Function at 0x423433
Capabilities:
Delete file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a66d0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x32c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x118], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x117]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x324], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x323]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
push 0
lea ecx, [ebp - 0x118]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrRChrIA]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jne 0x4234c5
xor eax, eax
jmp 0x4236e2
lea edx, [ebp - 0x118]
push edx
push 0x104
lea eax, [ebp - 0x324]
push eax
call fcn.004154e0
push str.BFSDRV.sys
mov ecx, dword [ebp - 0x11c]
lea edx, [ebp - 0x118]
sub ecx, edx
mov eax, 0x104
sub eax, ecx
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
call fcn.004154e0
push str._bfsdll.dll
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 0x118]
sub edx, eax
mov ecx, 0x104
sub ecx, edx
push ecx
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 0x118]
sub edx, eax
lea ecx, [ebp + edx - 0x324]
push ecx
call fcn.004154e0
mov byte [ebp - 0x220], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x21f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edx, [ebp - 0x118]
push edx
push 0x4c25a4
push 0x104
lea eax, [ebp - 0x220]
push eax
call fcn.00403f50
add esp, 0x10
mov dword [ebp - 4], 0
call fcn.0043ae50
mov dword [ebp - 0x330], eax
push 3
lea ecx, [ebp - 0x118]
push ecx
mov ecx, dword [ebp - 0x330]
call fcn.0043b834
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x4235af
xor eax, eax
jmp 0x4236e2
call fcn.0043ae50
mov dword [ebp - 0x338], eax
push 4
lea edx, [ebp - 0x324]
push edx
mov ecx, dword [ebp - 0x338]
call fcn.0043b834
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jne 0x4235e4
xor eax, eax
jmp 0x4236e2
jmp 0x423601
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0
push 3
push 1
push 3
push 0x4c25ac
lea eax, [ebp - 0x220]
push eax
call fcn.00429069
add esp, 0x14
test eax, eax
jne 0x423632
jmp 0x4236be
call fcn.00428d00
test eax, eax
je 0x42364e
push 0x4c25b4
call fcn.00428d28
add esp, 4
test eax, eax
jne 0x42364e
jmp 0x4236be
call fcn.004291ed
test eax, eax
jne 0x423659
jmp 0x4236be
push 0x4c25bc
call fcn.00429272
add esp, 4
test eax, eax
jne 0x42366c
jmp 0x4236be
lea ecx, [ebp - 0x324]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
jne 0x42368a
jmp 0x4236be
push 0
mov edx, dword [ebp - 0x328]
push edx
call fcn.004231a5
add esp, 8
test eax, eax
jne 0x4236a1
jmp 0x4236be
call dword [0x5429b8]
test eax, eax
jne 0x4236ad
jmp 0x4236be
mov dword [ebp - 0x14], 1
xor eax, eax
test eax, eax
jne 0x42360f
push 0x80
lea ecx, [ebp - 0x118]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x118]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret