Function at 0x1003f49c
Capabilities:
Delete file
Get common file path

Disassembly:
push 0x18c
mov eax, 0x100adbb3
call fcn.10091010
mov edi, ecx
push 0x100bc7cc
lea ecx, [ebp - 0x134]
call fcn.10006fbe
xor ebx, ebx
lea eax, [ebp - 0x11c]
push 0x104
push ebx
push eax
mov dword [ebp - 4], ebx
call fcn.10090560
mov eax, dword [edi + 4]
add esp, 0xc
cmp dword [eax + 0xa0], ebx
je 0x1003f75d
push 1
push 0x1c
lea eax, [ebp - 0x11c]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
js 0x1003f74c
lea eax, [ebp - 0x11c]
push eax
call fcn.10006fa1
pop ecx
push eax
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x134]
call fcn.10006f28
mov esi, 0x100ca660
push esi
call fcn.10006fa1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x134]
call fcn.10006a1b
push 0x100ca688
lea ecx, [ebp - 0x164]
call fcn.10006fbe
mov esi, eax
push 0x100ca698
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 1
call fcn.10006fbe
push esi
push eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 2
push eax
call fcn.10005075
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x194]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 5
call fcn.100072c0
sub esp, 0x18
lea eax, [ebp - 0x17c]
mov ecx, esp
push eax
call fcn.10006ec7
call fcn.10035d1f
test al, al
je 0x1003f6bc
push 0x303
push 0x100ca5ec
push 0x100ca6a0
push ecx
call fcn.10045657
pop ecx
push eax
call fcn.100448e6
add esp, 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x14c]
cmp dword [ebp - 0x120], 0x10
lea eax, [ebp - 0x134]
push ecx
cmovae eax, dword [ebp - 0x134]
push eax
call fcn.10035fc0
push 7
lea eax, [ebp - 0x14c]
mov ecx, edi
push eax
call fcn.1003d2dd
test eax, eax
jne 0x1003f68e
lea eax, [ebp - 0x164]
push eax
call fcn.1003f790
push eax
lea ecx, [ebp - 0x134]
call fcn.10003002
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.100072c0
cmp dword [ebp - 0x120], 0x10
lea ecx, [ebp - 0x14c]
lea eax, [ebp - 0x134]
cmovae eax, dword [ebp - 0x134]
push ecx
push eax
call fcn.10035fc0
mov esi, 0x100ca6c4
push esi
call fcn.10006fa1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x134]
call fcn.10006a1b
lea eax, [ebp - 0x134]
mov ecx, edi
push eax
call fcn.1003da84
cmp dword [ebp - 0x138], 0x10
lea eax, [ebp - 0x14c]
cmovae eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.100072c0
jmp 0x1003f73c
push 0x312
push 0x100ca5ec
push 0x100ca6f0
push ecx
call fcn.10045657
pop ecx
push eax
call fcn.100448e6
add esp, 0x10
lea eax, [ebp - 0x134]
mov ecx, edi
push 7
push eax
call fcn.1003d2dd
test eax, eax
jne 0x1003f73c
lea eax, [ebp - 0x14c]
push eax
call fcn.1003f790
push eax
lea ecx, [ebp - 0x134]
call fcn.10003002
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.100072c0
mov esi, 0x100ca6c4
push esi
call fcn.10006fa1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x134]
call fcn.10006a1b
lea eax, [ebp - 0x134]
mov ecx, edi
push eax
call fcn.1003da84
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.100072c0
jmp 0x1003f77c
push 0x2fa
push 0x100ca5ec
push 0x100ca618
jmp 0x1003f76c
push 0x31d
push 0x100ca5ec
push 0x100ca708
push ecx
call fcn.10045657
pop ecx
push eax
call fcn.100448e6
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.100072c0
call fcn.10090fbf
ret