Function at 0x4049fc
Capabilities:
Check if file exists
Delete registry key
Parse url
Query or enumerate registry key
Terminate process

Disassembly:
mov eax, 0x41075e
call fcn.00408c5c
sub esp, 0x218
mov eax, dword [0x415138]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x10], eax
push edi
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x16c], ebx
push pe_nt_image_headers32
pop ecx
mov byte [ebp - 0x114], bl
xor eax, eax
lea edi, [ebp - 0x113]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x20019
stosb byte es:[edi], al
push str.SoftwareMicrosoft
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push edi
lea ecx, [ebp - 0x16c]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x158], ebx
xor esi, esi
call fcn.00402659
cmp eax, ebx
jne 0x404b19
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x114]
push eax
push esi
push dword [ebp - 0x16c]
mov dword [ebp - 0x118], 0x104
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
inc esi
cmp eax, ebx
mov dword [ebp - 0x154], eax
jne 0x404ad0
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 4]
cmp ecx, ebx
je 0x404ab1
call fcn.004010b7
jmp 0x404ab3
xor eax, eax
lea ecx, [ebp - 0x114]
push ecx
push eax
call fcn.00408c80
test eax, eax
pop ecx
pop ecx
jne 0x404a69
mov dword [ebp - 0x158], 1
cmp dword [ebp - 0x154], 0x103
jne 0x404a69
lea ecx, [ebp - 0x16c]
call fcn.004025f4
cmp dword [ebp - 0x158], ebx
je 0x404b19
call fcn.004048dd
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 4]
cmp ecx, ebx
je 0x404b08
call fcn.004010b7
jmp 0x404b0a
xor eax, eax
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
mov dword [ebp - 0x124], ebx
push 0x17
push ebx
push 0x411560
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 1
call fcn.00402c02
cmp eax, ebx
jge 0x404b42
push eax
push 5
call fcn.00405f11
mov ecx, dword [ebp - 0x148]
lea eax, [ebp - 0x168]
push eax
add ecx, 8
call fcn.004028a7
mov ecx, eax
call fcn.00402b86
mov dword [ebp - 0x158], ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x160], esp
push str.version_1.0_
mov byte [ebp - 4], 3
call fcn.0040129e
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
push 0x411770
mov byte [ebp - 4], 4
call fcn.0040129e
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 3
call fcn.004028a7
mov ecx, eax
call fcn.00402fb2
push dword [eax]
lea ecx, [ebp - 0x158]
call fcn.00402903
mov eax, dword [ebp - 0x118]
cmp eax, ebx
je 0x404bcc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x158]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x124]
call fcn.004028a7
mov ecx, eax
call fcn.00402ade
mov eax, dword [ebp - 0x118]
cmp eax, ebx
je 0x404bfb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x168]
call fcn.004028a7
mov ecx, eax
call fcn.00402b17
push dword [eax]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 6
call fcn.004028a7
mov ecx, eax
call fcn.00402ade
mov eax, dword [ebp - 0x118]
cmp eax, ebx
je 0x404c44
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x154]
cmp eax, ebx
mov byte [ebp - 4], 3
je 0x404c58
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push str.hive
lea ecx, [ebp - 0x134]
call fcn.0040124a
push 1
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x168]
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 7
call fcn.004062a7
add esp, 0x10
mov ecx, dword [ebp - 0x134]
cmp ecx, ebx
mov byte [ebp - 4], 9
je 0x404ca3
call fcn.004013dd
mov dword [ebp - 0x134], ebx
push 0x411764
lea ecx, [ebp - 0x138]
call fcn.0040124a
push 1
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x168]
lea eax, [ebp - 0x12c]
push eax
mov byte [ebp - 4], 0xa
call fcn.004062a7
add esp, 0x10
mov ecx, dword [ebp - 0x138]
cmp ecx, ebx
mov byte [ebp - 4], 0xc
je 0x404cee
call fcn.004013dd
mov dword [ebp - 0x138], ebx
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x168]
call fcn.004028a7
mov ecx, eax
call fcn.00402a39
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xd
call fcn.00402ce7
mov eax, dword [ebp - 0x190]
cmp eax, ebx
mov byte [ebp - 4], 0xf
je 0x404d2b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x130], ebx
je 0x40585b
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x130]
call fcn.004028a7
mov ecx, eax
call fcn.00402f06
mov eax, dword [eax]
cmp eax, ebx
je 0x404d5a
mov eax, dword [eax]
jmp 0x404d5c
xor eax, eax
push str.restoreIf
push eax
call fcn.0040fd4b
pop ecx
test eax, eax
pop ecx
mov ecx, dword [ebp - 0x154]
setne byte [ebp - 0x119]
cmp ecx, ebx
je 0x404d87
call fcn.004013dd
mov dword [ebp - 0x154], ebx
cmp byte [ebp - 0x119], bl
jne 0x4057f3
mov word [ebp - 0x1bc], 0x16
mov dword [ebp - 0x1b4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x118], esp
push 0x4116bf
mov byte [ebp - 4], 0x11
call fcn.0040124a
push ecx
mov ecx, esp
mov dword [ebp - 0x13c], esp
push 0x411744
mov byte [ebp - 4], 0x12
call fcn.0040124a
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x11
call fcn.004028a7
mov ecx, eax
call fcn.0040303c
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x14
call fcn.00402ce7
mov eax, dword [ebp - 0x18c]
cmp eax, ebx
mov byte [ebp - 4], 0x17
je 0x404e1c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x1bc]
push eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, ebx
jge 0x404e37
push eax
call fcn.00407a30
push ecx
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x118], esp
push eax
call fcn.004028e8
push ecx
lea eax, [ebp - 0x130]
mov ecx, esp
mov dword [ebp - 0x118], esp
push eax
call fcn.004028e8
mov ecx, dword [ebp - 0x148]
call fcn.004044d7
cmp al, bl
je 0x4057ab
lea ecx, [ebp - 0x128]
call fcn.004028a7
mov ecx, eax
call fcn.00402810
test ax, ax
je 0x404ee7
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x124]
call fcn.004028a7
mov ecx, eax
call fcn.00402b86
push dword [ebp - 0x128]
lea ecx, [ebp - 0x194]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.004028a7
mov ecx, eax
call fcn.00402ade
mov eax, dword [ebp - 0x194]
cmp eax, ebx
je 0x404ed3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a0]
cmp eax, ebx
mov byte [ebp - 4], 0x16
je 0x404ee7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x14c]
call fcn.004012f2
test eax, eax
je 0x404ff8
lea ecx, [ebp - 0x12c]
call fcn.004012f2
test eax, eax
je 0x404ff8
mov dword [ebp - 0x13c], ebx
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x19
call fcn.004028a7
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x13c]
call fcn.004029c0
push eax
push edi
call dword [esi + 0x88]
mov edi, dword [ebp - 0x13c]
cmp edi, ebx
je 0x404f4c
mov ecx, edi
call fcn.004010b7
jmp 0x404f4e
xor eax, eax
push eax
call fcn.00406fd6
mov dword [ebp - 0x120], ebx
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00405fed
pop ecx
pop ecx
mov ecx, dword [ebp - 0x12c]
cmp ecx, ebx
mov esi, eax
je 0x404f7f
call fcn.004010b7
jmp 0x404f81
xor eax, eax
push 0x20006
push eax
push esi
lea ecx, [ebp - 0x120]
call fcn.00402659
cmp eax, ebx
je 0x404fc4
mov ecx, dword [ebp - 0x12c]
cmp ecx, ebx
je 0x404fa8
call fcn.004010b7
jmp 0x404faa
xor eax, eax
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push eax
push esi
lea ecx, [ebp - 0x120]
call fcn.0040260b
cmp eax, ebx
jne 0x404fe2
cmp edi, ebx
je 0x404fd1
mov ecx, edi
call fcn.004010b7
jmp 0x404fd3
xor eax, eax
push 1
push eax
push ebx
lea ecx, [ebp - 0x120]
call fcn.0040268e
lea ecx, [ebp - 0x120]
call fcn.004025f4
