Function at 0x10042900
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Create http request
Encode data using xor
Parse pe header
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f4f0
mov eax, dword fs:[0]
push eax
mov eax, 0x4384
call fcn.10064fe0
mov eax, dword [0x100bc570]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4204], 0x72
mov eax, dword [ebp - 0x4204]
xor al, 0x64
mov byte [ebp - 0x4200], al
mov eax, dword [ebp - 0x4204]
inc al
xor al, 0x65
mov byte [ebp - 0x41ff], al
mov eax, dword [ebp - 0x4204]
add al, 2
xor al, 0x62
mov byte [ebp - 0x41fe], al
mov eax, dword [ebp - 0x4204]
add al, 3
xor al, 0x75
mov byte [ebp - 0x41fd], al
mov eax, dword [ebp - 0x4204]
add al, 4
xor al, 0x67
mov byte [ebp - 0x41fc], al
mov eax, dword [ebp - 0x4204]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x41fb], al
mov eax, dword [ebp - 0x4204]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x41fa], al
mov eax, dword [ebp - 0x4204]
add al, 7
xor al, 0x72
mov byte [ebp - 0x41f9], al
mov eax, dword [ebp - 0x4204]
add al, 8
xor al, 0x65
mov byte [ebp - 0x41f8], al
mov eax, dword [ebp - 0x4204]
add al, 9
xor al, 0x61
mov byte [ebp - 0x41f7], al
mov eax, dword [ebp - 0x4204]
add al, 0xa
xor al, 0x64
mov byte [ebp - 0x41f6], al
mov eax, dword [ebp - 0x4204]
add al, 0xb
xor al, 0x63
mov byte [ebp - 0x41f5], al
mov eax, dword [ebp - 0x4204]
add al, 0xc
xor al, 0x6c
mov byte [ebp - 0x41f4], al
mov eax, dword [ebp - 0x4204]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x41f3], al
mov eax, dword [ebp - 0x4204]
add al, 0xe
xor al, 0x6f
mov byte [ebp - 0x41f2], al
mov eax, dword [ebp - 0x4204]
add al, 0xf
xor al, 0x6c
mov byte [ebp - 0x41f1], al
mov eax, dword [ebp - 0x4204]
add al, 0x10
xor al, 0x69
mov byte [ebp - 0x41f0], al
mov eax, dword [ebp - 0x4204]
add al, 0x11
xor al, 0x73
mov byte [ebp - 0x41ef], al
mov eax, dword [ebp - 0x4204]
add al, 0x12
mov byte [ebp - 0x41ed], 0
xor al, 0x74
xor edx, edx
mov byte [ebp - 0x41ee], al
mov al, byte [ebp - 0x4200]
nop dword [eax]
mov al, byte [ebp + edx - 0x4200]
mov ecx, dword [ebp - 0x4204]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x4200], cl
inc edx
cmp edx, 0x13
jb 0x10042a80
lea eax, [ebp - 0x4200]
mov byte [ebp - 0x41ed], 0
push eax
call fcn.100407f0
add esp, 4
push 0
push 0
push 0
push 0
push str.SECAC_1.0
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
test ebx, ebx
jne 0x10042f22
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
mov dword [ebp - 0x41a8], 0x51
mov eax, dword [ebp - 0x41a8]
xor al, 0x64
mov byte [ebp - 0x41a4], al
mov eax, dword [ebp - 0x41a8]
inc al
xor al, 0x65
mov byte [ebp - 0x41a3], al
mov eax, dword [ebp - 0x41a8]
add al, 2
xor al, 0x62
mov byte [ebp - 0x41a2], al
mov eax, dword [ebp - 0x41a8]
add al, 3
xor al, 0x75
mov byte [ebp - 0x41a1], al
mov eax, dword [ebp - 0x41a8]
add al, 4
xor al, 0x67
mov byte [ebp - 0x41a0], al
mov eax, dword [ebp - 0x41a8]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x419f], al
mov eax, dword [ebp - 0x41a8]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x419e], al
mov eax, dword [ebp - 0x41a8]
add al, 7
xor al, 0x72
mov byte [ebp - 0x419d], al
mov eax, dword [ebp - 0x41a8]
add al, 8
xor al, 0x65
mov byte [ebp - 0x419c], al
mov eax, dword [ebp - 0x41a8]
add al, 9
xor al, 0x61
mov byte [ebp - 0x419b], al
mov eax, dword [ebp - 0x41a8]
add al, 0xa
xor al, 0x64
mov byte [ebp - 0x419a], al
mov eax, dword [ebp - 0x41a8]
add al, 0xb
xor al, 0x63
mov byte [ebp - 0x4199], al
mov eax, dword [ebp - 0x41a8]
add al, 0xc
xor al, 0x6c
mov byte [ebp - 0x4198], al
mov eax, dword [ebp - 0x41a8]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x4197], al
mov eax, dword [ebp - 0x41a8]
add al, 0xe
xor al, 0x6f
mov byte [ebp - 0x4196], al
mov eax, dword [ebp - 0x41a8]
add al, 0xf
xor al, 0x6c
mov byte [ebp - 0x4195], al
mov eax, dword [ebp - 0x41a8]
add al, 0x10
xor al, 0x69
mov byte [ebp - 0x4194], al
mov eax, dword [ebp - 0x41a8]
add al, 0x11
xor al, 0x73
mov byte [ebp - 0x4193], al
mov eax, dword [ebp - 0x41a8]
add al, 0x12
xor al, 0x74
mov byte [ebp - 0x4192], al
mov eax, dword [ebp - 0x41a8]
add al, 0x13
xor al, 0x3a
mov byte [ebp - 0x4191], al
mov eax, dword [ebp - 0x41a8]
add al, 0x14
xor al, 0x3a
mov byte [ebp - 0x4190], al
mov eax, dword [ebp - 0x41a8]
add al, 0x15
xor al, 0x65
mov byte [ebp - 0x418f], al
mov eax, dword [ebp - 0x41a8]
add al, 0x16
xor al, 0x72
mov byte [ebp - 0x418e], al
mov eax, dword [ebp - 0x41a8]
add al, 0x17
xor al, 0x72
mov byte [ebp - 0x418d], al
mov eax, dword [ebp - 0x41a8]
add al, 0x18
xor al, 0x6f
mov byte [ebp - 0x418c], al
mov eax, dword [ebp - 0x41a8]
add al, 0x19
xor al, 0x72
mov byte [ebp - 0x418b], al
mov eax, dword [ebp - 0x41a8]
add al, 0x1a
xor al, 0x3a
mov byte [ebp - 0x418a], al
mov eax, dword [ebp - 0x41a8]
add al, 0x1b
xor al, 0x3a
mov byte [ebp - 0x4189], al
mov eax, dword [ebp - 0x41a8]
add al, 0x1c
xor al, 0x25
mov byte [ebp - 0x4188], al
mov eax, dword [ebp - 0x41a8]
add al, 0x1d
mov byte [ebp - 0x4186], bl
xor al, 0x64
xor edx, edx
mov byte [ebp - 0x4187], al
mov al, byte [ebp - 0x41a4]
mov al, byte [ebp + edx - 0x41a4]
mov ecx, dword [ebp - 0x41a8]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x41a4], cl
inc edx
cmp edx, 0x1e
jb 0x10042cd0
lea eax, [ebp - 0x41a4]
mov byte [ebp - 0x4186], 0
push esi
push eax
call fcn.100407f0
mov dword [ebp - 0x42c4], 0x78
add esp, 8
mov byte [ebp - 0x42c0], 0x39
xor edx, edx
mov byte [ebp - 0x42bf], 0x16
mov byte [ebp - 0x42be], 0xc
mov byte [ebp - 0x42bd], 0x11
mov byte [ebp - 0x42bc], 0x1b
mov byte [ebp - 0x42bb], 0x10
mov byte [ebp - 0x42ba], 0x1d
mov byte [ebp - 0x42b9], 0x19
mov byte [ebp - 0x42b8], 0xc
mov byte [ebp - 0x42b7], 0x42
mov byte [ebp - 0x42b6], 3
mov byte [ebp - 0x42b5], 0x1c
mov byte [ebp - 0x42b4], 0x19
mov byte [ebp - 0x42b3], 0x1c
mov byte [ebp - 0x42b2], 0x19
mov byte [ebp - 0x42b1], 0x1c
mov byte [ebp - 0x42b0], 0x19
mov byte [ebp - 0x42af], 5
mov byte [ebp - 0x42ae], 0x58
mov byte [ebp - 0x42ad], 0x3b
mov byte [ebp - 0x42ac], 0x34
mov byte [ebp - 0x42ab], 0x3d
mov byte [ebp - 0x42aa], 0x37
mov byte [ebp - 0x42a9], 0x58
mov byte [ebp - 0x42a8], 0x14
mov byte [ebp - 0x42a7], 0x11
mov byte [ebp - 0x42a6], 0xb
mov byte [ebp - 0x42a5], 0xc
mov byte [ebp - 0x42a4], 0x1d
mov byte [ebp - 0x42a3], 0xb
mov byte [ebp - 0x42a2], 0x11
mov byte [ebp - 0x42a1], 0x58
mov byte [ebp - 0x42a0], 0x11
mov byte [ebp - 0x429f], 0x16
mov byte [ebp - 0x429e], 0x1c
mov byte [ebp - 0x429d], 0x11
mov byte [ebp - 0x429c], 0xa
mov byte [ebp - 0x429b], 0x11
mov byte [ebp - 0x429a], 0x14
mov byte [ebp - 0x4299], 0x11
mov byte [ebp - 0x4298], 0xa
mov byte [ebp - 0x4297], 0x13
mov byte [ebp - 0x4296], 0x1d
mov byte [ebp - 0x4295], 0x16
mov byte [ebp - 0x4294], 0x58
mov byte [ebp - 0x4293], 0x1a
mov byte [ebp - 0x4292], 0x11
mov byte [ebp - 0x4291], 0xa
mov byte [ebp - 0x4290], 0x58
mov byte [ebp - 0x428f], 0xb
mov byte [ebp - 0x428e], 0x17
mov byte [ebp - 0x428d], 0xa
mov byte [ebp - 0x428c], 0xd
mov byte [ebp - 0x428b], 0x16
mov byte [ebp - 0x428a], 0x58
mov byte [ebp - 0x4289], 0x17
mov byte [ebp - 0x4288], 0x14
mov byte [ebp - 0x4287], 0xd
mov byte [ebp - 0x4286], 0x86
mov byte [ebp - 0x4285], 0xc
mov byte [ebp - 0x4284], 0xd
mov byte [ebp - 0x4283], 0x56
mov al, byte [ebp - 0x42c0]
mov byte [ebp - 0x4282], 0
mov al, byte [ebp + edx - 0x42c0]
mov ecx, dword [ebp - 0x42c4]
xor cl, al
mov byte [ebp + edx - 0x42c0], cl
inc edx
cmp edx, 0x3e
jb 0x10042ed0
lea eax, [ebp - 0x42c0]
mov byte [ebp - 0x4282], 0
push eax
push 0xff6961
call fcn.10009160
push 0x10097670
push 0x4000
push 0x1018c630
call fcn.100228e0
add esp, 0x14
xor eax, eax
jmp 0x10043f0b
mov dword [ebp - 0x41cc], 0x4d
mov eax, dword [ebp - 0x41cc]
xor al, 0x64
mov byte [ebp - 0x41c8], al
mov eax, dword [ebp - 0x41cc]
inc al
xor al, 0x65
mov byte [ebp - 0x41c7], al
mov eax, dword [ebp - 0x41cc]
add al, 2
xor al, 0x62
mov byte [ebp - 0x41c6], al
mov eax, dword [ebp - 0x41cc]
add al, 3
xor al, 0x75
mov byte [ebp - 0x41c5], al
mov eax, dword [ebp - 0x41cc]
add al, 4
xor al, 0x67
mov byte [ebp - 0x41c4], al
mov eax, dword [ebp - 0x41cc]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x41c3], al
mov eax, dword [ebp - 0x41cc]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x41c2], al
mov eax, dword [ebp - 0x41cc]
add al, 7
xor al, 0x72
mov byte [ebp - 0x41c1], al
mov eax, dword [ebp - 0x41cc]
add al, 8
xor al, 0x65
mov byte [ebp - 0x41c0], al
mov eax, dword [ebp - 0x41cc]
add al, 9
xor al, 0x61
mov byte [ebp - 0x41bf], al
mov eax, dword [ebp - 0x41cc]
add al, 0xa
xor al, 0x64
mov byte [ebp - 0x41be], al
mov eax, dword [ebp - 0x41cc]
add al, 0xb
xor al, 0x63
mov byte [ebp - 0x41bd], al
mov eax, dword [ebp - 0x41cc]
add al, 0xc
xor al, 0x6c
mov byte [ebp - 0x41bc], al
mov eax, dword [ebp - 0x41cc]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x41bb], al
mov eax, dword [ebp - 0x41cc]
add al, 0xe
xor al, 0x6f
mov byte [ebp - 0x41ba], al
mov eax, dword [ebp - 0x41cc]
add al, 0xf
xor al, 0x6c
mov byte [ebp - 0x41b9], al
mov eax, dword [ebp - 0x41cc]
add al, 0x10
xor al, 0x69
mov byte [ebp - 0x41b8], al
mov eax, dword [ebp - 0x41cc]
add al, 0x11
xor al, 0x73
mov byte [ebp - 0x41b7], al
mov eax, dword [ebp - 0x41cc]
add al, 0x12
xor al, 0x74
mov byte [ebp - 0x41b6], al
mov eax, dword [ebp - 0x41cc]
add al, 0x13
xor al, 0x3a
mov byte [ebp - 0x41b5], al
mov eax, dword [ebp - 0x41cc]
add al, 0x14
xor al, 0x3a
mov byte [ebp - 0x41b4], al
mov eax, dword [ebp - 0x41cc]
add al, 0x15
xor al, 0x63
mov byte [ebp - 0x41b3], al
mov eax, dword [ebp - 0x41cc]
add al, 0x16
xor al, 0x6f
mov byte [ebp - 0x41b2], al
mov eax, dword [ebp - 0x41cc]
add al, 0x17
xor al, 0x6e
mov byte [ebp - 0x41b1], al
mov eax, dword [ebp - 0x41cc]
add al, 0x18
xor al, 0x6e
mov byte [ebp - 0x41b0], al
mov eax, dword [ebp - 0x41cc]
add al, 0x19
xor al, 0x65
mov byte [ebp - 0x41af], al
mov eax, dword [ebp - 0x41cc]
add al, 0x1a
xor al, 0x63
mov byte [ebp - 0x41ae], al
mov eax, dword [ebp - 0x41cc]
add al, 0x1b
mov byte [ebp - 0x41ac], 0
xor al, 0x74
xor edx, edx
mov byte [ebp - 0x41ad], al
mov al, byte [ebp - 0x41c8]
nop dword [eax]
mov al, byte [ebp + edx - 0x41c8]
mov ecx, dword [ebp - 0x41cc]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x41c8], cl
inc edx
cmp edx, 0x1c
jb 0x10043100
lea eax, [ebp - 0x41c8]
mov byte [ebp - 0x41ac], 0
push eax
call fcn.100407f0
add esp, 4
call fcn.10061ef0
mov dword [ebp - 0x4280], 0x39
mov esi, eax
mov byte [ebp - 0x427c], 0x51
xor edx, edx
mov byte [ebp - 0x427b], 0x4d
mov byte [ebp - 0x427a], 0x4d
mov byte [ebp - 0x4279], 0x49
mov byte [ebp - 0x4278], 3
mov byte [ebp - 0x4277], 0x16
mov byte [ebp - 0x4276], 0x16
mov byte [ebp - 0x4275], 0x5f
mov byte [ebp - 0x4274], 0x58
mov byte [ebp - 0x4273], 0x4a
mov byte [ebp - 0x4272], 0x4d
mov byte [ebp - 0x4271], 0x17
mov byte [ebp - 0x4270], 0x4a
mov byte [ebp - 0x426f], 0x5c
mov byte [ebp - 0x426e], 0x5a
mov byte [ebp - 0x426d], 0x14
mov byte [ebp - 0x426c], 0x57
mov byte [ebp - 0x426b], 0x50
mov byte [ebp - 0x426a], 0x57
mov byte [ebp - 0x4269], 0x5c
mov byte [ebp - 0x4268], 0x17
mov byte [ebp - 0x4267], 0x5a
mov byte [ebp - 0x4266], 0x56
mov byte [ebp - 0x4265], 0x54
mov byte [ebp - 0x4264], 0x16
mov byte [ebp - 0x4263], 0x4a
mov byte [ebp - 0x4262], 0x5c
mov byte [ebp - 0x4261], 0x5a
mov byte [ebp - 0x4260], 0x58
mov byte [ebp - 0x425f], 0x5a
mov byte [ebp - 0x425e], 0x16
mov byte [ebp - 0x425d], 0x55
mov byte [ebp - 0x425c], 0x56
mov byte [ebp - 0x425b], 0x4a
mov byte [ebp - 0x425a], 0x55
mov byte [ebp - 0x4259], 0x58
mov byte [ebp - 0x4258], 0x57
mov byte [ebp - 0x4257], 0x5d
mov byte [ebp - 0x4256], 0x16
mov byte [ebp - 0x4255], 0x5a
mov byte [ebp - 0x4254], 0x55
mov byte [ebp - 0x4253], 0x5c
mov byte [ebp - 0x4252], 0x56
mov byte [ebp - 0x4251], 0x17
mov byte [ebp - 0x4250], 0x49
mov byte [ebp - 0x424f], 0x51
mov byte [ebp - 0x424e], 0x49
mov byte [ebp - 0x424d], 6
mov byte [ebp - 0x424c], 0x4b
mov byte [ebp - 0x424b], 4
mov byte [ebp - 0x424a], 0x1c
mov byte [ebp - 0x4249], 0x5d
mov al, byte [ebp - 0x427c]
mov byte [ebp - 0x4248], 0
mov al, byte [ebp + edx - 0x427c]
mov ecx, dword [ebp - 0x4280]
xor cl, al
mov byte [ebp + edx - 0x427c], cl
inc edx
cmp edx, 0x34
jb 0x100432c0
push esi
lea eax, [ebp - 0x427c]
mov byte [ebp - 0x4248], 0
push eax
lea eax, [ebp - 0x110]
push 0x100
push eax
call fcn.100228e0
add esp, 0x10
lea eax, [ebp - 0x110]
push 0
push 0
push 0
push 0
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov esi, eax
test esi, esi
jne 0x10043a55
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
mov dword [ebp - 0x4184], 0x2b
mov eax, dword [ebp - 0x4184]
xor al, 0x64
mov byte [ebp - 0x4180], al
mov eax, dword [ebp - 0x4184]
inc al
xor al, 0x65
mov byte [ebp - 0x417f], al
mov eax, dword [ebp - 0x4184]
add al, 2
xor al, 0x62
mov byte [ebp - 0x417e], al
mov eax, dword [ebp - 0x4184]
add al, 3
xor al, 0x75
mov byte [ebp - 0x417d], al
mov eax, dword [ebp - 0x4184]
add al, 4
xor al, 0x67
mov byte [ebp - 0x417c], al
mov eax, dword [ebp - 0x4184]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x417b], al
mov eax, dword [ebp - 0x4184]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x417a], al
mov eax, dword [ebp - 0x4184]
add al, 7
xor al, 0x72
mov byte [ebp - 0x4179], al
mov eax, dword [ebp - 0x4184]
add al, 8
xor al, 0x65
mov byte [ebp - 0x4178], al
mov eax, dword [ebp - 0x4184]
add al, 9
xor al, 0x61
mov byte [ebp - 0x4177], al
mov eax, dword [ebp - 0x4184]
add al, 0xa
xor al, 0x64
mov byte [ebp - 0x4176], al
mov eax, dword [ebp - 0x4184]
add al, 0xb
xor al, 0x63
mov byte [ebp - 0x4175], al
mov eax, dword [ebp - 0x4184]
add al, 0xc
xor al, 0x6c
mov byte [ebp - 0x4174], al
mov eax, dword [ebp - 0x4184]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x4173], al
mov eax, dword [ebp - 0x4184]
add al, 0xe
xor al, 0x6f
mov byte [ebp - 0x4172], al
mov eax, dword [ebp - 0x4184]
add al, 0xf
xor al, 0x6c
