Function at 0x43df84
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53688e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x340
mov dword [ebp - 0x348], ecx
call fcn.004090a0
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x34c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x34c]
call dword [edx + 0xbc]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
je 0x43e15b
mov eax, dword [ebp - 0x328]
cmp dword [eax + 0xc0], 0
je 0x43e15b
mov ecx, dword [ebp - 0x328]
call fcn.004413e0
test eax, eax
jne 0x43e018
mov ecx, dword [ebp - 0x328]
mov ecx, dword [ecx + 0x1f0]
call fcn.004339f0
test eax, eax
jne 0x43e15b
lea edx, [ebp - 0x330]
push edx
mov ecx, dword [ebp - 0x328]
call fcn.004410e0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x32c]
call fcn.00513a62
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x32c]
push ecx
call fcn.004257b1
add esp, 4
push 0x55fe50
lea ecx, [ebp - 0x32c]
call fcn.00440f30
test eax, eax
jne 0x43e079
lea edx, [ebp - 0x330]
push edx
call fcn.0042570b
add esp, 4
push 0x55fe58
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x334]
push ecx
call fcn.00513f82
mov byte [ebp - 4], 2
push 0
mov ecx, dword [ebp - 0x328]
call fcn.004437b0
mov edx, dword [ebp - 0x328]
mov ecx, dword [edx + 0x1f0]
call fcn.00482417
mov ecx, dword [ebp - 0x328]
call fcn.0044630e
lea ecx, [ebp - 0x334]
call fcn.00409600
push eax
call dword [sym.imp.kernel32.dll_DeleteFileA]
push 0
mov ecx, dword [ebp - 0x328]
call fcn.004095c0
mov eax, dword [ebp - 0x328]
mov dword [eax + 0x22c], 0
mov ecx, dword [ebp - 0x328]
mov dword [ecx + 0x94], 0
lea ecx, [ebp - 0x330]
call fcn.00409600
push eax
mov edx, dword [ebp - 0x328]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x328]
call dword [eax + 0x74]
push 0
push 0
push 0
mov ecx, dword [ebp - 0x328]
call fcn.00519f6e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x334]
call fcn.00513ced
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x32c]
call fcn.00513ced
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.00513ced
call fcn.004090a0
mov ecx, dword [eax + 0x1c]
add ecx, 0xa08
mov dword [ebp - 0x218], ecx
mov ecx, dword [ebp - 0x218]
call fcn.00478dcc
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x43e193
mov eax, 1
jmp 0x43e3d0
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x214]
call fcn.004016b0
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x324]
shl edx, 2
push edx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
push ecx
mov ecx, dword [ebp - 0x218]
call fcn.00478e20
mov dword [ebp - 0x21c], 0
jmp 0x43e200
mov edx, dword [ebp - 0x21c]
add edx, 1
mov dword [ebp - 0x21c], edx
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x324]
jge 0x43e35f
mov ecx, dword [ebp - 0x21c]
mov edx, dword [ebp - 0x110]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x218]
call fcn.00478d94
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x10c]
push ecx
mov ecx, dword [ebp - 0x220]
call fcn.004045b3
lea edx, [ebp - 0x10c]
push edx
lea ecx, [ebp - 0x338]
call fcn.00513d5b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x338]
call fcn.00409600
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004fa590
add esp, 8
push 0x55fe60
lea ecx, [ebp - 0x320]
push ecx
call fcn.004fa5a0
add esp, 8
lea edx, [ebp - 0x320]
push edx
call dword [sym.imp.kernel32.dll_DeleteFileA]
lea ecx, [ebp - 0x338]
call fcn.00409600
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004fa590
add esp, 8
push 0x55fe68
lea ecx, [ebp - 0x320]
push ecx
call fcn.004fa5a0
add esp, 8
lea edx, [ebp - 0x320]
push edx
call dword [sym.imp.kernel32.dll_DeleteFileA]
lea ecx, [ebp - 0x338]
call fcn.00409600
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004fa590
add esp, 8
push 0x55fe70
lea ecx, [ebp - 0x320]
push ecx
call fcn.004fa5a0
add esp, 8
lea edx, [ebp - 0x320]
push edx
call dword [sym.imp.kernel32.dll_DeleteFileA]
lea ecx, [ebp - 0x338]
call fcn.00409600
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004fa590
add esp, 8
push 0x55fe78
lea ecx, [ebp - 0x320]
push ecx
call fcn.004fa5a0
add esp, 8
lea edx, [ebp - 0x320]
push edx
call dword [sym.imp.kernel32.dll_DeleteFileA]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x338]
call fcn.00513ced
jmp 0x43e1f1
cmp dword [ebp - 0x110], 0
je 0x43e383
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x340], eax
mov ecx, dword [ebp - 0x340]
push ecx
call fcn.005142d9
add esp, 4
mov edx, dword [ebp - 0x324]
push edx
push 0x55fe80
lea eax, [ebp - 0x210]
push eax
call fcn.004fa9f4
add esp, 0xc
push 0
push 0
lea ecx, [ebp - 0x210]
push ecx
call fcn.0051c1dd
mov dword [ebp - 0x344], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x214]
call fcn.00513ced
mov eax, dword [ebp - 0x344]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret