Function at 0x413920
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fb2f5
mov eax, dword fs:[0]
push eax
mov eax, 0x1250
call fcn.004f7b10
mov eax, dword [0x525008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x350], esi
mov eax, dword [ebp + 0x10]
lea ebx, [esi + 0x20]
mov edx, dword [ebp + 8]
lea edi, [ebx + 0x30]
mov dword [ebp - 0x348], eax
mov ecx, ebx
lea eax, [ebx + 0x18]
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x34c], eax
lea eax, [ebx + 0x48]
mov dword [esi + 0x80], 0x3e8
mov dword [ebp - 0x37c], edi
mov dword [ebp - 0x378], eax
call fcn.00403760
test al, al
jne 0x415baf
lea ecx, [ebx + 0x18]
call fcn.00403760
test al, al
jne 0x415baf
mov ecx, edx
call fcn.00403760
test al, al
jne 0x415baf
mov ecx, edi
call fcn.00403760
test al, al
jne 0x415baf
lea ecx, [ebx + 0x48]
call fcn.00403760
test al, al
jne 0x415baf
cmp byte [esi + 0x14], al
jne 0x415bb9
lea ecx, [ebp - 0x17c]
call fcn.00403810
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x194]
call fcn.00403810
mov byte [ebp - 4], 1
xorps xmm0, xmm0
movq qword [ebp - 0x74], xmm0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x74]
push eax
mov eax, ecx
push eax
lea eax, [ebp - 0x17c]
push eax
push ecx
push edx
mov ecx, esi
call fcn.004104b0
test al, al
jne 0x413a9b
cmp dword [esi + 0x80], 0
jne 0x413a65
mov dword [esi + 0x80], 0x3e8
xor bl, bl
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x74]
call fcn.004131d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x194]
call fcn.004037b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17c]
call fcn.004037b0
mov al, bl
jmp 0x415bbb
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x33c], eax
or eax, 0
je 0x413a65
lea ecx, [ebp - 0x17c]
call fcn.00403760
test al, al
jne 0x413a65
cmp byte [esi + 0x14], al
jne 0x413a65
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
movq qword [ebp - 0x5c], xmm0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 3
cmp byte [esi + 0x1d], al
je 0x413b95
mov ecx, dword [ebp - 0x70]
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x74]
sub ecx, eax
push edx
push ecx
push eax
call fcn.0040f800
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x370]
push eax
lea ecx, [ebp - 0x74]
call fcn.00413170
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x370]
test ecx, ecx
je 0x413ba1
mov edx, dword [ebp - 0x368]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x413b6b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413b6b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004f6432
add esp, 8
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0
jmp 0x413ba1
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00413170
mov edi, dword [ebp - 0x58]
sub edi, dword [ebp - 0x5c]
mov eax, edi
mov dword [ebp - 0x374], edi
or eax, 0
je 0x415b9c
cmp byte [esi + 0x14], 0
jne 0x415b9c
cmp byte [esi + 0x1c], 0
je 0x413bd1
push edi
push dword [ebp - 0x5c]
call fcn.0040fc90
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
movq qword [ebp - 0x2c], xmm0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 5
lea eax, [ebx + 0x30]
push eax
lea ecx, [ebp - 0xaa4]
call fcn.00417390
add esp, 4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb9c]
push eax
call fcn.00417400
mov byte [ebp - 4], 7
lea eax, [ebp - 0xb9c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb9c]
call fcn.00412fe0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xaa0]
call fcn.004037b0
lea eax, [ebx + 0x48]
push eax
lea ecx, [ebp - 0xac0]
call fcn.00417470
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb0c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0xb0c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb0c]
call fcn.00412fe0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xabc]
call fcn.004037b0
lea eax, [ebp - 0x358]
mov dword [ebp - 0x358], str.action_type
push eax
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 0x354], str.login
call fcn.004174e0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb3c]
call fcn.00412fe0
lea ecx, [ebp - 0x134]
call fcn.00403810
mov byte [ebp - 4], 0xe
lea ecx, [ebx + 0x30]
call fcn.00403840
lea edx, [ebp - 0x134]
cmp edx, eax
je 0x413d26
call fcn.00403840
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x413d17
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x134]
call fcn.00403930
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x134]
call fcn.0040cd20
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xadc]
push eax
call fcn.00417550
add esp, 4
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb6c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0xb6c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb6c]
call fcn.00412fe0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xad8]
call fcn.004037b0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x50c]
call fcn.004037b0
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x134]
call fcn.0040ce90
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x708]
push eax
call fcn.004175c0
add esp, 4
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xefc]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0xefc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xefc]
call fcn.00412fe0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x704]
call fcn.004037b0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x3ec]
call fcn.004037b0
lea ecx, [ebp - 0xd4]
call fcn.00403810
mov byte [ebp - 4], 0x17
mov eax, ecx
push 0
push dword [ebp - 0x33c]
push str._I64u
push eax
call fcn.0041cbb0
lea eax, [ebp - 0xd4]
mov edx, str.file_size
push eax
lea ecx, [ebp - 0x724]
call fcn.00417630
add esp, 0x14
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0xbcc]
call fcn.00417400
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0xbcc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xbcc]
call fcn.00412fe0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x720]
call fcn.004037b0
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x740]
call fcn.00417690
add esp, 4
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xbfc]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xbfc]
call fcn.00412fe0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x73c]
call fcn.004037b0
push 0
push edi
lea eax, [ebp - 0xd4]
push str._I64u
push eax
call fcn.0041cbb0
lea eax, [ebp - 0xd4]
mov edx, str.data_size
push eax
lea ecx, [ebp - 0x75c]
call fcn.00417630
add esp, 0x14
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc2c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0xc2c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc2c]
call fcn.00412fe0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x758]
call fcn.004037b0
lea eax, [ebp - 0x404]
push eax
call fcn.0040d180
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x778]
push eax
call fcn.00417700
add esp, 4
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xc5c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0xc5c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xc5c]
call fcn.00412fe0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x774]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x404]
call fcn.004037b0
push 0x118
lea eax, [ebp - 0x328]
mov dword [ebp - 0x32c], 0x11c
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x32c]
call fcn.0042d570
movzx eax, al
mov edi, 0x50ce64
mov dword [ebp - 0x354], eax
test eax, eax
je 0x414419
mov edx, dword [ebp - 0x328]
lea ecx, [ebp - 0x41c]
call fcn.0041cb50
mov byte [ebp - 4], 0x25
mov edx, str.os_major_version
push eax
lea ecx, [ebp - 0x794]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xc8c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0xc8c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xc8c]
call fcn.00412fe0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x790]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x41c]
call fcn.004037b0
mov edx, dword [ebp - 0x324]
lea ecx, [ebp - 0x434]
call fcn.0041cb50
mov byte [ebp - 4], 0x29
mov edx, str.os_minor_version
push eax
lea ecx, [ebp - 0x7b0]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xcbc]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0xcbc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xcbc]
call fcn.00412fe0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x7ac]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x434]
call fcn.004037b0
mov edx, dword [ebp - 0x320]
lea ecx, [ebp - 0x44c]
call fcn.0041cb50
mov byte [ebp - 4], 0x2d
mov edx, str.os_build_number
push eax
lea ecx, [ebp - 0x7cc]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xcec]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0xcec]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xcec]
call fcn.00412fe0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x7c8]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x44c]
call fcn.004037b0
mov edx, dword [ebp - 0x31c]
lea ecx, [ebp - 0x464]
call fcn.0041cb50
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x7e8]
push eax
call fcn.004177e0
add esp, 4
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xd1c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0xd1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xd1c]
call fcn.00412fe0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x7e4]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x464]
call fcn.004037b0
movzx edx, word [ebp - 0x218]
lea ecx, [ebp - 0x47c]
call fcn.0041cb50
mov byte [ebp - 4], 0x35
mov edx, str.os_service_pack_major
push eax
lea ecx, [ebp - 0x804]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xd4c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0xd4c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xd4c]
call fcn.00412fe0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x800]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x47c]
call fcn.004037b0
movzx edx, word [ebp - 0x216]
lea ecx, [ebp - 0x494]
call fcn.0041cb50
mov byte [ebp - 4], 0x39
mov edx, str.os_service_pack_minor
push eax
lea ecx, [ebp - 0x820]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xd7c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0xd7c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xd7c]
call fcn.00412fe0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x81c]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x494]
call fcn.004037b0
movzx edx, word [ebp - 0x214]
lea ecx, [ebp - 0x4ac]
call fcn.0041cb50
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x83c]
push eax
call fcn.00417850
add esp, 4
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xdac]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0xdac]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xdac]
call fcn.00412fe0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x838]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4ac]
call fcn.004037b0
movzx edx, byte [ebp - 0x212]
lea ecx, [ebp - 0x4c4]
call fcn.0041cb50
mov byte [ebp - 4], 0x41
mov edx, str.os_product_type
push eax
lea ecx, [ebp - 0x858]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xddc]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x43
lea eax, [ebp - 0xddc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xddc]
call fcn.00412fe0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x854]
call fcn.004037b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c4]
call fcn.004037b0
call fcn.0042d4e0
test al, al
mov dword [ebp - 0x344], str.os_bits
mov ecx, 0x50ce5c
lea eax, [ebp - 0x344]
cmove ecx, edi
mov dword [ebp - 0x340], ecx
lea ecx, [ebp - 0xe0c]
push eax
call fcn.004174e0
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0xe0c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004170e0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xe0c]
call fcn.00412fe0
xor ecx, ecx
mov eax, 0x2aaaaaab
mov dword [ebp - 0x330], ecx
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4144f3
mov ebx, dword [ebp - 0x338]
xor edi, edi
mov dword [ebp - 0x340], edi
nop dword [eax + eax]
mov edx, dword [esi]
add edx, edi
mov byte [ebp - 4], 0x46
lea ecx, [edx + 0x18]
call fcn.00403840
mov ecx, edx
mov edi, eax
call fcn.00403840
push eax
lea ecx, [ebp - 0x6a4]
call fcn.00404670
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x68c]
push edi
call fcn.00404670
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x6a4]
or ebx, 1
lea ecx, [ebp - 0x2c]
push eax
mov dword [ebp - 0x338], ebx
call fcn.004170e0
and ebx, 0xfffffffe
mov dword [ebp - 0x338], ebx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x6a4]
call fcn.00412fe0
mov ecx, dword [esi + 4]
mov eax, 0x2aaaaaab
sub ecx, dword [esi]
mov edi, dword [ebp - 0x340]
inc dword [ebp - 0x330]
add edi, 0x30
imul ecx
mov dword [ebp - 0x340], edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x330], eax
jb 0x414450
lea ebx, [esi + 0x20]
push 1
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.00411da0
mov byte [ebp - 4], 0x49
cmp dword [ebp - 0xf4], 0
jne 0x414519
xor bl, bl
jmp 0x415b52
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xa4]
push 0xc
push str.data_version
call fcn.004076e0
push 1
push 0x50ce8c
lea ecx, [ebp - 0xa4]
call fcn.004136e0
push 3
push 0x50ce90
lea ecx, [ebp - 0xa4]
call fcn.004136e0
push 1
push 0x50ce94
lea ecx, [ebp - 0xa4]
call fcn.004136e0
push 0xb
push str.client_data
lea ecx, [ebp - 0xa4]
call fcn.004136e0
push 1
push 0x50ce8c
lea ecx, [ebp - 0xa4]
call fcn.004136e0
cmp dword [ebp - 0xf0], 0x10
lea eax, [ebp - 0x104]
push dword [ebp - 0xf4]
cmovae eax, dword [ebp - 0x104]
lea ecx, [ebp - 0xa4]
push eax
call fcn.004136e0
mov eax, dword [ebp - 0x348]
sub esp, 0xc
mov ecx, eax
push ebx
mov byte [eax + 0x1c], 1
call fcn.004198b0
test al, al
jne 0x414608
mov dword [esi + 0x80], 0x3ea
xor bl, bl
jmp 0x415b43
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov byte [ebp - 4], 0x4d
xorps xmm0, xmm0
movq qword [ebp - 0x68], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov byte [ebp - 4], 0x4e
lea edx, [ebp - 0xa4]
cmp dword [ebp - 0x90], 0x10
mov ebx, dword [ebp - 0x94]
cmovae edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x34c]
call fcn.00403840
mov dword [ebp - 0x34c], eax
mov edi, eax
