Function at 0x417341
Capabilities:
Delete file
Move file
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc8c
push ebx
push esi
push edi
lea eax, [ebp - 0x28c]
push 0x462e80
push eax
call fcn.0043cfd0
lea eax, [ebp - 0x28c]
push eax
call fcn.0043d4e0
and byte [ebp + eax - 0x28d], 0
lea eax, [ebp - 0x28c]
push 0x4504e8
push eax
call fcn.0043cfe0
push 0x79
mov esi, 0x44f234
pop edi
mov ebx, 0x463f60
push esi
push ebx
call fcn.0043d21e
add esp, 0x1c
test eax, eax
je 0x4173a8
push eax
call fcn.0043d0c0
pop ecx
push 0x6e
pop edi
push 0x6e
lea eax, [ebp - 0xc8c]
push dword [0x450538]
push edi
push str.http:__www.winamp.com_update_updatelinks.jhtml_i_cv_sr_c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
xor edi, edi
push edi
push edi
push 0xf
call fcn.00433097
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0xc8c]
push eax
push dword [ebp + 8]
call fcn.00414d6d
add esp, 0x30
test eax, eax
jne 0x417653
lea eax, [ebp - 0x28c]
push esi
push eax
mov dword [ebp - 4], edi
call fcn.0043d21e
pop ecx
mov dword [ebp - 8], eax
mov al, byte [0x4564f8]
pop ecx
mov byte [ebp - 0x68c], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x68b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov esi, str.DefBrowseLoc
lea edi, [ebp - 0x88]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0x1c
xor eax, eax
pop ecx
lea edi, [ebp - 0x7b]
rep stosd dword es:[edi], eax
cmp byte [0x456b00], 0
stosw word es:[edi], ax
stosb byte es:[edi], al
je 0x41746c
lea eax, [ebp - 0x88]
push 0x450494
push eax
call fcn.0043cfe0
lea eax, [ebp - 0x88]
push 0x456b00
push eax
call fcn.0043cfe0
add esp, 0x10
lea eax, [ebp - 0x88]
push 0x44f378
push eax
call fcn.0043cfe0
mov esi, dword [ebp - 8]
pop ecx
test esi, esi
pop ecx
je 0x417653
jmp 0x417524
lea eax, [ebp - 0xa8c]
push 0x400
push eax
call fcn.0043d6f4
lea eax, [ebp - 0xa8c]
push str.Winamp_Links_File_v1.0_n
push eax
call fcn.0043d450
add esp, 0x14
test eax, eax
jne 0x4174bc
or dword [ebp - 4], 1
push 7
lea eax, [ebp - 0xa8c]
push str.EndFile
push eax
call fcn.0043d410
add esp, 0xc
test eax, eax
jne 0x4174da
or dword [ebp - 4], 2
lea eax, [ebp - 0x88]
push eax
call fcn.0043d4e0
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.00447c90
add esp, 0x10
test eax, eax
jne 0x417524
lea eax, [ebp - 0x88]
push eax
call fcn.0043d4e0
lea eax, [ebp + eax - 0xa8c]
push eax
lea eax, [ebp - 0x68c]
push eax
call fcn.0043cfd0
add esp, 0xc
test byte [esi + 0xc], 0x10
push esi
je 0x41748f
call fcn.0043d0c0
cmp dword [ebp - 4], 3
pop ecx
jne 0x417653
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x28c]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov al, byte [0x4564f8]
push 0x3f
mov byte [ebp - 0x188], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x187]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x4638a0
lea eax, [ebp - 0x188]
push 0x100
mov esi, str.http:__www.winamp.com_update_mb.html
push eax
push esi
push str.MBDefLoc
push str.Winamp
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 7
lea eax, [ebp - 0x188]
push str.http:__
push eax
call fcn.00447c90
add esp, 0xc
test eax, eax
je 0x4175bf
lea eax, [ebp - 0x188]
push esi
push eax
call fcn.0043cfd0
pop ecx
pop ecx
push 0
push 0
push 0xf
call fcn.00433097
push eax
mov edi, 0x4639c0
lea eax, [ebp - 0x188]
push edi
push eax
push dword [ebp + 8]
call fcn.00414d6d
lea eax, [ebp - 0x188]
push esi
push eax
call fcn.0043d450
add esp, 0x24
test eax, eax
je 0x417603
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x188]
jmp 0x417637
call fcn.004333d6
test eax, eax
je 0x417646
cmp byte [ebp - 0x68c], 0
je 0x41763a
lea eax, [ebp - 0x68c]
push 0x44f378
push eax
call fcn.0043cf55
pop ecx
test eax, eax
pop ecx
je 0x41763a
and byte [eax], 0
inc eax
push eax
lea eax, [ebp - 0x68c]
push eax
jmp 0x41764c
push str.Winamp_Minibrowser
push str.http:__www.winamp.com_browser_
jmp 0x41764c
push str.Winamp_Minibrowser
push edi
call fcn.004200be
pop ecx
pop ecx
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
pop edi
pop esi
pop ebx
leave
ret