Function at 0x432c20
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x120
mov edi, ecx
mov eax, dword [0x520014]
xor eax, ebp
mov dword [esp + 0x118], eax
push 0x28
call fcn.00489952
add esp, 4
mov esi, eax
mov ecx, eax
push 1
call fcn.004b5120
movzx eax, byte [edi + 0xb]
mov edx, edi
test al, al
jns 0x432c63
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov dword [esp + 8], edi
lea edi, [esp + 0x80]
mov ecx, edi
push eax
push edx
call fcn.00440530
mov ecx, esi
push edi
call fcn.00433860
mov ebx, eax
mov ecx, edi
call fcn.0046d580
test bl, bl
jne 0x432cb3
xor ebx, ebx
test esi, esi
je 0x432c9b
mov ecx, esi
push 1
call fcn.004b51f0
mov ecx, dword [esp + 0x118]
xor ecx, ebp
call fcn.0048a678
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x10], esi
xor eax, eax
dec eax
lea edi, [esp + 0x50]
mov dword [edi + 0x24], eax
mov dword [edi + 0x20], eax
pcmpeqd xmm0, xmm0
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
mov ecx, edi
call fcn.004b59c0
mov ebx, dword [esp + 8]
movzx eax, byte [ebx + 0x35]
mov ecx, edi
push eax
call fcn.004b5a60
lea eax, [ebx + 0x38]
mov dword [esp + 0xc], eax
mov esi, dword [ebx + 0x38]
lea eax, [ebx + 0x3c]
mov dword [esp + 0x18], eax
cmp esi, eax
jne 0x432d70
lea ecx, [esp + 0x80]
push str.application_octet_stream
call fcn.004b43f0
lea edi, [esp + 0x40]
mov ecx, edi
push 0x50444b
call fcn.004b43f0
lea eax, [esp + 0x100]
mov dword [eax], 0xffffffff
mov esi, dword [esp + 0xc]
mov ecx, esi
push edi
push eax
call fcn.00413560
mov ecx, dword [eax]
test ecx, ecx
je 0x4332ba
xor eax, eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x108], eax
movzx ebx, byte [ecx + 0x27]
test bl, bl
jns 0x432e73
mov ebx, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x1c]
jmp 0x432e76
lea ebx, [esp + 0x50]
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x432d7f
mov eax, dword [esi + 0x14]
lea edi, [esi + 0x10]
cmp eax, 0x14
jne 0x432d9d
mov ecx, edi
push 0x14
push str.upload_file_minidump
push 0xffffffffffffffff
push 0
call fcn.0046c810
test eax, eax
je 0x432ddd
lea eax, [esi + 0x1c]
mov ecx, ebx
push eax
push edi
call fcn.004b5a70
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x432dba
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x432db0
jmp 0x432dd0
mov eax, dword [esi + 8]
cmp dword [eax], esi
je 0x432dd0
add esi, 8
mov ecx, dword [esi]
lea esi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x432dc4
mov esi, eax
cmp eax, dword [esp + 0x18]
jne 0x432d74
jmp 0x432cfd
lea ecx, [esp + 0x80]
push 0x14d
push str.SendReport
push 2
call fcn.004b83c0
lea ecx, [esp + 0xbc]
push 0x506467
push str.reserved_key
call fcn.004b45d0
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x432e19
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
add eax, edi
lea ecx, [esp + 0xbc]
push eax
push edi
call fcn.004b45d0
lea ecx, [esp + 0xbc]
push 0x50647b
push str.__discarding_value
call fcn.004b45d0
movzx eax, byte [esi + 0x27]
test al, al
jns 0x432e4f
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
jmp 0x432e52
lea edx, [esi + 0x1c]
add eax, edx
lea ecx, [esp + 0xbc]
push eax
push edx
call fcn.004b45d0
lea ecx, [esp + 0x80]
call fcn.004374c0
jmp 0x432da9
add ecx, 0x1c
lea eax, [ebx + 4]
cmp eax, 0xfffffff0
jae 0x43332e
cmp eax, 0xb
jae 0x432e9b
mov byte [esp + 0x10b], bl
lea esi, [esp + 0x100]
test ebx, ebx
jne 0x432ecf
jmp 0x432eda
lea edi, [ebx + 0x14]
and edi, 0xfffffff0
push edi
mov esi, ecx
call fcn.00489952
mov ecx, esi
add esp, 4
mov esi, eax
mov dword [esp + 0x100], eax
or edi, 0x80000000
mov dword [esp + 0x108], edi
lea edi, [esp + 0x40]
mov dword [esp + 0x104], ebx
push ebx
push ecx
push esi
call fcn.0048cc70
add esp, 0xc
mov byte [esi + ebx], 0
lea esi, [esp + 0x100]
mov ecx, esi
push 4
push str..dmp
call fcn.0046bf20
lea ebx, [esp + 0x34]
mov ecx, ebx
push str.upload_file_minidump
call fcn.004b43f0
lea ecx, [esp + 0x50]
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x14]
push esi
push ebx
call fcn.004b5b70
cmp byte [ebx + 0xb], 0
jns 0x432f2c
push dword [esp + 0x34]
call fcn.00489982
add esp, 4
cmp byte [esp + 0x10b], 0
jns 0x432f45
push dword [esp + 0x100]
call fcn.00489982
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x432f58
push dword [esp + 0x40]
call fcn.00489982
add esp, 4
cmp byte [esp + 0x8b], 0
jns 0x432f71
push dword [esp + 0x80]
call fcn.00489982
add esp, 4
lea eax, [esp + 0x30]
mov dword [eax], 0xffffffff
push eax
call fcn.004b60b0
add esp, 4
lea esi, [esp + 0x44]
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi - 4], esi
lea ecx, [esp + 0x50]
push edi
call fcn.004344e0
mov edi, dword [esi - 4]
cmp edi, esi
je 0x432fe1
lea eax, [edi + 0x10]
mov ecx, dword [esp + 0x30]
lea edx, [edi + 0x1c]
push edx
push eax
call fcn.004b6010
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x432fc5
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x432fbb
jmp 0x432fdb
mov eax, dword [edi + 8]
cmp dword [eax], edi
je 0x432fdb
add edi, 8
mov ecx, dword [edi]
lea edi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x432fcf
mov edi, eax
cmp eax, esi
jne 0x432fa3
mov ebx, dword [esp + 0x30]
lea esi, [esp + 0x2c]
lea ecx, [esp + 0x50]
push esi
call fcn.00433bc0
mov eax, dword [esi]
mov ecx, ebx
push eax
call fcn.004b6070
mov ecx, dword [esp + 0x30]
push 0x404e0000
push 0
call fcn.004b6090
lea ecx, [esp + 0x34]
xor eax, eax
dec eax
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
push str.https:__crash_reports.browser.yandex.net_submit
call fcn.004b43f0
mov eax, 0x5064cc
mov edi, dword [esp + 0xc]
lea ebx, [esp + 0x80]
mov ecx, ebx
mov dword [esp + 0x14], eax
push dword [eax]
call fcn.004b43f0
mov ecx, edi
push ebx
lea eax, [esp + 0x104]
push eax
call fcn.004177e0
mov esi, dword [esp + 0x100]
cmp byte [esp + 0x8b], 0
jns 0x433073
push dword [esp + 0x80]
call fcn.00489982
add esp, 4
cmp esi, dword [esp + 0x18]
je 0x43317b
pxor xmm0, xmm0
movdqa xmmword [esp + 0xf0], xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
movdqa xmmword [esp + 0xb0], xmm0
movdqa xmmword [esp + 0xa0], xmm0
movdqa xmmword [esp + 0x90], xmm0
movdqa xmmword [esp + 0x80], xmm0
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4330e2
