Function at 0x411060
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6619a0
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x714f78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x2a4]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x284], eax
call fcn.00441045
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], 0
call fcn.00414a70
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x274], eax
call fcn.004237e3
mov ecx, eax
test ecx, ecx
je 0x4115b0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x687afc
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 2
call fcn.00402920
test al, al
jne 0x41111e
push 1
push 0x687afc
lea ecx, [ebp - 0x26c]
call fcn.00408780
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00409ef0
mov edx, dword [ebp - 0x26c]
or ebx, 0xffffffff
mov byte [ebp - 4], 1
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411158
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov edi, esp
mov dword [ebp - 0x274], edi
call fcn.004237e3
mov ecx, eax
test ecx, ecx
je 0x4115b0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00402920
test al, al
jne 0x4111a9
test esi, esi
jne 0x411192
xor ecx, ecx
jmp 0x4111a0
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411197
sub ecx, edx
push ecx
push esi
mov ecx, edi
call fcn.00408780
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 1
call fcn.00415250
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00414ca0
cmp dword [ebp - 0x29c], 2
jne 0x41153f
call fcn.004237e3
mov ecx, eax
test ecx, ecx
je 0x4115b0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x290], esi
mov byte [ebp - 4], 5
call fcn.004237e3
mov ecx, eax
test ecx, ecx
je 0x4115ba
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x687b08
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 6
call fcn.00402920
test al, al
jne 0x41123f
push 1
push 0x687b08
lea ecx, [ebp - 0x270]
call fcn.00408780
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 7
jle 0x4115c4
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00409f60
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 8
call fcn.004237e3
mov ecx, eax
test ecx, ecx
je 0x4115c9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x687b08
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 9
call fcn.00402920
test al, al
jne 0x4112b9
push 1
push 0x687b08
lea ecx, [ebp - 0x26c]
call fcn.00408780
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xa
jle 0x4115d3
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00409f60
push str..zip
push eax
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0xb
push eax
call fcn.00406fc0
mov ecx, dword [edi]
push 0
push dword [eax]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x28c], ecx
call fcn.00417440
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x27c], eax
push ecx
push 0xffffffffffffffff
push eax
call fcn.004172c0
mov eax, dword [ebp - 0x13c]
add esp, 0x2c
xor edi, edi
test eax, eax
jle 0x41136c
mov esi, dword [ebp - 0x27c]
mov ebx, eax
nop word [eax + eax]
lea eax, [ebp - 0x268]
push eax
push edi
push esi
call fcn.004172c0
push dword [ebp - 0x28c]
push edi
push esi
call fcn.00417ab0
inc edi
add esp, 0x18
cmp edi, ebx
jl 0x411340
mov esi, dword [ebp - 0x290]
or ebx, 0xffffffff
push dword [ebp - 0x27c]
call fcn.004167e0
mov edx, dword [ebp - 0x284]
add esp, 4
mov byte [ebp - 4], 0xb
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41139b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4113bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 8
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4113dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x274]
mov eax, ebx
mov byte [ebp - 4], 7
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4113fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41141f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004237e3
mov ecx, eax
test ecx, ecx
je 0x4115d8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x687b08
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xd
call fcn.00402920
test al, al
jne 0x411466
push 1
push 0x687b08
lea ecx, [ebp - 0x270]
call fcn.00408780
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xe
jle 0x4115e2
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00409f60
push str..zip
push eax
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xf
push eax
call fcn.00406fc0
add esp, 0x18
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 0x274]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4114ce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4114ef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411510
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
push esi
call fcn.00407700
mov edi, dword [ebp - 0x280]
add eax, 0x10
add esp, 4
mov byte [ebp - 4], 1
mov dword [edi], eax
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x41157c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41157c
call fcn.004237e3
mov ecx, eax
test ecx, ecx
je 0x4115b0
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edi, dword [ebp - 0x280]
add eax, 0x10
mov dword [edi], eax
push 0x686f7f
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.00402920
test al, al
jne 0x41157c
push 0
push 0x686f7f
mov ecx, edi
call fcn.00408780
lea ecx, [ebp - 0x2b4]
call fcn.00414bd0
lea ecx, [ebp - 0x2a4]
call fcn.0044105c
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0060249b
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004020e0
push 0x80004005
call fcn.004020e0
call fcn.00420632
push 0x80004005
call fcn.004020e0
call fcn.00420632
push 0x80004005
call fcn.004020e0
call fcn.00420632
int3