Function at 0x10045e8
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x278
mov eax, dword [reloc.KERNEL32.dll_GetStartupInfoA]
mov ecx, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov dword [ecx], ebx
push 0xffffffffffffffff
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ecx
push esi
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], edi
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [eax], 9
call fcn.01003722
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
push esi
push edi
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 0x80
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 0xa
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
call fcn.010037b4
mov esi, eax
cmp esi, ebx
jl 0x1004970
push ebx
push 0x4600300
push ebx
push ebx
push 0x100155c
push dword [ebp - 0x230]
push 0x1001428
push dword [ebp - 0x22c]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
cmp eax, ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
je 0x100476c
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 0x28
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - 0x26c], 0x1001558
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
sub esp, 0x28
push 0xa
pop ecx
mov edi, esp
push dword [ebp - 0x228]
lea esi, reloc.KERNEL32.dll_GetStartupInfoA
push dword [ebp - 0x22c]
rep movsd dword es:[edi], dword [esi]
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
push eax
call fcn.0100432b
mov esi, eax
cmp esi, ebx
jge 0x1004796
cmp esi, 0xc00d1388
je 0x1004680
cmp esi, 0xc00d2ee1
jne 0x1004934
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
dec dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
test eax, eax
jbe 0x1004934
push dword [ebp - 0x230]
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
xor eax, eax
cmp esi, 0xc00d2ee1
sete al
push eax
push dword [ebp - 0x228]
push dword [ebp - 0x23c]
call fcn.01003f75
mov esi, eax
cmp esi, ebx
jl 0x1004934
push dword [ebp - 0x228]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
jl 0x100472c
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x100472c
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - 0x110], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
call fcn.01003788
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 1
mov esi, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp esi, ebx
jl 0x1004934
push ebx
push 0x4600300
push ebx
push ebx
push 0x100155c
push dword [ebp - 0x230]
push 0x1001428
push dword [ebp - 0x22c]
call dword [sym.imp.WININET.dll_HttpOpenRequestW]
cmp eax, ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
jne 0x1004635
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x1004781
call esi
mov esi, eax
jmp 0x1004934
call esi
mov esi, eax
and esi, 0xffff
or esi, 0x80070000
jmp 0x1004934
push ebx
push ebx
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
push dword [ebp - 0x228]
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
test eax, eax
je 0x100476c
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
inc eax
push eax
call fcn.01007902
mov edi, eax
cmp edi, ebx
pop ecx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], edi
jne 0x10047d3
mov esi, 0x8007000e
jmp 0x1004934
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
push dword [ebp - 0x244]
push edi
push dword [ebp - 0x228]
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x100481f
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x1004803
call esi
mov esi, eax
jmp 0x1004813
call esi
mov esi, eax
and esi, 0xffff
or esi, 0x80070000
push edi
call fcn.010078f6
pop ecx
jmp 0x1004934
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
push 0x100154c
push edi
mov byte [eax + edi], bl
mov esi, 0x80004005
call fcn.0100a423
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
je 0x10048bb
add edi, 0xa
push 0x1001544
push edi
call fcn.0100a423
cmp eax, ebx
pop ecx
pop ecx
je 0x10048bb
push 0x100152c
push edi
mov byte [eax], bl
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
pop ecx
pop ecx
jne 0x1004876
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
mov dword [eax], 4
jmp 0x10048b9
push 0x1001518
push edi
call fcn.0100a423
cmp eax, ebx
pop ecx
pop ecx
je 0x10048bb
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
push ecx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
push ecx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
push ecx
push dword [ebp - 0x240]
add eax, 0x12
push 0x100150c
push eax
call dword [sym.imp.msvcrt.dll_sscanf]
add esp, 0x18
cmp eax, 4
jne 0x10048bb
xor esi, esi
push dword [ebp - 0x23c]
call fcn.010078f6
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
pop ecx
je 0x1004934
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
jge 0x10048db
xor eax, eax
jmp 0x10048e1
mov eax, dword [ebp - 0x110]
lea eax, [eax + eax + 2]
push eax
call fcn.01007902
mov edi, eax
cmp edi, ebx
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
pop ecx
mov dword [eax], edi
je 0x10047c9
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
jge 0x100490e
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
jmp 0x100491a
mov eax, dword [ebp - 0x110]
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
push eax
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
inc eax
push eax
push edi
call fcn.01002ff4
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x1004948
push dword [ebp - 0x22c]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x100495c
push dword [ebp - 0x228]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x1004970
push dword [ebp - 0x230]
call fcn.010078f6
pop ecx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01002c92
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01002c92
mov ecx, dword [ebp - 4]
mov eax, esi
call fcn.01007613
pop edi
pop esi
pop ebx
leave
ret 0x10