Function at 0x42a390
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53e818
mov eax, dword fs:[0]
push eax
mov eax, 0xcdf8
call fcn.0052c010
mov eax, dword [0x575494]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea esi, [ebp - 0xce00]
call fcn.004b4d70
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2134], ebx
mov dword [ebp - 0x2130], ebx
mov dword [ebp - 0x212c], ebx
mov dword [ebp - method.CFileMap.virtual_0], vtable.CMemMap.0
mov dword [ebp - 0x2124], ebx
mov dword [ebp - method.CSemaphore.virtual_0], vtable.CSemaphore.0
mov dword [ebp - 0x2120], ebx
mov dword [ebp - 0x211c], ebx
mov dword [ebp - 0x2118], ebx
mov dword [ebp - 0x2114], ebx
mov dword [ebp - 0x2110], ebx
mov byte [ebp - 0x210c], bl
mov dword [ebp - 0x2108], ebx
mov dword [ebp - 0x2100], ebx
mov dword [ebp - method.CUseDll.virtual_0], vtable.CUseDll.0
mov dword [ebp - 0x20fc], ebx
mov byte [ebp - 0x20f8], bl
mov dword [ebp - 0x20f4], ebx
mov dword [ebp - 0x20ec], ebx
mov dword [ebp - 0x20e8], ebx
mov dword [ebp - 0x20e4], ebx
mov byte [ebp - 0x20f0], bl
mov ecx, 0x1ab0
lea eax, [ebp - 0x20e0]
lea esp, [esp]
mov byte [eax], bl
inc eax
dec ecx
jne 0x42a470
lea eax, [ebp - 0x2138]
mov byte [ebp - 4], 1
call fcn.00475d20
xor eax, eax
xor ecx, ecx
mov word [ebp - 0x428], ax
lea eax, [ebp - 0x428]
mov word [ebp - 0x218], cx
lea esi, [ebp - 0x1796]
mov ecx, eax
mov edx, 0x105
sub esi, ecx
lea esp, [esp]
lea ecx, [edx + 0x7ffffef9]
test ecx, ecx
je 0x42a4ce
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x42a4ce
mov word [eax], cx
add eax, 2
dec edx
jne 0x42a4b0
jmp 0x42a4d2
cmp edx, ebx
jne 0x42a4d5
sub eax, 2
xor edx, edx
lea ecx, [ebp - 0x218]
mov word [eax], dx
push ecx
xor eax, eax
push 0x104
mov word [ebp - 0x630], ax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x42a63d
lea edx, [ebp - 0x630]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 - 0x21a], 0x5c
je 0x42a525
push 0x54ede0
lea esi, [ebp - 0x218]
call fcn.0042a260
lea eax, [ebp - 0x218]
push eax
push ebx
push 1
push 1
push ebx
lea eax, [ebp - 0x428]
lea esi, [ebp - 0xce00]
call fcn.004b56a0
lea ecx, [ebp - 0x218]
push ecx
push 1
push 1
push 1
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56a0
lea edx, [ebp - 0x218]
push edx
push ebx
push ebx
push 1
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56a0
lea eax, [ebp - 0x218]
push eax
push 1
push ebx
push 1
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56a0
lea ecx, [ebp - 0x218]
push ecx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56a0
lea edx, [ebp - 0x218]
push edx
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56a0
mov ecx, 0x104
lea eax, [ebp - 0x218]
cmp word [eax], bx
je 0x42a5d0
add eax, 2
dec ecx
jne 0x42a5c3
jmp 0x42a5f4
cmp ecx, ebx
je 0x42a5f4
mov edx, 0x104
sub edx, ecx
mov eax, 0x104
sub eax, edx
lea ecx, [ebp + edx*2 - 0x218]
lea edx, [ebp - 0x428]
call fcn.0042a2b0
mov edx, 0x104
lea eax, [ebp - 0x218]
nop
cmp word [eax], bx
je 0x42a60d
add eax, 2
dec edx
jne 0x42a600
jmp 0x42a630
cmp edx, ebx
je 0x42a630
mov ecx, 0x104
sub ecx, edx
mov eax, 0x104
sub eax, ecx
lea ecx, [ebp + ecx*2 - 0x218]
mov edx, str..xml
call fcn.0042a2b0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x2138]
push ecx
mov byte [ebp - 4], bl
call fcn.00475c30
lea edx, [ebp - 0xce00]
push edx
mov dword [ebp - 4], 0xffffffff
call fcn.004b5360
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0051eb9c
mov esp, ebp
pop ebp
ret