Function at 0x140011268
Capabilities:
Check for time delay via gettickcount
Receive data
Receive data on socket
Set socket configuration
Timestomp file

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r8
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
and dword [rbp + 0x7f], 0
or rax, 0xffffffffffffffff
mov r15, rdx
xor r14d, r14d
mov edx, 0x1ca
mov qword [rbp - 0x41], r14
mov ecx, 0x4514
mov rsi, rax
mov r12, rax
mov r13, r8
call fcn.1400013f4
mov rdi, rax
test rax, rax
je 0x14001188a
lea r13, [rax + 0x4000]
mov rcx, r15
lea rbx, [r13 + 0x208]
lea rax, [rbx + 0x104]
mov rdx, rbx
mov qword [rbp - 0x29], rax
lea r9d, [r12 + 0x51]
add rax, 0x104
lea r8, [rbp - 0x59]
mov qword [rbp - 0x39], rax
call fcn.1400107d8
mov r15, rax
test rax, rax
jne 0x14001130a
lea ecx, [rax + 0x2d]
jmp 0x14001184f
mov edx, dword [rbp - 0x59]
mov rcx, rbx
call fcn.14001096c
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x140011326
lea ecx, [rax + 0x2f]
jmp 0x14001184f
lea r8, [rbp - 0x51]
mov dword [rbp - 0x51], 1
mov edx, 0x8004667e
mov rcx, r12
call qword [sym.imp.WS2_32.dll_ioctlsocket]
mov r8d, dword [rbp - 0x59]
xor eax, eax
mov qword [rsp + 0x50], rax
mov r9, r15
mov qword [rsp + 0x48], rax
mov rdx, rbx
mov dword [rsp + 0x40], eax
mov rcx, r12
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.140010518
xor eax, eax
mov r9d, 0x2710
mov r8d, 0x3fff
mov dword [rbp - 0x49], eax
mov rdx, rdi
mov rcx, r12
call fcn.140010408
test eax, eax
jle 0x14001184a
movsxd rbx, eax
mov r8d, 0x104
add rbx, rdi
mov rdx, r13
mov rcx, rdi
mov byte [rbx], r14b
call fcn.140002754
mov edx, 1
mov rcx, r13
mov r15, rax
call fcn.14000864c
mov rcx, rax
xor edx, edx
call fcn.1400019a8
mov edx, 2
mov dword [rbp - 0x51], eax
mov rcx, r13
call fcn.14000864c
mov rcx, qword [rbp - 0x39]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov r8d, 5
lea rdx, str.HTTP_
mov rcx, r13
call fcn.140033a28
test eax, eax
je 0x14001140c
mov ecx, 0x2f
jmp 0x14001184f
lea rcx, [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
cmp byte [r15], r14b
je 0x1400114b4
mov r14, qword [rbp - 0x29]
mov r8d, 0x104
mov rdx, r13
mov rcx, r15
call fcn.140002754
cmp byte [r13], 0
mov r15, rax
je 0x1400114b0
mov r8, r14
lea rdx, [0x1400349f8]
mov rcx, r13
call fcn.14000752c
mov edx, 1
mov rcx, r13
call fcn.14000864c
lea rdx, str.Content_Length:
mov qword [rbp - 0x31], rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x140011485
mov rcx, qword [rbp - 0x31]
xor edx, edx
call fcn.1400019a8
mov dword [rbp - 0x49], eax
jmp 0x1400114a6
lea rdx, str.Last_Modified:
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x1400114a6
mov rcx, qword [rbp - 0x31]
lea rdx, [rbp - 0x19]
call fcn.14000f024
cmp byte [r15], 0
jne 0x140011423
mov r14, qword [rbp - 0x41]
cmp dword [rbp - 0x51], 0xc8
je 0x140011542
cmp byte [r15], 0
je 0x1400114d5
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x1400114fa
mov r9d, 0x2710
mov r8d, 0x208
mov rdx, rdi
mov rcx, r12
call fcn.140010408
test eax, eax
jle 0x14001184a
cdqe
mov byte [rax + rdi], 0
mov rcx, rdi
call fcn.1400073e8
test eax, eax
jne 0x140011528
mov rcx, qword [rbp - 0x29]
mov r8d, 0x104
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcpynA]
mov rcx, qword [rbp - 0x29]
mov r8, r13
mov rdx, rdi
call fcn.140004ea8
mov rcx, rdi
call fcn.140009684
cmp byte [rax], 0x3c
jne 0x140011860
mov rdx, qword [rbp - 0x39]
jmp 0x140011857
mov r13, qword [rbp + 0x77]
mov rcx, r13
call fcn.140004f14
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140011573
lea ecx, [rax + 4]
call fcn.14000612c
mov rdx, rax
mov r8, r13
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfA]
jmp 0x140011864
call qword [sym.imp.WS2_32.dll_WSACreateEvent]
mov r8d, 1
mov rcx, r12
mov rdx, rax
mov r14, rax
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
xor ecx, ecx
xor r13d, r13d
mov dword [rbp - 0x41], ecx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub ebx, r15d
mov dword [rbp - 0x51], eax
mov dword [rbp - 0x39], eax
test ebx, ebx
jle 0x1400115c6
movsxd r8, ebx
