Function at 0x4081d4
Capabilities:
Delete file
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xd4
mov eax, dword [0x419074]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
push 0x4019cc
push 0x4019e0
call dword [sym.imp.msvcrt.dll_printf]
push 1
call fcn.004181a9
add esp, 0xc
push eax
call dword [sym.imp.msvcrt.dll_fflush]
mov dword [esp], 0x419080
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [0x419090], 2
jne 0x408dd0
push 4
pop ebx
cmp dword [0x419084], ebx
jb 0x408dd0
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x419e00
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 1
push 0x412910
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 0x419dc0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x419de0], eax
call fcn.00412ef3
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x18]
push 0x41af70
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
add dword [0x41af70], 0x2a69c000
mov edx, esi
mov edi, dword [ebp + 8]
mov ecx, edi
adc dword [0x41af74], 0xc9
xor eax, eax
mov dword [0x41ad40], eax
mov dword [0x41ad44], eax
mov dword [0x41aec4], eax
call fcn.0040cd85
cmp dword [0x41aed0], 0
je 0x4082e2
call dword [sym.imp.KERNEL32.dll_SetFileApisToANSI]
jmp 0x4082e8
call dword [sym.imp.KERNEL32.dll_SetFileApisToOEM]
cmp dword [0x41aee4], 0
je 0x408312
xor ecx, ecx
xor eax, eax
mov byte [0x41acbf], cl
mov word [0x419d60], ax
mov dword [0x41acc0], ecx
mov dword [0x41acc4], ecx
jmp 0x4083ac
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
sub eax, 0
je 0x40834f
sub eax, 1
je 0x408345
sub eax, 1
je 0x408338
push 0x4011b8
push 0xffffffffffffffff
call fcn.004129be
mov eax, dword [esp + 0x28]
add eax, dword [esp + 0xd0]
jmp 0x408353
mov eax, dword [esp + 0x28]
add eax, dword [esp + 0x7c]
jmp 0x408353
mov eax, dword [esp + 0x28]
mov ecx, eax
cdq
neg ecx
push 0xfffffffffffffff1
mov word [0x419d60], cx
pop ecx
idiv ecx
mov byte [0x41acbf], al
cmp al, 0xd0
jl 0x408371
cmp al, 0x34
jle 0x40837a
mov byte [0x41acbf], 0
xor al, al
push 2
movsx eax, al
cdq
push 0x18711a00
push edx
push eax
call fcn.004181d0
cmp dword [0x41aea0], 0
mov dword [0x41acc0], eax
mov dword [0x41acc4], edx
je 0x4083ac
sub dword [0x41af70], eax
sbb dword [0x41af74], edx
push dword [0x41af74]
mov ecx, 0x41acb8
push dword [0x41af70]
call fcn.0040cc3c
push dword [0x41af74]
mov ecx, 0x419d70
push dword [0x41af70]
call fcn.004139b3
push dword [0x41af74]
push dword [0x41af70]
call fcn.0040ccbc
xor ecx, ecx
inc ecx
cmp edi, ecx
jle 0x40841e
cmp dword [esi + ecx*4], 0
jne 0x4083fd
inc ecx
cmp ecx, edi
jl 0x4083f0
jmp 0x40841e
mov eax, dword [esi + ecx*4]
mov dword [0x41a680], eax
lea eax, [ecx + 1]
jmp 0x408411
cmp dword [esi + eax*4], 0
jne 0x408486
inc eax
cmp eax, edi
jl 0x40840a
cmp dword [0x41aefc], 0
jne 0x408425
xor ecx, ecx
call fcn.0040dc27
cmp dword [0x41aeac], 0
je 0x40843a
cmp dword [0x41aeb0], 0
jne 0x40843a
push 5
pop ebx
mov ecx, ebx
call fcn.004136d6
cmp dword [0x41aefc], 0
mov dword [0x419540], 0x2000000
jne 0x408499
push dword [0x41a684]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x408499
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 3
je 0x408499
cmp eax, 2
je 0x408499
push dword [0x41a684]
push 0x4026d4
push 0xffffffffffffffff
call fcn.004129be
cmp dword [0x41aefc], 0
mov eax, dword [esi + eax*4]
mov dword [0x41a684], eax
je 0x408425
jmp 0x40841e
push 0x4011e8
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
and dword [0x41ad14], 0
mov eax, 0x1f4
and dword [0x41ad1c], 0
pop ecx
mov dword [0x41ad10], eax
mov dword [0x41ad18], eax
call fcn.00409105
push dword [0x41ad0c]
push dword [0x41ad08]
push dword [0x41ad04]
push dword [0x41ad00]
push 0x401200
call dword [sym.imp.msvcrt.dll_printf]
add esp, 0x14
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
mov dword [esp], 0x401248
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
mov ecx, dword [0x419e60]
xor edx, edx
call fcn.0040938c
call fcn.004098d4
cmp dword [0x41aee8], 0
je 0x408553
push 0
push 1
call fcn.00411ef9
mov dword [0x41ae70], eax
cmp dword [0x41af30], 0
jne 0x408596
cmp dword [0x41aedc], 0
je 0x408581
cmp dword [0x41aee0], 0
je 0x408575
call fcn.00410325
jmp 0x40857a
call fcn.00410295
call 0x40f25c
jmp 0x4085a4
cmp dword [0x41af2c], 0
je 0x40858f
call fcn.00410325
call fcn.004093fb
jmp 0x4085a9
cmp dword [0x419124], 0
je 0x4085a9
call fcn.00410295
call fcn.0040978b
call fcn.00409924
mov esi, dword [0x41af2c]
test esi, esi
je 0x408649
cmp dword [0x41af48], 0
je 0x408604
mov ecx, dword [0x41af54]
mov eax, 0x102
mov word [0x419588], ax
call fcn.0040aed5
mov ecx, dword [0x41af58]
mov dword [0x41af60], eax
call fcn.0040aed5
push 0x40126c
mov dword [0x41af64], eax
call dword [sym.imp.msvcrt.dll_printf]
mov esi, dword [0x41af2c]
pop ecx
jmp 0x408619
cmp word [0x419588], 0
jne 0x408619
mov eax, 0x150
mov word [0x419588], ax
mov ecx, dword [0x419534]
mov eax, 0x100
cmp ecx, eax
jae 0x40863f
sub eax, ecx
mov dword [0x419530], ecx
mov dword [0x41952c], eax
mov dword [0x419534], 0x101
call fcn.00415244
call fcn.004152e6
cmp dword [0x41aee8], 0
je 0x408679
mov ebx, dword [0x41ae78]
test ebx, ebx
je 0x408679
mov edi, dword [0x41ae74]
add edi, 0x10
push 0
push dword [edi - 8]
call fcn.00411ef9
mov dword [edi], eax
lea edi, [edi + 0x14]
sub ebx, 1
jne 0x408665
cmp dword [0x41aeec], 0
je 0x408693
test esi, esi
jne 0x408693
push esi
push 1
call fcn.00411ef9
mov dword [0x41ae7c], eax
call fcn.00409b04
test esi, esi
je 0x4086a1
call fcn.004153db
push 0x4012a4
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
cmp dword [0x41aeac], 0
mov eax, 0x4012d0
pop ecx
jne 0x4086d0
mov eax, 0x401130
cmp dword [0x41aefc], 0
mov ebx, 0x4012e8
mov ecx, ebx
jne 0x4086e5
mov ecx, 0x4012f4
push eax
push dword [0x41ace4]
push dword [0x41ace0]
push ecx
push 0x4012f8
call dword [sym.imp.msvcrt.dll_printf]
add esp, 0x14
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
cmp dword [0x41af2c], 0
mov edx, dword [0x41ad40]
mov eax, edx
mov edi, dword [0x41aeac]
pop ecx
mov ecx, dword [0x41ad44]
jne 0x40874f
or eax, ecx
jne 0x40875d
cmp dword [0x41aec4], eax
jne 0x408796
mov edx, 0x28a64000
xor ecx, ecx
mov dword [0x41ad40], edx
mov dword [0x41ad44], ecx
jmp 0x40875d
or eax, ecx
mov dword [0x41aec4], 1
je 0x408796
and dword [0x41aec4], 0
test edi, edi
jne 0x408796
mov esi, dword [0x41ace4]
cmp esi, ecx
jb 0x408796
mov eax, dword [0x41ace0]
ja 0x40877d
cmp eax, edx
jbe 0x408796
push 0x40131c
push ecx
sub eax, edx
push edx
sbb esi, ecx
push esi
push eax
push 0x401340
push 0
call fcn.004129be
cmp dword [0x41aefc], 0
je 0x4087ba
test edi, edi
jne 0x4087ba
push 0x401388
call dword [sym.imp.msvcrt.dll_printf]
mov dword [esp], 0x4013b8
jmp 0x408da3
call fcn.00408e20
cmp dword [0x41aefc], 0
je 0x4087f0
push dword [0x41ad0c]
push dword [0x41ad08]
push dword [0x41ad04]
push dword [0x41ad00]
push 0x4013c0
call dword [sym.imp.msvcrt.dll_printf]
add esp, 0x14
jmp 0x40881c
push dword [0x41a684]
push dword [0x41ad0c]
push dword [0x41ad08]
push dword [0x41ad04]
push dword [0x41ad00]
push 0x4013f0
call dword [sym.imp.msvcrt.dll_printf]
add esp, 0x18
push 0x401424
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
cmp dword [0x41aeac], 0
pop ecx
je 0x408862
cmp dword [0x41aefc], 0
jne 0x408862
mov edx, dword [0x41aeb0]
neg edx
sbb edx, edx
and edx, 0xffd00000
add edx, 0x600000
jmp 0x408864
xor edx, edx
mov dword [0x41953c], edx
add edx, 0x200000
push ecx
call fcn.00412835
mov dword [0x419540], eax
sub eax, dword [0x41953c]
mov dword [0x419538], eax
call fcn.0040b174
push 0x10
pop edi
mov edx, edi
xor ecx, ecx
call fcn.00411f97
cmp dword [0x419124], 0
je 0x4088a8
call fcn.0040f57a
push 0x11
pop edi
cmp dword [0x41aee8], 0
je 0x4088b9
mov ecx, edi
call fcn.0040f9b1
inc edi
cmp dword [0x41aedc], 0
je 0x4088ca
mov ecx, edi
call 0x40f788
inc edi
cmp dword [0x419124], 0
je 0x4088db
mov ecx, edi
call fcn.0040fa40
inc edi
cmp dword [0x41af2c], 0
je 0x40896c
xor edx, edx
mov ecx, 0x800
inc edx
call fcn.004125fe
mov esi, eax
mov eax, edi
mov byte [esi], 0
mov ecx, dword [0x407084]
mov dword [esi + 1], ecx
mov cl, byte [0x407088]
mov byte [esi + 5], cl
mov ecx, 0x800
mul ecx
mov byte [esi + 6], 1
push edx
mov edx, ecx
mov ecx, esi
push eax
call fcn.00411b65
lea ecx, [edi + 1]
call fcn.00413a5c
xor edx, edx
mov ecx, 0x800
inc edx
call fcn.004125fe
mov esi, eax
lea eax, [edi + 2]
mov byte [esi], 0
mov ecx, dword [0x40709c]
mov dword [esi + 1], ecx
mov cl, byte [0x4070a0]
mov byte [esi + 5], cl
mov ecx, 0x800
mul ecx
mov byte [esi + 6], 1
push edx
mov edx, ecx
mov ecx, esi
push eax
call fcn.00411b65
add edi, 3
cmp dword [0x41aee8], 0
je 0x40897d
push ecx
mov ecx, edi
call fcn.0040fab2
cmp dword [0x41aedc], 0
je 0x408994
call fcn.0040fd47
cmp dword [0x41aedc], 0
jne 0x4089a4
cmp dword [0x41af30], 0
jne 0x4089a4
call fcn.00409c99
jmp 0x4089b2
cmp dword [0x419124], 0
je 0x4089b2
call fcn.00409e0d
cmp dword [0x41af30], 0
jne 0x4089cd
cmp dword [0x41aedc], 0
je 0x4089db
cmp dword [0x41aee0], 0
jne 0x4089db
cmp dword [0x419124], 0
je 0x4089db
call fcn.0041072f
mov eax, dword [0x41acd0]
or eax, dword [0x41acd4]
je 0x408a0f
mov ecx, dword [0x419524]
xor edx, edx
inc edx
call fcn.004125fe
push dword [0x41acd4]
mov edx, dword [0x419524]
mov ecx, eax
push dword [0x41acd0]
call fcn.00411b65
cmp dword [0x41af30], 0
jne 0x408a2f
cmp dword [0x41aedc], 0
je 0x408a28
call fcn.0040febf
jmp 0x408a38
call fcn.00409f81
jmp 0x408a3d
cmp dword [0x419124], 0
je 0x408a3d
call fcn.0040a1ab
cmp dword [0x41af2c], 0
je 0x408a70
cmp dword [0x41952c], 0
je 0x408a54
call fcn.00411fda
call fcn.0041545f
call fcn.00414517
mov ecx, dword [0x41954c]
dec ecx
mov dword [0x419520], ecx
call fcn.00413acd
cmp dword [0x41aee8], 0
je 0x408aff
and dword [esp + 0x14], 0
cmp dword [0x41ae78], 0
jbe 0x408aff
xor edi, edi
mov eax, dword [0x41ae74]
mov dword [esp + 0x10], eax
mov eax, dword [edi + eax + 8]
lea ebx, [eax + 0x7ff]
and ebx, 0xfffff800
cmp ebx, eax
jb 0x408b43
xor edx, edx
mov ecx, ebx
inc edx
call fcn.004125fe
mov esi, eax
mov eax, dword [esp + 0x10]
push dword [edi + eax + 8]
