Function at 0x411140
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x661c20
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x714f78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x2a4]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x284], eax
call fcn.0044121d
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], 0
call fcn.00414b50
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x274], eax
call fcn.00423a0b
mov ecx, eax
test ecx, ecx
je 0x411690
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x687afc
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 2
call fcn.00402ad0
test al, al
jne 0x4111fe
push 1
push 0x687afc
lea ecx, [ebp - 0x26c]
call fcn.00408790
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2b0]
call fcn.0040a060
mov edx, dword [ebp - 0x26c]
or ebx, 0xffffffff
mov byte [ebp - 4], 1
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x411238
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov edi, esp
mov dword [ebp - 0x274], edi
call fcn.00423a0b
mov ecx, eax
test ecx, ecx
je 0x411690
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00402ad0
test al, al
jne 0x411289
test esi, esi
jne 0x411272
xor ecx, ecx
jmp 0x411280
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411277
sub ecx, edx
push ecx
push esi
mov ecx, edi
call fcn.00408790
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 1
call fcn.00415330
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00414d80
cmp dword [ebp - 0x29c], 2
jne 0x41161f
call fcn.00423a0b
mov ecx, eax
test ecx, ecx
je 0x411690
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x290], esi
mov byte [ebp - 4], 5
call fcn.00423a0b
mov ecx, eax
test ecx, ecx
je 0x41169a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x687b08
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 6
call fcn.00402ad0
test al, al
jne 0x41131f
push 1
push 0x687b08
lea ecx, [ebp - 0x270]
call fcn.00408790
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 7
jle 0x4116a4
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.0040a0d0
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 8
call fcn.00423a0b
mov ecx, eax
test ecx, ecx
je 0x4116a9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x26c], eax
push 0x687b08
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 9
call fcn.00402ad0
test al, al
jne 0x411399
push 1
push 0x687b08
lea ecx, [ebp - 0x26c]
call fcn.00408790
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xa
jle 0x4116b3
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0040a0d0
push str..zip
push eax
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0xb
push eax
call fcn.00406fd0
mov ecx, dword [edi]
push 0
push dword [eax]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x28c], ecx
call fcn.00417660
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x27c], eax
push ecx
push 0xffffffffffffffff
push eax
call fcn.004174e0
mov eax, dword [ebp - 0x13c]
add esp, 0x2c
xor edi, edi
test eax, eax
jle 0x41144c
mov esi, dword [ebp - 0x27c]
mov ebx, eax
nop word [eax + eax]
lea eax, [ebp - 0x268]
push eax
push edi
push esi
call fcn.004174e0
push dword [ebp - 0x28c]
push edi
push esi
call fcn.00417cd0
inc edi
add esp, 0x18
cmp edi, ebx
jl 0x411420
mov esi, dword [ebp - 0x290]
or ebx, 0xffffffff
push dword [ebp - 0x27c]
call fcn.00416a00
mov edx, dword [ebp - 0x284]
add esp, 4
mov byte [ebp - 4], 0xb
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41147b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41149c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x26c]
mov eax, ebx
mov byte [ebp - 4], 8
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4114bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x274]
mov eax, ebx
mov byte [ebp - 4], 7
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4114de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4114ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00423a0b
mov ecx, eax
test ecx, ecx
je 0x4116b8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x270], eax
push 0x687b08
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xd
call fcn.00402ad0
test al, al
jne 0x411546
push 1
push 0x687b08
lea ecx, [ebp - 0x270]
call fcn.00408790
cmp dword [ebp - 0x29c], 0
mov byte [ebp - 4], 0xe
jle 0x4116c2
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0040a0d0
push str..zip
push eax
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xf
push eax
call fcn.00406fd0
add esp, 0x18
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 0x274]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4115ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x278]
mov eax, ebx
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4115cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x270]
mov eax, ebx
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4115f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
push esi
call fcn.00407710
mov edi, dword [ebp - 0x280]
add eax, 0x10
add esp, 4
mov byte [ebp - 4], 1
mov dword [edi], eax
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x41165c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41165c
call fcn.00423a0b
mov ecx, eax
test ecx, ecx
je 0x411690
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edi, dword [ebp - 0x280]
add eax, 0x10
mov dword [edi], eax
push 0x686f7f
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.00402ad0
test al, al
jne 0x41165c
push 0
push 0x686f7f
mov ecx, edi
call fcn.00408790
lea ecx, [ebp - 0x2b4]
call fcn.00414cb0
lea ecx, [ebp - 0x2a4]
call fcn.00441234
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0060266e
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004020e0
push 0x80004005
call fcn.004020e0
call fcn.00420832
push 0x80004005
call fcn.004020e0
call fcn.00420832
push 0x80004005
call fcn.004020e0
call fcn.00420832
int3