Function at 0x440109
Capabilities:
Delete file

Disassembly:
push 0x2cc
mov eax, 0x4e0140
call fcn.004c0041
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x170]
call fcn.0043373d
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424ed8
call fcn.0046e3e0
pop ecx
cmp eax, ebx
jne 0x440173
push 5
pop edi
lea esi, [ebp - 0x170]
call fcn.00435e14
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, edi
jmp 0x440564
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424ed8
lea eax, [ebp - 0x248]
push eax
call fcn.00482d70
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1c0], ebx
jne 0x4401b3
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
push 0xe
jmp 0x44014a
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x248]
call fcn.0042a0aa
pop ecx
test al, al
jne 0x4401e0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
push 0xf
jmp 0x44014a
push ecx
lea eax, [ebp - 0x114]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424ed8
call fcn.0046e420
pop ecx
cmp eax, ebx
jne 0x440215
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
push 0x10
jmp 0x44014a
push ecx
mov dword [ebp - 0x178], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x178], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x170]
call fcn.004247eb
push edi
mov ecx, esi
call fcn.0047cf40
pop ecx
pop ecx
call fcn.0046e3e0
pop ecx
cmp eax, ebx
je 0x440531
push ecx
mov dword [ebp - 0x178], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x178], esp
push str.VirtReg.export
call fcn.004247eb
push edi
mov ecx, esi
call fcn.0047cf40
pop ecx
pop ecx
call fcn.0046e3e0
pop ecx
cmp eax, ebx
je 0x440531
push ecx
mov eax, esp
mov dword [ebp - 0x178], esp
push dword [ebp - 0x164]
push str._s.VirtFiles.db
push eax
call fcn.0046bd30
lea eax, [ebp - 0x174]
add esp, 0xc
push eax
call fcn.0046b400
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x174]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x174]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424ed8
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x17c], esp
mov esi, str.Main
push esi
call fcn.004247eb
push 4
pop ecx
lea edi, [ebp - 0x248]
mov byte [ebp - 4], 4
call fcn.00485160
cmp eax, ebx
je 0x440325
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
push 8
jmp 0x44014a
lea eax, [ebp - 0x248]
call fcn.00483c50
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x1b4], ebx
lea edi, [ebp - 0x1b0]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x174]
mov dword [ebp - 0x17c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1b4]
call fcn.00424ed8
mov ecx, edi
call fcn.00477680
add esp, 0xc
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x198], ebx
lea edi, [ebp - 0x194]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x17c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x17c], esp
push str.VirtFiles.db
call fcn.004247eb
push edi
lea ecx, [ebp - 0x170]
call fcn.0047cf40
pop ecx
pop ecx
lea ecx, [ebp - 0x198]
call fcn.00477680
add esp, 0xc
lea eax, [ebp - 0x1b4]
push eax
push 0x43dacb
push ebx
push dword [ebp - 0x190]
lea eax, [ebp - 0x198]
push eax
call fcn.0048d020
mov ebx, dword [ebp - 0x174]
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048d1a0
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x17c], esp
mov ecx, esp
push eax
call fcn.00424ed8
lea eax, [ebp - 0x2d8]
push eax
call fcn.00482d70
mov byte [ebp - 4], 6
cmp dword [ebp - 0x250], 0
jne 0x44044c
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 4
call fcn.004278e9
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
push 7
jmp 0x44014a
push ecx
mov ecx, esp
mov dword [ebp - 0x17c], esp
push esi
call fcn.004247eb
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x174]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424ed8
lea eax, [ebp - 0x2d8]
push eax
mov byte [ebp - 4], 6
call fcn.00484980
test eax, eax
lea eax, [ebp - 0x2d8]
je 0x4404ae
call fcn.00483c50
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 4
call fcn.004278e9
jmp 0x440301
call fcn.00483c50
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2d8]
je 0x4404ea
call fcn.004278e9
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
push 0xa
jmp 0x44014a
call fcn.004278e9
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
lea esi, [ebp - 0x170]
call fcn.00435e14
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
jmp 0x440564
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.004278e9
lea esi, [ebp - 0x170]
call fcn.00435e14
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
push 6
pop eax
call fcn.004c00c4
ret