Function at 0x42de60
Capabilities:
Delete file
Get file size
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4b2472
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x568
push ebx
mov ebx, dword [esp + 0x580]
push ebp
xor ebp, ebp
push esi
cmp ebx, ebp
push edi
mov dword [esp + 0x38], ebp
je 0x42e95f
cmp word [ebx], bp
je 0x42e95f
push 0x4f4c50
lea ecx, [esp + 0x18]
call fcn.004a2cae
mov eax, dword [esp + 0x590]
mov esi, 1
cmp eax, ebp
mov dword [esp + 0x580], esi
je 0x42decc
push eax
lea ecx, [esp + 0x18]
call fcn.004a2dd1
push 0x4e2994
lea ecx, [esp + 0x18]
call fcn.004a0c6c
mov eax, dword [esp + 0x14]
cmp dword [eax - 8], ebp
jne 0x42df5c
lea ecx, [esp + 0x34]
push ecx
call fcn.0042d900
add esp, 4
mov eax, dword [eax]
lea ecx, [esp + 0x20]
push eax
mov byte [esp + 0x584], 2
call fcn.004a2cae
lea ecx, [esp + 0x34]
mov byte [esp + 0x580], 4
call fcn.00447cd0
push str.OEATemp_
lea ecx, [esp + 0x24]
call fcn.004a302b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push ebx
call fcn.0042f250
mov edx, dword [esp + 0x28]
add esp, 4
push eax
push edx
lea eax, [esp + 0x20]
push str._s_s_08X
push eax
call fcn.004a0c59
add esp, 0x14
lea ecx, [esp + 0x20]
mov byte [esp + 0x580], 1
call fcn.004a2c3a
push 0x4e2014
lea ecx, [esp + 0x18]
call fcn.004a302b
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0042d9f0
add esp, 4
test eax, eax
jne 0x42df83
push 0x2fa
push esi
jmp 0x42dfc2
push ebp
push ebp
push ebp
push ebx
call fcn.00412120
mov edi, eax
add esp, 0x10
cmp edi, ebp
jne 0x42df9d
push 0x301
push esi
jmp 0x42dfc2
push ebp
push ebp
push 3
push ebp
push 5
push SysReAllocStringLen
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [esp + 0x20], ebx
jne 0x42dff9
push 0x311
push 3
call fcn.0042d9d0
mov edi, dword [esp + 0x590]
add esp, 8
mov ecx, edi
push 0x4f4c50
call fcn.00447770
lea ecx, [esp + 0x14]
mov dword [esp + 0x38], esi
mov byte [esp + 0x580], 0
call fcn.004a2c3a
mov eax, edi
jmp 0x42e983
push 0x4f4c50
lea ecx, [esp + 0x34]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x48], ebp
call fcn.00447770
mov dword [esp + 0x7c], 0x4b88b8
mov dword [esp + 0x80], ebp
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x88], ebp
mov dword [esp + 0x84], ebp
mov dword [esp + 0x64], 0x4b88ac
mov dword [esp + 0x68], ebp
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebp
mov dword [esp + 0x6c], ebp
lea edx, [esp + 0x44]
mov byte [esp + 0x580], 7
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebp
push ebp
push ebp
push ebx
mov dword [esp + 0x44], eax
call esi
cmp edi, 4
jne 0x42e352
mov dword [esp + 0x10], 1
push str._OEAX_
lea ecx, [esp + 0x1c]
call fcn.004a2cae
mov ecx, 0xc
xor eax, eax
lea edi, [esp + 0xb8]
mov dword [esp + 0xb4], ebp
rep stosd dword es:[edi], eax
lea eax, [esp + 0xb8]
push 1
push eax
push ebp
push ebx
mov byte [esp + 0x590], 8
call esi
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xb4], eax
cmp eax, ecx
jne 0x42e0dd
mov ecx, dword [esp + 0xb8]
mov eax, dword [esp + 0x44]
cmp ecx, eax
je 0x42e33c
mov ecx, 0xdb
xor eax, eax
lea edi, [esp + 0x209]
mov byte [esp + 0x208], 0
rep stosd dword es:[edi], eax
push ebp
push ebp
stosw word es:[edi], ax
lea edx, [esp + 0x210]
push ebp
push edx
push ebx
stosb byte es:[edi], al
call fcn.004122d0
add esp, 0x14
test eax, eax
je 0x42e33c
mov eax, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
lea edx, [esp + 0x58]
push 1
push edx
push eax
push ebx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
call esi
lea eax, [esp + 0x238]
lea ecx, [esp + 0x3c]
push eax
call fcn.004a2cae
mov eax, dword [eax]
mov ecx, dword [esp + 0x18]
push eax
push ecx
call fcn.004380f6
add esp, 8
cmp eax, ebp
lea ecx, [esp + 0x3c]
sete byte [esp + 0x27]
call fcn.004a2c3a
mov al, byte [esp + 0x27]
test al, al
je 0x42e2bc
mov edx, dword [esp + 0x58c]
push edx
call fcn.0042f250
add esp, 4
lea ecx, [esp + 0x2c]
push eax
call fcn.00447770
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x4c]
push eax
mov byte [esp + 0x584], 9
call fcn.004a2cae
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push eax
push ecx
mov byte [esp + 0x588], 0xa
call fcn.0042e9a0
add esp, 8
lea ecx, [esp + 0x4c]
mov byte [esp + 0x580], 0xc
call fcn.004a2c3a
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x50]
push edx
call fcn.004a2cae
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x40]
push eax
mov byte [esp + 0x584], 0xd
call fcn.00447770
mov eax, dword [eax]
mov byte [esp + 0x580], 0xe
push eax
call fcn.0042ea70
add esp, 4
lea ecx, [esp + 0x40]
mov esi, eax
mov byte [esp + 0x580], 0xd
call fcn.00447cd0
cmp esi, ebp
je 0x42e25d
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov eax, dword [ecx - 8]
mov edi, dword [edx - 8]
sub eax, edi
lea ecx, [esp + 0x2c]
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.00448890
mov eax, dword [eax]
lea ecx, [esp + 0x50]
push eax
mov byte [esp + 0x584], 0xf
call fcn.004a2dd1
lea ecx, [esp + 0x48]
mov byte [esp + 0x580], 0xd
call fcn.00447cd0
mov ecx, dword [esp + 0x50]
push ecx
lea ecx, [esp + 0x20]
call fcn.00447770
mov eax, dword [eax]
push 0x77
lea edx, [esp + 0x23c]
push eax
push edx
call fcn.00438675
add esp, 0xc
lea ecx, [esp + 0x1c]
call fcn.00447cd0
lea ecx, [esp + 0x50]
mov byte [esp + 0x580], 0xc
call fcn.004a2c3a
lea ecx, [esp + 0x28]
mov byte [esp + 0x580], 9
call fcn.004a2c3a
lea ecx, [esp + 0x2c]
mov byte [esp + 0x580], 8
call fcn.00447cd0
mov esi, dword [esp + 0x6c]
push 0xffffffffffffffff
lea ecx, [esp + 0x68]
lea eax, [esi + 1]
push eax
call fcn.0042f0b0
mov edx, dword [esp + 0x68]
lea edi, [esi + esi*8]
shl edi, 5
add edi, edx
mov ecx, 0x48
lea esi, [esp + 0x208]
push 0xffffffffffffffff
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x88]
lea ecx, [esi + 1]
push ecx
lea ecx, [esp + 0x84]
call fcn.0042ef30
mov ecx, dword [esp + 0x80]
lea edx, [esi + esi*2]
mov byte [esp + 0x580], 7
lea eax, [esi + edx*4]
lea esi, [esp + 0xb4]
lea edi, [ecx + eax*4]
mov ecx, 0xd
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x18]
call fcn.004a2c3a
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x42e080
lea ecx, [esp + 0x18]
mov byte [esp + 0x580], 7
call fcn.004a2c3a
jmp 0x42e528
mov ecx, 0xc
xor eax, eax
lea edi, [esp + 0xb8]
mov dword [esp + 0xb4], ebp
rep stosd dword es:[edi], eax
mov ecx, 0x47
lea edi, [esp + 0xe9]
mov byte [esp + 0xe8], al
lea edx, [esp + 0x18]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
push ebp
push ebp
push ebx
stosb byte es:[edi], al
mov dword [esp + 0x28], ebp
call fcn.004120f0
add esp, 0x10
test eax, eax
je 0x42e670
mov eax, dword [esp + 0x18]
cmp eax, ebp
je 0x42e670
push eax
call fcn.004a2973
mov esi, eax
add esp, 4
cmp esi, ebp
je 0x42e65c
mov ecx, dword [esp + 0x18]
xor eax, eax
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x1c], ebp
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x1c]
push eax
push ecx
push esi
push ebx
call fcn.004120f0
add esp, 0x10
test eax, eax
je 0x42e4a7
mov dword [esp + 0x104], ebp
mov dword [esp + 0xfc], ebp
mov edx, dword [esi + 0x10]
mov dword [esp + 0x58], ebp
mov dword [esp + 0xf8], edx
mov eax, dword [esi + 0x14]
mov dword [esp + 0x100], eax
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x34]
mov edx, esi
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
mov eax, dword [edx]
mov dword [esp + 0xe8], eax
mov ecx, dword [edx + 4]
mov dword [esp + 0xec], ecx
mov eax, dword [edx + 8]
mov dword [esp + 0xf0], eax
mov ecx, dword [edx + 0xc]
mov edx, dword [esp + 0x58c]
push edx
mov dword [esp + 0xf8], ecx
call fcn.0042f250
add esp, 4
lea ecx, [esp + 0x28]
push eax
call fcn.00447770
mov eax, dword [esp + 0x28]
push 0x77
lea ecx, [esp + 0x11c]
push eax
push ecx
call fcn.00438675
add esp, 0xc
lea ecx, [esp + 0x28]
call fcn.00447cd0
jmp 0x42e4b6
push 0x35f
push 3
call fcn.0042d9d0
add esp, 8
push esi
call fcn.004a299c
mov esi, dword [esp + 0x88]
add esp, 4
lea ecx, [esp + 0x7c]
mov dword [esp + 0x10], 1
lea edx, [esi + 1]
push 0xffffffffffffffff
push edx
call fcn.0042ef30
mov edx, dword [esp + 0x80]
lea eax, [esi + esi*2]
push 0xffffffffffffffff
lea ecx, [esi + eax*4]
lea esi, [esp + 0xb8]
lea edi, [edx + ecx*4]
mov ecx, 0xd
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x70]
lea ecx, [esp + 0x68]
lea eax, [esi + 1]
push eax
call fcn.0042f0b0
mov eax, dword [esp + 0x68]
lea edi, [esi + esi*8]
shl edi, 5
add edi, eax
mov ecx, 0x48
lea esi, [esp + 0xe8]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xa0], 0x4b7088
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xac], ebp
mov dword [esp + 0xa8], ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0x580], 0x10
call fcn.004497d0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0xa8]
mov byte [esp + 0x588], 0x11
call fcn.00406130
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x98]
call fcn.00449e60
push ebp
push ebp
lea ecx, [esp + 0x80]
push ebp
push ecx
lea edx, [esp + 0xa0]
push ebp
lea eax, [esp + 0xb4]
push edx
push eax
push ebx
mov dword [esp + 0x98], ebp
call fcn.0042ce80
mov eax, dword [esp + 0xb4]
add esp, 0x20
cmp eax, ebp
jne 0x42e5ec
mov eax, dword [esp + 0x6c]
xor esi, esi
cmp eax, ebp
jle 0x42e5ec
mov ecx, dword [esp + 0x94]
push 0x4f4c50
push ecx
lea ecx, [esp + 0x98]
call fcn.0044a220
mov eax, dword [esp + 0x6c]
inc esi
cmp esi, eax
jl 0x42e5ca
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x10]
mov esi, eax
cmp ecx, ebp
mov dword [esp + 0x3c], esi
je 0x42e618
cmp eax, ebp
jne 0x42e618
push 0x39c
push 3
mov dword [esp + 0x18], ebp
call fcn.0042d9d0
add esp, 8
cmp dword [esp + 0x94], esi
je 0x42e634
push 0x3a2
push 1
mov dword [esp + 0x18], ebp
call fcn.0042d9d0
add esp, 8
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x78]
mov eax, dword [edx - 8]
add eax, ecx
cmp eax, 0x103
jl 0x42e684
push 0x3a9
push 0x29
call fcn.0042d9d0
add esp, 8
jmp 0x42e899
push 0x355
push 3
call fcn.0042d9d0
add esp, 8
jmp 0x42e528
push 0x34e
push 3
call fcn.0042d9d0
add esp, 8
jmp 0x42e528
cmp dword [esp + 0x10], ebp
je 0x42e899
lea ecx, [esp + 0x54]
call fcn.004497d0
test esi, esi
mov byte [esp + 0x580], 0x12
jle 0x42e7d7
xor esi, esi
xor edi, edi
mov eax, dword [esp + 0x80]
push 0
mov ecx, dword [eax + edi]
mov edx, dword [eax + edi + 4]
lea eax, [esp + 0x20]
mov dword [esp + 0x20], edx
push eax
