Function at 0x43ae46
Capabilities:
Delete file

Disassembly:
push 0x264
mov eax, 0x4d2fc7
call fcn.004b3b70
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x270]
call fcn.00430017
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00423d39
call fcn.004670b0
pop ecx
cmp eax, ebx
jne 0x43aead
push 5
pop edi
lea esi, [ebp - 0x270]
call fcn.00431f6f
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
mov eax, edi
jmp 0x43b232
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00423d39
lea eax, [ebp - 0xe0]
push eax
call fcn.00478360
mov byte [ebp - 4], 3
cmp dword [ebp - 0x58], ebx
jne 0x43aee7
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
push 0xe
jmp 0x43ae84
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0xe0]
call fcn.004288f8
pop ecx
test al, al
jne 0x43af14
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
push 0xf
jmp 0x43ae84
push ecx
lea eax, [ebp - 0x214]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00423d39
call fcn.004670f0
pop ecx
cmp eax, ebx
jne 0x43af46
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
push 0x10
jmp 0x43ae84
push ecx
mov dword [ebp - 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x270]
call fcn.00423607
push edi
mov ecx, esi
call fcn.004755b0
pop ecx
pop ecx
call fcn.004670b0
pop ecx
cmp eax, ebx
je 0x43b1ff
push ecx
mov dword [ebp - 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.VirtReg.export
call fcn.00423607
push edi
mov ecx, esi
call fcn.004755b0
pop ecx
pop ecx
call fcn.004670b0
pop ecx
cmp eax, ebx
je 0x43b1ff
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x264]
push str._s.VirtFiles.db
push eax
call fcn.00464a80
lea eax, [ebp - 0x10]
add esp, 0xc
push eax
call fcn.004643e0
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00423d39
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x18], esp
mov esi, str.Main
push esi
call fcn.00423607
push 4
pop ecx
lea edi, [ebp - 0xe0]
mov byte [ebp - 4], 4
call fcn.0047a750
cmp eax, ebx
je 0x43b035
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
push 8
jmp 0x43ae84
lea eax, [ebp - 0xe0]
call fcn.00479240
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x50], ebx
lea edi, [ebp - 0x4c]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x50]
call fcn.00423d39
mov ecx, edi
call fcn.0046fc30
add esp, 0xc
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x34], ebx
lea edi, [ebp - 0x30]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.VirtFiles.db
call fcn.00423607
push edi
lea ecx, [ebp - 0x270]
call fcn.004755b0
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
call fcn.0046fc30
add esp, 0xc
lea eax, [ebp - 0x50]
push eax
push 0x438f6f
push ebx
push dword [ebp - 0x2c]
lea eax, [ebp - 0x34]
push eax
call fcn.004812f0
mov ebx, dword [ebp - 0x10]
lea eax, [ebp - 0x50]
push eax
call fcn.00481470
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00423d39
lea eax, [ebp - 0x170]
push eax
call fcn.00478360
mov byte [ebp - 4], 6
cmp dword [ebp - 0xe8], 0
jne 0x43b129
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 4
call fcn.004266c5
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
push 7
jmp 0x43ae84
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.00423607
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x10]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00423d39
lea eax, [ebp - 0x170]
push eax
mov byte [ebp - 4], 6
call fcn.00479f70
test eax, eax
lea eax, [ebp - 0x170]
je 0x43b182
call fcn.00479240
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 4
call fcn.004266c5
jmp 0x43b014
call fcn.00479240
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x170]
je 0x43b1bb
call fcn.004266c5
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
push 0xa
jmp 0x43ae84
call fcn.004266c5
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
lea esi, [ebp - 0x270]
call fcn.00431f6f
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
xor eax, eax
jmp 0x43b232
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004266c5
lea esi, [ebp - 0x270]
call fcn.00431f6f
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
push 6
pop eax
call fcn.004b3c48
ret