Function at 0x4044d0
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x433610]
xor eax, ebp
mov dword [ebp - 4], eax
test byte [0x434778], 1
push esi
mov esi, dword [ebp + 8]
push edi
jne 0x40450c
or dword [0x434778], 1
mov ecx, 0x434744
call fcn.00408630
push 0x426160
call fcn.00417f35
add esp, 4
mov ecx, 0x434744
call fcn.00409030
test eax, eax
je 0x404535
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push str.BitsJob:_Cancel
push eax
mov dword [ebp - 0x1c], 4
call fcn.00408ee0
add esp, 8
mov ecx, dword [esi]
mov eax, dword [ecx + 0x28]
lea edx, [ebp - 0x2c]
push edx
push esi
call eax
test eax, eax
js 0x4047a5
cmp dword [ebp - 0x2c], 1
jge 0x404582
mov ecx, dword [0x434ac4]
push ecx
push 0
push 0x42a4f0
push 0
push 0
push 0x202
push 0x427450
call fcn.00402600
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00418330
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi + 0x30]
test eax, eax
je 0x4045d2
mov edi, dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push 0
push eax
call edi
cmp eax, 0x102
jne 0x4045d2
cmp dword [esi + 0x30], 0
je 0x4045d2
mov edx, dword [esi + 0x3c]
push edx
call dword [sym.imp.KERNEL32.DLL_SetEvent]
mov eax, dword [esi + 0x30]
push 0xffffffffffffffff
push eax
call edi
mov ecx, dword [esi + 0x3c]
push ecx
call dword [sym.imp.KERNEL32.DLL_ResetEvent]
mov eax, dword [esi + 0x30]
test eax, eax
je 0x4045d2
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [esi + 0x30], 0
push 0x434798
lea ecx, [ebp - 0x28]
call fcn.00406460
lea ecx, [ebp - 0x28]
mov dword [0x434790], 0
mov byte [0x43477d], 1
call fcn.00406480
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
push 0
push esi
call eax
test eax, eax
js 0x4047a5
lea ecx, [ebp - 0x18]
push ecx
mov ecx, esi
mov dword [ebp - 0x18], 0
call fcn.00401bc0
mov esi, eax
test esi, esi
jns 0x404645
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x404631
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, esi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00418330
mov esp, ebp
pop ebp
ret 4
mov esi, dword [ebp - 0x18]
test esi, esi
je 0x4047a3
mov ecx, dword [esi]
mov eax, dword [ecx + 0x28]
lea edx, [ebp - 0x14]
push edx
push esi
call eax
mov edi, eax
push esi
test edi, edi
jns 0x40467e
mov ecx, dword [esi]
mov edx, dword [ecx + 8]
call edx
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00418330
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi]
mov ecx, dword [eax + 0x20]
call ecx
mov edi, eax
test edi, edi
jns 0x4046a7
mov edx, dword [esi]
mov eax, dword [edx + 8]
push esi
call eax
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00418330
mov esp, ebp
pop ebp
ret 4
mov edx, dword [0x4335d8]
mov eax, dword [edx + 0xc]
mov ecx, 0x4335d8
call eax
lea ecx, [ebp - 0x18]
add eax, 0x10
push ecx
mov ecx, 0x43477c
mov dword [ebp - 0x18], eax
call fcn.00403620
mov edx, dword [0x42a4f0]
mov ecx, dword [0x42a4f4]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [0x42a4f8]
mov dword [eax + 4], ecx
mov ecx, dword [0x42a4fc]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov ecx, 0x43477c
call fcn.00401080
push 0x427b58
lea ecx, [ebp - 0x1c]
call fcn.00403a00
lea edx, [ebp - 0x1c]
push edx
mov ecx, 0x43477c
call fcn.004035b0
lea ecx, [ebp - 0x1c]
call fcn.00401ad0
mov ecx, 0x43477c
call fcn.004021e0
mov eax, dword [ebp - 0x18]
push 4
push 0
push eax
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
call fcn.00401810
mov ecx, eax
call fcn.00409030
test eax, eax
je 0x404793
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
mov dword [eax + 4], edx
mov edx, dword [ebp - 8]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x24], 3
call fcn.004170e0
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x28]
push str.BitsJob:_job_cancelled_guid_s
push edx
call fcn.00408ee0
add esp, 0x20
lea ecx, [ebp - 0x1c]
call fcn.00401ad0
lea ecx, [ebp - 0x18]
call fcn.00401ad0
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00418330
mov esp, ebp
pop ebp
ret 4