Function at 0x401260
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4162f1
mov eax, dword fs:[0]
push eax
sub esp, 0x508
mov eax, dword [0x423028]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x3cc]
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x4cc], eax
call fcn.004023b0
lea ecx, [ebp - 0x3cc]
mov dword [ebp - 4], 0
call fcn.00402f00
test al, al
je 0x401636
lea eax, [ebp - 0x3fc]
push eax
lea ecx, [ebp - 0x3cc]
call fcn.00402580
mov edx, dword [ebp - 0x3e8]
cmp edx, 0x10
jb 0x40130f
mov ecx, dword [ebp - 0x3fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x401305
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c33
push edx
push ecx
call fcn.00403d14
add esp, 8
push 0
call fcn.0040861d
push eax
call fcn.00408317
add esp, 8
lea eax, [ebp - 0x3fc]
lea ecx, [ebp - 0x3cc]
push eax
call fcn.00402f20
mov dword [ebp - 0x4d0], eax
lea eax, [ebp - 0x3e4]
mov byte [ebp - 4], 1
push eax
call fcn.00403070
add esp, 4
mov edi, eax
lea eax, [ebp - 0x3b4]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x3cc]
call fcn.00402fc0
mov ebx, eax
mov eax, dword [ebp - 0x4d0]
cmp dword [eax + 0x14], 0x10
jb 0x401372
mov eax, dword [eax]
cmp dword [edi + 0x14], 0x10
jb 0x40137a
mov edi, dword [edi]
cmp dword [ebx + 0x14], 0x10
jb 0x401382
mov ebx, dword [ebx]
push eax
call fcn.004082f6
cdq
mov ecx, 0x2710
idiv ecx
lea eax, [ebp - 0x39c]
push edx
push edi
push ebx
push str._s_svxDELETE_05d__s
push eax
call fcn.00401f40
mov edx, dword [ebp - 0x3a0]
add esp, 0x18
cmp edx, 0x10
jb 0x4013e1
mov ecx, dword [ebp - 0x3b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4013d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c38
push edx
push ecx
call fcn.00403d14
add esp, 8
mov edx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x3a0], 0xf
mov byte [ebp - 0x3b4], 0
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x40143a
mov ecx, dword [ebp - 0x3e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x401430
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c38
push edx
push ecx
call fcn.00403d14
add esp, 8
mov edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x3d0], 0xf
mov byte [ebp - 0x3e4], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x401493
mov ecx, dword [ebp - 0x3fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x401489
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c38
push edx
push ecx
call fcn.00403d14
add esp, 8
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3a4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x3a0], 0xf
mov byte [ebp - 0x3b4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4014c1
sub ecx, edx
lea eax, [ebp - 0x39c]
push ecx
push eax
lea ecx, [ebp - 0x3b4]
call fcn.00401d40
lea eax, [ebp - 0x3b4]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x414]
call fcn.004023b0
mov edx, dword [ebp - 0x3a0]
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x401531
mov ecx, dword [ebp - 0x3b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x401527
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c3d
push edx
push ecx
call fcn.00403d14
add esp, 8
lea eax, [ebp - 0x3fc]
mov dword [ebp - 0x3a4], 0
push eax
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x3a0], 0xf
mov byte [ebp - 0x3b4], 0
call fcn.00403740
mov edi, eax
lea eax, [ebp - 0x3e4]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x3cc]
call fcn.00403740
cmp dword [edi + 0x14], 0x10
jb 0x40157e
mov edi, dword [edi]
cmp dword [eax + 0x14], 0x10
jb 0x401586
mov eax, dword [eax]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov edx, dword [ebp - 0x3d0]
cmp eax, 1
