Function at 0x43e8d0
Capabilities:
Create directory
Download url
Get common file path
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5aec4d
mov eax, dword fs:[0]
push eax
sub esp, 0x638
mov eax, dword [0x624394]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x644], ebx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x634]
push eax
mov dword [ebp - 0x634], 0
call fcn.0043ae40
lea eax, [ebp - 0x634]
mov dword [ebp - 4], 0
lea edi, [ebx + 0x4b0]
mov dword [ebp - 0x640], 0
push eax
mov ecx, edi
call fcn.00436dd0
mov esi, eax
cmp esi, dword [edi]
je 0x43e95e
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x634]
push eax
call fcn.00434630
test al, al
je 0x43e994
lea eax, [ebp - 0x634]
push ecx
mov dword [ebp - 0x638], eax
lea eax, [ebp - 0x638]
push eax
push ecx
mov ecx, edi
call fcn.004385a0
push eax
add eax, 0x10
mov ecx, edi
push eax
push esi
lea eax, [ebp - 0x638]
push eax
call fcn.00438650
mov esi, dword [ebp - 0x638]
mov ecx, dword [esi + 0x6c]
mov eax, 1
sub eax, dword [ecx - 4]
or eax, dword [ecx - 8]
jge 0x43e9ae
push 0
lea ecx, [esi + 0x6c]
call fcn.00420ff0
mov edx, dword [esi + 0x6c]
lea ecx, [ebp - 0x640]
call fcn.00427ab0
lea eax, [ebp - 0x634]
mov byte [ebp - 4], 1
push eax
mov ecx, edi
call fcn.00436dd0
mov esi, eax
cmp esi, dword [edi]
je 0x43e9e8
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x634]
push eax
call fcn.00434630
test al, al
je 0x43ea1e
lea eax, [ebp - 0x634]
push ecx
mov dword [ebp - 0x638], eax
lea eax, [ebp - 0x638]
push eax
push ecx
mov ecx, edi
call fcn.004385a0
push eax
add eax, 0x10
mov ecx, edi
push eax
push esi
lea eax, [ebp - 0x638]
push eax
call fcn.00438650
mov esi, dword [ebp - 0x638]
mov ecx, dword [esi + 0x7c]
sub ecx, 0x10
call fcn.00420e60
lea ebx, [eax + 0x10]
mov dword [ebp - 0x638], ebx
lea eax, [ebp - 0x634]
mov byte [ebp - 4], 2
push eax
mov ecx, edi
mov dword [ebp - 0x62c], 0
call fcn.00436dd0
mov esi, eax
cmp esi, dword [edi]
je 0x43ea68
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x634]
push eax
call fcn.00434630
test al, al
je 0x43ea9e
lea eax, [ebp - 0x634]
push ecx
mov dword [ebp - 0x630], eax
lea eax, [ebp - 0x630]
push eax
push ecx
mov ecx, edi
call fcn.004385a0
push eax
add eax, 0x10
mov ecx, edi
push eax
push esi
lea eax, [ebp - 0x630]
push eax
call fcn.00438650
mov esi, dword [ebp - 0x630]
mov eax, dword [esi + 0x70]
lea edi, [esi + 0x70]
mov esi, 1
mov ecx, esi
sub ecx, dword [eax - 4]
or ecx, dword [eax - 8]
jge 0x43eabc
push 0
mov ecx, edi
call fcn.00420ff0
mov edx, dword [edi]
lea ecx, [ebp - 0x62c]
call fcn.00427ab0
push 5
mov edx, 0x62d670
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x630]
call fcn.00420390
add esp, 4
mov edi, eax
mov byte [ebp - 4], 4
mov edx, esi
mov ecx, dword [edi]
sub edx, dword [ecx - 4]
mov ecx, dword [ecx - 8]
or ecx, edx
jge 0x43eaff
push 0
mov ecx, edi
call fcn.00420ff0
mov ecx, dword [edi]
test ecx, ecx
jne 0x43eb0a
or esi, 0xffffffff
jmp 0x43eb38
mov eax, dword [ebp - 0x62c]
cmp dword [eax - 0xc], 0
jge 0x43eb1b
or esi, 0xffffffff
jmp 0x43eb38
push ecx
push eax
call fcn.004e062f
mov esi, eax
add esp, 8
test esi, esi
jne 0x43eb30
or esi, 0xffffffff
jmp 0x43eb38
sub esi, dword [ebp - 0x62c]
sar esi, 1
mov byte [ebp - 4], 3
or edi, 0xffffffff
mov edx, dword [ebp - 0x630]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43eb5c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp esi, 0xffffffff
je 0x43ed9d
call fcn.00421560
mov ecx, eax
test ecx, ecx
jne 0x43eb7a
push 0x80004005
call fcn.004212c0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x630], eax
push 0x208
lea eax, [ebp - 0x628]
mov byte [ebp - 4], 5
push 0
push eax
call fcn.004e0970
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.004e0970
mov eax, dword [ebp - 0x62c]
mov edi, 1
mov edx, edi
add esp, 0x18
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
or ecx, edx
jge 0x43ebdf
push 0
lea ecx, [ebp - 0x62c]
call fcn.00420ff0
mov eax, dword [ebp - 0x62c]
lea ecx, [ebp - 0x420]
push ecx
lea ecx, [ebp - 0x628]
push ecx
push 0
push 0
push eax
call fcn.004e5487
add esp, 0x14
call fcn.00421560
mov ecx, eax
test ecx, ecx
jne 0x43ec0f
push 0x80004005
call fcn.004212c0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x63c], eax
push 0x208
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 6
push 0
push eax
call fcn.004e0970
add esp, 0xc
lea eax, [ebp - 0x218]
push 1
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x63c]
push str._sIcons_
push eax
call fcn.00436c10
mov esi, dword [ebp - 0x63c]
mov ecx, edi
add esp, 0xc
sub ecx, dword [esi - 4]
mov eax, dword [esi - 8]
or eax, ecx
jge 0x43ec8a
push 0
lea ecx, [ebp - 0x63c]
call fcn.00420ff0
mov esi, dword [ebp - 0x63c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
cmp eax, 0x10
je 0x43ecbe
mov eax, dword [esi - 8]
mov ecx, edi
sub ecx, dword [esi - 4]
or eax, ecx
jge 0x43ecb5
push 0
lea ecx, [ebp - 0x63c]
call fcn.00420ff0
mov esi, dword [ebp - 0x63c]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x628]
push eax
push esi
lea eax, [ebp - 0x630]
push str._s_s_s
push eax
call fcn.00436c10
mov edi, dword [ebp - 0x630]
mov ecx, 1
add esp, 0x14
sub ecx, dword [edi - 4]
mov eax, dword [edi - 8]
or eax, ecx
jge 0x43ed09
push 0
lea ecx, [ebp - 0x630]
call fcn.00420ff0
mov edi, dword [ebp - 0x630]
mov eax, dword [ebp - 0x62c]
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
or ecx, edx
jge 0x43ed31
push 0
lea ecx, [ebp - 0x62c]
call fcn.00420ff0
mov eax, dword [ebp - 0x62c]
push 0
push 0
push edi
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
lea ecx, [ebp - 0x62c]
test eax, eax
jne 0x43ed57
lea eax, [ebp - 0x630]
push eax
call fcn.004349f0
jmp 0x43ed63
push 0
push 0x61378c
call fcn.004211a0
mov byte [ebp - 4], 5
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43ed7f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 3
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43ed9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x62c]
mov esi, 1
mov ecx, esi
mov dword [ebp - 0x630], edx
sub ecx, dword [edx - 4]
mov eax, dword [edx - 8]
or eax, ecx
jge 0x43edd3
push 0
lea ecx, [ebp - 0x62c]
call fcn.00420ff0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x630], eax
mov edx, dword [ebp - 0x644]
mov ecx, esi
add edx, 0x4e8
mov dword [ebp - 0x644], edx
mov eax, dword [edx]
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
or eax, ecx
jge 0x43ee02
push 0
mov ecx, edx
call fcn.00420ff0
mov edx, dword [ebp - 0x644]
mov eax, dword [edx]
mov ecx, esi
sub ecx, dword [ebx - 4]
mov dword [ebp - 0x644], eax
mov eax, dword [ebx - 8]
or eax, ecx
jge 0x43ee29
push 0
lea ecx, [ebp - 0x638]
call fcn.00420ff0
mov ebx, dword [ebp - 0x638]
mov ecx, dword [ebp - 0x640]
sub esi, dword [ecx - 4]
mov eax, dword [ecx - 8]
or eax, esi
jge 0x43ee4c
push 0
lea ecx, [ebp - 0x640]
call fcn.00420ff0
mov ecx, dword [ebp - 0x640]
push ecx
push dword [ebp - 0x630]
mov edx, ebx
push dword [ebp - 0x644]
call fcn.004433e0
mov byte [ebp - 4], 2
add esp, 0xc
mov edx, dword [ebp - 0x62c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43ee84
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43ee9f
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x640]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43eec0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x634]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x43eee2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004dda5e
mov esp, ebp
pop ebp
ret 4