Function at 0x1009e6d0
Capabilities:
Delete file
Get common file path
Link many functions at runtime
Write file on windows

Disassembly:
mov eax, 0x10238
call fcn.100f8f30
push ebx
push ebp
push esi
push edi
xor esi, esi
push str.WinInet.DLL
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x28], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
cmp edi, esi
jne 0x1009e726
push 1
push esi
push 0xfffffc7c
push 0x9a
push str.C:_accusoftgear_sourceLOADLOADURL.C
call fcn.10046940
call fcn.10046b40
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10238
ret 0x1c
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.InternetOpenA
push edi
call esi
push str.InternetConnectA
push edi
mov ebx, eax
call esi
push str.FtpOpenFileA
push edi
mov ebp, eax
call esi
push str.GopherOpenFileA
push edi
mov dword [esp + 0x28], eax
call esi
push str.HttpOpenRequestA
push edi
mov dword [esp + 0x30], eax
call esi
push str.InternetReadFile
push edi
mov dword [esp + 0x34], eax
call esi
push str.InternetCloseHandle
push edi
mov dword [esp + 0x24], eax
call esi
push str.HttpSendRequestA
push edi
mov dword [esp + 0x20], eax
call esi
test ebx, ebx
mov dword [esp + 0x34], eax
je 0x1009ea8c
test ebp, ebp
je 0x1009ea8c
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x1009ea8c
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x1009ea8c
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x1009ea8c
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x1009ea8c
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x1009ea8c
test eax, eax
je 0x1009ea8c
push 0
push 0
push 0
push 1
push str.ImageGear7.0
call ebx
mov esi, eax
test esi, esi
mov dword [esp + 0x38], esi
je 0x1009ea6e
mov ebx, dword [esp + 0x10260]
mov eax, dword [esp + 0x10258]
mov ecx, dword [esp + 0x10254]
mov edx, dword [esp + 0x1025c]
push 0
push 0
push ebx
push eax
mov eax, dword [esp + 0x1025c]
push ecx
push edx
push eax
push esi
call ebp
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x30], ebp
je 0x1009ea50
mov eax, ebx
mov ebx, dword [esp + 0x10250]
xor esi, esi
dec eax
je 0x1009e8ad
dec eax
je 0x1009e889
dec eax
jne 0x1009e8dd
push esi
push SysReAllocString
push esi
push esi
push esi
push ebx
push 0x10120824
push ebp
call dword [esp + 0x4c]
mov esi, eax
test esi, esi
je 0x1009e879
push 0
push 0
push 0
push 0
push esi
call dword [esp + 0x48]
test eax, eax
jne 0x1009e8dd
push 1
push 0
push 0xfffff600
push 0xcd
jmp 0x1009e8cf
push 0
push SysReAllocString
push 0
push ebx
push ebp
call dword [esp + 0x3c]
mov esi, eax
test esi, esi
jne 0x1009e8e5
push 1
push eax
push 0xfffff5f6
push 0xc5
jmp 0x1009e8cf
push 0
push 2
push SysReAllocString
push ebx
push ebp
call dword [esp + 0x34]
mov esi, eax
test esi, esi
jne 0x1009e8e5
push 1
push eax
push 0xfffff60a
push 0xbd
push str.C:_accusoftgear_sourceLOADLOADURL.C
call fcn.10046940
mov dword [esp + 0x14], eax
test esi, esi
je 0x1009ea40
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x1009ea40
lea ecx, [esp + 0x144]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
jne 0x1009e925
push 1
push eax
push 0xfffff5ec
push 0xd5
push str.C:_accusoftgear_sourceLOADLOADURL.C
call fcn.10046940
mov ebp, dword [esp + 0x24]
jmp 0x1009e97c
lea edx, [esp + 0x40]
inc ebx
push edx
push 0
lea eax, [esp + 0x14c]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
jne 0x1009e95d
push 2
push eax
push 0xfffff5ec
push 0xd9
push str.C:_accusoftgear_sourceLOADLOADURL.C
call fcn.10046940
mov ebp, dword [esp + 0x24]
jmp 0x1009e97c
push 0
push 0x100
push 2
push 0
push 0
lea ecx, [esp + 0x54]
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x1009ea1f
mov ebx, dword [esp + 0x1c]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x24c]
push 0x10000
push eax
push esi
call ebx
test eax, eax
je 0x1009e9e2
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x3c]
push 0
push ecx
lea eax, [esp + 0x250]
push edx
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1009e9e2
mov eax, dword [esp + 0x10]
test eax, eax
je 0x1009e9e2
lea ecx, [esp + 0x10]
lea edx, [esp + 0x248]
push ecx
push 0x10000
push edx
push esi
call ebx
test eax, eax
jne 0x1009e9a2
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x40]
mov eax, dword [esp + 0x10264]
push eax
push ecx
call fcn.1009c210
lea edx, [esp + 0x40]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
call dword [esp + 0x1c]
mov ebp, dword [esp + 0x30]
push ebp
call dword [esp + 0x1c]
mov esi, dword [esp + 0x38]
push esi
call dword [esp + 0x1c]
jmp 0x1009ea8c
push 3
push 0
push 0xfffff5ec
push 0xef
push str.C:_accusoftgear_sourceLOADLOADURL.C
call fcn.10046940
push esi
call dword [esp + 0x1c]
mov ebp, dword [esp + 0x30]
push ebp
call dword [esp + 0x1c]
mov esi, dword [esp + 0x38]
push esi
call dword [esp + 0x1c]
jmp 0x1009ea8c
push ebx
push 0
push 0xfffff5e2
push 0xf6
push str.C:_accusoftgear_sourceLOADLOADURL.C
call fcn.10046940
push esi
call dword [esp + 0x1c]
jmp 0x1009ea8c
mov eax, dword [esp + 0x10260]
push eax
push 0
push 0xfffff5d8
push 0xfb
push str.C:_accusoftgear_sourceLOADLOADURL.C
call fcn.10046940
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.10046b40
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10238
ret 0x1c