Function at 0x40eba0
Capabilities:
Check http status code
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xeb0
mov eax, dword [0x42f008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0xe70], 0x60df
mov dword [ebp - 0xde0], 0xc1ae
mov dword [ebp - 0xdf8], 0xd620
mov dword [ebp - 0xdc0], 0xd540
mov dword [ebp - 0xde4], 0xb877
push 0
push 0
push 0
push 1
push 0x42c548
call dword [0x4320bc]
mov dword [ebp - 0xdbc], eax
cmp dword [ebp - 0xdbc], 0
jne 0x40ec0f
xor eax, eax
jmp 0x40f70f
push 0
push 0x80000000
push 0
push 0
push 4
push 0x28
push 0x42fa70
call fcn.0040ba30
add esp, 0xc
push eax
mov eax, dword [ebp - 0xdbc]
push eax
call dword [0x4320c0]
mov dword [ebp - 0xdb8], eax
cmp dword [ebp - 0xdb8], 0
jne 0x40ec5c
mov ecx, dword [ebp - 0xdbc]
push ecx
call dword [0x4320cc]
xor eax, eax
jmp 0x40f70f
mov dword [ebp - 0xd54], 0
mov dword [ebp - 0xd5c], 4
push 0
lea edx, [ebp - 0xd5c]
push edx
lea eax, [ebp - 0xd54]
push eax
push 0x20000013
mov ecx, dword [ebp - 0xdb8]
push ecx
call dword [0x4320c8]
cmp dword [ebp - 0xd54], 0xc8
je 0x40ecbf
mov edx, dword [ebp - 0xdb8]
push edx
call dword [0x4320cc]
mov eax, dword [ebp - 0xdbc]
push eax
call dword [0x4320cc]
xor eax, eax
jmp 0x40f70f
mov dword [ebp - 0xdb4], 0
mov dword [ebp - 0xd58], 4
push 0
lea ecx, [ebp - 0xd58]
push ecx
lea edx, [ebp - 0xdb4]
push edx
push 0x20000005
mov eax, dword [ebp - 0xdb8]
push eax
call dword [0x4320c8]
cmp dword [ebp - 0xdb4], 0
ja 0x40ed1f
mov ecx, dword [ebp - 0xdb8]
push ecx
call dword [0x4320cc]
mov edx, dword [ebp - 0xdbc]
push edx
call dword [0x4320cc]
xor eax, eax
jmp 0x40f70f
mov dword [ebp - 0xd48], 0
lea eax, [ebp - 0xd48]
push eax
push 1
lea ecx, [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0xdb8]
push edx
call dword [0x4320c4]
test eax, eax
je 0x40ed53
cmp dword [ebp - 0xd48], 1
je 0x40ed5a
xor eax, eax
jmp 0x40f70f
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ebp + ecx - 0x120]
mov dword [ebp - 0xddc], edx
lea eax, [ebp - 0xd48]
push eax
mov ecx, dword [ebp - 0xddc]
push ecx
lea edx, [ebp - 0x120]
push edx
mov eax, dword [ebp - 0xdb8]
push eax
call dword [0x4320c4]
test eax, eax
je 0x40eda4
mov ecx, dword [ebp - 0xd48]
cmp ecx, dword [ebp - 0xddc]
je 0x40edc5
mov edx, dword [ebp - 0xdb8]
push edx
call dword [0x4320cc]
mov eax, dword [ebp - 0xdbc]
push eax
call dword [0x4320cc]
xor eax, eax
jmp 0x40f70f
lea ecx, [ebp - 0xd48]
push ecx
push 1
lea edx, [ebp - 0xd41]
push edx
mov eax, dword [ebp - 0xdb8]
push eax
call dword [0x4320c4]
test eax, eax
je 0x40edef
cmp dword [ebp - 0xd48], 1
je 0x40ee10
mov ecx, dword [ebp - 0xdb8]
push ecx
call dword [0x4320cc]
mov edx, dword [ebp - 0xdbc]
push edx
call dword [0x4320cc]
xor eax, eax
jmp 0x40f70f
mov dword [ebp - 0xdfc], 0
movzx eax, byte [ebp - 0xd41]
cmp eax, 0xb
jne 0x40ee75
mov ecx, dword [ebp - 0xddc]
push ecx
mov edx, dword [ebp - 0xd48]
push edx
lea eax, [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0xdb4]
push ecx
mov edx, dword [ebp - 0xdb8]
push edx
call fcn.0040dd20
add esp, 0x14
mov eax, dword [ebp - 0xdb8]
push eax
call dword [0x4320cc]
mov ecx, dword [ebp - 0xdbc]
push ecx
call dword [0x4320cc]
mov eax, 1
jmp 0x40f70f
push 7
lea edx, [ebp - 0x20]
push edx
call fcn.0040cdc0
add esp, 8
lea eax, [ebp - 0x20]
push eax
push 0x104
lea ecx, [ebp - 0x738]
push ecx
call fcn.00419478
add esp, 0xc
movzx edx, byte [ebp - 0xd41]
push edx
lea eax, [ebp - 0x738]
push eax
call fcn.0040e960
add esp, 8
mov dword [ebp - 0xe3c], 0
lea ecx, [ebp - 0x940]
push ecx
push 1
push 0
push 0x1c
mov edx, dword [ebp - 0xe3c]
push edx
call dword [0x4320d8]
xor eax, eax
mov byte [ebp - 0xdc1], al
lea ecx, [ebp - 0xe84]
push ecx
lea ecx, [ebp - 0xdc1]
call fcn.0040f720
mov dword [ebp - 0xde8], eax
mov dword [ebp - 0xdec], 0
jmp 0x40ef11
mov edx, dword [ebp - 0xdec]
add edx, 1
mov dword [ebp - 0xdec], edx
cmp dword [ebp - 0xdec], 5
jae 0x40ef73
mov eax, dword [ebp - 0xdec]
mov ecx, dword [ebp - 0xde8]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0xe40], edx
mov eax, dword [ebp - 0xe40]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xde8]
movsx eax, byte [edx]
xor ecx, eax
mov word [ebp - 0xe12], cx
mov ecx, dword [ebp - 0xdec]
mov edx, dword [ebp - 0xde8]
lea eax, [edx + ecx*2 + 2]
mov dword [ebp - 0xe44], eax
mov ecx, dword [ebp - 0xe44]
mov dx, word [ebp - 0xe12]
mov word [ecx], dx
jmp 0x40ef02
mov eax, 5
shl eax, 1
mov ecx, dword [ebp - 0xde8]
lea edx, [ecx + eax + 2]
mov dword [ebp - 0xe48], edx
xor eax, eax
mov ecx, dword [ebp - 0xe48]
mov word [ecx], ax
mov edx, dword [ebp - 0xde8]
add edx, 2
mov dword [ebp - 0xe4c], edx
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x940]
push ecx
mov edx, dword [ebp - 0xe4c]
push edx
push 0x104
lea eax, [ebp - 0x328]
push eax
call fcn.004010b0
add esp, 0x14
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x328]
push ecx
call dword [0x4320f4]
mov dword [ebp - 0xe00], eax
cmp dword [ebp - 0xe00], 0xffffffff
jne 0x40f01c
mov edx, dword [ebp - 0xdb8]
push edx
call dword [0x4320cc]
mov eax, dword [ebp - 0xdbc]
push eax
call dword [0x4320cc]
xor eax, eax
jmp 0x40f70f
mov ecx, dword [ebp - 0xdb4]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xdd8], eax
mov dword [ebp - 0xe50], 0
mov edx, dword [ebp - 0xe50]
cmp edx, dword [ebp - 0xdb4]
jae 0x40f201
mov dword [ebp - 0xd4c], 0
lea eax, [ebp - 0xd4c]
push eax
mov ecx, dword [ebp - 0xdb4]
push ecx
mov edx, dword [ebp - 0xdd8]
push edx
mov eax, dword [ebp - 0xdb8]
push eax
call dword [0x4320c4]
test eax, eax
je 0x40f08d
cmp dword [ebp - 0xd4c], 0
jne 0x40f092
jmp 0x40f201
mov dword [ebp - 0xdf4], 0
jmp 0x40f0ad
mov ecx, dword [ebp - 0xdf4]
add ecx, 1
mov dword [ebp - 0xdf4], ecx
mov edx, dword [ebp - 0xdf4]
cmp edx, dword [ebp - 0xd4c]
jae 0x40f1ba
mov eax, dword [ebp - 0xdfc]
xor edx, edx
div dword [ebp - 0xddc]
movzx eax, byte [ebp + edx - 0x120]
mov ecx, dword [ebp - 0xdd8]
add ecx, dword [ebp - 0xdf4]
movzx edx, byte [ecx]
xor edx, eax
mov eax, dword [ebp - 0xdd8]
add eax, dword [ebp - 0xdf4]
mov byte [eax], dl
mov ecx, dword [0x42f9f4]
cmp ecx, dword [ebp - 0xde4]
jg 0x40f19e
mov eax, dword [ebp - 0xde4]
cdq
idiv dword [ebp - 0xde0]
mov esi, eax
mov eax, dword [ebp - 0xdc0]
cdq
idiv dword [ebp - 0xdc0]
mov ecx, edx
shl esi, cl
mov ecx, dword [ebp - 0xdf8]
sar esi, cl
mov dword [ebp - 0xdc0], esi
mov edx, dword [ebp - 0xdc0]
mov dword [ebp - 0xde4], edx
mov eax, dword [ebp - 0xdc0]
mov dword [ebp - 0xde0], eax
mov ecx, dword [ebp - 0xde4]
mov dword [ebp - 0xdf8], ecx
imul eax, dword [ebp - 0xde4], 0x15c29
imul eax, dword [ebp - 0xdf8]
cdq
idiv dword [ebp - 0xdc0]
mov eax, edx
cdq
idiv dword [ebp - 0xdf8]
mov dword [ebp - 0xdc0], eax
mov edx, dword [ebp - 0xde0]
mov ecx, dword [ebp - 0xde0]
shl edx, cl
and edx, dword [ebp - 0xde0]
mov dword [ebp - 0xdc0], edx
jmp 0x40f0f4
mov eax, dword [ebp - 0xdfc]
add eax, 1
xor edx, edx
div dword [ebp - 0xddc]
mov dword [ebp - 0xdfc], edx
jmp 0x40f09e
mov dword [ebp - 0xd50], 0
push 0
lea eax, [ebp - 0xd50]
push eax
mov ecx, dword [ebp - 0xd4c]
push ecx
mov edx, dword [ebp - 0xdd8]
push edx
mov eax, dword [ebp - 0xe00]
push eax
call dword [0x4320f0]
test eax, eax
je 0x40f1fa
mov ecx, dword [ebp - 0xd50]
cmp ecx, dword [ebp - 0xd4c]
je 0x40f1fc
jmp 0x40f201
jmp 0x40f042
mov edx, dword [ebp - 0xdd8]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0xe00]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xdb8]
push ecx
call dword [0x4320cc]
mov edx, dword [ebp - 0xdbc]
push edx
call dword [0x4320cc]
movzx eax, byte [ebp - 0xd41]
cmp eax, 2
jne 0x40f530
xor ecx, ecx
mov byte [ebp - 0xdc2], cl
lea edx, [ebp - 0xe94]
push edx
lea ecx, [ebp - 0xdc2]
call fcn.0040f790
mov dword [ebp - 0xdc8], eax
mov dword [ebp - 0xdf0], 0
jmp 0x40f289
mov eax, dword [ebp - 0xdf0]
add eax, 1
mov dword [ebp - 0xdf0], eax
cmp dword [ebp - 0xdf0], 6
jae 0x40f2eb
mov ecx, dword [ebp - 0xdf0]
mov edx, dword [ebp - 0xdc8]
lea eax, [edx + ecx*2 + 2]
mov dword [ebp - 0xe54], eax
mov ecx, dword [ebp - 0xe54]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xdc8]
movsx ecx, byte [eax]
xor edx, ecx
mov word [ebp - 0xe16], dx
mov edx, dword [ebp - 0xdf0]
mov eax, dword [ebp - 0xdc8]
lea ecx, [eax + edx*2 + 2]
mov dword [ebp - 0xe58], ecx
mov edx, dword [ebp - 0xe58]
mov ax, word [ebp - 0xe16]
mov word [edx], ax
jmp 0x40f27a
mov ecx, 6
shl ecx, 1
mov edx, dword [ebp - 0xdc8]
lea eax, [edx + ecx + 2]
mov dword [ebp - 0xe5c], eax
xor ecx, ecx
mov edx, dword [ebp - 0xe5c]
mov word [edx], cx
mov eax, dword [ebp - 0xdc8]
add eax, 2
mov dword [ebp - 0xe60], eax
mov ecx, dword [ebp - 0xe60]
push ecx
push 0x104
lea edx, [ebp - 0x328]
push edx
call fcn.004194dc
add esp, 0xc
xor eax, eax
mov byte [ebp - 0xdc3], al
xor ecx, ecx
mov byte [ebp - 0xe17], cl
lea edx, [ebp - 0xeb0]
push edx
lea ecx, [ebp - 0xdc3]
call fcn.0040f810
mov dword [ebp - 0xdd0], eax
mov dword [ebp - 0xdcc], 0
jmp 0x40f37a
mov eax, dword [ebp - 0xdcc]
add eax, 1
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0xc
jae 0x40f3dc
mov ecx, dword [ebp - 0xdcc]
mov edx, dword [ebp - 0xdd0]
lea eax, [edx + ecx*2 + 2]
mov dword [ebp - 0xe64], eax
mov ecx, dword [ebp - 0xe64]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xdd0]
movsx ecx, byte [eax]
xor edx, ecx
mov word [ebp - 0xe14], dx
mov edx, dword [ebp - 0xdcc]
mov eax, dword [ebp - 0xdd0]
lea ecx, [eax + edx*2 + 2]
mov dword [ebp - 0xe1c], ecx
mov edx, dword [ebp - 0xe1c]
mov ax, word [ebp - 0xe14]
mov word [edx], ax
jmp 0x40f36b
mov ecx, 0xc
shl ecx, 1
mov edx, dword [ebp - 0xdd0]
lea eax, [edx + ecx + 2]
mov dword [ebp - 0xe20], eax
xor ecx, ecx
mov edx, dword [ebp - 0xe20]
mov word [edx], cx
mov eax, dword [ebp - 0xdd0]
add eax, 2
mov dword [ebp - 0xe30], eax
mov byte [ebp - 0xe10], 0x6e
xor ecx, ecx
mov byte [ebp - 0xe0f], cl
mov edx, 0x21
mov word [ebp - 0xe0e], dx
mov eax, 0x3e
mov word [ebp - 0xe0c], ax
mov ecx, 0x2b
mov word [ebp - 0xe0a], cx
mov edx, 0x20
mov word [ebp - 0xe08], dx
xor eax, eax
mov word [ebp - 0xe06], ax
mov dword [ebp - 0xdd4], 0
jmp 0x40f470
mov ecx, dword [ebp - 0xdd4]
add ecx, 1
mov dword [ebp - 0xdd4], ecx
cmp dword [ebp - 0xdd4], 4
jae 0x40f4ca
mov edx, dword [ebp - 0xdd4]
lea eax, [ebp + edx*2 - 0xe0e]
mov dword [ebp - 0xe24], eax
mov ecx, dword [ebp - 0xe24]
movzx edx, word [ecx]
movsx eax, byte [ebp - 0xe10]
xor edx, eax
mov word [ebp - 0xe02], dx
mov ecx, dword [ebp - 0xdd4]
lea edx, [ebp + ecx*2 - 0xe0e]
mov dword [ebp - 0xe28], edx
mov eax, dword [ebp - 0xe28]
mov cx, word [ebp - 0xe02]
mov word [eax], cx
jmp 0x40f461
mov edx, 4
shl edx, 1
lea eax, [ebp + edx - 0xe0e]
mov dword [ebp - 0xe2c], eax
xor ecx, ecx
mov edx, dword [ebp - 0xe2c]
mov word [edx], cx
lea eax, [ebp - 0xe0e]
mov dword [ebp - 0xe34], eax
push 0
push 0
lea ecx, [ebp - 0x328]
push ecx
mov edx, dword [ebp - 0xe30]
push edx
mov eax, dword [ebp - 0xe34]
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call dword [0x4320ec]
mov dword [ebp - 0xe74], eax
mov eax, 1
jmp 0x40f70f
movzx ecx, byte [ebp - 0xd41]
cmp ecx, 0xd
jne 0x40f5ee
mov dword [ebp - 0xe68], 0
lea edx, [ebp - 0x530]
push edx
push 1
push 0
push 0x1c
push 0
call dword [0x4320d8]
push 0x42c54c
push 0x104
lea eax, [ebp - 0x530]
push eax
call fcn.004194dc
add esp, 0xc
push 5
lea ecx, [ebp - 0x10]
push ecx
call fcn.0040cdc0
add esp, 8
lea edx, [ebp - 0x10]
push edx
push 0x104
lea eax, [ebp - 0x530]
push eax
call fcn.004194dc
add esp, 0xc
push 0
lea ecx, [ebp - 0x530]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea edx, [ebp - 0x530]
push edx
lea eax, [ebp - 0x328]
push eax
call fcn.00410170
add esp, 8
lea ecx, [ebp - 0x530]
push ecx
call fcn.00410420
add esp, 4
lea edx, [ebp - 0x328]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 1
jmp 0x40f70f
movzx eax, byte [ebp - 0xd41]
cmp eax, 8
jne 0x40f6c1
push 0x44
push 0
lea ecx, [ebp - 0xdb0]
push ecx
call fcn.004133f0
add esp, 0xc
mov dword [ebp - 0xdb0], 0x44
xor edx, edx
mov dword [ebp - 0xd6c], edx
mov dword [ebp - 0xd68], edx
mov dword [ebp - 0xd64], edx
mov dword [ebp - 0xd60], edx
push 4
push 0x23
push 0x42f9a8
call fcn.0040ba30
add esp, 0xc
mov dword [ebp - 0xe38], eax
mov eax, dword [ebp - 0xe38]
push eax
push 0x200
lea ecx, [ebp - 0xd40]
push ecx
call fcn.004194dc
add esp, 0xc
lea edx, [ebp - 0x328]
push edx
push 0x200
lea eax, [ebp - 0xd40]
push eax
call fcn.004194dc
add esp, 0xc
lea ecx, [ebp - 0xd6c]
push ecx
lea edx, [ebp - 0xdb0]
push edx
push 0
push 0
push 0x8000000
push 0
push 0
push 0
lea eax, [ebp - 0xd40]
push eax
push 0
call dword [0x4320dc]
test eax, eax
jne 0x40f6b8
xor eax, eax
jmp 0x40f70f
mov eax, 1
jmp 0x40f70f
push 0
push 0
lea ecx, [ebp - 0x328]
push ecx
push 4
push 0xd
push 0x42fad4
call fcn.0040ba30
add esp, 0xc
push eax
push 4
push 5
push 0x42fa10
call fcn.0040ba30
add esp, 0xc
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call dword [0x4320ec]
mov dword [ebp - 0xe6c], eax
mov eax, 1
jmp 0x40f70f
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00411d0f
mov esp, ebp
pop ebp
ret