Function at 0x407080
Capabilities:
Delete file

Disassembly:
sub esp, 0x80c
push ebx
push ebp
mov ebx, ecx
push esi
push edi
mov ecx, 0x423b88
call fcn.00403950
mov edi, dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
push eax
call edi
push eax
mov ecx, ebx
call fcn.00408860
test eax, eax
je 0x407104
push 0x41a458
mov ecx, 0x423b88
call fcn.00403950
push eax
call dword [sym.imp.MSVCRT.dll__wfopen]
mov esi, eax
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 0xc
mov ecx, 0x423b88
call fcn.00403950
push eax
call edi
push str.SOMAuthNormal::CheckOfficeException_..
push 0x41a040
mov ebp, eax
call fcn.0040c930
add esp, 8
test esi, esi
jne 0x407111
push str.SOMAuthNormal::CheckOfficeException_File_Pointer_is_NULL__
push 0x41a040
call fcn.0040c930
add esp, 8
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x80c
ret
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x1e]
mov word [esp + 0x1c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x1c]
mov ecx, 0x423b88
push eax
push 0
call fcn.00403950
push eax
call dword [sym.imp.SHELL32.dll_FindExecutableW]
mov ecx, 0x423b88
mov esi, eax
call fcn.00403950
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp esi, 0x20
jge 0x40715e
push str.SOMAuthNormal::CheckOfficeException_FindExecutable_Error__
jmp 0x4070f7
lea ecx, [esp + 0x18]
lea edx, [esp + 0x1c]
xor edi, edi
push ecx
push edx
mov dword [esp + 0x20], edi
call fcn.0040cfd0
add esp, 8
test eax, eax
jne 0x407184
push str.SOMAuthNormal::CheckOfficeException_GetFileMajorVersion_Error__
jmp 0x4070f7
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
push ecx
push str.CheckOfficeException_File__s__Version__d_
push 0x41a040
call fcn.0040c930
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp eax, 0xc
jne 0x407332
cmp dword [0x423b78], 2
jne 0x4072cb
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea edx, [esp + 0x14]
push edx
push 0x20019
push edi
push str.SOFTWAREMicrosoftOfficeWordAddInsMSO07EHW.Connect
push 0x80000002
mov dword [esp + 0x28], edi
call esi
test eax, eax
je 0x4072a7
lea eax, [esp + 0x14]
push eax
push 0x20019
push edi
push str.SOFTWAREMicrosoftOfficeWordAddIns_MSO07EHW.Connect
push 0x80000002
call esi
test eax, eax
je 0x4072a7
mov ecx, dword [esp + 0x14]
push ecx
push str._RegOpenKeyEx__MSO07EHW.Connect___x_
push 0x41a040
call fcn.0040c930
add esp, 0xc
mov ecx, 0x425008
push 0xe
call fcn.004054c0
cmp eax, 1
push str.SOMWT001
jne 0x40726b
lea edx, [esp + 0x14]
mov ecx, 0x425780
push edx
call fcn.0040eb80
mov eax, dword [eax]
mov ecx, dword [ebx + 4]
push 0x10
push eax
push str.This_Version_of_Document_Security_Agent_doesnt_support_Office_2007.
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x10]
call sub.MFC42u.DLL_CString::CString
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x80c
ret
lea edx, [esp + 0x14]
mov ecx, 0x425780
push edx
call fcn.0040eb80
mov eax, dword [eax]
mov ecx, dword [ebx + 4]
push 0x10
push eax
push str.This_document_doesnt_support_the_version_of_Office_2007.
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x10]
call sub.MFC42u.DLL_CString::CString
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x80c
ret
mov edx, dword [esp + 0x14]
push edx
push str._RegOpenKeyEx_in___x_
push 0x41ba48
call fcn.0040c890
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x80c
ret
push 0xe
mov ecx, 0x425008
call fcn.004054c0
test eax, eax
jne 0x407104
push 0x41db20
push 0x41a040
call fcn.0040c930
add esp, 8
lea eax, [esp + 0x10]
mov ecx, 0x425780
push str.SOMWT001
push eax
call fcn.0040eb80
mov ecx, dword [eax]
mov edx, dword [ebx + 4]
push 0x10
push ecx
push str.This_document_doesnt_support_the_version_of_Office_2007.
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x10]
call sub.MFC42u.DLL_CString::CString
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x80c
ret
cmp eax, 0xb
jne 0x407104
push 0xe
mov ecx, 0x425008
call fcn.004054c0
test eax, eax
je 0x407104
push str..csv
push ebp
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x407104
push 0xd
mov ecx, 0x425008
call fcn.004054c0
test eax, eax
jne 0x407104
mov eax, dword [0x423b74]
push str.SOMWT001
cmp eax, edi
jne 0x4073c4
lea eax, [esp + 0x14]
mov ecx, 0x425780
push eax
call fcn.0040eb80
mov ecx, dword [eax]
mov edx, dword [ebx + 4]
push 0x10
push ecx
push 0x41dadc
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x10]
call sub.MFC42u.DLL_CString::CString
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x80c
ret
lea eax, [esp + 0x14]
mov ecx, 0x425780
push eax
call fcn.0040eb80
mov ecx, dword [eax]
mov edx, dword [ebx + 4]
push 0x10
push ecx
push str.This_document_can_be_accessed_with_Office_2007.
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x10]
call sub.MFC42u.DLL_CString::CString
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x80c
ret