Function at 0x438290
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x48a0ab
mov eax, dword fs:[0]
push eax
sub esp, 0x23c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b9b20]
xor eax, esp
push eax
lea eax, [esp + 0x250]
mov dword fs:[0], eax
xor edi, edi
mov dword [esp + 0x2c], edi
call fcn.00439390
mov esi, dword [esp + 0x264]
push esi
call fcn.00434290
add esp, 4
test eax, eax
jne 0x4382ed
push esi
call fcn.004345e0
add esp, 4
test al, al
je 0x438382
lea ecx, [esp + 0x14]
call fcn.004366a0
mov dword [esp + 0x258], edi
mov dword [esp + 0x30], 1
mov dword [esp + 0x34], 0x64
xor esi, esi
nop
push 0x216
lea eax, [esp + 0x3c]
push edi
push eax
call fcn.004661f0
mov ecx, dword [esp + esi*4 + 0x3c]
add esp, 0xc
lea edx, [esp + 0x38]
mov dword [esp + 0x38], ecx
push edx
lea ecx, [esp + 0x18]
call fcn.00436a90
inc esi
cmp esi, 2
jb 0x438310
mov ecx, dword [esp + 0x260]
lea eax, [esp + 0x14]
push eax
push ecx
call fcn.004349d0
add esp, 8
test eax, eax
jne 0x438389
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x438369
push eax
call fcn.004435c9
add esp, 4
mov edx, dword [esp + 0x14]
push edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
call fcn.004435c9
add esp, 4
xor eax, eax
jmp 0x4388f5
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4387cf
xor ebx, ebx
cmp edi, eax
jb 0x4383bf
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebx + ecx], 1
je 0x4383ea
inc edi
add ebx, 0x216
cmp edi, eax
jb 0x4383bf
jmp 0x4387cf
cmp edi, eax
jb 0x4383fb
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
mov ebx, edi
imul ebx, ebx, 0x216
mov ebp, dword [ebx + ecx + 4]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438427
call fcn.004686af
mov ecx, dword [esp + 0x20]
mov ecx, dword [ebx + ecx + 8]
push 1
push 0x20100506
push ecx
push ebp
call fcn.00434190
add esp, 0x10
test eax, eax
je 0x4387c7
test ebp, ebp
je 0x4387c7
mov ecx, dword [esp + 0x26c]
lea eax, [ebp + 0x1e4]
mov ebp, dword [esp + 0x268]
push ecx
push ebp
push eax
lea edx, [esp + 0x20]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x26c]
push edx
push eax
call fcn.00434d60
add esp, 0x14
test eax, eax
je 0x4387c7
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x4385e8
xor ebx, ebx
cmp edi, eax
jb 0x4384bc
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 1
je 0x4385bd
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4384ec
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 0x64
je 0x4385bd
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43851c
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x4385bd
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43854d
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 8], 0
je 0x4385bd
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43857a
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ebp, [ebx + ecx]
cmp edi, eax
jb 0x43859d
call fcn.004686af
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
mov eax, dword [ebp + 8]
mov ecx, dword [ebx + ecx + 4]
push 0x20
push edx
push eax
push ecx
call fcn.0043a670
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
add esp, 0x10
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x4384bc
mov ebp, dword [esp + 0x268]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x4387bd
xor ebx, ebx
jmp 0x438617
mov ebp, dword [esp + 0x268]
cmp edi, eax
jb 0x438628
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx], 0x64
jne 0x438799
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438658
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x438735
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438689
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 8], 0
je 0x438735
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4386ba
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ebp, [ebx + ecx]
cmp edi, eax
jb 0x4386dd
call fcn.004686af
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x270]
mov eax, dword [esp + 0x26c]
push edx
mov edx, dword [esp + 0x26c]
push eax
mov eax, dword [esp + 0x26c]
push edx
mov edx, dword [ebp + 8]
push eax
mov eax, dword [ebx + ecx + 4]
push edx
push eax
call fcn.00430440
add esp, 0x18
test eax, eax
je 0x4387c7
cmp dword [esp + 0x268], 0
je 0x438791
mov ecx, dword [esp + 0x26c]
push ecx
push 0
push 0
call dword [esp + 0x274]
jmp 0x43878a
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438755
call fcn.004686af
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x270]
mov esi, dword [esp + 0x26c]
mov eax, dword [esp + 0x264]
push edx
push esi
push ebp
push eax
lea ecx, [ebx + ecx + 0xc]
push ecx
call fcn.00430350
add esp, 0x14
test eax, eax
je 0x4387c7
test ebp, ebp
je 0x438791
push esi
push 0
push 0
call ebp
add esp, 0xc
test al, al
je 0x4387c7
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x438610
mov dword [esp + 0x2c], 1
jmp 0x4387cf
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x4388c9
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenW]
xor ebx, ebx
cmp edi, eax
jb 0x438805
call fcn.004686af
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp dword [ebx + ecx + 4], 0
je 0x438841
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43882c
call fcn.004686af
mov ecx, dword [esp + 0x20]
mov ecx, dword [ebx + ecx + 4]
push ecx
call fcn.004665d5
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 4
sub esi, ecx
mov eax, 0x7aba01eb
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x438861
call fcn.004686af
mov ecx, dword [esp + 0x20]
lea ecx, [ebx + ecx + 0xc]
push ecx
call ebp
test eax, eax
je 0x43889d
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x20]
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43888e
call fcn.004686af
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, esi
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x438805
xor esi, esi
cmp ecx, esi
je 0x4388d8
push ecx
call fcn.004435c9
add esp, 4
mov eax, dword [esp + 0x14]
push eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
call fcn.004435c9
mov eax, dword [esp + 0x30]
add esp, 4
mov ecx, dword [esp + 0x250]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret