Function at 0x4450fd
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xfb4
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
xor eax, eax
push esi
mov esi, dword [ebp + 0xc]
push eax
push eax
push 6
mov dword [ebp - 0xfb0], esi
mov dword [ebp - 0xfac], eax
call fcn.00414a66
add esp, 0xc
test al, al
jne 0x445148
push str._n_n_Sorry____This_software_works_on_Vista_and_higher_Windows_versions_only_n
call fcn.0041dea8
pop ecx
xor eax, eax
jmp 0x445cc1
call fcn.004148f8
test eax, eax
jne 0x445164
push str.Error:_License_verification_is_failed
call fcn.00449974
mov dword [esp], str._n_n_Error:_License_verification_is_failed.__n_Please_make_sure_you_are_connected_to_Internet__XenManager.dll_file_is_present_in_the_same_folder.__n_n_If_the_problem_persists_then_please_contact_our_support_center_at_support_xenarmor.com_n_n
jmp 0x44513b
push str.Successfully_verified_License_information....
call fcn.00449974
pop ecx
cmp ebx, 3
jge 0x44518c
push str.main
push str._n_s___No_input_parameters_specified
call fcn.00449974
pop ecx
pop ecx
call fcn.0041def6
jmp 0x445141
push edi
lea edi, [esi + 4]
push 0x689910
push dword [edi]
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x4451ac
call fcn.0041def6
jmp 0x445c8f
push 0x3e7
lea eax, [ebp - 0x3eb]
mov byte [ebp - 0x3ec], 0
push 0
push eax
call fcn.00626f50
xor eax, eax
mov dword [0x6f6010], 1
mov dword [0x71684c], eax
add esp, 0xc
mov dword [0x716848], eax
mov dword [0x716844], eax
mov dword [0x716840], eax
mov dword [0x71678c], eax
mov dword [0x716860], eax
mov dword [0x71685c], eax
mov dword [0x716858], eax
mov dword [0x716854], eax
mov dword [0x716850], eax
mov dword [0x71677c], eax
mov dword [ebp - 0xfa8], eax
lea eax, [ebx - 2]
test eax, eax
jle 0x44545f
mov esi, dword [edi]
push esi
call fcn.00449da7
mov dword [esp], 0x689914
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x445243
and dword [0x6f6010], eax
jmp 0x44543e
push 0x689918
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x445263
mov dword [0x71677c], 1
jmp 0x44543e
push 0x68991c
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x445299
mov dword [0x716840], 1
push str.Browser_
lea eax, [ebp - 0x3ec]
push 0x3e8
push eax
call fcn.00631246
jmp 0x44543b
push 0x68992c
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x4452bb
mov dword [0x716848], 1
push str.Downloader_
jmp 0x445283
push 0x689940
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x4452dd
mov dword [0x71678c], 1
push str.Email_
jmp 0x445283
push 0x68994c
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x4452ff
mov dword [0x71684c], 1
push str.FTP_
jmp 0x445283
push 0x689958
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x445324
mov dword [0x716844], 1
push str.Messenger_
jmp 0x445283
push 0x689968
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x445349
mov dword [0x716850], 1
push str.Database_
jmp 0x445283
push 0x689978
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x44536e
mov dword [0x716854], 1
push str.Other_Apps_
jmp 0x445283
push 0x68998c
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x445393
mov dword [0x716858], 1
push str.Credential_Manager_
jmp 0x445283
push 0x6899a8
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x4453b8
mov dword [0x71685c], 1
push str.Wi_Fi_
jmp 0x445283
push 0x6899b4
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x4453dd
mov dword [0x716860], 1
push str.Windows_System_Secrets_
jmp 0x445283
push 0x6899d4
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x44559f
inc eax
push str.ALL_Passwords
mov dword [0x71684c], eax
mov dword [0x716848], eax
mov dword [0x716844], eax
mov dword [0x716840], eax
mov dword [0x71678c], eax
mov dword [0x716860], eax
mov dword [0x71685c], eax
mov dword [0x716858], eax
mov dword [0x716854], eax
mov dword [0x716850], eax
lea eax, [ebp - 0x3ec]
push 0x3e8
push eax
call fcn.006311ec
add esp, 0xc
mov eax, dword [ebp - 0xfa8]
lea ecx, [ebx - 2]
inc eax
add edi, 4
mov dword [ebp - 0xfa8], eax
cmp eax, ecx
jl 0x44521d
mov esi, dword [ebp - 0xfb0]
lea eax, [ebp - 0x3ec]
push 0x2c
push eax
call fcn.006271e0
pop ecx
pop ecx
test eax, eax
je 0x44548f
push str._Passwords
mov byte [eax], 0
lea eax, [ebp - 0x3ec]
push 0x3e8
push eax
call fcn.00631246
add esp, 0xc
cmp dword [0x6f6010], 0
jne 0x4454c3
cmp dword [0x71677c], 0
jne 0x44558b
push str.main
push str._n_s___Please_specify_atleast_one_of_the_Key_Recovery_Methods
call fcn.00449974
call fcn.0041def6
push str._n_n_Error:_Please_specify_atleast_one_of_the_Password_Recovery_Methods_n_n
jmp 0x4455b8
xor edi, edi
inc edi
cmp dword [0x716840], 0
jne 0x44558e
cmp dword [0x71678c], 0
jne 0x44558e
cmp dword [0x716844], 0
jne 0x44558e
cmp dword [0x716848], 0
jne 0x44558e
cmp dword [0x71685c], 0
jne 0x44558e
cmp dword [0x71684c], 0
jne 0x44558e
cmp dword [0x716850], 0
jne 0x44558e
cmp dword [0x716854], 0
jne 0x44558e
cmp dword [0x716858], 0
jne 0x44558e
cmp dword [0x716860], 0
jne 0x44558e
push str.ALL_Passwords
lea eax, [ebp - 0x3ec]
mov dword [0x71684c], edi
push 0x3e8
push eax
mov dword [0x716848], edi
mov dword [0x716844], edi
mov dword [0x716840], edi
mov dword [0x71678c], edi
mov dword [0x716860], edi
mov dword [0x71685c], edi
mov dword [0x716858], edi
mov dword [0x716854], edi
mov dword [0x716850], edi
call fcn.006311ec
add esp, 0xc
jmp 0x44558e
xor edi, edi
inc edi
push 0x2d
push dword [esi + ebx*4 - 4]
call fcn.006270b0
pop ecx
pop ecx
test eax, eax
je 0x4455c5
push str.main
push str._n_s___Invalid_arguments_specified
call fcn.00449974
call fcn.0041def6
push str._n_n_Error:_Invalid_recovery_options_specified._Please_check_the_examples_above__try_again
call fcn.0041dea8
add esp, 0xc
jmp 0x445c8f
push dword [esi + ebx*4 - 4]
mov ebx, 0x3e8
lea eax, [ebp - 0x7d4]
push ebx
push eax
call fcn.006311ec
push str.main
push str._s_:__Initial_system_verification_completed_successfully...ready_now
call fcn.00449974
lea eax, [ebp - 0x7d4]
push 0x2e
push eax
call fcn.006271e0
mov esi, eax
add esp, 0x1c
test esi, esi
je 0x4456a4
push str..csv
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x44562f
mov dword [0x716784], 2
mov esi, str._s___output_is_in_CSV_mode
mov eax, 0x689b58
jmp 0x4456b4
push 0x689b78
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x445656
mov dword [0x716784], 5
mov esi, str._s___output_is_in_SQLite_mode
mov eax, str.SQLite
jmp 0x4456b4
push str..xml
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x44567d
mov dword [0x716784], 3
mov esi, str._s___output_is_in_XML_mode
mov eax, 0x689b9c
jmp 0x4456b4
push str..json
push esi
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x4456a4
mov dword [0x716784], 4
mov esi, str._s___output_is_in_JSON_mode
mov eax, str.JSON
jmp 0x4456b4
mov eax, str.HTML
mov dword [0x716784], edi
mov esi, str._s___output_is_in_HTML_mode
push eax
lea eax, [ebp - 0xfa4]
push ebx
push eax
call fcn.006311ec
push str.main
push esi
call fcn.00449974
call fcn.004433b9
call fcn.00410fc3
push 7
mov esi, eax
call fcn.0044319a
push 0x68937c
call fcn.00445d4e
push str._n_n_Input_Parameters
call fcn.00445d4e
push str._n_n_
call fcn.00445d4e
push 2
call fcn.0044319a
add esp, 0x28
cmp dword [0x6f6010], 0
je 0x445733
cmp dword [0x71677c], 0
mov ecx, 0x66ae5d
mov eax, str.__Registry_Password_Scan
cmove eax, ecx
push eax
push str._n_n________Recovery_Methods:_Instant_Password_Recovery_s
call fcn.00445d4e
pop ecx
jmp 0x44573d
push str._n_n________Recovery_Methods:_Registry_Password_Scan
call fcn.00445d4e
cmp dword [0x6f6010], 0
pop ecx
je 0x44575a
lea eax, [ebp - 0x3ec]
push eax
push str._n_n________Instant_Password_Recovery_Options:__s
call fcn.00445d4e
pop ecx
pop ecx
lea eax, [ebp - 0x7d4]
push eax
push str._n_n________Password_Report_Filename:__s
call fcn.00445d4e
lea eax, [ebp - 0xfa4]
push eax
push str._n_n________Password_Report_Type:__s
call fcn.00445d4e
push 7
call fcn.0044319a
push 0x68937c
call fcn.00445d4e
push esi
call fcn.0044319a
add esp, 0x1c
lea eax, [ebp - 0x7d4]
cmp dword [0x716784], 5
push eax
jne 0x44582a
call fcn.00449791
pop ecx
test eax, eax
je 0x4457da
lea eax, [ebp - 0x7d4]
push eax
push str.main
push str._s_Report_file___s__already_exists...deleting_it_now
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x7d4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push 6
lea eax, [ebp - 0x7d4]
push 0x716c5c
push eax
call fcn.0045c0d6
mov esi, eax
add esp, 0x10
test esi, esi
je 0x445823
lea eax, [ebp - 0x7d4]
push eax
push str._n_n_Error:_Failed_to_create_file__s_for_saving_password_report._n_n_Tip:_Use_another_filename_or_try_with_other_report_types__csv_xml_html_json_etc__n_n
call fcn.0041dea8
push esi
lea ecx, [ebp - 0x7d4]
push ecx
push str.ExportResultToFile_:_Failed_to_create_csv_file__s_for_saving_SQLite_password_list__Error_d
call fcn.00449974
add esp, 0x14
jmp 0x445cbe
mov eax, str._s_sqlite3_open_v2_Successfully_created_database_file_at_location__s
jmp 0x445875
and dword [0x716788], 0
push str.main
push str._s___Creating_file____s_
call fcn.00449974
push 0x689ef4
lea eax, [ebp - 0x7d4]
push eax
push 0x716788
call fcn.00632119
add esp, 0x18
mov esi, eax
cmp dword [0x716788], 0
je 0x445c93
test esi, esi
jne 0x445c93
mov eax, str._s___File_created_successfully___s_
lea ecx, [ebp - 0x7d4]
mov esi, str.main
push ecx
push esi
push eax
call fcn.00449974
mov eax, dword [0x716784]
add esp, 0xc
cmp eax, 5
jne 0x445914
push str.CREATE_TABLE_AllinonePasswordReport_____t_t_t_AppType_TEXT_NOT_NULL___t_t_t_Application_TEXT_NOT_NULL___t_t_t_Location_TEXT___t_t_t_Username_TEXT___t_t_t_Password_TEXT__t_t_t__
lea eax, [ebp - 0xbbc]
push ebx
push eax
call fcn.00445d6d
lea eax, [ebp - 0xfac]
push eax
push 0
push 0
lea eax, [ebp - 0xbbc]
push eax
push dword [0x716c5c]
call fcn.0045b0eb
add esp, 0x20
test eax, eax
je 0x445907
lea eax, [ebp - 0x7d4]
push eax
push str._n_n_Error:_Failed_to_create_table_in_SQLite_file__s_for_saving_password_report._n_n_Tip:_Use_another_filename_or_try_with_other_report_types__csv_xml_html_json_etc__n_n
call fcn.0041dea8
lea eax, [ebp - 0xbbc]
push eax
push dword [ebp - 0xfac]
push esi
push str._s_sqlite3_exec_failed_to_create_table__Error_s__Query_s
call fcn.00449974
push dword [0x716c5c]
call fcn.0045b0c9
add esp, 0x1c
jmp 0x445cbe
push esi
push str._s_Successfully_created_table_for_saving_report
call fcn.00449974
jmp 0x445935
push dword [0x716788]
cmp eax, 2
jne 0x445926
push str.AppType_Application_Location_Username_Password_n
jmp 0x445930
cmp eax, 3
jne 0x44593c
push str.__xml_version1.0_encodingUTF_8___n_root__n_app_password_list_
call fcn.0063781e
pop ecx
pop ecx
jmp 0x445a96
cmp eax, 4
jne 0x445963
push str._n_t_app_password_list_:_
call fcn.0063781e
push dword [0x716788]
push str._n_t_t_app_password_:__
call fcn.0063781e
add esp, 0x10
jmp 0x445a96
push str.__DOCTYPE_html_PUBLIC_____W3C__DTD_XHTML_1.0_Transitional__EN___http:__www.w3.org_TR_xhtml1_DTD_xhtml1_transitional.dtd__
call fcn.0063781e
push dword [0x716788]
push str._html_xmlns_http:__www.w3.org_1999_xhtml__
call fcn.0063781e
push dword [0x716788]
push str._head___meta_http_equiv_Content_Type__content_text_html__charsetutf_8____
call fcn.0063781e
push dword [0x716788]
push str._title_All_In_One_Password_Recovery_Report___title_
call fcn.0063781e
push dword [0x716788]
push str._style__table__border_collapse:collapse__table_layout:auto__font_family:Verdana_
call fcn.0063781e
push dword [0x716788]
push str.th__font_size:12px_color:white_background_color:444__border:1px_solid_666__
call fcn.0063781e
push dword [0x716788]
push str.td__font_size:10px_font_weight:bold__height:25px__border:1px_solid__eee__
call fcn.0063781e
push dword [0x716788]
push str.tr.firstrow__background_color:F8F8F8__color:000
call fcn.0063781e
add esp, 0x40
push dword [0x716788]
push str.tr.secondrow__background_color:FEFEFE__color:000
call fcn.0063781e
push dword [0x716788]
push str.tr__color:black__
call fcn.0063781e
push dword [0x716788]
push str..footer__font_family:verdana__font_size:12px__color:black__
call fcn.0063781e
push dword [0x716788]
push str.a:visited__a:link__border_width:0px_color:0044ff_font_weight:bold_text_decoration:none_
call fcn.0063781e
push dword [0x716788]
push str.a:active__a:hover__border_width:_0px_0px_1px_0px_font_weight:bold__border_bottom_style:_dotted__border_bottom_color:_585858__
call fcn.0063781e
push dword [0x716788]
push str.__style_
call fcn.0063781e
push dword [0x716788]
push str._body_style_width:100___
call fcn.0063781e
push dword [0x716788]
push str._br__center__h1_styletext_shadow:_1px_1px_2px_C0C0C0_font_family:_Arial_color:0078ff__All_In_One_Password_Recovery_Report____h1___center___br_
call fcn.0063781e
add esp, 0x40
push dword [0x716788]
push str._p_class_footer__style_color:6C6CFF____b_
call fcn.0063781e
push dword [0x716788]
push str._table_width95__cellspacing5_cellpadding5_style_table_layout:fixed_word_break:break_all_padding_left:5px_margin_top:30px_margin_left:5px_____tr_style_height:45px__
call fcn.0063781e
push dword [0x716788]
push str._th_style_width:35px__Index__th___th_style_width:140px___App_Type__th___th_style_width:220px___Application__th___th_style_width:200px___Location__th__th_style_width:250px___Username__th__th_style_width:250px___Password__th____tr_
call fcn.0063781e
add esp, 0x18
push 7
call fcn.0044319a
mov dword [esp], str._n_n_Password_Recovery_Status
call fcn.00445d4e
mov dword [esp], str._n_n_
call fcn.00445d4e
push 2
call fcn.0044319a
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
pop ecx
pop ecx
call edi
mov ebx, eax
call fcn.0041afe5
mov ecx, dword [0x716784]
cmp ecx, 5
jne 0x445ae5
push dword [0x716c5c]
call fcn.0045b0c9
jmp 0x445af5
push dword [0x716788]
cmp ecx, 2
jne 0x445af8
call fcn.00637603
pop ecx
jmp 0x445b70
cmp ecx, 3
jne 0x445b04
push str._n__app_password_list__n__root_
jmp 0x445b0e
cmp ecx, 4
jne 0x445b23
push str._n_t_t__n_t_n
call fcn.0063781e
push dword [0x716788]
call fcn.00637603
add esp, 0xc
jmp 0x445b70
push str.__table____center_
call fcn.0063781e
push str._br__br__hr___div_class_footer___Report_generated_by__strong_XenArmor_All_In_One_Password_Recovery_Pro__strong__from
push dword [0x716788]
call fcn.004450e4
push str.https:__xenarmor.com_allinone_password_recovery_pro_command_line_software
push str._a_href__s__www.XenArmor.com__a____div_
push dword [0x716788]
call fcn.004450e4
push dword [0x716788]
push str.__br_____body____html_
call fcn.0063781e
push dword [0x716788]
call fcn.00637603
add esp, 0x28
cmp dword [0x71704c], 0
jne 0x445c84
call fcn.00410fc3
push 7
mov esi, eax
call fcn.0044319a
cmp dword [0x716810], 0
pop ecx
push 0x68937c
jbe 0x445c44
call fcn.00445d4e
mov dword [esp], str._n_n_Password_Recovery_Result
call fcn.00445d4e
mov dword [esp], str._n_n_
call fcn.00445d4e
push 2
call fcn.0044319a
pop ecx
pop ecx
call edi
sub eax, ebx
push ecx
push ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x68ac10]
cvtpd2ps xmm0, xmm0
divss xmm0, dword [0x68ac00]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [0x716810]
movsd qword [ebp - 0xfb4], xmm0
push str.Total_keys_found__d__Time_taken___.2f_seconds
call fcn.00449974
push dword [0x716810]
push str._n_n________Total_Recovered_Passwords:______d
call fcn.00445d4e
movsd xmm0, qword [ebp - 0xfb4]
add esp, 0x10
movsd qword [esp], xmm0
push str._n_n________Total_Password_Recovery_Time:___.2f_seconds
call fcn.00445d4e
add esp, 0xc
lea ecx, [ebp - 0x7d4]
mov eax, str._n_n________Final_Password_Report_File:_____s
jmp 0x445c74
call fcn.00445d4e
mov dword [esp], str._n_n_Password_Recovery_Result
call fcn.00445d4e
mov dword [esp], str._n_n_
call fcn.00445d4e
push 2
call fcn.0044319a
pop ecx
pop ecx
mov eax, str._n_n_____No_stored_passwords_found._Please_check_the_input_parameters_and_try_again_n_n_____Type__s.exe__h_for_more_options__examples_n
mov ecx, str.XenAllPasswordPro
push ecx
push eax
call fcn.00445d4e
push esi
call fcn.0044319a
add esp, 0xc
push 0x68937c
call fcn.00445d4e
pop ecx
xor eax, eax
jmp 0x445cc0
lea eax, [ebp - 0x7d4]
push eax
push str._n_n_Error:_Failed_to_create_file__s_for_saving_password_report._n_n_Tip:_Try_using_another_filename._n_n
call fcn.0041dea8
push esi
lea eax, [ebp - 0x7d4]
push eax
push str.main
push str._s_:_Failed_to_create_file___s__for_creating_password_report._Check_if_you_have_specified_correct_file_path._Error_d
call fcn.00449974
add esp, 0x18
mov eax, edi
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret