Function at 0x432bb0
Capabilities:
Delete file

Disassembly:
sub rsp, 0x3e8
mov qword [rsp + 0x3e0], rbx
mov qword [rsp + 0x3d8], rbp
mov qword [rsp + 0x3d0], rsi
mov qword [rsp + 0x3c8], rdi
mov qword [rsp + 0x3c0], r12
mov r12, r8
mov rsi, rdx
mov rbp, rcx
mov qword [rsp + 0x60], 0xfffffffffffffffe
call fcn.004545a0
test eax, eax
je 0x432c71
xor r8d, r8d
lea rdx, str.CINIFile::GetDefinedDeviceIDS_n
lea rcx, [rsp + 0xb0]
call fcn.00486850
movabs rdx, 0x203a5952544e45
mov qword [rsp + 0x1b0], rdx
lea rdi, [rsp + 0x1b0]
xor eax, eax
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb0]
xor ecx, ecx
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
inc rcx
test al, al
jne 0x432c40
call fcn.004546e0
mov rcx, rax
call fcn.004545b0
call fcn.004546e0
mov rcx, rax
lea rdx, [rsp + 0x1b0]
call fcn.004548a0
xor ebx, ebx
mov rax, qword [0x004dfd00]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rax
lea rdx, [0x004af668]
lea rcx, [rsp + 0x50]
call fcn.0049b290
mov rdi, rax
lea rdx, [rbp + 0x1abc]
lea rcx, [rsp + 0x58]
call fcn.0049b290
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.0049b804
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.0049b31c
nop
lea rcx, [rsp + 0x48]
call fcn.0049b1dc
nop
lea rcx, [rsp + 0x58]
call fcn.0049b1dc
nop
lea rcx, [rsp + 0x50]
call fcn.0049b1dc
mov edx, 0xa
lea rcx, [rsp + 0x70]
call fcn.0049a7a0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.00401340
nop
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x432ea1
nop
nop
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.004012d0
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.0049b31c
nop
lea rcx, [rsp + 0x50]
call fcn.0049b1dc
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.0042fa40
test eax, eax
je 0x432e4f
xor r9d, r9d
lea r8, str.DEVICE
lea rdx, str._s_d
lea rcx, [rsp + 0x40]
call fcn.0049a324
mov edi, 1
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
lea r9, str.DEVICEID
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
mov rcx, rbp
call fcn.0044c5a0
test eax, eax
je 0x432e44
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x38]
call fcn.0049b398
mov rdx, qword [rsp + 0x38]
cmp dword [rdx - 8], 0
je 0x432df9
lea rcx, [rsp + 0x38]
call fcn.0049b664
lea rdx, [rsp + 0x38]
mov rcx, rsi
call fcn.0049a8fc
mov ebx, 1
mov r9d, edi
lea r8, str.DEVICE
lea rdx, str._s_d
lea rcx, [rsp + 0x40]
call fcn.0049a324
inc edi
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
lea r9, str.DEVICEID
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
mov rcx, rbp
call fcn.0044c5a0
test eax, eax
jne 0x432dc0
test ebx, ebx
jne 0x432e5d
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp qword [rsp + 0x48], 0
jne 0x432d30
jmp 0x432ea1
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.0049b31c
call fcn.004545a0
test eax, eax
je 0x432ea1
mov r8, qword [rsp + 0x30]
lea rdx, str.pcsINIFileName___s_n
lea rcx, [rsp + 0xb0]
call fcn.00486850
call fcn.004546e0
mov rcx, rax
lea rdx, [rsp + 0xb0]
call fcn.004548a0
call fcn.004545a0
test eax, eax
je 0x432f26
mov r8d, ebx
lea rdx, str.CINIFile::GetDefinedDeviceIDS_:_bRetVal___d_n
lea rcx, [rsp + 0xb0]
call fcn.00486850
movabs rdx, 0x20203a54495845
mov qword [rsp + 0x1b0], rdx
lea rdi, [rsp + 0x1b0]
xor eax, eax
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb0]
xor ecx, ecx
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
inc rcx
test al, al
jne 0x432ef4
call fcn.004546e0
mov rcx, rax
lea rdx, [rsp + 0x1b0]
call fcn.004548a0
call fcn.004546e0
mov rcx, rax
call fcn.004545c0
nop
lea rcx, [rsp + 0x70]
call fcn.0049a80c
nop
lea rcx, [rsp + 0x38]
call fcn.0049b1dc
nop
lea rcx, [rsp + 0x40]
call fcn.0049b1dc
nop
lea rcx, [rsp + 0x30]
call fcn.0049b1dc
mov eax, ebx
mov rbx, qword [rsp + 0x3e0]
mov rbp, qword [rsp + 0x3d8]
mov rsi, qword [rsp + 0x3d0]
mov rdi, qword [rsp + 0x3c8]
mov r12, qword [rsp + 0x3c0]
add rsp, 0x3e8
ret