Function at 0x43f654
Capabilities:
Delete file
Get common file path

Disassembly:
push 0x18c
mov eax, 0x4d000f
call fcn.004a9f73
mov edi, ecx
push 0x4e77ae
lea ecx, [ebp - 0x134]
call fcn.00404860
xor ebx, ebx
lea eax, [ebp - 0x11c]
push 0x104
push ebx
push eax
mov dword [ebp - 4], ebx
call fcn.004aa670
mov eax, dword [edi + 4]
add esp, 0xc
cmp dword [eax + 0xa0], ebx
je 0x43f913
push 1
push 0x1c
lea eax, [ebp - 0x11c]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
js 0x43f902
lea eax, [ebp - 0x11c]
push eax
call fcn.00404843
pop ecx
push eax
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x134]
call fcn.004047ca
mov esi, str.2345ExplorerUser_DataDefaultHistory
push esi
call fcn.00404843
pop ecx
push eax
push esi
lea ecx, [ebp - 0x134]
call fcn.004042ee
push str.Explorer.exe
lea ecx, [ebp - 0x164]
call fcn.00404860
mov esi, eax
push str.2345
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 1
call fcn.00404860
push esi
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
call fcn.00403c00
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x194]
call fcn.00404b60
push ebx
push 1
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 5
call fcn.00404b60
sub esp, 0x18
lea eax, [ebp - 0x17c]
mov ecx, esp
push eax
call fcn.00404769
call fcn.004363de
test al, al
je 0x43f872
push 0x2ec
push str.CDataWebHistory::GetWeb2345IEHistory
push str.__s:_d_2345Explorer.exe_is_Runing
push ecx
call fcn.0044d523
pop ecx
push eax
call fcn.0044d561
add esp, 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x14c]
cmp dword [ebp - 0x120], 0x10
lea eax, [ebp - 0x134]
push ecx
cmovae eax, dword [ebp - 0x134]
push eax
call fcn.0043667f
push 7
lea eax, [ebp - 0x14c]
mov ecx, edi
push eax
call fcn.0043d7d5
test eax, eax
jne 0x43f844
lea eax, [ebp - 0x164]
push eax
call fcn.0043f946
push eax
lea ecx, [ebp - 0x134]
call fcn.004036f5
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.00404b60
cmp dword [ebp - 0x120], 0x10
lea ecx, [ebp - 0x14c]
lea eax, [ebp - 0x134]
cmovae eax, dword [ebp - 0x134]
push ecx
push eax
call fcn.0043667f
mov esi, str.2345ExplorerUsersDefaultHistory.data
push esi
call fcn.00404843
pop ecx
push eax
push esi
lea ecx, [ebp - 0x134]
call fcn.004042ee
lea eax, [ebp - 0x134]
mov ecx, edi
push eax
call fcn.0043df66
cmp dword [ebp - 0x138], 0x10
lea eax, [ebp - 0x14c]
cmovae eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.00404b60
jmp 0x43f8f2
push 0x2fb
push str.CDataWebHistory::GetWeb2345IEHistory
push str.__s:_d_2345Explorer.exe
push ecx
call fcn.0044d523
pop ecx
push eax
call fcn.0044d561
add esp, 0x10
lea eax, [ebp - 0x134]
mov ecx, edi
push 7
push eax
call fcn.0043d7d5
test eax, eax
jne 0x43f8f2
lea eax, [ebp - 0x14c]
push eax
call fcn.0043f946
push eax
lea ecx, [ebp - 0x134]
call fcn.004036f5
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.00404b60
mov esi, str.2345ExplorerUsersDefaultHistory.data
push esi
call fcn.00404843
pop ecx
push eax
push esi
lea ecx, [ebp - 0x134]
call fcn.004042ee
lea eax, [ebp - 0x134]
mov ecx, edi
push eax
call fcn.0043df66
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.00404b60
jmp 0x43f932
push 0x2e3
push str.CDataWebHistory::GetWeb2345IEHistory
push str.__s:_d_2345Explorer_CSIDL_LOCAL_APPDATA_SHGetSpecialFolderPath_error
jmp 0x43f922
push 0x306
push str.CDataWebHistory::GetWeb2345IEHistory
push str.__s:_d_2345Exploer.exe_is_not_Install_
push ecx
call fcn.0044d523
pop ecx
push eax
call fcn.0044d561
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.00404b60
call fcn.004a9f22
ret