Function at 0x41db00
Capabilities:
Create http request
Download and write a file
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
mov eax, 0x100c
call fcn.0043f630
push ebx
push ebp
push esi
push edi
push 0
push 0
push 0
push 1
push str.DownloadApp
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x10], ebx
jne 0x41db89
push 0x4ad698
push 0x4b6870
call fcn.0041f780
add esp, 8
mov esi, eax
mov ecx, esi
push 0xa
call fcn.0041f1b0
mov eax, dword [esi]
xor edi, edi
mov ecx, dword [eax + 4]
lea eax, [ecx + esi]
mov cl, byte [ecx + esi + 4]
test cl, 6
jne 0x41db6f
mov eax, dword [eax + 0x28]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x2c]
cmp eax, 0xffffffff
jne 0x41db6f
mov edi, 4
mov eax, dword [esi]
push 0
push edi
mov ecx, dword [eax + 4]
add ecx, esi
call fcn.0041f320
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100c
ret
mov edi, dword [esp + 0x1020]
mov eax, dword [edi + 4]
test eax, eax
jne 0x41db9c
mov eax, 0x490c1c
push 0
push SysReAllocString
push 0
push 0
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov ebp, eax
test ebp, ebp
jne 0x41dc30
push 0x4ad688
push 0x4b6870
call fcn.0041f780
mov esi, eax
mov eax, dword [edi + 4]
add esp, 8
test eax, eax
jne 0x41dbd5
mov eax, 0x490c1c
push eax
push esi
call fcn.0041f780
add esp, 8
mov ecx, esi
push 0xa
call fcn.0041f1b0
mov ecx, dword [esi]
xor edi, edi
mov edx, dword [ecx + 4]
mov cl, byte [edx + esi + 4]
test cl, 6
lea eax, [edx + esi]
jne 0x41dc0f
mov eax, dword [eax + 0x28]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x2c]
cmp eax, 0xffffffff
jne 0x41dc0f
mov edi, 4
mov eax, dword [esi]
push 0
push edi
mov ecx, dword [eax + 4]
add ecx, esi
call fcn.0041f320
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100c
ret
mov ebx, dword [esp + 0x1024]
mov eax, dword [ebx + 4]
test eax, eax
jne 0x41dc43
mov eax, 0x490c1c
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x41dcfd
push 0x4ad678
push 0x4b6870
call fcn.0041f780
mov esi, eax
mov eax, dword [ebx + 4]
add esp, 8
test eax, eax
jne 0x41dc87
mov eax, 0x490c1c
push eax
push esi
call fcn.0041f780
add esp, 8
mov ecx, esi
push 0xa
call fcn.0041f1b0
mov ecx, dword [esi]
xor edi, edi
mov edx, dword [ecx + 4]
mov cl, byte [edx + esi + 4]
test cl, 6
lea eax, [edx + esi]
jne 0x41dcc1
mov eax, dword [eax + 0x28]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x2c]
cmp eax, 0xffffffff
jne 0x41dcc1
mov edi, 4
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
test edi, edi
je 0x41dce2
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 0x28]
or eax, edi
test edx, edx
jne 0x41dcda
or al, 4
push 0
push eax
call fcn.00455ffc
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebp
call esi
mov ecx, dword [esp + 0x10]
push ecx
call esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100c
ret
mov edi, dword [sym.imp.WININET.dll_InternetReadFile]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push 0x1000
push eax
push ebp
call edi
test eax, eax
je 0x41dd54
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x14]
test eax, eax
jbe 0x41dd4d
lea ecx, [esp + 0x18]
push 0
push ecx
lea edx, [esp + 0x24]
push eax
push edx
push esi
call ebx
lea eax, [esp + 0x14]
lea ecx, [esp + 0x1c]
push eax
push 0x1000
push ecx
push ebp
call edi
test eax, eax
jne 0x41dd1f
mov ebx, dword [esp + 0x1024]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebp
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
push 0x4ad668
push 0x4b6870
call fcn.0041f780
mov esi, eax
mov eax, dword [ebx + 4]
add esp, 8
test eax, eax
jne 0x41dd8b
mov eax, 0x490c1c
push eax
push esi
call fcn.0041f780
add esp, 8
mov ecx, esi
push 0xa
call fcn.0041f1b0
mov eax, dword [esi]
xor edi, edi
mov ecx, dword [eax + 4]
lea eax, [ecx + esi]
mov cl, byte [ecx + esi + 4]
test cl, 6
jne 0x41ddc5
mov eax, dword [eax + 0x28]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x2c]
cmp eax, 0xffffffff
jne 0x41ddc5
mov edi, 4
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
test edi, edi
je 0x41dde6
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 0x28]
or eax, edi
test edx, edx
jne 0x41ddde
or al, 4
push 0
push eax
call fcn.00455ffc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x100c
ret