Function at 0x4e84f0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x46
push 0
push 0
dec ecx
jne 0x4e84f9
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
call fcn.00405738
mov eax, dword [ebp - 8]
call fcn.00405738
xor eax, eax
push ebp
push 0x4e8997
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x4e8850
push dword fs:[edx]
mov dword fs:[edx], esp
xor esi, esi
mov eax, dword [ebp - 4]
test eax, eax
je 0x4e8549
sub eax, 4
mov eax, dword [eax]
mov ebx, eax
cmp ebx, 0
jl 0x4e8582
lea eax, [ebp - 0x1f8]
push eax
mov ecx, 1
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.004057a8
mov eax, dword [ebp - 0x1f8]
mov edx, 0x4e89b0
call fcn.00405694
jne 0x4e857c
mov esi, ebx
jmp 0x4e8582
dec ebx
cmp ebx, 0xffffffff
jne 0x4e8550
lea eax, [ebp - 0xc]
push eax
mov ecx, esi
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.004057a8
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.0040531c
lea eax, [ebp - 0x10]
mov ecx, esi
mov edx, 1
call fcn.004057e8
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.0040531c
call fcn.0040d078
fsub dword [0x4e89b4]
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0x18]
mov edx, 0x4e89c0
call fcn.0040dc78
lea eax, [ebp - 0x1fc]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.004057a8
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
call fcn.00405594
mov edx, dword [ebp - 0x14]
mov eax, 0x4e89d0
call fcn.0040588c
mov ecx, eax
dec ecx
lea eax, [ebp - 0x14]
mov edx, 1
call fcn.004057e8
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea eax, [ebp - 0x200]
mov edx, 3
call fcn.00405608
mov eax, dword [ebp - 0x200]
call fcn.0040aaa4
test al, al
je 0x4e8846
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0x39c]
lea eax, [ebp - 0x204]
mov ecx, 0x4e89dc
call fcn.00405594
mov eax, dword [ebp - 0x204]
call fcn.0040aac8
test al, al
jne 0x4e86c2
xor eax, eax
push ebp
push 0x4e86b8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0x39c]
lea eax, [ebp - 0x208]
mov ecx, 0x4e89dc
call fcn.00405594
mov eax, dword [ebp - 0x208]
call fcn.00403080
call fcn.00402f38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e86c2
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax + 0x36c]
mov eax, ebx
call fcn.004b7e28
push dword [ebp - 0x210]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea eax, [ebp - 0x20c]
mov edx, 3
call fcn.00405608
mov eax, dword [ebp - 0x20c]
push eax
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea eax, [ebp - 0x214]
mov edx, 3
call fcn.00405608
mov edx, dword [ebp - 0x214]
mov eax, ebx
pop ecx
call fcn.004b7c7c
push 0
lea edx, [ebp - 0x21c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x36c]
call fcn.004b7e28
push dword [ebp - 0x21c]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea eax, [ebp - 0x218]
mov edx, 3
call fcn.00405608
mov eax, dword [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x39c]
push 0x4e89dc
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea eax, [ebp - 0x220]
mov edx, 4
call fcn.00405608
mov edx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x1c]
pop ecx
call fcn.004eef34
xor edx, edx
push ebp
push 0x4e87f0
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x228]
call fcn.004b70dc
push dword [ebp - 0x228]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea eax, [ebp - 0x224]
mov edx, 3
call fcn.00405608
mov ebx, dword [ebp - 0x224]
mov dword [ebp - 0x22c], ebx
mov eax, dword [ebp - 0x22c]
call fcn.00405748
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e87fa
xor eax, eax
push ebp
push 0x4e883c
push dword fs:[eax]
mov dword fs:[eax], esp
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea eax, [ebp - 0x230]
mov edx, 3
call fcn.00405608
mov eax, dword [ebp - 0x230]
call fcn.00405748
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e8846
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e885a
xor edx, edx
push ebp
push 0x4e8952
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x1f4]
call fcn.00403728
xor edx, edx
push ebp
push 0x4e8941
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
call fcn.0040aaa4
test al, al
je 0x4e88a2
lea eax, [ebp - 0x1f4]
call fcn.004034c4
call fcn.00402f38
jmp 0x4e88b2
lea eax, [ebp - 0x1f4]
call fcn.004034b8
call fcn.00402f38
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040531c
xor edx, edx
push ebp
push 0x4e890d
push dword fs:[edx]
mov dword fs:[edx], esp
push dword [ebp - 0xc]
push 0x4e89ec
push 0x4e89f8
lea eax, [ebp - 0x234]
mov edx, 3
call fcn.00405608
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x1f4]
call fcn.00405a60
call fcn.004037d8
call fcn.00402f38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e8923
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e8948
lea eax, [ebp - 0x1f4]
call fcn.004037f0
call fcn.00402f38
ret