Function at 0x4113f0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66ac40
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x71cf78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x2a4]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x284], eax
call fcn.004413d3
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], 0
call fcn.00414e10
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x274], eax
call fcn.00423b74
mov ecx, eax
test ecx, ecx
je 0x411940
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x690b5c
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 2
call fcn.00402920
test al, al
jne 0x4114ae
push 1
push 0x690b5c
lea ecx, [ebp - 0x26c]
call fcn.00408780
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00409f70
mov edx, dword [ebp - 0x26c]
or ebx, 0xffffffff
mov byte [ebp - 4], 1
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4114e8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov edi, esp
mov dword [ebp - 0x274], edi
call fcn.00423b74
mov ecx, eax
test ecx, ecx
je 0x411940
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00402920
test al, al
jne 0x411539
test esi, esi
jne 0x411522
xor ecx, ecx
jmp 0x411530
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411527
sub ecx, edx
push ecx
push esi
mov ecx, edi
call fcn.00408780
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 1
call fcn.004155f0
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00415040
cmp dword [ebp - 0x29c], 2
jne 0x4118cf
call fcn.00423b74
mov ecx, eax
test ecx, ecx
je 0x411940
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x290], esi
mov byte [ebp - 4], 5
call fcn.00423b74
mov ecx, eax
test ecx, ecx
je 0x41194a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x690b68
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 6
call fcn.00402920
test al, al
jne 0x4115cf
push 1
push 0x690b68
lea ecx, [ebp - 0x270]
call fcn.00408780
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 7
jle 0x411954
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00409fe0
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 8
call fcn.00423b74
mov ecx, eax
test ecx, ecx
je 0x411959
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x690b68
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 9
call fcn.00402920
test al, al
jne 0x411649
push 1
push 0x690b68
lea ecx, [ebp - 0x26c]
call fcn.00408780
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xa
jle 0x411963
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00409fe0
push str..zip
push eax
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0xb
push eax
call fcn.00406fc0
mov ecx, dword [edi]
push 0
push dword [eax]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x28c], ecx
call fcn.004177e0
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x27c], eax
push ecx
push 0xffffffffffffffff
push eax
call fcn.00417660
mov eax, dword [ebp - 0x13c]
add esp, 0x2c
xor edi, edi
test eax, eax
jle 0x4116fc
mov esi, dword [ebp - 0x27c]
mov ebx, eax
nop word [eax + eax]
lea eax, [ebp - 0x268]
push eax
push edi
push esi
call fcn.00417660
push dword [ebp - 0x28c]
push edi
push esi
call fcn.00417e50
inc edi
add esp, 0x18
cmp edi, ebx
jl 0x4116d0
mov esi, dword [ebp - 0x290]
or ebx, 0xffffffff
push dword [ebp - 0x27c]
call fcn.00416b80
mov edx, dword [ebp - 0x284]
add esp, 4
mov byte [ebp - 4], 0xb
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41172b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41174c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 8
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41176d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x274]
mov eax, ebx
mov byte [ebp - 4], 7
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41178e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4117af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00423b74
mov ecx, eax
test ecx, ecx
je 0x411968
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x690b68
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xd
call fcn.00402920
test al, al
jne 0x4117f6
push 1
push 0x690b68
lea ecx, [ebp - 0x270]
call fcn.00408780
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xe
jle 0x411972
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00409fe0
push str..zip
push eax
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xf
push eax
call fcn.00406fc0
add esp, 0x18
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 0x274]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41185e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41187f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4118a0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
push esi
call fcn.00407700
mov edi, dword [ebp - 0x280]
add eax, 0x10
add esp, 4
mov byte [ebp - 4], 1
mov dword [edi], eax
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x41190c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41190c
call fcn.00423b74
mov ecx, eax
test ecx, ecx
je 0x411940
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edi, dword [ebp - 0x280]
add eax, 0x10
mov dword [edi], eax
push 0x68ffcf
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.00402920
test al, al
jne 0x41190c
push 0
push 0x68ffcf
mov ecx, edi
call fcn.00408780
lea ecx, [ebp - 0x2b4]
call fcn.00414f70
lea ecx, [ebp - 0x2a4]
call fcn.004413ea
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006027d7
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004020e0
push 0x80004005
call fcn.004020e0
call fcn.004209c4
push 0x80004005
call fcn.004020e0
call fcn.004209c4
push 0x80004005
call fcn.004020e0
call fcn.004209c4
int3