Function at 0x44fd80
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4eb044
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x78
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
cmp ebx, edi
je 0x450228
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], edi
push edi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.004510d0
push 7
push edi
push str.Microsoft.XMLDOM
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.00451100
cmp eax, edi
jl 0x44fe13
push edi
lea ecx, [ebp - 0x14]
call fcn.00410d60
test al, al
jne 0x44fe13
lea ecx, [ebp - 0x14]
call fcn.00456260
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xfc]
lea ecx, [ebp - 0x14]
call fcn.00456260
mov edx, dword [eax]
push edi
push eax
call dword [edx + pe_nt_image_headers32]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00404bf0
cmp dword [ebp - 0x18], edi
je 0x450228
push ecx
mov dword [ebp - 0x3c], esp
mov esi, esp
push 0xc
call sub.MFC42.DLL_operatornew
mov ecx, eax
add esp, 4
mov dword [ebp - 0x38], ecx
cmp ecx, edi
mov byte [ebp - 4], 3
je 0x44fe51
push str.playlist
call fcn.00410e60
jmp 0x44fe53
xor eax, eax
cmp eax, edi
mov byte [ebp - 4], 1
mov dword [esi], eax
jne 0x44fe67
push 0x8007000e
call fcn.004e1090
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.00451290
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
push ecx
mov ecx, eax
call fcn.00410ac0
mov esi, dword [eax]
mov byte [ebp - 4], 5
cmp esi, edi
mov dword [ebp - 0x30], esi
je 0x44fe95
mov edx, dword [esi]
push esi
call dword [edx + 4]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 7
call fcn.00404bf0
cmp esi, edi
je 0x450146
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x2c]
push esi
push eax
call fcn.004105d0
lea ecx, [ebp - 0x2c]
call fcn.00404bf0
mov ecx, dword [ebx]
lea edx, [ebp - 0x28]
push edx
push ebx
mov dword [ebp - 0x28], edi
call dword [ecx + 0x24]
xor esi, esi
mov ebx, 8
mov dword [ebp - 0x2c], esi
cmp esi, dword [ebp - 0x28]
jge 0x450146
mov dword [ebp - 0x14], edi
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x14]
push edx
push esi
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], bl
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x45012f
push ecx
mov dword [ebp - 0x40], esp
mov esi, esp
push 0xc
call sub.MFC42.DLL_operatornew
mov ecx, eax
add esp, 4
mov dword [ebp - 0x44], ecx
cmp ecx, edi
mov byte [ebp - 4], 9
je 0x44ff26
push str.item
call fcn.00410e60
jmp 0x44ff28
xor eax, eax
cmp eax, edi
mov byte [ebp - 4], bl
mov dword [esi], eax
jne 0x44ff3b
push 0x8007000e
call fcn.004e1090
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.00451290
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
push ecx
mov ecx, eax
call fcn.00410ac0
mov eax, dword [eax]
mov byte [ebp - 4], 0xb
cmp eax, edi
mov dword [ebp - 0x1c], eax
je 0x44ff68
mov edx, dword [eax]
push eax
call dword [edx + 4]
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xd
call fcn.00404bf0
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x45011c
mov ecx, dword [ebp - 0x30]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.004105d0
lea ecx, [ebp - 0x3c]
call fcn.00404bf0
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x24]
push edx
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0xe
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x24]
mov word [ebp - 0x64], bx
push eax
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [ebp - 0x5c], eax
jne 0x44ffcd
cmp esi, edi
je 0x44ffcd
push 0x8007000e
call fcn.004e1090
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push 0x52f6cc
call fcn.00450b00
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x10
call fcn.00451290
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.004508d0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xe
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, edi
jge 0x450014
push eax
call fcn.004e1090
mov dword [ebp - 0x20], edi
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x20]
push ecx
push eax
mov edx, dword [eax]
mov byte [ebp - 4], 0x11
call dword [edx + 0x1c]
mov eax, dword [ebp - 0x20]
mov word [ebp - 0x74], bx
push eax
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [ebp - 0x6c], eax
jne 0x45004d
cmp esi, edi
je 0x45004d
push 0x8007000e
call fcn.004e1090
lea edx, [ebp - 0x74]
mov byte [ebp - 4], 0x12
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.source
call fcn.00450b00
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x13
call fcn.00451290
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.004508d0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x11
call esi
cmp eax, edi
jge 0x450096
push eax
call fcn.004e1090
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x4c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
fld qword [ebp - 0x4c]
fmul qword [0x4faa70]
mov word [ebp - 0x84], 5
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fstp qword [ebp - 0x7c]
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x14
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push 0x52f6b8
call fcn.00450b00
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x15
call fcn.00451290
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.004508d0
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
push ecx
call esi
cmp eax, edi
jge 0x450107
push eax
call fcn.004e1090
mov edx, dword [ebp - 0x20]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push edx
call esi
mov eax, dword [ebp - 0x24]
push eax
call esi
mov eax, dword [ebp - 0x1c]
cmp eax, edi
mov byte [ebp - 4], bl
je 0x450129
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0x2c]
cmp eax, edi
mov byte [ebp - 4], 7
je 0x45013d
mov edx, dword [eax]
push eax
call dword [edx + 8]
inc esi
mov dword [ebp - 0x2c], esi
jmp 0x44fed5
mov esi, dword [ebp + 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
lea ecx, [ebp - 0x84]
mov word [ebp - 0x84], di
call fcn.004281a0
lea eax, [ebp - 0x54]
mov bl, 0x16
push eax
mov byte [ebp - 4], bl
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0x54]
push ecx
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, edi
jge 0x45018d
push eax
call fcn.004e1090
mov edi, dword [ebp - 0x54]
sub esp, 0x10
mov eax, dword [ebp - 0x18]
mov edx, esp
push eax
mov byte [ebp - 4], 0x17
mov ecx, dword [eax]
mov dword [edx], edi
mov edi, dword [ebp - 0x50]
mov esi, eax
mov dword [edx + 4], edi
mov edi, dword [ebp - 0x4c]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0x48]
mov dword [edx + 0xc], edi
call dword [ecx + 0x108]
test eax, eax
jge 0x4501cb
push 0x529810
push esi
push eax
call fcn.004e109e
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], bl
call esi
test eax, eax
jge 0x4501e4
push eax
call fcn.004e1090
lea ecx, [ebp - 0x84]
push ecx
call esi
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 1
test eax, eax
je 0x4501fe
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0
test eax, eax
je 0x45020f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 0x80004005
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret