Function at 0x4f2132
Capabilities:
Delete directory
Delete file

Disassembly:
push ebx
push esi
push edi
push ebp
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionUninstallmIRC
mov ebp, 0x56387c
push 0x104
push 0x52feac
push dword [0x53741c]
call sub.KERNEL32.dll_GetModuleFileNameA
push 0x54bcbb
push 0x54bbbb
push 0x54babb
push 0x54bab8
push 0x52feac
call fcn.0051d600
add esp, 0x14
push 0x54babb
push 0x54bab8
lea eax, [edi + 0xda]
push eax
push 0x52feac
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0x52feac
call fcn.005207ec
pop ecx
jmp 0x4f21d3
push 0x2005
push 0
push 0x1613
call fcn.00415c87
push eax
push 0
push 0x1614
call fcn.00415c87
push eax
push 0
call sub.USER32.dll_MessageBoxA
cmp eax, 2
jne 0x4f21d3
xor eax, eax
jmp 0x4f2590
push 0
lea edx, [edi + 0xe0]
push edx
call sub.USER32.dll_FindWindowA
test eax, eax
jne 0x4f21a1
push 0x52feac
push 0
push 0x1615
call fcn.00415c87
push eax
push 0x555704
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0x2034
push 0
push 0x1613
call fcn.00415c87
push eax
push 0x555704
push 0
call sub.USER32.dll_MessageBoxA
cmp eax, 7
jne 0x4f222e
xor eax, eax
jmp 0x4f2590
call fcn.004f206f
push 0
lea edx, [edi + 0xe8]
push edx
call fcn.004f1cbc
push 0
lea ecx, [edi + 0xee]
push ecx
call fcn.004f1cbc
push 0
lea eax, [edi + 0xf5]
push eax
call fcn.004f1cbc
push 0
lea edx, [edi + 0xff]
push edx
call fcn.004f1cbc
push 1
lea ecx, [edi + 0x10f]
push ecx
call fcn.004f1cbc
push 2
lea eax, [edi + 0x115]
push eax
call fcn.004f1cbc
push 3
lea edx, [edi + 0x11b]
push edx
call fcn.004f1cbc
call fcn.004f2020
xor ecx, ecx
mov dword [0x563880], ecx
mov dword [ebp], ecx
lea eax, [edi + 0x120]
push eax
push 0x52feac
call fcn.004f1d58
mov ebx, dword [ebp]
test ebx, ebx
je 0x4f24a1
xor esi, esi
lea eax, [edi + 0x125]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f22df
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x131]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f22fb
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x13e]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f2317
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x148]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f2333
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x153]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f234f
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x160]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f236b
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x16a]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f2387
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x176]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f23a3
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x183]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f23bf
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x18d]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f23db
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x19b]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f23f7
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x1a5]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f2410
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x1b3]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f2429
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x1bd]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f2442
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x1cb]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f245b
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x1d5]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f2474
mov esi, 1
jmp 0x4f248b
lea eax, [edi + 0x1e1]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f248b
mov esi, 1
test esi, esi
je 0x4f2496
push dword [ebx]
call sub.KERNEL32.dll_DeleteFileA
mov ebx, dword [ebx + 0x30]
test ebx, ebx
jne 0x4f22c1
mov eax, dword [0x563880]
test eax, eax
je 0x4f24af
mov ebx, dword [eax + 0x34]
jmp 0x4f24b1
mov ebx, eax
test ebx, ebx
je 0x4f24cb
push dword [ebx]
call sub.KERNEL32.dll_RemoveDirectoryA
cmp ebx, dword [0x563880]
je 0x4f24cb
mov ebx, dword [ebx + 0x34]
test ebx, ebx
jne 0x4f24b5
push 0x52feac
call sub.KERNEL32.dll_RemoveDirectoryA
push dword [ebp]
call fcn.0049dfbe
xor eax, eax
mov dword [ebp], eax
push dword [0x563880]
call fcn.0049dfbe
xor edx, edx
mov dword [0x563880], edx
lea ecx, [edi + 0x1ef]
push ecx
push 0x52feac
call fcn.004f1d58
mov ebx, dword [ebp]
test ebx, ebx
je 0x4f2534
lea eax, [edi + 0x1f4]
push eax
push dword [ebx]
call fcn.00416eff
test eax, eax
je 0x4f252d
push ebx
push dword [ebp]
call fcn.0049dd87
mov dword [ebp], eax
jmp 0x4f2534
mov ebx, dword [ebx + 0x30]
test ebx, ebx
jne 0x4f250d
cmp dword [ebp], 0
je 0x4f254b
push 0x555704
push 0x1617
call fcn.00415c87
jmp 0x4f255a
push 0x555704
push 0x1616
call fcn.00415c87
push 0x2000
push 0
push 0x1613
call fcn.00415c87
push eax
push 0x555704
push 0
call sub.USER32.dll_MessageBoxA
push dword [ebp]
call fcn.0049dfbe
push dword [0x563880]
call fcn.0049dfbe
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
ret