Function at 0x46efb0
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53a4bf
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x58c758]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403840
mov dword [ebp - 4], 0
mov dword [ebp - 0xac], str.EntClient360EntHard.exe
mov dword [ebp - 0xa8], str.EntClient360EntHard.exe.dec
mov dword [ebp - 0xa4], str.EntClientComputerZService.exe
mov dword [ebp - 0xa0], str.EntClientComputerZService.exe.dec
mov dword [ebp - 0x9c], str.EntClientComputerZ.set
mov dword [ebp - 0x98], str.EntClientComputerZ.set.dec
mov dword [ebp - 0x94], str.EntClientHWParams.dat
mov dword [ebp - 0x90], str.EntClientHWParams.dat.dec
mov dword [ebp - 0x8c], str.EntClientComputerZ4_x64.dll
mov dword [ebp - 0x88], str.EntClientComputerZ4_x64.dll.dec
mov dword [ebp - 0x84], str.EntClientComputerZ0.dll
mov dword [ebp - 0x80], str.EntClientComputerZ0.dll.dec
mov dword [ebp - 0x7c], str.EntClientComputerZ_HardwareDll.dll
mov dword [ebp - 0x78], str.EntClientComputerZ_HardwareDll.dll.dec
mov dword [ebp - 0x74], str.EntClientComputerZ1.dll
mov dword [ebp - 0x70], str.EntClientComputerZ1.dll.dec
mov dword [ebp - 0x6c], str.EntClientComputerZ2.dll
mov dword [ebp - 0x68], str.EntClientComputerZ2.dll.dec
mov dword [ebp - 0x64], str.EntClientComputerZ4.dll
mov dword [ebp - 0x60], str.EntClientComputerZ4.dll.dec
mov dword [ebp - 0x5c], str.EntClientComputerZ.sys
mov dword [ebp - 0x58], str.EntClientComputerZ.sys.dec
mov dword [ebp - 0x54], str.EntClientComputerZ_x64.sys
mov dword [ebp - 0x50], str.EntClientComputerZ_x64.sys.dec
mov dword [ebp - 0x4c], str.EntClient360Hard360EntHard.exe
mov dword [ebp - 0x48], str.EntClient360HardComputerZService.exe
mov dword [ebp - 0x44], str.EntClient360HardComputerZ.set
mov dword [ebp - 0x40], str.EntClient360HardHWParams.dat
mov dword [ebp - 0x3c], str.EntClient360HardComputerZ4_x64.dll
mov dword [ebp - 0x38], str.EntClient360HardComputerZ0.dll
mov dword [ebp - 0x34], str.EntClient360HardComputerZ_HardwareDll.dll
mov dword [ebp - 0x30], str.EntClient360HardComputerZ1.dll
mov dword [ebp - 0x2c], str.EntClient360HardComputerZ2.dll
mov dword [ebp - 0x28], str.EntClient360HardComputerZ4.dll
mov dword [ebp - 0x24], str.EntClient360HardComputerZ.sys
mov dword [ebp - 0x20], str.EntClient360HardComputerZ_x64.sys
lea ecx, [ebp - 0x10]
call fcn.00403840
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14]
call fcn.00403840
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00403840
mov byte [ebp - 4], 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.0046ae40
test eax, eax
je 0x46f1e7
push str.EntClient360hardComputerZService.exe
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0xbc]
push eax
call fcn.00403700
add esp, 0xc
mov dword [ebp - 0xc8], eax
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0xcc], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xcc]
push edx
lea ecx, [ebp - 0x10]
call fcn.00401970
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xbc]
call fcn.00401eb0
push 1
push 1
lea ecx, [ebp - 0x10]
call fcn.0043e290
push eax
push str.ComputerZService.exe
call fcn.00492e20
add esp, 0x10
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x46f1e7
push 0
mov eax, dword [ebp - 0xb8]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [ebp - 0xb8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xb4], 0
jmp 0x46f202
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 0x24
jge 0x46f2a6
mov eax, dword [ebp - 0xb4]
cmp dword [ebp + eax*4 - 0xac], 0
je 0x46f239
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp + ecx*4 - 0xac]
push edx
call fcn.004b0eb7
add esp, 4
test eax, eax
ja 0x46f23b
jmp 0x46f1f3
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp + eax*4 - 0xac]
push ecx
lea edx, [ebp - 0xc0]
push edx
call fcn.0041acc0
add esp, 8
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xd4]
push ecx
lea ecx, [ebp - 0xb0]
call fcn.00401970
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc0]
call fcn.00401eb0
lea ecx, [ebp - 0xb0]
call fcn.0043e290
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x46f1f3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401eb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14]
call fcn.00401eb0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00401eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.00401eb0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret