Function at 0x439280
Capabilities:
Contain obfuscated stackstrings
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4867a2
mov eax, dword fs:[0]
push eax
push ecx
mov eax, dword [0x4b185c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax], vtable.CManageWizard.0
mov dword [ebp - 4], 0x27
mov ecx, dword [ebp - 0x10]
add ecx, 0x15e0
call fcn.0040de50
movzx ecx, al
test ecx, ecx
jne 0x4392e0
mov ecx, dword [ebp - 0x10]
add ecx, 0x15e0
call fcn.0040e550
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x10]
add ecx, 0x1630
call fcn.00402630
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x10]
add ecx, 0x1628
call fcn.0040e4c0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x10]
add ecx, 0x1624
call fcn.0040e4c0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x10]
add ecx, 0x1620
call fcn.0040e4c0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x10]
add ecx, 0x161c
call fcn.0040e4c0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x10]
add ecx, 0x1618
call fcn.0040e4c0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x10]
add ecx, 0x1610
call fcn.00440950
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x10]
add ecx, 0x1608
call fcn.00440a40
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x10]
add ecx, 0x1600
call fcn.00440a40
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x10]
add ecx, 0x15fc
call fcn.0040e4c0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x10]
add ecx, 0x15e4
call fcn.004266e0
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x10]
add ecx, 0x15e0
call fcn.0040e4c0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x10]
add ecx, 0x15dc
call fcn.0040e4c0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x10]
add ecx, 0x1538
call fcn.0044fef0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x10]
add ecx, 0x14b0
call fcn.004500d0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x10]
add ecx, 0x1428
call fcn.00450290
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x10]
add ecx, 0x1314
call fcn.0044f2c0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x10]
add ecx, 0x128c
call fcn.0044ecf0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x10]
add ecx, 0x1150
call fcn.0044dfd0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x10]
add ecx, 0x1058
call fcn.0044af50
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x10]
add ecx, 0xf78
call fcn.0044dbe0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x10]
add ecx, 0xe78
call fcn.0044c730
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x10]
add ecx, 0xd98
call fcn.00443c50
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x10]
add ecx, 0xc88
call fcn.00442060
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x10]
add ecx, 0xb8c
call fcn.00440d20
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x10]
add ecx, 0xa90
call fcn.00442b70
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x10]
add ecx, 0x994
call fcn.00441790
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x10]
add ecx, 0x880
call fcn.004431d0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 0x7f0
call fcn.004427c0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x10]
add ecx, 0x768
call fcn.0044bd70
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x10]
add ecx, 0x6ac
call fcn.00448af0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x10]
add ecx, 0x4e8
call fcn.00444c60
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x10]
add ecx, 0x3c4
call fcn.004479e0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x10]
add ecx, 0x284
call fcn.00449bb0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x10]
add ecx, 0x1fc
call fcn.00438460
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x10]
add ecx, 0x1e4
call fcn.0043ffd0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x10]
add ecx, 0x1d0
call fcn.004266e0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x10]
add ecx, 0x1b4
call fcn.00416130
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0xac
call fcn.0042dc80
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
call fcn.0045977a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret