Function at 0x422ac0
Capabilities:
Delete file
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x471e1b
mov eax, dword fs:[0]
push eax
sub esp, 0xaf0
mov eax, dword [0x49ab20]
xor eax, esp
mov dword [esp + 0xae8], eax
push ebx
push esi
push edi
mov eax, dword [0x49ab20]
xor eax, esp
push eax
lea eax, [esp + 0xb00]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
mov ecx, 0x22b
lea edi, [esp + 0x244]
rep movsd dword es:[edi], dword [esi]
xor ebx, ebx
mov dword [esp + 0x28], ebx
movsb byte es:[edi], byte [esi]
call fcn.00424af0
lea ecx, [esp + 0x10]
call fcn.0040fbe0
push 0x216
lea eax, [esp + 0x30]
push ebx
push eax
mov dword [esp + 0xb14], ebx
call fcn.00451660
push 0x8ad
call fcn.00451b22
push 0x8ad
mov ebx, eax
push 0
push ebx
call fcn.00451660
mov ecx, 0x22b
lea esi, [esp + 0x260]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
push 0x47e250
push 0x20100506
push ebx
movsb byte es:[edi], byte [esi]
call fcn.0041f9c0
push 0x20100506
push 0x8ad
push ebx
call fcn.0041fa50
add esp, 0x34
test eax, eax
je 0x422cfb
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 1
mov dword [esp + 0x38], 0x8ad
mov dword [esp + 0x34], ebx
call fcn.004221f0
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x422ccc
xor edi, edi
cmp esi, eax
jb 0x422be6
call fcn.004533f0
mov ecx, dword [esp + 0x1c]
cmp dword [edi + ecx], 1
je 0x422ca6
mov edx, dword [esp + 0x20]
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x422c14
call fcn.004533f0
mov ecx, dword [esp + 0x1c]
cmp dword [edi + ecx], 0x64
je 0x422ca6
mov edx, dword [esp + 0x20]
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x422c42
call fcn.004533f0
mov ecx, dword [esp + 0x1c]
cmp dword [edi + ecx + 4], 0
je 0x422ca6
mov edx, dword [esp + 0x20]
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x422c6d
call fcn.004533f0
mov ecx, dword [esp + 0x1c]
cmp dword [edi + ecx + 8], 0
je 0x422ca6
push 0x20
lea ecx, [esp + 0x42c]
push ecx
push esi
lea ecx, [esp + 0x1c]
call fcn.0041fea0
mov edx, dword [eax + 8]
push edx
push esi
lea ecx, [esp + 0x20]
call fcn.0041fea0
mov eax, dword [eax + 4]
push eax
call fcn.00425e20
mov ecx, dword [esp + 0x2c]
add esp, 0x10
mov edx, dword [esp + 0x20]
sub edx, ecx
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
add edi, 0x216
cmp esi, eax
jb 0x422be6
push 0
push 0
lea ecx, [esp + 0x430]
push ecx
sub esp, 0x18
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call fcn.00421e60
mov eax, dword [ebp + 8]
push eax
call fcn.004210c0
add esp, 0x28
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, ecx
sub edx, esi
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x422dfb
xor ebx, ebx
cmp edi, eax
jb 0x422d33
call fcn.004533f0
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp dword [ebx + esi + 4], 0
je 0x422d6f
sub ecx, esi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x422d5a
call fcn.004533f0
mov esi, dword [esp + 0x1c]
mov edx, dword [ebx + esi + 4]
push edx
call fcn.00451a45
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
add esp, 4
sub ecx, esi
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x422d8f
call fcn.004533f0
mov esi, dword [esp + 0x1c]
lea ecx, [ebx + esi + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x422dcf
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x1c]
mov eax, 0x7aba01eb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x422dc0
call fcn.004533f0
mov ecx, dword [esp + 0x1c]
lea edx, [ebx + ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, ecx
sub edx, esi
mov eax, 0x7aba01eb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebx, 0x216
cmp edi, eax
jb 0x422d33
xor edi, edi
cmp esi, edi
je 0x422e0a
push esi
call fcn.0042eb59
add esp, 4
mov eax, dword [esp + 0x10]
push eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
call fcn.0042eb59
mov eax, dword [esp + 0x2c]
add esp, 4
mov ecx, dword [esp + 0xb00]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xae8]
xor ecx, esp
call fcn.004522e0
mov esp, ebp
pop ebp
ret