Function at 0x100062d0
Capabilities:
Check http status code
Contain obfuscated stackstrings
Initialize winhttp library
Prepare http request
Read http header
Receive http response

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcb8
mov eax, dword [0x10029494]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edx, str.ENTERING________________________________________________EHStaticIPLocationNeo
mov esi, 0x1002c2c8
mov dword [ebp - 0xca8], eax
call fcn.10001830
call fcn.1000aa60
push 0
push 0
push 0
push 0
push str.OTPDoQuery
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ebx, eax
mov dword [ebp - 0xcb0], ebx
test ebx, ebx
jne 0x10006349
mov edx, str.ERROR__________hSession__WinHttpOpen__________FAILED
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0x186a0
push 0x186a0
push 0x186a0
push 0x186a0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
jne 0x1000639b
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edx, str.ERROR__________bResults__WinHttpSetTimeouts__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0
push 0x1bb
lea edx, [ebp - 0x28]
push edx
push ebx
mov dword [ebp - 0x28], 0x6f0064
mov dword [ebp - 0x24], 0x730063
mov dword [ebp - 0x20], 0x67002e
mov dword [ebp - 0x1c], 0x6f006f
mov dword [ebp - 0x18], 0x6c0067
mov dword [ebp - 0x14], 0x2e0065
mov dword [ebp - 0x10], 0x6f0063
mov dword [ebp - 0xc], 0x6d
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov edi, eax
test edi, edi
jne 0x1000641e
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edx, str.ERROR__________hConnect__WinHttpConnect__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0x800000
push 0
push 0
push 0
lea ecx, [ebp - 0x94]
push ecx
push 0x100214c4
push edi
mov dword [ebp - 0x94], 0x75002f
mov dword [ebp - 0x90], 0x3f0063
mov dword [ebp - 0x8c], 0x640069
mov dword [ebp - 0x88], 0x30003d
mov dword [ebp - 0x84], 0x380042
mov dword [ebp - 0x80], 0x630074
mov dword [ebp - 0x7c], 0x770075
mov dword [ebp - 0x78], 0x440051
mov dword [ebp - 0x74], 0x540039
mov dword [ebp - 0x70], 0x640043
mov dword [ebp - 0x6c], 0x320062
mov dword [ebp - 0x68], 0x74005a
mov dword [ebp - 0x64], 0x6a0065
mov dword [ebp - 0x60], 0x750046
mov dword [ebp - 0x5c], 0x460055
mov dword [ebp - 0x58], 0x77006c
mov dword [ebp - 0x54], 0x470055
mov dword [ebp - 0x50], 0x260073
mov dword [ebp - 0x4c], 0x780065
mov dword [ebp - 0x48], 0x6f0070
mov dword [ebp - 0x44], 0x740072
mov dword [ebp - 0x40], 0x64003d
mov dword [ebp - 0x3c], 0x77006f
mov dword [ebp - 0x38], 0x6c006e
mov dword [ebp - 0x34], 0x61006f
mov dword [ebp - 0x30], 0x64
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov esi, eax
test esi, esi
jne 0x1000653f
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push ebx
call esi
push edi
call esi
mov edx, str.ERROR__________hRequest__WinHttpOpenRequest__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 4
lea edx, [ebp - 0xcac]
push edx
push 0x1f
push esi
mov dword [ebp - 0xcac], 0x3300
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x1000659a
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push edi
call ebx
push esi
call ebx
mov edx, str.ERROR__________bResults__WinHttpSetOption__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x100065ec
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push edi
call ebx
push esi
call ebx
mov edx, str.ERROR__________bResults__WinHttpSendRequest__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x10006634
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push edi
call ebx
push esi
call ebx
mov edx, str.ERROR__________bResults__WinHttpReceiveResponse__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
push 0
lea eax, [ebp - 0xcb4]
push eax
lea ecx, [ebp - 0xca4]
push ecx
push 0
push 0x20000013
push esi
mov dword [ebp - 0xca4], 0
mov dword [ebp - 0xcb4], 4
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x100066a5
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push edi
call ebx
push esi
call ebx
mov edx, str.ERROR__________bResults__WinHttpQueryHeaders__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0xca4], 0xc8
je 0x100066ec
push ebx
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call ebx
push edi
call ebx
push esi
call ebx
mov edx, str.ERROR__________dwStatusCode___HTTP_STATUS_OK__________FAILED
mov esi, 0x1002c2c8
call fcn.10001830
mov edx, str.LEAVING________________________________________________EHStaticIPLocationNeo
call fcn.10001830
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
xor ebx, ebx
mov dword [ebp - 0xc9c], ebx
lea edx, [ebp - 0xca0]
push edx
push esi
mov dword [ebp - 0xca0], ebx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x100066f4
mov eax, dword [ebp - 0xca0]
cmp eax, ebx
je 0x1000677b
push eax
mov dword [ebp - 0xc98], ebx
call fcn.1000ba7a
mov ecx, dword [ebp - 0xca0]
add esp, 4
mov ebx, eax
lea eax, [ebp - 0xc98]
push eax
push ecx
push ebx
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x1000676b
mov edx, dword [ebp - 0xc98]
mov eax, dword [ebp - 0xc9c]
push edx
lea ecx, [ebp + eax - 0xc94]
push ebx
push ecx
call fcn.1000f170
mov edx, dword [ebp - 0xc98]
add esp, 0xc
add dword [ebp - 0xc9c], edx
push ebx
call fcn.1000bd44
add esp, 4
xor ebx, ebx
jmp 0x100066f4
mov eax, dword [ebp - 0xc9c]
mov byte [ebp + eax - 0xc94], 0
inc eax
push eax
mov dword [ebp - 0xc98], eax
call fcn.1000ba7a
mov ecx, dword [ebp - 0xc98]
mov ebx, eax
add esp, 4
lea eax, [ebp - 0xc94]
push eax
push ecx
push ebx
call fcn.1000dadf
mov edx, dword [ebp - 0xca8]
add esp, 0xc
push edx
mov ecx, ebx
call fcn.10006190
add esp, 4
test al, al
jne 0x10006807
jmp 0x100067d0
push 0xea60
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0xc98]
lea eax, [ebp - 0xc94]
push eax
push ecx
push ebx
call fcn.1000dadf
mov edx, dword [ebp - 0xca8]
add esp, 0xc
push edx
mov ecx, ebx
call fcn.10006190
add esp, 4
test al, al
je 0x100067d0
push ebx
call fcn.1000bd44
mov eax, dword [ebp - 0xcb0]
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
add esp, 4
push eax
call ebx
push edi
call ebx
push esi
call ebx
mov edx, str.LEAVING________________________________________________EHDownLoadFileNeo
mov esi, 0x1002c2c8
call fcn.10001830
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
mov al, 1
pop ebx
call fcn.1000bb22
mov esp, ebp
pop ebp
ret