Function at 0x440183
Capabilities:
Delete file

Disassembly:
push 0x2d4
mov eax, 0x4e2220
call fcn.004c1fb1
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x178]
call fcn.0043378d
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ec9
call fcn.0046fe10
pop ecx
cmp eax, ebx
jne 0x4401ed
push 5
pop edi
lea esi, [ebp - 0x178]
call fcn.00435e6f
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, edi
jmp 0x4405de
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ec9
lea eax, [ebp - 0x250]
push eax
call fcn.00484a40
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1c8], ebx
jne 0x44022d
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
push 0xe
jmp 0x4401c4
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x250]
call fcn.0042a0f7
pop ecx
test al, al
jne 0x44025a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
push 0xf
jmp 0x4401c4
push ecx
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ec9
call fcn.0046fe50
pop ecx
cmp eax, ebx
jne 0x44028f
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
push 0x10
jmp 0x4401c4
push ecx
mov dword [ebp - 0x180], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x180], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x178]
call fcn.004247f7
push edi
mov ecx, esi
call fcn.0047ec10
pop ecx
pop ecx
call fcn.0046fe10
pop ecx
cmp eax, ebx
je 0x4405ab
push ecx
mov dword [ebp - 0x180], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x180], esp
push str.VirtReg.export
call fcn.004247f7
push edi
mov ecx, esi
call fcn.0047ec10
pop ecx
pop ecx
call fcn.0046fe10
pop ecx
cmp eax, ebx
je 0x4405ab
push ecx
mov eax, esp
mov dword [ebp - 0x180], esp
push dword [ebp - 0x16c]
push str._s.VirtFiles.db
push eax
call fcn.0046d760
lea eax, [ebp - 0x17c]
add esp, 0xc
push eax
call fcn.0046ce30
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x17c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ec9
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x184], esp
mov esi, str.Main
push esi
call fcn.004247f7
push 4
pop ecx
lea edi, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.00486e30
cmp eax, ebx
je 0x44039f
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
push 8
jmp 0x4401c4
lea eax, [ebp - 0x250]
call fcn.00485920
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x1bc], ebx
lea edi, [ebp - 0x1b8]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x184], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1bc]
call fcn.00424ec9
mov ecx, edi
call fcn.00479350
add esp, 0xc
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x1a0], ebx
lea edi, [ebp - 0x19c]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x184], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
push str.VirtFiles.db
call fcn.004247f7
push edi
lea ecx, [ebp - 0x178]
call fcn.0047ec10
pop ecx
pop ecx
lea ecx, [ebp - 0x1a0]
call fcn.00479350
add esp, 0xc
lea eax, [ebp - 0x1bc]
push eax
push 0x43db45
push ebx
push dword [ebp - 0x198]
lea eax, [ebp - 0x1a0]
push eax
call fcn.0048edb0
mov ebx, dword [ebp - 0x17c]
lea eax, [ebp - 0x1bc]
push eax
call fcn.0048ef30
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x184], esp
mov ecx, esp
push eax
call fcn.00424ec9
lea eax, [ebp - 0x2e0]
push eax
call fcn.00484a40
mov byte [ebp - 4], 6
cmp dword [ebp - 0x258], 0
jne 0x4404c6
lea eax, [ebp - 0x2e0]
mov byte [ebp - 4], 4
call fcn.00427901
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
push 7
jmp 0x4401c4
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
push esi
call fcn.004247f7
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x180], esp
mov ecx, esp
push eax
call fcn.00424ec9
lea eax, [ebp - 0x2e0]
push eax
mov byte [ebp - 4], 6
call fcn.00486650
test eax, eax
lea eax, [ebp - 0x2e0]
je 0x440528
call fcn.00485920
lea eax, [ebp - 0x2e0]
mov byte [ebp - 4], 4
call fcn.00427901
jmp 0x44037b
call fcn.00485920
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2e0]
je 0x440564
call fcn.00427901
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
push 0xa
jmp 0x4401c4
call fcn.00427901
mov ecx, dword [ebp - 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
lea esi, [ebp - 0x178]
call fcn.00435e6f
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
jmp 0x4405de
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00427901
lea esi, [ebp - 0x178]
call fcn.00435e6f
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
push 6
pop eax
call fcn.004c2034
ret