Function at 0x4bca9c
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x4bcaa4
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x4bd03e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3a8]
xor edx, edx
call fcn.00445448
mov edx, 0x136
mov eax, dword [0x4ce77c]
call fcn.00444c54
mov eax, dword [0x4ce780]
call fcn.00409ec4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x394]
xor edx, edx
call fcn.00445448
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov edx, 0xa
call fcn.004687fc
mov eax, dword [0x4c5f58]
mov eax, dword [eax]
call fcn.00463260
lea eax, [ebp - 4]
mov edx, 0x4bd054
call fcn.004051a0
lea eax, [ebp - 4]
call fcn.004055f8
push eax
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x4bcb6b
push 0
push 0
push 0xbd1
push eax
call sub.user32.dll_SendMessageA
mov ebx, 0x1e
push 0x64
call sub.kernel32.dll_Sleep_2
lea eax, [ebp - 4]
call fcn.004055f8
push eax
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x4bcb6b
dec ebx
jne 0x4bcb4d
lea eax, [ebp - 4]
mov edx, 0x4bd078
call fcn.004051a0
lea eax, [ebp - 4]
call fcn.004055f8
push eax
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x4bcbbe
push 0
push 0
push 0xbd1
push eax
call sub.user32.dll_SendMessageA
mov ebx, 0x1e
push 0x64
call sub.kernel32.dll_Sleep_2
lea eax, [ebp - 4]
call fcn.004055f8
push eax
push 0
call sub.user32.dll_FindWindowA
test eax, eax
je 0x4bcbbe
dec ebx
jne 0x4bcba0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov edx, 0x14
call fcn.004687fc
mov eax, dword [0x4c5f58]
mov eax, dword [eax]
call fcn.00463260
mov eax, 0x4bd09c
call fcn.004bb304
mov ebx, 0x3c
lea eax, [ebp - 0xc]
mov ecx, 0x4bd0ac
mov edx, dword [0x4ce780]
call fcn.00405420
mov eax, dword [ebp - 0xc]
call fcn.00409e7c
test al, al
je 0x4bcc42
push 0x3e8
call sub.kernel32.dll_Sleep_2
lea eax, [ebp - 0x10]
mov ecx, 0x4bd0ac
mov edx, dword [0x4ce780]
call fcn.00405420
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x14]
call fcn.00405598
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
dec ebx
jne 0x4bcbec
xor eax, eax
push ebp
push 0x4bccdb
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4bd0bc
push 0xa
mov ecx, dword [0x4c97f8]
mov dl, 1
mov eax, dword [0x418240]
call fcn.0041d2d4
mov ebx, eax
push 0xffff
lea eax, [ebp - 0x18]
mov ecx, 0x4bd0ac
mov edx, dword [0x4ce780]
call fcn.00405420
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x418038]
call fcn.0041cdac
mov esi, eax
push 0
push 0
mov edx, ebx
mov eax, esi
call fcn.0041cb94
mov eax, esi
call fcn.004041ec
mov eax, ebx
call fcn.004041ec
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov edx, 0x1e
call fcn.004687fc
mov eax, dword [0x4c5f58]
mov eax, dword [eax]
call fcn.00463260
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bcce5
mov ebx, 0x3c
lea eax, [ebp - 0x1c]
mov ecx, 0x4bd0c8
mov edx, dword [0x4ce780]
call fcn.00405420
mov eax, dword [ebp - 0x1c]
call fcn.00409e7c
test al, al
je 0x4bcd40
push 0x3e8
call sub.kernel32.dll_Sleep_2
lea eax, [ebp - 0x20]
mov ecx, 0x4bd0c8
mov edx, dword [0x4ce780]
call fcn.00405420
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x14]
call fcn.00405598
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
dec ebx
jne 0x4bccea
xor eax, eax
push ebp
push 0x4bcdd9
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4bd0e0
push 0xa
mov ecx, dword [0x4c97f8]
mov dl, 1
mov eax, dword [0x418240]
call fcn.0041d2d4
mov ebx, eax
push 0xffff
lea eax, [ebp - 0x24]
mov ecx, 0x4bd0c8
mov edx, dword [0x4ce780]
call fcn.00405420
mov ecx, dword [ebp - 0x24]
mov dl, 1
mov eax, dword [0x418038]
call fcn.0041cdac
mov esi, eax
push 0
push 0
mov edx, ebx
mov eax, esi
call fcn.0041cb94
mov eax, esi
call fcn.004041ec
mov eax, ebx
call fcn.004041ec
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov edx, 0x37
call fcn.004687fc
mov eax, dword [0x4c5f58]
mov eax, dword [eax]
call fcn.00463260
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bcde3
lea edx, [ebp - 0x28]
mov ax, 7
call fcn.004bba90
lea eax, [ebp - 0x28]
mov edx, 0x4bd0f4
call fcn.004053d4
mov eax, dword [ebp - 0x28]
call fcn.00409e7c
test al, al
je 0x4bce3b
lea edx, [ebp - 0x2c]
mov ax, 7
call fcn.004bba90
lea eax, [ebp - 0x2c]
mov edx, 0x4bd0f4
call fcn.004053d4
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x14]
call fcn.00405598
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
lea edx, [ebp - 0x30]
mov ax, 2
call fcn.004bba90
lea eax, [ebp - 0x30]
mov edx, 0x4bd118
call fcn.004053d4
mov eax, dword [ebp - 0x30]
call fcn.004bc9f8
lea edx, [ebp - 0x34]
mov ax, 2
call fcn.004bba90
lea eax, [ebp - 0x34]
mov edx, 0x4bd138
call fcn.004053d4
mov eax, dword [ebp - 0x34]
call fcn.004bc9f8
mov eax, dword [0x4ce78c]
call fcn.00409ec4
push 0
lea eax, [ebp - 0x38]
mov ecx, 0x4bd158
mov edx, dword [0x4ce788]
call fcn.00405420
mov eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
mov ecx, 0x4bd0ac
mov edx, dword [0x4ce780]
call fcn.00405420
mov eax, dword [ebp - 0x3c]
mov ecx, 0x4bd17c
pop edx
call fcn.004bc618
push 0
lea eax, [ebp - 0x40]
mov ecx, 0x4bd158
mov edx, dword [0x4ce78c]
call fcn.00405420
mov eax, dword [ebp - 0x40]
push eax
lea eax, [ebp - 0x44]
mov ecx, 0x4bd0ac
mov edx, dword [0x4ce780]
call fcn.00405420
mov eax, dword [ebp - 0x44]
mov ecx, 0x4bd17c
pop edx
call fcn.004bc618
push 0
lea eax, [ebp - 0x48]
mov ecx, 0x4bd1a0
mov edx, dword [0x4ce78c]
call fcn.00405420
mov eax, dword [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
mov ecx, 0x4bd0c8
mov edx, dword [0x4ce780]
call fcn.00405420
mov eax, dword [ebp - 0x4c]
mov ecx, 0x4bd1c0
pop edx
call fcn.004bc618
lea edx, [ebp - 0x50]
mov eax, dword [0x4ce78c]
call fcn.0040e89c
lea eax, [ebp - 0x50]
mov edx, 0x4bd1f0
call fcn.004053d4
mov eax, dword [ebp - 0x50]
mov edx, 0x4bd20c
call fcn.004bc400
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov edx, 0x5a
call fcn.004687fc
mov eax, dword [0x4c5f58]
mov eax, dword [eax]
call fcn.00463260
lea edx, [ebp - 0x54]
xor eax, eax
call fcn.004032f4
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 8]
call fcn.004bc2e4
mov ebx, eax
mov eax, dword [0x4c6284]
mov eax, dword [eax]
call fcn.00460910
push eax
mov eax, dword [0x4c6284]
mov eax, dword [eax]
call fcn.0046091c
mov ecx, eax
mov edx, ebx
mov eax, dword [ebp - 8]
call fcn.004bc0cc
mov edx, dword [0x4ce780]
mov eax, dword [ebp - 8]
call fcn.004bc754
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x384]
mov edx, 0x4bd274
call fcn.00445558
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov edx, 0x64
call fcn.004687fc
mov eax, dword [0x4c5f58]
mov eax, dword [eax]
call fcn.00463260
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x370]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x360]
call fcn.004b3ddc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bd045
lea eax, [ebp - 0x54]
mov edx, 0x10
call fcn.0040512c
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0040512c
lea eax, [ebp - 4]
call fcn.00405108
ret