Function at 0x48e908
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x48efcf
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004032bc
cmp byte [0x4a3139], 0
je 0x48e98a
inc dword [0x4a36f4]
mov eax, dword [0x4a36f4]
cmp eax, dword [0x4a3304]
jl 0x48e977
cmp byte [0x4a356d], 0
je 0x48e96b
call fcn.004049a4
call fcn.0048c5a4
xor eax, eax
mov dword [0x4a36f4], eax
mov eax, dword [0x4a36f0]
mov edx, dword [0x4a36f4]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x18], eax
jmp 0x48e9b1
mov eax, dword [0x4a3544]
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [0x4a3304]
jl 0x48e9b1
cmp byte [0x4a356d], 0
je 0x48e9ac
call fcn.004049a4
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [0x4a3544], eax
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x40], 0
je 0x48e9ec
xor eax, eax
push ebp
push 0x48e9e2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.0047ca4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e9ec
mov ebx, dword [0x4a3528]
mov edx, dword [ebp - 0x18]
dec edx
test edx, edx
jl 0x48ea1b
inc edx
xor eax, eax
lea ecx, [eax + eax*4]
mov esi, dword [0x4a3540]
add ebx, dword [esi + ecx*4 + 8]
lea ecx, [eax + eax*4]
mov esi, dword [0x4a3540]
add ebx, dword [esi + ecx*4 + 0x10]
inc eax
dec edx
jne 0x48e9fd
mov edx, 0x40
mov eax, dword [0x4a351c]
call fcn.00408fc8
mov esi, eax
mov eax, ebx
xor edx, edx
push edx
push eax
xor edx, edx
mov eax, esi
call fcn.00409084
mov ebx, dword [ebp - 0x18]
lea ebx, [ebx + ebx*4]
mov eax, dword [0x4a3540]
mov eax, dword [eax + ebx*4 + 8]
push eax
lea eax, [ebp - 4]
mov ecx, 1
mov edx, dword [0x48e8e4]
call fcn.00405c08
add esp, 4
mov eax, dword [0x4a3540]
mov ecx, dword [eax + ebx*4 + 8]
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.00409020
mov eax, dword [0x4a3540]
cmp byte [eax + ebx*4 + 0xc], 0
je 0x48eace
mov dl, 1
mov eax, dword [0x4130fc]
call fcn.00403c3c
mov edi, eax
mov eax, dword [0x4a3540]
mov edx, dword [eax + ebx*4 + 0x10]
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 4]
push 0
push 0
mov eax, edi
call fcn.00417438
mov eax, dword [0x4a3540]
mov ecx, dword [eax + ebx*4 + 0x10]
mov edx, dword [edi + 4]
mov eax, esi
call fcn.00409020
push 0
push 0
mov eax, edi
call fcn.00417438
mov eax, edi
call fcn.00403c6c
push esi
call sub.kernel32.dll_CloseHandle
lea eax, [ebp - 0x2c]
mov edx, dword [0x4a3540]
lea edx, [edx + ebx*4]
call fcn.00404db0
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 8]
call fcn.0048f0f4
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
mov eax, dword [ebp - 8]
call fcn.00404fdc
push eax
call sub.kernel32.dll_CreateFileA
mov esi, eax
mov eax, dword [0x4a3540]
mov ecx, dword [eax + ebx*4 + 8]
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.0040904c
push esi
call sub.kernel32.dll_CloseHandle
mov eax, dword [0x4a3550]
call fcn.004090d4
test al, al
je 0x48eb62
xor edx, edx
mov eax, dword [0x4a3550]
call fcn.0040911c
mov ebx, dword [0x4a3550]
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x30]
call fcn.00404fdc
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov eax, 0x4a3550
mov edx, dword [ebp - 8]
call fcn.00404ba0
mov eax, dword [ebp - 0x10]
add eax, 0x3c
mov edx, dword [ebp - 8]
call fcn.00404ba0
xor eax, eax
push ebp
push 0x48eba3
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
call fcn.0047cd64
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48ef77
mov eax, dword [ebp - 0x10]
call fcn.0047c914
mov dl, 1
mov eax, dword [ebp - 0x14]
call fcn.0042fe90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48efd6
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00404b70
lea eax, [ebp - 0x34]
call fcn.00404b4c
lea eax, [ebp - 0x2c]
call fcn.00404b4c
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00404b70
lea eax, [ebp - 4]
mov edx, dword [0x48e8e4]
call fcn.00405c14
ret