Function at 0x440c70
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55b52e
mov eax, dword fs:[0]
push eax
sub esp, 0x49c
mov eax, dword [0x5c24ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x4a8], 0
xor eax, eax
mov word [ebp - 0x420], ax
push 0x206
push 0
lea ecx, [ebp - 0x41e]
push ecx
call fcn.00485370
add esp, 0xc
xor edx, edx
mov word [ebp - 0x218], dx
push 0x206
push 0
lea eax, [ebp - 0x216]
push eax
call fcn.00485370
add esp, 0xc
push 0x5648a0
lea ecx, [ebp - 0x438]
call fcn.00419540
mov dword [ebp - 4], 0
push 0x5648a4
lea ecx, [ebp - 0x450]
call fcn.00419540
mov byte [ebp - 4], 1
push 0x5648a8
lea ecx, [ebp - 0x498]
call fcn.00419540
mov byte [ebp - 4], 2
push 0
push 0x17
lea ecx, [ebp - 0x420]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x440fa7
push 0x5648ac
lea edx, [ebp - 0x420]
push edx
push 0x5648b8
lea eax, [ebp - 0x218]
push eax
call fcn.00434b60
add esp, 0x10
lea ecx, [ebp - 0x218]
push ecx
call fcn.0046fbdc
add esp, 4
push str.http:__www.yaoguangsoft.cn_
lea ecx, [ebp - 0x468]
call fcn.0041b0f0
mov byte [ebp - 4], 3
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x480]
push ecx
call fcn.00472eb6
add esp, 8
mov dword [ebp - 0x4a0], eax
mov edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x4a4]
call fcn.0041a090
push eax
push 0x5648e4
mov ecx, dword [ebp - 0x49c]
call fcn.00441390
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x480]
call fcn.004195b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x468]
call fcn.0041b370
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00419610
push 0x5648f0
lea ecx, [ebp - 0x438]
call fcn.00419650
push 0x5648fc
lea ecx, [ebp - 0x438]
call fcn.00419650
lea ecx, [ebp - 0x438]
call fcn.0041a090
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.00419670
mov ecx, eax
call fcn.0046cb19
push eax
lea ecx, [ebp - 0x450]
call fcn.00419610
push 0x564908
lea ecx, [ebp - 0x450]
call fcn.00419650
push 0x564918
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x450]
call fcn.0041a090
push eax
lea ecx, [ebp - 0x438]
call fcn.0041a090
push eax
mov ecx, dword [ebp - 0x49c]
call fcn.004415d0
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x438]
call fcn.00419610
push 0x56491c
lea ecx, [ebp - 0x438]
call fcn.00419650
lea ecx, [ebp - 0x438]
call fcn.0041a090
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.00419670
mov ecx, eax
call fcn.0046cb19
push eax
lea ecx, [ebp - 0x450]
call fcn.00419610
push 0x564930
lea ecx, [ebp - 0x450]
call fcn.00419650
push 0x564940
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x450]
call fcn.0041a090
push eax
lea ecx, [ebp - 0x438]
call fcn.0041a090
push eax
mov ecx, dword [ebp - 0x49c]
call fcn.004415d0
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0x438]
call fcn.00419610
push 0x564944
lea ecx, [ebp - 0x438]
call fcn.00419650
lea ecx, [ebp - 0x438]
call fcn.0041a090
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.00419670
mov ecx, eax
call fcn.0046cb19
push eax
lea ecx, [ebp - 0x450]
call fcn.00419610
push str.Uninst.exe
lea ecx, [ebp - 0x450]
call fcn.00419650
push 0x56496c
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x450]
call fcn.0041a090
push eax
lea ecx, [ebp - 0x438]
call fcn.0041a090
push eax
mov ecx, dword [ebp - 0x49c]
call fcn.004415d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x498]
call fcn.004195b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x450]
call fcn.004195b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x438]
call fcn.004195b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00464e95
mov esp, ebp
pop ebp
ret