Function at 0x5278b0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x628
mov dword [ebp - 0x628], ebx
mov dword [ebp - 0x624], esi
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0x518], 0
lea ecx, [ebp - 0x4d0]
lea edx, [ebp - 0x4e8]
mov eax, 1
call fcn.0040b250
call fcn.0040d0d0
push eax
test eax, eax
jne 0x52802f
lea ecx, [ebp - 0x4f8]
lea edx, [ebp - 0x510]
mov eax, 1
call fcn.0040b250
call fcn.0040d0d0
push eax
test eax, eax
jne 0x528011
lea eax, [ebp - 0x518]
call fcn.00403a80
mov dword [ebp - 0x518], 0
call fcn.005284c0
lea edx, [ebp - 0x518]
call fcn.004072b0
mov eax, dword [ebp - 0x518]
lea edx, [ebp - 0x4a8]
call fcn.00439020
mov eax, dword [ebp - 0x4a8]
call fcn.004409a0
test al, al
je 0x52802a
mov edx, dword [ebp - 0x4a8]
lea eax, [ebp - 0x4ac]
mov ecx, str.search.ini
call fcn.00406f40
mov edx, dword [ebp - 0x4a8]
lea eax, [ebp - 0x4b0]
mov ecx, str.search2.ini
call fcn.00406f40
mov dword [ebp - 0x4bc], 1
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4c4], 0
mov ecx, dword [ebp - 0x4ac]
lea eax, [ebp - 0x618]
mov edx, 0xff
call fcn.004071e0
lea edx, [ebp - 0x618]
lea eax, [ebp - 0x250]
call fcn.00412f30
lea eax, [ebp - 0x250]
call fcn.0040f730
call fcn.0040c8b0
mov ecx, dword [ebp - 0x4b0]
lea eax, [ebp - 0x618]
mov edx, 0xff
call fcn.004071e0
lea edx, [ebp - 0x618]
lea eax, [ebp - 0x4a0]
call fcn.00412f30
lea eax, [ebp - 0x4a0]
call fcn.0040f6f0
call fcn.0040c8b0
jmp 0x527b83
lea eax, [ebp - 0x4a4]
call fcn.00403a80
lea edx, [ebp - 0x4a4]
lea eax, [ebp - 0x250]
call fcn.004101a0
call fcn.0040c8b0
lea eax, [ebp - 0x250]
call fcn.0040ff60
call fcn.0040c8b0
mov edx, dword [ebp - 0x4a4]
mov eax, str._Search_Engine
call fcn.0043f2d0
mov dword [ebp - 0x4b8], eax
test eax, eax
jle 0x527aa6
inc dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x4a4]
mov eax, str.Default_Search
call fcn.0043f2d0
mov dword [ebp - 0x4b4], eax
test eax, eax
jle 0x527b34
mov edx, dword [ebp - 0x4a4]
mov eax, str.Default_Search2DD2455F644F4046B8552CCAD1FD8112
call fcn.0043f2d0
mov dword [ebp - 0x4b4], eax
test eax, eax
jle 0x527b14
lea eax, [ebp - 0x250]
call fcn.00412f40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.00412f40
call fcn.0040c8b0
mov eax, dword [ebp - 0x4b0]
test eax, eax
jne 0x527b09
mov eax, 0x580e00
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x52802a
mov ebx, str.Default_Search2DD2455F644F4046B8552CCAD1FD8112
lea eax, [ebp - 0x4a4]
call fcn.00403a80
mov dword [ebp - 0x4a4], ebx
mov dword [ebp - 0x4c0], 0xffffffff
mov edx, dword [ebp - 0x4a4]
mov eax, str.UNIQUEID2DD2455F644F4046B8552CCAD1FD8112
call fcn.0043f2d0
mov dword [ebp - 0x4b4], eax
test eax, eax
jle 0x527b58
mov dword [ebp - 0x4c4], 0xffffffff
mov ecx, dword [ebp - 0x4a4]
lea edx, [ebp - 0x4a0]
mov eax, 0
call fcn.0040fcd0
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea eax, [ebp - 0x250]
call fcn.0040f840
mov bl, al
call fcn.0040c8b0
test bl, bl
je 0x527a55
mov eax, dword [ebp - 0x4c0]
test eax, eax
jne 0x527c53
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dbb4
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._t_Options_
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._Default_Search2DD2455F644F4046B8552CCAD1FD8112
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dbb4
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
mov eax, dword [ebp - 0x4c4]
test eax, eax
jne 0x527fcb
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dbb4
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea eax, [ebp - 0x518]
call fcn.00403a80
mov dword [ebp - 0x518], 0
mov eax, str._Search_Engine
mov dword [ebp - 0x524], eax
lea eax, [ebp - 0x61c]
call fcn.00403a80
mov dword [ebp - 0x61c], 0
lea edx, [ebp - 0x61c]
mov eax, dword [ebp - 0x4bc]
call fcn.00439440
lea edi, [ebp - 0x520]
lea esi, [ebp - 0x61c]
cld
movsd dword es:[edi], dword [esi]
mov eax, 0x57dc00
mov dword [ebp - 0x51c], eax
lea edx, [ebp - 0x524]
lea eax, [ebp - 0x518]
mov ecx, 2
call fcn.004070b0
mov ecx, dword [ebp - 0x518]
lea edx, [ebp - 0x4a0]
mov eax, 0
call fcn.0040fcd0
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._UNIQUEID2DD2455F644F4046B8552CCAD1FD8112
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dc30
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._nVerbtext0
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str.PURLhttp:__www.google.com_cse_cx003532357541664755234:5edtql_0pbmieUTF_8q_s
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dca8
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str.XSuggest_URLhttp:__clients1.google.com_complete_search_qSearchTermclientoperahlen
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dd1c
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dd24
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._tIs_post0
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._bUseTLD0
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dd44
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dd58
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._rSearch_Type0
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._vPosition_1
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, 0x57dd88
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea edx, [ebp - 0x4a0]
mov ecx, str._tDeleted0
mov eax, 0
call fcn.0040fb40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.0040fa90
call fcn.0040c8b0
lea eax, [ebp - 0x250]
call fcn.00412f40
call fcn.0040c8b0
lea eax, [ebp - 0x4a0]
call fcn.00412f40
call fcn.0040c8b0
mov eax, dword [ebp - 0x4ac]
test eax, eax
jne 0x527ffa
mov eax, 0x580e00
push eax
call sub.kernel32.dll_DeleteFileA
mov edx, dword [ebp - 0x4ac]
mov eax, dword [ebp - 0x4b0]
call fcn.00440c80
call fcn.0040b520
pop eax
test eax, eax
je 0x52802f
sub eax, 1
je 0x528025
sub eax, 1
je 0x52802f
call fcn.0040b690
pop eax
push 2
jmp 0x528011
call fcn.0040b520
lea eax, [ebp - 0x61c]
call fcn.00403a80
mov dword [ebp - 0x61c], 0
lea eax, [ebp - 0x518]
call fcn.00403a80
mov dword [ebp - 0x518], 0
lea eax, [ebp - 0x4a4]
call fcn.00403a80
mov dword [ebp - 0x4a4], 0
lea eax, [ebp - 0x4a8]
call fcn.00403a80
mov dword [ebp - 0x4a8], 0
lea eax, [ebp - 0x4ac]
call fcn.00403a80
mov dword [ebp - 0x4ac], 0
lea eax, [ebp - 0x4b0]
call fcn.00403a80
mov dword [ebp - 0x4b0], 0
pop eax
test eax, eax
je 0x5280bc
call fcn.0040b690
mov ebx, dword [ebp - 0x628]
mov esi, dword [ebp - 0x624]
mov edi, dword [ebp - 0x620]
leave
ret