Function at 0x439205
Capabilities:
Delete file

Disassembly:
push 0x304
mov eax, 0x5dabec
call fcn.00592017
mov edi, ecx
mov dword [ebp - 0x2f8], edi
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x310]
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp + 0x10]
push ebx
mov dword [ebp - 0x300], eax
call fcn.00404ba6
mov dword [ebp - 4], ebx
mov ecx, esi
cmp dword [esi + 0x14], 0x10
jb 0x43924c
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
lea eax, [ebp - 0x310]
push eax
call fcn.004368f0
pop ecx
lea ecx, [ebp - 0x310]
call fcn.004056d7
test al, al
jne 0x439287
push 0xdf
push str.BeautifyStartMenu::UpdateStartMenuConfig
push str.__s__d___json_parse_error_
call fcn.0040a649
add esp, 0xc
jmp 0x43946d
push 0x630998
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x2f4], ebx
call fcn.00405401
lea edx, [ebp - 0x2f4]
mov ecx, eax
call fcn.00436e83
lea ecx, [ebp - 0x230]
call fcn.004cd264
push 0x6308a0
mov edx, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x260]
call fcn.0041151c
pop ecx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 3
call fcn.0040b67b
cmp dword [ebp - 0x2f4], 1
jne 0x4392e9
lea eax, [edi + 0x54]
jmp 0x4392f5
cmp dword [ebp - 0x2f4], 2
jne 0x439301
lea eax, [edi + 0x3c]
push eax
lea ecx, [ebp - 0x260]
call fcn.0041321d
lea ecx, [ebp - 0x2f0]
call fcn.00406b04
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x248]
push esi
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
call fcn.00404267
cmp dword [ebp + 0x14], 2
mov byte [ebp - 4], 5
jne 0x439482
push 0x208
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.005a88e0
mov eax, dword [ebp - 0x2fc]
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x439359
mov eax, dword [eax]
push ebx
lea ecx, [ebp - 0x218]
push ecx
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x18
lea eax, [ebp - 0x218]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0x230]
call fcn.00430a1c
add esp, 0x18
mov edx, dword [ebp - 0x300]
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004166a1
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.00404812
push str.path
lea ecx, [ebp - 0x310]
call fcn.00405401
mov ecx, dword [ebp - 0x300]
mov edx, eax
call fcn.00436c5c
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.00406b1f
push eax
lea ecx, [ebp - 0x248]
call fcn.00409145
lea ecx, [ebp - 0x230]
call fcn.00404812
cmp dword [ebp - 0x234], 0x10
lea edx, [ebp - 0x248]
push dword [ebp - 0x238]
cmovae edx, dword [ebp - 0x248]
lea ecx, [ebp - 0x260]
cmp dword [ebp - 0x24c], 8
cmovae ecx, dword [ebp - 0x260]
call fcn.0041e2e8
pop ecx
lea eax, [ebp - 0x248]
lea esi, [edi + 0x6c]
push eax
mov ecx, esi
call fcn.00404698
push esi
lea ecx, [edi + 0x84]
call fcn.0043f122
lea ecx, [ebp - 0x248]
call fcn.00404812
lea ecx, [ebp - 0x2f0]
call fcn.004065e4
lea ecx, [ebp - 0x260]
call fcn.0040b67b
mov bl, 1
lea ecx, [ebp - 0x310]
call fcn.00404dbc
mov al, bl
call fcn.00591fc1
ret 0x10
cmp dword [ebp + 0x14], 3
jne 0x4393f9
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0xf
pop esi
lea eax, [ebp - 0x230]
mov dword [ebp - 0x220], ebx
push eax
lea ecx, [edi + 0x6c]
mov dword [ebp - 0x21c], esi
mov byte [ebp - 0x230], bl
call fcn.00409145
lea ecx, [ebp - 0x230]
call fcn.00404812
mov ecx, dword [ebp - 0x2f8]
lea edi, [ebp - 0x2d0]
xor eax, eax
add ecx, 0x84
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x2d0]
push eax
mov dword [ebp - 0x2b0], ebx
mov dword [ebp - 0x2ac], esi
mov byte [ebp - 0x2c0], bl
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x294], esi
mov byte [ebp - 0x2a8], bl
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x27c], esi
mov byte [ebp - 0x290], bl
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], esi
mov byte [ebp - 0x278], bl
call fcn.0043891b
lea ecx, [ebp - 0x2d0]
call fcn.004387ea
jmp 0x43944a