Function at 0x449ea4
Capabilities:
Check if file exists
Delete file
Get file attributes

Disassembly:
mov eax, 0x608362
call fcn.00465b38
sub esp, 0xb4
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
cmp esi, ebx
je 0x44a498
cmp word [esi], bx
je 0x44a498
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x44a498
cmp word [eax], bx
je 0x44a498
cmp dword [ebp + 0x10], ebx
je 0x44a498
push eax
call fcn.0044a4b6
pop ecx
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x44], 1
call fcn.00487780
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], ebx
call fcn.00487780
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 1
cmp eax, ebx
mov dword [ebp - 0x1c], ebx
je 0x449f20
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
push edi
push ebx
lea eax, [ebp - 0x30]
push ebx
push eax
push esi
call fcn.0044a5d2
add esp, 0x10
xor edi, edi
cmp dword [ebp - 0x2c], ebx
mov esi, 0x69dc58
jle 0x449f4e
push esi
lea ecx, [ebp - 0x5c]
push dword [ebp - 0x58]
call fcn.00487df0
inc edi
cmp edi, dword [ebp - 0x2c]
jl 0x449f3c
mov dword [ebp - 0x74], method.CCommandLineInfo.virtual_0
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ebx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 2
call fcn.00487780
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 3
mov dword [ebp - 0x14], ebx
call fcn.00487780
mov eax, dword [ebp + 0x20]
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x449ffe
cmp word [eax], bx
je 0x449ffe
push ebx
lea ecx, [ebp - 0x40]
push ebx
push ecx
push eax
call fcn.0044a5d2
mov eax, dword [ebp - 0x3c]
add esp, 0x10
cmp eax, dword [ebp - 0x2c]
je 0x449fbb
push 0x1e6
push 1
call fcn.00449cf8
pop ecx
xor esi, esi
pop ecx
jmp 0x44a3e1
xor edi, edi
cmp eax, ebx
jle 0x44a017
mov eax, dword [ebp - 0x40]
push 0x67f860
lea ecx, [eax + edi*4]
call fcn.00484730
mov eax, dword [ebp - 0x40]
push 0x5c
lea ecx, [eax + edi*4]
call fcn.00484560
mov eax, dword [ebp - 0x40]
lea ecx, [eax + edi*4]
mov eax, dword [eax + edi*4]
cmp dword [eax - 8], ebx
je 0x449ff6
push 0x66af18
call fcn.004816b0
inc edi
cmp edi, dword [ebp - 0x3c]
jl 0x449fc1
jmp 0x44a017
xor edi, edi
cmp dword [ebp - 0x2c], ebx
jle 0x44a017
push esi
lea ecx, [ebp - 0x40]
push dword [ebp - 0x3c]
call fcn.00487df0
inc edi
cmp edi, dword [ebp - 0x2c]
jl 0x44a005
push dword [ebp + 0xc]
lea ecx, [ebp - 0x10]
call fcn.00480200
cmp dword [ebp - 0x2c], ebx
mov byte [ebp - 4], 5
je 0x44a3ad
lea eax, [ebp + 8]
push ebx
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], ebx
call fcn.0041db21
lea eax, [ebp + 0x20]
push ebx
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 6
call fcn.0041db21
lea eax, [ebp + 0x30]
push ebx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.0041db21
push 1
lea ecx, [ebp - 0x30]
pop esi
mov byte [ebp - 4], 8
push esi
push ebx
call fcn.00488530
push esi
push ebx
lea ecx, [ebp - 0x5c]
call fcn.00488530
push esi
push ebx
lea ecx, [ebp - 0x40]
call fcn.00488530
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44a1cb
test al, 0x10
je 0x44a1cb
push 0x5c
lea ecx, [ebp + 8]
call fcn.00484560
push dword [ebp + 8]
call fcn.00452930
pop ecx
push eax
lea ecx, [ebp + 0x20]
call fcn.004816b0
push 0x5c
lea ecx, [ebp + 0x20]
call fcn.004816f0
push dword [ebp + 8]
call fcn.00452930
pop ecx
push eax
lea ecx, [ebp + 0x30]
call fcn.004816b0
push 0x5c
lea ecx, [ebp + 0x30]
call fcn.004816f0
lea eax, [ebp + 8]
lea ecx, [ebp - 0x20]
push eax
call fcn.0047fff0
push 0x67158c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.004816b0
lea ecx, [ebp - 0xc0]
call fcn.0045db3e
push ebx
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x20]
mov byte [ebp - 4], 0xa
call fcn.0045dc03
cmp eax, ebx
je 0x44a1ab
lea ecx, [ebp - 0xc0]
call fcn.0045de29
lea ecx, [ebp - 0xc0]
mov edi, eax
call fcn.0045ddec
test eax, eax
jne 0x44a1a3
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0xc0]
push eax
call fcn.0045def8
push dword [eax]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xb
call fcn.00480200
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xd
call fcn.005ecd91
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x30]
push eax
push dword [ebp - 0x2c]
call fcn.00487ee0
lea eax, [ebp + 0x20]
lea ecx, [ebp - 0x5c]
push eax
push dword [ebp - 0x58]
call fcn.00487ee0
lea eax, [ebp + 0x30]
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x3c]
call fcn.00487ee0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.00480a70
cmp edi, ebx
jne 0x44a125
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 9
call fcn.0045db7d
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.00480a70
jmp 0x44a348
push dword [ebp + 8]
call fcn.00452930
pop ecx
push eax
lea ecx, [ebp + 0x20]
call fcn.00480d50
mov eax, dword [ebp + 0x20]
cmp dword [eax - 8], 0x78
jge 0x44a427
push ebx
cmp dword [ebp - 0x44], ebx
push dword [ebp - 0x1c]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push ebx
push dword [ebp + 0x10]
je 0x44a2b2
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0043b652
add esp, 0x24
test eax, eax
je 0x44a42e
push dword [ebp + 0xc]
lea eax, [ebp - 0x4c]
push eax
call fcn.0044a742
pop ecx
pop ecx
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xe
call fcn.00480d50
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.005ecd91
xor eax, eax
lea edi, [ebp - 0x90]
mov dword [ebp - 0x94], ebx
push ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x94]
mov dword [ebp - 0x44], ebx
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x18], esi
call fcn.0043b540
add esp, 0x10
cmp eax, 4
jne 0x44a293
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x74]
push eax
call fcn.004290f5
lea eax, [ebp + 0x30]
lea ecx, [ebp - 0x84]
push eax
push dword [ebp - 0x80]
call fcn.00487ee0
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp + 0x30]
mov eax, dword [eax - 8]
mov ecx, dword [ecx - 8]
add eax, ecx
cmp eax, dword [ebp - 0x14]
jle 0x44a34b
mov dword [ebp - 0x14], eax
jmp 0x44a34b
push dword [ebp - 0x10]
push dword [ebp + 8]
call fcn.0043b652
add esp, 0x24
test eax, eax
je 0x44a44a
xor eax, eax
lea edi, [ebp - 0xa0]
mov dword [ebp - 0xa4], ebx
push ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xa4]
push eax
push ebx
push dword [ebp - 0x10]
call fcn.0043b540
add esp, 0x10
cmp eax, 4
jne 0x44a313
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x74]
push eax
call fcn.004290f5
lea eax, [ebp + 0x30]
lea ecx, [ebp - 0x84]
push eax
push dword [ebp - 0x80]
call fcn.00487ee0
push ebx
push ebx
push ebx
push dword [ebp + 0x28]
push ebx
push ebx
push esi
push dword [ebp + 0xc]
push dword [ebp - 0x10]
call fcn.0044b4d2
add esp, 0x24
test eax, eax
je 0x44a46f
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp + 0x30]
mov eax, dword [eax - 8]
mov ecx, dword [ecx - 8]
add eax, ecx
cmp eax, dword [ebp - 0x14]
jle 0x44a348
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], esi
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 7
call fcn.00480a70
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 6
call fcn.00480a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.00480a70
cmp dword [ebp - 0x2c], ebx
jne 0x44a02f
push dword [ebp + 0x40]
lea eax, [ebp - 0x84]
push dword [ebp + 0x3c]
push dword [ebp + 0x38]
push dword [ebp + 0x34]
push dword [ebp + 0x2c]
push dword [ebp + 0x28]
push dword [ebp - 0x14]
push dword [ebp + 0x24]
push eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp + 0xc]
call fcn.00447d64
add esp, 0x2c
test eax, eax
jne 0x44a3ad
mov dword [ebp - 0x18], ebx
push dword [ebp + 0xc]
push dword [ebp - 0x10]
call fcn.00466804
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
pop ecx
cmp eax, ebx
pop ecx
je 0x44a3c9
push dword [ebp - 0x10]
call edi
mov esi, dword [ebp - 0x18]
cmp esi, ebx
jne 0x44a3d5
push dword [ebp + 0xc]
call edi
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call fcn.00480a70
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 3
call fcn.00487790
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 2
call fcn.00487790
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.00429120
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], bl
call fcn.00487790
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00487790
mov eax, esi
pop edi
jmp 0x44a4a8
push 0x228
jmp 0x44a45d
push ebx
push ebx
call fcn.004399df
pop ecx
cmp eax, 3
pop ecx
jne 0x44a443
push 0x231
jmp 0x44a45d
push 0x233
jmp 0x44a466
push ebx
push ebx
call fcn.004399df
pop ecx
cmp eax, 3
pop ecx
jne 0x44a461
push 0x24e
push 3
jmp 0x44a468
push 0x250
push 4
call fcn.00449cf8
pop ecx
pop ecx
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 7
call fcn.00480a70
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 6
call fcn.00480a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.00480a70
jmp 0x44a3ad
push 0x1c6
push 1
call fcn.00449cf8
pop ecx
xor eax, eax
pop ecx
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret