Function at 0x434ec0
Capabilities:
Delete file

Disassembly:
sub esp, 0x4c
push ebx
push ebp
mov ebp, dword [esp + 0x58]
push esi
push edi
push ebp
mov ebx, 1
mov dword [esp + 0x14], 0
call fcn.00433e00
add esp, 4
test eax, eax
jne 0x434eef
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret 0xc
mov eax, dword [esp + 0x68]
test eax, eax
mov esi, dword [ebp]
je 0x434f37
push esi
push ebp
call fcn.004345f0
push 1
push 1
xor eax, eax
mov ecx, 0x12
lea edi, [esp + 0x24]
push 0x48
rep stosd dword es:[edi], eax
lea eax, [esp + 0x28]
push eax
push 0
push 0x43e3f0
push esi
call fcn.00434740
add esp, 0x24
test eax, eax
jne 0x434f37
mov dword [esp + 0x10], 0x8520006d
xor ebx, ebx
mov eax, dword [esi + 0x11c]
test eax, eax
je 0x435151
mov ebp, dword [esp + 0x64]
xor edi, edi
test ebp, ebp
je 0x434f54
mov edi, 1
mov eax, dword [esi + 0x178]
test eax, eax
jne 0x434f6d
mov eax, dword [esi + 0x15c]
test al, 1
jne 0x434f6d
test eax, eax
je 0x434f6d
inc edi
push edi
push esi
call fcn.00435340
mov eax, dword [esi + 0x120]
add esp, 8
cmp eax, edi
jne 0x43501f
mov ecx, dword [esi + 0x114]
push 0
push 0
push ecx
mov ecx, dword [esi + 8]
call fcn.0041b070
mov ecx, dword [esi + 8]
call fcn.0041b100
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 4]
dec eax
mov dword [ecx + 8], eax
jne 0x434fb9
test ecx, ecx
je 0x434fb9
mov edx, dword [ecx]
push 1
call dword [edx]
test edi, edi
je 0x434fc4
mov ecx, edi
call fcn.004129a0
mov eax, dword [esi + 0x114]
test eax, eax
mov dword [esi + 8], 0
jne 0x434fdf
lea eax, [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [esp + 0x60]
test eax, eax
je 0x434ff6
push 0
push 0xffffffffffffffff
push 0x440208
push eax
call fcn.00410070
test esi, esi
je 0x435010
mov ecx, esi
call fcn.00432990
push 0
push 0xffffffffffffffff
push 0x440208
push esi
call fcn.00410070
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4c
ret 0xc
mov edi, dword [esp + 0x60]
push esi
push edi
call fcn.004356a0
add esp, 8
test ebp, ebp
je 0x435059
mov ecx, dword [esi + 0x120]
mov edx, dword [esi + 0x134]
push ecx
push edx
push edi
call fcn.004351d0
add esp, 0xc
test eax, eax
mov edi, 0x85200068
jne 0x43505e
mov dword [esp + 0x10], edi
xor ebx, ebx
jmp 0x43505e
mov edi, 0x85200068
mov ecx, dword [esi + 0x114]
mov eax, dword [esi + 0x118]
push 0
add eax, ecx
mov ecx, dword [esi + 8]
push 0
push eax
mov dword [esi + 0x148], eax
call fcn.0041b070
mov eax, dword [esi + 0x148]
mov edx, dword [esi + 0x114]
sub eax, edx
push esi
mov dword [esi + 0x148], eax
call fcn.00435590
add esp, 4
test eax, eax
jne 0x4350a6
mov dword [esp + 0x10], edi
xor ebx, ebx
mov ecx, dword [esi + 8]
push 1
push 0
push 0
call fcn.0041b070
sub eax, dword [esi + 0x114]
push esi
mov dword [esi + 0x130], eax
call fcn.004354a0
add esp, 4
test eax, eax
jne 0x4350d3
mov dword [esp + 0x10], edi
xor ebx, ebx
mov ecx, dword [esi + 8]
push 1
push 0
push 0
call fcn.0041b070
mov edx, dword [esi + 0x114]
mov ecx, dword [esi + 8]
sub eax, edx
mov dword [esi + 0x17c], eax
call fcn.0041b100
test al, al
jne 0x435101
mov dword [esp + 0x10], edi
xor ebx, ebx
mov eax, dword [esi + 0x114]
push eax
push esi
call fcn.00435610
add esp, 8
test eax, eax
jne 0x43511b
mov dword [esp + 0x10], edi
xor ebx, ebx
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43513b
push eax
push esi
call fcn.00435a00
add esp, 8
test eax, eax
jne 0x43513b
mov dword [esp + 0x10], 0x8520006d
xor ebx, ebx
mov ecx, dword [esi + 8]
call fcn.0041fee0
test al, al
jne 0x43514d
mov dword [esp + 0x10], edi
xor ebx, ebx
mov ebp, dword [esp + 0x60]
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 4]
dec eax
mov dword [ecx + 8], eax
jne 0x43516a
test ecx, ecx
je 0x43516a
mov edx, dword [ecx]
push 1
call dword [edx]
test edi, edi
je 0x435175
mov ecx, edi
call fcn.004129a0
test ebp, ebp
mov dword [esi + 8], 0
je 0x43518f
push 0
push 0xffffffffffffffff
push 0x440208
push ebp
call fcn.00410070
test esi, esi
je 0x4351a9
mov ecx, esi
call fcn.00432990
push 0
push 0xffffffffffffffff
push 0x440208
push esi
call fcn.00410070
test ebx, ebx
jne 0x4351b7
mov eax, dword [esp + 0x10]
push eax
call fcn.00412210
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0x4c
ret 0xc