Function at 0x43b890
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x565b65
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x240
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov esi, ecx
mov dword [esp + 0x10], ebx
call fcn.00435370
mov ecx, eax
call fcn.0047f160
mov ecx, esi
mov edi, eax
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10011
je 0x43b8ec
lea eax, [esp + 0x10]
push eax
call fcn.00529445
mov ecx, dword [eax]
mov dword [esi + 0x364], ecx
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1e0
lea ecx, [esp + 0x1f0]
mov ebp, eax
call fcn.0047dd70
call fcn.004a58e0
mov edx, dword [eax]
lea ecx, [esp + 0x1f0]
push ecx
push edi
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43c432
mov ecx, dword [esp + 0x1f0]
mov edi, dword [esi + 0x384]
xor edx, edx
cmp ebp, ecx
setne dl
mov ecx, esi
mov dword [esp + 0x18], edx
call fcn.004429e0
cmp edi, ebx
jne 0x43bbbf
cmp dword [esi + 0x384], ebx
je 0x43bbbf
cmp dword [esi + 0x388], ebx
jne 0x43bbbf
mov ecx, 0x66d030
call fcn.004d20e0
test eax, eax
je 0x43bbb5
call fcn.00531e1f
cmp eax, ebx
je 0x43b988
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x43b98a
xor eax, eax
push ebx
push eax
push 0x58c978
call fcn.00531c4c
add esp, 8
mov ecx, eax
call fcn.00545457
push eax
push 0x5828a0
call fcn.00531c4c
add esp, 8
mov ecx, esi
mov edi, eax
call fcn.0052f07f
xor ecx, ecx
cmp eax, edi
sete cl
mov edi, ecx
cmp edi, ebx
je 0x43b9ee
call fcn.00531e1f
cmp eax, ebx
je 0x43b9d6
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x43b9d8
xor eax, eax
push ebx
push eax
push 0x58c978
call fcn.00531c4c
add esp, 8
mov ecx, eax
call fcn.004b9980
mov eax, dword [0x5d2d10]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x258], ebx
call fcn.0047d420
lea ecx, [esp + 0x20]
mov byte [esp + 0x258], 1
push ecx
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f630
mov ecx, esi
call fcn.00442a90
mov edx, dword [esp + 0x1c4]
cmp dword [edx - 8], ebx
jne 0x43ba40
cmp eax, ebx
je 0x43ba40
add eax, 0x88
jmp 0x43ba47
lea eax, [esp + 0x1c4]
lea ecx, [esp + 0x14]
push eax
call fcn.00530cc8
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 8], ebx
je 0x43ba9b
cmp edi, ebx
je 0x43baf8
call fcn.00531e1f
cmp eax, ebx
je 0x43ba74
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x43ba76
xor eax, eax
push eax
push 0x58c978
call fcn.00531c4c
mov edx, dword [esp + 0x1c]
add esp, 8
lea ecx, [eax + 0xf18]
push 1
push 1
mov eax, dword [ecx]
push edx
call dword [eax + 0xd4]
cmp edi, ebx
je 0x43baf8
call fcn.00531e1f
cmp eax, ebx
je 0x43bab1
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x43bab3
xor eax, eax
push eax
push 0x58c978
call fcn.00531c4c
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea ecx, [eax + 0xf18]
call fcn.00424bd0
push eax
lea ecx, [esi + 0x3a8]
mov byte [esp + 0x25c], 2
call fcn.00530cc8
lea ecx, [esp + 0x10]
mov byte [esp + 0x258], 1
call fcn.00530b8f
jmp 0x43bb19
mov edx, dword [esp + 0x14]
push edx
call fcn.0049e220
add esp, 4
test eax, eax
je 0x43bb19
lea eax, [esp + 0x14]
lea ecx, [esi + 0x3a8]
push eax
call fcn.00530cc8
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x258], 8
call fcn.00530b8f
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x258], 7
call fcn.00530b8f
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x258], 6
call fcn.00530b8f
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x258], 5
call fcn.00530b8f
lea ecx, [esp + 0x148]
mov byte [esp + 0x258], 4
call fcn.004072f0
lea ecx, [esp + 0xb4]
mov byte [esp + 0x258], 3
call fcn.00420260
lea ecx, [esp + 0x24]
mov byte [esp + 0x258], bl
call fcn.00420260
lea ecx, [esp + 0x14]
mov dword [esp + 0x258], 0xffffffff
call fcn.00530b8f
mov dword [esi + 0x388], 1
lea ecx, [esp + 0x1f0]
push ecx
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f610
mov ecx, esi
call fcn.00441e20
cmp dword [esi + 0x3cc], ebx
je 0x43bc2d
mov dword [esp + 0x14], ebx
call fcn.004a58e0
lea edx, [esp + 0x14]
mov edi, eax
push edx
push 0x11
mov ebx, dword [edi]
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f160
push eax
mov ecx, edi
call dword [ebx + 0x44]
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
call fcn.00435370
mov ecx, eax
call fcn.0047f1e0
push eax
lea ecx, [esi + 0x3b0]
call fcn.0048d0a0
xor ebx, ebx
mov ecx, esi
call fcn.00435370
cmp dword [eax + 0x24], 2
je 0x43bc53
mov ecx, esi
call fcn.00435370
mov eax, dword [eax + 0x84]
lea ecx, [esi + 0x450]
push eax
call fcn.0048b950
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1e0
cmp eax, 0x10004
jne 0x43bf09
push ebx
mov ecx, esi
call fcn.00435380
mov ecx, esi
call fcn.004418d0
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10005
je 0x43bca9
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10006
jne 0x43bd55
mov ecx, esi
call fcn.00435370
mov ecx, dword [eax + 0x1a8]
xor eax, eax
and ecx, 0x80
cmp cl, 0x80
sete al
cmp eax, ebx
je 0x43bd10
mov edx, dword [esi + 0x488]
lea edi, [esi + 0x488]
cmp dword [edx - 8], ebx
jne 0x43bcf4
mov eax, dword [esi + 0x47c]
cmp eax, ebx
jle 0x43bd29
dec eax
push 1
push eax
lea ecx, [esi + 0x474]
call fcn.0052bc8d
jmp 0x43bd29
mov eax, dword [esi + 0x47c]
lea ecx, [esi + 0x474]
push edi
push eax
call fcn.0052bbb2
mov ecx, edi
call fcn.00530b1a
jmp 0x43bd29
lea ecx, [esi + 0x488]
call fcn.00530b1a
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x474]
call fcn.0052b9eb
push ecx
lea eax, [esi + 0x350]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00530904
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x450]
call fcn.0048b960
lea ecx, [esp + 0x10]
call fcn.00530b8f
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10011
je 0x43beeb
push ebx
mov ecx, esi
call fcn.00445750
call fcn.004a58e0
lea edx, [esp + 0x10]
mov edi, eax
push edx
push 0x10
mov ebx, dword [edi]
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f160
push eax
mov ecx, edi
call dword [ebx + 0x44]
lea ecx, [esp + 0x20]
call fcn.0047d420
lea eax, [esp + 0x20]
mov ecx, esi
push eax
mov dword [esp + 0x25c], 9
call fcn.00435370
mov ecx, eax
call fcn.0047f630
call fcn.004a58e0
lea ecx, [esp + 0x20]
mov edi, eax
push ecx
mov ecx, esi
mov ebx, dword [edi]
call fcn.00435370
mov ecx, eax
call fcn.0047f160
push eax
mov ecx, edi
call dword [ebx + 8]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x11c]
lea ecx, [esp + 0x1d0]
mov dword [esp + 0x258], 0xf
call fcn.00530b8f
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x258], 0xe
call fcn.00530b8f
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x258], 0xd
call fcn.00530b8f
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x258], 0xc
call fcn.00530b8f
lea ecx, [esp + 0x148]
mov byte [esp + 0x258], 0xb
call fcn.004072f0
lea eax, [esp + 0xb4]
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x118]
mov byte [esp + 0x258], 0x14
call fcn.00530b8f
lea ecx, [esp + 0x114]
mov byte [esp + 0x258], 0x13
call fcn.00530b8f
lea ecx, [esp + 0x110]
mov byte [esp + 0x258], 0x12
call fcn.00530b8f
lea ecx, [esp + 0x10c]
mov byte [esp + 0x258], 0x11
call fcn.00530b8f
lea ecx, [esp + 0xf0]
mov byte [esp + 0x258], 0x10
call fcn.004203d0
lea ecx, [esp + 0xb8]
mov byte [esp + 0x258], 0xa
call fcn.00420350
lea ecx, [esp + 0x24]
mov dword [esp + 0x258], 0xffffffff
call fcn.00420260
push 0xffffffffffffffff
call fcn.00485720
mov ecx, eax
call fcn.00485710
lea ecx, [esi + 0x3ac]
call fcn.00530b1a
jmp 0x43c4bc
mov eax, dword [esp + 0x1f0]
cmp eax, 0x10003
jne 0x43c363
push ebx
mov ecx, esi
call fcn.00435380
cmp ebp, 0x10007
je 0x43c32a
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10005
jne 0x43c03b
cmp dword [esp + 0x18], ebx
je 0x43c32a
lea ecx, [esp + 0x10]
or ebp, 0xffffffff
push ecx
mov ecx, esi
mov dword [esp + 0x25c], ebp
call fcn.00435370
mov ecx, eax
call fcn.0047f280
mov eax, dword [eax]
mov ecx, esi
push eax
mov dword [esp + 0x25c], 0x16
call fcn.00438420
lea ecx, [esp + 0x10]
mov edi, eax
mov dword [esp + 0x258], ebp
call fcn.00530b8f
push ecx
cmp edi, ebx
mov dword [esp + 0x14], esp
je 0x43bfe8
mov edx, esp
mov ecx, esi
push edx
call fcn.00435370
mov ecx, eax
call fcn.0047f280
lea eax, [esp + 0x14]
lea ecx, [esi + 0x450]
push eax
call fcn.0048b960
lea ecx, [esp + 0x10]
call fcn.00530b8f
cmp dword [esi + 0x378], ebx
je 0x43bfd8
mov ecx, esi
call fcn.00444020
lea ecx, [esi + 0x3ac]
call fcn.00530b1a
jmp 0x43c32a
lea edx, [esi + 0x350]
mov ecx, esp
push edx
call fcn.00530904
lea eax, [esp + 0x14]
lea ecx, [esi + 0x450]
push eax
call fcn.0048b960
mov eax, dword [eax]
mov ecx, esi
push eax
mov dword [esp + 0x25c], 0x17
call fcn.00438420
lea ecx, [esp + 0x10]
mov dword [esp + 0x258], ebp
call fcn.00530b8f
lea ecx, [esi + 0x3ac]
call fcn.00530b1a
jmp 0x43c32a
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10006
je 0x43c32a
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10001
jne 0x43c1c6
lea ecx, [esp + 0x20]
call fcn.0047d420
mov dword [esp + 0x258], 0x18
call fcn.004a58e0
lea ecx, [esp + 0x20]
mov edi, eax
push ecx
mov ecx, esi
mov ebp, dword [edi]
call fcn.00435370
mov ecx, eax
call fcn.0047f160
push eax
mov ecx, edi
call dword [ebp + 0xc]
mov edx, dword [esp + 0x8c]
mov ecx, esi
push edx
call fcn.00435370
mov ecx, eax
call fcn.0047f260
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x128]
lea ecx, [esp + 0x1d0]
mov dword [esp + 0x258], 0x1e
call fcn.00530b8f
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x258], 0x1d
call fcn.00530b8f
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x258], 0x1c
call fcn.00530b8f
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x258], 0x1b
call fcn.00530b8f
lea ecx, [esp + 0x148]
mov byte [esp + 0x258], 0x1a
call fcn.004072f0
lea ecx, [esp + 0xb4]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x118]
mov byte [esp + 0x258], 0x23
call fcn.00530b8f
lea ecx, [esp + 0x114]
mov byte [esp + 0x258], 0x22
call fcn.00530b8f
lea ecx, [esp + 0x110]
mov byte [esp + 0x258], 0x21
call fcn.00530b8f
lea ecx, [esp + 0x10c]
mov byte [esp + 0x258], 0x20
call fcn.00530b8f
lea ecx, [esp + 0xf0]
mov byte [esp + 0x258], 0x1f
call fcn.004203d0
lea ecx, [esp + 0xb8]
mov byte [esp + 0x258], 0x19
call fcn.00420350
lea ecx, [esp + 0x24]
mov dword [esp + 0x258], 0xffffffff
call fcn.00420260
jmp 0x43c32a
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10002
jne 0x43c2b3
cmp dword [esp + 0x18], ebx
je 0x43c32a
mov eax, dword [esi + 0x470]
mov ecx, esi
cmp eax, ebx
je 0x43c287
lea edx, [esp + 0x10]
push edx
call fcn.00435370
mov ecx, eax
call fcn.0047f310
mov eax, dword [eax]
mov ecx, dword [esi + 0x470]
push eax
mov dword [esp + 0x25c], 0x24
call fcn.00433ca0
or edi, 0xffffffff
lea ecx, [esp + 0x10]
mov dword [esp + 0x258], edi
call fcn.00530b8f
mov eax, dword [esi + 0x470]
push ebx
push eax
lea ecx, [esi + 0x48]
call fcn.00415f90
push ecx
mov dword [esi + 0x470], ebx
mov ecx, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f310
mov dword [esp + 0x25c], 0x25
call fcn.004a58e0
mov edx, dword [eax]
push 0x68
mov ecx, eax
mov dword [esp + 0x260], edi
call dword [edx + 0x6c]
jmp 0x43c32a
call fcn.00440090
lea eax, [esp + 0x1c]
mov ecx, esi
push eax
call fcn.00435370
mov ecx, eax
call fcn.0047f310
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x1c]
call fcn.00530b8f
jmp 0x43c32a
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10009
mov ecx, esi
jne 0x43c2df
call fcn.00441980
test eax, eax
jne 0x43c32a
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x128]
jmp 0x43c32a
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10007
mov ecx, esi
jne 0x43c309
call fcn.00441980
test eax, eax
jne 0x43c32a
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x128]
jmp 0x43c32a
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp eax, 0x10008
mov ecx, esi
je 0x43c2ca
call fcn.00435370
mov ecx, eax
call fcn.0047f1d0
cmp dword [esi + 0x374], ebx
jne 0x43c339
mov ecx, esi
call fcn.00441990
push 1
mov ecx, esi
call fcn.00445750
mov eax, dword [esi + 0x3c]
mov eax, dword [eax + 0x50]
cmp eax, 0xffffffff
je 0x43c4bc
push eax
call fcn.00485720
mov ecx, eax
call fcn.00485710
jmp 0x43c4bc
cmp eax, 0x10002
jne 0x43c3b3
push ebx
mov ecx, esi
mov dword [esi + 0x470], ebx
call fcn.00445750
push ebx
mov ecx, esi
call fcn.00435380
mov edx, dword [esi + 0x370]
xor ecx, ecx
cmp edx, ebx
mov edx, dword [esi + 0x3c]
sete cl
mov dword [edx + 0x2d4], ecx
mov eax, dword [esi + 0x370]
cmp eax, ebx
je 0x43c4bc
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x128]
jmp 0x43c4bc
cmp eax, 0x10005
jne 0x43c3e1
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0x470], ebx
push eax
mov dword [ecx + 0x2d4], 1
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f470
jmp 0x43c4bc
cmp eax, 0x10007
jne 0x43c40b
mov edx, dword [esi + 0x3c]
mov dword [esi + 0x470], ebx
cmp dword [edx + 0x2d4], ebx
jne 0x43c4bc
push 1
mov ecx, esi
call fcn.00435380
jmp 0x43c4bc
cmp eax, 0x20002
je 0x43c424
cmp eax, 0x20004
je 0x43c424
cmp eax, 0x20005
jne 0x43c4bc
push 1
mov ecx, esi
call fcn.00435380
jmp 0x43c4bc
cmp eax, 3
jne 0x43c4bc
push ebx
mov ecx, esi
call fcn.00435380
mov eax, dword [esi + 0x3c]
push 0x10005
mov ecx, esi
mov dword [eax + 0x2d4], 1
call fcn.00435370
mov ecx, eax
call fcn.0047f470
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f160
test eax, eax
je 0x43c4b5
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f160
push eax
mov ecx, 0x66d5b0
call fcn.004a7340
push ebx
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f170
push ebx
mov ecx, esi
call fcn.00435370
mov ecx, eax
call fcn.0047f3e0
push ebx
push ebx
mov ecx, esi
call fcn.0043b180
mov ecx, esi
call fcn.004418d0
mov ecx, dword [esp + 0x250]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x24c
ret