Function at 0x426eda
Capabilities:
Contain obfuscated stackstrings
Get common file path
Query environment variable

Disassembly:
push 0x20
mov eax, 0x4a5b9d
call fcn.0048cfe2
mov ebx, dword [ebp + 8]
mov ecx, ebx
call fcn.0046971d
xor esi, esi
mov dword [ebp - 4], esi
lea ecx, [ebx + 0x54]
mov dword [ebx], vtable.CGRInternet.0
call fcn.00401a80
lea ecx, [ebx + 0x58]
call fcn.00401a80
lea ecx, [ebx + 0x5c]
call fcn.00401a80
lea ecx, [ebx + 0x60]
call fcn.00401a80
lea ecx, [ebx + 0x64]
call fcn.00401a80
lea ecx, [ebx + 0x148]
call fcn.00401a80
lea ecx, [ebx + 0x14c]
call fcn.00401a80
lea ecx, [ebx + 0x150]
call fcn.00401a80
lea ecx, [ebx + 0x228]
call fcn.00401a80
lea ecx, [ebx + 0x22c]
call fcn.00401a80
lea ecx, [ebx + 0x230]
call fcn.00401a80
lea ecx, [ebx + 0x234]
call fcn.00401a80
lea ecx, [ebx + 0x240]
call fcn.00401a80
lea ecx, [ebx + 0x248]
call fcn.00401a80
lea ecx, [ebx + 0x24c]
call fcn.00401a80
lea ecx, [ebx + 0x270]
call fcn.00401a80
lea ecx, [ebx + 0x278]
call fcn.00401a80
lea eax, [ebx + 0x290]
call fcn.0044c7c4
lea ecx, [ebx + 0x3e8]
call fcn.00401a80
lea ecx, [ebx + 0x424]
mov byte [ebp - 4], 0x13
call fcn.0047a8f1
lea ecx, [ebx + 0x458]
call fcn.00401a80
lea ecx, [ebx + 0x45c]
call fcn.00401a80
lea ecx, [ebx + 0x460]
call fcn.00401a80
lea ecx, [ebx + 0x468]
call fcn.00401a80
lea ecx, [ebx + 0x46c]
call fcn.00401a80
lea ecx, [ebx + 0x470]
call fcn.00401a80
lea ecx, [ebx + 0x474]
call fcn.00401a80
lea ecx, [ebx + 0x4a0]
call fcn.00401a80
lea ecx, [ebx + 0x4a4]
call fcn.00401a80
lea ecx, [ebx + 0x4a8]
call fcn.00401a80
lea ecx, [ebx + 0x4ac]
call fcn.00401a80
lea ecx, [ebx + 0x4b0]
call fcn.00401a80
lea ecx, [ebx + 0x4b4]
call fcn.00401a80
lea ecx, [ebx + 0x4c4]
call fcn.00401a80
lea ecx, [ebx + 0x4cc]
call fcn.00401a80
lea ecx, [ebx + 0x4d0]
call fcn.00401a80
lea ecx, [ebx + 0x504]
call fcn.00401a80
lea ecx, [ebx + 0x508]
call fcn.00401a80
lea ecx, [ebx + 0x50c]
call fcn.00401a80
lea ecx, [ebx + 0x510]
call fcn.00401a80
lea ecx, [ebx + 0x514]
call fcn.00401a80
lea ecx, [ebx + 0x518]
call fcn.00401a80
lea ecx, [ebx + 0x51c]
call fcn.00401a80
lea ecx, [ebx + 0x520]
call fcn.00401a80
lea ecx, [ebx + 0x524]
call fcn.00401a80
lea ecx, [ebx + 0x564]
call fcn.00401a80
lea ecx, [ebx + 0x568]
call fcn.00401a80
lea ecx, [ebx + 0x56c]
call fcn.00401a80
lea ecx, [ebx + 0x588]
call fcn.00401a80
lea ecx, [ebx + 0x58c]
call fcn.00401a80
lea ecx, [ebx + 0x5b0]
call fcn.00401a80
lea ecx, [ebx + 0x5b4]
call fcn.00401a80
lea ecx, [ebx + 0x5b8]
mov byte [ebp - 4], 0x34
call fcn.004701b9
lea ecx, [ebx + 0x5cc]
mov byte [ebp - 4], 0x35
call fcn.0047ab5a
lea ecx, [ebx + 0x5e0]
mov byte [ebp - 4], 0x36
call fcn.004701b9
lea ecx, [ebx + 0x5f4]
mov byte [ebp - 4], 0x37
call fcn.0047ab5a
lea ecx, [ebx + 0x608]
mov byte [ebp - 4], 0x38
call fcn.0047a8f1
lea ecx, [ebx + 0x628]
mov byte [ebp - 4], 0x39
call fcn.004701b9
lea ecx, [ebx + 0x63c]
mov byte [ebp - 4], 0x3a
call fcn.004701b9
lea ecx, [ebx + 0x650]
mov byte [ebp - 4], 0x3b
call fcn.0047ab5a
lea ecx, [ebx + 0x670]
call fcn.00401a80
lea ecx, [ebx + 0x674]
call fcn.00401a80
lea ecx, [ebx + 0x678]
call fcn.00401a80
lea ecx, [ebx + 0x684]
call fcn.00401a80
lea ecx, [ebx + 0x6a8]
call fcn.00401a80
lea ecx, [ebx + 0x6ac]
call fcn.00401a80
lea ecx, [ebx + 0x6b0]
call fcn.00401a80
lea ecx, [ebx + 0x6b4]
call fcn.00401a80
lea ecx, [ebx + 0x6b8]
call fcn.00401a80
lea ecx, [ebx + 0x6bc]
call fcn.00401a80
lea ecx, [ebx + 0x6c0]
call fcn.00401a80
lea ecx, [ebx + 0x6c4]
call fcn.00401a80
lea ecx, [ebx + 0x6f0]
call fcn.00401a80
lea ecx, [ebx + 0x6f4]
call fcn.00401a80
lea ecx, [ebx + 0x740]
call fcn.00401a80
lea ecx, [ebx + 0x744]
call fcn.00401a80
lea ecx, [ebx + 0x748]
call fcn.00401a80
lea ecx, [ebx + 0x768]
call fcn.00401a80
lea eax, [ebx + 0x7dc]
push eax
mov byte [ebp - 4], 0x4e
call fcn.0044853a
lea eax, [ebx + 0x840]
call fcn.0044c7c4
lea eax, [ebx + 0x864]
call fcn.0044c7c4
lea eax, [ebx + 0x884]
call fcn.0044c7c4
lea eax, [ebx + 0x8a4]
call fcn.0044c7c4
lea eax, [ebx + 0x8c4]
call fcn.0044c7c4
lea ecx, [ebx + 0x8f8]
call fcn.00401a80
lea eax, [ebx + 0x8fc]
call fcn.0044c7c4
lea eax, [ebx + 0x91c]
call fcn.0044c7c4
lea eax, [ebx + 0x93c]
call fcn.0044c7c4
lea ecx, [ebx + 0x980]
call fcn.00401a80
lea eax, [ebx + 0x9c0]
call fcn.0044c7c4
lea eax, [ebx + 0x9e0]
call fcn.0044c7c4
lea eax, [ebx + 0xa00]
call fcn.0044c7c4
lea ecx, [ebx + 0xa4c]
call fcn.00401a80
lea eax, [ebx + 0xa50]
call fcn.0044c7c4
lea eax, [ebx + 0xa8c]
call fcn.0044c7c4
lea eax, [ebx + 0xaac]
call fcn.0044c7c4
lea ecx, [ebx + 0xae0]
call fcn.00401a80
lea ecx, [ebx + 0xae4]
call fcn.00401a80
lea ecx, [ebx + 0xae8]
call fcn.00401a80
lea edi, [ebx + 0xaf4]
mov ecx, edi
mov byte [ebp - 4], 0x63
call fcn.004714c3
mov dword [edi], vtable.CTypedPtrArray_class_CObArray__class_CGRInternet__.0
lea ecx, [ebx + 0xb08]
mov byte [ebp - 4], 0x64
call fcn.0047a8f1
mov edi, 0x104
push edi
lea ecx, [ebx + 0x470]
mov byte [ebp - 4], 0x65
call fcn.004017a2
push edi
push eax
push str.TEMP
call dword [sym.imp.KERNEL32.DLL_GetEnvironmentVariableA]
push eax
lea ecx, [ebx + 0x470]
call fcn.0040338b
lea ecx, [ebx + 0x470]
call fcn.004600f3
test eax, eax
je 0x4273d9
push edi
lea ecx, [ebx + 0x470]
call fcn.004017a2
push eax
push edi
call dword [sym.imp.KERNEL32.DLL_GetTempPathA]
push eax
lea ecx, [ebx + 0x470]
call fcn.0040338b
mov edi, dword [0x4da468]
call fcn.00471426
mov eax, dword [eax + 4]
push 0x3c
push str.ConnectTimeout
push edi
mov ecx, eax
call fcn.0047086f
or dword [ebx + 0x590], 0xffffffff
xor edi, edi
inc edi
mov dword [ebx + 0x2bc], eax
mov dword [ebx + 0x268], esi
mov dword [ebx + 0x26c], esi
mov dword [ebx + 0x218], esi
mov dword [ebx + 0x214], esi
mov dword [ebx + 0x274], esi
mov dword [ebx + 0x27c], esi
mov dword [ebx + 0x280], esi
mov dword [ebx + 0x284], esi
mov dword [ebx + 0x288], esi
mov dword [ebx + 0x28c], esi
mov dword [ebx + 0x420], esi
mov dword [ebx + 0x444], esi
mov dword [ebx + 0x210], esi
mov dword [ebx + 0x258], esi
mov dword [ebx + 0x760], esi
mov dword [ebx + 0x764], esi
mov dword [ebx + 0x75c], esi
mov dword [ebx + 0x594], esi
mov dword [ebx + 0x12c], edi
mov dword [ebx + 0x108], esi
mov dword [ebx + 0x118], esi
mov dword [ebx + 0x260], esi
mov dword [ebx + 0x11c], esi
mov dword [ebx + 0x124], esi
mov dword [ebx + 0x2d4], esi
mov dword [ebx + 0x2d8], esi
mov dword [ebx + 0x2dc], esi
mov dword [ebx + 0x2e0], esi
mov dword [ebx + 0x3ec], esi
mov dword [ebx + 0x3f0], esi
mov dword [ebx + 0x44c], esi
mov dword [ebx + 0x450], esi
mov dword [ebx + 0x454], esi
mov dword [ebx + 0x478], esi
mov dword [ebx + 0x47c], esi
mov dword [ebx + 0x480], esi
mov dword [ebx + 0x484], esi
mov dword [ebx + 0x488], esi
mov dword [ebx + 0x48c], esi
mov dword [ebx + 0x490], esi
mov dword [ebx + 0x494], esi
mov dword [ebx + 0x498], esi
mov dword [ebx + 0x238], esi
mov dword [ebx + 0x4d8], esi
mov dword [ebx + 0x4dc], esi
mov dword [ebx + 0x4e0], esi
mov dword [ebx + 0x4e4], esi
mov dword [ebx + 0x528], esi
mov dword [ebx + 0x52c], esi
mov dword [ebx + 0x530], esi
mov dword [ebx + 0x53c], esi
mov dword [ebx + 0x540], esi
mov dword [ebx + 0x560], esi
mov dword [ebx + 0x570], esi
mov dword [ebx + 0x578], esi
mov dword [ebx + 0x574], esi
mov dword [ebx + 0x664], esi
mov dword [ebx + 0x668], esi
mov dword [ebx + 0x66c], esi
mov dword [ebx + 0x690], esi
mov dword [ebx + 0x694], esi
mov dword [ebx + 0x698], esi
mov dword [ebx + 0x69c], esi
mov dword [ebx + 0x6c8], esi
mov dword [ebx + 0x6cc], esi
mov dword [ebx + 0x6f8], esi
mov dword [ebx + 0x6fc], esi
mov dword [ebx + 0x700], esi
mov dword [ebx + 0x770], esi
push esi
push str.ProxyUseNTLM
mov dword [ebx + 0x120], esi
mov dword [ebx + 0x538], esi
mov dword [ebx + 0x544], esi
mov dword [ebx + 0x6a0], esi
mov dword [ebx + 0x10c], esi
mov dword [ebx + 0x110], esi
mov dword [ebx + 0x6a4], esi
mov dword [ebx + 0x418], esi
mov dword [ebx + 0x128], esi
mov dword [ebx + 0x1f4], esi
mov dword [ebx + 0x1f8], 0x28
mov dword [ebx + 0x550], esi
mov dword [ebx + 0x554], esi
mov dword [ebx + 0x438], esi
mov dword [ebx + 0x43c], edi
mov dword [ebx + 0x704], esi
mov dword [ebx + 0x74c], esi
mov dword [ebx + 0x750], esi
call fcn.00459a6c
pop ecx
mov dword [ebx + 0x710], eax
mov dword [ebx + 0x73c], esi
mov dword [ebx + 0x558], esi
mov dword [ebx + 0x130], esi
mov dword [ebx + 0x708], esi
mov dword [ebx + 0x138], esi
mov eax, dword [0x4da468]
pop ecx
mov dword [ebp - 0x14], eax
call fcn.00471426
mov eax, dword [eax + 4]
push esi
push str.DebugDotHDRFile
push dword [ebp - 0x14]
mov ecx, eax
call fcn.0047086f
mov dword [ebx + 0x76c], eax
mov dword [ebx + 0x4fc], esi
mov dword [ebx + 0x534], esi
mov dword [ebx + 0x23c], esi
mov dword [ebx + 0x264], edi
mov dword [ebx + 0x140], esi
mov dword [ebx + 0x67c], 0x1000
mov dword [ebx + 0x680], esi
mov dword [ebx + 0x250], esi
mov dword [ebx + 0x2b8], esi
mov dword [ebx + 0x1c0], esi
mov dword [ebx + 0x404], esi
or dword [ebx + 0x414], 0xffffffff
mov dword [ebx + 0x160], esi
mov dword [ebx + 0x164], esi
mov dword [ebx + 0x2c8], esi
mov dword [ebx + 0x2cc], esi
mov dword [ebx + 0x178], esi
mov dword [ebx + 0x17c], esi
mov dword [ebx + 0x1a0], esi
mov dword [ebx + 0x1a4], esi
mov dword [ebx + 0x3e0], esi
mov dword [ebx + 0x3e4], esi
mov dword [ebx + 0x3f8], esi
mov dword [ebx + 0x3f4], esi
mov dword [ebx + 0x464], esi
mov dword [ebx + 0x4c0], esi
or dword [ebx + 0x4d4], 0xffffffff
mov dword [ebx + 0x180], esi
mov dword [ebx + 0x184], esi
mov dword [ebx + 0x188], esi
mov dword [ebx + 0x18c], esi
mov dword [ebx + 0x170], esi
mov dword [ebx + 0x174], esi
mov dword [ebx + 0x1fc], esi
mov dword [ebx + 0x25c], esi
mov dword [ebx + 0x580], esi
mov dword [ebx + 0x1a8], esi
mov dword [ebx + 0x1ac], esi
mov dword [ebx + 0x1b0], esi
mov dword [ebx + 0x1b4], esi
mov dword [ebx + 0x1b8], esi
mov dword [ebx + 0x1bc], esi
mov dword [ebx + 0x2d0], esi
mov dword [ebx + 0x584], esi
mov dword [ebx + 0x41c], esi
mov dword [ebx + 0x200], esi
mov dword [ebx + 0x204], esi
mov dword [ebx + 0x1ec], esi
mov dword [ebx + 0x1f0], esi
push dword [ebx + 0x1c0]
lea eax, [ebp - 0x18]
push eax
call fcn.00460e03
lea ecx, [ebp - 0x14]
push str.GR_OtherGRI
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x66
call fcn.00404cf6
add esp, 0x10
push esi
mov byte [ebp - 4], 0x67
mov eax, dword [eax]
push eax
push edi
push edi
lea ecx, [ebp - 0x20]
call fcn.0047160b
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
lea eax, [ebp - 0x20]
push eax
lea esi, [ebp - 0x2c]
call fcn.004517bc
push 0x28
pop ecx
xor eax, eax
lea edi, [ebx + 0x68]
rep stosd dword es:[edi], eax
mov ecx, esi
call fcn.00451844
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x65
call fcn.00471656
fldz
push 0x1e
pop ecx
xor eax, eax
lea edi, [ebx + 0x2e8]
rep stosd dword es:[edi], eax
push 0x1e
pop ecx
lea edi, [ebx + 0x360]
rep stosd dword es:[edi], eax
xor esi, esi
mov dword [ebx + 0x3d8], esi
fst qword [ebx + 0x1c8]
fst qword [ebx + 0x1d0]
fst qword [ebx + 0x1d8]
fstp qword [ebx + 0x1e0]
mov dword [ebx + 0x3dc], esi
mov edi, dword [0x4da468]
call fcn.00471426
mov eax, dword [eax + 4]
push 1
push str.DoDataTimeout
push edi
mov ecx, eax
call fcn.0047086f
mov dword [ebx + 0x40c], eax
mov edi, dword [0x4da468]
call fcn.00471426
mov eax, dword [eax + 4]
push 5
push str.DataTimeout
push edi
mov ecx, eax
call fcn.0047086f
mov dword [ebx + 0x410], 0x78
mov eax, dword [0x4da468]
mov dword [ebp - 0x18], eax
call fcn.00471426
mov eax, dword [eax + 4]
push esi
mov edi, str.DataTimeoutSEC
push edi
push dword [ebp - 0x18]
mov ecx, eax
call fcn.0047086f
cmp eax, 0xa
jbe 0x4278e5
mov eax, dword [0x4da468]
mov dword [ebp - 0x18], eax
call fcn.00471426
mov eax, dword [eax + 4]
push esi
push edi
push dword [ebp - 0x18]
mov ecx, eax
call fcn.0047086f
mov dword [ebx + 0x410], eax
mov dword [ebx + 0x21c], esi
mov dword [ebx + 0x220], esi
xor edi, edi
mov dword [ebx + 0x134], esi
inc edi
lea ecx, [ebx + 0x22c]
mov dword [ebx + 0x224], edi
call fcn.00401979
mov dword [ebx + 0x244], esi
mov dword [ebx + 0x158], esi
mov dword [ebx + 0x144], esi
mov dword [ebx + 0x20c], esi
mov dword [ebx + 0x5a0], esi
mov dword [ebx + 0x5a4], esi
mov dword [ebx + 0x5a8], esi
mov dword [ebx + 0x5ac], esi
mov dword [ebx + 0x598], esi
mov dword [ebx + 0x59c], esi
mov dword [ebx + 0x49c], esi
mov dword [ebx + 0x3fc], esi
mov dword [ebx + 0x95c], esi
mov dword [ebx + 0x8e8], esi
mov dword [ebx + 0x8e4], esi
mov dword [ebx + 0x860], esi
mov dword [ebx + 0xa24], esi
mov dword [ebx + 0xa28], esi
push 0x7d02
mov dword [ebx + 0xa7c], esi
call fcn.00488d06
mov dword [ebx + 0x2b0], eax
mov eax, dword [0x4da284]
inc dword [0x4da284]
mov dword [ebx + 0x2b4], esi
mov dword [ebx + 0xa44], esi
mov dword [ebx + 0x9a8], edi
mov dword [ebx + 0x9b4], esi
mov dword [ebx + 0x1e8], esi
mov dword [ebx + 0xaf0], esi
mov dword [ebx + 0xaec], esi
mov dword [ebx + 0x3f4], esi
mov dword [ebx + 0xacc], esi
mov dword [ebx + 0xad0], esi
mov dword [ebx + 0xad4], esi
mov dword [ebx + 0xad8], 0x500000
mov dword [ebx + 0xadc], esi
mov dword [ebx + 0x254], eax
pop ecx
mov eax, ebx
call fcn.0048d0ba
ret 4