Function at 0x44f9f0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x824
mov eax, dword [0x4a86f0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
call fcn.0046a330
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x824], ax
lea eax, [ebp - 0x822]
push eax
call fcn.0046a330
add esp, 0x18
push 0x493aac
push 0x82
push dword [0x4c1264]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
jne 0x44fa6b
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046984a
mov esp, ebp
pop ebp
ret
push esi
push 0x493aac
push 0x82
push dword [0x4c1264]
call fcn.00429c80
add esp, 0x10
test eax, eax
je 0x44fa5a
push ebx
push edi
push 0
push str.Neutral.001
push 0x4c3678
push esi
call fcn.00429340
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.0046a330
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x20c]
add esp, 0x1c
push str.Neutral.001
push 0x4c3678
push eax
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0042df80
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 4
test eax, eax
je 0x44fb0b
push 0
lea eax, [ebp - 0x20c]
push 0x4c3678
push eax
call fcn.0045e330
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call ebx
cmp dword [0x4c1db4], 0
je 0x44fb2d
push 0x4ba5a4
push 0x104
push 0x4c3470
call fcn.0046befa
add esp, 0xc
jmp 0x44fb3e
push 0x493ad4
push 0x4c3678
push 0x4c3470
call edi
push 0
push str.Neutral_CT.001
push 0x4c3678
push esi
call fcn.00429340
add esp, 0x10
lea eax, [ebp - 0x20c]
push str.Neutral_CT.001
push 0x4c3678
push eax
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0042df80
add esp, 4
test eax, eax
je 0x44fba2
push 0x4c3470
call fcn.0042c370
push 0
lea eax, [ebp - 0x20c]
push 0x4c3470
push eax
call fcn.0045e330
add esp, 0x10
lea eax, [ebp - 0x20c]
push eax
call ebx
cmp word [0x4c21f7], 0
je 0x44fbda
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x824]
push eax
push 0x4c21f7
call fcn.0042d9e0
add esp, 0xc
lea eax, [ebp - 0x61c]
push eax
push 0x4c3470
push 0x4c21f7
call edi
mov edx, dword [0x4bfdbd]
mov eax, dword [0x4c38b8]
imul ecx, edx, 0x620
cmp word [ecx + eax], 0
je 0x44fbfc
push esi
push edx
call fcn.0044ff50
add esp, 8
cmp dword [0x4b9d60], 0
je 0x44fca6
push 0
push str.ExtraBinary.001
push 0x4c3678
push esi
call fcn.00429340
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.0046a330
add esp, 0x1c
lea eax, [ebp - 0x414]
push str.ExtraBinary.001
push 0x4c3678
push eax
call edi
lea eax, [ebp - 0x414]
push eax
call fcn.0042df80
add esp, 4
test eax, eax
je 0x44fca6
push 1
lea eax, [ebp - 0x414]
push 0x4c3678
push eax
call fcn.0045e330
add esp, 0xc
cmp dword [0x4b9ae0], 0
je 0x44fc9d
cmp dword [0x4b9ae4], 0
je 0x44fc9d
push 1
lea eax, [ebp - 0x414]
push 0x4b98d8
push eax
call fcn.0045e330
add esp, 0xc
lea eax, [ebp - 0x414]
push eax
call ebx
cmp dword [0x4ba7cc], 0
pop edi
pop ebx
je 0x44fcc9
push 0x4ba7d4
call fcn.0042df80
add esp, 4
test eax, eax
je 0x44fcc9
mov eax, 1
jmp 0x44fccb
xor eax, eax
push 0x4ba7d4
push eax
push str.ExtractBinaryRes____bRunScript:__d__ScriptFile:__s
mov dword [0x4ba7cc], eax
call fcn.0045f4c0
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov eax, 1
pop esi
call fcn.0046984a
mov esp, ebp
pop ebp
ret