Function at 0x44f97c
Capabilities:
Delete file

Disassembly:
push 0x7c
mov eax, 0x4679d5
call fcn.0045f3fe
mov esi, dword [ebp + 8]
push esi
lea ecx, [ebp - 0x38]
call fcn.004132f9
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
jae 0x44f9a5
lea eax, [ebp - 0x34]
push ebx
push eax
call fcn.0043f683
pop ecx
pop ecx
test eax, eax
je 0x44fa00
push esi
lea eax, [ebp - 0x88]
push eax
call fcn.00455a34
mov byte [ebp - 4], 1
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x38]
call fcn.00411dfc
mov byte [ebp - 4], bl
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x88]
call fcn.00411dad
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
jae 0x44f9ee
lea eax, [ebp - 0x34]
push ebx
push eax
call fcn.0043f683
pop ecx
pop ecx
test eax, eax
je 0x44fa03
jmp 0x44fbcd
xor esi, esi
inc esi
push 0x403848
lea ecx, [ebp - 0x54]
call fcn.004132cd
mov byte [ebp - 4], 2
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov byte [ebp - 4], 3
sub esp, 0x1c
lea eax, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x5c], esp
push eax
call fcn.004132f9
mov byte [ebp - 4], 4
lea eax, [ebp - 0x6c]
push eax
sub esp, 0x1c
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x58], esp
push eax
call fcn.004132f9
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
call fcn.00452895
cmp al, bl
je 0x44fbb4
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x68]
sub eax, ecx
and eax, 0xfffffff0
cmp eax, 0x10
jne 0x44fbb4
mov eax, dword [ecx + 8]
sub eax, dword [ecx + 4]
push 0x1c
cdq
pop edi
idiv edi
cmp eax, esi
jne 0x44fbb4
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x14]
xor ecx, ecx
push 2
add eax, 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043e603
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x14]
add eax, 2
push eax
push ebx
push dword [ebp - 0x58]
call fcn.004433d0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 4]
add esp, 0x10
cmp dword [eax + 0x18], 8
jb 0x44fad2
mov ecx, dword [eax + 4]
jmp 0x44fad5
lea ecx, [eax + 4]
mov eax, dword [eax + 0x14]
push ecx
add eax, 2
push eax
push dword [ebp - 0x58]
call fcn.0043e613
mov esi, 0x40383c
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0x58]
movsw word es:[edi], word [esi]
mov dword [ebp - 0x5c], ebx
call fcn.0043f8f1
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0x18
jmp 0x44fb34
push ebx
push esi
call fcn.0043f683
pop ecx
pop ecx
test eax, eax
jne 0x44fb23
push esi
call edi
test eax, eax
je 0x44fb88
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
call fcn.0043f8f1
add esp, 0xc
mov esi, eax
cmp esi, ebx
jne 0x44fb0f
push dword [ebp - 0x58]
call fcn.0043e687
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
pop ecx
jae 0x44fb4f
lea eax, [ebp - 0x34]
push eax
call edi
test eax, eax
je 0x44fb91
call fcn.00456922
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.0044f940
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00411dad
mov al, 1
jmp 0x44fbdd
push dword [ebp - 0x58]
call fcn.0043e687
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.0044f940
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push 1
jmp 0x44fbd3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.0044f940
mov byte [ebp - 4], bl
push ebx
push esi
lea ecx, [ebp - 0x54]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push esi
lea ecx, [ebp - 0x38]
call fcn.00411dad
xor al, al
call fcn.0045f490
ret 4