Function at 0x100047d0
Capabilities:
Create http request
Execute command
Read data from internet
Receive data
Reference http user-agent string
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x1001c040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0
push 0
push 0
push 0
push str.Mozilla_5.0__Windows__U__Windows_NT_6.3__WOW64__AppleWebKit_534.30__KHTML__like_Gecko__Chrome_52.0.1056.360_Safari_534
mov esi, ecx
call dword [sym.imp.WININET.dll_InternetOpenA]
mov edi, eax
test edi, edi
jne 0x1000483c
push 0x1000ef90
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetOpenA_failed:
push eax
call fcn.1000ed70
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
or eax, 0xffffffff
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10010158
mov esp, ebp
pop ebp
ret
push 0
push 0x80000000
push 0
push 0
push esi
push edi
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov esi, eax
test esi, esi
jne 0x1000489b
push 0x1000ef90
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetOpenUrl_failed:
push eax
call fcn.1000ed70
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
or eax, 0xffffffff
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10010158
mov esp, ebp
pop ebp
ret
push 0x1f4
mov dword [ebp - 0x18], 0xf
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x18]
push eax
push 0xf
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jae 0x10004963
mov byte [ebp + eax - 0x14], 0
lea ecx, [ebp - 0x14]
mov eax, str.Aktif
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100048f7
test dl, dl
je 0x100048f3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100048f7
add eax, 2
add ecx, 2
test dl, dl
jne 0x100048d7
xor eax, eax
jmp 0x100048fc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10004921
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push edi
call esi
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10010158
mov esp, ebp
pop ebp
ret
cmp byte [0x1001d292], 1
jne 0x1000494c
push str.start_C:hwid.txt
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push edi
call esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov byte [0x1001d292], 1
pop esi
call fcn.10010158
mov esp, ebp
pop ebp
ret
call fcn.10010288
int3