Function at 0x455e84
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x455e8c
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x456199
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x412480]
call fcn.00403b74
mov dword [ebp - 8], eax
xor edx, edx
push ebp
push 0x45615f
push dword fs:[edx]
mov dword fs:[edx], esp
lea edx, [ebp - 0x18]
mov eax, dword [0x45998c]
mov eax, dword [eax]
call fcn.00453f44
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.00408d7c
lea eax, [ebp - 0x14]
mov edx, 0x4561b0
call fcn.00404c84
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x45614d
inc eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
xor eax, eax
push ebp
push 0x455f95
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x41d498]
call fcn.0041d598
mov ebx, eax
lea ecx, [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00408db0
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 4]
mov edx, 0x4561c0
call fcn.00404cd0
mov edx, 0x80000002
mov eax, ebx
call fcn.0041d638
mov cl, 1
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d69c
mov ecx, 0x456214
mov edx, 0x45622c
mov eax, ebx
call fcn.0041da08
mov eax, ebx
call fcn.0041d608
mov eax, ebx
call fcn.00403ba4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x455f9f
xor edx, edx
push ebp
push 0x456095
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.00408db0
mov eax, dword [ebp - 0x24]
call fcn.004559dc
lea ecx, [ebp - 0x2c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.00408c84
test al, al
je 0x45608b
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x30]
xor edx, edx
call fcn.00408ccc
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, dword [ebp - 0x34]
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0xc]
lea eax, [ebp - 0x38]
mov edx, 0x456240
call fcn.00404c84
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x3c]
call fcn.00404e48
push eax
mov dword [ebp - 0x40], ebx
mov eax, dword [ebp - 0x40]
call fcn.00404e48
push eax
call sub.kernel32.dll_MoveFileA
cmp eax, 1
sbb eax, eax
inc eax
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x44]
mov edx, 0x456240
call fcn.00404c84
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x3c]
call fcn.00404e48
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45609f
xor eax, eax
push ebp
push 0x4560ed
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x48]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x48]
call fcn.0040305c
call fcn.00402fbc
lea ecx, [ebp - 0x4c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x4c]
mov edx, 0x26
call fcn.00408ccc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4560f7
xor eax, eax
push ebp
push 0x456137
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x50]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x50]
mov edx, 0x456250
call fcn.00404c84
mov eax, dword [ebp - 0x50]
call fcn.0040305c
call fcn.00402fbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x456141
inc dword [ebp - 0xc]
dec dword [ebp - 0x10]
jne 0x455f0f
mov eax, dword [ebp - 8]
call fcn.00403ba4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x456169
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4561a0
lea eax, [ebp - 0x50]
mov edx, 4
call fcn.004049dc
lea eax, [ebp - 0x38]
mov edx, 0xa
call fcn.004049dc
lea eax, [ebp - 4]
call fcn.004049b8
ret