Function at 0x44cf31
Capabilities:
Delete file
Move file

Disassembly:
push 0x238
mov eax, 0x487e06
call fcn.00468ad7
and dword [ebp - 0x220], 0
lea ebx, [ecx + 0xc]
mov eax, dword [ebx]
sub eax, 0x10
push eax
call fcn.00417b88
add eax, 0x10
mov dword [ebp - 0x230], eax
and dword [ebp - 4], 0
mov esi, 0x4983c0
push esi
call fcn.00468f76
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x230]
call fcn.00417d0b
push 0x4983bc
push dword [ebp - 0x230]
call fcn.0046a117
mov edi, eax
xor eax, eax
pop ecx
pop ecx
cmp edi, eax
je 0x44d1d2
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], eax
mov byte [ebp - 4], 1
jmp 0x44d01c
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00466c70
push edi
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0046c258
add esp, 0x18
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00418067
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 2
call fcn.004181f4
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.00417891
push edi
call fcn.0046a84b
pop ecx
test eax, eax
je 0x44cfb2
push esi
lea ecx, [ebp - 0x21c]
call fcn.00418067
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 3
call fcn.004181f4
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.00417891
push edi
call fcn.0046a79e
mov esi, dword [ebp - 0x240]
sub esi, dword [ebp - 0x244]
and dword [ebp - 0x21c], 0
pop ecx
mov edi, 0x4c1160
push edi
lea ecx, [ebp - 0x224]
sar esi, 2
call fcn.004237f4
mov eax, dword [ebp - 0x244]
mov byte [ebp - 4], 4
mov dword [ebp - 0x22c], eax
jmp 0x44d198
inc dword [ebp - 0x21c]
push esi
push dword [ebp - 0x21c]
mov ecx, 0x4c22d8
call fcn.004567dc
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x224]
call fcn.00417f16
lea ecx, [ebp - 0x224]
call fcn.00442af2
mov ecx, eax
call fcn.00441f70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x44d18b
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x234]
push ebx
push eax
call fcn.00419092
add esp, 0xc
mov eax, dword [ebp - 0x234]
push eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x220], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x44d179
push edi
lea ecx, [ebp - 0x228]
call fcn.004237f4
mov byte [ebp - 4], 6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push dword [ebp - 0x220]
lea eax, [ebp - 0x228]
push str._s_d__x
push eax
call fcn.0041915d
push dword [ebp - 0x228]
push dword [ebp - 0x220]
call fcn.00469890
add esp, 0x18
test eax, eax
jne 0x44d16b
push 4
push eax
push dword [ebp - 0x228]
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.00417891
mov ecx, dword [ebp - 0x234]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.00417891
add dword [ebp - 0x22c], 4
mov eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x240]
jne 0x44d09e
push 0
push dword [ebx]
call fcn.004471ce
pop ecx
pop ecx
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
call fcn.00417891
lea ecx, [ebp - 0x244]
call fcn.004180c7
mov dword [ebp - 0x220], 1
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.00417891
mov eax, dword [ebp - 0x220]
call fcn.00468b5a
ret