Function at 0x1000cf50
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Delete file
Download and write a file
Get file size
Get number of processors
Move file
Read and send data from client to server
Read file on windows
Receive and write data from server to client
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x1002f398
mov eax, dword fs:[0]
push eax
mov eax, 0x15f0
call fcn.10021750
mov eax, dword [0x1003a1c0]
xor eax, esp
mov dword [esp + 0x15e8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1003a1c0]
xor eax, esp
push eax
lea eax, [esp + 0x1604]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1614]
xor ebx, ebx
mov edi, edx
mov eax, 0xf
mov dword [esp + 0x30], edi
mov dword [esp + 0x6c], esi
mov dword [edi], ebx
mov dword [esp + 0x24], 0x50
mov dword [esp + 0x188], eax
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
mov dword [esp + 0x160c], ebx
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], ebx
mov byte [esp + 0x120], bl
lea eax, [esp + 0x24]
push eax
lea edx, [esp + 0x120]
push edx
lea eax, [esp + 0x178]
push eax
mov byte [esp + 0x1618], 1
call fcn.1000eab0
mov ecx, dword [esp + 0x30]
add esp, 0xc
push ecx
mov word [esp + 0x1d0], 2
call dword [sym.imp.WS2_32.dll_htons]
mov ebp, 0x10
cmp dword [esp + 0x188], ebp
mov word [esp + 0x1ce], ax
mov eax, dword [esp + 0x174]
jae 0x1000d040
lea eax, [esp + 0x174]
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
cmp eax, 0xffffffff
mov dword [esp + 0x1d0], eax
jne 0x1000d0df
cmp dword [esp + 0x188], ebp
mov eax, dword [esp + 0x174]
jae 0x1000d06e
lea eax, [esp + 0x174]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
cmp eax, ebx
jne 0x1000d0d1
cmp dword [esp + 0x134], ebp
mov dword [edi], 2
jb 0x1000d098
mov edx, dword [esp + 0x120]
push edx
call fcn.1001dad4
add esp, 4
mov dword [esp + 0x134], 0xf
cmp dword [esp + 0x188], ebp
mov byte [esp + 0x120], bl
mov dword [esp + 0x130], ebx
jb 0x1000d0ca
mov eax, dword [esp + 0x174]
push eax
call fcn.1001dad4
add esp, 4
xor al, al
jmp 0x1000e3aa
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
mov dword [esp + 0x1d0], eax
push 6
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov ebp, eax
cmp ebp, 0xffffffff
mov dword [esp + 0x2c], ebp
jne 0x1000d153
mov dword [edi], 1
mov esi, 0x10
cmp dword [esp + 0x134], esi
jb 0x1000d11a
mov ecx, dword [esp + 0x120]
push ecx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x188], esi
mov dword [esp + 0x134], 0xf
mov dword [esp + 0x130], ebx
mov byte [esp + 0x120], bl
jb 0x1000d0ca
mov edx, dword [esp + 0x174]
push edx
call fcn.1001dad4
add esp, 4
xor al, al
jmp 0x1000e3aa
push 0x10
lea eax, [esp + 0x1d0]
push eax
push ebp
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1000d178
push ebp
mov dword [edi], 2
call dword [sym.imp.WS2_32.dll_closesocket]
jmp 0x1000d0fc
push esi
lea ecx, [esp + 0x104]
call fcn.10006120
push 6
push str..yzcfg
lea eax, [esp + 0x108]
mov byte [esp + 0x1614], 2
call fcn.10007020
push esi
lea ecx, [esp + 0xe8]
call fcn.10006120
push 4
push str..tmp
lea eax, [esp + 0xec]
mov byte [esp + 0x1614], 3
call fcn.10007020
or eax, 0xffffffff
push 0x420
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x1e0]
push ebx
push eax
call fcn.10020580
mov ecx, dword [esp + 0xf4]
mov edi, 0x10
add esp, 0xc
cmp dword [esp + 0xfc], edi
jae 0x1000d205
lea ecx, [esp + 0xe8]
call fcn.10013510
cmp dword [esp + 0x118], edi
mov ecx, dword [esp + 0x104]
mov byte [esp + 0x1b], al
jae 0x1000d225
lea ecx, [esp + 0x104]
call fcn.10013510
cmp byte [esp + 0x1b], bl
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
mov ebp, dword [sym.imp.KERNEL32.DLL_CreateFileA]
je 0x1000d263
cmp al, bl
mov eax, dword [esp + 0x104]
jne 0x1000d286
cmp dword [esp + 0x118], edi
jae 0x1000d27a
lea eax, [esp + 0x104]
push eax
call esi
mov byte [esp + 0x1b], bl
jmp 0x1000d31e
cmp dword [esp + 0xfc], edi
mov eax, dword [esp + 0xe8]
jae 0x1000d27a
lea eax, [esp + 0xe8]
push eax
call esi
mov byte [esp + 0x1b], bl
jmp 0x1000d31e
cmp dword [esp + 0x118], edi
jae 0x1000d296
lea eax, [esp + 0x104]
push ebx
push 2
push 3
push ebx
push 1
push 0xc0000000
push eax
call ebp
cmp eax, 0xffffffff
mov dword [esp + 0x1c], eax
je 0x1000d2dd
lea esi, [esp + 0x1dc]
mov edi, eax
call fcn.1000ced0
test al, al
jne 0x1000d319
mov ecx, edi
push ecx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
mov dword [esp + 0x1c], 0xffffffff
mov edi, 0x10
cmp dword [esp + 0x118], edi
mov eax, dword [esp + 0x104]
jae 0x1000d2f4
lea eax, [esp + 0x104]
push eax
call esi
cmp dword [esp + 0xfc], edi
mov eax, dword [esp + 0xe8]
jae 0x1000d30e
lea eax, [esp + 0xe8]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
mov byte [esp + 0x1b], bl
mov edi, 0x10
push 0xfff
lea edx, [esp + 0x601]
push ebx
push edx
mov byte [esp + 0x608], bl
call fcn.10020580
add esp, 0xc
cmp byte [esp + 0x1b], bl
je 0x1000d52f
cmp dword [esp + 0xfc], edi
mov eax, dword [esp + 0xe8]
jae 0x1000d35c
lea eax, [esp + 0xe8]
push ebx
push 0x80
push 3
push ebx
push 1
push 0xc0000000
push eax
call ebp
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 0x20], esi
jne 0x1000d3de
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [esp + 0x118], edi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x1c], esi
jae 0x1000d3a0
lea eax, [esp + 0x104]
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
call esi
cmp dword [esp + 0xfc], edi
mov eax, dword [esp + 0xe8]
jae 0x1000d3c0
lea eax, [esp + 0xe8]
push eax
call esi
push 0x420
lea ecx, [esp + 0x1e0]
push ebx
push ecx
call fcn.10020580
add esp, 0xc
jmp 0x1000d52f
lea edx, [esp + 0x68]
push edx
push esi
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
call dword [sym.imp.KERNEL32.DLL_GetFileSize]
cmp eax, dword [esp + 0x1dc]
mov dword [esp + 0x64], eax
jne 0x1000d40c
mov eax, dword [esp + 0x68]
cmp eax, dword [esp + 0x1e0]
je 0x1000d477
push esi
mov esi, dword [sym.imp.KERNEL32.DLL_CloseHandle]
call esi
mov ecx, dword [esp + 0x1c]
push ecx
call esi
mov eax, dword [esp + 0x104]
or esi, 0xffffffff
cmp dword [esp + 0x118], edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x1c], esi
jae 0x1000d43e
lea eax, [esp + 0x104]
mov ebp, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
call ebp
cmp dword [esp + 0xfc], edi
mov eax, dword [esp + 0xe8]
jae 0x1000d45e
lea eax, [esp + 0xe8]
push eax
call ebp
push 0x420
lea edx, [esp + 0x1e0]
push ebx
push edx
call fcn.10020580
add esp, 0xc
mov ebp, dword [sym.imp.KERNEL32.DLL_ReadFile]
mov eax, dword [esp + 0x1e4]
mov edi, dword [sym.imp.KERNEL32.DLL_SetFilePointer]
mov dword [esp + 0x28], ebx
mov edi, edi
push ebx
lea ecx, [esp + 0x1ec]
push ecx
push eax
push esi
call edi
push ebx
lea edx, [esp + 0x28]
push edx
push 0x1000
lea eax, [esp + 0x608]
push eax
push esi
mov dword [esp + 0x38], ebx
call ebp
mov ecx, dword [esp + 0x24]
xor eax, eax
cmp ecx, ebx
jbe 0x1000d4d1
cmp byte [esp + eax + 0x5fc], bl
jne 0x1000d51b
add eax, 1
cmp eax, ecx
jb 0x1000d4c1
mov eax, dword [esp + 0x1e4]
add eax, 0xfffff000
adc dword [esp + 0x1e8], 0xffffffff
mov dword [esp + 0x1e4], eax
js 0x1000d509
jg 0x1000d4f4
cmp eax, ebx
jbe 0x1000d509
mov ecx, dword [esp + 0x28]
add ecx, 1
cmp ecx, 0x400
mov dword [esp + 0x28], ecx
jl 0x1000d490
jmp 0x1000d522
xor eax, eax
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x1e8], ebx
jmp 0x1000d522
mov eax, dword [esp + 0x1e4]
push ebx
lea ecx, [esp + 0x1ec]
push ecx
push eax
push esi
call edi
push ebx
mov esi, 0xf
push 0x10032fca
lea ecx, [esp + 0x15c]
mov dword [esp + 0x174], esi
mov dword [esp + 0x170], ebx
mov byte [esp + 0x160], bl
call fcn.10007110
lea edx, [esp + 0x18c]
push edx
mov byte [esp + 0x1610], 4
mov byte [esp + 0x1f], 1
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.10012640
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x150], esi
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
cmp dword [esp + 0x1c], 0xffffffff
mov byte [esp + 0x160c], 6
je 0x1000d7ce
mov eax, dword [esp + 0x1e8]
mov ecx, dword [esp + 0x1e4]
push eax
push ecx
lea edx, [esp + 0x604]
push str._r_nRange:_bytes_I64d__r_n
push edx
call fcn.1001dee2
lea eax, [esp + 0x12c]
push eax
mov ecx, str.GET
lea edi, [esp + 0xc4]
call fcn.10008e10
add esp, 0x14
push eax
mov edi, str._HTTP_1.1_r_nAccept:___r_nUser_Agent:_YZ_r_nConnection:_Keep_Alive_r_nHost:
lea esi, [esp + 0x74]
mov byte [esp + 0x1610], 7
call fcn.10008ec0
add esp, 4
lea ecx, [esp + 0x170]
push ecx
push eax
lea edi, [esp + 0x94]
mov byte [esp + 0x1614], 8
call fcn.1000c720
push eax
lea edi, [esp + 0x608]
lea esi, [esp + 0x48]
mov byte [esp + 0x1618], 9
call fcn.10008ec0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x144]
mov byte [esp + 0x1618], 0xa
call fcn.10006680
mov esi, 0x10
cmp dword [esp + 0x54], esi
jb 0x1000d672
mov edx, dword [esp + 0x40]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0xa4], esi
mov edi, 0xf
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
jb 0x1000d69c
mov eax, dword [esp + 0x90]
push eax
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x88], esi
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
jb 0x1000d6c7
mov ecx, dword [esp + 0x74]
push ecx
call fcn.1001dad4
add esp, 4
mov byte [esp + 0x160c], 6
cmp dword [esp + 0xc8], esi
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
jb 0x1000d6fa
mov edx, dword [esp + 0xb4]
push edx
call fcn.1001dad4
add esp, 4
lea eax, [esp + 0x3f4]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x1000d704
sub eax, edx
je 0x1000d758
lea eax, [esp + 0x3f4]
push eax
lea ecx, [esp + 0x600]
push str.If_Match:__s_r_n
push ecx
call fcn.1001dee2
lea eax, [esp + 0x608]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x1000d738
sub eax, edx
push eax
lea edx, [esp + 0x600]
push edx
lea eax, [esp + 0x140]
call fcn.10007020
lea eax, [esp + 0x2f0]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x1000d762
sub eax, edx
je 0x1000d7b6
lea eax, [esp + 0x2f0]
push eax
lea ecx, [esp + 0x600]
push str.If_Unmodified_Since:__s_r_n
push ecx
call fcn.1001dee2
lea eax, [esp + 0x608]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x1000d796
sub eax, edx
push eax
lea edx, [esp + 0x600]
push edx
lea eax, [esp + 0x140]
call fcn.10007020
push 2
push 0x10033224
lea eax, [esp + 0x140]
call fcn.10007020
jmp 0x1000d8f3
lea eax, [esp + 0x11c]
push eax
mov ecx, str.GET
lea edi, [esp + 0xb4]
call fcn.10008e10
add esp, 4
push eax
mov edi, str._HTTP_1.1_r_nAccept:___r_nUser_Agent:_YZ_r_nConnection:_Keep_Alive_r_nHost:
