Function at 0x42ea60
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4a8a66
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x474
mov eax, dword [0x4d1788]
push ebx
push ebp
push esi
xor ebp, ebp
mov dword [esp + 0x47c], eax
push edi
mov esi, ecx
mov dword [esp + 0x38], ebp
lea eax, [esi + 0xc4]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x490], ebp
call fcn.0040a7d0
lea edx, [esp + 0x494]
lea ecx, [esi + 0x130]
push edx
mov byte [esp + 0x490], 1
call fcn.00402060
lea eax, [esp + 0x494]
push eax
lea ecx, [esp + 0x20]
push 0x4af188
push ecx
call fcn.00402480
push 0x4af194
push eax
lea edx, [esp + 0x28]
push edx
mov byte [esp + 0x4a4], 2
call fcn.004023c0
mov eax, dword [eax]
add esp, 0x18
cmp eax, ebp
lea edi, [esi + 0x12c]
mov dword [esp + 0x34], edi
jne 0x42eb0c
or eax, 0xffffffff
jmp 0x42eb2f
mov ecx, dword [edi]
cmp dword [ecx - 0xc], ebp
jge 0x42eb18
or eax, 0xffffffff
jmp 0x42eb2f
push eax
push ecx
call fcn.0047e729
add esp, 8
cmp eax, ebp
jne 0x42eb2b
or eax, 0xffffffff
jmp 0x42eb2f
sub eax, dword [edi]
sar eax, 1
cmp eax, 0xffffffff
mov eax, dword [esp + 0x14]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42eb53
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x48c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42eb79
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, bl
jne 0x42f411
mov ecx, dword [0x4d2db8]
cmp ecx, ebp
je 0x42eb97
lea eax, [esp + 0x60]
push eax
call fcn.00440930
jmp 0x42eb9b
mov dword [esp + 0x60], ebp
call fcn.004951e5
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x494], 3
call fcn.0042e730
add esp, 8
mov eax, dword [eax]
push eax
mov byte [esp + 0x490], 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [esp + 0x498]
push eax
push ebx
lea edx, [esp + 0x28]
push str.http:__update.speedup.ku6.com_basedownload__s.php_c36e090518t_ug_s
push edx
call fcn.004022f0
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x14
mov byte [esp + 0x48c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ec1a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov edi, dword [esp + 0x1c]
push ebp
push ebp
push 0x104
lea eax, [esp + 0x284]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
call fcn.00404200
push ebp
call fcn.0040fb90
add esp, 0x18
cmp eax, 0x80004005
jne 0x42ec85
lea eax, [edi - 0x10]
mov byte [esp + 0x48c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ec6c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48c], 0
call fcn.0040a830
lea eax, [ebx - 0x10]
jmp 0x42f42c
push ecx
lea eax, [esp + 0x27c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00404200
lea ecx, [esp + 0x4c]
call fcn.00409a00
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4ae7d8
mov byte [esp + 0x494], 5
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x4b26c8
mov byte [esp + 0x498], 6
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x4b26c0
mov byte [esp + 0x49c], 7
call fcn.00404200
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x49c], 5
call fcn.0042e1d0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4ae7d8
mov byte [esp + 0x494], 8
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.SaveFile
mov byte [esp + 0x498], 9
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4b26c0
mov byte [esp + 0x49c], 0xa
call fcn.00404200
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x58]
mov byte [esp + 0x49c], 8
call fcn.0042e1d0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4ae7d8
mov byte [esp + 0x494], 0xb
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.Title
mov byte [esp + 0x498], 0xc
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4b26c0
mov byte [esp + 0x49c], 0xd
call fcn.00404200
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x49c], 0xb
call fcn.0042e1d0
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x24]
push str.ck_W:N
push edx
mov byte [esp + 0x498], 0xe
call fcn.00402480
push 0x4b2688
push eax
lea eax, [esp + 0x28]
mov bl, 0xf
push eax
mov byte [esp + 0x4a4], bl
call fcn.004023c0
add esp, 0x18
mov eax, dword [eax]
push eax
push 0x417
mov ecx, esi
mov byte [esp + 0x494], 0x10
call fcn.00499b8c
mov ecx, eax
call fcn.00499c65
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x48c], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ee40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x48c], 0xe
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ee66
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 0x4b2670
push 0x418
mov ecx, esi
call fcn.00499b8c
mov ecx, eax
call fcn.00499c65
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4ae7d8
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x4b2668
mov byte [esp + 0x498], 0x11
call fcn.00404200
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4b26c0
mov byte [esp + 0x49c], 0x12
call fcn.00404200
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x49c], 0xe
call fcn.0042e1d0
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], ebp
mov bl, 0x13
mov byte [esp + 0x48c], bl
je 0x42f346
mov edx, dword [esp + 0x10]
cmp dword [edx - 0xc], ebp
je 0x42f346
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], ebp
je 0x42f346
push 5
mov ecx, esi
call fcn.00499cdf
mov ecx, dword [esi + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_BringWindowToTop]
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebp
jl 0x42ef78
push str._localcache_
push eax
call fcn.0047e729
add esp, 8
cmp eax, ebp
je 0x42ef78
sub eax, dword [esp + 0x18]
sar eax, 1
cmp eax, 0xffffffff
je 0x42ef78
lea edx, [esp + 0x20]
push edx
mov ecx, 0x4d2cb0
call fcn.004193e0
mov eax, dword [eax]
push eax
push str._localcache_
lea ecx, [esp + 0x20]
mov byte [esp + 0x494], 0x14
call fcn.00406d70
lea ecx, [esp + 0x20]
mov byte [esp + 0x48c], bl
call fcn.004017e0
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], ebp
jl 0x42efae
push str._ExePath_
push eax
call fcn.0047e729
add esp, 8
cmp eax, ebp
je 0x42efae
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x42efae
mov eax, dword [0x4d2c7c]
push eax
push str._ExePath_
jmp 0x42f038
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], ebp
jl 0x42eff4
push str._SysPath_
push eax
call fcn.0047e729
add esp, 8
cmp eax, ebp
je 0x42eff4
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x42eff4
push 0x104
lea ecx, [esp + 0x74]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x42f041
lea edx, [esp + 0x70]
push edx
push str._SysPath_
jmp 0x42f038
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], ebp
jl 0x42f041
push str._TempPath_
push eax
call fcn.0047e729
add esp, 8
cmp eax, ebp
je 0x42f041
sub eax, dword [esp + 0x10]
sar eax, 1
cmp eax, 0xffffffff
je 0x42f041
lea eax, [esp + 0x70]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x42f041
lea ecx, [esp + 0x70]
push ecx
push str._TempPath_
lea ecx, [esp + 0x18]
call fcn.00406d70
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edi, [esi + 0xe0]
mov dword [esi + 0x128], ebp
mov dword [edi + 0x40], ebp
mov dword [edi + 0x34], ebp
mov ecx, edi
mov dword [edi + 0x30], ebp
call fcn.0042dee0
mov edx, dword [esp + 0x10]
lea eax, [esi + 0x70]
push eax
push ebp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00404200
mov eax, dword [esp + 0x24]
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
mov byte [esp + 0x4a0], 0x15
call fcn.00404200
push ebp
mov byte [esp + 0x4a0], bl
call fcn.0040f000
add esp, 0x14
mov ecx, edi
mov ebp, eax
call fcn.0040d5a0
xor edi, edi
test ebp, ebp
jne 0x42f113
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x42f126
push ebp
push ebp
push ecx
lea edx, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00401990
push ecx
mov dword [esp + 0x40], esp
mov ebx, esp
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
mov byte [esp + 0x4a4], 0x16
call fcn.00401990
push ebx
call fcn.0042e9c0
add esp, 8
mov byte [esp + 0x49c], 0x13
call fcn.0042e830
add esp, 0x10
test eax, eax
jne 0x42f126
jmp 0x42f121
mov ecx, dword [esi + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x42f126
mov edi, 1
push 0
mov ecx, esi
call fcn.00499cdf
test edi, edi
je 0x42f228
push 0x40024
push 0x4af41c
push 0x4b25ec
mov ecx, esi
call fcn.00496d38
cmp eax, 6
jne 0x42f172
push ecx
lea edx, [esp + 0x498]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.00401990
mov ecx, esi
call fcn.0042ea60
jmp 0x42f2e2
lea eax, [esp + 0x494]
push eax
lea ecx, [esp + 0x18]
push 0x4af188
push ecx
call fcn.00402480
push 0x4af194
push eax
lea edx, [esp + 0x34]
push edx
mov byte [esp + 0x4a4], 0x17
call fcn.004023c0
add esp, 0x18
mov ecx, dword [esp + 0x34]
push eax
mov byte [esp + 0x490], 0x18
call fcn.00410d40
lea ecx, [esp + 0x20]
call fcn.004017e0
lea ecx, [esp + 0x14]
call fcn.004017e0
lea ecx, [esp + 0x2c]
call fcn.004017e0
lea ecx, [esp + 0x28]
call fcn.004017e0
lea ecx, [esp + 0x10]
call fcn.004017e0
lea ecx, [esp + 0x18]
call fcn.004017e0
lea ecx, [esp + 0x48]
mov byte [esp + 0x48c], 3
call fcn.00409300
lea ecx, [esp + 0x1c]
call fcn.004017e0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48c], 0
call fcn.0040a830
lea ecx, [esp + 0x494]
call fcn.004017e0
jmp 0x42f44e
test ebp, ebp
jne 0x42f2db
lea ecx, [esp + 0x14]
call fcn.004017c0
mov bl, 0x19
push 0x5c
lea ecx, [esp + 0x14]
mov byte [esp + 0x490], bl
call fcn.0040ef00
cmp eax, 0xffffffff
je 0x42f283
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x18]
call fcn.00406a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x490], 0x1a
call fcn.00402060
lea ecx, [esp + 0x34]
mov byte [esp + 0x48c], bl
call fcn.004017e0
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 0xc]
test eax, eax
jne 0x42f2a0
push 0
lea ecx, [esp + 0x3c]
call fcn.00404200
mov ebx, 1
jmp 0x42f2a8
mov bl, byte [esp + 0x38]
lea eax, [esp + 0x14]
mov eax, dword [eax]
mov edx, dword [esp + 0x10]
push 5
push eax
push 0x4b25e4
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
test bl, 1
je 0x42f2d2
lea ecx, [esp + 0x38]
call fcn.004017e0
lea ecx, [esp + 0x14]
call fcn.004017e0
xor eax, eax
test ebp, ebp
sete al
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.004017e0
lea ecx, [esp + 0x28]
call fcn.004017e0
lea ecx, [esp + 0x10]
call fcn.004017e0
lea ecx, [esp + 0x18]
call fcn.004017e0
lea ecx, [esp + 0x48]
mov byte [esp + 0x48c], 3
call fcn.00409300
lea ecx, [esp + 0x1c]
call fcn.004017e0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48c], 0
call fcn.0040a830
lea ecx, [esp + 0x494]
call fcn.004017e0
mov eax, esi
jmp 0x42f450
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0x48c], 0xe
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42f36c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x48c], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42f392
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x48c], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42f3b8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x48c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42f3de
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x48]
mov byte [esp + 0x48c], 3
call fcn.00409300
lea eax, [edi - 0x10]
mov byte [esp + 0x48c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42f411
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48c], 0
call fcn.0040a830
mov eax, dword [esp + 0x494]
add eax, 0xfffffff0
mov dword [esp + 0x48c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42f44e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor eax, eax
mov ecx, dword [esp + 0x484]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x480]
call fcn.0047e6cd
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x480
ret 4