Function at 0x49f26a
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x8f70
call fcn.0059fbd0
push ebx
push esi
push edi
lea eax, [ebp - 0xb4c]
push eax
push 0x5b07d8
push 0x5dbe18
push str.Software
call fcn.00457b24
call fcn.004aabb4
mov ebx, eax
shr ebx, 0x14
call fcn.004aabee
and word [ebp - 0x41c], 0
mov edi, eax
shr edi, 0x14
lea eax, [ebp - 0x214]
mov dword [ebp - 8], edi
call fcn.004a20d8
cmp byte [ebp + 8], 0
push str..dmp
lea eax, [ebp - 0x214]
je 0x49f2fb
push 0x5b0844
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.004a2dab
lea eax, [ebp - 0x41c]
push eax
call fcn.0049f970
test al, al
jne 0x49f39e
jmp 0x49f396
or dword [ebp + 8], 0xffffffff
push str.Switch_IP_761845
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.004a2dab
lea eax, [ebp - 0x41c]
push eax
lea esi, [ebp + 8]
call fcn.00447460
test al, al
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x49f35a
lea eax, [ebp + 8]
push eax
call fcn.004019d3
test eax, eax
jbe 0x49f34b
cmp dword [ebp + 8], 0xffffffff
mov dword [ebp + 0xc], str.InvalidParameter
je 0x49f39e
push dword [ebp + 8]
call esi
jmp 0x49f39e
cmp dword [ebp + 8], 0xffffffff
je 0x49f365
push dword [ebp + 8]
call esi
or dword [ebp + 8], 0xffffffff
cmp dword [ebp + 8], 0xffffffff
je 0x49f365
push dword [ebp + 8]
call esi
push 0
push str.DmpErr
push str.Errors
call fcn.00402277
push eax
push str.DmpErr__X_
mov esi, 0x104
lea edi, [ebp - 0x944]
call fcn.004a9039
mov eax, edi
mov edi, dword [ebp - 8]
pop ecx
pop ecx
mov dword [ebp + 0xc], eax
and word [ebp - 0x41c], 0
xor eax, eax
cmp word [ebp - 0x41c], ax
mov word [ebp - 0x73c], ax
jne 0x49f3b9
mov word [ebp - 0x73c], ax
jmp 0x49f418
push eax
call fcn.00590318
pop ecx
mov dword [ebp + 8], eax
call fcn.004478f3
add dword [ebp + 8], eax
lea esi, [ebp - 0xd54]
lea eax, [ebp + 8]
call fcn.004477b2
lea esi, [ebp - 0x214]
lea eax, [ebp + 8]
call fcn.004477f7
call fcn.004a8fa9
call fcn.00591a41
cdq
mov ecx, 0x2710
idiv ecx
mov eax, esi
push edx
push eax
lea eax, [ebp - 0xd54]
push eax
lea eax, [ebp - 0x73c]
push str._s__s__04d.dmp
push eax
call fcn.00401000
add esp, 0x14
push edi
push ebx
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x4f64]
push eax
call fcn.0049fbd6
lea eax, [ebp - 0xf5c]
push eax
call fcn.004a1464
mov esi, dword [0x623ae4]
lea eax, [ebp - 0x534]
push eax
mov dword [ebp - 0x534], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
call fcn.004a9266
test al, al
mov eax, str._wine
jne 0x49f469
mov eax, 0x5b07d8
lea ecx, [ebp - 0xf5c]
push ecx
lea ecx, [ebp - 0x4f64]
push ecx
lea ecx, [ebp - 0xb4c]
push ecx
push esi
push eax
push dword [ebp - 0x52c]
mov esi, 0x2002
push dword [ebp - 0x530]
lea edi, [ebp - 0x8f6c]
push dword [ebp + 0xc]
push str.https:__www.nch.com.au_software_ko_bug.html_softwareSwitchversion11.19langkoxi_s_Win_d_d_s_MAIN_Cmd_d_iid_sdata_sappbits32rdf_s
call fcn.004a9039
add esp, 0x24
mov eax, edi
push eax
call fcn.004010ca
cmp word [ebp - 0x41c], 0
je 0x49f519
mov edi, dword [ebp + 0x10]
mov esi, 0x5e3ef8
push esi
lea eax, [ebp - 0x18c]
call fcn.00404863
mov eax, dword [ebp - 0x9e]
push 0
push esi
lea ecx, [ebp - 0x9e]
call dword [eax + 0x20]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x9e]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004c79b6
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x18c]
call fcn.00404912
pop edi
pop esi
pop ebx
leave
ret 0xc