Function at 0x1001a940
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Create http request
Encode data using xor
Parse pe header
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008a0e1
mov eax, dword fs:[0]
push eax
sub esp, 0x898
mov eax, dword [0x100b8560]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
push 0
push 0
push 0x1008d9b0
mov dword [ebp - 4], 1
call dword [sym.imp.WININET.dll_InternetOpenA]
mov edi, eax
test edi, edi
jne 0x1001ad60
mov dword [ebp - 0x5d4], 0x57
mov eax, dword [ebp - 0x5d4]
xor al, 0x41
mov byte [ebp - 0x5d0], al
mov eax, dword [ebp - 0x5d4]
inc al
xor al, 0x6e
mov byte [ebp - 0x5cf], al
mov eax, dword [ebp - 0x5d4]
add al, 2
xor al, 0x74
mov byte [ebp - 0x5ce], al
mov eax, dword [ebp - 0x5d4]
add al, 3
xor al, 0x69
mov byte [ebp - 0x5cd], al
mov eax, dword [ebp - 0x5d4]
add al, 4
xor al, 0x63
mov byte [ebp - 0x5cc], al
mov eax, dword [ebp - 0x5d4]
add al, 5
xor al, 0x68
mov byte [ebp - 0x5cb], al
mov eax, dword [ebp - 0x5d4]
add al, 6
xor al, 0x65
mov byte [ebp - 0x5ca], al
mov eax, dword [ebp - 0x5d4]
add al, 7
xor al, 0x61
mov byte [ebp - 0x5c9], al
mov eax, dword [ebp - 0x5d4]
add al, 8
xor al, 0x74
mov byte [ebp - 0x5c8], al
mov eax, dword [ebp - 0x5d4]
add al, 9
xor al, 0x3a
mov byte [ebp - 0x5c7], al
mov eax, dword [ebp - 0x5d4]
add al, 0xa
xor al, 0x7b
mov byte [ebp - 0x5c6], al
mov eax, dword [ebp - 0x5d4]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x5c5], al
mov eax, dword [ebp - 0x5d4]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x5c4], al
mov eax, dword [ebp - 0x5d4]
add al, 0xd
xor al, 0x64
mov byte [ebp - 0x5c3], al
mov eax, dword [ebp - 0x5d4]
add al, 0xe
xor al, 0x61
mov byte [ebp - 0x5c2], al
mov eax, dword [ebp - 0x5d4]
add al, 0xf
xor al, 0x64
mov byte [ebp - 0x5c1], al
mov eax, dword [ebp - 0x5d4]
add al, 0x10
xor al, 0x61
mov byte [ebp - 0x5c0], al
mov eax, dword [ebp - 0x5d4]
add al, 0x11
xor al, 0x7d
mov byte [ebp - 0x5bf], al
mov eax, dword [ebp - 0x5d4]
add al, 0x12
xor al, 0x20
mov byte [ebp - 0x5be], al
mov eax, dword [ebp - 0x5d4]
add al, 0x13
xor al, 0x4d
mov byte [ebp - 0x5bd], al
mov eax, dword [ebp - 0x5d4]
add al, 0x14
xor al, 0x6f
mov byte [ebp - 0x5bc], al
mov eax, dword [ebp - 0x5d4]
add al, 0x15
xor al, 0x64
mov byte [ebp - 0x5bb], al
mov eax, dword [ebp - 0x5d4]
add al, 0x16
xor al, 0xfc
mov byte [ebp - 0x5ba], al
mov eax, dword [ebp - 0x5d4]
add al, 0x17
xor al, 0x6c
mov byte [ebp - 0x5b9], al
mov eax, dword [ebp - 0x5d4]
add al, 0x18
xor al, 0x20
mov byte [ebp - 0x5b8], al
mov eax, dword [ebp - 0x5d4]
add al, 0x19
xor al, 0x64
mov byte [ebp - 0x5b7], al
mov eax, dword [ebp - 0x5d4]
add al, 0x1a
xor al, 0x6f
mov byte [ebp - 0x5b6], al
mov eax, dword [ebp - 0x5d4]
add al, 0x1b
xor al, 0xf0
mov byte [ebp - 0x5b5], al
mov eax, dword [ebp - 0x5d4]
add al, 0x1c
xor al, 0x72
mov byte [ebp - 0x5b4], al
mov eax, dword [ebp - 0x5d4]
add al, 0x1d
xor al, 0x75
mov byte [ebp - 0x5b3], al
mov eax, dword [ebp - 0x5d4]
add al, 0x1e
xor al, 0x6c
mov byte [ebp - 0x5b2], al
mov eax, dword [ebp - 0x5d4]
add al, 0x1f
xor al, 0x61
mov byte [ebp - 0x5b1], al
mov eax, dword [ebp - 0x5d4]
add al, 0x20
xor al, 0x6e
mov byte [ebp - 0x5b0], al
mov eax, dword [ebp - 0x5d4]
add al, 0x21
xor al, 0xfd
mov byte [ebp - 0x5af], al
mov eax, dword [ebp - 0x5d4]
add al, 0x22
xor al, 0x72
mov byte [ebp - 0x5ae], al
mov eax, dword [ebp - 0x5d4]
add al, 0x23
xor al, 0x6b
mov byte [ebp - 0x5ad], al
mov eax, dword [ebp - 0x5d4]
add al, 0x24
xor al, 0x65
mov byte [ebp - 0x5ac], al
mov eax, dword [ebp - 0x5d4]
add al, 0x25
xor al, 0x6e
mov byte [ebp - 0x5ab], al
mov eax, dword [ebp - 0x5d4]
add al, 0x26
xor al, 0x20
mov byte [ebp - 0x5aa], al
mov eax, dword [ebp - 0x5d4]
add al, 0x27
xor al, 0x62
mov byte [ebp - 0x5a9], al
mov eax, dword [ebp - 0x5d4]
add al, 0x28
xor al, 0x69
mov byte [ebp - 0x5a8], al
mov eax, dword [ebp - 0x5d4]
add al, 0x29
xor al, 0x72
mov byte [ebp - 0x5a7], al
mov eax, dword [ebp - 0x5d4]
add al, 0x2a
xor al, 0x20
mov byte [ebp - 0x5a6], al
mov eax, dword [ebp - 0x5d4]
add al, 0x2b
xor al, 0x73
mov byte [ebp - 0x5a5], al
mov eax, dword [ebp - 0x5d4]
add al, 0x2c
xor al, 0x6f
mov byte [ebp - 0x5a4], al
mov eax, dword [ebp - 0x5d4]
add al, 0x2d
xor al, 0x72
mov byte [ebp - 0x5a3], al
mov eax, dword [ebp - 0x5d4]
add al, 0x2e
xor al, 0x75
mov byte [ebp - 0x5a2], al
mov eax, dword [ebp - 0x5d4]
add al, 0x2f
xor al, 0x6e
mov byte [ebp - 0x5a1], al
mov eax, dword [ebp - 0x5d4]
add al, 0x30
xor al, 0x20
mov byte [ebp - 0x5a0], al
mov eax, dword [ebp - 0x5d4]
add al, 0x31
xor al, 0x6f
mov byte [ebp - 0x59f], al
mov eax, dword [ebp - 0x5d4]
add al, 0x32
xor al, 0x6c
mov byte [ebp - 0x59e], al
mov eax, dword [ebp - 0x5d4]
add al, 0x33
xor al, 0x75
mov byte [ebp - 0x59d], al
mov eax, dword [ebp - 0x5d4]
add al, 0x34
xor al, 0xfe
mov byte [ebp - 0x59c], al
mov eax, dword [ebp - 0x5d4]
add al, 0x35
xor al, 0x74
mov byte [ebp - 0x59b], al
mov eax, dword [ebp - 0x5d4]
add al, 0x36
xor al, 0x75
mov byte [ebp - 0x59a], al
mov eax, dword [ebp - 0x5d4]
add al, 0x37
mov byte [ebp - 0x598], 0
xor al, 0x2e
xor edx, edx
mov byte [ebp - 0x599], al
mov al, byte [ebp - 0x5d0]
nop dword [eax]
mov al, byte [ebp + edx - 0x5d0]
mov ecx, dword [ebp - 0x5d4]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x5d0], cl
inc edx
cmp edx, 0x38
jb 0x1001ad30
mov byte [ebp - 0x598], 0
lea eax, [ebp - 0x5d0]
jmp 0x1001b37b
cmp dword [ebp + 0x34], 0x10
lea edx, [ebp + 0x20]
cmovae edx, dword [ebp + 0x20]
xor ecx, ecx
mov byte [ebp - 0x690], 0x73
mov byte [ebp - 0x68f], 0x7f
mov byte [ebp - 0x68e], 0x7f
mov byte [ebp - 0x68d], 0x7b
mov byte [ebp - 0x68c], 0x45
mov byte [ebp - 0x68b], 0x3a
mov byte [ebp - 0x68a], 0x3a
mov byte [ebp - 0x689], 0x71
mov byte [ebp - 0x688], 0x6c
mov byte [ebp - 0x687], 0x7e
mov byte [ebp - 0x686], 0x7f
mov byte [ebp - 0x685], 0x39
mov byte [ebp - 0x684], 0x7e
mov byte [ebp - 0x683], 0x70
mov byte [ebp - 0x682], 0x6e
mov byte [ebp - 0x681], 0x38
mov byte [ebp - 0x680], 0x79
mov byte [ebp - 0x67f], 0x74
mov byte [ebp - 0x67e], 0x79
mov byte [ebp - 0x67d], 0x70
mov byte [ebp - 0x67c], 0x39
mov byte [ebp - 0x67b], 0x6e
mov byte [ebp - 0x67a], 0x7a
mov byte [ebp - 0x679], 0x78
mov byte [ebp - 0x678], 0x3a
mov byte [ebp - 0x677], 0x7e
mov byte [ebp - 0x676], 0x70
mov byte [ebp - 0x675], 0x6e
mov byte [ebp - 0x674], 0x6c
mov byte [ebp - 0x673], 0x6e
mov byte [ebp - 0x672], 0x3a
mov byte [ebp - 0x671], 0x77
mov byte [ebp - 0x670], 0x7a
mov byte [ebp - 0x66f], 0x7e
mov byte [ebp - 0x66e], 0x77
mov byte [ebp - 0x66d], 0x6c
mov byte [ebp - 0x66c], 0x79
mov byte [ebp - 0x66b], 0x6f
mov byte [ebp - 0x66a], 0x3a
mov byte [ebp - 0x669], 0x78
mov byte [ebp - 0x668], 0x7a
mov byte [ebp - 0x667], 0x6f
mov byte [ebp - 0x666], 0x80
mov byte [ebp - 0x665], 0x77
mov byte [ebp - 0x664], 0x70
mov byte [ebp - 0x663], 0x39
mov byte [ebp - 0x662], 0x7b
mov byte [ebp - 0x661], 0x73
mov byte [ebp - 0x660], 0x7b
mov byte [ebp - 0x65f], 0x4a
mov byte [ebp - 0x65e], 0x81
mov byte [ebp - 0x65d], 0x6c
mov byte [ebp - 0x65c], 0x77
mov byte [ebp - 0x65b], 0x80
mov byte [ebp - 0x65a], 0x70
mov byte [ebp - 0x659], 0x48
mov byte [ebp - 0x658], 0x30
mov byte [ebp - 0x657], 0x7e
mov byte [ebp - 0x656], 0
mov al, byte [ebp - 0x690]
mov al, byte [ebp + ecx - 0x690]
sub al, 0xb
mov byte [ebp + ecx - 0x690], al
inc ecx
cmp ecx, 0x3a
jb 0x1001af10
push edx
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.10010060
add esp, 0xc
lea eax, [ebp - 0x150]
push 0
push 0
push 0
push 0
push eax
push edi
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov esi, eax
test esi, esi
jne 0x1001b398
mov dword [ebp - 0x594], 0x3d
mov eax, dword [ebp - 0x594]
xor al, 0x41
mov byte [ebp - 0x590], al
mov eax, dword [ebp - 0x594]
inc al
xor al, 0x6e
mov byte [ebp - 0x58f], al
mov eax, dword [ebp - 0x594]
add al, 2
xor al, 0x74
mov byte [ebp - 0x58e], al
mov eax, dword [ebp - 0x594]
add al, 3
xor al, 0x69
mov byte [ebp - 0x58d], al
mov eax, dword [ebp - 0x594]
add al, 4
xor al, 0x63
mov byte [ebp - 0x58c], al
mov eax, dword [ebp - 0x594]
add al, 5
xor al, 0x68
mov byte [ebp - 0x58b], al
mov eax, dword [ebp - 0x594]
add al, 6
xor al, 0x65
mov byte [ebp - 0x58a], al
mov eax, dword [ebp - 0x594]
add al, 7
xor al, 0x61
mov byte [ebp - 0x589], al
mov eax, dword [ebp - 0x594]
add al, 8
xor al, 0x74
mov byte [ebp - 0x588], al
mov eax, dword [ebp - 0x594]
add al, 9
xor al, 0x3a
mov byte [ebp - 0x587], al
mov eax, dword [ebp - 0x594]
add al, 0xa
xor al, 0x7b
mov byte [ebp - 0x586], al
mov eax, dword [ebp - 0x594]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x585], al
mov eax, dword [ebp - 0x594]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x584], al
mov eax, dword [ebp - 0x594]
add al, 0xd
xor al, 0x64
mov byte [ebp - 0x583], al
mov eax, dword [ebp - 0x594]
add al, 0xe
xor al, 0x61
mov byte [ebp - 0x582], al
mov eax, dword [ebp - 0x594]
add al, 0xf
xor al, 0x64
mov byte [ebp - 0x581], al
mov eax, dword [ebp - 0x594]
add al, 0x10
xor al, 0x61
mov byte [ebp - 0x580], al
mov eax, dword [ebp - 0x594]
add al, 0x11
xor al, 0x7d
mov byte [ebp - 0x57f], al
mov eax, dword [ebp - 0x594]
add al, 0x12
xor al, 0x20
mov byte [ebp - 0x57e], al
mov eax, dword [ebp - 0x594]
add al, 0x13
xor al, 0x4d
mov byte [ebp - 0x57d], al
mov eax, dword [ebp - 0x594]
add al, 0x14
xor al, 0x6f
mov byte [ebp - 0x57c], al
mov eax, dword [ebp - 0x594]
add al, 0x15
xor al, 0x64
mov byte [ebp - 0x57b], al
mov eax, dword [ebp - 0x594]
add al, 0x16
xor al, 0xfc
mov byte [ebp - 0x57a], al
mov eax, dword [ebp - 0x594]
add al, 0x17
xor al, 0x6c
mov byte [ebp - 0x579], al
mov eax, dword [ebp - 0x594]
add al, 0x18
xor al, 0x20
mov byte [ebp - 0x578], al
mov eax, dword [ebp - 0x594]
add al, 0x19
xor al, 0x64
mov byte [ebp - 0x577], al
mov eax, dword [ebp - 0x594]
add al, 0x1a
xor al, 0x6f
mov byte [ebp - 0x576], al
mov eax, dword [ebp - 0x594]
add al, 0x1b
xor al, 0xf0
mov byte [ebp - 0x575], al
mov eax, dword [ebp - 0x594]
add al, 0x1c
xor al, 0x72
mov byte [ebp - 0x574], al
mov eax, dword [ebp - 0x594]
add al, 0x1d
xor al, 0x75
mov byte [ebp - 0x573], al
mov eax, dword [ebp - 0x594]
add al, 0x1e
xor al, 0x6c
mov byte [ebp - 0x572], al
mov eax, dword [ebp - 0x594]
add al, 0x1f
xor al, 0x61
mov byte [ebp - 0x571], al
mov eax, dword [ebp - 0x594]
add al, 0x20
xor al, 0x6e
mov byte [ebp - 0x570], al
mov eax, dword [ebp - 0x594]
add al, 0x21
xor al, 0xfd
mov byte [ebp - 0x56f], al
mov eax, dword [ebp - 0x594]
add al, 0x22
xor al, 0x72
mov byte [ebp - 0x56e], al
mov eax, dword [ebp - 0x594]
add al, 0x23
xor al, 0x6b
mov byte [ebp - 0x56d], al
mov eax, dword [ebp - 0x594]
add al, 0x24
xor al, 0x65
mov byte [ebp - 0x56c], al
mov eax, dword [ebp - 0x594]
add al, 0x25
xor al, 0x6e
mov byte [ebp - 0x56b], al
mov eax, dword [ebp - 0x594]
add al, 0x26
xor al, 0x20
mov byte [ebp - 0x56a], al
mov eax, dword [ebp - 0x594]
add al, 0x27
xor al, 0x62
mov byte [ebp - 0x569], al
mov eax, dword [ebp - 0x594]
add al, 0x28
xor al, 0x69
mov byte [ebp - 0x568], al
mov eax, dword [ebp - 0x594]
add al, 0x29
xor al, 0x72
mov byte [ebp - 0x567], al
mov eax, dword [ebp - 0x594]
add al, 0x2a
xor al, 0x20
mov byte [ebp - 0x566], al
mov eax, dword [ebp - 0x594]
add al, 0x2b
xor al, 0x73
mov byte [ebp - 0x565], al
mov eax, dword [ebp - 0x594]
add al, 0x2c
xor al, 0x6f
mov byte [ebp - 0x564], al
mov eax, dword [ebp - 0x594]
add al, 0x2d
xor al, 0x72
mov byte [ebp - 0x563], al
mov eax, dword [ebp - 0x594]
add al, 0x2e
xor al, 0x75
mov byte [ebp - 0x562], al
mov eax, dword [ebp - 0x594]
add al, 0x2f
xor al, 0x6e
mov byte [ebp - 0x561], al
mov eax, dword [ebp - 0x594]
add al, 0x30
xor al, 0x20
mov byte [ebp - 0x560], al
mov eax, dword [ebp - 0x594]
add al, 0x31
xor al, 0x6f
mov byte [ebp - 0x55f], al
mov eax, dword [ebp - 0x594]
add al, 0x32
xor al, 0x6c
mov byte [ebp - 0x55e], al
mov eax, dword [ebp - 0x594]
add al, 0x33
xor al, 0x75
mov byte [ebp - 0x55d], al
mov eax, dword [ebp - 0x594]
add al, 0x34
xor al, 0xfe
mov byte [ebp - 0x55c], al
mov eax, dword [ebp - 0x594]
add al, 0x35
xor al, 0x74
mov byte [ebp - 0x55b], al
mov eax, dword [ebp - 0x594]
add al, 0x36
xor al, 0x75
mov byte [ebp - 0x55a], al
mov eax, dword [ebp - 0x594]
add al, 0x37
xor al, 0x2e
mov byte [ebp - 0x559], al
mov eax, dword [ebp - 0x594]
add al, 0x38
xor al, 0x20
mov byte [ebp - 0x558], al
mov eax, dword [ebp - 0x594]
add al, 0x39
xor al, 0x28
mov byte [ebp - 0x557], al
mov eax, dword [ebp - 0x594]
add al, 0x3a
xor al, 0x23
mov byte [ebp - 0x556], al
mov eax, dword [ebp - 0x594]
add al, 0x3b
xor al, 0x32
mov byte [ebp - 0x555], al
mov eax, dword [ebp - 0x594]
add al, 0x3c
xor al, 0x29
mov byte [ebp - 0x554], al
xor edx, edx
mov al, byte [ebp - 0x590]
mov byte [ebp - 0x553], 0
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + edx - 0x590]
mov ecx, dword [ebp - 0x594]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x590], cl
inc edx
cmp edx, 0x3d
jb 0x1001b350
mov byte [ebp - 0x553], 0
lea eax, [ebp - 0x590]
push eax
push 0xff6961
call fcn.10008ff0
add esp, 8
push 2
call fcn.10027e10
add esp, 4
jmp 0x1001c2e1
mov dword [ebp - 0x624], 0x62
mov eax, dword [ebp - 0x624]
xor al, 0x64
mov byte [ebp - 0x620], al
mov eax, dword [ebp - 0x624]
inc al
xor al, 0x65
mov byte [ebp - 0x61f], al
mov eax, dword [ebp - 0x624]
add al, 2
xor al, 0x62
mov byte [ebp - 0x61e], al
mov eax, dword [ebp - 0x624]
add al, 3
xor al, 0x75
mov byte [ebp - 0x61d], al
mov eax, dword [ebp - 0x624]
add al, 4
xor al, 0x67
mov byte [ebp - 0x61c], al
mov eax, dword [ebp - 0x624]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x61b], al
mov eax, dword [ebp - 0x624]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x61a], al
mov eax, dword [ebp - 0x624]
add al, 7
xor al, 0x76
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x624]
add al, 8
xor al, 0x61
mov byte [ebp - 0x618], al
mov eax, dword [ebp - 0x624]
add al, 9
xor al, 0x6c
mov byte [ebp - 0x617], al
mov eax, dword [ebp - 0x624]
add al, 0xa
xor al, 0x69
mov byte [ebp - 0x616], al
mov eax, dword [ebp - 0x624]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x615], al
mov eax, dword [ebp - 0x624]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x614], al
mov eax, dword [ebp - 0x624]
add al, 0xd
xor al, 0x74
mov byte [ebp - 0x613], al
mov eax, dword [ebp - 0x624]
add al, 0xe
xor al, 0x65
mov byte [ebp - 0x612], al
mov eax, dword [ebp - 0x624]
add al, 0xf
xor al, 0x6d
mov byte [ebp - 0x611], al
mov eax, dword [ebp - 0x624]
add al, 0x10
xor al, 0x6f
mov byte [ebp - 0x610], al
mov eax, dword [ebp - 0x624]
add al, 0x11
xor al, 0x64
mov byte [ebp - 0x60f], al
mov eax, dword [ebp - 0x624]
add al, 0x12
xor al, 0x75
mov byte [ebp - 0x60e], al
mov eax, dword [ebp - 0x624]
add al, 0x13
xor al, 0x6c
mov byte [ebp - 0x60d], al
mov eax, dword [ebp - 0x624]
add al, 0x14
xor al, 0x65
mov byte [ebp - 0x60c], al
mov eax, dword [ebp - 0x624]
add al, 0x15
xor al, 0x3a
mov byte [ebp - 0x60b], al
mov eax, dword [ebp - 0x624]
add al, 0x16
xor al, 0x3a
mov byte [ebp - 0x60a], al
mov eax, dword [ebp - 0x624]
add al, 0x17
xor al, 0x63
mov byte [ebp - 0x609], al
mov eax, dword [ebp - 0x624]
add al, 0x18
xor al, 0x6f
mov byte [ebp - 0x608], al
mov eax, dword [ebp - 0x624]
add al, 0x19
xor al, 0x6e
mov byte [ebp - 0x607], al
mov eax, dword [ebp - 0x624]
add al, 0x1a
xor al, 0x6e
mov byte [ebp - 0x606], al
mov eax, dword [ebp - 0x624]
add al, 0x1b
xor al, 0x65
mov byte [ebp - 0x605], al
mov eax, dword [ebp - 0x624]
add al, 0x1c
xor al, 0x63
mov byte [ebp - 0x604], al
mov eax, dword [ebp - 0x624]
add al, 0x1d
mov byte [ebp - 0x602], 0
xor al, 0x74
xor edx, edx
mov byte [ebp - 0x603], al
mov al, byte [ebp - 0x620]
nop
mov al, byte [ebp + edx - 0x620]
mov ecx, dword [ebp - 0x624]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x620], cl
inc edx
cmp edx, 0x1e
jb 0x1001b590
lea eax, [ebp - 0x620]
mov byte [ebp - 0x602], 0
push eax
call fcn.10044ed0
add esp, 4
mov dword [ebp - 0x7f0], 0
lea ecx, [ebp - 0x8a4]
push 1
call fcn.10010b90
mov ebx, dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [ebp - 0x7f0]
mov byte [ebp - 4], 2
nop dword [eax + eax]
push 0
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x894]
call fcn.1002ce40
lea eax, [ebp - 0x7f0]
push eax
push 0x40
lea eax, [ebp - 0x50]
push eax
push esi
call ebx
mov eax, dword [ebp - 0x7f0]
test eax, eax
jne 0x1001b5f0
mov byte [ebp - 0x654], 0x69
xor ecx, ecx
mov byte [ebp - 0x653], 0x6a
mov byte [ebp - 0x652], 0x67
mov byte [ebp - 0x651], 0x7a
mov byte [ebp - 0x650], 0x6c
mov byte [ebp - 0x64f], 0x3f
mov byte [ebp - 0x64e], 0x3f
mov byte [ebp - 0x64d], 0x7b
mov byte [ebp - 0x64c], 0x66
mov byte [ebp - 0x64b], 0x71
mov byte [ebp - 0x64a], 0x6e
mov byte [ebp - 0x649], 0x69
mov byte [ebp - 0x648], 0x66
mov byte [ebp - 0x647], 0x79
mov byte [ebp - 0x646], 0x6a
mov byte [ebp - 0x645], 0x72
mov byte [ebp - 0x644], 0x74
mov byte [ebp - 0x643], 0x69
mov byte [ebp - 0x642], 0x7a
mov byte [ebp - 0x641], 0x71
mov byte [ebp - 0x640], 0x6a
mov byte [ebp - 0x63f], 0x3f
mov byte [ebp - 0x63e], 0x3f
mov byte [ebp - 0x63d], 0x77
mov byte [ebp - 0x63c], 0x6a
mov byte [ebp - 0x63b], 0x71
mov byte [ebp - 0x63a], 0x6a
mov byte [ebp - 0x639], 0x66
mov byte [ebp - 0x638], 0x78
mov byte [ebp - 0x637], 0x6a
mov byte [ebp - 0x636], al
mov al, byte [ebp - 0x654]
nop dword [eax]
mov al, byte [ebp + ecx - 0x654]
sub al, 5
mov byte [ebp + ecx - 0x654], al
inc ecx
cmp ecx, 0x1e
jb 0x1001b700
lea eax, [ebp - 0x654]
push eax
call fcn.10044ed0
inc dword [0x100be358]
lea eax, [ebp - 0x7bc]
add esp, 4
lea ecx, [ebp - 0x8a4]
push eax
call fcn.1002c880
cmp dword [ebp - 0x7ac], 2
mov byte [ebp - 4], 3
je 0x1001bffc
cmp dword [ebp + 0x34], 0x10
lea edx, [ebp + 0x20]
lea esi, [ebp + 8]
cmovae edx, dword [ebp + 0x20]
cmp dword [ebp + 0x1c], 0x10
cmovae esi, dword [ebp + 8]
xor ecx, ecx
mov byte [ebp - 0x634], 0x66
mov byte [ebp - 0x633], 0x67
mov byte [ebp - 0x632], 0x64
mov byte [ebp - 0x631], 0x77
mov byte [ebp - 0x630], 0x69
mov byte [ebp - 0x62f], 0x3c
mov byte [ebp - 0x62e], 0x3c
mov byte [ebp - 0x62d], 0x27
mov byte [ebp - 0x62c], 0x75
mov byte [ebp - 0x62b], 0x3c
mov byte [ebp - 0x62a], 0x3c
mov byte [ebp - 0x629], 0x27
mov byte [ebp - 0x628], 0x75
mov byte [ebp - 0x627], 0
mov al, byte [ebp - 0x634]
nop
mov al, byte [ebp + ecx - 0x634]
sub al, 2
mov byte [ebp + ecx - 0x634], al
inc ecx
cmp ecx, 0xd
jb 0x1001b7d0
push edx
lea eax, [ebp - 0x634]
push esi
push eax
call fcn.10044ed0
add esp, 0xc
cmp dword [ebp - 0x7ac], 3
jne 0x1001bcf7
cmp dword [ebp + 0x1c], 0x10
lea esi, [ebp + 8]
lea ecx, [ebp - 0x774]
mov byte [ebp - 0x73c], 0
cmovae esi, dword [ebp + 8]
mov dword [ebp - 0x774], 0x39
mov byte [ebp - 0x770], 0x78
mov byte [ebp - 0x76f], 0x57
mov byte [ebp - 0x76e], 0x4d
mov byte [ebp - 0x76d], 0x50
mov byte [ebp - 0x76c], 0x5a
mov byte [ebp - 0x76b], 0x51
mov byte [ebp - 0x76a], 0x5c
mov byte [ebp - 0x769], 0x58
mov byte [ebp - 0x768], 0x4d
mov byte [ebp - 0x767], 3
mov byte [ebp - 0x766], 0x42
mov byte [ebp - 0x765], 0x5d
mov byte [ebp - 0x764], 0x58
mov byte [ebp - 0x763], 0x5d
mov byte [ebp - 0x762], 0x58
mov byte [ebp - 0x761], 0x5d
mov byte [ebp - 0x760], 0x58
mov byte [ebp - 0x75f], 0x44
mov byte [ebp - 0x75e], 0x19
mov byte [ebp - 0x75d], 0xe4
mov byte [ebp - 0x75c], 0x43
mov byte [ebp - 0x75b], 0x50
mov byte [ebp - 0x75a], 0x57
mov byte [ebp - 0x759], 0x4a
mov byte [ebp - 0x758], 0x50
mov byte [ebp - 0x757], 0x43
mov byte [ebp - 0x756], 0x19
mov byte [ebp - 0x755], 0x54
mov byte [ebp - 0x754], 0x56
mov byte [ebp - 0x753], 0x5d
mov byte [ebp - 0x752], 0xc5
mov byte [ebp - 0x751], 0x55
mov byte [ebp - 0x750], 0x19
mov byte [ebp - 0x74f], 0x4d
mov byte [ebp - 0x74e], 0x5c
mov byte [ebp - 0x74d], 0x4a
mov byte [ebp - 0x74c], 0x49
mov byte [ebp - 0x74b], 0x50
mov byte [ebp - 0x74a], 0x4d
mov byte [ebp - 0x749], 0x19
mov byte [ebp - 0x748], 0x5c
mov byte [ebp - 0x747], 0x5d
mov byte [ebp - 0x746], 0x50
mov byte [ebp - 0x745], 0x55
mov byte [ebp - 0x744], 0x5d
mov byte [ebp - 0x743], 0x50
mov byte [ebp - 0x742], 0x17
mov byte [ebp - 0x741], 0x19
mov byte [ebp - 0x740], 0x11
mov byte [ebp - 0x73f], 0x1c
mov byte [ebp - 0x73e], 0x4a
mov byte [ebp - 0x73d], 0x10
mov al, byte [ebp - 0x770]
call fcn.1002a1b0
push esi
push eax
push 0xff6961
call fcn.10008ff0
push 2
call fcn.10027e10
mov eax, dword [0x100bc2ec]
lea ecx, [ebp - 0x78c]
add esp, 0x10
mov eax, dword [eax + 0x3de]
mov eax, dword [eax + 8]
add eax, 6
push eax
call fcn.10004c70
push 1
push 0x1008d9b8
lea ecx, [ebp - 0x78c]
mov byte [ebp - 4], 4
call fcn.100298f0
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp - 0x78c]
push dword [ebp + 0x18]
cmovae eax, dword [ebp + 8]
push eax
call fcn.100298f0
cmp dword [ebp + 0x34], 0x10
lea esi, [ebp + 0x20]
lea eax, [ebp - 0x78c]
cmovae esi, dword [ebp + 0x20]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10004c70
lea eax, [ebp - 0x7d4]
push eax
call fcn.1005afb0
mov edx, eax
add esp, 0x1c
cmp dword [edx + 0x14], 0x10
jb 0x1001ba35
mov edx, dword [edx]
mov byte [ebp - 0x6e8], 0x69
mov byte [ebp - 0x6e7], 0x75
mov byte [ebp - 0x6e6], 0x75
mov byte [ebp - 0x6e5], 0x71
mov byte [ebp - 0x6e4], 0x3b
mov byte [ebp - 0x6e3], 0x30
mov byte [ebp - 0x6e2], 0x30
mov byte [ebp - 0x6e1], 0x67
mov byte [ebp - 0x6e0], 0x62
mov byte [ebp - 0x6df], 0x74
mov byte [ebp - 0x6de], 0x75
mov byte [ebp - 0x6dd], 0x2f
mov byte [ebp - 0x6dc], 0x74
mov byte [ebp - 0x6db], 0x66
mov byte [ebp - 0x6da], 0x64
mov byte [ebp - 0x6d9], 0x2e
mov byte [ebp - 0x6d8], 0x6f
mov byte [ebp - 0x6d7], 0x6a
mov byte [ebp - 0x6d6], 0x6f
mov byte [ebp - 0x6d5], 0x66
mov byte [ebp - 0x6d4], 0x2f
mov byte [ebp - 0x6d3], 0x64
mov byte [ebp - 0x6d2], 0x70
mov byte [ebp - 0x6d1], 0x6e
mov byte [ebp - 0x6d0], 0x30
mov byte [ebp - 0x6cf], 0x74
mov byte [ebp - 0x6ce], 0x66
mov byte [ebp - 0x6cd], 0x64
mov byte [ebp - 0x6cc], 0x62
mov byte [ebp - 0x6cb], 0x64
mov byte [ebp - 0x6ca], 0x30
mov byte [ebp - 0x6c9], 0x6d
mov byte [ebp - 0x6c8], 0x70
mov byte [ebp - 0x6c7], 0x74
mov byte [ebp - 0x6c6], 0x6d
mov byte [ebp - 0x6c5], 0x62
mov byte [ebp - 0x6c4], 0x6f
mov byte [ebp - 0x6c3], 0x65
mov byte [ebp - 0x6c2], 0x30
mov byte [ebp - 0x6c1], 0x6e
mov byte [ebp - 0x6c0], 0x70
mov byte [ebp - 0x6bf], 0x65
mov byte [ebp - 0x6be], 0x76
mov byte [ebp - 0x6bd], 0x6d
mov byte [ebp - 0x6bc], 0x66
mov byte [ebp - 0x6bb], 0x73
mov byte [ebp - 0x6ba], 0x66
mov byte [ebp - 0x6b9], 0x71
mov byte [ebp - 0x6b8], 0x70
mov byte [ebp - 0x6b7], 0x73
mov byte [ebp - 0x6b6], 0x75
mov byte [ebp - 0x6b5], 0x2f
mov byte [ebp - 0x6b4], 0x71
mov byte [ebp - 0x6b3], 0x69
mov byte [ebp - 0x6b2], 0x71
mov byte [ebp - 0x6b1], 0x40
mov byte [ebp - 0x6b0], 0x77
mov byte [ebp - 0x6af], 0x62
mov byte [ebp - 0x6ae], 0x6d
mov byte [ebp - 0x6ad], 0x76
mov byte [ebp - 0x6ac], 0x66
mov byte [ebp - 0x6ab], 0x3e
mov byte [ebp - 0x6aa], 0x26
mov byte [ebp - 0x6a9], 0x74
mov byte [ebp - 0x6a8], 0x27
mov byte [ebp - 0x6a7], 0x69
mov byte [ebp - 0x6a6], 0x62
mov byte [ebp - 0x6a5], 0x74
mov byte [ebp - 0x6a4], 0x69
mov byte [ebp - 0x6a3], 0x3e
mov byte [ebp - 0x6a2], 0x26
mov byte [ebp - 0x6a1], 0x74
mov byte [ebp - 0x6a0], 0x27
mov byte [ebp - 0x69f], 0x63
mov byte [ebp - 0x69e], 0x6d
mov byte [ebp - 0x69d], 0x62
mov byte [ebp - 0x69c], 0x64
mov byte [ebp - 0x69b], 0x6c
mov byte [ebp - 0x69a], 0x6d
mov byte [ebp - 0x699], 0x6a
mov byte [ebp - 0x698], 0x74
mov byte [ebp - 0x697], 0x75
xor ecx, ecx
mov byte [ebp - 0x696], 0x3e
mov byte [ebp - 0x695], 0x32
mov byte [ebp - 0x694], 0
mov al, byte [ebp - 0x6e8]
mov al, byte [ebp + ecx - 0x6e8]
dec al
mov byte [ebp + ecx - 0x6e8], al
inc ecx
cmp ecx, 0x54
jb 0x1001bc90
push esi
push edx
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.10010030
add esp, 0x10
lea ecx, [ebp - 0x7d4]
call fcn.10004e40
