Function at 0x41ae70
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x24d0
call fcn.004b7a60
push ebx
push ebp
push esi
xor esi, esi
push edi
mov ebx, ecx
push esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x44], esi
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x18]
mov dword [esp + 0x18], esi
push eax
push 0x4c1630
push 1
push esi
push 0x4c1620
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x41b50b
cmp dword [esp + 0x18], esi
je 0x41b50b
lea ecx, [ebx + 0x5d0d0]
mov word [esp + 0x50], 8
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebp, dword [esp + 0x50]
lea ecx, [esp + 0x44]
push ecx
mov edi, eax
sub esp, 0x10
mov eax, dword [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x58], esi
mov edx, dword [eax]
push eax
mov dword [ecx], ebp
mov ebp, dword [esp + 0x6c]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0x74]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], ebp
call dword [edx + 0xe8]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp word [esp + 0x44], 0xffff
jne 0x41b501
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], esi
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x30]
test eax, eax
jl 0x41b501
mov eax, dword [esp + 0x28]
cmp eax, esi
je 0x41b501
push str.metalink
push eax
call fcn.00477090
mov ebp, eax
add esp, 8
cmp ebp, esi
mov dword [esp + 0x64], ebp
je 0x41b4f7
mov edx, dword [ebp]
lea eax, [esp + 0x34]
push eax
push ebp
mov dword [esp + 0x3c], esi
call dword [edx + 0x30]
test eax, eax
jl 0x41b4f0
mov eax, dword [esp + 0x34]
cmp eax, esi
je 0x41b4f0
push str.files
push eax
call fcn.00477090
mov edi, eax
add esp, 8
cmp edi, esi
mov dword [esp + 0x60], edi
je 0x41b4e6
mov ecx, dword [edi]
lea edx, [esp + 0x24]
push edx
push edi
mov dword [esp + 0x2c], esi
call dword [ecx + 0x30]
test eax, eax
jl 0x41b4e0
mov eax, dword [esp + 0x24]
cmp eax, esi
je 0x41b4e0
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x20]
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x14]
mov dword [ebx + 0x2694], eax
mov eax, dword [esp + 0x24]
push edx
mov edx, dword [ebx + 0x2690]
mov dword [esp + 0x18], esi
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x1c]
test eax, eax
jl 0x41b4d6
mov eax, dword [esp + 0x14]
cmp eax, esi
je 0x41b4d6
lea edx, [esp + 0x2c]
mov dword [esp + 0x2c], esi
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x1c]
test eax, eax
jl 0x41b4cc
mov eax, dword [esp + 0x2c]
cmp eax, esi
je 0x41b4cc
mov ebp, dword [sym.imp.MSVCRT.dll__wcsicmp]
push str.file
push eax
call ebp
add esp, 8
test eax, eax
jne 0x41b4bd
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], esi
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
test eax, eax
jl 0x41b4bd
cmp dword [esp + 0x20], esi
je 0x41b4bd
mov eax, dword [esp + 0x14]
push 0x4cfdf8
lea ecx, [esp + 0x70]
push eax
push ecx
call fcn.00477150
mov edx, eax
add esp, 0xc
mov ecx, dword [edx]
cmp cx, 8
mov eax, dword [edx + 4]
mov dword [esp + 0x54], eax
mov eax, dword [edx + 8]
mov edx, dword [edx + 0xc]
mov dword [esp + 0x5c], edx
jne 0x41b0b9
cmp eax, esi
je 0x41b0b9
push eax
push 0x4ce4dc
lea eax, [ebx + 0x62848]
push 0x103
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
mov ecx, dword [esp + 0x20]
push str.resources
push ecx
call fcn.00477090
mov edi, eax
add esp, 8
cmp edi, esi
mov dword [esp + 0x68], edi
je 0x41b4af
mov edx, dword [edi]
lea eax, [esp + 0x1c]
push eax
push edi
mov dword [esp + 0x24], esi
call dword [edx + 0x30]
test eax, eax
jl 0x41b4a9
mov eax, dword [esp + 0x1c]
cmp eax, esi
je 0x41b4a9
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], esi
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x24]
test eax, eax
jl 0x41b49f
mov eax, dword [esp + 0x10]
cmp eax, esi
je 0x41b49f
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], esi
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x1c]
test eax, eax
jl 0x41b47e
mov eax, dword [esp + 0x38]
cmp eax, esi
je 0x41b47e
push 0x4ce5e0
push eax
call ebp
add esp, 8
test eax, eax
jne 0x41b469
mov edx, dword [esp + 0x10]
push str.type
lea eax, [esp + 0x80]
push edx
push eax
call fcn.00477150
mov ecx, eax
add esp, 0xc
mov eax, dword [ecx]
cmp ax, 8
mov edx, dword [ecx + 4]
mov dword [esp + 0x70], edx
mov edi, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x78], ecx
jne 0x41b469
push 0x4cfdcc
push edi
call ebp
add esp, 8
test eax, eax
je 0x41b1ba
push 0x4cfdc4
push edi
call ebp
add esp, 8
test eax, eax
jne 0x41b469
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x50]
mov word [esp + 0x50], si
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x78]
test eax, eax
jl 0x41b469
cmp word [esp + 0x50], 8
jne 0x41b469
mov edx, dword [esp + 0x58]
cmp edx, esi
je 0x41b469
mov ecx, 0x914
xor eax, eax
lea edi, [esp + 0x90]
mov word [esp + 0x8c], si
rep stosd dword es:[edi], eax
lea eax, [esp + 0x8c]
push esi
push eax
push edx
call fcn.00416940
add esp, 0xc
test eax, eax
je 0x41b469
mov ecx, dword [ebx + 0x62a84]
mov edi, dword [ebx + 0x62a88]
add ebx, 0x62a7c
sub edi, ecx
mov eax, 0xe1800e19
mov ebp, ecx
imul edi
add edx, edi
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x41b37a
mov esi, dword [ebx + 4]
test esi, esi
je 0x41b277
mov edi, ecx
mov eax, 0xe1800e19
sub edi, esi
imul edi
add edx, edi
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
mov edi, edx
ja 0x41b27c
mov edi, 1
test esi, esi
jne 0x41b284
xor edx, edx
jmp 0x41b299
sub ecx, esi
mov eax, 0xe1800e19
imul ecx
add edx, ecx
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [edx + edi]
test ecx, ecx
mov dword [esp + 0x48], ecx
jge 0x41b2a6
xor ecx, ecx
mov eax, ecx
shl eax, 5
sub eax, ecx
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 2
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov edi, eax
mov eax, dword [ebx + 4]
add esp, 4
cmp eax, ebp
mov esi, edi
mov dword [esp + 0x3c], eax
je 0x41b2f8
jmp 0x41b2d7
mov eax, dword [esp + 0x3c]
push eax
push esi
call fcn.0041ba80
mov eax, dword [esp + 0x44]
add esp, 8
add eax, 0x2454
add esi, 0x2454
cmp eax, ebp
mov dword [esp + 0x3c], eax
jne 0x41b2d3
lea eax, [esp + 0x8c]
mov ecx, ebx
push eax
push 1
push esi
call fcn.0041b9d0
mov ecx, dword [ebx + 8]
add esi, 0x2454
push esi
push ecx
push ebp
mov ecx, ebx
call fcn.0041b990
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push edx
push eax
mov ecx, ebx
call fcn.00473200
mov ecx, dword [ebx + 4]
push ecx
call fcn.004b7a35
mov ecx, dword [esp + 0x4c]
add esp, 4
mov eax, ecx
shl eax, 5
sub eax, ecx
mov ecx, ebx
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
lea eax, [edi + edx*4]
mov dword [ebx + 0xc], eax
call fcn.0041b6e0
inc eax
mov dword [ebx + 4], edi
mov ecx, eax
shl ecx, 5
sub ecx, eax
xor esi, esi
lea ecx, [ecx + ecx*2]
lea eax, [ecx + ecx*4]
lea ecx, [eax + eax*4]
lea edx, [edi + ecx*4]
mov dword [ebx + 8], edx
jmp 0x41b465
mov edi, ecx
mov eax, 0xe1800e19
sub edi, ebp
imul edi
add edx, edi
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x41b3fb
lea edx, [ebp + 0x2454]
push edx
push ecx
push ebp
mov ecx, ebx
call fcn.0041b990
mov edi, dword [ebx + 8]
lea eax, [esp + 0x8c]
mov ecx, edi
push eax
sub ecx, ebp
mov eax, 0xe1800e19
imul ecx
add edx, ecx
mov eax, 1
sar edx, 0xd
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, ebx
sub eax, edx
push eax
push edi
call fcn.0041b9d0
mov eax, dword [ebx + 8]
cmp ebp, eax
je 0x41b45e
mov edi, ebp
add ebp, 0x2454
mov ecx, 0x915
lea esi, [esp + 0x8c]
cmp ebp, eax
rep movsd dword es:[edi], dword [esi]
jne 0x41b3df
jmp 0x41b45c
lea eax, [ecx - 0x2454]
push ecx
push ecx
push eax
mov ecx, ebx
mov dword [esp + 0x54], eax
call fcn.0041b990
mov edx, dword [ebx + 8]
lea eax, [edx - 0x2454]
cmp ebp, eax
je 0x41b438
sub edx, 0x2454
sub eax, 0x2454
mov ecx, 0x915
mov esi, eax
mov edi, edx
cmp eax, ebp
rep movsd dword es:[edi], dword [esi]
jne 0x41b41c
xor esi, esi
lea eax, [ebp + 0x2454]
cmp ebp, eax
je 0x41b45e
mov edi, ebp
add ebp, 0x2454
mov ecx, 0x915
lea esi, [esp + 0x8c]
cmp ebp, eax
rep movsd dword es:[edi], dword [esi]
jne 0x41b442
xor esi, esi
add dword [ebx + 8], 0x2454
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x68]
mov ebp, dword [sym.imp.MSVCRT.dll__wcsicmp]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
jge 0x41b11d
mov eax, dword [esp + 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, dword [edi]
push edi
call dword [edx + 8]
mov eax, dword [esp + 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edi, dword [esp + 0x60]
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x24]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, dword [ebp]
push ebp
call dword [edx + 8]
mov eax, dword [esp + 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x18]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebx + 0x62a80]
cmp eax, esi
je 0x41b53a
mov ecx, dword [ebx + 0x62a84]
sub ecx, eax
mov eax, 0xe1800e19
imul ecx
add edx, ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x41b53a
mov dword [esp + 0x40], 1
call dword [sym.imp.ole32.dll_CoUninitialize]
add ebx, 0x5d0d0
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24d0
ret