Function at 0x1003f14b
Capabilities:
Delete file
Get common file path

Disassembly:
push 0x174
mov eax, 0x100adb54
call fcn.10091010
mov esi, ecx
push 0x100bc7cc
lea ecx, [ebp - 0x134]
call fcn.10006fbe
xor ebx, ebx
lea eax, [ebp - 0x11c]
push 0x104
push ebx
push eax
mov dword [ebp - 4], ebx
call fcn.10090560
mov eax, dword [esi + 4]
add esp, 0xc
cmp dword [eax + 0x94], ebx
je 0x1003f469
push 1
push 0x1c
lea eax, [ebp - 0x11c]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
js 0x1003f458
lea eax, [ebp - 0x11c]
push eax
call fcn.10006fa1
pop ecx
push eax
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x134]
call fcn.10006f28
mov edi, 0x100ca554
lea ecx, [ebp - 0x164]
push edi
call fcn.10006fbe
push 0x100ca52c
push eax
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 1
push eax
call fcn.10005021
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 2
call fcn.10006abd
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], bl
call fcn.100072c0
sub esp, 0x18
mov ecx, esp
push 0x100ca560
call fcn.10006fbe
call fcn.10035d1f
test al, al
je 0x1003f394
push 0x2c7
push 0x100ca4d8
push 0x100ca570
push ecx
call fcn.10045657
pop ecx
push eax
call fcn.100448e6
add esp, 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14c]
cmp dword [ebp - 0x120], 0x10
lea eax, [ebp - 0x134]
push ecx
cmovae eax, dword [ebp - 0x134]
push eax
call fcn.10035fc0
push 5
lea eax, [ebp - 0x14c]
mov ecx, esi
push eax
call fcn.1003d2dd
test eax, eax
jne 0x1003f366
lea eax, [ebp - 0x164]
push eax
call fcn.1003f790
push eax
lea ecx, [ebp - 0x134]
call fcn.10003002
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.100072c0
push edi
lea ecx, [ebp - 0x17c]
call fcn.10006fbe
push 0x100ca590
push eax
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 4
push eax
call fcn.10005021
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 5
call fcn.10006abd
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 3
call fcn.100072c0
cmp dword [ebp - 0x120], 0x10
lea ecx, [ebp - 0x14c]
lea eax, [ebp - 0x134]
cmovae eax, dword [ebp - 0x134]
push ecx
push eax
call fcn.10035fc0
lea eax, [ebp - 0x14c]
mov ecx, esi
push eax
call fcn.1003ddfa
cmp dword [ebp - 0x138], 0x10
lea eax, [ebp - 0x14c]
cmovae eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.100072c0
jmp 0x1003f488
push 0x2d6
push 0x100ca4d8
push 0x100ca5ac
push ecx
call fcn.10045657
pop ecx
push eax
call fcn.100448e6
add esp, 0x10
lea eax, [ebp - 0x134]
mov ecx, esi
push 5
push eax
call fcn.1003d2dd
test eax, eax
jne 0x1003f488
lea eax, [ebp - 0x17c]
push eax
call fcn.1003f790
push eax
lea ecx, [ebp - 0x134]
call fcn.10003002
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.100072c0
push edi
lea ecx, [ebp - 0x164]
call fcn.10006fbe
push 0x100ca590
push eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 6
push eax
call fcn.10005021
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 7
call fcn.10006abd
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], bl
call fcn.100072c0
lea eax, [ebp - 0x134]
mov ecx, esi
push eax
call fcn.1003ddfa
jmp 0x1003f488
push 0x2be
push 0x100ca4d8
push 0x100ca4fc
jmp 0x1003f478
push 0x2e1
push 0x100ca4d8
push 0x100ca5c4
push ecx
call fcn.10045657
pop ecx
push eax
call fcn.100448e6
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.100072c0
call fcn.10090fbf
ret