mov rdx, r15
mov rcx, rdi
call sub.ntdll.dll_memcpy
mov eax, dword [rbp + 0x7f]
lea r15, [rdi + 0x4000]
mov dword [rbp - 0x59], eax
jmp 0x14001163f
mov eax, dword [rbp + 0x7f]
lea r15, [rdi + 0x4000]
mov dword [rbp - 0x59], eax
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp - 9]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140011620
mov rax, qword [rbp + 0x67]
cmp qword [rbp - 9], rax
jne 0x140011613
cmp dword [rbp - 1], 0x111
jne 0x140011613
mov ecx, 0x3e7
cmp word [rbp + 7], cx
je 0x1400117d0
lea rdx, [rbp - 9]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsDialogMessageA]
xor r9d, r9d
mov r8d, 0x4000
mov rdx, rdi
mov rcx, r12
call qword [sym.imp.WS2_32.dll_recv]
mov ebx, eax
test eax, eax
jle 0x140011793
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, ebx
mov rdx, rdi
mov rcx, rsi
mov dword [rbp - 0x51], eax
call fcn.140004fcc
test eax, eax
js 0x1400117de
cmp eax, ebx
jl 0x1400117d7
add dword [rbp - 0x41], ebx
add r13d, ebx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
mov eax, dword [rbp - 0x49]
sub ebx, dword [rbp - 0x39]
test eax, eax
je 0x140011765
test ebx, ebx
je 0x14001174c
mov r8d, eax
mov edx, 0x3e8
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [rbp - 0x41]
mov r8d, ebx
mov edx, WSAAsyncSelect
mov dword [rbp - 0x31], eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov ebx, eax
test eax, eax
je 0x1400116d0
mov ecx, dword [rbp - 0x49]
mov eax, 0xcccccccd
sub ecx, r13d
mul ecx
mov eax, edx
xor edx, edx
shr eax, 3
div ebx
mov dword [rbp - 0x59], eax
jmp 0x1400116d3
mov eax, dword [rbp - 0x59]
mov rcx, qword [rbp - 0x29]
xor r8d, r8d
imul edx, eax, 0x64
call fcn.140007c3c
mov eax, 0xcccccccd
mov ecx, gethostbyname
mul ebx
mov ebx, edx
shr ebx, 3
call fcn.14000612c
mov r9, qword [rbp - 0x29]
mov rdx, rax
mov r8d, dword [rbp - 0x31]
mov rcx, r15
mov dword [rsp + 0x20], ebx
call fcn.1400074e0
mov rcx, qword [rbp + 0x67]
mov r8, r15
mov edx, WSAAsyncSelect
call fcn.140009230
and qword [rsp + 0x20], 0
mov eax, 0xcccccccd
mul dword [rbp - 0x31]
mov rcx, qword [rbp + 0x67]
mov r8d, 0x402
shr edx, 3
mov r9d, edx
mov edx, reloc.WS2_32.dll_WSAAsyncSelect
call qword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov eax, dword [rbp - 0x49]
cmp eax, r13d
je 0x1400117f7
jae 0x1400115d3
mov ecx, reloc.WS2_32.dll_gethostbyname
jmp 0x14001184f
mov ecx, gethostbyname
call fcn.14000612c
mov rdx, rax
mov r8d, r13d
mov rcx, r15
call fcn.1400074e0
mov rcx, qword [rbp + 0x67]
mov r8, r15
mov edx, WSAAsyncSelect
call fcn.140009230
jmp 0x1400115d3
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x1400117f1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rbp - 0x51]
cmp eax, 0x7530
ja 0x14001184a
mov edx, WSAAsyncSelect
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x1400115d3
mov ecx, 0x38
jmp 0x14001184f
mov ecx, 0x37
jmp 0x14001184f
mov ecx, 5
call fcn.14000612c
mov r13, qword [rbp + 0x77]
jmp 0x14001155f
cmp dword [rbp - 0x49], 0
jne 0x140011843
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea r9, [rbp - 0x21]
mov rcx, rsi
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rsi
call fcn.140004ef4
or rsi, 0xffffffffffffffff
lea ecx, [rsi + 0x34]
call fcn.14000612c
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov r13, qword [rbp + 0x77]
lea eax, [rsi + 2]
jmp 0x140011867
mov ecx, 0x29
jmp 0x14001184f
mov ecx, 0x2a
call fcn.14000612c
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov r13, qword [rbp + 0x77]
mov eax, dword [rbp + 0x7f]
mov rcx, qword [rbp + 0x67]
mov r8, rdi
mov edx, WSAAsyncSelect
mov dword [rbp + 0x7f], eax
call fcn.140009230
cmp r12, 0xffffffffffffffff
je 0x14001188a
mov rcx, r12
call qword [sym.imp.WS2_32.dll_closesocket]
mov r12d, dword [rbp + 0x7f]
mov rcx, rsi
call fcn.140004ef4
test r14, r14
je 0x1400118a4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.14000522c
test r12d, r12d
jne 0x1400118b9
mov rcx, r13
call fcn.140003b7c
mov rbx, qword [rsp + 0x128]
mov eax, r12d
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret