Function at 0x464497
Capabilities:
Delete file
Move file

Disassembly:
mov eax, 0x4f46f1
call fcn.004ebd20
sub esp, 0x498
mov eax, dword [0x517ad4]
push ebx
push esi
push edi
xor eax, ebp
mov esi, ecx
xor ebx, ebx
push 0x523254
lea edi, [ebp - 0x484]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x4a0], esi
mov dword [ebp - 0x490], ebx
call fcn.00403098
push 0x4fdd60
mov eax, edi
push eax
mov dword [ebp - 4], ebx
call fcn.00403184
push ebx
mov ebx, dword [ebp - 0x484]
call fcn.0045e51b
mov eax, dword [esi + 4]
xor ebx, ebx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x494], eax
mov dword [ebp - 0x478], ebx
jle 0x4646de
jmp 0x464512
mov esi, dword [ebp - 0x4a0]
mov eax, dword [ebp - 0x478]
mov ecx, esi
call fcn.0045d61b
mov ebx, dword [eax]
mov eax, dword [0x51b438]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x48c], eax
mov byte [ebp - 4], 2
push dword [ebp - 0x478]
lea eax, [ebp - 0x480]
push dword [ebp - 0x484]
push str._s_03d.ttbl
push eax
call fcn.00405b51
add esp, 0x10
push 0x4feb98
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004032df
mov edi, eax
lea eax, [ebp - 0x48c]
call fcn.0040311c
mov eax, dword [ebp - 0x4a4]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x464592
push eax
call fcn.004013b2
mov esi, dword [ebp - 0x48c]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
call edi
cmp dword [ebx + 0x2c], 0
jne 0x46462f
lea eax, [ebp - 0x49c]
mov ecx, ebx
call fcn.0045e785
mov eax, dword [eax]
push dword [ebp - 0x480]
push eax
call dword [sym.imp.MSVCRT.dll_wcscmp]
test eax, eax
mov eax, dword [ebp - 0x49c]
setne byte [ebp - 0x485]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
pop ecx
pop ecx
je 0x4645e9
push eax
call fcn.004013b2
cmp byte [ebp - 0x485], 0
je 0x464698
lea eax, [ebp - 0x498]
mov ecx, ebx
call fcn.0043f188
mov eax, dword [eax]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov eax, dword [ebp - 0x498]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x464624
push eax
call fcn.004013b2
push esi
lea eax, [ebx + 0x14]
call fcn.0040315f
jmp 0x464698
push 1
push esi
push ebx
call fcn.00462320
test eax, eax
jne 0x464698
push esi
call edi
lea eax, [ebp - 0x47c]
mov ecx, ebx
call fcn.0045e785
mov edi, dword [ebp - 0x47c]
cmp dword [edi - 8], 0
je 0x464687
mov eax, edi
call fcn.00403fa2
test eax, eax
je 0x464687
push dword [ebp - 0x480]
push edi
call dword [sym.imp.MSVCRT.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
je 0x464687
push esi
push edi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push esi
lea eax, [ebx + 0x14]
call fcn.0040315f
lea eax, [edi - 0xc]
cmp eax, dword [0x51b43c]
je 0x464698
push eax
call fcn.004013b2
add esi, 0xfffffff4
cmp esi, dword [0x51b43c]
je 0x4646a9
push esi
call fcn.004013b2
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x480]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4646c4
push eax
call fcn.004013b2
inc dword [ebp - 0x478]
mov eax, dword [ebp - 0x478]
cmp eax, dword [ebp - 0x494]
jl 0x46450c
xor ebx, ebx
cmp dword [ebp - 0x494], ebx
mov dword [ebp - 0x478], ebx
jle 0x4647bd
push dword [ebp - 0x478]
mov eax, dword [0x51b438]
push dword [ebp - 0x484]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x480]
push str._s_03d.ttbl
push eax
call fcn.00405b51
add esp, 0x10
push 0x4feb98
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.004032df
mov edi, eax
lea eax, [ebp - 0x48c]
call fcn.0040311c
mov eax, dword [ebp - 0x47c]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x46475d
push eax
call fcn.004013b2
mov esi, dword [ebp - 0x48c]
mov eax, esi
call fcn.00403fa2
test eax, eax
mov edi, dword [ebp - 0x480]
je 0x464783
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
lea eax, [esi - 0xc]
cmp eax, dword [0x51b43c]
je 0x464794
push eax
call fcn.004013b2
lea eax, [edi - 0xc]
cmp eax, dword [0x51b43c]
je 0x4647a5
push eax
call fcn.004013b2
inc dword [ebp - 0x478]
mov eax, dword [ebp - 0x478]
cmp eax, dword [ebp - 0x494]
jl 0x4646f0
push 0x4feb88
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x47c]
push eax
mov word [ebp - 0x1c], 0x5c
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov word [ebp - 0x224], bx
call fcn.004032df
mov eax, dword [eax]
lea ebx, [ebp - 0x474]
call fcn.0040e026
mov esi, eax
mov eax, dword [ebp - 0x47c]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x46480e
push eax
call fcn.004013b2
test esi, esi
je 0x4648d2
lea ecx, [ebp - 0x47c]
lea eax, [ebp - 0x474]
call fcn.0040df48
mov eax, dword [eax]
or dword [ebp - 0x490], 1
lea ecx, [ebp - 0x478]
push ecx
push str._d.ttbl
push eax
call dword [sym.imp.MSVCRT.dll_swscanf]
add esp, 0xc
cmp eax, 1
jne 0x464861
mov eax, dword [ebp - 0x478]
test eax, eax
jl 0x464861
cmp eax, dword [ebp - 0x494]
jge 0x464861
mov bl, 1
jmp 0x464863
xor bl, bl
test byte [ebp - 0x490], 1
je 0x46488a
mov eax, dword [ebp - 0x47c]
and dword [ebp - 0x490], 0xfffffffe
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x46488a
push eax
call fcn.004013b2
test bl, bl
jne 0x4648bf
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x474]
call fcn.0040df92
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x498]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4648bf
push eax
call fcn.004013b2
lea eax, [ebp - 0x474]
call fcn.0040e0dc
test eax, eax
jne 0x464816
push str..ttbl.tmp
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.004032df
mov eax, dword [eax]
lea ebx, [ebp - 0x474]
call fcn.0040e026
mov esi, eax
mov eax, dword [ebp - 0x47c]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x464910
push eax
call fcn.004013b2
pop edi
test esi, esi
pop esi
pop ebx
je 0x464957
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x474]
call fcn.0040df92
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x47c]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x464948
push eax
call fcn.004013b2
lea eax, [ebp - 0x474]
call fcn.0040e0dc
test eax, eax
jne 0x464917
lea eax, [ebp - 0x474]
call fcn.0040e105
mov eax, dword [ebp - 0x484]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x464979
push eax
call fcn.004013b2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ebd70
leave
ret