Function at 0x417928
Capabilities:
Check if file exists
Download url
Get common file path
Receive data

Disassembly:
push ebp
lea ebp, [esp - 0x26a80]
mov eax, 0x26a80
call fcn.0041bd40
push 0xffffffffffffffff
push 0x5076c7
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x552994]
xor eax, ebp
mov dword [ebp + 0x26a7c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x26a88]
xor ebx, ebx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ebx
mov esi, 0x206
push esi
lea eax, [ebp + 0x2666e]
push ebx
push eax
mov dword [ebp - 4], 2
mov word [ebp + 0x2666c], bx
call fcn.0041bd70
push esi
lea eax, [ebp + 0x26876]
push ebx
push eax
mov word [ebp + 0x26874], bx
call fcn.0041bd70
push esi
lea eax, [ebp + 0x26466]
push ebx
push eax
mov word [ebp + 0x26464], bx
call fcn.0041bd70
add esp, 0x24
lea eax, [ebp + 0x26464]
push eax
mov esi, 0x104
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push esi
lea eax, [ebp + 0x26874]
push eax
lea eax, [ebp + 0x26464]
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea eax, [ebp + 0x26874]
push eax
lea eax, [ebp + 0x2666c]
push eax
call fcn.0041c0a1
cmp dword [ebp + 0x26ac0], 8
mov eax, dword [ebp + 0x26aac]
pop ecx
pop ecx
jae 0x417a13
lea eax, [ebp + 0x26aac]
push eax
lea eax, [ebp + 0x2666c]
push eax
call fcn.0041c077
lea eax, [ebp + 0x2666c]
push eax
call fcn.004121c3
add esp, 0xc
lea eax, [ebp + 0x26874]
push eax
lea ecx, [ebp + 0x26448]
call fcn.00401590
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x26aa8]
push eax
lea ecx, [ebp + 0x26448]
mov byte [ebp - 4], 3
call fcn.00403a80
lea eax, [ebp + 0x26a8c]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00411669
cmp dword [eax + 0x18], 0x10
pop ecx
pop ecx
jb 0x417a77
mov eax, dword [eax + 4]
jmp 0x417a7a
add eax, 4
push eax
lea eax, [ebp + 0x25e30]
push eax
call fcn.00420510
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00401710
lea eax, [ebp + 0x26874]
push eax
lea ecx, [ebp - 0x54]
call fcn.00401590
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 4
call fcn.00411669
cmp dword [eax + 0x18], 0x10
pop ecx
pop ecx
jb 0x417ac1
mov eax, dword [eax + 4]
jmp 0x417ac4
add eax, 4
push eax
lea eax, [ebp + 0x26030]
push eax
call fcn.00420510
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00401710
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
call fcn.00401790
lea ecx, [ebp]
call fcn.004ed361
sub esp, 0x300
mov edi, esp
mov ecx, 0xc0
lea esi, [ebp + 0x25e30]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp]
mov byte [ebp - 4], 5
call fcn.004edc1e
lea ecx, [ebp]
call fcn.004ed8d5
lea ecx, [ebp + 0x26130]
call fcn.004164ea
lea ecx, [ebp]
call fcn.004ed3bf
test eax, eax
je 0x417b4c
lea eax, [ebp + 0x26130]
push eax
lea ecx, [ebp]
call fcn.004ed86a
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp]
call fcn.004ed3cb
test eax, eax
je 0x417b29
lea eax, [ebp + 0x26130]
push eax
lea ecx, [ebp]
call fcn.004ed86a
fld qword [ebp + 0x26438]
fcomp qword [ebp + 0x26440]
fnstsw ax
fldz
fcomp qword [ebp + 0x26440]
test ah, 0x44
fnstsw ax
jp 0x417bc2
test ah, 0x44
jnp 0x417bda
xor esi, esi
inc esi
cmp dword [ebp + 0x26460], 8
mov eax, dword [ebp + 0x2644c]
jae 0x417ba1
lea eax, [ebp + 0x2644c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
mov ecx, dword [ebp - 0x10]
jne 0x417c92
push 0x54b284
call fcn.00401590
jmp 0x417c9e
test ah, 0x44
jnp 0x417bda
fld qword [0x50b610]
fcomp qword [ebp + 0x26438]
fnstsw ax
test ah, 0x44
jnp 0x417b89
lea ecx, [ebp - 0x1c]
call fcn.00401370
lea eax, [ebp + 0x26874]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 6
call fcn.00401590
cmp dword [ebp + 0x26aa4], 8
mov eax, dword [ebp + 0x26a90]
mov byte [ebp - 4], 7
jae 0x417c0e
lea eax, [ebp + 0x26a90]
push eax
lea ecx, [ebp - 0x54]
call fcn.00401590
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.00401410
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x54]
movzx edi, al
call fcn.00401790
push ebx
push esi
lea ecx, [ebp - 0x38]
call fcn.00401790
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00401400
cmp edi, ebx
jne 0x417b8c
cmp dword [ebp + 0x26460], 8
mov ecx, dword [ebp + 0x2644c]
jae 0x417c6e
lea ecx, [ebp + 0x2644c]
cmp dword [ebp + 0x26aa4], 8
mov eax, dword [ebp + 0x26a90]
jae 0x417c83
lea eax, [ebp + 0x26a90]
push ebx
push ebx
push ecx
push eax
push ebx
call sub.urlmon.dll_URLDownloadToFileW
jmp 0x417b8c
lea eax, [ebp + 0x26448]
push eax
call fcn.004034b0
lea ecx, [ebp]
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 3
call fcn.004ed3ba
push ebx
push esi
lea ecx, [ebp + 0x26448]
call fcn.00401790
push ebx
push esi
lea ecx, [ebp + 0x26a8c]
call fcn.00401790
push ebx
push esi
lea ecx, [ebp + 0x26aa8]
call fcn.00401790
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x26a7c]
xor ecx, ebp
call fcn.0041bab8
add ebp, 0x26a80
leave
ret 0x3c