Function at 0x42b4a3
Capabilities:
Delete file
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x94
mov eax, dword [0x479b74]
xor eax, esp
mov dword [esp + 0x90], eax
mov eax, edx
xor edx, edx
push ebx
push esi
push edi
mov dword [esp + 0x28], eax
mov ebx, edx
and al, 1
mov dword [esp + 0x2c], edx
movzx edi, al
neg edi
mov dword [esp + 0x1c], edx
lea edx, [esp + 0x1c]
sbb edi, edi
and edi, 0xfffffff9
add edi, 7
mov dword [esp + 0x30], edi
call fcn.0042a313
mov esi, eax
mov dword [esp + 0x24], esi
test esi, esi
je 0x42b91e
xor eax, eax
push eax
push 0x2200000
push 3
push eax
push edi
push 0x10180
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
je 0x42b8c1
push 0x34
lea eax, [esp + 0x6c]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea edi, [esp + 0x40]
xor eax, eax
test byte [esp + 0x28], 0x20
mov dword [esp + 0x14], eax
push 0xa
pop ecx
rep stosd dword es:[edi], eax
mov edi, eax
mov dword [esp + 0x10], edi
je 0x42b572
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x18]
mov edx, esi
push eax
call fcn.0042dcc8
mov edi, dword [esp + 0x10]
test eax, eax
js 0x42b572
mov eax, dword [esp + 0x14]
jmp 0x42b575
xor eax, eax
inc eax
test eax, eax
jne 0x42b5b0
push edi
push esi
push 0x40d2e8
push 0x3000000
push 0x47bfe4
call fcn.0042a2a7
add esp, 0x14
test edi, edi
je 0x42b5a6
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, 0x2a9
jmp 0x42b8b5
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x68]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test eax, eax
je 0x42b894
push 0x28
lea eax, [esp + 0x44]
push eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandleEx]
test eax, eax
je 0x42b894
push 0x28
lea eax, [esp + 0x44]
mov dword [esp + 0x64], 0x2000
push eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
test eax, eax
je 0x42b883
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov dword [esp + 0x34], ecx
mov edi, ecx
mov dword [esp + 0x14], edi
mov byte [esp + 0xf], 1
test eax, eax
je 0x42b701
cmp word [eax], cx
je 0x42b701
push 0x3a
pop ecx
cmp word [eax + 2], cx
jne 0x42b701
call fcn.0042b441
test eax, eax
je 0x42b701
cmp dword [esp + 0x90], 1
jbe 0x42b701
push 0x10000
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
mov dword [esp + 0x14], edi
test edi, edi
je 0x42b774
mov eax, dword [esp + 0x1c]
push 0x3a
mov ax, word [eax]
mov word [edi], ax
pop eax
mov word [edi + 2], ax
lea eax, [edi + 4]
push eax
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x7ffc
push eax
xor eax, eax
push eax
push esi
mov esi, dword [0x47bfdc]
mov ecx, esi
call dword [0x47d838]
call esi
mov esi, eax
mov dword [esp + 0x20], esi
cmp esi, 0xffffffff
je 0x42b6fd
push dword [esp + 0x1c]
push edi
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x42b6ee
lea eax, [edi + 4]
mov dword [esp + 0x10], 0x7ffc
push eax
lea eax, [esp + 0x14]
push eax
push esi
mov esi, dword [0x47bfe0]
mov ecx, esi
call dword [0x47d838]
call esi
mov esi, dword [esp + 0x20]
test eax, eax
je 0x42b6f6
jmp 0x42b6b1
mov dword [esp + 0x34], 1
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [esp + 0x24]
push 0xd
push 1
lea eax, [esp + 0x17]
push eax
lea eax, [esp + 0x44]
push eax
push dword [esp + 0x28]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
mov dword [esp + 0x20], eax
test eax, eax
jns 0x42b790
push 0x40
push 4
lea eax, [esp + 0x2c]
mov dword [esp + 0x2c], 1
push eax
lea eax, [esp + 0x44]
push eax
push dword [esp + 0x28]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
test eax, eax
jns 0x42b790
cmp eax, 0xc0000003
jne 0x42b750
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.ntdll.dll_RtlNtStatusToDosError]
mov ebx, eax
push ebx
push esi
push 0x40d3c8
push 0x3000000
push 0x47bfe4
call fcn.0042a2a7
add esp, 0x14
jmp 0x42b798
push 0x40d358
push 0x3000000
push 0x47bfe4
call fcn.0042a2a7
add esp, 0xc
jmp 0x42b701
mov dword [esp + 0x2c], 1
cmp dword [esp + 0x34], 0
je 0x42b868
xor edx, edx
mov ecx, edi
call fcn.0042a313
test byte [esp + 0x28], 4
mov edi, eax
jne 0x42b7e5
push dword [esp + 0x14]
push 0x40d428
push 0x4000000
push 0x47bfe4
call fcn.0042a2a7
push edi
push 0x40d480
push 0x4000000
push 0x47bfe4
call fcn.0042a2a7
add esp, 0x20
xor eax, eax
push eax
push 0x2200000
push 3
push eax
push dword [esp + 0x40]
push 0x100
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, eax
mov dword [esp + 0x30], ecx
cmp ecx, 0xffffffff
je 0x42b851
mov eax, dword [esp + 0x68]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x40]
push 0x28
push eax
xor eax, eax
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
test eax, eax
jne 0x42b847
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
push 0x40d4e8
push 0x3000000
push 0x47bfe4
call fcn.0042a2a7
add esp, 0x14
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x42b868
push edi
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x42b86a
xor edi, edi
mov eax, dword [esp + 0x14]
test eax, eax
je 0x42b8b5
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x42b8b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
push ebx
push esi
push 0x40d568
jmp 0x42b8a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
push ebx
push esi
push 0x40d5f0
push 0x3000000
push 0x47bfe4
call fcn.0042a2a7
add esp, 0x14
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42b90d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp ebx, 5
jne 0x42b8f4
test dword [esp + 0x28], 0x20
jne 0x42b8f4
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x42b90d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
push ebx
push esi
push 0x40d668
jmp 0x42b8fb
push ebx
push esi
push 0x40d6c8
push 0x3000000
push 0x47bfe4
call fcn.0042a2a7
add esp, 0x14
push esi
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0x2c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004729c0
mov esp, ebp
pop ebp
ret