Function at 0x423000
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x588035
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x5eb770]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x238], edi
xor ebx, ebx
push ebx
push str.Tool_DeleteINFSub
push ebx
lea ecx, [ebp - 0x244]
mov dword [ebp - 4], ebx
call fcn.0044ca70
add esp, 0xc
mov esi, dword [ebp + 0x10]
push esi
mov byte [ebp - 4], 1
mov eax, dword [ebp + 0xc]
push eax
push str.cstPath___s__MaxCount___d
lea ecx, [ebp - 0x244]
push 1
push ecx
call fcn.0044cd10
add esp, 0x14
lea ecx, [ebp - 0x260]
call fcn.0046c431
push 0x5b69a4
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 2
call fcn.00403340
mov byte [ebp - 4], 3
call fcn.0046d2d8
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x128]
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x228], ebx
cmp esi, ebx
jg 0x423168
mov esi, dword [ebp - 0x230]
push esi
push str.return___08x
lea ecx, [ebp - 0x244]
push 2
push ecx
call fcn.0044cd10
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x224]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4230fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 1
call fcn.0046c766
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0
call fcn.0044cc70
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42313e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0055649d
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp - 0x238]
xor ebx, ebx
mov esi, dword [ebp + 0xc]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x22c], ebx
call edx
cmp dword [esi - 4], ebx
lea ecx, [esi - 4]
jl 0x423196
cmp eax, dword [esi - 0x10]
jne 0x423196
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x4231ce
mov ecx, dword [esi - 0xc]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
je 0x423521
mov eax, dword [esi - 0xc]
mov dword [ebx + 4], eax
mov eax, dword [esi - 0xc]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.0055701e
add esp, 0x10
add ebx, 0x10
mov dword [ebp - 0x220], ebx
push 0x208
lea ecx, [ebp - 0x21c]
push 0
push ecx
mov byte [ebp - 4], 4
call fcn.0055ca80
mov eax, dword [ebp - 0x228]
add esp, 0xc
test eax, eax
js 0x423530
cmp eax, dword [edi + 0x20]
jge 0x423530
mov edx, dword [edi + 0x1c]
mov ebx, dword [edx + eax*4]
lea esi, [ebx + 0x78]
add edi, 0x58
mov ecx, 0x8b
push 0xffffffffffffffff
rep movsd dword es:[edi], dword [esi]
push 0
lea ecx, [ebp - 0x260]
call fcn.0046c510
add ebx, 0x14
push ebx
lea ecx, [ebp - 0x260]
call fcn.0046c890
mov ecx, dword [ebp - 0x228]
mov ebx, dword [ebp - 0x238]
lea eax, [ebp - 0x21c]
push eax
push ecx
mov dword [ebp - 0x230], 1
call fcn.0044c140
lea edx, [ebp - 0x21c]
push edx
lea ecx, [ebp - 0x24c]
call fcn.00403340
mov byte [ebp - 4], 5
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x220]
call fcn.0040fb30
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4232aa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x220]
mov eax, dword [ecx - 0xc]
add eax, 0xfffffffd
push eax
lea edx, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x220]
call fcn.0040a240
push 0x5baf98
push eax
lea eax, [ebp - 0x248]
push eax
mov byte [ebp - 4], 6
call fcn.0040a380
add esp, 0xc
mov byte [ebp - 4], 7
mov ecx, dword [eax]
mov edi, dword [ebp - 0x224]
lea eax, [ecx - 0x10]
add edi, 0xfffffff0
cmp eax, edi
je 0x423343
cmp dword [edi + 0xc], 0
lea ebx, [edi + 0xc]
jl 0x423333
mov edx, dword [eax]
cmp edx, dword [edi]
jne 0x423333
push eax
call fcn.00404900
mov esi, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebx], eax
dec eax
test eax, eax
jg 0x423328
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
add esi, 0x10
mov dword [ebp - 0x224], esi
jmp 0x423343
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [ebp - 0x224]
call fcn.004039c0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x248]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x423369
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x23c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42338f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x258]
xor esi, esi
test eax, eax
jle 0x423449
mov ebx, dword [ebp - 0x25c]
xor edi, edi
cmp dword [ebp - 0x234], edi
jle 0x42343a
test esi, esi
js 0x423530
cmp esi, dword [ebp - 0x258]
jge 0x423530
test edi, edi
js 0x423530
mov eax, dword [ebp + 8]
cmp edi, dword [eax + 8]
jge 0x423530
mov ecx, dword [eax + 4]
lea edx, [ecx + edi*4]
mov ecx, dword [ebx + esi*4]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x423526
mov eax, dword [edx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42341b
test dx, dx
je 0x423417
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42341b
add eax, 4
add ecx, 4
test dx, dx
jne 0x4233f5
xor eax, eax
jmp 0x423420
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x423434
inc edi
cmp edi, dword [ebp - 0x234]
jl 0x4233b3
jmp 0x42343a
inc dword [ebp - 0x22c]
mov eax, dword [ebp - 0x258]
inc esi
cmp esi, eax
jl 0x4233a5
cmp dword [ebp - 0x22c], eax
jne 0x423489
lea edi, [ebp - 0x21c]
call fcn.00423540
test eax, eax
jne 0x423489
mov esi, dword [ebp - 0x220]
push 0x20
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
call edi
mov edx, dword [ebp - 0x224]
push edx
mov dword [ebp - 0x230], eax
call edi
jmp 0x42348f
mov esi, dword [ebp - 0x220]
cmp dword [esi - 0xc], 0
mov edi, dword [esi - 0x10]
lea eax, [esi - 0x10]
je 0x4234e6
cmp dword [eax + 0xc], 0
lea ecx, [eax + 0xc]
jge 0x4234bc
cmp dword [esi - 8], 0
jl 0x423535
xor eax, eax
mov dword [esi - 0xc], 0
mov word [esi], ax
jmp 0x4234e6
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4234d2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [ebp - 0x220], eax
mov esi, eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x423506
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp eax, dword [ebp + 0x10]
jl 0x423160
jmp 0x4230b7
call fcn.00403b90
push 0x80004005
call fcn.004025a0
call fcn.004624e2
push 0x80070057
call fcn.004025a0
int3