Function at 0x4162cf
Capabilities:
Delete file

Disassembly:
push 0x14
mov eax, 0x46e8d8
call fcn.004517a7
mov ebx, ecx
mov ecx, dword [0x4927e0]
push dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0xc]
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.0041d173
mov eax, dword [0x4928e8]
pop ecx
pop ecx
lea edi, [ebp - 0x20]
lea esi, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x4928e4
call fcn.0041e3bf
test al, al
jne 0x4165de
cmp dword [ebp + 8], 0
mov edi, dword [ebp - 0x18]
jne 0x416454
test edi, edi
jne 0x416331
call fcn.0044ce00
mov esi, dword [ebp - 0x14]
cmp esi, dword [edi + 4]
jne 0x41633e
call fcn.0044ce00
push dword [esi + 0xc]
call fcn.0041c85a
test eax, eax
pop ecx
je 0x416433
cmp esi, dword [edi + 4]
jne 0x416359
call fcn.0044ce00
mov dword [esi + 0x3c], 2
cmp esi, dword [edi + 4]
jne 0x41636a
call fcn.0044ce00
mov al, byte [0x48fbcc]
test al, al
jne 0x4163c8
mov eax, dword [0x48fbd0]
cmp eax, 1
mov byte [0x492874], 1
jne 0x4163bb
push 0x40041
push 0x480d04
push 0x480d10
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x4163d3
mov byte [0x49286c], 0x10
and dword [0x49287c], 0
mov eax, ebx
call fcn.004156d5
jmp 0x4165de
test eax, eax
jne 0x4163d3
mov byte [0x49286c], 0x11
jmp 0x4163a8
cmp al, 1
jne 0x4163d3
mov byte [0x492874], 0
cmp esi, dword [edi + 4]
jne 0x4163dd
call fcn.0044ce00
push dword [esi + 0xc]
call fcn.0041cfaf
test eax, eax
pop ecx
je 0x4164cd
cmp esi, dword [edi + 4]
jne 0x4163f8
call fcn.0044ce00
push dword [esi + 0xc]
call fcn.0041cf40
test eax, eax
pop ecx
je 0x41641b
cmp esi, dword [edi + 4]
jne 0x41640f
call fcn.0044ce00
mov dword [esi + 0x3c], 4
jmp 0x4164cd
cmp esi, dword [edi + 4]
jne 0x416425
call fcn.0044ce00
push dword [esi + 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4164cd
cmp esi, dword [edi + 4]
jne 0x41643d
call fcn.0044ce00
mov dword [esi + 0x3c], 7
and dword [0x49287c], 0
mov byte [0x49286c], 3
jmp 0x4164cd
test edi, edi
jne 0x41645d
call fcn.0044ce00
mov esi, dword [ebp - 0x14]
cmp esi, dword [edi + 4]
jne 0x41646a
call fcn.0044ce00
mov eax, dword [ebp + 8]
mov dword [esi + 0x3c], 7
mov byte [0x49286c], 3
mov dword [0x49287c], eax
cmp esi, dword [edi + 4]
jne 0x41648a
call fcn.0044ce00
lea eax, [ebp - 0x14]
push eax
call fcn.0041cf17
pop ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 4], 1
cmp esi, dword [edi + 4]
jne 0x4164a8
call fcn.0044ce00
mov eax, dword [ebp + 0xc]
push dword [eax]
add esi, 0x40
push 0x480d58
push esi
call fcn.00414485
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add esp, 0xc
add eax, 0xfffffff0
call fcn.00401996
call fcn.0041d2f4
test al, al
je 0x4164ed
mov ebx, dword [ebx + 0x34]
test ebx, ebx
je 0x4165de
mov eax, ebx
call fcn.00413d62
jmp 0x4165de
call fcn.0041d279
test al, al
je 0x416563
xor esi, esi
inc esi
cmp dword [0x4927f0], esi
jne 0x41650f
mov byte [0x492888], 1
call fcn.00417074
jmp 0x416557
lea eax, [ebp + 0xc]
push str._r_n_r_nQQ
mov byte [0x492888], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.004039c1
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 2
push dword [ebp + 0xc]
mov edi, ebx
call fcn.00415fda
mov ecx, dword [ebx + 0x34]
call fcn.00414012
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.00401996
mov dword [ebx + 0xe4], 1
jmp 0x4165de
call fcn.0041d36f
test al, al
je 0x4165d6
xor esi, esi
inc esi
cmp dword [0x4927f0], esi
jne 0x416585
mov byte [0x492888], 1
call fcn.00417074
jmp 0x4165cd
lea eax, [ebp + 8]
push str._r_n_r_nQQ
mov byte [0x492888], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.004039c1
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 3
push dword [ebp + 8]
mov edi, ebx
call fcn.00415fda
mov ecx, dword [ebx + 0x34]
call fcn.00413e61
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.00401996
and dword [ebx + 0xe4], 0
jmp 0x4165de
mov ecx, dword [ebx + 4]
call fcn.0041c05a
xor eax, eax
call fcn.0045187f
ret 8