Function at 0x4594d3
Capabilities:
Delete file

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x98
mov eax, dword [0x4c3a60]
xor eax, ebp
mov dword [ebp + 0x6c], eax
mov eax, dword [ebp + 0x7c]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x78]
cmp dword [edi + 0x18], 8
mov esi, ecx
mov dword [ebp + 0x40], edi
mov dword [ebp + 0x30], eax
jb 0x459504
mov eax, dword [edi + 4]
jmp 0x459507
lea eax, [edi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
lea eax, [ebp + 0x14]
push eax
call fcn.004546db
cmp dword [eax + 0x18], 8
pop ecx
jb 0x459523
mov eax, dword [eax + 4]
jmp 0x459526
add eax, 4
push eax
xor ebx, ebx
push ebx
lea ecx, [ebp + 0x34]
call fcn.0046f669
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401ad3
lea ecx, [ebp + 0x34]
call fcn.0046f6cc
lea eax, [ebp + 0x14]
push eax
call fcn.004544e5
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401ad3
cmp dword [esi + 0x18], 8
mov dword [ebp + 0x48], 0x64
jb 0x459577
mov eax, dword [esi + 4]
jmp 0x45957a
lea eax, [esi + 4]
push eax
call fcn.004033be
pop ecx
test eax, eax
je 0x45965f
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 0xb7
je 0x45965c
cmp eax, 0x50
je 0x45965c
push dword [ebp + 0x48]
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x18], 8
jb 0x4595b9
mov eax, dword [esi + 4]
jmp 0x4595bc
lea eax, [esi + 4]
push eax
call fcn.004033be
pop ecx
test eax, eax
je 0x4595e4
call edi
cmp eax, 0xb7
je 0x4595e4
cmp eax, 0x50
je 0x4595e4
mov eax, dword [ebp + 0x48]
add eax, eax
cmp eax, 0x4e20
mov dword [ebp + 0x48], eax
jl 0x4595a5
cmp dword [ebp + 0x48], 0x4e20
jl 0x45965c
call edi
push ebx
sub esp, 0x1c
mov ecx, esp
push 0x4b3140
mov edi, eax
call fcn.004018f6
sub esp, 0x1c
mov ecx, esp
push esi
call fcn.00401918
push edi
push 0x25d
call fcn.004446a8
mov ecx, eax
call fcn.00444f21
call fcn.00439bb3
push ebx
push ebx
push 0x786
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp + 0x34]
call fcn.0046f6d8
lea ecx, [ebp + 0x34]
call fcn.0046f6b4
mov eax, 0x80004005
mov ecx, dword [ebp + 0x6c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00476d3a
add ebp, 0x70
leave
ret 8
mov edi, dword [ebp + 0x40]
push str.ThunderPlatform.exe
lea eax, [ebp + 0x14]
push edi
push eax
call fcn.004135ef
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0x1c]
push eax
mov ecx, edi
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401ad3
lea eax, [ebp + 0x14]
push edi
push eax
call fcn.00453a4c
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401ad3
push 0xffffffffffffffff
push ebx
push dword [ebp + 0x40]
lea ecx, [esi + 0x38]
call fcn.00401a1c
push 0x4b3140
lea ecx, [ebp + 0x50]
call fcn.004018f6
lea eax, [ebp + 0x50]
push eax
call fcn.00403cce
mov ecx, eax
call fcn.00403cf9
push str._tp_
lea ecx, [ebp + 0x50]
call fcn.004019f8
lea eax, [ebp - 8]
push eax
call fcn.0045471a
push eax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0042c029
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0xc8]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401ad3
cmp dword [edi + 0x18], 8
jb 0x45972e
mov edi, dword [edi + 4]
jmp 0x459731
add edi, 4
push 0x2e
lea eax, [ebp - 8]
push edi
push eax
call fcn.0046fe6f
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x54]
push eax
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401ad3
cmp dword [esi + 0x68], ebx
jne 0x459783
mov esi, 0x80004005
push ebx
push 1
lea ecx, [ebp + 0x50]
call fcn.00401ad3
lea ecx, [ebp + 0x34]
call fcn.0046f6d8
lea ecx, [ebp + 0x34]
call fcn.0046f6b4
mov eax, esi
jmp 0x459648
lea eax, [ebp - 8]
push esi
push eax
call fcn.00454700
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0x74]
push eax
mov ecx, edi
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401ad3
lea eax, [esi + 0x100]
push edi
push eax
call fcn.0045589f
lea eax, [esi + 0x38]
push eax
call fcn.00454487
add esp, 0xc
mov dword [esi + 0x70], eax
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], ebx
cmp dword [esi + 0x11c], ebx
je 0x4597f0
lea eax, [esi + 0x100]
push eax
push dword [eax + 0x18]
lea ecx, [ebp + 0x44]
call fcn.00443b31
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x3c], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x40], eax
push dword [ebp + 0x30]
lea eax, [ebp + 0x3c]
push eax
mov ecx, esi
call fcn.00457be2
mov ecx, esi
mov byte [ebp + 0x4f], al
call fcn.0045815d
lea ecx, [ebp - 0x28]
call fcn.00455d00
cmp byte [ebp + 0x4f], bl
je 0x45982a
push dword [ebp + 0x30]
mov ecx, esi
call fcn.00458c58
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.00459238
mov ecx, esi
call fcn.00459055
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.00458ba8
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.004589f9
cmp dword [esi + 0x11c], ebx
je 0x459860
lea eax, [esi + 0x100]
push edi
push eax
call fcn.00453aa5
pop ecx
pop ecx
jmp 0x459875
cmp dword [edi + 0x18], 8
jb 0x45986b
mov edi, dword [edi + 4]
jmp 0x45986e
add edi, 4
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [esi + 0x70]
lea eax, [esi + 0x54]
push eax
push esi
call fcn.0045760e
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.00455cb2
push dword [ebp - 0x28]
call fcn.00476811
pop ecx
xor esi, esi
jmp 0x459761