Function at 0x41d5d7
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xd0
mov dword [ebp - 0x10], 0x81fa5c77
xor ebx, ebx
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov eax, dword [ebp - 0x10]
cmp eax, 0x12d405c5
jg 0x41d675
cmp eax, 0xc70dd2bc
jg 0x41d6db
cmp eax, 0xa4d39bfb
jle 0x41d7f9
cmp eax, 0xb54cdf43
jle 0x41da73
cmp eax, 0xbdce7d43
jg 0x41db79
cmp eax, 0xbc15ecb4
jg 0x41e27e
cmp eax, 0xb54cdf44
je 0x41e776
cmp eax, 0xb9cab840
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
mov ecx, 0xa0
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5bd7
dec edx
mov eax, 0x817a63f3
cmp ecx, edx
je 0x41ebed
mov eax, 0x2af00f3c
jmp 0x41ebed
cmp eax, 0x4162420d
jle 0x41d732
cmp eax, 0x66684270
jle 0x41d8b0
cmp eax, 0x6f1ffd6a
jle 0x41db2c
cmp eax, 0x7301b97b
jg 0x41dbf1
cmp eax, 0x72585e73
jg 0x41e39e
cmp eax, 0x6f1ffd6b
je 0x41e8b9
cmp eax, 0x7204a13c
jne 0x41d5f2
cmp byte [ebp - 0x26], 0
mov eax, 0x48ec64c0
jne 0x41ebed
mov eax, 0x9b6f65db
jmp 0x41ebed
cmp eax, 0xea7b87b0
jg 0x41d85a
cmp eax, 0xd594e191
jle 0x41dada
cmp eax, 0xe2176d6a
jg 0x41dbbc
cmp eax, 0xd96e9fa2
jg 0x41e2e8
cmp eax, 0xd594e192
je 0x41e7ac
cmp eax, 0xd9327505
jne 0x41d5f2
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x72585e74
jmp 0x41d5f2
cmp eax, 0x21a94853
jg 0x41d78d
cmp eax, 0x16ccf7b1
jle 0x41d8f8
cmp eax, 0x1bccc989
jle 0x41dc2b
cmp eax, 0x20baa0c3
jg 0x41dfbc
cmp eax, 0x1bccc98a
je 0x41e48d
cmp eax, 0x1bd97aa5
jne 0x41d5f2
push 0
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
sete byte [ebp - 0x26]
mov dword [ebp - 0x10], 0x7204a13c
jmp 0x41d5f2
cmp eax, 0x2ca1adc7
jg 0x41d948
cmp eax, 0x27a97147
jle 0x41dcd6
cmp eax, 0x2af00f3b
jg 0x41e00b
cmp eax, 0x27a97148
je 0x41e4c0
cmp eax, 0x295507c4
jne 0x41d5f2
mov eax, dword [ebp - 0x14]
shl eax, 6
add eax, 0xfffff5c0
shr eax, 2
imul ecx, eax, 0x8d
add ecx, 0xffffffc4
mov dword [ebp - 0x14], ecx
mov eax, 0x8d725caf
cmp ecx, 0xc0
jge 0x41ed22
mov eax, 0x7301b97c
jmp 0x41ed22
cmp eax, 0x98439b27
jg 0x41d985
cmp eax, 0x8d725cae
jle 0x41dd44
cmp eax, 0x8db0eb52
jg 0x41e087
cmp eax, 0x8d725caf
je 0x41e532
cmp eax, 0x8da2ce6a
jne 0x41d5f2
mov ecx, dword [ebp - 0x14]
shr ecx, 0xb
and ecx, 0x1ffff
mov dword [ebp - 0x14], ecx
mov eax, 0x18f92352
cmp ecx, 0xb4
je 0x41ed22
mov eax, 0x20baa0c4
jmp 0x41ed22
cmp eax, 0x4774cb4
jg 0x41d9d6
cmp eax, 0xf5632117
jle 0x41dd88
cmp eax, 0xf88e80a1
jg 0x41e0d3
cmp eax, 0xf5632118
je 0x41e57a
cmp eax, 0xf8648679
jne 0x41d5f2
mov eax, dword [ebp - 0x14]
mov ecx, 0x1ffff
and eax, ecx
imul eax, eax, 0x14c
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x4162420e
jmp 0x41d5f2
cmp eax, 0x4d75da68
jg 0x41da17
cmp eax, 0x461a3d5c
jle 0x41de53
cmp eax, 0x48ec64bf
jg 0x41e15b
cmp eax, 0x461a3d5d
je 0x41e66d
cmp eax, 0x46954575
jne 0x41d5f2
push dword [ebp - 0x50]
call esi
mov dword [ebp - 0x10], 0x12d405c6
jmp 0x41d5f2
cmp eax, 0x15676355
jle 0x41dc76
cmp eax, 0x1690da94
jg 0x41df8c
cmp eax, 0x15676356
je 0x41e44f
cmp eax, 0x15e52e6e
