Function at 0x41a3d8
Capabilities:
Check for time delay via gettickcount
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c73b1
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x5898
call fcn.0044db00
mov eax, dword [0x502ae0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
xor esi, esi
mov dword [ebp - 0x57e0], ebx
cmp dword [ebx + 0x210], esi
je 0x41a431
push 0x1000
lea eax, [ebx + 0x258]
push eax
call fcn.00417a42
push 0x502868
lea ecx, [ebp - 0x57fc]
mov dword [ebp - 0x57a4], esi
mov dword [ebp - 0x57a0], esi
mov dword [ebp - 0x579c], esi
mov dword [ebp - 0x5798], esi
call fcn.0040fd3c
lea eax, [ebx + 0x258]
push eax
lea ecx, [ebp - 0x57c0]
mov dword [ebp - 4], esi
call fcn.0041217e
xor eax, eax
mov edi, 0x7fe
push edi
mov word [ebp - 0x834], ax
lea eax, [ebp - 0x832]
push esi
push eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x57b8], 1
mov dword [ebp - 0x57b4], esi
call fcn.0044d1b0
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebp - 0x834]
push str._s.rmsm
push eax
call fcn.0044e939
xor eax, eax
push edi
mov word [ebp - 0x1034], ax
lea eax, [ebp - 0x1032]
push esi
push eax
call fcn.0044d1b0
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebp - 0x1034]
push str._s.cfg
push eax
call fcn.0044e939
push 0x2710
lea eax, [ebp - 0x57dc]
push eax
lea eax, [ebp - 0x579c]
push eax
lea eax, [ebx + 0x258]
push eax
mov dword [ebp - 0x57dc], esi
call fcn.00419335
add esp, 0x40
test eax, eax
jne 0x41a5ad
push 0x502868
lea ecx, [ebp - 0x57b4]
call fcn.0040fd3c
push dword [ebp - 0x57dc]
lea eax, [ebp - 0x57b4]
push 0x4d0dd0
push eax
mov byte [ebp - 4], 2
call fcn.0041182d
fldz
mov edi, dword [ebp - 0x57b4]
add esp, 0xc
push edi
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
mov ecx, ebx
push dword [ebp - 0x579c]
push esi
push esi
push 0x20
call fcn.0041599a
lea ecx, [edi - 0x10]
call fcn.0040f083
mov ecx, dword [ebp - 0x57c0]
add ecx, 0xfffffff0
call fcn.0040f083
mov ecx, dword [ebp - 0x57fc]
add ecx, 0xfffffff0
call fcn.0040f083
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044d74d
leave
ret
lea eax, [ebp - 0x834]
push eax
call fcn.00414ce4
lea edi, [ebx + 0x1258]
push edi
call fcn.00414ce4
push edi
call fcn.00414c81
add esp, 0xc
test al, al
je 0x41a727
push edi
call fcn.00414cab
pop ecx
cmp eax, dword [ebp - 0x579c]
jne 0x41a727
cmp edx, dword [ebp - 0x5798]
jne 0x41a727
lea eax, [ebp - 0x1034]
push eax
call fcn.00414ce4
fldz
pop ecx
push esi
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
mov ecx, ebx
push dword [ebp - 0x579c]
push esi
push esi
push 5
call fcn.0041599a
test eax, eax
je 0x41a71f
cmp dword [ebx + 0x214], esi
je 0x41a71f
mov eax, dword [ebx + 0x20c]
cmp eax, 2
jne 0x41a691
lea eax, [ebx + 0x2258]
push eax
mov eax, 0x3c88
lea esi, [ebx + 0x2358]
call fcn.0044db00
mov edi, esp
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
mov ecx, 0xf22
push eax
add ebx, 0x218
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x504dec]
push ebx
call fcn.00416785
jmp 0x41a71f
cmp eax, 1
lea eax, [ebx + 0x2258]
push eax
jne 0x41a6df
mov eax, 0x2324
lea esi, [ebx + 0x5fe0]
call fcn.0044db00
mov edi, esp
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
mov ecx, 0x8c9
push eax
add ebx, 0x218
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x504dec]
push ebx
call fcn.00416638
jmp 0x41a71f
mov eax, 0x3c88
lea esi, [ebx + 0x2358]
call fcn.0044db00
mov edi, esp
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
mov ecx, 0xf22
push eax
add ebx, 0x218
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x504dec]
push ebx
call fcn.004164eb
xor esi, esi
inc esi
jmp 0x41a575
lea eax, [ebp - 0x834]
push eax
mov dword [ebp - 0x57a8], esi
mov dword [ebp - 0x57b0], esi
mov dword [ebp - 0x57ac], esi
mov byte [ebp - 4], 3
call fcn.00414c81
pop ecx
test al, al
je 0x41a827
lea ecx, [ebp - 0x587c]
call fcn.00414cf7
push esi
lea eax, [ebp - 0x1034]
push eax
lea ecx, [ebp - 0x587c]
mov byte [ebp - 4], 4
call fcn.00416201
cmp eax, esi
jne 0x41a787
lea eax, [ebp - 0x834]
push eax
call fcn.00414ce4
pop ecx
jmp 0x41a7ff
xor eax, eax
push 0xfe
mov word [ebp - 0x3754], ax
lea eax, [ebp - 0x3752]
push esi
push eax
call fcn.0044d1b0
xor eax, eax
lea edi, [ebp - 0x3654]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
mov edi, 0x108
push edi
lea eax, [ebp - 0x3754]
push eax
lea ecx, [ebp - 0x587c]
call fcn.00414d79
cmp eax, edi
jne 0x41a7e7
mov eax, dword [ebp - 0x3654]
cmp eax, dword [ebp - 0x579c]
jne 0x41a7e7
mov eax, dword [ebp - 0x3650]
cmp eax, dword [ebp - 0x5798]
je 0x41a7f4
lea eax, [ebp - 0x834]
push eax
call fcn.00414ce4
pop ecx
lea ecx, [ebp - 0x587c]
call fcn.00414dd6
lea eax, [ebp - 0x834]
push eax
call fcn.00414cab
pop ecx
lea ecx, [ebp - 0x587c]
mov dword [ebp - 0x57a4], eax
mov dword [ebp - 0x57a0], edx
mov byte [ebp - 4], 3
call fcn.004161e0
cmp dword [ebp - 0x57b8], esi
je 0x41b313
xor eax, eax
push 0x3fe
mov word [ebp - 0x5794], ax
xor esi, esi
lea eax, [ebp - 0x5792]
push esi
push eax
call fcn.0044d1b0
push 0x1c40
lea eax, [ebp - 0x5394]
push esi
push eax
call fcn.0044d1b0
push 0x38
lea eax, [ebp - 0x5834]
push esi
push eax
call fcn.0044d1b0
lea eax, [ebp - 0x3f74]
mov dword [ebp - 0x5804], eax
lea eax, [ebp - 0x5394]
mov dword [ebp - 0x5828], eax
lea eax, [ebp - 0x4b94]
mov dword [ebp - 0x5814], eax
lea eax, [ebp - 0x5794]
mov dword [ebp - 0x5834], eax
lea eax, [ebp - 0x4794]
mov dword [ebp - 0x580c], eax
lea eax, [ebp - 0x4f94]
mov dword [ebp - 0x581c], eax
mov eax, 0x200
add esp, 0x24
mov dword [ebp - 0x5818], eax
mov dword [ebp - 0x5808], eax
mov dword [ebp - 0x5830], eax
mov dword [ebp - 0x5810], eax
mov dword [ebp - 0x5824], eax
mov dword [ebp - 0x5800], eax
lea eax, [ebp - 0x5838]
push eax
push esi
push esi
push dword [ebp - 0x57c0]
mov dword [ebp - 0x5838], 0x3c
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x41b375
push esi
call fcn.00414e3d
pop ecx
push 0xa
mov dword [ebp - 0x57a8], eax
pop edi
cmp dword [ebp - 0x57a8], esi
jne 0x41a946
mov eax, edi
dec edi
test eax, eax
je 0x41b36b
push esi
call fcn.00414e3d
pop ecx
push 0x64
mov dword [ebp - 0x57a8], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41a91c
mov eax, 0x7530
push eax
push eax
push 0xea60
push 0x3a98
push dword [ebp - 0x57a8]
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
movzx eax, word [ebp - 0x5820]
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpConnect]
push esi
push eax
push dword [ebp - 0x5828]
push dword [ebp - 0x57a8]
call edi
mov dword [ebp - 0x57ac], eax
mov dword [ebp - 0x57c4], 0xa
cmp dword [ebp - 0x57ac], esi
jne 0x41a9d3
mov eax, dword [ebp - 0x57c4]
dec dword [ebp - 0x57c4]
test eax, eax
je 0x41b361
movzx eax, word [ebp - 0x5820]
push esi
push eax
push dword [ebp - 0x5828]
push dword [ebp - 0x57a8]
call edi
push 0x64
mov dword [ebp - 0x57ac], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41a990
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
xor ecx, ecx
mov eax, 0x1bb
cmp word [ebp - 0x5820], ax
sete cl
push ecx
push 1
push esi
push 0x4d0b14
push dword [ebp - 0x5804]
push dword [ebp - 0x580c]
call edi
push eax
push dword [ebp - 0x57ac]
call fcn.00414f53
add esp, 0x18
mov dword [ebp - 0x57b0], eax
mov dword [ebp - 0x57c4], 0xa
cmp dword [ebp - 0x57b0], esi
jne 0x41aa83
mov eax, dword [ebp - 0x57c4]
dec dword [ebp - 0x57c4]
test eax, eax
je 0x41b35a
xor ecx, ecx
mov eax, 0x1bb
cmp word [ebp - 0x5820], ax
sete cl
push ecx
push 1
push esi
push 0x4d0b14
push dword [ebp - 0x5804]
push dword [ebp - 0x580c]
call edi
push eax
push dword [ebp - 0x57ac]
call fcn.00414f53
add esp, 0x18
push 0x64
mov dword [ebp - 0x57b0], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41aa20
push esi
push dword [ebp - 0x57a4]
push dword [ebp - 0x57b0]
call fcn.00414f8d
xor eax, eax
push 0x616
mov word [ebp - 0x164c], ax
lea eax, [ebp - 0x164a]
push esi
push eax
call fcn.0044d1b0
lea eax, [ebp - 0x164c]
push str.Accept:___r_nConnection:_Keep_Alive_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x164c]
push eax
push dword [ebp - 0x57b0]
call fcn.00415108
add esp, 0x28
cmp dword [ebp - 0x57b4], esi
jne 0x41ab0c
fldz
push 0x4d0dbc
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push dword [ebp - 0x57a4]
push 2
jmp 0x41ab52
xor eax, eax
push 7
mov word [ebp - 0x34], ax
pop ecx
lea edi, [ebp - 0x32]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x34]
push str.0MB_s
push eax
call fcn.0044e939
pop ecx
fldz
pop ecx
lea eax, [ebp - 0x34]
push eax
push eax
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push dword [ebp - 0x57a4]
push 4
mov ecx, ebx
call fcn.0041599a
mov edi, dword [ebp - 0x57b0]
push edi
call fcn.0041502e
pop ecx
test eax, eax
je 0x41b289
push edi
mov dword [ebp - 0x57b8], esi
mov dword [ebp - 0x57b4], esi
call fcn.004162cd
pop ecx
cmp eax, 0x12e
jne 0x41ac06
lea eax, [ebp - 0x57b4]
push edi
push eax
call fcn.00417ee9
pop ecx
pop ecx
push dword [ebp - 0x57b4]
