Function at 0x4f9ce0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, 0x4f860c
call fcn.00406e40
xor eax, eax
push ebp
push 0x4fa0e7
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4fa0f8
push 0
push 0
call fcn.00407000
call sub.kernel32.dll_GetLastError
cmp eax, 0xb7
jne 0x4f9d95
call fcn.004031a0
cmp eax, 2
jl 0x4f9d90
mov edx, 0x5036f0
mov eax, 2
call fcn.00403200
xor eax, eax
mov dword [0x5036e4], eax
mov eax, dword [0x5036f0]
test eax, eax
je 0x4f9d4e
sub eax, 4
mov eax, dword [eax]
add eax, 1
jno 0x4f9d58
call fcn.00403a78
test eax, eax
jns 0x4f9d61
call fcn.00403a70
mov dword [0x5036e8], eax
mov eax, dword [0x5036f0]
call fcn.00404f6c
mov dword [0x5036ec], eax
push 0x5036e4
push 0
push 0x4a
push 0
push 0x4fa104
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_SendMessageA
call fcn.004048e0
xor eax, eax
push ebp
push 0x4f9dd3
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.00403200
mov eax, dword [ebp - 0x14]
mov edx, 0x4fa118
call fcn.00404eb8
jne 0x4f9dc9
push 0x4fa128
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4f9ddd
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4f7e78]
call fcn.00468270
mov edx, dword [0x4fea3c]
mov dword [edx], eax
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
call fcn.0046d4ac
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x8c]
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 5
call fcn.0048abf0
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
call fcn.00470f84
mov ecx, dword [0x4fede0]
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
mov edx, dword [0x4f3cc0]
call fcn.00470f9c
mov ecx, dword [0x4fee60]
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
mov edx, dword [0x4e74ac]
call fcn.00470f9c
mov ecx, dword [0x4fe670]
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
mov edx, dword [0x4e4e58]
call fcn.00470f9c
mov ecx, dword [0x4fe9b8]
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
mov edx, dword [0x4e8294]
call fcn.00470f9c
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0xf
call fcn.0048abf0
mov ecx, dword [0x4fee88]
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
mov edx, dword [0x4e448c]
call fcn.00470f9c
mov eax, dword [0x4fee88]
mov eax, dword [eax]
mov byte [eax + 0x378], 0
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x14
call fcn.0048abf0
mov ecx, dword [0x4fed74]
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
mov edx, dword [0x4e8430]
call fcn.00470f9c
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x19
call fcn.0048abf0
mov eax, dword [0x4fed74]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x4fa13c
call fcn.00453f30
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x1e
call fcn.0048abf0
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
mov edx, 0x4fa14c
call fcn.00470a1c
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x23
call fcn.0048abf0
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x8c]
mov dl, 1
mov eax, dword [0x4f805c]
call fcn.00403b78
mov edx, dword [0x4fe7b4]
mov dword [edx], eax
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x28
call fcn.0048abf0
mov dl, 1
mov eax, dword [0x4e5290]
call fcn.00403b78
mov edx, dword [0x4fecc4]
mov dword [edx], eax
mov eax, dword [0x4fecc4]
mov eax, dword [eax]
xor edx, edx
call fcn.004e53cc
mov edx, dword [0x4fede0]
mov edx, dword [edx]
mov eax, dword [0x4fe7b4]
mov eax, dword [eax]
call fcn.004f8554
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x5f
call fcn.0048abf0
mov eax, dword [0x4fe7b4]
mov eax, dword [eax]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx - 4]
mov eax, dword [0x4fee88]
mov eax, dword [eax]
movzx eax, byte [eax + 0x378]
cmp al, 1
jbe 0x4fa051
mov edx, dword [0x4fee88]
cmp al, 3
jae 0x4fa051
mov dl, 1
mov eax, dword [0x4b87cc]
call fcn.00403b78
mov edx, dword [0x4fecc0]
mov dword [edx], eax
mov eax, dword [0x4fee88]
mov eax, dword [eax]
movzx ecx, byte [eax + 0x378]
mov edx, dword [0x4fede0]
mov edx, dword [edx]
mov eax, dword [0x4fecc0]
mov eax, dword [eax]
call fcn.004b883c
mov eax, dword [0x4fede0]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x34]
mov edx, 1
call fcn.0044a96c
xor edx, edx
call fcn.0044a96c
cmp byte [eax + 0x39], 1
jne 0x4fa08d
mov eax, dword [0x4fe980]
mov eax, dword [eax]
mov ecx, 0x4fa160
xor edx, edx
call fcn.004b97cc
jmp 0x4fa0a0
mov eax, dword [0x4fe980]
mov eax, dword [eax]
mov ecx, 0x4fa174
xor edx, edx
call fcn.004b97cc
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x63
call fcn.0048abf0
mov eax, dword [0x4fea3c]
mov eax, dword [eax]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx - 4]
mov eax, dword [0x4fec0c]
mov eax, dword [eax]
call fcn.0047101c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fa0ee
lea eax, [ebp - 0x14]
call fcn.00404aa8
ret