Function at 0x431070
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e5216
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x540
mov eax, dword [0x56f734]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
movzx eax, byte [0x5718a0]
test eax, eax
jne 0x4313a4
mov dword [ebp - 4], 0
mov dword [ebp - 0x534], 0
lea ecx, [ebp - 0x534]
push ecx
push str.DisableLog
push 0x50660c
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00409ef0
test eax, eax
je 0x4310f1
cmp dword [ebp - 0x534], 1
jne 0x4310f1
mov byte [0x56b400], 0
movzx edx, byte [0x56b400]
test edx, edx
je 0x431279
mov dword [ebp - 0x538], 0x104
xor eax, eax
mov word [ebp - 0x21c], ax
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
mov eax, dword [ebp - 0x538]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jbe 0x431272
mov dword [ebp - 0x528], 0xffffffff
mov dword [ebp - 0x530], 0
mov dword [ebp - 0x52c], 0
mov ecx, dword [ebp - 0x528]
add ecx, 1
mov dword [ebp - 0x528], ecx
mov edx, dword [ebp - 0x528]
push edx
lea eax, [ebp - 0x21c]
push eax
push 0x506634
push 0x104
push 0x571698
call dword [sym.imp.MSVCR120.dll_swprintf_s]
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push 0x571698
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0xffffffff
je 0x4311dd
mov ecx, dword [ebp - 0x530]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x52c], 1
jmp 0x4311e7
mov dword [ebp - 0x52c], 0
cmp dword [ebp - 0x528], 4
jge 0x4311fd
cmp dword [ebp - 0x52c], 0
jne 0x431163
mov edx, dword [ebp - 0x528]
and edx, 0x80000003
jns 0x431210
dec edx
or edx, 0xfffffffc
inc edx
mov dword [ebp - 0x528], edx
mov eax, dword [ebp - 0x528]
add eax, 1
push eax
lea ecx, [ebp - 0x21c]
push ecx
push 0x506654
push 0x104
push 0x571698
call dword [sym.imp.MSVCR120.dll_swprintf_s]
add esp, 0x14
push 0x571698
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebp - 0x528]
push edx
lea eax, [ebp - 0x21c]
push eax
push str._sPCULog_d.txt
push 0x104
push 0x571698
call dword [sym.imp.MSVCR120.dll_swprintf_s]
add esp, 0x14
jmp 0x431279
mov byte [0x56b400], 0
movzx ecx, byte [0x56b400]
test ecx, ecx
je 0x431385
call fcn.004314f0
push str._r_n_r_n_New_Log__r_n_r_n
lea ecx, [ebp - 0x550]
call fcn.00414370
mov byte [ebp - 4], 1
push 0x80
lea edx, [ebp - 0x524]
push edx
call fcn.00431840
add esp, 8
lea ecx, [ebp - 0x544]
call fcn.004142b0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x524]
push eax
push str.Start_time:__s_r_n_r_n
lea ecx, [ebp - 0x544]
push ecx
call fcn.00414ba0
add esp, 0xc
lea edx, [ebp - 0x544]
push edx
lea ecx, [ebp - 0x550]
call fcn.004146e0
xor eax, eax
mov word [ebp - 0x424], ax
push 0x206
push 0
lea ecx, [ebp - 0x422]
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
push 0x104
lea edx, [ebp - 0x424]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x424]
push eax
push str.Module:__s_r_n
lea ecx, [ebp - 0x544]
push ecx
call fcn.00414ba0
add esp, 0xc
lea edx, [ebp - 0x544]
push edx
lea ecx, [ebp - 0x550]
call fcn.004146e0
push 0
lea ecx, [ebp - 0x550]
call fcn.004147c0
push eax
call fcn.00431640
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x544]
call fcn.004142e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x550]
call fcn.004142e0
jmp 0x43138d
mov dword [ebp - 4], 0xffffffff
jmp 0x43139d
mov byte [0x5718a0], 1
mov al, byte [0x5718a0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004df9ac
mov esp, ebp
pop ebp
ret