Function at 0x1000da4d
Capabilities:
Check if file exists
Check internet connectivity via wininet
Parse url

Disassembly:
push 0x70
mov eax, 0x1001b420
call fcn.1001a4c1
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 4], ecx
test eax, eax
je 0x1000dd22
mov edi, dword [ebp + 0xc]
mov dword [eax], ecx
mov dword [eax + 4], ecx
test edi, edi
je 0x1000dd22
push edi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1000dd22
mov ebx, dword [ebp + 8]
push edi
mov byte [ebp - 4], 1
lea esi, [ebx + 0x60]
mov ecx, esi
call fcn.1000e8c7
push 0x3c
pop edi
push edi
lea eax, [ebp - 0x7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x7c], edi
mov eax, 0x824
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x4c], eax
push dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
lea ecx, [ebp - 0x7c]
push ecx
push 0
push eax
push dword [esi]
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x1000daf9
mov eax, dword [ebp - 0x68]
lea ecx, [ebx + 0x6c]
add eax, eax
push eax
push dword [ebp - 0x6c]
call fcn.1000e8c7
mov edi, eax
test edi, edi
js 0x1000dd27
mov eax, dword [ebp - 0x68]
mov dword [ebx + 0x74], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebx + 0x38], eax
jne 0x1000db0d
mov edi, 0x8000ffff
jmp 0x1000dd27
cmp dword [ebx + 0x34], eax
je 0x1000db03
mov edi, eax
cmp dword [esi], eax
je 0x1000dd27
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edi, [ebp - 0x40]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
call esi
xor eax, eax
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x30]
push eax
call esi
xor esi, esi
mov byte [ebp - 4], 4
cmp dword [ebx + 0xc4], esi
jne 0x1000dbdb
cmp dword [ebx + 0x18], esi
jne 0x1000dbdb
push esi
lea eax, [ebp + 0xc]
mov dword [ebp + 0xc], esi
push eax
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
cmp eax, 1
sete dl
jne 0x1000db89
test byte [ebp + 0xc], 0x42
push esi
setne cl
movzx edx, dl
test byte [ebp + 0xc], 0x20
setne al
test al, cl
pop eax
cmovne edx, eax
test dl, dl
jne 0x1000dba9
mov edi, 0x800c0004
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x30]
push eax
call esi
lea eax, [ebp - 0x40]
push eax
call esi
jmp 0x1000dd27
mov eax, dword [ebx]
push esi
push 1
push dword [ebx + 0x60]
push ebx
call dword [eax + 0x88]
test eax, eax
jns 0x1000dbd0
push dword [ebx + 0x60]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1000dbd0
mov edi, 0x800432b7
jmp 0x1000db92
push 0x1000c310
call dword [sym.imp.kernel32.dll_SetUnhandledExceptionFilter]
cmp dword [ebx + 0xd8], 5
push 3
pop eax
mov word [ebp - 0x40], ax
mov eax, 0x402
lea ecx, [eax + 0xc]
cmove eax, ecx
lea ecx, [ebx - 0x14]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebx + 0x60]
call fcn.1000e8c7
mov edi, eax
test edi, edi
js 0x1000db92
push dword [ebp + 0x10]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1000dc8b
push 8
pop eax
mov dword [ebp + 0xc], esi
cmp word [ebp - 0x30], ax
jne 0x1000dc63
mov edi, dword [ebp - 0x28]
test edi, edi
je 0x1000dc3a
push esi
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
mov dword [ebp + 0xc], edi
jmp 0x1000dc40
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push 0x1001f494
lea ecx, [ebp + 0xc]
call fcn.1000e8c7
mov edi, eax
test edi, edi
jns 0x1000dc5d
push dword [ebp + 0xc]
call esi
jmp 0x1000db92
and dword [ebp - 0x28], 0
jmp 0x1000dc69
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp + 0x10]
lea ecx, [ebp + 0xc]
call fcn.1000e8c7
mov edi, eax
test edi, edi
js 0x1000dc53
push 8
pop eax
mov word [ebp - 0x30], ax
mov eax, dword [ebp + 0xc]
push 0
mov dword [ebp - 0x28], eax
call esi
xor eax, eax
mov byte [ebx + 0xb2], al
cmp dword [ebx + 0xc4], eax
jne 0x1000dca3
cmp dword [ebx + 0x18], eax
jne 0x1000dca3
push eax
jmp 0x1000dca5
push 1
push 2
push 9
call dword [sym.imp.urlmon.dll_CoInternetSetFeatureEnabled]
mov ecx, 0x2bd8
call fcn.1000e8c7
lea ecx, [ebp - 0x20]
call fcn.1000e8c7
mov ecx, dword [ebx + 0x34]
lea edx, [ebp - 0x30]
push edx
xor esi, esi
lea edx, [ebp - 0x40]
push esi
mov eax, dword [ecx]
push esi
push edx
push dword [ebx + 0x60]
push ecx
call dword [eax + 0x2c]
mov edi, eax
test edi, edi
js 0x1000db92
lea ecx, [ebp - 0x18]
call fcn.1000e8c7
push esi
push 0x3e8
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x20]
mov eax, dword [eax + 4]
sbb eax, dword [ebp - 0x1c]
push eax
push ecx
call fcn.1001a608
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp 0x1000db92
mov edi, 0x80070057
mov eax, edi
call fcn.1001a427
ret 0x10