Function at 0x4323a0
Capabilities:
Check os version
Read data from internet
Receive data

Disassembly:
push 0xffffffffffffffff
push 0x44fdeb
mov eax, dword fs:[0]
push eax
mov eax, 0x101c
call fcn.00447d40
mov eax, dword [0x4612b0]
xor eax, esp
mov dword [esp + 0x1018], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4612b0]
xor eax, esp
push eax
lea eax, [esp + 0x1030]
mov dword fs:[0], eax
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 4
mov esi, ecx
call edi
lea ecx, [esp + 0x18]
xor ebx, ebx
cmp eax, ecx
jle 0x432401
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
jmp 0x43240d
push 0xe
call edi
lea edx, [esp + 0x18]
cmp eax, edx
jle 0x432412
call fcn.004308a0
lea eax, [esp + 0x17]
mov byte [esp + 0x17], bl
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x432420
sub eax, edx
je 0x432430
call fcn.00430470
mov dword [esp + 0x1c], ebx
cmp dword [esi + 0xc0], ebx
je 0x4325c6
or ebp, 0xffffffff
mov edx, dword [esi + 0xb0]
lea eax, [esp + 0x1c]
push eax
push 0xff6
lea ecx, [esp + 0x2c]
push ecx
push edx
call dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [esp + 0x1c]
cmp eax, ebx
ja 0x432530
cmp dword [esi + 0xb4], ebx
je 0x432607
call fcn.004321b0
mov eax, dword [esi + 0xbc]
lea ecx, [eax + 1]
mov dword [esi + 0xbc], ecx
cmp eax, 0xa
ja 0x4325cb
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00435460
test eax, eax
je 0x4324b2
call fcn.00435810
call fcn.00436210
mov edx, dword [esi + 0x8c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ebp
lea eax, [esi + 0x1c]
push ebx
mov edi, 0xf
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00402d80
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x5c], esp
push ebp
mov dword [esp + 0x1078], ebx
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push esi
mov byte [ecx + 4], bl
call fcn.00402d80
push esi
mov dword [esp + 0x1078], ebp
call fcn.00431e50
cmp eax, ebx
jl 0x4325ba
lea edi, [esi + 0x70]
mov dword [esi + 0xb8], ebx
call fcn.0042a500
call fcn.004175f0
mov dword [esp + 0x1038], ebp
jmp 0x4325ba
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esi + 0x70]
call fcn.00405840
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push ebx
shr edi, 0x18
call fcn.0043a6c4
imul eax, eax, 0x63
add esp, 4
cmp edi, eax
jbe 0x43255f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esp + 0x1038], ebp
mov ecx, dword [esp + 0x1c]
add dword [esi + 0xb8], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, 2
je 0x432589
sub eax, 2
je 0x432589
sub eax, 4
je 0x432589
xor eax, eax
jmp 0x432599
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, 1
sub eax, 1
jne 0x4325a8
call fcn.00430540
call fcn.004308a0
mov eax, dword [esi + 0xb4]
cmp eax, ebx
je 0x4325ba
cmp dword [esi + 0xb8], eax
jae 0x432613
cmp dword [esi + 0xc0], ebx
jne 0x432443
call fcn.004321b0
mov eax, dword [esi + 0xc4]
neg eax
sbb eax, eax
and eax, 0x7fffbffb
add eax, 0x80004005
mov ecx, dword [esp + 0x1030]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1018]
xor ecx, esp
call fcn.00438dc1
add esp, 0x1028
ret
mov dword [esi + 0xc4], 1
jmp 0x4325cb
push ebx
mov dword [esi + 0xc4], 1
call fcn.0043a6c4
add esp, 4
push ebx
call fcn.0043a6c4
add esp, 4
jmp 0x4325cb