Function at 0x6617be
Capabilities:
Authenticate hmac
Check http status code
Encode data using base64
Execute anti-debugging instructions
Parse pe header
Write file on windows

Disassembly:
mov word [ebp - 0x1daa], ax
sal ecx, cl
mov ecx, 0x56
shl eax, cl
mov word [ebp - 0x1da8], cx
movzx edx, dx
mov edx, 0x65
bsr eax, ebx
rol cx, 0x3f
mov word [ebp - 0x1da6], dx
inc ecx
mov eax, 0x72
dec cl
sub cl, bl
movzx ecx, cx
mov word [ebp - 0x1da4], ax
rcl ax, cl
mov ecx, 0x73
shl ah, cl
adc ax, di
mov word [ebp - 0x1da2], cx
clc
btc dx, 0x61
mov edx, 0x69
mov word [ebp - 0x1da0], dx
cmp edx, 0x2e1d7854
and dx, bp
mov eax, 0x6f
cmp dh, 0x19
bsf edx, esi
mov word [ebp - 0x1d9e], ax
rcl cx, 0x7c
xor al, 0x2c
mov ecx, 0x6e
mov word [ebp - 0x1d9c], cx
rol ah, cl
mov edx, 0x2f
bts ax, cx
adc ah, al
mov word [ebp - 0x1d9a], dx
bsf edx, esp
add cx, dx
mov eax, 0x31
add cx, 0xdaf
shr ecx, 0xb0
jmp 0x183d801
push eax
call fcn.00473d70
add esp, 0xc
and al, bl
mov ecx, 0x4f
and dl, 0x58
rol al, cl
sub ax, sp
mov word [ebp - 0x1c20], cx
mov edx, 0x70
sbb cl, 0xbd
cmp sp, cx
mov word [ebp - 0x1c1e], dx
mov eax, 0x65
mov word [ebp - 0x1c1c], ax
mov ecx, 0x72
btr eax, 0x56
mov word [ebp - 0x1c1a], cx
adc al, ah
mov edx, 0x61
bswap eax
ror ax, cl
mov word [ebp - 0x1c18], dx
ror dl, cl
mov eax, 0x2f
mov word [ebp - 0x1c16], ax
bts dx, si
sub cx, si
mov ecx, 0x39
bswap edx
and al, 0x81
rol al, 0x4f
mov word [ebp - 0x1c14], cx
sal ch, cl
mov al, bh
sub ch, ch
mov edx, 0x2e
bts ax, bp
xadd cx, ax
mov word [ebp - 0x1c12], dx
ror dh, 0x15
mov eax, 0x36
mov cx, di
mov word [ebp - 0x1c10], ax
rcr al, cl
add eax, edx
mov ecx, 0x30
xadd edx, eax
inc ax
btc ax, 0x53
mov word [ebp - 0x1c0e], cx
mov edx, 0x20
btc cx, 0xf7
sar ecx, cl
bts eax, edx
mov word [ebp - 0x1c0c], dx
mov eax, 0x28
mov word [ebp - 0x1c0a], ax
mov ecx, 0x57
mov word [ebp - 0x1c08], cx
shl al, cl
adc dl, ah
mov edx, 0x69
xchg cx, ax
rcl ax, cl
rcl cx, 0x9e
mov word [ebp - 0x1c06], dx
mov eax, 0x6e
mov word [ebp - 0x1c04], ax
neg dl
xadd eax, eax
mov ecx, 0x64
sbb ah, ah
mov word [ebp - 0x1c02], cx
mov edx, 0x6f
sub ax, 0x47ec
btr ax, 0x47
rcl al, cl
mov word [ebp - 0x1c00], dx
or edx, esi
sub ah, 0xb4
mov eax, 0x77
shr dl, 0xb0
not ch
mov word [ebp - 0x1bfe], ax
rol al, cl
sub dx, 0x43aa
btc ecx, ecx
mov ecx, 0x73
mov word [ebp - 0x1bfc], cx
bsf cx, si
add dl, 0x8c
xor eax, 0x3e801cc0
mov edx, 0x20
shr ax, cl
mov word [ebp - 0x1bfa], dx
shr cx, 0x4a
neg ax
mov eax, 0x4e
mov word [ebp - 0x1bf8], ax
mov ecx, 0x54
mov word [ebp - 0x1bf6], cx
xor eax, 0x4bf24faf
mov word [ebp - 0x1bf4], dx
sar ecx, 0x43
cwd
mov eax, 0x36
dec dx
bts dx, bx
xor dl, al
mov word [ebp - 0x1bf2], ax
bsf dx, di
btr edx, 0x46
test bx, di
mov ecx, 0x2e
sal dx, cl
mov word [ebp - 0x1bf0], cx
or cx, 0x2f7e
add ch, al
add cx, 0x6375
mov edx, 0x30
mov word [ebp - 0x1bee], dx
mov eax, 0x3b
mov word [ebp - 0x1bec], ax
bts dx, di
cmovbe edx, eax
mov ecx, 0x20
mov word [ebp - 0x1bea], cx
bswap edx
bt edx, eax
mov edx, 0x55
clc
test cx, ax
mov word [ebp - 0x1be8], dx
mov word [ebp - 0x1be6], ax
inc ah
mov word [ebp - 0x1be4], cx
clc
adc dl, 0xe
movzx edx, si
mov edx, 0x65
sub cx, si
sbb ah, 5
mov word [ebp - 0x1be2], dx
lahf
mov eax, 0x6e
mov word [ebp - 0x1be0], ax
movsx dx, bh
btr edx, 0x19
stc
mov ecx, 0x29
mov word [ebp - 0x1bde], cx
mov edx, 0x20
movzx eax, bx
test cx, sp
mov word [ebp - 0x1bdc], dx
not eax
mov eax, 0x50
test bp, sp
bsf cx, cx
sar cl, 0xbb
mov word [ebp - 0x1bda], ax
rdtsc
mov ecx, 0x72
shr dl, 0x8a
mov word [ebp - 0x1bd8], cx
rcr dl, 0x9a
shl cx, 0x5c
mov edx, 0x65
sal eax, 0xaf
lahf
mov word [ebp - 0x1bd6], dx
mov eax, 0x73
mov word [ebp - 0x1bd4], ax
shrd ax, cx, 0xe3
shr eax, cl
sal al, 0x39
mov ecx, 0x74
sal dx, cl
xadd eax, eax
ror dl, 0xa1
mov word [ebp - 0x1bd2], cx
mov edx, 0x6f
add cx, bx
sal eax, 0x64
mov word [ebp - 0x1bd0], dx
bts ecx, esp
test ecx, esi
sbb edx, 0x676218f7
mov eax, 0x2f
btc ecx, 0x8d
setp dl
mov edx, ecx
mov word [ebp - 0x1bce], ax
xor edx, 0x396a098d
shl dx, 0xaf
mov ecx, 0x32
cmc
xchg al, dh
movzx edx, bx
mov word [ebp - 0x1bcc], cx
mov edx, 0x2e
clc
bsf ax, bp
btr ecx, 0xb2
mov word [ebp - 0x1bca], dx
sal ax, cl
mov eax, 0x31
xadd ch, ch
mov word [ebp - 0x1bc8], ax
xchg ch, ch
clc
sal ch, 0xde
mov ecx, edx
btr dx, cx
mov word [ebp - 0x1bc6], cx
btr cx, 0xfd
mov edx, eax
rcr ecx, cl
not ecx
mov word [ebp - 0x1bc4], dx
xor eax, eax
mov word [ebp - 0x1bc2], ax
bswap cx
push 0x1a0
push eax
lea ecx, [ebp - 0x1bc0]
jmp 0x17f1870
push ebx
movzx ebx, bx
push esi
mov bx, si
mov bx, 0x6caf
movzx esi, sp
push edi
xchg ebx, esi
push eax
lea eax, [ebp - 0x10]
setp bh
movsx esi, di
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1e40], eax
mov dword [ebp - 0x1e38], ecx
mov ch, bh
mov esi, dword [ebp + 0x10]
setg cl
mov cx, 0x10f3
mov dword [ebp - 0x1e30], esi
xchg ah, ch
mov ah, 0x4a
movsx ax, ch
