Function at 0x41a749
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x940
push esi
push edi
mov byte [ebp - 0x508], 0
mov ecx, 0xb
mov esi, str._http:__www.inquiero.com_inquiero_blank.htm_
lea edi, [ebp - 0x91c]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0xf5
xor eax, eax
lea edi, [ebp - 0x8ef]
rep stosd dword es:[edi], eax
mov ecx, 6
mov esi, str._http:__www.inquiero.com_
lea edi, [ebp - 0x504]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x39
xor eax, eax
lea edi, [ebp - 0x4ea]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov al, byte [0x46ca4c]
mov byte [ebp - 0x400], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x3ff]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x930], 0x400
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x928], ecx
mov dword [ebp - 0x518], 0x41a683
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x518], edx
mov dword [ebp - 0x514], 0x41a6ba
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], fcn.0041a5d0
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x510], ecx
mov dword [ebp - 0x50c], 0x41a6f9
mov edx, dword [ebp - 0x50c]
mov dword [ebp - 0x50c], edx
lea eax, [ebp - 0x518]
mov dword [ebp - 0x934], eax
push str.jsproxy.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x924], 0
je 0x41aa4b
push str.InternetInitializeAutoProxyDll
mov ecx, dword [ebp - 0x924]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x93c], eax
cmp dword [ebp - 0x93c], 0
je 0x41aa3e
push str.InternetDeInitializeAutoProxyDll
mov edx, dword [ebp - 0x924]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
je 0x41aa3e
push str.InternetGetProxyInfo
mov eax, dword [ebp - 0x924]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 0
je 0x41aa3e
lea ecx, [ebp - 0x400]
push ecx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea edx, [ebp - 0x400]
push edx
push 0
push 0x46ca50
lea eax, [ebp - 0x400]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push str.urlmon.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 0
je 0x41aa3e
push str.URLDownloadToFileA
mov ecx, dword [ebp - 0x92c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 0
je 0x41aa31
push 0
push 0
lea edx, [ebp - 0x400]
push edx
mov eax, dword [ebp + 8]
push eax
push 0
call dword [ebp - 0x938]
test eax, eax
jne 0x41aa31
push 0
lea ecx, [ebp - 0x934]
push ecx
push 0
lea edx, [ebp - 0x400]
push edx
push 0
call dword [ebp - 0x93c]
test eax, eax
je 0x41aa1a
lea eax, [ebp - 0x930]
push eax
lea ecx, [ebp - 0x928]
push ecx
push 0x100
lea edx, [ebp - 0x504]
push edx
push 0x401
lea eax, [ebp - 0x91c]
push eax
call dword [ebp - 0x920]
test eax, eax
je 0x41aa1a
mov dword [ebp - 0x940], 0
push 0
mov ecx, dword [ebp - 0x928]
push ecx
lea edx, [ebp - 0x940]
push edx
call fcn.004233c8
add esp, 0xc
push 6
push str.PROXY
mov eax, dword [ebp - 0x940]
push eax
call fcn.004273b4
add esp, 4
push eax
call fcn.004279c0
add esp, 0xc
test eax, eax
jne 0x41aa0b
push 0
mov ecx, dword [ebp - 0x928]
add ecx, 6
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.004233c8
add esp, 0xc
mov byte [ebp - 0x508], 1
lea eax, [ebp - 0x940]
push eax
call fcn.004234c1
add esp, 4
push 0
push 0
call dword [ebp - 0x404]
lea ecx, [ebp - 0x400]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 0x92c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x924]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov al, byte [ebp - 0x508]
pop edi
pop esi
mov esp, ebp
pop ebp
ret