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a29a7
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x48]
mov byte [esp + 0x580], 0x13
mov eax, dword [edx + ebp*4]
push eax
call fcn.004a2cae
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x584], 0x14
call fcn.004a3067
lea ecx, [esp + 0x48]
mov byte [esp + 0x580], 0x13
call fcn.004a2c3a
mov eax, dword [esp + 0x68]
lea ecx, [eax + esi + 0x30]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a302b
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x40]
push edx
call fcn.00447770
mov ecx, dword [esp + 0x68]
mov eax, dword [eax]
mov byte [esp + 0x580], 0x15
mov edx, dword [ecx + esi + 0x2c]
mov ecx, dword [ecx + esi + 0x28]
push edx
push ecx
push eax
push ebx
call fcn.0042db40
add esp, 0x10
lea ecx, [esp + 0x40]
mov ebx, eax
mov byte [esp + 0x580], 0x13
call fcn.00447cd0
test ebx, ebx
je 0x42e83b
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.00447770
push eax
mov eax, dword [esp + 0x5c]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x588], 0x16
call fcn.0044a310
lea ecx, [esp + 0x4c]
mov byte [esp + 0x580], 0x13
call fcn.00447cd0
lea ecx, [esp + 0x10]
mov byte [esp + 0x580], 0x12
call fcn.004a2c3a
mov eax, dword [esp + 0x3c]
mov ebx, dword [esp + 0x20]
inc ebp
add edi, 0x34
add esi, 0x120
cmp ebp, eax
jl 0x42e6ab
mov eax, dword [esp + 0x58]
xor esi, esi
test eax, eax
jle 0x42e886
mov edx, dword [esp + 0x30]
mov eax, dword [edx - 8]
test eax, eax
je 0x42e7fe
push 0x4e1930
lea ecx, [esp + 0x34]
call fcn.00448270
lea eax, [esp + 0x1c]
push esi
push eax
lea ecx, [esp + 0x5c]
call fcn.0042f220
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x584], 0x17
call fcn.004482b0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x580], 0x12
call fcn.00447cd0
mov eax, dword [esp + 0x58]
inc esi
cmp esi, eax
jl 0x42e7e5
jmp 0x42e886
lea ecx, [esp + 0x10]
mov byte [esp + 0x580], 0x12
call fcn.004a2c3a
mov eax, dword [esp + 0x58]
xor esi, esi
test eax, eax
jle 0x42e882
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x1c]
push esi
push ecx
lea ecx, [esp + 0x5c]
call fcn.0042f220
mov eax, dword [eax]
push eax
call edi
lea ecx, [esp + 0x1c]
call fcn.00447cd0
mov eax, dword [esp + 0x58]
inc esi
cmp esi, eax
jl 0x42e85c
mov ebx, dword [esp + 0x20]
lea ecx, [esp + 0x54]
mov byte [esp + 0x580], 0x11
call fcn.00449da0
xor ebp, ebp
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [esp + 0x588]
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
call fcn.00447670
lea ecx, [esp + 0x90]
mov dword [esp + 0x38], 1
mov byte [esp + 0x580], 0x10
call fcn.00449da0
mov dword [esp + 0xa0], 0x4b7088
mov eax, dword [esp + 0xa4]
mov byte [esp + 0x580], 0x18
cmp eax, ebp
je 0x42e8f6
push eax
call fcn.004a299c
add esp, 4
mov dword [esp + 0x64], 0x4b88ac
mov eax, dword [esp + 0x68]
mov byte [esp + 0x580], 0x19
cmp eax, ebp
je 0x42e917
push eax
call fcn.004a299c
add esp, 4
mov dword [esp + 0x7c], 0x4b88b8
mov eax, dword [esp + 0x80]
mov byte [esp + 0x580], 0x1a
cmp eax, ebp
je 0x42e93b
push eax
call fcn.004a299c
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x580], 1
call fcn.00447cd0
lea ecx, [esp + 0x14]
mov byte [esp + 0x580], 0
call fcn.004a2c3a
jmp 0x42e981
push 0x2e5
push 1
call fcn.0042d9d0
mov esi, dword [esp + 0x590]
add esp, 8
mov ecx, esi
push 0x4f4c50
call fcn.00447770
mov eax, esi
mov ecx, dword [esp + 0x578]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x574
ret