Function at 0x463b3f
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x170
push ebx
mov ebx, dword [ebp + 0x18]
push esi
push edi
push dword [ebp + 0x1c]
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00463904
add esp, 0x10
test eax, eax
je 0x463bb6
cmp byte [ebx], 0
je 0x463bb6
cmp dword [ebp + 0x14], 0
je 0x463b7f
push ebx
call fcn.00463da4
test eax, eax
pop ecx
je 0x463bb6
jmp 0x463d9c
lea eax, [ebp - 0x170]
push eax
push 0x104
call dword [0x402078]
test eax, eax
jbe 0x463bb6
mov edi, dword [0x40209c]
push ebx
call edi
mov esi, eax
lea eax, [ebp - 0x170]
neg esi
sbb esi, esi
push eax
inc esi
call edi
test esi, esi
je 0x463d9c
mov eax, dword [ebp + 0x1c]
dec eax
push eax
push ebx
call dword [sym.imp.USER32.dll_wsprintfA]
test eax, eax
jbe 0x463bcc
and byte [ebx + 2], 0
jmp 0x463bd8
push 0x4030c0
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
and dword [ebp - 4], 0
lea eax, [ebp - 0x68]
push 0x64
push eax
mov ebx, 0x4021f8
push 0x4030ac
mov edi, 0x80000002
push ebx
push edi
call fcn.00463997
mov esi, dword [0x402090]
add esp, 0x14
test eax, eax
je 0x463c4a
push 0xd
lea eax, [ebp - 0x68]
push 0x4021e8
push eax
call fcn.0046383e
add esp, 0xc
test eax, eax
jne 0x463c4a
lea eax, [ebp - 0x5b]
push 0x25
push eax
call fcn.0046368a
pop ecx
test eax, eax
pop ecx
jne 0x463c4a
lea eax, [ebp - 0x5b]
push eax
call esi
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffffe
cmp eax, ecx
jge 0x463c4a
lea eax, [ebp - 0x5b]
push eax
mov eax, dword [ebp + 0x18]
add eax, 2
push eax
jmp 0x463c8c
lea eax, [ebp - 0x68]
push 0x64
push eax
push 0x40309c
push ebx
push edi
call fcn.00463997
add esp, 0x14
test eax, eax
je 0x463c99
cmp byte [ebp - 0x68], 0
je 0x463c99
lea eax, [ebp - 0x68]
push 0x25
push eax
call fcn.0046368a
pop ecx
test eax, eax
pop ecx
jne 0x463c99
lea eax, [ebp - 0x68]
push eax
call esi
cmp eax, dword [ebp + 0x1c]
jge 0x463c99
lea eax, [ebp - 0x68]
push eax
push dword [ebp + 0x18]
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 4], 1
xor edi, edi
cmp dword [ebp + 0x10], edi
je 0x463ca7
push dword [ebp + 0x10]
call esi
mov edi, eax
push dword [0x403068]
call esi
push dword [0x403064]
mov ebx, eax
call esi
add edi, ebx
mov ebx, dword [ebp - 4]
cmp ebx, 1
lea edi, [eax + edi + 0xa]
jne 0x463ce4
push dword [ebp + 0x18]
call esi
dec eax
test eax, eax
jle 0x463cde
mov ecx, dword [ebp + 0x18]
add ecx, eax
cmp byte [ecx], 0x5c
jne 0x463cde
and byte [ecx], 0
lea edi, [edi + eax + 1]
jmp 0x463cee
push dword [0x403060]
call esi
add edi, eax
cmp edi, dword [ebp + 0x1c]
jg 0x463d85
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, dword [sym.imp.USER32.dll_CharNextA]
cmp ebx, 3
jge 0x463d41
lea ebx, [ebx*4 + 0x403060]
push dword [ebx]
push dword [ebp + 0x18]
call esi
push 0
call edi
push 0
push dword [ebp + 0x18]
call dword [0x402094]
test eax, eax
jne 0x463d36
call dword [0x40206c]
cmp eax, 0xb7
jne 0x463d85
add ebx, 4
cmp ebx, 0x40306c
jl 0x463d0f
cmp dword [ebp + 0x10], 0
je 0x463d4f
push dword [ebp + 0x10]
push dword [ebp + 0x18]
call esi
cmp dword [ebp + 0x14], 0
jne 0x463d89
push 0x403098
push dword [ebp + 0x18]
call esi
push 0
call edi
cmp dword [ebp + 0x10], 0
je 0x463d89
push 0
push dword [ebp + 0x18]
call dword [0x402094]
test eax, eax
jne 0x463d89
call dword [0x40206c]
cmp eax, 0xb7
je 0x463d89
xor eax, eax
jmp 0x463d9f
push 0
push dword [ebp + 0x18]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00463a1c
add esp, 0x10
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret