Function at 0x47f9d0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x47f9d9
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404c88
xor eax, eax
push ebp
push 0x47fe2c
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4e7c20], 0
je 0x47fde7
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x7de]
call fcn.004049d0
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.0040b024
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x24]
mov ecx, 0x47fe44
call fcn.00404ae4
mov dl, 1
mov eax, dword [0x46dbfc]
call fcn.0046de90
mov dword [ebp - 0x20], eax
mov dl, 1
mov eax, dword [0x418240]
call fcn.004039a4
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, dword [ebp - 0x1c]
call fcn.0041cb84
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0x1d], 0
mov dl, 1
mov eax, dword [0x418240]
call fcn.004039a4
mov dword [ebp - 0x18], eax
mov dl, 1
mov eax, dword [0x418240]
call fcn.004039a4
mov esi, eax
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x7da]
call fcn.004049d0
lea eax, [ebp - 0x34]
mov edx, 0x47fe58
call fcn.00404aa0
mov eax, dword [ebp - 0x34]
call fcn.0040ae10
test al, al
je 0x47fadd
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x7da]
call fcn.004049d0
lea eax, [ebp - 0x38]
push eax
mov edx, 0x47fe58
pop eax
call fcn.00404aa0
mov edx, dword [ebp - 0x38]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x47fc73
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x14]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
jmp 0x47fb23
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x14]
call fcn.00404a98
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 0x14]
call fcn.00404cf8
mov edx, dword [ebp - 0x14]
mov eax, 0x47fe68
call fcn.00404ddc
dec eax
je 0x47fb07
mov edx, dword [ebp - 0x14]
mov eax, 0x47fe74
call fcn.00404ddc
test eax, eax
jle 0x47fb65
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x47fe74
call fcn.00404ddc
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00404cf8
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x7de]
call fcn.004049d0
push dword [ebp - 0x40]
push dword [ebp - 0x10]
push 0x47fe80
lea eax, [ebp - 0x3c]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x3c]
call fcn.0040ae10
test al, al
je 0x47fc67
mov eax, dword [ebp - 0x24]
call fcn.0040ae10
test al, al
je 0x47fc07
mov eax, dword [ebp - 0x24]
call fcn.0040ada8
call fcn.0040b1dc
fstp qword [ebp - 0x48]
wait
lea eax, [ebp - 0x50]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x7de]
call fcn.004049d0
push dword [ebp - 0x50]
push dword [ebp - 0x10]
push 0x47fe80
lea eax, [ebp - 0x4c]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x4c]
call fcn.0040ada8
call fcn.0040b1dc
fcomp qword [ebp - 0x48]
fnstsw ax
sahf
jbe 0x47fc07
mov eax, dword [ebp - 0x24]
call fcn.00404c98
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x7de]
call fcn.004049d0
push dword [ebp - 0x58]
push dword [ebp - 0x10]
push 0x47fe80
lea eax, [ebp - 0x54]
mov edx, 3
call fcn.00404b58
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.0046af48
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x40]
inc dword [ebp - 0xc]
dec dword [ebp - 0x28]
jne 0x47faf8
mov eax, esi
call fcn.004039d4
test bl, bl
jne 0x47fca7
mov eax, dword [ebp - 0x24]
call fcn.0040ae10
test al, al
je 0x47fca7
mov eax, dword [ebp - 0x1c]
call fcn.004039d4
mov eax, dword [ebp - 0x18]
call fcn.004039d4
mov eax, dword [ebp - 0x20]
call fcn.004039d4
jmp 0x47fde7
mov eax, dword [0x4ed054]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x47fd23
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4ed054]
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
je 0x47fd1b
xor eax, eax
push ebp
push 0x47fd11
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4ed054]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [eax + 8]
call fcn.00470bcc
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4ed054]
mov ecx, dword [eax]
call dword [ecx + 0x18]
call fcn.004029f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47fd1b
inc dword [ebp - 0xc]
dec dword [ebp - 0x28]
jne 0x47fcc1
mov eax, dword [0x4ed054]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x47fdc7
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x64]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x64]
call fcn.00404a98
mov ebx, eax
mov eax, dword [ebp - 8]
call fcn.00404a98
add eax, 2
cmp ebx, eax
jle 0x47fdbf
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x44]
push dword [ebp - 8]
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x6c]
push 0x47fe90
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00404b58
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x9c40
mov eax, dword [ebp - 0x20]
push eax
mov cl, 1
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004814f0
inc dword [ebp - 0xc]
dec dword [ebp - 0x28]
jne 0x47fd49
mov eax, dword [ebp - 0x1c]
call fcn.004039d4
mov eax, dword [ebp - 0x18]
call fcn.004039d4
mov eax, dword [ebp - 0x20]
call fcn.004039d4
mov eax, dword [ebp - 4]
call fcn.0047f708
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47fe33
lea eax, [ebp - 0x6c]
mov edx, 9
call fcn.004047ec
lea eax, [ebp - 0x40]
mov edx, 6
call fcn.004047ec
lea eax, [ebp - 0x24]
call fcn.004047c8
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004047ec
lea eax, [ebp - 8]
call fcn.004047c8
ret