Function at 0x44cbb0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x668
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x664], eax
push esi
push edi
push 0x296e
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
push 0
push 0
push 0x1004
push edi
mov dword [esp + 0x1c], edi
call esi
mov ecx, str.PRVCY
test eax, eax
jne 0x44cc51
mov edx, 0x4b3f1c
call fcn.00478640
push eax
lea eax, [esp + 0x25c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x258]
mov edx, 0x4b3f08
push 0x30
push eax
mov ecx, str.PRVCY
call fcn.00478640
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
mov ecx, dword [esp + 0x664]
xor ecx, esp
call fcn.0048ea75
mov esp, ebp
pop ebp
ret
mov edx, 0x4b3f2c
call fcn.00478640
push eax
lea eax, [esp + 0x464]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x460]
mov edx, 0x4b3f24
push 0x24
push eax
mov ecx, str.PRVCY
call fcn.00478640
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44ce74
push 0
push 0
push 0x1004
push edi
call esi
mov edi, eax
lea eax, [esp + 0x10]
push eax
push dword [0x4e5c10]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x10]
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetClientRect]
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x10]
sub esi, dword [esp + 0x14]
push eax
push 0
push 0x40a
push dword [0x4e5c10]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x1c]
sub ecx, dword [esp + 0x14]
push 0
push dword [0x4e5c0c]
sub esi, ecx
push 0x2970
push dword [0x4e6030]
lea eax, [ecx - 4]
add esi, 2
push eax
push 0x132
push esi
push 2
push 0x50000000
push 0
push 0x4b39d8
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x402
push eax
mov dword [esp + 0x18], eax
call esi
movzx ecx, di
mov edi, dword [esp + 8]
shl ecx, 0x10
push ecx
push 0
push 0x401
push edi
call esi
push 0
push 1
push 0x404
push edi
call esi
push 0x204
lea eax, [esp + 0x58]
mov dword [esp + 0x54], 0
push 0
push eax
call fcn.0048fb10
mov edi, dword [esp + 0x18]
add esp, 0xc
push 0
push 0
push 0x1004
push edi
call esi
test eax, eax
je 0x44ce6a
nop dword [eax]
nop dword [eax + eax]
lea eax, [esp + 0x50]
mov dword [esp + 0x18], 2
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
push 0
push 0x1073
push edi
mov dword [esp + 0x38], 0x104
call esi
xorps xmm0, xmm0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x50]
movaps xmmword [esp + 0x10], xmm0
push eax
movq qword [esp + 0x24], xmm0
mov word [esp + 0x30], 0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor ecx, ecx
cmp word [esp + eax*2 + 0x4e], 0x5c
jne 0x44ce00
mov word [esp + eax*2 + 0x4e], cx
jmp 0x44ce05
mov word [esp + eax*2 + 0x52], cx
mov eax, dword [0x4e6030]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x50]
mov dword [esp + 0x18], eax
mov eax, 0x450
mov word [esp + 0x20], ax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x18], 3
mov dword [esp + 0x20], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
push 0
push 0
push 0x405
push dword [esp + 0x14]
call esi
push 0
push 0
push 0x1008
push edi
call esi
push 0
push 0
push 0x1004
push edi
call esi
test eax, eax
jne 0x44cda0
push dword [esp + 8]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ecx, dword [esp + 0x66c]
pop edi
pop esi
xor ecx, esp
call fcn.0048ea75
mov esp, ebp
pop ebp
ret