Function at 0x403ca0
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4727d3
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x190ec
call fcn.00459750
mov eax, dword [0x48e780]
xor eax, esp
mov dword [esp + 0x190e8], eax
push ebx
push esi
push edi
mov eax, dword [0x48e780]
xor eax, esp
push eax
lea eax, [esp + 0x19100]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
xor ebx, ebx
push ebx
lea ecx, [esp + 0x28]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ebx
call fcn.00407520
push ebx
lea ecx, [esp + 0x40]
mov dword [esp + 0x1910c], ebx
call fcn.00407520
lea ecx, [esp + 0xd0]
call fcn.004112a0
push esi
mov byte [esp + 0x1910c], 2
call fcn.00403c40
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
mov dword [esp + 0x30], eax
call fcn.00407710
push str.filename
lea ecx, [esp + 0x58]
mov byte [esp + 0x19124], 3
call fcn.00409a40
mov ecx, eax
mov byte [esp + 0x19120], 2
call fcn.00407c10
push ebx
call fcn.0045c49d
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00407620
push str.timestamp
lea ecx, [esp + 0x58]
mov byte [esp + 0x19124], 4
call fcn.00409a40
mov ecx, eax
mov byte [esp + 0x19120], 2
call fcn.00407c10
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push str.1.4.1.0
call fcn.00407710
push str.version
lea ecx, [esp + 0x58]
mov byte [esp + 0x19124], 5
call fcn.00409a40
mov ecx, eax
mov byte [esp + 0x19120], 2
call fcn.00407c10
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x9c]
push edx
lea ecx, [esp + 0xd8]
call fcn.00411310
mov byte [esp + 0x19108], 6
cmp dword [esp + 0xb0], 0x10
mov eax, dword [esp + 0x9c]
jae 0x403e0d
lea eax, [esp + 0x9c]
push 1
push str.POST
push 0x19000
lea ecx, [esp + 0x100]
push ecx
push eax
push str._getpublickey
push 0x1bb
push str.u.16lao.com
call fcn.004019f0
add esp, 0x20
lea ecx, [esp + 0x74]
mov edi, eax
call fcn.004176c0
lea ecx, [esp + 0x74]
mov byte [esp + 0x19108], 7
call fcn.004177f0
mov esi, eax
mov dword [esp + 0xcc], 0xf
mov dword [esp + 0xc8], ebx
mov byte [esp + 0xb8], bl
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x28]
push ecx
lea eax, [esp + edi + 0xfc]
mov byte [esp + 0x19110], 8
mov edx, dword [esi]
mov edx, dword [edx + 4]
push eax
lea ecx, [esp + 0x100]
push ecx
mov ecx, esi
call edx
cmp al, bl
je 0x404055
lea ecx, [esp + 0x24]
call fcn.00408eb0
test al, al
jne 0x404055
lea ecx, [esp + 0x24]
call fcn.00407d60
cmp eax, 7
jne 0x403f2e
lea eax, [esp + 0x58]
push eax
push str.code
lea ecx, [esp + 0x2c]
call fcn.00409a40
mov ecx, eax
call fcn.00407f10
cmp dword [eax + 0x18], 0x10
mov dword [esp + 0x1c], 1
jb 0x403ef2
mov eax, dword [eax + 4]
jmp 0x403ef5
add eax, 4
mov ecx, 0x482b28
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x403f20
cmp dl, bl
je 0x403f1c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x403f20
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x403f00
xor eax, eax
jmp 0x403f25
sbb eax, eax
sbb eax, 0xffffffff
mov byte [esp + 0x13], 1
cmp eax, ebx
je 0x403f32
mov byte [esp + 0x13], bl
test byte [esp + 0x1c], 1
je 0x403f60
cmp dword [esp + 0x70], 0x10
jb 0x403f4d
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.0041da60
add esp, 4
mov edi, 0xf
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
jmp 0x403f65
mov edi, 0xf
cmp byte [esp + 0x13], bl
je 0x40405a
push str.publickey
lea ecx, [esp + 0x28]
call fcn.00409a40
mov ecx, eax
call fcn.00407d80
mov ecx, eax
lea edi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x403f90
sub ecx, edi
mov edi, dword [esp + 0x20]
push ecx
push eax
mov ecx, edi
call fcn.00404490
mov edx, dword [esp + 0x14]
push edx
call fcn.0045962a
mov eax, dword [esi]
mov edx, dword [eax]
add esp, 4
push 1
mov ecx, esi
call edx
lea ecx, [esp + 0xb4]
cmp dword [edi + 0x14], ebx
jne 0x403ffc
call fcn.004041e0
lea ecx, [esp + 0x74]
mov byte [esp + 0x19108], 6
call fcn.00417790
lea ecx, [esp + 0x98]
call fcn.004041e0
lea ecx, [esp + 0xd0]
call fcn.00401090
jmp 0x404128
call fcn.004041e0
lea ecx, [esp + 0x74]
mov byte [esp + 0x19108], 6
call fcn.00417790
lea ecx, [esp + 0x98]
call fcn.004041e0
lea ecx, [esp + 0xd0]
call fcn.00401090
lea ecx, [esp + 0x3c]
mov byte [esp + 0x19108], bl
call fcn.00407b10
lea ecx, [esp + 0x24]
mov dword [esp + 0x19108], 0xffffffff
call fcn.00407b10
mov al, 1
jmp 0x40414e
mov edi, 0xf
mov eax, dword [esp + 0x14]
push eax
call fcn.0045962a
mov edx, dword [esi]
mov eax, dword [edx]
add esp, 4
push 1
mov ecx, esi
call eax
mov esi, 0x10
cmp dword [esp + 0xcc], esi
jb 0x40408f
mov ecx, dword [esp + 0xb8]
push ecx
call fcn.0041da60
add esp, 4
lea ecx, [esp + 0x74]
mov dword [esp + 0xcc], edi
mov dword [esp + 0xc8], ebx
mov byte [esp + 0xb8], bl
mov byte [esp + 0x19108], 6
call fcn.00417790
cmp dword [esp + 0xb0], esi
jb 0x4040ce
mov edx, dword [esp + 0x9c]
push edx
call fcn.0041da60
add esp, 4
mov dword [esp + 0xb0], edi
mov dword [esp + 0xac], ebx
mov byte [esp + 0x9c], bl
mov dword [esp + 0xd0], vtable.Json::FastWriter.0
cmp dword [esp + 0xec], esi
jb 0x404107
mov eax, dword [esp + 0xd8]
push eax
call fcn.0041da60
add esp, 4
lea ecx, [esp + 0xd0]
mov dword [esp + 0xec], edi
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xd8], bl
call fcn.00411250
lea ecx, [esp + 0x3c]
mov byte [esp + 0x19108], bl
call fcn.00407b10
lea ecx, [esp + 0x24]
mov dword [esp + 0x19108], 0xffffffff
call fcn.00407b10
xor al, al
mov ecx, dword [esp + 0x19100]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x190e8]
xor ecx, esp
call fcn.00459157
mov esp, ebp
pop ebp
ret