Function at 0x10140c8
Capabilities:
Delete file
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x102a0ec]
push esi
push edi
push 0x5a
xor edi, edi
push 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x418], edi
call fcn.01017179
cmp dword [ebp + 8], edi
mov dword [ebp - 0x424], eax
mov esi, 0x104
jne 0x101413a
push esi
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x10144ae
push 0x1005b4c
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0100d4ff
lea eax, [ebp - 0x414]
push eax
call fcn.01016f8a
test eax, eax
jne 0x10144ae
push ebx
mov ebx, dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov dword [ebp - 0x41c], edi
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x420], 3
mov eax, dword [ebp - 0x41c]
sub eax, 0
je 0x10141b6
dec eax
je 0x10141aa
dec eax
je 0x101419e
dec eax
je 0x1014186
dec eax
jne 0x10141ea
push 0x1005b20
push 0x103
lea eax, [ebp - 0x414]
push eax
call fcn.0100c535
jmp 0x10141ea
push esi
lea eax, [ebp - 0x414]
push eax
push 0x79
push dword [0x102aec0]
call dword [sym.imp.USER32.dll_LoadStringW]
jmp 0x10141ea
push esi
lea eax, [ebp - 0x414]
push eax
push 0x75
jmp 0x1014190
push esi
lea eax, [ebp - 0x414]
push eax
push 0x74
jmp 0x1014190
push esi
lea eax, [ebp - 0x414]
push eax
push 0xc
push dword [0x102aec0]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x414]
push 0x1005af8
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x10141ea
inc dword [ebp - 0x420]
push 0x1005ab8
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0100d4ff
push 0
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0x418], 0x208
call fcn.010162f2
test eax, eax
je 0x1014281
lea eax, [ebp - 0x20c]
push eax
call fcn.01018429
test eax, eax
je 0x1014281
lea eax, [ebp - 0x20c]
push eax
call fcn.01016cfc
lea eax, [ebp - 0x414]
push eax
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100d4ff
lea eax, [ebp - 0x20c]
push eax
call edi
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x420], eax
jne 0x1014281
cmp dword [ebp - 0x424], 0
jne 0x1014281
push 0
lea eax, [ebp - 0x20c]
push eax
push 5
push 0x1000
call ebx
push 0
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0x418], 0x208
call fcn.0101645c
test eax, eax
je 0x1014306
lea eax, [ebp - 0x20c]
push eax
call fcn.01018429
test eax, eax
je 0x1014306
lea eax, [ebp - 0x20c]
push eax
call fcn.01016cfc
lea eax, [ebp - 0x414]
push eax
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100d4ff
lea eax, [ebp - 0x20c]
push eax
call edi
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x420], eax
jne 0x1014306
cmp dword [ebp - 0x424], 0
jne 0x1014306
push 0
lea eax, [ebp - 0x20c]
push eax
push 5
push 0x1000
call ebx
push 1
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0x418], 0x208
call fcn.010162f2
test eax, eax
je 0x101438b
lea eax, [ebp - 0x20c]
push eax
call fcn.01018429
test eax, eax
je 0x101438b
lea eax, [ebp - 0x20c]
push eax
call fcn.01016cfc
lea eax, [ebp - 0x414]
push eax
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100d4ff
lea eax, [ebp - 0x20c]
push eax
call edi
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x420], eax
jne 0x101438b
cmp dword [ebp - 0x424], 0
jne 0x101438b
push 0
lea eax, [ebp - 0x20c]
push eax
push 5
push 0x1000
call ebx
push 1
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0x418], 0x208
call fcn.0101645c
test eax, eax
je 0x1014410
lea eax, [ebp - 0x20c]
push eax
call fcn.01018429
test eax, eax
je 0x1014410
lea eax, [ebp - 0x20c]
push eax
call fcn.01016cfc
lea eax, [ebp - 0x414]
push eax
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100d4ff
lea eax, [ebp - 0x20c]
push eax
call edi
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x420], eax
jne 0x1014410
cmp dword [ebp - 0x424], 0
jne 0x1014410
push 0
lea eax, [ebp - 0x20c]
push eax
push 5
push 0x1000
call ebx
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x20c]
push eax
push 1
mov dword [ebp - 0x418], 0x208
call fcn.01015d58
test eax, eax
je 0x1014495
lea eax, [ebp - 0x20c]
push eax
call fcn.01018429
test eax, eax
je 0x1014495
lea eax, [ebp - 0x20c]
push eax
call fcn.01016cfc
lea eax, [ebp - 0x414]
push eax
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100d4ff
lea eax, [ebp - 0x20c]
push eax
call edi
mov eax, dword [ebp - 0x420]
cmp eax, dword [ebp - 0x41c]
jne 0x1014495
cmp dword [ebp - 0x424], 0
jne 0x1014495
push 0
lea eax, [ebp - 0x20c]
push eax
push 5
push 0x1000
call ebx
inc dword [ebp - 0x41c]
mov eax, dword [ebp - 0x41c]
cmp eax, dword [ebp - 0x420]
jle 0x1014157
pop ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
call fcn.0101672d
leave
ret 4