Function at 0x401a90
Capabilities:
Delete file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x41e986
push eax
mov eax, 0x4ca4
mov dword fs:[0], esp
call fcn.0041e190
push ebp
push esi
mov esi, dword [esp + 0x4cc0]
push edi
cmp esi, 2
je 0x401dd5
mov edi, dword [sym.imp.MSVCRT.dll_time]
push 0
call edi
push 0
call edi
add esp, 8
neg esi
sbb esi, esi
and esi, 0x80000000
or eax, esi
push eax
lea eax, [esp + 0x2cb4]
push 0x424130
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea ecx, [esp + 0x4cd8]
or ebp, 0xffffffff
push ecx
lea edi, [esp + 0x2cc0]
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
mov edx, dword [esp + 0x4cd8]
not ecx
dec ecx
push edx
lea eax, [esp + ecx + 0x2cc4]
push eax
call dword [sym.imp.MSVCRT.dll_vsprintf]
add esp, 0x18
lea ecx, [esp + 0x410]
call fcn.00408410
lea ecx, [esp + 0xc]
mov dword [esp + 0x4cb8], 0
push ecx
call fcn.00414e90
mov edx, eax
mov edi, str.License.log
mov ecx, ebp
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push eax
mov esi, edi
mov edi, edx
mov edx, ecx
mov ecx, ebp
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 1
and ecx, 3
lea eax, [esp + 0x14]
rep movsb byte es:[edi], byte [esi]
push 1
push eax
lea ecx, [esp + 0x420]
call fcn.004086a0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
test eax, eax
je 0x401bc1
xor esi, esi
cmp esi, 0x32
je 0x401dc2
add esi, 0xa
push esi
call edi
push 0
push 1
lea ecx, [esp + 0x14]
push 1
push ecx
lea ecx, [esp + 0x420]
call fcn.004086a0
test eax, eax
jne 0x401b97
lea ecx, [esp + 0x410]
call fcn.00408550
mov edx, dword [esp + 0x4cc0]
cmp eax, dword [edx + 0x600]
jle 0x401d95
push 0
lea ecx, [esp + 0x414]
call fcn.004087b0
push 0
push 0
lea eax, [esp + 0x14]
push 0
push eax
lea ecx, [esp + 0x420]
call fcn.004086a0
test eax, eax
je 0x401c35
xor esi, esi
cmp esi, 0x32
je 0x401dc2
add esi, 0xa
push esi
call edi
push 0
push 0
lea ecx, [esp + 0x14]
push 0
push ecx
lea ecx, [esp + 0x420]
call fcn.004086a0
test eax, eax
jne 0x401c0b
lea ecx, [esp + 0x410]
call fcn.00408550
shr eax, 2
push eax
lea ecx, [esp + 0x414]
call fcn.00409240
lea ecx, [esp + 0x410]
call fcn.00408550
shr eax, 2
push eax
lea ecx, [esp + 0x414]
call fcn.00409420
lea edx, [esp + 0x3cb0]
push 0x1000
push edx
lea ecx, [esp + 0x418]
call fcn.00408bf0
push 1
push 1
push 1
push 1
push 0
lea ecx, [esp + 0x1874]
call fcn.00408460
lea eax, [esp + 0x3cb0]
push 0x1000
push eax
lea ecx, [esp + 0x418]
mov byte [esp + 0x4cc0], 1
call fcn.00408bf0
test eax, eax
jle 0x401cf2
lea ecx, [esp + 0x3cb0]
push ecx
lea ecx, [esp + 0x1864]
call fcn.004088f0
lea edx, [esp + 0x3cb0]
push 0x1000
push edx
lea ecx, [esp + 0x418]
call fcn.00408bf0
test eax, eax
jg 0x401cc1
push 0
lea ecx, [esp + 0x414]
call fcn.004087b0
push 0
lea ecx, [esp + 0x1864]
call fcn.004087b0
push 0
push 0
lea ecx, [esp + 0x418]
call fcn.00408a50
push eax
lea ecx, [esp + 0x1868]
call fcn.004094c0
push 0
lea ecx, [esp + 0x1864]
call fcn.00408a50
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push 1
push 1
push 0
lea ecx, [esp + 0x420]
call fcn.004086a0
test eax, eax
je 0x401d81
xor esi, esi
cmp esi, 0x32
je 0x401ded
add esi, 0xa
push esi
call edi
push 0
push 1
push 1
push 0
lea ecx, [esp + 0x420]
call fcn.004086a0
test eax, eax
jne 0x401d5a
lea ecx, [esp + 0x1860]
mov byte [esp + 0x4cb8], 0
call fcn.00408450
lea ecx, [esp + 0x410]
call fcn.00408550
push eax
lea ecx, [esp + 0x414]
call fcn.00409240
lea eax, [esp + 0x2cb0]
lea ecx, [esp + 0x410]
push eax
call fcn.004088f0
lea ecx, [esp + 0x410]
mov dword [esp + 0x4cb8], ebp
call fcn.00408450
mov ecx, dword [esp + 0x4cb0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x4cb0
ret
lea ecx, [esp + 0x1860]
mov byte [esp + 0x4cb8], 0
call fcn.00408450
jmp 0x401dc2