Function at 0x447c50
Capabilities:
Delete file
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
push ebx
xor ebx, ebx
push edi
push ebx
push ebx
push ebx
push 1
pop edi
push edi
push 0xab
call fcn.00424eff
pop ecx
push eax
mov ecx, 0x4776b0
call fcn.004160a5
push SysReAllocStringLen
lea eax, [ebp - 0x108]
push 0x104
push eax
push 0x40ad80
push ebx
call fcn.004245ef
add esp, 0x14
test eax, eax
je 0x447f7d
push esi
mov esi, 0x40f188
lea eax, [ebp - 0x108]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x447ccf
test cl, cl
je 0x447ccb
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x447ccf
inc eax
inc eax
inc esi
inc esi
test cl, cl
jne 0x447cad
xor eax, eax
jmp 0x447cd4
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jge 0x447d25
push 4
mov esi, dword [sym.imp.SHLWAPI.dll_SHSetValueA]
pop ebx
lea eax, [ebp - 4]
push ebx
mov dword [ebp - 4], edi
push eax
push ebx
mov edi, 0x40f144
push 0x40f13c
push edi
push SysReAllocStringLen
call esi
lea eax, [ebp - 4]
push ebx
push eax
push ebx
push 0x40f134
push edi
push SysReAllocStringLen
mov dword [ebp - 4], 3
call esi
xor eax, eax
push eax
push eax
push 0x27
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionA]
xor ebx, ebx
mov esi, 0x40f12c
lea eax, [ebp - 0x108]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x447d52
test cl, cl
je 0x447d4e
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x447d52
inc eax
inc eax
inc esi
inc esi
test cl, cl
jne 0x447d30
xor eax, eax
jmp 0x447d57
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jge 0x447d61
mov dword [0x4757f4], ebx
mov esi, 0x40f124
lea eax, [ebp - 0x108]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x447d8e
test cl, cl
je 0x447d8a
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x447d8e
inc eax
inc eax
inc esi
inc esi
test cl, cl
jne 0x447d6c
xor eax, eax
jmp 0x447d93
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jge 0x447dac
push 2
mov dword [0x475358], 0x16
pop ebx
mov dword [0x47535c], ebx
jmp 0x447daf
push 2
pop ebx
mov esi, 0x40f11c
lea eax, [ebp - 0x108]
mov edi, esi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [edi]
jne 0x447dde
test cl, cl
je 0x447dda
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [edi + 1]
jne 0x447dde
add eax, ebx
add edi, ebx
test cl, cl
jne 0x447dbc
xor eax, eax
jmp 0x447de3
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jge 0x447e0e
push edi
push edi
push 0x14e
mov ecx, 0x499334
call fcn.0045cba7
push SysReAllocStringLen
push edi
push 0x40f114
push edi
call fcn.00424a89
add esp, 0x10
lea eax, [ebp - 0x108]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x447e36
test cl, cl
je 0x447e32
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x447e36
add eax, ebx
add esi, ebx
test cl, cl
jne 0x447e14
xor eax, eax
jmp 0x447e3b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jge 0x447e49
mov dword [0x4757f4], 1
mov esi, 0x40f10c
lea eax, [ebp - 0x108]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x447e76
test cl, cl
je 0x447e72
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x447e76
add eax, ebx
add esi, ebx
test cl, cl
jne 0x447e54
xor eax, eax
jmp 0x447e7b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jge 0x447e90
push SysReAllocStringLen
push 0x40a56c
call fcn.00424114
pop ecx
pop ecx
mov esi, 0x40f104
lea eax, [ebp - 0x108]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x447ebd
test cl, cl
je 0x447eb9
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x447ebd
add eax, ebx
add esi, ebx
test cl, cl
jne 0x447e9b
xor eax, eax
jmp 0x447ec2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jge 0x447eea
push 0xba
call fcn.00424eff
pop ecx
push eax
push 0x40a158
push 0xfff
push 0x473af8
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x10
mov esi, 0x40f0fc
lea eax, [ebp - 0x108]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x447f17
test cl, cl
je 0x447f13
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x447f17
add eax, ebx
add esi, ebx
test cl, cl
jne 0x447ef5
xor eax, eax
jmp 0x447f1c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
pop esi
jge 0x447f7d
and byte [ebp - 0x20c], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x20b]
and dword [0x475808], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40b394
lea eax, [ebp - 0x20c]
push 0x103
push eax
push dword [0x534a50]
call fcn.00426466
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.0042653d
add esp, 0x18
test eax, eax
je 0x447f7d
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call sub.KERNEL32.dll_GetACP
call fcn.0042734f
pop edi
pop ebx
test eax, eax
jne 0x447fa9
push 0x30
push 0x40a37c
push 0x78
call fcn.00424eff
pop ecx
push eax
push dword [0x5341b4]
call dword [sym.imp.USER32.dll_MessageBoxA]
leave
ret