Function at 0x4e2a88
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe74
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405f18
mov eax, dword [ebp - 8]
call fcn.00405f18
mov eax, dword [ebp - 0xc]
call fcn.00405f18
mov eax, dword [ebp + 0x18]
call fcn.00405f18
mov eax, dword [ebp + 0x14]
call fcn.00405f18
mov eax, dword [ebp + 0x10]
call fcn.00405f18
xor eax, eax
push ebp
push 0x4e2ff8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d477c]
mov edx, dword [ebp + 8]
mov dword [eax], edx
mov eax, dword [0x5d4ef0]
mov edx, dword [0x5db404]
mov dword [eax], edx
cmp byte [0x5ce898], 0
je 0x4e2bc5
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [ebp - 4]
call fcn.004e1e7c
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [ebp - 8]
call fcn.004e1ea8
mov eax, dword [0x5d4f70]
mov edx, dword [ebp - 8]
call fcn.00405aec
cmp byte [ebp + 0xc], 0
jne 0x4e2b91
cmp dword [0x5ce89c], 0
je 0x4e2b91
mov ebx, dword [0x5ce89c]
mov dword [ebp - 0x174], ebx
mov eax, dword [ebp - 0x174]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov ecx, 0x5ce898
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov dl, 1
mov ebx, dword [eax]
call dword [ebx + 0x40]
test al, al
jne 0x4e2bbe
cmp byte [0x5ce898], 0
je 0x4e2bc5
xor ebx, ebx
jmp 0x4e2fc0
mov bl, 1
jmp 0x4e2fc0
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x40a0
mov edx, dword [ebp - 4]
call fcn.00405aec
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x54
mov edx, dword [ebp - 0xc]
call fcn.00405aec
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x58
mov edx, dword [ebp + 0x18]
call fcn.00405aec
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x64
mov edx, dword [ebp + 0x14]
call fcn.00405aec
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x68
mov edx, dword [ebp + 0x10]
call fcn.00405aec
mov eax, dword [0x5d4c3c]
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [ebp - 8]
call fcn.0040b8f0
test al, al
je 0x4e2ca5
mov eax, dword [0x5d4eec]
mov byte [eax], 0
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x170]
call fcn.004039a4
mov edx, 1
lea eax, [ebp - 0x170]
call fcn.00404140
lea eax, [ebp - 0x170]
call fcn.00403d28
cdq
mov ecx, dword [0x5d4c3c]
mov dword [ecx], eax
mov dword [ecx + 4], edx
lea eax, [ebp - 0x170]
call fcn.00403b4c
mov eax, dword [0x5d4d94]
mov dword [eax], 0
mov dword [eax + 4], 0
xor eax, eax
push ebp
push 0x4e2ce1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
call fcn.004da614
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e2ceb
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
cmp dword [eax + 0x40d4], 0x190
jl 0x4e2d0b
xor ebx, ebx
jmp 0x4e2fc0
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x178]
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov eax, dword [eax + 0x4118]
call fcn.0042055c
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x1c]
call fcn.00420fa4
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x4e2e52
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 1
lea ecx, [ebp - 0x180]
mov ebx, dword [ebp - 0x14]
dec ebx
mov edx, ebx
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x180]
lea edx, [ebp - 0x17c]
call fcn.0040abe4
mov edx, dword [ebp - 0x17c]
mov eax, 0x4e3014
call fcn.0041038c
test eax, eax
je 0x4e2e46
lea ecx, [ebp - 0x184]
mov edx, ebx
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x10]
call fcn.0040abe4
mov edx, dword [ebp - 0x10]
mov eax, 0x4e3014
call fcn.0041038c
mov edx, eax
lea eax, [ebp - 0x10]
mov ecx, 0xf
call fcn.00405fd0
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0x10]
call fcn.0040ac80
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 0x10]
call fcn.00405b30
xor eax, eax
push ebp
push 0x4e2e2a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.0040b328
cdq
mov ecx, dword [0x5d4c3c]
add eax, dword [ecx]
adc edx, dword [ecx + 4]
mov ecx, dword [0x5d4d94]
mov dword [ecx], eax
mov dword [ecx + 4], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e2e46
inc dword [ebp - 0x14]
dec dword [ebp - 0x24]
jne 0x4e2d60
mov eax, dword [ebp - 0x1c]
call fcn.00404b38
mov eax, dword [0x5d4c3c]
cmp dword [eax + 4], 0
jne 0x4e2e70
cmp dword [eax], 0x800
seta al
jmp 0x4e2e73
setg al
and al, byte [ebp + 0xc]
je 0x4e2ec9
mov eax, dword [0x5d4c3c]
mov edx, dword [eax + 4]
mov eax, dword [eax]
sub eax, 0x800
sbb edx, 0
mov ecx, dword [0x5d4c3c]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov eax, dword [0x5d4c3c]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x18c]
call fcn.0040b2d8
mov edx, dword [ebp - 0x18c]
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x4104
call fcn.00405aec
jmp 0x4e2ef2
mov eax, dword [0x5d4c3c]
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x4104
call fcn.00405a98
push 0
push 0x80
push 4
push 0
push 1
push 0x40000000
mov eax, dword [ebp - 8]
call fcn.00405f28
push eax
call sub.kernel32.dll_CreateFileA_1
mov ebx, eax
push 0
push 0
mov eax, dword [0x5d4c3c]
mov eax, dword [eax]
push eax
push ebx
call sub.kernel32.dll_SetFilePointer_1
push ebx
call sub.kernel32.dll_SetEndOfFile_1
mov ecx, ebx
mov dl, 1
mov eax, dword [0x41c96c]
call fcn.004221f8
mov dword [ebp - 0x20], eax
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov edx, dword [eax + 0x411c]
mov dword [ebp - 0x18], edx
mov edx, dword [0x5d50ac]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x411c], edx
xor edx, edx
push ebp
push 0x4e2f85
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, dword [0x5d50ac]
call fcn.004da608
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e2f8f
mov eax, dword [ebp - 0x20]
call fcn.00404b38
mov eax, dword [0x5d50ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
cmp dword [eax + 0x40d4], 0x190
setl bl
mov edx, dword [0x5d50ac]
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x411c], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e2fff
lea eax, [ebp - 0x18c]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00405abc
lea eax, [ebp + 0x10]
mov edx, 3
call fcn.00405abc
ret