Function at 0x4249d0
Capabilities:
Delete file
Get common file path
Parse url

Disassembly:
push 0xffffffffffffffff
push 0x4811ec
mov eax, dword fs:[0]
push eax
sub esp, 0x7cc
mov eax, dword [0x49e128]
xor eax, esp
mov dword [esp + 0x7c8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49e128]
xor eax, esp
push eax
lea eax, [esp + 0x7e0]
mov dword fs:[0], eax
mov eax, dword [esp + 0x7f0]
mov ecx, dword [esp + 0x7f8]
mov edi, dword [esp + 0x7f4]
mov dword [esp + 0x1c], eax
mov eax, 0x14
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x28]
push ecx
xor ebx, ebx
push 0x4b
mov esi, 1
lea edx, [esp + 0x48]
push ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x58], 5
mov dword [esp + 0x64], 4
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], 3
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], edx
call dword [sym.imp.WININET.dll_InternetQueryOptionW]
test eax, eax
jne 0x424a8a
mov eax, esi
jmp 0x424dd5
mov ecx, dword [esp + 0x40]
mov eax, ecx
and eax, 4
jne 0x424a9e
test cl, 8
je 0x424dc2
mov dword [esp + 0xd0], 0xf
mov dword [esp + 0xcc], ebx
mov byte [esp + 0xbc], bl
mov dword [esp + 0x7e8], ebx
cmp eax, 4
jne 0x424afe
mov edx, dword [esp + 0x58]
cmp edx, ebx
je 0x424b4d
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x424ad4
sub eax, esi
push eax
push edx
lea ecx, [esp + 0xc0]
call fcn.00405600
mov edx, dword [esp + 0x58]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esp + 0x58], ebx
jmp 0x424b4d
test cl, 8
je 0x424b4d
push 0x3ff
lea eax, [esp + 0x3e1]
push ebx
push eax
mov byte [esp + 0x3e8], bl
call fcn.004611e0
add esp, 0xc
push 3
push 0x400
lea ecx, [esp + 0x3e4]
push ecx
call dword [sym.imp.WININET.dll_DetectAutoProxyUrl]
test eax, eax
je 0x424b4d
lea edx, [esp + 0x3dc]
push edx
lea ecx, [esp + 0xbc]
call fcn.00405ec0
cmp dword [esp + 0xcc], ebx
mov ebp, 0x10
je 0x424d85
push 0x103
lea eax, [esp + 0x1dd]
push ebx
push eax
mov byte [esp + 0x1e4], bl
call fcn.004611e0
push 0x103
lea ecx, [esp + 0xe5]
push ebx
push ecx
mov byte [esp + 0xec], bl
call fcn.004611e0
add esp, 0x18
lea edx, [esp + 0x1d8]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0xd4]
push eax
push ebx
push ebx
lea ecx, [esp + 0x1e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0xa0]
call fcn.00406c00
mov byte [esp + 0x7e8], 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xdc]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00405520
mov byte [esp + 0x804], 2
lea ecx, [esp + 0xb8]
push ecx
mov byte [esp + 0x808], 1
call fcn.00424390
add esp, 0x20
mov esi, eax
mov byte [esp + 0x7e8], bl
cmp dword [esp + 0xb4], ebp
jb 0x424c45
mov edx, dword [esp + 0xa0]
push edx
call fcn.0046058f
add esp, 4
cmp esi, ebx
mov eax, 0xf
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb0], ebx
mov byte [esp + 0xa0], bl
je 0x424d77
push 0xffffffffffffffff
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x1c]
push ebx
push eax
lea ecx, [esp + 0xa8]
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
call fcn.00405520
mov byte [esp + 0x7e8], 3
cmp dword [esp + 0xb0], ebx
jne 0x424d0d
push 0x38
lea ecx, [esp + 0x68]
push ebx
push ecx
call fcn.004611e0
mov ecx, dword [edi + 0x14]
add esp, 0xc
cmp dword [edi + 0x18], ebp
lea edx, [esp + 0x2dc]
mov dword [esp + 0x60], 0x3c
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], 0xff
mov dword [esp + 0x90], 1
jb 0x424ce4
mov eax, dword [edi + 4]
jmp 0x424ce7
lea eax, [edi + 4]
lea edx, [esp + 0x60]
push edx
push ebx
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
je 0x424d0d
lea eax, [esp + 0x2dc]
push eax
lea ecx, [esp + 0xa0]
call fcn.00405ec0
cmp dword [esp + 0xb4], ebp
mov ecx, dword [esp + 0xa0]
jae 0x424d24
lea ecx, [esp + 0xa0]
cmp dword [edi + 0x18], ebp
jb 0x424d2e
mov eax, dword [edi + 4]
jmp 0x424d31
lea eax, [edi + 4]
lea edx, [esp + 0x3dc]
push edx
push ecx
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.00423fa0
add esp, 0x10
test eax, eax
je 0x424d64
lea ecx, [esp + 0x3dc]
push ecx
mov ecx, dword [esp + 0x20]
call fcn.00405ec0
mov dword [esp + 0x14], ebx
mov byte [esp + 0x7e8], bl
lea ecx, [esp + 0x9c]
call fcn.00401bb0
lea edx, [esp + 0xd4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [esp + 0x7e8], 0xffffffff
cmp dword [esp + 0xd0], ebp
jb 0x424da9
mov eax, dword [esp + 0xbc]
push eax
call fcn.0046058f
add esp, 4
mov dword [esp + 0xd0], 0xf
mov dword [esp + 0xcc], ebx
mov byte [esp + 0xbc], bl
mov eax, dword [esp + 0x58]
cmp eax, ebx
je 0x424dd1
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x7e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x7c8]
xor ecx, esp
call fcn.00460e4b
add esp, 0x7d8
ret