Function at 0x41aece
Capabilities:
Delete file
Link many functions at runtime

Disassembly:
sub esp, 0x124
mov al, byte [0x48250c]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x20], ecx
test al, 0x10
mov ebp, 0x482ab8
mov edi, 0x482668
je 0x41af5e
test al, 0x20
je 0x41af5e
push 0x4c
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41af5e
push 0x4c
mov ecx, edi
call fcn.0041f63e
push eax
push 0x48
mov ecx, edi
call fcn.0041f63e
push eax
mov ecx, ebp
call fcn.0041fa6a
mov esi, 0x482924
push eax
mov ecx, esi
call fcn.0041f806
test eax, eax
jge 0x41af33
push 0xfffffffffffffff6
jmp 0x41bb0a
mov ecx, esi
call fcn.0041f00c
test al, al
jne 0x41af5e
push 0
mov ecx, 0x482f84
call fcn.0041fa6a
push eax
push 0
mov ecx, 0x482320
call fcn.0041df67
push 0xfffffffffffffff5
jmp 0x41bb0a
cmp byte [0x483654], 0
jne 0x41b35e
push 0x10
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b0eb
push 0x14
mov ecx, edi
call fcn.0041f63e
push 0x10
mov ecx, edi
mov esi, eax
call fcn.0041f63e
test eax, eax
jle 0x41b0eb
mov dword [esp + 0x10], eax
push 0x18
call fcn.00428529
mov ebx, eax
pop ecx
test ebx, ebx
je 0x41afb3
mov ecx, ebx
call fcn.0041eab0
jmp 0x41afb5
xor ebx, ebx
test ebx, ebx
jne 0x41afca
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
and byte [ebx + 0x11], 0
lea ecx, [esp + 0x14]
call fcn.0041eab0
push 4
push esi
mov ecx, ebp
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
call fcn.0041f63e
push eax
lea eax, [esi + 4]
push eax
mov ecx, ebp
call fcn.0041fa6a
push eax
mov ecx, ebx
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
call fcn.0041f63e
lea esi, [esi + eax + 4]
push 4
push esi
mov ecx, ebp
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
call fcn.0041f63e
add esi, 4
push 4
push esi
mov ecx, ebp
mov dword [ebx + 0xc], eax
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
call fcn.0041f63e
test eax, eax
setne al
add esi, 4
push 4
push esi
mov ecx, ebp
mov byte [ebx + 0x10], al
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
call fcn.0041f63e
add esi, 4
push eax
push esi
mov ecx, ebp
mov dword [esp + 0x2c], eax
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
add esi, dword [esp + 0x24]
and dword [esp + 0x28], 0
lea eax, [esp + 0x28]
lea ecx, [esp + 0x14]
push eax
call fcn.0041fa6a
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [ebx + 0x14]
push eax
mov ecx, dword [esp + 0x30]
call fcn.00419074
push 0xffffffffffffffff
push ebx
mov ecx, 0x4828b4
call fcn.00421b7c
lea ecx, [esp + 0x14]
call fcn.0041ebe6
dec dword [esp + 0x10]
jne 0x41af9c
cmp byte [0x483654], 0
jne 0x41b35e
push 0x18
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b18a
push 0x1c
mov ecx, edi
call fcn.0041f63e
push 0x18
mov ecx, edi
mov esi, eax
call fcn.0041f63e
test eax, eax
jle 0x41b18a
mov ebx, eax
lea ecx, [esp + 0x14]
call fcn.0041eab0
push 4
push esi
mov ecx, ebp
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
add esi, 4
call fcn.0041f63e
mov ecx, eax
mov edx, eax
and ecx, 0xff0000
push 0xffffffffffffffff
shr edx, 0x10
or ecx, edx
mov edx, eax
shl edx, 0x10
and eax, 0xff00
or edx, eax
shr ecx, 8
shl edx, 8
or ecx, edx
push ecx
mov ecx, 0x4828dc
call fcn.00421b7c
lea ecx, [esp + 0x14]
call fcn.0041ebe6
dec ebx
jne 0x41b123
cmp byte [0x483654], 0
jne 0x41b35e
push 0x20
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b324
push 0x24
mov ecx, edi
call fcn.0041f63e
push 0x20
mov ecx, edi
mov esi, eax
call fcn.0041f63e
and dword [esp + 0x10], 0
mov dword [esp + 0x2c], eax
test eax, eax
jle 0x41b324
push 0x10
call fcn.00428529
mov ebx, eax
pop ecx
test ebx, ebx
je 0x41b1e9
lea ecx, [ebx + 4]
call fcn.0041eab0
mov dword [esp + 0x24], ebx
jmp 0x41b1ee
and dword [esp + 0x24], 0
lea ecx, [esp + 0x14]
call fcn.0041eab0
push 4
mov ecx, ebp
pop ebx
push ebx
push esi
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
add esi, ebx
call fcn.0041f63e
mov ecx, dword [esp + 0x24]
push ebx
push esi
mov dword [ecx], eax
mov ecx, ebp
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0x104
add esi, ebx
call fcn.00428529
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x41b257
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push str..bmp
push ebx
call fcn.00420a59
mov eax, dword [esp + 0x2c]
pop ecx
pop ecx
lea ecx, [eax + 4]
push ebx
call fcn.0041ec53
push ebx
call fcn.0042851e
pop ecx
push 0
lea ecx, [esp + 0x18]
call fcn.0041f63e
push 1
mov ebx, eax
pop eax
mov dword [esp + 0x28], ebx
mov dword [0x4835f4], eax
mov dword [0x482608], eax
mov eax, dword [0x483668]
test eax, eax
je 0x41b2a6
push eax
call fcn.0042851e
pop ecx
push 4
call fcn.00428529
test eax, eax
pop ecx
mov dword [0x483668], eax
jne 0x41b2cd
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
mov eax, dword [0x483668]
pop ecx
push dword [esp + 0x28]
add ebx, esi
mov dword [eax], ebx
mov eax, dword [esp + 0x28]
push esi
lea ecx, [eax + 4]
call fcn.0041fa6a
push eax
mov ecx, ebp
call fcn.0041fa6a
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
jne 0x41b34e
push 0xffffffffffffffff
mov ecx, 0x4828c8
push dword [esp + 0x28]
mov esi, ebx
call fcn.00421b7c
lea ecx, [esp + 0x14]
call fcn.0041ebe6
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x2c]
jl 0x41b1cd
cmp byte [0x483654], 0
jne 0x41b35e
push 0x28
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b35e
mov ecx, dword [esp + 0x20]
call fcn.0041c6fc
test al, al
jne 0x41b35e
push 0xffffffffffffffd3
jmp 0x41bb0a
lea ecx, [esp + 0x14]
call fcn.0041ebe6
push 0xffffffffffffffd6
jmp 0x41bb0a
push 0x5c
mov ecx, edi
call fcn.0041f63e
test eax, eax
mov ebx, 0x482c68
je 0x41b3cd
push 0x104
call fcn.00428529
mov esi, eax
pop ecx
test esi, esi
jne 0x41b392
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push 0x60
push esi
mov ecx, ebx
call fcn.00413b22
test al, al
jne 0x41b3a8
or edi, 0xffffffff
jmp 0x41b42b
push esi
mov ecx, 0x4822ec
call fcn.0041ec53
push esi
mov ecx, 0x482ad8
call fcn.004219ab
test al, al
jne 0x41b3c6
push 0xfffffffffffffffe
jmp 0x41b42a
push esi
call fcn.0042851e
pop ecx
push 0x50
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b440
push 0x104
call fcn.00428529
mov esi, eax
pop ecx
test esi, esi
jne 0x41b3fc
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push 0x54
push esi
mov ecx, ebx
call fcn.00413b22
test al, al
jne 0x41b40e
push 0xfffffffffffffffd
jmp 0x41b42a
push esi
mov ecx, 0x4822e0
call fcn.0041ec53
push esi
mov ecx, 0x482648
call fcn.0041ea40
test al, al
jne 0x41b439
push 0xfffffffffffffffc
pop edi
push esi
call fcn.0042851e
pop ecx
mov eax, edi
jmp 0x41bb0b
push esi
call fcn.0042851e
pop ecx
cmp byte [0x483654], 0
jne 0x41b694
push 0x80
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b5ff
mov esi, 0x88
mov ecx, edi
push esi
call fcn.0041f63e
push eax
mov ecx, 0x4835e0
call fcn.00411687
cmp eax, 2
jne 0x41b542
push 0x104
call fcn.00428529
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x41b4a4
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push str..jpg
push ebx
call fcn.00420a59
pop ecx
pop ecx
push 0
push 0x8c
mov ecx, edi
call fcn.0041f63e
push eax
push esi
mov ecx, edi
call fcn.0041f63e
push eax
push ebx
mov ecx, 0x482c68
call fcn.0041222f
test al, al
jne 0x41b4e6
push ebx
call fcn.0042851e
pop ecx
push 0xfffffffffffffffb
jmp 0x41bb0a
push 0x104
call fcn.00428529
mov esi, eax
pop ecx
test esi, esi
jne 0x41b508
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push str..bmp
push esi
call fcn.00420a59
pop ecx
pop ecx
push esi
push ebx
call dword [0x482650]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
mov ecx, 0x482304
call fcn.0041ec53
push ebx
call fcn.0042851e
push esi
call fcn.0042851e
pop ecx
pop ecx
jmp 0x41b5fa
push 0x84
mov ecx, edi
call fcn.0041f63e
cmp eax, 1
jne 0x41b5ff
lea eax, [esp + 0x30]
push str..bmp
push eax
call fcn.00420a59
pop ecx
pop ecx
push esi
mov ecx, edi
call fcn.0041f63e
push 0x8c
mov ecx, edi
mov esi, eax
call fcn.0041f63e
push 1
mov ebx, eax
pop eax
mov dword [0x4835f4], eax
mov dword [0x482608], eax
mov eax, dword [0x483668]
test eax, eax
je 0x41b59d
push eax
call fcn.0042851e
pop ecx
push 4
call fcn.00428529
test eax, eax
pop ecx
mov dword [0x483668], eax
jne 0x41b5c4
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
mov eax, dword [0x483668]
pop ecx
lea ecx, [ebx + esi]
push ebx
mov dword [eax], ecx
lea eax, [esp + 0x34]
push esi
push eax
mov ecx, ebp
call fcn.0041fa6a
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
je 0x41b5eb
push 0xffffffffffffffd1
jmp 0x41bb0a
lea eax, [esp + 0x30]
mov ecx, 0x482304
push eax
call fcn.0041ec53
mov ebx, 0x482c68
cmp byte [0x483654], 0
jne 0x41b694
push 0x74
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b694
push 0x104
call fcn.00428529
mov esi, eax
pop ecx
test esi, esi
jne 0x41b63b
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push str..mp3
push esi
call fcn.00420a59
pop ecx
pop ecx
push 0
push 0x7c
mov ecx, edi
call fcn.0041f63e
push eax
push 0x78
mov ecx, edi
call fcn.0041f63e
push eax
push esi
mov ecx, ebx
call fcn.0041222f
test al, al
push esi
jne 0x41b678
call fcn.0042851e
pop ecx
push 0xfffffffffffffffa
jmp 0x41bb0a
mov ecx, 0x482b20
call fcn.0041ec53
push esi
mov ecx, 0x482310
call fcn.0041ec53
push esi
call fcn.0042851e
pop ecx
push 0x68
mov ecx, edi
call fcn.0041f63e
test eax, eax
je 0x41b87d
push 0x104
call fcn.00428529
mov esi, eax
pop ecx
test esi, esi
jne 0x41b6c7
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push 0x6c
push esi
mov ecx, ebx
call fcn.00413b22
test al, al
push esi
jne 0x41b6e3
call fcn.0042851e
pop ecx
push 0xfffffffffffffff9
jmp 0x41bb0a
mov ecx, 0x4822f8
call fcn.0041ec53
push esi
mov ecx, 0x483648
call fcn.0041ec53
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
mov dword [0x483644], eax
call fcn.0042851e
mov eax, dword [0x483644]
pop ecx
test eax, eax
jne 0x41b71b
push 0xfffffffffffffff8
jmp 0x41bb0a
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.AdvancedEntry
push eax
call esi
push str.EntryPoint0
mov dword [0x4835f8], eax
push dword [0x483644]
call esi
push str.EntryPoint1
mov dword [0x4835fc], eax
push dword [0x483644]
call esi
push str.EntryPoint1_5
mov dword [0x483604], eax
push dword [0x483644]
call esi
push str.EntryPoint2
mov dword [0x483600], eax
push dword [0x483644]
call esi
push str.EntryPoint3
mov dword [0x483608], eax
push dword [0x483644]
call esi
push str.EntryPoint4
mov dword [0x48360c], eax
push dword [0x483644]
call esi
push str.EntryPoint5
mov dword [0x483610], eax
push dword [0x483644]
call esi
push str.EntryPoint6
mov dword [0x483614], eax
push dword [0x483644]
call esi
push str.EntryPoint7
mov dword [0x483618], eax
push dword [0x483644]
call esi
push str.EntryPoint8
mov dword [0x48361c], eax
push dword [0x483644]
call esi
push str.EntryPoint9
mov dword [0x483620], eax
push dword [0x483644]
call esi
push str.EntryPoint10
mov dword [0x483624], eax
push dword [0x483644]
call esi
push str.EntryPoint11
mov dword [0x483628], eax
push dword [0x483644]
call esi
push str.EntryPoint12
mov dword [0x48362c], eax
push dword [0x483644]
call esi
push str.EntryPoint13
mov dword [0x483630], eax
push dword [0x483644]
call esi
push str.EntryPointCustom
mov dword [0x483634], eax
push dword [0x483644]
call esi
push str.SystemInformation
mov dword [0x483638], eax
push dword [0x483644]
call esi
push str.OnMessage
mov dword [0x48363c], eax
push dword [0x483644]
call esi
test eax, eax
mov dword [0x483640], eax
je 0x41b87d
or byte [0x482507], 0x80
push 0x90
mov ecx, edi
call fcn.0041f63e
cmp byte [0x483654], 0
mov esi, eax
jne 0x41b9ff
test esi, esi
jle 0x41b992
lea eax, [esi + esi*2]
lea eax, [eax*4 + 4]
push eax
call fcn.00428529
test eax, eax
pop ecx
je 0x41b8e0
mov dword [eax], esi
lea ebx, [eax + 4]
lea eax, [esi - 1]
mov dword [esp + 0x10], ebx
test eax, eax
jl 0x41b8e2
inc eax
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x10]
call fcn.0041eab0
add dword [esp + 0x10], 0xc
dec dword [esp + 0x20]
jne 0x41b8ca
jmp 0x41b8e2
xor ebx, ebx
test ebx, ebx
mov dword [0x482b48], ebx
jne 0x41b8fd
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push 0x94
mov ecx, edi
mov dword [0x482b4c], esi
call fcn.0041f63e
test esi, esi
mov ebx, eax
jle 0x41b989
and dword [esp + 0x10], 0
mov dword [esp + 0x20], esi
lea ecx, [esp + 0x14]
call fcn.0041eab0
push 4
push ebx
mov ecx, ebp
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
push 0
lea ecx, [esp + 0x18]
call fcn.0041f63e
mov esi, eax
add ebx, 4
push esi
push ebx
mov ecx, ebp
call fcn.0041fa6a
push eax
lea ecx, [esp + 0x20]
call fcn.0041f806
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
mov eax, dword [0x482b48]
add ecx, eax
add ebx, esi
call fcn.0041ecc1
lea ecx, [esp + 0x14]
call fcn.0041ebe6
add dword [esp + 0x10], 0xc
dec dword [esp + 0x20]
jne 0x41b91e
cmp byte [0x483654], 0
jne 0x41b9ff
push 0xa0
mov ecx, edi
call fcn.0041f63e
push eax
mov ecx, 0x482320
mov dword [0x4829b8], eax
call fcn.00417b93
test al, al
jne 0x41b9b9
push 0xfffffffffffffff0
jmp 0x41bb0a
mov esi, 0x482ac8
push 0x432428
mov ecx, esi
call fcn.0041ec53
test byte [0x482504], 0x40
mov ecx, 0x4826d4
je 0x41b9e5
call fcn.0041fa6a
push eax
mov ecx, 0x482ce4
jmp 0x41b9f0
call fcn.0041fa6a
push eax
mov ecx, 0x482cd8
call fcn.0041fa6a
push eax
push esi
call fcn.0041f193
add esp, 0xc
mov ebx, 0xa8
mov ecx, edi
push ebx
call fcn.0041f63e
test eax, eax
je 0x41bb08
test byte [0x48250a], 2
jne 0x41bb08
push 0x104
call fcn.00428529
mov esi, eax
pop ecx
test esi, esi
jne 0x41ba43
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push str..EXE
push esi
call fcn.00420a59
pop ecx
pop ecx
push esi
mov ecx, 0x482b70
call fcn.0041ec53
push 1
pop eax
mov dword [0x4835f4], eax
mov dword [0x482608], eax
mov eax, dword [0x483668]
test eax, eax
je 0x41ba78
push eax
call fcn.0042851e
pop ecx
push 4
call fcn.00428529
test eax, eax
pop ecx
mov dword [0x483668], eax
jne 0x41ba9a
mov ecx, 0x482cfc
call fcn.0041fa6a
push eax
call fcn.00420722
pop ecx
push 0xac
mov ecx, edi
call fcn.0041f63e
mov edx, eax
push ebx
mov ecx, edi
mov dword [esp + 0x30], edx
call fcn.0041f63e
mov ecx, dword [esp + 0x2c]
push 0xa8
add ecx, eax
mov eax, dword [0x483668]
mov dword [eax], ecx
mov ecx, edi
call fcn.0041f63e
push eax
push 0xac
mov ecx, edi
call fcn.0041f63e
push eax
push esi
mov ecx, ebp
call fcn.0041fa6a
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
push esi
je 0x41bb02
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
call fcn.0042851e
pop ecx
push 0xfffffffffffffff1
jmp 0x41bb0a
call fcn.0042851e
pop ecx
push 1
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x124
ret