mov byte [ebp - 0x4171], al
mov eax, dword [ebp - 0x4184]
add al, 0x10
xor al, 0x69
mov byte [ebp - 0x4170], al
mov eax, dword [ebp - 0x4184]
add al, 0x11
xor al, 0x73
mov byte [ebp - 0x416f], al
mov eax, dword [ebp - 0x4184]
add al, 0x12
xor al, 0x74
mov byte [ebp - 0x416e], al
mov eax, dword [ebp - 0x4184]
add al, 0x13
xor al, 0x3a
mov byte [ebp - 0x416d], al
mov eax, dword [ebp - 0x4184]
add al, 0x14
xor al, 0x3a
mov byte [ebp - 0x416c], al
mov eax, dword [ebp - 0x4184]
add al, 0x15
xor al, 0x65
mov byte [ebp - 0x416b], al
mov eax, dword [ebp - 0x4184]
add al, 0x16
xor al, 0x72
mov byte [ebp - 0x416a], al
mov eax, dword [ebp - 0x4184]
add al, 0x17
xor al, 0x72
mov byte [ebp - 0x4169], al
mov eax, dword [ebp - 0x4184]
add al, 0x18
xor al, 0x6f
mov byte [ebp - 0x4168], al
mov eax, dword [ebp - 0x4184]
add al, 0x19
xor al, 0x72
mov byte [ebp - 0x4167], al
mov eax, dword [ebp - 0x4184]
add al, 0x1a
xor al, 0x32
mov byte [ebp - 0x4166], al
mov eax, dword [ebp - 0x4184]
add al, 0x1b
xor al, 0x3a
mov byte [ebp - 0x4165], al
mov eax, dword [ebp - 0x4184]
add al, 0x1c
xor al, 0x3a
mov byte [ebp - 0x4164], al
mov eax, dword [ebp - 0x4184]
add al, 0x1d
xor al, 0x25
mov byte [ebp - 0x4163], al
mov eax, dword [ebp - 0x4184]
add al, 0x1e
mov byte [ebp - 0x4161], 0
xor al, 0x64
xor edx, edx
mov byte [ebp - 0x4162], al
mov al, byte [ebp - 0x4180]
nop
mov al, byte [ebp + edx - 0x4180]
mov ecx, dword [ebp - 0x4184]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x4180], cl
inc edx
cmp edx, 0x1f
jb 0x10043530
lea eax, [ebp - 0x4180]
mov byte [ebp - 0x4161], 0
push esi
push eax
call fcn.100407f0
mov dword [ebp - 0x4160], 0x4c
add esp, 8
mov eax, dword [ebp - 0x4160]
xor al, 0x41
mov byte [ebp - 0x415c], al
mov eax, dword [ebp - 0x4160]
inc al
xor al, 0x6e
mov byte [ebp - 0x415b], al
mov eax, dword [ebp - 0x4160]
add al, 2
xor al, 0x74
mov byte [ebp - 0x415a], al
mov eax, dword [ebp - 0x4160]
add al, 3
xor al, 0x69
mov byte [ebp - 0x4159], al
mov eax, dword [ebp - 0x4160]
add al, 4
xor al, 0x63
mov byte [ebp - 0x4158], al
mov eax, dword [ebp - 0x4160]
add al, 5
xor al, 0x68
mov byte [ebp - 0x4157], al
mov eax, dword [ebp - 0x4160]
add al, 6
xor al, 0x65
mov byte [ebp - 0x4156], al
mov eax, dword [ebp - 0x4160]
add al, 7
xor al, 0x61
mov byte [ebp - 0x4155], al
mov eax, dword [ebp - 0x4160]
add al, 8
xor al, 0x74
mov byte [ebp - 0x4154], al
mov eax, dword [ebp - 0x4160]
add al, 9
xor al, 0x3a
mov byte [ebp - 0x4153], al
mov eax, dword [ebp - 0x4160]
add al, 0xa
xor al, 0x7b
mov byte [ebp - 0x4152], al
mov eax, dword [ebp - 0x4160]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x4151], al
mov eax, dword [ebp - 0x4160]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x4150], al
mov eax, dword [ebp - 0x4160]
add al, 0xd
xor al, 0x64
mov byte [ebp - 0x414f], al
mov eax, dword [ebp - 0x4160]
add al, 0xe
xor al, 0x61
mov byte [ebp - 0x414e], al
mov eax, dword [ebp - 0x4160]
add al, 0xf
xor al, 0x64
mov byte [ebp - 0x414d], al
mov eax, dword [ebp - 0x4160]
add al, 0x10
xor al, 0x61
mov byte [ebp - 0x414c], al
mov eax, dword [ebp - 0x4160]
add al, 0x11
xor al, 0x7d
mov byte [ebp - 0x414b], al
mov eax, dword [ebp - 0x4160]
add al, 0x12
xor al, 0x20
mov byte [ebp - 0x414a], al
mov eax, dword [ebp - 0x4160]
add al, 0x13
xor al, 0x43
mov byte [ebp - 0x4149], al
mov eax, dword [ebp - 0x4160]
add al, 0x14
xor al, 0x4c
mov byte [ebp - 0x4148], al
mov eax, dword [ebp - 0x4160]
add al, 0x15
xor al, 0x45
mov byte [ebp - 0x4147], al
mov eax, dword [ebp - 0x4160]
add al, 0x16
xor al, 0x4f
mov byte [ebp - 0x4146], al
mov eax, dword [ebp - 0x4160]
add al, 0x17
xor al, 0x20
mov byte [ebp - 0x4145], al
mov eax, dword [ebp - 0x4160]
add al, 0x18
xor al, 0x6c
mov byte [ebp - 0x4144], al
mov eax, dword [ebp - 0x4160]
add al, 0x19
xor al, 0x69
mov byte [ebp - 0x4143], al
mov eax, dword [ebp - 0x4160]
add al, 0x1a
xor al, 0x73
mov byte [ebp - 0x4142], al
mov eax, dword [ebp - 0x4160]
add al, 0x1b
xor al, 0x74
mov byte [ebp - 0x4141], al
mov eax, dword [ebp - 0x4160]
add al, 0x1c
xor al, 0x65
mov byte [ebp - 0x4140], al
mov eax, dword [ebp - 0x4160]
add al, 0x1d
xor al, 0x73
mov byte [ebp - 0x413f], al
mov eax, dword [ebp - 0x4160]
add al, 0x1e
xor al, 0x69
mov byte [ebp - 0x413e], al
mov eax, dword [ebp - 0x4160]
add al, 0x1f
xor al, 0x20
mov byte [ebp - 0x413d], al
mov eax, dword [ebp - 0x4160]
add al, 0x20
xor al, 0x69
mov byte [ebp - 0x413c], al
mov eax, dword [ebp - 0x4160]
add al, 0x21
xor al, 0x6e
mov byte [ebp - 0x413b], al
mov eax, dword [ebp - 0x4160]
add al, 0x22
xor al, 0x64
mov byte [ebp - 0x413a], al
mov eax, dword [ebp - 0x4160]
add al, 0x23
xor al, 0x69
mov byte [ebp - 0x4139], al
mov eax, dword [ebp - 0x4160]
add al, 0x24
xor al, 0x72
mov byte [ebp - 0x4138], al
mov eax, dword [ebp - 0x4160]
add al, 0x25
xor al, 0x69
mov byte [ebp - 0x4137], al
mov eax, dword [ebp - 0x4160]
add al, 0x26
xor al, 0x6c
mov byte [ebp - 0x4136], al
mov eax, dword [ebp - 0x4160]
add al, 0x27
xor al, 0x69
mov byte [ebp - 0x4135], al
mov eax, dword [ebp - 0x4160]
add al, 0x28
xor al, 0x72
mov byte [ebp - 0x4134], al
mov eax, dword [ebp - 0x4160]
add al, 0x29
xor al, 0x6b
mov byte [ebp - 0x4133], al
mov eax, dword [ebp - 0x4160]
add al, 0x2a
xor al, 0x65
mov byte [ebp - 0x4132], al
mov eax, dword [ebp - 0x4160]
add al, 0x2b
xor al, 0x6e
mov byte [ebp - 0x4131], al
mov eax, dword [ebp - 0x4160]
add al, 0x2c
xor al, 0x20
mov byte [ebp - 0x4130], al
mov eax, dword [ebp - 0x4160]
add al, 0x2d
xor al, 0x62
mov byte [ebp - 0x412f], al
mov eax, dword [ebp - 0x4160]
add al, 0x2e
xor al, 0x69
mov byte [ebp - 0x412e], al
mov eax, dword [ebp - 0x4160]
add al, 0x2f
xor al, 0x72
mov byte [ebp - 0x412d], al
mov eax, dword [ebp - 0x4160]
add al, 0x30
xor al, 0x20
mov byte [ebp - 0x412c], al
mov eax, dword [ebp - 0x4160]
add al, 0x31
xor al, 0x73
mov byte [ebp - 0x412b], al
mov eax, dword [ebp - 0x4160]
add al, 0x32
xor al, 0x6f
mov byte [ebp - 0x412a], al
mov eax, dword [ebp - 0x4160]
add al, 0x33
xor al, 0x72
mov byte [ebp - 0x4129], al
mov eax, dword [ebp - 0x4160]
add al, 0x34
xor al, 0x75
mov byte [ebp - 0x4128], al
mov eax, dword [ebp - 0x4160]
add al, 0x35
xor al, 0x6e
mov byte [ebp - 0x4127], al
mov eax, dword [ebp - 0x4160]
add al, 0x36
xor al, 0x20
mov byte [ebp - 0x4126], al
mov eax, dword [ebp - 0x4160]
add al, 0x37
xor al, 0x6f
mov byte [ebp - 0x4125], al
mov eax, dword [ebp - 0x4160]
add al, 0x38
xor al, 0x6c
mov byte [ebp - 0x4124], al
mov eax, dword [ebp - 0x4160]
add al, 0x39
xor al, 0x75
mov byte [ebp - 0x4123], al
mov eax, dword [ebp - 0x4160]
add al, 0x3a
xor al, 0xfe
mov byte [ebp - 0x4122], al
mov eax, dword [ebp - 0x4160]
add al, 0x3b
xor al, 0x74
mov byte [ebp - 0x4121], al
mov eax, dword [ebp - 0x4160]
add al, 0x3c
xor al, 0x75
mov byte [ebp - 0x4120], al
mov eax, dword [ebp - 0x4160]
add al, 0x3d
xor al, 0x2e
mov byte [ebp - 0x411f], al
mov eax, dword [ebp - 0x4160]
add al, 0x3e
xor al, 0x20