cmp dword [eax + 0x14], 8
jb 0x414698
mov edi, dword [eax]
lea ecx, [ebp - 0x4dc]
call fcn.00403810
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
push ecx
mov ecx, dword [ebp - 0x348]
push eax
push 0x4080000
push ebx
push edx
push str.Content_Type:_application_x_www_form_urlencoded__charsetUTF_8
push edi
call fcn.00419ef0
mov bl, al
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4dc]
call fcn.004037b0
test bl, bl
jne 0x4146f0
mov dword [esi + 0x80], 0x3ea
jmp 0x415b28
lea eax, [ebp - 0xbc]
mov ecx, esi
push eax
call fcn.00412480
test al, al
jne 0x414709
xor bl, bl
jmp 0x415b28
lea ecx, [ebp - 0x164]
call fcn.00403810
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x14c]
call fcn.00403810
mov byte [ebp - 4], 0x53
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x64]
mov ebx, dword [ebp - 0x68]
sub ecx, ebx
imul ecx
mov dword [ebp - 0x340], 0
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4147bd
xor esi, esi
nop
lea edi, [esi + ebx]
push str.dict
mov ecx, edi
call fcn.00403ca0
test al, al
je 0x41476b
lea ecx, [ebp - 0x14c]
jmp 0x414781
push str.tgid
mov ecx, edi
call fcn.00403ca0
test al, al
je 0x41478d
lea ecx, [ebp - 0x164]
lea eax, [edi + 0x18]
push eax
call fcn.00403780
mov ebx, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x64]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x340]
sub ecx, ebx
imul ecx
inc edi
add esi, 0x30
sar edx, 3
mov eax, edx
mov dword [ebp - 0x340], edi
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x414750
mov esi, dword [ebp - 0x350]
lea ecx, [ebp - 0x14c]
call fcn.00403760
test al, al
jne 0x415b08
lea ecx, [ebp - 0x164]
call fcn.00403760
test al, al
jne 0x415b08
mov edx, ecx
lea ecx, [ebp - 0x20c]
push 0xfde9
call fcn.0042ced0
add esp, 4
mov byte [ebp - 4], 0x55
lea edx, [ebp - 0x14c]
push 0xfde9
lea ecx, [ebp - 0x1f4]
call fcn.0042ced0
add esp, 4
mov byte [ebp - 4], 0x56
lea edx, [ebp - 0x14c]
push 0xfde9
lea ecx, [ebp - 0x1dc]
call fcn.0042ced0
add esp, 4
mov byte [ebp - 4], 0x57
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call edi
mov ebx, eax
mov eax, 0x66666667
imul ebx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ecx + ecx*4]
add eax, eax
sub ebx, eax
call edi
cdq
mov ecx, 9
xor eax, edx
sub eax, edx
cdq
idiv ecx
lea eax, [ebp - 0x1dc]
push edx
push ebx
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.00411510
mov byte [ebp - 4], 0x58
sub esp, 0x18
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x350], esp
mov ecx, esp
push eax
call fcn.00413500
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x4f4]
push eax
mov byte [ebp - 4], 0x58
call fcn.00410870
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x11c]
push eax
call fcn.004134c0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x4f4]
call fcn.00407650
sub esp, 0x18
lea eax, [ebp - 0x11c]
mov ecx, esp
mov dword [ebp - 0x350], esp
push eax
call fcn.00413500
mov byte [ebp - 4], 0x5b
sub esp, 8
lea eax, [ebp - 0x5e4]
push eax
mov byte [ebp - 4], 0x58
call fcn.00410d60
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x11c]
push eax
call fcn.004134c0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x5e4]
call fcn.00407650
lea ecx, [ebp - 0x1ac]
call fcn.00403810
mov byte [ebp - 4], 0x5d
lea eax, [ebp - 0x1ac]
cmp dword [ebp - 0x108], 0x10
lea ecx, [ebp - 0x11c]
mov edx, dword [ebp - 0x10c]
cmovae ecx, dword [ebp - 0x11c]
push eax
call fcn.0042c4b0
add esp, 4
lea ecx, [ebp - 0x1ac]
call fcn.00403760
test al, al
je 0x414981
xor bl, bl
jmp 0x415abb
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x874]
mov eax, dword [ebp - 0x37c]
push eax
call fcn.00417390
add esp, 4
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0xe3c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x61
lea eax, [ebp - 0xe3c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0xe3c]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x870]
call fcn.004037b0
push dword [ebp - 0x378]
lea ecx, [ebp - 0x890]
call fcn.00417470
add esp, 4
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xe6c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0xe6c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xe6c]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x88c]
call fcn.004037b0
lea eax, [ebp - 0x384]
mov dword [ebp - 0x384], str.action_type
push eax
lea ecx, [ebp - 0xe9c]
mov dword [ebp - 0x380], str.logout
call fcn.004174e0
mov byte [ebp - 4], 0x66
lea eax, [ebp - 0xe9c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0xe9c]
call fcn.00412fe0
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x134]
call fcn.0040cd20
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x8ac]
push eax
call fcn.00417550
add esp, 4
mov byte [ebp - 4], 0x68
push eax
