Function at 0x442d30
Capabilities:
Delete file

Disassembly:
sub esp, 0x110
cmp edx, 9
push ebx
push ebp
push esi
push edi
mov ebp, ecx
jb 0x442f88
xor eax, eax
mov ax, word [ebp + 7]
add eax, 9
cmp edx, eax
jne 0x442f88
mov eax, dword [0x63b638]
xor ebx, ebx
test eax, eax
mov cl, byte [ebp + 2]
mov dl, byte [ebp + 1]
setle bl
dec ebx
and ebx, eax
test ebx, ebx
jle 0x442d89
cmp byte [ebx + 8], dl
jne 0x442d79
cmp byte [ebx + 9], cl
je 0x442d8b
test ebx, ebx
jne 0x442d82
mov ebx, 0x63b634
mov ebx, dword [ebx + 4]
test ebx, ebx
jg 0x442d6f
xor ebx, ebx
test ebx, ebx
je 0x442f88
mov eax, dword [ebp + 3]
mov ecx, dword [ebx + 0xc]
cmp eax, ecx
je 0x442f54
xor edx, edx
mov esi, eax
mov dx, word [ebp + 7]
add esi, edx
cmp esi, ecx
ja 0x442f54
cmp eax, dword [ebx + 0x40]
jne 0x442f28
mov al, byte [ebx + 0x34]
mov edx, dword [ebx + 0x44]
or al, 4
xor ecx, ecx
mov byte [ebx + 0x34], al
mov al, byte [esp + 0x124]
mov byte [ebx + 0x3d], al
mov edi, dword [ebp + 3]
mov cx, word [ebp + 7]
add edi, edx
mov edx, ecx
lea esi, [ebp + 9]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ax, word [ebp + 7]
mov edx, dword [ebx + 0x40]
add edx, eax
mov dword [ebx + 0x40], edx
mov eax, dword [0x63b650]
test eax, eax
je 0x442e2b
mov cl, byte [ebx + 8]
mov dl, byte [ebx + 9]
mov byte [esp + 0x15], cl
mov ecx, dword [ebx + 0x40]
mov byte [esp + 0x16], dl
mov dl, byte [ebx + 0x3d]
mov dword [esp + 0x17], ecx
push edx
lea ecx, [esp + 0x18]
push 7
push ecx
mov byte [esp + 0x20], 5
call eax
mov edx, dword [ebx + 0xc]
mov eax, dword [ebx + 0x40]
cmp eax, edx
jne 0x442e58
mov ecx, dword [ebx + 0x44]
call fcn.0040dba0
cmp eax, dword [ebx + 0x10]
je 0x442e6a
mov al, byte [ebx + 0x34]
mov ecx, ebx
and al, 0xfb
mov dword [ebx + 0x40], 0
mov byte [ebx + 0x34], al
call fcn.00442380
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
push 0x104
lea edx, [esp + 0x20]
push 0x63b528
push edx
call sub.storm.dll_Ordinal_501
lea eax, [ebx + 0x14]
lea ecx, [esp + 0x1c]
push 0x104
push eax
push ecx
call sub.storm.dll_Ordinal_503
xor edx, edx
lea ecx, [esp + 0x1c]
call fcn.00466a40
mov ecx, 0x63b528
call fcn.0049c5f0
test eax, eax
jne 0x442eae
xor edi, edi
jmp 0x442ef0
mov edx, 0x17
lea ecx, [esp + 0x1c]
call fcn.004d36c0
mov esi, eax
test esi, esi
jne 0x442ec6
xor edi, edi
jmp 0x442ef0
mov edx, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x44]
push esi
call fcn.004d37b0
mov ecx, esi
mov edi, eax
call fcn.004d36b0
test eax, eax
je 0x442ee1
xor edi, edi
test edi, edi
jne 0x442ef4
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test edi, edi
je 0x442f15
mov al, byte [ebx + 0x34]
mov ecx, ebx
and al, 0xfb
mov byte [ebx + 0x34], al
call fcn.00442380
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
mov byte [ebx + 0x34], 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
mov eax, dword [0x63b650]
test eax, eax
je 0x442f81
mov cl, byte [ebx + 8]
mov dl, byte [ebx + 9]
mov byte [esp + 0x11], cl
mov ecx, dword [esp + 0x124]
mov byte [esp + 0x12], dl
push ecx
mov byte [esp + 0x14], 6
push 3
lea edx, [esp + 0x18]
jmp 0x442f7e
mov eax, dword [0x63b650]
test eax, eax
je 0x442f81
mov cl, byte [ebx + 8]
mov dl, byte [ebx + 9]
mov byte [esp + 0x11], cl
mov ecx, dword [esp + 0x124]
mov byte [esp + 0x12], dl
push ecx
mov byte [esp + 0x14], 6
push 3
lea edx, [esp + 0x18]
push edx
call eax
mov ecx, ebx
call fcn.00442380
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x110
ret 4