Function at 0x434bbd
Capabilities:
Delete file
Get common file path

Disassembly:
push 0x830
mov eax, 0x47cbac
call fcn.0045e1e7
cmp dword [ebp + 8], 0x4a
mov eax, dword [ebp + 0x10]
jne 0x434f2e
mov ecx, dword [eax]
add ecx, 0xfffffffd
cmp ecx, 0xe
ja case.0x434b66.5
jmp dword [ecx*4 + 0x434f4c]
push dword [eax + 8]
call fcn.0046265b
pop ecx
mov dword [0x49d5b0], eax
push eax
jmp 0x434f39
call fcn.0042f911
jmp case.0x434b66.5
push dword [eax + 8]
lea ecx, [ebp - 0x834]
call fcn.00418091
and dword [ebp - 4], 0
lea eax, [ebp - 0x834]
push eax
call fcn.0042ccb6
pop ecx
mov ecx, dword [ebp - 0x834]
add ecx, 0xfffffff0
call fcn.0041788d
jmp case.0x434b66.5
push dword [eax + 8]
lea ecx, [ebp - 0x834]
call fcn.00418091
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp - 0x218], ax
xor ebx, ebx
xor esi, esi
lea eax, [ebp - 0x216]
push ebx
inc esi
push eax
mov dword [ebp - 4], esi
call fcn.0045c380
add esp, 0xc
push esi
push 2
lea eax, [ebp - 0x218]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x4827c8
mov esi, 0x104
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.0046162e
xor eax, eax
push edi
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push ebx
push eax
call fcn.0045c380
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x628]
push esi
push eax
call fcn.004615cb
push 0x47f594
lea eax, [ebp - 0x628]
push esi
push eax
call fcn.0046162e
push dword [ebp - 0x834]
lea eax, [ebp - 0x628]
push esi
push eax
call fcn.0046162e
add esp, 0x3c
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x218]
push eax
call fcn.0042ddce
jmp 0x434ba9
push dword [eax + 8]
lea ecx, [ebp - 0x834]
call fcn.00418091
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp - 0x628], ax
xor ebx, ebx
lea eax, [ebp - 0x626]
push ebx
push eax
call fcn.0045c380
add esp, 0xc
push 1
push ebx
lea eax, [ebp - 0x628]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
xor eax, eax
push edi
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.0045c380
lea eax, [ebp - 0x628]
push eax
mov esi, 0x104
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004615cb
push 0x47f594
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.0046162e
push dword [ebp - 0x834]
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.0046162e
add esp, 0x30
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x434baa
push dword [eax + 8]
lea ecx, [ebp - 0x834]
call fcn.00418091
push dword [ebp - 0x834]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x434baa
and eax, 0xfffffffe
push eax
push dword [ebp - 0x834]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x434baa
mov esi, dword [eax + 8]
xor eax, eax
push 0x40e
mov word [ebp - 0x420], ax
xor ebx, ebx
lea eax, [ebp - 0x41e]
push ebx
push eax
call fcn.0045c380
lea eax, [esi + 0xc10]
push eax
mov edi, 0x208
lea eax, [ebp - 0x420]
push edi
push eax
call fcn.004615cb
push esi
lea eax, [ebp - 0x420]
push edi
push eax
call fcn.0046162e
add esp, 0x24
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je case.0x434b66.5
push ebx
push ebx
add esi, 0x410
lea eax, [ebp - 0x420]
push esi
push eax
call fcn.0042b869
add esp, 0x10
jmp case.0x434b66.5
call fcn.0042c155
jmp case.0x434b66.5
call fcn.0042e134
jmp case.0x434b66.5
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
xor ebx, ebx
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.0045c380
add esp, 0xc
push 1
push 2
pop esi
push esi
lea eax, [ebp - 0x218]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x482d48
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0046162e
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x834]
call fcn.00418091
push 0x482d30
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x83c]
push eax
mov dword [ebp - 4], esi
call fcn.00417e93
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0xc
push dword [eax]
call esi
mov ecx, dword [ebp - 0x83c]
add ecx, 0xfffffff0
call fcn.0041788d
push 0x482d20
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x838]
push eax
call fcn.00417e93
add esp, 0xc
push dword [eax]
call esi
mov ecx, dword [ebp - 0x838]
add ecx, 0xfffffff0
call fcn.0041788d
jmp 0x434c7a
call fcn.0042c478
jmp case.0x434b66.5
xor eax, eax
push 0x206
mov word [ebp - 0x830], ax
xor ebx, ebx
lea eax, [ebp - 0x82e]
push ebx
push eax
call fcn.0045c380
add esp, 0xc
push ebx
push 0x1a
lea eax, [ebp - 0x830]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push str.pptassist
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.0046162e
push 1
lea eax, [ebp - 0x830]
push 1
push eax
call fcn.0042dc20
add esp, 0x18
jmp case.0x434b66.5
call fcn.0042d22e
jmp case.0x434b66.5
cmp dword [ebp + 8], 0x4d3
jne case.0x434b66.5
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
inc eax
call fcn.0045e26a
ret 0xc