Function at 0x40e6d0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49040b
mov eax, dword fs:[0]
push eax
mov eax, 0x1164
call fcn.00474750
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x1170]
mov ecx, 0x459
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x4abc14]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
call fcn.0040e600
mov ecx, eax
call fcn.00403a00
mov dword [ebp - 0x102c], eax
lea ecx, [ebp - 0x1050]
call fcn.00403540
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1050]
push eax
push 0x6a
call fcn.00405780
add esp, 8
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax + 0x1ac]
test ecx, ecx
je 0x40e77b
mov edx, dword [ebp - 0x18]
movzx eax, byte [edx + 0x1a1]
test eax, eax
je 0x40e77b
mov ecx, dword [ebp - 0x18]
add ecx, 0x1ac
mov dword [ebp - 0x1170], ecx
jmp 0x40e787
mov edx, dword [ebp - 0x102c]
mov dword [ebp - 0x1170], edx
call fcn.004691b0
push eax
mov eax, dword [ebp - 0x102c]
push eax
mov ecx, dword [ebp - 0x102c]
push ecx
mov edx, dword [ebp - 0x102c]
push edx
lea ecx, [ebp - 0x1050]
call fcn.00403a00
push eax
mov eax, dword [ebp - 0x1170]
push eax
push 0x6ca0
push 0x7795
push str.0foSzZN23qciid0M0fovit91nfEri5hmku5HwsVkmeBkycJohKcnhNkM0fprlJwrkfEr7g
push 0x7dbe
push 0x706b
call fcn.004566b0
add esp, 0x14
push eax
lea ecx, [ebp - 0x1020]
push ecx
call fcn.0041e520
add esp, 0x20
mov dword [ebp - 0x105c], eax
lea eax, [ebp - 0x1020]
push eax
push 0x5355
push 0x2cba
push str.sOw9k8RqjcAtiNg_1Kwd7Q
push 0x31a5
push 0x39f9
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 0x1068], 0
jmp 0x40e838
mov eax, dword [ebp - 0x1068]
add eax, 1
mov dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x1068]
cmp eax, dword [ebp - 0x105c]
jg 0x40e86b
mov eax, dword [ebp - 0x1068]
movzx ecx, word [ebp + eax*2 - 0x1020]
cmp ecx, 9
jne 0x40e869
xor eax, eax
mov ecx, dword [ebp - 0x1068]
mov word [ebp + ecx*2 - 0x1020], ax
jmp 0x40e829
mov ecx, dword [ebp - 0x18]
add ecx, 0x88
call fcn.00403a00
mov esi, esp
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, esp
call fcn.004744d2
test eax, eax
je 0x40e8c8
mov ecx, dword [ebp - 0x18]
add ecx, 0x88
call fcn.00403a00
push eax
push 0x4b6b
push 0x6931
push str.sOw9k8RqjcAtiNg_1M8ni9Ml06wdwJZhkeUrk9Nh_g
push 0x53ac
push 0x380f
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 8
jmp 0x40e911
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.004744d2
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x88
call fcn.00403a00
push eax
push 0x6dd2
push 0x21c4
push str.sOw9k8RqjcAtiNg_1M8vjtolgOZug9Npkf0rx9BsmOxuwJNW06ktiNJg1Kwq7Q
push 0x4cf6
push 0x5fed
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 0xc
push 0x463f
push 0x7fc8
push str.p8EIjtpgu_krlddxneYgsA
push 0x53e1
push 0xaef
call fcn.004565f0
add esp, 0x14
push eax
call fcn.004662b0
add esp, 4
mov dword [ebp - 0x1074], eax
push 0x1e
push 0
lea eax, [ebp - 0x109c]
push eax
call fcn.004746d0
add esp, 0xc
mov dword [ebp - 0x1098], 3
lea eax, [ebp - 0x1020]
mov dword [ebp - 0x1094], eax
mov eax, 0x1494
mov word [ebp - 0x108c], ax
mov esi, esp
lea eax, [ebp - 0x109c]
push eax
call dword [ebp - 0x1074]
cmp esi, esp
call fcn.004744d2
mov dword [ebp - 0x10a8], eax
mov eax, dword [ebp - 0x10a8]
push eax
push 0x194f
push 0x2f47
push str.sOw9k8RqjcAtiNg_1NoGod9pkcYgsRkgOAhieElhupzwtIP
push 0x49f2
push 0x6ed0
call fcn.004565f0
add esp, 0x14
push eax
call fcn.00454e30
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1050]
call fcn.00403970
push edx
mov ecx, ebp
push eax
lea edx, [0x40ea10]
call fcn.004744f5
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004744c3
add esp, 0x1170
cmp ebp, esp
call fcn.004744d2
mov esp, ebp
pop ebp
ret