Function at 0x422b30
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4562fe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x154
mov eax, dword [0x46e580]
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x14], eax
mov al, byte [edi + 0x2e8]
test al, al
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14c], edi
jne 0x422dc9
mov esi, dword [ebp + 8]
test esi, esi
je 0x422dc9
mov al, byte [esi + 0x54]
test al, al
je 0x422db3
call fcn.0044ac7e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x144], eax
mov dword [ebp - 4], 0
call fcn.0044ac7e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x3c]
mov edx, dword [esi + 0x34]
push eax
push ecx
push edx
lea eax, [ebp - 0x144]
push str._s_s_s
push eax
mov byte [ebp - 4], 1
call fcn.004025f0
mov ecx, dword [esi + 0x40]
mov edx, dword [esi + 0x3c]
mov eax, dword [esi + 0x34]
push ecx
push edx
push eax
lea ecx, [ebp + 8]
push str._s_s_s
push ecx
call fcn.004025f0
mov edx, dword [ebp + 8]
push edx
call fcn.00416be0
add esp, 0x2c
test al, al
je 0x422c47
mov eax, dword [ebp + 8]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x422c47
mov eax, dword [ebp + 8]
push 8
push ecx
mov edx, esp
mov dword [ebp - 0x150], esp
push eax
push 0x45c2d0
push edx
call fcn.004174f0
add esp, 0xc
mov ecx, edi
call fcn.00420d90
jmp 0x422d7a
mov ebx, dword [ebp - 0x144]
push 0
push ebx
mov byte [ebp - 4], 2
call fcn.004165d0
add esp, 8
lea ecx, [ebp - 0x140]
push ecx
mov edi, eax
push 0
push edi
mov dword [ebp - 0x150], edi
call fcn.00414680
add esp, 0xc
test eax, eax
je 0x422ca6
push eax
push ebx
push 0x45c294
push 3
call fcn.00418800
add esp, 0x10
push 0x466104
lea edx, [ebp - 0x154]
push edx
mov dword [ebp - 0x154], 0
call fcn.00434249
mov eax, dword [ebp + 8]
push eax
push 0
push edi
call fcn.004165f0
add esp, 0xc
test eax, eax
je 0x422ce5
push eax
push ebx
push 0x45c258
push 3
call fcn.00418800
add esp, 0x10
push 0x466104
lea ecx, [ebp - 0x15c]
push ecx
mov dword [ebp - 0x15c], 0
call fcn.00434249
push edi
call fcn.00416900
add esp, 4
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, dword [ebp - 0x14c]
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x148]
push eax
lea ecx, [edi + 4]
mov byte [ebp - 4], 3
call fcn.0040fac0
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp - 0x148]
push eax
push ecx
mov byte [ebp - 4], 4
call fcn.00433bd9
add esp, 8
test eax, eax
je 0x422d8f
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp - 0x148]
push edx
push eax
push ecx
push 0x45c22c
push 3
call fcn.00418800
mov eax, dword [esi + 0x14]
add esp, 0x14
push 0xc
push ecx
mov edx, esp
mov dword [ebp - 0x158], esp
push eax
push 0x45c218
push edx
call fcn.004174f0
add esp, 0xc
mov ecx, edi
call fcn.00420d90
lea ecx, [ebp - 0x148]
call fcn.00401e10
lea ecx, [ebp + 8]
call fcn.00401e10
lea ecx, [ebp - 0x144]
call fcn.00401e10
jmp 0x422dc9
lea ecx, [ebp - 0x148]
call fcn.00401e10
lea ecx, [ebp + 8]
call fcn.00401e10
lea ecx, [ebp - 0x144]
call fcn.00401e10
mov edi, dword [ebp - 0x14c]
mov dword [esi + 4], 5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x24], eax
inc dword [edi + 0x208]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004336ce
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4