Function at 0x431a00
Capabilities:
Check for time delay via gettickcount
Check http status code
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1078
call fcn.004beaf0
mov eax, dword [0x54c384]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x1074], esi
mov eax, dword [edi + 0x26d8]
mov ebx, dword [eax + esi*4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x26cc]
mov dword [edi + 0x26d0], eax
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x2c], 0
cmp dword [eax + 4], 1
je 0x43201b
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x431aa6
lea ecx, [ebp - 0x1060]
mov dword [ebp - 0x1058], 0
push ecx
lea ecx, [ebp - 0x105c]
mov dword [ebp - 0x1060], 0
push ecx
lea ecx, [ebp - 0x1058]
mov dword [ebp - 0x105c], 4
push ecx
push 0x20000013
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x431aa6
mov eax, dword [ebp - 0x1058]
jmp 0x431aa8
xor eax, eax
mov dword [edi + 0x26c8], eax
mov ecx, dword [ebx + 0x20]
test ecx, ecx
je 0x431ac1
mov dword [ecx + 0x2450], eax
mov eax, dword [edi + 0x26c8]
cmp eax, 0xc8
jne 0x431ed0
cmp dword [ebx + 0x24], 0
jne 0x431b34
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x431b1e
lea edx, [ebp - 0x105c]
mov dword [ebp - 0x1058], 0x208
push edx
lea edx, [ebp - 0x1058]
mov dword [ebp - 0x105c], 0
push edx
lea ecx, [edi + 0x62898]
push ecx
push 0x2f
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x431b1e
lea ecx, [edi + 0x62898]
call fcn.004340e0
test eax, eax
jne 0x431b34
push 0x208
lea eax, [edi + 0x62898]
push 0
push eax
call fcn.004c05c0
add esp, 0xc
push ebx
mov ecx, edi
call fcn.00433470
cmp dword [ebx + 0x1c], 0
je 0x431c49
push 0x208
lea eax, [ebp - 0x214]
push 0
push eax
call fcn.004c05c0
add esp, 0xc
mov dword [ebp - 0x1058], 0x208
cmp dword [edi + 0x5d100], 0xffffffff
mov dword [ebp - 0x1060], 0
jne 0x431b86
cmp dword [edi + 0x5d104], 0xffffffff
je 0x431c49
cmp dword [edi + 0x2480], 0
jne 0x431c49
lea eax, [ebp - 0x1060]
push eax
lea eax, [ebp - 0x1058]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x12
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x431c49
mov ecx, str.HTTP_1.1
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x431bec
test dx, dx
je 0x431be8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x431bec
add eax, 4
add ecx, 4
test dx, dx
jne 0x431bc6
xor eax, eax
jmp 0x431bf1
sbb eax, eax
or eax, 1
test eax, eax
jne 0x431c49
push 0x208
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.004c05c0
add esp, 0xc
mov dword [ebp - 0x1058], 0x208
lea eax, [ebp - 0x1060]
mov dword [ebp - 0x1060], 0
push eax
lea eax, [ebp - 0x1058]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x2a
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x431c49
mov dword [ebx + 0x30], 1
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x431cb0
cmp dword [edi + 0x62cb0], 0
jne 0x431cb0
lea ecx, [ebp - 0x105c]
mov dword [ebp - 0x105c], 0
push ecx
lea ecx, [ebp - 0x1058]
mov dword [ebp - 0x1058], 0x10
push ecx
lea ecx, [ebp - 0x1070]
push ecx
push 0x4000000b
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x431cb0
lea eax, [edi + 0x62ca8]
push eax
lea eax, [ebp - 0x1070]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov dword [edi + 0x62cb0], 1
mov eax, dword [ebx + 0x20]
cmp dword [eax + 4], 1
je 0x431ced
lea eax, [ebp - 0x105c]
mov dword [ebp - 0x105c], 0
push eax
lea eax, [ebp - 0x1058]
mov dword [ebp - 0x1058], 0x206
push eax
lea eax, [edi + 0x62aa0]
push eax
push 1
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x3c]
cmp dword [edi + 0x5d100], eax
jne 0x431ed0
cmp dword [edi + 0x5d104], edx
jne 0x431ed0
cmp dword [edi + 0x2690], 0
je 0x431d1e
cmp dword [ebx + 0x30], 1
jne 0x431ed0
mov ecx, dword [edi + 0x5d108]
mov eax, dword [edi + 0x5d10c]
test ecx, ecx
jne 0x431d32
test eax, eax
je 0x431d43
cmp ecx, dword [ebx + 0x38]
jne 0x431e9b
cmp eax, edx
jne 0x431e9b
mov eax, dword [ebx + 0x30]
mov dword [edi + 0x26f0], eax
cmp dword [ebx + 0x1c], 0
je 0x432073
push 0x208
lea eax, [ebp - 0x214]
mov dword [ebp - 0x105c], 0
push 0
push eax
call fcn.004c05c0
add esp, 0xc
mov dword [ebp - 0x1058], 0x103
lea eax, [ebp - 0x105c]
push eax
lea eax, [ebp - 0x1058]
push eax
lea eax, [ebp - 0x214]
push eax
push 1
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x432073
mov ecx, str.application_metalinkxml
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x431dd9
test dx, dx
je 0x431dd5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x431dd9
add eax, 4
add ecx, 4
test dx, dx
jne 0x431db3
xor eax, eax
jmp 0x431dde
sbb eax, eax
or eax, 1
test eax, eax
jne 0x432073
mov dword [edi + 0x247c], eax
lea esi, [edi + 0x5d120]
mov dword [edi + 0x26f0], eax
push esi
mov dword [edi + 0x2690], 1
mov dword [ebx + 0x30], eax
lea eax, [edi + 0x5d328]
push 0x505268
mov dword [edi + 0x5d100], 0xffffffff
mov dword [edi + 0x5d104], 0xffffffff
push 0x103
push eax
mov dword [ebx + 0x38], 0xffffffff
mov dword [ebx + 0x3c], 0xffffffff
call fcn.00419550
push 0x208
push 0
push esi
call fcn.004c05c0
add esp, 0x1c
lea eax, [ebp - 0x214]
push 0x208
push 0
push eax
call fcn.004c05c0
add esp, 0xc
lea eax, [ebp - 0x214]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x509168
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov esi, dword [ebp - 0x1074]
jmp 0x432073
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x431eac
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.00432aa0
push 0
mov ecx, edi
call fcn.00430f60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004bdaf8
mov esp, ebp
pop ebp
ret 4
cmp dword [edi + 0x2690], 0
jne 0x43223d
mov eax, dword [edi + 0x26c8]
cmp eax, 0x12e
jne 0x431fd1
push 0x1048
lea eax, [ebp - 0x1054]
push 0
push eax
call fcn.004c05c0
mov eax, dword [ebx + 0x1c]
add esp, 0xc
test eax, eax
je 0x432256
lea ecx, [ebp - 0x105c]
mov dword [ebp - 0x105c], 0
push ecx
lea ecx, [ebp - 0x1058]
mov dword [ebp - 0x1058], 0x1047
push ecx
lea ecx, [ebp - 0x1054]
push ecx
push 0x21
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x432256
mov edx, dword [ebx + 0x20]
lea ecx, [ebp - 0x1054]
push 0
call fcn.004304c0
add esp, 4
test eax, eax
je 0x432256
cmp dword [ebx + 0x24], 0
jne 0x431fa0
push 0x1048
lea esi, [edi + 0x5f5c0]
push 0
push esi
call fcn.004c05c0
add esp, 0xc
lea eax, [ebp - 0x1054]
push eax
push 0x505268
push 0x823
push esi
call fcn.00434370
mov esi, dword [ebp - 0x1074]
add esp, 0x10
push 0
mov ecx, edi
call fcn.00430f60
test eax, eax
je 0x432256
