Function at 0x44fe79
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5372ed
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x66c
push esi
mov dword [ebp - 0x668], ecx
push 1
mov ecx, dword [ebp - 0x668]
call fcn.0044506d
mov ecx, dword [ebp - 0x668]
add ecx, 0x50
call fcn.0042a619
mov eax, dword [ebp - 0x668]
mov dword [eax + 0x22c], 0
mov ecx, dword [ebp - 0x668]
cmp dword [ecx + 0xc0], 0
je 0x44ff2e
mov edx, dword [ebp - 0x668]
mov eax, dword [edx + 0xc0]
mov dword [ebp - 0x658], eax
mov ecx, dword [ebp - 0x658]
mov dword [ebp - 0x654], ecx
cmp dword [ebp - 0x654], 0
je 0x44ff14
push 1
mov ecx, dword [ebp - 0x654]
call fcn.00409070
mov dword [ebp - 0x66c], eax
jmp 0x44ff1e
mov dword [ebp - 0x66c], 0
mov edx, dword [ebp - 0x668]
mov dword [edx + 0xc0], 0
mov eax, dword [ebp - 0x668]
mov dword [eax + 0x208], 0xffffffff
mov ecx, dword [ebp - 0x668]
mov dword [ecx + 0x20c], 0xffffffff
mov edx, dword [ebp - 0x668]
mov dword [edx + 0x204], 0
push 0x1c
call fcn.005142b0
add esp, 4
mov dword [ebp - 0x660], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x660], 0
je 0x44ff91
mov ecx, dword [ebp - 0x660]
call fcn.0045e612
mov dword [ebp - 0x670], eax
jmp 0x44ff9b
mov dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x65c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x668]
mov edx, dword [ebp - 0x65c]
mov dword [ecx + 0xc0], edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x668]
mov ecx, dword [ecx + 0xc0]
call fcn.0045e90b
mov edx, dword [ebp - 0x668]
mov ecx, dword [edx + 0xc0]
call fcn.00460623
push 0x100
lea eax, [ebp - 0x418]
push eax
push 0x3e9
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
add ecx, 0x6cc
call fcn.00513178
lea ecx, [ebp - 0x418]
push ecx
lea ecx, [ebp - 0x428]
call fcn.00513d5b
mov dword [ebp - 4], 1
push 0x5602f4
lea edx, [ebp - 0x428]
push edx
lea eax, [ebp - 0x438]
push eax
call fcn.00513f82
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x438]
call fcn.00409600
push eax
call dword [sym.imp.kernel32.dll_DeleteFileA]
push 0x5602fc
lea ecx, [ebp - 0x428]
push ecx
lea edx, [ebp - 0x318]
push edx
call fcn.00513f82
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x318]
call fcn.00409600
push eax
call dword [sym.imp.kernel32.dll_DeleteFileA]
push 0x560304
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x434]
push ecx
call fcn.00513f82
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.00409600
push eax
call dword [sym.imp.kernel32.dll_DeleteFileA]
lea ecx, [ebp - 0x310]
call fcn.004351a0
mov byte [ebp - 4], 5
lea edx, [ebp - 0x418]
push edx
lea ecx, [ebp - 0x310]
call fcn.004354a6
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x668]
mov ecx, dword [eax + 0xc0]
call fcn.004095e0
cmp eax, 1
je 0x450117
mov ecx, dword [ebp - 0x668]
mov ecx, dword [ecx + 0xc0]
call fcn.00409600
mov dword [ebp - 0x650], eax
jmp 0x45012e
mov edx, dword [ebp - 0x668]
mov ecx, dword [edx + 0xc0]
call fcn.0045e706
mov dword [ebp - 0x650], eax
push 0
mov eax, dword [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x650]
push ecx
lea edx, [ebp - 0x418]
push edx
lea ecx, [ebp - 0x310]
call fcn.004353cc
and eax, 0xff
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x668]
mov ecx, dword [eax + 0xc0]
call fcn.004095e0
cmp eax, 1
jne 0x45018b
mov ecx, dword [ebp - 0x650]
push ecx
call dword [sym.imp.kernel32.dll_GlobalUnlock]
mov edx, dword [ebp - 0x650]
push edx
call dword [sym.imp.kernel32.dll_GlobalFree]
lea eax, [ebp - 0x418]
push eax
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
add ecx, 0xbbc
call fcn.004298fb
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
call fcn.004748f0
lea ecx, [ebp - 0x418]
push ecx
mov ecx, dword [ebp - 0x668]
call fcn.004553e0
lea edx, [ebp - 0x418]
push edx
lea ecx, [ebp - 0x64c]
call fcn.00513d5b
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x64c]
call fcn.00409600
push eax
mov eax, dword [ebp - 0x668]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x668]
call dword [edx + 0x50]
lea eax, [ebp - 0x538]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x638]
push edx
lea eax, [ebp - 0x648]
push eax
lea ecx, [ebp - 0x418]
push ecx
call fcn.004f9ec5
add esp, 0x14
lea edx, [ebp - 0x10c]
push edx
lea ecx, [ebp - 0x430]
call fcn.00513d5b
mov byte [ebp - 4], 7
push 3
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x430]
call fcn.0050ca16
mov dword [ebp - 0x674], eax
mov ecx, dword [ebp - 0x674]
mov dword [ebp - 0x678], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x678]
call fcn.00409600
push eax
call fcn.004fb9d8
add esp, 4
mov dword [ebp - 0x42c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x664]
call fcn.00513ced
mov edx, dword [ebp - 0x42c]
add edx, 1
mov dword [ebp - 0x42c], edx
cmp dword [ebp - 0x42c], 0x3e8
jl 0x4502b0
mov dword [ebp - 0x42c], 0
push 0xa
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp - 0x42c]
push ecx
call fcn.004fb5cb
add esp, 0xc
lea ecx, [ebp - 0x430]
call fcn.0040c890
sub eax, 3
push eax
lea edx, [ebp - 0x644]
push edx
lea ecx, [ebp - 0x430]
call fcn.0050ca92
mov byte [ebp - 4], 9
mov word [ebp - 0x424], 0
jmp 0x45030a
mov ax, word [ebp - 0x424]
add ax, 1
mov word [ebp - 0x424], ax
mov esi, dword [ebp - 0x424]
and esi, 0xffff
lea ecx, [ebp - 0x418]
push ecx
call fcn.004fa680
add esp, 4
mov edx, 3
sub edx, eax
cmp esi, edx
jae 0x450342
push 0x56030c
lea ecx, [ebp - 0x644]
call fcn.00514055
jmp 0x4502f8
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x644]
call fcn.00514055
lea ecx, [ebp - 0x538]
push ecx
mov edx, dword [ebp - 0x644]
push edx
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x648]
push ecx
push 0x560310
lea edx, [ebp - 0x418]
push edx
call fcn.004fa9f4
add esp, 0x18
lea eax, [ebp - 0x418]
push eax
push 0x3e9
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
add ecx, 0x6cc
call fcn.005131aa
lea ecx, [ebp - 0x640]
push ecx
mov edx, dword [ebp - 0x668]
mov ecx, dword [edx + 0xc0]
call fcn.00409610
mov eax, dword [ebp - 0x668]
mov ecx, dword [eax + 0x1f0]
mov edx, dword [ebp - 0x668]
mov eax, dword [edx + 0x1f0]
mov edx, dword [eax]
call dword [edx + 0x10]
mov eax, dword [ebp - 0x63c]
push eax
mov ecx, dword [ebp - 0x640]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x668]
mov ecx, dword [edx + 0x1f0]
call fcn.004831ba
mov ecx, dword [ebp - 0x668]
call fcn.00443706
mov dword [ebp - 0x314], eax
mov ecx, dword [ebp - 0x314]
call fcn.004586cb
push 0
push 0
push 0
mov ecx, dword [ebp - 0x668]
call fcn.00519f6e
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
add ecx, 0xbc
call fcn.00455ae0
test eax, eax
jne 0x450458
push 0
push 0x801c
push 0x111
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
call fcn.00409a80
push 0
mov ecx, dword [ebp - 0x668]
call fcn.004095c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x644]
call fcn.00513ced
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x430]
call fcn.00513ced
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64c]
call fcn.00513ced
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x310]
call fcn.004351c8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x434]
call fcn.00513ced
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x318]
call fcn.00513ced
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x438]
call fcn.00513ced
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.00513ced
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 4