Function at 0x41df80
Capabilities:
Contain obfuscated stackstrings
Receive http response
Set http header
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43f5c2
mov eax, dword fs:[0]
push eax
sub esp, 0x45c
push ebx
push esi
push edi
mov eax, dword [0x45b00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xb4], edi
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x10], 0
call fcn.00421540
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x2c], vtable.CVolObject.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14], 0x40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x174]
call fcn.004020d0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x48], vtable.CVolObject.0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x48], vtable.CVolMem.0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x30], 0x40
mov byte [ebp - 4], 6
mov edx, dword [ebp + 0x10]
cmp edx, 8
ja 0x41e2ac
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 7
mov dword [ebp - 0xa0], vtable.CWConstString.0
mov dword [ebp - 0x94], str.PATCH
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x10], 1
call fcn.004020d0
mov dword [ebp - 4], 9
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x110], str.CONNECT
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x10], 3
call fcn.004020d0
mov dword [ebp - 4], 0xb
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x228], str.TRACE
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x10], 7
call fcn.004020d0
mov dword [ebp - 4], 0xd
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x2ac], str.OPTIONS
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x10], 0xf
call fcn.004020d0
mov dword [ebp - 4], 0xf
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x280], str.DELETE
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x10], 0x1f
call fcn.004020d0
mov dword [ebp - 4], 0x11
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x13c], 0x450620
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x10], 0x3f
call fcn.004020d0
mov dword [ebp - 4], 0x13
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - str.rg_n52::rg_n7225], str.HEAD
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x10], 0x7f
call fcn.004020d0
mov dword [ebp - 4], 0x15
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x254], str.POST
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x10], 0xff
call fcn.004020d0
mov dword [ebp - 4], 0x17
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x340], 0x4505d0
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x10], 0x1ff
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x34c]
push eax
push 9
push edx
call fcn.004281f0
add esp, 0x2c
lea ecx, [ebp - 0x1cc]
push eax
call fcn.00401e30
mov esi, eax
mov dword [ebp - 4], 0x19
mov ebx, 0x3ff
jmp 0x41e33c
lea ecx, [ebp - 0xf0]
call fcn.004020d0
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xf0], vtable.CWConstString.0
mov dword [ebp - 0xe4], 0x4505d0
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x10], 0x400
call fcn.004020d0
mov dword [ebp - 4], 0x1c
lea ecx, [ebp - 0x64]
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x74], vtable.CWString.0
call dword [eax + 0x44]
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x64]
call fcn.00402f40
mov byte [ebp - 4], 0x1b
lea esi, [ebp - 0x74]
mov dword [ebp - 4], 0x1d
mov ebx, 0xc00
mov dword [ebp - 0x10], ebx
lea ecx, [ebp - 0x174]
mov eax, dword [ebp - 0x174]
call dword [eax + 0x44]
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x170], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x16c], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x164]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0x164]
call fcn.00402f40
mov dword [ebp - 4], 0x1b
test ebx, 0x800
je 0x41e3a7
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x10], ebx
call fcn.00402b20
mov dword [ebp - 4], 0x19
test ebx, 0x400
je 0x41e3d1
and ebx, 0xfffffbff
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0xf0]
call fcn.00402b20
mov dword [ebp - 4], 0x18
test ebx, 0x200
je 0x41e3f4
and ebx, 0xfffffdff
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x10], ebx
call fcn.00402b20
mov dword [ebp - 4], 0x16
test ebx, 0x100
je 0x41e41e
and ebx, 0xfffffeff
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x34c]
call fcn.00402b20
mov dword [ebp - 4], 0x14
test bl, bl
jns 0x41e444
and ebx, 0xffffff7f
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x260]
call fcn.00402b20
mov dword [ebp - 4], 0x12
test bl, 0x40
je 0x41e468
and ebx, 0xffffffbf
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x1a0]
call fcn.00402b20
mov dword [ebp - 4], 0x10
test bl, 0x20
je 0x41e48c
and ebx, 0xffffffdf
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x148]
call fcn.00402b20
mov dword [ebp - 4], 0xe
test bl, 0x10
je 0x41e4b0
and ebx, 0xffffffef
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x28c]
call fcn.00402b20
mov dword [ebp - 4], 0xc
test bl, 8
je 0x41e4d4
and ebx, 0xfffffff7
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x2b8]
call fcn.00402b20
mov dword [ebp - 4], 0xa
test bl, 4
je 0x41e4f8
and ebx, 0xfffffffb
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x234]
call fcn.00402b20
mov dword [ebp - 4], 8
test bl, 2
je 0x41e51c
and ebx, 0xfffffffd
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x11c]
call fcn.00402b20
mov dword [ebp - 4], 6
test bl, 1
je 0x41e53d
and ebx, 0xfffffffe
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa0]
call fcn.00402b20
lea ecx, [ebp - 0x74]
call fcn.004020d0
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x74], vtable.CWConstString.0
mov dword [ebp - 0x68], str.http:__
mov byte [ebp - 4], 0x29
or ebx, 0x1000
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x41e578
cmp dword [ebp - 0x50], 0
mov eax, 0x445b48
cmovne eax, dword [ebp - 0x58]
mov esi, dword [ebp + 0xc]
mov ecx, esi
push 0
push 1
push 0
push eax
call fcn.0042b4a0
cmp eax, 0xffffffff
jne 0x41e5f8
lea ecx, [ebp - 0xf0]
call fcn.004020d0
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0xf0], vtable.CWConstString.0
mov dword [ebp - 0xe4], str.https:__
mov dword [ebp - 4], 0x2b
or ebx, 0x2000
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0xe4]
test eax, eax
jne 0x41e5e1
cmp dword [ebp - 0xcc], 0
mov eax, 0x445b48
cmovne eax, dword [ebp - 0xd4]
push 0
push 1
push 0
push eax
mov ecx, esi
call fcn.0042b4a0
mov byte [ebp + 0x13], 1
cmp eax, 0xffffffff
je 0x41e5fc
mov byte [ebp + 0x13], 0
mov dword [ebp - 4], 0x29
test ebx, 0x2000
je 0x41e626
and ebx, 0xffffdfff
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0xf0]
call fcn.00402b20
mov dword [ebp - 4], 6
test ebx, 0x1000
je 0x41e64a
and ebx, 0xffffefff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x74]
call fcn.00402b20
cmp byte [ebp + 0x13], 0
je 0x41e6eb
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0xa0], vtable.CWConstString.0
mov dword [ebp - 0x94], str.http:__
mov byte [ebp - 4], 0x2f
lea edx, [ebp - 0xa0]
push esi
lea ecx, [ebp - 0x1cc]
call fcn.0042b5b0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x30
mov ecx, esi
mov edx, dword [esi]
call dword [edx + 0x44]
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov ecx, dword [edi + 8]
mov dword [esi + 8], ecx
lea ecx, [esi + 0x10]
mov eax, dword [edi + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x10]
call dword [eax + 0x44]
lea eax, [edi + 0x10]
push eax
lea ecx, [esi + 0x10]
call fcn.00402f40
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1cc]
call fcn.00402b20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp - 0xb4]
mov ecx, edi
call fcn.0041fde0
test eax, eax
jne 0x41e840
lea ecx, [ebp - 0x11c]
call fcn.00420310
mov edx, eax
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x33
mov dword [ebp - 0xa0], vtable.CWConstString.0
mov dword [ebp - 0x94], 0x450664
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1cc]
push edx
lea edx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x35
mov esi, dword [ebp + 0x48]
add esi, 0xb4
mov ecx, esi
mov edx, dword [esi]
call dword [edx + 0x44]
mov eax, dword [edi + 4]
lea ecx, [esi + 0x10]
mov dword [esi + 4], eax
mov eax, dword [edi + 8]
mov dword [esi + 8], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x10]
call dword [eax + 0x44]
lea eax, [edi + 0x10]
push eax
lea ecx, [esi + 0x10]
call fcn.00402f40
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1cc]
call fcn.00402b20
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x11c]
call fcn.00402b20
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
call fcn.00402db0
or ebx, 0x4000
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolMem.0
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x41e7fd
mov eax, dword [ebp - 0x48]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41e7f8
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41e7fd
lea ecx, [ebp - 0x48]
call eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolObject.0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x174]
call fcn.00402b20
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0x38
jmp 0x41fc52
mov eax, dword [edi + 0x94]
lea edx, [ebp - 0x468]
neg eax
push ecx
sbb eax, eax
mov ecx, esi
and eax, 0x80000000
push eax
call fcn.00420710
test eax, eax
jne 0x41e9ac
lea ecx, [ebp - 0x11c]
call fcn.00420310
mov edx, eax
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x3a
mov dword [ebp - 0xa0], vtable.CWConstString.0
mov dword [ebp - 0x94], 0x450674
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x1cc]
push edx
lea edx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x3c
mov esi, dword [ebp + 0x48]
add esi, 0xb4
mov ecx, esi
mov edx, dword [esi]
call dword [edx + 0x44]
mov eax, dword [edi + 4]
lea ecx, [esi + 0x10]
mov dword [esi + 4], eax
mov eax, dword [edi + 8]
mov dword [esi + 8], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x10]
call dword [eax + 0x44]
lea eax, [edi + 0x10]
push eax
lea ecx, [esi + 0x10]
call fcn.00402f40
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x1cc]
call fcn.00402b20
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x11c]
call fcn.00402b20
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
call fcn.00402db0
or ebx, 0x4000
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolMem.0
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x41e969
mov eax, dword [ebp - 0x48]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41e964
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41e969
lea ecx, [ebp - 0x48]
call eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolObject.0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x174]
call fcn.00402b20
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0x3f
jmp 0x41fc52
mov ecx, dword [ebp - 0x400]
cmp ecx, 0x50
je 0x41e9bf
cmp ecx, 0x1bb
jne 0x41e9c1
xor ecx, ecx
mov eax, dword [ebp - 0x420]
test eax, eax
jne 0x41e9de
cmp dword [ebp - 0x408], 0
mov eax, 0x445b48
cmovne eax, dword [ebp - 0x410]
push 0
push ecx
push eax
push dword [edi + 0x9c]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp + 0x10], eax
test eax, eax
jne 0x41eb15
lea ecx, [ebp - 0x11c]
call fcn.00420310
mov edx, eax
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x41
mov dword [ebp - 0xa0], vtable.CWConstString.0
mov dword [ebp - 0x94], 0x450688
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x1cc]
push edx
lea edx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp + 0x48]
push eax
lea ecx, [ecx + 0xb4]
call fcn.00404410
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x1cc]
call fcn.00402b20
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x11c]
call fcn.00402b20
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
call fcn.00402db0
or ebx, 0x4000
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolMem.0
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x41ead2
mov eax, dword [ebp - 0x48]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41eacd
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41ead2
lea ecx, [ebp - 0x48]
call eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolObject.0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x174]
call fcn.00402b20
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0x46
jmp 0x41fc52
lea ecx, [ebp - 0x208]
call fcn.0040c910
mov byte [ebp - 4], 0x47
xor eax, eax
cmp dword [ebp - 0x430], 2
mov ecx, 0x800000
cmove eax, ecx
lea ecx, [ebp - 0x234]
mov dword [ebp + 0xc], eax
call fcn.0040c910
mov ebx, eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x28c]
call fcn.004020d0
mov edi, eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x2b8]
call fcn.004020d0
mov esi, eax
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x378]
push eax
lea edx, [ebp - 0x3a4]
lea ecx, [ebp - 0x1cc]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x4b
lea edx, [ebp - 0x174]
push dword [ebp + 0xc]
or dword [ebx + 4], 1
or dword [edi + 4], 1
or dword [esi + 4], 1
push ebx
mov ebx, dword [ebp + 0x10]
mov ecx, ebx
push edi
push esi
push eax
call fcn.004203c0
mov edi, eax
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x1cc]
call fcn.00402b20
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x2b8]
call fcn.00402b20
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x28c]
call fcn.00402b20
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x228]
call fcn.0040bfe0
mov byte [ebp - 4], 0x47
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
test edi, edi
jne 0x41ed43
lea ecx, [ebp - 0x11c]
call fcn.00420310
mov edx, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x50
mov dword [ebp - 0xa0], vtable.CWConstString.0
mov dword [ebp - 0x94], 0x45069c
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1cc]
push edx
lea edx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp + 0x48]
push eax
lea ecx, [ecx + 0xb4]
call fcn.00404410
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1cc]
call fcn.00402b20
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x11c]
call fcn.00402b20
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
call fcn.00402db0
mov eax, dword [ebp - 0x10]
or eax, 0x4000
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1fc]
call fcn.0040bfe0
mov byte [ebp - 4], 6
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolMem.0
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x41ed00
mov eax, dword [ebp - 0x48]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41ecfb
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41ed00
lea ecx, [ebp - 0x48]
call eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolObject.0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x174]
call fcn.00402b20
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0x58
jmp 0x41fc52
mov esi, dword [ebp + 0x30]
xor eax, eax
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x41ed57
cmp word [ecx], ax
sete al
jmp 0x41ed5e
cmp dword [esi + 0x24], 2
setle al
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x41ee15
lea ecx, [ebp - 0x320]
call fcn.004220f0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x310]
push esi
mov dword [ebp - 0x314], 3
call fcn.00404410
mov eax, dword [ebp - 0xb4]
lea ecx, [ebp - 0x2e4]
add eax, 0x68
push eax
call fcn.00404410
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x304]
test eax, eax
jne 0x41edcf
cmp dword [ebp - 0x2ec], 0
mov eax, 0x445b48
cmovne eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x2d8]
test eax, eax
jne 0x41edf2
cmp dword [ebp - 0x2c0], 0
mov eax, 0x445b48
cmovne eax, dword [ebp - 0x2c8]
push 0xc
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xac]
push eax
push 0x26
push edi
call ebx
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x320]
call fcn.0041d510
mov esi, dword [ebp + 0x34]
xor eax, eax
mov edx, dword [esi + 0xc]
test edx, edx
je 0x41ee29
cmp word [edx], ax
sete al
jmp 0x41ee30
cmp dword [esi + 0x24], 2
setle al
test eax, eax
jne 0x41eeaf
test edx, edx
je 0x41ee51
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ee40
sub ecx, esi
sar ecx, 1
jmp 0x41ee65
mov ecx, dword [esi + 0x24]
test ecx, ecx
jne 0x41ee5f
mov edx, 0x445b48
jmp 0x41ee65
mov edx, dword [esi + 0x1c]
shr ecx, 1
dec ecx
push ecx
push edx
push 0x1002
push edi
call ebx
mov eax, dword [ebp + 0x38]
mov edx, dword [eax + 0xc]
test edx, edx
je 0x41ee91
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ee80
sub ecx, esi
sar ecx, 1
jmp 0x41eea5
mov ecx, dword [eax + 0x24]
test ecx, ecx
jne 0x41ee9f
mov edx, 0x445b48
jmp 0x41eea5
mov edx, dword [eax + 0x1c]
shr ecx, 1
dec ecx
push ecx
push edx
push 0x1003
push edi
call ebx
push str.Accept:__
lea eax, [ebp - 0x1fc]
push 1
push eax
call fcn.00422ca0
push str.Accept_Language:_zh_CN_zh_q0.9_en_q0.8_en_GB_q0.7_en_US_q0.6_zh_TW_q0.5
lea eax, [ebp - 0x1fc]
push 1
push eax
call fcn.00422ca0
add esp, 0x18
lea ecx, [ebp - 0xf0]
call fcn.004020d0
mov byte [ebp - 4], 0x5a
xor esi, esi
mov ecx, dword [ebp - 0x1e4]
test ecx, 0xfffffffc
jbe 0x41ef46
nop word [eax + eax]
mov eax, dword [ebp - 0x1ec]
xor edx, edx
test ecx, ecx
mov ecx, 0x445b48
cmove eax, edx
mov eax, dword [eax + esi*4]
test eax, eax
cmovne ecx, eax
push ecx
lea ecx, [ebp - 0xf0]
call fcn.0042a710
push 0x4504fc
lea ecx, [ebp - 0xf0]
call fcn.0042a710
mov ecx, dword [ebp - 0x1e4]
inc esi
mov eax, ecx
shr eax, 2
cmp esi, eax
jl 0x41ef00
lea ecx, [ebp - 0xf0]
call fcn.0042b2c0
mov edx, dword [ebp - 0xe4]
test edx, edx
je 0x41ef71
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ef60
sub ecx, esi
sar ecx, 1
jmp 0x41ef8b
mov ecx, dword [ebp - 0xcc]
test ecx, ecx
jne 0x41ef82
mov edx, 0x445b48
jmp 0x41ef8b
mov edx, dword [ebp - 0xd4]
shr ecx, 1
dec ecx
push 0xa0000000
push ecx
push edx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xf0]
call fcn.00402b20
mov esi, dword [ebp + 0x44]
test byte [esi + 4], 1
jne 0x41f00d
push 4
lea eax, [ebp + 0xc]
mov dword [ebp + 0xc], 3
push eax
push 0x76
push edi
call ebx
cmp eax, 1
jne 0x41f00d
mov ecx, esi
call fcn.00412030
cmp eax, 1
jne 0x41f003
push str.Accept_Encoding:_gzip__deflate
lea ecx, [ebp - 0xa0]
call fcn.0040bf70
mov byte [ebp - 4], 0x5b
mov edx, eax
push ecx
mov ecx, edi
call fcn.004204f0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa0]
call fcn.00402b20
jmp 0x41f00d
push ecx
mov edx, esi
mov ecx, edi
call fcn.004204f0
mov eax, dword [ebp - 0xb4]
cmp dword [eax + 0x98], 0
jne 0x41f02e
push 4
lea eax, [ebp + 0xc]
mov dword [ebp + 0xc], 1
push eax
push 0x3f
push edi
call ebx
mov esi, dword [ebp + 0x20]
xor eax, eax
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x41f042
cmp word [ecx], ax
sete al
jmp 0x41f049
cmp dword [esi + 0x24], 2
setle al
test eax, eax
jne 0x41f0e6
push 0x4507a4
lea ecx, [ebp - 0xa0]
call fcn.0040bf70
mov byte [ebp - 4], 0x5d
push ecx
mov ecx, eax
call fcn.0040ba30
push eax
mov ecx, esi
call fcn.00422bb0
mov esi, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa0]
call fcn.00402b20
test esi, esi
jne 0x41f0db
push str.Cookie:
lea ecx, [ebp - 0x11c]
call fcn.0040bf70
mov byte [ebp - 4], 0x5f
mov edx, eax
push dword [ebp + 0x20]
lea ecx, [ebp - 0xa0]
call fcn.0042b5b0
mov byte [ebp - 4], 0x60
mov edx, eax
mov ecx, edi
call fcn.004204f0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x11c]
call fcn.00402b20
jmp 0x41f0e6
mov edx, dword [ebp + 0x20]
push ecx
mov ecx, edi
call fcn.004204f0
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x44]
cmp eax, fcn.00401b70
je 0x41f0f8
lea ecx, [ebp - 0x2c]
call eax
push dword [ebp + 0x18]
lea ecx, [ebp - 0x2c]
call fcn.00402f40
mov edx, dword [ebp + 0x14]
xor eax, eax
mov ecx, dword [edx + 0xc]
test ecx, ecx
je 0x41f117
cmp word [ecx], ax
sete al
jmp 0x41f11e
cmp dword [edx + 0x24], 2
setle al
test eax, eax
jne 0x41f169
mov dword [ebp + 0x20], eax
lea ecx, [ebp - 0x64]
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004229c0
add esp, 8
mov esi, eax
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x44]
cmp edx, fcn.00401b70
je 0x41f154
lea ecx, [ebp - 0x2c]
call edx
push esi
lea ecx, [ebp - 0x2c]
call fcn.00402f40
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x64]
call fcn.00403370
cmp dword [ebp - 0x18], 0
jle 0x41f1d8
push 0
lea ecx, [ebp - 0x2c]
call fcn.00406500
cmp al, 0x7b
je 0x41f1ab
push 0
lea ecx, [ebp - 0x2c]
call fcn.00406500
cmp al, 0x5b
je 0x41f1ab
push str.Content_Type:_application_x_www_form_urlencoded__charsetutf_8
lea ecx, [ebp - 0xa0]
call fcn.0040bf70
mov byte [ebp - 4], 0x65
mov edx, eax
push ecx
mov ecx, edi
call fcn.004204f0
jmp 0x41f1c9
push str.Content_Type:_application_json__charsetutf_8
lea ecx, [ebp - 0xa0]
call fcn.0040bf70
mov byte [ebp - 4], 0x63
mov edx, eax
push ecx
mov ecx, edi
call fcn.004204f0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov edx, dword [ebp + 0x1c]
xor eax, eax
mov ecx, dword [edx + 0xc]
test ecx, ecx
je 0x41f1ec
cmp word [ecx], ax
sete al
jmp 0x41f1f3
cmp dword [edx + 0x24], 2
setle al
test eax, eax
jne 0x41f1ff
push ecx
mov ecx, edi
call fcn.004204f0
mov eax, dword [ebp + 0x24]
push 4
test eax, eax
jg 0x41f21a
lea eax, [ebp + 0x20]
mov dword [ebp + 0x20], 2
push eax
push 0x3f
push edi
call ebx
jmp 0x41f239
mov dword [ebp + 0x20], eax
lea eax, [ebp + 0x20]
push eax
push 0x59
push edi
call ebx
push 0
push 0x4000
push 0x41ff20
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSetStatusCallback]
mov eax, dword [ebp + 0x3c]
push 4
mov dword [ebp + 0x20], eax
lea eax, [ebp + 0x20]
push eax
push 5
push edi
call ebx
cmp dword [ebp + 0x40], 1
jne 0x41f262
push 4
lea eax, [ebp + 0x20]
mov dword [ebp + 0x20], 0x3300
push eax
push 0x1f
push edi
call ebx
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov esi, eax
mov byte [ebp - 4], 0x67
or dword [esi + 4], 1
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x41f286
mov dword [ebp + 0x20], eax
mov dword [ebp + 0xc], eax
jmp 0x41f28f
mov dword [ebp + 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + 0xc], eax
mov edx, dword [esi + 0xc]
xor eax, eax
test edx, edx
je 0x41f2a0
cmp word [edx], ax
sete al
jmp 0x41f2a7
cmp dword [esi + 0x24], 2
setle al
test eax, eax
je 0x41f2af
xor ecx, ecx
jmp 0x41f2db
test edx, edx
je 0x41f2d1
mov ecx, edx
lea ebx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f2c0
sub ecx, ebx
sar ecx, 1
jmp 0x41f2db
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x41f2db
shr ecx, 1
dec ecx
xor eax, eax
test edx, edx
je 0x41f2e9
cmp word [edx], ax
sete al
jmp 0x41f2f0
cmp dword [esi + 0x24], 2
setle al
test eax, eax
je 0x41f2f8
xor edx, edx
jmp 0x41f309
test edx, edx
jne 0x41f309
cmp dword [esi + 0x24], edx
mov edx, 0x445b48
je 0x41f309
mov edx, dword [esi + 0x1c]
mov ebx, dword [ebp + 0x48]
push ebx
push dword [ebp - 0x18]
push dword [ebp + 0x20]
push dword [ebp + 0xc]
push ecx
push edx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov esi, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa0]
call fcn.00402b20
cmp esi, 1
jne 0x41fb10
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
cmp eax, esi
jne 0x41fab5
lea ecx, [ebp - 0x11c]
call fcn.004020d0
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xc4]
call fcn.004153e0
mov edx, eax
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x6a
or dword [edx + 4], esi
or dword [eax + 4], esi
push edx
push ecx
push 0x16
lea edx, [ebp - 0x11c]
mov ecx, edi
call fcn.00420560
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebx + 0x54]
mov dword [ebp - 0xc4], vtable.CVolObject.0
call fcn.00404410
lea ecx, [ebp - 0xc4]
call fcn.004153e0
mov edx, eax
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x6e
or dword [edx + 4], esi
or dword [eax + 4], esi
push edx
push ecx
lea edx, [esi + 0x12]
mov ecx, edi
call fcn.00420690
mov dword [ebx + 0xb0], eax
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x68
mov edx, str.HEAD
lea ecx, [ebp - 0x174]
mov dword [ebp - 0xc4], vtable.CVolObject.0
call fcn.00411f20
test eax, eax
je 0x41f996
lea ecx, [ebp - 0xb0]
call fcn.004153e0
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xc4]
call fcn.004153e0
mov edx, eax
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x73
or dword [edx + 4], esi
or dword [eax + 4], esi
push edx
push ecx
lea edx, [esi + 4]
mov ecx, edi
call fcn.00420690
mov esi, eax
mov dword [ebp + 0x30], esi
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x71
mov dword [ebp - 0xc4], vtable.CVolObject.0
test esi, esi
jle 0x41f66b
push ecx
push esi
lea ecx, [ebx + 0xc]
call fcn.00415a70
mov eax, esi
xor esi, esi
cdq
and edx, 0xfffff
lea ecx, [edx + eax]
sar ecx, 0x14
mov dword [ebp + 0x48], ecx
test ecx, ecx
jle 0x41f590
xor ecx, ecx
mov dword [ebp + 0x20], ecx
nop
cmp dword [ebx + 0x20], 0
jne 0x41f4ca
xor edx, edx
jmp 0x41f4cd
mov edx, dword [ebx + 0x18]
test byte [ebp - 0xac], 1
lea eax, [ebp - 0xa4]
mov dword [ebp + 0xc], 0
cmovne eax, dword [ebp + 0xc]
push eax
push 0x100000
lea eax, [edx + ecx]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x41f506
cmp dword [ebp - 0xa4], 0x100000
jne 0x41f51a
mov ecx, dword [ebp + 0x20]
inc esi
add ecx, 0x100000
mov dword [ebp + 0x20], ecx
cmp esi, dword [ebp + 0x48]
jl 0x41f4c0
jmp 0x41f58d
lea ecx, [ebp - 0x1a0]
call fcn.00420310
mov esi, eax
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x148]
push 0x4508a8
call fcn.0040bf70
mov byte [ebp - 4], 0x77
mov edx, eax
push esi
lea ecx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x78
lea ecx, [ebx + 0xb4]
push eax
call fcn.00404410
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x148]
call fcn.00402b20
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x1a0]
call fcn.00402b20
mov ecx, dword [ebp + 0x48]
mov esi, dword [ebp + 0x30]
and esi, 0x800fffff
jns 0x41f5a3
dec esi
or esi, 0xfff00000
inc esi
test esi, esi
jle 0x41f988
cmp dword [ebx + 0x20], 0
jne 0x41f5b5
xor edx, edx
jmp 0x41f5b8
mov edx, dword [ebx + 0x18]
test byte [ebp - 0xac], 1
lea eax, [ebp - 0xa4]
mov dword [ebp + 0x48], 0
cmovne eax, dword [ebp + 0x48]
push eax
shl ecx, 0x14
push esi
add ecx, edx
push ecx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x41f988
cmp dword [ebp - 0xa4], esi
je 0x41f988
lea ecx, [ebp - 0x1a0]
call fcn.00420310
mov esi, eax
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x148]
push 0x4508b8
call fcn.0040bf70
mov byte [ebp - 4], 0x7b
mov edx, eax
push esi
lea ecx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x7c
lea ecx, [ebx + 0xb4]
push eax
call fcn.00404410
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x148]
call fcn.00402b20
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x1a0]
call fcn.00402b20
jmp 0x41f988
lea ecx, [ebp - 0xc4]
call fcn.004153e0
mov byte [ebp - 4], 0x7e
mov dword [ebx + 0x24], 0x100000
mov dword [ebp - 0x64], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x64], vtable.CVolObject.0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 0x7f
mov dword [ebp - 0x64], vtable.CVolMem.0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x4c], 0x40
mov byte [ebp - 4], 0x80
mov ecx, 0
test byte [ebp - 0xc0], 1
lea eax, [ebp - 0xb8]
cmovne eax, ecx
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x41f8b2
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + 0x48], ecx
test eax, eax
je 0x41f70b
push ecx
lea ecx, [ebp - 0x64]
call fcn.00428ab0
mov eax, dword [ebp - 0x58]
jmp 0x41f759
test ecx, ecx
je 0x41f759
mov esi, dword [ebp - 0x4c]
mov eax, 0x40
test esi, esi
cmovle esi, eax
mov eax, ecx
cdq
idiv esi
mov eax, dword [ebp - 0x64]
sub esi, edx
add esi, ecx
push esi
mov eax, dword [eax]
cmp eax, method.CWString.virtual_0
jne 0x41f748
mov ecx, 0x45bdd8
call fcn.004297c0
test eax, eax
jne 0x41f74d
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea ecx, [ebp - 0x64]
call eax
mov ecx, dword [ebp + 0x48]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], ecx
push dword [ebp - 0x50]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x58]
lea edx, [ebp - 0xa4]
add esp, 0xc
mov eax, 0
test byte [ebp - 0xac], 1
cmovne edx, eax
mov eax, dword [ebp - 0x50]
xor esi, esi
test eax, eax
push edx
push eax
cmove ecx, esi
push ecx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
cmp eax, 1
jne 0x41f82b
cmp dword [ebp - 0xa4], esi
je 0x41f817
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebx + 0xc]
call fcn.00412180
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0x64], vtable.CVolMem.0
mov byte [ebp - 4], 0x8c
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x41f7e5
mov eax, dword [ebp - 0x64]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41f7e0
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41f7e5
lea ecx, [ebp - 0x64]
call eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x7e
cmp dword [ebp - 0xb8], 0
mov dword [ebp - 0x64], vtable.CVolObject.0
jg 0x41f681
jmp 0x41f97a
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0x64], vtable.CVolMem.0
mov byte [ebp - 4], 0x86
jmp 0x41f934
lea ecx, [ebp - 0x1a0]
call fcn.00420310
mov esi, eax
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x148]
push 0x4508a8
call fcn.0040bf70
mov byte [ebp - 4], 0x88
mov edx, eax
push esi
lea ecx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x89
lea ecx, [ebx + 0xb4]
push eax
call fcn.00404410
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x148]
call fcn.00402b20
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x1a0]
call fcn.00402b20
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0x64], vtable.CVolMem.0
mov byte [ebp - 4], 0x8b
jmp 0x41f934
lea ecx, [ebp - 0x1a0]
call fcn.00420310
mov esi, eax
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x148]
push 0x4508cc
call fcn.0040bf70
mov byte [ebp - 4], 0x82
mov edx, eax
push esi
lea ecx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x83
lea ecx, [ebx + 0xb4]
push eax
call fcn.00404410
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x148]
call fcn.00402b20
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x1a0]
call fcn.00402b20
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0x64], vtable.CVolMem.0
mov byte [ebp - 4], 0x85
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x41f95a
mov eax, dword [ebp - 0x64]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41f955
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41f95a
lea ecx, [ebp - 0x64]
call eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0x64], vtable.CVolObject.0
mov byte [ebp - 4], 0x71
mov dword [ebp - 0xc4], vtable.CVolObject.0
mov byte [ebp - 4], 0x68
mov dword [ebp - 0xb0], vtable.CVolObject.0
lea ecx, [ebp - 0x1dc]
call fcn.004153e0
mov byte [ebp - 4], 0x91
mov dword [ebp - 0x1d0], 0
nop
lea ecx, [ebp - 0xa0]
call fcn.004020d0
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x148]
call fcn.004020d0
mov byte [ebp - 4], 0x93
lea edx, [ebp - 0xa0]
or dword [eax + 4], 1
lea eax, [ebp - 0x1dc]
push eax
push ecx
push 0x2b
mov ecx, edi
call fcn.00420560
mov esi, eax
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x148]
call fcn.00402b20
test esi, esi
je 0x41fa89
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x260]
call fcn.00420950
mov byte [ebp - 4], 0x94
mov edx, eax
push 0x4504fc
lea ecx, [ebp - 0x1a0]
call fcn.0042b730
add esp, 4
mov byte [ebp - 4], 0x95
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x41fa44
cmp dword [eax + 0x24], ecx
mov ecx, 0x445b48
je 0x41fa44
mov ecx, dword [eax + 0x1c]
push ecx
lea ecx, [ebx + 0x28]
call fcn.0042a710
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x1a0]
call fcn.00402b20
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x260]
call fcn.00402b20
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xa0]
call fcn.00402b20
cmp dword [ebp - 0x1d0], 0
jge 0x41f9b0
jmp 0x41fa98
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x68
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x11c]
jmp 0x41fb7e
lea ecx, [ebp - 0x148]
call fcn.00420310
mov esi, eax
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x11c]
push 0x4508e0
call fcn.0040bf70
mov byte [ebp - 4], 0x99
mov edx, eax
push esi
lea ecx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x9a
lea ecx, [ebx + 0xb4]
push eax
call fcn.00404410
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x98
jmp 0x41fb69
lea ecx, [ebp - 0x148]
call fcn.00420310
mov esi, eax
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x11c]
push 0x4508f0
call fcn.0040bf70
mov byte [ebp - 4], 0x9d
mov edx, eax
push esi
lea ecx, [ebp - 0xa0]
call fcn.0042b5b0
add esp, 4
mov byte [ebp - 4], 0x9e
lea ecx, [ebx + 0xb4]
push eax
call fcn.00404410
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xa0]
call fcn.00402b20
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x11c]
call fcn.00402b20
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x148]
call fcn.00402b20
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push edi
call esi
push dword [ebp + 0x10]
call esi
mov ecx, dword [ebp + 0x28]
lea eax, [ebx + 0x28]
push eax
call fcn.00404410
mov ecx, dword [ebp + 0x2c]
lea eax, [ebx + 0x54]
push eax
call fcn.00404410
mov esi, dword [ebp + 8]
lea eax, [ebx + 0xc]
push eax
mov ecx, esi
call fcn.00402db0
mov eax, dword [ebp - 0x10]
or eax, 0x4000
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x1fc]
call fcn.0040bfe0
mov byte [ebp - 4], 6
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolMem.0
mov byte [ebp - 4], 0xa3
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x41fc14
mov eax, dword [ebp - 0x48]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41fc0f
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41fc14
lea ecx, [ebp - 0x48]
call eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], vtable.CVolObject.0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x174]
call fcn.00402b20
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0xa4
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41fc78
mov eax, dword [ebp - 0x2c]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, fcn.004265e0
jne 0x41fc73
mov ecx, 0x45bdd8
call fcn.004298b0
jmp 0x41fc78
lea ecx, [ebp - 0x2c]
call eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], vtable.CVolObject.0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x468]
call fcn.0041d9d0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x44