Function at 0x496210
Capabilities:
Empty the recycle bin
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x79f2ff
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x82f184]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x68], 0
mov dword [ebp - 4], 0
mov dword [ecx + 4], 6
mov dword [ecx], vtable.tt::engine::SmartCleanResult.0
mov dword [ecx + 8], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov edx, dword [eax + 0x48]
mov ecx, dword [eax + 0x44]
cmp ecx, edx
je 0x49629d
nop dword [eax + eax]
mov eax, dword [ecx]
add ecx, 8
mov byte [eax + 0xd], 0
cmp ecx, edx
jne 0x496290
mov eax, dword [esi + 0x14]
xor ecx, ecx
mov edx, dword [esi + 0x10]
mov edi, eax
sub edi, edx
xor esi, esi
add edi, 3
shr edi, 2
cmp edx, eax
cmova edi, ecx
test edi, edi
je 0x4962d8
nop word [eax + eax]
mov eax, dword [ebp - 0x4c]
lea edx, [edx + 4]
mov ecx, dword [edx - 4]
inc esi
mov eax, dword [eax + 0x44]
mov eax, dword [eax + ecx*8]
mov byte [eax + 0xd], 1
cmp esi, edi
jne 0x4962c0
lea eax, [ebp - 0x94]
mov dword [ebp - 0x94], 0x7d7f74
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], 0
mov esi, dword [eax]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x48], eax
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 2
call fcn.00496860
mov dword [ebp - 0x14], eax
mov edi, dword [esi]
sub esp, 0x28
mov esi, esp
mov dword [ebp - 0x48], esi
mov dword [esi + 0x24], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x496336
mov eax, dword [ecx]
push esi
mov eax, dword [eax]
call eax
mov dword [esi + 0x24], eax
mov esi, dword [ebp - 0x4c]
mov ecx, edi
add esi, 0x44
mov byte [ebp - 4], 3
push esi
call fcn.0044fd60
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x49636a
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x38]
cmp ecx, eax
setne al
push eax
call edx
mov dword [ebp - 0x14], 0
mov edi, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, edi
je 0x496392
mov edx, dword [ecx]
cmp byte [edx + 0xd], 0
je 0x49638b
mov byte [edx + 0xe], 1
mov eax, dword [ecx]
mov byte [eax + 0xc], 0
mov eax, dword [ecx]
mov byte [eax + 0xd], 0
add ecx, 8
cmp ecx, edi
jne 0x496373
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x70]
test ecx, ecx
je 0x4963b0
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x94]
cmp ecx, eax
setne al
push eax
call edx
mov eax, dword [ebp - 0x4c]
add eax, 0x64
mov dword [ebp - 0x3c], eax
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x58], eax
cmp edi, eax
je 0x496420
mov esi, dword [edi + 4]
test esi, esi
je 0x4963d3
lock inc dword [esi + 4]
mov esi, dword [edi + 4]
mov eax, dword [edi]
mov edx, dword [eax + 0x3c]
mov ecx, dword [eax + 0x38]
cmp ecx, edx
je 0x4963ed
nop
mov eax, dword [ecx]
add ecx, 8
mov byte [eax + 0xd], 0
cmp ecx, edx
jne 0x4963e0
mov byte [ebp - 4], 7
test esi, esi
je 0x496418
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x496418
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or ecx, 0xffffffff
mov eax, ecx
lock xadd dword [esi + 8], eax
jne 0x496418
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
add edi, 8
cmp edi, dword [ebp - 0x58]
jne 0x4963c5
mov eax, dword [ebp - 0x54]
xor edi, edi
mov dword [ebp - 0x58], edi
mov ecx, dword [eax + 0x20]
mov esi, dword [eax + 0x1c]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4964ba
xor ecx, ecx
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0x3c]
mov edx, dword [ecx + esi]
mov eax, dword [eax]
mov eax, dword [eax + edi*8]
mov dword [ebp - 0x48], eax
mov eax, dword [ecx + esi + 4]
mov edi, eax
sub edi, edx
xor esi, esi
add edi, 3
shr edi, 2
cmp edx, eax
cmova edi, esi
test edi, edi
je 0x49648b
nop
mov eax, dword [ebp - 0x48]
lea edx, [edx + 4]
mov ecx, dword [edx - 4]
inc esi
mov eax, dword [eax + 0x38]
mov eax, dword [eax + ecx*8]
mov byte [eax + 0xd], 1
cmp esi, edi
jne 0x496470
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x54]
add ecx, 0xc
mov edi, dword [ebp - 0x58]
mov dword [ebp - 0x64], ecx
inc edi
mov dword [ebp - 0x58], edi
mov ecx, dword [eax + 0x20]
mov esi, dword [eax + 0x1c]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [ebp - 0x64]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x496447
lea eax, [ebp - 0x94]
mov dword [ebp - 0x94], vtable..113.0
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x4c]
sub esp, 0x28
mov esi, esp
mov edi, dword [eax + 8]
mov dword [ebp - 0x48], esi
mov dword [esi + 0x24], 0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x70]
test ecx, ecx
je 0x4964f7
mov eax, dword [ecx]
push esi
mov eax, dword [eax]
call eax
mov dword [esi + 0x24], eax
mov byte [ebp - 4], 8
lea eax, [ebp - 0x24]
push dword [ebp - 0x3c]
mov ecx, edi
push eax
call fcn.004548e0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x18]
mov esi, dword [ebp - 0x18]
push dword [esi + 4]
call fcn.00455190
mov eax, dword [ebp - 0x18]
push 0x2c
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x18]
mov dword [eax], esi
mov eax, dword [ebp - 0x18]
mov dword [eax + 8], esi
push dword [ebp - 0x18]
mov dword [ebp - 0x14], 0
call fcn.0076d313
add esp, 8
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x70]
test ecx, ecx
je 0x49655e
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x94]
cmp ecx, eax
setne al
push eax
call edx
mov edi, dword [ebp - 0x54]
lea esi, [edi + 4]
mov byte [ebp - 4], 0
mov eax, dword [esi + 4]
sub eax, dword [esi]
sar eax, 2
mov dword [ebp - 0x48], esi
test eax, eax
je 0x4966ab
cmp byte [edi], 0
je 0x49665e
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
movups xmmword [ebp - 0x30], xmm0
movups xmmword [ebp - 0x20], xmm0
call fcn.00411040
mov byte [ebp - 4], 0xc
call fcn.00451090
mov edi, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
cmp esi, edi
je 0x49663a
nop
mov ecx, dword [esi]
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x49662f
mov ecx, dword [esi]
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ecx]
call dword [eax + 0x14]
mov eax, dword [esi]
cmp dword [eax + 8], 1
jne 0x49662f
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0x1f4
mov dword [ebp - 0x5c], 0
call fcn.004515b0
lea ecx, [ebp - 0x30]
call fcn.00412660
mov ecx, dword [esi]
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x49662f
mov ecx, dword [esi]
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ecx]
call dword [eax + 0x14]
lea ecx, [ebp - 0x60]
call fcn.004515b0
lea ecx, [ebp - 0x30]
call fcn.00412660
mov ecx, dword [esi]
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test al, al
jne 0x496603
add esi, 8
cmp esi, edi
jne 0x4965b0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x28]
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.00413a10
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x28], eax
call fcn.004132d0
mov esi, dword [ebp - 0x48]
push 0
push esi
lea eax, [ebp - 0x4d]
push eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xc]
call fcn.00490270
cmp byte [ebp - 0x4d], 0
je 0x4966ab
mov edi, dword [esi + 4]
mov edx, dword [esi]
cmp edx, edi
je 0x4966ab
nop
mov eax, dword [ebp - 0x4c]
mov esi, dword [eax + 0x78]
mov eax, dword [eax + 0x74]
cmp eax, esi
je 0x4966a4
nop dword [eax]
mov ecx, dword [eax + 8]
cmp ecx, dword [edx]
jne 0x49669d
mov ecx, dword [eax]
mov byte [ecx + 0x34], 0
add eax, 0xc
cmp eax, esi
jne 0x496690
add edx, 4
cmp edx, edi
jne 0x496680
mov eax, dword [ebp - 0x54]
cmp byte [eax + 1], 0
je 0x496799
xorps xmm0, xmm0
mov byte [ebp - 4], 0xd
push 0x18
movlpd qword [ebp - 0x60], xmm0
call fcn.0076d2e3
mov edi, eax
add esp, 4
mov dword [ebp - 0x48], edi
lea esi, [edi + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x68], 3
movlpd qword [ebp - 0x60], xmm0
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov dword [edi], vtable.Zn.0
mov dword [esi + 4], 3
mov dword [esi], vtable.tt::engine::RecycleBinCleanResult.0
mov dword [esi + 8], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], edi
call fcn.00429070
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x40], eax
mov dword [esi + 8], edx
call fcn.00427c60
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x44]
cmp esi, eax
je 0x496751
mov edi, eax
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x49673c
mov eax, dword [esi]
push 7
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
add esi, 0x18
cmp esi, edi
jne 0x496732
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0x44]
call fcn.00404220
or esi, 0xffffffff
mov byte [ebp - 4], 0xe
mov eax, esi
lea ecx, [edi + 4]
lock xadd dword [ecx], eax
jne 0x496782
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lea eax, [edi + 8]
lock xadd dword [eax], esi
dec esi
jne 0x496782
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0xc4], 0
mov dword [eax + 0xc0], 0
mov dword [ebp - 4], 0xf
mov ecx, dword [ebp + 0x34]
test ecx, ecx
je 0x4967b8
mov esi, dword [ecx]
lea eax, [ebp + 0x10]
cmp ecx, eax
setne dl
movzx edx, dl
push edx
call dword [esi + 0x10]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0076d59e
mov esp, ebp
pop ebp
ret 0x30