Function at 0x401b08
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x234
mov eax, dword [0x40c060]
xor eax, esp
mov dword [esp + 0x230], eax
push ebx
push esi
push edi
xor ebx, ebx
mov esi, 0x103
push esi
lea eax, [esp + 0x135]
mov edi, ecx
push ebx
push eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x13c], bl
call fcn.00402060
add esp, 0xc
push esi
lea eax, [esp + 0x2d]
push ebx
push eax
mov byte [esp + 0x34], bl
call fcn.00402060
add esp, 0xc
push ebx
push ebx
push ebx
push 0x65
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x10], edi
je 0x401b99
push 5
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
lea ecx, [esp + 0x18]
call fcn.004016d9
test eax, eax
jne 0x401bd9
cmp edi, ebx
je 0x401bb1
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
push ebx
push 0x40af68
push 0x40af78
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x401d55
lea eax, [esp + 0x18]
push eax
call fcn.004019e7
test eax, eax
jne 0x401bff
cmp edi, ebx
je 0x401bf2
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
push ebx
push 0x40af68
push 0x40afe8
jmp 0x401bbc
lea eax, [esp + 0x130]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x401d1f
lea eax, [esp + 0x28]
push eax
push ebx
push 0x40af58
lea eax, [esp + 0x13c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
je 0x401d1f
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [esp + 0x28]
push str..EXE
push eax
call fcn.00402450
pop ecx
mov edi, 0x104
mov ecx, edi
sub ecx, eax
push ecx
lea eax, [esp + 0x30]
push eax
call fcn.00402450
pop ecx
lea ecx, [esp + 0x30]
sub ecx, 4
add eax, ecx
push eax
call fcn.00402551
add esp, 0xc
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x1c]
call fcn.004017a0
test eax, eax
je 0x401d1b
cmp dword [esp + 0x10], ebx
je 0x401ca3
push dword [esp + 0x10]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x14]
add eax, 4
push eax
mov dword [esp + 0x18], eax
call fcn.00402450
test eax, eax
pop ecx
jbe 0x401cfb
lea eax, [esp + 0x28]
push eax
call fcn.00402450
pop ecx
mov ecx, esi
sub ecx, eax
push ecx
push 0x40af64
lea eax, [esp + 0x30]
push edi
push eax
call fcn.0040251b
lea eax, [esp + 0x38]
push eax
call fcn.00402450
add esp, 0x14
sub esi, eax
push esi
push dword [esp + 0x18]
lea eax, [esp + 0x30]
push edi
push eax
call fcn.0040251b
add esp, 0x10
lea eax, [esp + 0x18]
push eax
call fcn.0040192e
lea eax, [esp + 0x130]
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00401d6a
test eax, eax
jne 0x401d3a
mov edi, dword [esp + 0x10]
cmp edi, ebx
je 0x401d2a
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
push ebx
push 0x40af68
push str.CRC_
jmp 0x401bbc
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x10], ebx
je 0x401d55
push dword [esp + 0x10]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ecx, dword [esp + 0x23c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401dd7
mov esp, ebp
pop ebp
ret