Function at 0x482180
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1704
call fcn.004a9b70
mov eax, dword [0x4c32cc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push str.http:__www.winpatrol.com_cgi_bin_newinstall.pl_
mov edx, 0x7ffffffe
mov eax, 0x200
lea ecx, [ebp - 0x1450]
mov dword [ebp - 0x1704], 0
call fcn.00401000
lea ebx, [ebp - 0xa50]
call fcn.0049cbc0
call fcn.0049a270
call fcn.00483a00
cmp dword [0x4d2afc], 0
je 0x4821ee
mov esi, dword [0x4c6444]
mov dword [0x4c6444], 0x20119
jmp 0x4821f4
mov esi, dword [ebp - 0x1704]
push 0x200
push str.User
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x750]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
jne 0x482255
push 0x200
push str.ProductId
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea ecx, [ebp - 0x750]
mov edx, 0x80000002
call fcn.0048e050
add esp, 0xc
lea eax, [ebp - 0x750]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x15
jle 0x482255
mov byte [ebp - 0x73b], 0
push 0x200
push str.Email
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x950]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
jne 0x4822db
push 0x200
push str.RegisteredOwner
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea ecx, [ebp - 0x950]
mov edx, 0x80000002
call fcn.0048e050
add esp, 0xc
mov edx, 0x200
lea eax, [ebp - 0x950]
cmp byte [eax], 0
je 0x4822b3
inc eax
dec edx
jne 0x4822a8
jmp 0x4822db
test edx, edx
je 0x4822db
mov ecx, 0x200
sub ecx, edx
mov eax, 0x200
sub eax, ecx
push str._WinPatrol.com
lea ecx, [ebp + ecx - 0x950]
mov edx, 0x7fffffff
call fcn.00401000
lea edi, [ebp - 0x550]
call fcn.0047e3e0
push str.PATH
push str.SoftwareBillP_StudiosWinPatrol
mov ecx, edi
mov edx, 0x80000001
call fcn.0048e390
mov ebx, edi
call fcn.0047ea60
push str.DATA
push str.SoftwareBillP_StudiosWinPatrol
mov ecx, edi
mov edx, 0x80000001
call fcn.0048e390
add esp, 0x10
cmp dword [0x4d2afc], 0
je 0x48232b
mov dword [0x4c6444], esi
push str.user
mov edx, 0x7ffffffe
mov eax, 0x400
lea ecx, [ebp - 0x448]
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x48235b
inc eax
dec edx
jne 0x482350
jmp 0x482385
test edx, edx
je 0x482385
mov ecx, 0x400
sub ecx, edx
lea edx, [ebp - 0x750]
mov eax, 0x400
push edx
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
push 0x200
push str.Company
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0xc50]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
jne 0x48240c
push 0xac
push eax
lea eax, [ebp - 0x1700]
push eax
call fcn.004a3190
add esp, 0xc
lea ecx, [ebp - 0x1700]
push ecx
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea ecx, [ebp - 0x16fc]
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4823d6
sub ecx, edi
sar ecx, 1
inc ecx
cmp eax, 0xffffffff
je 0x48240c
push 0
push 0
lea edx, [ecx + ecx]
push edx
lea eax, [ebp - 0xc50]
push eax
push ecx
lea ecx, [ebp - 0x16fc]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x482422
inc eax
dec edx
jne 0x482417
jmp 0x48244a
test edx, edx
je 0x48244a
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.company
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x482460
inc eax
dec edx
jne 0x482455
jmp 0x48248a
test edx, edx
je 0x48248a
mov ecx, 0x400
sub ecx, edx
lea edx, [ebp - 0xc50]
mov eax, 0x400
push edx
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x4824a0
inc eax
dec edx
jne 0x482495
jmp 0x4824c8
test edx, edx
je 0x4824c8
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.email
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x4824de
inc eax
dec edx
jne 0x4824d3
jmp 0x482508
test edx, edx
je 0x482508
lea eax, [ebp - 0x950]
push eax
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
push 0x200
push 0x4bbc44
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0xe50]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x482540
inc eax
dec edx
jne 0x482535
jmp 0x482568
test edx, edx
je 0x482568
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.name
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x48257e
inc eax
dec edx
jne 0x482573
jmp 0x4825a8
test edx, edx
je 0x4825a8
mov ecx, 0x400
sub ecx, edx
lea edx, [ebp - 0xe50]
mov eax, 0x400
push edx
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x4825be
inc eax
dec edx
jne 0x4825b3
jmp 0x4825e6
test edx, edx
je 0x4825e6
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.plusname
