Function at 0x43526c
Capabilities:
Delete file

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xfffffecc
mov al, 0x15
call fcn.00421294
test al, al
je 0x43560f
mov edx, dword [0x4be538]
lea eax, [esp + 0x11]
call fcn.004b81b0
push 0
lea eax, [esp + 0x15]
push eax
call sub.kernel32.dll__lcreat
mov edi, eax
cmp edi, 0xffffffff
jne 0x4352b9
lea edx, [esp + 0x11]
mov ax, 3
call fcn.004acdac
jmp 0x43560f
mov byte [esp + 0x10], 1
mov eax, dword [0x4beccc]
mov dl, byte [esp + 0x10]
mov byte [eax], dl
call fcn.004ae0a4
mov al, 9
call fcn.00421294
test al, al
jne 0x4352e5
mov eax, dword [0x4beccc]
dec byte [eax]
jmp 0x435524
lea eax, [esp + 0x11]
push eax
mov eax, dword [0x4be538]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
jne 0x43530e
mov ax, 0x5a
call fcn.004aa600
mov edx, 3
call fcn.004b12a8
jmp 0x4352c9
mov eax, dword [0x4be538]
mov ecx, 0x8000000
mov edx, 0x80000000
call fcn.004adc9c
mov dword [esp], eax
cmp dword [esp], 0xffffffff
jne 0x43533c
mov edx, dword [0x4be538]
mov ax, 1
call fcn.004acdac
jmp 0x4352c9
mov eax, dword [esp]
call fcn.004b22b8
fistp qword [esp + 0x118]
wait
fild qword [esp + 0x118]
fcomp dword [0x43561c]
fnstsw ax
sahf
jne 0x43536c
mov eax, dword [esp]
push eax
call sub.kernel32.dll_CloseHandle_1
jmp 0x435515
mov eax, dword [0x4be538]
call fcn.004aed10
mov edx, eax
mov eax, dword [0x4beb38]
mov cx, 0x3c
call fcn.004b81d8
mov eax, dword [0x4beccc]
cmp byte [eax], 1
jne 0x4353a6
mov ax, 0x5c
call fcn.004aa600
mov edx, dword [0x4beb38]
call fcn.004ae1b0
jmp 0x4353ba
mov ax, 0x5d
call fcn.004aa600
mov edx, dword [0x4beb38]
call fcn.004ae1b0
mov edx, dword [0x4bedb0]
mov eax, dword [0x4bec98]
call fcn.004b81b0
mov eax, dword [0x4bec98]
xor edx, edx
call fcn.004ad8ec
xor eax, eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov eax, 0xe000
call fcn.00402504
mov esi, eax
push 0xe000
push esi
mov eax, dword [esp + 8]
push eax
call sub.kernel32.dll__hread
mov ebx, eax
mov dword [esp + 0x130], ebx
fild dword [esp + 0x130]
fild qword [esp + 8]
faddp st(1)
fistp qword [esp + 8]
wait
push ebx
push esi
push edi
call sub.kernel32.dll__hwrite
mov ebp, eax
cmp ebx, 0xffffffff
jne 0x435435
mov edx, dword [0x4be538]
mov ax, 2
call fcn.004acdac
cmp ebx, ebp
jle 0x435446
lea edx, [esp + 0x11]
mov ax, 5
call fcn.004acdac
mov eax, dword [0x4bed48]
cmp byte [eax], 0
jne 0x43547c
cmp ebx, 0xffffffff
je 0x43547c
cmp ebx, ebp
jg 0x43547c
mov eax, dword [0x4bebd4]
cmp byte [eax], 0
jne 0x4354bd
mov eax, edi
call fcn.004b22b8
add esp, 0xfffffff8
fistp qword [esp]
wait
xor eax, eax
call fcn.004adfd4
test al, al
jne 0x4354bd
mov eax, dword [esp]
push eax
call sub.kernel32.dll_CloseHandle_1
push edi
call sub.kernel32.dll_CloseHandle_1
mov ax, 0x11b
call fcn.004aa600
mov edx, 2
call fcn.004b12a8
cmp al, 1
jne 0x4354ac
lea eax, [esp + 0x11]
push eax
call sub.kernel32.dll_DeleteFileA_1
call fcn.004adbe0
mov eax, esi
call fcn.00402524
jmp 0x43560f
fild qword [esp + 8]
fild qword [esp + 0x118]
fdivp st(1)
fmul dword [0x435620]
call fcn.004028e8
mov edx, dword [0x4be344]
mov byte [edx], al
mov eax, dword [0x4be344]
mov al, byte [eax]
mov edx, dword [0x4be8d0]
cmp al, byte [edx]
je 0x4354f3
call fcn.004b5c48
call fcn.004ae0a4
test ebx, ebx
jne 0x4353ec
mov eax, dword [esp]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, esi
call fcn.00402524
call fcn.004adbe0
inc byte [esp + 0x10]
cmp byte [esp + 0x10], 0
jne 0x4352be
mov eax, edi
call fcn.004b22b8
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ax, 0x1c2
call fcn.004aa600
call fcn.004ae0e4
mov eax, dword [0x4beccc]
movzx eax, byte [eax]
mov dword [esp + 0x130], eax
fild dword [esp + 0x130]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, dword [0x4bedb0]
call fcn.004ae0e4
lea edx, [esp + 0x11]
mov eax, dword [0x4bedb0]
call fcn.004ae1b0
mov eax, edi
call fcn.004b22b8
fcomp dword [0x43561c]
fnstsw ax
sahf
jbe 0x43559e
push edi
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [0x4bedb0]
mov edx, 4
call fcn.004b12a8
jmp 0x43560f
mov eax, edi
call fcn.004b22b8
fcomp dword [0x43561c]
fnstsw ax
sahf
jne 0x4355d5
push 0x435624
mov eax, dword [0x4bedb0]
push eax
call sub.kernel32.dll_lstrcatA
mov ax, 0x11b
call fcn.004aa600
push eax
mov eax, dword [0x4bedb0]
push eax
call sub.kernel32.dll_lstrcatA
push edi
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [0x4bedb0]
mov edx, 2
call fcn.004b12a8
cmp al, 1
jne 0x43560f
lea eax, [esp + 0x11]
push eax
call sub.kernel32.dll_DeleteFileA_1
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x43560f
lea edx, [esp + 0x11]
mov ax, 4
call fcn.004acdac
add esp, 0x134
pop ebp
pop edi
pop esi
pop ebx
ret