Function at 0x43ecc3
Capabilities:
Delete file

Disassembly:
push 0x2e0
mov eax, 0x604179
call fcn.004f0658
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2b0], ebx
test ebx, ebx
je 0x43f12a
call fcn.0043db05
mov esi, eax
mov dword [ebp - 0x24], 7
xor edi, edi
lea ecx, [ebp - 0x38]
xor eax, eax
mov dword [ebp - 0x38], edi
push 0x66099c
mov dword [ebp - 0x28], edi
mov word [ebp - 0x38], ax
call fcn.0040c8c9
push ebx
push edi
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], edi
call fcn.0043fdad
push eax
lea ecx, [ebp - 0x2c8]
call fcn.0040c76f
push esi
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 1
call fcn.0040c565
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0040c76f
push 0x630bd8
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 2
call fcn.0040c565
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c76f
lea ecx, [ebp - 0x2ec]
call fcn.00405795
lea ecx, [ebp - 0x2c8]
call fcn.00405795
mov eax, dword [ebp - 0x24]
cmp eax, 8
jb 0x43edb8
mov ecx, dword [ebp - 0x38]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2a4], ecx
cmp eax, 0x1000
jb 0x43edaf
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.00405741
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2a4]
push eax
push ecx
call fcn.0041b169
pop ecx
pop ecx
or dword [ebp - 0x2a4], 0xffffffff
push 0x250
lea eax, [ebp - 0x2a0]
mov byte [ebp - 4], 7
push edi
push eax
call fcn.0041c790
add esp, 0xc
lea ecx, [ebp - 0x2a0]
cmp dword [ebp - 0x3c], 8
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
push ecx
push eax
lea ecx, [ebp - 0x2a4]
call fcn.0043d859
mov ebx, eax
lea edi, [ebp - 0x20]
xor eax, eax
mov dword [ebp - 0x2ac], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov esi, edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 8
test ebx, ebx
js 0x43f0b5
cmp ebx, 1
je 0x43f0b2
lea eax, [ebp - 0x2a0]
push eax
call fcn.0043dd59
test al, al
jne 0x43ef44
test byte [ebp - 0x2a0], 0x10
jne 0x43ef44
lea eax, [ebp - 0x2a8]
push eax
push 0x104
lea eax, [ebp - 0x274]
push eax
call fcn.0043f509
test eax, eax
js 0x43ef44
xor eax, eax
mov dword [ebp - 0x38], edi
mov word [ebp - 0x38], ax
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x274]
mov dword [ebp - 0x28], edi
push eax
mov dword [ebp - 0x24], 7
call fcn.0040c8c9
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2d0], edi
mov dword [ebp - 0x2c0], edi
mov dword [ebp - 0x2bc], edi
call fcn.0040ca6e
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0xa
push ecx
cmp eax, dword [ebp - 0x18]
je 0x43eee8
mov ecx, eax
call fcn.0043d6b1
add dword [ebp - 0x1c], 0x20
jmp 0x43eef1
push eax
lea ecx, [ebp - 0x20]
call fcn.0043d540
lea ecx, [ebp - 0x2d0]
call fcn.00405795
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 8
cmp eax, 8
jb 0x43ef44
mov ecx, dword [ebp - 0x38]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2a8], ecx
cmp eax, 0x1000
jb 0x43ef3b
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.00405741
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2a8]
push eax
push ecx
call fcn.0041b169
pop ecx
pop ecx
test ebx, ebx
js 0x43f0b2
cmp dword [ebp - 0x2a4], 0xffffffff
je 0x43efc8
mov edi, dword [0x69a318]
mov eax, dword [edi]
mov esi, dword [eax + 8]
lea eax, [ebp - 0x2a0]
push eax
push dword [ebp - 0x2a4]
mov ecx, esi
call dword [0x62275c]
mov ecx, edi
call esi
test eax, eax
jne 0x43efab
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x43efba
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov dword [ebp - 0x2ac], ebx
test ebx, ebx
js 0x43f0b2
xor edi, edi
jmp 0x43ee1f
xor edi, edi
mov ebx, edi
mov dword [ebp - 0x2ac], ebx
jmp 0x43ee1f
xor ebx, ebx
inc ebx
mov dword [ebp - 0x2ac], ebx
jmp 0x43f0b2
mov ebx, 0x8000ffff
jmp 0x43efbd
xor ecx, ecx
mov edi, esi
and dword [ebp - 0x14], ecx
mov dword [ebp - 0x2a8], ecx
test eax, eax
je 0x43f021
xor ebx, ebx
lea eax, [edi + 0x18]
push eax
lea eax, [esi + 0x18]
add eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov esi, dword [ebp - 0x20]
test eax, eax
jg 0x43f005
mov ecx, dword [ebp - 0x14]
lea edi, [esi + ebx]
mov dword [ebp - 0x2a8], ecx
mov eax, dword [ebp - 0x1c]
add ebx, 0x20
mov ecx, dword [ebp - 0x14]
sub eax, esi
inc ecx
sar eax, 5
mov dword [ebp - 0x14], ecx
cmp ecx, eax
jb 0x43efe2
mov ebx, dword [ebp - 0x2ac]
mov esi, dword [ebp - 0x2b0]
lea eax, [ebp - 0x14]
push eax
push 0x104
push esi
call fcn.0043f509
test eax, eax
js 0x43f092
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x43f044
mov eax, dword [edi]
push eax
push esi
lea eax, [ebp - 0x38]
push eax
call fcn.004ae02d
cmp dword [edi + 0x14], 8
mov byte [ebp - 4], 0xb
jb 0x43f05b
mov edi, dword [edi]
push edi
push str.Removing_old_logfile_:__ls
push str.Logger
push 1
call fcn.0043f9c8
add esp, 0x10
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x43f0c8
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00405795
test ebx, ebx
js 0x43f0d6
mov eax, dword [ebp - 0x2a8]
lea ecx, [ebp - 0x20]
shl eax, 5
add eax, dword [ebp - 0x20]
push eax
lea eax, [ebp - 0x2d4]
push eax
call 0x43fd7a
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, esi
sar eax, 5
cmp eax, dword [ebp + 0xc]
ja 0x43efcf
jmp 0x43f0d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x38]
call fcn.00405795
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x43f10f
mov edi, dword [ebp - 0x1c]
cmp esi, edi
je 0x43f0f5
mov ecx, esi
call fcn.00405795
add esi, 0x20
cmp esi, edi
jne 0x43f0e4
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
sub eax, esi
and eax, 0xffffffe0
push eax
push esi
call fcn.004057c3
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2a4]
call fcn.0043d70f
lea ecx, [ebp - 0x50]
call fcn.00405795
call fcn.004f0607
ret 8
push 0x80004005
call fcn.004056b0
int3