Function at 0x402f10
Capabilities:
Create process on windows
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
sub esp, 0x208
mov eax, dword [0x438e28]
xor eax, esp
mov dword [esp + 0x204], eax
push esi
push 0
push 0
push 0
push 0
push 0
mov esi, ecx
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
test eax, eax
jne 0x402f8e
cmp dword [esi + 4], eax
je 0x40300e
mov ecx, dword [0x44d46c]
push 0xff
lea eax, [esp + 0x10c]
push eax
push 0x7c
push ecx
call dword [sym.imp.USER32.dll_LoadStringA]
mov eax, dword [esi]
push 0x10
push 0x433250
lea edx, [esp + 0x110]
push edx
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x204]
xor ecx, esp
call fcn.004181f3
add esp, 0x208
ret
push 0
push 0x50
push str.www.stratopoint.com
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
test eax, eax
je 0x403167
push edi
push 0x100
push 0
push 0
push 0
push str._pfolders_version.txt
push 0x4334b0
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
push 0
push 0
push 0
push 0
push 0
mov edi, eax
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x403003
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x403003
lea ecx, [esp + 8]
push ecx
push 0x80
lea edx, [esp + 0x14]
push edx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x403024
mov ecx, 0x7d
call fcn.00402eb0
pop edi
pop esi
mov ecx, dword [esp + 0x204]
xor ecx, esp
call fcn.004181f3
add esp, 0x208
ret
mov eax, dword [esp + 8]
mov byte [esp + eax + 0xc], 0
test edi, edi
jne 0x403038
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edx, str.2.51f
lea ecx, [esp + 0xc]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x403061
test al, al
je 0x40305d
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x403061
add ecx, 2
add edx, 2
test al, al
jne 0x403041
xor eax, eax
jmp 0x403066
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40315d
mov edx, dword [0x44d46c]
push 0xff
lea ecx, [esp + 0x90]
push ecx
push 0x7e
push edx
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [esp + 0x8c]
push 0x2a
push eax
call fcn.004182a0
mov edi, eax
lea edx, [esp + 0x94]
mov ecx, edi
sub ecx, edx
push ecx
mov eax, edx
push eax
lea ecx, [esp + 0x11c]
push ecx
call fcn.00418400
lea ecx, [esp + 0xa0]
mov edx, edi
sub edx, ecx
lea eax, [esp + 0x20]
mov ecx, eax
add esp, 0x14
sub edx, ecx
lea edx, [esp + edx + 0x10c]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4030d4
lea eax, [esp + 0xc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4030e5
sub eax, edx
lea edx, [esp + 0x8c]
sub eax, edx
add eax, edi
lea ecx, [edi + 1]
lea edx, [esp + eax + 0x10c]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x403103
mov ecx, dword [esi]
push 0x44
push 0x433250
lea eax, [esp + 0x114]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x40300d
push 5
push 0
push 0
push str.http:__www.stratopoint.com_pfolders_download.htm
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
pop esi
mov ecx, dword [esp + 0x204]
xor ecx, esp
call fcn.004181f3
add esp, 0x208
ret
mov ecx, 0x7f
jmp 0x403008
cmp dword [esi + 4], 0
je 0x40300e
mov eax, dword [0x44d46c]
push 0xff
lea edx, [esp + 0x10c]
push edx
push 0x7d
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
mov edx, dword [esi]
push 0x10
push 0x433250
lea ecx, [esp + 0x110]
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x208]
pop esi
xor ecx, esp
call fcn.004181f3
add esp, 0x208
ret