Function at 0x434330
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
xor esi, esi
push ebx
sub esp, 0x2c
mov ebx, dword [sym.imp.kernel32.dll_GetStdHandle]
mov dword [esp], 0xfffffff6
call ebx
sub esp, 4
mov dword [ebp - 0x14], eax
mov dword [esp], 0xfffffff5
call ebx
sub esp, 4
mov dword [ebp - 0x18], eax
mov dword [esp], 0xfffffff4
call ebx
sub esp, 4
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x10]
mov dword [esp], eax
call fcn.0057d960
mov ebx, dword [sym.imp.kernel32.dll_GetTempPathA]
mov dword [esp + 4], 0x6f7a80
mov dword [esp], 0x104
call ebx
sub esp, 8
mov dword [esp], 0x6f7a80
call sub.msvcrt.dll_strlen
mov ecx, 2
mov edx, 0x6f7a80
mov dword [eax + 0x6f7a80], 0x736e6f63
mov dword [eax + 0x6f7a84], 0x5f656c6f
mov dword [eax + 0x6f7a88], 0x2e697567
mov dword [eax + 0x6f7a8c], 0x657865
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
call fcn.00433c00
mov dword [esp + 4], 0x6f7960
mov dword [esp], 0x104
call ebx
mov ebx, 0x592bc0
sub esp, 8
mov dword [esp], 0x6f7960
call sub.msvcrt.dll_strlen
mov ecx, 3
mov edx, 0x6f7960
mov dword [eax + 0x6f7960], 0x736e6f63
mov dword [eax + 0x6f7964], 0x5f656c6f
mov dword [eax + 0x6f7968], 0x2e697563
mov dword [eax + 0x6f796c], 0x657865
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
call fcn.00433c00
call dword [sym.imp.kernel32.dll_FreeConsole]
lea esi, [esi]
mov edi, dword [ebx]
mov eax, 0x6f7960
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test edi, edi
mov edi, 0x6f7a80
cmove eax, edi
call fcn.00433e50
mov edi, eax
call fcn.0057d110
mov dword [eax], 0x58f03f
mov dword [eax + 4], 0x13f4
mov eax, dword [ebx + 0xc]
mov dword [esp + 8], esi
cmp edi, eax
mov dword [esp + 0x10], eax
sete al
mov dword [esp + 0xc], edi
add esi, 1
add ebx, 0x14
movzx eax, al
mov dword [esp + 4], str.__d__Unexpected_result__x___lx__n
mov dword [esp], eax
call fcn.00427ef0
cmp esi, 0xc
jne 0x434448
call dword [sym.imp.kernel32.dll_AllocConsole]
mov ebx, 0x5928e0
xor edi, edi
lea esi, [esi]
nop
mov esi, dword [ebx]
mov eax, 0x6f7960
mov edx, dword [ebx + 4]
mov ecx, dword [ebx + 8]
test esi, esi
mov esi, 0x6f7a80
cmove eax, esi
call fcn.00433e50
mov esi, eax
call fcn.0057d110
mov edx, 1
mov dword [eax], 0x58f03f
mov dword [eax + 4], 0x13ff
mov eax, dword [ebx + 0xc]
cmp esi, eax
je 0x434520
mov ecx, dword [ebx + 0x10]
xor edx, edx
test ecx, ecx
je 0x434520
movzx ecx, cl
cmp esi, ecx
jne 0x434520
mov ecx, dword [0x8f0770]
xor edx, edx
test ecx, ecx
sete dl
lea esi, [esi]
mov dword [esp + 8], edi
add edi, 1
add ebx, 0x14
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov dword [esp + 4], str.__d__Unexpected_result__x___lx__n
mov dword [esp], edx
call fcn.00427ef0
cmp edi, 0x24
jne 0x4344c0
mov eax, dword [sym.imp.ntdll.dll_RtlGetCurrentPeb]
mov ebx, 0x592700
xor edi, edi
mov dword [ebp - 0x20], eax
call eax
mov eax, dword [eax + 0x10]
mov esi, dword [eax + 0x14]
mov dword [ebp - 0x24], esi
lea esi, [esi]
mov eax, dword [ebx + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_SetConsoleCtrlHandler]
sub esp, 8
mov esi, eax
call fcn.0057d110
mov dword [eax], 0x58f03f
mov dword [eax + 4], 0x140a
mov dword [esp], esi
mov esi, 0x6f7a80
mov dword [esp + 4], str.Couldnt_set_ctrl_handler_n
call fcn.00427ef0
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov ecx, dword [ebx + 8]
test eax, eax
mov eax, 0x6f7960
cmove eax, esi
call fcn.00433e50
mov esi, eax
call fcn.0057d110
mov dword [eax], 0x58f03f
mov dword [eax + 4], 0x140e
mov edx, dword [ebx + 0x10]
mov eax, 1
cmp esi, edx
je 0x4345f7
mov eax, edx
and eax, 0xffffffef
cmp eax, esi
sete cl
xor eax, eax
cmp dword [0x8f0770], 0
sete al
and eax, ecx
mov dword [esp + 8], edi
add edi, 1
add ebx, 0x14
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], esi
mov dword [esp + 4], str.__d__Unexpected_result__x___lx__n
mov dword [esp], eax
call fcn.00427ef0
cmp edi, 0x18
jne 0x434568
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call eax
mov ebx, dword [sym.imp.kernel32.dll_DeleteFileA]
mov eax, dword [eax + 0x10]
mov dword [eax + 0x14], esi
mov dword [esp], 0x6f7a80
call ebx
sub esp, 4
mov dword [esp], 0x6f7960
call ebx
mov eax, dword [ebp - 0x14]
mov ebx, dword [sym.imp.kernel32.dll_SetStdHandle]
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0xfffffff6
call ebx
mov eax, dword [ebp - 0x18]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], 0xfffffff5
call ebx
mov eax, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], 0xfffffff4
call ebx
sub esp, 8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret