Function at 0x40c300
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x42e4c2
push eax
mov eax, 0x13a4
mov dword fs:[0], esp
call fcn.00415c80
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00425101
mov edi, eax
xor ebx, ebx
cmp edi, ebx
mov dword [esp + 0x18], edi
je 0x40ccbf
push ebx
mov ecx, esi
call fcn.004096a0
mov eax, dword [edi + 0x3bc]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, ebx
jne 0x40c36d
mov ecx, dword [esi + 0xc4]
push ebx
push ebx
push 0x1009
push ecx
call ebp
mov edx, dword [0x43c17c]
mov dword [esp + 0x10], edx
push 0x43b428
lea ecx, [esp + 0x14]
mov dword [esp + 0x13c0], ebx
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x1c], 7
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebx
mov eax, dword [ecx - 8]
push eax
lea ecx, [esp + 0x14]
call fcn.004283c6
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x2c], 0xf000
mov dword [esp + 0x28], 0x1000
cmp dword [edi + 0x3bc], ebx
jne 0x40c3f8
mov eax, dword [esi + 0xc4]
lea edx, [esp + 0x1c]
push edx
push ebx
push 0x1007
push eax
call ebp
mov ecx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push ecx
call ebp
mov edx, dword [esi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
push edx
call edi
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
call ebx
push 0x43bbf4
lea ecx, [esp + 0x14]
call fcn.004282ae
mov edx, dword [esi + 0x94]
lea ecx, [esp + 0x10]
inc edx
mov eax, edx
mov dword [esi + 0x94], edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004283c6
mov edx, dword [esi + 0xc4]
lea ecx, [esp + 0x1c]
push ecx
push 0
push 0x1007
push edx
mov dword [esp + 0x40], eax
call ebp
push 1
push eax
mov eax, dword [esi + 0xc4]
push 0x1013
push eax
call ebp
mov ecx, dword [esi + 0x1c]
push ecx
call edi
push 0
call ebx
mov ecx, esi
call fcn.004096d0
test eax, eax
jne 0x40c48c
push 1
mov ecx, esi
call fcn.004096a0
jmp 0x40ccab
mov edx, dword [0x43c17c]
mov dword [esp + 0x14], edx
lea eax, [esp + 0x50]
push 0x104
push eax
mov byte [esp + 0x13c4], 1
call fcn.0040e6b0
add esp, 8
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x18]
call fcn.004282ae
push 0x43b1fc
lea ecx, [esp + 0x18]
call fcn.00428372
lea edx, [esp + 0x14]
push edx
call fcn.0040e730
add esp, 4
test eax, eax
jne 0x40c545
mov eax, dword [0x43c17c]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], eax
push 0x69
lea ecx, [esp + 0x4c]
mov byte [esp + 0x13c0], 3
call fcn.0042845d
push 0x93
lea ecx, [esp + 0x50]
call fcn.0042845d
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
push 0x10
push eax
push ecx
mov ecx, esi
call fcn.004266d5
lea ecx, [esp + 0x48]
mov byte [esp + 0x13bc], 2
call fcn.004281b5
lea ecx, [esp + 0x4c]
mov byte [esp + 0x13bc], 1
call fcn.004281b5
jmp 0x40cc9a
push 0
call ebx
push 0xfa
call ebx
push 0
call ebx
lea edx, [esp + 0x50]
push 0x104
push edx
call fcn.0040e6b0
add esp, 8
lea eax, [esp + 0x50]
push 0x43b1fc
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0x50]
push ecx
call fcn.0040e6f0
add esp, 4
test eax, eax
jne 0x40c5ec
mov eax, dword [0x43c17c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x44], eax
push 0x69
lea ecx, [esp + 0x48]
mov byte [esp + 0x13c0], 5
call fcn.0042845d
push 0x6d
lea ecx, [esp + 0x1c]
call fcn.0042845d
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x18]
push 0x10
push edx
push eax
mov ecx, esi
call fcn.004266d5
lea ecx, [esp + 0x44]
mov byte [esp + 0x13bc], 4
call fcn.004281b5
lea ecx, [esp + 0x18]
mov byte [esp + 0x13bc], 1
call fcn.004281b5
jmp 0x40cc9a
lea ecx, [esp + 0x50]
push 0x104
push ecx
call fcn.0040e6b0
add esp, 8
lea edx, [esp + 0x50]
push 0x43bbe4
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x3c4]
test eax, eax
je 0x40c70e
push 0x43b3dc
lea ecx, [esp + 0x14]
call fcn.004282ae
mov edx, dword [esi + 0x94]
lea ecx, [esp + 0x10]
inc edx
mov dword [esi + 0x94], edx
mov eax, edx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x20], eax
mov eax, dword [edx - 8]
push eax
call fcn.004283c6
mov ecx, dword [esi + 0xc4]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push 0
push 0x1007
push ecx
call ebp
mov edx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push edx
call ebp
mov eax, dword [esi + 0x1c]
push eax
call edi
push 0
call ebx
mov ecx, esi
call fcn.0040ab00
test eax, eax
jne 0x40c851
push 0x43b3bc
lea ecx, [esp + 0x14]
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov ecx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x38], 1
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004283c6
lea edx, [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xc4]
push edx
push 0
push 0x1007
push eax
call ebp
mov ecx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push ecx
call ebp
mov ecx, esi
call fcn.00409790
jmp 0x40cc9a
push 0x43b3a4
lea ecx, [esp + 0x14]
call fcn.004282ae
mov edx, dword [esi + 0x94]
lea ecx, [esp + 0x10]
inc edx
mov dword [esi + 0x94], edx
mov eax, edx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x20], eax
mov eax, dword [edx - 8]
push eax
call fcn.004283c6
mov ecx, dword [esi + 0xc4]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push 0
push 0x1007
push ecx
call ebp
mov edx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push edx
call ebp
mov eax, dword [esi + 0x1c]
push eax
call edi
push 0
call ebx
push 0x43b3dc
lea ecx, [esp + 0x14]
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov ecx, dword [esp + 0x10]
inc eax
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004283c6
lea edx, [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xc4]
push edx
push 0
push 0x1007
push eax
call ebp
mov ecx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push ecx
call ebp
mov edx, dword [esi + 0x1c]
push edx
call edi
push 0
call ebx
mov ecx, esi
call fcn.0040ab00
test eax, eax
jne 0x40c851
push 0x43b3bc
lea ecx, [esp + 0x14]
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov dword [esp + 0x38], 1
inc eax
lea ecx, [esp + 0x10]
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004283c6
mov edx, dword [esi + 0xc4]
lea ecx, [esp + 0x1c]
push ecx
push 0
push 0x1007
push edx
mov dword [esp + 0x40], eax
call ebp
push 1
push eax
mov eax, dword [esi + 0xc4]
push 0x1013
push eax
call ebp
mov ecx, esi
call fcn.00409790
jmp 0x40cc9a
mov ecx, 0x498
xor eax, eax
lea edi, [esp + 0x154]
lea edx, [esp + 0x12ac]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x1c]
push 0x104
push edx
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x13b8], esi
call fcn.0040e6b0
lea eax, [esp + 0x11b0]
push 0x104
push eax
call fcn.0040e6b0
add esp, 0x10
mov ecx, esi
call fcn.0040cd70
test eax, eax
jne 0x40c91d
push 0x43b388
lea ecx, [esp + 0x14]
call fcn.004282ae
mov edx, dword [esi + 0x94]
mov ecx, dword [esp + 0x10]
inc edx
mov dword [esp + 0x38], 1
mov eax, edx
mov dword [esi + 0x94], edx
mov dword [esp + 0x20], eax
mov eax, dword [ecx - 8]
push eax
lea ecx, [esp + 0x14]
call fcn.004283c6
lea edx, [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xc4]
push edx
push 0
push 0x1007
push eax
call ebp
mov ecx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push ecx
call ebp
push 1
mov ecx, esi
call fcn.004096a0
mov ecx, esi
call fcn.00409790
jmp 0x40cc9a
mov ecx, esi
call fcn.0040a800
test eax, eax
jne 0x40c932
push 0x43b368
jmp 0x40cb97
mov ecx, esi
call fcn.0040a980
test eax, eax
jne 0x40c9a2
push 0x43b348
lea ecx, [esp + 0x14]
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov dword [esp + 0x38], 1
inc eax
lea ecx, [esp + 0x10]
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004283c6
mov edx, dword [esi + 0xc4]
lea ecx, [esp + 0x1c]
push ecx
push 0
push 0x1007
push edx
mov dword [esp + 0x40], eax
call ebp
push 1
push eax
mov eax, dword [esi + 0xc4]
push 0x1013
push eax
jmp 0x40c906
lea ecx, [esp + 0x50]
push 0x104
push ecx
call fcn.0040e6b0
add esp, 8
lea edx, [esp + 0x50]
push 0x43b230
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [esp + 0x50]
lea ecx, [esp + 0x160]
push eax
push ecx
call edi
lea edx, [esp + 0x50]
push 0x104
push edx
mov dword [esp + 0x11a8], 1
call fcn.0040e6b0
add esp, 8
lea eax, [esp + 0x50]
push 0x43b2f0
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0x50]
lea edx, [esp + 0x264]
push ecx
push edx
call edi
lea eax, [esp + 0x50]
push 0x104
push eax
mov dword [esp + 0x11a8], 2
call fcn.0040e6b0
add esp, 8
lea ecx, [esp + 0x50]
push 0x43b1e0
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [esp + 0x50]
lea eax, [esp + 0x368]
push edx
push eax
call edi
lea ecx, [esp + 0x50]
push 0x104
push ecx
mov dword [esp + 0x11a8], 3
call fcn.0040e6b0
add esp, 8
lea edx, [esp + 0x50]
push 0x43b1d4
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x50]
lea ecx, [esp + 0x46c]
push eax
push ecx
call edi
push 0x43b2d4
lea ecx, [esp + 0x14]
mov dword [esp + 0x11a4], 4
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov edx, dword [esp + 0x10]
inc eax
lea ecx, [esp + 0x10]
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [edx - 8]
push eax
call fcn.004283c6
mov ecx, dword [esi + 0xc4]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push 0
push 0x1007
push ecx
call ebp
mov edx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push edx
call ebp
mov eax, dword [esi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
push eax
call edi
push 0
call ebx
lea ecx, [esp + 0x154]
push ecx
call fcn.0040de70
add esp, 4
test eax, eax
jne 0x40cb1d
push 0x43b2b4
jmp 0x40cb97
push 0x43bbcc
lea ecx, [esp + 0x14]
call fcn.004282ae
mov edx, dword [esi + 0x94]
lea ecx, [esp + 0x10]
inc edx
mov eax, edx
mov dword [esi + 0x94], edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004283c6
mov edx, dword [esi + 0xc4]
lea ecx, [esp + 0x1c]
push ecx
push 0
push 0x1007
push edx
mov dword [esp + 0x40], eax
call ebp
push 1
push eax
mov eax, dword [esi + 0xc4]
push 0x1013
push eax
call ebp
mov ecx, dword [esi + 0x1c]
push ecx
call edi
push 0
call ebx
push 0
push esi
call fcn.0040d5a0
add esp, 8
test eax, eax
jne 0x40cbf7
push 0x43bbac
lea ecx, [esp + 0x14]
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov edx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x38], 1
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [edx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004283c6
mov ecx, dword [esi + 0xc4]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push 0
push 0x1007
push ecx
call ebp
mov edx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push edx
jmp 0x40c906
push 1
mov ecx, esi
call fcn.004096a0
mov eax, dword [esp + 0x18]
push 0x104
add eax, 0x4e0
push eax
mov dword [esp + 0x20], eax
call fcn.0040e6b0
mov ecx, dword [esp + 0x20]
add esp, 8
push 0x43bbe4
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [esp + 0x18]
push edx
call fcn.0040e6f0
add esp, 4
test eax, eax
jne 0x40ccc6
push fcn.0043bb88
lea ecx, [esp + 0x14]
call fcn.004282ae
mov eax, dword [esi + 0x94]
lea ecx, [esp + 0x10]
inc eax
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004283c6
mov edx, dword [esi + 0xc4]
lea ecx, [esp + 0x1c]
push ecx
push 0
push 0x1007
push edx
mov dword [esp + 0x40], eax
call ebp
push 1
push eax
mov eax, dword [esi + 0xc4]
push 0x1013
push eax
call ebp
lea ecx, [esp + 0x14]
mov byte [esp + 0x13bc], 0
call fcn.004281b5
lea ecx, [esp + 0x10]
mov dword [esp + 0x13bc], 0xffffffff
call fcn.004281b5
xor eax, eax
jmp 0x40cd54
push 0x43bb6c
lea ecx, [esp + 0x14]
call fcn.004282ae
mov eax, dword [esi + 0x94]
mov ecx, dword [esp + 0x10]
inc eax
mov dword [esi + 0x94], eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004283c6
lea edx, [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xc4]
push edx
push 0
push 0x1007
push eax
call ebp
mov ecx, dword [esi + 0xc4]
push 1
push eax
push 0x1013
push ecx
call ebp
mov edx, dword [esi + 0x1c]
push edx
call edi
push 0
call ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0x13bc], 0
call fcn.004281b5
lea ecx, [esp + 0x10]
mov dword [esp + 0x13bc], 0xffffffff
call fcn.004281b5
mov eax, 1
mov ecx, dword [esp + 0x13b4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x13b0
ret