Function at 0x4429a9
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.004429a9
xor esi, esi
push esi
push esi
push esi
push esi
push esi
mov eax, dword [0x45fa94]
test eax, eax
je 0x442a01
mov edx, 0x18609c8
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
mov edx, 0x1869218
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417469
jmp 0x442a2e
push 0
mov edx, 0x1869218
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
fild dword [0x186d720]
mov eax, dword [0x45fedc]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x442b7e
fild dword [0x186d738]
mov eax, dword [0x45faac]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
je 0x442aee
fild dword [0x186d6c4]
mov eax, dword [0x45faac]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
je 0x442aee
fild dword [0x186d708]
mov eax, dword [0x45faac]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
je 0x442aee
fild dword [0x186d6bc]
mov eax, dword [0x45faac]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
je 0x442aee
fild dword [0x186d894]
mov eax, dword [0x45faac]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
je 0x442aee
fild dword [0x186d6d4]
mov eax, dword [0x45faac]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x442b7e
push dword [0x45faac]
call fcn.00433316
test eax, eax
je 0x442b42
mov edx, 0x1869230
call fcn.0045d0ba
mov eax, dword [0x45faac]
call fcn.0045c27b
call fcn.0045ad27
call fcn.0045c56d
mov edx, 0x1869244
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442b7e
mov edx, 0x1869230
call fcn.0045d0ba
mov eax, dword [0x45faac]
call fcn.0045c27b
call fcn.0045ad27
call fcn.0045c56d
mov edx, 0x1869250
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [0x45fa90]
test eax, eax
je 0x442bb0
push 0x33
call fcn.0041cf9a
mov edx, 0x186925c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442bc8
mov edx, 0x1869270
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [0x45facc]
test eax, eax
je 0x442bfa
push 0x36
call fcn.0041cf9a
mov edx, 0x1869284
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442c12
mov edx, 0x18692a0
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [0x45fad4]
test eax, eax
je 0x442f54
push 0
mov edx, 0x18692bc
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x442c97
push 0
mov edx, 0x18692e4
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00418529
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov edx, 0x18692f8
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442f4f
push 0
mov edx, 0x1869308
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x442d12
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x18638fc
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
mov edx, 0x186932c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442f4f
push 0
mov edx, 0x1869340
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x442db2
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x1869360
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x442d95
mov edx, 0x1869380
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442dad
mov edx, 0x18693ac
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442f4f
push 0
mov edx, 0x18693dc
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x442ebc
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x1869404
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x442e35
mov edx, 0x1869444
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442e4d
mov edx, 0x1869490
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x18693dc
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
test eax, eax
je 0x442e9f
mov edx, 0x18694e0
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442eb7
mov edx, 0x1869514
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442f4f
push 0
mov edx, 0x186954c
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x442f37
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x186954c
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
mov edx, 0x1869580
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442f4f
mov edx, 0x1869590
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x442f6c
mov edx, 0x18695a8
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [0x45fad8]
test eax, eax
je 0x4431af
push 0
mov edx, 0x18695b8
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
push 0
mov edx, 0x18695e4
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
push 0
mov edx, 0x1863654
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x4430b3
mov edx, 0x1869610
call fcn.0045d0ba
mov ebx, 0x45fef0
mov ecx, 0x104
call fcn.0045ced6
push 0
mov ebx, 0x45fef0
call fcn.0045ce8d
mov edx, 0x1869638
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
call fcn.00442125
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x1863654
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
mov edx, 0x186964c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45feb4], 1
jmp 0x4431aa
push 0
mov edx, 0x186965c
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x443192
mov edx, 0x186967c
call fcn.0045d0ba
mov ebx, 0x45fef0
mov ecx, 0x104
call fcn.0045ced6
push 0
mov ebx, 0x45fef0
call fcn.0045ce8d
mov edx, 0x1869638
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
call fcn.00442125
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov edx, 0x186965c
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
mov edx, 0x1869690
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov dword [0x45feb4], 1
jmp 0x4431aa
mov edx, 0x18696b0
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
jmp 0x4431c7
mov edx, 0x18696c4
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [0x45fac8]
test eax, eax
je 0x443207
push 1
mov edx, 0x18696d4
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0041ceb6
mov edx, 0x18696e8
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [str..DEFAULTSoftwareMicrosoftOfficeCommonClientTelemetry]
test eax, eax
je 0x4432c2
mov edx, 0x1869700
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
push 0
mov edx, 0x1869714
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.004124a4
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
push 0
push 1
mov edx, 0x1869714
call fcn.0045d0ba
lea ebx, [esp + 4]
call fcn.0045c36b
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov edx, 0x18609c8
call fcn.0045d0ba
mov eax, 0x800000ff
call fcn.00454915
mov ebx, 0x45fa18
call fcn.0045ce8d
mov edx, 0x1869730
call fcn.0045d0ba
call fcn.0045c56d
mov eax, 0x800000ff
call fcn.00454915
call fcn.004174f2
jmp 0x4432da
mov edx, 0x1869748
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [0x45fae4]
test eax, eax
je 0x44338b
mov eax, dword [0x45faf4]
test eax, eax
je 0x44338b
push 0
push 0
mov edx, 0x1863654
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44338b
push 0
push 0
mov edx, 0x186965c
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44338b
mov edx, 0x186975c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
call fcn.004423e7
mov dword [0x45fae4], 0
fild dword [0x186d6e4]
mov eax, dword [0x45fae4]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x443547
call fcn.0041969c
call fcn.00457d88
mov eax, dword [0x45fae8]
test eax, eax
je 0x443445
fild dword [0x186d6a4]
mov eax, dword [0x45faf0]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x44340b
push 0
push 1
mov edx, 0x1868df4
call fcn.0045d0ba
lea ebx, [esp + 4]
call fcn.0045c36b
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
jmp 0x443436
push 0
push 2
mov edx, 0x1868df4
call fcn.0045d0ba
lea ebx, [esp + 4]
call fcn.0045c36b
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov dword [0x45fff4], 1
jmp 0x443542
mov eax, dword [0x45faec]
test eax, eax
je 0x443542
push 0
push 0
mov edx, 0x1863654
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x443542
push 0
push 0
mov edx, 0x186965c
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x443542
fild dword [0x186d6a4]
mov eax, dword [0x45faf0]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x44350d
push 0
push 1
mov edx, 0x1868df4
call fcn.0045d0ba
lea ebx, [esp + 4]
call fcn.0045c36b
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
jmp 0x443538
push 0
push 2
mov edx, 0x1868df4
call fcn.0045d0ba
lea ebx, [esp + 4]
call fcn.0045c36b
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov dword [0x45fff4], 1
jmp 0x443564
mov edx, 0x1869778
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
call fcn.004423e7
fild dword [0x186d6a4]
mov eax, dword [0x45fb0c]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x4435b0
mov edx, 0x186978c
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov edx, 0x18697a4
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
fild dword [0x186d6a4]
mov eax, dword [0x45fadc]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x4435e4
mov edx, 0x18697c0
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
fild dword [0x186d6a4]
mov eax, dword [str.MotherboardUUID]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x443618
mov edx, 0x18697d4
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
fild dword [0x186d6a4]
mov eax, dword [0x45fab4]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x44364c
mov edx, 0x18697e8
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
fild dword [0x186d6a4]
mov eax, dword [0x45faa8]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x443680
mov edx, 0x18697fc
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
fild dword [0x186d6a4]
mov eax, dword [0x45fab0]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jne 0x4436b4
mov edx, 0x1869810
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov ebx, 0x45f884
call fcn.0045ce8d
call fcn.0045d088
test eax, eax
je 0x4436f7
mov edx, 0x1869824
call fcn.0045d0ba
mov ebx, 0x45f884
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0041a3a0
jmp 0x4436f7
mov ebx, 0x45f904
call fcn.0045ce8d
call fcn.0045d088
test eax, eax
je 0x44373a
mov edx, 0x1869824
call fcn.0045d0ba
mov ebx, 0x45f904
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0041a46c
jmp 0x44373a
mov ebx, 0x45f984
call fcn.0045ce8d
call fcn.0045d088
test eax, eax
je 0x44377d
mov edx, 0x1869824
call fcn.0045d0ba
mov ebx, 0x45f984
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0041a538
jmp 0x44377d
mov eax, dword [0x45fac4]
test eax, eax
je 0x4437b6
mov ecx, 0x42a86e
push ecx
push 0
push 0x100000
push 0
lea ebx, [ebp - 0x98]
call fcn.0045173d
mov esi, dword [ebx]
mov eax, esi
lea ebx, [ebp - 0x98]
call fcn.00451717
mov esi, dword [ebx]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret