Function at 0x40c9a0
Capabilities:
Delete directory
Delete file
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443a9d
mov eax, dword fs:[0]
push eax
sub esp, 0xd18
mov eax, dword [0x4513a8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x4498fc
lea ecx, [ebp - 0xae0]
call fcn.0040a290
mov dword [ebp - 4], 0
push 0x44992c
lea ecx, [ebp - 0x8b8]
call fcn.0040a290
mov byte [ebp - 4], 1
push 0x449944
lea ecx, [ebp - 0x464]
call fcn.0040a290
mov byte [ebp - 4], 2
push 0x449948
lea ecx, [ebp - 0x448]
call fcn.0040a290
mov byte [ebp - 4], 3
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x8b8]
push ecx
lea edx, [ebp - 0xae0]
push edx
call fcn.0040c0c0
add esp, 0xc
push 0x44994c
lea ecx, [ebp - 0x8b8]
call fcn.0040a310
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x8b8]
push ecx
lea edx, [ebp - 0xae0]
push edx
call fcn.0040c0c0
add esp, 0xc
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x10]
push eax
call fcn.0040c840
add esp, 4
mov word [ebp - 0x89c], 0
push 0x208
push 0
lea ecx, [ebp - 0x89a]
push ecx
call fcn.00421260
add esp, 0xc
push 0x104
lea edx, [ebp - 0x89c]
push edx
push str._TEMP_
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x89c]
push eax
lea ecx, [ebp - 0xb00]
call fcn.0040a290
mov byte [ebp - 4], 4
push str.SpecialFile
lea ecx, [ebp - 0xb00]
call fcn.0040a350
mov word [ebp - 0x224], 0
push 0x208
push 0
lea ecx, [ebp - 0x222]
push ecx
call fcn.00421260
add esp, 0xc
push 0x104
lea edx, [ebp - 0x224]
push edx
push str._ProgramFiles_
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0xb1c]
call fcn.0040a290
mov byte [ebp - 4], 5
push str.BaiduSd2.1BaiduSd_
lea ecx, [ebp - 0xb1c]
call fcn.0040a350
mov word [ebp - 0xac4], 0
push 0x206
push 0
lea ecx, [ebp - 0xac2]
push ecx
call fcn.00421260
add esp, 0xc
push str.Pizmdb.7z
lea edx, [ebp - 0xb00]
push edx
lea eax, [ebp - 0x688]
push eax
call fcn.0040b570
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x688]
call fcn.0040a370
push eax
push 0x104
lea ecx, [ebp - 0xac4]
push ecx
call fcn.00421c2b
add esp, 0xc
mov word [ebp - 0x42c], 0
push 0x206
push 0
lea edx, [ebp - 0x42a]
push edx
call fcn.00421260
add esp, 0xc
lea ecx, [ebp - 0xb1c]
call fcn.0040a370
push eax
push 0x104
lea eax, [ebp - 0x42c]
push eax
call fcn.00421c2b
add esp, 0xc
mov ecx, dword [str.2.1.0.3086]
mov dword [ebp - 0x66c], ecx
mov edx, dword [0x4499f0]
mov dword [ebp - 0x668], edx
mov eax, dword [0x4499f4]
mov dword [ebp - 0x664], eax
mov ecx, dword [0x4499f8]
mov dword [ebp - 0x660], ecx
mov edx, dword [0x4499fc]
mov dword [ebp - 0x65c], edx
mov ax, word [0x449a00]
mov word [ebp - 0x658], ax
push 0x1f2
push 0
lea ecx, [ebp - 0x656]
push ecx
call fcn.00421260
add esp, 0xc
mov word [ebp - 0xd24], 0
push 0x206
push 0
lea edx, [ebp - 0xd22]
push edx
call fcn.00421260
add esp, 0xc
mov eax, dword [ebp - 0x10]
push eax
push 0x449a04
lea ecx, [ebp - 0xd24]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0xae4], 1
mov edx, dword [ebp - 0xae4]
push edx
lea eax, [ebp - 0xd24]
push eax
lea ecx, [ebp - 0x66c]
push ecx
lea edx, [ebp - 0x42c]
push edx
lea eax, [ebp - 0xac4]
push eax
call fcn.0040bf30
add esp, 0x14
lea ecx, [ebp - 0x688]
call fcn.0040a370
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0xb00]
call fcn.0040a370
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x688]
call fcn.0040a2d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb1c]
call fcn.0040a2d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb00]
call fcn.0040a2d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x448]
call fcn.0040a2d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x464]
call fcn.0040a2d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8b8]
call fcn.0040a2d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xae0]
call fcn.0040a2d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004208a1
mov esp, ebp
pop ebp
ret