Function at 0x5863e4
Capabilities:
Delete file

Disassembly:
push 0x24c
mov eax, 0x60ae56
call fcn.004db4be
mov ebx, ecx
mov dword [ebp - 0x22c], ebx
xor edi, edi
xor esi, esi
inc edi
cmp dword [ebp + 0xc], edi
jne 0x5864bb
cmp dword [0x673790], esi
je 0x58649a
lea eax, [ebp - 0x228]
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x220]
lea ecx, [ebp - 0x258]
sub eax, dword [ebp - 0x228]
push eax
push dword [ebp - 0x21c]
push dword [ebp - 0x228]
call fcn.00458418
push ecx
mov dword [ebp - 4], esi
push dword [ebx + 4]
call fcn.004590c5
or dword [ebp - 4], 0xffffffff
push 2
pop ecx
cmp eax, ecx
jne 0x58647f
cmp dword [ebp - 0x244], esi
je 0x586a7b
mov dword [ebp - 4], edi
push dword [ebp - 0x244]
call fcn.004d9a03
jmp 0x586a7b
cmp dword [ebp - 0x244], 0
je 0x58649a
mov dword [ebp - 4], ecx
push dword [ebp - 0x244]
call fcn.004d9a03
or dword [ebp - 4], 0xffffffff
cmp dword [0x67378c], edi
jne 0x5864bb
push esi
push 0x7dd3
push 0x111
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x586a7b
mov eax, dword [ebx + 0x63e8]
test eax, eax
je 0x5864e4
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x5864e4
mov eax, dword [ebx + 0x63e8]
cmp dword [eax + 0x214], esi
jne 0x586a7b
mov ecx, ebx
call fcn.00458db3
cmp dword [ebx + 0x6304], esi
je 0x5864fe
lea ecx, [ebx + 0x6300]
call fcn.00552b50
mov eax, dword [ebx + 0x62d4]
mov edi, dword [sym.imp.USER32.dll_KillTimer]
test eax, eax
je 0x58651a
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62d4], esi
mov eax, dword [ebx + 0x62d0]
test eax, eax
je 0x586530
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62d0], esi
mov eax, dword [ebx + 0x62d8]
test eax, eax
je 0x586546
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62d8], esi
mov eax, dword [ebx + 0x62dc]
test eax, eax
je 0x58655c
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62dc], esi
mov eax, dword [ebx + 0x62e0]
test eax, eax
je 0x586572
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62e0], esi
mov eax, dword [ebx + 0x62e4]
test eax, eax
je 0x586588
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62e4], esi
mov eax, dword [ebx + 0x62e8]
test eax, eax
je 0x58659e
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62e8], esi
mov eax, dword [ebx + 0x62ec]
test eax, eax
je 0x5865b4
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62ec], esi
mov eax, dword [ebx + 0x62f0]
test eax, eax
je 0x5865ca
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62f0], esi
mov eax, dword [ebx + 0x62f4]
test eax, eax
je 0x5865e0
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62f4], esi
mov eax, dword [ebx + 0x62f8]
test eax, eax
je 0x5865f6
push eax
push dword [ebx + 4]
call edi
mov dword [ebx + 0x62f8], esi
lea esi, [ebx + 0x6360]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebx + 0x635c]
test eax, eax
je 0x58661a
push eax
push dword [ebx + 4]
call edi
and dword [ebx + 0x635c], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call esi
lea eax, [ebx + 0x6390]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebx + 0x6388]
test eax, eax
je 0x586647
push eax
push dword [ebx + 4]
call edi
and dword [ebx + 0x6388], 0
lea eax, [ebx + 0x6390]
push eax
call esi
xor eax, eax
cmp word [ebx + 0x5f7c], ax
je 0x586666
lea ecx, [ebx + 0x5e5c]
call fcn.0044dff1
push 3
lea esi, [ebx + 0x6378]
pop edi
push dword [esi]
call dword [sym.imp.USER32.dll_DestroyIcon]
lea esi, [esi + 4]
sub edi, 1
jne 0x58666f
mov eax, dword [0x6772fc]
mov edi, dword [sym.imp.USER32.dll_KillTimer]
dec eax
cmp eax, 1
jl 0x5866cc
mov edi, eax
xor ebx, ebx
push edi
mov ecx, 0x6772f8
call fcn.00418ff3
mov esi, dword [eax]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x5866ba
push ebx
push ebx
push 0x7ea
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
dec edi
cmp edi, 1
jge 0x586694
mov ebx, dword [ebp - 0x22c]
mov edi, dword [sym.imp.USER32.dll_KillTimer]
push 0xa
push dword [ebx + 4]
call edi
mov eax, dword [ebx + 0x6330]
test eax, eax
je 0x58671c
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindow]
xor esi, esi
test eax, eax
je 0x586703
mov eax, dword [ebx + 0x6330]
push esi
push 1
push 0x111
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebx + 0x6330]
test ecx, ecx
je 0x586714
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [ebx + 0x6330], esi
jmp 0x58671e
xor esi, esi
push dword [ebx + 4]
mov edi, dword [sym.imp.USER32.dll_IsIconic]
call edi
test eax, eax
jne 0x586734
mov ecx, ebx
call fcn.00459974
lea ecx, [ebx + 0x3a18]
call fcn.005a447c
lea eax, [ebx + 0x6240]
mov ecx, dword [eax]
push eax
call dword [ecx]
mov dword [0x67373c], eax
mov ecx, dword [ebx + 0x6280]
test ecx, ecx
je 0x5867fb
lea eax, [ebp - 0x220]
push eax
call fcn.0041be56
mov esi, eax
mov ecx, 0x673740
push esi
call fcn.0040d242
mov ecx, dword [ebp - 0x220]
mov eax, dword [esi + 4]
add ecx, 0xfffffff4
mov dword [0x673744], eax
cmp ecx, 0x668010
je 0x586794
call fcn.00407965
xor esi, esi
push 0x673df8
call fcn.00561350
push 0x67476c
lea ecx, [ebp - 0x22c]
call fcn.0040d2ee
push 0x63a154
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.0040ce1d
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x22c]
add ecx, 0xfffffff4
cmp ecx, 0x668010
je 0x5867df
call fcn.00407965
cmp dword [0x673c90], 0
push dword [ebp - 0x21c]
je 0x58680d
call fcn.005c097d
mov dword [0x673bfc], esi
jmp 0x586813
mov ecx, 0x673740
call fcn.0040d291
mov dword [0x673744], esi
jmp 0x586796
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [0x668e38]
mov dword [0x673cb0], eax
call fcn.00597340
cmp dword [0x673430], 0
je 0x586849
push 0x63a14c
push ecx
lea eax, [ebp - 0x218]
push eax
call fcn.004138b3
lea eax, [ebp - 0x218]
push eax
call fcn.004500e3
mov ecx, 0x673e78
call fcn.00453fc5
mov ecx, 0x673610
mov dword [0x673820], 1
call fcn.00545e5b
lea ecx, [ebx + 0x2100]
call fcn.00578f43
mov ecx, ebx
call fcn.0058cd4b
cmp dword [0x6737b0], 0
je 0x58688e
push esi
call fcn.0058b7ce
push esi
call fcn.0058b408
mov ecx, 0x673358
call fcn.005615c6
push dword [ebx + 4]
call edi
test eax, eax
jne 0x5868aa
push 0x64
mov ecx, ebx
call fcn.004598a3
mov eax, dword [ebx + 0x63e8]
test eax, eax
je 0x5868d0
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x5868d0
mov eax, dword [ebx + 0x63e8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ecx, dword [ebx + 0x63e8]
test ecx, ecx
je 0x5868eb
mov eax, dword [ecx]
push 1
call dword [eax + 4]
xor edi, edi
mov dword [ebx + 0x63e8], edi
jmp 0x5868ed
xor edi, edi
call fcn.0040a9ed
test eax, eax
je 0x586905
cmp dword [0x675608], 0
jbe 0x586905
push ecx
call fcn.005d0a89
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebx + 0x63ec], edi
je 0x58693b
push dword [ebx + 0x63f0]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0xffffffffffffffff
push dword [ebx + 0x63ec]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebx + 0x63ec]
call esi
mov dword [ebx + 0x63ec], edi
mov eax, dword [ebx + 0x63f0]
test eax, eax
je 0x586948
push eax
call esi
call fcn.004529d6
call fcn.00447deb
call fcn.00456655
lea ecx, [ebx + 0x6228]
call fcn.004594d5
mov ecx, ebx
call fcn.0058aa1d
mov eax, dword [ebx + 0x628c]
test eax, eax
je 0x586980
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
mov dword [ebx + 0x628c], edi
push str.TTPSvr_MessageWnd
lea ecx, [ebp - 0x22c]
call fcn.0040d2ee
push edi
mov byte [ebp - 4], 4
push dword [ebp - 0x22c]
push edi
push edi
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x5869bb
push edi
push edi
push 0x10
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, str.TTPSvr_FlashWnd
push esi
call fcn.00505bb3
pop ecx
push esi
push eax
lea ecx, [ebp - 0x22c]
call fcn.0040f513
push edi
mov edi, dword [ebp - 0x22c]
xor eax, eax
push edi
push eax
push eax
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x586a00
xor eax, eax
push eax
push eax
push 0x10
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x6731ec]
test ecx, ecx
je 0x586a36
mov eax, dword [ecx]
push 0x2710
push dword [ebx + 0x624c]
push 1
call dword [eax + 0x20]
mov ecx, dword [0x6731ec]
test ecx, ecx
je 0x586a2c
mov eax, dword [ecx]
push 1
call dword [eax]
xor esi, esi
mov dword [0x6731ec], esi
jmp 0x586a38
xor esi, esi
mov eax, dword [ebx + 0x63ac]
test eax, eax
je 0x586a4f
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebx + 0x63ac], esi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
lea ecx, [edi - 0xc]
mov ebx, 0x668010
cmp ecx, ebx
je 0x586a69
call fcn.00407965
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x586a7b
call fcn.00407965
xor eax, eax
call fcn.004db46d
ret 0x10