Function at 0x407b40
Capabilities:
Delete file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4abbc1
push eax
mov dword fs:[0], esp
sub esp, 0x4ac
push ebx
push ebp
push esi
push edi
mov esi, ecx
call fcn.0048a6c0
push str.config_accounts.dta
call fcn.00485230
add esp, 4
test al, al
je 0x407b94
push str.config_accounts.dta
call dword [sym.imp.kernel32.dll_DeleteFileA]
test eax, eax
jne 0x407b94
mov ecx, esi
call fcn.0048a6d0
xor al, al
jmp 0x407fe2
lea ecx, [esp + 0x98]
call fcn.004853d0
xor ebx, ebx
lea ecx, [esp + 0x98]
push ebx
push 1
push 1
push str.config_accounts.dta
mov dword [esp + 0x4d4], ebx
call fcn.00485470
test al, al
jne 0x407be8
push 0xc8
call dword [sym.imp.kernel32.dll_Sleep]
push ebx
push 1
push 1
push str.config_accounts.dta
lea ecx, [esp + 0xa8]
call fcn.00485470
test al, al
je 0x407c09
push str.098371287283_2
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
jne 0x407c2e
lea ecx, [esp + 0x98]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x98]
mov dword [esp + 0x4c4], 0xffffffff
call fcn.00485420
xor al, al
jmp 0x407fe2
xor ebp, ebp
mov eax, dword [esi + 0x20]
cmp eax, ebx
je 0x407fad
mov ecx, dword [esi + 0x24]
sub ecx, eax
sar ecx, 2
cmp ebp, ecx
jae 0x407fad
push 0x4c8da0
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebp*4]
call fcn.00466520
push eax
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebp*4]
call fcn.004067f0
mov ecx, eax
call fcn.0044bcd0
push eax
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
xor edi, edi
call fcn.0047b11b
cdq
mov ecx, 0xff
idiv ecx
inc edi
cmp edi, 0x64
mov byte [esp + edi + 0x33], dl
jb 0x407ca5
mov eax, dword [esi + 0x20]
push 0x64
mov ecx, dword [eax + ebp*4]
call fcn.004841d0
lea edx, [esp + 0x38]
push eax
push edx
call fcn.00486310
add esp, 0xc
xor eax, eax
mov cl, byte [esp + eax + 0x34]
inc eax
not cl
mov byte [esp + eax + 0x33], cl
cmp eax, 0x64
jb 0x407cd9
mov dl, byte [esp + 0x13]
mov dword [esp + 0x18], ebx
mov byte [esp + 0x14], dl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
lea eax, [esp + 0x14]
lea ecx, [esp + 0x34]
push eax
push 0x64
push ecx
mov byte [esp + 0x4d0], 1
call fcn.004188e0
lea edx, [esp + 0x20]
lea eax, [esp + 0x30]
push edx
push 0x4c8ddc
push eax
call fcn.00411070
add esp, 0x18
mov eax, dword [eax + 4]
mov byte [esp + 0x4c4], 2
cmp eax, ebx
jne 0x407d41
mov eax, 0x4b49e4
push eax
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
mov eax, dword [esp + 0x28]
mov byte [esp + 0x4c4], 1
sete bl
xor edi, edi
cmp eax, edi
je 0x407d82
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x407d79
cmp al, 0xff
je 0x407d79
dec al
mov byte [ecx], al
jmp 0x407d82
push ecx
call fcn.004a2a3d
add esp, 4
test bl, bl
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
jne 0x407f4e
mov eax, dword [esp + 0x18]
mov byte [esp + 0x4c4], bl
cmp eax, edi
je 0x407dc2
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x407db9
cmp al, 0xff
je 0x407db9
dec al
mov byte [ecx], al
jmp 0x407dc2
push ecx
call fcn.004a2a3d
add esp, 4
mov eax, dword [esi + 0x20]
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov ecx, dword [eax + ebp*4]
call fcn.00406840
push eax
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebp*4]
call fcn.00406b30
test al, al
je 0x407e18
push 0x4c8d9c
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
jmp 0x407e31
push 0x4c8dd8
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebp*4]
call fcn.00406b40
mov ecx, eax
call fcn.0044bcd0
push eax
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebp*4]
call fcn.00406ce0
test al, al
je 0x407e82
push 0x4c8d9c
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
jmp 0x407e9b
push 0x4c8dd8
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
push 0x4c8dd8
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
push 0x4c8dd8
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
push 0x4c8dd8
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebp*4]
call fcn.00406b50
test eax, eax
jle 0x407f2d
mov eax, dword [esi + 0x20]
push edi
mov ecx, dword [eax + ebp*4]
call fcn.00406b70
mov ecx, eax
call fcn.0044bcd0
push eax
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
mov eax, dword [esi + 0x20]
inc edi
mov ecx, dword [eax + ebp*4]
call fcn.00406b50
cmp edi, eax
jl 0x407ef5
push 0x4c8d98
lea ecx, [esp + 0x9c]
call fcn.004856d0
test al, al
je 0x407bfd
inc ebp
xor ebx, ebx
jmp 0x407c30
lea ecx, [esp + 0x98]
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x407f86
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x407f7d
cmp al, 0xff
je 0x407f7d
dec al
mov byte [ecx], al
jmp 0x407f86
push ecx
call fcn.004a2a3d
add esp, 4
lea ecx, [esp + 0x98]
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x4c4], 0xffffffff
call fcn.00485420
xor al, al
jmp 0x407fe2
call dword [sym.imp.kernel32.dll_GetTickCount]
lea ecx, [esp + 0x98]
mov dword [esi + 0x4c], eax
call fcn.004854c0
mov ecx, esi
call fcn.0048a6d0
lea ecx, [esp + 0x98]
mov dword [esp + 0x4c4], 0xffffffff
call fcn.00485420
mov al, 1
mov ecx, dword [esp + 0x4bc]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x4b8
ret