Function at 0x40e146
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4285cd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1158
call fcn.0041e950
push edi
lea ecx, [ebp - 0x1140]
call fcn.0040d240
mov dword [ebp - 4], 0
mov dword [ebp - 0x1148], 0
mov byte [ebp - 0x1014], 0
mov ecx, 0x3ff
xor eax, eax
lea edi, [ebp - 0x1013]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x111c], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x1124], 0
mov byte [ebp - 0x1118], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x1117]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0
push 0
push 3
push 0
push 1
push SysReAllocStringLen
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x1140]
call fcn.0040d1f0
test eax, eax
jne 0x40e222
mov dword [ebp - 0x114c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1140]
call fcn.00408080
mov eax, dword [ebp - 0x114c]
jmp 0x40e4b4
lea ecx, [ebp - 0x1140]
call fcn.004085e0
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x1140]
call fcn.004080ec
test eax, eax
jne 0x40e266
mov dword [ebp - 0x1150], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1140]
call fcn.00408080
mov eax, dword [ebp - 0x1150]
jmp 0x40e4b4
lea ecx, [ebp - 0x1140]
call fcn.0040d2e0
mov dword [ebp - 0x1124], eax
lea ecx, [ebp - 0x1140]
call fcn.0040d300
mov cx, word [eax]
mov word [ebp - 0x1120], cx
mov edx, dword [ebp - 0x1120]
and edx, 0xffff
mov ax, word [ebp - 0x1120]
sub ax, 1
mov word [ebp - 0x1120], ax
test edx, edx
je 0x40e2f1
mov ecx, dword [ebp - 0x1124]
mov edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0x1124]
add edx, dword [eax + 0x10]
cmp edx, dword [ebp - 0x111c]
jbe 0x40e2e0
mov ecx, dword [ebp - 0x1124]
mov edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0x1124]
add edx, dword [eax + 0x10]
mov dword [ebp - 0x111c], edx
mov ecx, dword [ebp - 0x1124]
add ecx, 0x28
mov dword [ebp - 0x1124], ecx
jmp 0x40e28c
mov edx, dword [ebp - 0x111c]
cmp edx, dword [ebp - 0x10]
jb 0x40e334
lea ecx, [ebp - 0x1140]
call fcn.004080d1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x1154], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1140]
call fcn.00408080
mov eax, dword [ebp - 0x1154]
jmp 0x40e4b4
mov ecx, dword [ebp + 8]
push ecx
push str._s.Ravk
lea edx, [ebp - 0x1118]
push edx
call fcn.0041e0ae
add esp, 0xc
push 0x42ddd0
lea eax, [ebp - 0x1118]
push eax
call fcn.0041ee7c
add esp, 8
mov dword [ebp - 0x1148], eax
cmp dword [ebp - 0x1148], 0
jne 0x40e396
mov dword [ebp - 0x1158], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1140]
call fcn.00408080
mov eax, dword [ebp - 0x1158]
jmp 0x40e4b4
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x111c]
mov dword [ebp - 0x14], ecx
push 0
mov edx, dword [ebp - 0x111c]
push edx
lea ecx, [ebp - 0x1140]
call fcn.00408640
cmp eax, 0xffffffff
jne 0x40e3e2
mov dword [ebp - 0x115c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1140]
call fcn.00408080
mov eax, dword [ebp - 0x115c]
jmp 0x40e4b4
push 0x1000
lea eax, [ebp - 0x1014]
push eax
lea ecx, [ebp - 0x1140]
call fcn.00408670
mov dword [ebp - 0x1144], eax
cmp dword [ebp - 0x1144], 0
je 0x40e43d
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1144]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1148]
push edx
push 1
mov eax, dword [ebp - 0x1144]
push eax
lea ecx, [ebp - 0x1014]
push ecx
call fcn.0041ee8f
add esp, 0x10
cmp dword [ebp - 0x14], 0
jne 0x40e43b
jmp 0x40e43d
jmp 0x40e3e2
mov edx, dword [ebp - 0x1148]
push edx
call fcn.0041f2ea
add esp, 4
lea ecx, [ebp - 0x1140]
call fcn.004080d1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x40e486
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x1118]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
je 0x40e486
mov dword [ebp - 0x1164], 1
jmp 0x40e490
mov dword [ebp - 0x1164], 0
mov eax, dword [ebp - 0x1164]
mov dword [ebp - 0x1160], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1140]
call fcn.00408080
mov eax, dword [ebp - 0x1160]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret