Function at 0x49ca60
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53d070
mov eax, dword fs:[0]
push eax
sub esp, 0xf60
mov eax, dword [0x5954a0]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x8e0], 0
mov esi, dword [ebp + 0xc]
mov ecx, 0x22b
lea edi, [ebp - 0x8dc]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
xor eax, eax
mov word [ebp - 0xce4], ax
push 0x3fe
push 0
lea ecx, [ebp - 0xce2]
push ecx
call fcn.004f8090
add esp, 0xc
mov dword [ebp - 0x10], 0
call fcn.004a5750
lea ecx, [ebp - 0x28]
call fcn.0049f9d0
mov dword [ebp - 4], 0
mov dword [ebp - 0xf04], 0
push 0x212
push 0
lea edx, [ebp - 0xf00]
push edx
call fcn.004f8090
add esp, 0xc
push 0x216
push 0
lea eax, [ebp - 0xf04]
push eax
call fcn.004f8090
add esp, 0xc
push 0x8af
call fcn.004f8626
add esp, 4
mov dword [ebp - 0xce8], eax
push 0x8af
push 0
mov ecx, dword [ebp - 0xce8]
push ecx
call fcn.004f8090
add esp, 0xc
push 0x8af
lea edx, [ebp - 0x8dc]
push edx
mov eax, dword [ebp - 0xce8]
push eax
call fcn.004f8140
add esp, 0xc
push 0x553788
push 0x20100506
mov ecx, dword [ebp - 0xce8]
push ecx
call fcn.00497e70
add esp, 0xc
push 0x20100506
push 0x8af
mov edx, dword [ebp - 0xce8]
push edx
call fcn.00497f00
add esp, 0xc
test eax, eax
jne 0x49cb99
jmp 0x49cd85
mov dword [ebp - 0xf04], 1
mov dword [ebp - 0xefc], 0x8af
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0xf00], eax
lea ecx, [ebp - 0xf04]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0049fd90
mov dword [ebp - 0x10], 0
jmp 0x49cbda
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jae 0x49cd2c
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49cc09
call fcn.004fb0ce
xor edx, edx
jne 0x49cc09
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
cmp dword [eax + ecx], 1
je 0x49cc4d
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49cc37
call fcn.004fb0ce
xor edx, edx
jne 0x49cc37
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
cmp dword [eax + ecx], 0x64
jne 0x49cc4f
jmp 0x49cbd1
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49cc67
call fcn.004fb0ce
xor edx, edx
jne 0x49cc67
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 4], 0
je 0x49cd27
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49cc9a
call fcn.004fb0ce
xor edx, edx
jne 0x49cc9a
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 8], 0
je 0x49cd27
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49ccc9
call fcn.004fb0ce
xor edx, edx
jne 0x49ccc9
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0xf3c], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49ccf7
call fcn.004fb0ce
xor edx, edx
jne 0x49ccf7
push 0x20
lea eax, [ebp - 0x6f8]
push eax
mov ecx, dword [ebp - 0xf3c]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 4]
push edx
call fcn.004a7200
add esp, 0x10
jmp 0x49cbd1
push 0
push 0
lea eax, [ebp - 0x6f8]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf08], esp
lea edx, [ebp - 0x28]
push edx
call fcn.0049fab0
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp + 8]
push eax
call fcn.00499e80
add esp, 0x28
mov dword [ebp - 0xf6c], eax
mov ecx, dword [ebp - 0xf6c]
mov dword [ebp - 0x8e0], ecx
cmp dword [ebp - 0x8e0], 0
jne 0x49cd85
push str._UpdateODMFileHeader::UpdateFileRes.
call fcn.0047c040
add esp, 4
mov dword [ebp - 0x10], 0
jmp 0x49cd97
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jae 0x49ce8c
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49cdc6
call fcn.004fb0ce
xor edx, edx
jne 0x49cdc6
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 4], 0
je 0x49ce12
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49cdf5
call fcn.004fb0ce
xor edx, edx
jne 0x49cdf5
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 4]
push edx
call fcn.004f84cf
add esp, 4
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49ce2a
call fcn.004fb0ce
xor edx, edx
jne 0x49ce2a
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0xf40], eax
mov ecx, dword [ebp - 0xf40]
add ecx, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x49ce87
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x216
idiv ecx
cmp dword [ebp - 0x10], eax
jb 0x49ce6c
call fcn.004fb0ce
xor edx, edx
jne 0x49ce6c
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x216
mov ecx, dword [ebp - 0x1c]
lea edx, [ecx + eax + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x49cd8e
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0xf0c], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.004a06c0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0xf64], ecx
mov edx, dword [ebp - 0xf64]
push edx
call fcn.004b3044
add esp, 4
mov eax, dword [ebp - 0xf0c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.004f8124
mov esp, ebp
pop ebp
ret