Function at 0x4c8fac
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
sub esp, 0x70
lea ebp, [esp - 4]
mov eax, dword [0x601328]
xor eax, ebp
mov dword [ebp + 0x70], eax
push 0xbc
mov eax, 0x579667
call fcn.0054d40c
mov edi, ecx
mov dword [ebp - 0x1c], edi
call fcn.00462c28
mov al, byte [eax]
test al, al
jne 0x4c9036
lea eax, [ebp - 0xc8]
push eax
call fcn.00409b60
and dword [ebp - 4], 0
lea eax, [ebp - 0xc0]
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x54]
lea eax, [ebp - 0xc8]
call fcn.00407170
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 1
call fcn.00406a80
lea ecx, [ebp + 0x54]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xc8]
call fcn.00407660
jmp 0x4c914b
lea eax, [ebp - 0xc0]
push eax
mov dword [ebp - 4], 2
call fcn.004068d0
mov byte [ebp - 4], 3
call fcn.00462c28
lea esi, [ebp]
call fcn.00406720
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x4c9069
mov esi, dword [eax + 4]
jmp 0x4c906c
lea esi, [eax + 4]
lea eax, [ebp - 0xc0]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp]
mov byte [ebp - 4], 3
call fcn.00409c40
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov ebx, 0x2710
push ebx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4c90fc
lea ecx, [ebp]
lea eax, [ebp - 0xc0]
call fcn.00406700
push 0x812
push str..FirefoxBrowser.cpp
push eax
push ebx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp]
call fcn.00409c40
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 2
call fcn.004067e0
or dword [ebp - 4], 0xffffffff
jmp 0x4c9150
mov ebx, 0x2710
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x44]
cmp eax, 4
jge 0x4c96b2
call fcn.00462c28
cmp byte [eax], 0
jne 0x4c91c6
lea eax, [ebp - 0xc8]
push eax
call fcn.00409b60
lea eax, [ebp - 0xc0]
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF___Version_below_4__delete_Extenions.rdf
push eax
mov dword [ebp - 4], 9
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x54]
lea eax, [ebp - 0xc8]
call fcn.00407170
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0xa
call fcn.00406a80
lea ecx, [ebp + 0x54]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xc8]
call fcn.00407660
jmp 0x4c92d0
lea eax, [ebp - 0xc0]
push eax
mov dword [ebp - 4], 0xb
call fcn.004068d0
mov byte [ebp - 4], 0xc
call fcn.00462c28
lea esi, [ebp - 0x38]
call fcn.00406720
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x4c91f9
mov esi, dword [eax + 4]
jmp 0x4c91fc
lea esi, [eax + 4]
lea eax, [ebp - 0xc0]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF___Version_below_4__delete_Extenions.rdf
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.00409c40
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4c9287
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0xc0]
call fcn.00406700
push 0x816
push str..FirefoxBrowser.cpp
push eax
push ebx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x38]
call fcn.00409c40
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0xb
call fcn.004067e0
jmp 0x4c92d0
and dword [ebp - 0x1c], 0
and dword [ebp + 0x30], 0
xor eax, eax
mov dword [ebp + 0x34], 7
mov word [ebp + 0x20], ax
lea eax, [ebp]
push eax
mov dword [ebp - 4], 0x12
call fcn.004de4c2
pop ecx
mov byte [ebp - 4], 0x13
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004de9d6
pop ecx
test al, al
je 0x4c96a2
cmp dword [ebp + 0x30], 0
je 0x4c92fa
call fcn.00462c28
cmp byte [eax], 0
jne 0x4c9378
lea eax, [ebp - 0xc8]
push eax
call fcn.00409b60
lea eax, [ebp - 0xc0]
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF__deleting_extensions.rdf
push eax
mov byte [ebp - 4], 0x14
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x54]
lea eax, [ebp - 0xc8]
call fcn.00407170
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x15
call fcn.00406a80
lea ecx, [ebp + 0x54]
call fcn.00409c40
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x13
call fcn.00407660
jmp 0x4c948d
lea eax, [ebp - 0xc0]
push eax
mov byte [ebp - 4], 0x16
call fcn.004068d0
mov byte [ebp - 4], 0x17
call fcn.00462c28
lea esi, [ebp - 0x38]
call fcn.00406720
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x18], 8
jb 0x4c93a8
mov esi, dword [eax + 4]
jmp 0x4c93ab
lea esi, [eax + 4]
lea eax, [ebp - 0xc0]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF__deleting_extensions.rdf
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x17
call fcn.00409c40
lea eax, [ebp - 0x18]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x19
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4c9436
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0xc0]
call fcn.00406700
push 0x820
push str..FirefoxBrowser.cpp
push eax
push ebx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1a
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x38]
call fcn.00409c40
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x17
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x16
call fcn.004067e0
mov dword [ebp - 4], 0x13
jmp 0x4c948d
lea eax, [ebp]
push eax
lea esi, [ebp + 0x38]
call fcn.00406fb0
push 0
lea eax, [ebp + 0x1c]
push eax
or eax, 0xffffffff
mov byte [ebp - 4], 0x1d
call fcn.004117d0
mov eax, esi
push eax
mov eax, str.extensions.rdf
call fcn.00411970
cmp dword [ebp + 0x50], 8
mov eax, dword [ebp + 0x3c]
jae 0x4c94c4
lea eax, [ebp + 0x3c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
jne 0x4c9691
call fcn.00462c28
cmp byte [eax], 0
jne 0x4c9550
lea eax, [ebp - 0xc8]
push eax
call fcn.00409b60
lea eax, [ebp + 0x38]
push eax
push 0x5967ac
lea eax, [ebp - 0xc0]
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF__extensions.rdf_from_path_found__delete_it
push eax
mov byte [ebp - 4], 0x1e
call fcn.00407390
pop ecx
pop ecx
push eax
call fcn.00407390
pop ecx
pop ecx
push eax
call fcn.00411b20
pop ecx
pop ecx
lea ecx, [ebp + 0x54]
lea eax, [ebp - 0xc8]
call fcn.00407170
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x1f
call fcn.00406a80
lea ecx, [ebp + 0x54]
call fcn.00409c40
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x1d
call fcn.00407660
jmp 0x4c967e
lea eax, [ebp - 0xc0]
push eax
mov byte [ebp - 4], 0x20
call fcn.004068d0
mov byte [ebp - 4], 0x21
call fcn.00462c28
lea esi, [ebp - 0x38]
call fcn.00406720
mov byte [ebp - 4], 0x22
cmp dword [eax + 0x18], 8
jb 0x4c9580
mov esi, dword [eax + 4]
jmp 0x4c9583
lea esi, [eax + 4]
lea eax, [ebp - 0xc0]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CFirefoxBrowser::RefreshFFBelow4ExtenionsRDF__extensions.rdf_from_path_found__delete_it
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5967ac
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x38]
push ecx
push eax
call fcn.00411b20
pop ecx
pop ecx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x21
call fcn.00409c40
lea eax, [ebp - 0x40]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4c9627
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0xc0]
call fcn.00406700
push 0x826
push str..FirefoxBrowser.cpp
push eax
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x24
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x38]
call fcn.00409c40
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x21
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x20
call fcn.004067e0
mov dword [ebp - 4], 0x1d
jmp 0x4c967e
cmp dword [ebp + 0x50], 8
mov eax, dword [ebp + 0x3c]
jae 0x4c968a
lea eax, [ebp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0x13
call fcn.00409c40
jmp 0x4c92fa
lea ecx, [ebp]
call fcn.00409c40
lea ecx, [ebp + 0x1c]
call fcn.00409c40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x70]
xor ecx, ebp
call fcn.0054677c
add ebp, 0x74
leave
ret