Function at 0x4311c0
Capabilities:
Copy file
Delete file
Download and write a file
Get file size
Move file
Query remote server for available data
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45883d
mov eax, dword fs:[0]
push eax
sub esp, 0x58
push ebx
push esi
push edi
mov eax, dword [0x478024]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi + 0xc]
mov esi, dword [ebp + 0x14]
test ecx, ecx
je 0x431201
push dword [edi + 0x18]
mov eax, dword [ecx]
push dword [ebp + 0x10]
push 1
call dword [eax + 0xc]
cmp byte [edi + 0x11], 0
jne 0x43182b
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x431221
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x43182b
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x431252
cmp eax, esi
jne 0x431252
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x43123c
mov eax, dword [ecx]
push 0
push 1
call dword [eax + 0x14]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [edi + 0x1c]
xor dl, dl
push 0
call fcn.004118b0
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x43128e
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x431278
mov edx, dword [ecx]
push 0
push ebx
push 0
call dword [edx + 0x24]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
xor eax, eax
mov dword [ebp - 0x34], 0xc
cmp eax, esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
sbb ebx, ebx
mov dword [ebp - 0x64], eax
neg ebx
mov dword [ebp - 0x60], eax
add ebx, 2
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 2
cmp byte [edi + 0x80], al
je 0x43130f
test esi, esi
jne 0x43130f
push 1
push ecx
push str.S_1_1_0
lea ecx, [ebp - 0x64]
call fcn.00434df0
push 1
push ecx
push str.S_1_5_18
lea ecx, [ebp - 0x64]
call fcn.00434df0
lea ecx, [ebp - 0x64]
call fcn.00435370
mov dword [ebp - 0x30], eax
mov ecx, dword [edi + 0x1c]
cmp dword [ecx - 4], 1
jle 0x431326
push dword [ecx - 0xc]
lea ecx, [edi + 0x1c]
call fcn.00403e10
mov ecx, dword [edi + 0x1c]
push 0
xor edx, edx
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x30], edx
push 0x80
push ebx
cmove eax, edx
push eax
push edx
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
mov dword [ebp - 0x10], ebx
cmp ebx, 0xffffffff
je 0x431362
test esi, esi
je 0x431362
push 2
push 0
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00434ca0
mov dword [ebp - 0x28], 0x46552c
mov dword [ebp - 0x24], ebx
mov dword [ebp - 4], 3
cmp ebx, 0xffffffff
jne 0x4313ce
cmp byte [edi + 0x11], 0
jne 0x4313c4
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x43139f
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4313c4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [edi + 0xc]
mov edi, eax
mov dword [ebp + 0x14], eax
test ecx, ecx
je 0x4317f5
mov eax, dword [ecx]
push 0
push edi
push 0
call dword [eax + 0x24]
jmp 0x4317f5
mov edi, 0xe0000008
jmp 0x4317f5
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4313e3
mov eax, dword [ecx]
test esi, esi
je 0x4313de
push esi
jmp 0x4313e0
push 0
call dword [eax + 0x18]
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
push 0xc800
call fcn.00417780
mov esi, dword [ebp - 0x1c]
nop
push dword [edi + 0x68]
mov ebx, dword [edi + 4]
mov byte [edi + 0x38], 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
push 0
lea eax, [ebp - 0x18]
mov byte [edi + 0x41], 0
push eax
push ebx
mov dword [edi + 0x34], 8
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
test eax, eax
jne 0x4314f4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [ebp + 0x14], ebx
cmp ebx, 0x3e5
jne 0x4314e0
cmp byte [edi + 0x38], 0
jne 0x4314cb
nop
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x4314cb
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x43149a
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x43149a
nop
cmp byte [edi + 0x38], 0
jne 0x43149a
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x43149a
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x431470
cmp byte [edi + 0x11], 0
jne 0x431741
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4314ba
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x431741
push 0xa
push dword [edi + 0x68]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp byte [edi + 0x38], 0
je 0x431450
cmp dword [edi + 0x30], 0
mov ebx, dword [edi + 0x2c]
mov dword [ebp + 0x14], ebx
je 0x4314e0
test ebx, ebx
jle 0x4314fd
mov dword [ebp - 0x18], ebx
jmp 0x431500
mov dword [ebp - 0x14], 0
test ebx, ebx
jne 0x431604
mov ebx, dword [ebp - 0x18]
jmp 0x431507
push dword [edi + 0x68]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x14], 0
test ebx, ebx
je 0x4316f4
push dword [edi + 0x68]
cmp ebx, 0xc800
mov byte [edi + 0x38], 0
mov eax, 0xc800
cmova ebx, eax
mov dword [ebp + 0x14], ebx
mov ebx, dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp - 0x14]
mov byte [edi + 0x41], 0
push eax
mov eax, dword [ebp + 0x14]
push eax
push esi
push ebx
mov dword [edi + 0x34], 3
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x43164c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [ebp + 0x14], ebx
cmp ebx, 0x3e5
jne 0x431600
cmp byte [edi + 0x38], 0
jne 0x4315eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x4315eb
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4315ba
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x4315ba
nop
cmp byte [edi + 0x38], 0
jne 0x4315ba
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4315ba
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x431590
cmp byte [edi + 0x11], 0
jne 0x431741
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4315da
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x431741
push 0xa
push dword [edi + 0x68]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp byte [edi + 0x38], 0
je 0x431570
cmp dword [edi + 0x30], 0
mov ebx, dword [edi + 0x2c]
mov dword [ebp + 0x14], ebx
je 0x431600
test ebx, ebx
jle 0x431655
mov dword [ebp - 0x14], ebx
jmp 0x431658
test ebx, ebx
je 0x431655
mov eax, ebx
cmp ebx, 0x2ee2
je 0x431630
mov dword [ebp + 0x14], ebx
cmp eax, 0x2efe
je 0x431630
mov dword [ebp + 0x14], ebx
cmp eax, 0x2eff
je 0x431630
mov dword [ebp + 0x14], ebx
cmp eax, 0x2f83
jne 0x431733
cmp byte [edi + 0x88], 0
je 0x431733
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0xc]
push dword [ebp - 0x10]
jmp 0x43171c
push dword [edi + 0x68]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4316f4
push 0
lea eax, [ebp - 0x20]
push eax
push ebx
mov ebx, dword [ebp - 0x10]
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4317a6
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4316ca
mov eax, dword [ecx]
push dword [ebp - 0x20]
call dword [eax + 0x18]
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4316ca
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x4316ca
nop dword [eax + eax]
cmp byte [edi + 0x38], 0
jne 0x4316ca
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
jne 0x4316ca
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x4316a0
cmp byte [edi + 0x11], 0
jne 0x4316ea
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x431400
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
test al, al
je 0x431400
mov edi, 0xe0000008
jmp 0x4317e1
cmp dword [ebp + 0x10], 0
mov ebx, dword [ebp - 0x10]
jbe 0x431767
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, dword [ebp + 0x10]
jae 0x431767
cmp byte [edi + 0x88], 0
je 0x43174b
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0xc]
push ebx
push dword [ebp + 8]
mov ecx, edi
call fcn.00431ec0
mov ebx, eax
mov dword [ebp + 0x14], ebx
test ebx, ebx
je 0x431400
cmp ebx, 0xe0000008
je 0x4317c2
jmp 0x4317b1
mov edi, 0xe0000008
jmp 0x4317de
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x431760
mov eax, dword [ecx]
push 0
push 0xe000000f
push 0
call dword [eax + 0x24]
mov edi, 0xe000000f
jmp 0x4317de
test ebx, ebx
je 0x43177a
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], eax
push dword [edi + 0x18]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call ebx
push dword [edi + 0x18]
push dword [edi + 0x1c]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x4317cc
push eax
push dword [edi + 0x18]
push dword [edi + 0x1c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4317c7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [ebp + 0x14], ebx
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4317c2
mov eax, dword [ecx]
push 0
push ebx
push 0
call dword [eax + 0x24]
mov edi, dword [ebp + 0x14]
jmp 0x4317de
push dword [edi + 0x1c]
call ebx
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x4317dc
mov eax, dword [ecx]
push 0
push 1
call dword [eax + 0x14]
xor edi, edi
mov ebx, dword [ebp - 0x10]
mov byte [ebp - 4], 3
push esi
call fcn.00438f5b
add esp, 4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x46552c
test ebx, ebx
je 0x431815
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, 0xe0000008
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10