Function at 0x40c6c5
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, ecx
test byte [ebx + 0x18], 8
je 0x40c6e1
test byte [ebx + 0x982c], 1
jne 0x40c8e3
mov eax, dword [ebp + 8]
cmp eax, dword [ebx + 0x644]
jae 0x40c8e3
mov eax, dword [ebx + 0x9a3c]
push esi
push edi
push 0x5c
lea esi, [ebx + 0x9830]
lea edi, [ebx + 0xaecc]
mov ecx, eax
pop edx
rep movsw word es:[edi], word [esi]
cmp word [ebx + eax*2 + 0xaeca], dx
je 0x40c71f
mov word [ebx + eax*2 + 0xaecc], dx
inc eax
mov ecx, dword [0x4177b8]
lea edi, [ebx + eax*2 + 0xaecc]
mov esi, 0x4175ac
rep movsw word es:[edi], word [esi]
add eax, dword [0x4177b8]
cmp word [ebx + eax*2 + 0xaeca], dx
mov dword [ebp - 4], eax
je 0x40c753
mov word [ebx + eax*2 + 0xaecc], dx
inc eax
mov dword [ebp - 4], eax
mov ecx, dword [ebx + 4]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, dword [ebx + 4]
mov esi, eax
mov eax, dword [ecx]
call dword [eax + 0x2c]
lea ecx, [eax + eax + 2]
mov eax, dword [ebp - 4]
lea edi, [ebx + eax*2 + 0xaecc]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 4]
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov edi, dword [ebp - 4]
add edi, eax
cmp word [ebx + edi*2 + 0xaeca], 0x5c
mov dword [ebp - 4], edi
je 0x40c7aa
mov word [ebx + edi*2 + 0xaecc], 0x5c
inc edi
mov dword [ebp - 4], edi
mov eax, dword [ebp + 8]
imul eax, eax, 0x20a
lea esi, [eax + ebx + 0x648]
push esi
mov dword [ebp - 0xc], esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [eax + eax + 2]
mov dword [ebp - 8], eax
mov eax, ecx
shr ecx, 2
lea edi, [ebx + edi*2 + 0xaecc]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx + 0xaecc]
push edi
call dword [ebx + 0xa694]
test byte [ebx + 0x18], 0x20
jne 0x40c7fb
xor esi, esi
inc esi
mov dword [ebp + 8], esi
jmp 0x40c808
xor ecx, ecx
test eax, eax
setne cl
xor esi, esi
inc esi
mov dword [ebp + 8], ecx
push edi
lea eax, [ebx + 0xb0d6]
push 0x4045c8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp + 8], 0
je 0x40c835
cmp dword [ebp + 0x10], 0
je 0x40c835
push esi
push edi
push dword [ebp + 0xc]
call dword [ebp + 0x10]
mov dword [ebp + 8], esi
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
add ecx, eax
lea esi, [ebx + ecx*2 + 0xaeca]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov word [esi], 0x5f
call edi
lea eax, [ebx + 0xaecc]
push eax
mov word [esi], 0x58
call edi
mov eax, dword [ebx + 0x9a3c]
mov ecx, eax
lea esi, [ebx + 0x9830]
lea edi, [ebx + 0xaecc]
rep movsw word es:[edi], word [esi]
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0xc]
lea ecx, [ecx + ecx + 2]
lea edi, [ebx + eax*2 + 0xaecc]
mov dword [ebp - 4], eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea esi, [ebx + 0xaecc]
push esi
call dword [ebx + 0xa694]
cmp dword [ebp + 0x10], 0
je 0x40c8bc
xor eax, eax
cmp dword [ebp + 8], eax
sete al
push eax
push esi
push dword [ebp + 0xc]
call dword [ebp + 0x10]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add eax, ecx
lea ebx, [ebx + eax*2 + 0xaeca]
push esi
mov word [ebx], 0x5f
call edi
push esi
mov word [ebx], 0x58
call edi
pop edi
pop esi
xor eax, eax
inc eax
pop ebx
leave
ret 0xc