Function at 0x492552
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
call fcn.0047cfd9
mov eax, dword [esi + 0x190]
or eax, dword [esi + 0x194]
jne 0x492584
mov eax, dword [0x88c8e0]
mov dword [esi + 0x190], eax
mov eax, dword [0x88c8e4]
mov dword [esi + 0x194], eax
mov eax, dword [esi + 0x188]
mov ecx, dword [esi + 0x18c]
mov edx, eax
or edx, ecx
push 0
pop ebx
je 0x492607
cmp dword [esi + 0xc8], ebx
je 0x492607
mov edi, dword [esi + 0x194]
cmp edi, ebx
mov edx, dword [esi + 0x190]
jl 0x4925d3
jg 0x4925b7
cmp edx, ebx
jbe 0x4925d3
sub eax, dword [0x88c8e0]
sbb ecx, dword [0x88c8e4]
add eax, edx
adc ecx, edi
mov dword [esi + 0x188], eax
mov dword [esi + 0x18c], ecx
mov eax, dword [esi + 0x188]
mov ecx, dword [esi + 0x18c]
mov dword [esi + 0x188], ebx
mov dword [esi + 0x18c], ebx
mov edx, dword [0x88c8e0]
add edx, eax
mov eax, dword [0x88c8e4]
adc eax, ecx
mov ecx, dword [esi + 0xc8]
push eax
push edx
call fcn.0042e02d
test byte [esi + 0xf5], 1
jne 0x49262a
cmp dword [esi + 0xc8], ebx
jne 0x49262a
cmp dword [esi + 0xc4], ebx
ja 0x49265c
jb 0x49262a
cmp dword [esi + 0xc0], ebx
ja 0x49265c
mov ecx, dword [esi + 0x190]
add ecx, dword [esi + 0x188]
mov eax, dword [esi + 0x194]
adc eax, dword [esi + 0x18c]
mov edx, dword [0x88c8e4]
cmp edx, eax
jl 0x49265c
jg 0x492657
mov eax, dword [0x88c8e0]
cmp eax, ecx
jb 0x49265c
mov byte [ebp - 1], bl
jmp 0x492660
mov byte [ebp - 1], 1
test byte [ebp + 8], 2
je 0x492681
and byte [esi + 0xf4], 0xfe
lea ecx, [esi + 0xb0]
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov byte [ebp - 1], bl
call fcn.0042f044
lea ecx, [esi + 0xf4]
mov al, byte [ecx]
test al, 1
jne 0x49285b
or al, 1
mov byte [ecx], al
mov ecx, esi
call fcn.0048ea6c
cmp byte [ebp - 1], bl
jne 0x4926bb
mov ecx, esi
call fcn.0048fb43
lea edi, [esi + 0x94]
mov ecx, dword [edi]
cmp ecx, ebx
je 0x4926bb
call fcn.00451395
mov dword [edi], ebx
lea eax, [esi + 0xf0]
mov ecx, dword [eax]
cmp ecx, ebx
je 0x4926cc
mov dword [ecx + 0x40], ebx
mov dword [eax], ebx
mov ecx, esi
call fcn.00491609
cmp dword [esi + 0x70], 2
jne 0x4926e2
mov ecx, esi
call fcn.0048f8c1
jmp 0x4926fc
mov eax, dword [esi + 0xc8]
cmp eax, ebx
je 0x4926fc
test byte [eax + 0x1cc], 1
je 0x4926fc
or byte [eax + 0x1be], 0x40
mov ecx, dword [esi + 0xc8]
cmp ecx, ebx
je 0x49273f
lea eax, [esi + 4]
push eax
call fcn.004129e0
mov eax, dword [esi + 0xc8]
inc dword [eax + 0x514]
mov eax, dword [esi + 0xc8]
test byte [eax + 0x1cc], 1
je 0x492739
cmp dword [eax + 0x2e0], ebx
jne 0x492739
mov byte [eax + 0x518], 3
mov dword [esi + 0xc8], ebx
lea edi, [esi + 0x98]
mov ecx, dword [edi]
cmp ecx, ebx
je 0x492752
call fcn.00451395
mov dword [edi], ebx
lea ecx, [esi + 0x9c]
cmp dword [ecx], 0xffffffff
je 0x492762
call fcn.00481ff4
cmp byte [ebp - 1], bl
jne 0x49278b
lea ecx, [esi + 0xa0]
mov eax, dword [ecx]
cmp eax, ebx
je 0x49278b
xor edx, edx
cmp word [eax], bx
sete dl
cmp dl, bl
jne 0x49278b
call fcn.004a0ff9
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esi + 0x10]
cmp ecx, ebx
je 0x49282f
or byte [esi + 0xf5], 2
mov al, byte [esi + 0xf5]
cmp byte [ebp - 1], bl
je 0x4927c3
and al, 0xfd
mov byte [esi + 0xf5], al
call fcn.0048e3a6
push ebx
push 0x258
lea ecx, [esi + 8]
call fcn.0048e579
test byte [ebp + 8], 1
je 0x4927f3
mov ecx, dword [esi + 0x10]
push ebx
push 5
push 1
call fcn.0047e17d
mov ecx, dword [esi + 0x10]
call fcn.0047e28c
mov ecx, dword [esi + 0x10]
call fcn.0047f066
lea ecx, [esi + 0xb0]
call fcn.0042f044
jmp 0x49282a
cmp byte [esi + 0x44], bl
je 0x492815
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x10]
add eax, eax
push eax
add ecx, 0x4c
call fcn.0048e5a0
mov eax, dword [esi + 0x10]
or dword [eax + 0x84], 0xffffffff
jmp 0x49281c
mov ecx, esi
call fcn.0048ea6c
mov eax, dword [esi + 0x10]
mov cx, word [eax + 0x220]
mov word [eax + 0x48], cx
mov dword [esi + 0x10], ebx
jmp 0x49285b
cmp byte [ebp - 1], bl
je 0x492844
push ebx
push 0x258
lea ecx, [esi + 8]
call fcn.0048e579
jmp 0x49285b
test byte [ebp + 8], 4
jne 0x49285b
test byte [esi + 0xf5], 2
jne 0x49285b
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
call fcn.0047cff8
pop edi
pop esi
pop ebx
leave
ret 4