Function at 0x4c693c
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 9
push 0
push 0
dec ecx
jne 0x4c6945
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x4c7110
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [eax + 0x1f8], edx
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [eax + 0xc0], edx
mov eax, dword [ebp - 0x10]
add eax, 0xd4
call fcn.00405028
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x1d0]
mov dword [ebp - 0x1c], eax
xor ebx, ebx
lea eax, [ebp - 4]
call fcn.00405028
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x200], 0
jne 0x4c70db
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x200], 1
xor edx, edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 8]
xor edx, edx
push ebp
push 0x4c7087
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [ebp - 0x14], 2
jge 0x4c6bf6
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x224], 0
jne 0x4c6a07
push 1
mov ecx, 0x2776
mov dl, 1
mov eax, dword [0x4c1604]
call fcn.004c1784
call fcn.00404a54
mov eax, dword [ebp - 0x10]
call fcn.004c73ec
test eax, eax
jne 0x4c6a1b
mov eax, dword [ebp - 0x10]
call fcn.004c823c
mov eax, dword [ebp - 0x10]
call fcn.004c73ec
test eax, eax
jne 0x4c6a55
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x200], 0
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0xc0], 0
jne 0x4c6a55
push 1
mov ecx, 0x2afa
mov dl, 1
mov eax, dword [0x4c1604]
call fcn.004c1784
call fcn.00404a54
xor edx, edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x200], 0
je 0x4c6bf6
lea eax, [ebp - 8]
call fcn.00405028
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x170], 0
setne al
cmp dword [ebp - 0x14], 0
sete dl
and al, dl
mov edx, dword [ebp - 0x10]
test byte [edx + 0x174], 0x10
setne dl
xor dl, 1
and al, dl
je 0x4c6b5c
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x170]
mov dl, 1
call fcn.004c001c
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 8]
call fcn.0040b0c8
mov eax, dword [ebp - 0x10]
test byte [eax + 0x174], 0x20
je 0x4c6ad7
mov eax, dword [ebp - 8]
call fcn.004bfeb8
mov eax, dword [ebp - 8]
call fcn.004bff68
test al, al
jne 0x4c6afd
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x2908
mov dl, 1
mov eax, dword [0x4c1604]
call fcn.004c18e0
call fcn.00404a54
lea eax, [ebp - 0xc]
mov edx, 0x106
call fcn.00405774
mov eax, dword [ebp - 0xc]
call fcn.004054ec
push eax
push 0
push 0x4c7120
mov eax, dword [ebp - 8]
call fcn.004054ec
push eax
call sub.kernel32.dll_GetTempFileNameA
test eax, eax
jne 0x4c6b46
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x2b2b
mov dl, 1
mov eax, dword [0x4c1604]
call fcn.004c18e0
call fcn.00404a54
mov eax, dword [ebp - 0xc]
call fcn.004054ec
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0xc]
call fcn.00405028
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x224]
call fcn.004050c0
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x1fc], 0
jle 0x4c6bf6
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0xe4], 0
jne 0x4c6bbf
lea eax, [ebp - 0xc]
mov edx, 0x106
call fcn.00405774
mov eax, dword [ebp - 0xc]
call fcn.004054ec
push eax
push 0x104
call sub.kernel32.dll_GetTempPathA
mov eax, dword [ebp - 0xc]
call fcn.004054ec
mov edx, eax
lea eax, [ebp - 4]
call fcn.00405220
lea eax, [ebp - 0xc]
call fcn.00405028
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xe4]
mov dl, 1
call fcn.004c001c
push 1
lea ecx, [ebp - 4]
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + 0x224]
mov eax, dword [ebp - 0x10]
call fcn.004c90fc
test eax, eax
sete al
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x200], al
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x200], 0
je 0x4c6c0c
mov eax, dword [ebp - 0x10]
call fcn.004c437c
mov ebx, eax
test ebx, ebx
jle 0x4c707d
xor edx, edx
push ebp
push 0x4c7073
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, 0x98
call fcn.00402d78
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.004c9f80
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 8], 0
je 0x4c6c81
mov esi, dword [ebp - 8]
mov ebx, esi
test ebx, ebx
je 0x4c6c57
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebx + 1]
call fcn.0040b448
mov edi, eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x70], edi
mov eax, esi
test eax, eax
je 0x4c6c72
sub eax, 4
mov eax, dword [eax]
mov edx, edi
mov ecx, eax
mov eax, dword [ebp - 8]
xchg edx, eax
call fcn.0040b2dc
jmp 0x4c6c89
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
shl eax, 5
call fcn.00402d78
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x4c], eax
lea ecx, [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x34]
mov edx, 0x4c712c
call fcn.00405438
setne bl
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
setne al
and bl, al
je 0x4c6dad
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4c6d97
inc eax
mov dword [ebp - 0x28], eax
xor ebx, ebx
mov eax, dword [ebp - 0x24]
mov esi, dword [eax + 0x4c]
mov eax, ebx
shl eax, 5
add esi, eax
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov edi, dword [ebp - 0x3c]
test edi, edi
je 0x4c6d32
sub edi, 4
mov edi, dword [edi]
lea eax, [edi + 1]
call fcn.0040b448
mov dword [esi], eax
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x4c6d6c
mov eax, dword [ebp - 0x2c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
inc ecx
mov eax, dword [esi]
call fcn.0040b2dc
inc ebx
dec dword [ebp - 0x28]
jne 0x4c6d00
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x44], eax
jmp 0x4c6db5
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [eax + 0x44], edx
cmp dword [ebp - 0x14], 1
jne 0x4c6e72
mov eax, dword [ebp - 0x10]
call fcn.004c73ec
dec eax
test eax, eax
jl 0x4c6e72
inc eax
mov dword [ebp - 0x28], eax
xor ebx, ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x218]
mov edx, ebx
call fcn.0041bcfc
mov esi, eax
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x48]
call fcn.004054ec
mov edi, eax
push 0xffffffffffffffff
mov eax, dword [esi + 0x2a]
call fcn.004054ec
push eax
push 0xffffffffffffffff
push edi
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
test eax, eax
jne 0x4c6e68
mov edx, dword [esi + 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x22c]
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x54], 0xffffffff
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x22c]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x58], eax
mov eax, dword [esi + 0x14]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x44], 1
jmp 0x4c6e72
inc ebx
dec dword [ebp - 0x28]
jne 0x4c6dd6
cmp dword [ebp - 0x14], 2
jne 0x4c6eca
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x60], 0xffffffff
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x64], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x68], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x54], 0xffffffff
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x22c]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x22c]
mov edx, dword [eax]
call dword [edx]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x94], 7
mov eax, dword [ebp - 0x10]
add eax, 0xc4
call fcn.00405028
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x1cc], 0
sete al
cmp dword [ebp - 0x14], 2
setl dl
mov ecx, dword [ebp - 0x10]
and dl, byte [ecx + 0xe9]
and al, dl
mov edx, dword [ebp - 0x10]
cmp word [edx + 0x8a], 0
setne dl
xor dl, 1
and al, dl
je 0x4c6f44
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [eax + 0x1d0], edx
lea edx, [ebp - 0x4c]
mov eax, 0x2906
call fcn.004c1404
mov eax, dword [ebp - 0x4c]
push eax
push 0
push 0
xor ecx, ecx
mov dl, 4
mov eax, dword [ebp - 0x10]
call fcn.004c35b4
cmp dword [ebp - 0x14], 0
setg al
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x54], 1
sbb edx, edx
inc edx
and al, dl
cmp dword [ebp - 0x14], 0
sete dl
or al, dl
je 0x4c6f76
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004c43e4
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1f8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c707d
mov eax, dword [ebp - 0x10]
call fcn.004c43d8
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x200], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x44]
cmp dword [ebp - 0x14], 0
setg al
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x1f8], 1
setne dl
and al, dl
je 0x4c6fc9
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x22c]
call fcn.0041ee30
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x1fc], 0
jle 0x4c6fe3
mov eax, dword [ebp - 4]
call fcn.004054ec
push eax
call sub.kernel32.dll_DeleteFileA
mov edi, dword [ebp - 0x20]
mov eax, dword [edi + 0x48]
call fcn.0040b494
mov eax, dword [edi + 0x1c]
call fcn.0040b494
mov eax, dword [edi + 0x70]
test eax, eax
je 0x4c7002
call fcn.0040b494
mov ebx, dword [edi + 0x44]
dec ebx
cmp ebx, 0
jl 0x4c7022
mov esi, dword [edi + 0x4c]
mov eax, ebx
shl eax, 5
add esi, eax
mov eax, dword [esi]
call fcn.0040b494
dec ebx
cmp ebx, 0xffffffff
jne 0x4c700b
mov eax, dword [edi + 0x4c]
call fcn.00402dac
mov eax, dword [ebp - 0x20]
call fcn.00402dac
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x1cc], 0
sete al
cmp dword [ebp - 0x14], 2
setl dl
mov ecx, dword [ebp - 0x10]
and dl, byte [ecx + 0xe9]
and al, dl
mov edx, dword [ebp - 0x10]
cmp word [edx + 0x8a], 0
setne dl
xor dl, 1
and al, dl
je 0x4c7072
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x1d0], edx
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c70db
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c7117
lea eax, [ebp - 0x4c]
mov edx, 4
call fcn.0040504c
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.0040504c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040504c
ret