Function at 0x416051
Capabilities:
Delete file

Disassembly:
push 0x14
mov eax, 0x46e170
call fcn.00451935
mov ebx, ecx
mov ecx, dword [0x492740]
push dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0xc]
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.0041cea5
mov eax, dword [0x4927f8]
pop ecx
pop ecx
lea edi, [ebp - 0x20]
lea esi, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x4927f4
call fcn.0041e099
test al, al
jne 0x416402
cmp dword [ebp + 8], 0
mov edi, dword [ebp - 0x18]
jne 0x416278
test edi, edi
jne 0x4160b3
call fcn.0044a196
mov esi, dword [ebp - 0x14]
cmp esi, dword [edi + 4]
jne 0x4160c0
call fcn.0044a196
push dword [esi + 0xc]
call fcn.0041c4a8
test eax, eax
pop ecx
je 0x416257
cmp esi, dword [edi + 4]
jne 0x4160db
call fcn.0044a196
mov dword [esi + 0x3c], 2
cmp esi, dword [edi + 4]
jne 0x4160ec
call fcn.0044a196
push dword [esi + 0xc]
call fcn.0041cb8e
test eax, eax
pop ecx
jne 0x41617d
xor edi, edi
inc edi
mov eax, edi
mov ecx, ebx
call fcn.00414fa2
lea ecx, [ebx + 0x20]
mov eax, dword [ecx]
push edi
call dword [eax + 4]
push str._g:g
lea eax, [ebp + 0xc]
push eax
mov dword [ebx + 0xe0], edi
call fcn.0040136f
and dword [ebp - 4], 0
push edi
push dword [ebp + 0xc]
mov edi, ebx
call fcn.00415d01
mov eax, dword [ebp - 0x18]
cmp esi, dword [eax + 4]
jne 0x416142
call fcn.0044a196
mov dword [esi + 0x3c], 6
and dword [0x4927dc], 0
push 0x480ecc
lea eax, [ebx + 0x84]
mov byte [0x4927cc], 1
call fcn.00422fc6
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
mov dword [ebx + 0x114], 1
jmp 0x4162e9
mov al, byte [0x48fb78]
test al, al
jne 0x4161db
mov eax, dword [0x48fb7c]
cmp eax, 1
mov byte [0x4927d4], 1
jne 0x4161ce
push 0x40041
push 0x480ed4
push 0x480ee0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x4161e6
mov byte [0x4927cc], 0x10
and dword [0x4927dc], 0
mov eax, ebx
call fcn.00415367
jmp 0x416402
test eax, eax
jne 0x4161e6
mov byte [0x4927cc], 0x11
jmp 0x4161bb
cmp al, 1
jne 0x4161e6
mov byte [0x4927d4], 0
cmp esi, dword [edi + 4]
jne 0x4161f0
call fcn.0044a196
push dword [esi + 0xc]
call fcn.0041cce1
test eax, eax
pop ecx
je 0x4162f1
cmp esi, dword [edi + 4]
jne 0x41620b
call fcn.0044a196
push dword [esi + 0xc]
call fcn.0041cc72
test eax, eax
pop ecx
je 0x41623f
cmp esi, dword [edi + 4]
jne 0x416222
call fcn.0044a196
mov dword [esi + 0x3c], 4
cmp esi, dword [edi + 4]
jne 0x416233
call fcn.0044a196
mov dword [esi + 0x34], 0x64
jmp 0x4162f1
cmp esi, dword [edi + 4]
jne 0x416249
call fcn.0044a196
push dword [esi + 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4162f1
cmp esi, dword [edi + 4]
jne 0x416261
call fcn.0044a196
mov dword [esi + 0x3c], 7
and dword [0x4927dc], 0
mov byte [0x4927cc], 3
jmp 0x4162f1
test edi, edi
jne 0x416281
call fcn.0044a196
mov esi, dword [ebp - 0x14]
cmp esi, dword [edi + 4]
jne 0x41628e
call fcn.0044a196
mov eax, dword [ebp + 8]
mov dword [esi + 0x3c], 7
mov byte [0x4927cc], 3
mov dword [0x4927dc], eax
cmp esi, dword [edi + 4]
jne 0x4162ae
call fcn.0044a196
lea eax, [ebp - 0x14]
push eax
call fcn.0041cb65
pop ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 4], 1
cmp esi, dword [edi + 4]
jne 0x4162cc
call fcn.0044a196
mov eax, dword [ebp + 0xc]
push dword [eax]
add esi, 0x40
push 0x480f14
push esi
call fcn.004141d8
add esp, 0xc
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.004019a6
call fcn.0041d026
test al, al
je 0x416311
mov ebx, dword [ebx + 0x34]
test ebx, ebx
je 0x416402
mov eax, ebx
call fcn.00413dfe
jmp 0x416402
call fcn.0041cfab
test al, al
je 0x416387
xor esi, esi
inc esi
cmp dword [0x492750], esi
jne 0x416333
mov byte [0x4927e8], 1
call fcn.00416ea4
jmp 0x41637b
lea eax, [ebp + 0xc]
push 0x480f50
mov byte [0x4927e8], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.004039d1
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 2
push dword [ebp + 0xc]
mov edi, ebx
call fcn.00415d01
mov ecx, dword [ebx + 0x34]
call fcn.00414056
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.004019a6
mov dword [ebx + 0xe4], 1
jmp 0x416402
call fcn.0041d0a1
test al, al
je 0x4163fa
xor esi, esi
inc esi
cmp dword [0x492750], esi
jne 0x4163a9
mov byte [0x4927e8], 1
call fcn.00416ea4
jmp 0x4163f1
lea eax, [ebp + 8]
push 0x480f50
mov byte [0x4927e8], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.004039d1
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 3
push dword [ebp + 8]
mov edi, ebx
call fcn.00415d01
mov ecx, dword [ebx + 0x34]
call fcn.00413ef5
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.004019a6
and dword [ebx + 0xe4], 0
jmp 0x416402
mov ecx, dword [ebx + 4]
call fcn.0041bcaf
xor eax, eax
call fcn.00451a0d
ret 8