Function at 0x402b1c
Capabilities:
Prepare http request
Receive http response

Disassembly:
sub esp, 0x24
push ebx
push ebp
push esi
push edi
mov ebx, ecx
push ebx
push 0x9294d8
mov esi, eax
mov byte [esp + 0x1b], 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [esp + 0x4c]
xor edi, edi
mov dword [eax], edi
cmp esi, edi
je 0x402b46
mov dword [esi], ebx
mov eax, dword [esp + 0x50]
cmp eax, edi
je 0x402b50
mov dword [eax], edi
mov esi, 0x9e96e8
mov ebp, 0x80c248
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x20], edi
call fcn.00402551
pop ecx
pop ecx
test al, al
je 0x402d94
push edi
push dword [esp + 0x20]
push 0x92e5a0
push dword [esp + 0x44]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [esp + 0x28], eax
cmp eax, edi
je 0x402d90
movzx ecx, byte [esp + 0x20]
neg ecx
sbb ecx, ecx
and ecx, 0x800000
push ecx
lea ecx, [esp + 0x30]
push ecx
push edi
push edi
push 0x93d730
push 0x906248
push eax
mov dword [esp + 0x48], 0x40458c
mov dword [esp + 0x4c], edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov ebx, eax
cmp ebx, edi
je 0x402d7c
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
push 4
lea eax, [esp + 0x18]
push eax
push 0x1f
push ebx
mov dword [esp + 0x24], 0x3100
call edi
push 4
lea eax, [esp + 0x18]
push eax
push 0x3f
push ebx
mov dword [esp + 0x24], 2
call edi
push str.Content_Type:_application_x_www_form_urlencoded_r_n
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
lea eax, [ecx + eax - 1]
push eax
push ecx
push str.Range:_bytes_u__u_r_n
mov edi, 0x9e46e8
push edi
mov dword [esp + 0x34], eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push edi
push esi
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0
push ebp
call edi
push eax
push ebp
call edi
push eax
movsx eax, byte [0x80c248]
neg eax
sbb eax, eax
and eax, ebp
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push esi
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x402cb8
push dword [esp + 0x38]
push ebx
call fcn.00402aa9
pop ecx
pop ecx
test al, al
je 0x402d69
call fcn.00401b27
push 0
push ebp
call edi
push eax
push ebp
call edi
push eax
movsx eax, byte [0x80c248]
neg eax
sbb eax, eax
and eax, ebp
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push esi
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x402d69
push 0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x402d65
push ebx
call fcn.00402712
push ebx
mov edi, eax
call fcn.004025ce
pop ecx
pop ecx
mov dword [esp + 0x18], eax
call fcn.00401b21
lea ecx, [eax - 0x12c]
cmp ecx, 0x63
ja 0x402d2d
push dword [esp + 0x1c]
push dword [esp + 0x24]
push ebx
call fcn.00402749
add esp, 0xc
test eax, eax
je 0x402d71
cmp dword [esp + 0x18], 0x12f
jne 0x402d1a
push eax
push 0x9294d8
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x402d71
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x13], 1
test ecx, ecx
je 0x402d29
mov dword [ecx], eax
push 0x10
jmp 0x402d6b
cmp eax, 0xce
jne 0x402d61
cmp edi, dword [esp + 0x44]
jne 0x402d5d
push dword [esp + 0x48]
mov edi, dword [esp + 0x50]
push dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
push dword [esp + 0x44]
push ebx
call fcn.00402876
add esp, 0x10
mov byte [esp + 0x13], al
jmp 0x402d71
push 0x11
jmp 0x402d6b
push 0xe
jmp 0x402d6b
push 3
jmp 0x402d6b
push 0xd
pop eax
call fcn.00401b10
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor edi, edi
jmp 0x402d84
push 0xc
pop eax
call fcn.00401b10
push dword [esp + 0x28]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x402d9c
push 0xb
jmp 0x402d96
push 0xa
pop eax
call fcn.00401b10
cmp dword [esp + 0x18], 0x12f
je 0x402b5a
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret