Function at 0x408b50
Capabilities:
Delete file
Move file

Disassembly:
push 0xffffffffffffffff
push 0x438ef8
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44c538]
xor eax, esp
push eax
lea eax, [esp + 0x34]
mov dword fs:[0], eax
mov ebp, ecx
call fcn.00415e0b
xor ecx, ecx
xor esi, esi
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x408b95
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x2c], eax
cmp dword [ebp + 0x7820], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x28], esi
jle 0x408da0
lea eax, [ebp + 0x3b8]
mov dword [esp + 0x1c], 0x58
mov dword [esp + 0x20], eax
jmp 0x408bd2
xor esi, esi
cmp dword [eax + 4], esi
je 0x408d78
cmp dword [eax], esi
mov dword [esp + 0x18], esi
jle 0x408d78
cmp dword [ebp + 0x7820], 0
mov dword [esp + 0x24], 0
jle 0x408cbe
lea ecx, [ebp + 0x160]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
cmp dword [edx + 0x25c], 0
jne 0x408c9f
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
add eax, ecx
mov esi, dword [ebp + eax*4]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
sub esi, 0x10
mov dword [esp + 0x34], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x408c53
cmp eax, dword [esi]
jne 0x408c53
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x408c89
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x408ddc
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
add eax, 1
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.004271f8
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ebx], edi
call fcn.00402990
test eax, eax
jne 0x408d5f
mov eax, dword [esp + 0x24]
add dword [esp + 0x14], 0x260
add eax, 1
cmp eax, dword [ebp + 0x7820]
mov dword [esp + 0x24], eax
jl 0x408c06
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
add edx, eax
mov esi, dword [ebp + edx*4]
lea ebx, [ebp + edx*4]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
sub esi, 0x10
mov dword [esp + 0x34], esp
mov dword [esp + 0x28], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x408d00
cmp eax, dword [esi]
jne 0x408d00
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x408d36
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x408ddc
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
add eax, 1
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.004271f8
add esp, 0x10
mov edx, dword [esp + 0x28]
add edi, 0x10
mov ecx, ebp
mov dword [edx], edi
call fcn.00405bc0
mov eax, dword [ebx]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x408d5f
mov ebx, dword [ebx]
push 4
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
add eax, 1
cmp eax, dword [ecx]
mov dword [esp + 0x18], eax
jl 0x408be7
mov eax, ecx
mov ecx, dword [esp + 0x28]
add dword [esp + 0x1c], 0x98
add ecx, 1
add eax, 0x260
cmp ecx, dword [ebp + 0x7820]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x20], eax
jl 0x408bd0
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov dword [esp + 0x3c], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x408dc8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x34]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
jmp fcn.00402250