cmp edi, ebx
je 0x404ff8
mov ecx, edi
call fcn.004013dd
mov dword [ebp - 0x164], ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x118], esp
push str.rescuer
mov byte [ebp - 4], 0x1b
call fcn.0040124a
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x1b
call fcn.004028a7
mov ecx, eax
call fcn.00402f47
push dword [eax]
lea ecx, [ebp - 0x164]
call fcn.00402903
mov eax, dword [ebp - 0x19c]
cmp eax, ebx
je 0x40504f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x170], ebx
call fcn.004028a7
mov ecx, dword [eax]
lea edx, [ebp - 0x170]
push edx
push eax
call dword [ecx + 0x20]
lea ecx, [ebp - 0x164]
call fcn.004028a7
mov ecx, eax
call fcn.00402886
cmp dword [ebp - 0x170], ebx
mov dword [ebp - 0x13c], ebx
jle 0x405797
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 0x119], bl
call fcn.004028a7
mov ecx, eax
call fcn.00402b50
mov dword [ebp - 0x15c], ebx
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x1e
call fcn.00402a23
push eax
push 0x4114b0
lea ecx, [ebp - 0x180]
call fcn.0040292e
push str.type
lea ecx, [ebp - 0x174]
call fcn.0040124a
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x174]
push eax
push dword [ebp - 0x15c]
lea eax, [ebp - 0x144]
push eax
mov byte [ebp - 4], 0x1f
call fcn.004062a7
add esp, 0x10
mov ecx, dword [ebp - 0x174]
cmp ecx, ebx
mov byte [ebp - 4], 0x21
je 0x405123
call fcn.004013dd
mov dword [ebp - 0x174], ebx
push str.location
lea ecx, [ebp - 0x178]
call fcn.0040124a
push esi
lea eax, [ebp - 0x178]
push eax
push dword [ebp - 0x15c]
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x22
call fcn.004062a7
add esp, 0x10
mov ecx, dword [ebp - 0x178]
cmp ecx, ebx
mov byte [ebp - 4], 0x24
je 0x40516d
call fcn.004013dd
mov dword [ebp - 0x178], ebx
mov eax, dword [ebp - 0x144]
cmp eax, ebx
je 0x40517b
mov eax, dword [eax]
jmp 0x40517d
xor eax, eax
push 0x411720
push eax
call fcn.0040fd4b
test eax, eax
pop ecx
pop ecx
jne 0x4052c7
mov ecx, dword [ebp - 0x150]
cmp ecx, ebx
je 0x4051a9
call fcn.004010b7
mov dword [ebp - 0x120], eax
jmp 0x4051af
mov dword [ebp - 0x120], ebx
push dword [ebp - 0x120]
call fcn.00408070
mov esi, eax
lea edi, [esi + 1]
push edi
call fcn.00407bbe
push 0x3c
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x224]
push ebx
push eax
call fcn.00407eb0
mov eax, dword [ebp - 0x118]
add esp, 0x14
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x224]
push eax
push ebx
push esi
push dword [ebp - 0x120]
mov dword [ebp - 0x224], 0x3c
mov dword [ebp - 0x1f4], edi
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
je 0x405814
push dword [ebp - 0x1f8]
lea eax, [ebp - 0x138]
push eax
call fcn.00406800
push dword [ebp - 0x118]
mov byte [ebp - 4], 0x25
call fcn.00408065
add esp, 0xc
lea ecx, [ebp - 0x138]
call fcn.004012f2
test eax, eax
je 0x405822
push dword [ebp - 0x120]
lea ecx, [ebp - 0x184]
call fcn.0040124a
mov ecx, dword [ebp - 0x148]
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x184]
push eax
mov byte [ebp - 4], 0x26
call fcn.00403ab5
mov ecx, dword [ebp - 0x184]
cmp ecx, ebx
mov byte [ebp - 0x13d], al
je 0x405296
call fcn.004013dd
mov dword [ebp - 0x184], ebx
cmp byte [ebp - 0x13d], bl
je 0x4052a5
mov byte [ebp - 0x119], 1
mov ecx, dword [ebp - 0x138]
cmp ecx, ebx
mov byte [ebp - 4], 0x24
je 0x4053ea
call fcn.004013dd
mov dword [ebp - 0x138], ebx
jmp 0x4053ea
mov eax, dword [ebp - 0x144]
cmp eax, ebx
je 0x4052d5
mov eax, dword [eax]
jmp 0x4052d7
xor eax, eax
push str.file
push eax
call fcn.0040fd4b
test eax, eax
pop ecx
pop ecx
jne 0x40583d
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.004063ac
pop ecx
pop ecx
mov ecx, dword [ebp - 0x134]
cmp ecx, ebx
mov byte [ebp - 4], 0x27