setne bl
cmp edx, 0x10
jb 0x4015ce
mov ecx, dword [ebp - 0x3e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4015c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c42
push edx
push ecx
call fcn.00403d14
add esp, 8
mov edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x3d0], 0xf
mov byte [ebp - 0x3e4], 0
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x401627
mov ecx, dword [ebp - 0x3fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40161d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c42
push edx
push ecx
call fcn.00403d14
add esp, 8
test bl, bl
je 0x401677
lea ecx, [ebp - 0x414]
call fcn.00401130
mov edx, dword [ebp - 0x3b8]
cmp edx, 0x10
jb 0x401670
mov ecx, dword [ebp - 0x3cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x401666
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401ca7
push edx
push ecx
call fcn.00403d14
add esp, 8
xor al, al
jmp 0x401c17
cmp dword [ebp - 0x400], 0x10
lea eax, [ebp - 0x414]
push dword [ebp - 0x404]
cmovae eax, dword [ebp - 0x414]
lea ecx, [ebp - 0x3cc]
push eax
call fcn.00401d40
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3a0], 0xf
mov dword [ebp - 0x3a4], 0
mov byte [ebp - 0x3b4], 0
lea eax, [ebp - 0x3b4]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x444]
call fcn.004023b0
mov edx, dword [ebp - 0x3a0]
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x401716
mov ecx, dword [ebp - 0x3b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40170c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c47
push edx
push ecx
call fcn.00403d14
add esp, 8
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x3a0], 0xf
mov byte [ebp - 0x3b4], 0
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0xf
mov byte [ebp - 0x42c], 0
mov eax, dword [ebp - 0x4cc]
lea ecx, [ebp - 0x444]
cmp dword [ebp - 0x3b8], 0x10
push dword [ebp - 0x3bc]
mov byte [ebp - 4], 8
mov al, byte [eax]
mov byte [ebp - 0x448], al
lea eax, [ebp - 0x3cc]
cmovae eax, dword [ebp - 0x3cc]
push eax
call fcn.00401d40
lea eax, [ebp - 0x42c]
cmp eax, esi
je 0x4017b1
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x4017a2
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x42c]
push eax
call fcn.00401d40
lea eax, [ebp - 0x3e4]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x444]
call fcn.00403740
cmp dword [ebp - 0x3d4], 0
mov byte [ebp - 4], 0xa
je 0x401c4c
cmp dword [ebp - 0x3d0], 0x10
lea eax, [ebp - 0x3e4]
push 0
cmovae eax, dword [ebp - 0x3e4]
push 0
push eax
lea eax, [ebp - 0x124]
push str._s_c_c
push eax
call fcn.00401f40
add esp, 0x14
mov eax, 0x214
cmp byte [ebp - 0x448], 0
je 0x401b3a
lea ecx, [ebp - 0x444]
call fcn.00403460
test al, al
je 0x401b35
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x4cc], esp
mov dword [eax], 0
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], 0
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov esi, esp
push 3
push 0x417240
push esi
mov dword [esi], 0
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 3
call fcn.00404e20
add esp, 0xc
mov byte [esi + 3], 0
lea eax, [ebp - 0x3fc]
mov byte [ebp - 4], 0xa
push eax
call fcn.00402860
add esp, 0x34
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0xc
call fcn.00402e80
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x3fc]
call fcn.00402f20
mov edi, eax
lea eax, [ebp - 0x478]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x444]
call fcn.00403090
mov dword [ebp - 0x4cc], eax
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x460]
call fcn.004023b0
lea ecx, [ebp - 0x4c0]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, eax
call fcn.00403250
mov ebx, eax
lea eax, [ebp - 0x4a8]
mov byte [ebp - 4], 0x10
push eax
call fcn.00403070
add esp, 4
mov esi, eax
lea eax, [ebp - 0x3b4]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x3fc]
call fcn.00402fc0
cmp dword [edi + 0x14], 0x10
jb 0x401929
mov edi, dword [edi]
mov ecx, dword [ebp - 0x4cc]
cmp dword [ecx + 0x14], 0x10
jb 0x401937
mov ecx, dword [ecx]
cmp dword [ebx + 0x14], 0x10
jb 0x40193f
mov ebx, dword [ebx]
cmp dword [esi + 0x14], 0x10
jb 0x401947
mov esi, dword [esi]
cmp dword [eax + 0x14], 0x10
jb 0x40194f
mov eax, dword [eax]
push edi
push ecx
push ebx
push esi
push eax
lea eax, [ebp - 0x28c]
push str._s_s_s__s__s
push eax
call fcn.00401f40
add esp, 0x1c
lea ecx, [ebp - 0x3b4]
call fcn.00401130
lea ecx, [ebp - 0x4a8]
call fcn.00401130
lea ecx, [ebp - 0x4c0]
call fcn.00401130
lea ecx, [ebp - 0x460]
call fcn.00401130
lea ecx, [ebp - 0x478]
call fcn.00401130
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0xc
call fcn.00401130
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3a4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x3a0], 0xf
mov byte [ebp - 0x3b4], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4019e0
sub ecx, edx
lea eax, [ebp - 0x28c]
push ecx
push eax
lea ecx, [ebp - 0x3b4]
call fcn.00401d40
lea eax, [ebp - 0x3b4]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x460]
call fcn.004023b0
lea ecx, [ebp - 0x478]
mov byte [ebp - 4], 0x13
push ecx
mov ecx, eax
call fcn.00402fc0
push eax
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x14
call fcn.004023b0
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.004035c0
lea ecx, [ebp - 0x490]
call fcn.00401130
lea ecx, [ebp - 0x478]
call fcn.00401130
lea ecx, [ebp - 0x460]
call fcn.00401130
mov edx, dword [ebp - 0x3a0]
mov byte [ebp - 4], 0xc
cmp edx, 0x10
jb 0x401a9e
mov ecx, dword [ebp - 0x3b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x401a94
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c64
push edx
push ecx
call fcn.00403d14
add esp, 8
lea eax, [ebp - 0x124]
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4e8], eax
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x4e4], eax
mov eax, 0x214
mov word [ebp - 0x4e0], ax
lea eax, [ebp - 0x4f0]
push eax
mov dword [ebp - 0x4ec], 1
mov dword [ebp - 0x4de], 0
mov dword [ebp - 0x4da], 0
mov dword [ebp - 0x4d6], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationA]
test eax, eax
jne 0x401c69
push eax
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x124]
push str._s_c_c
push eax
call fcn.00401f40
add esp, 0x14
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x3fc]
call fcn.00401130
mov eax, 0x254
or eax, 0x400
mov dword [ebp - 0x510], 0
mov word [ebp - 0x500], ax
lea ecx, [ebp - 0x124]
lea eax, [ebp - 0x510]
mov dword [ebp - 0x50c], 3
push eax
mov dword [ebp - 0x508], ecx
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x4fe], 0
mov dword [ebp - 0x4fa], 0
mov dword [ebp - 0x4f6], 0
call dword [sym.imp.SHELL32.dll_SHFileOperationA]
push 0x421ad8
test eax, eax
je 0x401c94
jmp 0x401c81
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00403d22
mov esp, ebp
pop ebp
ret
call fcn.00406f9f
call fcn.00406f9f
call fcn.00406f9f
call fcn.00406f9f
call fcn.00406f9f
push 0x421ad8
lea eax, [ebp - 0x4c1]
mov byte [ebp - 0x4c1], 0
push eax
call fcn.004049fd
call fcn.00406f9f
push 0x421ad8
lea eax, [ebp - 0x4c2]
mov byte [ebp - 0x4c2], 0
push eax
call fcn.004049fd
lea eax, [ebp - 0x4c3]
mov byte [ebp - 0x4c3], 0
push eax
call fcn.004049fd
lea eax, [ebp - 0x4c4]
mov byte [ebp - 0x4c4], 1
push eax
call fcn.004049fd
call fcn.00406f9f
int3