Function at 0x402d30
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
push 1
call fcn.0040376a
add esp, 4
push 0
call fcn.0040381a
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x402d73
cmp dword [0x413a5c], 3
jne 0x402d73
push 0x40a2bc
call fcn.00404f20
add esp, 4
xor eax, eax
jmp 0x4031bc
cmp dword [0x4130d8], 0
jne 0x403182
call fcn.004033ae
mov dword [ebp - 0x10], eax
push 0x40a3f0
call fcn.004034cd
add esp, 4
push eax
call fcn.00403acb
add esp, 4
mov dword [ebp - 8], eax
cmp dword [0x4130d8], 0
je 0x402dde
cmp dword [ebp - 0x10], 0
je 0x402dde
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [0x4130d8], 0
push 0x40a3f0
call fcn.004034cd
add esp, 4
push eax
call fcn.00403acb
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0x2200
mov eax, dword [ebp - 0x14]
push eax
push 0x40a72c
call fcn.00404831
add esp, 8
push 0x40a71c
call fcn.00403d45
add esp, 4
test eax, eax
jl 0x402e19
push 0x200
push 0x40a71c
call fcn.00404831
add esp, 8
push 0x40a724
call fcn.00403d45
add esp, 4
test eax, eax
jl 0x402e66
push 0x40a724
push 0x40a71c
call fcn.00404b86
add esp, 8
test eax, eax
je 0x402e54
push 0x40a71c
push 0x40a724
call fcn.00404abf
add esp, 8
jmp 0x402e66
push 0x200
push 0x40a724
call fcn.00404831
add esp, 8
mov ecx, dword [ebp - 8]
push ecx
call fcn.00403b41
add esp, 4
push str.L_tDv
call fcn.00403d45
add esp, 4
test eax, eax
jl 0x402e9e
push 0x40a4b0
call fcn.004034cd
add esp, 4
push eax
push str.L_tDv
call fcn.00404604
add esp, 8
cmp dword [0x4130d8], 0
je 0x402ec0
push 0x40a3f0
call fcn.004034cd
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x403182
push 0x40a430
call fcn.004034cd
add esp, 4
mov dword [ebp - 0xc], eax
push 0x40a2fc
call fcn.00403d45
add esp, 4
test eax, eax
jl 0x402f26
mov edx, dword [ebp - 0xc]
push edx
call fcn.004047c1
add esp, 4
push 0
push 0x40a304
call fcn.00404604
add esp, 8
push 0
push 0x40a30c
call fcn.00404604
add esp, 8
push 0
push str.SWFTERM
call fcn.00404604
add esp, 8
push 0
call fcn.004047c1
add esp, 4
jmp 0x402f37
mov eax, dword [ebp - 0xc]
push eax
push 0x40a320
call fcn.00404604
add esp, 8
cmp dword [0x4130d8], 0
jne 0x40315a
push str.system.ini
push 0x40a3f0
call fcn.004034e3
add esp, 4
push eax
push str.SCRNSAVE.EXE
push str.boot
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push 1
push 0
push 1
push 0x11
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
cmp dword [0x413520], 0
jne 0x402f96
push 0x40a710
call fcn.00403d7b
add esp, 4
push eax
call fcn.00405740
add esp, 4
jmp 0x402fc2
push 0x40a710
call fcn.00403d45
add esp, 4
test eax, eax
jl 0x402fc2
push 0x40a6d0
call fcn.004034cd
add esp, 4
push eax
push 0x40a710
call fcn.00404604
add esp, 8
cmp dword [0x4130d8], 0
jne 0x403088
movsx ecx, byte [0x40a688]
test ecx, ecx
je 0x403088
push 0x40a430
lea edx, [ebp - 0x114]
push edx
call fcn.00406200
add esp, 8
push str..bbl
push 0x2e
lea eax, [ebp - 0x114]
push eax
call fcn.00406b50
add esp, 8
push eax
call fcn.00406200
add esp, 8
lea ecx, [ebp - 0x114]
push ecx
call fcn.004034cd
add esp, 4
mov dword [ebp - 0x118], eax
push 0x40a358
call fcn.00403d45
add esp, 4
test eax, eax
jl 0x40304d
mov edx, dword [ebp - 0x118]
push edx
push str.PREVIEWSWF
call fcn.00404604
add esp, 8
jmp 0x403088
push str.STUB
call fcn.00403d45
add esp, 4
test eax, eax
jl 0x403074
mov eax, dword [ebp - 0x118]
push eax
push str.PROJECTOR
call fcn.00404604
add esp, 8
jmp 0x403088
lea ecx, [ebp - 0x114]
push ecx
push 0x40a430
call fcn.004031d5
add esp, 8
movsx edx, byte [0x40a684]
cmp edx, 3
jne 0x40311e
push 0x413420
push 0x40a68c
call fcn.00406450
add esp, 4
mov ecx, 0x100
sub ecx, eax
sub ecx, 2
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
movsx edx, byte [0x413420]
test edx, edx
jne 0x4030cf
mov byte [0x40a684], 0
jmp 0x40311e
push 0x413420
call fcn.00406450
add esp, 4
movsx eax, byte [eax + 0x41341f]
cmp eax, 0x5c
je 0x4030fa
push 0x40a384
push 0x413420
call fcn.00406210
add esp, 8
push 0x40a68c
push 0x413420
call fcn.00406210
add esp, 8
push 0x413420
push str.README
call fcn.00404604
add esp, 8
cmp dword [0x4130d8], 0
jne 0x40312c
call fcn.00406090
movsx ecx, byte [0x40a530]
test ecx, ecx
je 0x403158
push 1
call fcn.00405c64
add esp, 4
push 0x40a530
call fcn.00404f20
add esp, 4
push 0
call fcn.00405c64
add esp, 4
jmp 0x403182
push 0x40a3f0
call fcn.004034cd
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x40a430
call fcn.004034cd
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [ebp - 4]
push edx
call fcn.00403b41
add esp, 4
call fcn.00405686
cmp dword [0x4130d8], 0
je 0x4031a9
push 0x40a570
call fcn.00404f20
add esp, 4
xor eax, eax
cmp dword [0x4130d8], 0
sete al
mov dword [0x40a748], eax
xor eax, eax
mov esp, ebp
pop ebp
ret