Function at 0x4210d2
Capabilities:
Delete file

Disassembly:
push 0x58
mov eax, 0x44d14e
call fcn.004482df
and dword [ebp - 4], 0
mov ebx, dword [ebp + 8]
mov esi, ebx
call fcn.00420f21
push 0x4580
call fcn.0043737e
pop ecx
mov edi, eax
mov dword [ebp - 0x20], edi
mov byte [ebp - 4], 1
test edi, edi
je 0x421129
call fcn.00423bad
mov dword [edi], vtable.appenv::CCustomHttpClient.0
lea esi, [edi + 0x3570]
call fcn.00407161
mov ecx, esi
call fcn.004071bc
mov dword [edi], vtable.appenv::CHttpClient.0
jmp 0x42112b
xor edi, edi
mov byte [ebp - 4], 0
mov dword [ebx + 4], edi
lea eax, [ebp - 0x64]
call fcn.00420a84
cmp dword [ebx + 0x14], 1
jne 0x42115c
mov dword [ebp - 0x60], str.POST
mov eax, dword [ebx + 0x18]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x5c], str.application_x_www_form_urlencoded
jmp 0x421163
mov dword [ebp - 0x60], 0x45402c
mov dword [ebp - 0x64], str.Cache_Control:_no_cache__no_store_r_n
mov eax, dword [ebx + 8]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x50], eax
test byte [ebp - 0x54], 4
jne 0x421180
or dword [ebp - 0x54], 0xb
mov dword [ebp - 0x28], 0x4214e5
mov dword [ebp - 0x40], ebx
mov eax, dword [ebx + 0x1c]
cmp dword [eax - 0xc], 0
je 0x4211db
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
mov eax, dword [ebx + 0x1c]
lea esi, [ebx + 0x38]
push 2
push 2
push 0x40000000
push eax
call fcn.0041442a
mov dword [ebx + 0x468], eax
xor ecx, ecx
test eax, eax
setns cl
mov byte [ebp - 0x15], cl
test cl, cl
jne 0x4211db
push eax
push str.SendRequest___open_output_file_error:_0x_x
add ebx, 0x470
call fcn.00430076
pop ecx
pop ecx
mov esi, dword [ebp + 8]
jmp 0x42122c
mov edi, dword [ebx + 0x10]
lea eax, [ebp - 0x64]
push eax
mov ebx, dword [ebx + 4]
call fcn.00421714
mov byte [ebp - 0x15], al
mov esi, dword [ebp + 8]
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x354c]
mov eax, dword [eax + 0x356c]
xor ebx, ebx
cmp byte [ebp - 0x15], bl
je 0x421217
cmp ecx, 0xc8
je 0x42122e
push ecx
push eax
push str.navigate___ok_responsestatus:__d_httpstat:__d
jmp 0x42121e
push ecx
push eax
push str.navigate___fail_responsestatus:__d_httpstat:__d
lea ebx, [esi + 0x470]
call fcn.00430076
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
cmp byte [ebp - 0x15], bl
je 0x4213a5
mov eax, dword [esi + 4]
mov edi, dword [eax + 0x3554]
mov dword [ebp - 0x1c], edi
mov ecx, dword [esi + 0x20]
cmp ecx, ebx
je 0x421262
mov eax, dword [esi + 0x28]
cmp edi, eax
jbe 0x421262
mov edx, dword [ecx]
mov ebx, edi
sub ebx, eax
push ebx
call dword [edx + 0x58]
xor ebx, ebx
mov eax, dword [esi + 0x1c]
cmp dword [eax - 0xc], ebx
je 0x4212c8
cmp dword [esi + 0x40], ebx
jbe 0x421279
call fcn.00421645
mov byte [ebp - 0x15], al
jmp 0x4212c8
mov dword [ebp - 0x20], ebx
mov ecx, dword [esi + 4]
mov eax, dword [ecx + 0x355c]
add eax, dword [ecx + 0x3558]
add eax, dword [ecx + 0x10c8]
lea ecx, [esi + 0x38]
push edi
push eax
push ecx
lea eax, [ebp - 0x20]
call fcn.00420a48
mov dword [esi + 0x468], eax
xor ecx, ecx
cmp eax, ebx
setge cl
mov byte [ebp - 0x15], cl
cmp cl, bl
jne 0x4212d1
push eax
push str.SendRequest___write_file_error:_0x_x
lea ebx, [esi + 0x470]
call fcn.00430076
pop ecx
pop ecx
xor ebx, ebx
cmp byte [ebp - 0x15], bl
je 0x4213a5
cmp dword [esi + 0x45c], ebx
jbe 0x421326
cmp dword [esi + 0x40], ebx
jne 0x421326
mov ecx, dword [esi + 4]
mov eax, dword [ecx + 0x355c]
add eax, dword [ecx + 0x3558]
add eax, dword [ecx + 0x10c8]
push edi
push eax
lea eax, [esi + 0x4c]
call fcn.0041ee04
mov dword [esi + 0x46c], eax
xor ecx, ecx
cmp eax, ebx
setge cl
mov byte [ebp - 0x15], cl
cmp cl, bl
jne 0x42132b
push eax
push str.SendRequest___crypto.AddData_whole_file_error:_0x_x
lea ebx, [esi + 0x470]
call fcn.00430076
pop ecx
pop ecx
xor ebx, ebx
cmp byte [ebp - 0x15], bl
je 0x4213a5
mov edx, dword [esi + 0x45c]
cmp edx, ebx
jbe 0x4213a5
mov eax, dword [esi + 0x458]
mov ecx, dword [esi + 0x50]
push ebx
push ebx
push ecx
push edx
push eax
push dword [esi + 0x4c]
call dword [sym.imp.ADVAPI32.dll_CryptVerifySignatureW]
test eax, eax
jne 0x421357
call fcn.00414332
jmp 0x421359
xor eax, eax
mov dword [esi + 0x46c], eax
xor ecx, ecx
cmp eax, ebx
setge cl
mov byte [ebp - 0x15], cl
cmp cl, bl
jne 0x4213a5
cmp dword [esi + 0x45c], 8
jne 0x421390
mov ecx, dword [esi + 0x458]
mov edx, 0x11111111
cmp dword [ecx], edx
jne 0x421390
cmp dword [ecx + 4], edx
jne 0x421390
mov byte [ebp - 0x15], 1
jmp 0x4213a5
push eax
push str.SendRequest___crypto.VerifySignature_error:_0x_x
lea ebx, [esi + 0x470]
call fcn.00430076
pop ecx
pop ecx
xor ebx, ebx
mov dword [esi + 0x28], edi
mov eax, dword [esi + 0x1c]
cmp dword [eax - 0xc], ebx
je 0x4213c1
cmp dword [esi + 0x38], ebx
je 0x4213c1
push dword [esi + 0x38]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [esi + 0x38], ebx
mov esi, dword [esi + 4]
cmp esi, ebx
je 0x4213d0
add esi, 4
call fcn.004038dc
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x15]
call fcn.00448384
ret 4