je 0x405316
call fcn.004010b7
jmp 0x405318
xor eax, eax
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4053d1
mov dword [ebp - 0x118], ebx
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x134]
push eax
mov byte [ebp - 4], 0x28
call fcn.004065fe
pop ecx
pop ecx
mov ecx, dword [ebp - 0x118]
cmp ecx, ebx
mov dword [ebp - 0x17c], eax
mov byte [ebp - 4], 0x27
je 0x40535f
call fcn.004013dd
mov edi, dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
jmp 0x4053a8
lea eax, [ebp - 0x1e8]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [ebp - 0x1e4], 0x12
je 0x40538e
cmp dword [ebp - 0x1e4], 0x16
jne 0x405393
cmp dword [ebp - 0x1e0], ebx
je 0x405393
call fcn.0040366a
push esi
push ebx
push ebx
lea eax, [ebp - 0x1e8]
push ebx
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x405367
push 0xff
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x17c]
push eax
push esi
call edi
cmp eax, esi
je 0x405393
push dword [ebp - 0x17c]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov byte [ebp - 0x119], 1
mov ecx, dword [ebp - 0x134]
cmp ecx, ebx
mov byte [ebp - 4], 0x24
je 0x4053ea
call fcn.004013dd
mov dword [ebp - 0x134], ebx
cmp byte [ebp - 0x119], bl
je 0x4056d0
cmp dword [ebp - 0x128], ebx
je 0x40545a
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x124]
call fcn.004028a7
mov ecx, eax
call fcn.00402b86
push dword [ebp - 0x128]
lea ecx, [ebp - 0x198]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.004028a7
mov ecx, eax
call fcn.00402aa5
mov eax, dword [ebp - 0x198]
cmp eax, ebx
je 0x405446
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a4]
cmp eax, ebx
mov byte [ebp - 4], 0x24
je 0x40545a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov word [ebp - 0x1cc], 0x16
mov dword [ebp - 0x1c4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x118], esp
push 0x4116bf
mov byte [ebp - 4], 0x2a
call fcn.0040124a
push ecx
mov ecx, esp
mov dword [ebp - 0x120], esp
push 0x411744
mov byte [ebp - 4], 0x2b
call fcn.0040124a
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x2a
call fcn.004028a7
mov ecx, eax
call fcn.0040303c
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x2d
call fcn.00402d1e
mov eax, dword [ebp - 0x1ac]
cmp eax, ebx
mov byte [ebp - 4], 0x2a
je 0x4054e3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x1cc]
push eax
mov byte [ebp - 4], 0x24
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, ebx
jge 0x4054fe
push eax
call fcn.00407a30
push ecx
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x118], esp
push eax
call fcn.004028e8
push ecx
lea eax, [ebp - 0x130]
mov ecx, esp
mov dword [ebp - 0x118], esp
push eax
call fcn.004028e8
mov esi, dword [ebp - 0x148]
mov ecx, esi
call fcn.004044d7
cmp al, bl
je 0x40573c
lea ecx, [ebp - 0x128]
call fcn.004028a7
mov ecx, eax
call fcn.00402810
test ax, ax
je 0x4055b0
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x124]
call fcn.004028a7
mov ecx, eax
call fcn.00402b86
push dword [ebp - 0x128]
lea ecx, [ebp - 0x1a8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.004028a7
mov ecx, eax
call fcn.00402ade
mov eax, dword [ebp - 0x1a8]
cmp eax, ebx
je 0x40559c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x188]
cmp eax, ebx
mov byte [ebp - 4], 0x24
je 0x4055b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x14c]
call fcn.004012f2
test eax, eax
je 0x4056c1
lea ecx, [ebp - 0x12c]
call fcn.004012f2
test eax, eax
je 0x4056c1
mov dword [ebp - 0x118], ebx
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x2f
call fcn.004028a7
mov edi, eax
mov esi, dword [edi]
lea ecx, [ebp - 0x118]
call fcn.004029c0
push eax
push edi
call dword [esi + 0x88]
mov edi, dword [ebp - 0x118]
cmp edi, ebx
je 0x405615
mov ecx, edi
call fcn.004010b7
jmp 0x405617
xor eax, eax
push eax
call fcn.00406fd6
mov dword [ebp - 0x120], ebx
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 0x30
call fcn.00405fed
pop ecx
pop ecx
mov ecx, dword [ebp - 0x12c]
cmp ecx, ebx
mov esi, eax
je 0x405648
call fcn.004010b7
jmp 0x40564a
xor eax, eax
push 0x20006
push eax
push esi
lea ecx, [ebp - 0x120]
call fcn.00402659
cmp eax, ebx
je 0x40568d
mov ecx, dword [ebp - 0x12c]
cmp ecx, ebx
je 0x405671
call fcn.004010b7
jmp 0x405673
xor eax, eax
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push eax
push esi
lea ecx, [ebp - 0x120]
call fcn.0040260b
cmp eax, ebx
jne 0x4056ab
cmp edi, ebx
je 0x40569a
mov ecx, edi
call fcn.004010b7
jmp 0x40569c
xor eax, eax
push 1
push eax
push ebx
lea ecx, [ebp - 0x120]
call fcn.0040268e
lea ecx, [ebp - 0x120]
call fcn.004025f4
cmp edi, ebx
je 0x4056c1
mov ecx, edi
call fcn.004013dd
mov eax, dword [ebp - 0x148]
push dword [eax + 0x10]
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov ecx, dword [ebp - 0x150]
cmp ecx, ebx
je 0x4056e5
call fcn.004013dd
mov dword [ebp - 0x150], ebx
mov ecx, dword [ebp - 0x144]
cmp ecx, ebx
je 0x4056fa
call fcn.004013dd
mov dword [ebp - 0x144], ebx
mov eax, dword [ebp - 0x15c]
cmp eax, ebx
mov byte [ebp - 4], 0x1d
je 0x40570e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x180]
cmp eax, ebx
mov byte [ebp - 4], 0x1b
je 0x405722
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x170]
jl 0x405091
jmp 0x405797
push dword [esi + 0x10]
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov ecx, dword [ebp - 0x150]
cmp ecx, ebx
je 0x40575a
call fcn.004013dd
mov dword [ebp - 0x150], ebx
mov ecx, dword [ebp - 0x144]
cmp ecx, ebx
je 0x40576f
call fcn.004013dd
mov dword [ebp - 0x144], ebx
mov eax, dword [ebp - 0x15c]
cmp eax, ebx
mov byte [ebp - 4], 0x1d
je 0x405783
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x180]
cmp eax, ebx
mov byte [ebp - 4], 0x1b
je 0x405797
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x164]
cmp eax, ebx
mov byte [ebp - 4], 0x16
je 0x4057ab
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x128]
cmp eax, ebx
mov byte [ebp - 4], 0xf
je 0x4057bf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x130]
call fcn.004028a7
mov ecx, eax
call fcn.00402a6f
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x10
call fcn.00402d1e
mov eax, dword [ebp - 0x160]
jmp 0x404d1d
push 1
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x160], esp
push eax
lea ecx, [ebp - 0x130]
call fcn.004028a7
mov ecx, eax
call fcn.00402f06
jmp 0x405854
push 1
push str.InternetCrackUrl
push 3
call fcn.00405f81
push 1
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x160], esp
push dword [ebp - 0x120]
call fcn.0040124a
push 6
jmp 0x405856
push esi
push ebx
push ecx
lea eax, [ebp - 0x144]
mov ecx, esp
mov dword [ebp - 0x160], esp
push eax
call fcn.004013be
push 0x64
call fcn.00405f34
mov ecx, dword [ebp - 0x12c]
cmp ecx, ebx
je 0x405870
call fcn.004013dd
mov dword [ebp - 0x12c], ebx
mov ecx, dword [ebp - 0x14c]
cmp ecx, ebx
je 0x405885
call fcn.004013dd
mov dword [ebp - 0x14c], ebx
mov eax, dword [ebp - 0x158]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x405899
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x168]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x4058ad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x124]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x4058c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x16c]
call fcn.004025f4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.00407ea0
pop edi
pop esi
pop ebx
leave
ret