Function at 0x423770
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4ac8b8
mov eax, dword fs:[0]
push eax
sub esp, 0x148
mov eax, dword [0x4d4f10]
xor eax, esp
mov dword [esp + 0x144], eax
push ebp
push esi
push edi
mov eax, dword [0x4d4f10]
xor eax, esp
push eax
lea eax, [esp + 0x158]
mov dword fs:[0], eax
mov dword [esp + 0x160], 0
mov esi, dword [esp + 0x16c]
mov ebp, 0x10
cmp dword [esp + 0x180], ebp
jae 0x4237d1
lea esi, [esp + 0x16c]
sub esp, 0x1c
mov ecx, esp
mov eax, esi
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], 0
mov dword [esp + 0x2c], esp
mov byte [ecx + 4], 0
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4237f1
sub eax, edi
push eax
push esi
call fcn.00401d30
call fcn.00423690
add esp, 0x1c
test al, al
jne 0x42382f
cmp dword [esp + 0x180], ebp
jb 0x423add
mov eax, dword [esp + 0x16c]
push eax
call fcn.0047afc0
add esp, 4
jmp 0x423add
mov ecx, dword [esp + 0x17c]
add ecx, 0x32
push ecx
call fcn.004451aa
mov edx, dword [esp + 0x180]
add edx, 0x32
push edx
mov esi, eax
push 0
push esi
call fcn.0047ecc0
mov edx, dword [esp + 0x17c]
add esp, 0x10
cmp dword [esp + 0x180], ebp
jae 0x42386e
lea edx, [esp + 0x16c]
mov ecx, esi
mov al, byte [edx]
mov byte [ecx], al
inc edx
inc ecx
test al, al
jne 0x423870
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea eax, [esp + 0x14]
push eax
push esi
call ebp
mov edi, eax
cmp edi, 0xffffffff
jne 0x4238bd
test esi, esi
je 0x42389c
push esi
call fcn.0047afc0
add esp, 4
cmp dword [esp + 0x180], 0x10
jb 0x4238b6
mov ecx, dword [esp + 0x16c]
push ecx
call fcn.0047afc0
add esp, 4
xor al, al
jmp 0x423adf
test byte [esp + 0x14], 0x10
jne 0x4238f5
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [esp + 0x180], 0x10
jb 0x423add
mov edx, dword [esp + 0x16c]
push edx
call fcn.0047afc0
add esp, 4
jmp 0x423add
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x17c]
lea edi, [eax - 1]
cmp eax, edi
ja 0x42390f
call fcn.00445172
cmp dword [esp + 0x180], 0x10
mov eax, dword [esp + 0x16c]
jae 0x423927
lea eax, [esp + 0x16c]
cmp byte [eax + edi], 0x5c
je 0x42394b
mov eax, esi
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x423930
mov ecx, dword [0x4bcd40]
mov dword [eax], ecx
mov dl, byte [0x4bcd44]
mov byte [eax + 4], dl
jmp 0x42395f
mov edi, esi
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x423950
mov eax, dword [0x4bcd48]
mov dword [edi], eax
lea ecx, [esp + 0x14]
push ecx
push esi
call ebp
mov edi, eax
cmp edi, 0xffffffff
jne 0x42398e
test esi, esi
je 0x42397b
push esi
call fcn.0047afc0
add esp, 4
lea ecx, [esp + 0x168]
call fcn.00401ed0
xor al, al
jmp 0x423adf
test esi, esi
je 0x42399b
push esi
call fcn.0047afc0
add esp, 4
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [esp + 0x40]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4239a8
sub eax, edx
mov edx, dword [esp + 0x17c]
lea eax, [eax + edx + 0x32]
push eax
call fcn.004451aa
add esp, 4
cmp dword [esp + 0x180], 0x10
mov esi, eax
mov eax, dword [esp + 0x16c]
jae 0x4239df
lea eax, [esp + 0x16c]
lea ecx, [esp + 0x40]
push ecx
push eax
push str._s_s
push esi
call fcn.0047affb
add esp, 0x10
test byte [esp + 0x14], 0x10
je 0x423a87
mov ecx, 0x4ba374
lea eax, [esp + 0x40]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x423a27
test dl, dl
je 0x423a23
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x423a27
add eax, 2
add ecx, 2
test dl, dl
jne 0x423a07
xor eax, eax
jmp 0x423a2c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x423a80
mov ecx, 0x4bcd4c
lea eax, [esp + 0x40]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x423a60
test dl, dl
je 0x423a5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x423a60
add eax, 2
add ecx, 2
test dl, dl
jne 0x423a40
xor eax, eax
jmp 0x423a65
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x423a80
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push esi
call fcn.00401e40
call fcn.00423770
add esp, 0x1c
test byte [esp + 0x14], 0x10
jne 0x423a8a
push esi
call ebp
test esi, esi
je 0x423a97
push esi
call fcn.0047afc0
add esp, 4
lea edx, [esp + 0x14]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4239a1
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [esp + 0x180], 0x10
mov eax, dword [esp + 0x16c]
jae 0x423aca
lea eax, [esp + 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [esp + 0x168]
call fcn.00401ed0
mov al, 1
mov ecx, dword [esp + 0x158]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.0047afcb
add esp, 0x154
ret