4c2980
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x570f20]
xor eax, esp
mov dword [esp + 0x40], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x570f20]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
cmp dword [esp + 0xb4], 0x10
mov dword [esp + 0x60], 2
jb 0x4138d1
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x14], eax
jmp 0x4138dc
lea ecx, [esp + 0xa0]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x14]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4138e3
sub eax, edx
push 0xfde9
lea edx, [esp + 0x6c]
mov ebx, eax
push edx
lea eax, [esp + 0x40]
push eax
call fcn.00413760
push 0xfde9
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x78], 3
call fcn.00413760
add esp, 0x18
xor esi, esi
push esi
push esi
push esi
push esi
push str.Mozilla_5.0__Windows_NT_10.0__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_86.0.4240.183_Safari_537.36_OPR_72.0.3815.21
mov dword [esp + 0x2c], esi
xor edi, edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ebp, eax
test ebp, ebp
je 0x4139a8
cmp dword [esp + 0x4c], 8
mov eax, dword [esp + 0x38]
jae 0x41394d
lea eax, [esp + 0x38]
push 0
push 0x50
push eax
push ebp
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov edi, eax
test edi, edi
je 0x4139a8
cmp dword [esp + 0x30], 8
mov eax, dword [esp + 0x1c]
jae 0x41396e
lea eax, [esp + 0x1c]
push 0
push 0
push 0
push 0
push eax
push str.POST
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov esi, eax
test esi, esi
je 0x4139a8
mov eax, dword [esp + 0x14]
push 0
push ebx
push ebx
push eax
push 0xffffffffffffffff
push str.Content_Type:_application_x_www_form_urlencoded_r_n
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [esp + 0x18], eax
test eax, eax
jne 0x4139bc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.WinHttp_Error__d_has_occurred._n
call fcn.004a7323
add esp, 8
xor ebx, ebx
cmp esi, ebx
je 0x4139cd
push esi
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call esi
jmp 0x4139d3
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp edi, ebx
je 0x4139da
push edi
call esi
cmp ebp, ebx
je 0x4139e1
push ebp
call esi
mov edi, 8
cmp dword [esp + 0x18], ebx
je 0x413ab0
cmp dword [esp + 0x30], edi
jb 0x413a03
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004a684d
add esp, 4
xor edx, edx
mov esi, 7
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], dx
cmp dword [esp + 0x4c], edi
jb 0x413a2a
mov eax, dword [esp + 0x38]
push eax
call fcn.004a684d
add esp, 4
xor ecx, ecx
mov edi, 0x10
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], cx
cmp dword [esp + 0x7c], edi
jb 0x413a51
mov edx, dword [esp + 0x68]
push edx
call fcn.004a684d
add esp, 4
mov esi, 0xf
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], ebx
mov byte [esp + 0x68], bl
cmp dword [esp + 0x98], edi
jb 0x413a7b
mov eax, dword [esp + 0x84]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x98], esi
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
cmp dword [esp + 0xb4], edi
jb 0x413aa9
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.004a684d
add esp, 4
mov al, 1
jmp 0x413b6b
cmp dword [esp + 0x30], edi
jb 0x413ac3
mov edx, dword [esp + 0x1c]
push edx
call fcn.004a684d
add esp, 4
xor eax, eax
mov esi, 7
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], ax
cmp dword [esp + 0x4c], edi
jb 0x413aea
mov ecx, dword [esp + 0x38]
push ecx
call fcn.004a684d
add esp, 4
xor edx, edx
mov edi, 0x10
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], dx
cmp dword [esp + 0x7c], edi
jb 0x413b11
mov eax, dword [esp + 0x68]
push eax
call fcn.004a684d
add esp, 4
mov esi, 0xf
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], ebx
mov byte [esp + 0x68], bl
cmp dword [esp + 0x98], edi
jb 0x413b3b
mov ecx, dword [esp + 0x84]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x98], esi
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
cmp dword [esp + 0xb4], edi
jb 0x413b69
mov edx, dword [esp + 0xa0]
push edx
call fcn.004a684d
add esp, 4
xor al, al
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x40]
xor ecx, esp
call fcn.004a7314
add esp, 0x50
ret