Function at 0x48ad66
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a5cbd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd8
push ebx
push esi
mov esi, dword [0x52f800]
push edi
mov bl, byte [esi + 0xa4]
mov byte [esi + 0xa4], 1
call fcn.0041e77e
lea ecx, [esp + 0xc8]
mov eax, dword [eax + 0x18]
add eax, 0xe0
push eax
call fcn.0041ee74
xor edi, edi
mov dword [esp + 0xec], edi
call fcn.0041e77e
lea ecx, [esi + 0xa8]
mov eax, dword [eax + 0x18]
add eax, 0xe0
cmp ecx, eax
je 0x48ade0
push 0xffffffffffffffff
push edi
push eax
call fcn.0041ef03
call fcn.0041e77e
mov eax, dword [eax + 0x38]
cmp byte [eax + 0x11], 0
je 0x48adfe
mov eax, dword [esi + 0x34]
push 5
mov eax, dword [eax + 0xc]
push dword [eax]
call dword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], edi
mov word [esp + 0x64], ax
mov dword [esp + 0x7c], edi
mov byte [esp + 0xec], 1
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push dword [eax + 0x18]
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 2
mov ecx, esp
push 0x526d90
call fcn.0041ee74
push edi
lea ecx, [esp + 0x98]
mov byte [esp + 0x120], 1
call fcn.00471238
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
mov eax, dword [eax + 0x18]
add eax, 0x18
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 3
mov ecx, esp
push 0x5270d8
call fcn.0041ee74
push edi
lea ecx, [esp + 0x98]
mov byte [esp + 0x120], 1
call fcn.00471238
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
mov eax, dword [eax + 0x18]
add eax, 0x30
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 4
mov ecx, esp
push 0x526d78
call fcn.0041ee74
push edi
lea ecx, [esp + 0x98]
mov byte [esp + 0x120], 1
call fcn.00471238
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
mov eax, dword [eax + 0x18]
add eax, 0x48
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 5
mov ecx, esp
push 0x526e20
call fcn.0041ee74
push edi
lea ecx, [esp + 0x98]
mov byte [esp + 0x120], 1
call fcn.00471238
call fcn.0041e77e
mov eax, dword [eax + 0x18]
add eax, 0x60
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 6
mov ecx, esp
push 0x526f28
call fcn.0041ee74
push edi
lea ecx, [esp + 0x98]
mov byte [esp + 0x120], 1
call fcn.00471238
sub esp, 0x18
lea ecx, [esp + 0x7c]
push esp
call fcn.004710b7
push 0x492
push dword [esi + 4]
call fcn.004956d3
call fcn.0041e77e
mov eax, dword [eax + 0x38]
cmp dword [eax + 0x38], edi
jne 0x48b150
test bl, bl
jne 0x48b150
cmp byte [esi + 0x28], bl
jne 0x48b150
call fcn.0041e77e
xor ebx, ebx
mov eax, dword [eax + 0x18]
cmp dword [eax + 0xb8], ebx
jbe 0x48b599
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], ebx
mov word [esp + 0x30], ax
mov dword [esp + 0x48], ebx
sub esp, 0x18
mov byte [esp + 0x104], 0x13
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4f01d8
call fcn.0041eeaf
sub esp, 0x18
mov byte [esp + 0x11c], 0x14
mov ecx, esp
push 0x4f01cc
call fcn.0041eeaf
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0x120], 0x13
call fcn.004710d3
call fcn.0041e77e
mov eax, dword [eax + 0x18]
add eax, 0xe0
cmp dword [eax + 0x14], 8
jb 0x48b039
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0041eeaf
sub esp, 0x18
mov byte [esp + 0x11c], 0x15
mov ecx, esp
push 0x4f0264
call fcn.0041eeaf
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0x120], 0x13
call fcn.004710d3
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
mov eax, dword [eax + 0x18]
add eax, 0x18
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 0x16
mov ecx, esp
push 0x4f0258
call fcn.0041eeaf
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0x120], 0x13
call fcn.00471238
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x34]
call fcn.004710b7
mov edi, eax
mov byte [esp + 0xec], 0x17
cmp dword [edi + 0x14], 8
jb 0x48b0d7
mov edi, dword [edi]
call fcn.0041e77e
mov eax, dword [eax + 0x18]
add eax, 0xa8
cmp dword [eax + 0x14], 8
jb 0x48b0ec
mov eax, dword [eax]
push edi
push eax
lea eax, [esp + 0x20]
push 0x4f027c
push eax
call fcn.0045da2b
add esp, 0x10
push ebx
push 1
lea ecx, [esp + 0xb8]
mov byte [esp + 0xf4], 0x19
call fcn.0041f6b8
sub esp, 0x18
lea eax, [esp + 0x30]
mov ecx, esp
push eax
call fcn.0041ee74
mov ecx, dword [esi + 0x34]
mov eax, dword [ecx]
call dword [eax + 0x24]
push ebx
push 1
lea ecx, [esp + 0x20]
call fcn.0041f6b8
lea ecx, [esp + 0x30]
mov byte [esp + 0xec], 1
call fcn.00470ff8
jmp 0x48b599
call fcn.0041e77e
xor ebx, ebx
mov eax, dword [eax + 0x38]
cmp dword [eax + 0x38], 2
jne 0x48b1fb
cmp dword [ebp + 0xc], ebx
jne 0x48b1fb
xor eax, eax
mov dword [esp + 0x2c], 7
mov edi, 0x4f0140
mov dword [esp + 0x28], ebx
push edi
mov word [esp + 0x1c], ax
call fcn.00438238
pop ecx
push eax
push edi
lea ecx, [esp + 0x20]
call fcn.0041fba8
sub esp, 0x18
mov byte [esp + 0x104], 7
lea eax, [esp + 0x30]
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 8
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x4f0120
call fcn.0041eeaf
sub esp, 0x18
mov byte [esp + 0x134], 9
mov ecx, esp
call fcn.004234e0
mov byte [esp + 0x134], 7
call fcn.0045ca63
add esp, 0x48
lea ecx, [esp + 0x18]
push ebx
push 1
call fcn.0041f6b8
push 7
pop ecx
xor eax, eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], ebx
mov word [esp + 0x80], ax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], ebx
mov word [esp + 0x4c], ax
mov byte [esp + 0xec], 0xb
call fcn.0041e77e
push 0x4f01ec
mov ecx, dword [eax + 0x38]
add ecx, 0x6c
call fcn.00420ac5
test eax, eax
jne 0x48b3ba
call fcn.0041e77e
push 8
pop edi
mov eax, dword [eax + 0x38]
add eax, 0xcc
cmp dword [eax + 0x14], edi
jb 0x48b25f
mov eax, dword [eax]
push eax
lea eax, [esp + 0x9c]
push eax
call fcn.0041e77e
mov ecx, dword [eax + 0x38]
call fcn.00469cf9
mov byte [esp + 0xf0], 0xc
cmp dword [eax + 0x14], edi
jb 0x48b284
mov eax, dword [eax]
push eax
call fcn.0041e77e
mov eax, dword [eax + 0x38]
add eax, 0x3c
cmp dword [eax + 0x14], edi
jb 0x48b297
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
push 0x526ef8
call fcn.0041ee74
push 1
push 1
mov dl, 1
lea ecx, [esp + 0x44]
call fcn.0045b017
add esp, 0x20
mov byte [esp + 0xf8], 0xd
cmp dword [eax + 0x14], edi
jb 0x48b2c8
mov eax, dword [eax]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.0045da2b
add esp, 0x14
lea ecx, [esp + 0x80]
push eax
call fcn.0041eed4
push ebx
push 1
lea ecx, [esp + 0xb8]
call fcn.0041f6b8
push ebx
push 1
lea ecx, [esp + 0x20]
call fcn.0041f6b8
push ebx
push 1
lea ecx, [esp + 0xa0]
mov byte [esp + 0xf4], 0xb
call fcn.0041f6b8
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x58]
call fcn.0041ef03
mov edi, 0x4f01dc
push edi
call fcn.00438238
pop ecx
push eax
push edi
lea ecx, [esp + 0x54]
call fcn.004232bf
call fcn.0041e77e
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x54]
mov eax, dword [eax + 0x18]
add eax, 0xe0
push eax
call fcn.00423219
mov edi, 0x4f0218
push edi
call fcn.00438238
pop ecx
push eax
push edi
lea ecx, [esp + 0x54]
call fcn.004232bf
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov eax, dword [eax + 0x18]
add eax, 0x18
push eax
call fcn.0041ee74
lea ecx, [esp + 0xb0]
call fcn.0045c2d5
add esp, 0x18
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0xf8], 0xe
call fcn.00423219
lea ecx, [esp + 0x98]
jmp 0x48b4ea
xor eax, eax
mov dword [esp + 0x2c], 7
mov edi, 0x4f01f8
mov dword [esp + 0x28], ebx
push edi
mov word [esp + 0x1c], ax
call fcn.00438238
pop ecx
push eax
push edi
lea ecx, [esp + 0x20]
call fcn.0041fba8
mov edi, 0x4f019c
mov byte [esp + 0xec], 0xf
push edi
call fcn.00438238
pop ecx
push eax
push edi
lea ecx, [esp + 0x20]
call fcn.004232bf
call fcn.0041e77e
push 0xffffffffffffffff
mov edi, 0xe0
lea ecx, [esp + 0x1c]
push ebx
mov eax, dword [eax + 0x18]
add eax, edi
push eax
call fcn.00423219
push 0x4f0190
call fcn.0041e77e
push 8
mov eax, dword [eax + 0x18]
add eax, edi
pop edi
cmp dword [eax + 0x14], edi
jb 0x48b438
mov eax, dword [eax]
push eax
lea eax, [esp + 0x38]
push eax
call fcn.0041e77e
mov ecx, dword [eax + 0x38]
call fcn.00469cf9
mov byte [esp + 0xf4], 0x10
cmp dword [eax + 0x14], edi
jb 0x48b45a
mov eax, dword [eax]
push eax
call fcn.0041e77e
mov eax, dword [eax + 0x38]
add eax, 0x3c
cmp dword [eax + 0x14], edi
jb 0x48b46d
mov eax, dword [eax]
push eax
sub esp, 0x18
mov ecx, esp
push 0x526e08
call fcn.0041ee74
push 1
push 1
mov dl, 1
lea ecx, [esp + 0xe0]
call fcn.0045b017
add esp, 0x20
mov byte [esp + 0xfc], 0x11
cmp dword [eax + 0x14], edi
jb 0x48b4a1
mov eax, dword [eax]
push eax
lea eax, [esp + 0xac]
push eax
call fcn.0045da2b
add esp, 0x18
lea ecx, [esp + 0x4c]
push eax
call fcn.0041eed4
push ebx
push 1
lea ecx, [esp + 0xa0]
call fcn.0041f6b8
push ebx
push 1
lea ecx, [esp + 0xb8]
call fcn.0041f6b8
push ebx
push 1
lea ecx, [esp + 0x38]
call fcn.0041f6b8
lea ecx, [esp + 0x18]
push ebx
push 1
mov byte [esp + 0xf4], 0xb
call fcn.0041f6b8
cmp dword [esi + 0x3c], 1
lea eax, [esp + 0x4c]
jne 0x48b51b
push 1
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0041ee74
mov ecx, dword [esi + 0x34]
mov eax, dword [ecx]
call dword [eax + 0x20]
jmp 0x48b576
mov ecx, dword [esi + 0x34]
add ecx, 0x3c
mov byte [esi + 0x28], bl
cmp ecx, eax
je 0x48b535
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x54]
push eax
call fcn.0041ef03
sub esp, 0x18
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0041ee74
mov byte [esp + 0x104], 0x12
call fcn.0041e77e
push 0x4a3
mov ecx, dword [eax]
call fcn.00476edb
mov byte [esp + 0x108], 0xb
mov ecx, eax
mov edx, dword [esi + 4]
call fcn.0045e150
add esp, 0x1c
push ebx
push 1
lea ecx, [esp + 0x54]
call fcn.0041f6b8
push ebx
push 1
lea ecx, [esp + 0x88]
mov byte [esp + 0xf4], 1
call fcn.0041f6b8
call fcn.0041e77e
mov ecx, dword [eax]
call fcn.00476b29
test al, al
je 0x48b6f7
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], ebx
mov word [esp + 0x30], ax
mov dword [esp + 0x48], ebx
mov byte [esp + 0xec], 0x1a
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x28], esp
mov eax, dword [eax + 0x18]
add eax, 0xe0
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 0x1b
mov ecx, esp
push 0x4f0270
call fcn.0041eeaf
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0x120], 0x1a
call fcn.00471238
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x28], esp
mov eax, dword [eax + 0x18]
add eax, 0x18
push eax
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 0x1c
mov ecx, esp
push 0x4f0234
call fcn.0041eeaf
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0x120], 0x1a
call fcn.00471238
call fcn.0041e77e
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x28], esp
push dword [eax + 0x18]
call fcn.0041ee74
sub esp, 0x18
mov byte [esp + 0x11c], 0x1d
mov ecx, esp
push 0x4f0228
call fcn.0041eeaf
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0x120], 0x1a
call fcn.00471238
call fcn.0041e77e
mov ecx, dword [eax]
call fcn.00476edb
mov edi, eax
test edi, edi
je 0x48b6c4
sub esp, 0x18
lea ecx, [esp + 0x48]
push esp
call fcn.004710b7
mov edx, dword [esi + 4]
mov ecx, edi
push 0x49f
call fcn.0045e150
add esp, 0x1c
call fcn.0041e77e
cmp dword [eax + 0x30], 0
jbe 0x48b6e6
call fcn.0041e77e
add eax, 0x20
cmp dword [eax + 0x14], 8
jb 0x48b6df
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x30]
mov byte [esp + 0xec], 1
call fcn.00470ff8
lea ecx, [esp + 0x64]
mov byte [esp + 0xec], bl
call fcn.00470ff8
push ebx
push 1
lea ecx, [esp + 0xd0]
call fcn.0041f6b8
mov ecx, dword [esp + 0xe4]
xor eax, eax
pop edi
pop esi
inc eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc