Function at 0x448648
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16f4
call fcn.004585a0
mov eax, dword [0x573510]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
push 0x1046
mov word [ebp - 0x16e4], ax
xor esi, esi
lea eax, [ebp - 0x16e2]
push esi
push eax
call fcn.004561f0
push 0x7f
lea eax, [ebp - 0x83]
push esi
push eax
mov byte [ebp - 0x84], 0
call fcn.004561f0
lea eax, [ebp - 0x84]
push 0x80
push eax
call fcn.00418720
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp - 0x28c], ax
lea eax, [ebp - 0x28a]
push esi
push eax
call fcn.004561f0
add esp, 0x2c
push 1
push 0x4c9d64
push 0x80000001
lea ecx, [ebp - 0x16f4]
mov dword [ebp - 0x16e8], 0x104
mov dword [ebp - 0x16f4], esi
mov dword [ebp - 0x16f0], esi
call fcn.0044771c
test eax, eax
jne 0x448714
lea eax, [ebp - 0x16e8]
push eax
lea eax, [ebp - 0x28c]
push eax
push 0x4dfe98
lea ecx, [ebp - 0x16f4]
call fcn.00447795
xor eax, eax
cmp ax, word [ebp - 0x28c]
jne 0x44873d
push 0x4dfe8c
push 0x4df954
lea eax, [ebp - 0x28c]
push 0x103
push eax
call fcn.004584cc
add esp, 0x10
call fcn.0044844a
cmp dword [eax + 0x18], 0x10
jb 0x44874d
mov ebx, dword [eax + 4]
jmp 0x448750
lea ebx, [eax + 4]
cmp ebx, esi
jne 0x44875c
mov dword [ebp - 0x16ec], esi
jmp 0x448791
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
cmp esi, 0x3fffffff
jle 0x448777
and dword [ebp - 0x16ec], 0
jmp 0x448791
lea eax, [esi + esi]
call fcn.004584a0
mov eax, esp
push 3
push esi
push ebx
push eax
call fcn.004476c9
mov dword [ebp - 0x16ec], eax
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x84]
push eax
call ebx
mov esi, eax
inc esi
cmp esi, 0x3fffffff
jle 0x4487b4
and dword [ebp - 0x16e8], 0
jmp 0x4487d4
lea eax, [esi + esi]
call fcn.004584a0
mov eax, esp
push 3
push esi
lea ecx, [ebp - 0x84]
push ecx
push eax
call fcn.004476c9
mov dword [ebp - 0x16e8], eax
lea eax, [ebp - 0x84]
push eax
call ebx
mov esi, eax
inc esi
cmp esi, 0x3fffffff
jle 0x4487ec
xor eax, eax
jmp 0x448806
lea eax, [esi + esi]
call fcn.004584a0
mov eax, esp
push 3
push esi
lea ecx, [ebp - 0x84]
push ecx
push eax
call fcn.004476c9
lea ecx, [ebp - 0x28c]
push ecx
push dword [ebp - 0x16ec]
mov ecx, 0x5774e8
push dword [ebp - 0x16e8]
xor ebx, ebx
push 0x578320
push 0x578118
push 0x577f10
push 0x577d08
push 0x577b00
push 0x5778f8
push ecx
push 0x5770d8
push ebx
push ebx
push ecx
push eax
push 0x4dfcf8
lea eax, [ebp - 0x16e4]
push 0x823
push eax
call fcn.004584cc
add esp, 0x48
lea eax, [ebp - 0x16e4]
mov esi, 0x578b48
push eax
mov ecx, esi
call fcn.004480a2
xor eax, eax
push edi
mov word [ebp - 0x69c], ax
lea eax, [ebp - 0x69a]
push ebx
push eax
call fcn.004561f0
xor eax, eax
push edi
mov word [ebp - 0x494], ax
lea eax, [ebp - 0x492]
push ebx
push eax
call fcn.004561f0
add esp, 0x18
lea eax, [ebp - 0x69c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x494]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x4dfcec
lea eax, [ebp - 0x69c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
lea eax, [ebp - 0x494]
push eax
mov ecx, esi
call fcn.004480d4
mov ecx, esi
mov dword [0x57afb0], 1
mov dword [0x57b1f0], 0x1388
call fcn.0044dfca
mov ecx, esi
call fcn.00448c31
lea eax, [ebp - 0x494]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, esi
call fcn.0044afe9
lea ecx, [ebp - 0x16f4]
call fcn.00447701
lea esp, [ebp - 0x1700]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045633d
leave
ret