Function at 0x40eb0d
Capabilities:
Check if file exists
Delete file
Print debug messages
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x465e9f
mov eax, dword fs:[0]
push eax
sub esp, 0x848
mov eax, dword [0x487590]
xor eax, esp
mov dword [esp + 0x840], eax
push ebx
push esi
push edi
mov eax, dword [0x487590]
xor eax, esp
push eax
lea eax, [esp + 0x858]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edx, edx
xor ebx, ebx
push ebx
inc edx
mov ecx, esi
mov dword [esp + 0x2c], esi
call fcn.0041d44a
pop ecx
mov edx, eax
lea ecx, [esp + 0x14]
call fcn.0040384f
mov dword [esp + 0x860], ebx
call fcn.00402e86
lea eax, [esp + 0x14]
push eax
call fcn.00401aa0
push dword [esp + 0x14]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x40eba7
xor edx, edx
inc edx
mov ecx, esi
call fcn.0041d761
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
jmp 0x40ed04
push ebx
lea ecx, [esp + 0x18]
call fcn.00412938
push 6
pop ecx
xor eax, eax
mov dword [esp + 0x2c], ebx
lea edi, [esp + 0x30]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x14
pop eax
mov word [esp + 0x3c], ax
mov eax, dword [esp + 0x14]
push 3
mov dword [esp + 0x38], eax
pop edi
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x34], edi
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov ecx, eax
xor eax, eax
test ecx, ecx
sete al
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x40ecf4
push section..data
lea ecx, [esp + 0x1c]
call fcn.00401314
mov byte [esp + 0x860], 1
push dword [esp + 0x14]
lea eax, [esp + 0x1c]
push 0x47c678
push eax
call fcn.0040ae2c
mov ebx, dword [esp + 0x24]
pop ecx
pop ecx
mov eax, esp
push ecx
mov dword [eax], 0x47b584
mov eax, esp
mov dword [eax], ebx
call fcn.004127e1
pop ecx
pop ecx
sub eax, edi
je 0x40ed4a
dec eax
je 0x40ed30
dec eax
jne 0x40ec5e
mov dword [esp + 0x1c], 1
mov esi, str.hwang
lea edi, [esp + 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7f2
lea eax, [esp + 0x5e]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.00438850
add esp, 0xc
lea eax, [esp + 0x58]
push dword [esp + 0x14]
push str.Delete__s_failed__r_n
push eax
call fcn.00437dbf
add esp, 0xc
lea eax, [esp + 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov esi, str.hwang
lea edi, [esp + 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7f2
lea eax, [esp + 0x5e]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.00438850
add esp, 0xc
lea eax, [esp + 0x58]
push dword [esp + 0x20]
push str.SHFileOperation_error_code_:__x_r_n
push eax
call fcn.00437dbf
add esp, 0xc
lea eax, [esp + 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebx - 0x10]
call fcn.00401551
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
mov edx, eax
mov ecx, esi
call fcn.0041d761
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.00401551
xor eax, eax
inc eax
mov ecx, dword [esp + 0x858]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x840]
xor ecx, esp
call fcn.00437bed
mov esp, ebp
pop ebp
ret
push esi
call fcn.0040eb0d
pop ecx
mov edx, eax
mov ecx, esi
call fcn.0041d761
lea ecx, [ebx - 0x10]
call fcn.00401551
jmp 0x40ecfd
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]