Function at 0x4d98e0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4d9d21
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 1
xor eax, eax
push ebp
push 0x4d9cef
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp eax, 0xff71
jg 0x4d99bd
je 0x4d9b91
cmp eax, 0xff35
jg 0x4d9980
je 0x4d9a8a
cmp eax, 0xff30
jg 0x4d9969
je 0x4d9b5a
sub eax, 0xbc9
je 0x4d9ca6
sub eax, 0xf340
je 0x4d9cce
jmp case.default.0x4d99d8
sub eax, 0xff32
je 0x4d9a2c
dec eax
je 0x4d9a40
jmp case.default.0x4d99d8
cmp eax, 0xff44
jg 0x4d99a4
je 0x4d9c32
sub eax, 0xff40
je 0x4d9a7d
dec eax
je 0x4d9c19
jmp case.default.0x4d99d8
sub eax, 0xff51
je 0x4d9ae3
sub eax, 0x14
je 0x4d9c84
jmp case.default.0x4d99d8
cmp eax, 0xff77
jg 0x4d99f3
je 0x4d9ab6
add eax, 0xffff008e
cmp eax, 4
ja case.default.0x4d99d8
jmp dword [eax*4 + 0x4d99df]
cmp eax, 0xff81
jg 0x4d9a13
je 0x4d9acd
sub eax, 0xff78
je 0x4d9cb3
dec eax
je 0x4d9a67
jmp case.default.0x4d99d8
sub eax, 0xff85
je 0x4d9ac3
sub eax, 0x7a
je 0x4d9cbd
jmp case.default.0x4d99d8
mov eax, dword [0x515658]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.004f64ec
jmp 0x4d9ce5
mov eax, dword [0x515658]
mov eax, dword [eax]
call fcn.004f690c
jmp 0x4d9ce5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf4]
mov edx, dword [ebp - 0xc]
call fcn.004f14a8
jmp 0x4d9ce5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf4]
mov edx, dword [ebp - 0xc]
call fcn.004f1698
jmp 0x4d9ce5
mov eax, dword [ebp - 4]
call fcn.004dbd10
jmp 0x4d9ce5
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00409fa0
mov edx, dword [0x5153d8]
mov byte [edx], al
jmp 0x4d9ce5
mov eax, dword [0x5152c8]
mov edx, dword [ebp - 0xc]
call fcn.004051b0
jmp 0x4d9ce5
mov eax, dword [ebp - 0xc]
call fcn.004ec5c0
jmp 0x4d9ce5
call fcn.004e2d90
jmp 0x4d9ce5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf0]
mov edx, dword [ebp - 0xc]
call fcn.004effb8
jmp 0x4d9ce5
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x1c]
mov eax, dword [0x51521c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00435c8c
test al, al
jne 0x4d9b24
lea ecx, [ebp - 0x1c]
mov eax, dword [0x515580]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00435c8c
test al, al
jne 0x4d9b24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d9cf9
lea eax, [ebp - 0x14]
mov edx, 0x9e
call fcn.004058b8
lea eax, [ebp - 0x14]
call fcn.00405688
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov ecx, 0x9e
call fcn.00402f20
mov edx, dword [ebp - 0x14]
mov eax, 0xff51
call fcn.004f6fe4
jmp 0x4d9ce5
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00409fa0
mov edx, dword [0x515630]
mov byte [edx], al
mov eax, dword [0x515630]
cmp byte [eax], 0
je 0x4d9b84
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf8]
call fcn.004f7880
mov eax, dword [ebp - 4]
call fcn.004dadd8
jmp 0x4d9ce5
mov edx, dword [0x51552c]
mov edx, dword [edx]
lea eax, [ebp - 0x18]
mov ecx, 0x4d9d3c
call fcn.0040547c
mov eax, dword [ebp - 0x18]
call fcn.00405630
push eax
call sub.kernel32.dll_DeleteFileA
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
call fcn.004860cc
mov eax, dword [0x5152b8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.004e8730
jmp 0x4d9ce5
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x7fffffff
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405690
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0xc]
mov dl, byte [edx]
call fcn.00405344
mov eax, dword [ebp - 0x28]
mov edx, 1
call fcn.00409fa0
mov edx, eax
mov ecx, 1
pop eax
call fcn.004e7b98
jmp 0x4d9ce5
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00409fa0
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.004db2d0
jmp 0x4d9ce5
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00409fa0
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf8]
call fcn.004f8e6c
jmp 0x4d9ce5
lea edx, [ebp - 0x14]
mov eax, dword [0x5152b8]
mov eax, dword [eax]
call fcn.004e8ef4
mov edx, dword [ebp - 0x14]
mov eax, 0xff73
call fcn.004f6fe4
jmp 0x4d9ce5
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf0]
call fcn.004eeafc
jmp 0x4d9ce5
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov eax, dword [0x51521c]
mov eax, dword [eax]
call fcn.00435c8c
test al, al
je 0x4d9ce5
mov eax, dword [ebp - 0x1c]
call fcn.004eca70
jmp 0x4d9ce5
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.004d950c
jmp 0x4d9ce5
mov eax, dword [ebp - 0xc]
call fcn.004d965c
jmp 0x4d9ce5
mov edx, 0x4d9d54
mov eax, 0xffff
call fcn.004f6fe4
jmp 0x4d9ce5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x108]
mov edx, dword [ebp - 0xc]
call fcn.004a2870
jmp 0x4d9ce5
mov byte [ebp - 0xd], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d9cf9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d9d28
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00405180
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00405180
ret