Function at 0x4253fa
Capabilities:
Delete file

Disassembly:
push 0x390
mov eax, 0x509302
call fcn.004c969a
mov edi, ecx
xor ecx, ecx
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 4], ecx
cmp dword [ebp + 0x18], ecx
je 0x425a2f
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x250], ecx
push ecx
lea ecx, [ebp - 0x260]
mov dword [edi], eax
mov dword [ebp - 0x24c], 7
call fcn.004083a0
push 0x208
xor esi, esi
lea eax, [ebp - 0x218]
xor ebx, ebx
push esi
inc ebx
push eax
mov byte [ebp - 4], bl
call fcn.004debe0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.004077c0
push ebx
push 0xffffffffffffffff
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x5c
call fcn.0041d518
push eax
push esi
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.0041d2e4
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x230]
call fcn.00419a74
push ebx
push esi
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp + 8]
mov dword [ebp - 0x2dc], 0x2f
call fcn.0041d59d
cmp eax, 0xffffffff
je 0x425714
push ebx
push 0xffffffffffffffff
lea eax, [ebp - 0x2dc]
mov dword [ebp - 0x2dc], 0x2f
push eax
lea ecx, [ebp + 8]
call fcn.0041d518
push 0xffffffffffffffff
inc eax
lea ecx, [ebp + 8]
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.0041d2e4
push eax
lea ecx, [ebp - 0x260]
call fcn.00418ab8
lea ecx, [ebp - 0x290]
call fcn.00407750
push ecx
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x278]
call fcn.004266aa
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x290]
call fcn.00426710
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.00418ab8
lea ecx, [ebp - 0x290]
call fcn.00407750
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 4
call fcn.00407750
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00428f60
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4255ac
mov eax, dword [eax]
push esi
push eax
call fcn.004edeb1
pop ecx
pop ecx
cmp eax, 0xffffffff
lea ecx, [ebp - 0x278]
setne bl
call fcn.004078d0
test bl, bl
jne 0x425702
push 0xd
push 0x53bbac
lea ecx, [ebp - 0x278]
call fcn.00418a5d
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 0x10
jb 0x4255ec
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00407a10
mov ecx, edi
call fcn.00425a3f
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 4
call fcn.004078d0
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.00428f60
mov esi, eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x2d8]
push eax
call fcn.00428f60
add esp, 0xc
mov byte [ebp - 4], 8
mov edx, eax
lea ecx, [ebp - 0x290]
push esi
call fcn.0041c3d7
push eax
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 9
push eax
call fcn.004291a0
add esp, 0x10
lea ecx, [ebp - 0x260]
push eax
call fcn.00418ab8
lea ecx, [ebp - 0x278]
call fcn.00407750
lea ecx, [ebp - 0x290]
call fcn.004078d0
lea ecx, [ebp - 0x2d8]
call fcn.004078d0
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 4
call fcn.004078d0
cmp dword [ebp - 0x250], 0
jne 0x42577a
push 0x14
push 0x53bb94
lea ecx, [ebp - 0x248]
call fcn.00418a5d
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 0x10
jb 0x4256c6
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00407a10
mov ecx, edi
call fcn.00425a3f
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 4
call fcn.004078d0
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x250], 0
je 0x4257b1
jmp 0x42577d
push 0xffffffffffffffff
push esi
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x260]
call fcn.004083d0
push ecx
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x2d8]
call fcn.004266aa
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xb
push ecx
mov edx, eax
lea ecx, [ebp - 0x248]
call fcn.00426710
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.00418ab8
lea ecx, [ebp - 0x248]
call fcn.00407750
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 4
call fcn.00407750
jmp 0x425705
xor ebx, ebx
inc ebx
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.00428f60
pop ecx
mov dword [ebp - 0x2e0], ebx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4257a0
mov eax, dword [eax]
push 0
push eax
call fcn.004edeb1
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x4257b1
xor bl, bl
test byte [ebp - 0x2e0], 1
je 0x4257c5
lea ecx, [ebp - 0x248]
call fcn.004078d0
test bl, bl
jne 0x425a03
sub esp, 0x18
lea eax, [ebp - 0x260]
mov ecx, esp
push eax
call fcn.00419a74
lea eax, [ebp - 0x248]
push eax
call fcn.0042531a
mov esi, dword [eax + 8]
add esi, dword [eax]
mov ebx, dword [eax + 0xc]
adc ebx, dword [eax + 4]
test ebx, ebx
jg 0x42581f
jl 0x4257ff
test esi, esi
jne 0x42581f
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x425a03
push esi
call fcn.0041c686
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x2dc], eax
call fcn.00425ae1
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x260]
cmp dword [ebp - 0x24c], 8
cmovae ecx, dword [ebp - 0x260]
push ecx
push 0x20
push ecx
lea ecx, [ebp - 0x39c]
call fcn.004262f0
push ebx
mov ebx, dword [ebp - 0x2dc]
lea ecx, [ebp - 0x39c]
push esi
push ebx
call fcn.0041d349
lea ecx, [ebp - 0x39c]
call fcn.00425a6c
and dword [ebp - 0x2dc], 0
lea ecx, [ebp - 0x248]
and dword [ebp - 0x2e0], 0
push 0x17
push 0x53bb7c
call fcn.00418a5d
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 0x10
jb 0x4258a8
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00407a10
mov ecx, edi
call fcn.00425a3f
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0xc
call fcn.004078d0
lea eax, [ebp - 0x2e0]
mov edx, esi
push eax
lea eax, [ebp - 0x2dc]
mov ecx, ebx
push eax
call fcn.0042732b
pop ecx
pop ecx
lea ecx, [ebp - 0x248]
test al, al
je 0x4259a8
push 0x10
pop ebx
push ebx
push 0x53bb68
call fcn.00418a5d
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], ebx
jb 0x425909
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00407a10
mov ecx, edi
call fcn.00425a3f
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0xc
call fcn.004078d0
mov edx, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x2dc]
call fcn.00427584
test eax, eax
jne 0x42595a
push 0x17
push 0x53bb50
lea ecx, [ebp - 0x248]
call fcn.00418a5d
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], ebx
jmp 0x4259bc
mov ecx, eax
call fcn.0042830d
mov esi, eax
test esi, esi
je 0x4259dd
push 0x12
push 0x53bb3c
lea ecx, [ebp - 0x248]
call fcn.00418a5d
mov byte [ebp - 4], bl
cmp dword [eax + 0x14], ebx
jb 0x425983
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00407a10
mov ecx, edi
call fcn.00425a3f
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0xc
call fcn.004078d0
call esi
jmp 0x4259f8
push 0x1e
push 0x53bb1c
call fcn.00418a5d
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 0x10
jb 0x4259c0
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00407a10
mov ecx, edi
call fcn.00425a3f
lea ecx, [ebp - 0x248]
call fcn.004078d0
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x39c]
call fcn.004253ac
lea ecx, [ebp - 0x230]
call fcn.00407750
lea ecx, [ebp - 0x2a8]
call fcn.00407750
lea ecx, [ebp - 0x2c0]
call fcn.00407750
lea ecx, [ebp - 0x260]
call fcn.00407750
lea ecx, [ebp + 8]
call fcn.00407750
call fcn.004c9655
ret 0x1c