Function at 0x10017a00
Capabilities:
Check http status code
Enumerate files on windows
Enumerate process modules
Get process image filename

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100465cc
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1d60
call fcn.10028f40
mov eax, dword [0x100571c4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebx + 0xc]
test edi, edi
jne 0x10017a53
xor al, al
jmp 0x10017ffd
lea eax, [ebp - 0x1d6c]
mov dword [ebp - 0x1d6c], 0
push eax
push 0x1000
lea eax, [ebp - 0x1958]
push eax
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
test eax, eax
je 0x10017a4c
mov eax, dword [ebp - 0x1d6c]
xor esi, esi
shr eax, 2
mov dword [ebp - 0x1d64], eax
test eax, eax
jle 0x10017b0b
nop
mov eax, dword [ebp + esi*4 - 0x1958]
test eax, eax
je 0x10017af9
cmp eax, edi
jne 0x10017af9
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x10017aef
mov eax, dword [ebx + 0xc]
cmp dword [ebp + esi*4 - 0x1958], eax
jne 0x10017aef
push 0x104
lea eax, [ebp - 0x958]
push eax
push edi
call dword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x10017aef
push ecx
lea edx, [ebp - 0x240]
lea ecx, [ebp - 0x958]
call fcn.1001c3b0
add esp, 4
test al, al
jne 0x10017b04
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [ebx + 0xc]
inc esi
cmp esi, dword [ebp - 0x1d64]
jl 0x10017a90
jmp 0x10017b0b
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebx + 0x10], 0
je 0x10017e2d
mov dword [0x101a0680], 0
mov dword [ebp - 0x1d64], 0x736c25
lea edi, [ebp - 0x1d64]
mov dword [ebp - 4], 0
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x10017b40
sub edi, ecx
mov edx, 2
inc edi
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100283d8
add esp, 4
mov esi, eax
lea eax, [ebp - 0x1d64]
push edi
push eax
push esi
call fcn.10031d88
add esp, 0xc
lea eax, [ebp - 0x240]
push eax
push esi
lea eax, [ebp - 0x448]
push 0x208
push eax
call fcn.10016d60
add esp, 0x10
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov dword [ebp - 0x1960], 0x5c736c25
mov dword [ebp - 0x195c], 0x2a2e2a
lea edi, [ebp - 0x1960]
mov dword [ebp - 4], 1
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x10017bc5
sub edi, ecx
mov edx, 2
inc edi
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100283d8
add esp, 4
mov esi, eax
lea eax, [ebp - 0x1960]
push edi
push eax
push esi
call fcn.10031d88
add esp, 0xc
lea eax, [ebp - 0x448]
push eax
push esi
push 0x208
push eax
call fcn.10016d60
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1bb0]
push eax
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x1d68], esi
cmp esi, 0xffffffff
je 0x10017e2d
nop
mov ecx, dword [0x101a0680]
cmp ecx, 0xc8
jg 0x10017e09
cmp dword [ebx + 0x10], ecx
jne 0x10017e09
push 0x208
lea eax, [ebp - 0x750]
push 0
push eax
call fcn.1002aef0
mov al, byte [0x10050e81]
add esp, 0xc
xor al, 0xde
mov byte [ebp - 0x1d64], 0x25
mov byte [ebp - 0x1d63], al
mov al, byte [0x10050e82]
xor al, 0xdf
mov byte [ebp - 0x1d61], 0
mov byte [ebp - 0x1d62], al
lea eax, [ebp - 0x1d64]
mov dword [ebp - 4], 2
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10017cb0
sub eax, edx
xor ecx, ecx
mov edx, 2
lea edi, [eax + 1]
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100283d8
add esp, 4
mov esi, eax
lea eax, [ebp - 0x1d64]
push edi
push eax
push esi
call fcn.10031d88
add esp, 0xc
lea eax, [ebp - 0x240]
push eax
push esi
lea eax, [ebp - 0x750]
push 0x208
push eax
call fcn.10016d60
add esp, 0x10
mov dword [ebp - 0x1d64], 0
lea eax, [ebp - 0x750]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov al, byte [0x10050e85]
xor al, 0xb8
mov byte [ebp - 0x1960], 0x25
mov byte [ebp - 0x195f], al
mov al, byte [0x10050e86]
xor al, 0xb9
mov byte [ebp - 0x1959], 0
mov byte [ebp - 0x195e], al
mov al, byte [0x10050e87]
xor al, 0xba
mov byte [ebp - 0x195d], al
mov al, byte [0x10050e88]
xor al, 0xbb
mov byte [ebp - 0x195c], al
mov al, byte [0x10050e89]
xor al, 0xbc
mov byte [ebp - 0x195b], al
mov al, byte [0x10050e8a]
xor al, 0xbd
mov byte [ebp - 0x195a], al
lea edi, [ebp - 0x1960]
mov dword [ebp - 4], 3
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x10017d90
sub edi, ecx
mov edx, 2
inc edi
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100283d8
add esp, 4
mov esi, eax
lea eax, [ebp - 0x1960]
push edi
push eax
push esi
call fcn.10031d88
add esp, 0xc
lea eax, [ebp - 0x1b84]
push eax
lea eax, [ebp - 0x750]
push eax
push esi
lea eax, [ebp - 0x240]
push 0x208
push eax
call fcn.10016d60
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
mov ecx, dword [0x101a0680]
add esp, 0x14
mov esi, dword [ebp - 0x1d68]
movq qword [ebp - 0x1960], xmm0
lea eax, [ebp - 0x1bb0]
inc ecx
push eax
push esi
mov dword [0x101a0680], ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10017c40
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x34]
xor edi, edi
push eax
lea eax, [ebp - 0x1d68]
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.10017870
test al, al
jne 0x10017e7b
lea ecx, [ebp - 0x1d60]
mov edi, 1
call fcn.10001700
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1d60]
call fcn.10001870
xorps xmm0, xmm0
mov esi, eax
movups xmmword [ebp - 0x34], xmm0
movups xmmword [ebp - 0x24], xmm0
jmp 0x10017e81
mov esi, dword [ebp - 0x1d68]
lea eax, [ebp - 0x240]
push 0x5c
push eax
call fcn.1002a8c3
add esp, 8
test eax, eax
jne 0x10017e9e
lea eax, [ebp - 0x240]
jmp 0x10017ea1
add eax, 2
push eax
lea eax, [ebp - 0x240]
push 0x100
push eax
call fcn.10031a62
lea ecx, [ebp - 0x240]
add esp, 0xc
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10017ec0
sub ecx, edx
sar ecx, 1
cmp ecx, 0x1f
jbe 0x10017ed8
xor eax, eax
jmp 0x10017edf
movzx eax, word [ebp - 0x202]
mov word [ebp - 0x202], ax
lea eax, [ebp - 0x240]
push eax
movzx eax, byte [ebp - 0x15]
push eax
movzx eax, byte [ebp - 0x16]
push eax
movzx eax, byte [ebp - 0x17]
push eax
movzx eax, byte [ebp - 0x18]
push eax
movzx eax, byte [ebp - 0x19]
push eax
movzx eax, byte [ebp - 0x1a]
push eax
movzx eax, byte [ebp - 0x1b]
push eax
movzx eax, byte [ebp - 0x1c]
push eax
movzx eax, byte [ebp - 0x1d]
push eax
movzx eax, byte [ebp - 0x1e]
push eax
movzx eax, byte [ebp - 0x1f]
push eax
movzx eax, byte [ebp - 0x20]
push eax
movzx eax, byte [ebp - 0x21]
push eax
movzx eax, byte [ebp - 0x22]
push eax
movzx eax, byte [ebp - 0x23]
push eax
movzx eax, byte [ebp - 0x24]
push eax
movzx eax, byte [ebp - 0x25]
push eax
movzx eax, byte [ebp - 0x26]
push eax
movzx eax, byte [ebp - 0x27]
push eax
movzx eax, byte [ebp - 0x28]
push eax
movzx eax, byte [ebp - 0x29]
push eax
movzx eax, byte [ebp - 0x2a]
push eax
movzx eax, byte [ebp - 0x2b]
push eax
movzx eax, byte [ebp - 0x2c]
push eax
movzx eax, byte [ebp - 0x2d]
push eax
movzx eax, byte [ebp - 0x2e]
push eax
movzx eax, byte [ebp - 0x2f]
push eax
movzx eax, byte [ebp - 0x30]
push eax
movzx eax, byte [ebp - 0x31]
push eax
movzx eax, byte [ebp - 0x32]
push eax
movzx eax, byte [ebp - 0x33]
push eax
movzx eax, byte [ebp - 0x34]
push eax
push esi
push edi
lea eax, [ebp - 0x548]
push str._d_t_0x_.8X__t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t_.3d_t__S__r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x94
mov word [ebp - 0x348], 0x1c2
mov byte [ebp - 0x346], 5
call fcn.1002df64
and eax, 0x800000ff
jns 0x10017fca
dec eax
or eax, 0xffffff00
inc eax
mov byte [ebp - 0x345], al
lea esi, [ebp - 0x548]
push 0x105
lea eax, [ebp - 0x348]
mov byte [ebp - 0x344], 0x13
mov ecx, 0x40
lea edi, [ebp - 0x343]
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.100020b0
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10027e1f
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc