Function at 0x422c5a
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x2464
call fcn.004537c0
push ebx
push esi
xor eax, eax
push edi
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 8]
lea esi, [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
call fcn.004280b7
and dword [esp + 0x20], 0
and dword [esp + 0x24], 0
push 2
pop eax
cmp ebx, eax
mov dword [esp + 0x28], 0x48ad1c
mov dword [esp + 0x2c], edi
jbe 0x422cc0
mov ecx, edi
call fcn.004059bd
call fcn.0040fcf2
cmp eax, 1
jne 0x422cc0
mov dword [esp + 0xc], SysReAllocString
lea eax, [esp + 0x450]
push eax
lea eax, [esp + 0x1464]
push eax
lea eax, [esp + 0xc60]
push eax
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x5c]
push eax
push ecx
xor eax, eax
mov ecx, edi
call fcn.004059bd
mov esi, eax
call fcn.0040fc1a
pop ecx
push eax
lea edi, [esp + 0x1c80]
call fcn.0042344d
test al, al
jne 0x422d14
mov dword [0x48ad24], 2
jmp 0x42305e
mov edi, dword [esp + 0x4c]
push 3
pop esi
cmp edi, esi
je 0x422d2f
cmp edi, 1
je 0x422d2f
mov dword [0x48ad24], esi
jmp 0x42305e
push edi
mov ebx, 0x48ad2c
mov eax, 0x48aa00
call fcn.00423547
test al, al
jne 0x422d5d
call dword [sym.imp.KERNEL32.DLL_vSt_Tpq_XQ__7s___7KmMfl45cK53_83JXcKMju]
mov dword [0x48ad28], eax
mov dword [0x48ad24], 4
jmp 0x42305e
cmp edi, esi
je 0x422efe
cmp edi, 1
jne 0x422d77
cmp dword [0x48acf4], 2
je 0x422efe
xor ebx, ebx
lea esi, [esp + 0x30]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x44], ebx
call fcn.004280de
test al, al
mov eax, dword [esp + 0x38]
jne 0x422d9f
mov eax, 0x42834c
push ebx
push ebx
push edi
lea ecx, [esp + 0x45c]
push ecx
lea ecx, [esp + 0x1470]
push ecx
push dword [esp + 0x5c]
lea ecx, [esp + 0xc70]
push ecx
push dword [0x48ad2c]
call eax
cmp eax, ebx
mov dword [esp + 0x20], eax
jne 0x422e07
call dword [sym.imp.KERNEL32.DLL_vSt_Tpq_XQ__7s___7KmMfl45cK53_83JXcKMju]
mov esi, dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov dword [0x48ad28], eax
mov dword [0x48ad24], 7
cmp dword [esp + 0x30], ebx
je 0x422df5
push dword [esp + 0x30]
call esi
lea eax, [esp + 0x20]
call fcn.0042238b
cmp dword [esp + 0x10], ebx
jmp 0x422f81
cmp byte [0x48aca1], bl
je 0x422e16
or dword [esp + 0xc], 2
jmp 0x422e1b
or dword [esp + 0xc], 1
push ebx
push dword [esp + 0x10]
lea ecx, [esp + 0x1c70]
push SysReAllocString
push ecx
push eax
lea esi, [esp + 0x50]
call fcn.0042810d
call eax
cmp eax, ebx
mov dword [esp + 0x24], eax
jne 0x422e6d
call dword [sym.imp.KERNEL32.DLL_vSt_Tpq_XQ__7s___7KmMfl45cK53_83JXcKMju]
cmp dword [esp + 0x3c], ebx
mov esi, dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov dword [0x48ad28], eax
mov dword [0x48ad24], 8
je 0x422de9
push dword [esp + 0x3c]
call esi
jmp 0x422de9
push 0x46c2dc
xor eax, eax
push ecx
mov ecx, dword [ebp + 8]
inc eax
call fcn.004059bd
mov esi, eax
call fcn.0040fc1a
pop ecx
push eax
call fcn.004515c9
mov ebx, eax
xor edi, edi
cmp ebx, edi
pop ecx
pop ecx
jne 0x422edb
call dword [sym.imp.KERNEL32.DLL_vSt_Tpq_XQ__7s___7KmMfl45cK53_83JXcKMju]
cmp dword [esp + 0x3c], edi
mov esi, dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov dword [0x48ad28], eax
mov dword [0x48ad24], 9
je 0x422ebd
push dword [esp + 0x3c]
call esi
cmp dword [esp + 0x30], edi
je 0x422ec9
push dword [esp + 0x30]
call esi
lea eax, [esp + 0x20]
call fcn.0042238b
cmp dword [esp + 0x10], edi
jmp 0x422f81
cmp dword [esp + 0x3c], edi
je 0x422eeb
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
cmp dword [esp + 0x30], edi
je 0x422fd6
push dword [esp + 0x30]
jmp 0x422fd0
push str.Wininet.dll
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov edi, eax
xor esi, esi
cmp edi, esi
je 0x422f23
push str.InternetOpenUrlW
push edi
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
cmp eax, esi
mov ebx, eax
jne 0x422f28
mov ebx, 0x428351
mov ecx, dword [ebp + 8]
push esi
push dword [esp + 0x10]
xor eax, eax
push esi
push esi
call fcn.004059bd
mov esi, eax
call fcn.0040fc1a
push eax
push dword [0x48ad2c]
call ebx
test eax, eax
mov dword [esp + 0x24], eax
jne 0x422f92
call dword [sym.imp.KERNEL32.DLL_vSt_Tpq_XQ__7s___7KmMfl45cK53_83JXcKMju]
mov dword [0x48ad24], 5
test edi, edi
mov esi, dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov dword [0x48ad28], eax
je 0x422f73
push edi
call esi
lea eax, [esp + 0x20]
call fcn.0042238b
cmp dword [esp + 0x10], 0
je 0x423078
push dword [esp + 0x10]
call esi
jmp 0x423078
push 0x46c2dc
xor eax, eax
push ecx
mov ecx, dword [ebp + 8]
inc eax
call fcn.004059bd
mov esi, eax
call fcn.0040fc1a
pop ecx
push eax
call fcn.004515c9
mov ebx, eax
test ebx, ebx
pop ecx
pop ecx
jne 0x422fcb
call dword [sym.imp.KERNEL32.DLL_vSt_Tpq_XQ__7s___7KmMfl45cK53_83JXcKMju]
mov dword [0x48ad24], 6
jmp 0x422f61
test edi, edi
je 0x422fd6
push edi
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
xor edi, edi
inc edi
mov dword [esp + 0x1c], edi
cmp dword [esp + 0x20], 0
jne 0x422ff4
push dword [esp + 0x24]
call fcn.00423081
cmp eax, 0xc8
jne 0x42304d
lea esi, [esp + 0x10]
call fcn.004280b7
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x42300a
mov eax, 0x409ae8
lea ecx, [esp + 0x1c]
push ecx
push 0x400
lea ecx, [esp + 0x58]
push ecx
push dword [esp + 0x30]
call eax
test eax, eax
je 0x42304d
cmp dword [esp + 0x1c], 0
je 0x423057
push ebx
push edi
push dword [esp + 0x24]
lea eax, [esp + 0x5c]
push eax
call fcn.004518b2
mov eax, dword [esp + 0x2c]
add dword [0x48ad20], eax
add esp, 0x10
test eax, eax
jne 0x422fdd
jmp 0x423057
mov dword [0x48ad24], 0xa
push ebx
call fcn.004519a6
pop ecx
lea eax, [esp + 0x20]
call fcn.0042238b
cmp dword [esp + 0x10], 0
je 0x423078
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4