lea ecx, [ebp - 0xecc]
call fcn.00417400
mov byte [ebp - 4], 0x69
lea eax, [ebp - 0xecc]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xecc]
call fcn.00412fe0
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x8a8]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x524]
call fcn.004037b0
lea eax, [ebp - 0x53c]
push eax
lea ecx, [ebp - 0x134]
call fcn.0040ce90
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x8c8]
push eax
call fcn.004175c0
add esp, 4
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x125c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x6d
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x125c]
call fcn.00412fe0
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x8c4]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x53c]
call fcn.004037b0
push 0
push dword [ebp - 0x33c]
lea eax, [ebp - 0xd4]
push str._I64u
push eax
call fcn.0041cbb0
lea eax, [ebp - 0xd4]
mov edx, str.file_size
push eax
lea ecx, [ebp - 0x8e4]
call fcn.00417630
add esp, 0x14
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0xf2c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0xf2c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0xf2c]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x8e0]
call fcn.004037b0
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x900]
call fcn.00417690
add esp, 4
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xf5c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0xf5c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xf5c]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x8fc]
call fcn.004037b0
push 0x5f
mov edx, 0x2d
lea ecx, [ebp - 0x194]
call fcn.0041c860
add esp, 4
lea ecx, [ebp - 0x194]
call fcn.0041c9f0
lea eax, [ebp - 0x194]
mov edx, str.file_name
push eax
lea ecx, [ebp - 0x91c]
call fcn.00417630
add esp, 4
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xf8c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x76
lea eax, [ebp - 0xf8c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xf8c]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x918]
call fcn.004037b0
push 0
push dword [ebp - 0x374]
lea eax, [ebp - 0xd4]
push str._I64u
push eax
call fcn.0041cbb0
lea eax, [ebp - 0xd4]
mov edx, str.data_size
push eax
lea ecx, [ebp - 0x938]
call fcn.00417630
add esp, 0x14
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xfbc]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x79
lea eax, [ebp - 0xfbc]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xfbc]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x934]
call fcn.004037b0
xor eax, eax
cmp byte [esi + 0x1c], al
setne al
push eax
lea eax, [ebp - 0xd4]
push 0x50ca74
push eax
call fcn.0041cbb0
add esp, 0xc
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0x954]
push eax
call fcn.004178c0
add esp, 4
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xfec]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x7c
lea eax, [ebp - 0xfec]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xfec]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x950]
call fcn.004037b0
xor eax, eax
cmp byte [esi + 0x1d], al
setne al
push eax
lea eax, [ebp - 0xd4]
push 0x50ca74
push eax
call fcn.0041cbb0
add esp, 0xc
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0x970]
push eax
call fcn.00417930
add esp, 4
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x101c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x7f
lea eax, [ebp - 0x101c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x101c]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x96c]
call fcn.004037b0
lea eax, [ebp - 0x554]
push eax
call fcn.0040d180
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x98c]
push eax
call fcn.00417700
add esp, 4
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x104c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x83
lea eax, [ebp - 0x104c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x104c]
call fcn.00412fe0
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x988]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x554]
call fcn.004037b0
cmp dword [ebp - 0x354], 0
je 0x4152bb
mov edx, dword [ebp - 0x328]
lea ecx, [ebp - 0x56c]
call fcn.0041cb50
mov byte [ebp - 4], 0x85
mov edx, str.os_major_version
push eax
lea ecx, [ebp - 0x9a8]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x107c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x87
lea eax, [ebp - 0x107c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x107c]
call fcn.00412fe0
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x9a4]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x56c]
call fcn.004037b0
mov edx, dword [ebp - 0x324]
lea ecx, [ebp - 0x584]
call fcn.0041cb50
mov byte [ebp - 4], 0x89
mov edx, str.os_minor_version
push eax
lea ecx, [ebp - 0x9c4]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x10ac]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0x10ac]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x10ac]
call fcn.00412fe0
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x9c0]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x584]
call fcn.004037b0
mov edx, dword [ebp - 0x320]
lea ecx, [ebp - 0x59c]
call fcn.0041cb50
mov byte [ebp - 4], 0x8d
mov edx, str.os_build_number
push eax
lea ecx, [ebp - 0x9e0]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x10dc]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x8f
lea eax, [ebp - 0x10dc]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x10dc]
call fcn.00412fe0
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x9dc]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x59c]
call fcn.004037b0
mov edx, dword [ebp - 0x31c]
lea ecx, [ebp - 0x5b4]
call fcn.0041cb50
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x9fc]
push eax
call fcn.004177e0
add esp, 4
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x110c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x93
lea eax, [ebp - 0x110c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x110c]
call fcn.00412fe0
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x9f8]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x5b4]
call fcn.004037b0
movzx edx, word [ebp - 0x218]
lea ecx, [ebp - 0x5cc]
call fcn.0041cb50
mov byte [ebp - 4], 0x95
mov edx, str.os_service_pack_major
push eax
lea ecx, [ebp - 0xa18]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x113c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x97
lea eax, [ebp - 0x113c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x113c]
call fcn.00412fe0
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0xa14]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x5cc]
call fcn.004037b0
movzx edx, word [ebp - 0x216]
lea ecx, [ebp - 0x6ec]
call fcn.0041cb50
mov byte [ebp - 4], 0x99
mov edx, str.os_service_pack_minor
push eax
lea ecx, [ebp - 0xa34]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x116c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x9b
lea eax, [ebp - 0x116c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x116c]
call fcn.00412fe0
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0xa30]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x6ec]
call fcn.004037b0
movzx edx, word [ebp - 0x214]
lea ecx, [ebp - 0x5fc]
call fcn.0041cb50
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xa50]
push eax
call fcn.00417850
add esp, 4
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x119c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0x9f
lea eax, [ebp - 0x119c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x119c]
call fcn.00412fe0
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xa4c]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x5fc]
call fcn.004037b0
movzx edx, byte [ebp - 0x212]
lea ecx, [ebp - 0x614]
call fcn.0041cb50
mov byte [ebp - 4], 0xa1
mov edx, str.os_product_type
push eax
lea ecx, [ebp - 0xa6c]
call fcn.00417770
add esp, 4
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x11cc]
push eax
call fcn.00417400
mov byte [ebp - 4], 0xa3
lea eax, [ebp - 0x11cc]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x11cc]
call fcn.00412fe0
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0xa68]
call fcn.004037b0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x614]
call fcn.004037b0
call fcn.0042d4e0
test al, al
mov dword [ebp - 0x38c], str.os_bits
mov ecx, 0x50ce64
mov eax, 0x50ce5c
cmove eax, ecx
lea ecx, [ebp - 0x11fc]
mov dword [ebp - 0x388], eax
lea eax, [ebp - 0x38c]
push eax
call fcn.004174e0
mov byte [ebp - 4], 0xa5
lea eax, [ebp - 0x11fc]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x11fc]
call fcn.00412fe0
lea eax, [ebp - 0x1ac]
mov edx, str.check_sum
push eax
lea ecx, [ebp - 0xa88]
call fcn.00417630
add esp, 4
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0x122c]
push eax
call fcn.00417400
mov byte [ebp - 4], 0xa7
lea eax, [ebp - 0x122c]
push eax
lea ecx, [ebp - 0x20]
call fcn.004170e0
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0x122c]
call fcn.00412fe0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0xa84]
call fcn.004037b0
xor ecx, ecx
mov eax, 0x2aaaaaab
mov dword [ebp - 0x330], ecx
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4153e8
mov ebx, dword [ebp - 0x338]
xor edi, edi
mov dword [ebp - 0x33c], edi
mov edx, dword [esi]
add edx, edi
mov byte [ebp - 4], 0xa9
lea ecx, [edx + 0x18]
call fcn.00403840
mov ecx, edx
mov edi, eax
call fcn.00403840
push eax
lea ecx, [ebp - 0x6d4]
call fcn.00404670
mov byte [ebp - 4], 0xaa
lea ecx, [ebp - 0x6bc]
push edi
call fcn.00404670
mov byte [ebp - 4], 0xa9
lea eax, [ebp - 0x6d4]
or ebx, 2
lea ecx, [ebp - 0x20]
push eax
mov dword [ebp - 0x338], ebx
call fcn.004170e0
and ebx, 0xfffffffd
mov dword [ebp - 0x338], ebx
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x6d4]
call fcn.00412fe0
mov ecx, dword [esi + 4]
mov eax, 0x2aaaaaab
sub ecx, dword [esi]
mov edi, dword [ebp - 0x33c]
inc dword [ebp - 0x330]
add edi, 0x30
imul ecx
mov dword [ebp - 0x33c], edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x330], eax
jb 0x415348
push 0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x62c]
push eax
call fcn.00411da0
mov byte [ebp - 4], 0xac
lea ecx, [ebp - 0x104]
push eax
call fcn.004134c0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x62c]
call fcn.00407650
cmp dword [ebp - 0xf4], 0
jne 0x415429
xor bl, bl
jmp 0x415aaf
lea eax, [ebp - 0x8c]
push eax
call fcn.00412b20
mov byte [ebp - 4], 0xae
lea ecx, [ebp - 0xec]
push 0x23
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0
push str.Content_Type:_multipart_form_data_
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
call fcn.004076e0
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0xec]
push 9
push str.boundary
call fcn.004136e0
cmp dword [ebp - 0x78], 0x10
lea eax, [ebp - 0x8c]
push dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0xec]
push eax
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0xec]
call fcn.004136e0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x44]
push 2
push 0x50cf5c
call fcn.004136e0
cmp dword [ebp - 0x78], 0x10
lea eax, [ebp - 0x8c]
push dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x44]
push eax
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 3
mov dword [ebp - 0x3ac], 0
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x3a8], 0
push 0x50ce90
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 0xf
mov byte [ebp - 0x3bc], 0
call fcn.004076e0
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0x3a4]
push 0xc
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 0
push str.data_version
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 0xf
mov byte [ebp - 0x3a4], 0
call fcn.004076e0
mov byte [ebp - 4], 0xb2
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x644]
push eax
call fcn.00412a50
mov byte [ebp - 4], 0xb3
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x4155d3
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x44]
call fcn.004136e0
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x644]
call fcn.00407650
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0x3a4]
call fcn.00407650
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x3bc]
call fcn.00407650
push 2
push 0x50cf5c
lea ecx, [ebp - 0x44]
call fcn.004136e0
cmp dword [ebp - 0x78], 0x10
lea eax, [ebp - 0x8c]
push dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x44]
push eax
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 0xb
mov dword [ebp - 0x3c4], 0
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 0x3c0], 0
push str.client_data
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3c0], 0xf
mov byte [ebp - 0x3d4], 0
call fcn.004076e0
mov byte [ebp - 4], 0xb4
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x65c]
push eax
call fcn.00412a50
mov byte [ebp - 4], 0xb5
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x4156b4
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x44]
call fcn.004136e0
mov byte [ebp - 4], 0xb4
lea ecx, [ebp - 0x65c]
call fcn.00407650
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x3d4]
call fcn.00407650
push 2
push 0x50cf5c
lea ecx, [ebp - 0x44]
call fcn.004136e0
cmp dword [ebp - 0x78], 0x10
lea eax, [ebp - 0x8c]
push dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x44]
push eax
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 0x4f
push str.Content_Disposition:_form_data__name_upload_file___filename_upload_file.data_
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 0x26
push str.Content_Type:_application_octet_stream
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0x44]
call fcn.004136e0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movq qword [ebp - 0x50], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0xb6
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x5c]
add eax, 0x400
add eax, ecx
lea ecx, [ebp - 0x50]
push eax
call fcn.00417230
mov ecx, dword [ebp - 0x58]
lea eax, [ebp - 0x331]
sub ecx, dword [ebp - 0x5c]
push eax
xor eax, eax
mov byte [ebp - 0x331], 0
add ecx, dword [ebp - 0x34]
setb al
neg eax
or eax, ecx
lea ecx, [ebp - 0x50]
push eax
call fcn.004131b0
