Function at 0x10004ad0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x100786c5
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
mov eax, dword [0x1008e418]
xor eax, esp
mov dword [esp + 0xa8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1008e418]
xor eax, esp
push eax
lea eax, [esp + 0xc4]
mov dword fs:[0], eax
mov eax, dword [esp + 0xd4]
xor esi, esi
mov dword [esp + 0x20], esi
push 0xffffffffffffffff
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], ecx
xor edx, edx
add eax, 0x74
push esi
lea ecx, [esp + 0x8c]
mov dword [esp + 0xa4], 7
mov dword [esp + 0xa0], esi
mov word [esp + 0x90], dx
call fcn.10008c70
mov dword [esp + 0xcc], esi
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0x88]
cmp eax, 8
jb 0x10004cb2
mov edi, edx
mov dword [esp + 0x18], edi
cmp edx, esi
je 0x10004ba4
mov ecx, edx
cmp eax, 8
jae 0x10004b84
lea ecx, [esp + 0x88]
cmp ecx, edi
ja 0x10004ba4
mov ecx, edx
cmp eax, 8
jae 0x10004b96
lea ecx, [esp + 0x88]
mov ebx, dword [esp + 0x98]
lea ecx, [ecx + ebx*2]
cmp edi, ecx
jbe 0x10004bbe
call fcn.10055ff2
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x88]
lea ebp, [esp + 0x84]
mov ecx, edx
cmp eax, 8
jae 0x10004bd3
lea ecx, [esp + 0x88]
lea edi, [ecx + ebx*2]
cmp edi, esi
je 0x10004c01
mov ecx, edx
cmp eax, 8
jae 0x10004be8
lea ecx, [esp + 0x88]
cmp ecx, edi
ja 0x10004c01
mov ecx, edx
cmp eax, 8
jae 0x10004bfa
lea ecx, [esp + 0x88]
lea ecx, [ecx + ebx*2]
cmp edi, ecx
jbe 0x10004c1b
call fcn.10055ff2
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x88]
cmp eax, 8
jb 0x10004cc4
mov esi, edx
test edx, edx
je 0x10004c51
mov ecx, edx
cmp eax, 8
jae 0x10004c38
lea ecx, [esp + 0x88]
cmp ecx, esi
ja 0x10004c51
cmp eax, 8
mov eax, edx
jae 0x10004c4a
lea eax, [esp + 0x88]
lea edx, [eax + ebx*2]
cmp esi, edx
jbe 0x10004c56
call fcn.10055ff2
mov eax, dword [esp + 0x18]
push eax
mov byte [esp + 0x2c], 0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x2c]
push ebp
push ecx
push edx
push edi
mov eax, esi
lea ecx, [esp + 0x3c]
call fcn.1000dbc0
add esp, 0x14
lea edi, [esp + 0x68]
call fcn.10048c09
mov byte [esp + 0xcc], 1
cmp dword [esp + 0x9c], 8
mov ecx, dword [esp + 0x88]
jae 0x10004ca3
lea ecx, [esp + 0x88]
mov ebx, 0x10
cmp dword [eax + 0x18], ebx
jb 0x10004cd0
mov eax, dword [eax + 4]
jmp 0x10004cd3
lea ecx, [esp + 0x88]
mov dword [esp + 0x18], ecx
mov edi, ecx
jmp 0x10004b76
lea esi, [esp + 0x88]
jmp 0x10004c2a
add eax, 4
push ecx
push 0x32e3
push eax
push str.https:___hs:_d_globalSmallFile_patch_installer__ls
lea esi, [esp + 0xb0]
call fcn.10046101
add esp, 0x10
mov byte [esp + 0xcc], 3
cmp dword [esp + 0x80], ebx
jb 0x10004d0c
mov eax, dword [esp + 0x6c]
push eax
call fcn.10056169
add esp, 4
mov ecx, dword [esp + 0x1c]
xor ebp, ebp
lea edi, [esp + 0x4c]
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], ebp
mov byte [esp + 0x6c], 0
mov dword [esp + 0x24], ebp
call fcn.100049e0
mov esi, dword [esp + 0x14]
push 0xffffffffffffffff
push ebp
mov ecx, esi
mov byte [esp + 0xd4], 4
call fcn.10008c70
mov edi, 8
mov byte [esp + 0xcc], 3
cmp dword [esp + 0x64], edi
jb 0x10004d69
mov ecx, dword [esp + 0x50]
push ecx
call fcn.10056169
add esp, 4
xor edx, edx
mov dword [esp + 0x60], ebp
mov dword [esp + 0x64], 7
mov word [esp + 0x50], dx
lea ebp, [esi + 4]
cmp dword [esi + 0x18], edi
jb 0x10004d89
mov edi, dword [ebp]
jmp 0x10004d8b
mov edi, ebp
cmp dword [esp + 0xb8], ebx
mov ebx, dword [esp + 0xa4]
jae 0x10004da2
lea ebx, [esp + 0xa4]
mov eax, dword [0x10093604]
test eax, eax
jne 0x10004dee
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.pobus32.dll
call esi
test eax, eax
jne 0x10004dd9
push str.pobus64.dll
call esi
test eax, eax
jne 0x10004dd9
push str.poda32.dll
call esi
test eax, eax
jne 0x10004dd9
push str.poda64.dll
call esi
push str.E2FE52CB
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10093604], eax
test eax, eax
je 0x10004e6d
lea ecx, [esp + 0x24]
push ecx
push edi
push ebx
call eax
mov edi, 8
test eax, eax
je 0x10004e72
mov edx, dword [esp + 0x14]
cmp dword [edx + 0x18], edi
jb 0x10004e0e
mov eax, dword [ebp]
jmp 0x10004e10
mov eax, ebp
xor ecx, ecx
mov word [esp + 0x34], cx
mov ecx, eax
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
lea esi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x10004e30
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x34]
call fcn.1000a960
mov edx, dword [esp + 0x1c]
mov byte [esp + 0xcc], 5
push edx
mov ecx, esi
mov dword [esp + 0x24], 1
call fcn.100047d0
test al, al
je 0x10004e72
mov bl, 1
jmp 0x10004e74
mov edi, 8
xor bl, bl
mov dword [esp + 0xcc], 3
test byte [esp + 0x20], 1
je 0x10004e99
cmp dword [esp + 0x48], edi
jb 0x10004e99
mov eax, dword [esp + 0x34]
push eax
call fcn.10056169
add esp, 4
test bl, bl
je 0x10004f10
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x18], edi
jb 0x10004eab
mov eax, dword [ebp]
jmp 0x10004ead
mov eax, ebp
push eax
push str.download_success:_ls
call fcn.10052058
add esp, 8
cmp dword [esp + 0xb8], 0x10
jb 0x10004ed5
mov edx, dword [esp + 0xa4]
push edx
call fcn.10056169
add esp, 4
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], 0
mov byte [esp + 0xa4], 0
cmp dword [esp + 0x9c], edi
jb 0x10004f0c
mov eax, dword [esp + 0x88]
push eax
call fcn.10056169
add esp, 4
mov al, 1
jmp 0x10004f8c
mov ecx, dword [esp + 0x24]
push ecx
push str.download_error:_d
call fcn.10052058
mov edx, dword [esp + 0x1c]
add esp, 8
cmp dword [edx + 0x18], edi
jb 0x10004f30
mov eax, dword [ebp]
jmp 0x10004f32
mov eax, ebp
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0xb8], 0x10
jb 0x10004f53
mov eax, dword [esp + 0xa4]
push eax
call fcn.10056169
add esp, 4
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], 0
mov byte [esp + 0xa4], 0
cmp dword [esp + 0x9c], edi
jb 0x10004f8a
mov ecx, dword [esp + 0x88]
push ecx
call fcn.10056169
add esp, 4
xor al, al
mov ecx, dword [esp + 0xc4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.10055232
add esp, 0xbc
ret 4