Function at 0x40bc37
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x42dfb1
mov eax, dword fs:[0]
push eax
sub esp, 0x3c8
mov eax, dword [0x44201c]
xor eax, esp
mov dword [esp + 0x3c0], eax
push ebx
push esi
push edi
mov eax, dword [0x44201c]
xor eax, esp
push eax
lea eax, [esp + 0x3d8]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
xor ebx, ebx
xor edi, edi
cmp dword [ebp + 8], ebx
mov dword [esp + 0x3c], ebx
jle 0x40bca5
push 0x431460
push dword [esi + edi*4]
call dword [sym.imp.MSVCR80.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
je 0x40bec8
inc edi
cmp edi, dword [ebp + 8]
jl 0x40bc87
push 0x4312f4
lea ecx, [esp + 0x190]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [esp + 0x18c]
push eax
lea eax, [esp + 0x64]
push eax
mov dword [esp + 0x3e8], ebx
call fcn.0042382c
pop ecx
pop ecx
mov ecx, eax
mov byte [esp + 0x3e0], 1
call fcn.0040dfb0
lea ecx, [esp + 0x60]
mov byte [esp + 0x3e0], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
or dword [esp + 0x3e0], 0xffffffff
lea ecx, [esp + 0x18c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
call fcn.0040df1b
mov esi, eax
push 0x206
lea eax, [esp + 0x1ca]
push ebx
push eax
mov dword [0x44e780], esi
mov word [esp + 0x1d0], bx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea eax, [esp + 0x1c8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor edx, edx
mov ecx, 0xf4240
mov eax, esi
div ecx
mov ecx, 0x2710
mov edi, ecx
mov dword [esp + 0x14], eax
mov eax, edx
xor edx, edx
div edi
xor edx, edx
mov edi, eax
mov eax, esi
div ecx
lea ecx, [esp + 0x1c4]
push edx
push edi
push dword [esp + 0x1c]
call fcn.0040a21c
add esp, 0xc
call fcn.0040a7a0
call fcn.00401333
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor esi, esi
inc esi
push esi
push 3
pop edi
push edi
lea ecx, [esp + 0x84]
mov dword [0x45e818], eax
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
mov dword [esp + 0x3e0], 2
push dword [0x45e818]
lea ecx, [eax + 8]
push 0x431498
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int_]
or dword [esp + 0x3e0], 0xffffffff
lea ecx, [esp + 0x7c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x3ec], edi
call fcn.0041b8b9
add esp, 0xc
test al, al
je 0x40c0db
lea eax, [esp + 0x2c]
mov byte [esp + 0x12], 1
mov dword [esp + 0x24], ebx
call fcn.0040c978
test eax, eax
jbe 0x40bf5a
push dword [esp + 0x24]
lea esi, [esp + 0x30]
call fcn.0040c98e
add eax, 0x3c
push eax
lea eax, [esp + 0x190]
push eax
call fcn.0042382c
pop ecx
pop ecx
lea eax, [esp + 0x18c]
mov byte [esp + 0x3e0], 4
call fcn.0042389c
test al, al
je 0x40bed2
push 0x431318
push dword [esp + 0x28]
call fcn.0040c98e
add eax, 0x20
push eax
call dword [sym.imp.MSVCP80.dll_bool___cdecl_std::operator__wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
test al, al
pop ecx
pop ecx
je 0x40bec2
lea ecx, [esp + 0x18c]
lea ebx, [esp + 0x60]
call fcn.00423b02
mov edi, eax
mov byte [esp + 0x3e0], 5
push dword [esp + 0x24]
or dword [esp + 0x40], 1
call fcn.0040c98e
add eax, 0x20
push eax
push edi
call dword [0x42f1d0]
pop ecx
pop ecx
xor ebx, ebx
test al, al
push 3
pop edi
jne 0x40bed2
mov byte [esp + 0x13], bl
jmp 0x40bed7
call fcn.004170ad
jmp 0x40c39e
mov byte [esp + 0x13], 1
mov dword [esp + 0x3e0], 4
test byte [esp + 0x3c], 1
je 0x40bef8
and dword [esp + 0x3c], 0xfffffffe
lea ecx, [esp + 0x60]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp byte [esp + 0x13], bl
je 0x40bf21
cmp dword [esp + 0x1a4], 8
mov eax, dword [esp + 0x190]
jae 0x40bf16
lea eax, [esp + 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [esp + 0x12], bl
lea ecx, [esp + 0x18c]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
inc dword [esp + 0x24]
lea eax, [esp + 0x2c]
call fcn.0040c978
cmp dword [esp + 0x24], eax
jb 0x40be2e
cmp byte [esp + 0x12], bl
je 0x40c076
xor esi, esi
inc esi
cmp dword [esp + 0x1c], esi
jne 0x40bfb9
push esi
push edi
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
push 0x4314a8
lea ecx, [eax + 8]
mov byte [esp + 0x3e4], 6
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
push 0x31
push 0x431474
push 0x4314b4
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, esi
je 0x40c055
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [esp + 0x1c], 2
jne 0x40c014
push esi
push edi
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
push 0x4314dc
lea ecx, [eax + 8]
mov byte [esp + 0x3e4], 7
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
push 0x21
push 0x431474
push 0x4314e8
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, esi
jne 0x40c0db
jmp 0x40c055
cmp dword [esp + 0x1c], edi
jne 0x40c0db
push esi
push edi
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
push 0x43150c
lea ecx, [eax + 8]
mov byte [esp + 0x3e4], 8
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
lea ecx, [esp + 0x40]
call fcn.0040c8de
push dword [esp + 0x24]
call fcn.0040b76b
add esp, 0x14
jmp 0x40c0db
push 0x431278
lea ecx, [esp + 0x190]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [esp + 0x18c]
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x3e8], 9
call fcn.0042382c
cmp dword [eax + 0x18], 8
pop ecx
pop ecx
jb 0x40c0af
mov eax, dword [eax + 4]
jmp 0x40c0b2
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x60]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x18c]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
xor esi, esi
inc esi
call fcn.0040b33d
cmp eax, ebx
mov dword [esp + 0x14], eax
je 0x40c145
push esi
push edi
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
mov byte [esp + 0x3e0], 0xa
push dword [esp + 0x14]
lea ecx, [eax + 8]
push 0x431518
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
or dword [esp + 0x3e0], 0xffffffff
lea esi, [esp + 0x2c]
call fcn.0040cb63
mov eax, dword [esp + 0x14]
jmp 0x40c3a0
push ebx
call fcn.00418449
pop ecx
push esi
call fcn.00418449
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
pop ecx
jmp 0x40c1b5
cmp dword [esp + 0x48], 0x4c8
jne 0x40c19f
mov eax, dword [esp + 0x4c]
cmp eax, edi
je 0x40c1c3
cmp eax, 4
jge 0x40c2bf
lea ecx, [esp + 0x14]
shl eax, 4
push ecx
add eax, 0x45f720
call fcn.004185ad
cmp byte [esp + 0x14], bl
mov eax, dword [eax + 4]
je 0x40c195
mov byte [esp + 0x14], bl
cmp eax, ebx
jne 0x40c2c2
jmp 0x40c1b5
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea eax, [esp + 0x50]
push eax
call esi
test eax, eax
jne 0x40c15b
push 0x43153c
lea ecx, [esp + 0x1ac]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0x3e0], 0xb
mov ecx, dword [0x45e814]
mov eax, dword [ecx]
call dword [eax + 4]
push 4
mov edi, eax
pop eax
sub esp, 0x28
mov dword [esp + 0x44], esp
mov esi, esp
push dword [esp + 0x40]
mov dword [esp + 0x40], edi
push eax
sub esp, 0x1c
lea eax, [esp + 0x1f4]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
call fcn.0040d96a
add esp, 0x24
lea esi, [esp + 0x64]
call fcn.0040ac77
lea esi, [esp + 0x4c]
mov dword [esp + 0x44], eax
call fcn.0040ac5c
mov ecx, dword [esp + 0x44]
push dword [ecx + 4]
lea edi, [esp + 0x48]
push dword [ecx]
push dword [eax + 4]
push dword [eax]
call fcn.0040da1e
mov edi, dword [esp + 0x4c]
add esp, 0x38
lea esi, [esp + 0x14]
call fcn.0040ac77
lea edi, [esp + 0x1c]
mov esi, eax
call fcn.0040ce8c
test al, al
je 0x40c2dc
push 1
push 3
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
push 0x431548
lea ecx, [eax + 8]
mov byte [esp + 0x3e4], 0xc
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3e0], 0xb
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov edi, 0xffe17b7d
jmp 0x40c2c4
or eax, 0xffffffff
mov edi, eax
or dword [esp + 0x3e0], 0xffffffff
lea esi, [esp + 0x2c]
call fcn.0040cb63
mov eax, edi
jmp 0x40c3a0
lea esi, [esp + 0x1c]
call fcn.004078fc
mov eax, dword [eax]
push 0x431560
push dword [eax + 0x58]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
jne 0x40c351
push 1
push 3
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
push 0x43156c
lea ecx, [eax + 8]
mov byte [esp + 0x3e4], 0xd
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3e0], 0xb
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov edi, 0xffe17b7e
jmp 0x40c2c4
push dword [0x45e80c]
call eax
pop ecx
push 1
push 3
lea ecx, [esp + 0x10c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_int_]
lea ecx, [esp + 0x104]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__::vbase_dtor_void_]
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x3e0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
or dword [esp + 0x3e0], 0xffffffff
lea esi, [esp + 0x2c]
call fcn.0040cb63
xor eax, eax
mov ecx, dword [esp + 0x3d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c0]
xor ecx, esp
call fcn.00424d84
mov esp, ebp
pop ebp
ret