Function at 0x41b64f
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [ebp + 0x1c]
mov word [ebp - 0x9c], ax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0040bfb0
mov eax, dword [ebp + 0x20]
test eax, eax
jns 0x41b689
mov dword [ebp + 0x20], 6
cmp dword [ebp + 8], 0
je 0x41b6bc
cmp dword [ebp + 0xc], 0
je 0x41b6bc
cmp dword [ebp + 0x14], 0
je 0x41b6a1
cmp dword [ebp + 0x10], 0
je 0x41b6bc
cmp word [ebp - 0x9c], 0
je 0x41b6b1
cmp dword [ebp + 0x18], 0
je 0x41b6bc
mov eax, dword [ebp + 0x20]
and eax, 0xf
cmp eax, 0xa
jbe 0x41b6d5
cmp dword [ebp + 0x24], 0
je 0x41b6cb
mov eax, dword [ebp + 0x24]
mov dword [eax], 0x18
mov eax, 0
jmp 0x41b8d7
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00414025
test eax, eax
jne 0x41b6fd
cmp dword [ebp + 0x24], 0
je 0x41b6f3
mov eax, dword [ebp + 0x24]
mov dword [eax], 0x19
mov eax, 0
jmp 0x41b8d7
lea eax, [ebp - 0x98]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004015d0
test eax, eax
je 0x41b767
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.004121e5
test eax, eax
jne 0x41b75b
cmp dword [ebp + 0x24], 0
je 0x41b751
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp + 0x24]
mov dword [eax], edx
mov eax, 0
jmp 0x41b8d7
mov dword [ebp - 0x10], 1
jmp 0x41b807
mov eax, dword [ebp + 0x20]
or ah, 8
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0040c4f7
test eax, eax
jne 0x41b7bf
cmp dword [ebp + 0x24], 0
je 0x41b7b5
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp + 0x24]
mov dword [eax], edx
mov eax, 0
jmp 0x41b8d7
mov eax, dword [ebp + 0x20]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0041248e
test eax, eax
jne 0x41b807
cmp dword [ebp + 0x24], 0
je 0x41b7ea
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp + 0x24]
mov dword [eax], edx
mov dword [esp + 4], 0
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0040bfda
mov eax, 0
jmp 0x41b8d7
movzx eax, word [ebp - 0x9c]
mov dword [esp + 0x24], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov edx, dword [ebp + 0x20]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0041417f
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0041a731
test eax, eax
jne 0x41b883
cmp dword [ebp - 0x14], 0
jne 0x41b87c
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.00411b24
test eax, eax
jne 0x41b8ac
cmp dword [ebp - 0x14], 0
jne 0x41b8a5
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0
cmp dword [ebp - 0xc], 0
jne 0x41b8c6
cmp dword [ebp - 0x10], 0
je 0x41b8c6
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_remove
mov dword [ebp - 0x18], eax
cmp dword [ebp + 0x24], 0
je 0x41b8d4
mov eax, dword [ebp + 0x24]
mov edx, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, dword [ebp - 0xc]
leave
ret