Function at 0x432e90
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x120
mov edi, ecx
mov eax, dword [0x521014]
xor eax, ebp
mov dword [esp + 0x118], eax
push 0x28
call fcn.0048b346
add esp, 4
mov esi, eax
mov ecx, eax
push 1
call fcn.004b68b0
movzx eax, byte [edi + 0xb]
mov edx, edi
test al, al
jns 0x432ed3
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov dword [esp + 8], edi
lea edi, [esp + 0x80]
mov ecx, edi
push eax
push edx
call fcn.00440f40
mov ecx, esi
push edi
call fcn.00433ab0
mov ebx, eax
mov ecx, edi
call fcn.0046dbe0
test bl, bl
jne 0x432f23
xor ebx, ebx
test esi, esi
je 0x432f0b
mov ecx, esi
push 1
call fcn.004b6980
mov ecx, dword [esp + 0x118]
xor ecx, ebp
call fcn.0048b980
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x10], esi
xor eax, eax
dec eax
lea edi, [esp + 0x50]
mov dword [edi + 0x24], eax
mov dword [edi + 0x20], eax
pcmpeqd xmm0, xmm0
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
mov ecx, edi
call fcn.004b7160
mov ebx, dword [esp + 8]
movzx eax, byte [ebx + 0x35]
mov ecx, edi
push eax
call fcn.004b7200
lea eax, [ebx + 0x38]
mov dword [esp + 0xc], eax
mov esi, dword [ebx + 0x38]
lea eax, [ebx + 0x3c]
mov dword [esp + 0x18], eax
cmp esi, eax
jne 0x432fe0
lea ecx, [esp + 0x80]
push str.application_octet_stream
call fcn.004b5b10
lea edi, [esp + 0x40]
mov ecx, edi
push 0x506f7b
call fcn.004b5b10
lea eax, [esp + 0x100]
mov dword [eax], 0xffffffff
mov esi, dword [esp + 0xc]
mov ecx, esi
push edi
push eax
call fcn.00413490
mov ecx, dword [eax]
test ecx, ecx
je 0x43352a
xor eax, eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x108], eax
movzx ebx, byte [ecx + 0x27]
test bl, bl
jns 0x4330e3
mov ebx, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x1c]
jmp 0x4330e6
lea ebx, [esp + 0x50]
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x432fef
mov eax, dword [esi + 0x14]
lea edi, [esi + 0x10]
cmp eax, 0x14
jne 0x43300d
mov ecx, edi
push 0x14
push str.upload_file_minidump
push 0xffffffffffffffff
push 0
call fcn.0046ceb0
test eax, eax
je 0x43304d
lea eax, [esi + 0x1c]
mov ecx, ebx
push eax
push edi
call fcn.004b7210
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x43302a
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x433020
jmp 0x433040
mov eax, dword [esi + 8]
cmp dword [eax], esi
je 0x433040
add esi, 8
mov ecx, dword [esi]
lea esi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x433034
mov esi, eax
cmp eax, dword [esp + 0x18]
jne 0x432fe4
jmp 0x432f6d
lea ecx, [esp + 0x80]
push 0x14d
push str.SendReport
push 2
call fcn.004b9b40
lea ecx, [esp + 0xbc]
push 0x508f77
push str.reserved_key
call fcn.004b5d50
movzx eax, byte [esi + 0x1b]
test al, al
jns 0x433089
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
add eax, edi
lea ecx, [esp + 0xbc]
push eax
push edi
call fcn.004b5d50
lea ecx, [esp + 0xbc]
push 0x508f8b
push str.__discarding_value
call fcn.004b5d50
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4330bf
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
jmp 0x4330c2
lea edx, [esi + 0x1c]
add eax, edx
lea ecx, [esp + 0xbc]
