Function at 0x402930
Capabilities:
Delete file
Initialize winsock library
Set current directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x424f98
mov eax, dword fs:[0]
push eax
sub esp, 0x8ac
mov eax, dword [0x430510]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x401b80
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x208
xor ebx, ebx
lea ecx, [ebp - 0x26e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x270], ax
call fcn.0041a000
add esp, 0xc
push 0x105
lea edx, [ebp - 0x270]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4029c3
push 0x4290e4
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x4029c3
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push ebx
call fcn.00414aa6
add esp, 4
push eax
call fcn.00414c31
add esp, 4
lea edx, [ebp - 0x8a8]
push edx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [ebp - 0x38]
lea eax, [ebp - 0x60]
mov dword [ebp - 0x8b0], esi
mov esi, 0x28
mov dword [ebp - 0x678], eax
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x38], 0x38443731
mov dword [ebp - 0x34], 0xb7bfb0e1
mov dword [ebp - 0x30], 0xf3f98e56
mov dword [ebp - 0x2c], 0xf41df4b6
mov dword [ebp - 0x28], 0x54893d9
mov dword [ebp - 0x24], 0xff7c3f21
mov dword [ebp - 0x20], 0x5e7817e2
mov dword [ebp - 0x1c], 0x25a284df
mov dword [ebp - 0x18], 0xa0cec65c
mov dword [ebp - 0x14], 0x2941765
mov dword [ebp - 0x8ac], esi
mov dword [ebp - 0x60], 0x129f438
mov dword [ebp - 0x5c], 0x9d255a43
mov dword [ebp - 0x58], 0xe854c724
mov dword [ebp - 0x54], 0xbbf3bb2a
mov dword [ebp - 0x50], 0x985cd7b
mov dword [ebp - 0x4c], 0xe3a3e8fb
mov dword [ebp - 0x48], 0x5e7817e2
mov dword [ebp - 0x44], 0x25a284df
mov dword [ebp - 0x40], 0xa0cec65c
mov dword [ebp - 0x3c], 0x2941765
mov dword [ebp - 0x674], esi
call fcn.00407730
lea eax, [ebp - 0x678]
call fcn.00407730
mov ecx, dword [0x432484]
mov eax, dword [0x432480]
sub ecx, eax
sar ecx, 3
xor edi, edi
test ecx, ecx
je 0x402c19
xor edx, edx
mov dword [ebp - 0x6e8], 7
mov dword [ebp - 0x6ec], ebx
mov word [ebp - 0x6fc], dx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x8b8], ebx
mov dword [ebp - 0x8b4], ebx
mov dword [ebp - 0x8b0], ebx
mov dword [ebp - 0x680], ebx
mov dword [ebp - 0x67c], ebx
mov dword [ebp - 0x678], ebx
mov byte [ebp - 4], 2
mov ecx, dword [eax + edi*8]
mov eax, dword [eax + edi*8 + 4]
mov edx, dword [ebp - 0x8ac]
push edx
add eax, ecx
push eax
push ecx
xor eax, eax
push eax
lea esi, [ebp - 0x8b8]
call fcn.0040ad40
lea eax, [ebp - 0x680]
push eax
mov ecx, esi
call fcn.00402480
mov esi, dword [ebp - 0x680]
add esp, 4
test al, al
je 0x402bbc
push 0x3ff
lea ecx, [ebp - 0x66f]
push ebx
push ecx
mov byte [ebp - 0x670], bl
call fcn.0041a000
mov edx, dword [ebp - 0x67c]
add esp, 0xc
sub edx, esi
push edx
lea eax, [ebp - 0x670]
push esi
push eax
call fcn.00416d90
add esp, 0xc
push ebx
lea ecx, [ebp - 0x670]
lea edx, [ebp - 0x718]
call fcn.00402510
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00407530
cmp dword [ebp - 0x704], 8
jb 0x402bbc
mov ecx, dword [ebp - 0x718]
push ecx
call fcn.004140b8
add esp, 4
cmp esi, ebx
je 0x402bc9
push esi
call fcn.004140b8
add esp, 4
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x680], ebx
mov dword [ebp - 0x67c], ebx
mov dword [ebp - 0x678], ebx
cmp eax, ebx
je 0x402bee
push eax
call fcn.004140b8
add esp, 4
mov edx, dword [0x432484]
mov eax, dword [0x432480]
sub edx, eax
inc edi
sar edx, 3
mov dword [ebp - 0x8b8], ebx
mov dword [ebp - 0x8b4], ebx
mov dword [ebp - 0x8b0], ebx
cmp edi, edx
jb 0x402ad1
mov edi, 7
xor eax, eax
mov dword [ebp - 0x6cc], edi
mov dword [ebp - 0x6d0], ebx
mov word [ebp - 0x6e0], ax
lea ecx, [ebp - 0x6e0]
push ecx
mov dword [ebp - 4], 4
call fcn.00404410
add esp, 4
test eax, eax
je 0x402c58
lea ecx, [ebp - 0x6e0]
call fcn.00407630
mov ecx, str._windir_
call fcn.004053a0
test al, al
setne dl
mov byte [0x43245c], dl
call fcn.00403640
test eax, eax
jne 0x402c87
push 0x20
mov eax, str.940665b1999f4bc5863f95dd7b52bea7
mov esi, 0x4313bc
call fcn.00409a60
call fcn.00403ac0
test eax, eax
jne 0x402ca1
push 0x20
mov eax, str.87180575a416ebc377bef4683952e66c
mov esi, 0x4313a0
call fcn.00409a60
xor eax, eax
mov dword [ebp - 0x6b0], edi
mov dword [ebp - 0x6b4], ebx
mov word [ebp - 0x6c4], ax
lea ecx, [ebp - 0x6c4]
push ecx
mov byte [ebp - 4], 5
call fcn.004031b0
add esp, 4
mov edi, 8
test al, al
je 0x402d42
mov eax, dword [ebp - 0x6c4]
cmp dword [ebp - 0x6b0], edi
jae 0x402ce6
lea eax, [ebp - 0x6c4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor edx, edx
push 3
mov eax, 0x429190
lea esi, [ebp - 0x68c]
mov dword [ebp - 0x678], 7
mov dword [ebp - 0x67c], ebx
mov word [ebp - 0x68c], dx
call fcn.00409a60
mov eax, esi
push eax
mov byte [ebp - 4], 6
call fcn.004028a0
add esp, 4
mov byte [ebp - 4], 5
cmp dword [ebp - 0x678], edi
jb 0x402d42
mov ecx, dword [ebp - 0x68c]
push ecx
call fcn.004140b8
add esp, 4
xor edx, edx
push 3
mov eax, 0x429198
lea esi, [ebp - 0x6a8]
mov dword [ebp - 0x694], 7
mov dword [ebp - 0x698], ebx
mov word [ebp - 0x6a8], dx
call fcn.00409a60
mov eax, esi
push eax
mov byte [ebp - 4], 7
call fcn.004028a0
add esp, 4
push 3
mov eax, 0x4291a0
call fcn.00409a60
mov ecx, esi
push ecx
call fcn.004028a0
add esp, 4
push 3
mov eax, 0x4291a8
call fcn.00409a60
mov edx, esi
push edx
call fcn.004028a0
add esp, 4
push 3
mov eax, 0x4291b0
call fcn.00409a60
mov eax, esi
push eax
call fcn.004028a0
add esp, 4
push 3
mov eax, 0x4291b8
call fcn.00409a60
mov ecx, esi
push ecx
call fcn.004028a0
add esp, 4
cmp dword [ebp - 0x694], edi
jb 0x402def
mov edx, dword [ebp - 0x6a8]
push edx
call fcn.004140b8
add esp, 4
xor eax, eax
mov esi, 7
mov dword [ebp - 0x694], esi
mov dword [ebp - 0x698], ebx
mov word [ebp - 0x6a8], ax
cmp dword [ebp - 0x6b0], edi
jb 0x402e20
mov ecx, dword [ebp - 0x6c4]
push ecx
call fcn.004140b8
add esp, 4
xor edx, edx
mov dword [ebp - 0x6b0], esi
mov dword [ebp - 0x6b4], ebx
mov word [ebp - 0x6c4], dx
cmp dword [ebp - 0x6cc], edi
jb 0x402e4c
mov eax, dword [ebp - 0x6e0]
push eax
call fcn.004140b8
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004140c3
mov esp, ebp
pop ebp
ret