Function at 0x404650
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
mov esi, dword [ebp + 8]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x42c2b0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov eax, 0x2fbfe1a8
lea edi, [ebp - 0x3c]
nop dword [eax + eax]
cmp eax, 0xfaf96ad
jle 0x4046c0
cmp eax, 0xfaf96ae
je 0x4046ea
cmp eax, 0x2fbfe1a8
je 0x404707
cmp eax, 0x2c1b4a1c
jne 0x404690
jmp 0x404978
cmp eax, 0x8033b055
je 0x404792
cmp eax, 0xc504f101
jne 0x404690
mov ecx, esi
call fcn.00415940
cmp ebx, eax
mov eax, 0xfaf96ae
mov ecx, 0x2c1b4a1c
cmove eax, ecx
jmp 0x404690
mov eax, 0x7b4ffa6d
nop
cmp eax, 0x7b4ffa6d
je 0x404700
cmp eax, 0x5288555c
jne 0x4046f0
jmp 0x404737
mov eax, 0x5288555c
jmp 0x4046f0
mov word [ebp - 0x24], 0x5c
mov eax, 0x8302d141
nop word cs:[eax + eax]
cmp eax, 0x8302d141
je 0x404730
cmp eax, 0xf50738d6
jne 0x404720
jmp 0x40477f
mov eax, 0xf50738d6
jmp 0x404720
mov dword [ebp - 0x54], esi
mov ecx, dword [ebp - 0x54]
call fcn.00419b70
mov dword [ebp - 0x10], 0xffffffff
sub esp, 0x18
movzx ecx, byte [ebp - 0x20]
mov byte [esp], cl
lea ecx, [ebp - 0x24]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp + 0x14], 1
mov ecx, edi
call fcn.00415af0
mov eax, 0x8033b055
jmp 0x404690
mov dword [ebp - 0x54], esi
mov eax, dword [ebp - 0x54]
mov ebx, dword [eax + 0x10]
mov eax, 0xc504f101
jmp 0x404690
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x54]
push 0x481d70
push edi
push eax
call fcn.004049b0
add esp, 0xc
mov eax, 0x7829505
lea edi, [ebp - 0x54]
nop word cs:[eax + eax]
cmp eax, 0x7829505
je 0x4047d0
cmp eax, 0xe864405
jne 0x4047c0
jmp 0x4047d7
mov eax, 0xe864405
jmp 0x4047c0
lea esi, [ebp - 0x3c]
mov ecx, esi
call fcn.0041d790
mov eax, 0xb46d5a3b
nop word cs:[eax + eax]
cmp eax, 0xb46d5a3b
je 0x404800
cmp eax, 0x1369437d
jne 0x4047f0
jmp 0x404807
mov eax, 0x1369437d
jmp 0x4047f0
mov eax, 0x17ac3f07
nop dword [eax]
cmp eax, 0x17ac3f07
je 0x404820
cmp eax, 0x50fec471
jne 0x404810
jmp 0x404827
mov eax, 0x50fec471
jmp 0x404810
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x24]
mov eax, 0x66eec162
nop word cs:[eax + eax]
cmp eax, 0x66eec162
je 0x404850
cmp eax, 0xc44a53dd
jne 0x404840
jmp 0x404857
mov eax, 0xc44a53dd
jmp 0x404840
mov ecx, 0x328e6210
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x404880
mov dword [ebp - 0x3c], edi
mov ecx, dword [ebp - 0x3c]
call fcn.00419b70
push eax
call esi
cmp eax, 1
sete al
mov ecx, 0xd4269312
nop dword [eax]
cmp ecx, 0xd4269312
je 0x4048b7
cmp ecx, 0x328e6210
jne 0x404880
mov eax, 0x6ec2f3
nop word cs:[eax + eax]
cmp eax, 0x6ec2f3
je 0x4048b0
cmp eax, 0xe893f61a
jne 0x4048a0
jmp 0x404864
mov eax, 0xe893f61a
jmp 0x4048a0
and al, 1
mov byte [ebp - 0x3c], al
movzx eax, byte [ebp - 0x3c]
mov eax, 0x7829505
nop word cs:[eax + eax]
cmp eax, 0x7829505
je 0x4048e0
cmp eax, 0xe864405
jne 0x4048d0
jmp 0x4048e7
mov eax, 0xe864405
jmp 0x4048d0
lea esi, [ebp - 0x54]
mov ecx, esi
call fcn.0041d790
mov eax, 0xb46d5a3b
nop word cs:[eax + eax]
cmp eax, 0xb46d5a3b
je 0x404910
cmp eax, 0x1369437d
jne 0x404900
jmp 0x404917
mov eax, 0x1369437d
jmp 0x404900
mov eax, 0x17ac3f07
nop dword [eax]
cmp eax, 0x17ac3f07
je 0x404930
cmp eax, 0x50fec471
jne 0x404920
jmp 0x404937
mov eax, 0x50fec471
jmp 0x404920
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x3c]
mov eax, 0x66eec162
nop word cs:[eax + eax]
cmp eax, 0x66eec162
je 0x404960
cmp eax, 0xc44a53dd
jne 0x404950
jmp 0x404967
mov eax, 0xc44a53dd
jmp 0x404950
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
add esp, 0x48
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10], 0xffffffff
call fcn.00415ae0
nop word cs:[eax + eax]
push ebp
sub esp, 0x18
add ebp, 0xc
lea ecx, [ebp - 0x3c]
call fcn.004016f0
add esp, 0x18
pop ebp
ret