Function at 0x4166cd
Capabilities:
Delete file

Disassembly:
push 0x14
mov eax, 0x46f7d0
call fcn.00452617
mov ebx, ecx
mov ecx, dword [0x4937e4]
push dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0xc]
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.0041dab7
mov eax, dword [0x493900]
pop ecx
pop ecx
lea edi, [ebp - 0x20]
lea esi, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x4938fc
call fcn.00418245
test al, al
jne 0x416a54
cmp dword [ebp + 8], 0
mov esi, dword [ebp - 0x18]
jne 0x4168ca
test esi, esi
jne 0x41672f
call fcn.0044d9e0
mov edi, dword [ebp - 0x14]
cmp edi, dword [esi + 4]
jne 0x41673c
call fcn.0044d9e0
push dword [edi + 0xc]
call fcn.0041d0b4
test eax, eax
pop ecx
je 0x4168a9
cmp edi, dword [esi + 4]
jne 0x416757
call fcn.0044d9e0
mov dword [edi + 0x3c], 2
cmp edi, dword [esi + 4]
jne 0x416768
call fcn.0044d9e0
push dword [edi + 0xc]
call fcn.0041d79a
test eax, eax
pop ecx
jne 0x4167e0
cmp edi, dword [esi + 4]
jne 0x41677f
call fcn.0044d9e0
xor esi, esi
mov dword [edi + 0x3c], 6
and dword [0x493880], 0
inc esi
mov eax, esi
mov ecx, ebx
mov byte [0x493870], 1
call fcn.00415797
lea ecx, [ebx + 0x20]
mov eax, dword [ecx]
push esi
call dword [eax + 4]
lea eax, [ebp + 0xc]
push str._r_n_r_nQQ
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.004039ab
pop ecx
pop ecx
and dword [ebp - 4], 0
push esi
push dword [ebp + 0xc]
mov edi, ebx
call fcn.004163d8
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
jmp 0x41693b
mov al, byte [0x490bdc]
test al, al
jne 0x41683e
mov eax, dword [0x490be0]
cmp eax, 1
mov byte [0x493878], 1
jne 0x416831
push 0x40041
push 0x481cf0
push 0x481eb0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x416849
mov byte [0x493870], 0x10
and dword [0x493880], 0
mov eax, ebx
call fcn.00415aac
jmp 0x416a54
test eax, eax
jne 0x416849
mov byte [0x493870], 0x11
jmp 0x41681e
cmp al, 1
jne 0x416849
mov byte [0x493878], 0
cmp edi, dword [esi + 4]
jne 0x416853
call fcn.0044d9e0
push dword [edi + 0xc]
call fcn.0041d8f3
test eax, eax
pop ecx
je 0x416943
cmp edi, dword [esi + 4]
jne 0x41686e
call fcn.0044d9e0
push dword [edi + 0xc]
call fcn.0041d884
test eax, eax
pop ecx
je 0x416891
cmp edi, dword [esi + 4]
jne 0x416885
call fcn.0044d9e0
mov dword [edi + 0x3c], 4
jmp 0x416943
cmp edi, dword [esi + 4]
jne 0x41689b
call fcn.0044d9e0
push dword [edi + 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x416943
cmp edi, dword [esi + 4]
jne 0x4168b3
call fcn.0044d9e0
mov dword [edi + 0x3c], 7
and dword [0x493880], 0
mov byte [0x493870], 3
jmp 0x416943
test esi, esi
jne 0x4168d3
call fcn.0044d9e0
mov edi, dword [ebp - 0x14]
cmp edi, dword [esi + 4]
jne 0x4168e0
call fcn.0044d9e0
mov eax, dword [ebp + 8]
mov dword [edi + 0x3c], 7
mov byte [0x493870], 3
mov dword [0x493880], eax
cmp edi, dword [esi + 4]
jne 0x416900
call fcn.0044d9e0
lea eax, [ebp - 0x14]
push eax
call fcn.0041d771
pop ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 4], 1
cmp edi, dword [esi + 4]
jne 0x41691e
call fcn.0044d9e0
mov eax, dword [ebp + 0xc]
push dword [eax]
add edi, 0x40
push 0x481ef8
push edi
call fcn.00414997
add esp, 0xc
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00401980
call fcn.0041dc38
test al, al
je 0x416963
mov ebx, dword [ebx + 0x34]
test ebx, ebx
je 0x416a54
mov eax, ebx
call fcn.004140d0
jmp 0x416a54
call fcn.0041dbbd
test al, al
je 0x4169d9
xor esi, esi
inc esi
cmp dword [0x4937f4], esi
jne 0x416985
mov byte [0x49388c], 1
call fcn.004174ea
jmp 0x4169cd
lea eax, [ebp + 0xc]
push str._r_n_r_nQQ
mov byte [0x49388c], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.004039ab
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 2
push dword [ebp + 0xc]
mov edi, ebx
call fcn.004163d8
mov esi, dword [ebx + 0x34]
call fcn.004142f9
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.00401980
mov dword [ebx + 0xe4], 1
jmp 0x416a54
call fcn.0041dcb3
test al, al
je 0x416a4c
xor esi, esi
inc esi
cmp dword [0x4937f4], esi
jne 0x4169fb
mov byte [0x49388c], 1
call fcn.004174ea
jmp 0x416a43
lea eax, [ebp + 8]
push str._r_n_r_nQQ
mov byte [0x49388c], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.004039ab
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 3
push dword [ebp + 8]
mov edi, ebx
call fcn.004163d8
mov ecx, dword [ebx + 0x34]
call fcn.004141d1
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.00401980
and dword [ebx + 0xe4], 0
jmp 0x416a54
mov ecx, dword [ebx + 4]
call fcn.0041c8bb
xor eax, eax
call fcn.004526ef
ret 8