Function at 0x40d418
Capabilities:
Delete directory
Delete file
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x40d420
push ecx
push ebx
push esi
push edi
mov ebx, 0x41a334
mov esi, 0x41a324
lea edi, [ebp - 0x20]
xor eax, eax
push ebp
push 0x40d9d4
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [0x41a2d4]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [0x41a2f4]
push eax
mov ecx, 0x40d9e4
mov edx, 0x40d9e8
mov eax, 0x40d25c
call fcn.0040d0d0
movzx eax, word [0x41a308]
sub eax, 0x208
sar eax, 1
jns 0x40d480
adc eax, 0
push eax
movzx eax, word [0x41a306]
sub eax, 0x168
sar eax, 1
jns 0x40d494
adc eax, 0
push eax
push 0x208
push 0x168
mov eax, dword [0x41a2d4]
push eax
push 0
mov eax, dword [0x4104d8]
push eax
push 0
mov edx, 0x40d9fc
mov eax, 0x40d9e8
mov ecx, 0xc80000
call fcn.00405d6c
mov dword [0x41a2c0], eax
push edi
mov eax, dword [0x41a2c0]
push eax
call sub.user32.dll_GetClientRect
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [edi + 8]
sub eax, dword [edi]
inc eax
push eax
push 0x31
mov ax, word [0x41a2c0]
push eax
mov edx, 0x40da10
mov eax, 0x40da4c
mov ecx, 0x40000001
call fcn.0040d18c
mov dword [0x41a2ac], eax
push 0x200
push 0xa
push 0x46
mov eax, dword [edi + 8]
sub eax, dword [edi]
sub eax, 0x14
push eax
push 0xc8
mov ax, word [0x41a2c0]
push eax
mov edx, 0x40da54
mov eax, 0x40da4c
mov ecx, 0x40000001
call fcn.0040d18c
mov dword [0x41a2a8], eax
push 0x20000
push 0
push 0x117
mov eax, dword [edi + 8]
sub eax, dword [edi]
push eax
push 2
mov ax, word [0x41a2c0]
push eax
mov eax, 0x40da4c
mov ecx, 0x4000000b
xor edx, edx
call fcn.0040d18c
push 0x20000
push 0
push 0x31
mov eax, dword [edi + 8]
sub eax, dword [edi]
push eax
push 2
mov ax, word [0x41a2c0]
push eax
mov eax, 0x40da4c
mov ecx, 0x4000000b
xor edx, edx
call fcn.0040d18c
push 0
mov eax, dword [edi + 8]
sub eax, dword [edi]
sub eax, 8
sub eax, 0x59
sub eax, 0x59
sub eax, 8
push eax
push 0x122
push 0x59
push 0x19
mov ax, word [0x41a2c0]
push eax
mov edx, 0x40da68
mov eax, 0x40da70
mov ecx, 0x48000000
call fcn.0040d18c
mov dword [0x41a2b0], eax
push 0
mov eax, dword [edi + 8]
sub eax, dword [edi]
sub eax, 8
sub eax, 0x59
push eax
push 0x122
push 0x59
push 0x19
mov ax, word [0x41a2c0]
push eax
mov edx, 0x40da78
mov eax, 0x40da70
mov ecx, 0x48000000
call fcn.0040d18c
mov dword [0x41a2b4], eax
push 0
mov eax, dword [0x41a2e8]
push eax
push 0x30
mov eax, dword [0x41a2ac]
push eax
call sub.user32.dll_SendMessageA
push 0
mov eax, dword [0x41a2ec]
push eax
push 0x30
mov eax, dword [0x41a2a8]
push eax
call sub.user32.dll_SendMessageA
push 0
mov eax, dword [0x41a2ec]
push eax
push 0x30
mov eax, dword [0x41a2b0]
push eax
call sub.user32.dll_SendMessageA
push 0
mov eax, dword [0x41a2ec]
push eax
push 0x30
mov eax, dword [0x41a2b4]
push eax
call sub.user32.dll_SendMessageA
push 5
mov eax, dword [0x41a2c0]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [esi]
call fcn.004036b0
mov edx, dword [esi]
cmp byte [edx + eax - 1], 0x5c
je 0x40d680
mov eax, esi
mov edx, 0x40da88
call fcn.004036b8
mov eax, dword [0x40f408]
mov byte [eax], 0
movzx edi, word [0x41a304]
test edi, edi
jle 0x40d6e8
mov dword [0x41a330], 1
lea eax, [ebp - 0x28]
mov edx, dword [0x41a330]
add edx, edx
lea edx, [edx + edx*4]
lea edx, [edx + edx*4]
lea edx, [edx*4 + 0x4105a0]
call fcn.00403654
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
mov edx, dword [esi]
call fcn.004036fc
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.00404ef6
mov eax, ebx
call fcn.00405008
call fcn.0040268c
test eax, eax
inc dword [0x41a330]
dec edi
jne 0x40d69d
lea eax, [ebp - 0x2c]
mov ecx, dword [0x41a2fc]
mov edx, dword [esi]
call fcn.004036fc
mov edx, dword [ebp - 0x2c]
mov eax, ebx
call fcn.00404ef6
mov eax, ebx
