Function at 0x401afd
Capabilities:
Delete file
Get common file path
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov byte [ebp - 5], 0x16
mov byte [ebp - 5], 0x79
movsx eax, byte [ebp - 5]
dec eax
mov byte [ebp - 5], al
movsx eax, byte [ebp - 5]
add eax, 0x7e
mov byte [ebp - 5], al
mov dword [ebp - 0x3c], 0x1ae
mov dword [ebp - 0x3c], 0x93
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
add eax, 0xe6
mov dword [ebp - 0x3c], eax
push 0
call dword [sym.imp.GDI32.dll_GetColorSpace]
push 0x105
call fcn.004013bb
pop ecx
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov byte [eax], 0
mov dword [ebp - 0x28], 0x13e
mov dword [ebp - 0x28], 0x5a
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0xff
mov dword [ebp - 0x28], eax
mov word [ebp - 0x64], 0xd0
push 0
call dword [sym.imp.GDI32.dll_GetBkMode]
push 0
call dword [sym.imp.GDI32.dll_GdiSetBatchLimit]
push dword [ebp - 0x10]
push 1
push 0x401178
call fcn.00404d6f
pop ecx
push eax
push dword [0x40601c]
call dword [sym.imp.KERNEL32.DLL_GetTempFileNameA]
mov byte [ebp - 0x35], 1
movzx eax, byte [ebp - 0x35]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x35], al
movzx eax, byte [ebp - 0x35]
test eax, eax
jne 0x401bd6
movzx eax, byte [ebp - 0x35]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x35], al
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x401be2
mov byte [ebp - 0x35], 1
movzx eax, byte [ebp - 0x35]
test eax, eax
jne 0x401bee
mov byte [ebp - 0x35], 1
mov byte [ebp - 0x21], 1
movzx eax, byte [ebp - 0x21]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x21], al
movzx eax, byte [ebp - 0x21]
test eax, eax
jne 0x401c12
movzx eax, byte [ebp - 0x21]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x21], al
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x401c1e
mov byte [ebp - 0x21], 1
movzx eax, byte [ebp - 0x21]
test eax, eax
jne 0x401c2a
mov byte [ebp - 0x21], 1
push 0
call dword [sym.imp.GDI32.dll_GdiSetBatchLimit]
push 3
push dword [ebp - 0x10]
push dword [0x406020]
call dword [sym.imp.KERNEL32.DLL_MoveFileExA]
mov word [ebp - 0x20], 0xad
mov word [ebp - 0x44], 0x10
call dword [sym.imp.USER32.dll_DestroyCaret]
push 4
push 0
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.DLL_MoveFileExA]
mov byte [ebp - 0x5d], 0x26
mov byte [ebp - 0x5d], 0x1e
movsx eax, byte [ebp - 0x5d]
inc eax
mov byte [ebp - 0x5d], al
mov dword [ebp - 0x5c], 0x11b5
push 0
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x74], eax
push dword [ebp - 0x74]
call fcn.004013a4
pop ecx
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x401caa
movzx eax, byte [ebp - 0x19]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x19], al
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x401cb6
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
jne 0x401cc2
mov byte [ebp - 0x19], 0
mov dword [ebp - 4], 0x19
mov dword [ebp - 4], 0x9e
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 0x48
mov dword [ebp - 4], eax
push 0
call dword [sym.imp.GDI32.dll_GdiSetBatchLimit]
push 0x12c
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x54], 0xd92
mov word [ebp - 0x50], 9
push 0
call dword [sym.imp.GDI32.dll_CancelDC]
and dword [ebp - 0x30], 0
mov dword [ebp - 0x4c], 0xd2
mov dword [ebp - 0x4c], 0x6e
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0xb0
mov dword [ebp - 0x4c], eax
mov word [ebp - 0x34], 0xee
push 0
call dword [sym.imp.GDI32.dll_FlattenPath]
push dword [0x406020]
call fcn.00403cce
pop ecx
test eax, eax
je 0x401d51
mov dword [ebp - 0x30], 1
mov byte [ebp - 0x2a], 0x26
mov byte [ebp - 0x2a], 0x7c
movsx eax, byte [ebp - 0x2a]
dec eax
mov byte [ebp - 0x2a], al
movsx eax, byte [ebp - 0x2a]
add eax, 0xba
mov byte [ebp - 0x2a], al
mov dword [ebp - 0xc], 0x183
mov dword [ebp - 0xc], 0x1c
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
add eax, 0x98
mov dword [ebp - 0xc], eax
push 0
call dword [sym.imp.GDI32.dll_CancelDC]
push 0x100
call fcn.004013bb
pop ecx
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [0x406018], eax
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x401dc3
movzx eax, byte [ebp - 0x29]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x29], al
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x401dcf
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
jne 0x401ddb
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x401df3
movzx eax, byte [ebp - 0x3e]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x3e], al
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x401dff
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
jne 0x401e0b
mov byte [ebp - 0x3e], 0
push 0
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [0x406018]
call fcn.00401f72
pop ecx
test eax, eax
je 0x401e79
push 0x40115b
push dword [0x406018]
call fcn.004040fa
pop ecx
pop ecx
mov dword [ebp - 0x68], 0xf0
mov dword [ebp - 0x68], 0x85
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
add eax, 0xf8
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x69], 0x15
mov byte [ebp - 0x69], 5
movsx eax, byte [ebp - 0x69]
dec eax
mov byte [ebp - 0x69], al
movsx eax, byte [ebp - 0x69]
add eax, 0x72
mov byte [ebp - 0x69], al
push 0
call dword [sym.imp.GDI32.dll_StrokePath]
push 0x401162
push 0x401184
call fcn.00404d6f
pop ecx
push eax
call fcn.004040fa
pop ecx
pop ecx
mov byte [ebp - 0x45], 0x26
mov byte [ebp - 0x45], 0x11
movsx eax, byte [ebp - 0x45]
dec eax
mov byte [ebp - 0x45], al
movsx eax, byte [ebp - 0x45]
add eax, 0xa0
mov byte [ebp - 0x45], al
mov byte [ebp - 0x36], 0x29
mov byte [ebp - 0x36], 0xd2
movsx eax, byte [ebp - 0x36]
dec eax
mov byte [ebp - 0x36], al
movsx eax, byte [ebp - 0x36]
add eax, 0x4f
mov byte [ebp - 0x36], al
push 0
call dword [sym.imp.KERNEL32.DLL_CancelIo]
call fcn.004025fa
mov dword [ebp - 0x18], 0xc7f
mov byte [ebp - 0x11], 0xc
mov byte [ebp - 0x11], 0x92
movsx eax, byte [ebp - 0x11]
dec eax
mov byte [ebp - 0x11], al
movsx eax, byte [ebp - 0x11]
add eax, 0x1c
mov byte [ebp - 0x11], al
push 0
call dword [sym.imp.GDI32.dll_WidenPath]
cmp dword [ebp - 0x30], 0
je 0x401f08
call fcn.004033ea
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x401f20
movzx eax, byte [ebp - 0x3d]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x3d], al
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x401f2c
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
jne 0x401f38
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x401f50
movzx eax, byte [ebp - 0x55]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x55], al
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x401f5c
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
jne 0x401f68
mov byte [ebp - 0x55], 0
push 0
call dword [sym.imp.GDI32.dll_FillPath]
leave
ret