Function at 0x1004b204
Capabilities:
Empty the recycle bin

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
test ecx, edi
jns 0x1004b24a
mov edi, dword [ebp - 0x1b]
mov dword [0x103a150d], esi
mov dword [ebp - 0x11], edi
sub al, 0x47
and esi, eax
or eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x15]
mov ecx, edi
movzx edx, word [ebp - 0x50]
xor ebx, ebx
mov esi, dword [ebp - 0xa]
movzx edi, byte [0x103a2adc]
add esi, dword [ebp - 0x40]
mov edi, edi
add edx, edi
mov ebx, 0xe795
mov ecx, ecx
add edx, dword [0x103a11bd]
cmp ecx, dword [0x103a1326]
je 0x1004b273
mov dword [ebp - 0x27], ecx
mov ecx, ecx
mov edi, dword [ebp - 0x41]
and esi, 0x8c6d
mov esi, 0x2d37
mov edx, ebx
mov bx, word [0x103a2faf]
mov esi, ebx
movzx ecx, ch
mov dword [0x103a11fe], edi
mov edx, dword [ebp - 4]
push ebx
mov dword [0x103a274a], ecx
mov ebx, edi
sub ebx, dword [ebp - 0x16]
mov dword [ebp - 8], esi
sub dword [ebp - 8], edx
mov esi, dword [ebp - 0x61]
mov esi, ebx
mov ebx, ecx
and bx, word [0x103a290b]
push eax
mov dword [ebp - 0x43], ecx
cmp ecx, ecx
jns 0x1004b374
add dword [ebp - 0x51], edi
mov dword [0x103a1caa], edi
mov dword [0x103a2d90], ecx
mov eax, dword [ebp - 0x55]
and esi, dword [ebp - 0x3a]
cmp ebx, dword [0x103a1f01]
jo 0x1004b2c8
mov ebx, dword [ebp - 0x18]
lea edi, [0x103a2c5f]
mov edi, dword [0x103a2c3a]
mov dword [0x103a2369], esi
mov edi, dword [ebp - 0x5c]
mov dword [0x103a22e9], eax
mov edx, dword [ebp - 0x32]
sub edx, dword [ebp - 0x23]
sub eax, dword [ebp - 0x46]
mov ecx, dword [ebp - 0xb]
cmp eax, dword [0x103a2f3d]
jne 0x1004b342
movzx ecx, bx
mov edx, 0xa92c
mov dx, word [0x103a1052]
sub eax, dword [ebp - 0x2a]
xor ecx, 0xb2ae
sub bx, di
add dword [ebp - 4], esi
call fcn.1004b713
mov dword [ebp - 0x30], edi
add edi, 0x4baf
movzx ecx, dx
and ebx, 0xb444
add ecx, ecx
mov edi, dword [0x103a2d90]
movzx eax, al
mov ebx, esi
movzx edx, bh
mov word [0x103a2a3d], si
mov dword [ebp - 0x58], eax
mov eax, dword [0x103a1c00]
or edx, dword [0x103a3144]
mov di, word [ebp - 0x2c]
movzx esi, dl
add esi, dword [ebp - 0x4e]
mov dword [ebp - 6], esi
mov ecx, 0x972a
lea esi, [0x103a1476]
xor ecx, eax
cmp eax, esi
jb 0x1004b371
xor ecx, dword [ebp - 0x3f]
mov ebx, dword [ebp - 0x11]
mov edi, dword [0x103a16dc]
mov esi, dword [0x103a2c5e]
cmp ecx, 0x972c336f
je 0x1004b388
cmp edi, 0xf1aefcae
js 0x1004b39f
movzx ecx, di
lea edx, [0x103a1720]
lea ebx, [0x103a2e87]
mov dword [0x103a2a34], edi
mov esi, dword [0x103a1379]
or ecx, dword [ebp - 0x61]
add eax, dword [ebp - 0x44]
movzx ebx, bh
sub dword [ebp - 0x49], edx
mov edi, eax
mov dword [ebp - 0x51], ecx
mov ecx, dword [0x103a2e54]
add word [str.Liidtz_m_TH.3_Qf:f5T4_touKE5dfTU_Ryt._KzE__t1_va_5d_HFiDV_Xwt___s_Y2j_Up_waPoJ:ntQ2fYBr.19w_k_W_b._nlr_y2ZFu_3V4wk_A__rHXwZyLJ_Eh1w_:_ne2Nd_Eo__yeaFV4i0Mza_mX_l2_Q_pt_T__iItIjReaTU__1_q___8_:I_FFBr66_N5cDiuPibR____wQs_2jyuQ4Up_TAI_E1_a96B863t7K__HU92_L_Gsuc1_v6x_mf_wXGx_qcp6nTG_qc_YtV_gp_KHNhyp_Eo5LL6_Rhsj_n_98nryIN7ubBL6FroAWn_Sv_q3O_CfWER_t4_PfWlb___TS_.a_IiuZZ5J_8HOXLZyl0Y1Siu__Y____en0D_l3a_VVB__XYgpy_1pn__P:F7va_tO_waQi_S._6y_v5krhcaUW_BVBm_mXJ07wARZFD6y_utt_RQyObWbusl__mK_AFc____SdmRN_L_Vs_2_k_be__SflC7OEHBztH:_xI_A__mvc:tnBrD_jS_x_atLysYxwWc_u__ROv12kGUbaJ_b:HztO_cGE6DfQ1aE_r9wIWfRvXb7f_nPWoHN_AKi_3mOc67v1TclNaeA3_EP_7_bvN_5a_fx_U_AW_T__UdL_f_x_d7QX_M_rlnG_yPBYCaUwM1____No_V_3q79KP35_NacGHp__tI6_VRBS43Z9RXmES3_SB3UEldEOHdt_LrX_Wh_Cj03yv_njGJq8cPr___XqOJQY._be_a_gIKWP__qsrUIok9___l.4:T7Z6:_P_KB2aQ__l_f_KC_ilQ9gjw3X__ib38bF0U__gY_8J_qDN__Ryxfa_1IX___Zf9czl_nXBI02__ljbiVqQh_dYp_Pj_zZm5__gs1SlVaVw_u_4Cxo5ukMki9GKMT0_10eL_s45_wu__QTn_Ul_fjpLc____0AbW_7__xCY_t_b__jZHRoYf7_z__e__kvc_d__3V__N__j6c.5O09TZk_jvrrbK_25___8cX7_lIBW3_TeGw_3A_qWE_c6l_gMEwx_cL5__N__YcZ_j_oI8_k_bcBYhN9_2_RCu_G_c__Z:_D_bd8_5_0_NeQuQ_gW_:M_B_VmB_6_o:_c_z_7vyqy_JOP_cZjKn_5FkBD5m_CTrVIrFYU_9Hl:__do___N_.gdwYK_9iOT_Z5Fd_pG_0yDD2_b2Tp__vNc4Og_noV_:ocHzNb_Jq_XHehdB_:_VPMlWu_q_7hh6pkUOnzOgsBzNa_w1_RQr2zBP0MQEfz2c8ZP_N_mc:_S_:UT_o9fPP3RIBuSp8U_S_Pm_2_bELvxQquRG2wj_____D7:_i_v_I_i0NZADGuq9_bM_MpL5MS_L_I___6Krl_CPm15_DK_v2:72aFY_YYKfdWbblYTKN_fdxcrk_Vo__Bn:8_IH_6y_97IN_UgXVw_0I_7_ww_0_N_L__qk:__QEh_VKxR.z_LL82qOuT_I4uQ_JvvnuzgA_e_12__.._F___fw11_iX_8CIB_Cxs_E_fTo3QXGEPK__Ht__0x_g_NmK_f_6__S_DhUE1OdHF_iM__kgfCo0Zy_Of___399_F4t7_dB3I50Kj_0fKAv_U.Os5PdBQhM6__ZNYslqXY_b_:__6qWUh_s.g7wsrPTN8jb_szUW____UXO2TfKoyVw__3___8I_jZZT_3_5mle.obux5xN_Xcq_Xg__aGsuBLJ_TMWPiY_zfGFQu_wWjZfhYo8_uP__D9HT_o0hU_44oxIn10t_Tn__w___voTGtYD_hSR6HYsoB4M8U___rjgyxJ.sFO_G___49CArO_4_6vgZO_Rhig2R__rQTjkUaz3b__X9Y_Hmcom_4_Q_R_PfshlY_474lGsRiTOfGKT5GHhY_5WapBv1z8H__v_RT.9_a2utSGCp_Uc___.kyB.__OeWvjG_qp8F._d7mi_Jco_FdxJ_D68AJVcg_fYZhVcdWX2x16baUteBX_rEX0Q_036L__rcdr__DtIn_XY3Qa8_ETP_r_m_FNPtlrQsz:LZG8Sz_ITU_ULTmiEL_gAwk_n_U0Y__e_z__YU__5_b_6CYPq_uR__E9_QpW_zq_2Y_S6p9O3h_Dg2am___a_2j__x___j8_Htm99mzDEDeT_Q_L7Rsc_ZXY_m_O_PZB_UXp_bc_EV_gK_Y_ZaN_X6xS__mnBU6H4G__J_.__BD67a9_44QuD3aMm7P8ajVev_Y4Z_9_z_nY3wJd8RVw75L9Y_X6____IYjdt_Lkp6iT_wE3ZM_B_geTJSk__Hba4N_NRnMJ_Ni__v.8Cz__re_VM9rSk_ve__h:ElPob_co.__dFAp_mxEw_7wC6Ws_aB_Lg3Yd_P_PvMZ_GIMZC___a____Ja2t9iq__6__OUJ3_I_Vlq_k_Cq_v7J__J:36BQ5Bc_lLgSo__j_XB_C__oDnDCKn_9VLrjgSV__pt4Qv_x___aCM_O_70LN_9eo_5NqJsBwq__g_.0353SOJ_g9p_P_SD_KoUKMZx_cQ__b_ha__P_P1CBJTMg_liB_M_D5_Jb_QetF3tE__1_5_9Q._npFm_Ns1iv_qj_sQH_eSDR_:jwsoXF3Fl_jz_jJT7uoUV_lIX_O__R_OhdnVaN__upho__w_gnI7awE_kKn_8M2tPt_eC_vyf.v_SPbGX3v_q_6_ZUmu_r_Uaegunnshi5yX____1cL.RvlP_HF_MxbT__ED_RK_hR4bWWLFabPG_xP_CUa9jec_MV___d_jlH_ijGVymzov_DQ0hH__EVhHFC_F_YLf__zGW_18VsbcF__On_7J_Uhf_o____k_pr___s7jLaYSWcw9f_aOo01a_OB_U:VDnA_OI._YQQ__D_C__M_:2o_N__Z8GSvj6.wG_g_yznCu0.x__k_1:9524_____.zezdb45F___xZ_FkRXxxQOb7oqqNLTn_UxC__daL_8o_.xap7QY_QBsFdpG_BR.._9Nki_5t_Y2n_QQ_8B_OH__.9_L.__E1WBQI_LZ_K.XAJUD1P.7__Q_Tg_e9akO.lNoeXtVmlVrI_I_GDa_VWQ1cgTC_iF4XDTA_1Aw6B_lvaHKWG_c___Bbl4fVL8DbE_5__RJ___LeE_wXBq1y_mUMszeR:YTi_6W_Bo__W_unqh_4OKp__v_N__uoQuLHI_5kp8__DCxnIzTsFn_aX__Vjsq_c_q_Ns_xUfi__8Wx_6tL4psBCK8_A8yeqlc0EXu_QA5yASx_Q9FWD___C1bcaWPcuBmUKM2_r_vmzQj___1Lh_j_Avqp4R_P_CSYvzD7Yn1__Hf_ne_XK_A__PJ__P_vqz3_ohcjwxD_d_vZmFdn0_A_7:._:KfyNIZwDkjzS__WW__4qKgG_bSIbu7np_OV1zoQ3_T8OUQN___UwkfvSy__U_NG_ut_2Y._zs__s_._Q4qs.ynStdHjmSEYBt_9:__b7ccDy_nLLD_AmUu_w4__v.Np_sv:P8NYo_Yl9niYxzr:_d0_CYS_HHZAmZw_6c8Kd_g5Zv_wA_hsu_a__I9Ab9c1NVo_QtXN2_n], si
mov dword [0x103a1876], edx
cmp ecx, dword [0x103a2565]
je 0x1004b3ec
and edi, eax
mov edx, ebx
movzx edx, dh
mov dword [ebp - 0x52], ecx
add edi, 0xce6f
call fcn.1004b4aa
mov esi, dword [ebp - 0x2b]
mov ecx, dword [0x103a2304]
mov ax, 0x9b50
mov esi, dword [ebp - 0xd]
mov esi, dword [ebp - 0x35]
mov esi, dword [ebp - 9]
cmp edx, 0xc62e3d01
je 0x1004b494
mov dword [ebp - 0x5a], ebx
movzx ebx, bh
and eax, edi
movzx eax, byte [ebp - 0x56]
or eax, esi
mov ecx, dword [0x103a124c]
call sub.SHELL32.dll_SHEmptyRecycleBinA
sub esi, dword [0x103a2921]
mov edx, 0x1da0
mov esi, dword [0x103a1a0a]
mov ebx, dword [ebp - 0x5f]
cmp edx, dword [0x103a2b05]
jb 0x1004b474
sub edx, eax
mov eax, edx
mov edi, dword [ebp - 0x51]
mov dword [0x103a2902], ecx
mov cx, si
xor ecx, edi
mov bh, dl
mov eax, esi
mov eax, 0xc3f3
sub esi, 0x1518
mov edx, dword [0x103a3099]
lea ecx, [0x103a3165]
mov cx, word [ebp - 0x37]
sub ebx, dword [ebp - 0x2c]
mov ecx, 0x2579
mov edi, eax
mov edx, 0xbf
mov edx, edi
or dword [ebp - 0x53], ebx
add eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x61]
sub edi, 0xe1d7
cmp ax, 0x9fd8
jns 0x1004b49c
mov eax, ebx
mov ecx, dword [ebp - 0x47]
mov esi, dword [ebp - 0x51]
pop eax
pop esi
leave
ret