Function at 0x418430
Capabilities:
Contain obfuscated stackstrings
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b8676
mov eax, dword fs:[0]
push eax
sub esp, 0xa38
mov eax, dword [0x504e20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp + 0x18]
push edi
mov dword [ebp - 0x9e0], ebx
mov dword [ebp - 0xa44], ebx
mov dword [ebp - 0x9f8], esi
mov dword [ebp - 0x9b0], edi
mov dword [ebp - 0xa10], eax
mov dword [ebp - 0xa0c], 0
call fcn.0041aaa0
add esp, 4
test al, al
je 0x4184b9
push edi
push ebx
call fcn.004178b0
add esp, 8
mov eax, ebx
jmp 0x41a57a
test esi, esi
jne 0x418513
push str.InternetOpen_Failed
lea ecx, [ebp - 0x998]
call fcn.00401ae0
push eax
push ebx
mov dword [ebp - 4], 1
call fcn.004175e0
mov edx, dword [ebp - 0x998]
add edx, 0xfffffff0
add esp, 8
mov dword [ebp - 0xa0c], 1
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41850c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, ebx
jmp 0x41a57a
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x9a8], eax
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
mov dword [ebp - 4], 2
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x9b8], eax
push 0x4c2f78
mov ecx, edi
mov byte [ebp - 4], 3
mov dword [ebp - 0x99c], 0
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x9b4]
push eax
call fcn.0043f130
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0x9b8]
push eax
lea eax, [ebp - 0x9a8]
push eax
lea eax, [ebp - 0x9b4]
push eax
mov byte [ebp - 4], 4
call fcn.00417480
movzx eax, al
add esp, 0x2c
test eax, eax
jne 0x418661
push str.InternetCrackUrl_Failed
lea ecx, [ebp - 0x998]
call fcn.00401ae0
push eax
push ebx
mov byte [ebp - 4], 5
call fcn.004175e0
mov edx, dword [ebp - 0x998]
add edx, 0xfffffff0
or esi, 0xffffffff
add esp, 8
mov dword [ebp - 0xa0c], 1
mov byte [ebp - 4], 4
lea ecx, [edx + 0xc]
mov eax, esi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4185ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9b4]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x418622
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9b8]
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x418645
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9a8]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jmp 0x418502
push str.redirectCheck
mov ecx, edi
mov byte [ebp - 0x9b9], 0
call fcn.0042f7d0
test al, al
je 0x4186a8
push str.redirectCheck
mov ecx, edi
call fcn.0042e740
mov ecx, eax
call fcn.0042f780
test al, al
je 0x4186a8
push str.redirectCheck
mov ecx, edi
call fcn.0042e740
mov ecx, eax
call fcn.0042eda0
mov byte [ebp - 0x9b9], al
lea eax, [ebp - 0x9d8]
push eax
lea eax, [ebp - 0x991]
push eax
mov eax, dword [ebp - 0x9b4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov byte [ebp - 0x991], 0
mov dword [ebp - 0x9d8], 0x50
call fcn.00404d50
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00417360
add esp, 0xc
mov ecx, edi
push str.port
call fcn.0042e740
mov ecx, eax
call fcn.0042f7a0
test al, al
je 0x418717
push str.port
mov ecx, edi
call fcn.0042e740
mov ecx, eax
call fcn.0042eee0
mov esi, eax
jmp 0x418726
mov esi, dword [ebp - 0x99c]
test esi, esi
cmove esi, dword [ebp - 0x9d8]
push esi
lea eax, [ebp - 0x9a8]
push eax
push dword [ebp - 0x998]
mov byte [ebp - 0x992], 0
call fcn.00416f40
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x9ac], eax
test ecx, ecx
jne 0x418860
mov ecx, dword [0x5066c4]
test ecx, ecx
jne 0x4187c2
push str.Wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x418782
push str.InternetConnectW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
mov dword [0x5066c4], ecx
jmp 0x418788
mov ecx, dword [0x5066c4]
mov eax, dword [0x506280]
imul eax, eax
cdq
mov dword [ebp - 0x998], 0x16
idiv dword [ebp - 0x998]
cmp edx, 2
jne 0x4187be
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov ecx, dword [0x5066c4]
test ecx, ecx
je 0x4187e7
push 0
push 0
push 3
push 0
push 0
push esi
push dword [ebp - 0x9a8]
push dword [ebp - 0x9f8]
call ecx
mov ecx, eax
mov dword [ebp - 0x9ac], ecx
test ecx, ecx
jne 0x418838
push str.InternetConnect_Failed
lea ecx, [ebp - 0x998]
call fcn.00401ae0
push eax
push ebx
mov byte [ebp - 4], 6
call fcn.004175e0
add esp, 8
lea ecx, [ebp - 0x998]
call fcn.00401fa0
lea ecx, [ebp - 0x9b4]
call fcn.00401fa0
lea ecx, [ebp - 0x9b8]
call fcn.00401fa0
lea ecx, [ebp - 0x9a8]
call fcn.00401fa0
mov eax, ebx
jmp 0x41a57a
mov eax, dword [ebp - 0xa10]
test eax, eax
jne 0x41884b
mov byte [ebp - 0x992], 1
jmp 0x418860
push ecx
push esi
lea ecx, [ebp - 0x9a8]
push ecx
push dword [ebp + 0x1c]
push eax
call fcn.0041ada0
add esp, 0x14
cmp byte [ebp - 0x9b9], 0
mov eax, 0x80400200
mov ecx, 0x80600200
cmovne eax, ecx
or eax, 0xc000
cmp byte [ebp - 0x991], 0
mov dword [ebp - 0x99c], eax
je 0x418893
or eax, 0x803080
mov dword [ebp - 0x99c], eax
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x9c0], eax
push str.method
mov ecx, edi
mov byte [ebp - 4], 7
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x418910
push str.method
mov ecx, edi
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x998]
push eax
call fcn.0043f130
add esp, 0x1c
push eax
lea ecx, [ebp - 0x9c0]
mov byte [ebp - 4], 8
call fcn.00402500
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 7
call fcn.00401fa0
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x9c4], edi
mov ebx, dword [ebp - 0x9b0]
push str.version
mov ecx, ebx
mov byte [ebp - 4], 9
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x418999
push str.version
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x998]
push eax
call fcn.0043f130
add esp, 0x1c
push eax
lea ecx, [ebp - 0x9c4]
mov byte [ebp - 4], 0xa
call fcn.00402500
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 9
call fcn.00401fa0
mov edi, dword [ebp - 0x9c4]
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x9d0], esi
push str.referer
mov ecx, ebx
mov byte [ebp - 4], 0xb
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x418a1c
push str.referer
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x998]
push eax
call fcn.0043f130
add esp, 0x1c
push eax
lea ecx, [ebp - 0x9d0]
mov byte [ebp - 4], 0xc
call fcn.00402500
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 0xb
call fcn.00401fa0
mov esi, dword [ebp - 0x9d0]
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x9c8], ebx
mov ecx, dword [ebp - 0x9b0]
push str.acceptTypes
mov byte [ebp - 4], 0xd
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x418aa7
mov ecx, dword [ebp - 0x9b0]
push str.acceptTypes
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x998]
push eax
call fcn.0043f130
add esp, 0x1c
push eax
lea ecx, [ebp - 0x9c8]
mov byte [ebp - 4], 0xe
call fcn.00402500
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 0xd
call fcn.00401fa0
mov ebx, dword [ebp - 0x9c8]
xor ecx, ecx
cmp dword [ebx - 0xc], ecx
mov eax, ebx
cmove eax, ecx
mov dword [ebp - 0xa40], eax
xor eax, eax
mov dword [ebp - 0xa3c], ecx
cmp dword [esi - 0xc], eax
mov ebx, esi
cmove ebx, eax
cmp dword [edi - 0xc], eax
push 1
push dword [ebp - 0x99c]
mov edx, edi
cmove edx, eax
mov eax, dword [ebp - 0x9c0]
xor esi, esi
cmp dword [eax - 0xc], esi
mov ecx, eax
lea eax, [ebp - 0xa40]
push eax
push ebx
push edx
push dword [ebp - 0x9b8]
cmove ecx, esi
push ecx
push dword [ebp - 0x9ac]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov dword [ebp - 0x9d8], eax
test eax, eax
jne 0x418b3c
push str.HttpOpenRequest_Failed
lea ecx, [ebp - 0x998]
call fcn.00401ae0
mov esi, dword [ebp - 0x9e0]
push eax
push esi
mov byte [ebp - 4], 0xf
call fcn.004175e0
add esp, 8
lea ecx, [ebp - 0x998]
jmp 0x41a526
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x9d4], edi
mov ebx, dword [ebp - 0x9b0]
push str.contentType
mov ecx, ebx
mov byte [ebp - 4], 0x10
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x418c4f
push 0x4c3140
lea ecx, [ebp - 0x99c]
call fcn.00401b70
lea eax, [ebp - 0x99c]
push eax
push str.contentType
mov ecx, ebx
mov byte [ebp - 4], 0x11
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x9cc]
push eax
call fcn.0043f130
add esp, 0x1c
mov esi, eax
push str.Content_Type:
lea ecx, [ebp - 0xa10]
mov byte [ebp - 4], 0x12
call fcn.00401ae0
push esi
push eax
lea eax, [ebp - 0x9f8]
push eax
mov byte [ebp - 4], 0x13
call fcn.00429840
add esp, 0xc
push eax
lea eax, [ebp - 0x998]
push eax
mov byte [ebp - 4], 0x14
call fcn.00429840
add esp, 0xc
push eax
lea ecx, [ebp - 0x9d4]
mov byte [ebp - 4], 0x15
call fcn.00402500
lea ecx, [ebp - 0x998]
call fcn.00401fa0
lea ecx, [ebp - 0x9f8]
call fcn.00401fa0
lea ecx, [ebp - 0xa10]
call fcn.00401fa0
lea ecx, [ebp - 0x9cc]
call fcn.00401fa0
lea ecx, [ebp - 0x99c]
mov byte [ebp - 4], 0x10
call fcn.00401fa0
mov edi, dword [ebp - 0x9d4]
push str.additionalRequestHeaders
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x418cf4
push str.additionalRequestHeaders
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x998]
push eax
call fcn.0043f130
add esp, 0x1c
mov eax, dword [eax]
lea ecx, [ebp - 0x9d4]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x16
push eax
call fcn.00402c30
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 0x10
call fcn.00401fa0
mov edi, dword [ebp - 0x9d4]
lea eax, [edi - 0x10]
push eax
call fcn.00404d50
add eax, 0x10
add esp, 4
mov dword [ebp - 0x99c], eax
lea ecx, [ebp - 0x99c]
mov byte [ebp - 4], 0x17
call fcn.0041ae50
lea ecx, [ebp - 0x99c]
mov byte [ebp - 4], 0x10
call fcn.00401fa0
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x9cc], esi
push str.postData
mov ecx, ebx
mov byte [ebp - 4], 0x18
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x418d77
push str.postData
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x998]
push eax
call fcn.0043f130
add esp, 0x1c
push eax
lea ecx, [ebp - 0x9cc]
mov byte [ebp - 4], 0x19
call fcn.00402500
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 0x18
call fcn.00401fa0
mov esi, dword [ebp - 0x9cc]
lea eax, [esi - 0x10]
push eax
mov dword [ebp - 0x9f8], eax
call fcn.00404d50
lea ebx, [eax + 0x10]
add esp, 4
mov dword [ebp - 0x9dc], ebx
mov eax, dword [esi - 0xc]
add eax, eax
cmp byte [ebp - 0x9b9], 0
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x998], eax
je 0x418de0
mov esi, dword [sym.imp.WININET.dll_InternetSetOptionW]
push 4
lea eax, [ebp - 0x99c]
push eax
push 6
push dword [ebp - 0x9d8]
mov dword [ebp - 0x99c], 0x2710
call esi
push 4
lea eax, [ebp - 0x99c]
push eax
push 5
push dword [ebp - 0x9d8]
call esi
xor eax, eax
cmp dword [edi - 0xc], eax
mov esi, edi
cmove esi, eax
mov eax, dword [ebx - 8]
mov ecx, 1
sub ecx, dword [ebx - 4]
or eax, ecx
jge 0x418e0c
push 0
lea ecx, [ebp - 0x9dc]
call fcn.00406af0
mov ebx, dword [ebp - 0x9dc]
push dword [ebp - 0x998]
push ebx
push dword [edi - 0xc]
push esi
mov esi, dword [ebp - 0x9d8]
push esi
call fcn.00416980
push eax
call fcn.0041cd30
test eax, eax
jne 0x418ebb
lea eax, [ebp - 0x99c]
push eax
call fcn.0043fb50
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
mov byte [ebp - 4], 0x1b
call esi
cmp byte [ebp - 0x992], 0
je 0x418e5e
push dword [ebp - 0x9ac]
call esi
push str.HttpSendRequest_Failed_with:
lea ecx, [ebp - 0x9f8]
call fcn.00401ae0
lea ecx, [ebp - 0x99c]
push ecx
push eax
lea eax, [ebp - 0x998]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00429840
mov esi, dword [ebp - 0x9e0]
push eax
push esi
mov byte [ebp - 4], 0x1d
call fcn.004175e0
add esp, 0x14
lea ecx, [ebp - 0x998]
call fcn.00401fa0
lea ecx, [ebp - 0x9f8]
call fcn.00401fa0
lea ecx, [ebp - 0x99c]
jmp 0x41a505
push dword [ebp - 0x9b0]
call fcn.0041ad40
add esp, 4
test al, al
jne 0x41901f
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x992], 0
je 0x418eeb
push dword [ebp - 0x9ac]
call esi
push 0
lea ecx, [ebp - 0xa08]
call fcn.0042e130
push 1
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x1e
call fcn.0042e230
lea eax, [ebp - 0x9f4]
push eax
push str.result
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x1f
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x1e
call fcn.0042e3d0
push str.no_response_needed
lea ecx, [ebp - 0x9f4]
call fcn.0042e0f0
lea eax, [ebp - 0x9f4]
push eax
push str.content
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x20
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x1e
call fcn.0042e3d0
mov ecx, dword [ebp - 0x9e0]
lea eax, [ebp - 0xa08]
push eax
call fcn.0042def0
lea ecx, [ebp - 0xa08]
mov dword [ebp - 0xa0c], 1
mov byte [ebp - 4], 0x1a
call fcn.0042e3d0
lea ecx, [ebp - 0x9dc]
call fcn.00401fa0
lea ecx, [ebp - 0x9cc]
call fcn.00401fa0
lea ecx, [ebp - 0x9d4]
call fcn.00401fa0
lea ecx, [ebp - 0x9c8]
call fcn.00401fa0
lea ecx, [ebp - 0x9d0]
call fcn.00401fa0
lea ecx, [ebp - 0x9c4]
call fcn.00401fa0
lea ecx, [ebp - 0x9c0]
call fcn.00401fa0
lea ecx, [ebp - 0x9b4]
call fcn.00401fa0
lea ecx, [ebp - 0x9b8]
call fcn.00401fa0
lea ecx, [ebp - 0x9a8]
call fcn.00401fa0
mov eax, dword [ebp - 0x9e0]
jmp 0x41a57a
push 0x400
lea eax, [ebp - 0x817]
push 0
push eax
mov byte [ebp - 0x818], 0
call fcn.004980c0
add esp, 0xc
mov dword [ebp - 0xa34], 0x400
push str.Wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
jne 0x4192a7
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
mov eax, dword [0x506280]
imul eax, eax
cdq
mov ecx, 0x11
idiv ecx
cmp edx, 0xa
jne 0x4190eb
xor esi, esi
lea esp, [esp]
call fcn.00497804
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x8e8], xmm0
cmp esi, 0x19
jb 0x419080
xor ecx, ecx
mov edi, edi
mov eax, 0x18
cmp ecx, eax
jge 0x4190df
lea esp, [esp]
movsd xmm0, qword [ebp + eax*8 - 0x8e0]
movsd xmm1, qword [ebp + eax*8 - 0x8e8]
comisd xmm0, xmm1
jbe 0x4190da
movsd qword [ebp + eax*8 - 0x8e0], xmm1
movsd qword [ebp + eax*8 - 0x8e8], xmm0
dec eax
cmp eax, ecx
jg 0x4190b0
inc ecx
cmp ecx, 0x19
jl 0x4190a0
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [ebp - 0x992], 0
je 0x4190fc
push dword [ebp - 0x9ac]
call esi
push str.HttpQueryInfo_Failed
lea ecx, [ebp - 0x998]
call fcn.00401ae0
mov esi, dword [ebp - 0x9e0]
push eax
push esi
mov byte [ebp - 4], 0x21
call fcn.004175e0
mov edx, dword [ebp - 0x998]
add edx, 0xfffffff0
add esp, 8
mov dword [ebp - 0xa0c], 1
mov byte [ebp - 4], 0x1a
lea ecx, [edx + 0xc]
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x41914e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebx - 0x10]
or ebx, 0xffffffff
mov byte [ebp - 4], 0x18
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41916e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9f8]
mov byte [ebp - 4], 0x10
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41918e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0xd
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4191ab
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c8]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xb
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4191ce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9d0]
add edx, 0xfffffff0
mov byte [ebp - 4], 9
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4191f1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c4]
add edx, 0xfffffff0
mov byte [ebp - 4], 7
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x419214
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c0]
add edx, 0xfffffff0
mov byte [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x419237
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9b4]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41925a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9b8]
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41927d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9a8]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x41a578
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41a578
push str.HttpQueryInfoA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x419300
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x992], 0
je 0x4192d1
push dword [ebp - 0x9ac]
call esi
push str.HttpQueryInfo_Failed
lea ecx, [ebp - 0x998]
call fcn.00401ae0
mov byte [ebp - 4], 0x22
mov esi, dword [ebp - 0x9e0]
push eax
push esi
call fcn.004175e0
add esp, 8
lea ecx, [ebp - 0x998]
jmp 0x41a505
push 0
lea ecx, [ebp - 0xa34]
push ecx
lea ecx, [ebp - 0x818]
push ecx
push 0x13
push esi
call eax
test eax, eax
jne 0x419349
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x992], 0
je 0x419333
push dword [ebp - 0x9ac]
call esi
push str.HttpQueryInfo_Failed
lea ecx, [ebp - 0x998]
call fcn.00401ae0
mov byte [ebp - 4], 0x23
jmp 0x4192e5
lea eax, [ebp - 0x818]
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00415e00
mov ebx, dword [ebp - 0x9b0]
push str.acceptedStatusCodes
mov ecx, ebx
mov byte [ebp - 4], 0x24
call fcn.0042e740
mov edi, eax
mov ecx, edi
call fcn.0042f760
test al, al
je 0x419503
call fcn.0041b470
test al, al
jne 0x4193f5
xor esi, esi
lea ecx, [ecx]
call fcn.00497804
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x908], xmm0
cmp esi, 0x1d
jb 0x419390
xor ecx, ecx
mov edi, edi
mov eax, 0x1c
cmp ecx, eax
jge 0x4193ef
lea esp, [esp]
movsd xmm0, qword [ebp + eax*8 - 0x900]
movsd xmm1, qword [ebp + eax*8 - 0x908]
comisd xmm0, xmm1
jbe 0x4193ea
movsd qword [ebp + eax*8 - 0x900], xmm1
movsd qword [ebp + eax*8 - 0x908], xmm0
dec eax
cmp eax, ecx
jg 0x4193c0
inc ecx
cmp ecx, 0x1d
jl 0x4193b0
mov ecx, edi
xor esi, esi
call fcn.0042fb90
test eax, eax
jle 0x4196a1
push esi
mov ecx, edi
call fcn.0042e6a0
mov ecx, eax
call fcn.0042f830
push esi
mov ecx, edi
test al, al
je 0x419457
call fcn.0042e6a0
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x998]
push eax
call fcn.0043f130
push eax
lea eax, [ebp - 0x9a4]
push eax
call fcn.00402750
add esp, 0x24
lea ecx, [ebp - 0x998]
jmp 0x4194d6
call fcn.0042e6a0
mov ecx, eax
call fcn.0042f7a0
test al, al
je 0x4194ee
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x99c], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 0x25
call fcn.0042e6a0
mov ecx, eax
call fcn.0042eee0
push eax
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0xa10]
push eax
call fcn.004298c0
add esp, 0xc
lea ecx, [ebp - 0x99c]
mov byte [ebp - 4], 0x24
call fcn.00401fa0
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0x9a4]
push eax
call fcn.00402750
add esp, 8
lea ecx, [ebp - 0xa10]
mov byte [ebp - 0x991], al
call fcn.00401fa0
cmp byte [ebp - 0x991], 0
jne 0x419720
mov ecx, edi
inc esi
call fcn.0042fb90
cmp esi, eax
jl 0x419406
jmp 0x4196a1
mov ecx, edi
call fcn.0042f810
test al, al
je 0x419685
xor esi, esi
mov ecx, edi
mov dword [ebp - 0x998], esi
call fcn.0042fb90
test eax, eax
jle 0x4196a1
lea esp, [esp]
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x99c], eax
push esi
lea eax, [ebp - 0x99c]
push 0x4c0ba0
push eax
mov byte [ebp - 4], 0x26
call fcn.00417de0
mov esi, dword [ebp - 0x99c]
add esp, 0xc
mov ecx, edi
push esi
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
push esi
mov ecx, edi
test al, al
je 0x4195b6
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x9a0]
push eax
call fcn.0043f130
push eax
lea eax, [ebp - 0x9a4]
push eax
call fcn.00402750
add esp, 0x24
lea ecx, [ebp - 0x9a0]
jmp 0x41962d
call fcn.0042e740
mov ecx, eax
call fcn.0042f7a0
test al, al
je 0x419641
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa10], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 0x27
call fcn.0042e740
mov ecx, eax
call fcn.0042eee0
push eax
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0x9f8]
push eax
call fcn.004298c0
add esp, 0xc
lea ecx, [ebp - 0xa10]
call fcn.00401fa0
lea eax, [ebp - 0x9f8]
push eax
lea eax, [ebp - 0x9a4]
push eax
call fcn.00402750
add esp, 8
lea ecx, [ebp - 0x9f8]
mov byte [ebp - 0x991], al
call fcn.00401fa0
cmp byte [ebp - 0x991], 0
jne 0x41966e
lea ecx, [ebp - 0x99c]
mov byte [ebp - 4], 0x24
call fcn.00401fa0
mov esi, dword [ebp - 0x998]
inc esi
mov ecx, edi
mov dword [ebp - 0x998], esi
call fcn.0042fb90
cmp esi, eax
jl 0x419530
jmp 0x4196a1
lea ecx, [ebp - 0x99c]
mov byte [ebp - 4], 0x24
call fcn.00401fa0
mov al, byte [ebp - 0x991]
jmp 0x419699
lea eax, [ebp - 0x9a4]
push 0x4c31c0
push eax
call fcn.004027b0
add esp, 8
test al, al
jne 0x419720
push dword [ebp - 0x9d8]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
cmp byte [ebp - 0x992], 0
je 0x4196c0
push dword [ebp - 0x9ac]
call esi
push 3
push dword [ebp - 0x9a4]
lea eax, [ebp - 0x898]
lea ecx, [ebp - 0x89c]
mov dword [ebp - 0x89c], eax
call fcn.004066f0
push dword [ebp - 0x89c]
mov byte [ebp - 4], 0x28
call fcn.0049819b
mov esi, dword [ebp - 0x9e0]
push eax
push esi
call fcn.004176f0
mov eax, dword [ebp - 0x89c]
lea ecx, [ebp - 0x898]
add esp, 0xc
cmp eax, ecx
je 0x41a4ff
push eax
call fcn.00497875
add esp, 4
jmp 0x41a4ff
mov edi, dword [ebp - 0x9d8]
push 0
lea eax, [ebp - 0xa20]
push eax
push 0
push 0x16
push edi
mov dword [ebp - 0xa20], 0
call fcn.0041b5e0
mov eax, dword [0x5049f8]
add esp, 0x14
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x9e4], eax
mov eax, dword [ebp - 0xa20]
mov byte [ebp - 4], 0x29
test eax, eax
je 0x4197db
push eax
call fcn.00495ce0
mov esi, eax
add esp, 4
test esi, esi
je 0x4197db
push str.Wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x4197a7
push str.HttpQueryInfoA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4197a7
push 0
lea ecx, [ebp - 0xa20]
push ecx
push esi
push 0x16
push edi
call eax
push esi
lea ecx, [ebp - 0x9a0]
call fcn.00415e00
push eax
lea ecx, [ebp - 0x9e4]
mov byte [ebp - 4], 0x2a
call fcn.00402500
lea ecx, [ebp - 0x9a0]
mov byte [ebp - 4], 0x29
call fcn.00401fa0
push esi
call fcn.00497933
add esp, 4
cmp byte [ebp - 0x9b9], 0
je 0x419bdb
push 0
lea ecx, [ebp - 0xa08]
call fcn.0042e130
lea eax, [ebp - 0x9a4]
push 0x4c31c8
push eax
mov byte [ebp - 4], 0x2b
call fcn.00402810
add esp, 8
test al, al
je 0x4198a3
lea eax, [ebp - 0x9a4]
push 0x4c31d0
push eax
call fcn.00402810
add esp, 8
test al, al
je 0x4198a3
lea eax, [ebp - 0x9a4]
push 0x4c31d8
push eax
call fcn.00402810
add esp, 8
test al, al
je 0x4198a3
lea eax, [ebp - 0x9a4]
push 0x4c31e0
push eax
call fcn.00402810
add esp, 8
test al, al
je 0x4198a3
mov ecx, dword [ebp - 0x9e0]
lea eax, [ebp - 0xa08]
push eax
call fcn.0042def0
lea ecx, [ebp - 0xa08]
mov dword [ebp - 0xa0c], 1
mov byte [ebp - 4], 0x29
call fcn.0042e3d0
lea ecx, [ebp - 0x9e4]
call fcn.00401fa0
lea ecx, [ebp - 0x9a4]
call fcn.00401fa0
jmp 0x418fa6
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x9ac], eax
mov eax, dword [0x506280]
imul eax, eax
cdq
mov ecx, 0x13
idiv ecx
mov byte [ebp - 4], 0x2c
cmp edx, 0xd
jne 0x4198f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [ebp - 0x9e4]
add eax, 0xfffffff0
push eax
call fcn.00404d50
add eax, 0x10
add esp, 4
mov dword [ebp - 0x9b0], eax
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x2d
call fcn.00413b70
mov esi, dword [ebp - 0x9b0]
cmp dword [esi - 0xc], 0
jl 0x419b7f
push str.location:
push esi
call fcn.00497a22
mov edi, eax
add esp, 8
test edi, edi
je 0x419b7f
sub edi, esi
sar edi, 1
cmp edi, 0xffffffff
je 0x419b7f
push edi
push 0x4c3140
lea ecx, [ebp - 0x9b0]
call fcn.00404f00
sub eax, edi
push eax
push edi
lea eax, [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0x9b0]
call fcn.004069d0
push eax
lea ecx, [ebp - 0x9ac]
mov byte [ebp - 4], 0x2e
call fcn.00402500
lea ecx, [ebp - 0x9a0]
mov byte [ebp - 4], 0x2d
call fcn.00401fa0
mov eax, dword [ebp - 0x9ac]
cmp dword [eax - 0xc], 0
jl 0x419b7f
push str.http
push eax
call fcn.00497a22
mov edx, eax
add esp, 8
test edx, edx
je 0x419b7f
mov ecx, dword [ebp - 0x9ac]
sub edx, ecx
sar edx, 1
cmp edx, 0xffffffff
je 0x419b7f
mov eax, dword [ecx - 0xc]
sub eax, edx
push eax
lea eax, [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0x9ac]
call fcn.00407640
push eax
lea ecx, [ebp - 0x9ac]
mov byte [ebp - 4], 0x2f
call fcn.00402500
lea ecx, [ebp - 0x9a0]
mov byte [ebp - 4], 0x2d
call fcn.00401fa0
push 1
lea ecx, [ebp - 0x9f4]
call fcn.0042e230
lea eax, [ebp - 0x9f4]
push eax
push str.urlRedirected
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x30
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x2d
call fcn.0042e3d0
lea eax, [ebp - 0x9b4]
push eax
lea eax, [ebp - 0x948]
push eax
call fcn.0043f200
add esp, 8
push eax
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x31
call fcn.0042e050
lea eax, [ebp - 0x9f4]
push eax
push str.requestUrl
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x32
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x31
call fcn.0042e3d0
lea ecx, [ebp - 0x948]
mov byte [ebp - 4], 0x2d
call fcn.00401060
lea eax, [ebp - 0x9ac]
push eax
lea eax, [ebp - 0x990]
push eax
call fcn.0043f200
add esp, 8
push eax
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x33
call fcn.0042e050
lea eax, [ebp - 0x9f4]
push eax
push str.redirectUrl
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x34
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x33
call fcn.0042e3d0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x990]
call fcn.00401060
mov eax, dword [ebp - 0x9a4]
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
or ecx, edx
jge 0x419b39
push 0
lea ecx, [ebp - 0x9a4]
call fcn.00406af0
mov eax, dword [ebp - 0x9a4]
push eax
call fcn.00497916
add esp, 4
lea ecx, [ebp - 0x9f4]
push eax
call fcn.0042e090
lea eax, [ebp - 0x9f4]
push eax
push str.statusCode
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x35
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x2d
call fcn.0042e3d0
mov ecx, dword [ebp - 0x9e0]
lea eax, [ebp - 0xa08]
push eax
call fcn.0042def0
lea ecx, [ebp - 0x9b0]
mov dword [ebp - 0xa0c], 1
call fcn.00401fa0
lea ecx, [ebp - 0x9ac]
call fcn.00401fa0
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x29
call fcn.0042e3d0
lea ecx, [ebp - 0x9e4]
call fcn.00401fa0
lea ecx, [ebp - 0x9a4]
call fcn.00401fa0
jmp 0x418fa6
xor esi, esi
mov dword [ebp - 0x9f0], 0
mov dword [ebp - 0x9ec], esi
mov dword [ebp - 0x9e8], esi
mov byte [ebp - 4], 0x36
mov dword [ebp - 0xa18], esi
lea ecx, [ecx]
call fcn.0041b450
mov ecx, dword [0x5066a8]
test al, al
mov eax, 0xa0ced00e
cmove ecx, eax
sub esi, dword [ebp - 0x9f0]
mov dword [0x5066a8], ecx
lea ecx, [ebp - 0x9f0]
lea eax, [esi + 0x400]
push eax
call fcn.0041b560
mov eax, dword [ebp - 0x9f0]
lea ecx, [ebp - 0xa18]
push ecx
add eax, esi
push 0x400
push eax
push edi
mov dword [ebp - 0xa18], 0
call fcn.00416980
push eax
call fcn.0041ce40
test eax, eax
je 0x41a4a0
mov eax, dword [ebp - 0xa18]
add eax, esi
push eax
lea ecx, [ebp - 0x9f0]
call fcn.0041b560
call fcn.0041b3e0
test al, al
jne 0x419c95
push 4
call fcn.0049658d
mov ecx, dword [0x506280]
add esp, 4
mov dword [eax], ecx
call fcn.0041b530
test al, al
jne 0x419cc0
mov eax, pe_nt_image_headers32
mov esi, 0xf8
test esi, esi
je 0x419cb9
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x419ca8
add eax, esi
mov dword [0x506280], eax
cmp dword [ebp - 0xa18], 0
je 0x419cd4
mov esi, dword [ebp - 0x9ec]
jmp 0x419c00
push 0x400
lea eax, [ebp - 0x413]
push 0
push eax
mov byte [ebp - 0x414], 0
call fcn.004980c0
add esp, 0xc
mov dword [ebp - 0xa38], 0x400
push str.Wininet.dll
xor esi, esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x419d1a
push str.HttpQueryInfoA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push 0
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0x414]
push eax
push 0x1d
push edi
call esi
test eax, eax
je 0x419e44
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x99c]
call fcn.00415e00
lea eax, [ebp - 0x99c]
push str.gzip
push eax
call fcn.004027b0
add esp, 8
test al, al
je 0x419e26
mov dword [ebp - 0xa04], 0
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x9f0]
mov ecx, dword [ebp - 0x9ec]
lea edx, [ebp - 0xa04]
push edx
sub ecx, eax
push ecx
push eax
mov byte [ebp - 4], 0x39
call fcn.0041b290
add esp, 0xc
test eax, eax
jne 0x419e09
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call esi
cmp byte [ebp - 0x992], 0
je 0x419dc4
push dword [ebp - 0x9ac]
call esi
push str.gzip_decompressing_error
lea ecx, [ebp - 0x9a0]
call fcn.00401ae0
mov esi, dword [ebp - 0x9e0]
push eax
push esi
mov byte [ebp - 4], 0x3a
call fcn.004175e0
add esp, 8
lea ecx, [ebp - 0x9a0]
call fcn.00401fa0
lea ecx, [ebp - 0xa04]
call fcn.00415e60
lea ecx, [ebp - 0x99c]
jmp 0x41a4e4
lea eax, [ebp - 0xa04]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.00416e60
lea ecx, [ebp - 0xa04]
call fcn.00415e60
call fcn.0041b430
test al, al
jne 0x419e35
dec dword [0x506280]
lea ecx, [ebp - 0x99c]
mov byte [ebp - 4], 0x36
call fcn.00401fa0
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call esi
cmp byte [ebp - 0x992], 0
je 0x419e5e
push dword [ebp - 0x9ac]
call esi
push str.responseType
mov ecx, ebx
mov byte [ebp - 0x991], 0
mov byte [ebp - 0x99c], 0
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x419f0a
push str.responseType
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x9d8]
push eax
call fcn.0043f130
lea eax, [ebp - 0x9d8]
push str.base64
push eax
call fcn.004027b0
add esp, 0x24
test al, al
je 0x419ed2
mov byte [ebp - 0x991], 1
jmp 0x419eff
lea eax, [ebp - 0x9d8]
push str.binary
push eax
call fcn.004027b0
mov ecx, dword [ebp - 0x99c]
add esp, 8
movzx ecx, cl
test al, al
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x99c], ecx
lea ecx, [ebp - 0x9d8]
call fcn.00401fa0
mov eax, dword [0x5049f8]
mov ecx, 0x5049f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa14], eax
cmp byte [ebp - 0x991], 0
mov edi, dword [ebp - 0x9f0]
mov byte [ebp - 4], 0x3b
je 0x419fda
mov eax, dword [ebp - 0x9ec]
sub eax, edi
push eax
lea eax, [ebp - 0x9a0]
push edi
push eax
call fcn.0040e4d0
add esp, 0xc
push eax
lea ecx, [ebp - 0xa14]
mov byte [ebp - 4], 0x3c
call fcn.00402500
lea ecx, [ebp - 0x9a0]
mov byte [ebp - 4], 0x3b
call fcn.00401fa0
lea eax, [ebp - 0x998]
push eax
call fcn.00415d40
push eax
lea eax, [ebp - 0xa14]
push eax
call fcn.00402750
add esp, 0xc
lea ecx, [ebp - 0x998]
mov bl, al
call fcn.00401fa0
test bl, bl
je 0x41a0a1
push str.Base64_encdng_error
lea ecx, [ebp - 0x9a0]
call fcn.00401ae0
mov esi, dword [ebp - 0x9e0]
push eax
push esi
mov byte [ebp - 4], 0x3d
call fcn.004175e0
add esp, 8
lea ecx, [ebp - 0x9a0]
call fcn.00401fa0
lea ecx, [ebp - 0xa14]
jmp 0x41a4e4
cmp byte [ebp - 0x99c], 0
jne 0x41a0a7
mov esi, dword [ebp - 0x9ec]
sub esi, edi
cmp byte [esi + edi - 1], 0
je 0x41a00f
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.0041b560
mov edi, dword [ebp - 0x9f0]
mov byte [esi + edi], 0
mov eax, dword [ebp - 0x9ec]
sub eax, edi
cmp eax, 3
jbe 0x41a04a
cmp byte [edi], 0xef
jne 0x41a04a
cmp byte [edi + 1], 0xbb
jne 0x41a04a
cmp byte [edi + 2], 0xbf
jne 0x41a04a
lea eax, [edi + 3]
push eax
push edi
lea eax, [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.0041b240
mov edi, dword [ebp - 0x9f0]
push edi
lea ecx, [ebp - 0x9a0]
call fcn.00401ae0
push eax
lea ecx, [ebp - 0xa14]
mov byte [ebp - 4], 0x3e
call fcn.00402500
lea ecx, [ebp - 0x9a0]
mov byte [ebp - 4], 0x3b
call fcn.00401fa0
mov eax, dword [0x506280]
imul eax, eax
cdq
mov ecx, 0xf
idiv ecx
cmp edx, 0xd
jne 0x41a0a7
mov edi, dword [0x506280]
xor esi, esi
mov ebx, edi
inc esi
dec ebx
cmp esi, 0x46
jb 0x41a094
mov edi, dword [ebp - 0x9f0]
mov ebx, dword [ebp - 0x9b0]
push str.outputFile
mov ecx, ebx
mov byte [ebp - 0x9d8], 0
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x41a1b8
push str.outputFile
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042ee10
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401000
lea eax, [ebp - 0x9b0]
push eax
call fcn.0043f130
add esp, 0x1c
mov eax, dword [ebp - 0x9b0]
mov byte [ebp - 4], 0x3f
cmp dword [eax - 0xc], 0
je 0x41a1a9
cmp byte [ebp - 0x99c], 0
je 0x41a169
push 0x4c3290
push eax
lea eax, [ebp - 0x99c]
push eax
mov dword [ebp - 0x99c], 0
call fcn.00499082
add esp, 0xc
test eax, eax
jne 0x41a1a9
mov eax, dword [ebp - 0x99c]
test eax, eax
je 0x41a1a9
push eax
mov eax, dword [ebp - 0x9ec]
sub eax, edi
push eax
push 1
push edi
call fcn.004993cb
push dword [ebp - 0x99c]
call fcn.004991fd
add esp, 0x14
mov byte [ebp - 0x9d8], 1
jmp 0x41a1a9
mov eax, dword [ebp - 0xa14]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00404d50
add eax, 0x10
mov dword [esi], eax
add esp, 4
lea eax, [ebp - 0x9b0]
push eax
call fcn.004167a0
movzx ecx, byte [ebp - 0x9d8]
add esp, 8
test al, al
mov eax, 1
cmovne ecx, eax
mov byte [ebp - 0x9d8], cl
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x3b
call fcn.00401fa0
push 0
lea ecx, [ebp - 0xa30]
call fcn.0042e130
push 1
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x40
call fcn.0042e230
lea eax, [ebp - 0xa08]
push eax
push str.result
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x41
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x40
call fcn.0042e3d0
lea eax, [ebp - 0xa14]
push eax
push eax
call fcn.00440300
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0x990]
push eax
call fcn.0043f200
add esp, 0x10
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x42
call fcn.0042e050
lea eax, [ebp - 0xa08]
push eax
push str.content
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x43
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x42
call fcn.0042e3d0
lea ecx, [ebp - 0x990]
mov byte [ebp - 4], 0x40
call fcn.00401060
lea eax, [ebp - 0x9e4]
push eax
lea eax, [ebp - 0x948]
push eax
call fcn.0043f200
add esp, 8
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x44
call fcn.0042e050
lea eax, [ebp - 0xa08]
push eax
push str.headers
push str.additionalInfo
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x45
call fcn.0042e660
mov ecx, eax
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x44
call fcn.0042e3d0
lea ecx, [ebp - 0x948]
mov byte [ebp - 4], 0x40
call fcn.00401060
lea eax, [ebp - 0x9a4]
push eax
lea eax, [ebp - 0x960]
push eax
call fcn.0043f200
add esp, 8
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x46
call fcn.0042e050
lea eax, [ebp - 0xa08]
push eax
push str.httpCode
push str.additionalInfo
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x47
call fcn.0042e660
mov ecx, eax
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x46
call fcn.0042e3d0
lea ecx, [ebp - 0x960]
mov byte [ebp - 4], 0x40
call fcn.00401060
push str.empty
lea ecx, [ebp - 0x978]
call fcn.00401000
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x48
call fcn.0042e050
lea eax, [ebp - 0xa08]
push eax
push str.noData
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x49
call fcn.0042e660
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x48
call fcn.0042e3d0
lea ecx, [ebp - 0x978]
mov byte [ebp - 4], 0x40
call fcn.00401060
push str.outputFile
mov ecx, ebx
call fcn.0042e740
mov ecx, eax
call fcn.0042f830
test al, al
je 0x41a45a
push dword [ebp - 0x9d8]
lea ecx, [ebp - 0xa08]
call fcn.0042e230
push str.outputFi
lea ecx, [ebp - 0x960]
mov byte [ebp - 4], 0x4a
call fcn.00401000
push str.leResult
push eax
lea eax, [ebp - 0x978]
push eax
mov byte [ebp - 4], 0x4b
call fcn.00416ac0
add esp, 0xc
lea ecx, [ebp - 0xa08]
push ecx
push eax
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x4c
call fcn.0042e500
mov ecx, eax
call fcn.0042e470
lea ecx, [ebp - 0x978]
call fcn.00401060
lea ecx, [ebp - 0x960]
call fcn.00401060
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x40
call fcn.0042e3d0
mov ecx, dword [ebp - 0x9e0]
lea eax, [ebp - 0xa30]
push eax
call fcn.0042def0
lea ecx, [ebp - 0xa30]
mov dword [ebp - 0xa0c], 1
mov byte [ebp - 4], 0x3b
call fcn.0042e3d0
lea ecx, [ebp - 0xa14]
call fcn.00401fa0
lea ecx, [ebp - 0x9f0]
call fcn.00415e60
jmp 0x419888
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push edi
call esi
cmp byte [ebp - 0x992], 0
je 0x41a4ba
push dword [ebp - 0x9ac]
call esi
push str.InternetReadFile_Failed
lea ecx, [ebp - 0x9a0]
call fcn.00401ae0
mov esi, dword [ebp - 0x9e0]
push eax
push esi
mov byte [ebp - 4], 0x37
call fcn.004175e0
add esp, 8
lea ecx, [ebp - 0x9a0]
call fcn.00401fa0
lea ecx, [ebp - 0x9f0]
call fcn.00415e60
lea ecx, [ebp - 0x9e4]
call fcn.00401fa0
lea ecx, [ebp - 0x9a4]
call fcn.00401fa0
lea ecx, [ebp - 0x9dc]
call fcn.00401fa0
lea ecx, [ebp - 0x9cc]
call fcn.00401fa0
lea ecx, [ebp - 0x9d4]
call fcn.00401fa0
lea ecx, [ebp - 0x9c8]
call fcn.00401fa0
lea ecx, [ebp - 0x9d0]
call fcn.00401fa0
lea ecx, [ebp - 0x9c4]
call fcn.00401fa0
lea ecx, [ebp - 0x9c0]
call fcn.00401fa0
lea ecx, [ebp - 0x9b4]
call fcn.00401fa0
lea ecx, [ebp - 0x9b8]
call fcn.00401fa0
lea ecx, [ebp - 0x9a8]
call fcn.00401fa0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00496d64
mov esp, ebp
pop ebp
ret