Function at 0x41bf10
Capabilities:
Delete file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4e308c
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push ebp
push esi
mov esi, dword [esp + 0x254]
push edi
push esi
call fcn.0041b720
add esp, 4
test eax, eax
jne 0x41bf5a
mov ecx, dword [esp + 0x248]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
add esp, 0x248
ret
push esi
lea ecx, [esp + 0x10]
call fcn.00418470
mov dword [esp + 0x250], 0
mov eax, dword [esp + 0x25c]
push eax
lea ecx, [esp + 0x18]
call fcn.00418470
mov byte [esp + 0x250], 1
mov eax, dword [esp + 0x14]
mov edi, 1
cmp dword [eax - 4], edi
jle 0x41bfa7
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [esp + 0x18]
call fcn.00401370
mov eax, dword [esp + 0x14]
push eax
call fcn.0047e562
add esp, 4
push str..
lea ecx, [esp + 0x10]
call fcn.00418290
mov eax, dword [esp + 0xc]
cmp dword [eax - 4], edi
jle 0x41bfd8
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x10]
call fcn.00401370
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.0047abc2
mov edi, eax
add esp, 8
mov dword [esp + 0x24], edi
cmp edi, 0xffffffff
je 0x41c1bf
lea edx, [esp + 0x2c]
push edx
push edi
call fcn.0047ace9
add esp, 8
test eax, eax
jne 0x41c1b6
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
test byte [esp + 0x2c], 0x10
je 0x41c096
mov ecx, 0x4eac18
lea eax, [esp + 0x40]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41c04d
test dx, dx
je 0x41c049
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41c04d
add eax, 4
add ecx, 4
test dx, dx
jne 0x41c027
xor eax, eax
jmp 0x41c052
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c096
push esi
lea ecx, [esp + 0x10]
call fcn.00402d30
push 0x4e90cc
lea ecx, [esp + 0x10]
call fcn.00418290
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x10]
call fcn.00418290
mov ecx, dword [esp + 0x25c]
mov edx, dword [esp + 0xc]
push ecx
push edx
call fcn.0041bf10
add esp, 8
jmp 0x41c198
mov ecx, 0x4eac18
lea eax, [esp + 0x40]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41c0c6
test dx, dx
je 0x41c0c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41c0c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x41c0a0
xor eax, eax
jmp 0x41c0cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41c198
sub esp, 8
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00418470
mov byte [esp + 0x258], 2
lea ecx, [esp + 0x24]
push ecx
mov byte [esp + 0x25c], 1
call fcn.0041bc60
add esp, 0xc
mov byte [esp + 0x250], 3
mov eax, dword [esp + 0x1c]
cmp dword [eax - 4], 1
jle 0x41c126
mov edx, dword [eax - 0xc]
push edx
lea ecx, [esp + 0x20]
call fcn.00401370
mov eax, dword [esp + 0x1c]
push eax
call fcn.0047e562
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.00406f70
add esp, 0xc
test al, al
jne 0x41c158
lea edx, [esp + 0x14]
push 0x4eb898
push edx
call fcn.00406fd0
add esp, 8
test al, al
je 0x41c187
push esi
lea ecx, [esp + 0x10]
call fcn.00402d30
push 0x4e90cc
lea ecx, [esp + 0x10]
call fcn.00418290
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x10]
call fcn.00418290
mov ecx, dword [esp + 0xc]
push ecx
call edi
call ebp
mov byte [esp + 0x250], 1
lea ecx, [esp + 0x1c]
call fcn.00417490
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.0047ace9
add esp, 8
test eax, eax
je 0x41c017
mov edi, dword [esp + 0x24]
push edi
call fcn.0047aa07
add esp, 4
mov byte [esp + 0x250], 0
lea ecx, [esp + 0x14]
call fcn.00417490
mov dword [esp + 0x250], 0xffffffff
lea ecx, [esp + 0xc]
call fcn.00417490
mov ecx, dword [esp + 0x248]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebp
add esp, 0x248
ret