Function at 0x436dc0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x120
mov edi, ecx
mov eax, dword [0x526014]
xor eax, ebp
mov dword [esp + 0x118], eax
push 0x28
call fcn.00493d3d
add esp, 4
mov esi, eax
mov ecx, eax
push 1
call fcn.004bf500
movzx eax, byte [edi + 0xb]
mov edx, edi
test al, al
jns 0x436e03
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov dword [esp + 0xc], edi
lea edi, [esp + 0x80]
mov ecx, edi
push eax
push edx
call fcn.0046f130
mov ecx, esi
push edi
call fcn.00437a00
mov ebx, eax
mov ecx, edi
call fcn.0046f270
test bl, bl
jne 0x436e53
xor ebx, ebx
test esi, esi
je 0x436e3b
mov ecx, esi
push 1
call fcn.004bf5d0
mov ecx, dword [esp + 0x118]
xor ecx, ebp
call fcn.004948c8
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x10], esi
xor eax, eax
dec eax
lea edi, [esp + 0x50]
mov dword [edi + 0x24], eax
mov dword [edi + 0x20], eax
pcmpeqd xmm0, xmm0
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
mov ecx, edi
call fcn.004bfe20
mov ebx, dword [esp + 0xc]
movzx eax, byte [ebx + 0x35]
mov ecx, edi
push eax
call fcn.004bfec0
lea eax, [ebx + 0x38]
mov dword [esp + 8], eax
mov esi, dword [ebx + 0x38]
lea eax, [ebx + 0x3c]
mov dword [esp + 0x1c], eax
cmp esi, eax
jne 0x436f7f
lea ecx, [esp + 0x80]
push str.application_octet_stream
call fcn.004be760
lea esi, [esp + 0x40]
mov ecx, esi
push 0x50c282
call fcn.004be760
lea eax, [esp + 0x100]
mov dword [eax], 0xffffffff
mov ecx, dword [esp + 8]
push esi
push eax
call fcn.00413930
mov ebx, dword [eax]
test ebx, ebx
jne 0x436f51
mov edi, eax
push 0x28
call fcn.00493d3d
add esp, 4
mov ebx, eax
mov eax, dword [esp + 0x48]
mov dword [ebx + 0x18], eax
movq xmm0, qword [esp + 0x40]
movq qword [ebx + 0x10], xmm0
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x24], eax
mov ecx, dword [esp + 0x100]
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], ecx
mov dword [edi], ebx
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, ebx
test ecx, ecx
je 0x436f3e
mov eax, dword [esp + 8]
mov dword [eax], ecx
mov eax, dword [edi]
push eax
mov esi, dword [esp + 0x10]
push dword [esi + 0x3c]
call fcn.00467fb0
add esp, 8
inc dword [esi + 0x40]
xor eax, eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x108], eax
movzx ecx, byte [ebx + 0x27]
test cl, cl
jns 0x437082
mov ecx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x1c]
jmp 0x437085
lea ebx, [esp + 0x50]
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x436f8e
mov eax, dword [esi + 0x14]
lea edi, [esi + 0x10]
cmp eax, 0x14
jne 0x436fac
mov ecx, edi
push 0x14
push str.upload_file_minidump
push 0xffffffffffffffff
push 0
call fcn.0046e020
test eax, eax
je 0x436fec
lea eax, [esi + 0x1c]
mov ecx, ebx
push eax
push edi
call fcn.004bfed0
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x436fc9
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x436fbf
jmp 0x436fdf
mov eax, dword [esi + 8]
cmp dword [eax], esi
je 0x436fdf
add esi, 8
mov ecx, dword [esi]
lea esi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x436fd3
mov esi, eax
cmp eax, dword [esp + 0x1c]
jne 0x436f83
jmp 0x436ea1
lea ecx, [esp + 0x80]
push 0x14e
push str.SendReport
push 2
call fcn.0043bcc0
lea ecx, [esp + 0xbc]
push 0x50e307
push str.reserved_key
call fcn.004be8c0
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x437028
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
add eax, edi
lea ecx, [esp + 0xbc]
push eax
push edi
call fcn.004be8c0
lea ecx, [esp + 0xbc]
push 0x50e31b
push str.__discarding_value
call fcn.004be8c0
movzx eax, byte [esi + 0x27]
test al, al
jns 0x43705e
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
jmp 0x437061
lea edx, [esi + 0x1c]
add eax, edx
lea ecx, [esp + 0xbc]
push eax
push edx
call fcn.004be8c0
lea ecx, [esp + 0x80]
call fcn.0043bef0
jmp 0x436fb8
add ebx, 0x1c
lea eax, [ecx + 4]
cmp eax, 0xfffffff0
jae 0x4374c9
cmp eax, 0xb
jae 0x4370aa
mov byte [esp + 0x10b], cl
lea edi, [esp + 0x100]
test ecx, ecx
jne 0x4370da
jmp 0x4370e9
lea esi, [ecx + 0x14]
and esi, 0xfffffff0
push esi
mov edi, ecx
call fcn.00493d3d
mov ecx, edi
add esp, 4
mov edi, eax
mov dword [esp + 0x100], eax
or esi, 0x80000000
mov dword [esp + 0x108], esi
mov dword [esp + 0x104], ecx
push ecx
push ebx
push edi
mov esi, ecx
call fcn.00497010
mov ecx, esi
add esp, 0xc
mov byte [edi + ecx], 0
lea esi, [esp + 0x100]
mov ecx, esi
push 4
push str..dmp
call fcn.0046d820
lea edi, [esp + 0x34]
mov ecx, edi
push str.upload_file_minidump
call fcn.004be760
lea ecx, [esp + 0x50]
lea ebx, [esp + 0x80]
push ebx
push dword [esp + 0x14]
push esi
push edi
call fcn.004bffd0
cmp byte [edi + 0xb], 0
jns 0x43713b
push dword [esp + 0x34]
call fcn.00493d6d
add esp, 4
cmp byte [esp + 0x10b], 0
jns 0x437154
push dword [esp + 0x100]
call fcn.00493d6d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x437167
push dword [esp + 0x40]
call fcn.00493d6d
add esp, 4
cmp byte [esp + 0x8b], 0
jns 0x437180
push dword [esp + 0x80]
call fcn.00493d6d
add esp, 4
lea eax, [esp + 0x30]
mov dword [eax], 0xffffffff
push eax
call fcn.004c0550
add esp, 4
lea esi, [esp + 0x44]
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi - 4], esi
lea ecx, [esp + 0x50]
lea eax, [esp + 0x40]
push eax
call fcn.004385d0
mov edi, dword [esi - 4]
cmp edi, esi
je 0x4371f4
lea eax, [edi + 0x10]
mov ecx, dword [esp + 0x30]
lea edx, [edi + 0x1c]
push edx
push eax
call fcn.004c04a0
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x4371d8
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x4371ce
jmp 0x4371ee
mov eax, dword [edi + 8]
cmp dword [eax], edi
je 0x4371ee
add edi, 8
mov ecx, dword [edi]
lea edi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x4371e2
mov edi, eax
cmp eax, esi
jne 0x4371b6
mov edi, dword [esp + 0x30]
lea esi, [esp + 0x2c]
lea ecx, [esp + 0x50]
push esi
call fcn.00437cc0
mov eax, dword [esi]
mov ecx, edi
push eax
call fcn.004c0500
mov ecx, dword [esp + 0x30]
push 0x404e0000
push 0
call fcn.004c0530
lea edi, [esp + 0x34]
xor eax, eax
dec eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov ecx, edi
push str.https:__crash_reports.browser.yandex.net_submit
call fcn.004be760
mov eax, 0x50e36c
mov ecx, ebx
mov dword [esp + 0x14], eax
push dword [eax]
call fcn.004be760
mov ecx, dword [esp + 8]
push ebx
lea eax, [esp + 0x104]
push eax
call fcn.00417de0
mov esi, dword [esp + 0x100]
cmp byte [esp + 0x8b], 0
jns 0x43727f
push dword [esp + 0x80]
call fcn.00493d6d
add esp, 4
cmp esi, dword [esp + 0x1c]
je 0x4373fd
pxor xmm0, xmm0
movdqa xmmword [esp + 0xf0], xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
movdqa xmmword [esp + 0xb0], xmm0
movdqa xmmword [esp + 0xa0], xmm0
movdqa xmmword [esp + 0x90], xmm0
movdqa xmmword [esp + 0x80], xmm0
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4372ee
mov eax, dword [esi + 0x20]
lea ecx, [esp + 0x20]
push eax
call fcn.0046d660
movzx eax, byte [esi + 0x27]
test al, al
jns 0x437308
mov eax, dword [esi + 0x20]
mov esi, dword [esi + 0x1c]
jmp 0x43730b
add esi, 0x1c
mov dword [esp + 0x18], esi
test eax, eax
je 0x43738c
xor edi, edi
mov esi, eax
mov eax, dword [esp + 0x18]
movzx ebx, byte [eax + edi]
mov eax, ebx
and al, 0xdf
add al, 0xbf
cmp al, 0x1a
jb 0x437345
mov eax, ebx
add al, 0xd0
cmp al, 0xa
jb 0x437345
push 5
push ebx
push 0x50e39d
call fcn.00496050
add esp, 0xc
test eax, eax
je 0x43735b
movsx eax, bl
lea ecx, [esp + 0x20]
push eax
call fcn.0046dd80
inc edi
mov eax, esi
cmp esi, edi
jne 0x437315
jmp 0x43738c
pxor xmm0, xmm0
movdqa xmmword [esp + 0x100], xmm0
push ebx
push str.___02X
push 0x10
lea ebx, [esp + 0x10c]
push ebx
call fcn.00468e70
add esp, 0x10
lea ecx, [esp + 0x20]
push ebx
call fcn.0046e130
jmp 0x437352
cmp byte [esp + 0x2b], 0
lea esi, [esp + 0x20]
jns 0x43739b
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov ebx, dword [eax + 4]
lea edi, [esp + 0x34]
mov ecx, edi
push 0
mov eax, 0x3f
push eax
call fcn.0046d990
cmp eax, 0xffffffff
mov eax, 0x26
mov ecx, 0x3f
cmove eax, ecx
push esi
push ebx
push eax
push str._c_s_s
push 0x80
lea ebx, [esp + 0x94]
push ebx
call fcn.00468e70
add esp, 0x18
cmp byte [esp + 0x2b], 0
jns 0x4373f5
push dword [esp + 0x20]
call fcn.00493d6d
add esp, 4
mov ecx, edi
push ebx
call fcn.0046e130
mov eax, dword [esp + 0x14]
add eax, 8
cmp eax, str.product
jne 0x437240
mov ecx, dword [esp + 0x30]
push edi
call fcn.004c0490
xor eax, eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov edi, dword [esp + 0x30]
mov eax, dword [edi]
mov esi, ebx
mov ebx, dword [eax + 4]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push esi
call ebx
mov ebx, eax
mov esi, dword [esp + 0x10]
mov ecx, esi
call fcn.00437a90
test bl, bl
je 0x43746c
mov eax, dword [esp + 0xc]
cmp byte [eax + 0xb], 0
jns 0x437465
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [esp + 0x8b], 0
jns 0x437485
push dword [esp + 0x80]
call fcn.00493d6d
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x437498
push dword [esp + 0x34]
call fcn.00493d6d
add esp, 4
lea ecx, [esp + 0x40]
push dword [ecx + 4]
call fcn.004138d0
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0
test ecx, ecx
je 0x4374bb
push 1
call fcn.00438900
lea ecx, [esp + 0x50]
call fcn.004bfe90
jmp 0x436e2e
lea ecx, [esp + 0x100]
call fcn.004d5dc0
int3