Function at 0x404217
Capabilities:
Delete directory
Get common file path

Disassembly:
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call fcn.004085ba
mov dword [esp], eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x413540], eax
push dword [0x413ad0]
push dword [esp + 4]
call fcn.00402859
lea eax, [esp + 8]
push eax
call fcn.0040f520
call fcn.0040455e
call fcn.00403fc7
push dword [0x413ad0]
push dword [0x413ad0]
push 0
call fcn.0040856c
inc dword [0x413ad0]
mov edx, dword [0x41355c]
pop ecx
mov dword [0x413ad0], ecx
add ecx, dword [0x412320]
call fcn.0040f5a0
je 0x40429e
mov ebx, dword [esp]
cmp ebx, 1
jne 0x40429e
mov eax, 1
jmp 0x4042a0
xor eax, eax
and eax, eax
je 0x4042a9
call fcn.00402b72
call fcn.00402a04
mov edx, dword [0x4135b8]
push dword [0x413ad0]
call fcn.0040f600
mov edx, dword [0x413598]
call fcn.0040f600
mov edx, dword [0x413558]
call fcn.0040f600
lea eax, [0x413558]
push eax
call fcn.0040f520
push dword [0x413ad0]
push dword [0x413ad0]
push 0x800
call fcn.00405b50
lea eax, [esp + 0xc]
push eax
call fcn.0040f520
push dword [0x413ad0]
push dword [esp + 0xc]
push 0
push 0x41201e
mov edx, dword [0x4135b8]
push dword [0x413ad0]
call fcn.0040f600
mov edx, dword [0x413598]
call fcn.0040f600
inc dword [0x413ad0]
mov edx, dword [0x412320]
add dword [esp], edx
call sub.KERNEL32.DLL_GetTempFileNameA
pop dword [0x413ad0]
push dword [esp + 8]
call fcn.0040ca1c
push dword [0x413590]
push dword [esp + 0xc]
call sub.SHLWAPI.DLL_PathRenameExtensionA
mov edx, dword [esp + 8]
push dword [0x413ad0]
call fcn.0040f600
lea eax, [0x413558]
push eax
call fcn.0040f520
call fcn.00403dd7
mov edx, dword [0x4134f8]
xor ecx, ecx
call fcn.0040f5a0
jne 0x40439d
push dword [0x4134f8]
call fcn.00402f9c
call fcn.004035e0
push dword [0x413ad0]
call fcn.00403b09
lea eax, [esp + 0x10]
push eax
call fcn.0040f520
push dword [0x413558]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov edx, dword [0x413558]
push dword [0x413ad0]
call fcn.0040f600
mov edx, str.__BFINOPSX
call fcn.0040f600
mov edx, dword [esp + 8]
call fcn.0040f600
lea eax, [esp + 8]
push eax
call fcn.0040f520
push dword [esp + 4]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push dword [0x413ad0]
push 0x45
push dword [0x41354c]
mov edx, dword [0x4135a8]
push dword [0x413ad0]
call fcn.0040f600
mov edx, str.__BFINOPSX
call fcn.0040f600
mov edx, dword [esp + 0x14]
call fcn.0040f600
inc dword [0x413ad0]
mov edx, dword [esp + 0x1c]
push dword [0x413ad0]
call fcn.0040f600
mov edx, dword [0x413534]
call fcn.0040f600
mov edx, dword [0x412320]
add dword [esp], edx
mov edx, dword [0x412320]
add dword [esp + 4], edx
call fcn.00408a49
pop dword [0x413ad0]
mov dword [0x413568], eax
push dword [0x413568]
call fcn.00408a63
push dword [0x413568]
call fcn.00408a74
mov dword [esp + 0x10], eax
push dword [0x413568]
call fcn.00408a92
push 0
lea eax, [0x402c98]
push eax
call sub.KERNEL32.DLL_SetConsoleCtrlHandler
call fcn.00403d0b
push dword [0x413558]
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
push dword [0x413558]
call fcn.0040ca1c
push dword [0x4135c8]
call fcn.0040ca1c
push dword [0x413544]
call fcn.0040ca1c
push dword [0x413ad0]
push dword [0x413ad0]
push dword [0x413ad0]
push dword [0x413ad0]
push dword [0x413ad0]
call fcn.00408450
mov edx, dword [0x412320]
add dword [esp], edx
call fcn.0040ca7c
mov edx, dword [0x412320]
add dword [esp], edx
call fcn.0040ca6a
pop dword [0x413ad0]
push dword [0x4135b4]
call sub.KERNEL32.DLL_RemoveDirectoryA
push dword [0x4135b8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push dword [esp + 0x10]
jmp 0x4017bc