Function at 0x643870
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x725302
mov eax, dword fs:[0]
push eax
sub esp, 0x40
push ebx
push esi
push edi
mov eax, dword [0x7e6410]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 2
call fcn.00429100
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.005b3e90
add esp, 8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.00429050
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.00429050
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00429050
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.00429020
push str..pls
lea ecx, [ebp - 0x30]
call fcn.004288a0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00429290
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
mov bl, al
call fcn.00428810
test bl, bl
jne 0x6439dd
push 7
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp + 0xc]
call fcn.004299f0
push str.http:__
push eax
mov byte [ebp - 4], 8
call fcn.004291f0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
mov bl, al
call fcn.00428810
test bl, bl
je 0x643a58
lea eax, [ebp - 0x34]
push eax
call fcn.005b68c0
add esp, 4
push str.gomaudio.temp.pls
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 9
push eax
call fcn.00428bd0
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
call fcn.004289a0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 9
call fcn.00428810
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
call fcn.00428810
push 0
push 0
push 0
push 0
push 0
push 1
push 0xffffffffffffffff
push 0x783bbc
push 1
push 0
push 0
lea ecx, [ebp - 0x1c]
call fcn.00429100
push eax
lea ecx, [ebp + 0xc]
call fcn.00429100
push eax
call fcn.005bee00
add esp, 0x34
test eax, eax
jne 0x643a4c
lea ecx, [ebp - 0x1c]
call fcn.00429100
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor esi, esi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00428810
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.00428810
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.00428810
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00428810
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.00428810
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0
call fcn.00428810
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.00428810
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0xc]
call fcn.004289a0
lea ecx, [ebp + 0xc]
call fcn.00429100
push eax
call fcn.005b6cc0
add esp, 4
test eax, eax
jne 0x643a75
lea esi, [eax + 1]
jmp 0x6439df
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.005b5ff0
add esp, 8
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.004289a0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
call fcn.00428810
lea ecx, [ebp - 0x14]
call fcn.00429050
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xc
call fcn.00429050
push ecx
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0xd
mov ecx, esp
push eax
call fcn.00428690
lea eax, [ebp - 0x20]
push eax
call fcn.0057f400
add esp, 4
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0xc]
mov ecx, esp
push eax
call fcn.00428690
push 0xffffffffffffffff
push str.NumberOfEntries
push 0x754538
call fcn.005b5100
mov edi, eax
add esp, 0x10
cmp edi, 0xffffffff
jne 0x643aff
xor esi, esi
jmp 0x643d7c
mov esi, 1
cmp edi, esi
jl 0x643d5c
mov ebx, dword [ebp - 0x38]
nop
push esi
lea eax, [ebp - 0x24]
push str.File_d
push eax
call fcn.0042a0e0
add esp, 0xc
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x790eb0
call fcn.00428840
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 4], 0xf
push eax
call fcn.00428690
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x10
call fcn.00429100
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0xe
push 0x754538
push eax
call fcn.005b55c0
add esp, 0x18
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.004289a0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xe
call fcn.00428810
push 0x790eb0
push 0x783fec
lea ecx, [ebp - 0x14]
call fcn.00429560
push 0x790eb0
push 0x783fdc
lea ecx, [ebp - 0x14]
call fcn.00429560
lea ecx, [ebp - 0x14]
call fcn.0042a300
lea ecx, [ebp - 0x14]
call fcn.0042a1d0
lea ecx, [ebp - 0x14]
call fcn.004290f0
test eax, eax
jne 0x643c20
lea ecx, [ebp + 0xc]
call fcn.00429100
push eax
lea ecx, [ebp - 0x14]
call fcn.00429150
test eax, eax
je 0x643c20
lea ecx, [ebp - 0x20]
call fcn.00429100
push eax
lea ecx, [ebp - 0x14]
call fcn.00429150
test eax, eax
je 0x643c20
lea eax, [ebp - 0x20]
push eax
push 0x78b760
lea eax, [ebp - 0x34]
push eax
call fcn.00428c80
or ebx, 1
mov byte [ebp - 4], 0x12
mov ecx, eax
mov dword [ebp - 0x30], ebx
call fcn.00429100
push eax
lea ecx, [ebp - 0x14]
call fcn.00429150
mov byte [ebp - 0xd], 0
test eax, eax
jne 0x643c24
mov byte [ebp - 0xd], 1
mov dword [ebp - 4], 0xe
test bl, 1
je 0x643c3b
lea ecx, [ebp - 0x34]
and ebx, 0xfffffffe
call fcn.00428810
cmp byte [ebp - 0xd], 0
jne 0x643d53
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x18]
call fcn.004289a0
push 1
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x18]
call fcn.004299f0
push 0x7856e8
or ebx, 2
mov byte [ebp - 4], 0x13
push eax
mov dword [ebp - 0x30], ebx
call fcn.004292e0
test al, al
je 0x643c8d
push 0x78afa4
lea ecx, [ebp - 0x18]
call fcn.00429b00
mov byte [ebp - 0xd], 1
test eax, eax
js 0x643c91
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0xe
test bl, 2
je 0x643ca8
lea ecx, [ebp - 0x3c]
and ebx, 0xfffffffd
call fcn.00428810
cmp byte [ebp - 0xd], 0
je 0x643d0a
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push 0x7856e8
call fcn.00428840
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x30], esp
mov ecx, esp
mov byte [ebp - 4], 0x14
push eax
call fcn.00428690
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
mov ecx, esp
push eax
call fcn.00428690
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xe
push eax
call fcn.005b0270
add esp, 0x10
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x16
call fcn.004289a0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
call fcn.00428810
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
push eax
call fcn.00428690
lea eax, [ebp - 0x44]
push eax
call fcn.0057f400
add esp, 8
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x17
call fcn.0042a790
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xe
call fcn.00428810
mov ecx, dword [ebp + 0x18]
lea eax, [ebp - 0x18]
push eax
call fcn.0042a790
mov ecx, dword [ebp + 0x1c]
lea eax, [ebp + 0x10]
push eax
call fcn.0042a790
inc esi
cmp esi, edi
jle 0x643b10
lea ecx, [ebp - 0x1c]
call fcn.004290f0
test eax, eax
jne 0x643d77
lea ecx, [ebp - 0x1c]
call fcn.00429100
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, 1
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.00428810
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xc
call fcn.00428810
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 6
call fcn.00428810
jmp 0x6439df