Function at 0x45000d
Capabilities:
Delete file

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x98
mov eax, dword [0x4b7f60]
xor eax, ebp
mov dword [ebp + 0x6c], eax
mov eax, dword [ebp + 0x7c]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x78]
cmp dword [edi + 0x18], 8
mov esi, ecx
mov dword [ebp + 0x40], edi
mov dword [ebp + 0x30], eax
jb 0x45003e
mov eax, dword [edi + 4]
jmp 0x450041
lea eax, [edi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
lea eax, [ebp + 0x14]
push eax
call fcn.0044b20c
cmp dword [eax + 0x18], 8
pop ecx
jb 0x45005d
mov eax, dword [eax + 4]
jmp 0x450060
add eax, 4
push eax
xor ebx, ebx
push ebx
lea ecx, [ebp + 0x34]
call fcn.004661e9
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a1c
lea ecx, [ebp + 0x34]
call fcn.0046624c
lea eax, [ebp + 0x14]
push eax
call fcn.0044b016
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
call fcn.00401965
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a1c
cmp dword [esi + 0x18], 8
mov dword [ebp + 0x48], 0x64
jb 0x4500b1
mov eax, dword [esi + 4]
jmp 0x4500b4
lea eax, [esi + 4]
push eax
call fcn.00403749
pop ecx
test eax, eax
je 0x450199
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 0xb7
je 0x450196
cmp eax, 0x50
je 0x450196
push dword [ebp + 0x48]
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x18], 8
jb 0x4500f3
mov eax, dword [esi + 4]
jmp 0x4500f6
lea eax, [esi + 4]
push eax
call fcn.00403749
pop ecx
test eax, eax
je 0x45011e
call edi
cmp eax, 0xb7
je 0x45011e
cmp eax, 0x50
je 0x45011e
mov eax, dword [ebp + 0x48]
add eax, eax
cmp eax, 0x4e20
mov dword [ebp + 0x48], eax
jl 0x4500df
cmp dword [ebp + 0x48], 0x4e20
jl 0x450196
call edi
push ebx
sub esp, 0x1c
mov ecx, esp
push 0x4a7dd0
mov edi, eax
call fcn.004018ba
sub esp, 0x1c
mov ecx, esp
push esi
call fcn.004018dc
push edi
push 0x25d
call fcn.0043d04e
mov ecx, eax
call fcn.0043d5c6
call fcn.00434a22
push ebx
push ebx
push 0x786
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp + 0x34]
call fcn.00466258
lea ecx, [ebp + 0x34]
call fcn.00466234
mov eax, 0x80004005
mov ecx, dword [ebp + 0x6c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046d79a
add ebp, 0x70
leave
ret 8
mov edi, dword [ebp + 0x40]
push str.ThunderPlatform.exe
lea eax, [ebp + 0x14]
push edi
push eax
call fcn.0040f2de
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0x1c]
push eax
mov ecx, edi
call fcn.00401965
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a1c
lea eax, [ebp + 0x14]
push edi
push eax
call fcn.0044a57d
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.00401965
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a1c
push 0xffffffffffffffff
push ebx
push dword [ebp + 0x40]
lea ecx, [esi + 0x38]
call fcn.00401965
push 0x4a7dd0
lea ecx, [ebp + 0x50]
call fcn.004018ba
lea eax, [ebp + 0x50]
push eax
call fcn.0040402d
mov ecx, eax
call fcn.00404058
push str._tp_
lea ecx, [ebp + 0x50]
call fcn.00401941
lea eax, [ebp - 8]
push eax
call fcn.0044b24b
push eax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.004271fc
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0xc8]
call fcn.00401965
push ebx
push 1
lea ecx, [ebp + 0x14]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401a1c
cmp dword [edi + 0x18], 8
jb 0x450268
mov edi, dword [edi + 4]
jmp 0x45026b
add edi, 4
push 0x2e
lea eax, [ebp - 8]
push edi
push eax
call fcn.004669ef
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x54]
push eax
call fcn.00401965
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401a1c
cmp dword [esi + 0x68], ebx
jne 0x4502bd
mov esi, 0x80004005
push ebx
push 1
lea ecx, [ebp + 0x50]
call fcn.00401a1c
lea ecx, [ebp + 0x34]
call fcn.00466258
lea ecx, [ebp + 0x34]
call fcn.00466234
mov eax, esi
jmp 0x450182
lea eax, [ebp - 8]
push esi
push eax
call fcn.0044b231
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0x74]
push eax
mov ecx, edi
call fcn.00401965
push ebx
push 1
lea ecx, [ebp - 8]
call fcn.00401a1c
lea eax, [esi + 0x100]
push edi
push eax
call fcn.0044c3d0
lea eax, [esi + 0x38]
push eax
call fcn.0044afb8
add esp, 0xc
mov dword [esi + 0x70], eax
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], ebx
cmp dword [esi + 0x11c], ebx
je 0x45032a
lea eax, [esi + 0x100]
push eax
push dword [eax + 0x18]
lea ecx, [ebp + 0x44]
call fcn.0043c591
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x3c], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x40], eax
push dword [ebp + 0x30]
lea eax, [ebp + 0x3c]
push eax
mov ecx, esi
call fcn.0044e713
mov ecx, esi
mov byte [ebp + 0x4f], al
call fcn.0044ec8e
lea ecx, [ebp - 0x28]
call fcn.0044c831
cmp byte [ebp + 0x4f], bl
je 0x450364
push dword [ebp + 0x30]
mov ecx, esi
call fcn.0044f792
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0044fd72
mov ecx, esi
call fcn.0044fb8f
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0044f6e2
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0044f533
cmp dword [esi + 0x11c], ebx
je 0x45039a
lea eax, [esi + 0x100]
push edi
push eax
call fcn.0044a5d6
pop ecx
pop ecx
jmp 0x4503af
cmp dword [edi + 0x18], 8
jb 0x4503a5
mov edi, dword [edi + 4]
jmp 0x4503a8
add edi, 4
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [esi + 0x70]
lea eax, [esi + 0x54]
push eax
push esi
call fcn.0044e13f
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.0044c7e3
push dword [ebp - 0x28]
call fcn.0046d271
pop ecx
xor esi, esi
jmp 0x45029b