Function at 0x435090
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x120
mov edi, ecx
mov eax, dword [0x520014]
xor eax, ebp
mov dword [esp + 0x118], eax
push 0x28
call fcn.0048e8dd
add esp, 4
mov esi, eax
mov ecx, eax
push 1
call fcn.004ba0a0
movzx eax, byte [edi + 0xb]
mov edx, edi
test al, al
jns 0x4350d3
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov dword [esp + 0xc], edi
lea edi, [esp + 0x80]
mov ecx, edi
push eax
push edx
call fcn.00443e60
mov ecx, esi
push edi
call fcn.00435cd0
mov ebx, eax
mov ecx, edi
call fcn.0046c2c0
test bl, bl
jne 0x435123
xor ebx, ebx
test esi, esi
je 0x43510b
mov ecx, esi
push 1
call fcn.004ba170
mov ecx, dword [esp + 0x118]
xor ecx, ebp
call fcn.0048f468
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x10], esi
xor eax, eax
dec eax
lea edi, [esp + 0x50]
mov dword [edi + 0x24], eax
mov dword [edi + 0x20], eax
pcmpeqd xmm0, xmm0
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
mov ecx, edi
call fcn.004ba9c0
mov ebx, dword [esp + 0xc]
movzx eax, byte [ebx + 0x35]
mov ecx, edi
push eax
call fcn.004baa60
lea eax, [ebx + 0x38]
mov dword [esp + 8], eax
mov esi, dword [ebx + 0x38]
lea eax, [ebx + 0x3c]
mov dword [esp + 0x1c], eax
cmp esi, eax
jne 0x43524f
lea ecx, [esp + 0x80]
push str.application_octet_stream
call fcn.004b9300
lea esi, [esp + 0x40]
mov ecx, esi
push 0x5060b2
call fcn.004b9300
lea eax, [esp + 0x100]
mov dword [eax], 0xffffffff
mov ecx, dword [esp + 8]
push esi
push eax
call fcn.004655e0
mov ebx, dword [eax]
test ebx, ebx
jne 0x435221
mov edi, eax
push 0x28
call fcn.0048e8dd
add esp, 4
mov ebx, eax
mov eax, dword [esp + 0x48]
mov dword [ebx + 0x18], eax
movq xmm0, qword [esp + 0x40]
movq qword [ebx + 0x10], xmm0
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x24], eax
mov ecx, dword [esp + 0x100]
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], ecx
mov dword [edi], ebx
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, ebx
test ecx, ecx
je 0x43520e
mov eax, dword [esp + 8]
mov dword [eax], ecx
mov eax, dword [edi]
push eax
mov esi, dword [esp + 0x10]
push dword [esi + 0x3c]
call fcn.00465770
add esp, 8
inc dword [esi + 0x40]
xor eax, eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x108], eax
movzx ecx, byte [ebx + 0x27]
test cl, cl
jns 0x435352
mov ecx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x1c]
jmp 0x435355
lea ebx, [esp + 0x50]
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x43525e
mov eax, dword [esi + 0x14]
lea edi, [esi + 0x10]
cmp eax, 0x14
jne 0x43527c
mov ecx, edi
push 0x14
push str.upload_file_minidump
push 0xffffffffffffffff
push 0
call fcn.0046b330
test eax, eax
je 0x4352bc
lea eax, [esi + 0x1c]
mov ecx, ebx
push eax
push edi
call fcn.004baa70
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x435299
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x43528f
jmp 0x4352af
mov eax, dword [esi + 8]
cmp dword [eax], esi
je 0x4352af
add esi, 8
mov ecx, dword [esi]
lea esi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x4352a3
mov esi, eax
cmp eax, dword [esp + 0x1c]
jne 0x435253
jmp 0x435171
lea ecx, [esp + 0x80]
push 0x14e
push str.SendReport
push 2
call fcn.0043a1a0
lea ecx, [esp + 0xbc]
push 0x508137
push str.reserved_key
call fcn.004b9460
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x4352f8
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
add eax, edi
lea ecx, [esp + 0xbc]
push eax
push edi
call fcn.004b9460
lea ecx, [esp + 0xbc]
push 0x50814b
push str.__discarding_value
call fcn.004b9460
movzx eax, byte [esi + 0x27]
test al, al
jns 0x43532e
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
jmp 0x435331
lea edx, [esi + 0x1c]
add eax, edx
lea ecx, [esp + 0xbc]
push eax
push edx
call fcn.004b9460
lea ecx, [esp + 0x80]
call fcn.0043a3d0
jmp 0x435288
add ebx, 0x1c
lea eax, [ecx + 4]
cmp eax, 0xfffffff0
jae 0x435799
cmp eax, 0xb
jae 0x43537a
mov byte [esp + 0x10b], cl
lea edi, [esp + 0x100]
test ecx, ecx
jne 0x4353aa
jmp 0x4353b9
lea esi, [ecx + 0x14]
and esi, 0xfffffff0
push esi
mov edi, ecx
call fcn.0048e8dd
mov ecx, edi
add esp, 4
mov edi, eax
mov dword [esp + 0x100], eax
or esi, 0x80000000
mov dword [esp + 0x108], esi
mov dword [esp + 0x104], ecx
push ecx
push ebx
push edi
mov esi, ecx
call fcn.00491bb0
mov ecx, esi
add esp, 0xc
mov byte [edi + ecx], 0
lea esi, [esp + 0x100]
mov ecx, esi
push 4
push str..dmp
call fcn.0046ab40
lea edi, [esp + 0x34]
mov ecx, edi
push str.upload_file_minidump
call fcn.004b9300
lea ecx, [esp + 0x50]
lea ebx, [esp + 0x80]
push ebx
push dword [esp + 0x14]
push esi
push edi
call fcn.004bab70
cmp byte [edi + 0xb], 0
jns 0x43540b
push dword [esp + 0x34]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x10b], 0
jns 0x435424
push dword [esp + 0x100]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x435437
push dword [esp + 0x40]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x8b], 0
jns 0x435450
push dword [esp + 0x80]
call fcn.0048e90d
add esp, 4
lea eax, [esp + 0x30]
mov dword [eax], 0xffffffff
push eax
call fcn.004bb0f0
add esp, 4
lea esi, [esp + 0x44]
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi - 4], esi
lea ecx, [esp + 0x50]
lea eax, [esp + 0x40]
push eax
call fcn.004368a0
mov edi, dword [esi - 4]
cmp edi, esi
je 0x4354c4
lea eax, [edi + 0x10]
mov ecx, dword [esp + 0x30]
lea edx, [edi + 0x1c]
push edx
push eax
call fcn.004bb040
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x4354a8
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x43549e
jmp 0x4354be
mov eax, dword [edi + 8]
cmp dword [eax], edi
je 0x4354be
add edi, 8
mov ecx, dword [edi]
lea edi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x4354b2
mov edi, eax
cmp eax, esi
jne 0x435486
mov edi, dword [esp + 0x30]
lea esi, [esp + 0x2c]
lea ecx, [esp + 0x50]
push esi
call fcn.00435f90
mov eax, dword [esi]
mov ecx, edi
push eax
call fcn.004bb0a0
mov ecx, dword [esp + 0x30]
push 0x404e0000
push 0
call fcn.004bb0d0
lea edi, [esp + 0x34]
xor eax, eax
dec eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov ecx, edi
push str.https:__crash_reports.browser.yandex.net_submit
call fcn.004b9300
mov eax, 0x50819c
mov ecx, ebx
mov dword [esp + 0x14], eax
push dword [eax]
call fcn.004b9300
mov ecx, dword [esp + 8]
push ebx
lea eax, [esp + 0x104]
push eax
call fcn.00417ea0
mov esi, dword [esp + 0x100]
cmp byte [esp + 0x8b], 0
jns 0x43554f
push dword [esp + 0x80]
call fcn.0048e90d
add esp, 4
cmp esi, dword [esp + 0x1c]
je 0x4356cd
pxor xmm0, xmm0
movdqa xmmword [esp + 0xf0], xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
movdqa xmmword [esp + 0xb0], xmm0
movdqa xmmword [esp + 0xa0], xmm0
movdqa xmmword [esp + 0x90], xmm0
movdqa xmmword [esp + 0x80], xmm0
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4355be
mov eax, dword [esi + 0x20]
lea ecx, [esp + 0x20]
push eax
call fcn.0046a990
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4355d8
mov eax, dword [esi + 0x20]
mov esi, dword [esi + 0x1c]
jmp 0x4355db
add esi, 0x1c
mov dword [esp + 0x18], esi
test eax, eax
je 0x43565c
xor edi, edi
mov esi, eax
mov eax, dword [esp + 0x18]
movzx ebx, byte [eax + edi]
mov eax, ebx
and al, 0xdf
add al, 0xbf
cmp al, 0x1a
jb 0x435615
mov eax, ebx
add al, 0xd0
cmp al, 0xa
jb 0x435615
push 5
push ebx
push 0x5081cd
call fcn.00490bf0
add esp, 0xc
test eax, eax
je 0x43562b
movsx eax, bl
lea ecx, [esp + 0x20]
push eax
call fcn.0046b0a0
inc edi
mov eax, esi
cmp esi, edi
jne 0x4355e5
jmp 0x43565c
pxor xmm0, xmm0
movdqa xmmword [esp + 0x100], xmm0
push ebx
push str.___02X
push 0x10
lea ebx, [esp + 0x10c]
push ebx
call fcn.00466640
add esp, 0x10
lea ecx, [esp + 0x20]
push ebx
call fcn.0046b440
jmp 0x435622
cmp byte [esp + 0x2b], 0
lea esi, [esp + 0x20]
jns 0x43566b
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov ebx, dword [eax + 4]
lea edi, [esp + 0x34]
mov ecx, edi
push 0
mov eax, 0x3f
push eax
call fcn.0046acb0
cmp eax, 0xffffffff
mov eax, 0x26
mov ecx, 0x3f
cmove eax, ecx
push esi
push ebx
push eax
push str._c_s_s
push 0x80
lea ebx, [esp + 0x94]
push ebx
call fcn.00466640
add esp, 0x18
cmp byte [esp + 0x2b], 0
jns 0x4356c5
push dword [esp + 0x20]
call fcn.0048e90d
add esp, 4
mov ecx, edi
push ebx
call fcn.0046b440
mov eax, dword [esp + 0x14]
add eax, 8
cmp eax, str.product
jne 0x435510
mov ecx, dword [esp + 0x30]
push edi
call fcn.004bb030
xor eax, eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov edi, dword [esp + 0x30]
mov eax, dword [edi]
mov esi, ebx
mov ebx, dword [eax + 4]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push esi
call ebx
mov ebx, eax
mov esi, dword [esp + 0x10]
mov ecx, esi
call fcn.00435d60
test bl, bl
je 0x43573c
mov eax, dword [esp + 0xc]
cmp byte [eax + 0xb], 0
jns 0x435735
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [esp + 0x8b], 0
jns 0x435755
push dword [esp + 0x80]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x435768
push dword [esp + 0x34]
call fcn.0048e90d
add esp, 4
lea ecx, [esp + 0x40]
push dword [ecx + 4]
call fcn.00413b20
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0
test ecx, ecx
je 0x43578b
push 1
call fcn.00436bd0
lea ecx, [esp + 0x50]
call fcn.004baa30
jmp 0x4350fe
lea ecx, [esp + 0x100]
call fcn.004d0930
int3