Function at 0x447b18
Capabilities:
Delete file

Disassembly:
push 0x2e4
mov eax, 0x4f3672
call fcn.004d20fd
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x180]
call fcn.0043b041
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x188], esp
mov ecx, esp
push eax
call fcn.00424eef
call fcn.0047ad60
pop ecx
cmp eax, ebx
jne 0x447b82
push 5
pop edi
lea esi, [ebp - 0x180]
call fcn.0043d78e
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, edi
jmp 0x447f73
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x188], esp
mov ecx, esp
push eax
call fcn.00424eef
lea eax, [ebp - 0x260]
push eax
call fcn.0048fbd0
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1d8], ebx
jne 0x447bc2
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
push 0xe
jmp 0x447b59
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x260]
call fcn.0042a2d8
pop ecx
test al, al
jne 0x447bef
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
push 0xf
jmp 0x447b59
push ecx
lea eax, [ebp - 0x124]
mov dword [ebp - 0x188], esp
mov ecx, esp
push eax
call fcn.00424eef
call fcn.0047ada0
pop ecx
cmp eax, ebx
jne 0x447c24
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
push 0x10
jmp 0x447b59
push ecx
mov dword [ebp - 0x188], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x180]
call fcn.004247ea
push edi
mov ecx, esi
call fcn.00489d50
pop ecx
pop ecx
call fcn.0047ad60
pop ecx
cmp eax, ebx
je 0x447f40
push ecx
mov dword [ebp - 0x188], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
push str.VirtReg.export
call fcn.004247ea
push edi
mov ecx, esi
call fcn.00489d50
pop ecx
pop ecx
call fcn.0047ad60
pop ecx
cmp eax, ebx
je 0x447f40
push ecx
mov eax, esp
mov dword [ebp - 0x188], esp
push dword [ebp - 0x174]
push str._s.VirtFiles.db
push eax
call fcn.00478210
lea eax, [ebp - 0x184]
add esp, 0xc
push eax
call fcn.004778e0
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x184]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x184]
mov dword [ebp - 0x188], esp
mov ecx, esp
push eax
call fcn.00424eef
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x18c], esp
mov esi, str.Main
push esi
call fcn.004247ea
push 4
pop ecx
lea edi, [ebp - 0x260]
mov byte [ebp - 4], 4
call fcn.00491fc0
cmp eax, ebx
je 0x447d34
mov ecx, dword [ebp - 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
push 8
jmp 0x447b59
lea eax, [ebp - 0x260]
call fcn.00490ab0
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1cc], ebx
lea edi, [ebp - 0x1c8]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x184]
mov dword [ebp - 0x18c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1cc]
call fcn.00424eef
mov ecx, edi
call fcn.004840c0
add esp, 0xc
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1ac], ebx
lea edi, [ebp - 0x1a8]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x18c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x18c], esp
push str.VirtFiles.db
call fcn.004247ea
push edi
lea ecx, [ebp - 0x180]
call fcn.00489d50
pop ecx
pop ecx
lea ecx, [ebp - 0x1ac]
call fcn.004840c0
add esp, 0xc
lea eax, [ebp - 0x1cc]
push eax
push 0x445478
push ebx
push dword [ebp - 0x1a4]
lea eax, [ebp - 0x1ac]
push eax
call fcn.00499f50
mov ebx, dword [ebp - 0x184]
lea eax, [ebp - 0x1cc]
push eax
call fcn.0049a0e0
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x18c], esp
mov ecx, esp
push eax
call fcn.00424eef
lea eax, [ebp - 0x2f0]
push eax
call fcn.0048fbd0
mov byte [ebp - 4], 6
cmp dword [ebp - 0x268], 0
jne 0x447e5b
lea eax, [ebp - 0x2f0]
mov byte [ebp - 4], 4
call fcn.00427a08
mov ecx, dword [ebp - 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
push 7
jmp 0x447b59
push ecx
mov ecx, esp
mov dword [ebp - 0x18c], esp
push esi
call fcn.004247ea
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x184]
mov dword [ebp - 0x188], esp
mov ecx, esp
push eax
call fcn.00424eef
lea eax, [ebp - 0x2f0]
push eax
mov byte [ebp - 4], 6
call fcn.004917e0
test eax, eax
lea eax, [ebp - 0x2f0]
je 0x447ebd
call fcn.00490ab0
lea eax, [ebp - 0x2f0]
mov byte [ebp - 4], 4
call fcn.00427a08
jmp 0x447d10
call fcn.00490ab0
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2f0]
je 0x447ef9
call fcn.00427a08
mov ecx, dword [ebp - 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
push 0xa
jmp 0x447b59
call fcn.00427a08
mov ecx, dword [ebp - 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
lea esi, [ebp - 0x180]
call fcn.0043d78e
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
jmp 0x447f73
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00427a08
lea esi, [ebp - 0x180]
call fcn.0043d78e
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
push 6
pop eax
call fcn.004d2180
ret