Function at 0x4401de
Capabilities:
Delete file

Disassembly:
push 0x2d4
mov eax, 0x4e2210
call fcn.004c1fb1
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x178]
call fcn.004337e8
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ebe
call fcn.004700f0
pop ecx
cmp eax, ebx
jne 0x440248
push 5
pop edi
lea esi, [ebp - 0x178]
call fcn.00435eca
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, edi
jmp 0x440639
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ebe
lea eax, [ebp - 0x250]
push eax
call fcn.00484a40
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1c8], ebx
jne 0x440288
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
push 0xe
jmp 0x44021f
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x250]
call fcn.0042a152
pop ecx
test al, al
jne 0x4402b5
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
push 0xf
jmp 0x44021f
push ecx
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ebe
call fcn.00470130
pop ecx
cmp eax, ebx
jne 0x4402ea
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
push 0x10
jmp 0x44021f
push ecx
mov dword [ebp - 0x180], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x180], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x178]
call fcn.004247ec
push edi
mov ecx, esi
call fcn.0047ec10
pop ecx
pop ecx
call fcn.004700f0
pop ecx
cmp eax, ebx
je 0x440606
push ecx
mov dword [ebp - 0x180], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x180], esp
push str.VirtReg.export
call fcn.004247ec
push edi
mov ecx, esi
call fcn.0047ec10
pop ecx
pop ecx
call fcn.004700f0
pop ecx
cmp eax, ebx
je 0x440606
push ecx
mov eax, esp
mov dword [ebp - 0x180], esp
push dword [ebp - 0x16c]
push str._s.VirtFiles.db
push eax
call fcn.0046da40
lea eax, [ebp - 0x17c]
add esp, 0xc
push eax
call fcn.0046d110
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x17c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ebe
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x184], esp
mov esi, str.Main
push esi
call fcn.004247ec
push 4
pop ecx
lea edi, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.00486e30
cmp eax, ebx
je 0x4403fa
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
push 8
jmp 0x44021f
lea eax, [ebp - 0x250]
call fcn.00485920
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x1bc], ebx
lea edi, [ebp - 0x1b8]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x184], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1bc]
call fcn.00424ebe
mov ecx, edi
call fcn.00479350
add esp, 0xc
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x1a0], ebx
lea edi, [ebp - 0x19c]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x184], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
push str.VirtFiles.db
call fcn.004247ec
push edi
lea ecx, [ebp - 0x178]
call fcn.0047ec10
pop ecx
pop ecx
lea ecx, [ebp - 0x1a0]
call fcn.00479350
add esp, 0xc
lea eax, [ebp - 0x1bc]
push eax
push 0x43dba0
push ebx
push dword [ebp - 0x198]
lea eax, [ebp - 0x1a0]
push eax
call fcn.0048edb0
mov ebx, dword [ebp - 0x17c]
lea eax, [ebp - 0x1bc]
push eax
call fcn.0048ef30
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x184], esp
mov ecx, esp
push eax
call fcn.00424ebe
lea eax, [ebp - 0x2e0]
push eax
call fcn.00484a40
mov byte [ebp - 4], 6
cmp dword [ebp - 0x258], 0
jne 0x440521
lea eax, [ebp - 0x2e0]
mov byte [ebp - 4], 4
call fcn.0042795c
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
push 7
jmp 0x44021f
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
push esi
call fcn.004247ec
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ebe
lea eax, [ebp - 0x2e0]
push eax
mov byte [ebp - 4], 6
call fcn.00486650
test eax, eax
lea eax, [ebp - 0x2e0]
je 0x440583
call fcn.00485920
lea eax, [ebp - 0x2e0]
mov byte [ebp - 4], 4
call fcn.0042795c
jmp 0x4403d6
call fcn.00485920
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2e0]
je 0x4405bf
call fcn.0042795c
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
push 0xa
jmp 0x44021f
call fcn.0042795c
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
lea esi, [ebp - 0x178]
call fcn.00435eca
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
jmp 0x440639
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0042795c
lea esi, [ebp - 0x178]
call fcn.00435eca
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
push 6
pop eax
call fcn.004c2034
ret