lea eax, [ebx + 0x258]
push eax
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push edi
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebx + 0x210], esi
call edi
mov dword [ebp - 0x57b0], esi
cmp dword [ebp - 0x57ac], esi
je 0x41abd9
push dword [ebp - 0x57ac]
call edi
mov dword [ebp - 0x57ac], esi
cmp dword [ebp - 0x57a8], esi
je 0x41abef
push dword [ebp - 0x57a8]
call edi
mov dword [ebp - 0x57a8], esi
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
mov ecx, dword [ebp - 0x57b4]
mov esi, eax
add ecx, 0xfffffff0
jmp 0x41a570
cmp eax, 0xc8
je 0x41ac1f
cmp eax, 0xce
je 0x41ac1f
mov dword [ebp - 0x57b8], esi
jmp 0x41b227
lea ecx, [ebp - 0x587c]
mov dword [ebp - 0x57bc], esi
call fcn.00414cf7
push esi
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x587c]
mov byte [ebp - 4], 6
call fcn.00416201
cmp eax, esi
je 0x41b1e0
lea ecx, [ebp - 0x58a8]
call fcn.00414cf7
push 1
lea eax, [ebp - 0x1034]
push eax
lea ecx, [ebp - 0x58a8]
mov byte [ebp - 4], 7
call fcn.00416201
cmp eax, esi
je 0x41b193
xor eax, eax
push 0xfe
mov word [ebp - 0x3754], ax
lea eax, [ebp - 0x3752]
push esi
push eax
call fcn.0044d1b0
xor eax, eax
lea edi, [ebp - 0x3654]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
lea eax, [ebx + 0x218]
push eax
lea eax, [ebp - 0x3754]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x579c]
mov dword [ebp - 0x3654], eax
mov eax, dword [ebp - 0x5798]
mov dword [ebp - 0x3650], eax
push 0x108
lea eax, [ebp - 0x3754]
push eax
lea ecx, [ebp - 0x58a8]
call fcn.00414d14
lea ecx, [ebp - 0x58a8]
call fcn.00414dd6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1fff
mov dword [ebp - 0x5848], eax
lea eax, [ebp - 0x364b]
push esi
push eax
mov dword [ebp - 0x57d0], esi
mov dword [ebp - 0x57cc], esi
mov dword [ebp - 0x57bc], 0x2000
mov byte [ebp - 0x364c], 0
call fcn.0044d1b0
add esp, 0xc
mov edi, 0x2000
mov ecx, ebx
call fcn.0041597e
test eax, eax
je 0x41af8b
mov eax, dword [ebp - 0x57a0]
cmp eax, dword [ebp - 0x5798]
ja 0x41af8b
jb 0x41ad68
mov eax, dword [ebp - 0x57a4]
cmp eax, dword [ebp - 0x579c]
jae 0x41af8b
lea eax, [ebp - 0x57bc]
push eax
lea eax, [ebp - 0x364c]
push eax
push dword [ebp - 0x57b0]
call fcn.004150df
add esp, 0xc
test eax, eax
je 0x41af7c
push dword [ebp - 0x57bc]
lea eax, [ebp - 0x364c]
push eax
lea ecx, [ebp - 0x587c]
call fcn.00414d14
push edi
lea eax, [ebp - 0x364c]
push esi
push eax
call fcn.0044d1b0
mov eax, dword [ebp - 0x57bc]
add esp, 0xc
add dword [ebp - 0x57a4], eax
mov dword [ebp - 0x57bc], edi
adc dword [ebp - 0x57a0], esi
add dword [ebp - 0x57d0], edi
adc dword [ebp - 0x57cc], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
sub eax, dword [ebp - 0x5848]
push ecx
pop edx
sbb ecx, edx
mov dword [ebp - 0x57d8], eax
mov dword [ebp - 0x57d4], ecx
cmp ecx, esi
jg 0x41ae30
jl 0x41ae01
cmp eax, esi
jae 0x41ae12
add eax, 0xffffffff
adc ecx, esi
mov dword [ebp - 0x57d8], eax
mov dword [ebp - 0x57d4], ecx
cmp dword [ebp - 0x57d4], esi
jl 0x41ad33
jg 0x41ae30
cmp dword [ebp - 0x57d8], 0x3e8
jb 0x41ad33
mov eax, dword [ebp - 0x57d0]
mov dword [ebp - 0x5840], eax
mov eax, dword [ebp - 0x57cc]
mov dword [ebp - 0x57e4], eax
and dword [ebp - 0x57e4], 0x80000000
and eax, 0x7fffffff
mov dword [ebp - 0x583c], eax
fild qword [ebp - 0x5840]
mov dword [ebp - 0x57e8], esi
fild qword [ebp - 0x57e8]
fchs
faddp st(1)
fmul qword [0x4d0da8]
fild qword [ebp - 0x57d8]
fdivp st(1)
call fcn.0044f3d6
mov dword [ebp - 0x57f8], eax
mov dword [ebp - 0x57f4], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5848], eax
xor eax, eax
mov word [ebp - 0x34], ax
push 7
pop ecx
lea edi, [ebp - 0x32]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x57f8]
mov dword [ebp - 0x5850], eax
mov eax, dword [ebp - 0x57f4]
mov dword [ebp - 0x57ec], eax
and dword [ebp - 0x57ec], 0x80000000
and eax, 0x7fffffff
mov dword [ebp - 0x584c], eax
mov dword [ebp - 0x57f0], esi
push ecx
fild qword [ebp - 0x5850]
mov dword [ebp - 0x57d0], esi
fild qword [ebp - 0x57f0]
mov dword [ebp - 0x57cc], esi
push ecx
fchs
faddp st(1)
fld qword [0x4d0da0]
fmul st(1), st(0)
fxch st(1)
fstp qword [ebp - 0x57c8]
fld qword [ebp - 0x57c8]
fld qword [0x4d0d98]
fcomp st(1)
fnstsw ax
test ah, 0x41
lea eax, [ebp - 0x34]
jp 0x41af33
fmulp st(1)
fstp qword [esp]
push str._.2f_MB_s
jmp 0x41af3d
fstp st(1)
fstp qword [esp]
push str._.2f_KB_s
push eax
call fcn.0044e939
fld qword [ebp - 0x57c8]
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
push eax
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
mov ecx, ebx
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push dword [ebp - 0x57a4]
push 4
call fcn.0041599a
jmp 0x41ad2e
xor eax, eax
inc eax
mov dword [ebp - 0x57b8], eax
mov dword [ebp - 0x57b4], eax
lea ecx, [ebp - 0x587c]
call fcn.00414dd6
mov edi, dword [ebp - 0x57a4]
cmp edi, dword [ebp - 0x579c]
jne 0x41b107
mov eax, dword [ebp - 0x57a0]
cmp eax, dword [ebp - 0x5798]
jne 0x41b107
lea eax, [ebp - 0x1034]
push eax
call fcn.00414ce4
pop ecx
push 3
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebp - 0x834]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
fldz
push 0x4d0d60
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
mov ecx, ebx
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push edi
push 5
call fcn.0041599a
cmp eax, esi
je 0x41b186
cmp dword [ebx + 0x214], esi
je 0x41b186
mov eax, dword [ebx + 0x20c]
cmp eax, 2
jne 0x41b075
lea eax, [ebx + 0x2258]
push eax
mov eax, 0x3c88
lea esi, [ebx + 0x2358]
call fcn.0044db00
mov edi, esp
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
mov ecx, 0xf22
lea eax, [ebx + 0x218]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x504dec]
push eax
call fcn.00416785
jmp 0x41b103
cmp eax, 1
lea eax, [ebx + 0x2258]
push eax
jne 0x41b0c3
mov eax, 0x2324
lea esi, [ebx + 0x5fe0]
call fcn.0044db00
mov edi, esp
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
mov ecx, 0x8c9
lea eax, [ebx + 0x218]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x504dec]
push eax
call fcn.00416638
jmp 0x41b103
mov eax, 0x3c88
lea esi, [ebx + 0x2358]
call fcn.0044db00
mov edi, esp
lea eax, [ebx + 0x1a58]
push eax
lea eax, [ebx + 0x1258]
push eax
lea eax, [ebx + 0x258]
push eax
mov ecx, 0xf22
lea eax, [ebx + 0x218]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x504dec]
push eax
call fcn.004164eb
xor esi, esi
jmp 0x41b186
cmp dword [ebx + 0x8310], esi
je 0x41b137
fldz
push 0x4d0d54
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push edi
push 7
jmp 0x41b17f
cmp dword [ebx + 0x8308], esi
je 0x41b186
lea eax, [ebp - 0x834]
push eax
call fcn.00414ce4
lea eax, [ebp - 0x1034]
push eax
call fcn.00414ce4
fldz
pop ecx
pop ecx
push 0x4d0d48
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push edi
push 6
mov ecx, ebx
call fcn.0041599a
lea ecx, [ebp - 0x58a8]
call fcn.004161e0
jmp 0x41b212
fldz
push 0x4d0d34
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
mov ecx, ebx
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push dword [ebp - 0x57a4]
push 0x20
call fcn.0041599a
lea ecx, [ebp - 0x58a8]
call fcn.004161e0
lea ecx, [ebp - 0x587c]
call fcn.004161e0
jmp 0x41a575
fldz
push 0x4d0d34
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
mov ecx, ebx
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push dword [ebp - 0x57a4]
push 0x20
call fcn.0041599a
lea ecx, [ebp - 0x587c]
mov byte [ebp - 4], 3
call fcn.004161e0
mov edi, dword [ebp - 0x57b0]
cmp edi, esi
je 0x41b238
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x57b0], esi
cmp dword [ebp - 0x57ac], esi
je 0x41b252
push dword [ebp - 0x57ac]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x57ac], esi
cmp dword [ebp - 0x57a8], esi
je 0x41b26c
push dword [ebp - 0x57a8]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x57a8], esi
cmp dword [ebp - 0x57b8], esi
je 0x41b313
mov eax, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41a827
cmp dword [ebp - 0x57b8], esi
je 0x41b2e1
mov eax, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call edi
mov dword [ebp - 0x57b0], esi
cmp dword [ebp - 0x57ac], esi
je 0x41b2c2
push dword [ebp - 0x57ac]
call edi
mov dword [ebp - 0x57ac], esi
cmp dword [ebp - 0x57a8], esi
je 0x41a827
push dword [ebp - 0x57a8]
call edi
mov dword [ebp - 0x57a8], esi
jmp 0x41a827
push 0x4d0d20
fldz
push 0x4d02f4
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x5798]
mov ecx, ebx
push dword [ebp - 0x579c]
push dword [ebp - 0x57a0]
push dword [ebp - 0x57a4]
push 0x20
call fcn.0041599a
xor esi, esi
cmp dword [ebp - 0x57b0], esi
je 0x41b329
push dword [ebp - 0x57b0]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x57ac], esi
je 0x41b33d
push dword [ebp - 0x57ac]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x57a8], esi
je 0x41a575
push dword [ebp - 0x57a8]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x41a575
push 0x4d0d00
jmp 0x41b2e6
push 0x4d0ce0
jmp 0x41b2e6
push 0x4d0cc8
jmp 0x41b2e6
push 0x4d0ca8
jmp 0x41b2e6