Function at 0x4a62f0
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x24c4
call fcn.004d3780
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov esi, ecx
push ebx
mov dword [esp + 0x28], esi
mov dword [esp + 0x44], ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
push eax
push 0x4ddbf8
push 1
push ebx
push 0x4ddbe8
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x4a6964
cmp dword [esp + 0x1c], ebx
je 0x4a6964
lea ecx, [esi + 0x5cec8]
mov word [esp + 0x4c], 8
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebp, dword [esp + 0x4c]
lea ecx, [esp + 0x3c]
push ecx
mov edi, eax
sub esp, 0x10
mov eax, dword [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x50], ebx
mov edx, dword [eax]
push eax
mov dword [ecx], ebp
mov ebp, dword [esp + 0x68]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0x70]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], ebp
call dword [edx + 0xe8]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp word [esp + 0x3c], 0xffff
jne 0x4a695a
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], ebx
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x30]
test eax, eax
jl 0x4a695a
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x4a695a
push str.metalink
push eax
call fcn.004b11c0
mov ebp, eax
add esp, 8
cmp ebp, ebx
mov dword [esp + 0x64], ebp
je 0x4a6950
mov edx, dword [ebp]
lea eax, [esp + 0x30]
push eax
push ebp
mov dword [esp + 0x38], ebx
call dword [edx + 0x30]
test eax, eax
jl 0x4a6949
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x4a6949
push str.files
push eax
call fcn.004b11c0
mov edi, eax
add esp, 8
cmp edi, ebx
mov dword [esp + 0x5c], edi
je 0x4a693f
mov ecx, dword [edi]
lea edx, [esp + 0x28]
push edx
push edi
mov dword [esp + 0x30], ebx
call dword [ecx + 0x30]
test eax, eax
jl 0x4a6939
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x4a6939
lea edx, [esp + 0x48]
mov dword [esp + 0x48], ebx
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x20]
mov eax, dword [esp + 0x48]
lea edx, [esp + 0x18]
mov dword [esi + 0x2688], eax
mov eax, dword [esp + 0x28]
push edx
mov edx, dword [esi + 0x2684]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x1c]
test eax, eax
jl 0x4a692f
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x4a692f
lea edx, [esp + 0x34]
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x1c]
test eax, eax
jl 0x4a6925
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x4a6925
mov ebp, dword [sym.imp.MSVCRT.dll__wcsicmp]
push str.file
push eax
call ebp
add esp, 8
test eax, eax
jne 0x4a6916
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
test eax, eax
jl 0x4a6916
cmp dword [esp + 0x20], ebx
je 0x4a6916
mov eax, dword [esp + 0x18]
push 0x4ec188
lea ecx, [esp + 0x70]
push eax
push ecx
call fcn.004b1280
mov edx, eax
add esp, 0xc
mov ecx, dword [edx]
cmp cx, 8
mov eax, dword [edx + 4]
mov dword [esp + 0x50], eax
mov eax, dword [edx + 8]
mov edx, dword [edx + 0xc]
mov dword [esp + 0x58], edx
jne 0x4a6539
cmp eax, ebx
je 0x4a6539
push eax
push 0x4eb504
lea eax, [esi + 0x62640]
push 0x103
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
mov ecx, dword [esp + 0x20]
push str.resources
push ecx
call fcn.004b11c0
mov edi, eax
add esp, 8
cmp edi, ebx
mov dword [esp + 0x60], edi
je 0x4a6908
mov edx, dword [edi]
lea eax, [esp + 0x14]
push eax
push edi
mov dword [esp + 0x1c], ebx
call dword [edx + 0x30]
test eax, eax
jl 0x4a6902
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4a6902
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], ebx
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x24]
test eax, eax
jl 0x4a68f8
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x4a68f8
lea ecx, [esp + 0x2c]
mov dword [esp + 0x2c], ebx
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x1c]
test eax, eax
jl 0x4a68d7
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x4a68d7
push 0x4ebb84
push eax
call ebp
add esp, 8
test eax, eax
jne 0x4a68c2
mov edx, dword [esp + 0x10]
push str.type
lea eax, [esp + 0x80]
push edx
push eax
call fcn.004b1280
mov ecx, eax
add esp, 0xc
mov eax, dword [ecx]
cmp ax, 8
mov edx, dword [ecx + 4]
mov dword [esp + 0x70], edx
mov edi, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x78], ecx
jne 0x4a68c2
push 0x4ee6a0
push edi
call ebp
add esp, 8
test eax, eax
je 0x4a663a
push 0x4ee9d4
push edi
call ebp
add esp, 8
test eax, eax
jne 0x4a68c2
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
mov word [esp + 0x4c], bx
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x78]
test eax, eax
jl 0x4a68c2
cmp word [esp + 0x4c], 8
jne 0x4a68c2
mov edx, dword [esp + 0x54]
cmp edx, ebx
je 0x4a68c2
mov ecx, 0x912
xor eax, eax
lea edi, [esp + 0x8c]
push ebx
rep stosd dword es:[edi], eax
lea eax, [esp + 0x90]
push eax
push edx
call fcn.004a2450
add esp, 0xc
test eax, eax
je 0x4a68c2
mov ecx, dword [esi + 0x6287c]
mov edx, dword [esi + 0x62880]
lea ebx, [esi + 0x62874]
sub edx, ecx
mov eax, 0x70e551cf
mov ebp, ecx
imul edx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x4a67d1
mov edi, dword [ebx + 4]
test edi, edi
je 0x4a66eb
mov edx, ecx
mov eax, 0x70e551cf
sub edx, edi
imul edx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
mov esi, edx
ja 0x4a66f0
mov esi, 1
test edi, edi
jne 0x4a66f8
xor edx, edx
jmp 0x4a670b
sub ecx, edi
mov eax, 0x70e551cf
imul ecx
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [edx + esi]
test ecx, ecx
mov dword [esp + 0x68], ecx
jge 0x4a6718
xor ecx, ecx
mov eax, ecx
shl eax, 7
add eax, ecx
lea edx, [eax + eax*8]
shl edx, 3
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, dword [ebx + 4]
add esp, 4
cmp esi, ebp
mov dword [esp + 0x44], eax
mov edi, eax
je 0x4a6755
push esi
push edi
call fcn.004a6c80
add esi, 0x2448
add esp, 8
add edi, 0x2448
cmp esi, ebp
jne 0x4a673b
lea eax, [esp + 0x8c]
mov ecx, ebx
push eax
push 1
push edi
call fcn.004a6c40
mov ecx, dword [ebx + 8]
add edi, 0x2448
push edi
push ecx
push ebp
mov ecx, ebx
call fcn.004a6c00
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push edx
push eax
mov ecx, ebx
call fcn.004bb6c0
mov ecx, dword [ebx + 4]
push ecx
call fcn.004d3765
mov ecx, dword [esp + 0x6c]
mov esi, dword [esp + 0x48]
mov eax, ecx
add esp, 4
shl eax, 7
add eax, ecx
mov ecx, ebx
lea edx, [eax + eax*8]
lea eax, [esi + edx*8]
mov dword [ebx + 0xc], eax
call fcn.004a69c0
inc eax
mov dword [ebx + 4], esi
mov ecx, eax
shl ecx, 7
add ecx, eax
lea ecx, [ecx + ecx*8]
lea edx, [esi + ecx*8]
mov esi, dword [esp + 0x24]
mov dword [ebx + 8], edx
jmp 0x4a68c0
mov edx, ecx
mov eax, 0x70e551cf
sub edx, ebp
imul edx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x4a6852
lea edx, [ebp + 0x2448]
push edx
push ecx
push ebp
mov ecx, ebx
call fcn.004a6c00
mov edi, dword [ebx + 8]
lea eax, [esp + 0x8c]
mov ecx, edi
push eax
sub ecx, ebp
mov eax, 0x70e551cf
imul ecx
sar edx, 0xc
mov ecx, edx
mov eax, 1
shr ecx, 0x1f
add edx, ecx
mov ecx, ebx
sub eax, edx
push eax
push edi
call fcn.004a6c40
mov eax, dword [ebx + 8]
cmp ebp, eax
je 0x4a68b9
mov edi, ebp
add ebp, 0x2448
mov ecx, 0x912
lea esi, [esp + 0x8c]
cmp ebp, eax
rep movsd dword es:[edi], dword [esi]
jne 0x4a6836
jmp 0x4a68b5
lea eax, [ecx - 0x2448]
push ecx
push ecx
push eax
mov ecx, ebx
mov dword [esp + 0x50], eax
call fcn.004a6c00
mov edx, dword [ebx + 8]
lea eax, [edx - 0x2448]
cmp ebp, eax
je 0x4a6891
sub edx, 0x2448
sub eax, 0x2448
mov ecx, 0x912
mov esi, eax
mov edi, edx
cmp eax, ebp
rep movsd dword es:[edi], dword [esi]
jne 0x4a6873
mov esi, dword [esp + 0x24]
lea eax, [ebp + 0x2448]
cmp ebp, eax
je 0x4a68b9
mov edi, ebp
add ebp, 0x2448
mov ecx, 0x912
lea esi, [esp + 0x8c]
cmp ebp, eax
rep movsd dword es:[edi], dword [esi]
jne 0x4a689b
mov esi, dword [esp + 0x24]
add dword [ebx + 8], 0x2448
xor ebx, ebx
mov ecx, dword [esp + 0x2c]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [sym.imp.MSVCRT.dll__wcsicmp]
mov edi, dword [esp + 0x60]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jge 0x4a659d
mov eax, dword [esp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, dword [edi]
push edi
call dword [edx + 8]
mov eax, dword [esp + 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edi, dword [esp + 0x5c]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x28]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov eax, dword [esp + 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, dword [ebp]
push ebp
call dword [edx + 8]
mov eax, dword [esp + 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x1c]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esi + 0x62878]
cmp eax, ebx
je 0x4a6991
mov ecx, dword [esi + 0x6287c]
sub ecx, eax
mov eax, 0x70e551cf
imul ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x4a6991
mov dword [esp + 0x40], 1
call dword [sym.imp.ole32.dll_CoUninitialize]
add esi, 0x5cec8
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24c4
ret