Function at 0x43c6f9
Capabilities:
Delete file

Disassembly:
push 0x26c
mov eax, 0x4d7a47
call fcn.004b8118
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x278]
call fcn.00431417
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424d19
call fcn.00469180
pop ecx
cmp eax, ebx
jne 0x43c760
push 5
pop edi
lea esi, [ebp - 0x278]
call fcn.00433605
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, edi
jmp 0x43cae5
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424d19
lea eax, [ebp - 0xe0]
push eax
call fcn.0047a9e0
mov byte [ebp - 4], 3
cmp dword [ebp - 0x58], ebx
jne 0x43c79a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
push 0xe
jmp 0x43c737
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0xe0]
call fcn.00429a22
pop ecx
test al, al
jne 0x43c7c7
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
push 0xf
jmp 0x43c737
push ecx
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424d19
call fcn.004691c0
pop ecx
cmp eax, ebx
jne 0x43c7f9
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
push 0x10
jmp 0x43c737
push ecx
mov dword [ebp - 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x278]
call fcn.0042462c
push edi
mov ecx, esi
call fcn.004779d0
pop ecx
pop ecx
call fcn.00469180
pop ecx
cmp eax, ebx
je 0x43cab2
push ecx
mov dword [ebp - 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.VirtReg.export
call fcn.0042462c
push edi
mov ecx, esi
call fcn.004779d0
pop ecx
pop ecx
call fcn.00469180
pop ecx
cmp eax, ebx
je 0x43cab2
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x26c]
push str._s.VirtFiles.db
push eax
call fcn.00466ad0
lea eax, [ebp - 0x10]
add esp, 0xc
push eax
call fcn.004661a0
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424d19
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x18], esp
mov esi, str.Main
push esi
call fcn.0042462c
push 4
pop ecx
lea edi, [ebp - 0xe0]
mov byte [ebp - 4], 4
call fcn.0047cdd0
cmp eax, ebx
je 0x43c8e8
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
push 8
jmp 0x43c737
lea eax, [ebp - 0xe0]
call fcn.0047b8c0
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x50], ebx
lea edi, [ebp - 0x4c]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x50]
call fcn.00424d19
mov ecx, edi
call fcn.00472050
add esp, 0xc
push 6
pop ecx
xor eax, eax
mov dword [ebp - 0x34], ebx
lea edi, [ebp - 0x30]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push str.VirtFiles.db
call fcn.0042462c
push edi
lea ecx, [ebp - 0x278]
call fcn.004779d0
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
call fcn.00472050
add esp, 0xc
lea eax, [ebp - 0x50]
push eax
push 0x43a82b
push ebx
push dword [ebp - 0x2c]
lea eax, [ebp - 0x34]
push eax
call fcn.00486600
mov ebx, dword [ebp - 0x10]
lea eax, [ebp - 0x50]
push eax
call fcn.00486780
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x18], esp
mov ecx, esp
push eax
call fcn.00424d19
lea eax, [ebp - 0x170]
push eax
call fcn.0047a9e0
mov byte [ebp - 4], 6
cmp dword [ebp - 0xe8], 0
jne 0x43c9dc
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 4
call fcn.004276f3
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
push 7
jmp 0x43c737
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
call fcn.0042462c
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x10]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424d19
lea eax, [ebp - 0x170]
push eax
mov byte [ebp - 4], 6
call fcn.0047c5f0
test eax, eax
lea eax, [ebp - 0x170]
je 0x43ca35
call fcn.0047b8c0
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 4
call fcn.004276f3
jmp 0x43c8c7
call fcn.0047b8c0
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x170]
je 0x43ca6e
call fcn.004276f3
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
push 0xa
jmp 0x43c737
call fcn.004276f3
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
lea esi, [ebp - 0x278]
call fcn.00433605
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
jmp 0x43cae5
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004276f3
lea esi, [ebp - 0x278]
call fcn.00433605
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
push 6
pop eax
call fcn.004b81f0
ret