Function at 0x4b9450
Capabilities:
Delete file

Disassembly:
push 0x178
mov eax, 0x50b215
call fcn.004fb730
mov esi, ecx
mov dword [ebp - 0x178], esi
mov ebx, dword [ebp + 8]
lea edi, [esi + 8]
mov dword [ebp - 0x17c], esi
xor ecx, ecx
mov dword [esi + 4], ecx
xor eax, eax
mov dword [ebp - 0x174], ebx
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], 7
mov word [edi], ax
mov dword [ebp - 4], ecx
lea ecx, [esi + 0x20]
call fcn.004b9d26
mov byte [ebp - 4], 1
lea ecx, [esi + 0x40]
call fcn.004596c7
mov byte [ebp - 4], 2
xor eax, eax
push eax
push eax
push eax
mov byte [esi + 0x5c], al
push eax
mov dword [esi + 0x60], eax
mov byte [esi + 0x64], al
mov dword [esi + 0x68], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [esi + 0x6c], eax
call fcn.004ba572
push str._WTAnalytics98CA00B7_D428_47a8_8EBE_66ADA4179BB9
mov edx, ebx
lea ecx, [ebp - 0x40]
call fcn.004acf8b
mov byte [ebp - 4], 3
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ebx, dword [sym.imp.KERNEL32.dll_CreateMutexW]
cmovae eax, dword [ebp - 0x40]
push eax
push 0
push 0
call ebx
mov dword [esi + 0x38], eax
test eax, eax
je 0x4b96bd
push str._uld
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x58]
call fcn.004acf8b
mov byte [ebp - 4], 7
lea eax, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
cmovae eax, dword [ebp - 0x58]
push eax
push 0
push 0
call ebx
mov dword [esi + 0x3c], eax
test eax, eax
jne 0x4b9576
lea eax, [ebp - 0x58]
mov edx, str.Failed_to_create_upload_mutex:
push eax
lea ecx, [ebp - 0x28]
call fcn.004ad389
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x184]
push ecx
mov ecx, eax
call fcn.00457f7a
push str.WT::Analytics::CAnalyticsBase::CAnalyticsBase
push 0xc6
push str.E:_bamboo_agent_home_2xml_data_build_dirPGSC_MON_JOB1monolith_sourcePhoenixWtAnalyticsAnalyticsBase.cpp
push dword [eax + 4]
lea ecx, [ebp - 0x114]
push dword [eax]
call fcn.004b3ef8
mov byte [ebp - 4], 0xa
jmp 0x4b9703
lea ecx, [ebp - 0x88]
call fcn.004acbc0
mov byte [ebp - 4], 0xb
mov edx, str.WildTangentAnalytics_
push dword [ebp - 0x174]
lea ecx, [ebp - 0xb8]
call fcn.004ad389
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xa0]
call fcn.004b5022
mov byte [ebp - 4], 0xd
mov ecx, edi
push eax
call fcn.00458756
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa0]
call fcn.00455d7e
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb8]
call fcn.00455d7e
mov ecx, edi
call fcn.004bdc76
xor ebx, ebx
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
push str.WildTangentAnalyticsWTAnalytics.dat
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.00455536
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x70]
call fcn.004b5022
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4b965a
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4b9651
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b9739
push edx
push ecx
call fcn.0047834a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x5c], 8
mov word [ebp - 0x28], ax
lea eax, [ebp - 0x70]
cmovae eax, dword [ebp - 0x70]
push eax
mov dword [ebp - 0x14], 7
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
call fcn.00455d7e
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x88]
call fcn.00455d7e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x58]
call fcn.00455d7e
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.00455d7e
or dword [ebp - 4], 0xffffffff
mov eax, esi
call fcn.004fb6da
ret 4
lea eax, [ebp - 0x40]
mov edx, str.Failed_to_create_mutex._Name:
push eax
lea ecx, [ebp - 0x28]
call fcn.004ad389
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x184]
push ecx
mov ecx, eax
call fcn.00457f7a
push str.WT::Analytics::CAnalyticsBase::CAnalyticsBase
push 0xbf
push str.E:_bamboo_agent_home_2xml_data_build_dirPGSC_MON_JOB1monolith_sourcePhoenixWtAnalyticsAnalyticsBase.cpp
push dword [eax + 4]
lea ecx, [ebp - 0x114]
push dword [eax]
call fcn.004b3ef8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.00455362
lea ecx, [ebp - 0x114]
call fcn.004b4228
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x170]
call fcn.004b3c43
push 0x5626ac
lea eax, [ebp - 0x170]
push eax
call fcn.004d4a8e
call fcn.004d7bfa
int3