mov eax, dword [esi + 0x20]
lea ecx, [esp + 0x20]
push eax
call fcn.0046bd60
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4330fc
mov eax, dword [esi + 0x20]
mov esi, dword [esi + 0x1c]
jmp 0x4330ff
add esi, 0x1c
mov dword [esp + 0x1c], esi
test eax, eax
jne 0x43318f
cmp byte [esp + 0x2b], 0
lea esi, [esp + 0x20]
jns 0x43311a
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov edi, dword [eax + 4]
lea ecx, [esp + 0x34]
push 0
mov ebx, 0x3f
push ebx
call fcn.0046c090
cmp eax, 0xffffffff
mov eax, 0x26
cmove eax, ebx
push esi
push edi
push eax
push str._c_s_s
push 0x80
lea ebx, [esp + 0x94]
push ebx
call fcn.00467d80
add esp, 0x18
cmp byte [esp + 0x2b], 0
mov edi, dword [esp + 0xc]
jns 0x433171
push dword [esp + 0x20]
call fcn.00489982
add esp, 4
lea ecx, [esp + 0x34]
push ebx
call fcn.0046c900
mov eax, dword [esp + 0x14]
add eax, 8
cmp eax, str.product
jne 0x433036
jmp 0x43320b
xor edi, edi
mov esi, eax
mov eax, dword [esp + 0x1c]
movzx ebx, byte [eax + edi]
mov eax, ebx
add al, 0xd0
cmp al, 0xa
jb 0x4331c1
mov eax, ebx
and al, 0xdf
add al, 0xbf
cmp al, 0x1a
jb 0x4331c1
push 5
push ebx
push 0x5064fd
call fcn.0048bcb0
add esp, 0xc
test eax, eax
je 0x4331da
movsx eax, bl
lea ecx, [esp + 0x20]
push eax
call fcn.0046c4b0
inc edi
mov eax, esi
cmp esi, edi
jne 0x433191
jmp 0x43310b
pxor xmm0, xmm0
movdqa xmmword [esp + 0x100], xmm0
push ebx
push str.___02X
push 0x10
lea ebx, [esp + 0x10c]
push ebx
call fcn.00467d80
add esp, 0x10
lea ecx, [esp + 0x20]
push ebx
call fcn.0046c900
jmp 0x4331ce
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x34]
push eax
call fcn.004b6000
xor eax, eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx]
push ebx
call dword [eax + 4]
mov ebx, eax
mov esi, dword [esp + 0x10]
mov ecx, esi
call fcn.004338f0
test bl, bl
je 0x43325e
mov eax, dword [esp + 8]
cmp byte [eax + 0xb], 0
jns 0x433257
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [esp + 0x8b], 0
jns 0x433277
push dword [esp + 0x80]
call fcn.00489982
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x43328a
push dword [esp + 0x34]
call fcn.00489982
add esp, 4
lea ecx, [esp + 0x40]
push dword [ecx + 4]
call fcn.004b4770
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0
test ecx, ecx
je 0x4332ac
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [esp + 0x50]
call fcn.004b5a30
jmp 0x432c8e
mov ebx, eax
push 0x28
call fcn.00489952
add esp, 4
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x18], ecx
movq xmm0, qword [esp + 0x40]
movq qword [eax + 0x10], xmm0
xor edx, edx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x24], edx
mov ecx, dword [esp + 0x100]
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [ebx], eax
mov ecx, dword [esi]
mov ecx, dword [ecx]
test ecx, ecx
je 0x433312
mov edx, ebx
mov ebx, eax
mov dword [esi], ecx
mov eax, dword [edx]
jmp 0x433314
mov ebx, eax
mov esi, dword [esp + 8]
push eax
push dword [esi + 0x3c]
call fcn.00466e50
add esp, 8
inc dword [esi + 0x40]
mov ecx, ebx
jmp 0x432d42
lea ecx, [esp + 0x100]
call fcn.004c9f10
int3