Function at 0x402660
Capabilities:
Download url
Receive data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4044bc
mov eax, dword fs:[0]
push eax
sub esp, 0xd8
mov eax, dword [0x408020]
xor eax, esp
mov dword [esp + 0xd4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x408020]
xor eax, esp
push eax
lea eax, [esp + 0xec]
mov dword fs:[0], eax
mov ebx, dword [sym.imp.MSVCP90.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
push str.win_645721.test
lea eax, [esp + 0xb4]
push 0x408478
push eax
mov byte [esp + 0x23], 0
call ebx
push 0x408494
lea ecx, [esp + 0xdc]
push 0x408478
xor edi, edi
push ecx
mov dword [esp + 0x10c], edi
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
add esp, 0x18
mov byte [esp + 0xf4], 1
mov ecx, dword [0x408438]
sub ecx, dword [0x408434]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], edi
je 0x4029d9
xor ebp, ebp
jmp 0x402726
mov ebx, dword [sym.imp.MSVCP90.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
lea esi, [esp + 0x40]
call fcn.00401120
mov esi, eax
mov byte [esp + 0xf4], 2
mov ecx, dword [0x408438]
sub ecx, dword [0x408434]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x402762
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov edx, dword [0x408434]
lea eax, [edx + ebp]
push str.dlversion.php_id
push eax
lea eax, [esp + 0x64]
push eax
call ebx
push esi
push eax
lea ecx, [esp + 0x8c]
push ecx
mov byte [esp + 0x10c], 3
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
add esp, 0x18
lea ecx, [esp + 0x5c]
mov byte [esp + 0xf4], 5
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x40]
mov byte [esp + 0xf4], 6
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov ecx, dword [0x408438]
sub ecx, dword [0x408434]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4027e0
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ecx, dword [0x408434]
lea eax, [ecx + ebp]
push str.dlupdate.dat
push eax
lea edx, [esp + 0x9c]
push edx
call ebx
add esp, 0xc
mov byte [esp + 0xf4], 7
mov eax, dword [esp + 0x7c]
mov esi, 0x10
cmp dword [esp + 0x90], esi
jae 0x40281a
lea eax, [esp + 0x7c]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryA]
mov ecx, dword [esp + 0xb4]
cmp dword [esp + 0xc8], esi
jae 0x402838
lea ecx, [esp + 0xb4]
mov eax, dword [esp + 0x7c]
cmp dword [esp + 0x90], esi
jae 0x402849
lea eax, [esp + 0x7c]
push 0
push 0
push ecx
push eax
push 0
call sub.urlmon.dll_URLDownloadToFileA
test eax, eax
jne 0x402987
mov eax, dword [esp + 0xb4]
cmp dword [esp + 0xc8], esi
jae 0x402875
lea eax, [esp + 0xb4]
mov ebx, dword [sym.imp.MSVCR90.dll_fopen]
push 0x4055b0
push eax
call ebx
mov esi, eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x24]
push ecx
push str._d__d
push esi
call dword [sym.imp.MSVCR90.dll_fscanf]
push esi
call dword [sym.imp.MSVCR90.dll_fclose]
add esp, 0x1c
cmp dword [esp + 0x18], 1
jle 0x402a32
mov eax, dword [esp + 0x98]
mov esi, 0x10
cmp dword [esp + 0xac], esi
jae 0x4028cc
lea eax, [esp + 0x98]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryA]
mov ecx, dword [esp + 0xd0]
cmp dword [esp + 0xe4], esi
jae 0x4028ea
lea ecx, [esp + 0xd0]
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xac], esi
jae 0x402901
lea eax, [esp + 0x98]
push 0
push 0
push ecx
push eax
push 0
call sub.urlmon.dll_URLDownloadToFileA
test eax, eax
jne 0x402987
lea edx, [esp + 0xcc]
push edx
lea ecx, [esp + 0x28]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x3c], esi
jae 0x402932
lea eax, [esp + 0x28]
push 0x40547c
push eax
call ebx
add esp, 8
xor bl, bl
test eax, eax
je 0x40294f
push eax
mov bl, 1
call dword [sym.imp.MSVCR90.dll_fclose]
add esp, 4
lea ecx, [esp + 0x24]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
test bl, bl
je 0x402987
sub esp, 0x1c
lea eax, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
call fcn.00401f70
add esp, 0x1c
cmp eax, dword [esp + 0x1c]
jne 0x402987
mov byte [esp + 0x17], 1
lea ecx, [esp + 0x94]
mov byte [esp + 0xf4], 6
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x78]
mov byte [esp + 0xf4], 1
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov ecx, dword [0x408438]
sub ecx, dword [0x408434]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
add ebp, 0x1c
cmp edi, ecx
jb 0x402720
lea ecx, [esp + 0xcc]
mov byte [esp + 0xf4], 0
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0xb0]
mov dword [esp + 0xf4], 0xffffffff
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov al, byte [esp + 0x17]
mov ecx, dword [esp + 0xec]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd4]
xor ecx, esp
call fcn.0040382c
add esp, 0xe4
ret
lea ecx, [esp + 0x94]
mov byte [esp + 0xf4], 6
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x78]
mov byte [esp + 0xf4], 1
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0xcc]
mov byte [esp + 0xf4], 0
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0xb0]
mov dword [esp + 0xf4], 0xffffffff
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
xor al, al
jmp 0x402a0a