Function at 0x464e04
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdf4
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x204], eax
mov ebx, dword [0x4bedb0]
mov esi, 0x4c13ec
xor eax, eax
push ebp
push 0x4650c2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4bee68]
cmp byte [eax], 4
jae 0x464e59
mov ax, 0x312
call fcn.004aa600
mov edx, 4
call fcn.004b12a8
jmp 0x46509e
xor eax, eax
call fcn.00421294
test al, al
je 0x46509e
mov edx, ebx
lea eax, [ebp - 0x100]
call fcn.004b81b0
lea eax, [ebp - 0x100]
call fcn.004aedb4
mov dl, 0xf
mov ax, 0x11
call fcn.0048841c
test eax, eax
je 0x46509e
mov dl, 0x10
mov ax, 0x11
call fcn.0048841c
test eax, eax
je 0x46509e
mov edx, dword [0x4be784]
add edx, 0x100
lea eax, [ebp - 0x200]
call fcn.004b81b0
push 0x4650d0
lea eax, [ebp - 0x200]
push eax
call sub.kernel32.dll_lstrcatA
lea eax, [ebp - 0x204]
lea edx, [ebp - 0x200]
mov ecx, pe_nt_image_headers32
call fcn.00404b04
mov edx, dword [ebp - 0x204]
mov eax, esi
call fcn.00402bec
mov eax, esi
call fcn.0040297c
call fcn.00402634
test eax, eax
je 0x464f15
lea edx, [ebp - 0x200]
mov ax, 3
call fcn.004acdac
jmp 0x46509e
mov ax, 0x136
call fcn.004aa600
mov edx, eax
mov eax, dword [0x4bec98]
call fcn.004b81b0
mov eax, dword [0x4bec98]
mov dl, 1
call fcn.004ad8ec
lea eax, [ebp - 0x100]
mov cl, 1
mov dl, 1
call fcn.00463970
mov edi, eax
mov eax, esi
call fcn.00402d90
mov eax, dword [0x4bed48]
cmp byte [eax], 0
je 0x464f69
lea eax, [ebp - 0x200]
push eax
call sub.kernel32.dll_DeleteFileA_1
jmp 0x46509e
mov eax, dword [0x4bec14]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4be784]
mov eax, dword [eax + 0x16f4]
mov edx, dword [0x4be854]
mov dword [edx], eax
mov eax, dword [0x4be854]
mov eax, dword [eax]
add eax, edi
dec eax
mov dword [ebp - 0x208], eax
fild dword [ebp - 0x208]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004b849c
mov edx, eax
mov eax, ebx
call fcn.004b81b0
mov eax, ebx
call fcn.004b8144
mov edx, dword [0x4be36c]
mov byte [edx], al
lea eax, [ebp - 0x20c]
lea edx, [ebp - 0x200]
mov ecx, pe_nt_image_headers32
call fcn.00404b04
mov edx, dword [ebp - 0x20c]
mov eax, esi
call fcn.00402bec
mov eax, esi
call fcn.00402970
call fcn.00402634
test eax, eax
je 0x465006
lea edx, [ebp - 0x200]
mov ax, 1
call fcn.004acdac
jmp 0x46509e
mov edx, ebx
mov ecx, 0x22b
mov eax, esi
call fcn.00403148
mov eax, esi
call fcn.00403154
call fcn.00402634
test eax, eax
jne 0x465044
cmp byte [ebx], 0
je 0x465044
mov eax, ebx
call fcn.0044c35c
test al, al
je 0x46503b
mov eax, dword [0x4bec14]
inc dword [eax]
mov eax, dword [0x4be854]
inc dword [eax]
jmp 0x465006
mov eax, esi
call fcn.00402d90
lea eax, [ebp - 0x200]
push eax
call sub.kernel32.dll_DeleteFileA_1
call fcn.004adbe0
mov eax, dword [0x4bec14]
fild dword [eax]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ax, 0x31a
call fcn.004aa600
call fcn.004ae0e4
mov dword [ebp - 0x208], edi
fild dword [ebp - 0x208]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, ebx
call fcn.004ae0e4
mov eax, ebx
mov edx, 4
call fcn.004b12a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4650c9
lea eax, [ebp - 0x20c]
call fcn.0040489c
lea eax, [ebp - 0x204]
call fcn.0040489c
ret