Function at 0x10051460
Capabilities:
Contain obfuscated stackstrings
Create http request
Encode data using xor
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x490
mov eax, dword [0x100bc570]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push 0
push 0
push 0
push 1
push str.SECAC_1.0
mov dword [ebp - 0x490], edi
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
test ebx, ebx
jne 0x100515c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 0x440], 0x68
mov edx, eax
mov byte [ebp - 0x43f], 0x69
xor ecx, ecx
mov byte [ebp - 0x43e], 0x66
mov byte [ebp - 0x43d], 0x79
mov byte [ebp - 0x43c], 0x6b
mov byte [ebp - 0x43b], 0x3e
mov byte [ebp - 0x43a], 0x3e
mov byte [ebp - 0x439], 0x68
mov byte [ebp - 0x438], 0x73
mov byte [ebp - 0x437], 0x7b
mov byte [ebp - 0x436], 0x72
mov byte [ebp - 0x435], 0x70
mov byte [ebp - 0x434], 0x73
mov byte [ebp - 0x433], 0x65
mov byte [ebp - 0x432], 0x68
mov byte [ebp - 0x431], 0x6a
mov byte [ebp - 0x430], 0x6d
mov byte [ebp - 0x42f], 0x70
mov byte [ebp - 0x42e], 0x69
mov byte [ebp - 0x42d], 0x3e
mov byte [ebp - 0x42c], 0x3e
mov byte [ebp - 0x42b], 0x69
mov byte [ebp - 0x42a], 0x76
mov byte [ebp - 0x429], 0x76
mov byte [ebp - 0x428], 0x73
mov byte [ebp - 0x427], 0x76
mov byte [ebp - 0x426], 0x3e
mov byte [ebp - 0x425], 0x3e
mov byte [ebp - 0x424], 0x29
mov byte [ebp - 0x423], 0x68
mov byte [ebp - 0x422], bl
mov al, byte [ebp - 0x440]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x440]
sub al, 4
mov byte [ebp + ecx - 0x440], al
inc ecx
cmp ecx, 0x1e
jb 0x10051590
push edx
lea eax, [ebp - 0x440]
push eax
call fcn.100407f0
add esp, 8
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10064a7b
mov esp, ebp
pop ebp
ret
push 0
push 0x80000000
push 0
push 0
push esi
push ebx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov esi, eax
test esi, esi
jne 0x10051719
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 0x460], 0x6a
mov edx, eax
mov byte [ebp - 0x45f], 0x6b
xor ecx, ecx
mov byte [ebp - 0x45e], 0x68
mov byte [ebp - 0x45d], 0x7b
mov byte [ebp - 0x45c], 0x6d
mov byte [ebp - 0x45b], 0x40
mov byte [ebp - 0x45a], 0x40
mov byte [ebp - 0x459], 0x6a
mov byte [ebp - 0x458], 0x75
mov byte [ebp - 0x457], 0x7d
mov byte [ebp - 0x456], 0x74
mov byte [ebp - 0x455], 0x72
mov byte [ebp - 0x454], 0x75
mov byte [ebp - 0x453], 0x67
mov byte [ebp - 0x452], 0x6a
mov byte [ebp - 0x451], 0x6c
mov byte [ebp - 0x450], 0x6f
mov byte [ebp - 0x44f], 0x72
mov byte [ebp - 0x44e], 0x6b
mov byte [ebp - 0x44d], 0x40
mov byte [ebp - 0x44c], 0x40
mov byte [ebp - 0x44b], 0x6b
mov byte [ebp - 0x44a], 0x78
mov byte [ebp - 0x449], 0x78
mov byte [ebp - 0x448], 0x75
mov byte [ebp - 0x447], 0x78
mov byte [ebp - 0x446], 0x38
mov byte [ebp - 0x445], 0x40
mov byte [ebp - 0x444], 0x40
mov byte [ebp - 0x443], 0x2b
mov byte [ebp - 0x442], 0x6a
mov byte [ebp - 0x441], 0
mov al, byte [ebp - 0x460]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x460]
sub al, 6
mov byte [ebp + ecx - 0x460], al
inc ecx
cmp ecx, 0x1f
jb 0x100516e0
push edx
lea eax, [ebp - 0x460]
push eax
call fcn.100407f0
add esp, 8
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10064a7b
mov esp, ebp
pop ebp
ret
push 0x10093c08
push edi
call fcn.1006da8f
mov edi, eax
add esp, 8
test edi, edi
jne 0x10051844
mov byte [ebp - 0x420], 0x6c
xor ecx, ecx
mov byte [ebp - 0x41f], 0x6d
mov byte [ebp - 0x41e], 0x6a
mov byte [ebp - 0x41d], 0x7d
mov byte [ebp - 0x41c], 0x6f
mov byte [ebp - 0x41b], 0x42
mov byte [ebp - 0x41a], 0x42
mov byte [ebp - 0x419], 0x6c
mov byte [ebp - 0x418], 0x77
mov byte [ebp - 0x417], 0x7f
mov byte [ebp - 0x416], 0x76
mov byte [ebp - 0x415], 0x74
mov byte [ebp - 0x414], 0x77
mov byte [ebp - 0x413], 0x69
mov byte [ebp - 0x412], 0x6c
mov byte [ebp - 0x411], 0x6e
mov byte [ebp - 0x410], 0x71
mov byte [ebp - 0x40f], 0x74
mov byte [ebp - 0x40e], 0x6d
mov byte [ebp - 0x40d], 0x42
mov byte [ebp - 0x40c], 0x42
mov byte [ebp - 0x40b], 0x6d
mov byte [ebp - 0x40a], 0x7a
mov byte [ebp - 0x409], 0x7a
mov byte [ebp - 0x408], 0x77
mov byte [ebp - 0x407], 0x7a
mov byte [ebp - 0x406], 0x3b
mov byte [ebp - 0x405], al
mov al, byte [ebp - 0x420]
nop dword [eax]
mov al, byte [ebp + ecx - 0x420]
sub al, 8
mov byte [ebp + ecx - 0x420], al
inc ecx
cmp ecx, 0x1b
jb 0x10051800
lea eax, [ebp - 0x420]
push eax
call fcn.100407f0
add esp, 4
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebx
call esi
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10064a7b
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x48c]
push eax
push 0x400
lea eax, [ebp - 0x404]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1005189d
mov eax, dword [ebp - 0x48c]
test eax, eax
je 0x1005189d
push edi
push eax
lea eax, [ebp - 0x404]
push 1
push eax
call fcn.1006ec66
add esp, 0x10
lea eax, [ebp - 0x48c]
push eax
push 0x400
lea eax, [ebp - 0x404]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x10051862
push edi
call fcn.1006dc12
mov dword [ebp - 0x488], 0x4c
add esp, 4
mov byte [ebp - 0x484], 0x28
xor edx, edx
mov byte [ebp - 0x483], 0x29
mov byte [ebp - 0x482], 0x2e
mov byte [ebp - 0x481], 0x39
mov byte [ebp - 0x480], 0x2b
mov byte [ebp - 0x47f], 0x76
mov byte [ebp - 0x47e], 0x76
mov byte [ebp - 0x47d], 0x28
mov byte [ebp - 0x47c], 0x23
mov byte [ebp - 0x47b], 0x3b
mov byte [ebp - 0x47a], 0x22
mov byte [ebp - 0x479], 0x20
mov byte [ebp - 0x478], 0x23
mov byte [ebp - 0x477], 0x2d
mov byte [ebp - 0x476], 0x28
mov byte [ebp - 0x475], 0x2a
mov byte [ebp - 0x474], 0x25
mov byte [ebp - 0x473], 0x20
mov byte [ebp - 0x472], 0x29
mov byte [ebp - 0x471], 0x76
mov byte [ebp - 0x470], 0x76
mov byte [ebp - 0x46f], 0x3f
mov byte [ebp - 0x46e], 0x39
mov byte [ebp - 0x46d], 0x2f
mov byte [ebp - 0x46c], 0x2f
mov byte [ebp - 0x46b], 0x29
mov byte [ebp - 0x46a], 0x3f
mov byte [ebp - 0x469], 0x3f
mov byte [ebp - 0x468], 0x76
mov byte [ebp - 0x467], 0x76
mov byte [ebp - 0x466], 0x69
mov byte [ebp - 0x465], 0x3f
mov al, byte [ebp - 0x484]
mov byte [ebp - 0x464], 0
nop
mov al, byte [ebp + edx - 0x484]
mov ecx, dword [ebp - 0x488]
xor cl, al
mov byte [ebp + edx - 0x484], cl
inc edx
cmp edx, 0x20
jb 0x100519a0
push dword [ebp - 0x490]
lea eax, [ebp - 0x484]
mov byte [ebp - 0x464], 0
push eax
call fcn.100407f0
add esp, 8
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebx
call esi
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10064a7b
mov esp, ebp
pop ebp
ret