Function at 0x409c60
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41fab8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x46c
push ebx
push esi
push edi
xor ebx, ebx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], ebx
call sub.MFC42.DLL_CWnd::CWnd
mov dword [ebp - 0x70], 0x421ce0
mov byte [ebp - 4], 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call sub.MFC42.DLL_CWnd::FromHandle
push ebx
push ebx
push ebx
push ebx
push eax
lea eax, [ebp - 0x30]
push eax
push ebx
push ebx
push 0x421da0
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
call sub.MFC42.DLL_CWnd::CreateControl
mov esi, eax
xor edi, edi
cmp esi, ebx
je 0x409cde
lea ecx, [ebp - 0x70]
call fcn.00418580
mov edi, eax
lea ecx, [ebp - 0x70]
call sub.MFC42.DLL_CWnd::DestroyWindow
call sub.MFC42.DLL_CWnd::DeleteTempMap
cmp esi, ebx
je 0x409d10
cmp edi, 0x6b
jl 0x409d10
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], bl
call fcn.0041e822
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], bl
call fcn.0041e822
jmp 0x409d25
mov ecx, dword [0x428210]
mov eax, dword [0x428218]
mov edx, dword [0x428214]
mov dword [ebp - 0x20], ecx
mov cx, word [0x42821c]
mov dword [ebp - 0x18], eax
mov al, byte [0x4281fe]
mov dword [ebp - 0x1c], edx
mov dx, word [0x4281fc]
mov word [ebp - 0x14], cx
mov byte [ebp - 0x276], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x275]
mov word [ebp - 0x278], dx
push 0x104
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], 0xffffffff
push ecx
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dl, byte [0x42a24c]
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x173]
mov byte [ebp - 0x174], dl
mov esi, dword [sym.imp.MSVCRT.dll_sprintf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x278]
push eax
push ecx
lea edx, [ebp - 0x174]
push str._s_s
push edx
call esi
add esp, 0x10
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x409e07
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x409e07
lea edi, [ebp - 0x174]
or ecx, 0xffffffff
xor eax, eax
mov dl, byte [0x4281f0]
repne scasb al, byte es:[edi]
mov ecx, dword [str..ocx]
dec edi
mov dword [edi], ecx
mov byte [edi + 4], dl
lea eax, [ebp - 0x174]
push ebx
lea ecx, [ebp - 0x20]
push eax
push ecx
push 0x4281e4
call fcn.00418af0
mov dl, byte [0x42a24c]
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x477]
mov byte [ebp - 0x478], dl
mov byte [ebp - 0x378], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x377]
lea edx, [ebp - 0x278]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push edx
lea eax, [ebp - 0x478]
push str._s_regsvr32.exe
push eax
call esi
lea ecx, [ebp - 0x174]
lea edx, [ebp - 0x378]
push ecx
push 0x4281cc
push edx
call esi
lea eax, [ebp - 0x378]
push 1
lea ecx, [ebp - 0x478]
push eax
push ecx
call fcn.004187f0
mov ecx, dword [ebp - 0xc]
add esp, 0x34
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret