Function at 0x4099d0
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41fa98
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x46c
push ebx
push esi
push edi
xor ebx, ebx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], ebx
call sub.MFC42.DLL_CWnd::CWnd
mov dword [ebp - 0x70], 0x423038
mov byte [ebp - 4], 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call sub.MFC42.DLL_CWnd::FromHandle
push ebx
push ebx
push ebx
push ebx
push eax
lea eax, [ebp - 0x30]
push eax
push ebx
push ebx
push 0x423024
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
call sub.MFC42.DLL_CWnd::CreateControl
mov esi, eax
xor edi, edi
cmp esi, ebx
je 0x409a4e
lea ecx, [ebp - 0x70]
call fcn.0041a530
mov edi, eax
lea ecx, [ebp - 0x70]
call sub.MFC42.DLL_CWnd::DestroyWindow
call sub.MFC42.DLL_CWnd::DeleteTempMap
cmp esi, ebx
je 0x409a80
cmp edi, 0x6c
jl 0x409a80
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], bl
call fcn.0041e822
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], bl
call fcn.0041e822
jmp 0x409a95
mov ecx, dword [str.XRichSearch.ocx]
mov eax, dword [0x428208]
mov edx, dword [0x428204]
mov dword [ebp - 0x20], ecx
mov ecx, dword [0x42820c]
mov dword [ebp - 0x18], eax
mov al, byte [0x4281fe]
mov dword [ebp - 0x1c], edx
mov dx, word [0x4281fc]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x276], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x275]
mov word [ebp - 0x278], dx
push 0x104
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], 0xffffffff
push ecx
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dl, byte [0x42a24c]
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x173]
mov byte [ebp - 0x174], dl
mov esi, dword [sym.imp.MSVCRT.dll_sprintf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x278]
push eax
push ecx
lea edx, [ebp - 0x174]
push str._s_s
push edx
call esi
add esp, 0x10
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x409b75
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x409b75
lea edi, [ebp - 0x174]
or ecx, 0xffffffff
xor eax, eax
mov dl, byte [0x4281f0]
repne scasb al, byte es:[edi]
mov ecx, dword [str..ocx]
dec edi
mov dword [edi], ecx
mov byte [edi + 4], dl
lea eax, [ebp - 0x174]
push ebx
lea ecx, [ebp - 0x20]
push eax
push ecx
push 0x4281e4
call fcn.00418af0
mov dl, byte [0x42a24c]
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x477]
mov byte [ebp - 0x478], dl
mov byte [ebp - 0x378], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x377]
lea edx, [ebp - 0x278]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push edx
lea eax, [ebp - 0x478]
push str._s_regsvr32.exe
push eax
call esi
lea ecx, [ebp - 0x174]
lea edx, [ebp - 0x378]
push ecx
push 0x4281cc
push edx
call esi
lea eax, [ebp - 0x378]
push 1
lea ecx, [ebp - 0x478]
push eax
push ecx
call fcn.004187f0
mov ecx, dword [ebp - 0xc]
add esp, 0x34
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret