Function at 0x403502
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x72c
mov eax, dword [0x41e340]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
mov ebx, ecx
push ebx
mov dword [ebp - 0x6ec], edx
call esi
push dword [ebp - 0x6ec]
mov edi, eax
call esi
test edi, edi
je 0x4037c2
test eax, eax
je 0x4037c2
mov edi, 0x104
push edi
lea eax, [ebp - 0x4e0]
push 0
push eax
call fcn.00409f10
add esp, 0xc
lea eax, [ebp - 0x4e0]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x41baa0
lea eax, [ebp - 0x4e0]
push eax
call esi
push edi
lea eax, [ebp - 0x2d8]
push 0
push eax
call fcn.00409f10
add esp, 0xc
lea eax, [ebp - 0x6e8]
push edi
push 0
push eax
call fcn.00409f10
add esp, 0xc
lea eax, [ebp - 0x6e8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x2d8]
push eax
call esi
push dword [ebp - 0x6ec]
lea eax, [ebp - 0x2d8]
push eax
call esi
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x4e0]
push eax
call esi
lea ecx, [ebp - 0x2d8]
call fcn.00404121
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x4035fb
lea eax, [ebp - 0x2d8]
push eax
call esi
push 0x43
pop eax
push 0x3a
mov word [ebp - 0xd0], ax
pop eax
push 0x5c
pop ebx
push 0x57
mov word [ebp - 0xce], ax
pop eax
push 0x69
mov word [ebp - 0xc8], ax
pop eax
push 0x6e
mov word [ebp - 0xc6], ax
pop eax
push 0x64
pop edi
push 0x6f
mov word [ebp - 0xc4], ax
pop eax
push 0x77
mov word [ebp - 0xc0], ax
pop eax
push 0x73
pop ecx
push 0x79
mov word [ebp - 0xbe], ax
pop eax
push 0x74
mov word [ebp - 0xb4], ax
pop eax
push 0x65
pop edx
push 0x6d
mov word [ebp - 0xb0], ax
mov word [ebp - 0xbc], cx
mov word [ebp - 0xb6], cx
mov word [ebp - 0xb2], cx
pop ecx
push 0x33
pop eax
push 0x32
mov word [ebp - 0xaa], ax
pop eax
push 0x63
mov word [ebp - 0xa8], ax
pop eax
push 0x2e
mov word [ebp - 0xa2], ax
pop eax
push 0x78
mov word [ebp - 0x9c], ax
pop eax
mov word [ebp - 0x98], ax
xor eax, eax
mov word [ebp - 0xcc], bx
mov word [ebp - 0xca], bx
mov word [ebp - 0xba], bx
mov word [ebp - 0xb8], bx
mov word [ebp - 0xa6], bx
mov word [ebp - 0xa4], bx
push 0x8a
mov word [ebp - 0x94], ax
xor ebx, ebx
lea eax, [ebp - 0x92]
push ebx
push eax
mov word [ebp - 0xc2], di
mov word [ebp - 0xae], dx
mov word [ebp - 0xac], cx
mov word [ebp - 0xa0], cx
mov word [ebp - 0x9e], di
mov word [ebp - 0x9a], dx
mov word [ebp - 0x96], dx
call fcn.00409f10
add esp, 0xc
lea eax, [ebp - 0x724]
push 0x38
push ebx
push eax
call fcn.00409f10
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x718], eax
lea eax, [ebp - 0x4e0]
add esp, 0xc
mov dword [ebp - 0x714], eax
lea eax, [ebp - 0x728]
push eax
mov dword [ebp - 0x728], 0x3c
mov dword [ebp - 0x724], 0x440
mov dword [ebp - 0x720], ebx
mov dword [ebp - 0x71c], ebx
mov dword [ebp - 0x710], ebx
mov dword [ebp - 0x70c], ebx
mov dword [ebp - 0x708], ebx
call dword [0x4200b0]
push 0xffffffffffffffff
push dword [ebp - 0x6f0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.0040408b
push eax
call fcn.00402afc
lea eax, [ebp - 0x2d8]
push eax
call esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov al, 1
jmp 0x4037c4
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004042fc
leave
ret