push eax
push edx
call fcn.004b5d50
lea ecx, [esp + 0x80]
call fcn.004379a0
jmp 0x433019
add ecx, 0x1c
lea eax, [ebx + 4]
cmp eax, 0xfffffff0
jae 0x43359e
cmp eax, 0xb
jae 0x43310b
mov byte [esp + 0x10b], bl
lea esi, [esp + 0x100]
test ebx, ebx
jne 0x43313f
jmp 0x43314a
lea edi, [ebx + 0x14]
and edi, 0xfffffff0
push edi
mov esi, ecx
call fcn.0048b346
mov ecx, esi
add esp, 4
mov esi, eax
mov dword [esp + 0x100], eax
or edi, 0x80000000
mov dword [esp + 0x108], edi
lea edi, [esp + 0x40]
mov dword [esp + 0x104], ebx
push ebx
push ecx
push esi
call fcn.0048e490
add esp, 0xc
mov byte [esi + ebx], 0
lea esi, [esp + 0x100]
mov ecx, esi
push 4
push str..dmp
call fcn.0046c6b0
lea ebx, [esp + 0x34]
mov ecx, ebx
push str.upload_file_minidump
call fcn.004b5b10
lea ecx, [esp + 0x50]
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x14]
push esi
push ebx
call fcn.004b7310
cmp byte [ebx + 0xb], 0
jns 0x43319c
push dword [esp + 0x34]
call fcn.0048b376
add esp, 4
cmp byte [esp + 0x10b], 0
jns 0x4331b5
push dword [esp + 0x100]
call fcn.0048b376
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x4331c8
push dword [esp + 0x40]
call fcn.0048b376
add esp, 4
cmp byte [esp + 0x8b], 0
jns 0x4331e1
push dword [esp + 0x80]
call fcn.0048b376
add esp, 4
lea eax, [esp + 0x30]
mov dword [eax], 0xffffffff
push eax
call fcn.004b7840
add esp, 4
lea esi, [esp + 0x44]
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi - 4], esi
lea ecx, [esp + 0x50]
push edi
call fcn.004346f0
mov edi, dword [esi - 4]
cmp edi, esi
je 0x433251
lea eax, [edi + 0x10]
mov ecx, dword [esp + 0x30]
lea edx, [edi + 0x1c]
push edx
push eax
call fcn.004b77a0
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x433235
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x43322b
jmp 0x43324b
mov eax, dword [edi + 8]
cmp dword [eax], edi
je 0x43324b
add edi, 8
mov ecx, dword [edi]
lea edi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x43323f
mov edi, eax
cmp eax, esi
jne 0x433213
mov ebx, dword [esp + 0x30]
lea esi, [esp + 0x2c]
lea ecx, [esp + 0x50]
push esi
call fcn.00433de0
mov eax, dword [esi]
mov ecx, ebx
push eax
call fcn.004b7800
mov ecx, dword [esp + 0x30]
push 0x404e0000
push 0
call fcn.004b7820
lea ecx, [esp + 0x34]
xor eax, eax
dec eax
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
push str.https:__crash_reports.browser.yandex.net_submit
call fcn.004b5b10
mov eax, 0x508fdc
mov edi, dword [esp + 0xc]
lea ebx, [esp + 0x80]
mov ecx, ebx
mov dword [esp + 0x14], eax
push dword [eax]
call fcn.004b5b10
mov ecx, edi
push ebx
lea eax, [esp + 0x104]
push eax
call fcn.00417760
mov esi, dword [esp + 0x100]
cmp byte [esp + 0x8b], 0
jns 0x4332e3
push dword [esp + 0x80]
call fcn.0048b376
add esp, 4
cmp esi, dword [esp + 0x18]
je 0x4333eb
pxor xmm0, xmm0
movdqa xmmword [esp + 0xf0], xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
movdqa xmmword [esp + 0xb0], xmm0
movdqa xmmword [esp + 0xa0], xmm0
movdqa xmmword [esp + 0x90], xmm0
movdqa xmmword [esp + 0x80], xmm0
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
movzx eax, byte [esi + 0x27]
test al, al
jns 0x433352
mov eax, dword [esi + 0x20]
lea ecx, [esp + 0x20]
push eax
call fcn.0046c4f0
movzx eax, byte [esi + 0x27]
test al, al
jns 0x43336c
mov eax, dword [esi + 0x20]
mov esi, dword [esi + 0x1c]
jmp 0x43336f
add esi, 0x1c
mov dword [esp + 0x1c], esi
test eax, eax
jne 0x4333ff
cmp byte [esp + 0x2b], 0
lea esi, [esp + 0x20]
jns 0x43338a
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov edi, dword [eax + 4]
lea ecx, [esp + 0x34]
push 0
mov ebx, 0x3f
push ebx
call fcn.0046c820
cmp eax, 0xffffffff
mov eax, 0x26
cmove eax, ebx
push esi
push edi
push eax
push str._c_s_s
push 0x80
lea ebx, [esp + 0x94]
push ebx
call fcn.004686d0
add esp, 0x18
cmp byte [esp + 0x2b], 0
mov edi, dword [esp + 0xc]
jns 0x4333e1
push dword [esp + 0x20]
call fcn.0048b376
add esp, 4
lea ecx, [esp + 0x34]
push ebx
call fcn.0046cfd0
mov eax, dword [esp + 0x14]
add eax, 8
cmp eax, str.product
jne 0x4332a6
jmp 0x43347b
xor edi, edi
mov esi, eax
mov eax, dword [esp + 0x1c]
movzx ebx, byte [eax + edi]
mov eax, ebx
and al, 0xdf
add al, 0xbf
cmp al, 0x1a
jb 0x433431
mov eax, ebx
add al, 0xd0
cmp al, 0xa
jb 0x433431
push 5
push ebx
push 0x50900d
call fcn.0048d4d0
add esp, 0xc
test eax, eax
je 0x43344a
movsx eax, bl
lea ecx, [esp + 0x20]
push eax
call fcn.0046cc20
inc edi
mov eax, esi
cmp esi, edi
jne 0x433401
jmp 0x43337b
pxor xmm0, xmm0
movdqa xmmword [esp + 0x100], xmm0
push ebx
push str.___02X
push 0x10
lea ebx, [esp + 0x10c]
push ebx
call fcn.004686d0
add esp, 0x10
lea ecx, [esp + 0x20]
push ebx
call fcn.0046cfd0
jmp 0x43343e
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x34]
push eax
call fcn.004b7790
xor eax, eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx]
push ebx
call dword [eax + 4]
mov ebx, eax
mov esi, dword [esp + 0x10]
mov ecx, esi
call fcn.00433b40
test bl, bl
je 0x4334ce
mov eax, dword [esp + 8]
cmp byte [eax + 0xb], 0
jns 0x4334c7
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp byte [esp + 0x8b], 0
jns 0x4334e7
push dword [esp + 0x80]
call fcn.0048b376
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x4334fa
push dword [esp + 0x34]
call fcn.0048b376
add esp, 4
lea ecx, [esp + 0x40]
push dword [ecx + 4]
call fcn.004b5ef0
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], 0
test ecx, ecx
je 0x43351c
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [esp + 0x50]
call fcn.004b71d0
jmp 0x432efe
mov ebx, eax
push 0x28
call fcn.0048b346
add esp, 4
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x18], ecx
movq xmm0, qword [esp + 0x40]
movq qword [eax + 0x10], xmm0
xor edx, edx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x24], edx
mov ecx, dword [esp + 0x100]
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [ebx], eax
mov ecx, dword [esi]
mov ecx, dword [ecx]
test ecx, ecx
je 0x433582
mov edx, ebx
mov ebx, eax
mov dword [esi], ecx
mov eax, dword [edx]
jmp 0x433584
mov ebx, eax
mov esi, dword [esp + 8]
push eax
push dword [esi + 0x3c]
call fcn.00467630
add esp, 8
inc dword [esi + 0x40]
mov ecx, ebx
jmp 0x432fb2
lea ecx, [esp + 0x100]
call fcn.004cb7c0
int3