Function at 0x415e73
Capabilities:
Delete file

Disassembly:
push 0x14
mov eax, 0x46dcf8
call fcn.00451515
mov ebx, ecx
mov ecx, dword [0x492740]
push dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0xc]
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.0041ca2c
mov eax, dword [0x4927f8]
pop ecx
pop ecx
lea edi, [ebp - 0x20]
lea esi, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x4927f4
call fcn.0041dc68
test al, al
jne 0x416182
cmp dword [ebp + 8], 0
mov edi, dword [ebp - 0x18]
jne 0x415ff8
test edi, edi
jne 0x415ed5
call fcn.00449d86
mov esi, dword [ebp - 0x14]
cmp esi, dword [edi + 4]
jne 0x415ee2
call fcn.00449d86
push dword [esi + 0xc]
call fcn.0041c113
test eax, eax
pop ecx
je 0x415fd7
cmp esi, dword [edi + 4]
jne 0x415efd
call fcn.00449d86
mov dword [esi + 0x3c], 2
cmp esi, dword [edi + 4]
jne 0x415f0e
call fcn.00449d86
mov al, byte [0x48fb78]
test al, al
jne 0x415f6c
mov eax, dword [0x48fb7c]
cmp eax, 1
mov byte [0x4927d4], 1
jne 0x415f5f
push 0x40041
push 0x480ea4
push 0x480eb0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
je 0x415f77
mov byte [0x4927cc], 0x10
and dword [0x4927dc], 0
mov eax, ebx
call fcn.004151bf
jmp 0x416182
test eax, eax
jne 0x415f77
mov byte [0x4927cc], 0x11
jmp 0x415f4c
cmp al, 1
jne 0x415f77
mov byte [0x4927d4], 0
cmp esi, dword [edi + 4]
jne 0x415f81
call fcn.00449d86
push dword [esi + 0xc]
call fcn.0041c868
test eax, eax
pop ecx
je 0x416071
cmp esi, dword [edi + 4]
jne 0x415f9c
call fcn.00449d86
push dword [esi + 0xc]
call fcn.0041c7f9
test eax, eax
pop ecx
je 0x415fbf
cmp esi, dword [edi + 4]
jne 0x415fb3
call fcn.00449d86
mov dword [esi + 0x3c], 4
jmp 0x416071
cmp esi, dword [edi + 4]
jne 0x415fc9
call fcn.00449d86
push dword [esi + 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x416071
cmp esi, dword [edi + 4]
jne 0x415fe1
call fcn.00449d86
mov dword [esi + 0x3c], 7
and dword [0x4927dc], 0
mov byte [0x4927cc], 3
jmp 0x416071
test edi, edi
jne 0x416001
call fcn.00449d86
mov esi, dword [ebp - 0x14]
cmp esi, dword [edi + 4]
jne 0x41600e
call fcn.00449d86
mov eax, dword [ebp + 8]
mov dword [esi + 0x3c], 7
mov byte [0x4927cc], 3
mov dword [0x4927dc], eax
cmp esi, dword [edi + 4]
jne 0x41602e
call fcn.00449d86
lea eax, [ebp - 0x14]
push eax
call fcn.0041c7d0
pop ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 4], 1
cmp esi, dword [edi + 4]
jne 0x41604c
call fcn.00449d86
mov eax, dword [ebp + 0xc]
push dword [eax]
add esi, 0x40
push 0x480ee4
push esi
call fcn.004140df
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add esp, 0xc
add eax, 0xfffffff0
call fcn.004018ed
call fcn.0041cbad
test al, al
je 0x416091
mov ebx, dword [ebx + 0x34]
test ebx, ebx
je 0x416182
mov eax, ebx
call fcn.00413d05
jmp 0x416182
call fcn.0041cb32
test al, al
je 0x416107
xor esi, esi
inc esi
cmp dword [0x492750], esi
jne 0x4160b3
mov byte [0x4927e8], 1
call fcn.00416c24
jmp 0x4160fb
lea eax, [ebp + 0xc]
push str._r_n_r_n
mov byte [0x4927e8], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.00403918
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 2
push dword [ebp + 0xc]
mov edi, ebx
call fcn.00415b23
mov ecx, dword [ebx + 0x34]
call fcn.00413f5d
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.004018ed
mov dword [ebx + 0xe4], 1
jmp 0x416182
call fcn.0041cc28
test al, al
je 0x41617a
xor esi, esi
inc esi
cmp dword [0x492750], esi
jne 0x416129
mov byte [0x4927e8], 1
call fcn.00416c24
jmp 0x416171
lea eax, [ebp + 8]
push str._r_n_r_n
mov byte [0x4927e8], 0
lea ecx, [ebx + 0xec]
push eax
mov dword [ebx + 0xe0], esi
call fcn.00403918
pop ecx
pop ecx
push esi
mov dword [ebp - 4], 3
push dword [ebp + 8]
mov edi, ebx
call fcn.00415b23
mov ecx, dword [ebx + 0x34]
call fcn.00413dfc
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.004018ed
and dword [ebx + 0xe4], 0
jmp 0x416182
mov ecx, dword [ebx + 4]
call fcn.0041b913
xor eax, eax
call fcn.004515ed
ret 8