Function at 0x419220
Capabilities:
Delete file
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x44872c]
push esi
push edi
push 0
push 0
push 0
push eax
call dword [sym.imp.MSVCR100.dll__fseeki64]
mov ecx, dword [0x44872c]
mov esi, dword [sym.imp.MSVCR100.dll_fread]
push ecx
push 1
lea edx, [ebp - 0xc]
push 6
push edx
call esi
push 6
lea eax, [ebp - 0xc]
push str.SSHC3Y
push eax
call dword [sym.imp.MSVCR100.dll_strncmp]
add esp, 0x2c
test eax, eax
je 0x4192be
push str.Not_a_valid_mdm_file._n
call dword [sym.imp.MSVCR100.dll_printf]
call fcn.00406fe0
mov ecx, dword [0x4596c4]
mov esi, dword [sym.imp.MSVCR100.dll_remove]
push ecx
mov dword [0x443e58], 1
call esi
mov edx, dword [0x448bc8]
push edx
call esi
add esp, 0xc
cmp dword [0x443e58], 0
je 0x4192b6
call fcn.00406b90
push 0x64
call dword [sym.imp.MSVCR100.dll_exit]
mov eax, dword [0x44872c]
push eax
push 1
push 8
push 0x443d28
call esi
fld qword [0x443d28]
mov ecx, dword [0x44872c]
fstp dword [0x443d20]
push ecx
push 1
push 4
push 0x453180
call esi
mov edx, dword [0x44872c]
push edx
push 1
push 4
push 0x448664
call esi
mov eax, dword [0x44872c]
push eax
push 1
push 4
push 0x448ba8
call esi
mov ecx, dword [0x44872c]
add esp, 0x40
push ecx
push 1
push 4
push 0x448694
call esi
mov edx, dword [0x44872c]
push edx
push 1
push 4
push 0x463b14
call esi
mov eax, dword [0x44872c]
push eax
push 1
push 4
push 0x453198
call esi
mov ecx, dword [0x44872c]
push ecx
push 1
push 4
push 0x463b20
call esi
mov edx, dword [0x44872c]
add esp, 0x40
push edx
push 1
push 4
push 0x448690
call esi
mov eax, dword [0x44872c]
push eax
push 1
push 4
push 0x453154
call esi
mov ecx, dword [0x44872c]
push ecx
push 1
push 4
push 0x448660
call esi
mov edx, dword [0x44872c]
push edx
push 1
push 4
push 0x453160
call esi
mov ecx, dword [0x453198]
xor eax, eax
add esp, 0x40
cmp ecx, dword [0x463b20]
setle al
inc eax
mov dword [0x45317c], eax
mov eax, dword [0x453160]
test eax, eax
jns 0x4193d5
neg eax
mov dword [0x448520], 1
jmp 0x4193df
mov dword [0x448520], 0
mov edx, dword [0x44872c]
push edx
push 1
push 4
push 0x453160
mov dword [0x453194], eax
call esi
mov edi, dword [0x453180]
inc edi
imul edi, edi, 0xd
add esp, 0x10
call fcn.00406e80
mov ecx, dword [0x43c138]
mov dword [eax], ecx
mov edx, dword [0x43c13c]
mov dword [eax + 4], edx
mov ecx, dword [0x43c140]
mov dword [eax + 8], ecx
movzx edx, byte [0x43c144]
mov byte [eax + 0xc], dl
mov edi, dword [0x448664]
inc edi
imul edi, edi, 0xd
mov dword [0x45315c], eax
mov dword [0x448650], eax
call fcn.00406e80
mov ecx, dword [str.INTRCPT2]
mov dword [eax], ecx
mov edx, dword [0x43c14c]
mov dword [eax + 4], edx
mov ecx, dword [0x43c150]
mov dword [eax + 8], ecx
movzx edx, byte [0x43c154]
mov byte [eax + 0xc], dl
mov edi, dword [0x448ba8]
inc edi
imul edi, edi, 0xd
mov dword [0x448bc0], eax
mov dword [0x448654], eax
call fcn.00406e80
mov ecx, dword [str._ICPTROW]
mov dword [eax], ecx
mov edx, dword [0x43c15c]
mov dword [eax + 4], edx
mov ecx, dword [0x43c160]
mov dword [eax + 8], ecx
movzx edx, byte [0x43c164]
mov byte [eax + 0xc], dl
mov edi, dword [0x448694]
inc edi
imul edi, edi, 0xd
mov dword [0x4444d0], eax
mov dword [0x448658], eax
call fcn.00406e80
mov ecx, dword [str._ICPTCOL]
mov dword [eax], ecx
mov edx, dword [0x43c16c]
mov dword [eax + 4], edx
mov ecx, dword [0x43c170]
mov dword [eax + 8], ecx
movzx edx, byte [0x43c174]
mov byte [eax + 0xc], dl
mov ecx, dword [0x453180]
inc ecx
imul ecx, ecx, 0xd
mov dword [0x4595a0], eax
mov dword [0x44865c], eax
test ecx, ecx
je 0x419515
mov eax, dword [0x44872c]
push eax
push 1
push ecx
mov ecx, dword [0x45315c]
push ecx
call esi
mov eax, dword [0x4595a0]
add esp, 0x10
mov ecx, dword [0x448664]
inc ecx
imul ecx, ecx, 0xd
test ecx, ecx
je 0x41953d
mov edx, dword [0x44872c]
mov eax, dword [0x448bc0]
push edx
push 1
push ecx
push eax
call esi
mov eax, dword [0x4595a0]
add esp, 0x10
mov ecx, dword [0x448ba8]
inc ecx
imul ecx, ecx, 0xd
test ecx, ecx
je 0x419565
mov edx, dword [0x44872c]
mov eax, dword [0x4444d0]
push edx
push 1
push ecx
push eax
call esi
mov eax, dword [0x4595a0]
add esp, 0x10
mov ecx, dword [0x448694]
inc ecx
imul ecx, ecx, 0xd
test ecx, ecx
je 0x419583
mov edx, dword [0x44872c]
push edx
push 1
push ecx
push eax
call esi
add esp, 0x10
mov eax, dword [0x44872c]
push eax
push 1
lea ecx, [ebp - 0x10]
push 4
push ecx
call esi
mov edi, dword [ebp - 0x10]
add edi, edi
add esp, 0x10
add edi, edi
call fcn.00406e80
mov ecx, dword [ebp - 0x10]
lea edx, [eax + ecx]
mov dword [0x4444b4], edx
add edx, ecx
mov dword [0x4444b8], edx
add edx, ecx
mov dword [0x4444b0], eax
mov dword [0x4444bc], edx
test ecx, ecx
je 0x41962e
mov edx, dword [0x44872c]
push edx
push 1
push ecx
push eax
call esi
mov eax, dword [ebp - 0x10]
add esp, 0x10
test eax, eax
je 0x41962e
mov ecx, dword [0x44872c]
mov edx, dword [0x4444b4]
push ecx
push 1
push eax
push edx
call esi
mov eax, dword [ebp - 0x10]
add esp, 0x10
test eax, eax
je 0x41962e
mov ecx, dword [0x44872c]
mov edx, dword [0x4444b8]
push ecx
push 1
push eax
push edx
call esi
mov eax, dword [ebp - 0x10]
add esp, 0x10
test eax, eax
je 0x41962e
mov ecx, dword [0x44872c]
mov edx, dword [0x4444bc]
push ecx
push 1
push eax
push edx
call esi
add esp, 0x10
mov eax, dword [0x448c78]
mov ecx, dword [0x448ba8]
mov edx, dword [0x448694]
mov dword [eax + 0x74], ecx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov dword [eax + 0xac], edx
pop esi
call fcn.004391bc
mov esp, ebp
pop ebp
ret