Function at 0x436920
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4470
call fcn.0052bf00
mov eax, dword [0x575494]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, edx
xor al, al
push edi
mov dword [ebp - 0x4464], ecx
mov dword [ebp - 0x446c], esi
mov dword [ebp - 0x4468], ebx
mov byte [ebp - 0x445d], al
test esi, esi
je 0x437033
cmp word [esi], 0
je 0x437033
test ebx, ebx
je 0x437033
mov eax, esi
call fcn.00437580
mov edi, eax
cmp edi, 0x550
je 0x4369c0
cmp edi, 0x560
je 0x4369c0
cmp edi, 0x570
je 0x4369c0
cmp edi, 0x574
je 0x4369c0
cmp edi, 0x578
je 0x4369c0
cmp edi, 0xda0
je 0x4369c0
cmp edi, 0xdc8
je 0x4369c0
cmp edi, 0xdd4
jne 0x43704d
mov eax, esi
mov esi, dword [ebp - 0x4464]
call fcn.004494e0
test al, al
je 0x43704d
cmp edi, 0x550
jne 0x436a53
mov ecx, edi
lea eax, [ebp - 0x1b1c]
mov byte [eax], 0
inc eax
dec ecx
jne 0x4369e5
mov edi, dword [ebp - 0x4464]
mov esi, 0x550
lea edx, [ebp - 0x1b1c]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov ax, word [ebp - 0x1afc]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0x1b18]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0x1af8]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
mov word [ebx + 0x20], ax
test edi, edi
je 0x436fe4
lea ebx, [ebp - 0x19e4]
call fcn.004375f0
jmp 0x436fe4
cmp edi, 0x560
jne 0x436af9
mov ecx, edi
lea eax, [ebp - 0x15cc]
mov byte [eax], 0
inc eax
dec ecx
jne 0x436a67
mov edi, dword [ebp - 0x4464]
mov esi, 0x560
lea edx, [ebp - 0x15cc]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov edx, dword [ebp - 0x15a8]
mov eax, dword [ebp - 0x15a4]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0x15c8]
rep movsd dword es:[edi], dword [esi]
mov cx, word [ebp - 0x15ac]
mov word [ebx + 0x20], cx
mov ecx, dword [ebp - 0x15a0]
mov dword [ebx + 0x24], edx
mov edx, dword [ebp - 0x159c]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0x1598]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
mov dword [ebx + 0x30], edx
test edi, edi
je 0x436fe4
lea ebx, [ebp - 0x1484]
call fcn.004375f0
jmp 0x436fe4
cmp edi, 0x570
jne 0x436bd3
mov ecx, edi
lea eax, [ebp - 0x57c]
lea ecx, [ecx]
mov byte [eax], 0
inc eax
dec ecx
jne 0x436b10
mov edi, dword [ebp - 0x4464]
mov esi, 0x570
lea edx, [ebp - 0x57c]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov ax, word [ebp - 0x55c]
mov edx, dword [ebp - 0x554]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0x578]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x558]
mov dword [ebx + 0x24], ecx
mov ecx, dword [ebp - 0x54c]
mov word [ebx + 0x20], ax
mov eax, dword [ebp - 0x550]
mov dword [ebx + 0x28], edx
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], ecx
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0x548]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
test edi, edi
je 0x436b9f
lea ebx, [ebp - 0x434]
call fcn.004375f0
mov ebx, dword [ebp - 0x4468]
lea ecx, [ebx + 0xdb0]
test ecx, ecx
je 0x436bb1
lea eax, [ebp - 0x1c]
call fcn.00437890
add ebx, 0xdd0
je 0x436fe4
mov dl, byte [ebp - 0xf]
mov al, byte [ebp - 0x10]
mov cl, byte [ebp - 0xe]
mov byte [ebx + 1], dl
mov byte [ebx], al
mov byte [ebx + 2], cl
jmp 0x436fe4
cmp edi, 0x574
jne 0x436cb2
mov ecx, edi
lea eax, [ebp - 0xaf4]
mov byte [eax], 0
inc eax
dec ecx
jne 0x436be7
mov edi, dword [ebp - 0x4464]
mov esi, 0x574
lea edx, [ebp - 0xaf4]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov eax, dword [ebp - 0xad0]
mov dx, word [ebp - 0xad4]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0xaf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xacc]
mov dword [ebx + 0x24], eax
mov eax, dword [ebp - 0xac4]
mov dword [ebx + 0x28], ecx
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0xac0]
mov word [ebx + 0x20], dx
mov edx, dword [ebp - 0xac8]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
mov dword [ebx + 0x2c], edx
mov dword [ebx + 0x30], eax
test edi, edi
je 0x436c76
lea ebx, [ebp - 0x9ac]
call fcn.004376a0
mov ebx, dword [ebp - 0x4468]
lea ecx, [ebx + 0xdb0]
lea eax, [ebp - 0x594]
call fcn.004378c0
add ebx, 0xdd0
je 0x436fe4
mov cl, byte [ebp - 0x583]
mov dl, byte [ebp - 0x584]
mov al, byte [ebp - 0x582]
mov byte [ebx + 1], cl
mov byte [ebx], dl
mov byte [ebx + 2], al
jmp 0x436fe4
cmp edi, 0x578
jne 0x436d77
mov ecx, edi
lea eax, [ebp - 0x106c]
mov byte [eax], 0
inc eax
dec ecx
jne 0x436cc6
mov edi, dword [ebp - 0x4464]
mov esi, 0x578
lea edx, [ebp - 0x106c]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov edx, dword [ebp - 0x1048]
mov eax, dword [ebp - 0x1044]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0x1068]
rep movsd dword es:[edi], dword [esi]
mov cx, word [ebp - 0x104c]
mov word [ebx + 0x20], cx
mov ecx, dword [ebp - 0x1040]
mov dword [ebx + 0x24], edx
mov edx, dword [ebp - 0x103c]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0x1038]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
mov dword [ebx + 0x30], edx
test edi, edi
je 0x436d55
lea ebx, [ebp - 0xf24]
call fcn.004376a0
mov ebx, dword [ebp - 0x4468]
lea ecx, [ebx + 0xdb0]
lea eax, [ebp - 0xb0c]
call fcn.004378c0
mov eax, dword [ebp - 0xafc]
mov ecx, dword [ebp - 0xaf8]
jmp 0x436fd8
cmp edi, 0xda0
jne 0x436e47
mov ecx, edi
lea eax, [ebp - 0x3694]
jmp 0x436d90
mov byte [eax], 0
inc eax
dec ecx
jne 0x436d90
mov edi, dword [ebp - 0x4464]
mov esi, 0xda0
lea edx, [ebp - 0x3694]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov eax, dword [ebp - 0x3670]
mov dx, word [ebp - 0x3674]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0x3690]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x366c]
mov dword [ebx + 0x24], eax
mov eax, dword [ebp - 0x3664]
mov dword [ebx + 0x28], ecx
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0x3660]
mov word [ebx + 0x20], dx
mov edx, dword [ebp - 0x3668]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
mov dword [ebx + 0x2c], edx
mov dword [ebx + 0x30], eax
test edi, edi
je 0x436e19
lea edx, [ebp - 0x354c]
call fcn.00437750
lea ecx, [ebx + 0xdb0]
lea eax, [ebp - 0x290c]
call fcn.004378c0
mov ecx, dword [ebp - 0x28fc]
mov edx, dword [ebp - 0x28f8]
mov dword [ebx + 0xdd0], ecx
mov dword [ebx + 0xdd4], edx
jmp 0x436fe4
cmp edi, 0xdc8
jne 0x436f15
mov ecx, edi
lea eax, [ebp - 0x445c]
jmp 0x436e60
mov byte [eax], 0
inc eax
dec ecx
jne 0x436e60
mov edi, dword [ebp - 0x4464]
mov esi, 0xdc8
lea edx, [ebp - 0x445c]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov ax, word [ebp - 0x443c]
mov edx, dword [ebp - 0x4434]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0x4458]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x4438]
mov dword [ebx + 0x24], ecx
mov ecx, dword [ebp - 0x442c]
mov word [ebx + 0x20], ax
mov eax, dword [ebp - 0x4430]
mov dword [ebx + 0x28], edx
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], ecx
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0x4428]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
mov ecx, 0x31a
lea esi, [ebp - 0x4314]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebx + 0xdb0]
lea eax, [ebp - 0x36ac]
call fcn.004378c0
mov edx, dword [ebp - 0x369c]
mov eax, dword [ebp - 0x3698]
mov dword [ebx + 0xdd0], edx
mov dword [ebx + 0xdd4], eax
jmp 0x436fe4
cmp edi, 0xdd4
jne 0x436feb
mov ecx, edi
lea eax, [ebp - 0x28f4]
lea esp, [esp]
mov byte [eax], 0
inc eax
dec ecx
jne 0x436f30
mov edi, dword [ebp - 0x4464]
mov esi, 0xdd4
lea edx, [ebp - 0x28f4]
call fcn.00449560
cmp eax, esi
jne 0x436feb
mov edx, dword [ebp - 0x28d0]
mov eax, dword [ebp - 0x28cc]
lea edi, [ebx + 4]
mov ecx, 7
lea esi, [ebp - 0x28f0]
rep movsd dword es:[edi], dword [esi]
mov cx, word [ebp - 0x28d4]
mov word [ebx + 0x20], cx
mov ecx, dword [ebp - 0x28c8]
mov dword [ebx + 0x24], edx
mov edx, dword [ebp - 0x28c4]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], ecx
lea edi, [ebx + 0x34]
mov ecx, 0x45
lea esi, [ebp - 0x28c0]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x148]
mov ecx, 0x31a
lea esi, [ebp - 0x27ac]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebx + 0xdb0]
mov dword [ebx + 0x30], edx
test ecx, ecx
je 0x436fcc
lea eax, [ebp - 0x1b44]
call fcn.00437900
mov eax, dword [ebp - 0x1b28]
mov ecx, dword [ebp - 0x1b24]
mov dword [ebx + 0xdd4], ecx
mov dword [ebx + 0xdd0], eax
mov byte [ebp - 0x445d], 1
mov esi, dword [ebp - 0x4464]
mov eax, dword [esi + 8]
cmp eax, 0xffffffff
je 0x437007
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 8], 0xffffffff
mov bl, byte [ebp - 0x445d]
test bl, bl
je 0x43701e
mov edx, dword [ebp - 0x446c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov al, bl
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0051eacc
mov esp, ebp
pop ebp
ret 4
mov dword [ecx + 0xc], 0x57
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0051eacc
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 8]
mov al, byte [ebp - 0x445d]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0051eacc
mov esp, ebp
pop ebp
ret 4