mov byte [ebp - 0x411e], al
mov eax, dword [ebp - 0x4160]
add al, 0x3f
xor al, 0x28
mov byte [ebp - 0x411d], al
mov eax, dword [ebp - 0x4160]
add al, 0x40
xor al, 0x23
mov byte [ebp - 0x411c], al
mov eax, dword [ebp - 0x4160]
add al, 0x41
xor al, 0x32
mov byte [ebp - 0x411b], al
mov eax, dword [ebp - 0x4160]
add al, 0x42
xor al, 0x29
mov byte [ebp - 0x411a], al
mov eax, dword [ebp - 0x4160]
add al, 0x43
xor al, 0x20
mov byte [ebp - 0x4119], al
mov eax, dword [ebp - 0x4160]
add al, 0x44
xor al, 0x28
mov byte [ebp - 0x4118], al
mov eax, dword [ebp - 0x4160]
add al, 0x45
xor al, 0x25
mov byte [ebp - 0x4117], al
mov eax, dword [ebp - 0x4160]
add al, 0x46
xor al, 0x64
mov byte [ebp - 0x4116], al
mov eax, dword [ebp - 0x4160]
add al, 0x47
mov byte [ebp - 0x4114], 0
xor al, 0x29
xor edx, edx
mov byte [ebp - 0x4115], al
mov al, byte [ebp - 0x415c]
nop dword [eax]
mov al, byte [ebp + edx - 0x415c]
mov ecx, dword [ebp - 0x4160]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x415c], cl
inc edx
cmp edx, 0x48
jb 0x10043a00
push esi
lea eax, [ebp - 0x415c]
mov byte [ebp - 0x4114], 0
push eax
push 0xff6961
call fcn.10009160
push 0x10097670
push 0x4000
push 0x1018c630
call fcn.100228e0
add esp, 0x18
xor eax, eax
jmp 0x10043f0b
mov byte [ebp - 0x4224], 0x67
xor ecx, ecx
mov byte [ebp - 0x4223], 0x68
mov byte [ebp - 0x4222], 0x65
mov byte [ebp - 0x4221], 0x78
mov byte [ebp - 0x4220], 0x6a
mov byte [ebp - 0x421f], 0x3d
mov byte [ebp - 0x421e], 0x3d
mov byte [ebp - 0x421d], 0x75
mov byte [ebp - 0x421c], 0x68
mov byte [ebp - 0x421b], 0x64
mov byte [ebp - 0x421a], 0x67
mov byte [ebp - 0x4219], 0x66
mov byte [ebp - 0x4218], 0x6f
mov byte [ebp - 0x4217], 0x68
mov byte [ebp - 0x4216], 0x72
mov byte [ebp - 0x4215], 0x6f
mov byte [ebp - 0x4214], 0x6c
mov byte [ebp - 0x4213], 0x76
mov byte [ebp - 0x4212], 0x77
mov byte [ebp - 0x4211], 0x3d
mov byte [ebp - 0x4210], 0x3d
mov byte [ebp - 0x420f], 0x66
mov byte [ebp - 0x420e], 0x72
mov byte [ebp - 0x420d], 0x71
mov byte [ebp - 0x420c], 0x71
mov byte [ebp - 0x420b], 0x68
mov byte [ebp - 0x420a], 0x66
mov byte [ebp - 0x4209], 0x77
mov byte [ebp - 0x4208], 0x68
mov byte [ebp - 0x4207], 0x67
mov byte [ebp - 0x4206], 0
mov al, byte [ebp - 0x4224]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x4224]
sub al, 3
mov byte [ebp + ecx - 0x4224], al
inc ecx
cmp ecx, 0x1e
jb 0x10043b40
lea eax, [ebp - 0x4224]
push eax
call fcn.100407f0
add esp, 4
mov dword [ebp - 0x42e0], 0
lea ecx, [ebp - 0x4390]
push 1
call fcn.1000ff30
mov edi, dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [ebp - 0x42e0]
mov dword [ebp - 4], 0
nop
push 0
push eax
lea eax, [ebp - 0x4110]
push eax
lea ecx, [ebp - 0x4380]
call fcn.10022250
lea eax, [ebp - 0x42e0]
push eax
push 0x4000
lea eax, [ebp - 0x4110]
push eax
push esi
call edi
mov eax, dword [ebp - 0x42e0]
test eax, eax
jne 0x10043b90
mov dword [ebp - 0x4244], 0x5c
xor edx, edx
mov byte [ebp - 0x4240], 0x38
mov byte [ebp - 0x423f], 0x39
mov byte [ebp - 0x423e], 0x3e
mov byte [ebp - 0x423d], 0x29
mov byte [ebp - 0x423c], 0x3b
mov byte [ebp - 0x423b], 0x66
mov byte [ebp - 0x423a], 0x66
mov byte [ebp - 0x4239], 0x2e
mov byte [ebp - 0x4238], 0x39
mov byte [ebp - 0x4237], 0x3d
mov byte [ebp - 0x4236], 0x38
mov byte [ebp - 0x4235], 0x3f
mov byte [ebp - 0x4234], 0x30
mov byte [ebp - 0x4233], 0x39
mov byte [ebp - 0x4232], 0x33
mov byte [ebp - 0x4231], 0x30
mov byte [ebp - 0x4230], 0x35
mov byte [ebp - 0x422f], 0x2f
mov byte [ebp - 0x422e], 0x28
mov byte [ebp - 0x422d], 0x66
mov byte [ebp - 0x422c], 0x66
mov byte [ebp - 0x422b], 0x2e
mov byte [ebp - 0x422a], 0x39
mov byte [ebp - 0x4229], 0x3d
mov byte [ebp - 0x4228], 0x38
mov byte [ebp - 0x4227], al
mov al, byte [ebp - 0x4240]
nop dword [eax]
mov al, byte [ebp + edx - 0x4240]
mov ecx, dword [ebp - 0x4244]
xor cl, al
mov byte [ebp + edx - 0x4240], cl
inc edx
cmp edx, 0x19
jb 0x10043c90
lea eax, [ebp - 0x4240]
mov byte [ebp - 0x4227], 0
push eax
call fcn.100407f0
add esp, 4
lea eax, [ebp - 0x42dc]
lea ecx, [ebp - 0x4390]
push eax
call fcn.10021cf0
cmp dword [eax + 0x14], 0x10
jb 0x10043cdc
mov eax, dword [eax]
push eax
push 0x10091a18
push 0x4000
push 0x1018c630
call fcn.100228e0
add esp, 0x10
lea ecx, [ebp - 0x42dc]
call fcn.10004fc0
mov dword [ebp - 0x41ec], 0x5e
mov eax, dword [ebp - 0x41ec]
xor al, 0x64
mov byte [ebp - 0x41e8], al
mov eax, dword [ebp - 0x41ec]
inc al
xor al, 0x65
mov byte [ebp - 0x41e7], al
mov eax, dword [ebp - 0x41ec]
add al, 2
xor al, 0x62
mov byte [ebp - 0x41e6], al
mov eax, dword [ebp - 0x41ec]
add al, 3
xor al, 0x75
mov byte [ebp - 0x41e5], al
mov eax, dword [ebp - 0x41ec]
add al, 4
xor al, 0x67
mov byte [ebp - 0x41e4], al
mov eax, dword [ebp - 0x41ec]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x41e3], al
mov eax, dword [ebp - 0x41ec]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x41e2], al
mov eax, dword [ebp - 0x41ec]
add al, 7
xor al, 0x72
mov byte [ebp - 0x41e1], al
mov eax, dword [ebp - 0x41ec]
add al, 8
xor al, 0x65
mov byte [ebp - 0x41e0], al
mov eax, dword [ebp - 0x41ec]
add al, 9
xor al, 0x61
mov byte [ebp - 0x41df], al
mov eax, dword [ebp - 0x41ec]
add al, 0xa
xor al, 0x64
mov byte [ebp - 0x41de], al
mov eax, dword [ebp - 0x41ec]
add al, 0xb
xor al, 0x63
mov byte [ebp - 0x41dd], al
mov eax, dword [ebp - 0x41ec]
add al, 0xc
xor al, 0x6c
mov byte [ebp - 0x41dc], al
mov eax, dword [ebp - 0x41ec]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x41db], al
mov eax, dword [ebp - 0x41ec]
add al, 0xe
xor al, 0x6f
mov byte [ebp - 0x41da], al
mov eax, dword [ebp - 0x41ec]
add al, 0xf
xor al, 0x6c
mov byte [ebp - 0x41d9], al
mov eax, dword [ebp - 0x41ec]
add al, 0x10
xor al, 0x69
mov byte [ebp - 0x41d8], al
mov eax, dword [ebp - 0x41ec]
add al, 0x11
xor al, 0x73
mov byte [ebp - 0x41d7], al
mov eax, dword [ebp - 0x41ec]
add al, 0x12
xor al, 0x74
mov byte [ebp - 0x41d6], al
mov eax, dword [ebp - 0x41ec]
add al, 0x13
xor al, 0x3a
mov byte [ebp - 0x41d5], al
mov eax, dword [ebp - 0x41ec]
add al, 0x14
xor al, 0x3a
mov byte [ebp - 0x41d4], al
mov eax, dword [ebp - 0x41ec]
add al, 0x15
xor al, 0x77
mov byte [ebp - 0x41d3], al
mov eax, dword [ebp - 0x41ec]
add al, 0x16
xor al, 0x72
mov byte [ebp - 0x41d2], al
mov eax, dword [ebp - 0x41ec]
add al, 0x17
xor al, 0x69
mov byte [ebp - 0x41d1], al
mov eax, dword [ebp - 0x41ec]
add al, 0x18
xor al, 0x74
mov byte [ebp - 0x41d0], al
mov eax, dword [ebp - 0x41ec]
add al, 0x19
mov byte [ebp - 0x41ce], 0
xor al, 0x65
xor edx, edx
mov byte [ebp - 0x41cf], al
mov al, byte [ebp - 0x41e8]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x41e8]
mov ecx, dword [ebp - 0x41ec]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x41e8], cl
inc edx
cmp edx, 0x1a
jb 0x10043ec0
lea eax, [ebp - 0x41e8]
mov byte [ebp - 0x41ce], 0
push eax
call fcn.100407f0
add esp, 4
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x4390]
call fcn.10010fd0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10064a7b
mov esp, ebp
pop ebp
ret