Function at 0x45b400
Capabilities:
Delete directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66c3f0
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x759454]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
push str.AdobeGCData_folder:_checking_for_junction_symlink
push 0
push 4
push str.AGSService
push dword [0x75ea0c]
mov dword [ebp - 0x74], esi
call fcn.00511a90
mov ecx, esi
mov dword [ebp - 0x48], 0
add esp, 0x14
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45b463
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x58]
call fcn.00458850
sub esp, 0x18
mov dword [ebp - 4], 0
mov edx, esp
mov ecx, esi
mov dword [edx + 0x10], 0
lea edi, [ecx + 1]
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45b498
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.00458850
call fcn.0047edc0
add esp, 0x18
test al, al
je 0x45b580
push str.AdobeGCData_folder_is_a_junction__deleting_it_and_creating_new_again
push 0
push 4
push str.AGSService
push dword [0x75ea0c]
call fcn.00511a90
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x58]
add esp, 0x14
mov dword [ebp - 0x30], 0
cmp dword [ebp - 0x44], 0x10
lea edi, [ebp - 0x58]
mov dword [ebp - 0x2c], 7
cmovae edx, dword [ebp - 0x58]
add eax, edx
cmp dword [ebp - 0x44], 0x10
mov dword [ebp - 0x7c], eax
cmovae edi, dword [ebp - 0x58]
xor ecx, ecx
sub eax, edi
mov word [ebp - 0x40], cx
push eax
lea ecx, [ebp - 0x40]
call fcn.0044b2e0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x40]
push dword [ebp - 0x7c]
push edi
call fcn.00457620
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 1
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push dword [ebp - 0x74]
call fcn.00477960
mov edx, dword [ebp - 0x2c]
add esp, 4
cmp edx, 8
jb 0x45b8b9
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x45b8af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45b906
jmp 0x45b8af
push 1
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45b5a0
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.00458850
call fcn.0047d1b0
mov esi, eax
add esp, 0x1c
test esi, esi
je 0x45b8b9
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
push 0x6adfb8
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0045aec0
add esp, 0xc
push 0xe
push str.AdobeGCData.db
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.004586f0
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
movq qword [ebp - 0x78], xmm1
movups xmmword [ebp - 0x38], xmm0
cmp edx, 0x10
jb 0x45b660
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45b64d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45b90b
push edx
push ecx
call fcn.005e984c
movups xmm0, xmmword [ebp - 0x38]
add esp, 8
movq xmm1, qword [ebp - 0x78]
lea ecx, [ebp - 0x70]
movq qword [ebp - 0x18], xmm1
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 4], 2
call fcn.00442560
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00446be0
call fcn.0047edc0
add esp, 0x18
test al, al
je 0x45b6bc
push str.AdobeGCData.db_is_a_symlink__deleting_it
push 0
push 4
push str.AGSService
push dword [0x75ea0c]
call fcn.00511a90
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00614336
add esp, 0x18
push 0x6adfb8
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0045aec0
add esp, 0xc
push 0x15
push str.AdobeGCLaunchEvent.db
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.004586f0
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
movq qword [ebp - 0x78], xmm1
movups xmmword [ebp - 0x38], xmm0
cmp edx, 0x10
jb 0x45b742
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45b72f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45b910
push edx
push ecx
call fcn.005e984c
movups xmm0, xmmword [ebp - 0x38]
add esp, 8
movq xmm1, qword [ebp - 0x78]
lea ecx, [ebp - 0x70]
movq qword [ebp - 0x18], xmm1
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 4], 2
call fcn.00442560
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00446be0
call fcn.0047edc0
add esp, 0x18
test al, al
je 0x45b79e
push str.AdobeGCLaunchEvent.db_is_a_symlink__deleting_it
push 0
push 4
push str.AGSService
push dword [0x75ea0c]
call fcn.00511a90
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00614336
add esp, 0x18
push 0x6adfb8
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0045aec0
add esp, 0xc
push 0x13
push str.AdobeNGLAppIDMap.db
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004586f0
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
movq qword [ebp - 0x78], xmm1
movups xmmword [ebp - 0x38], xmm0
cmp edx, 0x10
jb 0x45b824
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45b811
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45b915
push edx
push ecx
call fcn.005e984c
movups xmm0, xmmword [ebp - 0x38]
add esp, 8
movq xmm1, qword [ebp - 0x78]
lea ecx, [ebp - 0x70]
movq qword [ebp - 0x18], xmm1
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 4], 2
call fcn.00442560
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00446be0
call fcn.0047edc0
add esp, 0x18
test al, al
je 0x45b880
push str.AdobeNGLAppIDMap.db_is_a_symlink__deleting_it
push 0
push 4
push str.AGSService
push dword [0x75ea0c]
call fcn.00511a90
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00614336
add esp, 0x18
push esi
call fcn.0047e5d0
mov edx, dword [ebp - 0x14]
add esp, 4
cmp edx, 0x10
jb 0x45b8b9
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45b8af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45b91a
push edx
push ecx
call fcn.005e984c
add esp, 8
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x45b8e9
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45b8df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45b91f
push edx
push ecx
call fcn.005e984c
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005e980b
mov esp, ebp
pop ebp
ret 4
call fcn.00608584
call fcn.00608584
call fcn.00608584
call fcn.00608584
call fcn.00608584
call fcn.00608584
int3