Function at 0x43fe17
Capabilities:
Delete file

Disassembly:
push 0x2cc
mov eax, 0x4dedc0
call fcn.004beee1
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x170]
call fcn.00433767
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424efd
call fcn.0046d1a0
pop ecx
cmp eax, ebx
jne 0x43fe81
push 5
pop edi
lea esi, [ebp - 0x170]
call fcn.00435e3e
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, edi
jmp 0x440272
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424efd
lea eax, [ebp - 0x248]
push eax
call fcn.00481b10
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1c0], ebx
jne 0x43fec1
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
push 0xe
jmp 0x43fe58
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x248]
call fcn.0042a0d4
pop ecx
test al, al
jne 0x43feee
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
push 0xf
jmp 0x43fe58
push ecx
lea eax, [ebp - 0x114]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424efd
call fcn.0046d1e0
pop ecx
cmp eax, ebx
jne 0x43ff23
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
push 0x10
jmp 0x43fe58
push ecx
mov dword [ebp - 0x178], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x178], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x170]
call fcn.004247f3
push edi
mov ecx, esi
call fcn.0047bce0
pop ecx
pop ecx
call fcn.0046d1a0
pop ecx
cmp eax, ebx
je 0x44023f
push ecx
mov dword [ebp - 0x178], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x178], esp
push str.VirtReg.export
call fcn.004247f3
push edi
mov ecx, esi
call fcn.0047bce0
pop ecx
pop ecx
call fcn.0046d1a0
pop ecx
cmp eax, ebx
je 0x44023f
push ecx
mov eax, esp
mov dword [ebp - 0x178], esp
push dword [ebp - 0x164]
push str._s.VirtFiles.db
push eax
call fcn.0046aaf0
lea eax, [ebp - 0x174]
add esp, 0xc
push eax
call fcn.0046a1c0
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x174]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x174]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424efd
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x17c], esp
mov esi, str.Main
push esi
call fcn.004247f3
push 4
pop ecx
lea edi, [ebp - 0x248]
mov byte [ebp - 4], 4
call fcn.00483f00
cmp eax, ebx
je 0x440033
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
push 8
jmp 0x43fe58
lea eax, [ebp - 0x248]
call fcn.004829f0
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x1b4], ebx
lea edi, [ebp - 0x1b0]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x174]
mov dword [ebp - 0x17c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1b4]
call fcn.00424efd
mov ecx, edi
call fcn.00476440
add esp, 0xc
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x198], ebx
lea edi, [ebp - 0x194]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x17c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x17c], esp
push str.VirtFiles.db
call fcn.004247f3
push edi
lea ecx, [ebp - 0x170]
call fcn.0047bce0
pop ecx
pop ecx
lea ecx, [ebp - 0x198]
call fcn.00476440
add esp, 0xc
lea eax, [ebp - 0x1b4]
push eax
push 0x43daf2
push ebx
push dword [ebp - 0x190]
lea eax, [ebp - 0x198]
push eax
call fcn.0048bec0
mov ebx, dword [ebp - 0x174]
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048c040
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x17c], esp
mov ecx, esp
push eax
call fcn.00424efd
lea eax, [ebp - 0x2d8]
push eax
call fcn.00481b10
mov byte [ebp - 4], 6
cmp dword [ebp - 0x250], 0
jne 0x44015a
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 4
call fcn.00427913
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
push 7
jmp 0x43fe58
push ecx
mov ecx, esp
mov dword [ebp - 0x17c], esp
push esi
call fcn.004247f3
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x174]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00424efd
lea eax, [ebp - 0x2d8]
push eax
mov byte [ebp - 4], 6
call fcn.00483720
test eax, eax
lea eax, [ebp - 0x2d8]
je 0x4401bc
call fcn.004829f0
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 4
call fcn.00427913
jmp 0x44000f
call fcn.004829f0
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2d8]
je 0x4401f8
call fcn.00427913
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
push 0xa
jmp 0x43fe58
call fcn.00427913
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
lea esi, [ebp - 0x170]
call fcn.00435e3e
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
jmp 0x440272
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00427913
lea esi, [ebp - 0x170]
call fcn.00435e3e
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
push 6
pop eax
call fcn.004bef64
ret