Function at 0x49f944
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x15
push 0
push 0
dec ecx
jne 0x49f94c
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x49fc6b
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1c]
mov eax, dword [0x4a3ef4]
mov eax, dword [eax]
call fcn.00466b0c
mov eax, dword [ebp - 0x1c]
mov edx, dword [0x4a9ed8]
call fcn.0049fe0c
test al, al
jne 0x49f9d4
xor edx, edx
push ebp
push 0x49f9bb
push dword fs:[edx]
mov dword fs:[edx], esp
mov ebx, dword [0x4a9ed8]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
call fcn.004055a0
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49f9c5
mov eax, 0x49fc84
call fcn.00439a2c
jmp 0x49fc22
push dword [0x4a9ed4]
lea edx, [ebp - 0x2c]
mov eax, dword [0x4a9ebc]
call fcn.00448750
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.0049f504
push dword [ebp - 0x28]
push dword [0x4a9ec0]
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.004054a4
mov edx, dword [ebp - 0x24]
mov eax, dword [0x4a9ebc]
mov eax, dword [eax + 0x364]
call fcn.00470344
mov eax, dword [0x4a9ebc]
mov eax, dword [eax + 0x364]
or edx, 0xffffffff
call fcn.0046fd1c
lea edx, [ebp - 0x10]
mov eax, dword [0x4a9ebc]
mov eax, dword [eax + 0x364]
call fcn.0046ff54
push 0x49fc90
push 0x49fc9c
push 0x49fcac
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00410acc
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00410acc
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00410acc
add esp, 0xc
lea eax, [ebp - 0x3c]
call fcn.0041156c
test eax, eax
jle 0x49fb03
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 1
xor eax, eax
push ebp
push 0x49faf1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x49fcbc
mov eax, dword [ebp - 0x14]
push eax
push 0x49fcc8
push 0x49fcac
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00410acc
add esp, 0xc
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00410acc
add esp, 0x10
lea eax, [ebp - 0x6c]
push eax
push 0
call fcn.00410acc
add esp, 0x10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49fafb
inc dword [ebp - 0x14]
dec dword [ebp - 0x18]
jne 0x49fa96
mov eax, dword [0x4a9ebc]
mov eax, dword [eax + 0x364]
or edx, 0xffffffff
call fcn.0046fd1c
xor eax, eax
push ebp
push 0x49fb92
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
push 0x49fcd8
push 0x49fce4
push 0x49fcf8
lea edx, [ebp - 0xac]
mov eax, dword [0x4a9ebc]
mov eax, dword [eax + 0x364]
call fcn.0046ff54
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00410acc
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00410acc
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
push 0
call fcn.00410acc
add esp, 0x10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49fb9c
mov eax, dword [0x4a9ecc]
mov edx, 0x49fd10
call fcn.00405538
je 0x49fbc8
cmp dword [0x4a9ee0], 0
jne 0x49fbc8
mov eax, dword [0x4a9ebc]
mov eax, dword [eax + 0x360]
mov dl, 1
call fcn.00437c1c
mov eax, dword [0x4a9ebc]
mov eax, dword [eax + 0x368]
xor edx, edx
call fcn.00448670
xor edx, edx
push ebp
push 0x49fc18
push dword fs:[edx]
mov dword fs:[edx], esp
mov ebx, dword [0x4a9ed8]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
call fcn.004055a0
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
push 0
push 2
call sub.shell32.dll_SHAddToRecentDocs
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49fc22
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49fc72
lea eax, [ebp - 0xac]
mov edx, dword [0x4010b0]
mov ecx, 8
call fcn.00405dfc
lea eax, [ebp - 0x2c]
call fcn.00405110
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00405134
lea eax, [ebp - 0x1c]
call fcn.00405110
lea eax, [ebp - 0x10]
call fcn.00410ac4
ret