Function at 0x4296d0
Capabilities:
Delete file

Disassembly:
mov ecx, dword [0x61431c]
sub esp, 8
push ebx
push ebp
push esi
mov esi, dword [esp + 0x18]
or ecx, 0x2000
mov dword [0x61431c], ecx
mov eax, dword [esi]
push edi
xor edi, edi
cmp eax, 8
jne 0x429761
mov eax, dword [esi + 0x254]
mov ecx, dword [esi + 0x250]
mov dword [esp + 0x14], eax
mov eax, ecx
and eax, 0x10000000
xor edx, edx
or eax, edx
je 0x429761
and ecx, 0x20000000
xor eax, eax
or ecx, eax
je 0x429761
xor ecx, ecx
lea eax, [esi + 0xbc8]
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov dword [edx + 0x14], ecx
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x20], ecx
mov dword [edx + 0x24], ecx
mov ebx, dword [eax]
push edi
push eax
or ebx, 0x3f
push esi
mov dword [eax], ebx
call fcn.004278f0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [esi + 0xbbc], eax
push esi
call fcn.00424790
mov ebp, eax
mov eax, dword [esi + 0x508]
cmp eax, edi
je 0x429779
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x50c]
cmp eax, edi
mov dword [esi + 0x508], edi
je 0x42978f
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp dword [esi + 0x480], edi
mov dword [esi + 0x50c], edi
je 0x42983c
mov eax, dword [esi + 0x244]
mov ecx, dword [esi + 0x240]
mov dword [esp + 0x14], eax
mov eax, ecx
and eax, 1
xor edx, edx
or eax, edx
jne 0x4297c5
and ecx, 2
xor eax, eax
or ecx, eax
je 0x4297d0
mov ecx, dword [esi + 8]
push edi
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esi + 0x240]
and eax, 4
xor ecx, ecx
or eax, ecx
je 0x429817
mov edx, dword [esi + 0xc]
mov eax, dword [esi]
and edx, 0xefffffff
cmp eax, 7
mov dword [esi + 0xc], edx
jne 0x429801
mov eax, dword [esi + 0x480]
mov edx, dword [eax]
push edi
push eax
call dword [edx + 0x4c]
jmp 0x429817
cmp eax, 8
jne 0x429817
mov eax, dword [esi + 0x480]
cmp eax, edi
je 0x429817
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x4c]
mov eax, dword [esi + 0x480]
mov edx, dword [eax]
push edi
push eax
call dword [edx + 0x74]
mov ebp, eax
mov eax, dword [esi + 0x480]
cmp eax, edi
je 0x429836
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esi + 0x480], edi
cmp dword [esi + 0x514], edi
je 0x429856
mov eax, dword [esi + 0x518]
cmp eax, edi
je 0x429856
mov edx, dword [eax]
push edi
push edi
push eax
call dword [edx + 0x24]
mov ecx, dword [esi + 0x51c]
cmp ecx, edi
je 0x42986d
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov dword [esi + 0x51c], edi
mov eax, dword [esi + 0x484]
cmp eax, edi
je 0x42987e
push eax
push esi
call fcn.00424890
mov eax, dword [esi + 0x52c]
cmp eax, edi
je 0x42988f
push eax
push esi
call fcn.00424890
mov eax, dword [esi + 0x4d4]
cmp eax, edi
je 0x42989f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0xc48]
cmp eax, edi
mov dword [esi + 0x4d4], edi
je 0x4298b5
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esi + 0xc4c]
cmp eax, edi
mov dword [esi + 0xc48], edi
je 0x4298cb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x510]
cmp eax, edi
mov dword [esi + 0xc4c], edi
je 0x4298e1
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esi + 0x518]
cmp eax, edi
mov dword [esi + 0x510], edi
je 0x4298f7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x514]
cmp eax, edi
mov dword [esi + 0x518], edi
je 0x42990d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esi + 0x524]
cmp eax, edi
mov dword [esi + 0x514], edi
je 0x429923
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x520]
cmp eax, edi
mov dword [esi + 0x524], edi
je 0x429939
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esi + 0xc54]
cmp eax, edi
mov dword [esi + 0x520], edi
je 0x42994f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0xc50]
cmp eax, edi
mov dword [esi + 0xc54], edi
je 0x429965
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esi + 0x504]
cmp eax, edi
mov dword [esi + 0xc50], edi
je 0x42997b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x4fc]
cmp eax, edi
mov dword [esi + 0x504], edi
je 0x429991
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esi + 0x500]
cmp eax, edi
mov dword [esi + 0x4fc], edi
je 0x4299a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [esi + 0x254]
and ecx, 8
xor eax, eax
or eax, ecx
mov dword [esi + 0x500], edi
jne 0x4299d3
lea ebx, [esi + 0x9b0]
push ebx
call sym.vidcap60.exe__SfDoesFileExist_4
test eax, eax
je 0x4299d3
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esi + 0x250]
mov edx, dword [esi + 0x254]
mov dword [esi + 0x254], edx
and ecx, 0xfffeffff
mov dword [esi + 0x250], ecx
mov eax, ecx
and eax, 0xfdffffff
mov dword [esi + 0x250], eax
mov ebx, dword [esi + 0x250]
mov eax, edx
mov dword [esi + 0x254], eax
mov ecx, edx
mov dword [esi + 0x254], ecx
and ebx, 0xfeffffff
mov dword [esi + 0x250], ebx
mov edx, ebx
and edx, 0xffbfffff
mov dword [esi + 0x250], edx
mov edx, ecx
mov ecx, dword [esi + 0x250]
mov dword [esi + 0x254], edx
mov dword [esi + 0x254], eax
and ecx, 0xffdfffff
mov dword [esi + 0x250], ecx
mov eax, ecx
and eax, 0xfff7ffff
mov dword [esi + 0x250], eax
mov ecx, edx
mov dword [esi + 0x254], ecx
mov edx, eax
mov dword [esi + 0x250], edx
and edx, 0xdfffffff
mov dword [esi + 0x250], edx
mov ebx, ecx
and ebx, 0xfffffffe
mov dword [esi + 0x254], ebx
mov ecx, edx
mov eax, ebx
mov dword [esi + 0x254], eax
and ecx, 0xefffffff
mov dword [esi + 0x250], ecx
mov eax, dword [esi + 0x250]
and eax, 0xbfffffff
mov ecx, ebx
mov dword [esi + 0x250], eax
mov edx, ebx
mov dword [esi + 0x254], ecx
mov dword [esi + 0x254], edx
mov ebx, eax
and ebx, 0x7fffffff
mov eax, edx
mov dword [esi + 0x254], eax
mov dword [esi + 0x250], ebx
mov dword [esi + 0x254], ecx
mov edx, ebx
and edx, 0xfbffffff
mov dword [esi + 0x250], edx
and ecx, 0xfffffffd
mov dword [esi + 0xe64], edi
mov dword [esi + 0xc30], edi
mov dword [esi + 0xc34], edi
mov dword [esi + 0x250], edx
mov dword [esi + 0x254], ecx
mov dword [esi + 0x4d0], 0xffffffff
mov eax, dword [0x61431c]
pop edi
and eax, 0xffffdfff
pop esi
mov dword [0x61431c], eax
mov eax, ebp
pop ebp
pop ebx
add esp, 8
ret 4