Function at 0x41d561
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xb0
mov dword [ebp - 0x10], 0x5b668583
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0xf3d87e12
jle 0x41d5d2
cmp eax, 0x3c2d1d01
jle 0x41d62f
cmp eax, 0x5b668582
jle 0x41d6d7
cmp eax, 0x73bde01a
jle 0x41d843
cmp eax, 0x79ae4a34
jg 0x41da86
cmp eax, 0x74fd6f1e
jg 0x41dea7
cmp eax, 0x73bde01b
je 0x41e483
cmp eax, 0x742e0221
jne 0x41d576
mov dword [ebp - 0x10], 0xb274466f
jmp 0x41d576
cmp eax, 0xb5c9ae71
jg 0x41d689
cmp eax, 0x9d673472
jg 0x41d732
cmp eax, 0x88d85f76
jle 0x41d896
cmp eax, 0x8ba168fc
jg 0x41dae8
cmp eax, 0x8a146f17
jg 0x41dec9
cmp eax, 0x88d85f77
je 0x41e498
cmp eax, 0x89c20c5a
jne 0x41d576
add dword [ebp - 0x18], 0xffffff98
mov dword [ebp - 0x10], 0x5ead8a11
jmp 0x41d576
cmp eax, 0xdd1c1f6
jg 0x41d7a2
cmp eax, 0x2231c24
jle 0x41d8eb
cmp eax, 0x8bc94a4
jg 0x41db3b
cmp eax, 0x446e548
jg 0x41defa
cmp eax, 0x2231c25
je 0x41e4ee
cmp eax, 0x231b4d6
jne 0x41d576
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x48f18c92
jmp 0x41d576
cmp eax, 0xcb2d4c24
jg 0x41d7f2
cmp eax, 0xc4aa367b
jle 0x41d923
cmp eax, 0xc5fa051c
jg 0x41db6b
cmp eax, 0xc5e72541
jg 0x41df25
cmp eax, 0xc4aa367c
je 0x41e50d
cmp eax, 0xc5870a4e
jne 0x41d576
mov dword [ebp - 0x10], 0x37b3dab2
jmp 0x41d576
cmp eax, 0x4fa8551c
jle 0x41d963
cmp eax, 0x577d64e3
jg 0x41db98
cmp eax, 0x52c0094e
jg 0x41df9f
cmp eax, 0x4fa8551d
je 0x41e519
cmp eax, 0x5101437e
jne 0x41d576
mov eax, dword [ebp - 0x14]
shr eax, 7
imul eax, eax, 0x1928
shr eax, 0xf
imul eax, eax, 0x8a
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x4fa8551d
jmp 0x41d576
cmp eax, 0xa3760a81
jle 0x41d9c2
cmp eax, 0xb1fcd5fd
jg 0x41dbd7
cmp eax, 0xac54653b
jg 0x41dfd9
cmp eax, 0xa3760a82
je 0x41e536
cmp eax, 0xa7055612
jne 0x41d576
mov ecx, dword [ebp - 0x14]
lea eax, [ecx - 0x74]
imul eax, eax
imul edx, eax, 0x9d5
dec edx
shl ecx, 0xc
add ecx, 0xfd000
and ecx, 0xffffc000
mov dword [ebp - 0x14], ecx
mov ecx, 0x15d9955a
cmp edx, eax
je 0x41ea3d
mov ecx, 0x6bbfb69a
jmp 0x41ea3d
cmp eax, 0x2d53bf5f
jle 0x41da06
cmp eax, 0x367e9264
jg 0x41dc0d
cmp eax, 0x34436422
jg 0x41e01e
cmp eax, 0x2d53bf60
je 0x41e57b
cmp eax, 0x2fc64b54
jne 0x41d576
cmp dword [ebp - 0x44], 0
mov eax, 0x469974e6
je 0x41ed4f
mov eax, 0xa0be244
jmp 0x41ed4f
cmp eax, 0xd90fc939
jle 0x41da3e
cmp eax, 0xe9975443
jg 0x41dc43
cmp eax, 0xe2605301
jg 0x41e05a
cmp eax, 0xd90fc93a
je 0x41e587
cmp eax, 0xdc89495d
jne 0x41d576
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x10], 0xb296c61
jmp 0x41d576
cmp eax, 0x6bbfb699
jle 0x41dc73
cmp eax, 0x730eba7e
jg 0x41e088
cmp eax, 0x6bbfb69a
je 0x41e59d
cmp eax, 0x6c07dc46
jne 0x41d576
mov eax, dword [ebp - 0x98]
movzx eax, word [eax]
push 0
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x54]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0x8fe8d881
jmp 0x41d576
cmp eax, 0x840a5578
jle 0x41dca9
cmp eax, 0x876f42a2
jg 0x41e0ba
cmp eax, 0x840a5579
je 0x41e5b1
cmp eax, 0x862db538
jne 0x41d576
mov eax, dword [ebp - 0x18]
