Function at 0x407210
Capabilities:
Delete file
Get common file path

Disassembly:
sub esp, 0xe34
mov eax, dword [0x45e764]
xor eax, esp
mov dword [esp + 0xe30], eax
push ebx
push ebp
push esi
push edi
xor ebx, ebx
push 0x104
lea eax, [esp + 0x32d]
push ebx
push eax
mov esi, ecx
mov byte [esp + 0x334], bl
call fcn.004338b0
push 0x104
lea ecx, [esp + 0x231]
push ebx
push ecx
mov byte [esp + 0x238], bl
call fcn.004338b0
push 0x104
lea edx, [esp + 0x555]
push ebx
push edx
mov byte [esp + 0x55c], bl
call fcn.004338b0
push 0x104
lea eax, [esp + 0x459]
push ebx
push eax
mov byte [esp + 0x460], bl
call fcn.004338b0
mov edi, dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
add esp, 0x30
push 0x104
lea ecx, [esp + 0x32c]
push ecx
call edi
push 0x104
lea edx, [esp + 0x224]
push edx
call edi
push 0x3ff
lea eax, [esp + 0xa45]
push ebx
push eax
mov byte [esp + 0xa4c], bl
call fcn.004338b0
push 0x3ff
lea ecx, [esp + 0x651]
push ebx
push ecx
mov byte [esp + 0x658], bl
call fcn.004338b0
push 0x104
lea edx, [esp + 0x135]
push ebx
push edx
mov byte [esp + 0x13c], bl
call fcn.004338b0
push 0x104
lea eax, [esp + 0x39]
push ebx
push eax
mov byte [esp + 0x40], bl
call fcn.004338b0
push 0x44d710
lea ecx, [esp + 0x35f]
push 0x101
push ecx
call fcn.00433fec
push 0x44d700
lea edx, [esp + 0x263]
push 0x101
push edx
call fcn.00433fec
add esp, 0x48
lea eax, [esp + 0x328]
push eax
lea ecx, [esp + 0x53c]
push 0x44dae8
push ecx
call fcn.00403c60
lea edx, [esp + 0x22c]
push edx
lea eax, [esp + 0x440]
push 0x44dae8
push eax
call fcn.00403c60
push 0x44d650
lea ecx, [esp + 0x65c]
push 0x400
push ecx
call fcn.00433fec
push 0x44d674
lea edx, [esp + 0xa68]
push 0x400
push edx
call fcn.00433fec
add esp, 0x30
mov ecx, esi
call fcn.004063b0
mov ecx, esi
mov edi, eax
call fcn.00406630
cmp edi, ebx
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ebp, eax
jne 0x40749d
call fcn.004145e0
test eax, eax
je 0x4073f8
lea eax, [esp + 0x538]
push eax
push 0x44dabc
push 0x105
lea ecx, [esp + 0x124]
push ecx
jmp 0x407412
lea edx, [esp + 0x430]
push edx
push 0x44dabc
push 0x105
lea eax, [esp + 0x124]
push eax
call fcn.00433868
lea ecx, [esp + 0x128]
add esp, 0x10
push ecx
call fcn.00401ba0
add esp, 4
test eax, eax
je 0x40749d
call fcn.00414480
test eax, eax
je 0x407462
push 0x44dab4
push 0x44dab0
lea edx, [esp + 0x120]
push edx
mov ecx, esi
call fcn.00403d30
push ebx
push 0x7530
push 0x44dab0
lea eax, [esp + 0x1c]
push eax
jmp 0x40748b
push 0x44d1ec
push 0x44dab0
lea ecx, [esp + 0x120]
push ecx
mov ecx, esi
call fcn.00403d30
push ebx
push 0x7530
push 0x44dab0
lea edx, [esp + 0x1c]
push edx
call fcn.00402060
add esp, 0x10
lea eax, [esp + 0x118]
push eax
call edi
cmp ebp, ebx
jne 0x407548
call fcn.004145e0
test eax, eax
je 0x407548
lea ecx, [esp + 0x430]
push ecx
push 0x44dabc
lea edx, [esp + 0x18]
push 0x105
push edx
call fcn.00433868
lea eax, [esp + 0x20]
push eax
call fcn.00401ba0
add esp, 0x14
test eax, eax
je 0x407548
call fcn.00414480
test eax, eax
je 0x407513
push 0x44dab4
push 0x44dab0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00403d30
push ebx
push 0x7530
push 0x44dab0
lea edx, [esp + 0x124]
push edx
jmp 0x407539
push 0x44d1ec
push 0x44dab0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.00403d30
push ebx
push 0x7530
push 0x44dab0
lea ecx, [esp + 0x1c]
push ecx
call fcn.00402060
add esp, 0x10
lea edx, [esp + 0x10]
push edx
call edi
mov ecx, esi
call fcn.00405eb0
mov ecx, esi
call fcn.00406150
mov ecx, dword [esp + 0xe40]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00432ccc
add esp, 0xe34
ret