Function at 0x455690
Capabilities:
Delete file
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5615aa
mov eax, dword fs:[0]
push eax
mov eax, 0x10524
call fcn.00543120
mov eax, dword [0x5b3680]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [0x5b9c8c]
test esi, esi
jne 0x4556ff
push 0x38
call fcn.00529b2d
add esp, 4
mov dword [ebp - 0x10404], eax
mov dword [ebp - 4], esi
test eax, eax
je 0x4556f0
mov ecx, eax
call fcn.00439960
mov esi, eax
jmp 0x4556f2
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [0x5b9c8c], esi
push 0
lea ecx, [ebp - 0x103f0]
call fcn.004fdb00
mov dword [ebp - 4], 1
lea eax, [ebp - 0x10228]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor eax, eax
mov word [ebp - 0x1021a], ax
mov dword [ebp - 0x10224], eax
mov dword [ebp - 0x10228], eax
lea eax, [ebp - 0x10408]
movdqu xmm0, xmmword [ebp - 0x10228]
push eax
lea eax, [ebp - 0x10238]
push eax
movdqu xmmword [ebp - 0x10238], xmm0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToSystemTime]
test eax, eax
je 0x45577e
movzx eax, word [ebp - 0x1022a]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
divsd xmm1, qword [0x593278]
addsd xmm1, qword [ebp - 0x10408]
jmp 0x455786
movsd xmm1, qword [ebp - 0x10408]
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x455a3d
cmp ecx, 0xffffffff
je 0x455a3d
cmp byte [ecx + 0x19c], 0
je 0x455a3d
cmp byte [ecx + 0xafd], 0
je 0x455a3d
comisd xmm1, xmmword [ecx + 0xae0]
jb 0x455a3d
movsd xmm0, qword [ecx + 0xae8]
comisd xmm0, xmm1
jb 0x455a3d
push ecx
lea eax, [ebp - 0x103f0]
push eax
call fcn.00464da0
test eax, eax
je 0x455a3d
lea ecx, [ebp - 0x10400]
call fcn.00402b10
mov byte [ebp - 4], 2
mov edx, 0x58375c
push 0
push 0
lea ecx, [ebp - 0x10400]
call fcn.004820b0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00531bd0
add esp, 0x14
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x103f4]
call fcn.004031c0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x103f4]
push dword [ebp - 0x10400]
push 0x58b238
push eax
call fcn.00443ea0
add esp, 0xc
lea eax, [ebp - 0x103f4]
lea ecx, [ebp - 0x103fc]
push eax
call fcn.00402330
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x103f0]
push 2
push dword [eax]
call fcn.004fe5e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x103fc]
call fcn.00402750
push 0x58bc64
push dword [ebp - 0x103f4]
lea eax, [ebp - 0x103f8]
push eax
call fcn.0052e5ff
add esp, 0xc
test eax, eax
jne 0x455a13
push 2
push eax
push dword [ebp - 0x103f8]
call fcn.0052e84c
add esp, 0xc
push dword [ebp - 0x103f8]
call fcn.0052ec5f
add esp, 4
mov edi, eax
push 0
push 0
push dword [ebp - 0x103f8]
call fcn.0052e84c
add esp, 0xc
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
test ebx, ebx
je 0x455a05
push dword [ebp - 0x103f8]
push edi
push 1
push edi
push ebx
call fcn.0052d4fd
add esp, 0x14
mov dword [ebp - 0x103fc], eax
push dword [ebp - 0x103f4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x103fc], edi
jne 0x4559f5
push 0
mov edx, edi
mov ecx, ebx
call fcn.004fb8d0
add esp, 4
lea ecx, [ebp - 0x10530]
call fcn.00421da0
mov byte [ebp - 4], 5
mov dword [ebp - 0x1040c], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1044c]
mov eax, dword [ebp - 0x103fc]
mov dword [ebp - 0x10410], eax
lea eax, [ebp - 0x10400]
push eax
mov dword [ebp - 0x10414], ebx
call fcn.00416320
lea eax, [ebp - 0x10414]
push eax
lea eax, [ebp - 0x10234]
push eax
lea ecx, [ebp - 0x10458]
call fcn.00455ad0
lea eax, [ebp - 0x10404]
mov dword [ebp - 0x10404], 0x7fff
push eax
lea eax, [ebp - 0x10218]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea eax, [ebp - 0x10218]
push eax
lea ecx, [ebp - 0x104dc]
call fcn.004026c0
lea eax, [ebp - 0x10530]
mov ecx, esi
push eax
call fcn.00437850
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10530]
call fcn.00421e90
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 0x103f8]
call fcn.0052c324
add esp, 4
push dword [ebp - 0x103f4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x103f4]
call fcn.00402750
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10400]
call fcn.00402750
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x103f0]
mov dword [ebp - method.CxImage.virtual_0], vtable.CxImage.0
call fcn.004fdd70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005295e2
mov esp, ebp
pop ebp
ret