Function at 0x4012dd
Capabilities:
Create http request
Read data from internet
Receive data
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10050
call fcn.00401a60
push ebx
push esi
push edi
xor esi, esi
push 0x4000000
push esi
push esi
push 1
push str.W5zlaXf8
mov dword [ebp - 0xc], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.WININET.dll_InternetOpenA]
cmp eax, esi
mov dword [ebp - 0x10], eax
jne 0x401321
push 0x10
push 0x4081a4
push 0x4091a0
jmp 0x401399
push esi
push 0x84000000
push esi
mov ebx, 0x409e20
push esi
push ebx
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
cmp eax, esi
mov dword [ebp - 0xc], eax
jne 0x401344
push 0x4092ac
jmp 0x40137d
lea ecx, [ebp - 8]
push ecx
lea ecx, [ebp - 0x50]
push 0x1f
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetReadFile]
cmp eax, 1
je 0x401361
push 0x409278
jmp 0x40137d
push 0x17
lea eax, [ebp - 0x48]
push 0x409128
push eax
call fcn.004018e0
add esp, 0xc
test eax, eax
je 0x4013a7
push 0x409250
lea eax, [ebp - 0x10050]
push eax
call fcn.00401918
pop ecx
lea eax, [ebp - 0x10050]
pop ecx
push 0x10
push 0x4081a4
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4015ac
push str.shiren
push esi
call fcn.00401d24
push eax
push ebx
call fcn.00401970
push str..exe
push ebx
call fcn.00401980
push 0x40923c
push ebx
call fcn.00401d11
add esp, 0x20
cmp eax, esi
mov dword [ebp - 4], eax
je 0x4015ac
push esi
push 0x4015ed
push dword [ebp + 8]
push 0x67
push dword [0x409c60]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov dword [0x409f24], eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10050]
push 0x10000
push eax
push dword [ebp - 0xc]
mov dword [0x409f28], esi
xor edi, edi
call dword [sym.imp.WININET.dll_InternetReadFile]
cmp eax, 1
jne 0x401519
mov ebx, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
cmp dword [ebp - 8], esi
je 0x401561
push dword [ebp - 4]
lea eax, [ebp - 0x10050]
push dword [ebp - 8]
push 1
push eax
call fcn.00401be7
mov eax, dword [ebp - 0x50]
xor edx, edx
mov ecx, 0x3e8
add edi, dword [ebp - 8]
div ecx
xor edx, edx
push eax
mov eax, edi
div ecx
push eax
lea eax, [ebp - 0x10050]
push str._dK____dK_Bytes
push eax
call fcn.00401918
add esp, 0x20
lea eax, [ebp - 0x10050]
push eax
push esi
push 0xc
push 0x3f8
push dword [0x409f24]
call ebx
mov eax, edi
xor edx, edx
shl eax, 8
div dword [ebp - 0x50]
push esi
push eax
push 0x402
push 0x3f7
push dword [0x409f24]
call ebx
push esi
push esi
push esi
lea eax, [ebp - 0x30]
push esi
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x4014e3
push esi
push esi
lea eax, [ebp - 0x30]
push esi
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x40155a
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x4014a6
mov eax, dword [0x409f28]
cmp eax, 1
je 0x4014a6
cmp eax, 2
je 0x401561
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10050]
push 0x10000
push eax
push dword [ebp - 0xc]
call dword [sym.imp.WININET.dll_InternetReadFile]
cmp eax, 1
je 0x401429
mov ebx, 0x409e20
lea eax, [ebp - 0x10050]
push 0x4091f8
push eax
call fcn.00401918
pop ecx
lea eax, [ebp - 0x10050]
pop ecx
push 0x10
push 0x4081a4
push eax
push dword [0x409f24]
call dword [sym.imp.USER32.dll_MessageBoxA]
push dword [ebp - 4]
call fcn.00401b91
push ebx
mov dword [ebp - 4], esi
call fcn.00401891
pop ecx
jmp 0x401595
push 1
call fcn.00401abc
cmp dword [ebp - 0x50], edi
je 0x401598
push 0x10
push 0x4081a4
push 0x4091c8
push dword [0x409f24]
call dword [sym.imp.USER32.dll_MessageBoxA]
push dword [ebp - 4]
call fcn.00401b91
mov dword [ebp - 4], esi
mov dword [esp], 0x409e20
call fcn.00401891
pop ecx
jmp 0x4015ac
push esi
push dword [0x409f24]
call dword [sym.imp.USER32.dll_EndDialog]
mov dword [ebp - 0x14], 1
mov eax, dword [0x409f24]
cmp eax, esi
je 0x4015bd
push esi
push eax
call dword [sym.imp.USER32.dll_EndDialog]
cmp dword [ebp - 4], esi
je 0x4015cb
push dword [ebp - 4]
call fcn.00401b91
pop ecx
cmp dword [ebp - 0xc], esi
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
je 0x4015db
push dword [ebp - 0xc]
call edi
cmp dword [ebp - 0x10], esi
je 0x4015e5
push dword [ebp - 0x10]
call edi
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
leave
ret