Function at 0x10018b20
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Create http request
Encode data using xor
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082741
mov eax, dword fs:[0]
push eax
sub esp, 0x898
mov eax, dword [0x100ad540]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
push 0
push 0
push 0x10085990
mov dword [ebp - 4], 1
call dword [sym.imp.WININET.dll_InternetOpenA]
mov esi, eax
test esi, esi
jne 0x10018d63
mov dword [ebp - 0x6d8], 0x34
xor edx, edx
mov byte [ebp - 0x6d4], 0x75
mov byte [ebp - 0x6d3], 0x5a
mov byte [ebp - 0x6d2], 0x40
mov byte [ebp - 0x6d1], 0x5d
mov byte [ebp - 0x6d0], 0x57
mov byte [ebp - 0x6cf], 0x5c
mov byte [ebp - 0x6ce], 0x51
mov byte [ebp - 0x6cd], 0x55
mov byte [ebp - 0x6cc], 0x40
mov byte [ebp - 0x6cb], 0xe
mov byte [ebp - 0x6ca], 0x4f
mov byte [ebp - 0x6c9], 0x50
mov byte [ebp - 0x6c8], 0x55
mov byte [ebp - 0x6c7], 0x50
mov byte [ebp - 0x6c6], 0x55
mov byte [ebp - 0x6c5], 0x50
mov byte [ebp - 0x6c4], 0x55
mov byte [ebp - 0x6c3], 0x49
mov byte [ebp - 0x6c2], 0x14
mov byte [ebp - 0x6c1], 0x79
mov byte [ebp - 0x6c0], 0x5b
mov byte [ebp - 0x6bf], 0x50
mov byte [ebp - 0x6be], 0xc8
mov byte [ebp - 0x6bd], 0x58
mov byte [ebp - 0x6bc], 0x14
mov byte [ebp - 0x6bb], 0x50
mov byte [ebp - 0x6ba], 0x5b
mov byte [ebp - 0x6b9], 0xc4
mov byte [ebp - 0x6b8], 0x46
mov byte [ebp - 0x6b7], 0x41
mov byte [ebp - 0x6b6], 0x58
mov byte [ebp - 0x6b5], 0x55
mov byte [ebp - 0x6b4], 0x5a
mov byte [ebp - 0x6b3], 0xc9
mov byte [ebp - 0x6b2], 0x46
mov byte [ebp - 0x6b1], 0x5f
mov byte [ebp - 0x6b0], 0x51
mov byte [ebp - 0x6af], 0x5a
mov byte [ebp - 0x6ae], 0x14
mov byte [ebp - 0x6ad], 0x56
mov byte [ebp - 0x6ac], 0x5d
mov byte [ebp - 0x6ab], 0x46
mov byte [ebp - 0x6aa], 0x14
mov byte [ebp - 0x6a9], 0x47
mov byte [ebp - 0x6a8], 0x5b
mov byte [ebp - 0x6a7], 0x46
mov byte [ebp - 0x6a6], 0x41
mov byte [ebp - 0x6a5], 0x5a
mov byte [ebp - 0x6a4], 0x14
mov byte [ebp - 0x6a3], 0x5b
mov byte [ebp - 0x6a2], 0x58
mov byte [ebp - 0x6a1], 0x41
mov byte [ebp - 0x6a0], 0xca
mov byte [ebp - 0x69f], 0x40
mov byte [ebp - 0x69e], 0x41
mov byte [ebp - 0x69d], 0x1a
mov byte [ebp - 0x69c], al
mov al, byte [ebp - 0x6d4]
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x6d4]
mov ecx, dword [ebp - 0x6d8]
xor cl, al
mov byte [ebp + edx - 0x6d4], cl
inc edx
cmp edx, 0x38
jb 0x10018d20
lea eax, [ebp - 0x6d4]
mov byte [ebp - 0x69c], 0
push eax
push 0xff6961
call fcn.10009000
push 7
call fcn.1001fb80
add esp, 0xc
jmp 0x1001a202
cmp dword [ebp + 0x34], 0x10
lea edi, [ebp + 0x20]
cmovae edi, dword [ebp + 0x20]
mov dword [ebp - 0x590], 0x7d
mov eax, dword [ebp - 0x590]
xor al, 0x68
mov byte [ebp - 0x58c], al
mov eax, dword [ebp - 0x590]
inc al
xor al, 0x74
mov byte [ebp - 0x58b], al
mov eax, dword [ebp - 0x590]
add al, 2
xor al, 0x74
mov byte [ebp - 0x58a], al
mov eax, dword [ebp - 0x590]
add al, 3
xor al, 0x70
mov byte [ebp - 0x589], al
mov eax, dword [ebp - 0x590]
add al, 4
xor al, 0x3a
mov byte [ebp - 0x588], al
mov eax, dword [ebp - 0x590]
add al, 5
xor al, 0x2f
mov byte [ebp - 0x587], al
mov eax, dword [ebp - 0x590]
add al, 6
xor al, 0x2f
mov byte [ebp - 0x586], al
mov eax, dword [ebp - 0x590]
add al, 7
xor al, 0x66
mov byte [ebp - 0x585], al
mov eax, dword [ebp - 0x590]
add al, 8
xor al, 0x61
mov byte [ebp - 0x584], al
mov eax, dword [ebp - 0x590]
add al, 9
xor al, 0x73
mov byte [ebp - 0x583], al
mov eax, dword [ebp - 0x590]
add al, 0xa
xor al, 0x74
mov byte [ebp - 0x582], al
mov eax, dword [ebp - 0x590]
add al, 0xb
xor al, 0x2e
mov byte [ebp - 0x581], al
mov eax, dword [ebp - 0x590]
add al, 0xc
xor al, 0x73
mov byte [ebp - 0x580], al
mov eax, dword [ebp - 0x590]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x57f], al
mov eax, dword [ebp - 0x590]
add al, 0xe
xor al, 0x63
mov byte [ebp - 0x57e], al
mov eax, dword [ebp - 0x590]
add al, 0xf
xor al, 0x2d
mov byte [ebp - 0x57d], al
mov eax, dword [ebp - 0x590]
add al, 0x10
xor al, 0x6e
mov byte [ebp - 0x57c], al
mov eax, dword [ebp - 0x590]
add al, 0x11
xor al, 0x69
mov byte [ebp - 0x57b], al
mov eax, dword [ebp - 0x590]
add al, 0x12
xor al, 0x6e
mov byte [ebp - 0x57a], al
mov eax, dword [ebp - 0x590]
add al, 0x13
xor al, 0x65
mov byte [ebp - 0x579], al
mov eax, dword [ebp - 0x590]
add al, 0x14
xor al, 0x2e
mov byte [ebp - 0x578], al
mov eax, dword [ebp - 0x590]
add al, 0x15
xor al, 0x63
mov byte [ebp - 0x577], al
mov eax, dword [ebp - 0x590]
add al, 0x16
xor al, 0x6f
mov byte [ebp - 0x576], al
mov eax, dword [ebp - 0x590]
add al, 0x17
xor al, 0x6d
mov byte [ebp - 0x575], al
mov eax, dword [ebp - 0x590]
add al, 0x18
xor al, 0x2f
mov byte [ebp - 0x574], al
mov eax, dword [ebp - 0x590]
add al, 0x19
xor al, 0x73
mov byte [ebp - 0x573], al
mov eax, dword [ebp - 0x590]
add al, 0x1a
xor al, 0x65
mov byte [ebp - 0x572], al
mov eax, dword [ebp - 0x590]
add al, 0x1b
xor al, 0x63
mov byte [ebp - 0x571], al
mov eax, dword [ebp - 0x590]
add al, 0x1c
xor al, 0x61
mov byte [ebp - 0x570], al
mov eax, dword [ebp - 0x590]
add al, 0x1d
xor al, 0x63
mov byte [ebp - 0x56f], al
mov eax, dword [ebp - 0x590]
add al, 0x1e
xor al, 0x2f
mov byte [ebp - 0x56e], al
mov eax, dword [ebp - 0x590]
add al, 0x1f
xor al, 0x6c
mov byte [ebp - 0x56d], al
mov eax, dword [ebp - 0x590]
add al, 0x20
xor al, 0x6f
mov byte [ebp - 0x56c], al
mov eax, dword [ebp - 0x590]
add al, 0x21
xor al, 0x73
mov byte [ebp - 0x56b], al
mov eax, dword [ebp - 0x590]
add al, 0x22
xor al, 0x6c
mov byte [ebp - 0x56a], al
mov eax, dword [ebp - 0x590]
add al, 0x23
xor al, 0x61
mov byte [ebp - 0x569], al
mov eax, dword [ebp - 0x590]
add al, 0x24
xor al, 0x6e
mov byte [ebp - 0x568], al
mov eax, dword [ebp - 0x590]
add al, 0x25
xor al, 0x64
mov byte [ebp - 0x567], al
mov eax, dword [ebp - 0x590]
add al, 0x26
xor al, 0x2f
mov byte [ebp - 0x566], al
mov eax, dword [ebp - 0x590]
add al, 0x27
xor al, 0x6d
mov byte [ebp - 0x565], al
mov eax, dword [ebp - 0x590]
add al, 0x28
xor al, 0x6f
mov byte [ebp - 0x564], al
mov eax, dword [ebp - 0x590]
add al, 0x29
xor al, 0x64
mov byte [ebp - 0x563], al
mov eax, dword [ebp - 0x590]
add al, 0x2a
xor al, 0x75
mov byte [ebp - 0x562], al
mov eax, dword [ebp - 0x590]
add al, 0x2b
xor al, 0x6c
mov byte [ebp - 0x561], al
mov eax, dword [ebp - 0x590]
add al, 0x2c
xor al, 0x65
mov byte [ebp - 0x560], al
mov eax, dword [ebp - 0x590]
add al, 0x2d
xor al, 0x2e
mov byte [ebp - 0x55f], al
mov eax, dword [ebp - 0x590]
add al, 0x2e
xor al, 0x70
mov byte [ebp - 0x55e], al
mov eax, dword [ebp - 0x590]
add al, 0x2f
xor al, 0x68
mov byte [ebp - 0x55d], al
mov eax, dword [ebp - 0x590]
add al, 0x30
xor al, 0x70
mov byte [ebp - 0x55c], al
mov eax, dword [ebp - 0x590]
add al, 0x31
xor al, 0x3f
mov byte [ebp - 0x55b], al
mov eax, dword [ebp - 0x590]
add al, 0x32
xor al, 0x76
mov byte [ebp - 0x55a], al
mov eax, dword [ebp - 0x590]
add al, 0x33
xor al, 0x61
mov byte [ebp - 0x559], al
mov eax, dword [ebp - 0x590]
add al, 0x34
xor al, 0x6c
mov byte [ebp - 0x558], al
mov eax, dword [ebp - 0x590]
add al, 0x35
xor al, 0x75
mov byte [ebp - 0x557], al
mov eax, dword [ebp - 0x590]
add al, 0x36
xor al, 0x65
mov byte [ebp - 0x556], al
mov eax, dword [ebp - 0x590]
add al, 0x37
xor al, 0x3d
mov byte [ebp - 0x555], al
mov eax, dword [ebp - 0x590]
add al, 0x38
xor al, 0x25
mov byte [ebp - 0x554], al
mov eax, dword [ebp - 0x590]
add al, 0x39
mov byte [ebp - 0x552], 0
xor al, 0x73
xor edx, edx
mov byte [ebp - 0x553], al
mov al, byte [ebp - 0x58c]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x58c]
mov ecx, dword [ebp - 0x590]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x58c], cl
inc edx
cmp edx, 0x3a
jb 0x10019130
push edi
lea eax, [ebp - 0x58c]
mov byte [ebp - 0x552], 0
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.1000eab0
add esp, 0xc
lea eax, [ebp - 0x150]
push 0
push 0
push 0
push 0
push eax
push esi
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov edi, eax
test edi, edi
jne 0x1001938e
mov dword [ebp - 0x774], 0x51
xor edx, edx
mov byte [ebp - 0x770], 0x10
mov byte [ebp - 0x76f], 0x3f
mov byte [ebp - 0x76e], 0x25
mov byte [ebp - 0x76d], 0x38
mov byte [ebp - 0x76c], 0x32
mov byte [ebp - 0x76b], 0x39
mov byte [ebp - 0x76a], 0x34
mov byte [ebp - 0x769], 0x30
mov byte [ebp - 0x768], 0x25
mov byte [ebp - 0x767], 0x6b
mov byte [ebp - 0x766], 0x2a
mov byte [ebp - 0x765], 0x35
mov byte [ebp - 0x764], 0x30
mov byte [ebp - 0x763], 0x35
mov byte [ebp - 0x762], 0x30
mov byte [ebp - 0x761], 0x35
mov byte [ebp - 0x760], 0x30
mov byte [ebp - 0x75f], 0x2c
mov byte [ebp - 0x75e], 0x71
mov byte [ebp - 0x75d], 0x1c
mov byte [ebp - 0x75c], 0x3e
mov byte [ebp - 0x75b], 0x35
mov byte [ebp - 0x75a], 0xad
mov byte [ebp - 0x759], 0x3d
mov byte [ebp - 0x758], 0x71
mov byte [ebp - 0x757], 0x35
mov byte [ebp - 0x756], 0x3e
mov byte [ebp - 0x755], 0xa1
mov byte [ebp - 0x754], 0x23
mov byte [ebp - 0x753], 0x24
mov byte [ebp - 0x752], 0x3d
mov byte [ebp - 0x751], 0x30
mov byte [ebp - 0x750], 0x3f
mov byte [ebp - 0x74f], 0xac
mov byte [ebp - 0x74e], 0x23
mov byte [ebp - 0x74d], 0x3a
mov byte [ebp - 0x74c], 0x34
mov byte [ebp - 0x74b], 0x3f
mov byte [ebp - 0x74a], 0x71
mov byte [ebp - 0x749], 0x33
mov byte [ebp - 0x748], 0x38
mov byte [ebp - 0x747], 0x23
mov byte [ebp - 0x746], 0x71
mov byte [ebp - 0x745], 0x22
mov byte [ebp - 0x744], 0x3e
mov byte [ebp - 0x743], 0x23
mov byte [ebp - 0x742], 0x24
mov byte [ebp - 0x741], 0x3f
mov byte [ebp - 0x740], 0x71
mov byte [ebp - 0x73f], 0x3e
mov byte [ebp - 0x73e], 0x3d
mov byte [ebp - 0x73d], 0x24
mov byte [ebp - 0x73c], 0xaf
mov byte [ebp - 0x73b], 0x25
mov byte [ebp - 0x73a], 0x24
mov byte [ebp - 0x739], 0x7f
mov byte [ebp - 0x738], 0x71
mov byte [ebp - 0x737], 0x79
mov byte [ebp - 0x736], 0x72
mov byte [ebp - 0x735], 0x63
mov byte [ebp - 0x734], 0x78
mov byte [ebp - 0x733], al
mov al, byte [ebp - 0x770]
nop
mov al, byte [ebp + edx - 0x770]
mov ecx, dword [ebp - 0x774]
xor cl, al
mov byte [ebp + edx - 0x770], cl
inc edx
cmp edx, 0x3d
jb 0x10019350
lea eax, [ebp - 0x770]
mov byte [ebp - 0x733], 0
push eax
push 0xff6961
call fcn.10009000
push 7
call fcn.1001fb80
add esp, 0xc
mov dword [ebp - 0x5b4], 0x73
mov eax, dword [ebp - 0x5b4]
xor al, 0x64
mov byte [ebp - 0x5b0], al
mov eax, dword [ebp - 0x5b4]
inc al
xor al, 0x65
mov byte [ebp - 0x5af], al
mov eax, dword [ebp - 0x5b4]
add al, 2
xor al, 0x62
mov byte [ebp - 0x5ae], al
mov eax, dword [ebp - 0x5b4]
add al, 3
xor al, 0x75
mov byte [ebp - 0x5ad], al
mov eax, dword [ebp - 0x5b4]
add al, 4
xor al, 0x67
mov byte [ebp - 0x5ac], al
mov eax, dword [ebp - 0x5b4]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x5ab], al
mov eax, dword [ebp - 0x5b4]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x5aa], al
mov eax, dword [ebp - 0x5b4]
add al, 7
xor al, 0x76
mov byte [ebp - 0x5a9], al
mov eax, dword [ebp - 0x5b4]
add al, 8
xor al, 0x61
mov byte [ebp - 0x5a8], al
mov eax, dword [ebp - 0x5b4]
add al, 9
xor al, 0x6c
mov byte [ebp - 0x5a7], al
mov eax, dword [ebp - 0x5b4]
add al, 0xa
xor al, 0x69
mov byte [ebp - 0x5a6], al
mov eax, dword [ebp - 0x5b4]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x5a5], al
mov eax, dword [ebp - 0x5b4]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x5a4], al
mov eax, dword [ebp - 0x5b4]
add al, 0xd
xor al, 0x74
mov byte [ebp - 0x5a3], al
mov eax, dword [ebp - 0x5b4]
add al, 0xe
xor al, 0x65
mov byte [ebp - 0x5a2], al
mov eax, dword [ebp - 0x5b4]
add al, 0xf
xor al, 0x6d
mov byte [ebp - 0x5a1], al
mov eax, dword [ebp - 0x5b4]
add al, 0x10
xor al, 0x6f
mov byte [ebp - 0x5a0], al
mov eax, dword [ebp - 0x5b4]
add al, 0x11
xor al, 0x64
mov byte [ebp - 0x59f], al
mov eax, dword [ebp - 0x5b4]
add al, 0x12
xor al, 0x75
mov byte [ebp - 0x59e], al
mov eax, dword [ebp - 0x5b4]
add al, 0x13
xor al, 0x6c
mov byte [ebp - 0x59d], al
mov eax, dword [ebp - 0x5b4]
add al, 0x14
xor al, 0x65
mov byte [ebp - 0x59c], al
mov eax, dword [ebp - 0x5b4]
add al, 0x15
xor al, 0x3a
mov byte [ebp - 0x59b], al
mov eax, dword [ebp - 0x5b4]
add al, 0x16
xor al, 0x3a
mov byte [ebp - 0x59a], al
mov eax, dword [ebp - 0x5b4]
add al, 0x17
xor al, 0x63
mov byte [ebp - 0x599], al
mov eax, dword [ebp - 0x5b4]
add al, 0x18
xor al, 0x6f
mov byte [ebp - 0x598], al
mov eax, dword [ebp - 0x5b4]
add al, 0x19
xor al, 0x6e
mov byte [ebp - 0x597], al
mov eax, dword [ebp - 0x5b4]
add al, 0x1a
xor al, 0x6e
mov byte [ebp - 0x596], al
mov eax, dword [ebp - 0x5b4]
add al, 0x1b
xor al, 0x65
mov byte [ebp - 0x595], al
mov eax, dword [ebp - 0x5b4]
add al, 0x1c
xor al, 0x63
mov byte [ebp - 0x594], al
mov eax, dword [ebp - 0x5b4]
add al, 0x1d
mov byte [ebp - 0x592], 0
xor al, 0x74
xor edx, edx
mov byte [ebp - 0x593], al
mov al, byte [ebp - 0x5b0]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x5b0]
mov ecx, dword [ebp - 0x5b4]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x5b0], cl
inc edx
cmp edx, 0x1e
jb 0x10019590
lea eax, [ebp - 0x5b0]
mov byte [ebp - 0x592], 0
push eax
call fcn.1003e150
add esp, 4
mov dword [ebp - 0x7f0], 0
lea ecx, [ebp - 0x8a4]
push 1
call fcn.1000f660
mov ebx, dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [ebp - 0x7f0]
mov byte [ebp - 4], 2
nop dword [eax + eax]
push 0
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x894]
call fcn.10024d70
lea eax, [ebp - 0x7f0]
push eax
push 0x40
lea eax, [ebp - 0x50]
push eax
push edi
call ebx
mov eax, dword [ebp - 0x7f0]
test eax, eax
jne 0x100195f0
mov byte [ebp - 0x5e8], 0x65
xor ecx, ecx
mov byte [ebp - 0x5e7], 0x66
mov byte [ebp - 0x5e6], 0x63
mov byte [ebp - 0x5e5], 0x76
mov byte [ebp - 0x5e4], 0x68
mov byte [ebp - 0x5e3], 0x3b
mov byte [ebp - 0x5e2], 0x3b
mov byte [ebp - 0x5e1], 0x77
mov byte [ebp - 0x5e0], 0x62
mov byte [ebp - 0x5df], 0x6d
mov byte [ebp - 0x5de], 0x6a
mov byte [ebp - 0x5dd], 0x65
mov byte [ebp - 0x5dc], 0x62
mov byte [ebp - 0x5db], 0x75
mov byte [ebp - 0x5da], 0x66
mov byte [ebp - 0x5d9], 0x6e
mov byte [ebp - 0x5d8], 0x70
mov byte [ebp - 0x5d7], 0x65
mov byte [ebp - 0x5d6], 0x76
mov byte [ebp - 0x5d5], 0x6d
mov byte [ebp - 0x5d4], 0x66
mov byte [ebp - 0x5d3], 0x3b
mov byte [ebp - 0x5d2], 0x3b
mov byte [ebp - 0x5d1], 0x73
mov byte [ebp - 0x5d0], 0x66
mov byte [ebp - 0x5cf], 0x6d
mov byte [ebp - 0x5ce], 0x66
mov byte [ebp - 0x5cd], 0x62
mov byte [ebp - 0x5cc], 0x74
mov byte [ebp - 0x5cb], 0x66
mov byte [ebp - 0x5ca], al
mov al, byte [ebp - 0x5e8]
nop dword [eax]
mov al, byte [ebp + ecx - 0x5e8]
dec al
mov byte [ebp + ecx - 0x5e8], al
inc ecx
cmp ecx, 0x1e
jb 0x10019700
lea eax, [ebp - 0x5e8]
push eax
call fcn.1003e150
add esp, 4
lea eax, [ebp - 0x7bc]
lea ecx, [ebp - 0x8a4]
push eax
call fcn.100247b0
cmp dword [ebp - 0x7ac], 2
mov byte [ebp - 4], 3
je 0x1001a09f
cmp dword [ebp + 0x34], 0x10
lea edi, [ebp + 0x20]
lea ebx, [ebp + 8]
cmovae edi, dword [ebp + 0x20]
cmp dword [ebp + 0x1c], 0x10
cmovae ebx, dword [ebp + 8]
mov dword [ebp - 0x5c8], 0x5f
mov eax, dword [ebp - 0x5c8]
xor al, 0x64
mov byte [ebp - 0x5c4], al
mov eax, dword [ebp - 0x5c8]
inc al
xor al, 0x65
mov byte [ebp - 0x5c3], al
mov eax, dword [ebp - 0x5c8]
add al, 2
xor al, 0x62
mov byte [ebp - 0x5c2], al
mov eax, dword [ebp - 0x5c8]
add al, 3
xor al, 0x75
mov byte [ebp - 0x5c1], al
mov eax, dword [ebp - 0x5c8]
add al, 4
xor al, 0x67
mov byte [ebp - 0x5c0], al
mov eax, dword [ebp - 0x5c8]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x5bf], al
mov eax, dword [ebp - 0x5c8]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x5be], al
mov eax, dword [ebp - 0x5c8]
add al, 7
xor al, 0x25
mov byte [ebp - 0x5bd], al
mov eax, dword [ebp - 0x5c8]
add al, 8
xor al, 0x73
mov byte [ebp - 0x5bc], al
mov eax, dword [ebp - 0x5c8]
add al, 9
xor al, 0x3a
mov byte [ebp - 0x5bb], al
mov eax, dword [ebp - 0x5c8]
add al, 0xa
xor al, 0x3a
mov byte [ebp - 0x5ba], al
mov eax, dword [ebp - 0x5c8]
add al, 0xb
xor al, 0x25
mov byte [ebp - 0x5b9], al
mov eax, dword [ebp - 0x5c8]
add al, 0xc
mov byte [ebp - 0x5b7], 0
xor al, 0x73
xor edx, edx
mov byte [ebp - 0x5b8], al
mov al, byte [ebp - 0x5c4]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x5c4]
mov ecx, dword [ebp - 0x5c8]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x5c4], cl
inc edx
cmp edx, 0xd
jb 0x10019850
push edi
lea eax, [ebp - 0x5c4]
mov byte [ebp - 0x5b7], 0
push ebx
push eax
call fcn.1003e150
add esp, 0xc
cmp dword [ebp - 0x7ac], 3
jne 0x10019db7
cmp dword [ebp + 0x1c], 0x10
lea edi, [ebp + 8]
mov byte [ebp - 0x660], 0
cmovae edi, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0x698], 0x3f
mov byte [ebp - 0x694], 0x7e
mov byte [ebp - 0x693], 0x51
mov byte [ebp - 0x692], 0x4b
mov byte [ebp - 0x691], 0x56
mov byte [ebp - 0x690], 0x5c
mov byte [ebp - 0x68f], 0x57
mov byte [ebp - 0x68e], 0x5a
mov byte [ebp - 0x68d], 0x5e
mov byte [ebp - 0x68c], 0x4b
mov byte [ebp - 0x68b], 5
mov byte [ebp - 0x68a], 0x44
mov byte [ebp - 0x689], 0x5b
mov byte [ebp - 0x688], 0x5e
mov byte [ebp - 0x687], 0x5b
mov byte [ebp - 0x686], 0x5e
mov byte [ebp - 0x685], 0x5b
mov byte [ebp - 0x684], 0x5e
mov byte [ebp - 0x683], 0x42
mov byte [ebp - 0x682], 0x1f
mov byte [ebp - 0x681], 0xe2
mov byte [ebp - 0x680], 0x45
mov byte [ebp - 0x67f], 0x56
mov byte [ebp - 0x67e], 0x51
mov byte [ebp - 0x67d], 0x4c
mov byte [ebp - 0x67c], 0x56
mov byte [ebp - 0x67b], 0x45
mov byte [ebp - 0x67a], 0x1f
mov byte [ebp - 0x679], 0x52
mov byte [ebp - 0x678], 0x50
mov byte [ebp - 0x677], 0x5b
mov byte [ebp - 0x676], 0xc3
mov byte [ebp - 0x675], 0x53
mov byte [ebp - 0x674], 0x1f
mov byte [ebp - 0x673], 0x4b
mov byte [ebp - 0x672], 0x5a
mov byte [ebp - 0x671], 0x4c
mov byte [ebp - 0x670], 0x4f
mov byte [ebp - 0x66f], 0x56
mov byte [ebp - 0x66e], 0x4b
mov byte [ebp - 0x66d], 0x1f
mov byte [ebp - 0x66c], 0x5a
mov byte [ebp - 0x66b], 0x5b
mov byte [ebp - 0x66a], 0x56
mov byte [ebp - 0x669], 0x53
mov byte [ebp - 0x668], 0x5b
mov byte [ebp - 0x667], 0x56
mov byte [ebp - 0x666], 0x11
mov byte [ebp - 0x665], 0x1f
mov byte [ebp - 0x664], 0x17
mov byte [ebp - 0x663], 0x1a
mov byte [ebp - 0x662], 0x4c
mov byte [ebp - 0x661], 0x16
mov al, byte [ebp - 0x694]
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x694]
mov ecx, dword [ebp - 0x698]
xor cl, al
mov byte [ebp + edx - 0x694], cl
inc edx
cmp edx, 0x34
jb 0x10019a30
push edi
lea eax, [ebp - 0x694]
mov byte [ebp - 0x660], 0
push eax
push 0xff6961
call fcn.10009000
push 2
call fcn.1001fb80
mov eax, dword [0x100b12cc]
lea ecx, [ebp - 0x78c]
add esp, 0x10
mov eax, dword [eax + 0x3de]
mov eax, dword [eax + 8]
add eax, 6
push eax
call fcn.10004c80
push 1
push 0x10085998
lea ecx, [ebp - 0x78c]
mov byte [ebp - 4], 4
call fcn.100216e0
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
push dword [ebp + 0x18]
cmovae eax, dword [ebp + 8]
lea ecx, [ebp - 0x78c]
push eax
call fcn.100216e0
cmp dword [ebp + 0x34], 0x10
lea edi, [ebp + 0x20]
lea eax, [ebp - 0x78c]
cmovae edi, dword [ebp + 0x20]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10004c80
lea eax, [ebp - 0x7d4]
push eax
call fcn.100536c0
mov edx, eax
add esp, 0x1c
cmp dword [edx + 0x14], 0x10
jb 0x10019af1
mov edx, dword [edx]
mov byte [ebp - 0x730], 0x6d
mov byte [ebp - 0x72f], 0x79
mov byte [ebp - 0x72e], 0x79
mov byte [ebp - 0x72d], 0x75
mov byte [ebp - 0x72c], 0x3f
mov byte [ebp - 0x72b], 0x34
mov byte [ebp - 0x72a], 0x34
mov byte [ebp - 0x729], 0x6b
mov byte [ebp - 0x728], 0x66
mov byte [ebp - 0x727], 0x78
mov byte [ebp - 0x726], 0x79
mov byte [ebp - 0x725], 0x33
mov byte [ebp - 0x724], 0x78
mov byte [ebp - 0x723], 0x6a
mov byte [ebp - 0x722], 0x68
mov byte [ebp - 0x721], 0x32
mov byte [ebp - 0x720], 0x73
mov byte [ebp - 0x71f], 0x6e
mov byte [ebp - 0x71e], 0x73
mov byte [ebp - 0x71d], 0x6a
mov byte [ebp - 0x71c], 0x33
mov byte [ebp - 0x71b], 0x68
mov byte [ebp - 0x71a], 0x74
mov byte [ebp - 0x719], 0x72
mov byte [ebp - 0x718], 0x34
mov byte [ebp - 0x717], 0x78
mov byte [ebp - 0x716], 0x6a
mov byte [ebp - 0x715], 0x68
mov byte [ebp - 0x714], 0x66
mov byte [ebp - 0x713], 0x68
mov byte [ebp - 0x712], 0x34
mov byte [ebp - 0x711], 0x71
mov byte [ebp - 0x710], 0x74
mov byte [ebp - 0x70f], 0x78
mov byte [ebp - 0x70e], 0x71
mov byte [ebp - 0x70d], 0x66
mov byte [ebp - 0x70c], 0x73
mov byte [ebp - 0x70b], 0x69
mov byte [ebp - 0x70a], 0x34
mov byte [ebp - 0x709], 0x72
mov byte [ebp - 0x708], 0x74
mov byte [ebp - 0x707], 0x69
mov byte [ebp - 0x706], 0x7a
mov byte [ebp - 0x705], 0x71
mov byte [ebp - 0x704], 0x6a
mov byte [ebp - 0x703], 0x77
mov byte [ebp - 0x702], 0x6a
mov byte [ebp - 0x701], 0x75
mov byte [ebp - 0x700], 0x74
mov byte [ebp - 0x6ff], 0x77
mov byte [ebp - 0x6fe], 0x79
mov byte [ebp - 0x6fd], 0x33
mov byte [ebp - 0x6fc], 0x75
mov byte [ebp - 0x6fb], 0x6d
mov byte [ebp - 0x6fa], 0x75
mov byte [ebp - 0x6f9], 0x44
mov byte [ebp - 0x6f8], 0x7b
mov byte [ebp - 0x6f7], 0x66
mov byte [ebp - 0x6f6], 0x71
mov byte [ebp - 0x6f5], 0x7a
mov byte [ebp - 0x6f4], 0x6a
mov byte [ebp - 0x6f3], 0x42
mov byte [ebp - 0x6f2], 0x2a
mov byte [ebp - 0x6f1], 0x78
mov byte [ebp - 0x6f0], 0x2b
mov byte [ebp - 0x6ef], 0x6d
mov byte [ebp - 0x6ee], 0x66
mov byte [ebp - 0x6ed], 0x78
mov byte [ebp - 0x6ec], 0x6d
mov byte [ebp - 0x6eb], 0x42
mov byte [ebp - 0x6ea], 0x2a
mov byte [ebp - 0x6e9], 0x78
mov byte [ebp - 0x6e8], 0x2b
mov byte [ebp - 0x6e7], 0x67
mov byte [ebp - 0x6e6], 0x71
mov byte [ebp - 0x6e5], 0x66
mov byte [ebp - 0x6e4], 0x68
mov byte [ebp - 0x6e3], 0x70
mov byte [ebp - 0x6e2], 0x71
mov byte [ebp - 0x6e1], 0x6e
mov byte [ebp - 0x6e0], 0x78
mov byte [ebp - 0x6df], 0x79
xor ecx, ecx
mov byte [ebp - 0x6de], 0x42
mov byte [ebp - 0x6dd], 0x36
mov byte [ebp - 0x6dc], 0
mov al, byte [ebp - 0x730]
nop dword [eax]
mov al, byte [ebp + ecx - 0x730]
sub al, 5
mov byte [ebp + ecx - 0x730], al
inc ecx
cmp ecx, 0x54
jb 0x10019d50
push edi
push edx
lea eax, [ebp - 0x730]
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.1000ea80
add esp, 0x10
lea ecx, [ebp - 0x7d4]
call fcn.10004e50
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x350]
push eax
mov eax, dword [sym.imp.WININET.dll_InternetOpenUrlA]
push esi
call eax
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x78c]
call fcn.10004e50
jmp 0x1001a1ec
mov eax, dword [0x100b12cc]
lea ecx, [ebp - 0x7a4]
mov eax, dword [eax + 0x3de]
mov eax, dword [eax + 8]
add eax, 6
push eax
call fcn.10004c80
push 1
push 0x10085998
lea ecx, [ebp - 0x7a4]
mov byte [ebp - 4], 5
call fcn.100216e0
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
push dword [ebp + 0x18]
cmovae eax, dword [ebp + 8]
lea ecx, [ebp - 0x7a4]
push eax
call fcn.100216e0
cmp dword [ebp + 0x34], 0x10
lea edi, [ebp + 0x20]
lea eax, [ebp - 0x7a4]
cmovae edi, dword [ebp + 0x20]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10004c80
lea eax, [ebp - 0x7ec]
push eax
call fcn.100536c0
mov edx, eax
add esp, 0x1c
cmp dword [edx + 0x14], 0x10
jb 0x10019e39
mov edx, dword [edx]
mov byte [ebp - 0x65c], 0x6e
xor ecx, ecx
mov byte [ebp - 0x65b], 0x7a
mov byte [ebp - 0x65a], 0x7a
mov byte [ebp - 0x659], 0x76
mov byte [ebp - 0x658], 0x40
mov byte [ebp - 0x657], 0x35
mov byte [ebp - 0x656], 0x35
mov byte [ebp - 0x655], 0x6c
mov byte [ebp - 0x654], 0x67
mov byte [ebp - 0x653], 0x79
mov byte [ebp - 0x652], 0x7a
mov byte [ebp - 0x651], 0x34
mov byte [ebp - 0x650], 0x79
mov byte [ebp - 0x64f], 0x6b
mov byte [ebp - 0x64e], 0x69
mov byte [ebp - 0x64d], 0x33
mov byte [ebp - 0x64c], 0x74
mov byte [ebp - 0x64b], 0x6f
mov byte [ebp - 0x64a], 0x74
mov byte [ebp - 0x649], 0x6b
mov byte [ebp - 0x648], 0x34
mov byte [ebp - 0x647], 0x69
mov byte [ebp - 0x646], 0x75
mov byte [ebp - 0x645], 0x73
mov byte [ebp - 0x644], 0x35
mov byte [ebp - 0x643], 0x79
mov byte [ebp - 0x642], 0x6b
mov byte [ebp - 0x641], 0x69
mov byte [ebp - 0x640], 0x67
mov byte [ebp - 0x63f], 0x69
mov byte [ebp - 0x63e], 0x35
mov byte [ebp - 0x63d], 0x72
mov byte [ebp - 0x63c], 0x75
mov byte [ebp - 0x63b], 0x79
mov byte [ebp - 0x63a], 0x72
mov byte [ebp - 0x639], 0x67
mov byte [ebp - 0x638], 0x74
mov byte [ebp - 0x637], 0x6a
mov byte [ebp - 0x636], 0x35
mov byte [ebp - 0x635], 0x73
mov byte [ebp - 0x634], 0x75
mov byte [ebp - 0x633], 0x6a
mov byte [ebp - 0x632], 0x7b
mov byte [ebp - 0x631], 0x72
mov byte [ebp - 0x630], 0x6b
mov byte [ebp - 0x62f], 0x78
mov byte [ebp - 0x62e], 0x6b
mov byte [ebp - 0x62d], 0x76
mov byte [ebp - 0x62c], 0x75
mov byte [ebp - 0x62b], 0x78
mov byte [ebp - 0x62a], 0x7a
mov byte [ebp - 0x629], 0x34
mov byte [ebp - 0x628], 0x76
mov byte [ebp - 0x627], 0x6e
mov byte [ebp - 0x626], 0x76
mov byte [ebp - 0x625], 0x45
mov byte [ebp - 0x624], 0x7c
mov byte [ebp - 0x623], 0x67
mov byte [ebp - 0x622], 0x72
mov byte [ebp - 0x621], 0x7b
mov byte [ebp - 0x620], 0x6b
mov byte [ebp - 0x61f], 0x43
mov byte [ebp - 0x61e], 0x2b
mov byte [ebp - 0x61d], 0x79
mov byte [ebp - 0x61c], 0x2c
mov byte [ebp - 0x61b], 0x6e
mov byte [ebp - 0x61a], 0x67
mov byte [ebp - 0x619], 0x79
mov byte [ebp - 0x618], 0x6e
mov byte [ebp - 0x617], 0x43
mov byte [ebp - 0x616], 0x2b
mov byte [ebp - 0x615], 0x79
mov byte [ebp - 0x614], 0
mov al, byte [ebp - 0x65c]
mov al, byte [ebp + ecx - 0x65c]
sub al, 6
mov byte [ebp + ecx - 0x65c], al
inc ecx
cmp ecx, 0x48
jb 0x1001a040
push edi
push edx
lea eax, [ebp - 0x65c]
push eax
lea eax, [ebp - 0x550]
push eax
call fcn.1000ea80
add esp, 0x10
lea ecx, [ebp - 0x7ec]
call fcn.10004e50
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x550]
push eax
mov eax, dword [sym.imp.WININET.dll_InternetOpenUrlA]
push esi
call eax
lea ecx, [ebp - 0x7a4]
mov byte [ebp - 4], 3
call fcn.10004e50
mov byte [ebp - 0x610], 0x66
xor ecx, ecx
mov byte [ebp - 0x60f], 0x67
mov byte [ebp - 0x60e], 0x64
mov byte [ebp - 0x60d], 0x77
mov byte [ebp - 0x60c], 0x69
mov byte [ebp - 0x60b], 0x3c
mov byte [ebp - 0x60a], 0x3c
mov byte [ebp - 0x609], 0x78
mov byte [ebp - 0x608], 0x63
mov byte [ebp - 0x607], 0x6e
mov byte [ebp - 0x606], 0x6b
mov byte [ebp - 0x605], 0x66
mov byte [ebp - 0x604], 0x63
mov byte [ebp - 0x603], 0x76
mov byte [ebp - 0x602], 0x67
mov byte [ebp - 0x601], 0x6f
mov byte [ebp - 0x600], 0x71
mov byte [ebp - 0x5ff], 0x66
mov byte [ebp - 0x5fe], 0x77
mov byte [ebp - 0x5fd], 0x6e
mov byte [ebp - 0x5fc], 0x67
mov byte [ebp - 0x5fb], 0x3c
mov byte [ebp - 0x5fa], 0x3c
mov byte [ebp - 0x5f9], 0x74
mov byte [ebp - 0x5f8], 0x67
mov byte [ebp - 0x5f7], 0x6e
mov byte [ebp - 0x5f6], 0x67
mov byte [ebp - 0x5f5], 0x63
mov byte [ebp - 0x5f4], 0x75
mov byte [ebp - 0x5f3], 0x67
mov byte [ebp - 0x5f2], 0x3c
mov byte [ebp - 0x5f1], 0x3c
mov byte [ebp - 0x5f0], 0x75
mov byte [ebp - 0x5ef], 0x77
mov byte [ebp - 0x5ee], 0x65
mov byte [ebp - 0x5ed], 0x65
mov byte [ebp - 0x5ec], 0x67
mov byte [ebp - 0x5eb], 0x75
mov byte [ebp - 0x5ea], 0x75
mov byte [ebp - 0x5e9], 0
mov al, byte [ebp - 0x610]
nop
mov al, byte [ebp + ecx - 0x610]
sub al, 2
mov byte [ebp + ecx - 0x610], al
inc ecx
cmp ecx, 0x27
jb 0x1001a1c0
lea eax, [ebp - 0x610]
push eax
call fcn.1003e150
add esp, 4
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x7bc]
call fcn.10004e50
lea ecx, [ebp - 0x8a4]
call fcn.10010fd0
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x10
jb 0x1001a232
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001a228
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001a290
push ecx
push edx
call fcn.10058fe2
add esp, 8
mov ecx, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 0xf
mov byte [ebp + 8], 0
cmp ecx, 0x10
jb 0x1001a274
mov edx, dword [ebp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001a26a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001a290
push ecx
push edx
call fcn.10058fe2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10058f9b
mov esp, ebp
pop ebp
ret
call fcn.1005e201
int3