mov dword [ebp - 0x1e2c], edx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1e28], eax
mov cx, di
movzx eax, dx
mov ecx, dword [ebp + 0x18]
cbw
movsx edx, ax
mov dword [ebp - 0x1e58], ecx
mov edx, dword [ebp + 0x1c]
bswap eax
movzx eax, sp
mov dword [ebp - 0x1e5c], edx
mov dword [esi], 0
push 0
not ah
mov al, 0x2b
movzx eax, sp
mov eax, dword [0x52af98]
jmp 0x740236
call fcn.00473d70
add esp, 0xc
bswap cx
mov edx, 0x4d
mov word [ebp - 0x1a20], dx
setb dl
bsf edx, ecx
mov eax, 0x6f
and cl, 0xd2
cmp sp, 0x19cc
mov word [ebp - 0x1a1e], ax
not dh
cmovo ax, bx
mov ecx, 0x7a
mov word [ebp - 0x1a1c], cx
mov edx, 0x69
shl ax, 0x27
add ax, di
mov word [ebp - 0x1a1a], dx
shr dh, 0xfd
mov eax, 0x6c
cmovne dx, di
stc
mov word [ebp - 0x1a18], ax
seto ch
mov ecx, eax
cmc
btc dx, 0xd0
shr ax, 0x96
mov word [ebp - 0x1a16], cx
cdq
mov edx, 0x61
mov word [ebp - 0x1a14], dx
mov eax, 0x2f
or edx, 0x722d5219
mov word [ebp - 0x1a12], ax
rcl ax, 0x9a
movsx dx, cl
cmc
mov ecx, 0x35
cwd
sbb edx, 0x1d37f9d
cwde
mov word [ebp - 0x1a10], cx
bsf ax, si
mov edx, 0x2e
mov word [ebp - 0x1a0e], dx
sal ah, 0xf3
btr dx, 0x2a
mov eax, 0x30
dec ecx
rol cx, cl
mov word [ebp - 0x1a0c], ax
mov ecx, 0x20
mov ax, bp
shl edx, 0xe
shr edx, 0x1a
mov word [ebp - 0x1a0a], cx
rol cl, cl
mov edx, 0x28
clc
cbw
mov word [ebp - 0x1a08], dx
bts cx, cx
sub dx, 0x3785
mov eax, 0x57
bsf edx, eax
mov word [ebp - 0x1a06], ax
btr ax, bx
mov ecx, 0x69
rcl edx, cl
mov word [ebp - 0x1a04], cx
and ax, bp
bts ecx, esp
mov edx, 0x6e
mov word [ebp - 0x1a02], dx
jmp loc.0042f575
call fcn.00474a30
mov eax, dword [0x51f620]
clc
xor dword [ebp - 8], eax
cmc
cmp dx, sp
clc
xor eax, ebp
mov dword [ebp - 0x1c], eax
jmp 0x5dcbe9
mov word [ebp - 0x1d92], ax
bsf eax, esp
rcl al, cl
inc eax
mov word [ebp - 0x1d90], cx
stc
xor edx, edx
cbw
mov word [ebp - 0x1d8e], dx
mov ah, ah
movsx eax, ax
movsx ax, dh
push 0x16c
movzx eax, cx
not ah
movzx ax, ch
push edx
mov al, al
cmovo eax, eax
lea eax, [ebp - 0x1d8c]
jmp 0x55bdd1
je fcn.00711094
mov ecx, 0x4f
sbb edx, edx
lahf
mov word [ebp - 0x1e20], cx
shl eax, 0xfa
shl al, cl
mov edx, 0x70
cbw
or ax, 0x2be2
mov word [ebp - 0x1e1e], dx
bsr ax, bx
cmp ebx, esi
mov eax, 0x65
mov word [ebp - 0x1e1c], ax
mov ecx, 0x72
mov word [ebp - 0x1e1a], cx
cmp eax, 0x1cd67e87
sub eax, edi
mov edx, 0x61
sub ah, ah
mov word [ebp - 0x1e18], dx
cmc
bsr ecx, ebp
or ch, 0xdd
mov eax, 0x2f
shrd dx, bp, 0xd4
xchg ch, cl
mov word [ebp - 0x1e16], ax
xor edx, esi
xadd ecx, edx
mov ecx, 0x39
ror ah, 0x51
adc dx, cx
mov word [ebp - 0x1e14], cx
xor dh, ah
rcl al, 0x7c
mov dl, 0xc1
mov edx, 0x2e
mov word [ebp - 0x1e12], dx
rcr edx, cl
mov eax, 0x38
bsr dx, ax
mov word [ebp - 0x1e10], ax
shl dh, 0x7b
bswap cx
xchg cl, ch
mov ecx, 0x30
mov word [ebp - 0x1e0e], cx
shr al, 0x29
mov edx, 0x20
clc
adc cx, di
mov word [ebp - 0x1e0c], dx
bswap cx
sub eax, esi
ror dx, 0x3e
mov eax, 0x28
cmc
mov word [ebp - 0x1e0a], ax
mov ecx, 0x4d
mov edx, ebp
sar edx, cl
mov word [ebp - 0x1e08], cx
bt edx, esi
ror ecx, 0xf5
btr ecx, edx
mov edx, 0x61
btc ecx, ebx
cmovl cx, si
mov word [ebp - 0x1e06], dx
lahf
bswap edx
mov eax, 0x63
mov word [ebp - 0x1e04], ax
add al, ah
mov ecx, 0x69
movsx ax, ah
bts eax, esi
xor edx, 0x34862cf0
mov word [ebp - 0x1e02], cx
btr ecx, 0x86
or ax, 0x5db4
rcr ax, cl
mov edx, 0x6e
btr cx, cx
or al, 0x2d
mov word [ebp - 0x1e00], dx
bts cx, ax
cwde
sbb ch, 0x85
mov eax, 0x74
clc
rol ecx, cl
mov word [ebp - 0x1dfe], ax
rcr ch, cl
jmp 0x18c3616
push eax
call fcn.0063f859
test eax, eax
jmp 0x6d0a99
mov word [ebp - 0x1dac], dx
mov eax, 0x20
jmp 0x538624
mov word [ebp - 0x1dec], ax
ror cl, 0xe8
mov ecx, 0x6c
rcr edx, cl
shl ax, cl
mov dh, dl
mov word [ebp - 0x1dea], cx
setnp dl
and ecx, 0x3ad20546
mov edx, 0x20
test di, sp
or ch, 0xb
mov word [ebp - 0x1de8], dx
mov eax, 0x4d
mov word [ebp - 0x1de6], ax
mov ecx, 0x61
sal eax, 0xb4
add edx, ecx
mov word [ebp - 0x1de4], cx
adc dl, 0xc4
sar edx, 0x78
mov edx, 0x63
shld ecx, ebx, 6
btr eax, 0xd6
mov cx, 0x7f8c
mov word [ebp - 0x1de2], dx
movsx dx, cl
btc cx, 0x4b
mov eax, 0x20
cmp bp, ax
mov word [ebp - 0x1de0], ax
movzx cx, dl
rcr cl, cl
bt dx, 0x69
mov ecx, 0x4f
mov word [ebp - 0x1dde], cx
or dx, sp
mov edx, 0x53
stc
ror ecx, cl
mov word [ebp - 0x1ddc], dx
cwd
mov word [ebp - 0x1dda], ax
cmove ecx, esi
btc edx, 0x2e
mov ecx, 0x58
clc
movsx edx, cx
btc edx, ebx
mov word [ebp - 0x1dd8], cx
movsx cx, bl
or cl, 0x10
mov edx, 0x3b
rol cx, cl
test eax, 0x1cec1053
mov word [ebp - 0x1dd6], dx
sub ecx, 0x3fa0217c
or cx, 0xc4a
shrd ecx, edi, 0x5f
mov word [ebp - 0x1dd4], ax
mov ecx, 0x55
cmp dh, 0x14
clc
mov word [ebp - 0x1dd2], cx
mov word [ebp - 0x1dd0], dx
add ecx, 0x974785
ror ecx, cl
mov word [ebp - 0x1dce], ax
btc eax, ebp
or dh, dh
mov ecx, 0x65
mov word [ebp - 0x1dcc], cx
ror ax, cl
mov edx, 0x6e
rol eax, 0x6d
mov word [ebp - 0x1dca], dx
lahf
and ch, 0x5a
mov eax, 0x29
test sp, bx
mov word [ebp - 0x1dc8], ax
xadd al, al
cwde
mov ecx, 0x20
ror ah, 0x9d
sal dh, 0xee
cmp cl, ch
mov word [ebp - 0x1dc6], cx
cdq
jmp 0x17aade9
push ebp
mov ebp, esp
or eax, 0x6ad214c2
stc
push 0xfffffffffffffffe
test si, bx
push 0x17d8868
test di, 0x1f71
rcl ax, cl
push 0x474040
mov eax, dword fs:[0]
cmp ebp, ebp
test cx, 0x4f67
push eax
test si, ax
sub esp, 8
mov eax, 0x1e50
jmp 0x6617be
mov edx, 0x50
neg cx
and al, dh
btc cx, 0x3f
mov word [ebp - 0x1dc4], dx
or cl, 0xc0
sub cl, 0xb8
add edx, 0x50e42054
mov eax, 0x72
mov word [ebp - 0x1dc2], ax
or ax, 0x473b
mov ecx, 0x65
movsx eax, bp
mov word [ebp - 0x1dc0], cx
cbw
mov edx, 0x73
nop
btr ax, 0xc
mov word [ebp - 0x1dbe], dx
sar ecx, cl
bt ax, bx
movsx ecx, ax
mov eax, 0x74
rol edx, cl
cmovle dx, bx
mov word [ebp - 0x1dbc], ax
rcr ecx, 0x3b
sub ah, 0x13
mov ecx, 0x6f
cmp sp, 0x746f
or edx, 0x67105e3
movzx dx, ch
mov word [ebp - 0x1dba], cx
and ah, cl
cmp esi, eax
btr eax, 0xed
mov edx, 0x2f
neg al
shl cl, 0xcb
sal cl, 0x9a
mov word [ebp - 0x1db8], dx
add eax, esi
mov eax, 0x32
bt edx, 0x37
bts dx, bx
mov word [ebp - 0x1db6], ax
sar dh, cl
mov ecx, 0x2e
mov word [ebp - 0x1db4], cx
cdq
sar dh, 0x43
shrd dx, si, 0x21
mov edx, eax
btc ax, di
shr eax, 0x7a
mov word [ebp - 0x1db2], dx
mov eax, ecx
rol cl, cl
mov word [ebp - 0x1db0], ax
rcl ax, 0xa
sets al
cbw
mov ecx, 0x31
sbb edx, edx
mov word [ebp - 0x1dae], cx
shr eax, cl
rol dl, cl
mov edx, 0x35
adc cl, bl
sub ch, ch
jmp 0x752b9f
push ecx
jmp 0x61a40c
mov word [ebp - 0x1d98], ax
rcr edx, cl
mov ecx, 0x30
mov word [ebp - 0x1d96], cx
rol eax, cl
mov edx, 0x2e
sar ax, 0x14
sbb eax, 0x40440f9
dec ah
mov word [ebp - 0x1d94], dx
setg al
rcr ah, cl
shrd ax, di, 0x7f
mov eax, ecx
test ax, 0x24a1
jmp 0x672d1c
mov ecx, 0x6f
inc ah
mov ax, bp
bts dx, bp
mov word [ebp - 0x1dfc], cx
shr ecx, cl
mov edx, 0x73
adc ecx, ebx
cmovs ax, cx
sub cx, sp
mov word [ebp - 0x1dfa], dx
mov eax, 0x68
test di, 0x1fb
or ch, 0x11
shl dx, 0x32
mov word [ebp - 0x1df8], ax
mov ecx, 0x3b
bt eax, 0x9c
mov word [ebp - 0x1df6], cx
mov edx, 0x20
sal ecx, cl
mov word [ebp - 0x1df4], dx
bt ecx, ebp
setp dl
mov eax, 0x49
rcl dh, cl
mov word [ebp - 0x1df2], ax
xchg ch, ch
not ah
setae ah
mov ecx, 0x6e
sal al, cl
cbw
mov word [ebp - 0x1df0], cx
cmp ecx, ecx
bt cx, di
mov edx, 0x74
mov cx, 0x1ebf
nop
sal ax, 0x37
mov word [ebp - 0x1dee], dx
movzx ecx, ax
shrd dx, dx, 0x77
mov eax, 0x65
sub ch, 0x5f
jmp 0x7721fb