Function at 0x459bf0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x53e58f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x31c
push ebx
push ebp
push esi
push edi
mov esi, ecx
lea eax, [esp + 0x20]
lea edx, [esp + 0x33c]
push eax
push ecx
xor ebx, ebx
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
mov dword [esp + 0x340], ebx
mov dword [esp + 0x2c], ebx
call fcn.0050d172
lea eax, [esp + 0x1c]
mov byte [esp + 0x33c], bl
push eax
call fcn.0042eff0
mov ecx, eax
add ecx, 0x48c
call fcn.00412710
mov byte [esp + 0x334], 2
call fcn.0042eff0
mov ecx, eax
call fcn.00434250
push 0x338
mov dword [esp + 0x20], ebx
call fcn.0050d138
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0x334], 3
je 0x459c98
push 2
push esi
mov ecx, eax
call fcn.004640a0
mov edi, eax
jmp 0x459c9a
xor edi, edi
push ecx
mov byte [esp + 0x338], 2
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x596660
call fcn.0050d46b
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0x340], 4
call fcn.0050d172
mov ecx, edi
mov byte [esp + 0x33c], 2
call fcn.00465370
cmp eax, ebx
jne 0x459d43
cmp edi, ebx
je 0x459cec
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 4]
call fcn.0042eff0
mov ecx, eax
call fcn.00434260
cmp dword [esp + 0x340], ebx
je 0x459d12
push 0xffffffffffffffff
push 0x30
push 0xefab
call fcn.0043c9e0
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x334], 0
call fcn.0050d3fd
lea ecx, [esp + 0x33c]
mov dword [esp + 0x334], 0xffffffff
call fcn.0050d3fd
mov ax, 1
jmp 0x45a204
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, edi
call fcn.004656e0
mov ecx, esi
call fcn.0044ba50
mov ecx, eax
call fcn.00471d30
mov ebp, eax
mov dword [esp + 0x18], 0
test ebp, ebp
je 0x459e2b
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], 2
call fcn.0042eff0
mov ecx, eax
call fcn.00434260
mov eax, dword [esp + 0x340]
test eax, eax
je 0x459daa
push 0xffffffffffffffff
push 0x30
push 0xef43
call fcn.0043c9e0
add esp, 0xc
mov ecx, ebp
call fcn.0046db50
test eax, eax
je 0x459df3
test edi, edi
je 0x459dc2
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
lea ecx, [esp + 0x14]
mov byte [esp + 0x334], 0
call fcn.0050d3fd
lea ecx, [esp + 0x33c]
mov dword [esp + 0x334], 0xffffffff
call fcn.0050d3fd
mov ax, 2
jmp 0x45a204
push 2
mov ecx, esi
call fcn.0044ba50
mov ecx, eax
call fcn.00479b90
test eax, eax
je 0x459e19
push ebp
push eax
mov ecx, esi
call fcn.00450ef0
push 1
mov ecx, ebp
call fcn.00465a30
call fcn.0042eff0
mov ecx, eax
call fcn.00434250
mov ebx, dword [esp + 0x1c]
jmp 0x459e62
push 0x338
mov ebp, edi
call fcn.0050d138
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0x334], 5
je 0x459e56
push 2
push esi
mov ecx, eax
call fcn.004640a0
jmp 0x459e58
xor eax, eax
mov byte [esp + 0x334], 2
mov edi, eax
mov ecx, ebp
call fcn.00479d40
test eax, eax
jne 0x459eae
push 0xffffffffffffffff
push 0x30
push 0xf434
call fcn.0043c9e0
add esp, 0xc
test edi, edi
je 0x459e8b
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 4]
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x45a1d9
test ebp, ebp
je 0x45a1d9
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
jmp 0x45a1d9
push 0
push ebp
mov ecx, edi
call fcn.00478890
call fcn.0042eff0
mov ecx, eax
call fcn.00434260
mov eax, dword [esp + 0x340]
test eax, eax
je 0x45a05d
mov eax, dword [0x591288]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x18]
xor ecx, ecx
test ebx, ebx
setne cl
add ecx, 0xef2d
mov byte [esp + 0x334], 6
push ecx
lea ecx, [esp + 0x14]
call fcn.004c9660
mov edx, dword [esp + 0x10]
push 0
push 0
push edx
lea ecx, [esp + 0x30]
call fcn.0052243b
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0x1c4]
or al, 0x80
mov byte [esp + 0x334], 7
mov dword [esp + 0x64], eax
call fcn.0040fe10
lea ecx, [esp + 0xac]
mov byte [esp + 0x334], 8
call fcn.0040f680
lea eax, [esp + 0x1c4]
lea ecx, [esp + 0x24]
push eax
mov byte [esp + 0x338], 9
mov dword [esp + 0x25c], 0
mov dword [esp + 0x254], edi
mov dword [esp + 0x13c], edi
call fcn.00522acd
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0x28]
call fcn.00522acd
call fcn.0050ec62
test eax, eax
je 0x459fb0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
mov ebx, eax
test ebx, ebx
je 0x459fb0
mov eax, dword [ebx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_BringWindowToTop]
mov ecx, dword [ebx + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
lea ecx, [esp + 0x24]
call fcn.0052271c
cmp eax, 1
je 0x459fc8
mov dword [esp + 0x1c], 3
jmp 0x45a00f
mov eax, dword [esi + 0x486a4]
test eax, eax
jne 0x45a007
mov edx, dword [esi + 0x486cc]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x110a
push edx
call ebx
push eax
mov eax, dword [esi + 0x486cc]
push 4
push 0x110a
push eax
call ebx
push eax
lea ecx, [esi + 0x486b0]
call fcn.0040df20
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xac]
mov byte [esp + 0x334], 8
call fcn.0040f780
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x334], 7
call fcn.0040ff60
lea ecx, [esp + 0x24]
mov byte [esp + 0x334], 6
call fcn.0052258c
lea ecx, [esp + 0x10]
mov byte [esp + 0x334], 2
call fcn.0050d3fd
mov ebx, dword [esp + 0x1c]
call fcn.0042eff0
mov ecx, eax
call fcn.00434250
test bx, bx
jne 0x45a129
push 0
push edi
mov ecx, ebp
call fcn.00478890
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x45a0b4
push 0
push 0
push ebp
mov ecx, esi
call fcn.0044ba50
mov ecx, eax
call fcn.0046b990
mov ecx, esi
call fcn.0044aba0
test eax, eax
je 0x45a0ec
cmp eax, dword [ebp + 4]
jne 0x45a0ec
push 0
push ebp
lea ecx, [esi + 0x74]
call fcn.0047be80
jmp 0x45a0ec
mov eax, dword [ebp + 4]
mov ecx, esi
push eax
push 0
call fcn.00451d00
test eax, eax
je 0x45a0da
push eax
lea ecx, [esi + 0x486b0]
call fcn.0040df20
push ebp
lea ecx, [esi + 0x74]
call fcn.0047d300
lea ecx, [esi + 0x74]
call fcn.00513a2a
mov ecx, dword [esi + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, ebp
call fcn.00465a20
cmp ax, 1
jne 0x45a103
push 0
push ebp
mov ecx, esi
call fcn.0044f3d0
mov edx, dword [esi + 0x1c]
push 0
push 0
push 0x4cb
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
test edi, edi
je 0x45a1b0
mov eax, dword [edi]
push 1
mov ecx, edi
jmp 0x45a1ad
cmp bx, 3
jne 0x45a18d
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x45a18d
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x45a18d
mov ecx, dword [esp + 0x33c]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.004ee0f0
add esp, 8
test eax, eax
je 0x45a18d
mov eax, dword [esp + 0x14]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push eax
call ebx
lea ecx, [esp + 0x14]
push str..filelist
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.0050d692
mov eax, dword [esp + 0x10]
push eax
call ebx
lea ecx, [esp + 0x10]
call fcn.0050d3fd
mov ebx, dword [esp + 0x1c]
test edi, edi
je 0x45a19a
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x45a1b0
test ebp, ebp
je 0x45a1b0
mov eax, dword [ebp]
push 1
mov ecx, ebp
call dword [eax + 4]
mov ecx, esi
call fcn.00450790
call fcn.0042eff0
mov ecx, eax
call fcn.00434260
test bx, bx
jne 0x45a1d9
push 0x80
call fcn.0042eff0
mov ecx, eax
call fcn.0042f3e0
lea ecx, [esp + 0x14]
mov byte [esp + 0x334], 0
call fcn.0050d3fd
lea ecx, [esp + 0x33c]
mov dword [esp + 0x334], 0xffffffff
call fcn.0050d3fd
mov ax, bx
mov ecx, dword [esp + 0x32c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x328
ret 8