Function at 0x44f4a4
Capabilities:
Delete file

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x98
mov eax, dword [0x4b7f10]
xor eax, ebp
mov dword [ebp + 0x6c], eax
mov eax, dword [ebp + 0x7c]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x78]
cmp dword [edi + 0x18], 8
mov esi, ecx
mov dword [ebp + 0x40], edi
mov dword [ebp + 0x30], eax
jb 0x44f4d5
mov eax, dword [edi + 4]
jmp 0x44f4d8
lea eax, [edi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
lea eax, [ebp + 0x14]
push eax
call fcn.0044a6a3
cmp dword [eax + 0x18], 8
pop ecx
jb 0x44f4f4
mov eax, dword [eax + 4]
jmp 0x44f4f7
add eax, 4
push eax
xor ebx, ebx
push ebx
lea ecx, [ebp + 0x34]
call fcn.00465679
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a58
lea ecx, [ebp + 0x34]
call fcn.004656dc
lea eax, [ebp + 0x14]
push eax
call fcn.0044a4ad
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a58
cmp dword [esi + 0x18], 8
mov dword [ebp + 0x48], 0x64
jb 0x44f548
mov eax, dword [esi + 4]
jmp 0x44f54b
lea eax, [esi + 4]
push eax
call fcn.00403753
pop ecx
test eax, eax
je 0x44f630
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 0xb7
je 0x44f62d
cmp eax, 0x50
je 0x44f62d
push dword [ebp + 0x48]
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x18], 8
jb 0x44f58a
mov eax, dword [esi + 4]
jmp 0x44f58d
lea eax, [esi + 4]
push eax
call fcn.00403753
pop ecx
test eax, eax
je 0x44f5b5
call edi
cmp eax, 0xb7
je 0x44f5b5
cmp eax, 0x50
je 0x44f5b5
mov eax, dword [ebp + 0x48]
add eax, eax
cmp eax, 0x4e20
mov dword [ebp + 0x48], eax
jl 0x44f576
cmp dword [ebp + 0x48], 0x4e20
jl 0x44f62d
call edi
push ebx
sub esp, 0x1c
mov ecx, esp
push 0x4a7ca0
mov edi, eax
call fcn.004018f6
sub esp, 0x1c
mov ecx, esp
push esi
call fcn.00401918
push edi
push 0x25d
call fcn.0043cb31
mov ecx, eax
call fcn.0043d0a9
call fcn.004341a8
push ebx
push ebx
push 0x786
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp + 0x34]
call fcn.004656e8
lea ecx, [ebp + 0x34]
call fcn.004656c4
mov eax, 0x80004005
mov ecx, dword [ebp + 0x6c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046cc2a
add ebp, 0x70
leave
ret 8
mov edi, dword [ebp + 0x40]
push str.ThunderPlatform.exe
lea eax, [ebp + 0x14]
push edi
push eax
call fcn.0040f161
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0x1c]
push eax
mov ecx, edi
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a58
lea eax, [ebp + 0x14]
push edi
push eax
call fcn.00449a14
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a58
push 0xffffffffffffffff
push ebx
push dword [ebp + 0x40]
lea ecx, [esi + 0x38]
call fcn.004019a1
push 0x4a7ca0
lea ecx, [ebp + 0x50]
call fcn.004018f6
lea eax, [ebp + 0x50]
push eax
call fcn.00404069
mov ecx, eax
call fcn.00404094
push str._tp_
lea ecx, [ebp + 0x50]
call fcn.0040197d
lea eax, [ebp - 8]
push eax
call fcn.0044a6e2
push eax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.00426e2e
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0xc8]
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a58
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401a58
cmp dword [edi + 0x18], 8
jb 0x44f6ff
mov edi, dword [edi + 4]
jmp 0x44f702
add edi, 4
push 0x2e
lea eax, [ebp - 8]
push edi
push eax
call fcn.00465e7f
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x54]
push eax
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401a58
cmp dword [esi + 0x68], ebx
jne 0x44f754
mov esi, 0x80004005
push ebx
push 1
lea ecx, [ebp + 0x50]
call fcn.00401a58
lea ecx, [ebp + 0x34]
call fcn.004656e8
lea ecx, [ebp + 0x34]
call fcn.004656c4
mov eax, esi
jmp 0x44f619
lea eax, [ebp - 8]
push esi
push eax
call fcn.0044a6c8
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0x74]
push eax
mov ecx, edi
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401a58
lea eax, [esi + 0x100]
push edi
push eax
call fcn.0044b867
lea eax, [esi + 0x38]
push eax
call fcn.0044a44f
add esp, 0xc
mov dword [esi + 0x70], eax
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], ebx
cmp dword [esi + 0x11c], ebx
je 0x44f7c1
lea eax, [esi + 0x100]
push eax
push dword [eax + 0x18]
lea ecx, [ebp + 0x44]
call fcn.004497b8
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x3c], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x40], eax
push dword [ebp + 0x30]
lea eax, [ebp + 0x3c]
push eax
mov ecx, esi
call fcn.0044dbaa
mov ecx, esi
mov byte [ebp + 0x4f], al
call fcn.0044e125
lea ecx, [ebp - 0x28]
call fcn.0044bcc8
cmp byte [ebp + 0x4f], bl
je 0x44f7fb
push dword [ebp + 0x30]
mov ecx, esi
call fcn.0044ec29
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0044f209
mov ecx, esi
call fcn.0044f026
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0044eb79
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0044e9ca
cmp dword [esi + 0x11c], ebx
je 0x44f831
lea eax, [esi + 0x100]
push edi
push eax
call fcn.00449a6d
pop ecx
pop ecx
jmp 0x44f846
cmp dword [edi + 0x18], 8
jb 0x44f83c
mov edi, dword [edi + 4]
jmp 0x44f83f
add edi, 4
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [esi + 0x70]
lea eax, [esi + 0x54]
push eax
push esi
call fcn.0044d5d6
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.0044bc7a
push dword [ebp - 0x28]
call fcn.0046c701
pop ecx
xor esi, esi
jmp 0x44f732