Function at 0x447c40
Capabilities:
Delete file

Disassembly:
push 0x2ec
mov eax, 0x4f3eff
call fcn.004d298d
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x188]
call fcn.0043b0b4
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp + 8]
mov dword [ebp - 0x190], esp
mov ecx, esp
push eax
call fcn.00424ecd
call fcn.0047b160
pop ecx
cmp eax, ebx
jne 0x447caa
push 5
pop edi
lea esi, [ebp - 0x188]
call fcn.0043d807
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, edi
jmp 0x44809b
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x190], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x268]
push eax
call fcn.00490040
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1e0], ebx
jne 0x447cea
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
push 0xe
jmp 0x447c81
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x268]
call fcn.0042a281
pop ecx
test al, al
jne 0x447d17
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
push 0xf
jmp 0x447c81
push ecx
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x190], esp
mov ecx, esp
push eax
call fcn.00424ecd
call fcn.0047b1a0
pop ecx
cmp eax, ebx
jne 0x447d4c
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
push 0x10
jmp 0x447c81
push ecx
mov dword [ebp - 0x190], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x190], esp
push str.VirtFiles.Prog.db
lea esi, [ebp - 0x188]
call fcn.004247e9
push edi
mov ecx, esi
call fcn.0048a1c0
pop ecx
pop ecx
call fcn.0047b160
pop ecx
cmp eax, ebx
je 0x448068
push ecx
mov dword [ebp - 0x190], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x190], esp
push str.VirtReg.export
call fcn.004247e9
push edi
mov ecx, esi
call fcn.0048a1c0
pop ecx
pop ecx
call fcn.0047b160
pop ecx
cmp eax, ebx
je 0x448068
push ecx
mov eax, esp
mov dword [ebp - 0x190], esp
push dword [ebp - 0x17c]
push str._s.VirtFiles.db
push eax
call fcn.00478610
lea eax, [ebp - 0x18c]
add esp, 0xc
push eax
call fcn.00477ce0
pop ecx
pop ecx
mov byte [ebp - 4], 4
push dword [ebp - 0x18c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x190], esp
mov ecx, esp
push eax
call fcn.00424ecd
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x194], esp
mov esi, str.Main
push esi
call fcn.004247e9
push 4
pop ecx
lea edi, [ebp - 0x268]
mov byte [ebp - 4], 4
call fcn.00492430
cmp eax, ebx
je 0x447e5c
mov ecx, dword [ebp - 0x18c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
push 8
jmp 0x447c81
lea eax, [ebp - 0x268]
call fcn.00490f20
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1d4], ebx
lea edi, [ebp - 0x1d0]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x194], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1d4]
call fcn.00424ecd
mov ecx, edi
call fcn.00484290
add esp, 0xc
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1b4], ebx
lea edi, [ebp - 0x1b0]
rep stosd dword es:[edi], eax
push 1
push ebx
push ecx
mov dword [ebp - 0x194], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x194], esp
push str.VirtFiles.db
call fcn.004247e9
push edi
lea ecx, [ebp - 0x188]
call fcn.0048a1c0
pop ecx
pop ecx
lea ecx, [ebp - 0x1b4]
call fcn.00484290
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
push 0x44559d
push ebx
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x1b4]
push eax
call fcn.0049a570
mov ebx, dword [ebp - 0x18c]
lea eax, [ebp - 0x1d4]
push eax
call fcn.0049a730
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x194], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x2f8]
push eax
call fcn.00490040
mov byte [ebp - 4], 6
cmp dword [ebp - 0x270], 0
jne 0x447f83
lea eax, [ebp - 0x2f8]
mov byte [ebp - 4], 4
call fcn.0042796b
mov ecx, dword [ebp - 0x18c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
push 7
jmp 0x447c81
push ecx
mov ecx, esp
mov dword [ebp - 0x194], esp
push esi
call fcn.004247e9
push 0x4000
push 4
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x190], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x2f8]
push eax
mov byte [ebp - 4], 6
call fcn.00491c50
test eax, eax
lea eax, [ebp - 0x2f8]
je 0x447fe5
call fcn.00490f20
lea eax, [ebp - 0x2f8]
mov byte [ebp - 4], 4
call fcn.0042796b
jmp 0x447e38
call fcn.00490f20
test eax, eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2f8]
je 0x448021
call fcn.0042796b
mov ecx, dword [ebp - 0x18c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
push 0xa
jmp 0x447c81
call fcn.0042796b
mov ecx, dword [ebp - 0x18c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
lea esi, [ebp - 0x188]
call fcn.0043d807
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
jmp 0x44809b
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
call fcn.0042796b
lea esi, [ebp - 0x188]
call fcn.0043d807
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
push 6
pop eax
call fcn.004d2a10
ret