Function at 0x417b50
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1410
call fcn.00424090
push 0x434d1c
push 0x434d2c
call fcn.00421fe0
add esp, 8
cmp dword [ebp + 0x10], 0
je 0x417b92
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
jmp 0x418269
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov dword [ebp - 0x1410], eax
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx]
test eax, eax
je 0x417bba
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx]
test edx, edx
jne 0x417bbf
jmp 0x418269
push 0x434d38
mov eax, dword [ebp + 0xc]
push eax
call fcn.004257b5
add esp, 8
mov dword [ebp - 0x1408], eax
cmp dword [ebp - 0x1408], 0
jne 0x417be4
jmp 0x418269
push 0x434d3c
mov ecx, dword [ebp + 8]
push ecx
call fcn.004257b5
add esp, 8
mov dword [ebp - 0x1404], eax
cmp dword [ebp - 0x1404], 0
jne 0x417c09
jmp 0x418269
mov dword [ebp - 0x140c], 0
mov byte [ebp - 0x400], 0
mov edx, dword [ebp - 0x1408]
mov eax, dword [edx + 0xc]
and eax, 0x10
jne 0x41824b
cmp dword [ebp - 0x140c], 0
jne 0x41824b
mov ecx, dword [ebp - 0x1408]
push ecx
push 0x1000
lea edx, [ebp - 0x1400]
push edx
call fcn.00425905
add esp, 0xc
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x140c], eax
je 0x417c66
jmp 0x41824b
push 7
push str._DL__p_
lea eax, [ebp - 0x1400]
push eax
call fcn.00430257
add esp, 0xc
test eax, eax
jne 0x418230
mov ecx, dword [ebp - 0x1404]
push ecx
lea edx, [ebp - 0x1400]
push edx
call fcn.00425e8e
add esp, 8
cmp dword [0x46e314], 0
je 0x417f09
mov eax, dword [ebp - 0x1404]
push eax
push str._Casino_Online
call fcn.00414e60
add esp, 8
push 0x434d48
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Bingo
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434d58
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push 0x456128
call fcn.00414e60
add esp, 8
push 0x434d64
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417af0
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
push str.Computer_game
call fcn.00414e60
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417b30
add esp, 4
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434d6c
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Internet_Business
call fcn.00414e60
add esp, 8
push 0x434d78
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417af0
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
push str.Education
call fcn.00414e60
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417b30
add esp, 4
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434d84
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Corporate_Gift
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434d94
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Travel_Agent
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434d9c
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
push str.Fun_Stuff
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417af0
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
push 0x4576a8
call fcn.00414e60
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417b30
add esp, 4
push 0x434db4
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417af0
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
push str.Home_Equity_Loan
call fcn.00414e60
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417b30
add esp, 4
push 0x434dbc
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417af0
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
push str.Buy_Adipex
call fcn.00414e60
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417b30
add esp, 4
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417b30
add esp, 4
jmp 0x41822e
mov eax, dword [ebp - 0x1404]
push eax
push 0x454428
call fcn.00414e60
add esp, 8
cmp dword [0x46e310], 0
jne 0x417fd1
push str.Adult_Items
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Penis_EnlargementPenis_Enlargement_Pill
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push str.Adult_Entertainment
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Sex_Movies
call fcn.00414e60
add esp, 8
push 0x434dec
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417af0
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
push str.Christian_dating
call fcn.00414e60
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417b30
add esp, 4
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
jmp 0x418008
push 0x434df4
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Christian_dating
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434dfc
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Bingo
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push str.Computers
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push 0x456128
call fcn.00414e60
add esp, 8
push str.Games
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417af0
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
push str.Computer_game
call fcn.00414e60
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417b30
add esp, 4
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434e20
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Internet_Business
call fcn.00414e60
add esp, 8
push 0x434e2c
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417af0
add esp, 8
mov ecx, dword [ebp - 0x1404]
push ecx
push str.Education
call fcn.00414e60
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
call fcn.00417b30
add esp, 4
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push str.Cool_Stuff
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push 0x4576a8
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push 0x434e44
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Buy_Adipex
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push str.Shopping_Gifts
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Corporate_Gift
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push str.Home
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Home_Equity_Loan
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
push str.Travel
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.00417af0
add esp, 8
mov edx, dword [ebp - 0x1404]
push edx
push str.Travel_Agent
call fcn.00414e60
add esp, 8
mov eax, dword [ebp - 0x1404]
push eax
call fcn.00417b30
add esp, 4
jmp 0x418246
mov ecx, dword [ebp - 0x1404]
push ecx
lea edx, [ebp - 0x1400]
push edx
call fcn.00425e8e
add esp, 8
jmp 0x417c1a
mov eax, dword [ebp - 0x1408]
push eax
call fcn.004256aa
add esp, 4
mov ecx, dword [ebp - 0x1404]
push ecx
call fcn.004256aa
add esp, 4
mov esp, ebp
pop ebp
ret