Function at 0x4028eb
Capabilities:
Delete file
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x188
mov dword [ebp - 0x188], ecx
push 0x104
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x78]
push edx
lea eax, [ebp - 0x184]
push eax
push str._s_s.sys
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x80
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x7c]
push edx
lea eax, [ebp - 0x184]
push eax
push str._s_s.vxd
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x80
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.Pserenum.vxd
lea ecx, [ebp - 0x184]
push ecx
push 0x41a350
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x80
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.prSeEnum.sys
lea edx, [ebp - 0x184]
push edx
push str._s_s
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x80
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x104
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x70]
push edx
lea eax, [ebp - 0x184]
push eax
push 0x41a370
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x80
mov ecx, dword [ebp - 0x188]
add ecx, 0x70
call fcn.00404180
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x188]
mov ecx, dword [eax + 0x70]
push ecx
lea edx, [ebp - 0x184]
push edx
push 0x41a380
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 0x188]
mov eax, dword [edx + 0x74]
push eax
lea ecx, [ebp - 0x184]
push ecx
push str._sinf_s.inf
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x80
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 0x188]
mov eax, dword [edx + 0x74]
push eax
lea ecx, [ebp - 0x184]
push ecx
push str._sinf_s.pnf
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x70]
push edx
mov eax, dword [ebp - 0x188]
mov ecx, dword [eax + 0x80]
push ecx
lea edx, [ebp - 0x184]
push edx
push str._sinfother_s_s.inf
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov esp, ebp
pop ebp
ret