Function at 0x4467f7
Capabilities:
Delete file

Disassembly:
push 0x2f4
mov eax, 0x4f516f
call fcn.004d382d
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x190]
call fcn.00439b8f
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x198], esp
mov ecx, esp
push eax
call fcn.00422f20
call fcn.0047a330
pop ecx
cmp eax, ebx
jne 0x446861
push 5
pop edi
lea esi, [ebp - 0x190]
call fcn.0043c2ee
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, edi
jmp 0x446c52
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x198], esp
mov ecx, esp
push eax
call fcn.00422f20
lea eax, [ebp - 0x270]
push eax
call fcn.00490280
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1e8], ebx
jne 0x4468a1
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
push 0xe
jmp 0x446838
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x270]
call fcn.00428543
pop ecx
test al, al
jne 0x4468ce
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
push 0xf
jmp 0x446838
push ecx
lea eax, [ebp - 0x134]
mov dword [ebp - 0x198], esp
mov ecx, esp
push eax
call fcn.00422f20
call fcn.0047a370
pop ecx
cmp eax, ebx
jne 0x446903
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
push 0x10
jmp 0x446838
push ecx
mov dword [ebp - 0x198], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x198], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x190]
call fcn.00422827
push edi
mov ecx, esi
call fcn.0048a080
pop ecx
pop ecx
call fcn.0047a330
pop ecx
cmp eax, ebx
je 0x446c1f
push ecx
mov dword [ebp - 0x198], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x198], esp
push str.VirtReg.export
call fcn.00422827
push edi
mov ecx, esi
call fcn.0048a080
pop ecx
pop ecx
call fcn.0047a330
pop ecx
cmp eax, ebx
je 0x446c1f
push ecx
mov eax, esp
mov dword [ebp - 0x198], esp
push dword [ebp - 0x184]
push str._s.VirtFiles.db
push eax
call fcn.004777e0
lea eax, [ebp - 0x194]
add esp, 0xc
push eax
call fcn.00476eb0
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x194]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x194]
mov dword [ebp - 0x198], esp
mov ecx, esp
push eax
call fcn.00422f20
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x19c], esp
mov esi, str.Main
push esi
call fcn.00422827
push 4
pop ecx
lea edi, [ebp - 0x270]
mov byte [ebp - 4], 4
call fcn.00492670
cmp eax, ebx
je 0x446a13
mov ecx, dword [ebp - 0x194]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
push 8
jmp 0x446838
lea eax, [ebp - 0x270]
call fcn.00491160
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1dc], ebx
lea edi, [ebp - 0x1d8]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x194]
mov dword [ebp - 0x19c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1dc]
call fcn.00422f20
mov ecx, edi
call fcn.00483760
add esp, 0xc
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1bc], ebx
lea edi, [ebp - 0x1b8]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x19c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x19c], esp
push str.VirtFiles.db
call fcn.00422827
push edi
lea ecx, [ebp - 0x190]
call fcn.0048a080
pop ecx
pop ecx
lea ecx, [ebp - 0x1bc]
call fcn.00483760
add esp, 0xc
lea eax, [ebp - 0x1dc]
push eax
push 0x444154
push ebx
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x1bc]
push eax
call fcn.0049a780
mov ebx, dword [ebp - 0x194]
lea eax, [ebp - 0x1dc]
push eax
call fcn.0049a940
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x19c], esp
mov ecx, esp
push eax
call fcn.00422f20
lea eax, [ebp - 0x300]
push eax
call fcn.00490280
mov byte [ebp - 4], 6
cmp dword [ebp - 0x278], 0
jne 0x446b3a
lea eax, [ebp - 0x300]
mov byte [ebp - 4], 4
call fcn.004259b3
mov ecx, dword [ebp - 0x194]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
push 7
jmp 0x446838
push ecx
mov ecx, esp
mov dword [ebp - 0x19c], esp
push esi
call fcn.00422827
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x194]
mov dword [ebp - 0x198], esp
mov ecx, esp
push eax
call fcn.00422f20
lea eax, [ebp - 0x300]
push eax
mov byte [ebp - 4], 6
call fcn.00491e90
test eax, eax
lea eax, [ebp - 0x300]
je 0x446b9c
call fcn.00491160
lea eax, [ebp - 0x300]
mov byte [ebp - 4], 4
call fcn.004259b3
jmp 0x4469ef
call fcn.00491160
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x300]
je 0x446bd8
call fcn.004259b3
mov ecx, dword [ebp - 0x194]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
push 0xa
jmp 0x446838
call fcn.004259b3
mov ecx, dword [ebp - 0x194]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
lea esi, [ebp - 0x190]
call fcn.0043c2ee
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042001a
xor eax, eax
jmp 0x446c52
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.004259b3
lea esi, [ebp - 0x190]
call fcn.0043c2ee
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042001a
push 6
pop eax
call fcn.004d38b0
ret