Function at 0x5224b8
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x5224c0
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x5230b0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
add eax, 0x57a
mov edx, 0x42
call fcn.004083fc
mov edx, dword [0x582f38]
mov edx, dword [edx]
lea eax, [ebp - 0xc]
mov ecx, 0x5230c8
call fcn.00405138
mov eax, dword [ebp - 0xc]
call fcn.0040a36c
test al, al
je 0x5225c0
mov dl, 1
mov eax, dword [0x41c958]
call fcn.00403e90
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x5225b9
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x522599
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [0x582f38]
mov edx, dword [edx]
lea eax, [ebp - 0x10]
mov ecx, 0x5230c8
call fcn.00405138
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.00421f18
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.00508f04
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x52258f
cmp eax, 0x42
jne 0x52258f
mov eax, dword [ebp - 4]
lea edx, [eax + 0x57a]
mov ecx, 0x42
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5225a3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5225c0
mov eax, dword [ebp - 8]
call fcn.00403ec0
ret
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x5225ef
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x390]
lea eax, [ebp - 0x14]
mov edx, 0x5230dc
call fcn.00405138
mov edx, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0052d41c
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
call fcn.0040a6b8
mov eax, dword [ebp - 0x18]
call fcn.0040a37c
test al, al
jne 0x522625
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
call fcn.0040a6b8
mov eax, dword [ebp - 0x1c]
call fcn.0040a3a0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x39c], edx
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x52264b
xor ecx, ecx
mov edx, 0x5230fc
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x5226ec
xor eax, eax
push ebp
push 0x52268a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
lea ecx, [eax + 0x39c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x390]
mov eax, dword [ebp - 4]
call fcn.00523610
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5226ec
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522707
xor ecx, ecx
mov edx, 0x5231c0
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor edx, edx
push ebp
push 0x522736
push dword fs:[edx]
mov dword fs:[edx], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x505e70]
call fcn.005066a0
mov edx, dword [ebp - 4]
mov dword [edx + 0x84], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x52278a
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x5227a5
xor ecx, ecx
mov edx, 0x523208
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
call fcn.0040a36c
test al, al
je 0x5227cb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
call fcn.004052ec
push eax
call sub.kernel32.dll_DeleteFileA
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x5227e6
xor ecx, ecx
mov edx, 0x523228
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0052b8d4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x52280b
xor ecx, ecx
mov edx, 0x523244
mov eax, dword [ebp - 4]
call fcn.0052d41c
push 1
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 4]
call fcn.0052b7d4
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
add eax, 0x350
call fcn.00404e64
mov eax, dword [ebp - 4]
add eax, 0x230
xor ecx, ecx
mov edx, 0x111
call fcn.0040374c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x52285c
xor ecx, ecx
mov edx, 0x523260
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor edx, edx
push ebp
push 0x52288b
push dword fs:[edx]
mov dword fs:[edx], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5168b4]
call fcn.00519554
mov edx, dword [ebp - 4]
mov dword [edx + 0x150], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5228d3
xor edx, edx
push ebp
push 0x52293e
push dword fs:[edx]
mov dword fs:[edx], esp
push 1
call sub.kernel32.dll_Sleep
mov eax, dword [ebp - 4]
push eax
push 0x529f44
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov edx, 3
call fcn.005194a0
mov eax, dword [ebp - 4]
push eax
push 0x529efc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
call fcn.00519534
mov eax, dword [ebp - 4]
push eax
push 0x52a784
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
xor edx, edx
call fcn.005194a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522986
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x5229a1
xor ecx, ecx
mov edx, 0x5232f8
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor edx, edx
push ebp
push 0x5229cd
push dword fs:[edx]
mov dword fs:[edx], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x51eb2c]
call fcn.0051ed68
mov edx, dword [ebp - 4]
mov dword [edx + 0x7c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522a15
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522a30
xor ecx, ecx
mov edx, 0x523358
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov dl, 1
mov eax, dword [0x41be6c]
call fcn.00403e90
mov edx, dword [ebp - 4]
mov dword [edx + 0x14c], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522a60
xor ecx, ecx
mov edx, 0x523374
mov eax, dword [ebp - 4]
call fcn.0052d41c
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14c]
xor edx, edx
call fcn.00507c04
xor eax, eax
push ebp
push 0x522aa7
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5e8]
call fcn.005078dc
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.0052f590
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522ab1
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522acc
xor ecx, ecx
mov edx, 0x52338c
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
add eax, 0x368
mov edx, 0x5233ac
call fcn.00404e64
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522af9
