Function at 0x482904
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push ebx
push esi
push edi
call fcn.004041fc
je 0x482faa
mov ebx, eax
xor eax, eax
push ebp
push 0x482fa1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
xor edx, edx
call fcn.00423c68
push 0
call sub.ole32.dll_OleInitialize
call fcn.00480724
xor eax, eax
mov dword [ebx + 0x54], eax
push 0
push 0
mov cl, 1
xor edx, edx
xor eax, eax
call fcn.004265f0
xor ecx, ecx
xor edx, edx
call fcn.004265b4
mov dword [ebx + 0x98], eax
nop
mov eax, dword [ebx + 0x98]
mov dword [eax + 0xbc], ebx
mov dword [eax + 0xb8], 0x4809b4
nop
mov eax, dword [ebx + 0x98]
mov edx, 0x482fbc
call fcn.004257f4
nop
mov edx, dword [0x651c88]
mov edx, dword [edx]
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x80]
call fcn.00425670
nop
mov eax, dword [0x651e98]
cmp byte [eax], 0
je 0x4829b5
mov eax, ebx
call fcn.0048092c
push 0x7f00
mov eax, dword [0x6557f8]
push eax
call sub.user32.dll_LoadIconA
push eax
push 0
push 0x80
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_SendMessageA
push 0x4e
call sub.user32.dll_GetSystemMetrics
mov esi, eax
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x80]
sub esi, dword [eax + 0x24]
sar esi, 1
jns 0x4829fb
adc esi, 0
push 0x4f
call sub.user32.dll_GetSystemMetrics
mov edi, eax
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x80]
sub edi, dword [eax + 0x28]
sar edi, 1
jns 0x482a1a
adc edi, 0
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x80]
mov eax, dword [eax + 0x24]
push eax
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x80]
mov eax, dword [eax + 0x28]
push eax
mov eax, dword [ebx + 0x98]
mov ecx, edi
mov edx, esi
call fcn.004265b4
mov eax, dword [ebx + 0x98]
xor ecx, ecx
xor edx, edx
call fcn.00426420
mov ecx, dword [0x651ce0]
mov ecx, dword [ecx]
mov edx, dword [0x651d84]
mov edx, dword [edx]
call fcn.00425ad8
mov dword [ebx + 0x58], eax
mov edx, dword [0x651c44]
mov edx, dword [edx]
mov eax, dword [ebx + 0x58]
call fcn.004262f0
mov eax, dword [ebx + 0x58]
mov edx, 0xffff
call fcn.00425c90
mov eax, dword [ebx + 0x58]
mov dl, 1
call fcn.00426390
call sub.kernel32.dll_GetCurrentProcessId
mov edx, dword [0x6519d8]
mov edx, dword [edx]
mov dword [edx], eax
mov eax, dword [0x651fd8]
movzx eax, byte [eax]
xor al, 1
mov edx, dword [0x6519d8]
mov edx, dword [edx]
mov byte [edx + 4], al
mov eax, dword [ebx + 0x98]
xor ecx, ecx
xor edx, edx
call fcn.00426420
mov ecx, dword [0x651d6c]
mov ecx, dword [ecx]
mov edx, dword [0x651dfc]
mov edx, dword [edx]
call fcn.00425ad8
mov dword [ebx + 0x60], eax
mov edx, dword [0x651cd0]
mov edx, dword [edx]
mov eax, dword [ebx + 0x60]
call fcn.004262f0
mov eax, dword [ebx + 0x60]
mov edx, 0xbdd0ee
call fcn.00425c90
mov eax, dword [ebx + 0x60]
mov dl, 1
call fcn.00426390
mov eax, dword [0x652020]
mov eax, dword [eax]
xor edx, edx
push edx
push eax
lea eax, [ebp - 8]
call fcn.00422150
mov ecx, dword [ebp - 8]
lea eax, [ebp - 4]
mov edx, 0x482fd0
call fcn.004056a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x60]
call fcn.004257f4
mov eax, dword [ebx + 0x98]
xor edx, edx
call fcn.0042fac0
mov dword [ebx + 0x68], eax
mov edx, dword [0x651e30]
mov edx, dword [edx]
mov eax, dword [ebx + 0x68]
call fcn.004259f4
mov edx, dword [0x651d90]
mov edx, dword [edx]
mov eax, dword [ebx + 0x68]
call fcn.00425a40
mov edx, dword [0x651d0c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x68]
call fcn.004262f0
mov edx, dword [0x651b9c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x68]
call fcn.00425c90
mov eax, dword [ebx + 0x68]
mov dl, 1
call fcn.00426390
mov edx, dword [0x651fc8]
mov edx, dword [edx]
mov eax, dword [ebx + 0x68]
call fcn.004257f4
mov eax, dword [ebx + 0x68]
mov dword [eax + 0x44], ebx
mov dword [eax + 0x40], 0x482770
mov eax, dword [ebx + 0x98]
xor edx, edx
call fcn.0042fac0
mov dword [ebx + 0x94], eax
mov edx, dword [0x651c80]
mov edx, dword [edx]
mov eax, dword [ebx + 0x94]
call fcn.004259f4
mov edx, dword [0x651d3c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x94]
call fcn.00425a40
mov edx, dword [0x651b24]
mov edx, dword [edx]
mov eax, dword [ebx + 0x94]
call fcn.004262f0
mov edx, dword [0x651afc]
mov edx, dword [edx]
mov eax, dword [ebx + 0x94]
call fcn.00425aac
mov eax, dword [ebx + 0x98]
xor edx, edx
call fcn.0042fac0
mov dword [ebx + 0x90], eax
mov edx, dword [0x651e80]
mov edx, dword [edx]
mov eax, dword [ebx + 0x90]
call fcn.004259f4
mov edx, dword [0x651f20]
mov edx, dword [edx]
mov eax, dword [ebx + 0x90]
call fcn.00425a40
mov edx, dword [0x651d44]
mov edx, dword [edx]
mov eax, dword [ebx + 0x90]
call fcn.004262f0
mov edx, dword [0x651d24]
mov edx, dword [edx]
mov eax, dword [ebx + 0x90]
call fcn.00425aac
mov eax, dword [0x651abc]
cmp dword [eax], 0
je 0x482c8b
mov edx, dword [0x651abc]
mov edx, dword [edx]
mov eax, dword [ebx + 0x90]
call fcn.0042fc5c
jmp 0x482c98
mov eax, dword [ebx + 0x90]
xor edx, edx
call fcn.004262f0
mov eax, dword [0x651b20]
cmp dword [eax], 0
je 0x482cb5
mov edx, dword [0x651b20]
mov edx, dword [edx]
mov eax, dword [ebx + 0x90]
call fcn.0042fcc0
mov eax, dword [0x65211c]
cmp dword [eax], 0
je 0x482cd4
mov edx, dword [0x65211c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x94]
call fcn.0042fc5c
jmp 0x482ce1
mov eax, dword [ebx + 0x94]
xor edx, edx
call fcn.004262f0
mov eax, dword [0x651960]
cmp dword [eax], 0
je 0x482cfe
mov edx, dword [0x651960]
mov edx, dword [edx]
mov eax, dword [ebx + 0x94]
call fcn.0042fcc0
mov eax, dword [ebx + 0x98]
xor edx, edx
call fcn.0042fac0
mov dword [ebx + 0x64], eax
mov edx, dword [0x651fe8]
mov edx, dword [edx]
mov eax, dword [ebx + 0x64]
call fcn.00425a40
mov edx, dword [0x6520a8]
mov edx, dword [edx]
mov eax, dword [ebx + 0x64]
call fcn.004259f4
mov edx, dword [0x651f38]
mov edx, dword [edx]
mov eax, dword [ebx + 0x64]
call fcn.004262f0
mov eax, dword [ebx + 0x64]
mov edx, 0xbdd0ee
call fcn.00425c90
mov eax, dword [ebx + 0x64]
mov dl, 1
call fcn.00426390
mov eax, dword [ebx + 0x64]
mov edx, 0x482fdc
call fcn.004257f4
mov eax, dword [ebx + 0x64]
mov dword [eax + 0x44], ebx
mov dword [eax + 0x40], 0x482718
mov eax, dword [ebx + 0x98]
xor ecx, ecx
xor edx, edx
call fcn.00426420
mov ecx, dword [0x651edc]
mov ecx, dword [ecx]
mov edx, dword [0x651f68]
mov edx, dword [edx]
call fcn.00425ad8
mov dword [ebx + 0x5c], eax
mov edx, dword [0x651e38]
mov edx, dword [edx]
mov eax, dword [ebx + 0x5c]
call fcn.004262f0
mov eax, dword [ebx + 0x5c]
mov edx, 0xbdd0ee
call fcn.00425c90
mov eax, dword [ebx + 0x5c]
mov dl, 1
call fcn.00426390
mov eax, dword [ebx + 0x5c]
xor edx, edx
call fcn.00425d00
mov eax, dword [ebx + 0x90]
mov dl, 1
call fcn.00426390
mov eax, dword [ebx + 0x90]
mov dword [eax + 0x44], ebx
mov dword [eax + 0x40], 0x482854
mov eax, dword [ebx + 0x94]
mov dl, 1
call fcn.00426390
mov eax, dword [ebx + 0x94]
mov dword [eax + 0x44], ebx
mov dword [eax + 0x40], 0x4827fc
mov edx, ebx
mov eax, dword [ebx + 0x98]
call fcn.00423cb4
mov ecx, 0x47f2b8
mov edx, ebx
lea eax, [ebx + 0x1c]
call fcn.00422e98
lea eax, [ebx + 0x1c]
push eax
push 0x64
push 0x58
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_SetTimer
mov ax, 0x133f
call fcn.00403474
mov eax, 0x480df8
mov edx, dword [0x651a04]
mov dword [edx], eax
mov eax, 0x480cfc
mov edx, dword [0x652098]
mov dword [edx], eax
mov eax, 0x480eac
mov edx, dword [0x651f80]
mov dword [edx], eax
mov eax, ebx
call fcn.00481fe4
mov eax, ebx
mov edx, 0xc8
call fcn.0048054c
mov ecx, 0x47f160
mov edx, ebx
lea eax, [ebx + 0x2e]
call fcn.00422e98
mov ecx, 0x4828e0
mov edx, ebx
lea eax, [ebx + 0x7e]
call fcn.00422e98
mov ecx, 0x47ef58
mov edx, ebx
lea eax, [ebx + 0x6c]
call fcn.00422e98
lea eax, [ebx + 0x2e]
push eax
push 0x3e8
push 0x59
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_SetTimer
lea eax, [ebx + 0x6c]
push eax
push 0x3e8
push 0xde
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_SetTimer
push 1
call sub.kernel32.dll_Sleep_1
push 1
call sub.kernel32.dll_Sleep_1
lea eax, [ebx + 0x7e]
push eax
push 0xea60
push 0xe9
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_SetTimer
mov eax, dword [0x651adc]
mov byte [eax], 1
push 0x13
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [0x651e34]
mov eax, dword [eax]
mov edx, 0x482ff0
call fcn.004057b4
je 0x482f4e
mov eax, dword [0x651e34]
mov eax, dword [eax]
call fcn.0040581c
push eax
call sub.kernel32.dll_DeleteFileA
mov eax, dword [ebx + 0x98]
mov edx, dword [eax + 0x80]
mov ecx, dword [edx + 0x24]
push ecx
mov edx, dword [edx + 0x28]
push edx
mov ecx, edi
mov edx, esi
call fcn.004265b4
push 0x13
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_SetWindowPos
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x482fa8
lea eax, [ebp - 8]
mov edx, 2
call fcn.004053b0
ret
pop edi
pop esi
pop ebx
pop ecx
pop ecx
pop ebp
ret