Function at 0x41e272
Capabilities:
Delete file
Read file on windows

Disassembly:
push 0x10c
mov eax, 0x4c8e3b
call fcn.004019a4
mov ebx, ecx
mov dword [ebp - 0xd4], ebx
mov ecx, dword [ebx + 0x64]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
test ecx, ecx
je 0x41e29c
mov eax, dword [ecx]
push esi
call dword [eax + 0xc]
xor eax, eax
lea ecx, [ebp - 0xf0]
push eax
push esi
call fcn.004bac46
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp - 0xec], eax
jne 0x41e2bf
mov bl, al
jmp 0x41e722
push edi
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xe0], eax
call fcn.0041ea35
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 1
call fcn.0041ea06
inc eax
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xcc], eax
call fcn.004bae28
mov edi, eax
mov dword [ebp - 0xe4], edx
lea eax, [ebp - 0x104]
mov dword [ebp - 0xd0], edi
push eax
xor eax, eax
push eax
push eax
push dword [ebp - 0xec]
call dword [sym.imp.KERNEL32.DLL_GetFileTime]
xor edx, edx
push edx
push 0x989680
push dword [ebp - 0x100]
push dword [ebp - 0x104]
call fcn.00401c50
mov esi, eax
sub esi, 0xb6109100
push 0x68
sbb edx, 2
xor eax, eax
push eax
mov byte [ebp - 0xc4], al
mov dword [ebp - 0xc3], eax
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbe]
push eax
mov dword [ebp - 0xf8], edx
call sub.msvcrt.dll_memset
push dword [ebx + 0x74]
lea eax, [ebp - 0xc4]
push dword [ebx + 0x6c]
mov ebx, dword [sym.imp.msvcrt.dll_memcpy]
push eax
call ebx
push edi
mov edi, dword [sym.imp.msvcrt.dll_sprintf]
lea eax, [ebp - 0x54]
push str._8.8lx
push eax
call edi
push 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x8e]
push eax
call ebx
push dword [ebp - 0xcc]
lea eax, [ebp - 0x54]
push str._8.8lx
push eax
call edi
push 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x66]
push eax
call ebx
add esp, 0x48
lea eax, [ebp - 0x54]
push esi
mov esi, str._8.8lx
push esi
push eax
call edi
lea eax, [ebp - 0x54]
push 8
push eax
lea eax, [ebp - 0x96]
push eax
call ebx
push 0x81ed
lea eax, [ebp - 0x54]
push esi
push eax
call edi
push 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xb6]
push eax
call ebx
mov esi, 0x1f4
lea eax, [ebp - 0x54]
push esi
push str._8.8lx
push eax
call edi
push 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xae]
push eax
call ebx
add esp, 0x48
lea eax, [ebp - 0x54]
push esi
push str._8.8lx
push eax
call edi
push 8
pop esi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xa6]
push eax
call ebx
push 1
lea eax, [ebp - 0x54]
push str._8.8lx
push eax
call edi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xbe]
push eax
call ebx
push 1
lea eax, [ebp - 0x54]
push str._8.8lx
push eax
call edi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x9e]
push eax
call ebx
add esp, 0x48
lea eax, [ebp - 0x54]
push 1
push str._8.8lx
push eax
call edi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x86]
push eax
call ebx
xor edx, edx
lea eax, [ebp - 0x54]
push edx
push str._8.8lx
push eax
call edi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x7e]
push eax
call ebx
push 1
lea eax, [ebp - 0x54]
push str._8.8lx
push eax
call edi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x76]
push eax
call ebx
add esp, 0x48
xor eax, eax
push eax
lea eax, [ebp - 0x54]
push str._8.8lx
push eax
call edi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x6e]
push eax
call ebx
xor eax, eax
push eax
lea eax, [ebp - 0x54]
push str._8.8lx
push eax
call edi
push esi
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x5e]
push eax
call ebx
mov esi, dword [ebp - 0xd4]
lea ecx, [ebp - 0xc4]
add esp, 0x30
sub esi, 0xffffff80
mov dword [ebp - 0xd8], esi
mov eax, dword [esi]
push 0x6e
push ecx
mov ecx, esi
call dword [eax + 0x10]
cmp dword [ebp - 0xdc], 0
mov ecx, 0x4dbde7
mov ebx, dword [ebp - 0xcc]
cmovne ecx, dword [ebp - 0xdc]
mov eax, dword [esi]
push ebx
push ecx
mov ecx, esi
call dword [eax + 0x10]
add ebx, 0x6e
and ebx, 3
je 0x41e560
push 4
pop ecx
xor eax, eax
sub ecx, ebx
push ecx
mov byte [ebp - 0xcc], al
lea ecx, [ebp - 0xcc]
mov word [ebp - 0xcb], ax
mov byte [ebp - 0xc9], al
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x10]
push 0x80000
lea ecx, [ebp - 0x118]
call fcn.0041eab3
mov ecx, dword [ebp - 0xe4]
xor edx, edx
mov byte [ebp - 4], 2
xor eax, eax
mov ebx, dword [ebp - 0xd0]
mov edi, ebx
mov byte [ebp - 0xc5], 1
mov dword [ebp - 0xcc], ecx
cmp ecx, edx
ja 0x41e59f
cmp ebx, eax
jbe 0x41e6b9
cmp ecx, eax
ja 0x41e5b1
jb 0x41e5ad
cmp edi, 0x80000
jae 0x41e5b1
mov eax, edi
jmp 0x41e5b6
mov eax, 0x80000
xor ecx, ecx
push ecx
mov dword [ebp - 0xd0], ecx
lea ecx, [ebp - 0xd0]
push ecx
push eax
push dword [ebp - 0x108]
push dword [ebp - 0xec]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
test eax, eax
je 0x41e6b7
cmp dword [ebp - 0xd0], 0
jbe 0x41e6b7
push dword [ebp - 0xd0]
mov eax, dword [esi]
mov ecx, esi
push dword [ebp - 0x108]
call dword [eax + 0x10]
sub edi, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
push 0
pop eax
sbb ecx, eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xcc], ecx
mov eax, dword [eax + 0x64]
mov dword [ebp - 0xf8], eax
test eax, eax
je 0x41e675
mov esi, dword [eax]
mov edx, ebx
mov eax, dword [ebp - 0xe4]
sub edx, edi
push eax
push ebx
sbb eax, ecx
mov ecx, dword [ebp - 0xf8]
push eax
push edx
call dword [esi + 0x14]
mov esi, dword [ebp - 0xd4]
xor edx, edx
push edx
push dword [ebp - 0xd0]
mov ecx, dword [esi + 0x64]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov ecx, dword [esi + 0x64]
mov eax, dword [ecx]
call dword [eax + 0x24]
test al, al
jne 0x41e686
mov esi, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xcc]
xor eax, eax
cmp ecx, eax
ja 0x41e5b1
cmp edi, eax
jmp 0x41e599
xor eax, eax
or edi, dword [ebp - 0xcc]
mov byte [ebp - 0xc5], al
je 0x41e6b9
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi + 0xc], 0
mov eax, 0x4ef644
cmovne eax, dword [esi + 0xc]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
jmp 0x41e6e9
xor eax, eax
and ebx, 3
je 0x41e6e9
mov ecx, dword [ebp - 0xd8]
push 4
pop edx
sub edx, ebx
mov byte [ebp - 0xd4], al
mov word [ebp - 0xd3], ax
mov byte [ebp - 0xd1], al
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0xd4]
push edx
call dword [eax + 0x10]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x118]
mov dword [ebp - method.micro::utils::QArray_void__.virtual_0], vtable.micro::utils::QBuffer.0
call fcn.004044fd
xor eax, eax
mov byte [ebp - 4], al
cmp dword [ebp - 0xdc], eax
je 0x41e71c
push dword [ebp - 0xdc]
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
mov bl, byte [ebp - 0xc5]
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], vtable.micro::files::QFile.0
call fcn.004baeaf
mov al, bl
call fcn.00401a27
ret 8