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x350]
push eax
mov eax, dword [sym.imp.WININET.dll_InternetOpenUrlA]
push edi
call eax
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x78c]
call fcn.10004e40
jmp 0x1001c2cb
mov eax, dword [0x100bc2ec]
lea ecx, [ebp - 0x7a4]
mov eax, dword [eax + 0x3de]
mov eax, dword [eax + 8]
add eax, 6
push eax
call fcn.10004c70
push 1
push 0x1008d9b8
lea ecx, [ebp - 0x7a4]
mov byte [ebp - 4], 5
call fcn.100298f0
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
push dword [ebp + 0x18]
cmovae eax, dword [ebp + 8]
lea ecx, [ebp - 0x7a4]
push eax
call fcn.100298f0
cmp dword [ebp + 0x34], 0x10
lea ebx, [ebp + 0x20]
lea eax, [ebp - 0x7a4]
cmovae ebx, dword [ebp + 0x20]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10004c70
lea eax, [ebp - 0x7ec]
push eax
call fcn.1005afb0
mov esi, eax
add esp, 0x1c
cmp dword [esi + 0x14], 0x10
jb 0x1001bd79
mov esi, dword [esi]
mov dword [ebp - 0x738], 0x6d
xor edx, edx
mov byte [ebp - 0x734], 5
mov byte [ebp - 0x733], 0x19
mov byte [ebp - 0x732], 0x19
mov byte [ebp - 0x731], 0x1d
mov byte [ebp - 0x730], 0x57
mov byte [ebp - 0x72f], 0x42
mov byte [ebp - 0x72e], 0x42
mov byte [ebp - 0x72d], 0xb
mov byte [ebp - 0x72c], 0xc
mov byte [ebp - 0x72b], 0x1e
mov byte [ebp - 0x72a], 0x19
mov byte [ebp - 0x729], 0x43
mov byte [ebp - 0x728], 0x1e
mov byte [ebp - 0x727], 8
mov byte [ebp - 0x726], 0xe
mov byte [ebp - 0x725], 0x40
mov byte [ebp - 0x724], 3
mov byte [ebp - 0x723], 4
mov byte [ebp - 0x722], 3
mov byte [ebp - 0x721], 8
mov byte [ebp - 0x720], 0x43
mov byte [ebp - 0x71f], 0xe
mov byte [ebp - 0x71e], 2
mov byte [ebp - 0x71d], 0
mov byte [ebp - 0x71c], 0x42
mov byte [ebp - 0x71b], 0x1e
mov byte [ebp - 0x71a], 8
mov byte [ebp - 0x719], 0xe
mov byte [ebp - 0x718], 0xc
mov byte [ebp - 0x717], 0xe
mov byte [ebp - 0x716], 0x42
mov byte [ebp - 0x715], 1
mov byte [ebp - 0x714], 2
mov byte [ebp - 0x713], 0x1e
mov byte [ebp - 0x712], 1
mov byte [ebp - 0x711], 0xc
mov byte [ebp - 0x710], 3
mov byte [ebp - 0x70f], 9
mov byte [ebp - 0x70e], 0x42
mov byte [ebp - 0x70d], 0
mov byte [ebp - 0x70c], 2
mov byte [ebp - 0x70b], 9
mov byte [ebp - 0x70a], 0x18
mov byte [ebp - 0x709], 1
mov byte [ebp - 0x708], 8
mov byte [ebp - 0x707], 0x1f
mov byte [ebp - 0x706], 8
mov byte [ebp - 0x705], 0x1d
mov byte [ebp - 0x704], 2
mov byte [ebp - 0x703], 0x1f
mov byte [ebp - 0x702], 0x19
mov byte [ebp - 0x701], 0x43
mov byte [ebp - 0x700], 0x1d
mov byte [ebp - 0x6ff], 5
mov byte [ebp - 0x6fe], 0x1d
mov byte [ebp - 0x6fd], 0x52
mov byte [ebp - 0x6fc], 0x1b
mov byte [ebp - 0x6fb], 0xc
mov byte [ebp - 0x6fa], 1
mov byte [ebp - 0x6f9], 0x18
mov byte [ebp - 0x6f8], 8
mov byte [ebp - 0x6f7], 0x50
mov byte [ebp - 0x6f6], 0x48
mov byte [ebp - 0x6f5], 0x1e
mov byte [ebp - 0x6f4], 0x4b
mov byte [ebp - 0x6f3], 5
mov byte [ebp - 0x6f2], 0xc
mov byte [ebp - 0x6f1], 0x1e
mov byte [ebp - 0x6f0], 5
mov byte [ebp - 0x6ef], 0x50
mov byte [ebp - 0x6ee], 0x48
mov byte [ebp - 0x6ed], 0x1e
mov al, byte [ebp - 0x734]
mov byte [ebp - 0x6ec], 0
nop word [eax + eax]
mov al, byte [ebp + edx - 0x734]
mov ecx, dword [ebp - 0x738]
xor cl, al
mov byte [ebp + edx - 0x734], cl
inc edx
cmp edx, 0x48
jb 0x1001bf90
push ebx
push esi
lea eax, [ebp - 0x734]
mov byte [ebp - 0x6ec], 0
push eax
lea eax, [ebp - 0x550]
push eax
call fcn.10010030
add esp, 0x10
lea ecx, [ebp - 0x7ec]
call fcn.10004e40
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x550]
push eax
mov eax, dword [sym.imp.WININET.dll_InternetOpenUrlA]
push edi
call eax
lea ecx, [ebp - 0x7a4]
mov byte [ebp - 4], 3
call fcn.10004e40
mov dword [ebp - 0x600], 0x21
mov eax, dword [ebp - 0x600]
xor al, 0x64
mov byte [ebp - 0x5fc], al
mov eax, dword [ebp - 0x600]
inc al
xor al, 0x65
mov byte [ebp - 0x5fb], al
mov eax, dword [ebp - 0x600]
add al, 2
xor al, 0x62
mov byte [ebp - 0x5fa], al
mov eax, dword [ebp - 0x600]
add al, 3
xor al, 0x75
mov byte [ebp - 0x5f9], al
mov eax, dword [ebp - 0x600]
add al, 4
xor al, 0x67
mov byte [ebp - 0x5f8], al
mov eax, dword [ebp - 0x600]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x5f7], al
mov eax, dword [ebp - 0x600]
add al, 6
xor al, 0x3a
mov byte [ebp - 0x5f6], al
mov eax, dword [ebp - 0x600]
add al, 7
xor al, 0x76
mov byte [ebp - 0x5f5], al
mov eax, dword [ebp - 0x600]
add al, 8
xor al, 0x61
mov byte [ebp - 0x5f4], al
mov eax, dword [ebp - 0x600]
add al, 9
xor al, 0x6c
mov byte [ebp - 0x5f3], al
mov eax, dword [ebp - 0x600]
add al, 0xa
xor al, 0x69
mov byte [ebp - 0x5f2], al
mov eax, dword [ebp - 0x600]
add al, 0xb
xor al, 0x64
mov byte [ebp - 0x5f1], al
mov eax, dword [ebp - 0x600]
add al, 0xc
xor al, 0x61
mov byte [ebp - 0x5f0], al
mov eax, dword [ebp - 0x600]
add al, 0xd
xor al, 0x74
mov byte [ebp - 0x5ef], al
mov eax, dword [ebp - 0x600]
add al, 0xe
xor al, 0x65
mov byte [ebp - 0x5ee], al
mov eax, dword [ebp - 0x600]
add al, 0xf
xor al, 0x6d
mov byte [ebp - 0x5ed], al
mov eax, dword [ebp - 0x600]
add al, 0x10
xor al, 0x6f
mov byte [ebp - 0x5ec], al
mov eax, dword [ebp - 0x600]
add al, 0x11
xor al, 0x64
mov byte [ebp - 0x5eb], al
mov eax, dword [ebp - 0x600]
add al, 0x12
xor al, 0x75
mov byte [ebp - 0x5ea], al
mov eax, dword [ebp - 0x600]
add al, 0x13
xor al, 0x6c
mov byte [ebp - 0x5e9], al
mov eax, dword [ebp - 0x600]
add al, 0x14
xor al, 0x65
mov byte [ebp - 0x5e8], al
mov eax, dword [ebp - 0x600]
add al, 0x15
xor al, 0x3a
mov byte [ebp - 0x5e7], al
mov eax, dword [ebp - 0x600]
add al, 0x16
xor al, 0x3a
mov byte [ebp - 0x5e6], al
mov eax, dword [ebp - 0x600]
add al, 0x17
xor al, 0x72
mov byte [ebp - 0x5e5], al
mov eax, dword [ebp - 0x600]
add al, 0x18
xor al, 0x65
mov byte [ebp - 0x5e4], al
mov eax, dword [ebp - 0x600]
add al, 0x19
xor al, 0x6c
mov byte [ebp - 0x5e3], al
mov eax, dword [ebp - 0x600]
add al, 0x1a
xor al, 0x65
mov byte [ebp - 0x5e2], al
mov eax, dword [ebp - 0x600]
add al, 0x1b
xor al, 0x61
mov byte [ebp - 0x5e1], al
mov eax, dword [ebp - 0x600]
add al, 0x1c
xor al, 0x73
mov byte [ebp - 0x5e0], al
mov eax, dword [ebp - 0x600]
add al, 0x1d
xor al, 0x65
mov byte [ebp - 0x5df], al
mov eax, dword [ebp - 0x600]
add al, 0x1e
xor al, 0x3a
mov byte [ebp - 0x5de], al
mov eax, dword [ebp - 0x600]
add al, 0x1f
xor al, 0x3a
mov byte [ebp - 0x5dd], al
mov eax, dword [ebp - 0x600]
add al, 0x20
xor al, 0x73
mov byte [ebp - 0x5dc], al
mov eax, dword [ebp - 0x600]
add al, 0x21
xor al, 0x75
mov byte [ebp - 0x5db], al
mov eax, dword [ebp - 0x600]
add al, 0x22
xor al, 0x63
mov byte [ebp - 0x5da], al
mov eax, dword [ebp - 0x600]
add al, 0x23
xor al, 0x63
mov byte [ebp - 0x5d9], al
mov eax, dword [ebp - 0x600]
add al, 0x24
xor al, 0x65
mov byte [ebp - 0x5d8], al
mov eax, dword [ebp - 0x600]
add al, 0x25
xor al, 0x73
mov byte [ebp - 0x5d7], al
mov eax, dword [ebp - 0x600]
add al, 0x26
mov byte [ebp - 0x5d5], 0
xor al, 0x73
xor edx, edx
mov byte [ebp - 0x5d6], al
mov al, byte [ebp - 0x5fc]
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x5fc]
mov ecx, dword [ebp - 0x600]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x5fc], cl
inc edx
cmp edx, 0x27
jb 0x1001c290
lea eax, [ebp - 0x5fc]
mov byte [ebp - 0x5d5], 0
push eax
call fcn.10044ed0
add esp, 4
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x7bc]
call fcn.10004e40
lea ecx, [ebp - 0x8a4]
call fcn.100126a0
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x10
jb 0x1001c311
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c307
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c36f
push ecx
push edx
call fcn.10060912
add esp, 8
mov ecx, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 0xf
mov byte [ebp + 8], 0
cmp ecx, 0x10
jb 0x1001c353
mov edx, dword [ebp + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001c349
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001c36f
push ecx
push edx
call fcn.10060912
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100608cb
mov esp, ebp
pop ebp
ret
call fcn.10065ac1
int3