Function at 0x4adaf0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4edd90
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x670f1c]
xor eax, esp
mov dword [esp + 0x40], eax
push ebx
push esi
push edi
mov eax, dword [0x670f1c]
xor eax, esp
push eax
lea eax, [esp + 0x54]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x1953a]
xor ebx, ebx
cmp dword [eax + 0x24], ebx
jne 0x4adb37
xor al, al
jmp 0x4addfe
cmp byte [esi + 0x19508], bl
jne 0x4adcad
lea ecx, [esp + 0x1c]
call fcn.004bac44
mov ecx, dword [esi + 0x196ca]
movzx edx, word [esi + 0x196c4]
push ecx
push edx
mov ecx, esi
mov dword [esp + 0x64], ebx
call fcn.00437d10
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], bx
call fcn.00401640
lea eax, [esp + 0x58]
lea edi, [esi + 0x1916a]
push eax
mov ecx, edi
call fcn.0045fdf0
cmp dword [esp + 0x4c], 8
mov eax, dword [esp + 0x38]
mov byte [esp + 0x5c], 1
jae 0x4adbac
lea eax, [esp + 0x38]
push ebx
push eax
lea ecx, [esp + 0x24]
call fcn.004bacd2
test eax, eax
je 0x4adc77
cmp dword [esp + 0x4c], 8
mov eax, dword [esp + 0x38]
jae 0x4adbce
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esi + 0x196ca]
movzx edx, word [esi + 0x196c4]
push ecx
push edx
mov ecx, edi
call fcn.0046f880
movzx ecx, word [esi + 0x196c4]
mov eax, dword [esi + 0x196ca]
push eax
push ecx
mov ecx, edi
call fcn.0045d040
test eax, eax
jne 0x4adc61
sub esp, 0x1c
lea edx, [esi + 0x198ae]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00406510
mov eax, dword [esi + 0x196ca]
movzx ecx, word [esi + 0x196c4]
mov edx, dword [esi + 0x19712]
push eax
mov eax, dword [esi + 0x1970e]
push ecx
push edx
push eax
sub esp, 0x1c
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
mov byte [esp + 0xa8], 2
call fcn.00406510
mov ecx, edi
mov byte [esp + 0xa4], 1
call fcn.0046e0f0
mov ecx, esi
call fcn.004836e0
test eax, eax
je 0x4adc77
mov ecx, esi
call fcn.004836e0
mov byte [eax + 0x1c], 7
cmp dword [esp + 0x4c], 8
jb 0x4adc8b
mov eax, dword [esp + 0x38]
push eax
call fcn.004aef39
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
mov dword [esp + 0x5c], 0xffffffff
call fcn.004bac6a
mov ecx, dword [esi + 0x1953a]
mov dword [esi + 0x19504], ebx
mov ecx, dword [ecx + 0x24]
xor edi, edi
call fcn.0045ccf0
cmp edx, ebx
ja 0x4adccf
cmp eax, ebx
jbe 0x4adde4
movzx eax, byte [esi + 0x19502]
cmp eax, 4
ja case.default.0x4adcdf
jmp dword [eax*4 + 0x4ade38]
push 0xa
mov ecx, esi
call fcn.00482e40
mov ecx, dword [esi + 0x19f7e]
cmp ecx, ebx
je 0x4add1d
push ebx
push 0x64
call fcn.0040cac0
test al, al
je 0x4add17
mov ecx, dword [esi + 0x19f7e]
cmp ecx, ebx
je 0x4add17
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x19f7e], ebx
push 0x90
call fcn.004aef0e
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
cmp edi, ebx
mov dword [esp + 0x5c], 3
je 0x4add8f
push 0x50023
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x5102fc
call fcn.00401430
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 0x5103dc
mov byte [esp + 0x9c], 4
call fcn.00401430
mov ecx, dword [esi + 0x192b0]
mov edx, dword [esi + 0x192e8]
push ebx
push ecx
push edx
mov ecx, edi
mov byte [esp + 0xa4], 3
call fcn.004aedc0
jmp 0x4add91
xor eax, eax
push 0xfffffffffffffff1
mov ecx, eax
mov dword [esp + 0x60], 0xffffffff
mov dword [esi + 0x19f7e], eax
call fcn.0040ca60
jmp 0x4addfc
mov edi, dword [esi + 0x196b6]
push 0xa
mov ecx, esi
mov dword [esi + 0x196b6], 0x10
call fcn.00482e40
mov dword [esi + 0x196b6], edi
jmp 0x4addfc
push 0xa
mov ecx, esi
call fcn.00482e40
mov edi, 6
jmp 0x4adde9
push 0xa
mov ecx, esi
call fcn.00482e40
mov edi, 7
push 0xb
mov ecx, esi
call fcn.00482e40
test al, al
je 0x4addfc
mov dword [esi + 0x19504], edi
mov al, 1
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x40]
xor ecx, esp
call fcn.004bfdfd
add esp, 0x50
ret
push 0xa
mov ecx, esi
call fcn.00482e40
mov edi, 2
jmp 0x4adde9
push 0xa
mov ecx, esi
call fcn.00482e40
jmp 0x4adde9