Function at 0x462fb0
Capabilities:
Delete file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4a31c8
push eax
mov dword fs:[0], esp
sub esp, 0x7e4
push ebx
push esi
mov esi, ecx
push 1
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, esi
call fcn.00465740
lea ecx, [esi + 0x1588]
push ecx
mov ecx, esi
call fcn.00468450
test al, al
jne 0x463043
push 0x3e9
mov ecx, esi
call fcn.00468d70
mov ecx, esi
call fcn.00468320
push 0xa
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4cb874
call fcn.0048c471
mov ecx, esi
call fcn.004639f0
push 1
mov ecx, esi
call fcn.004664a0
mov ecx, dword [esp + 0x7ec]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x7f0
ret
push 4
mov ecx, esi
call fcn.004666f0
mov ecx, esi
call fcn.00465410
xor ebx, ebx
cmp al, bl
jne 0x4630d1
push 2
mov ecx, esi
call fcn.004666f0
mov ecx, esi
call fcn.00465740
mov edx, dword [esi + 0x1c]
push ebx
push 0x4e20
push 1
push edx
call dword [sym.imp.USER32.dll_SetTimer]
push ecx
mov ecx, esp
mov dword [esp + 0xc], esp
push str.9999
call fcn.0048c471
push ecx
mov dword [esp + 0x7fc], ebx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4cb868
call fcn.0048c471
mov ecx, dword [esi + 0x15e0]
mov dword [esp + 0x7fc], 0xffffffff
call fcn.00414600
mov ecx, dword [esp + 0x7ec]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x7f0
ret
mov ecx, esi
mov byte [esi + 0x15f5], 1
call fcn.0046b4d0
mov ecx, esi
call fcn.004637b0
test al, al
jne 0x463108
push ecx
mov ecx, esi
mov eax, esp
mov dword [esp + 0xc], esp
push eax
call fcn.004682f0
mov ecx, esi
call fcn.004635a0
cmp al, bl
je 0x4631b6
lea ecx, [esp + 0x404]
call fcn.0043b330
lea ecx, [esi + 0x60]
mov dword [esp + 0x7f4], 1
push ecx
lea ecx, [esp + 0x408]
call fcn.0043b460
mov eax, dword [0x4cc854]
mov dword [esp + 8], eax
mov dword [esp + 0x10], eax
lea edx, [esp + 0x10]
lea eax, [esp + 8]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x7fc], 3
call fcn.00461ea0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
push ebx
push ecx
push edx
lea ecx, [esp + 0x410]
call fcn.0043f4b0
test al, al
je 0x463174
push 5
jmp 0x463176
push 6
mov ecx, esi
call fcn.004666f0
lea ecx, [esp + 0x10]
mov byte [esp + 0x7f4], 2
call fcn.0048c403
lea ecx, [esp + 8]
mov byte [esp + 0x7f4], 1
call fcn.0048c403
lea ecx, [esp + 0x404]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0043b3c0
lea ecx, [esp + 0x1c]
call fcn.0043b330
lea eax, [esi + 0x60]
lea ecx, [esp + 0x1c]
push eax
mov dword [esp + 0x7f8], 4
call fcn.0043b460
lea ecx, [esp + 0x1c]
call fcn.0043b4c0
test al, al
mov ecx, esi
je 0x463393
call fcn.00463850
mov ecx, dword [0x4cc854]
mov dword [esp + 0x14], ecx
lea edx, [esp + 0x14]
mov ecx, esi
push edx
mov byte [esp + 0x7f8], 5
call fcn.0046bb80
test al, al
je 0x463335
mov eax, dword [0x4cc854]
mov dword [esp + 0xc], eax
lea ecx, [esi + 0x158c]
push str.ZRUPDATE.EXE
lea edx, [esp + 0x1c]
push ecx
push edx
mov byte [esp + 0x800], 6
call fcn.0048c698
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x7f8], 7
call fcn.0048c53c
lea ecx, [esp + 0x18]
mov byte [esp + 0x7f4], 6
call fcn.0048c403
mov eax, dword [esp + 0xc]
push ebx
push eax
call fcn.00476665
add esp, 8
cmp eax, 0xffffffff
je 0x4632c3
mov ecx, dword [esp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x4632c3
push 0xa
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4cb9f8
call fcn.0048c471
mov ecx, esi
call fcn.004639f0
lea ecx, [esp + 0xc]
mov byte [esp + 0x7f4], 5
call fcn.0048c403
lea ecx, [esp + 0x14]
mov byte [esp + 0x7f4], 4
call fcn.0048c403
jmp 0x4633b5
push 0xa
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4cb9a0
call fcn.0048c471
mov ecx, esi
call fcn.004639f0
push ecx
lea edx, [esi + 0x1590]
mov ecx, esp
mov dword [esp + 0xc], esp
push edx
mov byte [esi + 0x46c], 1
mov byte [esi + 0x46d], bl
call fcn.0048c178
mov ecx, esi
call fcn.0046bcd0
cmp al, bl
jne 0x46329c
push 0xa
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4cb940
call fcn.0048c471
mov ecx, esi
call fcn.004639f0
mov byte [esi + 0x46d], bl
mov byte [esi + 0x46c], bl
jmp 0x46329c
mov eax, dword [esp + 0x14]
push 0x4cb93c
push eax
call fcn.0047514f
add esp, 8
test eax, eax
jne 0x463366
push 0xa
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4cb8e0
call fcn.0048c471
mov ecx, esi
call fcn.004639f0
mov ecx, esi
call fcn.0046b820
test al, al
jne 0x463378
mov ecx, esi
call fcn.00466c80
mov ecx, esi
call fcn.004637b0
test al, al
je 0x4632ad
mov ecx, esi
call fcn.00463780
jmp 0x4632ad
call fcn.0046b820
test al, al
jne 0x4633a3
mov ecx, esi
call fcn.00466c80
mov ecx, esi
call fcn.004637b0
test al, al
je 0x4633b5
mov ecx, esi
call fcn.00463780
lea ecx, [esp + 0x1c]
mov dword [esp + 0x7f4], 0xffffffff
call fcn.0043b3c0
mov ecx, dword [esp + 0x7ec]
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x7f0
ret