Function at 0x1001a150
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Create http request
Encode data using xor
Parse pe header
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100879e1
mov eax, dword fs:[0]
push eax
sub esp, 0x8a0
mov eax, dword [0x100b4540]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
push 0
push 0
push 0x1008a990
mov dword [ebp - 4], 1
call dword [sym.imp.WININET.dll_InternetOpenA]
mov esi, eax
test esi, esi
jne 0x1001a361
mov byte [ebp - 0x700], 0x45
xor ecx, ecx
mov byte [ebp - 0x6ff], 0x72
mov byte [ebp - 0x6fe], 0x78
mov byte [ebp - 0x6fd], 0x6d
mov byte [ebp - 0x6fc], 0x67
mov byte [ebp - 0x6fb], 0x6c
mov byte [ebp - 0x6fa], 0x69
mov byte [ebp - 0x6f9], 0x65
mov byte [ebp - 0x6f8], 0x78
mov byte [ebp - 0x6f7], 0x3e
mov byte [ebp - 0x6f6], 0x7f
mov byte [ebp - 0x6f5], 0x68
mov byte [ebp - 0x6f4], 0x65
mov byte [ebp - 0x6f3], 0x68
mov byte [ebp - 0x6f2], 0x65
mov byte [ebp - 0x6f1], 0x68
mov byte [ebp - 0x6f0], 0x65
mov byte [ebp - 0x6ef], 0x81
mov byte [ebp - 0x6ee], 0x24
mov byte [ebp - 0x6ed], 0x51
mov byte [ebp - 0x6ec], 0x73
mov byte [ebp - 0x6eb], 0x68
mov byte [ebp - 0x6ea], al
mov byte [ebp - 0x6e9], 0x70
mov byte [ebp - 0x6e8], 0x24
mov byte [ebp - 0x6e7], 0x68
mov byte [ebp - 0x6e6], 0x73
mov byte [ebp - 0x6e5], 0xf4
mov byte [ebp - 0x6e4], 0x76
mov byte [ebp - 0x6e3], 0x79
mov byte [ebp - 0x6e2], 0x70
mov byte [ebp - 0x6e1], 0x65
mov byte [ebp - 0x6e0], 0x72
mov byte [ebp - 0x6df], 1
mov byte [ebp - 0x6de], 0x76
mov byte [ebp - 0x6dd], 0x6f
mov byte [ebp - 0x6dc], 0x69
mov byte [ebp - 0x6db], 0x72
mov byte [ebp - 0x6da], 0x24
mov byte [ebp - 0x6d9], 0x66
mov byte [ebp - 0x6d8], 0x6d
mov byte [ebp - 0x6d7], 0x76
mov byte [ebp - 0x6d6], 0x24
mov byte [ebp - 0x6d5], 0x77
mov byte [ebp - 0x6d4], 0x73
mov byte [ebp - 0x6d3], 0x76
mov byte [ebp - 0x6d2], 0x79
mov byte [ebp - 0x6d1], 0x72
mov byte [ebp - 0x6d0], 0x24
mov byte [ebp - 0x6cf], 0x73
mov byte [ebp - 0x6ce], 0x70
mov byte [ebp - 0x6cd], 0x79
mov byte [ebp - 0x6cc], 2
mov byte [ebp - 0x6cb], 0x78
mov byte [ebp - 0x6ca], 0x79
mov byte [ebp - 0x6c9], 0x32
mov byte [ebp - 0x6c8], al
mov al, byte [ebp - 0x700]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x700]
sub al, 4
mov byte [ebp + ecx - 0x700], al
inc ecx
cmp ecx, 0x38
jb 0x1001a340
lea eax, [ebp - 0x700]
jmp 0x1001a98c
cmp dword [ebp + 0x34], 0x10
lea edi, [ebp + 0x20]
mov byte [ebp - 0x73e], 0
cmovae edi, dword [ebp + 0x20]
xor edx, edx
mov dword [ebp - 0x77c], 0x2a
mov byte [ebp - 0x778], 0x42
mov byte [ebp - 0x777], 0x5e
mov byte [ebp - 0x776], 0x5e
mov byte [ebp - 0x775], 0x5a
mov byte [ebp - 0x774], 0x10
mov byte [ebp - 0x773], 5
mov byte [ebp - 0x772], 5
mov byte [ebp - 0x771], 0x4c
mov byte [ebp - 0x770], 0x4b
mov byte [ebp - 0x76f], 0x59
mov byte [ebp - 0x76e], 0x5e
mov byte [ebp - 0x76d], 4
mov byte [ebp - 0x76c], 0x59
mov byte [ebp - 0x76b], 0x4f
mov byte [ebp - 0x76a], 0x49
mov byte [ebp - 0x769], 7
mov byte [ebp - 0x768], 0x44
mov byte [ebp - 0x767], 0x43
mov byte [ebp - 0x766], 0x44
mov byte [ebp - 0x765], 0x4f
mov byte [ebp - 0x764], 4
mov byte [ebp - 0x763], 0x49
mov byte [ebp - 0x762], 0x45
mov byte [ebp - 0x761], 0x47
mov byte [ebp - 0x760], 5
mov byte [ebp - 0x75f], 0x59
mov byte [ebp - 0x75e], 0x4f
mov byte [ebp - 0x75d], 0x49
mov byte [ebp - 0x75c], 0x4b
mov byte [ebp - 0x75b], 0x49
mov byte [ebp - 0x75a], 5
mov byte [ebp - 0x759], 0x46
mov byte [ebp - 0x758], 0x45
mov byte [ebp - 0x757], 0x59
mov byte [ebp - 0x756], 0x46
mov byte [ebp - 0x755], 0x4b
mov byte [ebp - 0x754], 0x44
mov byte [ebp - 0x753], 0x4e
mov byte [ebp - 0x752], 5
mov byte [ebp - 0x751], 0x47
mov byte [ebp - 0x750], 0x45
mov byte [ebp - 0x74f], 0x4e
mov byte [ebp - 0x74e], 0x5f
mov byte [ebp - 0x74d], 0x46
mov byte [ebp - 0x74c], 0x4f
mov byte [ebp - 0x74b], 4
mov byte [ebp - 0x74a], 0x5a
mov byte [ebp - 0x749], 0x42
mov byte [ebp - 0x748], 0x5a
mov byte [ebp - 0x747], 0x15
mov byte [ebp - 0x746], 0x5c
mov byte [ebp - 0x745], 0x4b
mov byte [ebp - 0x744], 0x46
mov byte [ebp - 0x743], 0x5f
mov byte [ebp - 0x742], 0x4f
mov byte [ebp - 0x741], 0x17
mov byte [ebp - 0x740], 0xf
mov byte [ebp - 0x73f], 0x59
mov al, byte [ebp - 0x778]
nop dword [eax + eax]
mov al, byte [ebp + edx - 0x778]
mov ecx, dword [ebp - 0x77c]
xor cl, al
mov byte [ebp + edx - 0x778], cl
inc edx
cmp edx, 0x3a
jb 0x1001a520
push edi
lea eax, [ebp - 0x778]
mov byte [ebp - 0x73e], 0
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.1000f920
add esp, 0xc
lea eax, [ebp - 0x150]
push 0
push 0
push 0
push 0
push eax
push esi
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov edi, eax
test edi, edi
jne 0x1001a9a9
mov dword [ebp - 0x640], 0x45
mov eax, dword [ebp - 0x640]
xor al, 0x41
mov byte [ebp - 0x63c], al
mov eax, dword [ebp - 0x640]
inc al
xor al, 0x6e
mov byte [ebp - 0x63b], al
mov eax, dword [ebp - 0x640]
add al, 2
xor al, 0x74
mov byte [ebp - 0x63a], al
mov eax, dword [ebp - 0x640]
add al, 3
xor al, 0x69
mov byte [ebp - 0x639], al
mov eax, dword [ebp - 0x640]
add al, 4
xor al, 0x63
mov byte [ebp - 0x638], al
mov eax, dword [ebp - 0x640]
add al, 5
xor al, 0x68
mov byte [ebp - 0x637], al
mov eax, dword [ebp - 0x640]
add al, 6
xor al, 0x65
mov byte [ebp - 0x636], al
mov eax, dword [ebp - 0x640]
add al, 7
xor al, 0x61
mov byte [ebp - 0x635], al
mov eax, dword [ebp - 0x640]
add al, 8
xor al, 0x74
mov byte [ebp - 0x634], al
mov eax, dword [ebp - 0x640]
add al, 9
xor al, 0x3a
mov byte [ebp - 0x633], al
mov eax, dword [ebp - 0x640]
add al, 0xa
xor al, 0x7b
mov byte [ebp - 0x632], al
mov eax, dword [ebp - 0x640]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x631], al
mov eax, dword [ebp - 0x640]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x630], al
mov eax, dword [ebp - 0x640]
add al, 0xd
xor al, 0x64
mov byte [ebp - 0x62f], al
mov eax, dword [ebp - 0x640]
add al, 0xe
xor al, 0x61
mov byte [ebp - 0x62e], al
mov eax, dword [ebp - 0x640]
add al, 0xf
xor al, 0x64
mov byte [ebp - 0x62d], al
mov eax, dword [ebp - 0x640]
add al, 0x10
xor al, 0x61
mov byte [ebp - 0x62c], al
mov eax, dword [ebp - 0x640]
add al, 0x11
xor al, 0x7d
mov byte [ebp - 0x62b], al
mov eax, dword [ebp - 0x640]
add al, 0x12
xor al, 0x20
mov byte [ebp - 0x62a], al
mov eax, dword [ebp - 0x640]
add al, 0x13
xor al, 0x4d
mov byte [ebp - 0x629], al
mov eax, dword [ebp - 0x640]
add al, 0x14
xor al, 0x6f
mov byte [ebp - 0x628], al
mov eax, dword [ebp - 0x640]
add al, 0x15
xor al, 0x64
mov byte [ebp - 0x627], al
mov eax, dword [ebp - 0x640]
add al, 0x16
xor al, 0xfc
mov byte [ebp - 0x626], al
mov eax, dword [ebp - 0x640]
add al, 0x17
xor al, 0x6c
mov byte [ebp - 0x625], al
mov eax, dword [ebp - 0x640]
add al, 0x18
xor al, 0x20
mov byte [ebp - 0x624], al
mov eax, dword [ebp - 0x640]
add al, 0x19
xor al, 0x64
mov byte [ebp - 0x623], al
mov eax, dword [ebp - 0x640]
add al, 0x1a
xor al, 0x6f
mov byte [ebp - 0x622], al
mov eax, dword [ebp - 0x640]
add al, 0x1b
xor al, 0xf0
mov byte [ebp - 0x621], al
mov eax, dword [ebp - 0x640]
add al, 0x1c
xor al, 0x72
mov byte [ebp - 0x620], al
mov eax, dword [ebp - 0x640]
add al, 0x1d
xor al, 0x75
mov byte [ebp - 0x61f], al
mov eax, dword [ebp - 0x640]
add al, 0x1e
xor al, 0x6c
mov byte [ebp - 0x61e], al
mov eax, dword [ebp - 0x640]
add al, 0x1f
xor al, 0x61
mov byte [ebp - 0x61d], al
mov eax, dword [ebp - 0x640]
add al, 0x20
xor al, 0x6e
mov byte [ebp - 0x61c], al
mov eax, dword [ebp - 0x640]
add al, 0x21
xor al, 0xfd
mov byte [ebp - 0x61b], al
mov eax, dword [ebp - 0x640]
add al, 0x22
xor al, 0x72
mov byte [ebp - 0x61a], al
mov eax, dword [ebp - 0x640]
add al, 0x23
xor al, 0x6b
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x640]
add al, 0x24
xor al, 0x65
mov byte [ebp - 0x618], al
mov eax, dword [ebp - 0x640]
add al, 0x25
xor al, 0x6e
mov byte [ebp - 0x617], al
mov eax, dword [ebp - 0x640]
add al, 0x26
xor al, 0x20
mov byte [ebp - 0x616], al
mov eax, dword [ebp - 0x640]
add al, 0x27
xor al, 0x62
mov byte [ebp - 0x615], al
mov eax, dword [ebp - 0x640]
add al, 0x28
xor al, 0x69
mov byte [ebp - 0x614], al
mov eax, dword [ebp - 0x640]
add al, 0x29
xor al, 0x72
mov byte [ebp - 0x613], al
mov eax, dword [ebp - 0x640]
add al, 0x2a
xor al, 0x20
mov byte [ebp - 0x612], al
mov eax, dword [ebp - 0x640]
add al, 0x2b
xor al, 0x73
mov byte [ebp - 0x611], al
mov eax, dword [ebp - 0x640]
add al, 0x2c
xor al, 0x6f
mov byte [ebp - 0x610], al
mov eax, dword [ebp - 0x640]
add al, 0x2d
xor al, 0x72
mov byte [ebp - 0x60f], al
mov eax, dword [ebp - 0x640]
add al, 0x2e
xor al, 0x75
mov byte [ebp - 0x60e], al
mov eax, dword [ebp - 0x640]
add al, 0x2f
xor al, 0x6e
mov byte [ebp - 0x60d], al
mov eax, dword [ebp - 0x640]
add al, 0x30
xor al, 0x20
mov byte [ebp - 0x60c], al
mov eax, dword [ebp - 0x640]
add al, 0x31
xor al, 0x6f
mov byte [ebp - 0x60b], al
mov eax, dword [ebp - 0x640]
add al, 0x32
xor al, 0x6c
mov byte [ebp - 0x60a], al
mov eax, dword [ebp - 0x640]
add al, 0x33
xor al, 0x75
mov byte [ebp - 0x609], al
mov eax, dword [ebp - 0x640]
add al, 0x34
xor al, 0xfe
mov byte [ebp - 0x608], al
mov eax, dword [ebp - 0x640]
add al, 0x35
xor al, 0x74
mov byte [ebp - 0x607], al
mov eax, dword [ebp - 0x640]
add al, 0x36
xor al, 0x75
mov byte [ebp - 0x606], al
mov eax, dword [ebp - 0x640]
add al, 0x37
xor al, 0x2e
mov byte [ebp - 0x605], al
mov eax, dword [ebp - 0x640]
add al, 0x38
xor al, 0x20
mov byte [ebp - 0x604], al
mov eax, dword [ebp - 0x640]
add al, 0x39
xor al, 0x28
mov byte [ebp - 0x603], al
mov eax, dword [ebp - 0x640]
add al, 0x3a
xor al, 0x23
mov byte [ebp - 0x602], al
mov eax, dword [ebp - 0x640]
add al, 0x3b
xor al, 0x32
mov byte [ebp - 0x601], al
mov eax, dword [ebp - 0x640]
add al, 0x3c
xor al, 0x29
mov byte [ebp - 0x600], al
xor edx, edx
mov al, byte [ebp - 0x63c]
mov byte [ebp - 0x5ff], 0
mov al, byte [ebp + edx - 0x63c]
mov ecx, dword [ebp - 0x640]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x63c], cl
inc edx
cmp edx, 0x3d
jb 0x1001a961
mov byte [ebp - 0x5ff], 0
lea eax, [ebp - 0x63c]
push eax
push 0xff6961
call fcn.10009000
add esp, 8
push 7
call fcn.10022c30
add esp, 4
jmp 0x1001be41
mov byte [ebp - 0x6a0], 0x6d
xor ecx, ecx
mov byte [ebp - 0x69f], 0x6e
mov byte [ebp - 0x69e], 0x6b
mov byte [ebp - 0x69d], 0x7e
mov byte [ebp - 0x69c], 0x70
mov byte [ebp - 0x69b], 0x43
mov byte [ebp - 0x69a], 0x43
mov byte [ebp - 0x699], 0x7f
mov byte [ebp - 0x698], 0x6a
mov byte [ebp - 0x697], 0x75
mov byte [ebp - 0x696], 0x72
mov byte [ebp - 0x695], 0x6d
mov byte [ebp - 0x694], 0x6a
mov byte [ebp - 0x693], 0x7d
mov byte [ebp - 0x692], 0x6e
mov byte [ebp - 0x691], 0x76
mov byte [ebp - 0x690], 0x78
mov byte [ebp - 0x68f], 0x6d
mov byte [ebp - 0x68e], 0x7e
mov byte [ebp - 0x68d], 0x75
mov byte [ebp - 0x68c], 0x6e
mov byte [ebp - 0x68b], 0x43
mov byte [ebp - 0x68a], 0x43
mov byte [ebp - 0x689], 0x6c
mov byte [ebp - 0x688], 0x78
mov byte [ebp - 0x687], 0x77
mov byte [ebp - 0x686], 0x77
mov byte [ebp - 0x685], 0x6e
mov byte [ebp - 0x684], 0x6c
mov byte [ebp - 0x683], 0x7d
mov byte [ebp - 0x682], 0
mov al, byte [ebp - 0x6a0]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x6a0]
sub al, 9
mov byte [ebp + ecx - 0x6a0], al
inc ecx
cmp ecx, 0x1e
jb 0x1001aa90
lea eax, [ebp - 0x6a0]
push eax
call fcn.100413d0
add esp, 4
mov dword [ebp - 0x7f8], 0
lea ecx, [ebp - 0x8ac]
push 1
call fcn.100104d0
mov ebx, dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [ebp - 0x7f8]
mov byte [ebp - 4], 2
nop dword [eax]
push 0
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x89c]
call fcn.10027ed0
lea eax, [ebp - 0x7f8]
push eax
push 0x40
lea eax, [ebp - 0x50]
push eax
push edi
call ebx
mov eax, dword [ebp - 0x7f8]
test eax, eax
jne 0x1001aae0
mov dword [ebp - 0x6c4], 0x5a
xor edx, edx
mov byte [ebp - 0x6c0], 0x3e
mov byte [ebp - 0x6bf], 0x3f
mov byte [ebp - 0x6be], 0x38
mov byte [ebp - 0x6bd], 0x2f
mov byte [ebp - 0x6bc], 0x3d
mov byte [ebp - 0x6bb], 0x60
mov byte [ebp - 0x6ba], 0x60
mov byte [ebp - 0x6b9], 0x2c
mov byte [ebp - 0x6b8], 0x3b
mov byte [ebp - 0x6b7], 0x36
mov byte [ebp - 0x6b6], 0x33
mov byte [ebp - 0x6b5], 0x3e
mov byte [ebp - 0x6b4], 0x3b
mov byte [ebp - 0x6b3], 0x2e
mov byte [ebp - 0x6b2], 0x3f
mov byte [ebp - 0x6b1], 0x37
mov byte [ebp - 0x6b0], 0x35
mov byte [ebp - 0x6af], 0x3e
mov byte [ebp - 0x6ae], 0x2f
mov byte [ebp - 0x6ad], 0x36
mov byte [ebp - 0x6ac], 0x3f
mov byte [ebp - 0x6ab], 0x60
mov byte [ebp - 0x6aa], 0x60
mov byte [ebp - 0x6a9], 0x28
mov byte [ebp - 0x6a8], 0x3f
mov byte [ebp - 0x6a7], 0x36
mov byte [ebp - 0x6a6], 0x3f
mov byte [ebp - 0x6a5], 0x3b
mov byte [ebp - 0x6a4], 0x29
mov byte [ebp - 0x6a3], 0x3f
mov byte [ebp - 0x6a2], al
mov al, byte [ebp - 0x6c0]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x6c0]
mov ecx, dword [ebp - 0x6c4]
xor cl, al
mov byte [ebp + edx - 0x6c0], cl
inc edx
cmp edx, 0x1e
jb 0x1001ac00
lea eax, [ebp - 0x6c0]
mov byte [ebp - 0x6a2], 0
push eax
call fcn.100413d0
inc dword [0x100b9338]
lea eax, [ebp - 0x7c4]
add esp, 4
lea ecx, [ebp - 0x8ac]
push eax
call fcn.10027910
cmp dword [ebp - 0x7b4], 2
mov byte [ebp - 4], 3
je 0x1001bb5e
cmp dword [ebp + 0x34], 0x10
lea edi, [ebp + 0x20]
lea ebx, [ebp + 8]
cmovae edi, dword [ebp + 0x20]
cmp dword [ebp + 0x1c], 0x10
cmovae ebx, dword [ebp + 8]
mov dword [ebp - 0x680], 0x72
mov eax, dword [ebp - 0x680]
xor al, 0x64
mov byte [ebp - 0x67c], al
mov eax, dword [ebp - 0x680]
inc al
xor al, 0x65
mov byte [ebp - 0x67b], al
mov eax, dword [ebp - 0x680]
add al, 2
xor al, 0x62
mov byte [ebp - 0x67a], al
mov eax, dword [ebp - 0x680]
add al, 3
xor al, 0x75
mov byte [ebp - 0x679], al
mov eax, dword [ebp - 0x680]
add al, 4
xor al, 0x67
mov byte [ebp - 0x678], al
mov eax, dword [ebp - 0x680]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x677], al
mov eax, dword [ebp - 0x680]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x676], al
mov eax, dword [ebp - 0x680]
add al, 7
xor al, 0x25
mov byte [ebp - 0x675], al
mov eax, dword [ebp - 0x680]
add al, 8
xor al, 0x73
mov byte [ebp - 0x674], al
mov eax, dword [ebp - 0x680]
add al, 9
xor al, 0x3a
mov byte [ebp - 0x673], al
mov eax, dword [ebp - 0x680]
add al, 0xa
xor al, 0x3a
mov byte [ebp - 0x672], al
mov eax, dword [ebp - 0x680]
add al, 0xb
xor al, 0x25
mov byte [ebp - 0x671], al
mov eax, dword [ebp - 0x680]
add al, 0xc
mov byte [ebp - 0x66f], 0
xor al, 0x73
xor edx, edx
mov byte [ebp - 0x670], al
mov al, byte [ebp - 0x67c]
nop dword [eax + eax]
mov al, byte [ebp + edx - 0x67c]
mov ecx, dword [ebp - 0x680]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x67c], cl
inc edx
cmp edx, 0xd
jb 0x1001ad60
push edi
lea eax, [ebp - 0x67c]
mov byte [ebp - 0x66f], 0
push ebx
push eax
call fcn.100413d0
add esp, 0xc
cmp dword [ebp - 0x7b4], 3
jne 0x1001b5d6
cmp dword [ebp + 0x1c], 0x10
lea edi, [ebp + 8]
mov byte [ebp - 0x704], 0
cmovae edi, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0x73c], 0x40
mov byte [ebp - 0x738], 1
mov byte [ebp - 0x737], 0x2e
mov byte [ebp - 0x736], 0x34
mov byte [ebp - 0x735], 0x29
mov byte [ebp - 0x734], 0x23
mov byte [ebp - 0x733], 0x28
mov byte [ebp - 0x732], 0x25
mov byte [ebp - 0x731], 0x21
mov byte [ebp - 0x730], 0x34
mov byte [ebp - 0x72f], 0x7a
mov byte [ebp - 0x72e], 0x3b
mov byte [ebp - 0x72d], 0x24
mov byte [ebp - 0x72c], 0x21
mov byte [ebp - 0x72b], 0x24
mov byte [ebp - 0x72a], 0x21
mov byte [ebp - 0x729], 0x24
mov byte [ebp - 0x728], 0x21
mov byte [ebp - 0x727], 0x3d
mov byte [ebp - 0x726], 0x60
mov byte [ebp - 0x725], 0x9d
mov byte [ebp - 0x724], 0x3a
mov byte [ebp - 0x723], 0x29
mov byte [ebp - 0x722], 0x2e
mov byte [ebp - 0x721], 0x33
mov byte [ebp - 0x720], 0x29
mov byte [ebp - 0x71f], 0x3a
mov byte [ebp - 0x71e], 0x60
mov byte [ebp - 0x71d], 0x2d
mov byte [ebp - 0x71c], 0x2f
mov byte [ebp - 0x71b], 0x24
mov byte [ebp - 0x71a], 0xbc
mov byte [ebp - 0x719], 0x2c
mov byte [ebp - 0x718], 0x60
mov byte [ebp - 0x717], 0x34
mov byte [ebp - 0x716], 0x25
mov byte [ebp - 0x715], 0x33
mov byte [ebp - 0x714], 0x30
mov byte [ebp - 0x713], 0x29
mov byte [ebp - 0x712], 0x34
mov byte [ebp - 0x711], 0x60
mov byte [ebp - 0x710], 0x25
mov byte [ebp - 0x70f], 0x24
mov byte [ebp - 0x70e], 0x29
mov byte [ebp - 0x70d], 0x2c
mov byte [ebp - 0x70c], 0x24
mov byte [ebp - 0x70b], 0x29
mov byte [ebp - 0x70a], 0x6e
mov byte [ebp - 0x709], 0x60
mov byte [ebp - 0x708], 0x68
mov byte [ebp - 0x707], 0x65
mov byte [ebp - 0x706], 0x33
mov byte [ebp - 0x705], 0x69
mov al, byte [ebp - 0x738]
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x738]
mov ecx, dword [ebp - 0x73c]
xor cl, al
mov byte [ebp + edx - 0x738], cl
inc edx
cmp edx, 0x34
jb 0x1001af40
push edi
lea eax, [ebp - 0x738]
mov byte [ebp - 0x704], 0
push eax
push 0xff6961
call fcn.10009000
push 2
call fcn.10022c30
mov eax, dword [0x100b82cc]
lea ecx, [ebp - 0x794]
add esp, 0x10
mov eax, dword [eax + 0x3de]
mov eax, dword [eax + 8]
add eax, 6
push eax
call fcn.10004c80
push 1
push 0x1008a998
lea ecx, [ebp - 0x794]
mov byte [ebp - 4], 4
call fcn.10024840
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
push dword [ebp + 0x18]
cmovae eax, dword [ebp + 8]
lea ecx, [ebp - 0x794]
push eax
call fcn.10024840
cmp dword [ebp + 0x34], 0x10
lea ebx, [ebp + 0x20]
lea eax, [ebp - 0x794]
cmovae ebx, dword [ebp + 0x20]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10004c80
lea eax, [ebp - 0x7dc]
push eax
call fcn.10058880
mov edi, eax
add esp, 0x1c
cmp dword [edi + 0x14], 0x10
jb 0x1001b001
mov edi, dword [edi]
mov dword [ebp - 0x5ac], 0x57
mov eax, dword [ebp - 0x5ac]
xor al, 0x68
mov byte [ebp - 0x5a8], al
mov eax, dword [ebp - 0x5ac]
inc al
xor al, 0x74
mov byte [ebp - 0x5a7], al
mov eax, dword [ebp - 0x5ac]
add al, 2
xor al, 0x74
mov byte [ebp - 0x5a6], al
mov eax, dword [ebp - 0x5ac]
add al, 3
xor al, 0x70
mov byte [ebp - 0x5a5], al
mov eax, dword [ebp - 0x5ac]
add al, 4
xor al, 0x3a
mov byte [ebp - 0x5a4], al
mov eax, dword [ebp - 0x5ac]
add al, 5
xor al, 0x2f
mov byte [ebp - 0x5a3], al
mov eax, dword [ebp - 0x5ac]
add al, 6
xor al, 0x2f
mov byte [ebp - 0x5a2], al
mov eax, dword [ebp - 0x5ac]
add al, 7
xor al, 0x66
mov byte [ebp - 0x5a1], al
mov eax, dword [ebp - 0x5ac]
add al, 8
xor al, 0x61
mov byte [ebp - 0x5a0], al
mov eax, dword [ebp - 0x5ac]
add al, 9
xor al, 0x73
mov byte [ebp - 0x59f], al
mov eax, dword [ebp - 0x5ac]
add al, 0xa
xor al, 0x74
mov byte [ebp - 0x59e], al
mov eax, dword [ebp - 0x5ac]
add al, 0xb
xor al, 0x2e
mov byte [ebp - 0x59d], al
mov eax, dword [ebp - 0x5ac]
add al, 0xc
xor al, 0x73
mov byte [ebp - 0x59c], al
mov eax, dword [ebp - 0x5ac]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x59b], al
mov eax, dword [ebp - 0x5ac]
add al, 0xe
xor al, 0x63
mov byte [ebp - 0x59a], al
mov eax, dword [ebp - 0x5ac]
add al, 0xf
xor al, 0x2d
mov byte [ebp - 0x599], al
mov eax, dword [ebp - 0x5ac]
add al, 0x10
xor al, 0x6e
mov byte [ebp - 0x598], al
mov eax, dword [ebp - 0x5ac]
add al, 0x11
xor al, 0x69
mov byte [ebp - 0x597], al
mov eax, dword [ebp - 0x5ac]
add al, 0x12
xor al, 0x6e
mov byte [ebp - 0x596], al
mov eax, dword [ebp - 0x5ac]
add al, 0x13
xor al, 0x65
mov byte [ebp - 0x595], al
mov eax, dword [ebp - 0x5ac]
add al, 0x14
xor al, 0x2e
mov byte [ebp - 0x594], al
mov eax, dword [ebp - 0x5ac]
add al, 0x15
xor al, 0x63
mov byte [ebp - 0x593], al
mov eax, dword [ebp - 0x5ac]
add al, 0x16
xor al, 0x6f
mov byte [ebp - 0x592], al
mov eax, dword [ebp - 0x5ac]
add al, 0x17
xor al, 0x6d
mov byte [ebp - 0x591], al
mov eax, dword [ebp - 0x5ac]
add al, 0x18
xor al, 0x2f
mov byte [ebp - 0x590], al
mov eax, dword [ebp - 0x5ac]
add al, 0x19
xor al, 0x73
mov byte [ebp - 0x58f], al
mov eax, dword [ebp - 0x5ac]
add al, 0x1a
xor al, 0x65
mov byte [ebp - 0x58e], al
mov eax, dword [ebp - 0x5ac]
add al, 0x1b
xor al, 0x63
mov byte [ebp - 0x58d], al
mov eax, dword [ebp - 0x5ac]
add al, 0x1c
xor al, 0x61
mov byte [ebp - 0x58c], al
mov eax, dword [ebp - 0x5ac]
add al, 0x1d
xor al, 0x63
mov byte [ebp - 0x58b], al
mov eax, dword [ebp - 0x5ac]
add al, 0x1e
xor al, 0x2f
mov byte [ebp - 0x58a], al
mov eax, dword [ebp - 0x5ac]
add al, 0x1f
xor al, 0x6c
mov byte [ebp - 0x589], al
mov eax, dword [ebp - 0x5ac]
add al, 0x20
xor al, 0x6f
mov byte [ebp - 0x588], al
mov eax, dword [ebp - 0x5ac]
add al, 0x21
xor al, 0x73
mov byte [ebp - 0x587], al
mov eax, dword [ebp - 0x5ac]
add al, 0x22
xor al, 0x6c
mov byte [ebp - 0x586], al
mov eax, dword [ebp - 0x5ac]
add al, 0x23
xor al, 0x61
mov byte [ebp - 0x585], al
mov eax, dword [ebp - 0x5ac]
add al, 0x24
xor al, 0x6e
mov byte [ebp - 0x584], al
mov eax, dword [ebp - 0x5ac]
add al, 0x25
xor al, 0x64
mov byte [ebp - 0x583], al
mov eax, dword [ebp - 0x5ac]
add al, 0x26
xor al, 0x2f
mov byte [ebp - 0x582], al
mov eax, dword [ebp - 0x5ac]
add al, 0x27
xor al, 0x6d
mov byte [ebp - 0x581], al
mov eax, dword [ebp - 0x5ac]
add al, 0x28
xor al, 0x6f
mov byte [ebp - 0x580], al
mov eax, dword [ebp - 0x5ac]
add al, 0x29
xor al, 0x64
mov byte [ebp - 0x57f], al
mov eax, dword [ebp - 0x5ac]
add al, 0x2a
xor al, 0x75
mov byte [ebp - 0x57e], al
mov eax, dword [ebp - 0x5ac]
add al, 0x2b
xor al, 0x6c
mov byte [ebp - 0x57d], al
mov eax, dword [ebp - 0x5ac]
add al, 0x2c
xor al, 0x65
mov byte [ebp - 0x57c], al
mov eax, dword [ebp - 0x5ac]
add al, 0x2d
xor al, 0x72
mov byte [ebp - 0x57b], al
mov eax, dword [ebp - 0x5ac]
add al, 0x2e
xor al, 0x65
mov byte [ebp - 0x57a], al
mov eax, dword [ebp - 0x5ac]
add al, 0x2f
xor al, 0x70
mov byte [ebp - 0x579], al
mov eax, dword [ebp - 0x5ac]
add al, 0x30
xor al, 0x6f
mov byte [ebp - 0x578], al
mov eax, dword [ebp - 0x5ac]
add al, 0x31
xor al, 0x72
mov byte [ebp - 0x577], al
mov eax, dword [ebp - 0x5ac]
add al, 0x32
xor al, 0x74
mov byte [ebp - 0x576], al
mov eax, dword [ebp - 0x5ac]
add al, 0x33
xor al, 0x2e
mov byte [ebp - 0x575], al
mov eax, dword [ebp - 0x5ac]
add al, 0x34
xor al, 0x70
mov byte [ebp - 0x574], al
mov eax, dword [ebp - 0x5ac]
add al, 0x35
xor al, 0x68
mov byte [ebp - 0x573], al
mov eax, dword [ebp - 0x5ac]
add al, 0x36
xor al, 0x70
mov byte [ebp - 0x572], al
mov eax, dword [ebp - 0x5ac]
add al, 0x37
xor al, 0x3f
mov byte [ebp - 0x571], al
mov eax, dword [ebp - 0x5ac]
add al, 0x38
xor al, 0x76
mov byte [ebp - 0x570], al
mov eax, dword [ebp - 0x5ac]
add al, 0x39
xor al, 0x61
mov byte [ebp - 0x56f], al
mov eax, dword [ebp - 0x5ac]
add al, 0x3a
xor al, 0x6c
mov byte [ebp - 0x56e], al
mov eax, dword [ebp - 0x5ac]
add al, 0x3b
xor al, 0x75
mov byte [ebp - 0x56d], al
mov eax, dword [ebp - 0x5ac]
add al, 0x3c
xor al, 0x65
mov byte [ebp - 0x56c], al
mov eax, dword [ebp - 0x5ac]
add al, 0x3d
xor al, 0x3d
mov byte [ebp - 0x56b], al
mov eax, dword [ebp - 0x5ac]
add al, 0x3e
xor al, 0x25
mov byte [ebp - 0x56a], al
mov eax, dword [ebp - 0x5ac]
add al, 0x3f
xor al, 0x73
mov byte [ebp - 0x569], al
mov eax, dword [ebp - 0x5ac]
add al, 0x40
xor al, 0x26
mov byte [ebp - 0x568], al
mov eax, dword [ebp - 0x5ac]
add al, 0x41
xor al, 0x68
mov byte [ebp - 0x567], al
mov eax, dword [ebp - 0x5ac]
add al, 0x42
xor al, 0x61
mov byte [ebp - 0x566], al
mov eax, dword [ebp - 0x5ac]
add al, 0x43
xor al, 0x73
mov byte [ebp - 0x565], al
mov eax, dword [ebp - 0x5ac]
add al, 0x44
xor al, 0x68
mov byte [ebp - 0x564], al
mov eax, dword [ebp - 0x5ac]
add al, 0x45
xor al, 0x3d
mov byte [ebp - 0x563], al
mov eax, dword [ebp - 0x5ac]
add al, 0x46
xor al, 0x25
mov byte [ebp - 0x562], al
mov eax, dword [ebp - 0x5ac]
add al, 0x47
xor al, 0x73
mov byte [ebp - 0x561], al
mov eax, dword [ebp - 0x5ac]
add al, 0x48
xor al, 0x26
mov byte [ebp - 0x560], al
mov eax, dword [ebp - 0x5ac]
add al, 0x49
xor al, 0x62
mov byte [ebp - 0x55f], al
mov eax, dword [ebp - 0x5ac]
add al, 0x4a
xor al, 0x6c
mov byte [ebp - 0x55e], al
mov eax, dword [ebp - 0x5ac]
add al, 0x4b
xor al, 0x61
mov byte [ebp - 0x55d], al
mov eax, dword [ebp - 0x5ac]
add al, 0x4c
xor al, 0x63
mov byte [ebp - 0x55c], al
mov eax, dword [ebp - 0x5ac]
add al, 0x4d
xor al, 0x6b
mov byte [ebp - 0x55b], al
mov eax, dword [ebp - 0x5ac]
add al, 0x4e
xor al, 0x6c
mov byte [ebp - 0x55a], al
mov eax, dword [ebp - 0x5ac]
add al, 0x4f
xor al, 0x69
mov byte [ebp - 0x559], al
mov eax, dword [ebp - 0x5ac]
add al, 0x50
xor al, 0x73
mov byte [ebp - 0x558], al
mov eax, dword [ebp - 0x5ac]
add al, 0x51
xor al, 0x74
mov byte [ebp - 0x557], al
mov eax, dword [ebp - 0x5ac]
add al, 0x52
xor al, 0x3d
mov byte [ebp - 0x556], al
mov eax, dword [ebp - 0x5ac]
add al, 0x53
mov byte [ebp - 0x554], 0
xor al, 0x31
xor edx, edx
mov byte [ebp - 0x555], al
mov al, byte [ebp - 0x5a8]
nop dword [eax + eax]
mov al, byte [ebp + edx - 0x5a8]
mov ecx, dword [ebp - 0x5ac]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x5a8], cl
inc edx
cmp edx, 0x54
jb 0x1001b560
push ebx
push edi
lea eax, [ebp - 0x5a8]
mov byte [ebp - 0x554], 0
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.1000f8f0
add esp, 0x10
lea ecx, [ebp - 0x7dc]
call fcn.10004e50
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x350]
push eax
mov eax, dword [sym.imp.WININET.dll_InternetOpenUrlA]
push esi
call eax
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x794]
call fcn.10004e50
jmp 0x1001be2b
mov eax, dword [0x100b82cc]
lea ecx, [ebp - 0x7ac]
mov eax, dword [eax + 0x3de]
mov eax, dword [eax + 8]
add eax, 6
push eax
call fcn.10004c80
push 1
push 0x1008a998
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 5
call fcn.10024840
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
push dword [ebp + 0x18]
cmovae eax, dword [ebp + 8]
lea ecx, [ebp - 0x7ac]
push eax
call fcn.10024840
cmp dword [ebp + 0x34], 0x10
lea ebx, [ebp + 0x20]
lea eax, [ebp - 0x7ac]
cmovae ebx, dword [ebp + 0x20]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10004c80
lea eax, [ebp - 0x7f4]
push eax
call fcn.10058880
mov edi, eax
add esp, 0x1c
cmp dword [edi + 0x14], 0x10
jb 0x1001b658
mov edi, dword [edi]
mov dword [ebp - 0x5fc], 0x19
mov eax, dword [ebp - 0x5fc]
xor al, 0x68
mov byte [ebp - 0x5f8], al
mov eax, dword [ebp - 0x5fc]
inc al
xor al, 0x74
mov byte [ebp - 0x5f7], al
mov eax, dword [ebp - 0x5fc]
add al, 2
xor al, 0x74
mov byte [ebp - 0x5f6], al
mov eax, dword [ebp - 0x5fc]
add al, 3
xor al, 0x70
mov byte [ebp - 0x5f5], al
mov eax, dword [ebp - 0x5fc]
add al, 4
xor al, 0x3a
mov byte [ebp - 0x5f4], al
mov eax, dword [ebp - 0x5fc]
add al, 5
xor al, 0x2f
mov byte [ebp - 0x5f3], al
mov eax, dword [ebp - 0x5fc]
add al, 6
xor al, 0x2f
mov byte [ebp - 0x5f2], al
mov eax, dword [ebp - 0x5fc]
add al, 7
xor al, 0x66
mov byte [ebp - 0x5f1], al
mov eax, dword [ebp - 0x5fc]
add al, 8
xor al, 0x61
mov byte [ebp - 0x5f0], al
mov eax, dword [ebp - 0x5fc]
add al, 9
xor al, 0x73
mov byte [ebp - 0x5ef], al
mov eax, dword [ebp - 0x5fc]
add al, 0xa
xor al, 0x74
mov byte [ebp - 0x5ee], al
mov eax, dword [ebp - 0x5fc]
add al, 0xb
xor al, 0x2e
mov byte [ebp - 0x5ed], al
mov eax, dword [ebp - 0x5fc]
add al, 0xc
xor al, 0x73
mov byte [ebp - 0x5ec], al
mov eax, dword [ebp - 0x5fc]
add al, 0xd
xor al, 0x65
mov byte [ebp - 0x5eb], al
mov eax, dword [ebp - 0x5fc]
add al, 0xe
xor al, 0x63
mov byte [ebp - 0x5ea], al
mov eax, dword [ebp - 0x5fc]
add al, 0xf
xor al, 0x2d
mov byte [ebp - 0x5e9], al
mov eax, dword [ebp - 0x5fc]
add al, 0x10
xor al, 0x6e
mov byte [ebp - 0x5e8], al
mov eax, dword [ebp - 0x5fc]
add al, 0x11
xor al, 0x69
mov byte [ebp - 0x5e7], al
mov eax, dword [ebp - 0x5fc]
add al, 0x12
xor al, 0x6e
mov byte [ebp - 0x5e6], al
mov eax, dword [ebp - 0x5fc]
add al, 0x13
xor al, 0x65
mov byte [ebp - 0x5e5], al
mov eax, dword [ebp - 0x5fc]
add al, 0x14
xor al, 0x2e
mov byte [ebp - 0x5e4], al
mov eax, dword [ebp - 0x5fc]
add al, 0x15
xor al, 0x63
mov byte [ebp - 0x5e3], al
mov eax, dword [ebp - 0x5fc]
add al, 0x16
xor al, 0x6f
mov byte [ebp - 0x5e2], al
mov eax, dword [ebp - 0x5fc]
add al, 0x17
xor al, 0x6d
mov byte [ebp - 0x5e1], al
mov eax, dword [ebp - 0x5fc]
add al, 0x18
xor al, 0x2f
mov byte [ebp - 0x5e0], al
mov eax, dword [ebp - 0x5fc]
add al, 0x19
xor al, 0x73
mov byte [ebp - 0x5df], al
mov eax, dword [ebp - 0x5fc]
add al, 0x1a
xor al, 0x65
mov byte [ebp - 0x5de], al
mov eax, dword [ebp - 0x5fc]
add al, 0x1b
xor al, 0x63
mov byte [ebp - 0x5dd], al
mov eax, dword [ebp - 0x5fc]
add al, 0x1c
xor al, 0x61
mov byte [ebp - 0x5dc], al
mov eax, dword [ebp - 0x5fc]
add al, 0x1d
xor al, 0x63
mov byte [ebp - 0x5db], al
mov eax, dword [ebp - 0x5fc]
add al, 0x1e
xor al, 0x2f
mov byte [ebp - 0x5da], al
mov eax, dword [ebp - 0x5fc]
add al, 0x1f
xor al, 0x6c
mov byte [ebp - 0x5d9], al
mov eax, dword [ebp - 0x5fc]
add al, 0x20
xor al, 0x6f
mov byte [ebp - 0x5d8], al
mov eax, dword [ebp - 0x5fc]
add al, 0x21
xor al, 0x73
mov byte [ebp - 0x5d7], al
mov eax, dword [ebp - 0x5fc]
add al, 0x22
xor al, 0x6c
mov byte [ebp - 0x5d6], al
mov eax, dword [ebp - 0x5fc]
add al, 0x23
xor al, 0x61
mov byte [ebp - 0x5d5], al
mov eax, dword [ebp - 0x5fc]
add al, 0x24
xor al, 0x6e
mov byte [ebp - 0x5d4], al
mov eax, dword [ebp - 0x5fc]
add al, 0x25
xor al, 0x64
mov byte [ebp - 0x5d3], al
mov eax, dword [ebp - 0x5fc]
add al, 0x26
xor al, 0x2f
mov byte [ebp - 0x5d2], al
mov eax, dword [ebp - 0x5fc]
add al, 0x27
xor al, 0x6d
mov byte [ebp - 0x5d1], al
mov eax, dword [ebp - 0x5fc]
add al, 0x28
xor al, 0x6f
mov byte [ebp - 0x5d0], al
mov eax, dword [ebp - 0x5fc]
add al, 0x29
xor al, 0x64
mov byte [ebp - 0x5cf], al
mov eax, dword [ebp - 0x5fc]
add al, 0x2a
xor al, 0x75
mov byte [ebp - 0x5ce], al
mov eax, dword [ebp - 0x5fc]
add al, 0x2b
xor al, 0x6c
mov byte [ebp - 0x5cd], al
mov eax, dword [ebp - 0x5fc]
add al, 0x2c
xor al, 0x65
mov byte [ebp - 0x5cc], al
mov eax, dword [ebp - 0x5fc]
add al, 0x2d
xor al, 0x72
mov byte [ebp - 0x5cb], al
mov eax, dword [ebp - 0x5fc]
add al, 0x2e
xor al, 0x65
mov byte [ebp - 0x5ca], al
mov eax, dword [ebp - 0x5fc]
add al, 0x2f
xor al, 0x70
mov byte [ebp - 0x5c9], al
mov eax, dword [ebp - 0x5fc]
add al, 0x30
xor al, 0x6f
mov byte [ebp - 0x5c8], al
mov eax, dword [ebp - 0x5fc]
add al, 0x31
xor al, 0x72
mov byte [ebp - 0x5c7], al
mov eax, dword [ebp - 0x5fc]
add al, 0x32
xor al, 0x74
mov byte [ebp - 0x5c6], al
mov eax, dword [ebp - 0x5fc]
add al, 0x33
xor al, 0x2e
mov byte [ebp - 0x5c5], al
mov eax, dword [ebp - 0x5fc]
add al, 0x34
xor al, 0x70
mov byte [ebp - 0x5c4], al
mov eax, dword [ebp - 0x5fc]
add al, 0x35
xor al, 0x68
mov byte [ebp - 0x5c3], al
mov eax, dword [ebp - 0x5fc]
add al, 0x36
xor al, 0x70
mov byte [ebp - 0x5c2], al
mov eax, dword [ebp - 0x5fc]
add al, 0x37
xor al, 0x3f
mov byte [ebp - 0x5c1], al
mov eax, dword [ebp - 0x5fc]
add al, 0x38
xor al, 0x76
mov byte [ebp - 0x5c0], al
mov eax, dword [ebp - 0x5fc]
add al, 0x39
xor al, 0x61
mov byte [ebp - 0x5bf], al
mov eax, dword [ebp - 0x5fc]
add al, 0x3a
xor al, 0x6c
mov byte [ebp - 0x5be], al
mov eax, dword [ebp - 0x5fc]
add al, 0x3b
xor al, 0x75
mov byte [ebp - 0x5bd], al
mov eax, dword [ebp - 0x5fc]
add al, 0x3c
xor al, 0x65
mov byte [ebp - 0x5bc], al
mov eax, dword [ebp - 0x5fc]
add al, 0x3d
xor al, 0x3d
mov byte [ebp - 0x5bb], al
mov eax, dword [ebp - 0x5fc]
add al, 0x3e
xor al, 0x25
mov byte [ebp - 0x5ba], al
mov eax, dword [ebp - 0x5fc]
add al, 0x3f
xor al, 0x73
mov byte [ebp - 0x5b9], al
mov eax, dword [ebp - 0x5fc]
add al, 0x40
xor al, 0x26
mov byte [ebp - 0x5b8], al
mov eax, dword [ebp - 0x5fc]
add al, 0x41
xor al, 0x68
mov byte [ebp - 0x5b7], al
mov eax, dword [ebp - 0x5fc]
add al, 0x42
xor al, 0x61
mov byte [ebp - 0x5b6], al
mov eax, dword [ebp - 0x5fc]
add al, 0x43
xor al, 0x73
mov byte [ebp - 0x5b5], al
mov eax, dword [ebp - 0x5fc]
add al, 0x44
xor al, 0x68
mov byte [ebp - 0x5b4], al
mov eax, dword [ebp - 0x5fc]
add al, 0x45
xor al, 0x3d
mov byte [ebp - 0x5b3], al
mov eax, dword [ebp - 0x5fc]
add al, 0x46
xor al, 0x25
mov byte [ebp - 0x5b2], al
mov eax, dword [ebp - 0x5fc]
add al, 0x47
mov byte [ebp - 0x5b0], 0
xor al, 0x73
xor edx, edx
mov byte [ebp - 0x5b1], al
mov al, byte [ebp - 0x5f8]
nop
mov al, byte [ebp + edx - 0x5f8]
mov ecx, dword [ebp - 0x5fc]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x5f8], cl
inc edx
cmp edx, 0x48
jb 0x1001baf0
push ebx
push edi
lea eax, [ebp - 0x5f8]
mov byte [ebp - 0x5b0], 0
push eax
lea eax, [ebp - 0x550]
push eax
call fcn.1000f8f0
add esp, 0x10
lea ecx, [ebp - 0x7f4]
call fcn.10004e50
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x550]
push eax
mov eax, dword [sym.imp.WININET.dll_InternetOpenUrlA]
push esi
call eax
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 3
call fcn.10004e50
mov dword [ebp - 0x66c], 0x7d
mov eax, dword [ebp - 0x66c]
xor al, 0x64
mov byte [ebp - 0x668], al
mov eax, dword [ebp - 0x66c]
inc al
xor al, 0x65
mov byte [ebp - 0x667], al
mov eax, dword [ebp - 0x66c]
add al, 2
xor al, 0x62
mov byte [ebp - 0x666], al
mov eax, dword [ebp - 0x66c]
add al, 3
xor al, 0x75
mov byte [ebp - 0x665], al
mov eax, dword [ebp - 0x66c]
add al, 4
xor al, 0x67
mov byte [ebp - 0x664], al
mov eax, dword [ebp - 0x66c]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x663], al
mov eax, dword [ebp - 0x66c]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x662], al
mov eax, dword [ebp - 0x66c]
add al, 7
xor al, 0x76
mov byte [ebp - 0x661], al
mov eax, dword [ebp - 0x66c]
add al, 8
xor al, 0x61
mov byte [ebp - 0x660], al
mov eax, dword [ebp - 0x66c]
add al, 9
xor al, 0x6c
mov byte [ebp - 0x65f], al
mov eax, dword [ebp - 0x66c]
add al, 0xa
xor al, 0x69
mov byte [ebp - 0x65e], al
mov eax, dword [ebp - 0x66c]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x65d], al
mov eax, dword [ebp - 0x66c]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x65c], al
mov eax, dword [ebp - 0x66c]
add al, 0xd
xor al, 0x74
mov byte [ebp - 0x65b], al
mov eax, dword [ebp - 0x66c]
add al, 0xe
xor al, 0x65
mov byte [ebp - 0x65a], al
mov eax, dword [ebp - 0x66c]
add al, 0xf
xor al, 0x6d
mov byte [ebp - 0x659], al
mov eax, dword [ebp - 0x66c]
add al, 0x10
xor al, 0x6f
mov byte [ebp - 0x658], al
mov eax, dword [ebp - 0x66c]
add al, 0x11
xor al, 0x64
mov byte [ebp - 0x657], al
mov eax, dword [ebp - 0x66c]
add al, 0x12
xor al, 0x75
mov byte [ebp - 0x656], al
mov eax, dword [ebp - 0x66c]
add al, 0x13
xor al, 0x6c
mov byte [ebp - 0x655], al
mov eax, dword [ebp - 0x66c]
add al, 0x14
xor al, 0x65
mov byte [ebp - 0x654], al
mov eax, dword [ebp - 0x66c]
add al, 0x15
xor al, 0x3a
mov byte [ebp - 0x653], al
mov eax, dword [ebp - 0x66c]
add al, 0x16
xor al, 0x3a
mov byte [ebp - 0x652], al
mov eax, dword [ebp - 0x66c]
add al, 0x17
xor al, 0x72
mov byte [ebp - 0x651], al
mov eax, dword [ebp - 0x66c]
add al, 0x18
xor al, 0x65
mov byte [ebp - 0x650], al
mov eax, dword [ebp - 0x66c]
add al, 0x19
xor al, 0x6c
mov byte [ebp - 0x64f], al
mov eax, dword [ebp - 0x66c]
add al, 0x1a
xor al, 0x65
mov byte [ebp - 0x64e], al
mov eax, dword [ebp - 0x66c]
add al, 0x1b
xor al, 0x61
mov byte [ebp - 0x64d], al
mov eax, dword [ebp - 0x66c]
add al, 0x1c
xor al, 0x73
mov byte [ebp - 0x64c], al
mov eax, dword [ebp - 0x66c]
add al, 0x1d
xor al, 0x65
mov byte [ebp - 0x64b], al
mov eax, dword [ebp - 0x66c]
add al, 0x1e
xor al, 0x3a
mov byte [ebp - 0x64a], al
mov eax, dword [ebp - 0x66c]
add al, 0x1f
xor al, 0x3a
mov byte [ebp - 0x649], al
mov eax, dword [ebp - 0x66c]
add al, 0x20
xor al, 0x73
mov byte [ebp - 0x648], al
mov eax, dword [ebp - 0x66c]
add al, 0x21
xor al, 0x75
mov byte [ebp - 0x647], al
mov eax, dword [ebp - 0x66c]
add al, 0x22
xor al, 0x63
mov byte [ebp - 0x646], al
mov eax, dword [ebp - 0x66c]
add al, 0x23
xor al, 0x63
mov byte [ebp - 0x645], al
mov eax, dword [ebp - 0x66c]
add al, 0x24
xor al, 0x65
mov byte [ebp - 0x644], al
mov eax, dword [ebp - 0x66c]
add al, 0x25
xor al, 0x73
mov byte [ebp - 0x643], al
mov eax, dword [ebp - 0x66c]
add al, 0x26
mov byte [ebp - 0x641], 0
xor al, 0x73
xor edx, edx
mov byte [ebp - 0x642], al
mov al, byte [ebp - 0x668]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x668]
mov ecx, dword [ebp - 0x66c]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x668], cl
inc edx
cmp edx, 0x27
jb 0x1001bdf0
lea eax, [ebp - 0x668]
mov byte [ebp - 0x641], 0
push eax
call fcn.100413d0
add esp, 4
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x7c4]
call fcn.10004e50
lea ecx, [ebp - 0x8ac]
call fcn.10011e40
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x10
jb 0x1001be71
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001be67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001becf
push ecx
push edx
call fcn.1005e1a2
add esp, 8
mov ecx, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 0xf
mov byte [ebp + 8], 0
cmp ecx, 0x10
jb 0x1001beb3
mov edx, dword [ebp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001bea9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001becf
push ecx
push edx
call fcn.1005e1a2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005e15b
mov esp, ebp
pop ebp
ret
call fcn.100633c1
int3