Function at 0x403b9b
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov eax, str.C:AyHZ.dll
push eax
mov ebx, dword [0xe46c24]
test ebx, ebx
je 0x403bcb
push ebx
call fcn.0040c352
add esp, 4
pop eax
mov dword [0xe46c24], eax
mov dword [ebp - 0xc], esp
push 0x64
xor eax, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x403bff
push 0x2b
push 0x40231da
push 6
call fcn.0040c35e
add esp, 0xc
mov dword [ebp - 0xc], esp
push dword [0xe46c24]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x403c2e
push 0x47
push 0x40231da
push 6
call fcn.0040c35e
add esp, 0xc
mov dword [ebp - 0xc], esp
push 0x64
xor eax, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x403c5c
push 0x61
push 0x40231da
push 6
call fcn.0040c35e
add esp, 0xc
push 0x80000005
push 0
push 0x42a63a
push 0x80000004
push 0
mov eax, dword [0xe46c24]
test eax, eax
jne 0x403c7d
mov eax, 0x42a2cc
push eax
push 2
mov ebx, 0x26c
call fcn.0040cbd0
add esp, 0x1c
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [0xe46c24]
test eax, eax
jne 0x403cb1
mov eax, 0x42a2cc
push eax
push 2
mov ebx, 0x260
call fcn.0040dd70
add esp, 0x1c
mov dword [ebp - 0xc], esp
push 0x64
xor eax, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x403cf2
push 0xbf
push 0x40231da
push 6
call fcn.0040c35e
add esp, 0xc
mov dword [ebp - 0xc], esp
push 1
mov ebx, dword [ebp + 8]
push dword [ebx]
xor eax, eax
call dword [0xe46cc8]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x403d25
push 0xf4
push 0x40231da
push 6
call fcn.0040c35e
add esp, 0xc
mov dword [0xe46c28], eax
mov dword [ebp - 0xc], esp
push 0x64
xor eax, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x403d58
push 0x118
push 0x40231da
push 6
call fcn.0040c35e
add esp, 0xc
cmp dword [ebp + 0x18], 0
jne 0x403d80
mov eax, 0x838642
push eax
mov ebx, dword [ebp + 0x14]
mov ebx, dword [ebx]
test ebx, ebx
je 0x403d7a
push ebx
call fcn.0040c352
add esp, 4
pop eax
mov ebx, dword [ebp + 0x14]
mov dword [ebx], eax
cmp dword [ebp + 0x10], 0
jne 0x403d91
mov dword [ebp + 0xc], 0xd
push 0
mov ebx, 0x2d4
call fcn.0040dd90
add esp, 4
mov dword [ebp - 4], eax
push 0
mov ebx, 0x2d8
call fcn.0040dda0
add esp, 4
mov dword [ebp - 8], eax
fild dword [ebp - 4]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fdiv qword [0x838647]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
call fcn.004010cf
mov dword [0xe46c2c], eax
fild dword [ebp - 8]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fdiv qword [0x838647]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
call fcn.004010cf
mov dword [0xe46c30], eax
fild dword [0xe46c2c]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fmul qword [0x42a574]
fstp qword [ebp - 0x18]
fild dword [ebp - 4]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fsub qword [ebp - 0x18]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004010cf
mov dword [0xe46c34], eax
fild dword [0xe46c30]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fmul qword [0x42a574]
fstp qword [ebp - 0x18]
fild dword [ebp - 8]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fsub qword [ebp - 0x18]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.004010cf
mov dword [0xe46c38], eax
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx]
test eax, eax
je 0x403e79
push eax
mov ebx, eax
call fcn.00401000
inc eax
push eax
call fcn.0040c34c
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0xe46c3c]
test ebx, ebx
je 0x403e8d
push ebx
call fcn.0040c352
add esp, 4
pop eax
mov dword [0xe46c3c], eax
mov eax, dword [ebp + 0xc]
mov dword [0xe46c40], eax
mov dword [ebp - 0xc], esp
push dword [0xe46c28]
xor eax, eax
call dword [sym.imp.USER32.dll_GetDC]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x403eca
push 0x3b6
push 0x40231da
push 6
call fcn.0040c35e
add esp, 0xc
mov dword [0xe46c44], eax
push 0x80000006
push 0
push 0x403fdb
push 1
mov ebx, 0x9dc
call fcn.0040ddb0
add esp, 0x10
mov dword [0xe46c48], eax
push 0x80000006
push 0
push 0x4040b6
push 1
mov ebx, 0x9dc
call fcn.0040ddb0
add esp, 0x10
mov dword [0xe46c4c], eax
mov eax, dword [0xe46c28]
jmp 0x403f1f
mov esp, ebp
pop ebp
ret 0x14