Function at 0x516e70
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10a4
call fcn.00589140
mov eax, dword [0x6aae20]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov byte [ebp - 0x1008], 0
push 0xfff
push 0
lea eax, [ebp - 0x1007]
push eax
call fcn.00588eb0
add esp, 0xc
mov eax, dword [ebp - 8]
add eax, 0x710
push eax
mov ecx, dword [ebp - 8]
call fcn.00514fc0
mov ecx, dword [ebp - 8]
call fcn.005199c0
mov byte [ebp - 0x1009], al
movzx eax, byte [ebp - 0x1009]
test eax, eax
jne 0x516ed9
jmp 0x517557
push 4
mov ecx, dword [ebp - 8]
call fcn.005176b0
mov dword [ebp - 0x1014], 0
mov dword [ebp - 0x1010], 0
mov dword [ebp - 0x101c], 0
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x1024], 0
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x102c], 0
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1034], 0
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x103c], 0
mov dword [ebp - 0x1038], 0
mov dword [ebp - 0x1040], 0
mov dword [ebp - 0x1044], 0
mov byte [ebp - 0x1045], 0
mov byte [ebp - 0x1046], 0
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
jne 0x517423
movzx eax, byte [0x6b2b50]
test eax, eax
jne 0x516fe8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x1098], eax
mov dword [ebp - 0x109c], ecx
mov edx, dword [ebp - 0x1098]
mov eax, dword [ebp - 0x109c]
mov ecx, dword [edx + 0x1d0]
cmp ecx, dword [eax + 0x1d8]
jne 0x516fe8
mov edx, dword [ebp - 0x1098]
mov eax, dword [ebp - 0x109c]
mov ecx, dword [edx + 0x1d4]
cmp ecx, dword [eax + 0x1dc]
jne 0x516fe8
mov byte [0x6b2b50], 1
mov eax, dword [ebp - 0x1010]
push eax
mov ecx, dword [ebp - 0x1014]
push ecx
mov ecx, dword [ebp - 8]
call fcn.005177a0
movzx edx, al
test edx, edx
je 0x517073
push 0x1000
push 0
lea eax, [ebp - 0x1008]
push eax
call fcn.00588eb0
add esp, 0xc
mov ecx, dword [ebp - 8]
add ecx, 0x7b8
call fcn.00411070
push eax
mov ecx, dword [ebp - 8]
call fcn.00511770
push eax
push str.TID_:__5lu____s_is_Download_Complete
lea eax, [ebp - 0x1008]
push eax
call fcn.0058906d
add esp, 0x10
cmp dword [0x6b144c], 0
je 0x51706e
push 0x17
push 0x17
lea eax, [ebp - 0x1008]
push eax
mov ecx, dword [0x6b144c]
mov edx, dword [ecx]
mov eax, dword [0x6b144c]
push eax
mov ecx, dword [edx + 8]
call ecx
jmp 0x517423
mov ecx, dword [ebp - 8]
add ecx, 0x7b8
call fcn.00411070
push eax
call fcn.0050a400
mov dword [ebp - 0x1050], eax
mov dword [ebp - 0x104c], edx
cmp dword [ebp - 0x104c], 0
jl 0x5170c2
jg 0x5170a7
cmp dword [ebp - 0x1050], 0
jbe 0x5170c2
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1050]
mov dword [eax + 0x1020], ecx
mov edx, dword [ebp - 0x104c]
mov dword [eax + 0x1024], edx
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x5170d6
jmp 0x517423
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x1014], eax
mov dword [ebp - 0x1010], edx
mov eax, dword [ebp - 0x1014]
sub eax, dword [ebp - 0x103c]
mov ecx, dword [ebp - 0x1010]
sbb ecx, dword [ebp - 0x1038]
push ecx
push eax
call fcn.005149a0
add esp, 8
mov dword [ebp - 0x109c], eax
mov dword [ebp - 0x1098], edx
cmp dword [ebp - 0x1098], 0
jl 0x517159
jg 0x517131
cmp dword [ebp - 0x109c], 0xf
jb 0x517159
mov ecx, dword [ebp - 8]
call fcn.00520af0
mov ecx, dword [ebp - 8]
call fcn.005213e0
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x103c], eax
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1038], ecx
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x51716d
jmp 0x517423
mov ecx, dword [ebp - 8]
call fcn.00517710
movzx eax, al
test eax, eax
jne 0x51719b
mov ecx, dword [ebp - 8]
call fcn.00517770
mov ecx, dword [ebp - 8]
cmp eax, dword [ecx + 0x98]
jle 0x51719b
mov byte [ebp - 0x1046], 1
jmp 0x517423
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x5171af
jmp 0x517423
mov eax, dword [ebp - 0x1010]
push eax
mov ecx, dword [ebp - 0x1014]
push ecx
mov ecx, dword [ebp - 8]
call fcn.005177a0
movzx edx, al
test edx, edx
je 0x5171d1
jmp 0x517423
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x5171e5
jmp 0x517423
mov ecx, dword [ebp - 8]
call fcn.0051b5d0
movzx eax, al
test eax, eax
je 0x517208
mov byte [ebp - 0x1045], 1
mov ecx, dword [ebp - 8]
call fcn.00522950
jmp 0x517423
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x51721c
jmp 0x517423
mov eax, dword [ebp - 0x1014]
sub eax, dword [ebp - 0x1024]
mov ecx, dword [ebp - 0x1010]
sbb ecx, dword [ebp - 0x1020]
push ecx
push eax
call fcn.005149a0
add esp, 8
mov dword [ebp - 0x109c], eax
mov dword [ebp - 0x1098], edx
cmp dword [ebp - 0x1098], 0
jl 0x5172ca
jg 0x51725e
cmp dword [ebp - 0x109c], 8
jb 0x5172ca
mov ecx, dword [ebp - 8]
call fcn.00549460
push 0xf
call fcn.00517620
add esp, 4
push 0x23
call fcn.00517590
add esp, 4
mov eax, dword [ebp - 0x1040]
and eax, reloc.WS2_32.dll_closesocket
jns 0x51728c
dec eax
or eax, 0xfffffffc
inc eax
mov ecx, dword [ebp - 0x1040]
add ecx, 1
mov dword [ebp - 0x1040], ecx
test eax, eax
jne 0x5172ca
push 0x40000
mov ecx, 0x6b35d0
call fcn.00557840
mov ecx, dword [ebp - 8]
call fcn.00519bc0
mov eax, dword [ebp - 8]
mov byte [eax + 0x6d5], 1
mov eax, dword [ebp - 8]
mov byte [eax + 0xa8d], 1
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x5172de
jmp 0x517423
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xd43]
test ecx, ecx
je 0x5172f4
mov ecx, dword [ebp - 8]
call fcn.00547360
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x517308
jmp 0x517423
mov eax, dword [ebp - 0x1014]
sub eax, dword [ebp - 0x1034]
mov ecx, dword [ebp - 0x1010]
sbb ecx, dword [ebp - 0x1030]
push ecx
push eax
call fcn.005149a0
add esp, 8
mov dword [ebp - 0x109c], eax
mov dword [ebp - 0x1098], edx
cmp dword [ebp - 0x1098], 0
jl 0x51736a
jg 0x51734a
cmp dword [ebp - 0x109c], 0xa
jb 0x51736a
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x1034], eax
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1030], ecx
mov ecx, dword [ebp - 8]
call fcn.00522b80
mov ecx, dword [ebp - 8]
call fcn.005109d0
movzx eax, al
test eax, eax
je 0x51737e
jmp 0x517423
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x8d]
test ecx, ecx
jne 0x517391
jmp 0x516f7d
mov ecx, dword [ebp - 0x1014]
sub ecx, dword [ebp - 0x102c]
mov esi, dword [ebp - 0x1010]
sbb esi, dword [ebp - 0x1028]
mov eax, dword [ebp - 0x1044]
cdq
mov dword [ebp - 0x109c], ecx
mov dword [ebp - 0x1098], esi
mov dword [ebp - 0x10a4], eax
mov dword [ebp - 0x10a0], edx
mov edx, dword [ebp - 0x1098]
cmp edx, dword [ebp - 0x10a0]
jl 0x5173e8
jg 0x5173e6
mov eax, dword [ebp - 0x109c]
cmp eax, dword [ebp - 0x10a4]
jb 0x5173e8
jmp 0x51741e
mov eax, dword [ebp - 0x1010]
cmp eax, dword [ebp - 0x1028]
jg 0x51741e
jl 0x517406
mov ecx, dword [ebp - 0x1014]
cmp ecx, dword [ebp - 0x102c]
jae 0x51741e
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x102c], eax
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1028], ecx
jmp 0x516f7d
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xff2]
test ecx, ecx
jne 0x51743d
push 0
push 0
mov ecx, dword [ebp - 8]
call fcn.005177a0
mov ecx, dword [ebp - 8]
call fcn.00522950
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xff2]
neg ecx
sbb ecx, ecx
add ecx, 1
mov byte [ebp - 0x1051], cl
push 0
push 0
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x80]
call eax
movzx eax, byte [ebp - 0x1051]
test eax, eax
je 0x51748e
mov eax, dword [ebp - 8]
add eax, 0x710
push eax
mov ecx, dword [ebp - 8]
call fcn.00515fb0
jmp 0x5174a3
mov ecx, dword [ebp - 8]
add ecx, 0x710
call fcn.00411070
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 8]
call fcn.00511140
push 1
mov ecx, dword [ebp - 8]
call fcn.005176b0
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xff2]
test ecx, ecx
jne 0x5174f5
movzx eax, byte [ebp - 0x1045]
test eax, eax
je 0x5174dd
push 0x4ef6
mov ecx, dword [ebp - 8]
call fcn.005176e0
jmp 0x5174f5
movzx eax, byte [ebp - 0x1046]
test eax, eax
je 0x5174f5
push 0x4ef1
mov ecx, dword [ebp - 8]
call fcn.005176e0
push 0
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 8]
call fcn.00511170
push 0
push 0
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, dword [edx + 0x80]
call eax
push 0xf
call fcn.00517620
add esp, 4
push 0x23
call fcn.00517590
add esp, 4
push 0x2800
mov ecx, 0x6b35d0
call fcn.00557840
push 0x200000
call fcn.00517570
add esp, 4
call fcn.0053cb20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005884bd
mov esp, ebp
pop ebp
ret