Function at 0x438640
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x48ac2b
mov eax, dword fs:[0]
push eax
sub esp, 0x23c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b9b30]
xor eax, esp
push eax
lea eax, [esp + 0x250]
mov dword fs:[0], eax
xor edi, edi
mov dword [esp + 0x2c], edi
call fcn.00439730
mov esi, dword [esp + 0x264]
push esi
call fcn.004346e0
add esp, 4
test eax, eax
jne 0x43869d
push esi
call fcn.00434a30
add esp, 4
test al, al
je 0x438732
lea ecx, [esp + 0x14]
call fcn.00426910
mov dword [esp + 0x258], edi
mov dword [esp + 0x30], 1
mov dword [esp + 0x34], 0x64
xor esi, esi
nop
push 0x216
lea eax, [esp + 0x3c]
push edi
push eax
call fcn.00466350
mov ecx, dword [esp + esi*4 + 0x3c]
add esp, 0xc
lea edx, [esp + 0x38]
mov dword [esp + 0x38], ecx
push edx
lea ecx, [esp + 0x18]
call fcn.00436e70
inc esi
cmp esi, 2
jb 0x4386c0
mov ecx, dword [esp + 0x260]
lea eax, [esp + 0x14]
push eax
push ecx
call fcn.00434e20
add esp, 8
test eax, eax
jne 0x438739
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x438719
push eax
call fcn.00443849
add esp, 4
mov edx, dword [esp + 0x14]
push edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
call fcn.00443849
add esp, 4
xor eax, eax
jmp 0x438ca5
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x438b7f
xor ebx, ebx
cmp edi, eax
jb 0x43876f
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebx + ecx], 1
je 0x43879a
inc edi
add ebx, 0x216
cmp edi, eax
jb 0x43876f
jmp 0x438b7f
cmp edi, eax
jb 0x4387ab
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
mov ebx, edi
imul ebx, ebx, 0x216
mov ebp, dword [ebx + ecx + 4]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4387d7
call fcn.0046889f
mov ecx, dword [esp + 0x20]
mov ecx, dword [ebx + ecx + 8]
push 1
push 0x20100506
push ecx
push ebp
call fcn.00434660
add esp, 0x10
test eax, eax
je 0x438b77
test ebp, ebp
je 0x438b77
mov ecx, dword [esp + 0x26c]
lea eax, [ebp + 0x1e4]
mov ebp, dword [esp + 0x268]
push ecx
push ebp
push eax
lea edx, [esp + 0x20]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x26c]
push edx
push eax
call fcn.004351b0
add esp, 0x14
test eax, eax
je 0x438b77
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x438998
xor ebx, ebx
cmp edi, eax
jb 0x43886c
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 1
je 0x43896d
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43889c
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 0x64
je 0x43896d
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4388cc
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x43896d
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4388fd
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 8], 0
je 0x43896d
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43892a
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ebp, [ebx + ecx]
cmp edi, eax
jb 0x43894d
call fcn.0046889f
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
mov eax, dword [ebp + 8]
mov ecx, dword [ebx + ecx + 4]
push 0x20
push edx
push eax
push ecx
call fcn.0043abc0
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
add esp, 0x10
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x43886c
mov ebp, dword [esp + 0x268]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x438b6d
xor ebx, ebx
jmp 0x4389c7
mov ebp, dword [esp + 0x268]
cmp edi, eax
jb 0x4389d8
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 0x64
jne 0x438b49
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438a08
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x438ae5
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438a39
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 8], 0
je 0x438ae5
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438a6a
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ebp, [ebx + ecx]
cmp edi, eax
jb 0x438a8d
call fcn.0046889f
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x270]
mov eax, dword [esp + 0x26c]
push edx
mov edx, dword [esp + 0x26c]
push eax
mov eax, dword [esp + 0x26c]
push edx
mov edx, dword [ebp + 8]
push eax
mov eax, dword [ebx + ecx + 4]
push edx
push eax
call fcn.004306e0
add esp, 0x18
test eax, eax
je 0x438b77
cmp dword [esp + 0x268], 0
je 0x438b41
mov ecx, dword [esp + 0x26c]
push ecx
push 0
push 0
call dword [esp + 0x274]
jmp 0x438b3a
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438b05
call fcn.0046889f
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x270]
mov esi, dword [esp + 0x26c]
mov eax, dword [esp + 0x264]
push edx
push esi
push ebp
push eax
lea ecx, [ebx + ecx + 0xc]
push ecx
call fcn.004305f0
add esp, 0x14
test eax, eax
je 0x438b77
test ebp, ebp
je 0x438b41
push esi
push 0
push 0
call ebp
add esp, 0xc
test al, al
je 0x438b77
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x4389c0
mov dword [esp + 0x2c], 1
jmp 0x438b7f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x438c79
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenW]
xor ebx, ebx
cmp edi, eax
jb 0x438bb5
call fcn.0046889f
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x438bf1
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438bdc
call fcn.0046889f
mov ecx, dword [esp + 0x20]
mov ecx, dword [ebx + ecx + 4]
push ecx
call fcn.00466735
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 4
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438c11
call fcn.0046889f
mov ecx, dword [esp + 0x20]
lea ecx, [ebx + ecx + 0xc]
push ecx
call ebp
test eax, eax
je 0x438c4d
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x20]
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438c3e
call fcn.0046889f
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x438bb5
xor esi, esi
cmp ecx, esi
je 0x438c88
push ecx
call fcn.00443849
add esp, 4
mov eax, dword [esp + 0x14]
push eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
call fcn.00443849
mov eax, dword [esp + 0x30]
add esp, 4
mov ecx, dword [esp + 0x250]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret