Function at 0x4cb168
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4cb170
push ebx
push esi
push edi
mov ebx, edx
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x4cb53c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov ecx, 0x4cb558
mov edx, ebx
call fcn.00405f9c
lea eax, [ebp - 8]
mov ecx, 0x4cb580
mov edx, ebx
call fcn.00405f9c
xor eax, eax
push ebp
push 0x4cb1f0
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x47a0a4]
call fcn.0047a168
mov ebx, eax
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x4cb5a0
mov edx, 0x4cb5c4
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 4]
mov eax, ebx
call fcn.00403dac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cb1fa
xor eax, eax
push ebp
push 0x4cb4d2
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x476078]
call fcn.004763f4
mov esi, eax
mov dl, 1
mov eax, dword [0x483968]
call fcn.00403d7c
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [esi + 0xe4], eax
mov dword [esi + 0xe0], 0x483d34
mov eax, dword [ebp - 0x14]
mov dword [esi + 0xdc], eax
mov dword [esi + 0xd8], 0x483a68
lea edx, [ebp - 0x1c]
xor eax, eax
call fcn.00403408
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.0040cd8c
mov edx, dword [ebp - 0x18]
lea eax, [esi + 0x88]
call fcn.00405ac8
lea eax, [esi + 0x8c]
mov edx, 0x4cb5e0
call fcn.00405ac8
mov dl, 1
mov eax, dword [0x479310]
call fcn.004793d4
mov ebx, eax
mov dl, 1
mov eax, dword [0x421958]
call fcn.00403d7c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
call fcn.0040c944
test al, al
je 0x4cb2b5
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.004764c8
jmp 0x4cb2bf
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.00478a94
mov edx, 0x4cb60c
mov eax, esi
call fcn.00478b64
inc eax
jle 0x4cb2dd
mov ecx, 0x4cb60c
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.00477544
push 0
push 0
mov eax, dword [ebp - 0x10]
call fcn.00426e88
mov edx, dword [ebp - 0x10]
mov eax, ebx
call fcn.00479cf4
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0xc]
add edx, 0x864
mov ecx, 0x33
call fcn.00405cc8
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x4cb628
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 4]
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0xc]
add edx, 0x8ca
mov ecx, pe_nt_image_headers32
call fcn.00405cc8
mov eax, dword [ebp - 0x24]
push eax
mov ecx, 0x4cb658
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 4]
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0xc]
add edx, 0xaca
mov ecx, 0x15
call fcn.00405cc8
mov eax, dword [ebp - 0x28]
push eax
mov ecx, 0x4cb67c
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0xaf4], 1
sbb eax, eax
inc eax
push eax
mov ecx, 0x4cb6a0
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x14]
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0xc]
add edx, 0xb5e
mov ecx, 6
call fcn.00405cc8
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, 0x4cb6bc
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 4]
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0xc]
add edx, 0xaf8
mov ecx, 0x33
call fcn.00405cc8
mov eax, dword [ebp - 0x30]
push eax
mov ecx, 0x4cb6d4
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 4]
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0xc]
add edx, 0xb70
mov ecx, 0x33
call fcn.00405cc8
mov eax, dword [ebp - 0x34]
push eax
mov ecx, 0x4cb6f0
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0xb6c], 1
sbb eax, eax
inc eax
push eax
mov ecx, 0x4cb718
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x14]
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0xc]
add edx, 0xbd6
mov ecx, 0x33
call fcn.00405cc8
mov eax, dword [ebp - 0x38]
push eax
mov ecx, 0x4cb738
mov edx, 0x4cb640
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x10]
call fcn.004275c0
mov edx, dword [ebp - 0x10]
mov eax, ebx
call fcn.00479e18
mov edx, 0x4cb60c
mov eax, esi
call fcn.00478b64
inc eax
jne 0x4cb492
push 1
mov edx, 0x4cb60c
mov ecx, dword [ebp - 0x10]
mov eax, esi
call fcn.00477ac8
jmp 0x4cb4a3
push 1
mov edx, 0x4cb60c
mov ecx, dword [ebp - 0x10]
mov eax, esi
call fcn.00478278
mov eax, esi
call fcn.00476d3c
mov eax, ebx
call fcn.00403dac
mov eax, dword [ebp - 0x10]
call fcn.00403dac
mov eax, esi
call fcn.00403dac
mov eax, dword [ebp - 0x14]
call fcn.00403dac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cb4dc
mov eax, dword [ebp - 8]
call fcn.0040c944
test al, al
je 0x4cb4f4
mov eax, dword [ebp - 4]
call fcn.0040c944
test al, al
jne 0x4cb4f8
xor ebx, ebx
jmp 0x4cb4fa
mov bl, 1
mov eax, dword [ebp - 8]
call fcn.0040c944
test al, al
je 0x4cb514
mov eax, dword [ebp - 8]
call fcn.00405b54
push eax
call sub.kernel32.dll_DeleteFileW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4cb543
lea eax, [ebp - 0x38]
mov edx, 9
call fcn.00405ac0
lea eax, [ebp - 8]
mov edx, 2
call fcn.00405ac0
ret