Function at 0x4bc9f0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe
push 0
push 0
dec ecx
jne 0x4bc9f8
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4bceb5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4cfe54]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4bca24
sub eax, 4
mov eax, dword [eax]
cmp eax, 0xa
jle 0x4bcb6c
xor eax, eax
push ebp
push 0x4bca69
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x18]
mov eax, dword [0x4cfdf0]
mov eax, dword [eax + 0x398]
mov edx, dword [0x4cfe54]
call fcn.004b5eb4
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 8]
call fcn.00409ee4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bca73
mov edx, dword [ebp - 8]
mov eax, dword [0x4cfe28]
call fcn.00405a38
test eax, eax
jle 0x4bcb42
lea eax, [ebp - 0x2c]
mov ecx, dword [0x4cfe00]
mov edx, dword [0x4cfe28]
call fcn.00405774
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.00476274
lea eax, [ebp - 0x28]
lea edx, [ebp - 0xc]
call fcn.004762ec
xor eax, eax
push ebp
push 0x4bcb38
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4bcb27
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x426a1c]
call fcn.00426b1c
mov dword [ebp - 0x10], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x10]
call fcn.00426bbc
push 0x4bcecc
push dword [ebp - 0xc]
push 0x4bcee0
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.004057f0
mov edx, dword [ebp - 0x30]
mov cl, 1
mov eax, dword [ebp - 0x10]
call fcn.00426c20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bcb2e
mov eax, dword [ebp - 0x10]
call fcn.0040455c
ret
mov edx, dword [ebp - 8]
mov eax, dword [0x4cfe28]
call fcn.00405a38
test eax, eax
jle 0x4bcb6c
mov eax, 0x4bceec
call fcn.00447368
mov eax, dword [0x4cfdf0]
call fcn.0046fc80
jmp 0x4bce85
push 0x4bcf0c
lea edx, [ebp - 0x3c]
mov eax, dword [0x4c9564]
mov eax, dword [eax]
call fcn.004741ec
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x28]
call fcn.00476274
lea eax, [ebp - 0x28]
lea edx, [ebp - 0x38]
call fcn.004762ec
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov edx, 5
call fcn.0043d698
push dword [ebp - 0x34]
push 0x4bcee0
mov eax, 0x4cfe14
mov edx, 3
call fcn.004057f0
mov eax, dword [0x4cfe14]
call fcn.0040aaa8
test al, al
jne 0x4bcbd5
mov eax, dword [0x4cfe14]
call fcn.0040aacc
mov edx, 6
mov eax, dword [0x4cfe14]
call fcn.0040ac80
lea eax, [ebp - 0x44]
mov ecx, 0x4bcf30
mov edx, dword [0x4cfe14]
call fcn.00405774
mov eax, dword [ebp - 0x44]
call fcn.004058ec
mov edx, eax
lea eax, [ebp - 0x40]
call fcn.00405654
mov ebx, dword [ebp - 0x40]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x14]
call fcn.004058ec
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
lea edx, [ebp - 0x48]
mov eax, dword [0x4c9564]
mov eax, dword [eax]
call fcn.004741ec
mov eax, dword [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
mov ecx, 0x4bcf30
mov edx, dword [0x4cfe14]
call fcn.00405774
mov edx, dword [ebp - 0x4c]
pop eax
call fcn.004bc708
test al, al
jne 0x4bcc71
mov eax, 0x4bcf40
call fcn.00447368
mov eax, dword [0x4c9564]
mov eax, dword [eax]
call fcn.00473b84
jmp 0x4bce85
lea eax, [ebp - 4]
mov edx, dword [0x4cfe14]
call fcn.004054f4
lea eax, [ebp - 0x50]
mov ecx, 0x4bcf30
mov edx, dword [0x4cfe14]
call fcn.00405774
mov edx, dword [ebp - 0x50]
mov eax, dword [0x4cfdf0]
mov eax, dword [eax + 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [0x4cfdf0]
mov eax, dword [eax + 0x37c]
mov edx, dword [ebp - 4]
call fcn.00485c84
mov eax, dword [0x4cfdf0]
mov eax, dword [eax + 0x37c]
mov byte [eax + 0x39], 1
mov byte [eax + 0x50], 1
mov byte [eax + 0x40], 1
mov eax, dword [0x4cfe0c]
mov edx, 0x4bcf58
call fcn.00405884
jne 0x4bccef
mov eax, 0x4cfea0
mov edx, 0x4bcf64
call fcn.004054b0
push 0x4bcf78
push dword [0x4cfea0]
push 0x4bcf84
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.004057f0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x28]
call fcn.00476274
lea eax, [ebp - 0x28]
lea edx, [ebp - 0x54]
call fcn.004762ec
mov edx, dword [ebp - 0x54]
mov eax, dword [0x4cfdf0]
mov eax, dword [eax + 0x37c]
add eax, 0x44
call fcn.004054b0
xor eax, eax
push ebp
push 0x4bcd60
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4cfdf0]
mov eax, dword [eax + 0x37c]
call fcn.00486574
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bcd8a
lea eax, [ebp - 0x5c]
mov ecx, dword [0x4cfe60]
mov edx, dword [ebp - 4]
call fcn.00405774
mov eax, dword [ebp - 0x5c]
mov edx, 6
call fcn.0040ac80
push 1
lea eax, [ebp - 0x64]
mov ecx, dword [0x4cfe60]
mov edx, dword [ebp - 4]
call fcn.00405774
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x60]
call fcn.0040aed8
mov eax, dword [ebp - 0x60]
call fcn.004058ec
push eax
push 0
lea eax, [ebp - 0x68]
mov ecx, dword [0x4cfe60]
mov edx, dword [ebp - 4]
call fcn.00405774
mov eax, dword [ebp - 0x68]
call fcn.004058ec
push eax
push 0x4bcfa0
push 0
call sub.shell32.dll_ShellExecuteA
lea eax, [ebp - 0x70]
mov ecx, 0x4bcf30
mov edx, dword [0x4cfe14]
call fcn.00405774
mov eax, dword [ebp - 0x70]
call fcn.004058ec
mov edx, eax
lea eax, [ebp - 0x6c]
call fcn.00405654
mov ebx, dword [ebp - 0x6c]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x14]
call fcn.004058ec
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov eax, dword [0x4cfdf0]
mov eax, dword [eax + 0x378]
mov dl, 1
call fcn.004413ac
mov eax, dword [0x4cfe3c]
mov edx, 0x4bcfb0
call fcn.00405884
jne 0x4bce85
xor eax, eax
push ebp
push 0x4bce7b
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004480bc
mov edx, dword [eax]
call dword [edx + 0x18]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bce85
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bcebc
lea eax, [ebp - 0x70]
mov edx, 0x12
call fcn.00405480
lea eax, [ebp - 0x18]
call fcn.0040545c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405480
ret