shr eax, 7
and eax, 0xffff80
or eax, 0x6d
mov dword [ebp - 0x18], eax
push 0x2dce
push 0x1250
push eax
call fcn.00416d8b
add esp, 0xc
jmp 0x41e446
cmp eax, 0xf8e559fd
jle 0x41dce3
cmp eax, 0xff67e51c
jg 0x41e107
cmp eax, 0xf8e559fe
je 0x41e5dc
cmp eax, 0xf95480d7
jne 0x41d576
mov dword [ebp - 0x10], 0xc5e72542
jmp 0x41d576
cmp eax, 0xbdd9fdeb
jle 0x41dd19
cmp eax, 0xc2fe1157
jg 0x41e14c
cmp eax, 0xbdd9fdec
je 0x41e621
cmp eax, 0xbddb934c
jne 0x41d576
imul eax, dword [ebp - 0x18], 0x78000
add eax, 0x368000
mov dword [ebp - 0x18], eax
jmp 0x41e43a
cmp eax, 0x469974e5
jle 0x41dd66
cmp eax, 0x4b79651b
jg 0x41e17b
cmp eax, 0x469974e6
je 0x41e636
cmp eax, 0x48f18c92
jne 0x41d576
mov eax, dword [ebp - 0x14]
shr eax, 2
imul ecx, eax, 0xd0
imul eax, eax
imul edx, eax, 0x7287
dec edx
add ecx, 0xffffffe5
mov dword [ebp - 0x14], ecx
mov ecx, 0xc5f299bf
cmp eax, edx
je 0x41ea3d
mov ecx, 0x4dece08a
jmp 0x41ea3d
cmp eax, 0x9ef395ac
jle 0x41ddc7
cmp eax, 0xa140a1aa
jg 0x41e1a0
cmp eax, 0x9ef395ad
je 0x41e652
cmp eax, 0xa10ace44
jne 0x41d576
mov eax, dword [ebp - 0x1c]
add eax, 0xc
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x10], 0xb5c9ae72
jmp 0x41d576
cmp eax, 0x181b1a3a
jle 0x41de2a
cmp eax, 0x25ed8bdc
jg 0x41e1d7
cmp eax, 0x181b1a3b
je 0x41e68e
cmp eax, 0x1fa40e09
jne 0x41d576
mov dword [ebp - 0x10], 0xb9650f70
jmp 0x41d576
cmp eax, 0xd339d5fd
jle 0x41de6f
cmp eax, 0xd4b78af0
jg 0x41e235
cmp eax, 0xd339d5fe
je 0x41e6be
cmp eax, 0xd39e5d44
jne 0x41d576
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
setne byte [ebp - 0x2b]
mov dword [ebp - 0x10], 0xb5a096ce
jmp 0x41d576
cmp eax, 0x79dcd6a0
jg 0x41e268
cmp eax, 0x79ae4a35
je 0x41e6f1
cmp eax, 0x79c5bcd5
jne 0x41d576
mov eax, 3
push eax
push 0x46e9e4
push eax
push dword [ebp - 0x40]
call fcn.00425640
add esp, 0x10
push dword [ebp - 0xa0]
push esi
push esi
push esi
push dword [ebp - 0xa8]
push dword [ebp - 0x40]
push dword [ebp - 0x58]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xc4aa367c
jmp 0x41d576
cmp eax, 0x909d14cc
jg 0x41e297
cmp eax, 0x8ba168fd
je 0x41e723
cmp eax, 0x8fe8d881
jne 0x41d576
mov eax, dword [ebp - 0x14]
lea ecx, [eax - 0x90]
imul ecx, ecx
imul edx, ecx, 0x8707
add eax, 0xfffffe89
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xd0460e08
cmp edx, ecx
je 0x41ec60
mov eax, 0x367e9265
jmp 0x41ec60
cmp eax, 0xb296c60
jg 0x41e2b9
cmp eax, 0x8bc94a5
je 0x41e73f
cmp eax, 0xa0be244
jne 0x41d576
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x5ca5926
jmp 0x41d576
cmp eax, 0xc8d4dac2
jg 0x41e2f9
cmp eax, 0xc5fa051d
je 0x41e76a
cmp eax, 0xc74ee642
jne 0x41d576
mov dword [ebp - 0x10], 0x74fd6f1f
jmp 0x41d576
cmp eax, 0x5a2b3fc8
jg 0x41e351
cmp eax, 0x577d64e4
je 0x41e7ad
cmp eax, 0x578adb76
jne 0x41d576
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xb6e7b0da
jmp 0x41d576
cmp eax, 0xb5738bbe
jg 0x41e38f
cmp eax, 0xb1fcd5fe
je 0x41e7c2
cmp eax, 0xb274466f
jne 0x41d576
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov dword [ebp - 0x10], 0xac54653c
jmp 0x41d576
cmp eax, 0x37b3dab1
jg 0x41e3db
cmp eax, 0x367e9265
je 0x41e7d8
cmp eax, 0x37538745
jne 0x41d576
push dword [ebp - 0x54]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x5fa840b6
jmp 0x41d576
cmp eax, 0xed0da875
jg 0x41e40c
cmp eax, 0xe9975444
je 0x41e7e7
cmp eax, 0xe9f6d0e6
jne 0x41d576
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x446e549
jmp 0x41d576
cmp eax, 0x5fa840b5
jg 0x41e452
cmp eax, 0x5b668583
je 0x41e819
cmp eax, 0x5ead8a11
jne 0x41d576
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0x9ef395ad
jmp 0x41d576
cmp eax, 0x82d3071f
je 0x41e845
cmp eax, 0x82edeb32
je 0x41e891
cmp eax, 0x82f9eba8
jne 0x41d576
cmp byte [ebp - 0x1d], 0
mov eax, 0x5fa840b6
jne 0x41ed4f
mov eax, 0x37538745
jmp 0x41ed4f
cmp eax, 0xf3d87e13
je 0x41e8b7
cmp eax, 0xf4593bdd
je 0x41e904
cmp eax, 0xf490fa59
jne 0x41d576
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x3c
mov dword [ebp - 0x10], 0xd339d5fe
jmp 0x41d576
cmp eax, 0xb5c9ae72
je 0x41e91d
cmp eax, 0xb6e7b0da
je 0x41e958
cmp eax, 0xb9650f70
jne 0x41d576
push dword [ebp - 0x38]
push dword [ebp - 0x7c]
push dword [ebp - 0xb0]
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x10], 0xc5fa051d
jmp 0x41d576
cmp eax, 0x3c2d1d02
je 0x41e96e
cmp eax, 0x4147df62
je 0x41e987
cmp eax, 0x463a114b
jne 0x41d576
imul eax, dword [ebp - 0x18], 0x1d53800
mov edi, 0xdc89495d
add eax, 0xfac1f800
mov dword [ebp - 0x18], eax
je 0x41dda2
mov edi, 0xf3d87e13
push 0x3dc7
push 0x2010
push 0x360c
push eax
push 0x61e9
call fcn.0041d226
add esp, 0x14
mov dword [ebp - 0x10], edi
jmp 0x41d576
cmp eax, 0x9d673473
je 0x41e993
cmp eax, 0x9e2fa6d3
je 0x41e9a8
cmp eax, 0x9e9f1ead
jne 0x41d576
mov cl, byte [ebp - 0x2c]
cmp byte [ebp - 0x2d], 0
mov eax, 0x578adb76
jne 0x41ddfb
mov eax, 0xa2a4580b
test cl, cl
jne 0x41de04
mov eax, 0xa2a4580b
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x70]
mov edi, dword [ebp - 0x70]
mov ebx, dword [ebp - 0x74]
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], eax
jmp 0x41d576
cmp eax, 0xdd1c1f7
je 0x41e9db
cmp eax, 0x1347eb9c
je 0x41ea05
cmp eax, 0x15d9955a
jne 0x41d576
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x7c]
push eax
push dword [ebp - 0x78]
call fcn.00459e01
add esp, 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0xcb2d4c25
jmp 0x41d576
cmp eax, 0xcb2d4c25
je 0x41ea11
cmp eax, 0xce740087
je 0x41ea45
cmp eax, 0xd0460e08
jne 0x41d576
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 0x2231c25
jmp 0x41d576
cmp eax, 0x74fd6f1f
je 0x41ea92
cmp eax, 0x77dd275b
jne 0x41d576
mov dword [ebp - 0x10], 0xd90fc93a
jmp 0x41d576
cmp eax, 0x8a146f18
je 0x41eab0
cmp eax, 0x8a159cd1
jne 0x41d576
imul eax, dword [ebp - 0x18], 0x22c00
add eax, 0xfffffe35
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xff67e51d
jmp 0x41d576
cmp eax, 0x446e549
je 0x41eadf
cmp eax, 0x5ca5926
jne 0x41d576
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x2d53bf60
jmp 0x41d576
cmp eax, 0xc5e72542
je 0x41eafd
cmp eax, 0xc5f299bf
jne 0x41d576
mov eax, dword [ebp - 0x3c]
mov word [eax + 0xde], 0
mov eax, 0xde
push eax
push 0x46e8f0
push dword [ebp - 0x3c]
call fcn.00448eb0
add esp, 0xc
push 8
push 0x46e9ce
push 0x6f
push dword [ebp - 0x3c]
call fcn.00425640
add esp, 0x10
push esi
push esi
push esi
push esi
push dword [ebp - 0x3c]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x1c]
add edi, 4
xor eax, eax
mov ecx, 0xe
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0xf490fa59
jmp 0x41d576
cmp eax, 0x52c0094f
je 0x41eb09
cmp eax, 0x547269cd
jne 0x41d576
mov ecx, dword [ebp - 0x18]
shl ecx, 8
mov eax, 0xe544d742
add ecx, 0x700
mov dword [ebp - 0x18], ecx
je 0x41ed4f
mov eax, 0x4a3c51f5
jmp 0x41ed4f
cmp eax, 0xac54653c
je 0x41eb2a
cmp eax, 0xb10facfd
jne 0x41d576
mov eax, dword [ebp - 0x14]
add eax, 0x30
mov ecx, eax
imul ecx, eax
shr eax, 4
imul edx, ecx, 0x43fd
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x463a114b
cmp edx, ecx
je 0x41ec60
mov eax, 0x5a2b3fc9
jmp 0x41ec60
cmp eax, 0x34436423
je 0x41eb44
cmp eax, 0x34a85f49
jne 0x41d576
push esi
push esi
push esi
push esi
push esi
push esi
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov ecx, 0xf95480d7
test eax, eax
je 0x41e950
mov ecx, 0x5101437e
jmp 0x41e950
cmp eax, 0xe2605302
je 0x41eb78
cmp eax, 0xe544d742
jne 0x41d576
push eax
sub esp, 0xdc
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x1347eb9c
jmp 0x41d576
cmp eax, 0x730eba7f
je 0x41eba2
cmp eax, 0x7399185f
jne 0x41d576
mov eax, dword [ebp - 0x14]
lea eax, [eax*8 - 0xa08]
shr eax, 0xd
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x79dcd6a1
jmp 0x41d576
cmp eax, 0x876f42a3
je 0x41ebe2
cmp eax, 0x87946877
jne 0x41d576
mov eax, dword [ebp - 0x84]
mov dword [eax], 0xffffffff
mov edi, dword [ebp + 8]
push edi
call fcn.0045a2ea
add esp, 4
push dword [ebp - 0x1c]
push 0
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0x8ba168fd
jmp 0x41d576
cmp eax, 0xff67e51d
je 0x41ec11
cmp eax, 0x1557802
jne 0x41d576
mov ecx, dword [ebp - 0x18]
shr ecx, 6
add ecx, 0xffffffa4
mov eax, ecx
shr eax, 5
add eax, 8
mov dword [ebp - 0x18], eax
mov eax, 0x5ead8a11
cmp ecx, 0xe60
jae 0x41ed4f
mov eax, 0x485de71b
jmp 0x41ed4f
cmp eax, 0xc2fe1158
je 0x41ec3b
cmp eax, 0xc443767f
jne 0x41d576
mov eax, dword [ebp - 0x14]
shr eax, 1
and eax, 0x1ffff
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa140a1ab
jmp 0x41d576
cmp eax, 0x4b79651c
je 0x41ec50
cmp eax, 0x4dece08a
jne 0x41d576
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x82edeb32
jmp 0x41d576
cmp eax, 0xa140a1ab
je 0x41e43a
cmp eax, 0xa2a4580b
jne 0x41d576
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x95d3505f
jmp 0x41d576
cmp eax, 0x25ed8bdd
je 0x41ec68
cmp eax, 0x2840e0fc
jne 0x41d576
mov eax, dword [ebp - 0x18]
shl eax, 2
and eax, 0xfffff800
imul eax, eax, 0x64
shr eax, 0xc
imul edi, eax, 0x3b
lea eax, [edi + 0x36]
mov dword [ebp - 0x18], eax
push eax
push 0x292c
push 0x38b
call fcn.004133cb
add esp, 0xc
mov eax, 0xb8442e44
cmp edi, 0xa1
jb 0x41ed4f
mov eax, 0xf490fa59
jmp 0x41ed4f
cmp eax, 0xd4b78af1
je 0x41e446
cmp eax, 0xd62d79db
jne 0x41d576
mov eax, dword [ebp - 0x14]
shl eax, 0xd
add eax, 0xffffff2f
shr eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xdc89495d
jmp 0x41d576
cmp eax, 0x79dcd6a1
je 0x41ec77
cmp eax, 0x7b77bc8f
jne 0x41d576
cmp byte [ebp - 0x29], 0
mov eax, 0xf95480d7
jne 0x41ed4f
mov eax, 0x25ed8bdd
jmp 0x41ed4f
cmp eax, 0x909d14cd
je 0x41ec8f
cmp eax, 0x95d3505f
jne 0x41d576
mov dword [ebp - 0x10], 0x8bc94a5
jmp 0x41d576
cmp eax, 0xb296c61
je 0x41ecbb
cmp eax, 0xca312a6
jne 0x41d576
mov eax, dword [ebp - 0x18]
add eax, eax
mov edi, 0x5a2b3fc9
and eax, 0xfffff000
mov dword [ebp - 0x18], eax
je 0x41e2e8
mov edi, 0x87946877
push eax
call fcn.004133c6
add esp, 4
mov dword [ebp - 0x10], edi
jmp 0x41d576
cmp eax, 0xc8d4dac3
je 0x41ecda
cmp eax, 0xc99362eb
jne 0x41d576
mov eax, dword [ebp - 0x18]
and eax, 0xffffff80
imul edi, eax, 0x4c
add edi, 0xfffff08a
mov dword [ebp - 0x18], edi
push 0x5f90
push 0x25d4
push edi
push 0x1060
call fcn.00417415
add esp, 0x10
mov eax, 0x89c20c5a
cmp edi, 0x34
jl 0x41ed4f
mov eax, 0x88d85f77
jmp 0x41ed4f
cmp eax, 0x5a2b3fc9
je 0x41ecef
cmp eax, 0x5a9da1ac
jne 0x41d576
imul ecx, dword [ebp - 0x18], 0x93
add ecx, 0xffffcf6f
mov dword [ebp - 0x18], ecx
mov eax, 0x1347eb9c
cmp ecx, 0x4b
jae 0x41ed4f
mov eax, 0x547269cd
jmp 0x41ed4f
cmp eax, 0xb5738bbf
je 0x41ed10
cmp eax, 0xb5a096ce
jne 0x41d576
mov cl, byte [ebp - 0x2a]
cmp byte [ebp - 0x2b], 0
mov eax, 0x578adb76
jne 0x41e3b8
mov eax, 0xa2a4580b
test cl, cl
jne 0x41e3c1
mov eax, 0xa2a4580b
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], esi
jmp 0x41d576
cmp eax, 0x37b3dab2
je 0x41ed1c
cmp eax, 0x3c1ff867
jne 0x41d576
imul eax, dword [ebp - 0x14], 0x1ac
add eax, 0x6db2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xc2fe1158
jmp 0x41d576
cmp eax, 0xed0da876
je 0x41ed28
cmp eax, 0xf2c135a5
jne 0x41d576
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x10], 0x1fa40e09
jmp 0x41d576
mov dword [ebp - 0x10], 0xa10ace44
jmp 0x41d576
mov dword [ebp - 0x10], 0xe544d742
jmp 0x41d576
cmp eax, 0x6023b85b
jne 0x41ed57
mov eax, dword [ebp - 0x18]
shl eax, 5
add eax, 0x126
shr eax, 0xf
mov dword [ebp - 0x18], eax
push eax
call fcn.00416c8c
add esp, 4
mov dword [ebp - 0x10], 0xf490fa59
jmp 0x41d576
mov eax, dword [ebp - 0x14]
shl eax, 0x13
add eax, 0x1b00000
and eax, 0xf8000000
jmp 0x41e978
imul edi, dword [ebp - 0x18], 0xcc3
add edi, 0xb49
mov ebx, edi
shr ebx, 0xd
mov dword [ebp - 0x18], ebx
push 0x41f8
push 0x2ea0
push ebx
call fcn.0041ce24
add esp, 0xc
push ebx
push 0x3735
push 0x2b34
push 0x544c
call fcn.00422dde
add esp, 0x10
mov eax, 0x1347eb9c
cmp edi, 0x14e000
jae 0x41e6b4
jmp 0x41ed4f
mov eax, dword [ebp - 0x14]
shl eax, 0xd
and eax, 0x7fffe000
or eax, 0xc2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xe9975444
jmp 0x41d576
mov dword [ebp - 0x10], 0x4b79651c
jmp 0x41d576
push 0
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
sete byte [ebp - 0x29]
mov dword [ebp - 0x10], 0x7b77bc8f
jmp 0x41d576
imul edi, dword [ebp - 0x18], 0x354f8
mov ebx, 0xce740087
add edi, 0xfffffdf8
mov dword [ebp - 0x18], edi
je 0x41e552
mov ebx, 0x1557802
push 0x2625
push edi
push 0x59c8
call fcn.00419ddd
add esp, 0xc
push 0x301f
push edi
call fcn.0041c4a2
add esp, 8
mov dword [ebp - 0x10], ebx
jmp 0x41d576
mov dword [ebp - 0x10], 0xf2c135a5
jmp 0x41d576
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
mov dword [ebp - 0x10], 0x82f9eba8
jmp 0x41d576
cmp dword [ebp - 0x74], 0
setne byte [ebp - 0x2d]
mov dword [ebp - 0x10], 0x9e9f1ead
jmp 0x41d576
mov eax, dword [ebp - 0x40]
mov word [eax + 6], 0
mov eax, dword [ebp - 0x40]
movzx ecx, word [0x46e9e2]
mov word [eax + 4], cx
mov ecx, dword [0x46e9de]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x79c5bcd5
jmp 0x41d576
mov ecx, dword [ebp - 0x14]
mov edx, ecx
shl edx, 6
lea eax, [ecx + edx]
add eax, 0xfffffa29
add ecx, edx
add ecx, 0xfffff948
imul eax, eax
imul edx, eax, 0x3865
dec edx
shr ecx, 5
add ecx, 0xffffff1e
mov dword [ebp - 0x14], ecx
mov ecx, 0x5a9da1ac
cmp edx, eax
je 0x41e950
mov ecx, 0xe2605302
jmp 0x41e950
mov eax, dword [ebp - 0x80]
mov dword [eax], 0xffffffff
mov dword [ebp - 0x10], 0xf8e559fe
jmp 0x41d576
shl dword [ebp - 0x14], 0x1c
mov dword [ebp - 0x10], 0xa2a4580b
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x4c], eax
jmp 0x41d576
mov eax, dword [ebp - 0x14]
shr eax, 0xf
imul ecx, eax, 0x89
add ecx, 0x4fbd
imul eax, ecx, 0xbe
imul ecx, ecx
imul edx, ecx, 0x5b1b
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xc5f299bf
cmp edx, ecx
je 0x41ec60
mov eax, 0xbdd9fdec
jmp 0x41ec60
imul edi, dword [ebp - 0x18], 0x1aa000
add edi, 0xffff6e71
mov dword [ebp - 0x18], edi
call fcn.004212f1
mov eax, 0xc99362eb
cmp edi, 0xfc
jl 0x41ed4f
mov eax, 0xc5f299bf
jmp 0x41ed4f
mov eax, dword [ebp - 0x14]
add eax, 0x6f
shr eax, 0xa
imul ecx, eax, 0x6676
imul eax, eax
imul edx, eax, 0x775d
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xd2959f27
cmp edx, eax
je 0x41e950
mov ecx, 0x5ead8a11
jmp 0x41e950
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x195]
imul ecx, ecx
imul edx, ecx, 0x73b
dec edx
add eax, 0x1ff
mov dword [ebp - 0x14], eax
mov eax, 0x5ead8a11
cmp edx, ecx
je 0x41ec60
mov eax, 0x87946877
jmp 0x41ec60
cmp dword [ebp - 0x88], 0
mov eax, 0x5fa840b6
je 0x41ec60
mov eax, 0x52c0094f
jmp 0x41ec60
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x73bde01b
jmp 0x41d576
mov ecx, dword [ebp - 0x14]
lea eax, [ecx - 0x5e]
imul eax, eax
imul edx, eax, 0x13cd
lea ecx, [ecx*8 - 0x3a0]
and ecx, 0xffff8000
dec edx
imul ecx, ecx, 0x8f
add ecx, 0xffffff36
mov dword [ebp - 0x14], ecx
mov ecx, 0xa3760a82
cmp edx, eax
je 0x41ea3d
mov ecx, 0x231b4d6
jmp 0x41ea3d
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x3c2d1d02
jmp 0x41d576
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
mov dword [ebp - 0x10], 0x577d64e4
jmp 0x41d576
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xf4593bdd
jmp 0x41d576
mov eax, dword [ebp - 0x94]
add eax, eax
push eax
push dword [ebp - 0x90]
push dword [ebp - 0x34]
call fcn.00448eb0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x10], 0x34436423
jmp 0x41d576
push eax
sub esp, 0x38
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x400
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xd4b78af1
jmp 0x41d576
imul edi, dword [ebp - 0x18], 0x866dc000
mov dword [ebp - 0x18], edi
push 0x110d
push edi
push 0x346f
call fcn.0041cec2
add esp, 0xc
push edi
push 0x2db5
push 0x4169
push 0x2066
call fcn.00419c25
add esp, 0x10
mov eax, 0x5ca5926
test edi, edi
je 0x41ed4f
mov eax, 0x5ead8a11
jmp 0x41ed4f
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
setne byte [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0xa7055612
jmp 0x41d576
mov eax, dword [ebp - 0x18]
add eax, 0xffffffe7
shr eax, 4
imul edi, eax, 0xf5
add edi, 0xfffffecf
mov dword [ebp - 0x18], edi
push 0x4898
push 0x2ba2
push 0x43d4
push 0x4f3b
push edi
call fcn.00422b4e
add esp, 0x14
mov eax, 0xbddb934c
cmp edi, 0x44
je 0x41ed4f
mov eax, 0x876f42a3
jmp 0x41ed4f
cmp dword [ebp - 0x58], 0
mov eax, 0xb5738bbf
je 0x41ec60
mov eax, 0xc443767f
jmp 0x41ec60
mov eax, dword [ebp - 0x14]
add eax, 0x19
shr eax, 4
imul ecx, eax, 0x6a5
imul eax, eax
imul edx, eax, 0x3b49
add ecx, 0x41331
dec edx
shr ecx, 0xd
mov dword [ebp - 0x14], ecx
mov ecx, 0x8ba168fd
cmp edx, eax
je 0x41e950
mov ecx, 0x8a146f18
mov dword [ebp - 0x10], ecx
jmp 0x41d576
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x10], 0xed0da876
jmp 0x41d576
imul eax, dword [ebp - 0x14], 0x740
shr eax, 2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xc8d4dac3
jmp 0x41d576
mov dword [ebp - 0x10], 0x2fc64b54
jmp 0x41d576
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x3c1ff867
jmp 0x41d576
mov eax, dword [ebp - 0x14]
lea ecx, [eax - 0xd7]
imul ecx, ecx
imul edx, ecx, 0x2c0d
dec edx
imul eax, eax, 0xe4
mov dword [ebp - 0x14], eax
mov eax, 0x2840e0fc
cmp ecx, edx
je 0x41ed4f
mov eax, 0xc5870a4e
jmp 0x41ed4f
imul ecx, dword [ebp - 0x18], 0xc8
mov eax, ecx
shr eax, 0xf
mov dword [ebp - 0x18], eax
mov eax, 0xf490fa59
cmp ecx, 0x298000
jb 0x41ed4f
mov eax, 0xe2605302
jmp 0x41ed4f
mov dword [ebp - 0x10], 0xc5f299bf
jmp 0x41d576
mov eax, dword [ebp - 0x14]
add eax, 0xffffffd3
mov ecx, eax
shr ecx, 0x17
imul eax, eax
imul edx, eax, 0x2beb
dec edx
add ecx, 0xfffffef9
mov dword [ebp - 0x14], ecx
mov ecx, 0xe2605302
cmp eax, edx
je 0x41ea3d
mov ecx, 0x4147df62
mov dword [ebp - 0x10], ecx
jmp 0x41d576
imul edi, dword [ebp - 0x18], 0xa4
add edi, 0xffffcd64
mov eax, edi
shr eax, 7
mov dword [ebp - 0x18], eax
push 0x3ebf
push eax
push 0x3539
push 0x189c
call fcn.00418e12
add esp, 0x10
call fcn.00416c74
mov eax, 0x82d3071f
cmp edi, 0x6280
jb 0x41ed4f
mov eax, 0x730eba7f
jmp 0x41ed4f
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
setne byte [ebp - 0x2a]
mov dword [ebp - 0x10], 0xd39e5d44
jmp 0x41d576
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
cmp dword [eax], 2
sete cl
shl ecx, 0x17
mov dword [ebp - 0xa0], ecx
mov eax, dword [ebp - 0x1c]
add eax, 0x2c
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x10], 0xb10facfd
jmp 0x41d576
push 0x400
push 0
push dword [ebp - 0x34]
call fcn.004499b0
add esp, 0xc
mov dword [ebp - 0x10], 0x7399185f
jmp 0x41d576
mov dword [ebp - 0x10], 0xb1fcd5fe
jmp 0x41d576
cmp dword [ebp - 0x54], 0
sete byte [ebp - 0x1d]
cmp byte [ebp - 0x1d], 0
mov eax, 0xb5738bbf
jne 0x41ec60
mov eax, 0xe9f6d0e6
jmp 0x41ec60
mov eax, dword [ebp - 0x14]
shl eax, 4
add eax, 0xffffff47
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xc74ee642
jmp 0x41d576
mov eax, dword [ebp - 0x14]
shr eax, 7
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x1c25
shl eax, 0xb
dec edx
add eax, 0x2e71c
mov dword [ebp - 0x14], eax
mov eax, 0xdd1c1f7
cmp edx, ecx
je 0x41ec60
mov eax, 0x6c07dc46
jmp 0x41ec60
mov eax, dword [ebp - 0x1c]
add eax, 0x14
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x1c]
add eax, 0x30
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0x79ae4a35
jmp 0x41d576
mov eax, dword [ebp - 0x18]
and eax, 0xfffffff0
shl eax, 0x12
imul edi, eax, 0x26
or edi, 0x2c
mov dword [ebp - 0x18], edi
push edi
push 0x410f
push 0x1c45
call fcn.00419bf3
add esp, 0xc
mov eax, 0x1347eb9c
cmp edi, 0xba
jae 0x41ed4f
mov eax, 0x74fd6f1f
jmp 0x41ed4f
mov ecx, dword [ebp - 0x18]
add ecx, 0x31
mov eax, ecx
shr eax, 8
add eax, 0x71
shr eax, 0xb
mov dword [ebp - 0x18], eax
mov eax, 0xf490fa59
cmp ecx, 0x42f8f00
jae 0x41ed4f
mov eax, 0xf4593bdd
jmp 0x41ed4f
mov ecx, dword [ebp - 0x18]
add ecx, 0xffffffbb
shr ecx, 0xb
add ecx, 0xffffffcb
mov dword [ebp - 0x18], ecx
mov eax, 0x8ba168fd
cmp ecx, 0xbe
jae 0x41ed4f
mov eax, 0x87946877
jmp 0x41ed4f
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov dword [ebp - 0x10], 0xc8d4dac3
jmp 0x41d576
cmp dword [ebp - 0x24], 0
mov eax, 0x9e2fa6d3
je 0x41ec60
mov eax, 0x34a85f49
mov dword [ebp - 0x10], eax
jmp 0x41d576
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x742e0221
jmp 0x41d576
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0xd62d79db
jmp 0x41d576
mov eax, dword [ebp - 0x18]
shr eax, 1
and eax, 0x7fffe000
add eax, 0x18fa00
mov dword [ebp - 0x18], eax
push eax
push 0x30fe
call fcn.00413402
add esp, 8
mov dword [ebp - 0x10], 0x5ead8a11
jmp 0x41d576
imul eax, dword [ebp - 0x14], 0x15000
shr eax, 3
imul eax, eax, 0x5d57
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xd0460e08
jmp 0x41d576
push dword [ebp - 0x58]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x82f9eba8
jmp 0x41d576
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x840a5579
jmp 0x41d576
mov dword [ebp - 0x10], 0x77dd275b
jmp 0x41d576
mov dword [ebp - 0x10], 0x9d673473
jmp 0x41d576
imul eax, dword [ebp - 0x14], 0xa1
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6ab1
dec edx
shr eax, 9
mov dword [ebp - 0x14], eax
mov eax, 0xf490fa59
cmp ecx, edx
je 0x41ed4f
mov eax, 0x15d9955a
mov dword [ebp - 0x10], eax
jmp 0x41d576
cmp eax, 0x5fa840b6
jne 0x41d576
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret