Function at 0x48f500
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe5c
push ebx
xor edx, edx
mov dword [ebp - 0x1a4], edx
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x18c], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004055e0
lea eax, [ebp - 0x170]
mov edx, dword [0x408858]
call fcn.00405dfc
xor eax, eax
push ebp
push 0x48f817
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x171], 0
lea edx, [ebp - 0x18c]
mov eax, dword [ebp - 4]
call fcn.0040f7b8
mov edx, dword [ebp - 0x18c]
lea eax, [ebp - 4]
call fcn.004051e8
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x178], eax
mov byte [ebp - 0x179], 0
mov eax, dword [ebp - 4]
call fcn.0040a69c
test al, al
je 0x48f701
xor eax, eax
push ebp
push 0x48f6fa
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x179], 1
lea edx, [ebp - 0x190]
mov eax, dword [ebp - 4]
call fcn.0040f76c
mov edx, dword [ebp - 0x190]
lea eax, [ebp - 4]
call fcn.004051e8
lea eax, [ebp - 0x194]
mov ecx, 0x48f834
mov edx, dword [ebp - 4]
call fcn.00405478
mov eax, dword [ebp - 0x194]
lea ecx, [ebp - 0x170]
mov edx, 0x3f
call fcn.0040a83c
test eax, eax
jne 0x48f6da
test byte [ebp - 0x160], 0x10
jne 0x48f667
push 0x80
lea eax, [ebp - 0x198]
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 4]
call fcn.00405478
mov eax, dword [ebp - 0x198]
call fcn.004055f0
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x19c]
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 4]
call fcn.00405478
mov eax, dword [ebp - 0x19c]
call fcn.004055f0
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x48f6c7
mov eax, dword [ebp - 0x15c]
mov edx, 0x48f840
call fcn.00405588
je 0x48f6c7
mov eax, dword [ebp - 0x15c]
mov edx, 0x48f84c
call fcn.00405588
je 0x48f6c7
lea eax, [ebp - 0x1a0]
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 4]
call fcn.00405478
mov eax, dword [ebp - 0x1a0]
lea edx, [ebp - 8]
call fcn.0040f76c
mov eax, dword [ebp - 8]
call fcn.004055f0
push eax
call sub.kernel32.dll_DeleteVolumeMountPointA
test eax, eax
je 0x48f6c7
mov eax, dword [ebp - 8]
call fcn.0040aad4
lea eax, [ebp - 0x170]
call fcn.0040a88c
test eax, eax
je 0x48f60d
lea eax, [ebp - 0x170]
call fcn.0040a8b0
mov byte [ebp - 0x171], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48f701
ret
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [ebp - 0x178]
mov dword [ebp - 0x178], eax
mov ecx, 0xf013f
mov dl, 1
mov eax, dword [0x425f8c]
call fcn.004260d0
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.00426168
mov cl, 1
mov edx, 0x48f858
mov eax, ebx
call fcn.004261d0
test al, al
je 0x48f7d4
mov eax, dword [ebp - 0x178]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a4]
call fcn.0040a1d0
mov ecx, dword [ebp - 0x1a4]
mov edx, 0x48f87c
mov eax, ebx
call fcn.0042671c
call fcn.0040cbb0
fstp qword [ebp - 0x188]
wait
push dword [ebp - 0x184]
push dword [ebp - 0x188]
lea eax, [ebp - 0xc]
mov edx, 0x48f890
call fcn.0040d7b0
mov ecx, dword [ebp - 0xc]
mov edx, 0x48f8ac
mov eax, ebx
call fcn.0042671c
movzx ecx, byte [ebp - 0x179]
mov edx, 0x48f8bc
mov eax, ebx
call fcn.00426838
mov eax, 0x48f8d4
call fcn.0040a69c
mov ecx, eax
mov edx, 0x48f8ec
mov eax, ebx
call fcn.00426838
mov eax, ebx
call fcn.00426138
mov eax, ebx
call fcn.00404250
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48f81e
lea eax, [ebp - 0x1a4]
mov edx, 7
call fcn.00405174
lea eax, [ebp - 0x170]
mov edx, dword [0x408858]
call fcn.00405ecc
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405174
ret