call fcn.00405008
call fcn.0040268c
test eax, eax
mov byte [0x41a32c], 0
call fcn.0040d304
mov edx, eax
lea eax, [ebp - 0xc]
call fcn.00403b68
mov eax, dword [ebp - 0xc]
call fcn.00403bd0
mov edx, dword [ebp - 0xc]
cmp word [edx + eax*2 - 2], 0x5c
je 0x40d746
lea eax, [ebp - 0xc]
mov edx, 0x40da90
call fcn.00403bdc
lea eax, [ebp - 0x30]
mov edx, dword [0x41a2f8]
call fcn.00403bb0
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0xc]
call fcn.00403bdc
movzx edi, word [0x41a304]
test edi, edi
jle 0x40d8f8
mov esi, 1
xor ebx, ebx
mov eax, esi
add eax, eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x410604]
mov edx, 0x40da94
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402860
je 0x40d82c
mov eax, esi
add eax, eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x410604]
mov edx, 0x40da9c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402860
je 0x40d82c
lea eax, [ebp - 0x38]
mov edx, esi
add edx, edx
lea edx, [edx + edx*4]
lea edx, [edx + edx*4]
lea edx, [edx*4 + 0x4105a0]
call fcn.00403654
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x34]
mov edx, dword [0x41a328]
call fcn.004036fc
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 4]
call fcn.00403bb0
push dword [ebp - 0xc]
push 0x40da90
lea eax, [ebp - 0x3c]
mov edx, esi
add edx, edx
lea edx, [edx + edx*4]
lea edx, [edx + edx*4]
lea edx, [edx*4 + 0x410604]
call fcn.00403ba4
push dword [ebp - 0x3c]
push 0x40daa8
lea eax, [ebp - 8]
mov edx, 4
call fcn.00403c3c
mov bl, 1
jmp 0x40d8a5
cmp byte [ebp - 0xd], 0
je 0x40d8a5
mov eax, esi
add eax, eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x410604]
mov edx, 0x40da9c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402860
jne 0x40d8a5
lea eax, [ebp - 0x44]
mov edx, esi
add edx, edx
lea edx, [edx + edx*4]
lea edx, [edx + edx*4]
lea edx, [edx*4 + 0x4105a0]
call fcn.00403654
mov ecx, dword [ebp - 0x44]
lea eax, [ebp - 0x40]
mov edx, dword [0x41a328]
call fcn.004036fc
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 4]
call fcn.00403bb0
push dword [ebp - 0xc]
push 0x40da90
push 0x40dab8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00403c3c
mov bl, 1
test bl, bl
je 0x40d8f0
mov eax, dword [ebp - 8]
call fcn.00403bc0
mov ebx, eax
push ebx
call sub.kernel32.dll_DeleteFileW
push 0
push ebx
push 1
push 2
call sub.shell32.dll_SHChangeNotify
push 0
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 8]
call fcn.00403678
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.00406e00
mov eax, dword [ebp - 0x48]
push eax
push 0x1001
push 0x1000
call sub.shell32.dll_SHChangeNotify
inc esi
dec edi
jne 0x40d773
mov eax, dword [ebp - 0xc]
call fcn.00403bc0
push eax
call sub.kernel32.dll_RemoveDirectoryW
push 0
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 0xc]
call fcn.00403678
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.00406e00
mov eax, dword [ebp - 0x50]
call fcn.00403864
push eax
push 0x1001
push 0x1000
call sub.shell32.dll_SHChangeNotify
call fcn.0040cb3c
push 0x2040
push 0x40dad4
push 0x40daec
mov eax, dword [0x41a2c0]
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [0x41a2c0]
push eax
call sub.user32.dll_DestroyWindow
mov eax, dword [0x41a2c0]
push eax
call sub.user32.dll_DestroyWindow
mov eax, dword [0x4104d8]
push eax
push 0x40d9e8
call sub.user32.dll_UnregisterClassA
push 0
call sub.user32.dll_PostQuitMessage
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40d9db
lea eax, [ebp - 0x54]
mov edx, 6
call fcn.00403454
lea eax, [ebp - 0x3c]
call fcn.00403a60
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00403454
lea eax, [ebp - 0x30]
call fcn.00403a60
lea eax, [ebp - 0x2c]
mov edx, 3
call fcn.00403454
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00403a78
ret