Function at 0x46eecc
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffcac
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x350], ecx
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x17c], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004053dc
lea eax, [ebp - 0x178]
mov edx, dword [0x407dc0]
call fcn.004059ec
xor eax, eax
push ebp
push 0x46f22a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 4]
call fcn.00404fc0
xor esi, esi
lea ecx, [ebp - 0x178]
mov edx, 0x3f
mov eax, dword [ebp - 0x14]
call fcn.0040952c
mov ebx, eax
test ebx, ebx
jne 0x46ef5a
cmp dword [ebp - 0x14], 0
jne case.default.0x46f03a
lea eax, [ebp - 0x18]
mov edx, 0x104
call fcn.00405674
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x46ef73
sub ebx, 4
mov ebx, dword [ebx]
push ebx
mov eax, dword [ebp - 0x18]
call fcn.004053ec
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
mov edx, eax
lea eax, [ebp - 0x18]
call fcn.00405674
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x46ef98
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x46efa9
lea eax, [ebp - 0x18]
mov edx, 0x46f240
call fcn.00404fc0
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x18]
call fcn.00404fc0
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x46efc0
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x34c]
push eax
mov ecx, 1
mov edx, ebx
mov eax, dword [ebp - 0xc]
call fcn.0040544c
mov eax, dword [ebp - 0x34c]
mov edx, 0x46f254
call fcn.00405338
je 0x46eff5
lea eax, [ebp - 0xc]
mov edx, 0x46f254
call fcn.004051f4
lea eax, [ebp - 0x350]
mov ecx, 0x46f260
mov edx, dword [ebp - 0xc]
call fcn.00405238
mov eax, dword [ebp - 0x350]
lea ecx, [ebp - 0x178]
mov edx, 0x3f
call fcn.0040952c
mov ebx, eax
test ebx, ebx
jne 0x46f02e
cmp dword [ebp - 0x14], 0
jne 0x46f15d
inc esi
mov eax, esi
cmp eax, 6
ja case.default.0x46f03a
jmp dword [eax*4 + 0x46f041]
lea eax, [ebp - 0xc]
mov edx, dword [0x47e6dc]
mov edx, dword [edx]
call fcn.00404fc0
jmp 0x46efb4
lea eax, [ebp - 0x354]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.0040544c
mov edx, dword [ebp - 0x354]
lea eax, [ebp - 0xc]
mov ecx, 0x46f270
call fcn.00405238
jmp 0x46efb4
lea eax, [ebp - 0xc]
mov ecx, 0x46f2b4
mov edx, dword [ebp - 0x18]
call fcn.00405238
jmp 0x46efb4
lea eax, [ebp - 0xc]
mov ecx, 0x46f2c4
mov edx, dword [ebp - 0x18]
call fcn.00405238
jmp 0x46efb4
lea eax, [ebp - 0xc]
mov ecx, 0x46f2d4
mov edx, dword [ebp - 0x18]
call fcn.00405238
jmp 0x46efb4
lea eax, [ebp - 8]
mov edx, 0x46f2e4
call fcn.00404fc0
lea eax, [ebp - 0xc]
mov edx, 0x46f2fc
call fcn.00404fc0
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x348]
call fcn.004034a8
lea eax, [ebp - 0x348]
call fcn.00403244
call fcn.00402e3c
mov dl, 0x20
lea eax, [ebp - 0x348]
call fcn.00403b2c
call fcn.00403558
call fcn.00402e3c
xor edx, edx
lea eax, [ebp - 0x348]
call fcn.00405704
call fcn.00403b68
call fcn.00402e3c
lea eax, [ebp - 0x348]
call fcn.00403570
call fcn.00402e3c
jmp 0x46efb4
lea eax, [ebp - 0x14]
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0xc]
call fcn.00405238
lea eax, [ebp - 0x10]
mov edx, 0x104
call fcn.00405674
mov eax, dword [ebp - 0x10]
call fcn.004053ec
push eax
push 0x46f300
mov eax, dword [ebp - 0x14]
call fcn.004053ec
push eax
call sub.shell32.dll_FindExecutableA
mov ebx, eax
cmp dword [ebp - 8], 0
je 0x46f1ad
mov eax, dword [ebp - 8]
call fcn.004053ec
push eax
call sub.kernel32.dll_DeleteFileA
cmp ebx, 0x20
jle 0x46f1d8
mov eax, dword [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x10]
mov eax, 0x46f30c
call fcn.00405530
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0040544c
jmp 0x46f1e3
mov eax, dword [ebp - 0x17c]
call fcn.00404f28
lea eax, [ebp - 0x178]
call fcn.004095a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46f231
lea eax, [ebp - 0x354]
mov edx, 3
call fcn.00404f4c
lea eax, [ebp - 0x178]
mov edx, dword [0x407dc0]
call fcn.00405abc
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.00404f4c
ret