Function at 0x421990
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
mov eax, dword [0x50dc94]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x53fa7c]
push esi
mov esi, dword [ebp + 8]
test ecx, ecx
jne 0x421a46
cmp byte [0x53fb88], cl
je 0x421a33
test dword [0x50f810], 0x100
je 0x421a33
push 0x53fb88
call dword [0x4c5b48]
push 0x20
push 0x4cc3ec
push 0x53fb88
call dword [0x4c5a80]
add esp, 0xc
mov dword [0x53fa7c], eax
test eax, eax
je 0x421a33
push 0x10000
push 0
push 0x50f978
push eax
call dword [0x4c5a44]
push 2
push 0
push dword [0x53fa7c]
call dword [0x4c5a6c]
push dword [0x53fa7c]
call dword [0x4c5a60]
mov ecx, dword [0x53fa7c]
add esp, 0x20
mov dword [0x50f824], eax
test ecx, ecx
jne 0x421a46
test esi, esi
je 0x421c6d
mov dword [esi], 0x51f978
jmp 0x421c6d
xor edx, edx
test esi, esi
jne 0x421a62
push ecx
push dword [0x50f84c]
push 1
push 0x51f978
call dword [0x4c5a48]
jmp 0x421a82
mov eax, dword [esi]
sub eax, 0x51f978
test eax, eax
jle 0x421a8d
push ecx
push eax
push 1
push 0x51f978
call dword [0x4c5a48]
mov dword [esi], 0x51f978
mov ecx, dword [0x53fa7c]
mov edx, eax
add esp, 0x10
mov eax, dword [0x50f824]
add eax, edx
mov edx, dword [0x50f820]
mov dword [0x50f824], eax
test edx, edx
je 0x421c6d
shr eax, 0x14
cmp eax, edx
jb 0x421c6d
test ecx, ecx
je 0x421ad6
push ecx
call dword [0x4c5a40]
push dword [0x53fa7c]
call dword [0x4c5a64]
add esp, 8
mov dword [0x53fa7c], 0
mov ecx, 0x53fc90
mov eax, 0x53fb88
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x421b00
test dl, dl
je 0x421afc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x421b00
add eax, 2
add ecx, 2
test dl, dl
jne 0x421ae0
xor eax, eax
jmp 0x421b05
sbb eax, eax
or eax, 1
push 0xffffffffffffffff
test eax, eax
jne 0x421b12
push 0x53fd98
jmp 0x421b17
push 0x53fc90
push 0x104
push 0x53fb88
call dword [0x4c5ab8]
add esp, 0x10
push 0x53fb88
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test dword [0x50f810], 0x100
je 0x421b5d
push 0x20
push 0x4cc3ec
push 0x53fb88
call dword [0x4c5a80]
add esp, 0xc
mov dword [0x53fa7c], eax
jmp 0x421b62
mov eax, dword [0x53fa7c]
test eax, eax
je 0x421c6d
push 0x10000
push 0
push 0x50f978
push eax
call dword [0x4c5a44]
add esp, 0x10
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x100
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.004b493e
call dword [0x4c5b18]
push 0
push 0x100
lea eax, [ebp - 0x104]
mov dword [ebp - 0x118], 0
push eax
lea eax, [ebp - 0x118]
push eax
call dword [0x4c5b2c]
movzx eax, word [ebp - 0x106]
add esp, 0x1c
push 0x53fb84
push dword [0x50f820]
push dword [0x50f810]
push eax
movzx eax, word [ebp - 0x108]
push eax
movzx eax, word [ebp - 0x10a]
push eax
movzx eax, word [ebp - 0x10c]
push eax
movzx eax, word [ebp - 0x10e]
push eax
movzx eax, word [ebp - 0x112]
push eax
movzx eax, word [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
lea eax, [ebp - 0x104]
shr edx, 6
push edx
push str.Sun_Jun_30_22:28:59_2024
push eax
push str._Time_Zone:__s____s___ds__log_rotated_at__04d__02d__02d__02d:_02d:_02d._03d_type:_0x_x_size:__d_memory:_0x_p_r_n
push dword [0x53fa7c]
call fcn.0041ecc0
push 2
push 0
push dword [0x53fa7c]
call dword [0x4c5a6c]
add esp, 0x48
push dword [0x53fa7c]
call dword [0x4c5a60]
add esp, 4
mov dword [0x50f824], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov dword [0x50f84c], 0
pop esi
call fcn.004ae9c0
mov esp, ebp
pop ebp
ret