Function at 0x40a7fa
Capabilities:
Accept command line arguments
Delete file
Get common file path
Set uefi variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2214
call fcn.0040bbe0
push ebx
push esi
xor ebx, ebx
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0xb32a60], 0x16
jne 0x40a838
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
call dword [sym.imp.KERNEL32.dll_DebugBreak]
push ebx
lea eax, [ebp - 0x614]
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0xb32a60], 0x9e
jne 0x40a8aa
push ebx
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryW]
lea eax, [ebp - 0x214]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
lea eax, [ebp - 4]
push eax
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push ebx
push 0x4015a0
push ebx
call dword [sym.imp.KERNEL32.dll__hwrite]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_HeapSize]
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp esi, 0x187276e
jg 0x40a8bf
inc esi
cmp esi, 0x332beaf6
jl 0x40a80d
push edi
push 0x434010
push dword [0xb32a60]
push dword [0xb2d920]
call fcn.0040a4e0
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
xor edi, edi
cmp dword [0xb32a60], 0x10
jne 0x40a909
push ebx
call esi
push ebx
push ebx
push ebx
push 0x4015e4
push 0x4015ec
push ebx
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
push 0x401604
call dword [sym.imp.KERNEL32.dll_AddAtomA]
cmp edi, 0x1e673
jne 0x40a91b
add dword [0xb2d920], 0x141c
inc edi
cmp edi, 0x3e79e
jl 0x40a8de
mov edi, 0xdd9a7
cmp dword [0xb32a60], 0xc01
jne 0x40a973
push 0x401628
push 0x401630
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
push ebx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
push 0x40165c
push 0x401698
push 0x401748
push 0x4017a8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
dec edi
jne 0x40a929
call fcn.0040a2b4
push 0x445568
mov byte [0x445568], 0x6d
mov byte [0x445569], 0x73
mov byte [0x445572], 0x6c
mov byte [0x44556e], 0x32
mov byte [0x44556a], 0x69
mov byte [0x44556d], 0x33
mov byte [0x445573], bl
mov byte [0x44556c], 0x67
mov byte [0x445570], 0x64
mov byte [0x44556b], 0x6d
mov byte [0x445571], 0x6c
mov byte [0x44556f], 0x2e
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp dword [0xb32a60], 0x1144
pop edi
jne 0x40aaad
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetDllDirectoryA]
push ebx
push ebx
push 0x4017f0
push ebx
call dword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableW]
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x40170c
push ebx
call dword [sym.imp.KERNEL32.dll_CreateJobObjectW]
push ebx
lea eax, [ebp - 0x1214]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push ebx
push ebx
lea eax, [ebp - 0x614]
push eax
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push 0x401820
push 0x401874
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseActCtx]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
push ebx
call esi
push ebx
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
lea eax, [ebp - 8]
push eax
call esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
lea eax, [ebp - 0x1a14]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
lea eax, [ebp - 0x2214]
push eax
push 0x4018ac
call dword [sym.imp.KERNEL32.dll_GetProfileSectionW]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ActivateActCtx]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
pop esi
xor eax, eax
pop ebx
leave
ret