xor ecx, ecx
mov edx, 0x5233c0
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x54], edx
mov dword [eax + 0x50], 0x5250ac
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522b27
xor ecx, ecx
mov edx, 0x5233e0
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor ecx, ecx
mov dl, 1
mov eax, dword [0x51d16c]
call fcn.0051d5d4
mov edx, dword [ebp - 4]
mov dword [edx + 0x15c], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522b59
xor ecx, ecx
mov edx, 0x5233fc
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x49ccb8]
call fcn.0049f4c4
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x12c], ebx
mov eax, ebx
xor edx, edx
call fcn.0049f64c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x12c]
mov edx, 0x4e20
call fcn.0049f65c
mov eax, dword [ebp - 4]
push eax
push 0x52a8a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x12c]
call fcn.0049f66c
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x49ccb8]
call fcn.0049f4c4
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x124], ebx
mov eax, ebx
xor edx, edx
call fcn.0049f64c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x124]
mov edx, 0x1388
call fcn.0049f65c
mov eax, dword [ebp - 4]
push eax
push 0x52800c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x124]
call fcn.0049f66c
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x49ccb8]
call fcn.0049f4c4
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x128], ebx
mov eax, ebx
xor edx, edx
call fcn.0049f64c
mov eax, dword [ebp - 4]
push eax
push 0x5280d4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x128]
call fcn.0049f66c
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x49ccb8]
call fcn.0049f4c4
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x11c], ebx
mov eax, ebx
xor edx, edx
call fcn.0049f64c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x11c]
mov edx, 0xea60
call fcn.0049f65c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x11c]
mov dword [eax + 0xc], 0x1b669
mov edx, dword [ebp - 4]
push edx
push 0x5272fc
call fcn.0049f66c
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x49ccb8]
call fcn.0049f4c4
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x120], ebx
mov eax, ebx
xor edx, edx
call fcn.0049f64c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x120]
mov edx, 0x1b58
call fcn.0049f65c
mov eax, dword [ebp - 4]
push eax
push 0x52f174
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x120]
call fcn.0049f66c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522ce9
xor ecx, ecx
mov edx, 0x523414
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov dl, 1
mov eax, dword [0x41be6c]
call fcn.00403e90
mov edx, dword [ebp - 4]
mov dword [edx + 0x148], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522d19
xor ecx, ecx
mov edx, 0x523430
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
call fcn.0040a37c
test al, al
jne 0x522d39
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
call fcn.0040a3a0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522d68
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x80]
lea eax, [ebp - 0x30]
mov edx, 0x52344c
call fcn.00405138
mov edx, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522d83
xor ecx, ecx
mov edx, 0x52346c
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor edx, edx
push ebp
push 0x522db3
push dword fs:[edx]
mov dword fs:[edx], esp
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x50fcb8]
call fcn.0050fe10
mov edx, dword [ebp - 4]
mov dword [edx + 0x1f4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522dfb
mov edx, 0x6d2
mov eax, dword [ebp - 4]
call fcn.0052d0c0
mov edx, 0x6d3
mov eax, dword [ebp - 4]
call fcn.0052d108
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522e30
xor ecx, ecx
mov edx, 0x5234b4
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor edx, edx
push ebp
push 0x522e60
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, 0x5234d0
call fcn.0050539c
mov dl, 1
mov eax, 0x5234f0
call fcn.0050539c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522ea8
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x52302a
xor edx, edx
push ebp
push 0x522f44
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522ede
xor ecx, ecx
mov edx, 0x523538
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0052c438
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522f03
xor ecx, ecx
mov edx, 0x523558
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor ecx, ecx
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0052ad3c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522f2a
xor ecx, ecx
mov edx, 0x523578
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x120]
xor edx, edx
call fcn.0049f64c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522f8c
xor edx, edx
push ebp
push 0x522fe2
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522fb5
xor ecx, ecx
mov edx, 0x523598
mov eax, dword [ebp - 4]
call fcn.0052d41c
mov eax, dword [ebp - 4]
call fcn.0052f8c4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5c2], 0
je 0x522fd8
xor ecx, ecx
mov edx, 0x5235b0
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x52302a
mov eax, dword [ebp - 4]
call fcn.0052edd8
mov edx, dword [ebp - 4]
mov byte [edx + 0x54c], al
mov eax, dword [ebp - 4]
call fcn.00521d88
push 0x5235f8
call fcn.0040c354
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38]
call fcn.0040d018
push dword [ebp - 0x38]
push 0x52360c
call fcn.0040c380
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x3c]
call fcn.0040d030
push dword [ebp - 0x3c]
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051ac
mov edx, dword [ebp - 0x34]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0052d41c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5230b7
lea eax, [ebp - 0x3c]
mov edx, 0xd
call fcn.00404e34
ret