Function at 0x41b502
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x730
push ebx
push esi
push edi
xor ebx, ebx
or edi, 0xffffffff
lea eax, [ebp - 0x2fc]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0xc], 0x437584
mov dword [ebp - 8], edi
call fcn.00406448
lea eax, [ebp - 0x72c]
call fcn.00406448
lea eax, [ebp - 0x514]
call fcn.00406448
lea esi, [ebp - 0x9c]
call fcn.0040da73
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041b937
test al, al
jne 0x41b577
lea eax, [ebp - 0x9c]
call fcn.0040da90
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0xc
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x18]
push 0xd
call fcn.0041b949
mov esi, eax
mov dword [ebp + 8], esi
cmp esi, ebx
je 0x41b563
mov eax, dword [ebp + 0xc]
push dword [eax + 4]
lea eax, [ebp - 0x2fc]
push 0x439b44
call fcn.0040179f
pop ecx
pop ecx
push 2
push 3
push 0x40000000
push dword [ebp - 0x2f8]
lea eax, [ebp - 0xc]
call fcn.00401877
test al, al
jne 0x41b624
lea eax, [ebp - 0x9c]
call fcn.0040da90
mov eax, 0x437580
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x724], ebx
mov dword [ebp - 0x728], ebx
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x50c], ebx
mov dword [ebp - 0x510], ebx
mov dword [ebp - 0x514], eax
cmp dword [ebp - 8], edi
je 0x41b618
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push esi
call fcn.00421976
pop ecx
jmp 0x41b56e
push dword [ebp - 0x14]
lea eax, [ebp - 0xc]
push esi
call fcn.0040a8d5
cmp eax, dword [ebp - 0x14]
je 0x41b6ac
mov esi, dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [ebp - 8], edi
je 0x41b648
push dword [ebp - 8]
call esi
mov dword [ebp - 8], edi
push dword [ebp - 0x2f8]
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
lea eax, [ebp - 0x9c]
call fcn.0040da90
mov eax, 0x437580
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], ebx
mov dword [ebp - 0x50c], ebx
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], ebx
mov dword [ebp - 0x724], ebx
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2f4], ebx
cmp dword [ebp - 8], edi
je 0x41b6a4
push dword [ebp - 8]
call esi
push dword [ebp + 8]
jmp 0x41b619
cmp dword [ebp - 8], edi
je 0x41b6bd
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebp - 8], edi
push dword [ebp - 0x2f8]
lea eax, [ebp - 0x9c]
call fcn.0040daa5
test al, al
jne 0x41b6e3
push dword [ebp - 0x2f8]
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
jmp 0x41b5c4
lea eax, [ebp - 0x9c]
call fcn.0040db99
test al, al
jne 0x41b76d
lea eax, [ebp - 0x9c]
call fcn.0040db86
push dword [ebp - 0x2f8]
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
lea eax, [ebp - 0x9c]
call fcn.0040da90
mov eax, 0x437580
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], ebx
mov dword [ebp - 0x50c], ebx
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], ebx
mov dword [ebp - 0x724], ebx
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2f4], ebx
cmp dword [ebp - 8], edi
je 0x41b75d
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push dword [ebp + 8]
call fcn.00421976
pop ecx
mov eax, ebx
jmp 0x41b570
push dword [ebp + 0x10]
lea eax, [ebp - 0x514]
push 0x439b64
call fcn.0040179f
pop ecx
pop ecx
push dword [ebp - 0x720]
lea eax, [ebp - 0xe4]
push dword [ebp - 0x728]
lea edi, [ebp - 0x9c]
push eax
call fcn.0040de9e
test al, al
je 0x41b7e9
lea esi, [ebp - 0x72c]
call fcn.00406409
cmp dword [ebp - 0x510], ebx
je 0x41b7db
cmp dword [ebp - 0x728], ebx
je 0x41b7db
push dword [ebp - 0x50c]
push dword [ebp - 0x728]
push dword [ebp - 0x510]
call fcn.00422ee7
add esp, 0xc
jmp 0x41b7e5
cmp dword [ebp - 0x50c], 1
sbb eax, eax
inc eax
cmp eax, ebx
je 0x41b7fa
lea eax, [ebp - 0x9c]
call fcn.0040dbc3
test al, al
jne 0x41b782
jmp 0x41b869
lea eax, [ebp - 0x9c]
call fcn.0040dc04
test al, al
je 0x41b869
mov eax, dword [ebp - 0xc8]
add eax, 2
push 0x4407c8
push eax
call fcn.00421e0b
mov edi, eax
pop ecx
pop ecx
mov dword [ebp - 0x10], edi
cmp edi, ebx
je 0x41b869
mov eax, dword [ebp - 0xc8]
mov ecx, edi
lea esi, [ebp - 0x9c]
call fcn.0040dd09
test eax, eax
jne 0x41b84b
push edi
call fcn.00421976
pop ecx
mov dword [ebp - 0x10], ebx
jmp 0x41b85e
mov eax, dword [ebp - 0xc8]
mov byte [eax + edi], bl
mov eax, dword [ebp - 0xc8]
mov byte [eax + edi + 1], bl
lea edi, [ebp - 0x9c]
call fcn.0040dcd5
lea eax, [ebp - 0x9c]
call fcn.0040db86
push dword [ebp - 0x2f8]
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
lea eax, [ebp - 0x9c]
call fcn.0040da90
cmp dword [ebp - 8], 0xffffffff
mov eax, 0x437580
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], ebx
mov dword [ebp - 0x50c], ebx
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], ebx
mov dword [ebp - 0x724], ebx
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2f4], ebx
je 0x41b8d5
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ebx, dword [ebp - 0x10]
jmp 0x41b75d