Function at 0x40e7a0
Capabilities:
Connect to http server
Create http request
Delete file
Parse url
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.DLL_LocalAlloc]
push 0x5000
push 0x40
mov esi, eax
call edi
push 0x5000
push 0x40
mov dword [esp + 0x18], eax
call edi
push 0x5000
push 0x40
mov dword [esp + 0x1c], eax
call edi
push 0x208
push 0x40
mov dword [esp + 0x2c], eax
call edi
push 0x208
push 0x40
mov dword [esp + 0x20], eax
call edi
mov edi, dword [esi]
push 0
push 0
push 0
push 0
push str.httpget
mov dword [esp + 0x30], eax
mov byte [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esp + 0x34], edi
call dword [sym.imp.WININET.dll_InternetOpenW]
mov ebx, eax
mov dword [esp + 0x38], ebx
test ebx, ebx
je 0x40eb92
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x34]
push ecx
push 0x32
push ebx
mov dword [esp + 0x44], 4
mov dword [esp + 0x40], 0
call dword [sym.imp.WININET.dll_InternetQueryOptionW]
test eax, eax
je 0x40e875
test byte [esp + 0x30], 0x10
je 0x40e875
push 8
lea edx, [esp + 0x2c]
push edx
push 0x32
push ebx
mov dword [esp + 0x38], 1
mov dword [esp + 0x3c], 0
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push str.wininet.dll
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
mov ecx, dword [esp + 0x24]
xor eax, eax
mov word [ecx], ax
mov eax, dword [esp + 0x14]
xor edx, edx
mov word [eax], dx
mov edx, dword [esp + 0x1c]
xor ecx, ecx
mov word [edx], cx
mov ecx, dword [esp + 0x18]
xor edx, edx
push edx
push edx
push 2
xor eax, eax
mov word [ecx], ax
mov eax, dword [esp + 0x1c]
push edx
push 1
mov word [eax], dx
mov ecx, dword [edi + 0x210]
push 0x40000000
push ecx
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
je 0x40eb7a
mov edx, dword [esp + 0x10]
xor eax, eax
mov word [esp + 0x54], ax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x70], eax
xor ecx, ecx
mov eax, 0x2800
mov dword [esp + 0x68], edx
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x54], eax
mov eax, 0x104
push ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x64], eax
mov eax, dword [edi + 0x20c]
push ecx
push eax
mov dword [esp + 0x4c], 0x3c
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], ecx
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x40eb25
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push ecx
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
mov eax, dword [esp + 0x10]
push eax
lea ecx, [edi + 4]
push 0x100
push ecx
call fcn.0040fe56
add esp, 0xc
jmp 0x40e984
mov ebx, dword [esp + 0x38]
push 4
lea eax, [edi + 0x214]
push eax
push 2
push ebx
call dword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
jne 0x40e9dd
mov ecx, esi
call fcn.0040e6a0
mov edi, dword [edi + 0x204]
test edi, edi
je 0x40e9bc
push str.InternetSetOption1
push str.ERROR
mov ecx, edi
call fcn.004038b0
mov edi, dword [esi]
dec dword [edi + 0x21c]
cmp dword [edi + 0x21c], 0
jle 0x40eae1
mov edx, dword [edi + 0x220]
push edx
jmp 0x40eadb
push 4
lea eax, [edi + 0x218]
push eax
push 6
push ebx
call dword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
jne 0x40ea14
mov ecx, esi
call fcn.0040e6a0
mov edi, dword [edi + 0x204]
test edi, edi
je 0x40eac3
push str.InternetSetOption2
mov ecx, edi
jmp 0x40eab9
mov edx, dword [esp + 0x1c]
push 0
push 0
push 3
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov edx, dword [esp + 0x24]
xor ecx, ecx
test eax, eax
setle cl
dec ecx
and ecx, dword [esp + 0x28]
push ecx
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov edx, dword [esp + 0x64]
xor ecx, ecx
test eax, eax
mov eax, dword [esp + 0x20]
setle cl
dec ecx
and ecx, dword [esp + 0x28]
push ecx
push edx
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetConnectW]
mov ebx, eax
test ebx, ebx
je 0x40eaa3
mov ecx, dword [esp + 0x14]
push ecx
mov edx, ebx
mov ecx, esi
call fcn.0040ee50
mov edi, eax
test edi, edi
je 0x40ea9a
mov edx, dword [esp + 0x28]
push 0
push 0
push 0
push edx
call dword [sym.imp.KERNEL32.DLL_SetFilePointer]
mov eax, dword [esp + 0x28]
push edi
push eax
mov ecx, esi
call fcn.0040ebf0
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x40eaf2
mov ecx, esi
call fcn.0040e6a0
mov ecx, dword [edi + 0x204]
test ecx, ecx
je 0x40eac3
push str.InternetConnect
push str.ERROR
call fcn.004038b0
mov edi, dword [esi]
dec dword [edi + 0x21c]
cmp dword [edi + 0x21c], 0
jle 0x40eae1
mov ecx, dword [edi + 0x220]
push ecx
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, 0x2710
add dword [edi + 0x218], eax
add dword [edi + 0x214], eax
cmp byte [esi + 8], 0
je 0x40eb10
mov eax, dword [esi + 0x10]
cmp word [eax], 0
je 0x40eb47
mov edx, dword [esi + 0x14]
push eax
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
je 0x40eb47
mov eax, dword [esp + 0x20]
cmp dword [eax + 0x21c], 0
mov edi, eax
jg 0x40e980
jmp 0x40eb4b
mov ecx, esi
call fcn.0040e6a0
mov ecx, dword [edi + 0x204]
test ecx, ecx
je 0x40eb4b
push str.InternetCrackUrl
push str.ERROR
call fcn.004038b0
jmp 0x40eb4b
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp byte [esi + 8], 0
jne 0x40eb69
mov edx, dword [edi + 0x210]
push edx
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
mov eax, dword [edi + 0x224]
test eax, eax
je 0x40ebb4
push edi
push 0x64
call eax
jmp 0x40ebb4
mov ecx, esi
call fcn.0040e6a0
mov edi, dword [edi + 0x204]
test edi, edi
je 0x40ebb4
push str.CreateFile
jmp 0x40eba8
mov ecx, esi
call fcn.0040e6a0
mov edi, dword [edi + 0x204]
test edi, edi
je 0x40ebb4
push str.InternetOpen
push str.ERROR
mov ecx, edi
call fcn.004038b0
mov eax, dword [esp + 0x10]
mov esi, dword [sym.imp.KERNEL32.DLL_LocalFree]
push eax
call esi
mov ecx, dword [esp + 0x14]
push ecx
call esi
mov edx, dword [esp + 0x18]
push edx
call esi
mov eax, dword [esp + 0x1c]
push eax
call esi
mov ecx, dword [esp + 0x24]
push ecx
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret