Function at 0x40b853
Capabilities:
Delete file

Disassembly:
mov eax, 0x41d851
call fcn.004128c4
sub esp, 0x230
mov eax, dword [0x4280c8]
push ebx
push esi
mov dword [ebp - 0x10], eax
call fcn.0040b664
lea eax, [ebp - 0x22c]
push eax
call fcn.00407417
xor ebx, ebx
mov dword [ebp - 4], ebx
push dword [0x428f98]
lea eax, [ebp - 0x22c]
push 0x429c28
call fcn.004074b7
test eax, eax
jne 0x40b8a5
or ebx, 0xffffffff
jmp 0x40bbef
push edi
push str.GetOemInfo_connect_succeed._n
call fcn.0040b1f8
mov eax, dword [ebp + 8]
add eax, 4
push eax
call fcn.00410b5f
pop ecx
pop ecx
mov esi, eax
mov eax, dword [0x4291ac]
mov edi, 0x4291ac
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x230], eax
push esi
mov byte [ebp - 4], 1
push dword [0x42916c]
lea eax, [ebp - 0x230]
push eax
call fcn.004023ad
add esp, 0xc
push dword [ebp - 0x230]
lea eax, [ebp - 0x22c]
push 0x4215a0
call fcn.00407505
test eax, eax
jne 0x40b914
push 0xfffffffffffffffe
pop ebx
jmp 0x40bbe0
push str.GetOemInfo_OpenRequest_succeed._n
call fcn.0040b1f8
lea eax, [ebp - 0x21c]
mov dword [esp], 0x41fe14
push eax
call fcn.00405bee
push ebx
push ebx
push ebx
push ebx
lea esi, [ebp - 0x22c]
mov byte [ebp - 4], 2
call fcn.0040755b
test eax, eax
jne 0x40b950
push 0xfffffffffffffffd
pop ebx
jmp 0x40bbd2
push str.GetOemInfo_SendRequest_succeed._n
call fcn.0040b1f8
pop ecx
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.00407696
test eax, eax
jne 0x40b976
push 0xfffffffffffffffc
jmp 0x40b94a
cmp dword [ebp - 0x224], ebx
je 0x40b990
push dword [ebp - 0x224]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x224], ebx
cmp dword [ebp - 0x228], ebx
je 0x40b9aa
push dword [ebp - 0x228]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x228], ebx
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], 6
jge 0x40b9c1
push ebx
call fcn.0040bc14
jmp 0x40bbd2
mov eax, dword [0x4291ac]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov byte [ebp - 4], 3
mov eax, dword [0x4291ac]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 4
mov eax, dword [0x4291ac]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 5
push dword [ebp - 0x21c]
lea eax, [ebp + 8]
call fcn.00405c98
mov edi, dword [ebp + 8]
push edi
push str.GetOemInfo_Read__s_n
call fcn.0040b1f8
pop ecx
pop ecx
push ebx
push ebx
push edi
lea ecx, [ebp - 0x22c]
call fcn.0040776e
mov esi, eax
push esi
push str.GetOemInfo_URL_size__d_n
call fcn.0040b1f8
cmp esi, ebx
pop ecx
pop ecx
jg 0x40ba4a
or ebx, 0xffffffff
jmp 0x40bbae
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0040792f
push dword [ebp - 0x23c]
lea eax, [ebp - 0x22c]
push dword [ebp - 0x234]
call fcn.004074b7
test eax, eax
je 0x40ba42
push dword [ebp - 0x238]
lea eax, [ebp - 0x22c]
push 0x4215a0
call fcn.00407505
test eax, eax
jne 0x40baa5
push 0xfffffffffffffffe
pop ebx
jmp 0x40bbae
push str.GetOemInfo_OpenRequest_succeed._n
call fcn.0040b1f8
pop ecx
push ebx
push ebx
push ebx
push ebx
lea esi, [ebp - 0x22c]
call fcn.0040755b
test eax, eax
jne 0x40bac7
push 0xfffffffffffffffd
jmp 0x40ba9f
push str.GetOemInfo_SendRequest_succeed._n
call fcn.0040b1f8
pop ecx
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.00407696
test eax, eax
jne 0x40baed
push 0xfffffffffffffffc
jmp 0x40ba9f
cmp dword [ebp - 0x224], ebx
je 0x40bb07
push dword [ebp - 0x224]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x224], ebx
cmp dword [ebp - 0x228], ebx
je 0x40bb21
push dword [ebp - 0x228]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 0x228], ebx
push 0x104
lea eax, [ebp - 0x218]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push 0x5c
push eax
call fcn.00410545
pop ecx
pop ecx
inc eax
inc eax
push str.oem.xml
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x218]
push 0x424288
push eax
call fcn.00411389
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
jne 0x40bb72
push 0xfffffffffffffffb
jmp 0x40ba9f
push ebx
push ebx
push esi
call fcn.004117d3
mov eax, dword [ebp - 0x21c]
push esi
push dword [eax - 0xc]
push 1
push eax
call fcn.00411923
push esi
call fcn.00411446
add esp, 0x20
lea eax, [ebp - 0x218]
push eax
call fcn.0040bc14
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x238]
add eax, 0xfffffff0
call fcn.00402528
mov eax, dword [ebp - 0x234]
add eax, 0xfffffff0
call fcn.00402528
lea eax, [edi - 0x10]
call fcn.00402528
mov eax, dword [ebp - 0x21c]
add eax, 0xfffffff0
call fcn.00402528
mov eax, dword [ebp - 0x230]
add eax, 0xfffffff0
call fcn.00402528
pop edi
lea esi, [ebp - 0x22c]
call fcn.00407487
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
mov eax, ebx
pop ebx
call fcn.004120cb
leave
ret 4