Function at 0x404300
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x5f2c53
mov eax, dword fs:[0]
push eax
sub esp, 0x578
mov eax, dword [0x6656b0]
xor eax, esp
mov dword [esp + 0x570], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6656b0]
xor eax, esp
push eax
lea eax, [esp + 0x58c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x59c]
lea eax, [esp + 0x94]
mov edi, ecx
push eax
mov dword [esp + 0x24], edi
call fcn.004ac370
xor ebx, ebx
mov dword [esp + 0x594], ebx
xor ecx, ecx
push ebx
mov eax, 0x622024
lea esi, [esp + 0x60]
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], ebx
mov word [esp + 0x64], cx
call fcn.0040f730
mov byte [esp + 0x594], 1
xor edx, edx
push ebx
mov eax, 0x622024
lea esi, [esp + 0x44]
mov dword [esp + 0x5c], 7
mov dword [esp + 0x58], ebx
mov word [esp + 0x48], dx
call fcn.0040f730
mov byte [esp + 0x594], 2
lea ecx, [esp + 0x1c]
call fcn.00401780
mov byte [esp + 0x594], 3
cmp dword [edi + 0x14], ebx
je 0x404400
mov eax, 8
cmp dword [edi + 0x18], eax
jb 0x4043d7
mov ecx, dword [edi + 4]
jmp 0x4043da
lea ecx, [edi + 4]
cmp dword [ebp + 0x34], eax
jb 0x4043e4
mov eax, dword [ebp + 0x20]
jmp 0x4043e7
lea eax, [ebp + 0x20]
push ecx
push str.Agent_logo
push eax
lea eax, [esp + 0x28]
push str.http:___s__s__s
push eax
call fcn.0040de90
add esp, 0x14
xor ecx, ecx
push ebx
mov eax, 0x622024
lea esi, [esp + 0x28]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], cx
call fcn.0040f730
mov byte [esp + 0x594], 4
mov eax, dword [esp + 0x1c]
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x404433
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x28]
call fcn.0040f730
cmp dword [esp + 0x38], ebx
jne 0x4044f0
lea esi, [ebp + 0xe8]
mov edi, 8
cmp dword [esi + 0x18], edi
jb 0x40446b
mov eax, dword [esi + 4]
jmp 0x40446e
lea eax, [esi + 4]
push ebx
push eax
call fcn.005b9cfa
add esp, 8
test eax, eax
jne 0x4044e0
cmp dword [esi + 0x18], edi
jb 0x404486
mov eax, dword [esi + 4]
jmp 0x404489
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4044e0
push 0x244
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push str.CGnWork::InstallProductLogo
call fcn.0040e170
mov byte [esp + 0x5b4], 5
mov byte [esp + 0x5b4], 4
mov esi, 0x66f120
call fcn.0040df10
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x620e80
push esi
call fcn.0040fa90
add esp, 0xc
jmp 0x40487a
push ebx
mov eax, 0x622024
call fcn.0040f730
jmp 0x40487a
mov esi, 8
cmp dword [ebp + 0xfc], ebx
je 0x4045da
cmp dword [ebp + 0x100], esi
jb 0x404511
mov eax, dword [ebp + 0xec]
jmp 0x404517
lea eax, [ebp + 0xec]
push ebx
push eax
call fcn.005b9cfa
add esp, 8
test eax, eax
jne 0x4045da
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x3c], esi
jae 0x404537
lea eax, [esp + 0x28]
mov ecx, eax
lea esi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x404540
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x44]
call fcn.0040f730
or ecx, 0xffffffff
lea edi, [esp + 0x18]
mov ebx, esi
mov dword [esp + 0x18], 0x2f
call fcn.0040dd60
mov ecx, eax
inc ecx
mov edx, esi
call fcn.004bcc90
mov esi, 8
cmp dword [ebp + 0x100], esi
jb 0x40458e
mov eax, dword [ebp + 0xec]
jmp 0x404594
lea eax, [ebp + 0xec]
push 0
push 0
push eax
xor edx, edx
lea ecx, [esp + 0x68]
call fcn.004bbe50
mov ecx, dword [esp + 0x50]
add esp, 0xc
cmp dword [esp + 0x58], esi
jae 0x4045b5
lea ecx, [esp + 0x44]
mov eax, dword [esp + 0x60]
cmp dword [esp + 0x74], esi
jae 0x4045c3
lea eax, [esp + 0x60]
push eax
call fcn.004bc6f0
add esp, 4
xor ebx, ebx
test eax, eax
je 0x404878
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x18]
call fcn.00401780
mov byte [esp + 0x594], 6
cmp dword [edi + 0x18], esi
jb 0x4045f5
mov edi, dword [edi + 4]
jmp 0x4045f8
add edi, 4
cmp dword [ebp + 0xc8], esi
jb 0x404608
mov eax, dword [ebp + 0xb4]
jmp 0x40460e
lea eax, [ebp + 0xb4]
push edi
push str.images
push eax
lea edx, [esp + 0x24]
push str._s_s_s
push edx
call fcn.0040de90
mov eax, dword [esp + 0x2c]
add esp, 0x14
push ebx
push eax
call fcn.005b9cfa
add esp, 8
test eax, eax
jne 0x4046e2
mov byte [esp + 0x594], 4
lea ecx, [esp + 0x18]
call fcn.00401690
mov byte [esp + 0x594], 3
cmp dword [esp + 0x3c], esi
jb 0x404669
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004c4802
add esp, 4
mov edi, 7
xor edx, edx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], dx
mov byte [esp + 0x594], 2
lea ecx, [esp + 0x1c]
call fcn.00401690
mov byte [esp + 0x594], 1
cmp dword [esp + 0x58], esi
jb 0x4046a9
mov eax, dword [esp + 0x44]
push eax
call fcn.004c4802
add esp, 4
xor ecx, ecx
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], cx
mov byte [esp + 0x594], bl
cmp dword [esp + 0x74], esi
jb 0x4046d2
mov edx, dword [esp + 0x60]
push edx
call fcn.004c4802
add esp, 4
xor eax, eax
mov dword [esp + 0x74], edi
mov word [esp + 0x60], ax
jmp 0x404909
xor ecx, ecx
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], ebx
mov word [esp + 0x7c], cx
mov byte [esp + 0x594], 7
cmp dword [ebp + 0xc8], esi
jb 0x404713
mov eax, dword [ebp + 0xb4]
jmp 0x404719
lea eax, [ebp + 0xb4]
push str.images
push eax
push str._s_s_
lea ecx, [esp + 0x84]
call fcn.004bc870
mov eax, dword [esp + 0x88]
add esp, 0xc
cmp dword [esp + 0x90], esi
jae 0x404747
lea eax, [esp + 0x7c]
push eax
call fcn.004bb7d0
add esp, 4
lea edi, [esp + 0x94]
call fcn.004ac880
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x3c], esi
jae 0x40476a
lea eax, [esp + 0x28]
push eax
call fcn.004ac9b0
mov eax, dword [esp + 0x80]
add esp, 4
cmp dword [esp + 0x90], esi
jae 0x404787
lea eax, [esp + 0x7c]
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x3c], esi
jae 0x404795
lea edx, [esp + 0x28]
push eax
lea ecx, [esp + 0x98]
call fcn.004ad6b0
test al, al
jne 0x404806
push 0x27e
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push str.CGnWork::InstallProductLogo
call fcn.0040e170
mov byte [esp + 0x5b4], 8
mov byte [esp + 0x5b4], 7
mov esi, 0x66f120
call fcn.0040df10
mov edx, dword [esp + 0x35c]
push edx
push 0x620f08
push esi
call fcn.0040fc70
add esp, 0xc
add ebp, 0xe8
push ebp
mov eax, 0x622024
call fcn.0040f7e0
mov esi, 8
jmp 0x404829
mov eax, dword [esp + 0x43c]
cmp dword [esp + 0x450], esi
jae 0x40481d
lea eax, [esp + 0x43c]
add ebp, 0xe8
push ebp
call fcn.0040f7e0
mov byte [esp + 0x594], 6
cmp dword [esp + 0x90], esi
jb 0x404847
mov eax, dword [esp + 0x7c]
push eax
call fcn.004c4802
add esp, 4
xor ecx, ecx
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], ebx
mov word [esp + 0x7c], cx
mov byte [esp + 0x594], 4
lea ecx, [esp + 0x18]
call fcn.00401690
mov edi, 8
jmp 0x40487a
mov edi, esi
mov byte [esp + 0x594], 3
cmp dword [esp + 0x3c], edi
jb 0x404895
mov edx, dword [esp + 0x28]
push edx
call fcn.004c4802
add esp, 4
mov esi, 7
xor eax, eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], ax
mov byte [esp + 0x594], 2
lea ecx, [esp + 0x1c]
call fcn.00401690
mov byte [esp + 0x594], 1
cmp dword [esp + 0x58], edi
jb 0x4048d5
mov ecx, dword [esp + 0x44]
push ecx
call fcn.004c4802
add esp, 4
xor edx, edx
mov dword [esp + 0x58], esi
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], dx
mov byte [esp + 0x594], bl
cmp dword [esp + 0x74], edi
jb 0x4048fe
mov eax, dword [esp + 0x60]
push eax
call fcn.004c4802
add esp, 4
xor ecx, ecx
mov dword [esp + 0x74], esi
mov word [esp + 0x60], cx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x594], 0xffffffff
lea ecx, [esp + 0x94]
call fcn.004ac5f0
mov al, 1
mov ecx, dword [esp + 0x58c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x570]
xor ecx, esp
call fcn.005b7e8e
add esp, 0x584
ret 4