Function at 0x4b6480
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ea7a8
mov eax, dword fs:[0]
push eax
sub esp, 0x2f8
mov eax, dword [0x6670f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x300], eax
test eax, eax
je 0x4b689e
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x304]
push 5
push eax
call fcn.0057b450
add esp, 8
mov edx, dword [eax]
xor eax, eax
mov ecx, edx
mov byte [ebp - 4], 1
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b6516
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x230]
call fcn.00449bc0
lea ecx, [ebp - 0x278]
call fcn.00449b10
movups xmm0, xmmword [ebp - 0x230]
xor eax, eax
lea ecx, [ebp - 0x230]
mov word [ebp - 0x230], ax
movups xmmword [ebp - 0x278], xmm0
movq xmm0, qword [ebp - 0x220]
movq qword [ebp - 0x268], xmm0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
call fcn.00449860
mov edx, dword [ebp - 0x304]
or eax, 0xffffffff
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b65a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.lock.txt
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.004535b0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov edx, dword [ebp - 0x300]
mov ecx, edx
mov byte [ebp - 4], 3
mov byte [ebp - 0x2f9], al
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], 7
lea esi, [ecx + 2]
mov word [ebp - 0x290], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b6610
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x290]
call fcn.00449bc0
lea eax, [ebp - 0x300]
mov byte [ebp - 4], 4
mov dword [ebp - 0x224], eax
lea ecx, [ebp - 0x260]
lea eax, [ebp - 0x2f9]
sub esp, 0x28
mov dword [ebp - 0x220], eax
mov eax, esp
movq xmm0, qword [ebp - 0x224]
movq qword [eax + 4], xmm0
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x2f8]
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__lambda_10145c92a4a9488556b3fb6155910f41___bool__struct__WIN32_FIND_DATAW_const__.0
mov dword [eax + 0x24], eax
lea eax, [ebp - 0x290]
push eax
call fcn.004b7260
lea ecx, [ebp - 0x2f8]
call fcn.004b7380
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 3
call fcn.00449860
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push eax
call fcn.004b7990
add esp, 4
test al, al
lea eax, [ebp - 0x248]
jne 0x4b671e
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x2d0]
push 1
cmovae eax, dword [ebp - 0x248]
push eax
call fcn.004b8350
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 5
cmovae eax, dword [ebp - 0x260]
push eax
call fcn.004b9df0
lea ecx, [ebp - 0x2d0]
call fcn.004b8f50
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 3
call fcn.004b8590
jmp 0x4b6828
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x2dc]
cmovae eax, dword [ebp - 0x248]
push eax
call fcn.004b82f0
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x2dc]
call fcn.004b96f0
lea ecx, [ebp - 0x2dc]
call fcn.004b8f50
cmp dword [ebp - 0x24c], 8
lea ecx, [ebp - 0x260]
mov edx, dword [ebp - 0x220]
lea esi, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x260]
cmp dword [ebp - 0x21c], 8
cmovae esi, dword [ebp - 0x230]
cmp edx, dword [ebp - 0x250]
jne 0x4b680e
test edx, edx
je 0x4b67c3
sub esi, ecx
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x4b680e
add ecx, 2
sub edx, 1
jne 0x4b67b2
cmp byte [ebp - 0x2f9], 0
jne 0x4b680e
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea ecx, [ebp - 0x230]
call fcn.00449860
lea ecx, [ebp - 0x2dc]
call fcn.004b8560
jmp 0x4b687d
lea ecx, [ebp - 0x230]
call fcn.00449860
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 3
call fcn.004b8560
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0058c8f0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x300]
call fcn.004b2c40
add esp, 8
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea ecx, [ebp - 0x260]
call fcn.00449860
lea ecx, [ebp - 0x248]
call fcn.00449860
lea ecx, [ebp - 0x278]
call fcn.00449860
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0050ed5c
mov esp, ebp
pop ebp
ret