push dword [edi + eax + 0xc]
push esi
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov edx, ebx
mov ecx, dword [edi + ecx + 0x10]
shl ecx, 0xb
push 0
push ecx
mov ecx, esi
call fcn.00411b65
mov ecx, dword [esp + 0x14]
add edi, 0x14
inc ecx
mov dword [esp + 0x14], ecx
cmp ecx, dword [0x41ae78]
jb 0x408a8d
mov ebx, 0x4012e8
mov eax, dword [0x41aeec]
test eax, eax
je 0x408b1f
cmp dword [0x41af2c], 0
jne 0x408b1b
call fcn.00411a6e
mov eax, dword [0x41aeec]
test eax, eax
jne 0x408b28
cmp dword [0x41af00], 0
je 0x408b2d
call fcn.00411ade
cmp dword [0x41ae94], 0
je 0x408b52
push 0x401424
call dword [sym.imp.msvcrt.dll_printf]
jmp 0x408b67
push 0x402644
push 0x216
jmp 0x408333
push 0x401428
push 2
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fprintf]
pop ecx
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
cmp dword [0x41af00], 0
pop ecx
je 0x408b9d
push 0x40143c
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
cmp dword [0x41aeac], 0
je 0x408c7e
mov eax, dword [0x41ace4]
push 0x64
pop esi
push dword [0x41acf4]
mul esi
push dword [0x41acf0]
mov ecx, eax
mov eax, dword [0x41ace0]
mul esi
add ecx, edx
push ecx
push eax
call fcn.00418210
sub esi, eax
push esi
push dword [0x41ad2c]
push dword [0x41ad28]
push dword [0x41ad24]
push dword [0x41ad20]
push 0x401468
call dword [sym.imp.msvcrt.dll_printf]
push 1
call fcn.004181a9
add esp, 0x1c
push eax
call dword [sym.imp.msvcrt.dll_fflush]
cmp dword [0x41aefc], 0
pop ecx
jne 0x408c18
mov ebx, 0x4012f4
push dword [0x41ace4]
push dword [0x41ace0]
push ebx
push 0x4014b0
call dword [sym.imp.msvcrt.dll_printf]
push 1
call fcn.004181a9
add esp, 0x14
push eax
call dword [sym.imp.msvcrt.dll_fflush]
cmp dword [0x41aec4], 0
pop ecx
jne 0x408ca7
mov eax, dword [0x41ace4]
mov edx, dword [0x41ad44]
cmp eax, edx
jb 0x408ca7
mov esi, dword [0x41ad40]
mov ecx, dword [0x41ace0]
ja 0x408c6c
cmp ecx, esi
jbe 0x408ca7
push 0x4014e4
push edx
sub ecx, esi
push esi
sbb eax, edx
push eax
push ecx
jmp 0x40878a
cmp dword [0x41aefc], 0
jne 0x408c8c
mov ebx, 0x4012f4
push dword [0x41ace4]
push dword [0x41ace0]
push ebx
push 0x4014e8
call dword [sym.imp.msvcrt.dll_printf]
add esp, 0x10
call fcn.00408ea1
cmp dword [0x41aed8], 0
je 0x408cd1
push 0x401510
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
cmp dword [0x41af1c], 0
je 0x408cf6
push 0x4015f0
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
cmp dword [0x41af2c], 0
je 0x408d5b
cmp dword [0x41af34], 0
jne 0x408d23
cmp dword [0x41af38], 0
jne 0x408d23
cmp dword [0x41af3c], 0
jne 0x408d23
cmp dword [0x41aeac], 0
je 0x408d4b
push dword [0x419d7c]
push 0x4018e0
call dword [sym.imp.msvcrt.dll_printf]
cmp dword [0x41af38], 0
pop ecx
pop ecx
je 0x408d4b
push 0x401928
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
cmp dword [0x41af04], 0
je 0x408d89
cmp dword [0x41af00], 0
jne 0x408d89
push 0x401978
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
cmp dword [0x41aefc], 0
je 0x408d9e
push 0x401388
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 0x4019c0
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
cmp dword [0x41aec8], 0
pop ecx
je 0x408dc8
call fcn.0040ebc7
push 0
call dword [sym.imp.msvcrt.dll_exit]
push 0x401178
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
push 1
call fcn.004181a9
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
push 1
jmp 0x408dca