Function at 0x454ba0
Capabilities:
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x69c
mov eax, dword [0x4c07e0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
cmp byte [ebx + 0x52b], 0
je 0x454bd4
mov eax, dword [ebx + 0xc40]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00464e2f
mov esp, ebp
pop ebp
ret
push edi
lea edi, [ebx + 0x284]
mov byte [ebx + 0x52b], 0
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454be7
sub ecx, edx
cmp byte [ebx + ecx + 0x283], 0x5c
jne 0x454c2f
push 0x200
lea eax, [ebp - 0x484]
push 0
push eax
call fcn.00466b60
push edi
lea eax, [ebx + 0x84]
push eax
lea eax, [ebp - 0x484]
push 0x4920ac
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
jmp 0x454cd4
push str.___EMPTY___
push edi
call fcn.00403a10
add esp, 8
test eax, eax
je 0x454d12
push 0x200
lea eax, [ebp - 0x684]
push 0
push eax
call fcn.00466b60
push edi
lea eax, [ebx + 0x84]
push eax
lea eax, [ebp - 0x684]
push 0x4920ac
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 0x200
lea eax, [ebp - 0x484]
push 0
push eax
call fcn.00466b60
lea eax, [ebp - 0x684]
push str.___EMPTY___
push eax
call fcn.00403a10
lea ecx, [ebp - 0x684]
sub eax, ecx
push eax
mov eax, ecx
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00466cc0
add esp, 0x3c
lea eax, [ebp - 0x484]
cmp byte [ebp - 0x484], 0
je 0x454cd4
mov cl, byte [eax + 1]
lea eax, [eax + 1]
cmp cl, 0x2f
jne 0x454cd0
mov byte [eax], 0x5c
jmp 0x454cc0
test cl, cl
jne 0x454cc0
push 0
lea eax, [ebp - 0x484]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExA]
push 1
push str.Empty_Folder_Created
mov ecx, ebx
call fcn.004562f0
pop edi
mov dword [ebx + 0xc40], 2
mov eax, 2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00464e2f
mov esp, ebp
pop ebp
ret
push esi
mov esi, edi
cmp byte [esi], 0
je 0x454d26
nop word [eax + eax]
inc esi
cmp byte [esi], 0
jne 0x454d20
cmp esi, edi
jb 0x454d3f
nop word [eax + eax]
mov al, byte [esi]
cmp al, 0x5c
je 0x454d3f
cmp al, 0x2f
je 0x454d3f
dec esi
cmp esi, edi
jae 0x454d30
mov ecx, dword [0x4c3118]
inc esi
push 1
push str.nickonxfers
call fcn.004038d0
lea ecx, [ebx + 0xc54]
test eax, eax
je 0x454d63
push 0x4c4e88
jmp 0x454d68
push str.__Anonymous__
call fcn.00460860
cmp esi, edi
jbe 0x454e46
lea eax, [ebx + 0x84]
push eax
lea edi, [ebx + 0x72c]
push 0x200
push edi
call fcn.0046b5c5
add esp, 0xc
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x454d91
mov ax, word [0x496378]
mov ecx, esi
mov word [edi], ax
xor edx, edx
lea edi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454db0
sub ecx, edi
dec ecx
add ecx, esi
mov al, byte [ecx]
cmp al, 0x2f
je 0x454dcf
test al, al
je 0x454dcf
mov al, byte [ecx - 1]
dec ecx
inc edx
cmp al, 0x2f
jne 0x454dc2
lea edi, [ebx + 0x284]
mov ecx, edi
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454de0
sub ecx, esi
lea esi, [ebx + 0x72c]
sub ecx, edx
dec ecx
push ecx
push edi
push esi
call fcn.00478f40
mov eax, esi
add esp, 0xc
cmp byte [eax], 0
je 0x454e19
mov cl, byte [eax]
cmp cl, 0x2f
je 0x454e10
cmp cl, 0x5c
jne 0x454e13
mov byte [eax], 0x5c
inc eax
cmp byte [eax], 0
jne 0x454e04
lea eax, [ebx + 0x72e]
push eax
call fcn.0044e4d0
push esi
call fcn.00457540
lea ecx, [ebx + 0x84]
add esp, 8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454e37
sub ecx, edx
mov dword [ebx + 0xbec], ecx
lea ecx, [ebx + 0x84]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454e50
sub ecx, edx
push 0x200
push 0
lea eax, [ecx + 1]
mov dword [ebx + 0xb2c], eax
lea eax, [ebp - 0x284]
push eax
call fcn.00466b60
push 0x80
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.00466b60
push edi
lea eax, [ebp - 0x284]
push 0x200
push eax
call fcn.0046b5c5
add esp, 0x24
lea esi, [ebp - 0x284]
cmp byte [ebp - 0x284], 0
je 0x454ec0
nop dword [eax]
inc esi
cmp byte [esi], 0
jne 0x454eb0
lea eax, [ebp - 0x284]
cmp esi, eax
jb 0x454f02
mov al, byte [esi]
cmp al, 0x5c
je 0x454edb
cmp al, 0x2f
je 0x454edb
cmp al, 0x2e
je 0x454edb
dec esi
lea eax, [ebp - 0x284]
cmp esi, eax
jae 0x454ec0
jmp 0x454f02
lea eax, [ebp - 0x284]
cmp esi, eax
jb 0x454f02
cmp byte [esi], 0x2e
jne 0x454f02
push esi
lea eax, [ebp - 0x84]
push 0x80
push eax
call fcn.0046b5c5
add esp, 0xc
mov byte [esi], 0
mov ecx, dword [0x4c3118]
push 1
push str.download_only_on
mov dword [ebp - 0x698], 0
call fcn.004038d0
neg eax
lea edi, [ebx + 0x72c]
mov ecx, edi
mov edx, edi
sbb eax, eax
and eax, 0xffffff02
add eax, 0xff
mov dword [ebp - 0x69c], eax
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454f40
sub ecx, esi
lea eax, [ebx + 0x72c]
add eax, ecx
cmp edx, eax
jae 0x454f73
cmp byte [edx], 0x2f
jne 0x454f5d
mov byte [edx], 0x5c
mov ecx, edi
inc edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454f63
sub ecx, esi
lea eax, [edi + ecx]
cmp edx, eax
jb 0x454f55
cmp dword [ebp - 0x69c], 0
jle 0x455094
lea esi, [ebx + 0x52c]
nop word [eax + eax]
mov eax, dword [ebx + 0xb94]
cmp eax, 0xffffffff
je 0x454fa2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebx + 0xb98]
cmp eax, 0xffffffff
je 0x454fb4
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x698]
test eax, eax
je 0x454fe8
lea ecx, [ebp - 0x84]
inc eax
push ecx
push eax
lea eax, [ebp - 0x284]
push eax
push 0x5c
lea eax, [ebx + 0x84]
push eax
push str._s_c_s._d_s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
jmp 0x45500e
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x284]
push eax
push 0x5c
lea eax, [ebx + 0x84]
push eax
push str._s_c_s_s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [ebx + 0x72e]
push eax
call fcn.0044e4d0
push str..WASTESTATE
push edi
push 0x491630
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
push edi
mov dword [ebx + 0xb98], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebx + 0xb94], eax
cmp eax, 0xffffffff
je 0x455094
cmp dword [ebx + 0xb98], 0xffffffff
jne 0x455094
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp eax, dword [ebp - 0x69c]
jl 0x454f90
lea esi, [ebx + 4]
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4550a0
sub ecx, edx
cmp ecx, 0x22
jb 0x455247
lea eax, [ebp - 0x694]
push eax
push esi
call fcn.0044d530
add esp, 8
test eax, eax
jne 0x455247
lea esi, [ebx + 0x52c]
mov ecx, esi
mov edx, esi
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4550d7
sub ecx, edi
lea eax, [ebx + 0x52c]
add eax, ecx
cmp edx, eax
jae 0x455110
nop dword [eax]
cmp byte [edx], 0x2f
jne 0x4550f8
mov byte [edx], 0x5c
mov ecx, esi
inc edx
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x455100
sub ecx, edi
lea eax, [esi + ecx]
cmp edx, eax
jb 0x4550f0
mov eax, dword [ebp - 0x69c]
cmp dword [ebp - 0x698], eax
jl 0x45517b
lea eax, [ebx + 4]
mov dword [ebx + 0xc40], 3
push eax
push str.Declared_existing_file_as_completed._GUID_s
push 6
call fcn.00401ad0
add esp, 0xc
mov ecx, ebx
push 1
push str.Downloaded_File_Already
call fcn.004562f0
mov eax, dword [ebx + 0xb94]
cmp eax, 0xffffffff
je 0x455165
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx + 0xb94], 0xffffffff
pop esi
pop edi
mov eax, 3
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00464e2f
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0xb98], 0xffffffff
jne 0x4551aa
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebx + 0xb98], eax
cmp dword [ebx + 0xb94], 0xffffffff
jne 0x4551e6
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
lea eax, [ebx + 0x72c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebx + 0xb94], eax
cmp eax, 0xffffffff
jne 0x4551e6
push 1
push str.Error_opening_output_file
jmp 0x45524e
push 0
mov dword [ebx + 0xc28], 0
mov dword [ebx + 0xc24], 0
call fcn.00457a70
add esp, 4
mov ecx, ebx
add eax, 0x78
mov dword [ebx + 0xc48], eax
adc edx, 0
mov dword [ebx + 0xc4c], edx
call fcn.00456bf0
test al, al
jne 0x45522d
mov dword [ebx + 0xc40], 1
jmp 0x455255
pop esi
pop edi
mov byte [ebx + 0x52b], 1
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00464e2f
mov esp, ebp
pop ebp
ret
push 1
push str.Malformed_address
mov ecx, ebx
call fcn.004562f0
mov ecx, dword [ebp - 4]
mov eax, 1
pop esi
pop edi
xor ecx, ebp
pop ebx
call fcn.00464e2f
mov esp, ebp
pop ebp
ret