jne 0x41d5f2
cmp dword [ebp - 0x3c], 0
mov eax, 0xff656b4b
je 0x41d934
mov eax, 0x4d2f2d5b
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x44], eax
jmp 0x41d5f2
cmp eax, 0x3773f20e
jle 0x41dd0e
cmp eax, 0x3910c13f
jg 0x41e02d
cmp eax, 0x3773f20f
je 0x41e4ef
cmp eax, 0x380a7605
jne 0x41d5f2
push dword [ebp - 0x4c]
call esi
mov dword [ebp - 0x10], 0xc410ea73
jmp 0x41d5f2
cmp eax, 0x9f55d048
jle 0x41ddb8
cmp eax, 0xa2362862
jg 0x41e10a
cmp eax, 0x9f55d049
je 0x41e596
cmp eax, 0xa046f11e
jne 0x41d5f2
imul ecx, dword [ebp - 0x14], 0x12c000
mov dword [ebp - 0x14], ecx
mov eax, 0x2ca1adc8
cmp ecx, 0xb5
jl 0x41ed22
mov eax, 0x9f55d049
jmp 0x41ed22
cmp eax, 0xacde223
jg 0x41ddf9
cmp eax, 0x86f27b0
jg 0x41e12c
cmp eax, 0x4774cb5
je 0x41e5d0
cmp eax, 0x71df35d
jne 0x41d5f2
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x1690da95
jmp 0x41d5f2
cmp eax, 0x53958b13
jle 0x41de80
cmp eax, 0x5f2129fc
jg 0x41e1a8
cmp eax, 0x53958b14
je 0x41e679
cmp eax, 0x58583936
jne 0x41d5f2
imul ecx, dword [ebp - 0x14], 0x984000
add ecx, 0xfadfc05d
mov eax, ecx
shr eax, 0xc
mov dword [ebp - 0x14], eax
mov eax, 0x21b24c42
cmp ecx, 0xb6000
jb 0x41ed22
mov eax, 0x15676356
jmp 0x41ed22
cmp eax, 0xacdf80a9
jle 0x41dec6
cmp eax, 0xb2306a5a
jg 0x41e1ca
cmp eax, 0xacdf80aa
je 0x41e6ac
cmp eax, 0xb0c64ceb
jne 0x41d5f2
mov edi, dword [ebp - 0x14]
mov eax, 0x1a8
add edi, eax
mov eax, edi
shr eax, 5
mov dword [ebp - 0x14], eax
push 0x1dfd
push eax
call fcn.00419ca4
add esp, 8
mov eax, 0x4162420e
cmp edi, 0x1100
jb 0x41ed22
mov eax, 0xd3a405e9
jmp 0x41ed22
cmp eax, 0xd17bb27c
jle 0x41def8
cmp eax, 0xd3a405e8
jg 0x41e218
cmp eax, 0xd17bb27d
je 0x41e6cd
cmp eax, 0xd2e7206a
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
and eax, 0xfffffff0
shl eax, 6
imul eax, eax, 0x2049
add eax, 0xffffa691
shr eax, 7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x62fdb108
jmp 0x41d5f2
cmp eax, 0x6c4a775f
jle 0x41df57
cmp eax, 0x6d8041ab
jg 0x41e23d
cmp eax, 0x6c4a7760
je 0x41e74d
cmp eax, 0x6d6a4e90
jne 0x41d5f2
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 0x3910c140
jmp 0x41d5f2
cmp eax, 0xc410ea72
jg 0x41e31e
cmp eax, 0xbdce7d44
je 0x41e7dd
cmp eax, 0xc309d5c3
jne 0x41d5f2
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0x6d8041ac
jmp 0x41d5f2
cmp eax, 0xe67b9926
jg 0x41e37c
cmp eax, 0xe2176d6b
je 0x41e7f4
cmp eax, 0xe65521be
jne 0x41d5f2
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x42455599
jmp 0x41d5f2
cmp eax, 0x7ce864b6
jg 0x41e3c8
cmp eax, 0x7301b97c
je 0x41e8c8
cmp eax, 0x744fc4ce
jne 0x41d5f2
cmp dword [ebp - 0x74], 0
mov eax, 0x69262631
je 0x41ebed
mov eax, 0x1bccc98a
jmp 0x41ebed
cmp eax, 0x18f92351
jle 0x41e3ea
cmp eax, 0x18f92352
je 0x41e413
cmp eax, 0x1aeaaa3e
jne 0x41d5f2
mov ecx, dword [ebp - 0x14]
shl ecx, 9
add ecx, 0xfffffee1
mov dword [ebp - 0x14], ecx
mov eax, 0x30010aee
cmp ecx, 0xb8
jl 0x41ebed
mov eax, 0xb51aa46e
jmp 0x41ebed
cmp eax, 0x12d405c6
je 0x41eaec
cmp eax, 0x14afc217
je 0x41e970
cmp eax, 0x15670044
jne 0x41d5f2
push dword [ebp - 0x24]
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
mov edx, 0xe32c473
test ecx, ecx
jne 0x41dcb6
mov edx, 0xff656b4b
test eax, eax
jne 0x41dcbf
mov edx, 0xff656b4b
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
jmp 0x41d5f2
cmp eax, 0x21a94854
je 0x41eb22
cmp eax, 0x21b24c42
je 0x41e97c
cmp eax, 0x228425ff
jne 0x41d5f2
cmp dword [ebp - 0xd0], 2
sete byte [ebp - 0x25]
mov dword [ebp - 0x10], 0xbc15ecb5
jmp 0x41d5f2
cmp eax, 0x2ca1adc8
je 0x41eb3d
cmp eax, 0x30010aee
je 0x41e9c9
cmp eax, 0x36c04364
jne 0x41d5f2
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x4dedc3c3
jmp 0x41d5f2
cmp eax, 0x817a63f3
je 0x41eb6e
cmp eax, 0x81fa5c77
je 0x41e9fc
cmp eax, 0x8d5be836
jne 0x41d5f2
mov eax, dword [ebp - 0x14]
shl eax, 0xe
add eax, 0xffdcbf96
mov dword [ebp - 0x14], eax
push eax
call fcn.00413aaf
add esp, 4
mov dword [ebp - 0x10], 0x8da2ce6a
jmp 0x41d5f2
cmp eax, 0xea7b87b1
je 0x41eb8d
cmp eax, 0xf22e2b3d
je 0x41ea1a
cmp eax, 0xf402c2cf
jne 0x41d5f2
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x2ca1adc8
jmp 0x41d5f2
cmp eax, 0x98439b28
je 0x41ebf5
cmp eax, 0x9b6f65db
je 0x41ea59
cmp eax, 0x9e2a8d5b
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
and eax, 0xfffffff8
shl eax, 0xb
or eax, 0xdd
imul eax, eax, 0x6d
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x41d5f2
cmp eax, 0xacde224
je 0x41ec16
cmp eax, 0xe32c473
je 0x41ea68
cmp eax, 0xefa0553
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
shr eax, 3
imul ecx, eax, 0xdc
imul eax, eax
imul edx, eax, 0x277f
add ecx, 0xffff4818
dec edx
shr ecx, 5
mov dword [ebp - 0x18], ecx
mov ecx, 0x7ce864b7
cmp edx, eax
je 0x41ec48
mov ecx, 0xbdce7d44
jmp 0x41ec48
cmp eax, 0x4162420e
je 0x41ec50
cmp eax, 0x42455599
je 0x41ea86
cmp eax, 0x4443c68a
jne 0x41d5f2
mov dword [ebp - 0x10], 0x3cf3a764
jmp 0x41d5f2
cmp eax, 0x4d75da69
je 0x41ec8f
cmp eax, 0x4dedc3c3
je 0x41ea92
cmp eax, 0x51b7edda
jne 0x41d5f2
mov cl, byte [ebp - 0x27]
cmp byte [ebp - 0x28], 0
mov eax, 0xa4d39bfc
jne 0x41deb4
mov eax, 0x6e54c1dc
test cl, cl
jne 0x41ebed
mov eax, 0x6e54c1dc
jmp 0x41ebed
cmp eax, 0xa4d39bfc
je 0x41ec9e
cmp eax, 0xa5421aee
je 0x41ea9e
cmp eax, 0xa792b3d7
jne 0x41d5f2
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x10], 0x16ae0529
jmp 0x41d5f2
cmp eax, 0xc70dd2bd
je 0x41ece3
cmp eax, 0xc889b023
je 0x41eac3
cmp eax, 0xd161ecc6
jne 0x41d5f2
mov eax, dword [ebp - 0x14]
add eax, 0xffffff97
shr eax, 5
imul edi, eax, 0x490
add edi, 0xfffb9880
mov dword [ebp - 0x14], edi
push edi
push 0x1245
call fcn.0041a3e7
add esp, 8
mov eax, 0x58583936
cmp edi, 0x7c
jge 0x41ed22
mov eax, 0xe65521be
jmp 0x41ed22
cmp eax, 0x66684271
je 0x41ecfe
cmp eax, 0x686a1597
je 0x41eacf
cmp eax, 0x69262631
jne 0x41d5f2
imul eax, dword [ebp - 0x18], 0xcc
add eax, 0xfffff792
and eax, 0xffffffe0
jmp 0x41e88c
cmp eax, 0x1690da95
je 0x41e474
cmp eax, 0x16ae0529
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
shl eax, 0xc
add eax, 0xfffffee8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x46954575
jmp 0x41d5f2
cmp eax, 0x20baa0c4
je 0x41e4ae
cmp eax, 0x216f6113
jne 0x41d5f2
mov ecx, dword [ebp - 0x18]
imul eax, ecx, 0xc7
imul eax, eax
imul edx, eax, 0x7589
imul ecx, ecx, 0x63800
dec edx
shr ecx, 0xa
and ecx, 0xfffffffc
mov dword [ebp - 0x18], ecx
mov ecx, 0x8d5be836
cmp eax, edx
je 0x41ec48
mov ecx, 0x4d75da69
jmp 0x41ec48
cmp eax, 0x2af00f3c
je 0x41e4fb
cmp eax, 0x2c3208a1
jne 0x41d5f2
mov dword [ebp - 0x10], 0xf5632118
jmp 0x41d5f2
cmp eax, 0x3910c140
je 0x41e510
cmp eax, 0x3cf3a764
jne 0x41d5f2
push eax
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov word [eax + 0x20], 0
push 0x20
push 0x4678b0
push dword [ebp - 0x34]
call fcn.00443560
add esp, 0xc
push 7
push 0x4678d0
push 0x10
push dword [ebp - 0x34]
call fcn.004231b0
add esp, 0x10
mov dword [ebp - 0x10], 0x4162420e
jmp 0x41d5f2
cmp eax, 0x8db0eb53
je 0x41e5dc
cmp eax, 0x9413119a
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
shr eax, 3
add eax, 0xffffffe4
imul ecx, eax, 0x1b4000
imul eax, eax
imul edx, eax, 0x159
dec edx
add ecx, 0xffffff88
mov dword [ebp - 0x18], ecx
mov ecx, 0x2af00f3c
cmp edx, eax
je 0x41ec48
mov ecx, 0xd17bb27d
jmp 0x41ec48
cmp eax, 0xf88e80a2
je 0x41e5f4
cmp eax, 0xff656b4b
jne 0x41d5f2
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x461a3d5d
jmp 0x41d5f2
cmp eax, 0xa2362863
je 0x41e627
cmp eax, 0xa4255ffa
jne 0x41d5f2
mov dword [ebp - 0x10], 0x7d360db5
jmp 0x41d5f2
cmp eax, 0x8fe7f8d
je 0x41e63d
cmp eax, 0x99aefd2
jne 0x41ed36
cmp dword [ebp - 0x50], 0
mov eax, 0x62fdb108
je 0x41ebed
mov eax, 0x228425ff
jmp 0x41ebed
cmp eax, 0x48ec64c0
je 0x41e68f
cmp eax, 0x4d2f2d5b
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff52
add eax, ecx
imul ecx, eax, 0x28e0
imul eax, eax
imul edx, eax, 0x27b5
dec edx
add ecx, 0xffffff83
mov dword [ebp - 0x18], ecx
mov ecx, 0x4162420e
cmp edx, eax
je 0x41ec48
mov ecx, 0x6f1ffd6b
jmp 0x41ec48
cmp eax, 0x5f2129fd
je 0x41e69b
cmp eax, 0x62fdb108
jne 0x41d5f2
mov dword [ebp - 0x10], 0xd9327505
jmp 0x41d5f2
cmp eax, 0xb2306a5b
je 0x41e6ee
cmp eax, 0xb51aa46e
jne 0x41d5f2
imul edi, dword [ebp - 0x14], 0xf6
add edi, 0xffff1dba
mov dword [ebp - 0x14], edi
push 0x5db7
push edi
push 0x2615
call fcn.0041a0f6
add esp, 0xc
push edi
call fcn.0041f391
add esp, 4
mov dword [ebp - 0x10], 0x81fa5c77
jmp 0x41d5f2
cmp eax, 0xd3a405e9
je 0x41e71a
cmp eax, 0xd56e4003
jne 0x41d5f2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x18704591
jmp 0x41d5f2
cmp eax, 0x6d8041ac
je 0x41e759
cmp eax, 0x6e54c1dc
jne 0x41d5f2
mov eax, dword [ebp - 0x18]
shr eax, 5
and eax, 0x7ffff00
add eax, 0x148
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xff656b4b
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], eax
jmp 0x41d5f2
cmp eax, 0xbc15ecb5
je 0x41e82a
cmp eax, 0xbd3b22ae
jne 0x41d5f2
mov eax, dword [ebp - 0x14]
shr eax, 6
and eax, 0x1fff8
imul eax, eax, 0x628000
mov edi, 0x2af00f3c
add eax, 0x5200000
mov dword [ebp - 0x14], eax
je 0x41e2b9
mov edi, 0x744fc4ce
push eax
push 0x4fac
push 0x2671
push 0x4fdb
push 0x4197
push 0x3f43
push 0x3930
call fcn.00418d7a
add esp, 0x1c
mov dword [ebp - 0x10], edi
jmp 0x41d5f2
cmp eax, 0xd96e9fa3
je 0x41e84c
cmp eax, 0xdb9c6041
jne 0x41d5f2
push dword [ebp - 0x90]
push dword [ebp - 0x6c]
call fcn.0044fa41
add esp, 8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x6c4a7760
jmp 0x41d5f2
cmp eax, 0xc410ea73
je 0x41e87a
cmp eax, 0xc43f69aa
jne 0x41d5f2
imul edi, dword [ebp - 0x14], 0xa3
add edi, 0xffffea59
mov eax, edi
shr eax, 5
mov dword [ebp - 0x14], eax
push 0x5c76
push 0x2222
push eax
push 0x5324
call fcn.00418417
add esp, 0x10
mov eax, 0x81fa5c77
cmp edi, 0xa0
jb 0x41ebed
mov eax, 0x1aeaaa3e
jmp 0x41ebed
cmp eax, 0xe67b9927
je 0x41e89b
cmp eax, 0xe95f12ee
jne 0x41d5f2
mov dword [ebp - 0x10], 0x4443c68a
jmp 0x41d5f2
cmp eax, 0x72585e74
je 0x41e8fe
cmp eax, 0x727d9e32
jne 0x41d5f2
cmp dword [ebp - 0x68], 0
setne byte [ebp - 0x28]
mov dword [ebp - 0x10], 0x51b7edda
jmp 0x41d5f2
cmp eax, 0x7ce864b7
je 0x41e930
cmp eax, 0x7d360db5
jne 0x41d5f2
mov dword [ebp - 0x10], 0xa2362863
jmp 0x41d5f2
cmp eax, 0x18704591
jne 0x41ed2a
push dword [ebp - 0x24]
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
setne byte [ebp - 0x27]
mov dword [ebp - 0x10], 0xe65521be
jmp 0x41d5f2
mov edi, dword [ebp - 0x14]
and edi, 0xfffffff0
shl edi, 4
mov dword [ebp - 0x14], edi
push 0x23e2
push 0x5193
push 0x51cb
push edi
push 0x6230
call fcn.00413dfb
add esp, 0x14
mov eax, 0x1bccc98a
cmp edi, 0x61
jge 0x41e7a2
jmp 0x41ed22
imul ecx, dword [ebp - 0x14], 0x8241
mov dword [ebp - 0x14], ecx
mov eax, 0x744fc4ce
cmp ecx, 0xeb
jge 0x41ed22
mov eax, 0x8db0eb53
jmp 0x41ed22
cmp byte [ebp - 0x19], 0
mov eax, 0x16ccf7b2
jne 0x41ebed
mov eax, 0x380a7605
jmp 0x41ebed
cmp dword [ebp - 0x4c], 0
sete byte [ebp - 0x19]
cmp byte [ebp - 0x19], 0
mov eax, 0xd2e7206a
jne 0x41ebed
mov eax, 0x686a1597
jmp 0x41ebed
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xe67b9927
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
shr eax, 6
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x635d
dec edx
add eax, 8
mov dword [ebp - 0x18], eax
mov eax, 0x4162420e
cmp edx, ecx
je 0x41ebed
mov eax, 0x9f55d049
jmp 0x41ebed
mov dword [ebp - 0x10], 0x8db0eb53
jmp 0x41d5f2
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x27a97148
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
shl eax, 5
and eax, 0xfc000000
lea eax, [eax + eax*4]
or eax, 0x2400
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xc889b023
jmp 0x41d5f2
imul edi, dword [ebp - 0x14], 0x8b
add edi, 0xffffc3bb
mov dword [ebp - 0x14], edi
push 0xb49
push 0x3493
push 0x5e3c
push edi
push 0x458e
call fcn.00417553
add esp, 0x14
mov eax, 0x53958b14
cmp edi, 0xaf
jl 0x41ed22
mov eax, 0xea7b87b1
jmp 0x41ed22
cmp dword [ebp - 0x8c], 0
mov eax, 0x48ec64c0
je 0x41ebed
mov eax, 0x21a94854
jmp 0x41ebed
mov eax, dword [ebp - 0x60]
xor ecx, ecx
dec ecx
mov dword [eax], ecx
mov dword [ebp - 0xac], ecx
mov edi, dword [ebp + 8]
push edi
call fcn.0045332c
add esp, 4
lea ecx, [ebp - 0xdc]
push ecx
push 0
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0xacde224
jmp 0x41d5f2
mov dword [ebp - 0x10], 0xe95f12ee
jmp 0x41d5f2
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xd56e4003
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
imul ecx, eax, 0xe5
imul ecx, ecx
imul edx, ecx, 0x4981
dec edx
imul eax, eax, 0x728000
mov dword [ebp - 0x18], eax
mov eax, 0x295507c4
cmp edx, ecx
je 0x41ebed
mov eax, 0x5f2129fd
jmp 0x41ebed
mov eax, dword [ebp + 0xc]
mov dword [eax], ebx
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
mov dword [ebp - 0x10], 0x46954575
jmp 0x41d5f2
mov ecx, dword [ebp - 0x18]
shr ecx, 8
imul eax, ecx, 0x1560
imul ecx, ecx
imul edx, ecx, 0x6905
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x20baa0c4
cmp ecx, edx
je 0x41ebed
mov eax, 0xa4255ffa
jmp 0x41ebed
mov dword [ebp - 0x10], 0xc309d5c3
jmp 0x41d5f2
mov eax, dword [ebp + 0xc]
mov dword [eax], ebx
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
mov dword [ebp - 0x10], 0xf88e80a2
jmp 0x41d5f2
mov dword [ebp - 0x10], 0x53958b14
jmp 0x41d5f2
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x10], 0x46954575
jmp 0x41d5f2
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xea7b87b1
jmp 0x41d5f2
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0x2c3208a1
jmp 0x41d5f2
mov eax, dword [ebp - 0x14]
shr eax, 1
and eax, 0x7ffffc00
mov dword [ebp - 0x14], eax
push eax
push 0x1f50
push 0x45d6
call fcn.00417769
add esp, 0xc
mov dword [ebp - 0x10], 0xd17bb27d
jmp 0x41d5f2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff3
shr eax, 0xb
and eax, 0xfffffffe
imul ecx, eax, 0x4e
lea eax, [ecx - 0xf3]
mov dword [ebp - 0x14], eax
mov eax, 0xf8648679
cmp ecx, 0x156
jae 0x41ed22
mov eax, 0xd96e9fa3
jmp 0x41ed22
mov dword [ebp - 0x10], 0x15e52e6e
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
shl eax, 4
add eax, 0xb0
shr eax, 6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa792b3d7
jmp 0x41d5f2
mov edi, dword [ebp - 0x14]
mov eax, 0xfffffefb
add edi, eax
mov eax, edi
shr eax, 9
mov dword [ebp - 0x14], eax
push eax
call fcn.00417665
add esp, 4
mov eax, 0x20baa0c4
cmp edi, 0xfa00
jae 0x41ed22
mov eax, 0x3cf3a764
jmp 0x41ed22
imul edi, dword [ebp - 0x14], 0x591
add edi, 0x3af59
mov dword [ebp - 0x14], edi
push edi
call fcn.00415a19
add esp, 4
mov eax, 0x2ca1adc8
cmp edi, 0x11
je 0x41ed22
mov eax, 0x744fc4ce
jmp 0x41ed22
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x10], 0x3773f20f
jmp 0x41d5f2
imul eax, dword [ebp - 0x14], 0x3100
add eax, 0x113a00
shr eax, 0xa
imul ecx, eax, 0xb1
add ecx, 7
mov dword [ebp - 0x14], ecx
mov eax, 0x228425ff
cmp ecx, 0xbb
je 0x41ed22
mov eax, 0x4aa1dcba
jmp 0x41ed22
movzx eax, byte [ebp - 0x25]
shl eax, 0x17
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0xa5421aee
jmp 0x41d5f2
imul ecx, dword [ebp - 0x14], 0xad
add ecx, 0xffff1788
shr ecx, 9
and ecx, 0xffffffe0
mov dword [ebp - 0x14], ecx
mov eax, 0x20baa0c4
cmp ecx, 0x5e
jb 0x41ed22
mov eax, 0x81fa5c77
jmp 0x41ed22
mov eax, dword [ebp - 0x18]
lea eax, [eax*4 + 0x7e]
shr eax, 0xa
add eax, 0xffffff71
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x16ccf7b2
jmp 0x41d5f2
imul eax, dword [ebp - 0x18], 0xac
shr eax, 0xf
add eax, 0xda
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x4774cb5
jmp 0x41d5f2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x6d6a4e90
jmp 0x41d5f2
push dword [ebp - 0x7c]
push dword [ebp - 0x78]
push dword [ebp - 0x2c]
call fcn.00443560
add esp, 0xc
movzx eax, word [ebp - 0xc4]
push 0
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x4c]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x216f6113
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
shr eax, 0xf
mov ecx, eax
imul ecx, eax
add eax, 0xffffff9a
imul edx, ecx, 0x1919
dec edx
shr eax, 7
mov dword [ebp - 0x18], eax
mov eax, 0xbd3b22ae
cmp ecx, edx
je 0x41ebed
mov eax, 0x71df35d
jmp 0x41ebed
mov edi, dword [ebp - 0x14]
mov eax, 0xfffffe2c
add edi, eax
mov dword [ebp - 0x14], edi
push edi
push 0x485d
push 0x4485
push 0x502b
call fcn.00415a49
add esp, 0x10
mov eax, 0x36c04364
cmp edi, 0x9d
jge 0x41ed22
mov eax, 0xbc15ecb5
jmp 0x41ed22
mov dword [ebp - 0x10], 0x1bd97aa5
jmp 0x41d5f2
mov eax, dword [ebp - 0x14]
shr eax, 8
imul edi, eax, 0x1e400
add edi, 0xffff8400
mov dword [ebp - 0x14], edi
push 0x5126
push 0x1329
push edi
push 0x5fd6
push 0x3abd
call fcn.0041d241
add esp, 0x14
mov eax, 0x7301b97c
cmp edi, 0x9b
jl 0x41ed22
mov eax, 0xc70dd2bd
jmp 0x41ed22
mov eax, dword [ebp - 0x14]
shr eax, 6
imul eax, eax, 0x39000000
or eax, 0xe2
mov dword [ebp - 0x14], eax
push eax
push 0x20a8
push 0x2ac
call fcn.0041a0f6
add esp, 0xc
mov dword [ebp - 0x10], 0x81fa5c77
jmp 0x41d5f2
push eax
sub esp, 0x3fc
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x9e2a8d5b
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff56
add eax, ecx
shr eax, 0xf
add eax, 0xffffff80
mov ecx, eax
shl ecx, 0xa
imul eax, eax
imul edx, eax, 0x5ef
dec edx
or ecx, 0xcd
mov dword [ebp - 0x18], ecx
mov ecx, 0xe2176d6b
cmp edx, eax
je 0x41ec48
mov ecx, 0xdb9c6041
jmp 0x41ec48
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x36c04364
jmp 0x41d5f2
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xc70dd2bd
jmp 0x41d5f2
mov dword [ebp - 0x10], 0x727d9e32
jmp 0x41d5f2
mov dword [ebp - 0x10], 0x15670044
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
shl eax, 3
and eax, 0x3ffff8
imul eax, eax, 0x7d
add eax, 0xffffff5e
shr eax, 8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xacdf80aa
jmp 0x41d5f2
mov dword [ebp - 0x10], 0x98439b28
jmp 0x41d5f2
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*8]
shl eax, 8
add eax, 0xffffd61e
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf402c2cf
jmp 0x41d5f2
imul eax, dword [ebp - 0x18], 0x2f
mov ecx, eax
shr ecx, 8
shr eax, 0x15
imul ecx, ecx
imul edx, ecx, 0x2e65
dec edx
imul eax, eax, 0xf4
mov dword [ebp - 0x18], eax
mov eax, 0x9f55d049
cmp ecx, edx
je 0x41ebed
mov eax, 0x1690da95
jmp 0x41ebed
imul eax, dword [ebp - 0x18], 0x880
add eax, 0xfffff7aa
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x14afc217
jmp 0x41d5f2
push 0x400
push 0
push dword [ebp - 0x2c]
call fcn.00444060
add esp, 0xc
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
add eax, eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0x7301b97c
jmp 0x41d5f2
mov ecx, dword [ebp - 0x14]
add ecx, 0x7f
shr ecx, 1
mov dword [ebp - 0x14], ecx
mov eax, 0x20baa0c4
cmp ecx, 0xbb
je 0x41ebed
mov eax, 0xb54cdf44
jmp 0x41ebed
mov eax, dword [ebp - 0x38]
mov word [eax + 6], 0
mov eax, dword [ebp - 0x38]
movzx ecx, word [0x4678e2]
mov word [eax + 4], cx
mov ecx, dword [0x4678de]
mov dword [eax], ecx
mov eax, 3
push eax
push 0x4678e4
push eax
push dword [ebp - 0x38]
call fcn.004231b0
add esp, 0x10
push dword [ebp - 0x80]
push ebx
push ebx
push ebx
push dword [ebp - 0x88]
push dword [ebp - 0x38]
push dword [ebp - 0x50]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x20], eax
mov eax, 0x8fe7f8d
cmp dword [ebp - 0x20], ebx
je 0x41ebed
mov eax, 0x9413119a
mov dword [ebp - 0x10], eax
jmp 0x41d5f2
push dword [ebp - 0x30]
push dword [ebp - 0x70]
push dword [ebp - 0x94]
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov dword [ebp - 0x10], 0xefa0553
jmp 0x41d5f2
imul eax, dword [ebp - 0x18], 0xc09
add eax, 0xfff9ef77
mov ecx, eax
shr ecx, 0xb
imul eax, eax
imul ecx, ecx, 0x6b
imul edx, eax, 0x5cf5
dec edx
add ecx, 0xffffff95
mov dword [ebp - 0x18], ecx
mov ecx, 0x2af00f3c
cmp edx, eax
je 0x41ec48
mov ecx, 0x744fc4ce
mov dword [ebp - 0x10], ecx
jmp 0x41d5f2
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x34]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov ecx, 0xe
lea edi, [ebp - 0xd8]
rep stosd dword es:[edi], eax
mov dword [ebp - 0xdc], 0x3c
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0x10], 0xb9cab840
jmp 0x41d5f2
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x99aefd2
jmp 0x41d5f2
mov ecx, dword [ebp - 0x18]
mov eax, 0xca
add ecx, eax
imul eax, ecx, 0xd4000000
imul ecx, ecx
imul edx, ecx, 0x7883
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x4162420e
cmp edx, ecx
je 0x41ecc9
mov eax, 0xe32c473
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
jmp 0x41d5f2
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x70]
add eax, ecx
inc eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x10], 0xf22e2b3d
jmp 0x41d5f2
mov eax, dword [ebp - 0x14]
mov ecx, eax
shl ecx, 6
sub ecx, eax
sub ecx, eax
add ecx, 0xd0
mov dword [ebp - 0x14], ecx
mov eax, 0x86f27b1
cmp ecx, 0x66
jge 0x41ed22
mov eax, 0xa046f11e
mov dword [ebp - 0x10], eax
jmp 0x41d5f2
cmp eax, 0x16ccf7b2
je 0x41ed62
jmp 0x41d5f2
cmp eax, 0x86f27b1
jne 0x41d5f2
mov eax, dword [ebp - 0x14]
dec eax
and eax, 0x1ffff
add eax, 0xfffffe74
mov dword [ebp - 0x14], eax
push 0x29da
push 0x22f2
push eax
call fcn.0041d503
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret