Function at 0x4e4ba0
Capabilities:
Delete file

Disassembly:
sub esp, 8
push edi
xor edi, edi
cmp dword [0x708fd4], edi
je 0x4e4e0f
push ebp
push esi
push 2
push edi
mov ebp, 1
push ebp
push 0x11
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
cmp dword [0x714660], edi
jne 0x4e4dac
mov eax, dword [0x709010]
cmp eax, edi
je 0x4e4be4
mov ecx, dword [0x708fd4]
push ebp
push ecx
call eax
cmp dword [0x709168], ebp
push ebx
mov ebx, dword [sym.imp.USER32.dll_PostMessageA]
mov dword [0x709164], ebp
je 0x4e4c19
mov esi, dword [sym.imp.USER32.dll_ShowCursor]
nop
push ebp
call esi
test eax, eax
jl 0x4e4c00
mov eax, dword [0x708fd4]
push edi
push eax
push 0x20
push eax
call ebx
mov dword [0x709168], ebp
mov eax, dword [0x713f2c]
cmp eax, edi
mov esi, dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
je 0x4e4c31
push eax
call esi
mov dword [0x713f2c], edi
mov eax, dword [0x713f30]
cmp eax, edi
je 0x4e4c5e
push eax
call esi
mov edx, dword [0x713f34]
push edx
call esi
mov eax, dword [0x714488]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x713f30], edi
mov dword [0x713f34], edi
cmp dword [0x714040], edi
je 0x4e4c77
push 0x713f3c
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [0x714040], edi
mov eax, dword [0x708ff8]
cmp eax, edi
je 0x4e4c8d
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [0x708ff8], edi
cmp dword [0x70f4ac], edi
je 0x4e4ccb
cmp dword [0x70f4a4], edi
je 0x4e4cb9
push edi
call fcn.004e2200
mov ecx, dword [0x70f4a4]
add esp, 4
push ecx
call dword [sym.imp.USER32.dll_DestroyMenu]
mov dword [0x70f4a4], edi
mov dword [0x70f4ac], edi
mov dword [0x70f5cc], edi
mov dword [0x7139d0], edi
cmp dword [0x7139d4], edi
je 0x4e4d14
cmp dword [0x709108], edi
je 0x4e4d14
call fcn.004dca60
mov edx, dword [0x7139d8]
push edi
push edi
push 0x10
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x7139dc]
push eax
mov dword [0x7139d8], edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [0x7139dc], edi
mov dword [0x7139d4], edi
call fcn.004e2cc0
cmp dword [0x709000], ebp
jne 0x4e4d3a
mov ecx, dword [0x709008]
mov edx, dword [0x708fd4]
push ecx
push 0xfffffffffffffffc
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x70911c], ebp
jmp 0x4e4d77
cmp dword [0x709120], edi
jne 0x4e4d54
mov eax, dword [0x708fd4]
push edi
push edi
push 0x10
push eax
mov dword [0x709120], ebp
call ebx
call fcn.004e41d0
test eax, eax
jne 0x4e4d65
cmp dword [0x709124], edi
je 0x4e4d54
mov ecx, dword [0x708fd0]
push ecx
push 0x70a1b0
call dword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.004e29f0
cmp dword [0x709f80], edi
pop ebx
je 0x4e4da5
push 0x709b4c
call fcn.0051d010
mov edx, dword [0x709f88]
push edi
push edx
call fcn.004f3340
add esp, 0xc
mov dword [0x709f88], edi
call fcn.004e08c0
jmp 0x4e4db2
mov dword [0x70911c], ebp
cmp dword [0x708fec], edi
je 0x4e4ddf
cmp dword [0x708ff4], edi
jne 0x4e4dd3
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
call esi
cmp dword [0x708ff4], edi
je 0x4e4dc8
mov eax, dword [0x708fec]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 8
lea ecx, [esp + 0x10]
push ecx
call dword [0x7090b4]
mov edx, dword [esp + 0xc]
push edx
call dword [0x7090ac]
mov eax, dword [0x714050]
cmp eax, edi
pop esi
pop ebp
je 0x4e4e0f
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [0x714050], edi
xor eax, eax
pop edi
add esp, 8
ret