Function at 0x449aea
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4d82b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x18], esi
mov dword [esi], 0x4e7fe8
mov dword [esi + 4], 0x4e7f98
push 1
lea eax, [esi + 8]
push 1
push eax
mov dword [esp + 0x30], 0x28
mov dword [esp + 0x20], eax
call fcn.00448590
push 0
lea eax, [esi + 0x228]
push 0
push eax
mov ecx, esi
call fcn.00448590
lea edi, [esi + 0x14]
mov ecx, edi
xor ebx, ebx
mov dword [esp + 0x10], edi
call fcn.0049c670
test eax, eax
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jle 0x449bd3
push ebx
mov ecx, edi
call fcn.004979f0
mov edi, eax
mov eax, dword [edi + 0x88]
cmp byte [eax], 0
jne 0x449b67
mov eax, dword [esi + 0x1370]
test eax, eax
je 0x449b70
mov eax, dword [edi + 0xd0]
push eax
call ebp
mov eax, dword [edi + 0xd0]
lea ecx, [edi + 0xd4]
cmp eax, ecx
je 0x449b89
push eax
call fcn.00482838
add esp, 4
mov eax, dword [edi + 0x88]
lea edx, [edi + 0x8c]
cmp eax, edx
je 0x449ba2
push eax
call fcn.00482838
add esp, 4
mov eax, dword [edi]
lea ecx, [edi + 4]
cmp eax, ecx
je 0x449bb4
push eax
call fcn.00482838
add esp, 4
push edi
call fcn.004cabc1
mov ecx, dword [esp + 0x14]
add esp, 4
inc ebx
call fcn.0049c670
cmp ebx, eax
mov edi, dword [esp + 0x10]
jl 0x449b48
mov eax, dword [esi + 0x20]
test eax, eax
je 0x449be9
mov eax, dword [esi + 0xf8]
cmp word [eax], 0
je 0x449be9
push eax
call ebp
mov eax, dword [esi + 0x140c]
lea edx, [esi + 0x1410]
cmp eax, edx
je 0x449c02
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x1380]
lea ecx, [esi + 0x1384]
cmp eax, ecx
je 0x449c1b
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x1318]
lea edx, [esi + 0x131c]
cmp eax, edx
je 0x449c34
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x1278]
lea ecx, [esi + 0x127c]
cmp eax, ecx
je 0x449c4d
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x11f0]
lea edx, [esi + 0x11f4]
cmp eax, edx
je 0x449c66
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x1168]
lea ecx, [esi + 0x116c]
cmp eax, ecx
je 0x449c7f
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x10e0]
lea edx, [esi + 0x10e4]
cmp eax, edx
je 0x449c98
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x1054]
lea ecx, [esi + 0x1058]
cmp eax, ecx
je 0x449cb1
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xfcc]
lea edx, [esi + 0xfd0]
cmp eax, edx
je 0x449cca
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xf44]
lea ecx, [esi + 0xf48]
cmp eax, ecx
je 0x449ce3
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xebc]
lea edx, [esi + 0xec0]
cmp eax, edx
je 0x449cfc
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xe34]
lea ecx, [esi + 0xe38]
cmp eax, ecx
je 0x449d15
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xdac]
lea edx, [esi + 0xdb0]
cmp eax, edx
je 0x449d2e
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xd24]
lea ecx, [esi + 0xd28]
cmp eax, ecx
je 0x449d47
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xc9c]
lea edx, [esi + 0xca0]
cmp eax, edx
je 0x449d60
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xc14]
lea ecx, [esi + 0xc18]
cmp eax, ecx
je 0x449d79
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xb8c]
lea edx, [esi + 0xb90]
cmp eax, edx
je 0x449d92
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xb04]
lea ecx, [esi + 0xb08]
cmp eax, ecx
je 0x449dab
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xa7c]
lea edx, [esi + 0xa80]
cmp eax, edx
je 0x449dc4
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x9f4]
lea ecx, [esi + 0x9f8]
cmp eax, ecx
je 0x449ddd
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x96c]
lea edx, [esi + 0x970]
cmp eax, edx
je 0x449df6
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x8e4]
lea ecx, [esi + 0x8e8]
cmp eax, ecx
je 0x449e0f
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x85c]
lea edx, [esi + 0x860]
cmp eax, edx
je 0x449e28
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x7d4]
lea ecx, [esi + 0x7d8]
cmp eax, ecx
je 0x449e41
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x74c]
lea edx, [esi + 0x750]
cmp eax, edx
je 0x449e5a
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x6c4]
lea ecx, [esi + 0x6c8]
cmp eax, ecx
je 0x449e73
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x63c]
lea edx, [esi + 0x640]
cmp eax, edx
je 0x449e8c
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x5b4]
lea ecx, [esi + 0x5b8]
cmp eax, ecx
je 0x449ea5
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x52c]
lea edx, [esi + 0x530]
cmp eax, edx
je 0x449ebe
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x4a4]
lea ecx, [esi + 0x4a8]
cmp eax, ecx
je 0x449ed7
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x41c]
lea edx, [esi + 0x420]
cmp eax, edx
je 0x449ef0
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x394]
lea ecx, [esi + 0x398]
cmp eax, ecx
je 0x449f09
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x30c]
lea edx, [esi + 0x310]
cmp eax, edx
je 0x449f22
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x284]
lea ecx, [esi + 0x288]
cmp eax, ecx
je 0x449f3b
push eax
call fcn.00482838
add esp, 4
lea ecx, [esi + 0x234]
mov byte [esp + 0x24], 5
call fcn.00497a60
lea ecx, [esi + 0x228]
mov byte [esp + 0x24], 4
call fcn.00497a60
lea ecx, [esi + 0x20c]
mov byte [esp + 0x24], 3
call fcn.00497a60
mov eax, dword [esi + 0x184]
lea edx, [esi + 0x188]
cmp eax, edx
je 0x449f84
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xf8]
lea ecx, [esi + 0xfc]
cmp eax, ecx
je 0x449f9d
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0xb0]
lea edx, [esi + 0xb4]
cmp eax, edx
je 0x449fb6
push eax
call fcn.00482838
add esp, 4
mov eax, dword [esi + 0x28]
add esi, 0x2c
cmp eax, esi
je 0x449fc9
push eax
call fcn.00482838
add esp, 4
mov ecx, edi
mov byte [esp + 0x24], 0
call fcn.00497a60
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], 0xffffffff
call fcn.00497a60
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret