Function at 0x42149d
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4e4
mov dword [ebp - 0x10], 0x5b668583
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0xf2c135a4
jle 0x42150e
cmp eax, 0x4147df61
jg 0x421570
cmp eax, 0xdd1c1f6
jle 0x421638
cmp eax, 0x34436422
jg 0x42179e
cmp eax, 0x25ed8bdc
jg 0x421a9f
cmp eax, 0x15d99559
jg 0x4221f1
cmp eax, 0xdd1c1f7
je 0x42291a
cmp eax, 0x1347eb9c
jne 0x4214b2
mov dword [ebp - 0x10], 0xc5f299bf
jmp 0x4214b2
cmp eax, 0xb8442e43
jg 0x4215c4
cmp eax, 0xa10ace43
jg 0x4216e8
cmp eax, 0x8ba168fc
jg 0x42183f
cmp eax, 0x862db537
jg 0x421c8b
cmp eax, 0x82f9eba7
jg 0x42242a
cmp eax, 0x82d3071f
je 0x422c05
cmp eax, 0x82edeb32
jne 0x4214b2
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x9d673473
jmp 0x4214b2
cmp eax, 0x5a9da1ab
jle 0x42167b
cmp eax, 0x73bde01a
jg 0x4217f8
cmp eax, 0x6bbfb699
jg 0x421b61
cmp eax, 0x5ead8a10
jg 0x422222
cmp eax, 0x5a9da1ac
je 0x422983
cmp eax, 0x5b668583
jne 0x4214b2
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xe544d742
jmp 0x4214b2
cmp eax, 0xd0460e07
jg 0x42172b
cmp eax, 0xc5e72541
jg 0x421884
cmp eax, 0xc2fe1157
jg 0x421d4a
cmp eax, 0xbdd9fdeb
jg 0x422560
cmp eax, 0xb8442e44
je 0x422e34
cmp eax, 0xb9650f70
jne 0x4214b2
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x3b]
imul ecx, ecx
imul edx, ecx, 0x7407
dec edx
shl eax, 0xb
add eax, 0x2000
mov dword [ebp - 0x18], eax
mov eax, 0x9ef395ad
cmp edx, ecx
je 0x422fb4
mov eax, 0xf2c135a5
jmp 0x422fb4
cmp eax, 0x2231c24
jle 0x4218f1
cmp eax, 0x8bc94a4
jg 0x4219e7
cmp eax, 0x446e548
jg 0x422024
cmp eax, 0x2231c25
je 0x4227a4
cmp eax, 0x231b4d6
jne 0x4214b2
mov dword [ebp - 0x10], 0xc5fa051d
jmp 0x4214b2
cmp eax, 0x4dece089
jle 0x421936
cmp eax, 0x547269cc
jg 0x421a17
cmp eax, 0x5101437d
jg 0x422059
cmp eax, 0x4dece08a
je 0x4227c0
cmp eax, 0x4fa8551d
jne 0x4214b2
mov eax, dword [ebp - 0x18]
shr eax, 2
imul ecx, eax, 0x2206
imul eax, eax
imul edx, eax, 0x4279
dec edx
add ecx, 0xc55e6
mov dword [ebp - 0x18], ecx
mov ecx, 0x4a3c51f5
cmp eax, edx
je 0x422b18
mov ecx, 0x34a85f49
jmp 0x422b18
cmp eax, 0xac54653b
jle 0x421977
cmp eax, 0xb5738bbe
jg 0x421a69
cmp eax, 0xb1fcd5fd
jg 0x42216b
cmp eax, 0xac54653c
je 0x422886
cmp eax, 0xb10facfd
jne 0x4214b2
mov dword [ebp - 0x10], 0x840a5579
jmp 0x4214b2
cmp eax, 0xdc89495c
jle 0x4219af
cmp eax, 0xe9975443
jg 0x421d08
cmp eax, 0xe2605301
jg 0x4224fa
cmp eax, 0xdc89495d
je 0x422d5e
cmp eax, 0xe1c66a6c
jne 0x4214b2
mov edi, dword [ebp - 0x14]
shl edi, 0xa
and edi, 0x1ffffc00
lea eax, [edi - 0x39]
mov dword [ebp - 0x14], eax
push 0x2a08
push eax
push 0x4b8c
call fcn.0041cdc1
add esp, 0xc
mov eax, 0xff67e51d
test edi, edi
je 0x422fb4
mov eax, 0x8a159cd1
jmp 0x422fb4
cmp eax, 0x37b3dab1
jg 0x421be2
cmp eax, 0x367e9264
jg 0x422258
cmp eax, 0x34436423
je 0x4229ae
cmp eax, 0x34a85f49
jne 0x4214b2
mov eax, 0x5101437e
cmp dword [ebp - 0x64], esi
jne 0x4217d9
mov eax, 0xc5870a4e
cmp byte [ebp - 0x22], 0
jne 0x4217e4
mov eax, 0xc5870a4e
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
jmp 0x4214b2
cmp eax, 0x79ae4a34
jg 0x421c5e
cmp eax, 0x74fd6f1e
jg 0x4222f9
cmp eax, 0x73bde01b
je 0x4229ba
cmp eax, 0x742e0221
jne 0x4214b2
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x70]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x10], 0xc74ee642
jmp 0x4214b2
cmp eax, 0x9d673472
jg 0x421ccc
cmp eax, 0x909d14cc
jg 0x422453
cmp eax, 0x8ba168fd
je 0x422c30
cmp eax, 0x8fe8d881
jne 0x4214b2
cmp dword [ebp - 0x20], 0
mov eax, 0x4dece08a
je 0x422fcc
mov eax, 0xf4593bdd
jmp 0x422fcc
cmp eax, 0xc8d4dac2
jle 0x421d84
cmp eax, 0xcb2d4c24
jg 0x421f8f
cmp eax, 0xc8d4dac3
je 0x4226c0
cmp eax, 0xc99362eb
jne 0x4214b2
mov edi, dword [ebp - 0x14]
shl edi, 6
add edi, 0x73
mov dword [ebp - 0x14], edi
push 0xafe
push 0x3f34
push 0x2545
push edi
push 0x5be7
call fcn.0041ccd9
add esp, 0x14
mov eax, 0x89c20c5a
cmp edi, 0x5c
jge 0x422fb4
mov eax, 0x88d85f77
jmp 0x422fb4
cmp eax, 0xf490fa58
jle 0x421dda
cmp eax, 0xf95480d6
jg 0x421eff
cmp eax, 0xf490fa59
je 0x422605
cmp eax, 0xf8e559fe
jne 0x4214b2
cmp dword [ebp - 0x78], 0
mov eax, 0xc5e72542
je 0x422fcc
mov eax, 0x79ae4a35
jmp 0x422fcc
cmp eax, 0x485de71a
jle 0x421e1c
cmp eax, 0x4a3c51f4
jg 0x421f5c
cmp eax, 0x485de71b
je 0x42261d
cmp eax, 0x48f18c92
jne 0x4214b2
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x6bbfb69a
jmp 0x4214b2
cmp eax, 0xa3760a81
jle 0x421e6d
cmp eax, 0xaa3433bf
jg 0x421fcf
cmp eax, 0xa3760a82
je 0x422710
cmp eax, 0xa7055612
jne 0x4214b2
mov dword [ebp - 0x10], 0x9e9f1ead
jmp 0x4214b2
cmp eax, 0xd39e5d43
jle 0x421ec4
cmp eax, 0xd62d79da
jg 0x422137
cmp eax, 0xd39e5d44
je 0x42286e
cmp eax, 0xd4b78af1
jne 0x4214b2
mov dword [ebp - 0x10], 0x1347eb9c
jmp 0x4214b2
cmp eax, 0xb296c60
jg 0x42209a
cmp eax, 0x8bc94a5
je 0x4227cc
cmp eax, 0xa0be244
jne 0x4214b2
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x5ca5926
jmp 0x4214b2
cmp eax, 0x578adb75
jg 0x422109
cmp eax, 0x547269cd
je 0x4227f5
cmp eax, 0x577d64e4
jne 0x4214b2
imul eax, dword [ebp - 0x14], 0x5200
add eax, 0x415850
shr eax, 7
mov ecx, eax
shl ecx, 7
sub ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0xa2a4580b
cmp ecx, 0x3a
jae 0x422fb4
mov eax, 0x469974e6
jmp 0x422fb4
cmp eax, 0xb5c9ae71
jg 0x4221b9
cmp eax, 0xb5738bbf
je 0x422895
cmp eax, 0xb5a096ce
jne 0x4214b2
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x578adb76
jmp 0x4214b2
cmp eax, 0x2d53bf5f
jg 0x42234d
cmp eax, 0x25ed8bdd
je 0x422a07
cmp eax, 0x2840e0fc
jne 0x4214b2
mov ebx, dword [ebp - 0x14]
mov eax, 0xffffff74
add ebx, eax
mov edi, ebx
shr edi, 0xf
add edi, 0xffffffb9
mov dword [ebp - 0x14], edi
push 0x1540
push 0x1043
push 0x1970
push 0x977
push 0x58a3
push 0x5310
push edi
call fcn.0041b269
add esp, 0x1c
push 0x50b6
push 0x5da9
push 0x5600
push 0x1567
push 0x503f
push 0x5086
push 0x5235
push edi
push 0x1eab
push 0x1028
push 0x1a1f
push 0x56d8
push 0x26f4
push 0x1c0
call fcn.0041f420
add esp, 0x38
mov eax, 0x8fe8d881
cmp ebx, 0x738000
jb 0x422fb4
mov eax, 0xa140a1ab
jmp 0x422fb4
cmp eax, 0x730eba7e
jg 0x42237b
cmp eax, 0x6bbfb69a
je 0x422a1d
cmp eax, 0x6c07dc46
jne 0x4214b2
mov eax, dword [ebp - 0x34]
mov word [eax + 6], 0
mov eax, dword [ebp - 0x34]
movzx ecx, word [0x473a2c]
mov word [eax + 4], cx
mov ecx, dword [str.iAw.]
mov dword [eax], ecx
mov eax, 3
push eax
push 0x473a2e
push eax
push dword [ebp - 0x34]
call fcn.004296a0
add esp, 0x10
push dword [ebp - 0x8c]
push esi
push esi
push esi
push dword [ebp - 0x90]
push dword [ebp - 0x34]
push dword [ebp - 0x4c]
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x367e9265
jmp 0x4214b2
cmp eax, 0x3c1ff866
jg 0x4223ac
cmp eax, 0x37b3dab2
je 0x422a55
cmp eax, 0x39fbe18f
jne 0x4214b2
imul edi, dword [ebp - 0x14], 0xb9
add edi, 0xb27f
mov ebx, edi
shr ebx, 0xa
mov dword [ebp - 0x14], ebx
push 0x585a
push 0x5fd6
push 0x4961
push ebx
call fcn.00426f26
add esp, 0x10
push ebx
push 0x320e
push 0x15a5
call fcn.004166d4
add esp, 0xc
mov eax, 0xf490fa59
cmp edi, 0x10c00
jb 0x422fb4
mov eax, 0x52c0094f
jmp 0x422fb4
cmp eax, 0x79dcd6a0
jg 0x422408
cmp eax, 0x79ae4a35
je 0x422a6a
cmp eax, 0x79c5bcd5
jne 0x4214b2
mov dword [ebp - 0x10], 0xc4aa367c
jmp 0x4214b2
cmp eax, 0x89c20c59
jg 0x42248d
cmp eax, 0x862db538
je 0x422c3c
cmp eax, 0x87946877
jne 0x422fe1
imul eax, dword [ebp - 0x18], 0x6aa4
mov ecx, 0x6aa4
add eax, ecx
shr eax, 3
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf8e559fe
jmp 0x4214b2
cmp eax, 0x9e9f1eac
jg 0x4224c5
cmp eax, 0x9d673473
je 0x422c70
cmp eax, 0x9e2fa6d3
jne 0x4214b2
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
jmp 0x42289e
cmp eax, 0xea8c8820
jg 0x42252b
cmp eax, 0xe9975444
je 0x422d84
cmp eax, 0xe9f6d0e6
jne 0x4214b2
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
add eax, eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0x7399185f
jmp 0x4214b2
cmp eax, 0xc4aa367b
jg 0x42259d
cmp eax, 0xc2fe1158
je 0x422e55
cmp eax, 0xc443767f
jne 0x4214b2
imul eax, dword [ebp - 0x18], 0xa1a80000
shr eax, 0xe
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa140a1ab
jmp 0x4214b2
cmp eax, 0xc5fa051c
jle 0x4225d4
cmp eax, 0xc5fa051d
je 0x4225ef
cmp eax, 0xc74ee642
jne 0x422fd4
mov eax, dword [ebp - 0x18]
imul ecx, eax, 0x61
imul ecx, ecx
imul eax, eax, 0x4ed
add eax, 0xfffffd83
imul edx, ecx, 0xdb5
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xdd1c1f7
cmp edx, ecx
je 0x422fcc
mov eax, 0xb274466f
jmp 0x422fcc
cmp eax, 0xf2c135a5
je 0x422f3e
cmp eax, 0xf3d87e13
je 0x422eb8
cmp eax, 0xf4593bdd
jne 0x4214b2
push esi
push esi
push esi
push esi
push esi
push esi
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 0xc443767f
jmp 0x4214b2
cmp eax, 0x4147df62
je 0x422f4a
cmp eax, 0x463a114b
je 0x422eef
cmp eax, 0x469974e6
jne 0x4214b2
mov eax, dword [ebp - 0x14]
shr eax, 8
add eax, 0xffffffd3
mov dword [ebp - 0x14], eax
push eax
push 0x42e0
push 0x4fe7
push 0x2099
call fcn.00426b63
add esp, 0x10
mov dword [ebp - 0x10], 0x5b668583
jmp 0x4214b2
cmp eax, 0xa10ace44
je 0x422f6d
cmp eax, 0xa140a1ab
je 0x422f56
cmp eax, 0xa2a4580b
jne 0x4214b2
mov edi, dword [ebp - 0x14]
add edi, 0xffffff9c
mov dword [ebp - 0x14], edi
push 0x1837
push 0xb75
push edi
call fcn.0041bef4
add esp, 0xc
push edi
push 0x2d2e
call fcn.0042110b
add esp, 8
mov dword [ebp - 0x10], 0x5b668583
jmp 0x4214b2
cmp eax, 0xd0460e08
je 0x422fbc
cmp eax, 0xd2959f27
je 0x422f7f
cmp eax, 0xd339d5fe
jne 0x4214b2
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*4]
add eax, eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x5ead8a11
jmp 0x4214b2
cmp eax, 0xf95480d7
je 0x42265b
cmp eax, 0x1557802
jne 0x4214b2
imul edi, dword [ebp - 0x14], 0x17d00
add edi, 0xffb478b1
mov dword [ebp - 0x14], edi
push edi
push 0x3824
push 0xc38
call fcn.0041bef4
add esp, 0xc
push edi
call fcn.0041e147
add esp, 4
mov eax, 0x8fe8d881
cmp edi, 0x83
jl 0x422fb4
mov eax, 0x34a85f49
jmp 0x422fb4
cmp eax, 0x4a3c51f5
je 0x422670
cmp eax, 0x4b79651c
jne 0x4214b2
cmp dword [ebp - 0x98], 0
setne byte [ebp - 0x22]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x4fa8551d
jmp 0x4214b2
cmp eax, 0xcb2d4c25
je 0x4226da
cmp eax, 0xce740087
jne 0x4214b2
mov ecx, dword [ebp - 0x14]
shl ecx, 0xf
add ecx, 0x4d8000
mov dword [ebp - 0x14], ecx
mov eax, 0x82d3071f
cmp ecx, 0xee
jge 0x422fb4
mov eax, 0x730eba7f
jmp 0x422fb4
cmp eax, 0xaa3433c0
je 0x422763
cmp eax, 0xab2fa7c8
jne 0x4214b2
mov eax, dword [ebp - 0x14]
and eax, 0xffffffe0
imul eax, eax, 0x7b
add eax, 0x4dd6
mov dword [ebp - 0x14], eax
push 0x2a3f
push 0x901
push 0x3507
push 0x183a
push eax
push 0x5542
call fcn.0042078e
add esp, 0x18
mov dword [ebp - 0x10], 0x5ead8a11
jmp 0x4214b2
cmp eax, 0x446e549
je 0x422808
cmp eax, 0x5ca5926
jne 0x4214b2
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
setne byte [ebp - 0x23]
mov dword [ebp - 0x10], 0x2d53bf60
jmp 0x4214b2
cmp eax, 0x5101437e
je 0x42282c
cmp eax, 0x52c0094f
jne 0x4214b2
push 0x400
push 0
lea eax, [ebp - 0x4f0]
push eax
call fcn.0044e5c0
add esp, 0xc
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0x446e549
jmp 0x4214b2
cmp eax, 0xb296c61
je 0x42284a
cmp eax, 0xca312a6
jne 0x4214b2
mov edi, dword [ebp - 0x14]
add edi, 0x60
mov ebx, edi
shr ebx, 5
mov dword [ebp - 0x14], ebx
push 0x53cc
push ebx
push 0x4bb1
call fcn.0041df84
add esp, 0xc
push 0x11f0
push 0x4697
push 0x5286
push 0x462f
push ebx
call fcn.0041ccd9
add esp, 0x14
mov eax, 0xe1c66a6c
cmp edi, 0x8c0
jb 0x422fb4
mov eax, 0xa3760a82
jmp 0x422fb4
cmp eax, 0x578adb76
je 0x422862
cmp eax, 0x5a2b3fc9
jne 0x4214b2
mov eax, dword [ebp - 0x18]
shl eax, 0xa
or eax, 0x32
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb5c9ae72
jmp 0x4214b2
cmp eax, 0xd62d79db
je 0x42287a
cmp eax, 0xd90fc93a
jne 0x4214b2
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x10], 0x9e2fa6d3
jmp 0x4214b2
cmp eax, 0xb1fcd5fe
je 0x4228b3
cmp eax, 0xb274466f
jne 0x4214b2
push dword [ebp - 0xa0]
push dword [ebp - 0x6c]
call fcn.0045e881
add esp, 8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
mov eax, 0xd90fc93a
je 0x4221a5
mov eax, 0x74fd6f1f
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x40], eax
jmp 0x4214b2
cmp eax, 0xb5c9ae72
je 0x42290e
cmp eax, 0xb6e7b0da
jne 0x4214b2
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x3c]
push dword [ebp - 0x28]
push dword [ebp - 0x70]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov dword [ebp - 0x10], 0xed0da876
jmp 0x4214b2
cmp eax, 0x15d9955a
je 0x422a8b
cmp eax, 0x1fa40e09
jne 0x4214b2
imul eax, dword [ebp - 0x18], 0xc5880
add eax, 0xffe9d400
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf2c135a5
jmp 0x4214b2
cmp eax, 0x5ead8a11
je 0x422aa2
cmp eax, 0x6023b85b
jne 0x4214b2
mov eax, dword [ebp - 0x14]
lea ecx, [eax*4 - 0x87]
mov dword [ebp - 0x14], ecx
mov eax, 0x862db538
cmp ecx, 0x6d
jl 0x422cb0
jmp 0x422fb4
cmp eax, 0x367e9265
je 0x422ae4
cmp eax, 0x37538745
jne 0x4214b2
mov edi, dword [ebp - 0x14]
add edi, 0xffffff94
mov ebx, edi
shr ebx, 0xc
mov dword [ebp - 0x14], ebx
push 0x5871
push 0x329d
push ebx
push 0x54b1
push 0x3226
push 0x482b
push 0x3230
push 0x5af7
push 0x293e
push 0x184e
push 0x61ff
push 0x32f0
push 0x652
call fcn.0042005a
add esp, 0x34
push 0x1ee7
push 0x115c
push 0x4432
push ebx
push 0x4c19
call fcn.0041c359
add esp, 0x14
mov eax, 0x5fa840b6
cmp edi, 0xe6000
jb 0x422fb4
mov eax, 0xe9f6d0e6
jmp 0x422fb4
cmp eax, 0x74fd6f1f
je 0x422b20
cmp eax, 0x77dd275b
jne 0x4214b2
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff7a
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5de5
shl eax, 5
and eax, 0xffffe0
dec edx
imul eax, eax, 0xb3
mov dword [ebp - 0x18], eax
mov eax, 0x9ef395ad
cmp edx, ecx
je 0x422fb4
mov eax, 0xb5738bbf
jmp 0x422fb4
cmp eax, 0x2d53bf60
je 0x422b3d
cmp eax, 0x2fc64b54
jne 0x4214b2
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xa0be244
jmp 0x4214b2
cmp eax, 0x730eba7f
je 0x422b7c
cmp eax, 0x7399185f
jne 0x4214b2
imul eax, dword [ebp - 0x18], 0x4c84
add eax, 0xa02a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x79dcd6a1
jmp 0x4214b2
cmp eax, 0x3c1ff867
je 0x422b97
cmp eax, 0x3c2d1d02
jne 0x4214b2
mov eax, dword [ebp - 0x14]
mov edi, eax
shl edi, 5
sub edi, eax
sub edi, eax
add edi, 0xffffffde
mov dword [ebp - 0x14], edi
push edi
call fcn.0042141f
add esp, 4
push edi
push 0x24de
push 0xb82
call fcn.00427dff
add esp, 0xc
mov eax, 0xf490fa59
cmp edi, 0x13
jae 0x422fb4
mov eax, 0xf8e559fe
jmp 0x422fb4
cmp eax, 0x79dcd6a1
je 0x422bd6
cmp eax, 0x7b77bc8f
jne 0x4214b2
mov dword [ebp - 0x10], 0x25ed8bdd
jmp 0x4214b2
cmp eax, 0x82f9eba8
je 0x422c8d
cmp eax, 0x840a5579
jne 0x4214b2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x10], 0x79c5bcd5
jmp 0x4214b2
cmp eax, 0x909d14cd
je 0x422cba
cmp eax, 0x95d3505f
jne 0x4214b2
mov ecx, dword [ebp - 0x14]
shl ecx, 0xf
mov eax, 0x8bc94a5
add ecx, 0x390000
mov dword [ebp - 0x14], ecx
je 0x422fb4
mov eax, 0xc8d4dac3
jmp 0x422fb4
cmp eax, 0x89c20c5a
je 0x422cfc
cmp eax, 0x8a146f18
jne 0x4214b2
push 0
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov ecx, 0xa7055612
test eax, eax
je 0x422b18
mov ecx, 0x5a2b3fc9
jmp 0x422b18
cmp eax, 0x9e9f1ead
je 0x422d49
cmp eax, 0x9ef395ad
jne 0x4214b2
mov dword [ebp - 0xf0], 0x3c
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0xe2605302
jmp 0x4214b2
cmp eax, 0xe2605302
je 0x422dba
cmp eax, 0xe544d742
jne 0x4214b2
mov eax, dword [ebp - 0x18]
and eax, 0xfffffff8
shl eax, 0x1c
or eax, 0x38
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd4b78af1
jmp 0x4214b2
cmp eax, 0xea8c8821
je 0x422e02
cmp eax, 0xed0da876
jne 0x4214b2
imul eax, dword [ebp - 0x18], 0x5940000
shr eax, 0xc
imul eax, eax, 0x92
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x15d9955a
jmp 0x4214b2
cmp eax, 0xbdd9fdec
je 0x422e6e
cmp eax, 0xbddb934c
jne 0x4214b2
mov edi, dword [ebp - 0x14]
shl edi, 0x15
or edi, 0x8a
mov dword [ebp - 0x14], edi
call fcn.00427e3e
mov eax, 0x876f42a3
cmp edi, 0xe
jge 0x422e4b
jmp 0x422fb4
cmp eax, 0xc4aa367c
je 0x422e99
cmp eax, 0xc5870a4e
jne 0x4214b2
imul eax, dword [ebp - 0x18], 0x1b8
add eax, 0x3635
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd90fc93a
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
jmp 0x4214b2
cmp eax, 0xc5f299bf
je 0x422b8b
cmp eax, 0xc5e72542
je 0x423004
jmp 0x4214b2
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
mov dword [ebp - 0x10], 0x3c1ff867
jmp 0x4214b2
push eax
sub esp, 0xdc
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xd339d5fe
jmp 0x4214b2
mov edi, dword [ebp - 0x14]
shr edi, 1
and edi, 0x7ffff
mov dword [ebp - 0x14], edi
push edi
push 0x3a53
push 0xf62
push 0x3968
call fcn.0041ddc3
add esp, 0x10
mov eax, 0xbdd9fdec
cmp edi, 0x20
jae 0x422fb4
mov eax, 0x8a146f18
jmp 0x422fb4
push dword [ebp - 0x48]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0xc5e72542
jmp 0x4214b2
imul edi, dword [ebp - 0x14], 0x2b274d60
or edi, 1
mov dword [ebp - 0x14], edi
push 0x6f0
push edi
push 0x1011
call fcn.0041bef4
add esp, 0xc
push edi
push 0x5f82
push 0x6330
push 0x2202
call fcn.00421442
add esp, 0x10
mov eax, 0x909d14cd
cmp edi, 0x36
jl 0x422fb4
mov eax, 0xc99362eb
jmp 0x422fb4
mov eax, dword [ebp - 0x14]
shl eax, 0xa
add eax, 0xffffff40
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x5b668583
jmp 0x4214b2
mov eax, dword [ebp - 0x18]
lea eax, [eax*4 + 0x330]
shr eax, 7
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x87ad
shl eax, 0x12
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x15d9955a
cmp edx, ecx
je 0x422fb4
mov eax, 0x4147df62
jmp 0x422fb4
mov eax, dword [ebp - 0x14]
mov ecx, 0xfffffe7a
add eax, ecx
shr eax, 5
add eax, 0xffffff3d
shr eax, 5
imul edi, eax, 0x8e
mov dword [ebp - 0x14], edi
push 0x60f9
push 0x2c7c
push 0x345c
push 0x701
push edi
call fcn.0041c0f7
add esp, 0x14
mov eax, 0x1557802
cmp edi, 0x1c
jge 0x422fb4
mov eax, 0x485de71b
jmp 0x422fb4
mov eax, dword [ebp - 0x14]
shr eax, 0xa
and eax, 0xfffffffc
lea edi, [eax + eax*4]
mov dword [ebp - 0x14], edi
push edi
push 0x235a
push 0x11b3
push 0xade
call fcn.00419997
add esp, 0x10
push edi
push 0x41ce
call fcn.004177da
add esp, 8
mov dword [ebp - 0x10], 0xab2fa7c8
jmp 0x4214b2
imul eax, dword [ebp - 0x18], 0x1cc0
shr eax, 0xf
add eax, 0x72
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe9975444
jmp 0x4214b2
mov dword [ebp - 0x10], 0x48f18c92
jmp 0x4214b2
imul eax, dword [ebp - 0x14], 0x15a00
mov dword [ebp - 0x14], eax
push eax
push 0x5c51
push 0x5da2
call fcn.0041dbb8
add esp, 0xc
mov dword [ebp - 0x10], 0x5b668583
jmp 0x4214b2
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xe2605302
jmp 0x4214b2
imul eax, dword [ebp - 0x18], 0x4508
add eax, 0xffffff51
shr eax, 0xe
imul eax, eax, 0x89
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe9f6d0e6
jmp 0x4214b2
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x7b77bc8f
jmp 0x4214b2
lea eax, [ebp - 0xe4]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0x2231c25
jmp 0x4214b2
mov dword [ebp - 0x10], 0xb6e7b0da
jmp 0x4214b2
mov dword [ebp - 0x10], 0xb5a096ce
jmp 0x4214b2
mov dword [ebp - 0x10], 0xd0460e08
jmp 0x4214b2
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xd39e5d44
jmp 0x4214b2
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0x37b3dab2
jmp 0x4214b2
imul edi, dword [ebp - 0x14], 0x2b4000
add edi, 0xffff7985
mov dword [ebp - 0x14], edi
push 0x4ebd
push 0xb21
push edi
call fcn.004213c9
add esp, 0xc
push 0x344e
push 0x3dd
push edi
push 0x4075
push 0x55a
call fcn.0041cdf8
add esp, 0x14
mov eax, 0x577d64e4
cmp edi, 0xa7
jl 0x422fb4
mov eax, 0x95d3505f
jmp 0x422fb4
mov dword [ebp - 0x10], 0xb10facfd
jmp 0x4214b2
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff3e
add eax, ecx
shr eax, 9
imul edi, eax, 0x2f
add edi, 0x3d52
mov dword [ebp - 0x14], edi
push 0x2f09
push 0x2975
push 0x338c
push edi
push 0x4db3
push 0x40bb
push 0x3534
call fcn.0041cc8f
add esp, 0x1c
push 0x435f
push edi
push 0x39c4
push 0x1f0b
push 0x3c1a
call fcn.00417d92
add esp, 0x14
mov dword [ebp - 0x10], 0x5286ace7
jmp 0x4214b2
imul ecx, dword [ebp - 0x14], 0x70e9
add ecx, 0xffa5250d
mov dword [ebp - 0x14], ecx
mov eax, 0x5ead8a11
cmp ecx, 0x8c
jl 0x422fb4
mov eax, 0xdc89495d
jmp 0x422fb4
mov dword [ebp - 0x10], 0x8fe8d881
jmp 0x4214b2
mov eax, dword [ebp - 0x14]
mov ecx, 0xdc
add eax, ecx
shr eax, 9
imul edi, eax, 0x3a
add edi, 0x55
shr edi, 1
mov dword [ebp - 0x14], edi
push 0x4184
push edi
push 0x2fa3
push 0x5a95
push 0xb0a
call fcn.0041ccd9
add esp, 0x14
mov eax, 0x5b668583
cmp edi, 0x23
je 0x422fb4
mov eax, 0x5ead8a11
jmp 0x422fb4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x10], 0x742e0221
jmp 0x4214b2
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xdd]
imul ecx, ecx
imul edx, ecx, 0x81cb
dec edx
imul eax, eax, 0xc2000000
add eax, 0x1e000000
mov dword [ebp - 0x18], eax
mov eax, 0x48f18c92
cmp ecx, edx
je 0x422fb4
mov eax, 0x82edeb32
jmp 0x422fb4
push dword [ebp - 0x4c]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x10], 0xc2fe1158
jmp 0x4214b2
cmp dword [ebp - 0x48], 0
sete byte [ebp - 0x19]
cmp byte [ebp - 0x19], 0
mov eax, 0xb9650f70
jne 0x422fcc
mov eax, 0x8ba168fd
jmp 0x422fcc
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x10], 0xcb2d4c25
jmp 0x4214b2
mov eax, dword [ebp - 0x30]
mov word [eax + 0xde], 0
mov eax, 0xde
push eax
push 0x473940
push dword [ebp - 0x30]
call fcn.0044dac0
add esp, 0xc
push 5
push 0x473a1e
push 0x6f
push dword [ebp - 0x30]
call fcn.004296a0
add esp, 0x10
mov dword [ebp - 0x10], 0xbdd9fdec
jmp 0x4214b2
mov eax, dword [ebp - 0x18]
mov ecx, 0xd4
add eax, ecx
shr eax, 7
imul ecx, eax, 0x17d90
imul eax, eax
imul edx, eax, 0x5893
dec edx
add ecx, 0xff697630
mov dword [ebp - 0x18], ecx
mov ecx, 0x39fbe18f
cmp eax, edx
je 0x422b18
mov ecx, 0x34436423
mov dword [ebp - 0x10], ecx
jmp 0x4214b2
mov eax, dword [ebp - 0x18]
add eax, 0xffffffa4
shr eax, 3
and eax, 0x1ffffe00
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xac54653c
jmp 0x4214b2
mov eax, dword [ebp - 0x2c]
mov ecx, 0x5101437e
test eax, eax
jne 0x422b4e
mov ecx, 0xd90fc93a
cmp byte [ebp - 0x23], 0
jne 0x422b59
mov ecx, 0xd90fc93a
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], ecx
jmp 0x4214b2
imul eax, dword [ebp - 0x14], 0x214000
add eax, 0xffb00000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xf490fa59
jmp 0x4214b2
imul eax, dword [ebp - 0x18], 0x59
add eax, 0xffffc008
imul ecx, eax, 0xf2
imul eax, eax
imul edx, eax, 0x46e3
shr ecx, 0xb
dec edx
imul ecx, ecx, 0x9b
add ecx, 0x42
mov dword [ebp - 0x18], ecx
mov ecx, 0xce740087
cmp eax, edx
je 0x422c68
mov ecx, 0xc2fe1158
jmp 0x422c68
push dword [ebp - 0x84]
push dword [ebp - 0x80]
lea eax, [ebp - 0x4f0]
push eax
call fcn.0044dac0
add esp, 0xc
movzx eax, word [ebp - 0xd8]
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x10], 0xdc89495d
jmp 0x4214b2
imul ecx, dword [ebp - 0x14], 0xd2
add ecx, 0xffff4b4b
mov eax, ecx
shr eax, 0xf
mov dword [ebp - 0x14], eax
mov eax, 0x5ead8a11
cmp ecx, 0x388000
jb 0x422e2a
jmp 0x422fb4
mov dword [ebp - 0x10], 0x52c0094f
jmp 0x4214b2
mov eax, dword [ebp - 0x14]
shr eax, 5
and eax, 0x7ffff00
add eax, 0x900
and eax, 0xffe0000
or eax, 0x62
mov dword [ebp - 0x14], eax
mov ecx, 0x5a9da1ac
cmp eax, 0xc1
jb 0x422c68
mov ecx, 0x547269cd
mov dword [ebp - 0x10], ecx
jmp 0x4214b2
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*2]
shl eax, 6
add eax, 0xffffff17
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x37b3dab2
jmp 0x4214b2
mov eax, dword [ebp - 0x14]
shr eax, 0xd
imul ecx, eax, 0x582
add ecx, 0xffffecbd
mov dword [ebp - 0x14], ecx
mov eax, 0x37538745
cmp ecx, 0x22
jae 0x422fb4
mov eax, 0x9ef395ad
jmp 0x422fb4
imul edi, dword [ebp - 0x14], 0x36800000
add edi, 0xff9a6000
mov dword [ebp - 0x14], edi
push 0x999
push edi
call fcn.0041e2d1
add esp, 8
push edi
push 0x375e
push 0x3619
push 0x5c5f
call fcn.0041d83f
add esp, 0x10
mov dword [ebp - 0x10], 0x181b1a3b
jmp 0x4214b2
imul edi, dword [ebp - 0x14], 0x1be8a6
add edi, 0xffee5c82