push esi
mov ecx, edi
call fcn.00432aa0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004bdaf8
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x194
jne 0x43223d
mov dword [edi + 0x2470], 1
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x431ff7
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.00432aa0
push 0
mov ecx, edi
call fcn.00430f60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004bdaf8
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx], 0
jne 0x43220c
mov eax, dword [ebx + 4]
test eax, eax
je 0x43220c
push ebx
mov ecx, edi
mov dword [ebx + 0x1c], eax
call fcn.00433470
mov eax, dword [edi + 0x5d100]
cmp eax, dword [ebx + 0x38]
jne 0x43223d
mov eax, dword [edi + 0x5d104]
cmp eax, dword [ebx + 0x3c]
jne 0x43223d
cmp dword [edi + 0x2690], 0
mov eax, dword [ebx + 0x30]
je 0x43206d
cmp eax, 1
jne 0x43223d
mov dword [edi + 0x26f0], eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x432095
cmp dword [eax + 0x2448], 0xffffffff
jne 0x432095
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x20]
sub eax, dword [ebx + 8]
mov dword [ecx + 0x2448], eax
push dword [ebx + 0x1c]
mov eax, dword [edi]
mov ecx, edi
push 2
call dword [eax + 4]
test eax, eax
je 0x43225e
mov eax, dword [edi]
mov ecx, edi
push 0
push 3
call dword [eax + 4]
test eax, eax
je 0x43225e
mov ecx, edi
call fcn.00433580
test eax, eax
je 0x432256
mov eax, dword [edi]
mov ecx, edi
push 0
push 4
call dword [eax + 4]
test eax, eax
je 0x43225e
cmp dword [edi + 0x26f0], 0
je 0x4321de
mov eax, dword [edi + 0x5d100]
cmp eax, dword [edi + 0x5d110]
jne 0x432131
mov eax, dword [edi + 0x5d104]
cmp eax, dword [edi + 0x5d114]
jne 0x432131
push esi
mov ecx, edi
call fcn.00432aa0
mov dword [edi + 0x5d0f8], 7
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004bdaf8
mov esp, ebp
pop ebp
ret 4
push 4
lea eax, [ebp - 0x105c]
mov dword [ebp - 0x105c], 0x4e20
push eax
push 6
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push ebx
mov ecx, edi
call fcn.00433db0
test eax, eax
je 0x431fb1
mov eax, dword [ebx + 0x8040]
cmp dword [eax + 8], 0
jne 0x432187
cmp dword [eax + 0xc], 0
jne 0x432187
mov dword [eax + 4], 1
mov dword [ebx + 0x28], 8
jmp 0x432198
push 0
push esi
mov ecx, edi
mov dword [ebx + 0x28], 4
call fcn.00432fa0
cmp dword [edi + 0x2690], 0
jne 0x4321c6
mov esi, 1
cmp dword [edi + 0x2468], esi
jbe 0x4321c6
nop
push 4
mov ecx, edi
call fcn.00430f60
test eax, eax
je 0x4321c6
inc esi
cmp esi, dword [edi + 0x2468]
jb 0x4321b0
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
test eax, eax
je 0x43225e
jmp 0x431fb9
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
test eax, eax
je 0x43225e
mov dword [ebx + 0x28], 8
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004bdaf8
mov esp, ebp
pop ebp
ret 4
push 0x509170
lea eax, [ebx + 0x806c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x43223d
mov dword [edi + 0x26f0], 0
mov dword [ebx + 0x30], 0
mov dword [edi + 0x26d4], 0x8000000
push 1
push esi
mov ecx, edi
mov dword [ebx + 0x28], 0
call fcn.00432fa0
test eax, eax
jne 0x431fb9
push esi
mov ecx, edi
call fcn.00432aa0
mov ecx, dword [ebp - 8]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bdaf8
mov esp, ebp
pop ebp
ret 4