lea esi, [esp + 0x40]
mov byte [esp + 0x1610], 0xb
call fcn.10008ec0
add esp, 4
lea ecx, [esp + 0x170]
push ecx
push eax
lea edi, [esp + 0x94]
mov byte [esp + 0x1614], 0xc
call fcn.1000c720
push eax
mov edi, str._r_n_r_n
lea esi, [esp + 0x7c]
mov byte [esp + 0x1618], 0xd
call fcn.10008ec0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x144]
mov byte [esp + 0x1618], 0xe
call fcn.10006680
mov esi, 0x10
cmp dword [esp + 0x88], esi
jb 0x1000d86e
mov edx, dword [esp + 0x74]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0xa4], esi
mov edi, 0xf
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
jb 0x1000d89e
mov eax, dword [esp + 0x90]
push eax
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x54], esi
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
jb 0x1000d8c6
mov ecx, dword [esp + 0x40]
push ecx
call fcn.1001dad4
add esp, 4
mov byte [esp + 0x160c], 6
cmp dword [esp + 0xc8], esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
jb 0x1000d8f3
mov edx, dword [esp + 0xb4]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x150], esi
mov eax, dword [esp + 0x13c]
jae 0x1000d90a
lea eax, [esp + 0x13c]
mov ecx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x2c]
push ebx
push ecx
push eax
push ebp
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x1000da52
push ebp
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x1000d93f
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x1000d94f
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov edx, dword [esp + 0x30]
mov dword [edx], 2
cmp dword [esp + 0x150], esi
jb 0x1000d972
mov eax, dword [esp + 0x13c]
push eax
call fcn.1001dad4
add esp, 4
lea ecx, [esp + 0x18c]
push ecx
mov dword [esp + 0x154], edi
mov dword [esp + 0x150], ebx
mov byte [esp + 0x140], bl
mov byte [esp + 0x1610], 4
call fcn.10012700
cmp dword [esp + 0x16c], esi
jb 0x1000d9b5
mov edx, dword [esp + 0x158]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0xfc], esi
mov dword [esp + 0x16c], edi
mov dword [esp + 0x168], ebx
mov byte [esp + 0x158], bl
jb 0x1000d9e3
mov eax, dword [esp + 0xe8]
push eax
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x118], esi
mov byte [esp + 0xe8], bl
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], edi
jb 0x1000da11
mov ecx, dword [esp + 0x104]
push ecx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x134], esi
mov dword [esp + 0x118], edi
mov dword [esp + 0x114], ebx
mov byte [esp + 0x104], bl
jb 0x1000da3f
mov edx, dword [esp + 0x120]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x188], esi
mov dword [esp + 0x134], edi
jmp 0x1000d0aa
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x30]
mov eax, dword [ebp + 4]
cmp eax, ebx
je 0x1000da71
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
test eax, eax
je 0x1000e042
cmp byte [esp + 0x1b], bl
push ebx
je 0x1000da98
mov edx, dword [esp + 0x30]
push 0xfff
lea ecx, [esp + 0x604]
push ecx
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov ebp, eax
mov dword [esp + 0x28], ebp
jmp 0x1000dab6
mov ecx, dword [esp + 0x30]
push 0x1000
lea eax, [esp + 0x604]
push eax
push ecx
call dword [sym.imp.WS2_32.dll_recv]
mov ebp, eax
mov dword [esp + 0x28], eax
cmp ebp, ebx
jle 0x1000e083
mov eax, ebp
cdq
mov esi, eax
add dword [esp + 0x34], esi
mov edi, edx
lea eax, [esp + 0x5fc]
adc dword [esp + 0x38], edi
cmp byte [esp + 0x1b], bl
je 0x1000df9a
mov byte [esp + ebp + 0x5fc], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x1000dae8
sub eax, edx
push eax
lea edx, [esp + 0x600]
push edx
lea eax, [esp + 0x15c]
call fcn.10007020
cmp dword [esp + 0x16c], 0x10
mov eax, dword [esp + 0x158]
jae 0x1000db20
lea eax, [esp + 0x158]
mov ecx, dword [esp + 0x168]
push ecx
push eax
lea ebx, [esp + 0x194]
call fcn.10012770
test al, al
je 0x1000df7c
mov eax, dword [esp + 0x18c]
cmp eax, 0x64
jne 0x1000db69
push 0
push 0x10032fca
lea ecx, [esp + 0x15c]
call fcn.10007110
xor ebx, ebx
lea esi, [ebx + 0x10]
lea edi, [ebx + 0xf]
jmp 0x1000da56
cmp eax, 0xc8
jne 0x1000dee0
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x1000db84
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x1000db94
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 0x420
xor ebx, ebx
lea edx, [esp + 0x1e0]
push ebx
push edx
call fcn.10020580
mov eax, dword [esp + 0xf4]
mov ebp, 0x10
add esp, 0xc
cmp dword [esp + 0xfc], ebp
jae 0x1000dbc8
lea eax, [esp + 0xe8]
push ebx
push 0x80
push 2
push ebx
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 0x20], esi
je 0x1000e0e0
mov eax, dword [esp + 0x1ac]
mov ecx, dword [esp + 0x1b0]
mov edi, dword [sym.imp.KERNEL32.DLL_SetFilePointer]
push ebx
lea edx, [esp + 0xb0]
push edx
push eax
push esi
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
call edi
cmp eax, 0xffffffff
jne 0x1000dc30
call dword [sym.imp.KERNEL32.DLL_GetLastError]
test eax, eax
jne 0x1000e0e0
push esi
call dword [sym.imp.KERNEL32.DLL_SetEndOfFile]
test eax, eax
je 0x1000e0e0
push ebx
push ebx
push ebx
push esi
call edi
cmp dword [esp + 0x118], ebp
mov eax, dword [esp + 0x104]
jae 0x1000dc5c
lea eax, [esp + 0x104]
push ebx
push 2
push 2
push ebx
push 1
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1ac]
push 4
mov dword [esp + 0x1e4], ecx
push str.ETAG
lea ecx, [esp + 0x44]
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
call fcn.10007110
lea edx, [esp + 0xd4]
push edx
lea ebx, [esp + 0x40]
lea esi, [esp + 0x1bc]
mov byte [esp + 0x1610], 0xf
call fcn.1000fc60
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov ebp, 0x10
mov byte [esp + 0x160c], 6
cmp dword [esp + 0x54], ebp
jb 0x1000dcf5
mov eax, dword [esp + 0x40]
push eax
call fcn.1001dad4
add esp, 4
test esi, esi
mov ebx, dword [esp + 0x1bc]
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
je 0x1000dd20
lea ecx, [esp + 0x1b8]
cmp esi, ecx
je 0x1000dd25
call fcn.1001dd60
cmp edi, ebx
je 0x1000dd5e
test esi, esi
jne 0x1000dd32
call fcn.1001dd60
cmp edi, dword [esi + 4]
jne 0x1000dd3c
call fcn.1001dd60
cmp dword [edi + 0x40], ebp
jb 0x1000dd46
mov ecx, dword [edi + 0x2c]
jmp 0x1000dd49
lea ecx, [edi + 0x2c]
lea edx, [esp + 0x3f4]
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
test al, al
jne 0x1000dd50
push str.DATE
lea ecx, [esp + 0x40]
call fcn.10006120
lea edx, [esp + 0xcc]
push edx
lea ebx, [esp + 0x40]
lea esi, [esp + 0x1bc]
mov byte [esp + 0x1610], 0x10
call fcn.1000fc60
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov ebp, 0x10
mov byte [esp + 0x160c], 6
cmp dword [esp + 0x54], ebp
jb 0x1000ddb1
mov eax, dword [esp + 0x40]
push eax
call fcn.1001dad4
add esp, 4
test esi, esi
mov ebx, dword [esp + 0x1bc]
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
je 0x1000dddc
lea ecx, [esp + 0x1b8]
cmp esi, ecx
je 0x1000dde1
call fcn.1001dd60
cmp edi, ebx
je 0x1000de1e
test esi, esi
jne 0x1000ddee
call fcn.1001dd60
cmp edi, dword [esi + 4]
jne 0x1000ddf8
call fcn.1001dd60
cmp dword [edi + 0x40], ebp
jb 0x1000de02
mov ecx, dword [edi + 0x2c]
jmp 0x1000de05
lea ecx, [edi + 0x2c]
lea edx, [esp + 0x1ec]
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
test al, al
jne 0x1000de10
push str.LAST_MODIFIED
lea ecx, [esp + 0x40]
call fcn.10006120
lea edx, [esp + 0xdc]
push edx
lea ebx, [esp + 0x40]
lea esi, [esp + 0x1bc]
mov byte [esp + 0x1610], 0x11
call fcn.1000fc60
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov ebp, 0x10
mov byte [esp + 0x160c], 6
cmp dword [esp + 0x54], ebp
jb 0x1000de71
mov eax, dword [esp + 0x40]
push eax
call fcn.1001dad4
add esp, 4
test esi, esi
mov ebx, dword [esp + 0x1bc]
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
je 0x1000de9c
lea ecx, [esp + 0x1b8]
cmp esi, ecx
je 0x1000dea1
call fcn.1001dd60
cmp edi, ebx
je 0x1000deeb
test esi, esi
jne 0x1000deae
call fcn.1001dd60
cmp edi, dword [esi + 4]
jne 0x1000deb8
call fcn.1001dd60
cmp dword [edi + 0x40], ebp
jb 0x1000dec2
mov ecx, dword [edi + 0x2c]
jmp 0x1000dec5
lea ecx, [edi + 0x2c]
lea edx, [esp + 0x2f0]
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
test al, al
jne 0x1000ded0
jmp 0x1000deeb
cmp eax, 0xce
jne 0x1000e1ec
mov eax, dword [esp + 0x1b4]
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x38]
mov ebp, dword [esp + 0x1ac]
mov ebx, dword [esp + 0x1b0]
cdq
sub esi, eax
sbb edi, edx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x60], ebx
mov byte [esp + 0x1b], 0
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], edi
js 0x1000df5d
jg 0x1000df2a
test esi, esi
jbe 0x1000df5d
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
push 0
lea edx, [esp + 0x5c]
push edx
sub eax, esi
push esi
lea eax, [esp + eax + 0x608]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_WriteFile]
add dword [esp + 0x1e4], esi
adc dword [esp + 0x1e8], edi
add dword [esp + 0x24], esi
cmp edi, ebx
jg 0x1000e2c2
jl 0x1000df6f
cmp esi, ebp
jae 0x1000e2c2
xor ebx, ebx
lea esi, [ebx + 0x10]
lea edi, [ebx + 0xf]
jmp 0x1000da56
cmp dword [esp + 0x168], 0x1000
ja 0x1000e288
xor ebx, ebx
lea esi, [ebx + 0x10]
lea edi, [ebx + 0xf]
jmp 0x1000da56
mov ecx, dword [esp + 0x20]
push ebx
lea edx, [esp + 0x5c]
push edx
push ebp
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_WriteFile]
test eax, eax
jne 0x1000dfb7
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov eax, dword [esp + 0x24]
add eax, ebp
cmp eax, 0x400000
mov dword [esp + 0x24], eax
jl 0x1000dfd7
mov edx, dword [esp + 0x20]
push edx
call dword [sym.imp.KERNEL32.DLL_FlushFileBuffers]
mov dword [esp + 0x24], ebx
add dword [esp + 0x1e4], esi
adc dword [esp + 0x1e8], edi
cmp dword [esp + 0x1c], ebx
je 0x1000e017
mov esi, dword [esp + 0x1c]
push ebx
lea eax, [esp + 0x2c]
push eax
push 0x420
lea ecx, [esp + 0x1e8]
push ecx
push esi
mov dword [esp + 0x3c], ebx
call dword [sym.imp.KERNEL32.DLL_WriteFile]
push ebx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.DLL_SetFilePointer]
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x38], edx
jg 0x1000e2c2
jl 0x1000e035
mov eax, dword [esp + 0x5c]
cmp dword [esp + 0x34], eax
jae 0x1000e2c2
mov esi, 0x10
lea edi, [esi - 1]
jmp 0x1000da56
mov ecx, dword [esp + 0x2c]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x1000e05d
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x1000e06d
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov edx, dword [ebp + 4]
push edx
call dword [sym.imp.KERNEL32.DLL_SetEvent]
mov dword [ebp], 3
jmp 0x1000d959
mov ecx, dword [esp + 0x2c]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x1000e09e
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x1000e0ae
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov edx, dword [esp + 0x30]
mov esi, 0x10
cmp dword [esp + 0x150], esi
mov dword [edx], 2
jb 0x1000e0d6
mov eax, dword [esp + 0x13c]
push eax
call fcn.1001dad4
add esp, 4
mov edi, 0xf
jmp 0x1000d972
mov ecx, dword [esp + 0x2c]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
cmp dword [esp + 0x150], ebp
mov edx, dword [esp + 0x30]
mov dword [edx], 5
jb 0x1000e10e
mov eax, dword [esp + 0x13c]
push eax
call fcn.1001dad4
add esp, 4
lea ecx, [esp + 0x18c]
mov esi, 0xf
push ecx
mov dword [esp + 0x154], esi
mov dword [esp + 0x150], ebx
mov byte [esp + 0x140], bl
mov byte [esp + 0x1610], 4
call fcn.10012700
cmp dword [esp + 0x16c], ebp
jb 0x1000e156
mov edx, dword [esp + 0x158]
push edx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0xfc], ebp
mov dword [esp + 0x16c], esi
mov dword [esp + 0x168], ebx
mov byte [esp + 0x158], bl
jb 0x1000e184
mov eax, dword [esp + 0xe8]
push eax
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x118], ebp
mov dword [esp + 0xfc], esi
mov dword [esp + 0xf8], ebx
mov byte [esp + 0xe8], bl
jb 0x1000e1b2
mov ecx, dword [esp + 0x104]
push ecx
call fcn.1001dad4
add esp, 4
cmp dword [esp + 0x134], ebp
mov dword [esp + 0x118], esi
mov dword [esp + 0x114], ebx
mov byte [esp + 0x104], bl
jb 0x1000e1e0
mov edx, dword [esp + 0x120]
push edx
call fcn.1001dad4
add esp, 4
mov dword [esp + 0x134], esi
jmp 0x1000d0a3
mov ecx, dword [esp + 0x2c]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x1000e207
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x1000e217
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov edx, dword [esp + 0x18c]
mov eax, dword [esp + 0x30]
mov dword [eax], edx
lea ecx, [esp + 0x138]
call fcn.10006190
lea ecx, [esp + 0x18c]
push ecx
mov byte [esp + 0x1610], 4
call fcn.10012700
lea ecx, [esp + 0x154]
call fcn.10006190
lea ecx, [esp + 0xe4]
call fcn.10006190
lea ecx, [esp + 0x100]
call fcn.10006190
lea ecx, [esp + 0x11c]
call fcn.10006190
lea ecx, [esp + 0x170]
call fcn.10006190
xor al, al
jmp 0x1000e3aa
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x1000e2a3
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x1000e2b3
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x30]
mov dword [eax], 4
jmp 0x1000e224
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [esp + 0x20]
cmp eax, 0xffffffff
je 0x1000e2dd
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x1000e2ed
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x104]
mov ebx, 0x10
cmp dword [esp + 0x118], ebx
jae 0x1000e309
lea eax, [esp + 0x104]
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
call esi
mov edi, dword [esp + 0x6c]
push edi
call esi
cmp dword [esp + 0xfc], ebx
mov eax, dword [esp + 0xe8]
jae 0x1000e330
lea eax, [esp + 0xe8]
push edi
push eax
call dword [sym.imp.KERNEL32.DLL_MoveFileA]
test eax, eax
lea ecx, [esp + 0x138]
jne 0x1000e352
mov eax, dword [esp + 0x30]
mov dword [eax], 5
jmp 0x1000e22b
call fcn.10006190
lea edx, [esp + 0x18c]
push edx
mov byte [esp + 0x1610], 4
call fcn.10012700
lea ecx, [esp + 0x154]
call fcn.10006190
lea ecx, [esp + 0xe4]
call fcn.10006190
lea ecx, [esp + 0x100]
call fcn.10006190
lea ecx, [esp + 0x11c]
call fcn.10006190
lea ecx, [esp + 0x170]
call fcn.10006190
mov al, 1
mov ecx, dword [esp + 0x1604]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x15e8]
xor ecx, esp
call fcn.1001e327
add esp, 0x15fc
ret 4