Function at 0x465120
Capabilities:
Delete file
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x564844
mov eax, dword fs:[0]
push eax
sub esp, 0x448
mov eax, dword [0x5b3680]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x5ba1b0]
lea ecx, [ebp - 0x420]
push str.GlobalGetSSts
mov dword [ebp - 0x41c], esi
call fcn.004031c0
mov dword [ebp - 4], 0
cmp dword [esi + 0x180], 0
je 0x465193
push dword [esi + 0x17c]
lea eax, [ebp - 0x420]
push 0x58b3a0
push eax
call fcn.00443ea0
add esp, 0xc
call fcn.00402a00
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4651af
push 0x80004005
call fcn.004027b0
mov eax, dword [edx]
mov ecx, edx
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x414], eax
mov byte [ebp - 4], 2
call fcn.00402a00
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4651e1
push 0x80004005
call fcn.004027b0
mov eax, dword [edx]
mov ecx, edx
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x424], eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x418]
push 1
push eax
mov ecx, esi
call fcn.0045c090
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x414]
push eax
call fcn.00416320
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x424]
call fcn.00416320
mov byte [ebp - 4], 4
or eax, 0xffffffff
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x46524d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.online.jpg
push dword [esi + 0x17c]
lea eax, [ebp - 0x414]
push 0x58c2b4
push eax
call fcn.00443ea0
add esp, 0x10
push dword [ebp - 0x420]
push 0
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov edi, eax
mov dword [esi + 0xec], edi
test edi, edi
je 0x4654b6
push 0x3ff
lea eax, [ebp - 0x40f]
push 0
push eax
call fcn.00531bd0
add esp, 0xc
mov dword [ebp - 0x42a], 1
mov ax, word [ebp - 0x428]
mov word [ebp - 0x430], 0
mov dword [ebp - 0x42e], 0x20009110
movq xmm0, qword [ebp - 0x430]
push edi
movq qword [ebp - 0x410], xmm0
mov word [ebp - 0x408], ax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0x58bc64
push dword [ebp - 0x414]
call fcn.0052e5ea
mov ecx, dword [sym.imp.WS2_32.dll_send]
mov edi, eax
mov eax, dword [ebp + 8]
add esp, 8
mov esi, 0xa
test edi, edi
jne 0x46535c
mov edi, edi
test esi, esi
js 0x465385
push 0
push 0xb
lea edx, [ebp - 0x410]
mov byte [ebp - 0x406], 0
push edx
push eax
call ecx
cmp eax, 0xffffffff
je 0x465376
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x58bc64
push dword [ebp - 0x414]
call fcn.0052e5ea
mov ecx, dword [sym.imp.WS2_32.dll_send]
mov edi, eax
mov eax, dword [ebp + 8]
add esp, 8
dec esi
test edi, edi
je 0x465310
push 0
push 0xb
lea edx, [ebp - 0x410]
mov byte [ebp - 0x406], 1
push edx
push eax
call ecx
cmp eax, 0xffffffff
jne 0x4653a8
mov dword [ebp - 0x41c], 0
jmp 0x4654c0
test edi, edi
jne 0x46535c
push edi
push 0xb
lea edx, [ebp - 0x410]
mov byte [ebp - 0x406], 3
push edx
push eax
call ecx
mov esi, dword [ebp - 0x41c]
jmp 0x4654aa
push edi
call fcn.0052c324
add esp, 4
lea ecx, [ebp - 0x418]
call fcn.00402b10
mov byte [ebp - 4], 7
lea eax, [ebp - 0x418]
mov esi, dword [ebp - 0x41c]
push 0x583ed8
push dword [esi + 0x17c]
push str._sonline._s
push eax
call fcn.00415d20
add esp, 0xc
push dword [ebp - 0x418]
push dword [ebp - 0x424]
push dword [ebp + 8]
call fcn.0046e800
push 0
lea ecx, [ebp - 0x414]
call fcn.00455e90
push 0
lea ecx, [ebp - 0x414]
call fcn.00455e90
mov eax, dword [ebp - 0x414]
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x44c], xmm0
mov dword [ebp - 0x448], eax
mov eax, 0x10
mov word [ebp - 0x440], ax
lea eax, [ebp - 0x450]
movq qword [ebp - 0x43c], xmm0
mov word [ebp - 0x434], 0
push eax
mov dword [ebp - 0x450], 0
mov dword [ebp - 0x44c], 3
mov dword [ebp - 0x43e], 0
mov dword [ebp - 0x43a], 0
mov dword [ebp - 0x436], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov byte [ebp - 4], 4
or ecx, 0xffffffff
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4654aa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [esi + 0xec]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x41c], 1
mov byte [ebp - 4], 2
or esi, 0xffffffff
mov edx, dword [ebp - 0x424]
mov ecx, esi
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4654e6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, esi
mov edx, dword [ebp - 0x414]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x465509
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edi, dword [ebp - 0x420]
add edi, 0xfffffff0
lea eax, [edi + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x46552d
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005295e2
mov esp, ebp
pop ebp
ret 8