Function at 0x44f9d3
Capabilities:
Delete file

Disassembly:
push 0x7c
mov eax, 0x467e5d
call fcn.0045f4d4
mov esi, dword [ebp + 8]
push esi
lea ecx, [ebp - 0x38]
call fcn.004132f9
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
jae 0x44f9fc
lea eax, [ebp - 0x34]
push ebx
push eax
call fcn.0043f6de
pop ecx
pop ecx
test eax, eax
je 0x44fa57
push esi
lea eax, [ebp - 0x88]
push eax
call fcn.00455b67
mov byte [ebp - 4], 1
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x38]
call fcn.00411dfc
mov byte [ebp - 4], bl
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x88]
call fcn.00411dad
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
jae 0x44fa45
lea eax, [ebp - 0x34]
push ebx
push eax
call fcn.0043f6de
pop ecx
pop ecx
test eax, eax
je 0x44fa5a
jmp 0x44fc24
xor esi, esi
inc esi
push 0x403848
lea ecx, [ebp - 0x54]
call fcn.004132cd
mov byte [ebp - 4], 2
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov byte [ebp - 4], 3
sub esp, 0x1c
lea eax, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x5c], esp
push eax
call fcn.004132f9
mov byte [ebp - 4], 4
lea eax, [ebp - 0x6c]
push eax
sub esp, 0x1c
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x58], esp
push eax
call fcn.004132f9
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
call fcn.004529c8
cmp al, bl
je 0x44fc0b
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x68]
sub eax, ecx
and eax, 0xfffffff0
cmp eax, 0x10
jne 0x44fc0b
mov eax, dword [ecx + 8]
sub eax, dword [ecx + 4]
push 0x1c
cdq
pop edi
idiv edi
cmp eax, esi
jne 0x44fc0b
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x14]
xor ecx, ecx
push 2
add eax, 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043e65e
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x14]
add eax, 2
push eax
push ebx
push dword [ebp - 0x58]
call fcn.00443420
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 4]
add esp, 0x10
cmp dword [eax + 0x18], 8
jb 0x44fb29
mov ecx, dword [eax + 4]
jmp 0x44fb2c
lea ecx, [eax + 4]
mov eax, dword [eax + 0x14]
push ecx
add eax, 2
push eax
push dword [ebp - 0x58]
call fcn.0043e66e
mov esi, 0x40383c
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0x58]
movsw word es:[edi], word [esi]
mov dword [ebp - 0x5c], ebx
call fcn.0043f94c
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0x18
jmp 0x44fb8b
push ebx
push esi
call fcn.0043f6de
pop ecx
pop ecx
test eax, eax
jne 0x44fb7a
push esi
call edi
test eax, eax
je 0x44fbdf
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
call fcn.0043f94c
add esp, 0xc
mov esi, eax
cmp esi, ebx
jne 0x44fb66
push dword [ebp - 0x58]
call fcn.0043e6e2
cmp dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x34]
pop ecx
jae 0x44fba6
lea eax, [ebp - 0x34]
push eax
call edi
test eax, eax
je 0x44fbe8
call fcn.00456a55
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.0044f997
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00411dad
mov al, 1
jmp 0x44fc34
push dword [ebp - 0x58]
call fcn.0043e6e2
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.0044f997
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push 1
jmp 0x44fc2a
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.0044f997
mov byte [ebp - 4], bl
push ebx
push esi
lea ecx, [ebp - 0x54]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push esi
lea ecx, [ebp - 0x38]
call fcn.00411dad
xor al, al
call fcn.0045f566
ret 4