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
push dword [ebp - 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x58]
add esp, 0xc
mov ecx, dword [ebp - 0x5c]
sub eax, ecx
push eax
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x34]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0
mov byte [ebp - 4], 0xb7
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00413170
mov byte [ebp - 4], 0xb6
mov ecx, dword [ebp - 0x364]
test ecx, ecx
je 0x415890
mov edx, dword [ebp - 0x35c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x415868
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x415868
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004f6432
add esp, 8
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
push 2
cmovae eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
push 0x50cc08
mov byte [eax], 0
call fcn.004136e0
push 2
push 0x50cf5c
lea ecx, [ebp - 0x44]
call fcn.004136e0
cmp dword [ebp - 0x78], 0x10
lea eax, [ebp - 0x8c]
push dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x44]
push eax
call fcn.004136e0
push 2
push 0x50cf5c
lea ecx, [ebp - 0x44]
call fcn.004136e0
push 2
push 0x50cc08
lea ecx, [ebp - 0x44]
call fcn.004136e0
mov edi, dword [ebp - 0x4c]
lea eax, [ebp - 0x50]
sub edi, dword [ebp - 0x50]
lea ecx, [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x34]
add eax, edi
push eax
call fcn.00417e10
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x50]
add eax, edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x34], 0
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
lea edx, [ebp - 0xec]
cmovae eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x1c4]
push 0xfde9
mov byte [eax], 0
lea eax, [ebp - 0xbc]
cmp dword [ebp - 0xa8], 0x10
mov dword [ebp - 0xac], 0
cmovae eax, dword [ebp - 0xbc]
mov byte [eax], 0
call fcn.0042c990
add esp, 4
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x1c4]
mov eax, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x4c]
mov dword [ebp - 0x354], eax
sub ebx, eax
call fcn.00403840
mov edi, eax
cmp dword [edi + 0x14], 8
jb 0x4159a9
mov edi, dword [edi]
mov edx, dword [ebp - 0x34c]
cmp dword [edx + 0x14], 8
jb 0x4159b7
mov edx, dword [edx]
lea ecx, [ebp - 0x674]
call fcn.00403810
mov byte [ebp - 4], 0xb9
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
push ecx
mov ecx, dword [ebp - 0x348]
push eax
push 0x4480040
push ebx
push dword [ebp - 0x354]
push edi
push edx
call fcn.00419ef0
mov bl, al
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x674]
call fcn.004037b0
test bl, bl
jne 0x415a0d
mov dword [esi + 0x80], 0x3ea
jmp 0x415a27
lea eax, [ebp - 0xbc]
mov dword [esi + 0x80], 0
push eax
mov ecx, esi
call fcn.00412480
mov bl, al
mov byte [ebp - 4], 0xb6
lea ecx, [ebp - 0x1c4]
call fcn.004037b0
mov byte [ebp - 4], 0xb0
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x415a85
mov edx, dword [ebp - 0x48]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x415a66
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x415a66
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004f6432
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0x44]
call fcn.00407650
mov byte [ebp - 4], 0xae
lea ecx, [ebp - 0xec]
call fcn.00407650
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x8c]
call fcn.00407650
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x20]
call fcn.004130f0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x1ac]
call fcn.004037b0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x11c]
call fcn.00407650
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x1dc]
call fcn.00407650
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x1f4]
call fcn.00407650
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x20c]
call fcn.00407650
jmp 0x415b0a
xor bl, bl
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x14c]
call fcn.004037b0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x164]
call fcn.004037b0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x68]
call fcn.004130f0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xbc]
call fcn.00407650
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0xa4]
call fcn.00407650
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x104]
call fcn.00407650
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xd4]
call fcn.004037b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x134]
call fcn.004037b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.004130f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.004131d0
jmp 0x413a67
xor bl, bl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.004131d0
jmp 0x413a67
mov dword [esi + 0x80], 0x3eb
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004f63f1
mov esp, ebp
pop ebp
ret 0xc