Function at 0x449e00
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x23c
push 0
push 0
dec ecx
jne 0x449e08
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x1a]
mov edx, dword [0x447978]
call fcn.004052f8
mov ecx, 0x65
lea eax, [ebp - 0x1b0]
mov edx, dword [0x40102c]
call fcn.00405328
xor eax, eax
push ebp
push 0x44ac28
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x44abca
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0xc]
call fcn.004048cc
lea eax, [ebp - 0x11b8]
xor ecx, ecx
mov edx, 0x1000
call fcn.00403460
lea edx, [ebp - 0x11b8]
mov ecx, 0x1000
mov eax, dword [ebp - 0x1b4]
call fcn.0040ddb0
mov ebx, eax
mov eax, dword [ebp - 0x1b4]
cmp byte [eax + 0xc], 0
jne 0x449ea4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44abd9
lea eax, [ebp - 8]
mov edx, ebx
call fcn.00404f90
lea eax, [ebp - 8]
call fcn.00404dbc
lea edx, [ebp - 0x11b8]
mov ecx, ebx
call fcn.0040705c
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404b98
lea edx, [ebp - 0x1a]
mov eax, dword [ebp - 0xc]
call fcn.004479a8
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x14]
call fcn.00404964
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x18]
call fcn.00404964
movzx eax, byte [ebp - 0x19]
cmp byte [ebp - 0x1a], 0
je 0x44abbd
movzx eax, al
cmp eax, 0x42
ja case.0x449f09.0
jmp dword [eax*4 + 0x449f10]
mov eax, dword [ebp - 0x1b4]
call fcn.0040dd38
jmp case.0x449f09.0
push 0
call sub.kernel32.dll_ExitProcess_1
call fcn.00449c70
lea eax, [ebp - 0x11bc]
call fcn.00448e48
mov ecx, dword [ebp - 0x11bc]
mov dl, 0x35
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea edx, [ebp - 0x11c0]
mov eax, dword [ebp - 0x10]
call fcn.00449418
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.004086d4
push eax
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x445394
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
call fcn.00445034
jmp case.0x449f09.0
lea eax, [ebp - 4]
call fcn.00443e84
mov ecx, dword [ebp - 4]
mov dl, 5
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea ecx, [ebp - 4]
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.00443c20
mov ecx, dword [ebp - 4]
mov dl, 6
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
push 0x64
call sub.kernel32.dll_Sleep_2
lea ecx, [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00443c20
mov ecx, dword [ebp - 4]
mov dl, 7
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.004490fc
test al, al
je 0x44a127
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a134
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 8
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.004490fc
test al, al
je 0x44a166
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a173
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 8
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.00404d5c
mov edx, eax
lea eax, [ebp - 0x11c4]
call fcn.00404ac4
mov eax, dword [ebp - 0x11c4]
call fcn.00404d5c
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x44a1c7
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a1d4
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0xa
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x1b0]
call fcn.00449174
test al, al
je 0x44a226
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a233
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0xb
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov eax, dword [ebp - 0x1b0]
call fcn.00408a64
test al, al
jne 0x44a2a2
push dword [ebp - 0x1ac]
push 0x44ac58
push dword [ebp - 0x1a8]
push 0x44ac58
lea edx, [ebp - 0x11c8]
xor eax, eax
call fcn.00408568
push dword [ebp - 0x11c8]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00404c60
jmp 0x44a2e3
push dword [ebp - 0x1ac]
push 0x44ac58
push dword [ebp - 0x1a8]
push 0x44ac58
mov eax, dword [ebp - 0x1b0]
call fcn.00448ae8
push edx
push eax
lea eax, [ebp - 0x11cc]
call fcn.00408654
push dword [ebp - 0x11cc]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00404c60
mov eax, 0x208
call fcn.00402e30
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x44e398]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404b68
mov eax, dword [0x44e30c]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00404b68
mov byte [esi + 0x204], 0x3e
push ebx
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x447c18
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov eax, dword [ebp - 0x1b0]
call fcn.00408a64
test al, al
jne 0x44a3a3
push dword [ebp - 0x1ac]
push 0x44ac58
push dword [ebp - 0x1a8]
push 0x44ac58
lea edx, [ebp - 0x11d0]
xor eax, eax
call fcn.00408568
push dword [ebp - 0x11d0]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00404c60
jmp 0x44a3e4
push dword [ebp - 0x1ac]
push 0x44ac58
push dword [ebp - 0x1a8]
push 0x44ac58
mov eax, dword [ebp - 0x1b0]
call fcn.00448ae8
push edx
push eax
lea eax, [ebp - 0x11d4]
call fcn.00408654
push dword [ebp - 0x11d4]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00404c60
mov eax, 0x208
call fcn.00402e30
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x44e398]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404b68
mov eax, dword [0x44e30c]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00404b68
mov byte [esi + 0x204], 0x33
push ebx
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x447c18
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
push dword [ebp - 0x1b0]
push 0x44ac58
push dword [ebp - 0x1ac]
push 0x44ac58
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00404c60
mov eax, 0x208
call fcn.00402e30
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x44e398]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404b68
mov eax, dword [0x44e30c]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00404b68
mov byte [esi + 0x204], 0xe
push ebx
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x447c18
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
lea eax, [ebp - 4]
call fcn.004415c4
mov ecx, dword [ebp - 4]
mov dl, 0xf
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.004086d4
call fcn.00449210
test al, al
je 0x44a523
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a530
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x10
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea eax, [ebp - 4]
call fcn.00440ee8
mov ecx, dword [ebp - 4]
mov dl, 0x11
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.004086d4
call fcn.00440d4c
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x12
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.004086d4
call fcn.00440d58
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x13
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.004086d4
call fcn.00440d3c
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x13
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea eax, [ebp - 4]
call fcn.00440b94
mov ecx, dword [ebp - 4]
mov dl, 0x15
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea eax, [ebp - 0x11d8]
push eax
or ecx, 0xffffffff
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00440aac
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x17
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea eax, [ebp - 0x11dc]
push eax
xor ecx, ecx
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00440aac
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x16
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
push dword [ebp - 0x1b0]
push 0x44ac58
lea eax, [ebp - 0x11e0]
call fcn.004407a8
push dword [ebp - 0x11e0]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00404c60
mov eax, 0x208
call fcn.00402e30
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x44e398]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404b68
mov eax, dword [0x44e30c]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00404b68
mov byte [esi + 0x204], 0x19
push ebx
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x447c18
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x10]
call fcn.00404964
mov eax, 0x208
call fcn.00402e30
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x44e398]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404b68
mov eax, dword [0x44e30c]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00404b68
mov byte [esi + 0x204], 0x25
push ebx
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x447c18
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.0043f71c
mov ecx, dword [ebp - 4]
mov dl, 0x1c
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
push 0x64
call sub.kernel32.dll_Sleep_2
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.0043f250
mov ecx, dword [ebp - 4]
mov dl, 0x1d
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x1b4]
call fcn.004458ac
jmp case.0x449f09.0
push dword [ebp - 0x10]
push 0x44ac64
push 0x44ac70
lea eax, [ebp - 0x11e4]
mov edx, 3
call fcn.00404c60
mov eax, dword [ebp - 0x11e4]
call fcn.004458e4
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1b0]
call fcn.0043fa5c
test al, al
je 0x44a848
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a855
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x22
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.0043fecc
test al, al
je 0x44a885
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a892
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x23
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x1b0]
call fcn.0044045c
test al, al
je 0x44a8de
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44a8eb
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x24
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, 0x208
call fcn.00402e30
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x44e398]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00404b68
mov eax, dword [0x44e30c]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00404b68
mov byte [esi + 0x204], 0x27
push ebx
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x447c18
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov eax, 0x200
call fcn.00402e30
mov ebx, eax
mov eax, ebx
xor ecx, ecx
mov edx, 0x200
call fcn.00403460
mov esi, ebx
mov eax, esi
mov edx, dword [ebp - 0x1b0]
mov ecx, 0xff
call fcn.00404b68
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x1ac]
mov ecx, 0xff
call fcn.00404b68
push ebx
push 0
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x4438e4
xor edx, edx
xor eax, eax
call fcn.00404850
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
mov edx, 0x44ac4c
call fcn.00404cf4
jne 0x44a9f3
lea eax, [ebp - 4]
call fcn.0044902c
jmp 0x44a9fb
lea eax, [ebp - 4]
call fcn.00449094
cmp dword [ebp - 4], 0
je case.0x449f09.0
mov ecx, dword [ebp - 4]
mov dl, 0x36
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.00440564
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov eax, dword [ebp - 0x1ac]
call fcn.004086d4
push eax
mov eax, dword [ebp - 0x1b0]
call fcn.004086d4
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov eax, dword [ebp - 0x1ac]
call fcn.004086d4
push eax
mov eax, dword [ebp - 0x1b0]
call fcn.004086d4
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 8
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 0x10
call sub.user32.dll_mouse_event
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.00408c74
test al, al
je 0x44aaf0
mov ecx, 0x44ac40
mov dl, 0x3a
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov ecx, 0x44ac4c
mov dl, 0x3a
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov eax, dword [ebp - 0x10]
call fcn.004439c0
test al, al
je 0x44ab2a
mov ecx, 0x44ac40
mov dl, 0x3b
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
mov ecx, 0x44ac4c
mov dl, 0x3b
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea edx, [ebp - 0x1b0]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.00449cf4
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x1b0]
call fcn.00449174
test al, al
je 0x44ab7b
lea eax, [ebp - 4]
mov edx, 0x44ac40
call fcn.00404964
jmp 0x44ab88
lea eax, [ebp - 4]
mov edx, 0x44ac4c
call fcn.00404964
mov ecx, dword [ebp - 4]
mov dl, 0x3c
mov eax, dword [ebp - 0x1b4]
call fcn.00447a74
jmp case.0x449f09.0
lea eax, [ebp - 4]
call fcn.0044525c
mov eax, dword [0x44e324]
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
mov dl, 0x3d
call fcn.00447a74
cmp dword [ebp - 0xc], 0
jne 0x449ece
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x449e4b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44ac2f
lea eax, [ebp - 0x11e4]
mov edx, 0xb
call fcn.004048f0
lea eax, [ebp - 0x1b0]
mov ecx, 0x65
mov edx, dword [0x40102c]
call fcn.00405414
lea eax, [ebp - 0x1a]
mov edx, dword [0x447978]
call fcn.004053c8
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.004048f0
ret