Function at 0x516c80
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10a4
call fcn.005890e0
mov eax, dword [0x65ee20]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov byte [ebp - 0x1008], 0
push 0xfff
push 0
lea eax, [ebp - 0x1007]
push eax
call fcn.00588e50
add esp, 0xc
mov eax, dword [ebp - 8]
add eax, 0x710
push eax
mov ecx, dword [ebp - 8]
call fcn.00514dd0
mov ecx, dword [ebp - 8]
call fcn.005197d0
mov byte [ebp - 0x1009], al
movzx eax, byte [ebp - 0x1009]
test eax, eax
jne 0x516ce9
jmp 0x517367
push 4
mov ecx, dword [ebp - 8]
call fcn.005174c0
mov dword [ebp - 0x1014], 0
mov dword [ebp - 0x1010], 0
mov dword [ebp - 0x101c], 0
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1024], 0
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x102c], 0
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1034], 0
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x103c], 0
mov dword [ebp - 0x1038], 0
mov dword [ebp - 0x1040], 0
mov dword [ebp - 0x1044], 0
mov byte [ebp - 0x1045], 0
mov byte [ebp - 0x1046], 0
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
jne 0x517233
movzx eax, byte [0x666a20]
test eax, eax
jne 0x516df8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x1098], eax
mov dword [ebp - 0x109c], ecx
mov edx, dword [ebp - 0x1098]
mov eax, dword [ebp - 0x109c]
mov ecx, dword [edx + 0x1d0]
cmp ecx, dword [eax + 0x1d8]
jne 0x516df8
mov edx, dword [ebp - 0x1098]
mov eax, dword [ebp - 0x109c]
mov ecx, dword [edx + 0x1d4]
cmp ecx, dword [eax + 0x1dc]
jne 0x516df8
mov byte [0x666a20], 1
mov eax, dword [ebp - 0x1010]
push eax
mov ecx, dword [ebp - 0x1014]
push ecx
mov ecx, dword [ebp - 8]
call fcn.005175b0
movzx edx, al
test edx, edx
je 0x516e83
push 0x1000
push 0
lea eax, [ebp - 0x1008]
push eax
call fcn.00588e50
add esp, 0xc
mov ecx, dword [ebp - 8]
add ecx, 0x7b8
call fcn.00411010
push eax
mov ecx, dword [ebp - 8]
call fcn.00511580
push eax
push str.TID_:__5lu____s_is_Download_Complete
lea eax, [ebp - 0x1008]
push eax
call fcn.0058900d
add esp, 0x10
cmp dword [0x66531c], 0
je 0x516e7e
push 0x17
push 0x17
lea eax, [ebp - 0x1008]
push eax
mov ecx, dword [0x66531c]
mov edx, dword [ecx]
mov eax, dword [0x66531c]
push eax
mov ecx, dword [edx + 8]
call ecx
jmp 0x517233
mov ecx, dword [ebp - 8]
add ecx, 0x7b8
call fcn.00411010
push eax
call fcn.0050a210
mov dword [ebp - 0x1050], eax
mov dword [ebp - 0x104c], edx
cmp dword [ebp - 0x104c], 0
jl 0x516ed2
jg 0x516eb7
cmp dword [ebp - 0x1050], 0
jbe 0x516ed2
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1050]
mov dword [eax + 0x1020], ecx
mov edx, dword [ebp - 0x104c]
mov dword [eax + 0x1024], edx
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x516ee6
jmp 0x517233
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x1014], eax
mov dword [ebp - 0x1010], edx
mov eax, dword [ebp - 0x1014]
sub eax, dword [ebp - 0x103c]
mov ecx, dword [ebp - 0x1010]
sbb ecx, dword [ebp - 0x1038]
push ecx
push eax
call fcn.005147b0
add esp, 8
mov dword [ebp - 0x109c], eax
mov dword [ebp - 0x1098], edx
cmp dword [ebp - 0x1098], 0
jl 0x516f69
jg 0x516f41
cmp dword [ebp - 0x109c], 0xf
jb 0x516f69
mov ecx, dword [ebp - 8]
call fcn.00520960
mov ecx, dword [ebp - 8]
call fcn.00521250
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x103c], eax
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1038], ecx
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x516f7d
jmp 0x517233
mov ecx, dword [ebp - 8]
call fcn.00517520
movzx eax, al
test eax, eax
jne 0x516fab
mov ecx, dword [ebp - 8]
call fcn.00517580
mov ecx, dword [ebp - 8]
cmp eax, dword [ecx + 0x98]
jle 0x516fab
mov byte [ebp - 0x1046], 1
jmp 0x517233
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x516fbf
jmp 0x517233
mov eax, dword [ebp - 0x1010]
push eax
mov ecx, dword [ebp - 0x1014]
push ecx
mov ecx, dword [ebp - 8]
call fcn.005175b0
movzx edx, al
test edx, edx
je 0x516fe1
jmp 0x517233
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x516ff5
jmp 0x517233
mov ecx, dword [ebp - 8]
call fcn.0051b3e0
movzx eax, al
test eax, eax
je 0x517018
mov byte [ebp - 0x1045], 1
mov ecx, dword [ebp - 8]
call fcn.005227c0
jmp 0x517233
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x51702c
jmp 0x517233
mov eax, dword [ebp - 0x1014]
sub eax, dword [ebp - 0x1024]
mov ecx, dword [ebp - 0x1010]
sbb ecx, dword [ebp - 0x1020]
push ecx
push eax
call fcn.005147b0
add esp, 8
mov dword [ebp - 0x109c], eax
mov dword [ebp - 0x1098], edx
cmp dword [ebp - 0x1098], 0
jl 0x5170da
jg 0x51706e
cmp dword [ebp - 0x109c], 8
jb 0x5170da
mov ecx, dword [ebp - 8]
call fcn.00549120
push 0xf
call fcn.00517430
add esp, 4
push 0x23
call fcn.005173a0
add esp, 4
mov eax, dword [ebp - 0x1040]
and eax, reloc.WS2_32.dll_closesocket
jns 0x51709c
dec eax
or eax, 0xfffffffc
inc eax
mov ecx, dword [ebp - 0x1040]
add ecx, 1
mov dword [ebp - 0x1040], ecx
test eax, eax
jne 0x5170da
push 0x40000
mov ecx, 0x6674a0
call fcn.005574e0
mov ecx, dword [ebp - 8]
call fcn.005199d0
mov eax, dword [ebp - 8]
mov byte [eax + 0x6d5], 1
mov eax, dword [ebp - 8]
mov byte [eax + 0xa8d], 1
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x5170ee
jmp 0x517233
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xd43]
test ecx, ecx
je 0x517104
mov ecx, dword [ebp - 8]
call fcn.00547000
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x517118
jmp 0x517233
mov eax, dword [ebp - 0x1014]
sub eax, dword [ebp - 0x1034]
mov ecx, dword [ebp - 0x1010]
sbb ecx, dword [ebp - 0x1030]
push ecx
push eax
call fcn.005147b0
add esp, 8
mov dword [ebp - 0x109c], eax
mov dword [ebp - 0x1098], edx
cmp dword [ebp - 0x1098], 0
jl 0x51717a
jg 0x51715a
cmp dword [ebp - 0x109c], 0xa
jb 0x51717a
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x1034], eax
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1030], ecx
mov ecx, dword [ebp - 8]
call fcn.005229f0
mov ecx, dword [ebp - 8]
call fcn.005107e0
movzx eax, al
test eax, eax
je 0x51718e
jmp 0x517233
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x8d]
test ecx, ecx
jne 0x5171a1
jmp 0x516d8d
mov ecx, dword [ebp - 0x1014]
sub ecx, dword [ebp - 0x102c]
mov esi, dword [ebp - 0x1010]
sbb esi, dword [ebp - 0x1028]
mov eax, dword [ebp - 0x1044]
cdq
mov dword [ebp - 0x109c], ecx
mov dword [ebp - 0x1098], esi
mov dword [ebp - 0x10a4], eax
mov dword [ebp - 0x10a0], edx
mov edx, dword [ebp - 0x1098]
cmp edx, dword [ebp - 0x10a0]
jl 0x5171f8
jg 0x5171f6
mov eax, dword [ebp - 0x109c]
cmp eax, dword [ebp - 0x10a4]
jb 0x5171f8
jmp 0x51722e
mov eax, dword [ebp - 0x1010]
cmp eax, dword [ebp - 0x1028]
jg 0x51722e
jl 0x517216
mov ecx, dword [ebp - 0x1014]
cmp ecx, dword [ebp - 0x102c]
jae 0x51722e
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x102c], eax
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1028], ecx
jmp 0x516d8d
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xff2]
test ecx, ecx
jne 0x51724d
push 0
push 0
mov ecx, dword [ebp - 8]
call fcn.005175b0
mov ecx, dword [ebp - 8]
call fcn.005227c0
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xff2]
neg ecx
sbb ecx, ecx
add ecx, 1
mov byte [ebp - 0x1051], cl
push 0
push 0
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x80]
call eax
movzx eax, byte [ebp - 0x1051]
test eax, eax
je 0x51729e
mov eax, dword [ebp - 8]
add eax, 0x710
push eax
mov ecx, dword [ebp - 8]
call fcn.00515dc0
jmp 0x5172b3
mov ecx, dword [ebp - 8]
add ecx, 0x710
call fcn.00411010
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 8]
call fcn.00510f50
push 1
mov ecx, dword [ebp - 8]
call fcn.005174c0
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xff2]
test ecx, ecx
jne 0x517305
movzx eax, byte [ebp - 0x1045]
test eax, eax
je 0x5172ed
push 0x4ef6
mov ecx, dword [ebp - 8]
call fcn.005174f0
jmp 0x517305
movzx eax, byte [ebp - 0x1046]
test eax, eax
je 0x517305
push 0x4ef1
mov ecx, dword [ebp - 8]
call fcn.005174f0
push 0
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 8]
call fcn.00510f80
push 0
push 0
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x80]
call eax
push 0xf
call fcn.00517430
add esp, 4
push 0x23
call fcn.005173a0
add esp, 4
push 0x2800
mov ecx, 0x6674a0
call fcn.005574e0
push 0x200000
call fcn.00517380
add esp, 4
call fcn.0053c7e0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0058845d
mov esp, ebp
pop ebp
ret