Function at 0x4fb360
Capabilities:
Delete file

Disassembly:
push ebx
mov ebx, dword [esp + 8]
push esi
mov esi, ecx
lea ecx, [esi + 0x284]
cmp ebx, 1
jne 0x48243d
mov eax, dword [esp + 0x10]
imul eax, eax, 0x3e8
add eax, dword [0x6b50c4]
push edi
mov dword [esi + 0x238], eax
call fcn.00445580
push 0x58b070
lea ecx, [esi + 0x284]
call fcn.004455b0
pop edi
push ebx
mov ecx, esi
call fcn.004274c0
pop esi
pop ebx
ret 8
call fcn.00445580
push 0x58b080
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ebx
mov ecx, esi
call fcn.004274c0
pop esi
pop ebx
ret 8
mov eax, dword [esp + 8]
sub esp, 0x8c
push esi
push 0xb
mov esi, ecx
push eax
lea ecx, [esp + 0xc]
push ecx
call fcn.005123c0
mov eax, dword [esp + 0xa0]
lea edx, [esp + 0x10]
push edx
push eax
lea ecx, [esp + 0x24]
push 0x58b140
push ecx
call fcn.00561680
mov ecx, dword [esi + 0x220]
mov edx, dword [ecx]
mov edx, dword [edx + 0x6c]
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 0x808080
lea eax, [esp + 0x20]
push eax
call edx
pop esi
add esp, 0x8c
ret 8
movzx eax, byte [esp + 4]
dec eax
sub esp, 0x140
cmp eax, 0xf
ja case.default.0x4fb377
push esi
push edi
jmp dword [eax*4 + 0x4fb710]
push 0x6a9
jmp 0x4fb480
mov eax, dword [esp + 0x150]
mov eax, dword [eax + 9]
dec eax
cmp eax, 5
ja case.default.0x4fb398
jmp dword [eax*4 + 0x4fb750]
push 0x6aa
jmp 0x4fb480
push 0x6ab
jmp 0x4fb480
push 0x6ac
jmp 0x4fb480
push 0x6ad
jmp 0x4fb480
push 0x6ae
jmp 0x4fb480
push 0x6af
jmp 0x4fb480
push 0x6b0
jmp 0x4fb480
mov ecx, dword [esp + 0x150]
mov edx, dword [ecx + 9]
push edx
push 0x6b1
mov ecx, 0x6b6198
call fcn.004c4980
push eax
push 0x1d
push 0x6b6198
call fcn.004c5ad0
mov ecx, dword [0x6a6538]
add esp, 0x10
test ecx, ecx
je case.0x4fb377.3
call fcn.00482520
pop edi
pop esi
add esp, 0x140
ret 8
push 0x6b2
jmp 0x4fb480
push 0x6b3
jmp 0x4fb443
push 0x6b4
jmp 0x4fb443
push 0x6b5
mov ecx, 0x6b6198
call fcn.004c4980
push eax
push 0x1d
push 0x6b6198
call fcn.004c5ad0
mov ecx, dword [0x6a6538]
add esp, 0xc
test ecx, ecx
je case.0x4fb377.3
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 0
call edx
pop edi
pop esi
add esp, 0x140
ret 8
push 0x6b6
mov ecx, 0x6b6198
call fcn.004c4980
push eax
push 0x1d
push 0x6b6198
call fcn.004c5ad0
add esp, 0xc
pop edi
pop esi
add esp, 0x140
ret 8
push ebx
push ebp
push 0xff
lea eax, [esp + 0x55]
push 0
push eax
mov byte [esp + 0x5c], 0
call fcn.00561170
mov ecx, dword [esp + 0x164]
mov ecx, dword [ecx + 9]
mov eax, 0x88888889
mul ecx
shr edx, 5
mov eax, 0x88888889
mul edx
shr edx, 5
mov eax, 0x10624dd3
mul edx
mov esi, edx
shr esi, 6
mov edx, esi
imul edx, edx, 0xffc91180
add ecx, edx
mov eax, 0x88888889
mul ecx
shr edx, 5
mov eax, 0x10624dd3
mul edx
mov ebx, edx
shr ebx, 6
mov eax, ebx
imul eax, eax, 0xea60
sub ecx, eax
mov eax, 0x10624dd3
mul ecx
mov ebp, edx
add esp, 0xc
shr ebp, 6
test esi, esi
je 0x4fb568
push esi
lea ecx, [esp + 0x14]
push 0x591cec
push ecx
call fcn.00561680
lea eax, [esp + 0x1c]
add esp, 0xc
mov edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4fb540
lea edi, [esp + 0x50]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4fb550
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ebx, ebx
je 0x4fb5ab
push ebx
lea edx, [esp + 0x14]
push 0x591cf4
push edx
call fcn.00561680
lea eax, [esp + 0x1c]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4fb585
lea edi, [esp + 0x50]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4fb593
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ebp
lea eax, [esp + 0x14]
push 0x591cfc
push eax
call fcn.00561680
add esp, 0xc
lea eax, [esp + 0x10]
pop ebp
mov edx, eax
pop ebx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4fb5c6
lea edi, [esp + 0x48]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4fb5d4
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x48]
push ecx
push 0x6b7
mov ecx, 0x6b6198
call fcn.004c4980
push eax
push 0x1d
push 0x6b6198
call fcn.004c5ad0
add esp, 0x10
pop edi
pop esi
add esp, 0x140
ret 8
push 0x6b8
mov ecx, 0x6b6198
call fcn.004c4980
push eax
push 0x1d
push 0x6b6198
call fcn.004c5ad0
mov ecx, dword [0x6a6534]
add esp, 0xc
test ecx, ecx
je case.0x4fb377.3
mov eax, dword [esp + 0x150]
pop edi
lea edx, [eax + 0x1a]
pop esi
add esp, 0x140
mov dword [esp + 8], edx
add eax, 9
mov dword [esp + 4], eax
jmp 0x482a30
cmp dword [0x6a6534], 0
mov eax, dword [esp + 0x150]
mov edi, dword [eax + 9]
je case.0x4fb377.3
test edi, edi
jle case.0x4fb377.3
lea esi, [eax + 0xd]
lea esp, [esp]
mov ecx, dword [0x6a6534]
lea eax, [esi + 0x11]
push eax
push esi
call 0x482a30
add esi, 0x25
dec edi
jne 0x4fb690
pop edi
pop esi
add esp, 0x140
ret 8
mov eax, dword [0x6a6538]
test eax, eax
je case.0x4fb377.3
push ecx
mov ecx, eax
call fcn.00482810
mov esi, dword [esp + 0x150]
lea ecx, [esi + 0xd]
push ecx
mov ecx, dword [0x6a6538]
call fcn.00482550
mov ecx, dword [0x6a6538]
push 0x591cfa
call fcn.004824e0
mov edx, dword [esi + 9]
pop edi
pop esi
add esp, 0x140
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov ecx, dword [0x6a6538]
jmp 0x4823f0