Function at 0x448310
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x729be6
mov eax, dword fs:[0]
push eax
sub esp, 0xce0
mov eax, dword [0x80100c]
xor eax, esp
mov dword [esp + 0xcdc], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x80100c]
xor eax, esp
push eax
lea eax, [esp + 0xcf4]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [esp + 0xd04]
mov ebp, dword [esp + 0xd08]
xor ebx, ebx
push 0x31f
lea eax, [esp + 0x9d5]
push ebx
push eax
mov byte [esp + 0x9dc], bl
call fcn.00563860
push 0x31f
lea ecx, [esp + 0x6c1]
push ebx
push ecx
mov byte [esp + 0x6c8], bl
call fcn.00563860
xor eax, eax
push 0x206
mov dword [esp + 0x6d], eax
mov dword [esp + 0x71], eax
mov dword [esp + 0x75], eax
mov dword [esp + 0x79], eax
mov dword [esp + 0x7d], eax
mov dword [esp + 0x81], eax
mov dword [esp + 0x85], eax
mov dword [esp + 0x89], eax
mov dword [esp + 0x91], eax
mov dword [esp + 0x95], eax
mov dword [esp + 0x99], eax
mov dword [esp + 0x9d], eax
mov dword [esp + 0xa1], eax
mov dword [esp + 0xa5], eax
mov dword [esp + 0xa9], eax
mov dword [esp + 0xad], eax
lea eax, [esp + 0x2be]
xor edx, edx
push ebx
push eax
mov byte [esp + 0x74], bl
mov byte [esp + 0x98], bl
mov word [esp + 0x2c4], dx
call fcn.00563860
push 0x206
lea edx, [esp + 0xc2]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0xc8], cx
call fcn.00563860
push 0x206
lea ecx, [esp + 0x4de]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x4e4], ax
call fcn.00563860
add esp, 0x3c
push 0x208
lea edx, [esp + 0x9c]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x2a4]
push 0x74b1ac
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
lea edx, [esp + 0x80]
push edx
lea eax, [esp + 0xa8]
push eax
call fcn.00446930
add esp, 0x14
lea ecx, [esp + 0x9d0]
push ecx
lea edx, [esp + 0x6b4]
push edx
push ebx
push edi
mov ecx, esi
call fcn.00447f00
mov esi, eax
cmp esi, ebx
je 0x4485c2
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 3
push ebx
push 0x779
push ebp
call esi
lea ecx, [esp + 0x6b0]
lea eax, [esp + 0x74]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x448500
cmp dl, bl
je 0x4484fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x448500
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4484e0
xor eax, eax
jmp 0x448505
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x448510
xor eax, eax
jmp 0x4485c4
push 8
push ebx
push 0x779
push ebp
call esi
lea eax, [esp + 0x9d0]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.00447680
add esp, 8
cmp dword [esp + 0x4c], 8
mov eax, dword [esp + 0x38]
mov dword [esp + 0xcfc], ebx
jae 0x448546
lea eax, [esp + 0x38]
push eax
lea edx, [esp + 0x1c]
push edx
call fcn.00447760
add esp, 8
mov eax, dword [esp + 0x1c]
mov edi, 0x10
mov byte [esp + 0xcfc], 1
cmp dword [esp + 0x30], edi
jae 0x44856f
lea eax, [esp + 0x1c]
push ebp
lea ecx, [esp + 0x2a4]
push ecx
push eax
lea ecx, [esp + 0x23]
call fcn.0044f3e0
test eax, eax
jne 0x4485ee
lea ecx, [esp + 0x18]
xor esi, esi
call fcn.0040b0f0
lea ecx, [esp + 0x34]
call fcn.00446ea0
lea eax, [esp + 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x64
push ebx
push 0x779
push ebp
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, esi
mov ecx, dword [esp + 0xcf4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xcdc]
xor ecx, esp
call fcn.005635df
add esp, 0xcec
ret 8
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x2a4]
push eax
call fcn.00446930
add esp, 8
lea ecx, [esp + 0x6b0]
lea eax, [esp + 0x50]
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x448630
cmp dl, bl
je 0x44862c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x448630
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x448610
xor eax, eax
jmp 0x448635
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x448586
lea ecx, [esp + 0x98]
push ecx
lea edx, [esp + 0x4ac]
push str._s.bak
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [esp + 0x4a8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x4a8]
push ecx
lea edx, [esp + 0x9c]
push edx
call fcn.00564915
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x2ac]
push ecx
call fcn.00564915
add esp, 0x10
mov esi, 1
cmp dword [esp + 0x30], edi
jb 0x4486ae
mov edx, dword [esp + 0x1c]
push edx
call fcn.00563182
add esp, 4
cmp dword [esp + 0x4c], 8
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
mov dword [esp + 0xcfc], 0xffffffff
jb 0x4486dd
mov eax, dword [esp + 0x38]
push eax
call fcn.00563182
add esp, 4
lea edx, [esp + 0x98]
xor ecx, ecx
push edx
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], cx
call fcn.00446a00
add esp, 4
jmp 0x4485a8