Function at 0x506a2c
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd00
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x300], ebx
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2fc], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
mov byte [ebp - 0x19], cl
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x5072ca
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x55aed0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp - 0x18]
call fcn.0040b500
test al, al
je 0x507291
mov edx, dword [ebp - 0x18]
lea eax, [ebp - 0x2f0]
call fcn.0040388c
mov edx, 1
lea eax, [ebp - 0x2f0]
call fcn.00403f3c
call fcn.00403094
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 8]
call fcn.0040573c
jmp 0x506dfc
lea edx, [ebp - 0x3a]
lea eax, [ebp - 0x2f0]
call fcn.00403c18
call fcn.00403094
inc ebx
lea eax, [ebp - 0x2f4]
movzx edx, byte [ebp - 0x3a]
call fcn.00405924
mov edx, dword [ebp - 0x2f4]
lea eax, [ebp - 8]
call fcn.00405a08
mov esi, dword [ebp - 8]
test esi, esi
je 0x506b11
sub esi, 4
mov esi, dword [esi]
dec esi
jle 0x506b3c
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x506b2b
mov eax, dword [ebp - 0x50]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x50]
cmp byte [eax + edx - 2], 0xd
sete byte [ebp - 0x51]
jmp 0x506b40
mov byte [ebp - 0x51], 0
cmp byte [ebp - 0x51], 0
je 0x506b6e
mov eax, dword [ebp - 8]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x506b5d
mov eax, dword [ebp - 0x58]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x58]
cmp byte [eax + edx - 1], 0xa
sete byte [ebp - 0x59]
jmp 0x506b72
mov byte [ebp - 0x59], 0
cmp byte [ebp - 0x59], 0
je 0x506b81
mov byte [ebp - 0x6e], 1
jmp 0x506c03
mov eax, dword [ebp - 8]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x506b98
mov eax, dword [ebp - 0x60]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jle 0x506bc6
mov eax, dword [ebp - 8]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x506bb5
mov eax, dword [ebp - 0x64]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x64]
cmp byte [eax + edx - 2], 0xa
sete byte [ebp - 0x65]
jmp 0x506bca
mov byte [ebp - 0x65], 0
cmp byte [ebp - 0x65], 0
je 0x506bf8
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x506be7
mov eax, dword [ebp - 0x6c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x6c]
cmp byte [eax + edx - 1], 0xd
sete byte [ebp - 0x6d]
jmp 0x506bfc
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
mov byte [ebp - 0x6e], al
cmp byte [ebp - 0x6e], 0
je 0x506c0f
mov byte [ebp - 0x6f], 1
jmp 0x506c25
lea eax, [ebp - 0x2f0]
call fcn.00403b30
call fcn.00403094
cmp ebx, eax
sete byte [ebp - 0x6f]
cmp byte [ebp - 0x6f], 0
je 0x506dfc
mov byte [ebp - 0x45], 0
mov edi, 1
mov eax, dword [ebp - 0x10]
call fcn.00406d0c
inc eax
push eax
lea eax, [ebp - 0x10]
mov ecx, 1
mov edx, dword [0x506a0c]
call fcn.00406ec8
add esp, 4
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax*4]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
mov ecx, eax
dec ecx
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.00405c34
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
mov ecx, eax
lea eax, [ebp - 8]
mov edx, edi
call fcn.00405c74
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax*4 + 4]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
mov ecx, eax
dec ecx
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.00405c34
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
mov ecx, eax
lea eax, [ebp - 8]
mov edx, edi
call fcn.00405c74
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
dec eax
inc eax
jle 0x506cfc
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
mov dword [ebp - 0x40], eax
jmp 0x506d32
mov edx, dword [ebp - 8]
mov eax, 0x5072ec
call fcn.00405d18
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 8]
mov eax, 0x5072f8
call fcn.00405d18
cmp eax, dword [ebp - 0x40]
jge 0x506d2e
mov edx, dword [ebp - 8]
mov eax, 0x5072f8
call fcn.00405d18
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x45], 1
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax*4 + 8]
push eax
mov ecx, dword [ebp - 0x40]
dec ecx
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.00405c34
cmp byte [ebp - 0x45], 0
jne 0x506de3
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0x40]
mov edx, edi
call fcn.00405c74
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
dec eax
inc eax
jle 0x506d88
mov edx, dword [ebp - 8]
mov eax, 0x5072e0
call fcn.00405d18
mov dword [ebp - 0x40], eax
jmp 0x506dba
mov edx, dword [ebp - 8]
mov eax, 0x5072ec
call fcn.00405d18
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 8]
mov eax, 0x5072f8
call fcn.00405d18
cmp eax, dword [ebp - 0x40]
jge 0x506dba
mov edx, dword [ebp - 8]
mov eax, 0x5072f8
call fcn.00405d18
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax*4 + 0xc]
push eax
mov ecx, dword [ebp - 0x40]
dec ecx
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.00405c34
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0x40]
mov edx, edi
call fcn.00405c74
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x10]
mov byte [edx + eax*4 + 0x10], 0
lea eax, [ebp - 8]
call fcn.0040573c
inc dword [ebp - 0x38]
lea eax, [ebp - 0x2f0]
call fcn.00403b30
call fcn.00403094
cmp ebx, eax
jl 0x506ad4
lea eax, [ebp - 0x2f0]
call fcn.00403954
call fcn.00403094
cmp byte [ebp - 0x19], 0
je 0x506e38
mov eax, dword [ebp - 0x18]
call fcn.00405bcc
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0xc]
call fcn.0040573c
xor eax, eax
mov dword [ebp - 0x38], eax
jmp 0x50727f
xor eax, eax
push ebp
push 0x507278
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004fd964
dec eax
sub al, 0xb
jb 0x506e6c
call fcn.00405140
jmp 0x507291
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0xc]
call fcn.00405b64
je 0x506f91
mov eax, dword [0x55ac88]
cmp dword [eax], 0
je 0x506e95
call fcn.004fd438
mov dl, 1
mov eax, dword [0x41af60]
call fcn.004047b0
mov edx, dword [0x55ac88]
mov dword [edx], eax
mov eax, dword [0x55aed0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov byte [ebp - 0x1a], 0
lea eax, [ebp - 0x20]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x1a]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x31], 0
mov eax, dword [0x55acac]
mov edx, dword [ebp - 0x38]
lea edx, [edx + edx*4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4]
call fcn.00405790
xor ecx, ecx
mov dl, 1
mov eax, dword [0x552c68]
call fcn.00552cd0
mov dword [0x56084c], eax
mov eax, dword [0x56084c]
call fcn.00552f1c
xor eax, eax
push ebp
push 0x506f8a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x2c]
mov eax, dword [0x55ab38]
mov eax, dword [eax]
movzx ecx, byte [ebp - 0x31]
call fcn.00544a34
test al, al
jne 0x506f4a
call fcn.00405140
call fcn.00405140
jmp 0x507291
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x506f91
cmp dword [0x56084c], 0
je 0x506f73
cmp dword [0x56084c], 0
je 0x506f73
mov eax, dword [0x56084c]
call fcn.004268d0
mov eax, dword [0x56084c]
call fcn.004268d8
mov eax, dword [0x55ab88]
mov eax, dword [eax]
call fcn.0047bd68
ret
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edi, dword [eax + 8]
dec edi
test edi, edi
jl 0x506fc9
inc edi
xor ebx, ebx
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edx, ebx
call fcn.0041d1e4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x4c], 0
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x95], 0
inc ebx
dec edi
jne 0x506fa3
mov esi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x10]
call fcn.00406d0c
mov edi, eax
dec edi
sub edi, esi
jl 0x5070f4
inc edi
lea eax, [esi + esi*4]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x38]
lea edx, [edx + edx*4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4]
call fcn.00405b64
jne 0x5070df
lea eax, [esi + esi*4]
mov edx, dword [ebp - 0x10]
cmp byte [edx + eax*4 + 0x10], 0
jne 0x5070df
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5070df
inc eax
mov dword [ebp - 0x4c], eax
xor ebx, ebx
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edx, ebx
call fcn.0041d1e4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x4c], 0
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edx, ebx
call fcn.0041d1e4
mov eax, dword [eax + 0x18]
lea edx, [ebp - 0x2f8]
call fcn.0040a760
mov eax, dword [ebp - 0x2f8]
push eax
lea eax, [esi + esi*4]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + eax*4 + 4]
lea edx, [ebp - 0x2fc]
call fcn.0040a760
mov edx, dword [ebp - 0x2fc]
pop eax
call fcn.00405b64
jne 0x5070d5
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x4c], 1
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x95], 0
mov eax, dword [ebp - 0x20]
add eax, 0x44
lea edx, [esi + esi*4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4 + 8]
call fcn.00405790
mov eax, dword [ebp - 0x20]
add eax, 0x48
lea edx, [esi + esi*4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4 + 0xc]
call fcn.00405790
lea eax, [esi + esi*4]
mov edx, dword [ebp - 0x10]
mov byte [edx + eax*4 + 0x10], 1
jmp 0x5070df
inc ebx
dec dword [ebp - 0x4c]
jne 0x50702f
lea eax, [esi + esi*4]
mov edx, dword [ebp - 0x10]
cmp byte [edx + eax*4 + 0x10], 0
jne 0x5070f4
inc esi
dec edi
jne 0x506fe0
cmp dword [ebp - 0x20], 0
jne 0x507135
lea ecx, [ebp - 0x300]
mov eax, dword [0x560848]
mov eax, dword [eax + 0x360]
mov edx, 0x507304
call fcn.00486174
mov eax, dword [ebp - 0x300]
call fcn.0044d130
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [eax + 0x294], edx
call fcn.00405140
jmp 0x507291
push 0x12d
lea eax, [ebp - 0x1a1]
push eax
push 0x507350
push 0x507354
push 0x50735c
call sub.kernel32.dll_GetProfileStringA
lea eax, [ebp - 4]
lea edx, [ebp - 0x1a1]
mov ecx, 0x12d
call fcn.004059ac
mov edx, dword [ebp - 4]
mov eax, 0x50736c
call fcn.00405d18
mov ebx, eax
test ebx, ebx
jne 0x507196
mov eax, dword [ebp - 4]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x507192
mov eax, dword [ebp - 0x74]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x74]
inc ebx
lea eax, [ebp - 4]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405c34
lea eax, [ebp - 0x1a1]
mov edx, dword [ebp - 4]
call fcn.0040bb24
call fcn.00545ea8
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
and eax, 1
cmp eax, 1
sete byte [ebp - 0x39]
cmp byte [ebp - 0x39], 0
je 0x507211
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edi, dword [eax + 8]
dec edi
test edi, edi
jl 0x507211
inc edi
xor ebx, ebx
mov eax, dword [0x55ab90]
mov eax, dword [eax]
mov edx, ebx
call fcn.0041d1e4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp byte [eax + 0x98], 0
je 0x50720d
mov eax, dword [ebp - 0x20]
add eax, 0x20
call fcn.0040573c
inc ebx
dec edi
jne 0x5071e5
mov eax, dword [0x55a98c]
mov eax, dword [eax]
call fcn.00504b74
xor eax, eax
push ebp
push 0x50724c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
call fcn.0053ab6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x507253
mov eax, dword [0x55a98c]
mov eax, dword [eax]
call fcn.0047811c
ret
mov eax, dword [ebp - 0x10]
call fcn.00406d0c
dec eax
cmp eax, dword [ebp - 0x38]
jge 0x506e4a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5072d1
lea eax, [ebp - 0x300]
mov edx, 4
call fcn.00405760
lea eax, [ebp - 0x10]
mov edx, dword [0x506a0c]
call fcn.00406ed4
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405760
ret