Function at 0x432f00
Capabilities:
Check for time delay via gettickcount
Check http status code
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1270
call fcn.0053af40
mov eax, dword [0x5b8250]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x1268], esi
mov eax, dword [edi + 0x26e8]
mov ebx, dword [eax + esi*4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x26dc]
mov dword [edi + 0x26e0], eax
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x2c], 0
cmp dword [eax + 4], 1
je 0x43329e
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x432fa6
lea ecx, [ebp - 0x126c]
mov dword [ebp - 0x1264], 0
push ecx
lea ecx, [ebp - 0x1260]
mov dword [ebp - 0x126c], 0
push ecx
lea ecx, [ebp - 0x1264]
mov dword [ebp - 0x1260], 4
push ecx
push 0x20000013
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x432fa6
mov eax, dword [ebp - 0x1264]
jmp 0x432fa8
xor eax, eax
mov dword [edi + 0x26d8], eax
mov ecx, dword [ebx + 0x20]
test ecx, ecx
je 0x432fbb
mov dword [ecx + 0x2450], eax
cmp dword [edi + 0x26d8], 0xc8
jne 0x433170
push ebx
mov ecx, edi
call fcn.00435d60
push ebx
mov ecx, edi
call fcn.00434c30
push ebx
mov ecx, edi
call fcn.00435de0
push ebx
mov ecx, edi
call fcn.00434d90
push ebx
mov ecx, edi
call fcn.00434be0
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x3c]
cmp dword [edi + 0x5d110], eax
jne 0x433170
cmp dword [edi + 0x5d114], edx
jne 0x433170
cmp dword [edi + 0x2694], 0
je 0x43302b
xor eax, eax
cmp dword [ebx + 0x30], 1
sete al
test eax, eax
je 0x433170
mov ecx, dword [edi + 0x5d118]
mov eax, dword [edi + 0x5d11c]
test ecx, ecx
jne 0x43303f
test eax, eax
je 0x433050
cmp ecx, dword [ebx + 0x38]
jne 0x43313b
cmp eax, edx
jne 0x43313b
mov eax, dword [ebx + 0x30]
mov dword [edi + 0x2700], eax
cmp dword [ebx + 0x1c], 0
je 0x4332fe
mov ecx, ebx
call fcn.00434e70
test eax, eax
je 0x4332fe
lea esi, [edi + 0x5d130]
mov dword [edi + 0x2694], 1
push esi
mov dword [edi + 0x247c], 0
lea eax, [edi + 0x5d338]
mov dword [edi + 0x2700], 0
push 0x591530
mov dword [ebx + 0x30], 0
mov dword [edi + 0x5d110], 0xffffffff
mov dword [edi + 0x5d114], 0xffffffff
push 0x103
push eax
mov dword [ebx + 0x38], 0xffffffff
mov dword [ebx + 0x3c], 0xffffffff
call fcn.00541843
push 0x208
push 0
push esi
call fcn.005392b0
add esp, 0x1c
xor eax, eax
mov word [ebp - 0x214], ax
push 0x206
push eax
lea eax, [ebp - 0x212]
push eax
call fcn.005392b0
add esp, 0xc
lea eax, [ebp - 0x214]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x59553c
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov esi, dword [ebp - 0x1268]
jmp 0x4332fe
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x43314c
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.00433f20
push 0
mov ecx, edi
call fcn.00432670
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0053aa3c
mov esp, ebp
pop ebp
ret 4
cmp dword [edi + 0x2694], 0
jne 0x4334d9
mov eax, dword [edi + 0x26d8]
cmp eax, 0x12e
jne 0x433254
xor eax, eax
push 0x1046
push eax
mov word [ebp - 0x125c], ax
lea eax, [ebp - 0x125a]
push eax
call fcn.005392b0
add esp, 0xc
cmp dword [ebx + 0x1c], 0
je 0x4334f2
lea eax, [ebp - 0x125c]
mov ecx, ebx
push eax
call fcn.00434e30
test eax, eax
je 0x4334f2
mov edx, dword [ebx + 0x20]
lea ecx, [ebp - 0x125c]
push 0
call fcn.00431b40
add esp, 4
test eax, eax
je 0x4334f2
cmp dword [ebx + 0x24], 0
jne 0x433223
push 0x1048
lea esi, [edi + 0x5f5d0]
push 0
push esi
call fcn.005392b0
add esp, 0xc
lea eax, [ebp - 0x125c]
push eax
push 0x591530
push 0x823
push esi
call fcn.00541843
mov esi, dword [ebp - 0x1268]
add esp, 0x10
push 0
mov ecx, edi
call fcn.00432670
test eax, eax
je 0x4334f2
push esi
mov ecx, edi
call fcn.00433f20
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0053aa3c
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x194
jne 0x4334d9
mov dword [edi + 0x2470], 1
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x43327a
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.00433f20
push 0
mov ecx, edi
call fcn.00432670
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0053aa3c
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx], 0
jne 0x4334a8
mov eax, dword [ebx + 4]
test eax, eax
je 0x4334a8
push ebx
mov ecx, edi
mov dword [ebx + 0x1c], eax
call fcn.00434c30
mov eax, dword [edi + 0x5d110]
cmp eax, dword [ebx + 0x38]
jne 0x4334d9
mov eax, dword [edi + 0x5d114]
cmp eax, dword [ebx + 0x3c]
jne 0x4334d9
cmp dword [edi + 0x2694], 0
je 0x4332f5
xor eax, eax
cmp dword [ebx + 0x30], 1
sete al
test eax, eax
je 0x4334d9
mov eax, dword [ebx + 0x30]
mov dword [edi + 0x2700], eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x433320
cmp dword [eax + 0x2448], 0xffffffff
jne 0x433320
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x20]
sub eax, dword [ebx + 8]
mov dword [ecx + 0x2448], eax
push dword [ebx + 0x1c]
mov eax, dword [edi]
mov ecx, edi
push 2
call dword [eax + 4]
test eax, eax
je 0x4334fa
mov eax, dword [edi]
mov ecx, edi
push 0
push 3
call dword [eax + 4]
test eax, eax
je 0x4334fa
mov ecx, edi
call fcn.00434f40
test eax, eax
je 0x4334f2
mov eax, dword [edi]
mov ecx, edi
push 0
push 4
call dword [eax + 4]
test eax, eax
je 0x4334fa
cmp dword [edi + 0x2700], 0
je 0x43347a
mov eax, dword [edi + 0x5d110]
cmp eax, dword [edi + 0x5d120]
jne 0x4333bc
mov eax, dword [edi + 0x5d114]
cmp eax, dword [edi + 0x5d124]
jne 0x4333bc
push esi
mov ecx, edi
call fcn.00433f20
mov dword [edi + 0x5d108], 7
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0053aa3c
mov esp, ebp
pop ebp
ret 4
push 4
lea eax, [ebp - 0x1260]
mov dword [ebp - 0x1260], 0x4e20
push eax
push 6
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push ebx
mov ecx, edi
call fcn.004358f0
test eax, eax
je 0x433234
mov eax, dword [ebx + 0x8040]
cmp dword [eax + 8], 0
jne 0x433412
cmp dword [eax + 0xc], 0
jne 0x433412
mov dword [eax + 4], 1
mov dword [ebx + 0x28], 8
jmp 0x433423
push 0
push esi
mov ecx, edi
mov dword [ebx + 0x28], 4
call fcn.004344e0
cmp dword [edi + 0x2694], 0
jne 0x433456
mov esi, 1
cmp dword [edi + 0x2468], esi
jbe 0x433456
lea esp, [esp]
push 4
mov ecx, edi
call fcn.00432670
test eax, eax
je 0x433456
inc esi
cmp esi, dword [edi + 0x2468]
jb 0x433440
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
neg eax
sbb eax, eax
neg eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0053aa3c
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
test eax, eax
je 0x4334fa
mov dword [ebx + 0x28], 8
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0053aa3c
mov esp, ebp
pop ebp
ret 4
push 0x595544
lea eax, [ebx + 0x806c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x4334d9
mov dword [edi + 0x2700], 0
mov dword [ebx + 0x30], 0
mov dword [edi + 0x26e4], 0x8000000
push 1
push esi
mov ecx, edi
mov dword [ebx + 0x28], 0
call fcn.004344e0
test eax, eax
jne 0x43323c
push esi
mov ecx, edi
call fcn.00433f20
mov ecx, dword [ebp - 8]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053aa3c
mov esp, ebp
pop ebp
ret 4