Function at 0x4111b0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66abc0
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x71cf78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x2a4]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x284], eax
call fcn.0044128d
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], 0
call fcn.00414bc0
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x274], eax
call fcn.00423a7b
mov ecx, eax
test ecx, ecx
je 0x411700
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x690b3c
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 2
call fcn.00402ad0
test al, al
jne 0x41126e
push 1
push 0x690b3c
lea ecx, [ebp - 0x26c]
call fcn.00408790
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2b0]
call fcn.0040a060
mov edx, dword [ebp - 0x26c]
or ebx, 0xffffffff
mov byte [ebp - 4], 1
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4112a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov edi, esp
mov dword [ebp - 0x274], edi
call fcn.00423a7b
mov ecx, eax
test ecx, ecx
je 0x411700
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00402ad0
test al, al
jne 0x4112f9
test esi, esi
jne 0x4112e2
xor ecx, ecx
jmp 0x4112f0
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4112e7
sub ecx, edx
push ecx
push esi
mov ecx, edi
call fcn.00408790
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 1
call fcn.004153a0
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00414df0
cmp dword [ebp - 0x29c], 2
jne 0x41168f
call fcn.00423a7b
mov ecx, eax
test ecx, ecx
je 0x411700
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x290], esi
mov byte [ebp - 4], 5
call fcn.00423a7b
mov ecx, eax
test ecx, ecx
je 0x41170a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x690b48
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 6
call fcn.00402ad0
test al, al
jne 0x41138f
push 1
push 0x690b48
lea ecx, [ebp - 0x270]
call fcn.00408790
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 7
jle 0x411714
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.0040a0d0
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 8
call fcn.00423a7b
mov ecx, eax
test ecx, ecx
je 0x411719
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x690b48
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 9
call fcn.00402ad0
test al, al
jne 0x411409
push 1
push 0x690b48
lea ecx, [ebp - 0x26c]
call fcn.00408790
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xa
jle 0x411723
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0040a0d0
push str..zip
push eax
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0xb
push eax
call fcn.00406fd0
mov ecx, dword [edi]
push 0
push dword [eax]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x28c], ecx
call fcn.004176d0
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x27c], eax
push ecx
push 0xffffffffffffffff
push eax
call fcn.00417550
mov eax, dword [ebp - 0x13c]
add esp, 0x2c
xor edi, edi
test eax, eax
jle 0x4114bc
mov esi, dword [ebp - 0x27c]
mov ebx, eax
nop word [eax + eax]
lea eax, [ebp - 0x268]
push eax
push edi
push esi
call fcn.00417550
push dword [ebp - 0x28c]
push edi
push esi
call fcn.00417d40
inc edi
add esp, 0x18
cmp edi, ebx
jl 0x411490
mov esi, dword [ebp - 0x290]
or ebx, 0xffffffff
push dword [ebp - 0x27c]
call fcn.00416a70
mov edx, dword [ebp - 0x284]
add esp, 4
mov byte [ebp - 4], 0xb
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4114eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41150c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 8
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41152d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x274]
mov eax, ebx
mov byte [ebp - 4], 7
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41154e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41156f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00423a7b
mov ecx, eax
test ecx, ecx
je 0x411728
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x690b48
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xd
call fcn.00402ad0
test al, al
jne 0x4115b6
push 1
push 0x690b48
lea ecx, [ebp - 0x270]
call fcn.00408790
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xe
jle 0x411732
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0040a0d0
push str..zip
push eax
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xf
push eax
call fcn.00406fd0
add esp, 0x18
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 0x274]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41161e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41163f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411660
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
push esi
call fcn.00407710
mov edi, dword [ebp - 0x280]
add eax, 0x10
add esp, 4
mov byte [ebp - 4], 1
mov dword [edi], eax
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4116cc
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4116cc
call fcn.00423a7b
mov ecx, eax
test ecx, ecx
je 0x411700
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edi, dword [ebp - 0x280]
add eax, 0x10
mov dword [edi], eax
push 0x68ffbf
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.00402ad0
test al, al
jne 0x4116cc
push 0
push 0x68ffbf
mov ecx, edi
call fcn.00408790
lea ecx, [ebp - 0x2b4]
call fcn.00414d20
lea ecx, [ebp - 0x2a4]
call fcn.004412a4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006026e7
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004020e0
push 0x80004005
call fcn.004020e0
call fcn.004208a2
push 0x80004005
call fcn.004020e0
call fcn.004208a2
push 0x80004005
call fcn.004020e0
call fcn.004208a2
int3