Function at 0x41dc50
Capabilities:
Delete file
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55d2d7
mov eax, dword fs:[0]
push eax
sub esp, 0x89c
mov eax, dword [0x5b5be8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea esi, [edi + 0xa0]
mov dword [ebp - 0x8a0], edi
push esi
add edi, 0xd8
lea eax, [ebp - 0x864]
push edi
push eax
call fcn.0041f320
push esi
lea ecx, [ebp - 0x880]
push edi
push ecx
mov dword [ebp - 4], 0
call fcn.0041f320
push eax
mov eax, 0x58c578
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 1
call fcn.0040b2f0
add esp, 0x1c
mov ebx, 0x10
mov byte [ebp - 4], 3
cmp dword [ebp - 0x86c], ebx
jb 0x41dced
mov edx, dword [ebp - 0x880]
push edx
call fcn.004310e1
add esp, 4
push esi
lea eax, [ebp - 0x89c]
push edi
push eax
mov dword [ebp - 0x86c], 0xf
mov dword [ebp - 0x870], 0
mov byte [ebp - 0x880], 0
call fcn.0041f320
push eax
mov eax, str..new
lea ecx, [ebp - 0x82c]
mov byte [ebp - 4], 4
call fcn.0040b2f0
add esp, 0x10
mov byte [ebp - 4], 6
cmp dword [ebp - 0x888], ebx
jb 0x41dd49
mov ecx, dword [ebp - 0x89c]
push ecx
call fcn.004310e1
add esp, 4
mov edx, dword [ebp - 0x8a0]
xor esi, esi
mov edi, 0xf
mov dword [ebp - 0x888], edi
mov dword [ebp - 0x88c], esi
mov byte [ebp - 0x89c], 0
cmp dword [edx + 0x20], esi
ja 0x41dde0
cmp dword [ebp - 0x818], ebx
jb 0x41dd85
mov eax, dword [ebp - 0x82c]
push eax
call fcn.004310e1
add esp, 4
mov dword [ebp - 0x818], edi
mov dword [ebp - 0x81c], esi
mov byte [ebp - 0x82c], 0
cmp dword [ebp - 0x834], ebx
jb 0x41ddaf
mov ecx, dword [ebp - 0x848]
push ecx
call fcn.004310e1
add esp, 4
mov dword [ebp - 0x834], edi
mov dword [ebp - 0x838], esi
mov byte [ebp - 0x848], 0
cmp dword [ebp - 0x850], ebx
jb 0x41ddd9
mov edx, dword [ebp - 0x864]
push edx
call fcn.004310e1
add esp, 4
xor al, al
jmp 0x41e303
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x818], ebx
jae 0x41ddf4
lea eax, [ebp - 0x82c]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x818], ebx
jae 0x41de14
lea eax, [ebp - 0x82c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x818], ebx
jae 0x41de2f
lea eax, [ebp - 0x82c]
push esi
push 0x80
push 2
push esi
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, esi
je 0x41de55
cmp edi, 0xffffffff
jne 0x41df74
push 0x3ff
lea eax, [ebp - 0x40f]
push esi
push eax
mov byte [ebp - 0x410], 0
call fcn.00535390
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push 0x400
lea ecx, [ebp - 0x410]
push ecx
push esi
mov edi, eax
push edi
push esi
push 0x1200
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push 0x3ff
lea edx, [ebp - 0x80f]
push esi
push edx
mov byte [ebp - 0x810], 0
call fcn.00535390
mov eax, dword [ebp - 0x82c]
add esp, 0xc
cmp dword [ebp - 0x818], ebx
jae 0x41dec4
lea eax, [ebp - 0x82c]
push eax
push edi
lea eax, [ebp - 0x410]
push eax
push str._s__d_____s
mov eax, 0x400
lea edx, [ebp - 0x810]
call fcn.00422400
add esp, 0x10
push ebx
push str.Rappelz
lea ecx, [ebp - 0x810]
push ecx
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x818], ebx
jb 0x41df10
mov edx, dword [ebp - 0x82c]
push edx
call fcn.004310e1
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x818], edi
mov dword [ebp - 0x81c], esi
mov byte [ebp - 0x82c], 0
cmp dword [ebp - 0x834], ebx
jb 0x41df3f
mov eax, dword [ebp - 0x848]
push eax
call fcn.004310e1
add esp, 4
mov dword [ebp - 0x834], edi
mov dword [ebp - 0x838], esi
mov byte [ebp - 0x848], 0
cmp dword [ebp - 0x850], ebx
jb 0x41ddd9
mov ecx, dword [ebp - 0x864]
push ecx
call fcn.004310e1
add esp, 4
xor al, al
jmp 0x41e303
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x8a4], esi
add eax, 8
mov dword [ebp - 0x8a8], esi
lea esi, [ebp - 0x8a4]
mov dword [ebp - 0x8a0], eax
call fcn.0041e520
test al, al
je 0x41dfd2
mov edi, edi
mov eax, dword [ebp - 0x8a4]
lea edx, [ebp - 0x8a8]
push edx
push edi
push eax
call fcn.0041b210
test al, al
je 0x41e19b
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x8a4]
push ecx
call fcn.0041e570
test al, al
jne 0x41dfa0
push edi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x848]
cmp dword [ebp - 0x834], ebx
jae 0x41dff4
lea eax, [ebp - 0x848]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp - 0x848]
cmp dword [ebp - 0x834], ebx
jae 0x41e014
lea eax, [ebp - 0x848]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x848]
cmp dword [ebp - 0x834], ebx
jae 0x41e02f
lea ecx, [ebp - 0x848]
mov eax, dword [ebp - 0x864]
cmp dword [ebp - 0x850], ebx
jae 0x41e043
lea eax, [ebp - 0x864]
mov edi, dword [sym.imp.KERNEL32.dll_MoveFileA]
push ecx
push eax
call edi
mov ecx, dword [ebp - 0x864]
cmp dword [ebp - 0x850], ebx
jae 0x41e061
lea ecx, [ebp - 0x864]
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x818], ebx
jae 0x41e075
lea eax, [ebp - 0x82c]
push ecx
push eax
call edi
cmp eax, 1
je 0x41e2e0
push 0x3ff
lea ecx, [ebp - 0x80f]
push 0
push ecx
mov byte [ebp - 0x810], 0
call fcn.00535390
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0x400
lea edx, [ebp - 0x810]
push edx
push 0
mov esi, eax
push esi
push 0
push 0x1200
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push 0x3ff
lea eax, [ebp - 0x40f]
push 0
push eax
mov byte [ebp - 0x410], 0
call fcn.00535390
mov eax, dword [ebp - 0x82c]
add esp, 0xc
cmp dword [ebp - 0x818], ebx
jae 0x41e0f6
lea eax, [ebp - 0x82c]
push eax
push esi
lea ecx, [ebp - 0x810]
push ecx
push str._s__d_____s
mov eax, 0x400
lea edx, [ebp - 0x410]
call fcn.00422400
add esp, 0x10
push ebx
push str.Rappelz
lea edx, [ebp - 0x410]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x864]
cmp dword [ebp - 0x850], ebx
jae 0x41e140
lea ecx, [ebp - 0x864]
mov eax, dword [ebp - 0x848]
cmp dword [ebp - 0x834], ebx
jae 0x41e154
lea eax, [ebp - 0x848]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x818], ebx
jae 0x41e16c
lea eax, [ebp - 0x82c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea esi, [ebp - 0x82c]
call fcn.004097a0
lea esi, [ebp - 0x848]
call fcn.004097a0
lea esi, [ebp - 0x864]
call fcn.004097a0
xor al, al
jmp 0x41e303
push 0x3ff
lea edx, [ebp - 0x80f]
push 0
push edx
mov byte [ebp - 0x810], 0
call fcn.00535390
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0x400
mov esi, eax
lea eax, [ebp - 0x810]
push eax
push 0
push esi
push 0
push 0x1200
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push 0x3ff
lea ecx, [ebp - 0x40f]
push 0
push ecx
mov byte [ebp - 0x410], 0
call fcn.00535390
mov eax, dword [ebp - 0x82c]
add esp, 0xc
cmp dword [ebp - 0x818], ebx
jae 0x41e20f
lea eax, [ebp - 0x82c]
push eax
push esi
lea edx, [ebp - 0x810]
push edx
push str._s__d_____s
mov eax, 0x400
lea edx, [ebp - 0x410]
call fcn.00422400
add esp, 0x10
push ebx
push str.Rappelz
lea eax, [ebp - 0x410]
push eax
xor esi, esi
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x818], ebx
jae 0x41e261
lea eax, [ebp - 0x82c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp - 0x818], ebx
jb 0x41e27f
mov ecx, dword [ebp - 0x82c]
push ecx
call fcn.004310e1
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x818], edi
mov dword [ebp - 0x81c], esi
mov byte [ebp - 0x82c], 0
cmp dword [ebp - 0x834], ebx
jb 0x41e2ae
mov edx, dword [ebp - 0x848]
push edx
call fcn.004310e1
add esp, 4
mov dword [ebp - 0x834], edi
mov dword [ebp - 0x838], esi
mov byte [ebp - 0x848], 0
cmp dword [ebp - 0x850], ebx
jb 0x41ddd9
mov eax, dword [ebp - 0x864]
push eax
call fcn.004310e1
add esp, 4
xor al, al
jmp 0x41e303
lea esi, [ebp - 0x82c]
call fcn.004097a0
lea esi, [ebp - 0x848]
call fcn.004097a0
lea esi, [ebp - 0x864]
call fcn.004097a0
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005320a3
mov esp, ebp
pop ebp
ret