Function at 0x10027a90
Capabilities:
Download url
Query environment variable
Receive data

Disassembly:
push 0xffffffffffffffff
push 0x100403c5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x320
push esi
mov esi, dword [esp + 0x334]
push edi
push esi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0
call fcn.10026af0
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x224]
push 0x104
rep stosd dword es:[edi], eax
lea eax, [esp + 0x228]
push eax
push str.TEMP
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov cl, byte [esp + 0xb]
push 0
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea edi, [esp + 0x224]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x224]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
lea eax, [esp + 0x14]
push str.ofni
lea ecx, [esp + 0x38]
push eax
push ecx
mov dword [esp + 0x33c], 0
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__
lea edx, [esp + 0x20]
push str.ofnied
lea eax, [esp + 0x34]
push edx
push eax
mov byte [esp + 0x348], 1
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__
add esp, 0x18
mov eax, dword [esi + 8]
mov byte [esp + 0x330], 2
test eax, eax
jne 0x10027b78
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov eax, dword [esp + 0x38]
mov edx, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
test eax, eax
mov ecx, edx
je 0x10027b91
mov ecx, eax
mov eax, dword [esi + 8]
test eax, eax
jne 0x10027b9a
mov eax, edx
push 0
push 0
push ecx
push eax
push 0
call sub.urlmon.dll_URLDownloadToFileA
test eax, eax
jne 0x10028007
mov ecx, dword [sym.imp.MSVCP60.dll_const_std::basic_ifstream_char__struct_std::char_traits_char__::vbtable]
mov dword [esp + 0x84], ecx
lea ecx, [esp + 0xe0]
call dword [sym.imp.MSVCP60.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
mov dword [esp + 0xc], 1
push 0
lea edx, [esp + 0x90]
push 0
push edx
lea ecx, [esp + 0x90]
mov byte [esp + 0x33c], 3
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
push 0
lea ecx, [esp + 0x90]
mov dword [esp + 0x334], 4
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_filebuf_char__struct_std::char_traits_char__::constructor_struct__iobuf__]
mov eax, dword [esp + 0x84]
mov edx, dword [sym.imp.MSVCP60.dll_const_std::basic_ifstream_char__struct_std::char_traits_char__::vftable]
mov ecx, dword [eax + 4]
mov dword [esp + ecx + 0x84], edx
mov eax, dword [esp + 0x38]
mov byte [esp + 0x330], 5
test eax, eax
jne 0x10027c38
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push 1
push eax
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_filebuf_char__struct_std::char_traits_char______thiscall_std::basic_filebuf_char__struct_std::char_traits_char__::open_char_const___int_]
test eax, eax
jne 0x10027c66
push eax
mov eax, dword [esp + 0x88]
push 2
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 0x8c]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov edx, dword [sym.imp.MSVCP60.dll_const_std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbtable]
lea ecx, [esp + 0x1f0]
mov dword [esp + 0x1a0], edx
call dword [sym.imp.MSVCP60.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
mov dword [esp + 0xc], 3
push 0
push 1
lea eax, [esp + 0x1ac]
push 0
push eax
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x340], 6
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool__bool_]
mov esi, 7
push 2
lea ecx, [esp + 0x1a8]
mov dword [esp + 0x334], esi
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
mov ecx, dword [esp + 0x1a0]
mov eax, dword [sym.imp.MSVCP60.dll_const_std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vftable]
mov edx, dword [ecx + 4]
mov dword [esp + edx + 0x1a0], eax
mov byte [esp + 0x330], 8
lea ecx, [esp + 0x1a0]
test ecx, ecx
jne 0x10027cf3
xor eax, eax
jmp 0x10027d04
mov edx, dword [esp + 0x1a0]
mov eax, dword [edx + 4]
lea eax, [esp + eax + 0x1a0]
mov ecx, dword [eax + 4]
and cl, 6
neg cl
sbb ecx, ecx
not ecx
test eax, ecx
je 0x10027d71
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP60.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
cmp eax, 0xffffffff
je 0x10027d2a
mov byte [esp + 0xc], al
lea edx, [esp + 0x84]
test edx, edx
jne 0x10027d39
xor eax, eax
jmp 0x10027d4a
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea eax, [esp + ecx + 0x84]
mov edx, dword [eax + 4]
and dl, 6
neg dl
sbb edx, edx
not edx
test eax, edx
je 0x10027d71
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x1a0]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::put_char_]
jmp 0x10027ce4
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x1a4]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__::str_void_]
lea ecx, [esp + 0x8c]
mov byte [esp + 0x330], 9
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_filebuf_char__struct_std::char_traits_char______thiscall_std::basic_filebuf_char__struct_std::char_traits_char__::close_void_]
test eax, eax
jne 0x10027db6
mov edx, dword [esp + 0x84]
push eax
push 2
mov eax, dword [edx + 4]
lea ecx, [esp + eax + 0x8c]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov cl, byte [esp + 0xb]
push 0
mov byte [esp + 0x48], cl
lea ecx, [esp + 0x48]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov edi, str.19801219
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.19801219
lea ecx, [esp + 0x4c]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
lea edx, [esp + 0x44]
lea ecx, [esp + 0x74]
push edx
mov byte [esp + 0x334], 0xa
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
push 1
lea ecx, [esp + 0x48]
mov byte [esp + 0x334], 0xc
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [esp + 0x54]
lea ecx, [esp + 0x64]
push eax
push ecx
lea ecx, [esp + 0x7c]
call fcn.1000b6f0
mov edx, dword [sym.imp.MSVCP60.dll_const_std::basic_ofstream_char__struct_std::char_traits_char__::vbtable]
lea ecx, [esp + 0x16c]
mov byte [esp + 0x330], 0xd
mov dword [esp + 0x114], edx
call dword [sym.imp.MSVCP60.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
mov dword [esp + 0xc], esi
push 0
push 1
lea eax, [esp + 0x120]
push 0
push eax
lea ecx, [esp + 0x124]
mov byte [esp + 0x340], 0xe
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool__bool_]
push 0
lea ecx, [esp + 0x11c]
mov dword [esp + 0x334], 0xf
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_filebuf_char__struct_std::char_traits_char__::constructor_struct__iobuf__]
mov ecx, dword [esp + 0x114]
mov eax, dword [sym.imp.MSVCP60.dll_const_std::basic_ofstream_char__struct_std::char_traits_char__::vftable]
mov edx, dword [ecx + 4]
mov dword [esp + edx + 0x114], eax
mov eax, dword [esp + 0x28]
mov byte [esp + 0x330], 0x10
test eax, eax
jne 0x10027eb5
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push 0x12
push eax
lea ecx, [esp + 0x120]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_filebuf_char__struct_std::char_traits_char______thiscall_std::basic_filebuf_char__struct_std::char_traits_char__::open_char_const___int_]
test eax, eax
jne 0x10027ee3
mov ecx, dword [esp + 0x114]
push eax
push 2
mov edx, dword [ecx + 4]
lea ecx, [esp + edx + 0x11c]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea eax, [esp + 0x64]
lea ecx, [esp + 0x114]
push eax
push ecx
call sub.MSVCP60.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::operator___class_std::basic_ostream_char__struct_std::char_traits_char_____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
add esp, 8
lea ecx, [esp + 0x118]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_filebuf_char__struct_std::char_traits_char______thiscall_std::basic_filebuf_char__struct_std::char_traits_char__::close_void_]
test eax, eax
jne 0x10027f23
mov edx, dword [esp + 0x114]
push eax
push 2
mov eax, dword [edx + 4]
lea ecx, [esp + eax + 0x11c]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov ecx, dword [esp + 0x338]
mov ax, word [ecx + 0x14]
test ax, ax
jne 0x10027f44
lea edx, [esp + 0x24]
push edx
push ecx
mov ecx, dword [esp + 0x18]
call fcn.100281b0
jmp 0x10027f59
cmp ax, 1
jne 0x10027f59
lea eax, [esp + 0x24]
push eax
push ecx
mov ecx, dword [esp + 0x18]
call fcn.10028b90
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x10027f66
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
call sub.MFC42.DLL_CFile::Remove
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x10027f79
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
call sub.MFC42.DLL_CFile::Remove
lea ecx, [esp + 0x16c]
mov byte [esp + 0x330], 0xd
call dword [sym.imp.MSVCP60.dll_public_virtual:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [esp + 0x16c]
call dword [sym.imp.MSVCP60.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x334], 0xc
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x334], 9
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [esp + 0x58]
mov byte [esp + 0x334], 8
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x330], 5
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
lea ecx, [esp + 0x84]
mov byte [esp + 0x330], 2
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_ifstream_char__struct_std::char_traits_char__::vbase_dtor_void_]
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x334], 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [esp + 0x38]
mov byte [esp + 0x334], 0
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [esp + 0x18]
mov dword [esp + 0x334], 0xffffffff
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov ecx, dword [esp + 0x328]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x32c
ret 4