mov dword [ebp - 0x14], edi
push dword [ebp - 0xb0]
push edi
push 0x1e55
push 0xc54
push 0x3219
push 0xbda
call fcn.0041bf0f
add esp, 0x18
push edi
push 0x3011
call fcn.0042084f
add esp, 8
mov dword [ebp - 0x10], 0x4b79651c
jmp 0x4214b2
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x77dd275b
jmp 0x4214b2
movzx eax, word [ebp - 0x4e]
push 0
push eax
lea eax, [ebp - 0x4f0]
push eax
push dword [ebp - 0x48]
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xd62d79db
jmp 0x4214b2
mov eax, dword [ebp - 0x88]
xor ecx, ecx
cmp dword [eax], 2
sete cl
shl ecx, 0x17
mov dword [ebp - 0x8c], ecx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x90], eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x6c07dc46
jmp 0x4214b2
mov eax, dword [ebp - 0x74]
xor ecx, ecx
dec ecx
mov dword [eax], ecx
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov dword [ebp - 0xc0], ecx
mov edi, dword [ebp + 8]
push edi
call fcn.0045ecca
add esp, 4
lea ecx, [ebp - 0xf0]
push ecx
push 0
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x87946877
jmp 0x4214b2
mov eax, dword [ebp - 0x14]
shr eax, 3
and eax, 0x1ff00
imul ecx, eax, 0x16a0000
add ecx, 0x76000000
mov dword [ebp - 0x14], ecx
mov eax, 0xe9f6d0e6
cmp ecx, 0x66
jl 0x422fb4
mov eax, 0xbdd9fdec
jmp 0x422fb4
mov ecx, dword [ebp - 0x14]
add ecx, 0x35
mov dword [ebp - 0x14], ecx
mov eax, 0xdc89495d
cmp ecx, 0x69
jae 0x422fb4
mov eax, 0xd0460e08
jmp 0x422fb4
cmp byte [ebp - 0x19], 0
mov eax, 0xc5e72542
jne 0x422fb4
mov eax, 0xf95480d7
jmp 0x422fb4
push esi
push esi
push esi
push esi
push dword [ebp - 0x30]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x48], eax
xor eax, eax
mov ecx, 0xe
lea edi, [ebp - 0xec]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0x9ef395ad
jmp 0x4214b2
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x10], 0x4b79651c
jmp 0x4214b2
mov edi, dword [ebp - 0x14]
mov eax, 0x1ffff
and edi, eax
lea eax, [edi - 0x83]
mov dword [ebp - 0x14], eax
push eax
call fcn.00420877
add esp, 4
mov eax, 0x8fe8d881
cmp edi, 0xa1
jae 0x422fb4
mov eax, 0xb296c61
jmp 0x422fb4
mov edi, dword [ebp - 0x14]
shl edi, 8
add edi, 0xb900
mov eax, edi
shr eax, 0xe
mov dword [ebp - 0x14], eax
push 0x5959
push 0x3dcc
push 0x5382
push 0x2de0
push 0x1bab
push eax
push 0x120b
call fcn.004200f0
add esp, 0x1c
mov eax, 0x52c0094f
cmp edi, 0x3e8000
jb 0x422fb4
mov eax, 0x8fe8d881
jmp 0x422fb4
mov dword [ebp - 0x10], 0x231b4d6
jmp 0x4214b2
mov dword [ebp - 0x10], 0x2fc64b54
jmp 0x4214b2
cmp dword [ebp - 0x94], 0
sete byte [ebp - 0x21]
mov dword [ebp - 0x10], 0xa10ace44
jmp 0x4214b2
cmp byte [ebp - 0x21], 0
mov eax, 0xa7055612
jne 0x422fcc
mov eax, 0x8a146f18
jmp 0x422fcc
imul edi, dword [ebp - 0x14], 0x77
add edi, 0xffffffe7
mov eax, edi
shr eax, 0xc
mov dword [ebp - 0x14], eax
push dword [ebp - 0xac]
push eax
push 0x439f
call fcn.0041dd1c
add esp, 0xc
mov eax, 0x5ead8a11
cmp edi, 0x66000
jae 0x422fb4
mov eax, 0xe2605302
mov dword [ebp - 0x10], eax
jmp 0x4214b2
cmp dword [ebp - 0x4c], 0
mov eax, 0x1fa40e09
je 0x422fcc
mov eax, 0xb296c61
mov dword [ebp - 0x10], eax
jmp 0x4214b2
cmp eax, 0xc70cd5c9
jne 0x4214b2
jmp 0x42300c
cmp eax, 0x876f42a3
jne 0x4214b2
imul eax, dword [ebp - 0x14], 0x5400000
add eax, 0xc5000000
shr eax, 5
mov dword [ebp - 0x14], eax
push eax
call fcn.00417ec4
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
imul eax, dword [ebp - 0x14], 0x3c000
add eax, 0xfe373000
mov dword [ebp - 0x14], eax
push 0xb93
push 0x2282
push 0x5b0b
push eax
call fcn.0041df9b