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x4825fc
inc eax
dec edx
jne 0x4825f1
jmp 0x482624
test edx, edx
je 0x482624
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push 0x4c79e0
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
nop
cmp byte [eax], 0
je 0x48263b
inc eax
dec edx
jne 0x482630
jmp 0x482663
test edx, edx
je 0x482663
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.pluscode
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
mov edi, edi
cmp byte [eax], 0
je 0x48267b
inc eax
dec edx
jne 0x482670
jmp 0x4826a3
test edx, edx
je 0x4826a3
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push 0x4c7a9c
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
push 0x200
push str.RegNumber
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x1650]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x4826db
inc eax
dec edx
jne 0x4826d0
jmp 0x482703
test edx, edx
je 0x482703
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.code
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
mov edi, edi
cmp byte [eax], 0
je 0x48271b
inc eax
dec edx
jne 0x482710
jmp 0x482745
test edx, edx
je 0x482745
lea eax, [ebp - 0x1650]
push eax
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
push 0x200
push str.NewVersion
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x1050]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x48277d
inc eax
dec edx
jne 0x482772
jmp 0x4827a5
test edx, edx
je 0x4827a5
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.version
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x4827bb
inc eax
dec edx
jne 0x4827b0
jmp 0x4827e5
test edx, edx
je 0x4827e5
mov ecx, 0x400
sub ecx, edx
lea edx, [ebp - 0x1050]
mov eax, 0x400
push edx
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
push 8
lea edx, [ebp - 0x24]
mov ecx, 0x27a
call fcn.00499890
add esp, 4
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jne 0x482817
push 0x4bb5f4
push str.loc_s
push 0x20
lea ecx, [ebp - 0x44]
push ecx
jmp 0x482826
lea edx, [ebp - 0x24]
push edx
push str.loc_s
push 0x20
lea eax, [ebp - 0x44]
push eax
call fcn.00402830
add esp, 0x10
mov edx, 0x400
lea eax, [ebp - 0x448]
lea esp, [esp]
cmp byte [eax], 0
je 0x48284b
inc eax
dec edx
jne 0x482840
jmp 0x482872
test edx, edx
je 0x482872
mov ecx, 0x400
sub ecx, edx
lea edx, [ebp - 0x44]
mov eax, 0x400
push edx
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
lea ecx, [ecx]
cmp byte [eax], 0
je 0x48288b
inc eax
dec edx
jne 0x482880
jmp 0x4828b3
test edx, edx
je 0x4828b3
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.mswin
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
mov edi, edi
cmp byte [eax], 0
je 0x4828cb
inc eax
dec edx
jne 0x4828c0
jmp 0x4828f5
test edx, edx
je 0x4828f5
lea eax, [ebp - 0xa50]
push eax
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
mov edx, 0x400
lea eax, [ebp - 0x448]
cmp byte [eax], 0
je 0x48290b
inc eax
dec edx
jne 0x482900
jmp 0x482933
test edx, edx
je 0x482933
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
push str.cpu
lea ecx, [ebp + ecx - 0x448]
mov edx, 0x7fffffff
call fcn.00401000
cmp dword [0x4d2afc], 0
mov edx, 0x400
lea eax, [ebp - 0x448]
je 0x482960
cmp byte [eax], 0
je 0x482952
inc eax
dec edx
jne 0x482947
jmp 0x482993
test edx, edx
je 0x482993
push 0x4bbd60
jmp 0x482974
cmp byte [eax], 0
je 0x48296b
inc eax
dec edx
jne 0x482960
jmp 0x482993
test edx, edx
je 0x482993
push 0x4bbd64
mov ecx, 0x400
sub ecx, edx
mov eax, 0x400
sub eax, ecx
mov edx, 0x7fffffff
lea ecx, [ebp + ecx - 0x448]
call fcn.00401000
mov edx, 0x200
lea eax, [ebp - 0x1450]
mov edi, edi
cmp byte [eax], 0
je 0x4829ab
inc eax
dec edx
jne 0x4829a0
jmp 0x4829d5
test edx, edx
je 0x4829d5
mov ecx, 0x200
sub ecx, edx
lea edx, [ebp - 0x448]
mov eax, 0x200
push edx
sub eax, ecx
lea ecx, [ebp + ecx - 0x1450]
mov edx, 0x7fffffff
call fcn.00401000
push 0x4d3e5c
push 0
lea eax, [ebp - 0x1450]
push eax
push 0x482030
push 0
push 0
call fcn.004a1be1
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0x18
push 0x19
call edi
cmp dword [0x4d2cac], 0
jne 0x482a23
mov esi, dword [ebp - 0x1704]
lea ecx, [ecx]
cmp esi, 3
jge 0x482a23
push 0x64
call edi
inc esi
cmp dword [0x4d2cac], 0
je 0x482a10
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a01d6
mov esp, ebp
pop ebp
ret