Function at 0x10006a24
Capabilities:
Create thread
Delete file
Get common file path
Get file size
Read file on windows
Receive http response
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x43c
mov eax, dword [0x1001c050]
xor eax, ebp
mov dword [ebp - 4], eax
or dword [ebp - 0x430], 0xffffffff
push esi
push edi
mov esi, ecx
mov eax, dword [esi]
push str._temp_
mov edi, 0x1002277c
push edi
mov dword [ebp - 0x43c], esi
mov dword [ebp - 0x428], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x10006a79
lea eax, [ebp - 0x414]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
jmp 0x10006a8f
push edi
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0x414]
call fcn.100024dc
push ebx
lea eax, [ebp - 0x20c]
push eax
xor edi, edi
push edi
push 0x10019de0
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x10006f58
lea ebx, [esi + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, 0x104
cmp eax, ecx
jge 0x10006f58
mov esi, dword [esi + 4]
cmp esi, 1
jne 0x10006ae5
push ebx
push ecx
lea ecx, [ebp - 0x20c]
call fcn.100023fc
jmp 0x10006c5c
cmp esi, 2
je 0x10006af3
cmp esi, 3
jne 0x10006be2
push edi
lea eax, [ebp - 0x20c]
mov dword [0x100231bc], eax
xor eax, eax
push edi
cmp esi, 3
push edi
sete al
push 0x1000523e
push edi
push edi
mov dword [0x100231c0], ebx
mov dword [0x10021cb8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x3a98
push eax
mov dword [ebp - 0x424], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x10006bea
mov esi, dword [0x10022984]
push 1
push 0x2024
push dword [0x100230b0]
call fcn.10003990
add esp, 0xc
test eax, eax
je 0x10006bbd
mov eax, dword [0x10022984]
mov esi, dword [0x100230b4]
push edi
push dword [eax + 0xc]
mov dword [ebp - 0x42c], eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x10006bbd
mov eax, dword [ebp - 0x42c]
mov ebx, 0x10000
push ebx
call fcn.1000384d
pop ecx
cmp eax, edi
je 0x10006bbd
mov ecx, dword [0x100230b4]
mov eax, 0x1990
cmp word [ecx + 2], ax
jne 0x10006bbd
push 0x3a98
push dword [ebp - 0x424]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x10006b3e
jmp 0x10006bef
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x424]
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push dword [ebp - 0x438]
push dword [ebp - 0x424]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
or esi, 0xffffffff
jmp 0x10006f86
mov ebx, 0x10000
cmp dword [0x10021cd8], 1
mov esi, dword [0x10022984]
push 1
jne 0x10006ed5
push 0x2025
push dword [0x100230b0]
call fcn.10003990
add esp, 0xc
test eax, eax
je 0x10006be2
mov eax, dword [0x10022984]
mov esi, dword [0x100230b4]
push edi
push dword [eax + 0xc]
mov dword [ebp - 0x42c], eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x10006be2
mov eax, dword [ebp - 0x42c]
push ebx
call fcn.1000384d
pop ecx
cmp eax, edi
je 0x10006be2
mov ecx, dword [0x100230b4]
mov eax, 0x1990
cmp word [ecx + 2], ax
jne 0x10006be2
push edi
push 0x80
push 3
push edi
push 3
push closesocket
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0x430], esi
cmp esi, 0xffffffff
je 0x10006f58
push edi
push edi
push dword [ebp - 0x428]
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x420]
push eax
push edi
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
lea eax, [ebp - 0x420]
push eax
push 0x1990
xor ecx, ecx
push 0xc
inc ecx
pop ebx
call fcn.1000389c
pop ecx
pop ecx
test eax, eax
je 0x10006be2
mov eax, dword [0x10022984]
mov esi, dword [0x100230b4]
push edi
push dword [eax + 0xc]
mov dword [ebp - 0x42c], eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x10006be2
mov eax, dword [ebp - 0x42c]
mov ebx, 0x10000
push ebx
call fcn.1000384d
pop ecx
cmp eax, edi
je 0x10006be2
mov ecx, dword [0x100230b4]
mov eax, 0x1990
cmp word [ecx + 2], ax
jne 0x10006be2
mov eax, dword [ebp - 0x424]
cmp eax, dword [ebp - 0x428]
jb 0x10006ea5
sub eax, dword [ebp - 0x428]
mov dword [ebp - 0x424], eax
je 0x10006eac
cmp dword [ebp - 0x424], ebx
jae 0x10006d62
mov ebx, dword [ebp - 0x424]
sub dword [ebp - 0x424], ebx
push 0
pop eax
sete al
mov dword [ebp - 0x434], eax
cmp ebx, edi
je 0x10006e3b
mov eax, dword [0x100231b8]
mov dword [ebp - 0x428], eax
mov esi, ebx
jbe 0x10006dc0
push edi
lea eax, [ebp - 0x42c]
push eax
push esi
push dword [ebp - 0x428]
push dword [ebp - 0x430]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10006e3b
mov eax, dword [ebp - 0x42c]
add dword [ebp - 0x428], eax
sub esi, eax
cmp esi, edi
ja 0x10006d8b
push dword [0x100231b8]
mov ecx, dword [ebp - 0x434]
push 0x2002
call fcn.1000389c
pop ecx
pop ecx
test eax, eax
je 0x10006be2
mov eax, dword [0x10022984]
mov esi, dword [0x100230b4]
push edi
push dword [eax + 0xc]
mov ebx, eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x10006be2
push 0x10000
mov eax, ebx
call fcn.1000384d
pop ecx
cmp eax, edi
je 0x10006be2
mov ecx, dword [0x100230b4]
mov eax, 0x1990
cmp word [ecx + 2], ax
jne 0x10006be2
cmp dword [ebp - 0x424], edi
jbe 0x10006eac
mov ebx, 0x10000
jmp 0x10006d54
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1998
xor ecx, ecx
push 4
inc ecx
pop ebx
call fcn.1000389c
pop ecx
pop ecx
test eax, eax
je 0x10006be2
mov eax, dword [0x10022984]
mov esi, dword [0x100230b4]
push edi
push dword [eax + 0xc]
mov ebx, eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x10006be2
push 0x10000
mov eax, ebx
call fcn.1000384d
pop ecx
cmp eax, edi
je 0x10006be2
mov ecx, dword [0x100230b4]
mov eax, 0x1990
cmp word [ecx + 2], ax
jne 0x10006be2
xor esi, esi
jmp 0x10006f86
mov esi, dword [0x10022984]
push 1
push 0x1990
push dword [0x100230b0]
call fcn.10003990
add esp, 0xc
mov esi, eax
neg esi
sbb esi, esi
and esi, 2
jmp 0x10006f85
push 0x2026
push dword [0x100230b0]
call fcn.10003990
add esp, 0xc
test eax, eax
je 0x10006be2
mov eax, dword [0x10022984]
mov esi, dword [0x100230b4]
push edi
push dword [eax + 0xc]
mov dword [ebp - 0x434], eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x10006be2
mov eax, dword [ebp - 0x434]
push ebx
call fcn.1000384d
pop ecx
cmp eax, edi
je 0x10006be2
mov edx, dword [0x100230b4]
mov eax, 0x1990
mov ecx, eax
cmp word [edx + 2], cx
jne 0x10006be2
mov esi, dword [0x10022984]
push 1
push eax
push dword [0x100230b0]
call fcn.10003990
add esp, 0xc
jmp 0x10006f7d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x428], eax
lea eax, [ebp - 0x428]
push eax
push 0x1998
xor ecx, ecx
push 4
inc ecx
pop ebx
call fcn.1000389c
pop ecx
pop ecx
mov esi, eax
neg esi
sbb esi, esi
neg esi
dec esi
mov eax, dword [ebp - 0x43c]
mov eax, dword [eax + 4]
pop ebx
cmp eax, 2
je 0x10006f9a
cmp eax, 3
jne 0x10006fa7
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x430], 0xffffffff
je 0x10006fbc
push dword [ebp - 0x430]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
xor ecx, ebp
pop esi
call fcn.10008f62
leave
ret