Function at 0x426990
Capabilities:
Check for time delay via gettickcount
Check http status code
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1270
call fcn.00461a60
mov eax, dword [0x4b206c]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x126c], esi
mov eax, dword [edi + 0x26d8]
mov ebx, dword [eax + esi*4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x26cc]
mov dword [edi + 0x26d0], eax
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x2c], 0
cmp dword [eax + 4], 1
je 0x426d43
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x426a36
lea ecx, [ebp - 0x1264]
mov dword [ebp - 0x1268], 0
push ecx
lea ecx, [ebp - 0x1260]
mov dword [ebp - 0x1264], 0
push ecx
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0x1260], 4
push ecx
push 0x20000013
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x426a36
mov eax, dword [ebp - 0x1268]
jmp 0x426a38
xor eax, eax
mov dword [edi + 0x26c8], eax
mov ecx, dword [ebx + 0x20]
test ecx, ecx
je 0x426a4b
mov dword [ecx + 0x2450], eax
cmp dword [edi + 0x26c8], 0xc8
jne 0x426bf8
push ebx
mov ecx, edi
call fcn.00429610
push ebx
mov ecx, edi
call fcn.00428310
push ebx
mov ecx, edi
call fcn.00429690
push ebx
mov ecx, edi
call fcn.00428420
push ebx
mov ecx, edi
call fcn.004282c0
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x3c]
cmp dword [edi + 0x5d100], eax
jne 0x426bf8
cmp dword [edi + 0x5d104], edx
jne 0x426bf8
cmp dword [edi + 0x2690], 0
je 0x426abb
xor eax, eax
cmp dword [ebx + 0x30], 1
sete al
test eax, eax
je 0x426bf8
mov ecx, dword [edi + 0x5d108]
mov eax, dword [edi + 0x5d10c]
test ecx, ecx
jne 0x426acf
test eax, eax
je 0x426ae0
cmp ecx, dword [ebx + 0x38]
jne 0x426bc3
cmp eax, edx
jne 0x426bc3
mov eax, dword [ebx + 0x30]
mov dword [edi + 0x26f0], eax
cmp dword [ebx + 0x1c], 0
je 0x426da3
mov ecx, ebx
call fcn.004284c0
test eax, eax
je 0x426da3
lea esi, [edi + 0x5d120]
mov dword [edi + 0x2690], 1
push esi
mov dword [edi + 0x247c], 0
lea eax, [edi + 0x5d328]
mov dword [edi + 0x26f0], 0
push 0x492e48
mov dword [ebx + 0x30], 0
mov dword [edi + 0x5d100], 0xffffffff
mov dword [edi + 0x5d104], 0xffffffff
push 0x103
push eax
mov dword [ebx + 0x38], 0xffffffff
mov dword [ebx + 0x3c], 0xffffffff
call fcn.00415400
push 0x208
push 0
push esi
call fcn.00463e50
add esp, 0x1c
lea eax, [ebp - 0x214]
push 0x208
push 0
push eax
call fcn.00463e50
add esp, 0xc
lea eax, [ebp - 0x214]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x49611c
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov esi, dword [ebp - 0x126c]
jmp 0x426da3
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x426bd4
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.00427900
push 0
mov ecx, edi
call fcn.00426190
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00460c27
mov esp, ebp
pop ebp
ret 4
cmp dword [edi + 0x2690], 0
jne 0x426f79
mov eax, dword [edi + 0x26c8]
cmp eax, 0x12e
jne 0x426cf9
push 0x1048
lea eax, [ebp - 0x125c]
push 0
push eax
call fcn.00463e50
mov eax, dword [ebx + 0x1c]
add esp, 0xc
test eax, eax
je 0x426f92
lea ecx, [ebp - 0x1260]
mov dword [ebp - 0x1260], 0
push ecx
lea ecx, [ebp - 0x1264]
mov dword [ebp - 0x1264], 0x1047
push ecx
lea ecx, [ebp - 0x125c]
push ecx
push 0x21
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x426f92
mov edx, dword [ebx + 0x20]
lea ecx, [ebp - 0x125c]
push 0
call fcn.004256e0
add esp, 4
test eax, eax
je 0x426f92
cmp dword [ebx + 0x24], 0
jne 0x426cc8
push 0x1048
lea esi, [edi + 0x5f5c0]
push 0
push esi
call fcn.00463e50
add esp, 0xc
lea eax, [ebp - 0x125c]
push eax
push 0x492e48
push 0x823
push esi
call fcn.0042a1f0
mov esi, dword [ebp - 0x126c]
add esp, 0x10
push 0
mov ecx, edi
call fcn.00426190
test eax, eax
je 0x426f92
push esi
mov ecx, edi
call fcn.00427900
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00460c27
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x194
jne 0x426f79
mov dword [edi + 0x2470], 1
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x426d1f
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.00427900
push 0
mov ecx, edi
call fcn.00426190
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00460c27
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx], 0
jne 0x426f48
mov eax, dword [ebx + 4]
test eax, eax
je 0x426f48
push ebx
mov ecx, edi
mov dword [ebx + 0x1c], eax
call fcn.00428310
mov eax, dword [edi + 0x5d100]
cmp eax, dword [ebx + 0x38]
jne 0x426f79
mov eax, dword [edi + 0x5d104]
cmp eax, dword [ebx + 0x3c]
jne 0x426f79
cmp dword [edi + 0x2690], 0
je 0x426d9a
xor eax, eax
cmp dword [ebx + 0x30], 1
sete al
test eax, eax
je 0x426f79
mov eax, dword [ebx + 0x30]
mov dword [edi + 0x26f0], eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x426dc5
cmp dword [eax + 0x2448], 0xffffffff
jne 0x426dc5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x20]
sub eax, dword [ebx + 8]
mov dword [ecx + 0x2448], eax
push dword [ebx + 0x1c]
mov eax, dword [edi]
mov ecx, edi
push 2
call dword [eax + 4]
test eax, eax
je 0x426f9a
mov eax, dword [edi]
mov ecx, edi
push 0
push 3
call dword [eax + 4]
test eax, eax
je 0x426f9a
mov ecx, edi
call fcn.00428590
test eax, eax
je 0x426f92
mov eax, dword [edi]
mov ecx, edi
push 0
push 4
call dword [eax + 4]
test eax, eax
je 0x426f9a
cmp dword [edi + 0x26f0], 0
je 0x426f1a
mov eax, dword [edi + 0x5d100]
cmp eax, dword [edi + 0x5d110]
jne 0x426e61
mov eax, dword [edi + 0x5d104]
cmp eax, dword [edi + 0x5d114]
jne 0x426e61
push esi
mov ecx, edi
call fcn.00427900
mov dword [edi + 0x5d0f8], 7
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00460c27
mov esp, ebp
pop ebp
ret 4
push 4
lea eax, [ebp - 0x1260]
mov dword [ebp - 0x1260], 0x4e20
push eax
push 6
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push ebx
mov ecx, edi
call fcn.00428f20
test eax, eax
je 0x426cd9
mov eax, dword [ebx + 0x8040]
cmp dword [eax + 8], 0
jne 0x426eb7
cmp dword [eax + 0xc], 0
jne 0x426eb7
mov dword [eax + 4], 1
mov dword [ebx + 0x28], 8
jmp 0x426ec8
push 0
push esi
mov ecx, edi
mov dword [ebx + 0x28], 4
call fcn.00427e20
cmp dword [edi + 0x2690], 0
jne 0x426ef6
mov esi, 1
cmp dword [edi + 0x2468], esi
jbe 0x426ef6
nop
push 4
mov ecx, edi
call fcn.00426190
test eax, eax
je 0x426ef6
inc esi
cmp esi, dword [edi + 0x2468]
jb 0x426ee0
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
neg eax
sbb eax, eax
neg eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00460c27
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
test eax, eax
je 0x426f9a
mov dword [ebx + 0x28], 8
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00460c27
mov esp, ebp
pop ebp
ret 4
push 0x496114
lea eax, [ebx + 0x806c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x426f79
mov dword [edi + 0x26f0], 0
mov dword [ebx + 0x30], 0
mov dword [edi + 0x26d4], 0x8000000
push 1
push esi
mov ecx, edi
mov dword [ebx + 0x28], 0
call fcn.00427e20
test eax, eax
jne 0x426ce1
push esi
mov ecx, edi
call fcn.00427900
mov ecx, dword [ebp - 8]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00460c27
mov esp, ebp
pop ebp
ret 4