Function at 0x1003cf6
Capabilities:
Query remote server for available data
Read data from internet
Receive data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x9ac
mov eax, dword [reloc.KERNEL32.dll_GetStartupInfoA]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
mov eax, dword [ebp + 0x18]
push ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
mov eax, dword [ebp + 0x1c]
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
push 0xf
mov eax, 0x80
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ecx
pop ecx
xor eax, eax
lea edi, reloc.KERNEL32.dll_GetStartupInfoA
rep stosd dword es:[edi], eax
xor ebx, ebx
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
push ebx
push ebx
push edx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], edx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 0x3c
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 0x104
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
jne 0x1003b3a
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x1003b25
call esi
mov edi, eax
jmp 0x1003eb6
call esi
mov edi, eax
and edi, 0xffff
or edi, 0x80070000
jmp 0x1003eb6
push dword [ebp - 0x998]
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
push dword [ebp - 0x99c]
call fcn.01003722
mov edi, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp edi, ebx
jl 0x1003eab
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
push dword [ebp + 0x10]
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
push esi
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
call fcn.01009dde
mov edi, eax
cmp edi, ebx
jl 0x1003eab
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x1003ba5
mov edi, 0x80070005
jmp 0x1003eab
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
jne 0x1003bd0
push 0xffffffffffffffff
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
push eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.0100365f
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 1
mov edi, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp edi, ebx
jl 0x1003eab
cmp dword [ebp + 0x10], ebx
je 0x1003d6b
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
push 0x10014f4
push ebx
call fcn.0100a00a
test eax, eax
push 0xffffffffffffffff
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
jl 0x1003c87
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
push eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.0100365f
mov edi, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp edi, ebx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
jl 0x1003eb1
push ebx
call fcn.010035fa
push eax
call fcn.01002a4d
mov esi, eax
cmp esi, ebx
je 0x1003c5b
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
sub esi, eax
dec esi
dec esi
sar esi, 1
jmp 0x1003c61
mov esi, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
push esi
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
call fcn.010035fa
push eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.0100365f
jmp 0x1003c98
push 0x10014e0
push ebx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010034ad
push 0xffffffffffffffff
push 0x10014cc
push ebx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010034ad
mov edi, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp edi, ebx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
jl 0x1003eb1
call fcn.010035fa
push 7
mov esi, 0x10014bc
push esi
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
mov edi, eax
call fcn.010035fa
push eax
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
je 0x1003cf9
call fcn.010035fa
mov edi, eax
add edi, 0xe
jmp 0x1003d23
push 8
push 0x10014a8
call fcn.010035fa
push eax
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x1003d23
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
mov edi, eax
add edi, 0x10
push 0xffffffffffffffff
push esi
push ebx
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
call fcn.010034ad
push 0xffffffffffffffff
push edi
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.0100365f
mov edi, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp edi, ebx
jl 0x1003eab
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
push dword [ebp - 0x960]
call dword [sym.imp.msvcrt.dll_wcslen]
mov edi, eax
pop ecx
inc edi
push edi
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01003634
push edi
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01003634
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x1003e90
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x1003e90
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
push edi
push dword [ebp - 0x744]
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], 0x50
push edi
push dword [ebp - 0x94c]
push dword [ebp - 0x960]
call fcn.010096db
mov edi, eax
cmp edi, ebx
jl 0x1003e95
push 0x40
call fcn.01007902
cmp eax, ebx
pop ecx
je 0x1003dfa
mov ecx, eax
call fcn.01002f47
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], eax
jmp 0x1003e00
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
cmp dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
je 0x1003e90
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
call fcn.0100a5b9
lea eax, reloc.KERNEL32.dll_GetStartupInfoA
push eax
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.010035fa
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
push eax
push dword [ebp - 0x744]
push dword [ebp + 0x10]
call fcn.0100c18f
test eax, eax
jge 0x1003e49
mov edi, 0x80070002
jmp 0x1003e95
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
mov eax, dword [ecx]
push 1
push dword [ebp - 0x95c]
call dword [eax + 0xc]
mov edi, eax
cmp edi, ebx
jl 0x1003e95
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
push dword [ebp - 0x958]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov edi, eax
cmp edi, ebx
jl 0x1003e95
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
mov dword [ecx], eax
xor edi, edi
jmp 0x1003e95
mov edi, 0x8007000e
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01012aaf
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01012aaf
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01002c92
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01002c92
lea ecx, reloc.KERNEL32.dll_GetStartupInfoA
call fcn.01002c92
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp eax, ebx
je 0x1003ee2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA], ebx
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp ecx, ebx
je 0x1003ef3
push 1
call fcn.01002fce
cmp edi, ebx
jge 0x1003f5f
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp dword [eax], ebx
jge 0x1003f05
xor eax, eax
jmp 0x1003f08
mov eax, dword [eax + 4]
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
lea esi, [eax + eax]
call fcn.010035fa
cmp esi, ebx
je 0x1003f20
mov byte [eax], bl
inc eax
dec esi
jne 0x1003f1a
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
cmp dword [eax], ebx
jge 0x1003f2e
xor eax, eax
jmp 0x1003f31
mov eax, dword [eax + 4]
mov ecx, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
lea esi, [eax + eax]
call fcn.010035fa
cmp esi, ebx
je 0x1003f49
mov byte [eax], bl
inc eax
dec esi
jne 0x1003f43
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov eax, dword [ebp - reloc.KERNEL32.dll_GetStartupInfoA]
mov dword [eax + 4], ebx
mov dword [eax], ebx
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
pop ebx
call fcn.01007613
leave
ret 0x18