Function at 0x525550
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x525558
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x52613c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
add eax, 0x58a
mov edx, 0x42
call fcn.00408604
mov edx, dword [0x59fe68]
mov edx, dword [edx]
lea eax, [ebp - 0xc]
mov ecx, 0x526154
call fcn.00405184
mov eax, dword [ebp - 0xc]
call fcn.0040c5c8
test al, al
je 0x525658
mov dl, 1
mov eax, dword [0x41fa3c]
call fcn.00403edc
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x525651
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x525631
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [0x59fe68]
mov edx, dword [edx]
lea eax, [ebp - 0x10]
mov ecx, 0x526154
call fcn.00405184
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.00424ffc
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.00510224
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x525627
cmp eax, 0x42
jne 0x525627
mov eax, dword [ebp - 4]
lea edx, [eax + 0x58a]
mov ecx, 0x42
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x52563b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x525658
mov eax, dword [ebp - 8]
call fcn.00403f0c
ret
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525687
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3a0]
lea eax, [ebp - 0x14]
mov edx, 0x526168
call fcn.00405184
mov edx, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.00530888
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
call fcn.0040c914
mov eax, dword [ebp - 0x18]
call fcn.0040c5d8
test al, al
jne 0x5256bd
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
call fcn.0040c914
mov eax, dword [ebp - 0x1c]
call fcn.0040c5fc
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3ac], edx
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x5256e3
xor ecx, ecx
mov edx, 0x526188
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x525784
xor eax, eax
push ebp
push 0x525722
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
lea ecx, [eax + 0x3ac]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x3a0]
mov eax, dword [ebp - 4]
call fcn.0052669c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x525784
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x52579f
xor ecx, ecx
mov edx, 0x52624c
mov eax, dword [ebp - 4]
call fcn.00530888
xor edx, edx
push ebp
push 0x5257c2
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x84], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x525816
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525831
xor ecx, ecx
mov edx, 0x526294
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
call fcn.0040c5c8
test al, al
je 0x525857
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
call fcn.00405338
push eax
call sub.kernel32.dll_DeleteFileA
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525872
xor ecx, ecx
mov edx, 0x5262b4
mov eax, dword [ebp - 4]
call fcn.00530888
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0052efa0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525897
xor ecx, ecx
mov edx, 0x5262d0
mov eax, dword [ebp - 4]
call fcn.00530888
push 1
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 4]
call fcn.0052eea0
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
add eax, 0x360
call fcn.00404eb0
mov eax, dword [ebp - 4]
add eax, 0x240
xor ecx, ecx
mov edx, 0x111
call fcn.00403774
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x5258e8
xor ecx, ecx
mov edx, 0x5262ec
mov eax, dword [ebp - 4]
call fcn.00530888
xor edx, edx
push ebp
push 0x525917
push dword fs:[edx]
mov dword fs:[edx], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x517b9c]
call fcn.0051a83c
mov edx, dword [ebp - 4]
mov dword [edx + 0x150], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x52595f
xor edx, edx
push ebp
push 0x5259ca
push dword fs:[edx]
mov dword fs:[edx], esp
push 1
call sub.kernel32.dll_Sleep
mov eax, dword [ebp - 4]
push eax
push 0x52d608
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov edx, 3
call fcn.0051a788
mov eax, dword [ebp - 4]
push eax
push 0x52d5c0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
call fcn.0051a81c
mov eax, dword [ebp - 4]
push eax
push 0x52de48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
xor edx, edx
call fcn.0051a788
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x525a12
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525a2d
xor ecx, ecx
mov edx, 0x526384
mov eax, dword [ebp - 4]
call fcn.00530888
xor edx, edx
push ebp
push 0x525a59
push dword fs:[edx]
mov dword fs:[edx], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x508ca4]
call fcn.00508ee0
mov edx, dword [ebp - 4]
mov dword [edx + 0x7c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x525aa1
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525abc
xor ecx, ecx
mov edx, 0x5263e4
mov eax, dword [ebp - 4]
call fcn.00530888
mov dl, 1
mov eax, dword [0x41ef50]
call fcn.00403edc
mov edx, dword [ebp - 4]
mov dword [edx + 0x14c], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525aec
xor ecx, ecx
mov edx, 0x526400
mov eax, dword [ebp - 4]
call fcn.00530888
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14c]
xor edx, edx
call fcn.00521020
xor eax, eax
push ebp
push 0x525b33
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5f8]
call fcn.00520cf8
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.00533178
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x525b3d
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525b58
xor ecx, ecx
mov edx, 0x526418
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
add eax, 0x378
mov edx, 0x526438
call fcn.00404eb0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525b85
xor ecx, ecx
mov edx, 0x52644c
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x54], edx
mov dword [eax + 0x50], 0x52839c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525bb3
xor ecx, ecx
mov edx, 0x52646c
mov eax, dword [ebp - 4]
call fcn.00530888
xor ecx, ecx
mov dl, 1
mov eax, dword [0x50dcd0]
call fcn.0050e138
mov edx, dword [ebp - 4]
mov dword [edx + 0x15c], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525be5
xor ecx, ecx
mov edx, 0x526488
mov eax, dword [ebp - 4]
call fcn.00530888
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4944d0]
call fcn.00496cdc
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x12c], ebx
mov eax, ebx
xor edx, edx
call fcn.00496e64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x12c]
mov edx, 0x4e20
call fcn.00496e74
mov eax, dword [ebp - 4]
push eax
push 0x52df64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x12c]
call fcn.00496e84
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4944d0]
call fcn.00496cdc
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x124], ebx
mov eax, ebx
xor edx, edx
call fcn.00496e64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x124]
mov edx, 0x1388
call fcn.00496e74
mov eax, dword [ebp - 4]
push eax
push 0x52b654
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x124]
call fcn.00496e84
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4944d0]
call fcn.00496cdc
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x128], ebx
mov eax, ebx
xor edx, edx
call fcn.00496e64
mov eax, dword [ebp - 4]
push eax
push 0x52b71c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x128]
call fcn.00496e84
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4944d0]
call fcn.00496cdc
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x11c], ebx
mov eax, ebx
xor edx, edx
call fcn.00496e64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x11c]
mov edx, 0xea60
call fcn.00496e74
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x11c]
mov dword [eax + 0xc], 0x1b669
mov edx, dword [ebp - 4]
push edx
push 0x52a94c
call fcn.00496e84
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4944d0]
call fcn.00496cdc
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x120], ebx
mov eax, ebx
xor edx, edx
call fcn.00496e64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x120]
mov edx, 0x1b58
call fcn.00496e74
mov eax, dword [ebp - 4]
push eax
push 0x532d84
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x120]
call fcn.00496e84
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525d75
xor ecx, ecx
mov edx, 0x5264a0
mov eax, dword [ebp - 4]
call fcn.00530888
mov dl, 1
mov eax, dword [0x41ef50]
call fcn.00403edc
mov edx, dword [ebp - 4]
mov dword [edx + 0x148], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525da5
xor ecx, ecx
mov edx, 0x5264bc
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
call fcn.0040c5d8
test al, al
jne 0x525dc5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
call fcn.0040c5fc
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525df4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x80]
lea eax, [ebp - 0x30]
mov edx, 0x5264d8
call fcn.00405184
mov edx, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525e0f
xor ecx, ecx
mov edx, 0x5264f8
mov eax, dword [ebp - 4]
call fcn.00530888
xor edx, edx
push ebp
push 0x525e3f
push dword fs:[edx]
mov dword fs:[edx], esp
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5202cc]
call fcn.00520424
mov edx, dword [ebp - 4]
mov dword [edx + 0x204], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x525e87
mov edx, 0x6d2
mov eax, dword [ebp - 4]
call fcn.00530524
mov edx, 0x6d3
mov eax, dword [ebp - 4]
call fcn.0053056c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525ebc
xor ecx, ecx
mov edx, 0x526540
mov eax, dword [ebp - 4]
call fcn.00530888
xor edx, edx
push ebp
push 0x525eec
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, 0x52655c
call fcn.0050841c
mov dl, 1
mov eax, 0x52657c
call fcn.0050841c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x525f34
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x5260b6
xor edx, edx
push ebp
push 0x525fd0
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525f6a
xor ecx, ecx
mov edx, 0x5265c4
mov eax, dword [ebp - 4]
call fcn.00530888
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0052f884
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525f8f
xor ecx, ecx
mov edx, 0x5265e4
mov eax, dword [ebp - 4]
call fcn.00530888
xor ecx, ecx
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0052e400
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x525fb6
xor ecx, ecx
mov edx, 0x526604
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x120]
xor edx, edx
call fcn.00496e64
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x526018
xor edx, edx
push ebp
push 0x52606e
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x526041
xor ecx, ecx
mov edx, 0x526624
mov eax, dword [ebp - 4]
call fcn.00530888
mov eax, dword [ebp - 4]
call fcn.005334ac
mov eax, dword [ebp - 4]
cmp byte [eax + 0x5d2], 0
je 0x526064
xor ecx, ecx
mov edx, 0x52663c
mov eax, dword [ebp - 4]
call fcn.00530888
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5260b6
mov eax, dword [ebp - 4]
call fcn.005329e8
mov edx, dword [ebp - 4]
mov byte [edx + 0x55c], al
mov eax, dword [ebp - 4]
call fcn.00524e20
push 0x526684
call fcn.0040e5b0
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38]
call fcn.0040f274
push dword [ebp - 0x38]
push 0x526698
call fcn.0040e5dc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x3c]
call fcn.0040f28c
push dword [ebp - 0x3c]
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051f8
mov edx, dword [ebp - 0x34]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.00530888
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x526143
lea eax, [ebp - 0x3c]
mov edx, 0xd
call fcn.00404e80
ret