Function at 0x43dae0
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4faf2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0xfdf4
call fcn.004f2630
push ebx
push esi
push edi
lea eax, [ebp - 0x104]
mov dword [ebp - 0x10], esp
xor esi, esi
push eax
mov dword [ebp - 4], esi
call fcn.004ab6e0
add esp, 4
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00401350
add esp, 4
lea edx, [ebp - 0x14]
lea eax, [ebp - 0xfe04]
mov dword [ebp - 0x14], esi
push edx
push eax
call fcn.004be9f0
add esp, 8
lea ecx, [ebp - 0x84]
push 1
call fcn.004f0653
mov ecx, dword [0x4fe4e8]
mov byte [ebp - 4], 1
push ecx
push 8
push str.c:endpcacheprocess_log.txt
lea ecx, [ebp - 0x84]
call fcn.004f0727
xor eax, eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], eax
cmp eax, dword [ebp - 0x14]
jge 0x43dd30
shl eax, 8
lea edx, [ebp + eax - 0xfe04]
push edx
call fcn.004fa6c0
mov ebx, eax
mov byte [ebp - 0x404], 0
push ebx
call fcn.0049c340
add esp, 8
mov esi, eax
push 0x5147b4
push esi
call fcn.004f2d80
push 0x5144fc
push esi
mov edi, eax
call fcn.004f2d80
add esp, 0x10
test edi, edi
jne 0x43dcc4
test eax, eax
jne 0x43dcc4
push esi
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x3c]
push ebx
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x104]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x404]
push eax
push 0x51c964
push edx
call fcn.004f175f
mov ecx, dword [0xe56d24]
mov eax, dword [0xe56db0]
add esp, 0x18
inc ecx
test eax, eax
mov dword [0xe56d24], ecx
jne 0x43dc6f
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
test eax, eax
lea eax, [ebp - 0x404]
push eax
push ecx
push edx
jne 0x43dc52
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x43dc69
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
push 0x80
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x404]
lea ecx, [ebp - 0x78]
push eax
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [0xe56cb4]
mov dword [ebp - 0x18], 1
inc eax
mov dword [0xe56cb4], eax
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x43db71
push esi
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x3c]
push eax
push ebx
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x104]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x404]
push 0x51c940
push eax
call fcn.004f175f
add esp, 0x18
lea ecx, [ebp - 0x404]
push ecx
lea ecx, [ebp - 0x78]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x43db71
lea edx, [ebp - 0x14]
lea eax, [ebp - 0xfe04]
xor ebx, ebx
push edx
push eax
mov dword [ebp - 0x14], ebx
call fcn.004bf110
add esp, 8
cmp ebx, dword [ebp - 0x14]
jge 0x43de55
mov ecx, ebx
shl ecx, 8
lea edx, [ebp + ecx - 0xfe04]
push edx
call fcn.004fa6c0
add esp, 4
mov esi, eax
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x3c]
push esi
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x104]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x404]
push eax
push 0x51c8fc
push edx
call fcn.004f175f
mov ecx, dword [0xe56d24]
mov eax, dword [0xe56db0]
add esp, 0x14
inc ecx
test eax, eax
mov dword [0xe56d24], ecx
jne 0x43de17
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
test eax, eax
lea eax, [ebp - 0x404]
push eax
push ecx
push edx
jne 0x43ddfa
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x43de11
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
lea eax, [ebp - 0x404]
lea ecx, [ebp - 0x78]
push eax
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov ecx, dword [0xe56cb4]
mov dword [ebp - 0x18], 1
inc ecx
inc ebx
mov dword [0xe56cb4], ecx
jmp 0x43dd48
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0xfe04]
xor ebx, ebx
push ecx
push edx
mov dword [ebp - 0x14], ebx
call fcn.004bed40
add esp, 8
cmp ebx, dword [ebp - 0x14]
jge 0x43dfab
mov eax, ebx
lea ecx, [ebp - 0x184]
shl eax, 8
push ecx
mov byte [ebp - 0x184], 0
lea esi, [ebp + eax - 0xfe04]
push esi
call fcn.004d9590
add esp, 8
lea edx, [ebp - 0x184]
push str.Microsoft
push edx
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x43dfa5
push esi
call fcn.004fa6c0
add esp, 4
mov esi, eax
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x3c]
push esi
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x104]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x404]
push eax
push 0x51c8b8
push edx
call fcn.004f175f
mov ecx, dword [0xe56d24]
mov eax, dword [0xe56db0]
add esp, 0x14
inc ecx
test eax, eax
mov dword [0xe56d24], ecx
jne 0x43df6f
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
test eax, eax
lea eax, [ebp - 0x404]
push eax
push ecx
push edx
jne 0x43df52
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x43df69
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
lea eax, [ebp - 0x404]
lea ecx, [ebp - 0x78]
push eax
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [0xe56cb4]
mov dword [ebp - 0x18], 1
inc eax
mov dword [0xe56cb4], eax
inc ebx
jmp 0x43de6d
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0xfe04]
xor ebx, ebx
push ecx
push edx
mov dword [ebp - 0x14], ebx
call fcn.004bef20
add esp, 8
cmp ebx, dword [ebp - 0x14]
jge 0x43e101
mov eax, ebx
lea ecx, [ebp - 0x184]
shl eax, 8
push ecx
mov byte [ebp - 0x184], 0
lea esi, [ebp + eax - 0xfe04]
push esi
call fcn.004d9590
add esp, 8
lea edx, [ebp - 0x184]
push str.Microsoft
push edx
call fcn.004f2d80
add esp, 8
test eax, eax
jne 0x43e0fb
push esi
call fcn.004fa6c0
add esp, 4
mov esi, eax
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x3c]
push esi
push eax
call fcn.004fa6c0
add esp, 4
lea ecx, [ebp - 0x104]
push eax
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x404]
push eax
push 0x51c8b8
push edx
call fcn.004f175f
mov ecx, dword [0xe56d24]
mov eax, dword [0xe56db0]
add esp, 0x14
inc ecx
test eax, eax
mov dword [0xe56d24], ecx
jne 0x43e0c5
mov eax, dword [0xe56dbc]
mov ecx, dword [ebp + 0x1b4]
mov edx, dword [ebp + 0x1b0]
test eax, eax
lea eax, [ebp - 0x404]
push eax
push ecx
push edx
jne 0x43e0a8
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x43e0bf
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
lea eax, [ebp - 0x404]
lea ecx, [ebp - 0x78]
push eax
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
mov eax, dword [0xe56cb4]
mov dword [ebp - 0x18], 1
inc eax
mov dword [0xe56cb4], eax
inc ebx
jmp 0x43dfc3
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43e1ca
lea ecx, [ebp - 0x3c]
push 0x51c890
push ecx
mov byte [ebp - 0x404], 0
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x104]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x404]
push 0x5190b4
push eax
call fcn.004f175f
mov eax, dword [0xe56db0]
add esp, 0x14
test eax, eax
jne 0x43e1a6
mov eax, dword [0xe56dbc]
mov edx, dword [ebp + 0x1b4]
lea ecx, [ebp - 0x404]
test eax, eax
mov eax, dword [ebp + 0x1b0]
push ecx
push edx
push eax
jne 0x43e189
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404170
jmp 0x43e1a0
sub esp, 0x1a8
mov ecx, 0x6a
lea esi, [ebp + 8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00404560
add esp, 0x1b4
lea ecx, [ebp - 0x404]
push ecx
lea ecx, [ebp - 0x78]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x84]
call fcn.004f076e
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.004f0714
lea ecx, [ebp - 0x70]
call fcn.004f05fb
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret