Function at 0x401d91
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4741aa
mov eax, dword fs:[0]
push eax
sub esp, 0x330
mov eax, dword [0x490654]
xor eax, esp
mov dword [esp + 0x328], eax
push ebx
push esi
push edi
mov eax, dword [0x490654]
xor eax, esp
push eax
lea eax, [esp + 0x340]
mov dword fs:[0], eax
mov esi, ecx
push 0x479368
lea eax, [esp + 0xc8]
mov dword [esp + 0x18], esi
call fcn.004025cc
and dword [esp + 0x348], 0
mov ecx, dword [esi + 4]
lea ecx, [ecx + 0xac4]
lea edi, [esp + 0xc4]
call fcn.004146a0
or dword [esp + 0x348], 0xffffffff
mov ecx, edi
call fcn.004025fd
mov ecx, dword [esi + 0x44]
call fcn.00429940
test al, al
je 0x4021ea
push 0x414
call fcn.00453217
pop ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x348], 1
test eax, eax
je 0x401e59
mov ecx, dword [esi + 4]
call fcn.0041ff90
mov edx, eax
mov eax, dword [esp + 0x18]
call fcn.0040191e
mov edi, eax
jmp 0x401e5b
xor edi, edi
or dword [esp + 0x348], 0xffffffff
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x8c30]
mov eax, dword [ecx]
push 0x100
lea edx, [esp + 0x138]
push edx
push edi
call dword [eax]
push edi
call fcn.004531bb
cmp word [esp + 0x138], 0x30
pop ecx
je 0x401f1b
lea eax, [esp + 0x1c]
push eax
call fcn.0040263c
lea eax, [esp + 0x134]
push eax
push ecx
push 0x47937c
push 0x479390
mov dword [esp + 0x358], 2
call fcn.004089f0
push eax
lea eax, [esp + 0x40]
push eax
call fcn.00403da5
add esp, 0x14
push eax
call fcn.00403da5
pop ecx
pop ecx
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x20]
call fcn.004026cf
mov byte [esp + 0x348], 3
mov edi, dword [esi + 4]
lea edi, [edi + 0x8d20]
call fcn.00423b50
lea ecx, [esp + 0xc4]
call fcn.004025fd
or dword [esp + 0x348], 0xffffffff
lea eax, [esp + 0x1c]
call fcn.0040220e
mov ecx, dword [esi + 4]
call fcn.0041ff90
call fcn.00406ce0
test al, al
jne 0x401f6e
mov ecx, dword [esi + 4]
call fcn.0041ff90
push eax
lea eax, [esp + 0xc8]
call fcn.004025cc
mov dword [esp + 0x348], 4
mov ebx, dword [esi + 4]
mov esi, eax
call fcn.0041f6c0
or dword [esp + 0x348], 0xffffffff
lea ecx, [esp + 0xc4]
call fcn.004025fd
mov esi, dword [esp + 0x14]
push 0x414
call fcn.00453217
pop ecx
mov dword [esp + 0x18], eax
push 5
pop edi
mov dword [esp + 0x348], edi
test eax, eax
je 0x401fa2
mov ebx, dword [esi + 4]
call fcn.0041ffb0
mov edx, eax
mov eax, dword [esp + 0x18]
call fcn.0040194e
mov ebx, eax
jmp 0x401fa4
xor ebx, ebx
or dword [esp + 0x348], 0xffffffff
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x8c30]
mov eax, dword [ecx]
push 0x100
lea edx, [esp + 0x138]
push edx
push ebx
call dword [eax]
push ebx
call fcn.004531bb
fld1
xor edx, edx
fstp dword [esp]
inc edx
push 0
mov eax, esi
mov dword [esi + 0x40], edx
call fcn.0041f160
mov edx, edi
mov eax, esi
call fcn.0041f190
mov esi, dword [esi + 4]
call fcn.00420000
push eax
lea eax, [esp + 0x11c]
call fcn.004025cc
push 0x479394
lea eax, [esp + 0x11c]
push eax
mov dword [esp + 0x350], 6
call fcn.0040260b
lea eax, [esp + 0xe0]
call fcn.004025a5
mov esi, dword [esp + 0x14]
mov byte [esp + 0x348], 7
mov eax, dword [esi + 4]
push dword [eax + 0x8c28]
lea ecx, [esp + 0xe4]
push str.jre_packed.ebz
lea edx, [esp + 0x120]
call fcn.004083b0
pop ecx
pop ecx
push 0x19
pop edx
mov eax, esi
call fcn.0041f190
fld dword [0x482458]
push ecx
fstp dword [esp]
push 0
push 0x32
pop edx
mov eax, esi
call fcn.0041f160
mov eax, dword [esi + 4]
mov edi, dword [eax + 0x8c28]
push str.pack
push 0xcb
lea eax, [esp + 0xe8]
call fcn.004078e0
mov ebx, dword [esi + 4]
pop ecx
pop ecx
push str.jrePacked
call fcn.0041ffb0
push eax
lea edx, [esp + 0xe8]
mov ecx, ebx
call fcn.00426560
pop ecx
pop ecx
lea eax, [esp + 0xe0]
call fcn.00402637
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
fld dword [0x4823f0]
push ecx
fstp dword [esp]
push 0
push 0x64
pop edx
mov eax, esi
call fcn.0041f160
push 0x32
pop edx
mov eax, esi
call fcn.0041f190
mov ecx, dword [esi + 4]
call fcn.00426960
test al, al
je 0x402198
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x20]
lea eax, [esp + 0xfc]
call fcn.004025a5
lea eax, [esp + 0xc4]
call fcn.004025a5
lea ecx, [esp + 0xc4]
push ecx
lea ecx, [esp + 0x100]
push ecx
mov byte [esp + 0x350], 9
mov eax, dword [esi + 4]
mov edx, dword [esi]
push esi
push eax
mov ecx, esi
call dword [edx + 0x28]
fld dword [0x4823f0]
push ecx
fstp dword [esp]
push 3
push 0x64
pop edx
mov eax, esi
call fcn.0041f160
push 0x5f
pop edx
mov eax, esi
call fcn.0041f190
mov esi, dword [esi + 4]
call fcn.00426430
mov eax, dword [esp + 0x14]
push 0x64
pop edx
call fcn.0041f190
lea ecx, [esp + 0xc4]
call fcn.004025fd
lea ecx, [esp + 0xfc]
mov byte [esp + 0x348], 7
call fcn.004025fd
mov esi, dword [esp + 0x14]
push 0x4793e0
lea eax, [esp + 0x100]
call fcn.004025cc
lea eax, [esp + 0xfc]
push eax
mov byte [esp + 0x34c], 0xa
mov eax, dword [esi + 4]
add eax, 0xac4
call fcn.00414750
lea ecx, [esp + 0xfc]
call fcn.004025fd
lea ecx, [esp + 0xe0]
call fcn.004025fd
lea ecx, [esp + 0x118]
call fcn.004025fd
mov ecx, dword [esp + 0x340]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.00452c94
mov esp, ebp
pop ebp
ret