Function at 0x46d1a8
Capabilities:
Delete file

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffe0
mov byte [esp], dl
mov ebx, eax
mov byte [esp + 1], 0
cmp byte [ebx + 0x557], 0
jne 0x46d4cf
mov eax, ebx
call fcn.00464bb4
test al, al
je 0x46d4cf
lea eax, [ebx + 0xc]
mov dl, 1
call fcn.004246b0
test al, al
je 0x46d4cf
mov eax, dword [0x48d3a0]
cmp byte [eax], 0
jne 0x46d231
cmp byte [esp], 0
je 0x46d215
push 0
push 0
mov ax, word [ebx + 0x534]
xor ecx, ecx
mov dl, 3
call fcn.0044f244
test al, al
je 0x46d4cf
jmp 0x46d231
push 0
push 0
mov ax, word [ebx + 0x534]
xor ecx, ecx
mov dl, 7
call fcn.0044f244
test al, al
je 0x46d4cf
fild qword [ebx + 0x494]
fadd dword [0x46d4dc]
fild qword [ebx + 0x18]
fcompp
fnstsw ax
sahf
seta al
test al, al
je 0x46d3b0
fild qword [ebx + 0x494]
fadd dword [0x46d4dc]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, ebx
call fcn.0046cdc0
test al, al
jne 0x46d27a
mov eax, ebx
call fcn.00481d20
jmp 0x46d4cf
mov ax, 0xf9
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48d948]
call fcn.00405c48
mov eax, dword [0x48d948]
mov dl, 2
call fcn.0040e810
mov eax, dword [0x48d7e4]
mov eax, dword [eax]
mov ecx, 0x8000000
mov edx, 0x80000000
call fcn.0040eba4
mov dword [esp + 4], eax
xor eax, eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
lea eax, [ebx + 0xc]
call fcn.00428760
mov eax, dword [ebx + 0x48c]
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x490]
mov dword [esp + 0x14], eax
mov eax, 0xe000
call fcn.004024e8
mov edi, eax
push 0xe000
push edi
mov eax, dword [esp + 0xc]
push eax
call sub.kernel32.dll__hread
mov esi, eax
mov dword [esp + 0x18], esi
xor eax, eax
mov dword [esp + 0x1c], eax
fild qword [esp + 0x18]
fild qword [esp + 8]
faddp st(1)
fistp qword [esp + 8]
wait
push esi
lea edx, [esp + 0x14]
lea eax, [ebx + 0xc]
mov ecx, edi
call fcn.00426720
mov ebp, eax
mov eax, dword [0x48d1e8]
inc word [eax]
mov eax, dword [0x48d1e8]
movzx eax, word [eax]
mov ecx, 0x32
xor edx, edx
div ecx
test edx, edx
jne 0x46d345
call fcn.0040f494
fild qword [ebx + 0x18]
fild qword [ebx + 0x494]
fsubp st(1)
fild qword [esp + 8]
fmul dword [0x46d4e0]
fdivrp st(1)
call fcn.004028a0
mov edx, dword [0x48d1d8]
mov byte [edx], al
mov eax, dword [0x48d1d8]
mov al, byte [eax]
mov edx, dword [0x48d668]
cmp al, byte [edx]
je 0x46d37f
call fcn.00414c64
test esi, esi
je 0x46d38b
cmp esi, ebp
je 0x46d2e7
mov eax, edi
call fcn.00402508
mov eax, dword [esp + 4]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [0x48d7e4]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_DeleteFileA_1
call fcn.0040eb04
jmp 0x46d3d4
lea eax, [ebx + 0xc]
call fcn.00428760
test al, al
je 0x46d4cf
mov eax, dword [ebx + 0x48c]
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x490]
mov dword [esp + 0x14], eax
push dword [ebx + 0x490]
push dword [ebx + 0x48c]
push dword [ebx + 0x1c]
push dword [ebx + 0x18]
lea eax, [ebx + 0xc]
call fcn.00423bdc
push dword [esp + 0x14]
push dword [esp + 0x14]
lea eax, [ebx + 0xc]
call fcn.00424510
lea eax, [ebx + 0xc]
call fcn.00428820
xor eax, eax
mov dword [0x49bed4], eax
mov dword [0x49bed8], eax
mov dword [0x48d1a8], 0xffffffff
mov dword [0x48d1ac], 0xffffffff
mov eax, ebx
call fcn.0047e098
fadd dword [0x46d4dc]
fild qword [ebx + 0x18]
fcompp
fnstsw ax
sahf
jae 0x46d458
fild qword [ebx + 0x18]
fsub dword [0x46d4dc]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, ebx
xor edx, edx
call fcn.0047e0e8
mov eax, ebx
call fcn.004632ec
mov byte [ebx + 0x8f], 0
xor eax, eax
mov dword [ebx + 0x48c], eax
mov dword [ebx + 0x490], eax
mov dword [ebx + 0x494], 0xffffffff
mov dword [ebx + 0x498], 0xffffffff
mov eax, ebx
call fcn.0047d29c
fild qword [ebx + 0x18]
fsub dword [0x46d4dc]
fild qword [ebx + 0x188]
fcompp
fnstsw ax
sahf
jbe 0x46d4be
fild qword [ebx + 0x18]
fsub dword [0x46d4dc]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, ebx
xor edx, edx
call fcn.0047e0e8
mov eax, ebx
call fcn.0047d4c8
mov byte [esp + 1], 1
call fcn.00444994
mov al, byte [esp + 1]
add esp, 0x20
pop ebp
pop edi
pop esi
pop ebx
ret