Function at 0x4e2a08
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe74
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405ec4
mov eax, dword [ebp - 8]
call fcn.00405ec4
mov eax, dword [ebp - 0xc]
call fcn.00405ec4
mov eax, dword [ebp + 0x18]
call fcn.00405ec4
mov eax, dword [ebp + 0x14]
call fcn.00405ec4
mov eax, dword [ebp + 0x10]
call fcn.00405ec4
xor eax, eax
push ebp
push 0x4e2f78
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4778]
mov edx, dword [ebp + 8]
mov dword [eax], edx
mov eax, dword [0x5d4eec]
mov edx, dword [0x5db404]
mov dword [eax], edx
cmp byte [0x5ce894], 0
je 0x4e2b45
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [ebp - 4]
call fcn.004e1dfc
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [ebp - 8]
call fcn.004e1e28
mov eax, dword [0x5d4f6c]
mov edx, dword [ebp - 8]
call fcn.00405a98
cmp byte [ebp + 0xc], 0
jne 0x4e2b11
cmp dword [0x5ce898], 0
je 0x4e2b11
mov ebx, dword [0x5ce898]
mov dword [ebp - 0x174], ebx
mov eax, dword [ebp - 0x174]
call fcn.00405ed4
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov ecx, 0x5ce894
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov dl, 1
mov ebx, dword [eax]
call dword [ebx + 0x40]
test al, al
jne 0x4e2b3e
cmp byte [0x5ce894], 0
je 0x4e2b45
xor ebx, ebx
jmp 0x4e2f40
mov bl, 1
jmp 0x4e2f40
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x40a0
mov edx, dword [ebp - 4]
call fcn.00405a98
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x54
mov edx, dword [ebp - 0xc]
call fcn.00405a98
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x58
mov edx, dword [ebp + 0x18]
call fcn.00405a98
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x64
mov edx, dword [ebp + 0x14]
call fcn.00405a98
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x68
mov edx, dword [ebp + 0x10]
call fcn.00405a98
mov eax, dword [0x5d4c38]
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [ebp - 8]
call fcn.0040b89c
test al, al
je 0x4e2c25
mov eax, dword [0x5d4ee8]
mov byte [eax], 0
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x170]
call fcn.00403950
mov edx, 1
lea eax, [ebp - 0x170]
call fcn.004040ec
lea eax, [ebp - 0x170]
call fcn.00403cd4
cdq
mov ecx, dword [0x5d4c38]
mov dword [ecx], eax
mov dword [ecx + 4], edx
lea eax, [ebp - 0x170]
call fcn.00403af8
mov eax, dword [0x5d4d90]
mov dword [eax], 0
mov dword [eax + 4], 0
xor eax, eax
push ebp
push 0x4e2c61
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
call fcn.004da5c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e2c6b
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
cmp dword [eax + 0x40d4], 0x190
jl 0x4e2c8b
xor ebx, ebx
jmp 0x4e2f40
mov dl, 1
mov eax, dword [0x41c6f4]
call fcn.00404ab4
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x178]
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov eax, dword [eax + 0x4118]
call fcn.00420508
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x1c]
call fcn.00420f50
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x4e2dd2
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 1
lea ecx, [ebp - 0x180]
mov ebx, dword [ebp - 0x14]
dec ebx
mov edx, ebx
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x180]
lea edx, [ebp - 0x17c]
call fcn.0040ab90
mov edx, dword [ebp - 0x17c]
mov eax, 0x4e2f94
call fcn.00410338
test eax, eax
je 0x4e2dc6
lea ecx, [ebp - 0x184]
mov edx, ebx
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x10]
call fcn.0040ab90
mov edx, dword [ebp - 0x10]
mov eax, 0x4e2f94
call fcn.00410338
mov edx, eax
lea eax, [ebp - 0x10]
mov ecx, 0xf
call fcn.00405f7c
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0x10]
call fcn.0040ac2c
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 0x10]
call fcn.00405adc
xor eax, eax
push ebp
push 0x4e2daa
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.0040b2d4
cdq
mov ecx, dword [0x5d4c38]
add eax, dword [ecx]
adc edx, dword [ecx + 4]
mov ecx, dword [0x5d4d90]
mov dword [ecx], eax
mov dword [ecx + 4], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e2dc6
inc dword [ebp - 0x14]
dec dword [ebp - 0x24]
jne 0x4e2ce0
mov eax, dword [ebp - 0x1c]
call fcn.00404ae4
mov eax, dword [0x5d4c38]
cmp dword [eax + 4], 0
jne 0x4e2df0
cmp dword [eax], 0x800
seta al
jmp 0x4e2df3
setg al
and al, byte [ebp + 0xc]
je 0x4e2e49
mov eax, dword [0x5d4c38]
mov edx, dword [eax + 4]
mov eax, dword [eax]
sub eax, 0x800
sbb edx, 0
mov ecx, dword [0x5d4c38]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov eax, dword [0x5d4c38]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x18c]
call fcn.0040b284
mov edx, dword [ebp - 0x18c]
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x4104
call fcn.00405a98
jmp 0x4e2e72
mov eax, dword [0x5d4c38]
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
add eax, 0x4104
call fcn.00405a44
push 0
push 0x80
push 4
push 0
push 1
push 0x40000000
mov eax, dword [ebp - 8]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CreateFileA_1
mov ebx, eax
push 0
push 0
mov eax, dword [0x5d4c38]
mov eax, dword [eax]
push eax
push ebx
call sub.kernel32.dll_SetFilePointer_1
push ebx
call sub.kernel32.dll_SetEndOfFile_1
mov ecx, ebx
mov dl, 1
mov eax, dword [0x41c918]
call fcn.004221a4
mov dword [ebp - 0x20], eax
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov edx, dword [eax + 0x411c]
mov dword [ebp - 0x18], edx
mov edx, dword [0x5d50a8]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x411c], edx
xor edx, edx
push ebp
push 0x4e2f05
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, dword [0x5d50a8]
call fcn.004da5b4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e2f0f
mov eax, dword [ebp - 0x20]
call fcn.00404ae4
mov eax, dword [0x5d50a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
cmp dword [eax + 0x40d4], 0x190
setl bl
mov edx, dword [0x5d50a8]
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x411c], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e2f7f
lea eax, [ebp - 0x18c]
mov edx, 6
call fcn.00405a68
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00405a68
lea eax, [ebp + 0x10]
mov edx, 3
call fcn.00405a68
ret