Function at 0x41eb20
Capabilities:
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x43c539
mov eax, dword fs:[0]
push eax
sub esp, 0x1f8
mov eax, dword [0x44e018]
xor eax, esp
mov dword [esp + 0x1f0], eax
push ebx
push esi
push edi
mov eax, dword [0x44e018]
xor eax, esp
push eax
lea eax, [esp + 0x208]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x18], 8
lea edi, [esi + 4]
mov dword [esp + 0x14], esi
mov dword [edi + 0x10], 0
jb 0x41eb7a
mov eax, dword [edi]
jmp 0x41eb7c
mov eax, edi
xor ecx, ecx
mov ebx, esi
mov word [eax], cx
call fcn.0041dae0
cmp eax, 1
jne 0x41f18e
lea edx, [esp + 0xc0]
push edx
call fcn.0041f1c0
xor ebx, ebx
mov dword [esp + 0x210], ebx
mov eax, 7
xor ecx, ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ebx
mov word [esp + 0x50], cx
xor edx, edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], ebx
mov word [esp + 0x6c], dx
mov byte [esp + 0x210], 2
mov eax, dword [esi + 0x94]
cmp eax, ebx
je 0x41ebfb
lea ecx, [esp + 0x6c]
push ecx
push eax
call fcn.00437c80
push ebx
lea edx, [esp + 0x78]
lea ecx, [esp + 0x5c]
call fcn.00438000
add esp, 0xc
cmp dword [esp + 0xd0], ebx
je 0x41f064
push ebx
lea edx, [esp + 0xc4]
push edx
or eax, 0xffffffff
mov ecx, edi
call fcn.00405500
mov eax, dword [esi + 0x14]
dec eax
cmp dword [edi + 0x10], eax
ja 0x41ec2f
push str.invalid_string_position
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xout_of_range_char_const__]
cmp dword [edi + 0x14], 8
jb 0x41ec39
mov ecx, dword [edi]
jmp 0x41ec3b
mov ecx, edi
cmp word [ecx + eax*2], 0x5c
je 0x41ec50
push 1
mov eax, 0x440568
mov ecx, edi
call fcn.0040d100
cmp dword [esi + 0x48], ebx
je 0x41ecf6
cmp dword [esi + 0x94], ebx
je 0x41ecf6
cmp dword [esi + 0x5c], ebx
je 0x41ecad
lea eax, [esp + 0x88]
lea ebx, [esi + 0x4c]
push eax
call fcn.00420cf0
add esp, 4
push 0
push eax
or eax, 0xffffffff
mov esi, edi
mov byte [esp + 0x218], 3
call fcn.0040dff0
lea esi, [esp + 0x88]
mov byte [esp + 0x210], 2
call fcn.00419390
mov ecx, edi
call fcn.004381b0
push str..log
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x90]
push edx
call fcn.004209a0
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
mov esi, edi
mov byte [esp + 0x218], 4
call fcn.0040dff0
lea esi, [esp + 0x88]
mov byte [esp + 0x210], 2
call fcn.00419390
mov esi, dword [esp + 0x14]
jmp 0x41ed04
push 0xe
mov eax, 0x440930
mov ecx, edi
call fcn.0040d100
cmp dword [esi + 0x78], 0
je 0x41f064
cmp dword [esi + 0x94], 0
je 0x41f064
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x50]
cmp edx, 8
jb 0x41ed2e
mov dword [esp + 0x18], eax
jmp 0x41ed36
lea ecx, [esp + 0x50]
mov dword [esp + 0x18], ecx
mov ecx, eax
cmp edx, 8
jae 0x41ed41
lea ecx, [esp + 0x50]
mov ebx, dword [esp + 0x60]
lea ebx, [ecx + ebx*2]
cmp edx, 8
jae 0x41ed51
lea eax, [esp + 0x50]
cmp eax, ebx
je 0x41ed6e
mov edx, dword [sym.imp.MSVCR100.dll_tolower]
mov ecx, dword [esp + 0x18]
push edx
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00420da0
add esp, 0xc
cmp dword [esi + 0x48], 0
je 0x41ed7a
cmp dword [esi + 0x5c], 0
jne 0x41ed94
mov esi, str.es2controller
lea ecx, [esp + 0x50]
call fcn.004027a0
mov esi, dword [esp + 0x14]
test al, al
je 0x41f064
xor eax, eax
mov dword [esp + 0x9c], 7
mov dword [esp + 0x98], 0
mov word [esp + 0x88], ax
lea ecx, [esp + 0xa4]
push edi
lea ebx, [esi + 0x4c]
push ecx
mov byte [esp + 0x218], 5
call fcn.00415a20
add esp, 8
mov edx, eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x210], 6
call fcn.00437ed0
lea esi, [esp + 0xa4]
mov edi, eax
mov byte [esp + 0x210], 5
call fcn.00419390
test edi, edi
je 0x41ef6a
lea edx, [esp + 0x20]
push edx
call fcn.00402170
push 1
sub esp, 0x14
mov byte [esp + 0x228], 7
mov esi, esp
mov dword [esp + 0x30], esp
call fcn.00408720
mov eax, dword [esp + 0x2c]
add eax, 0x68
push eax
lea ecx, [esp + 0x3c]
call fcn.00408770
xor edi, edi
add esp, 0x1c
xor ebx, ebx
cmp dword [esp + 0x30], edi
jbe 0x41ef47
jmp 0x41ee52
xor edi, edi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
lea eax, [esp + 0xa8]
mov esi, 7
xor edx, edx
push eax
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00405500
mov eax, ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x22c], 8
call fcn.0041fe50
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push edi
xor edx, edx
push eax
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00405500
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x24c], 7
call fcn.0041e0a0
add esp, 0x3c
cmp dword [esp + 0xb4], edi
jbe 0x41ef1f
mov edi, edi
push edi
lea eax, [esp + 0x48]
lea ecx, [esp + 0xa8]
call fcn.00402510
mov esi, eax
lea eax, [esp + 0x3c]
call fcn.004368e0
mov ecx, dword [eax]
test ecx, ecx
je 0x41eef4
mov ecx, dword [ecx]
mov eax, dword [eax + 8]
mov edx, dword [ecx + 8]
cmp edx, eax
ja 0x41ef00
sub eax, edx
mov ecx, dword [ecx + 4]
mov eax, dword [ecx + eax*4]
cmp dword [eax + 0x14], 8
jb 0x41ef0e
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
inc edi
cmp edi, dword [esp + 0xb4]
jb 0x41eed0
lea esi, [esp + 0xa4]
call fcn.0040b700
mov edx, dword [esp + 0xa4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
inc ebx
add esp, 4
cmp ebx, dword [esp + 0x30]
jb 0x41ee50
lea esi, [esp + 0x20]
mov byte [esp + 0x210], 5
call fcn.0040b700
mov eax, dword [esp + 0x20]
mov edi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
push eax
call edi
add esp, 4
jmp 0x41ef70
mov edi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
push 0x11c
lea ecx, [esp + 0xe0]
push 0
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [esp + 0xdc]
push edx
mov dword [esp + 0xe0], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea eax, [esp + 0xa4]
call fcn.0041e5c0
mov esi, 8
mov byte [esp + 0x210], 9
cmp dword [eax + 0x14], esi
jb 0x41efc0
mov eax, dword [eax]
movzx ecx, word [esp + 0x1f2]
movzx edx, word [esp + 0x1f0]
push ecx
mov ecx, dword [esp + 0xec]
push edx
mov edx, dword [esp + 0xec]
push ecx
push eax
mov eax, dword [esp + 0xf0]
push edx
push eax
push str.Environment_OSVER:_d._d__s_Build:_d_SP:_d._d
push str.DbgLog.cpp
push 0x4519f8
mov ecx, 0x450888
call dword [sym.imp.MSVCR100.dll_public:_char_const____thiscall_type_info::_name_internal_method_struct___type_info_node__const]
push eax
mov edx, 0x1b9
mov ecx, 5
mov eax, 0x451ef0
call fcn.0041f340
add esp, 0x24
mov byte [esp + 0x210], 5
cmp dword [esp + 0xb8], esi
jb 0x41f03b
mov ecx, dword [esp + 0xa4]
push ecx
call edi
add esp, 4
call fcn.0041e670
mov byte [esp + 0x210], 2
cmp dword [esp + 0x9c], esi
jb 0x41f05e
mov edx, dword [esp + 0x88]
push edx
call edi
add esp, 4
mov esi, dword [esp + 0x14]
jmp 0x41f06a
mov edi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
cmp dword [esp + 0x7c], 0
je 0x41f11f
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [esp + 0x38], esp
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
lea edx, [esp + 0x8c]
mov word [ecx], ax
push edx
or eax, 0xffffffff
call fcn.00405500
lea ecx, [esp + 0xa4]
call fcn.0041e4a0
mov ebx, 8
mov byte [esp + 0x210], 0xa
cmp dword [eax + 0x14], ebx
jb 0x41f0c2
mov eax, dword [eax]
mov ecx, dword [esp + 0x6c]
cmp dword [esp + 0x80], ebx
jae 0x41f0d3
lea ecx, [esp + 0x6c]
push eax
push ecx
push str.LoadModule_Path:__s__Ver:__s_
push str.DbgLog.cpp
push 0x4519f8
mov ecx, 0x450888
call dword [sym.imp.MSVCR100.dll_public:_char_const____thiscall_type_info::_name_internal_method_struct___type_info_node__const]
push eax
mov edx, 0x1c4
mov ecx, 5
mov eax, 0x451ef0
call fcn.0041f340
add esp, 0x14
cmp dword [esp + 0x9c], ebx
jb 0x41f124
mov eax, dword [esp + 0x88]
push eax
call edi
add esp, 4
jmp 0x41f124
mov ebx, 8
cmp dword [esp + 0x80], ebx
jb 0x41f137
mov ecx, dword [esp + 0x6c]
push ecx
call edi
add esp, 4
xor edx, edx
mov dword [esp + 0x80], 7
mov dword [esp + 0x7c], 0
mov word [esp + 0x6c], dx
cmp dword [esp + 0x64], ebx
jb 0x41f161
mov eax, dword [esp + 0x50]
push eax
call edi
add esp, 4
xor ecx, ecx
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], 0
mov word [esp + 0x50], cx
cmp dword [esp + 0xd4], ebx
jb 0x41f18e
mov edx, dword [esp + 0xc0]
push edx
call edi
add esp, 4
xor eax, eax
cmp dword [esi + 0x14], eax
setne al
mov ecx, dword [esp + 0x208]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1f0]
xor ecx, esp
call fcn.00438de6
mov esp, ebp
pop ebp
ret