Function at 0x42aff0
Capabilities:
Connect network resource
Delete file
Read file on windows
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x2e0
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x521014]
xor ecx, ebp
mov dword [esp + 0x2d8], ecx
xor ecx, ecx
dec ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], ecx
cmp byte [eax + 0xb], 0
js 0x42b039
mov ecx, dword [eax + 8]
mov dword [esp + 0x60], ecx
movq xmm0, qword [eax]
movq qword [esp + 0x58], xmm0
jmp 0x42b047
lea ecx, [esp + 0x58]
push dword [eax + 4]
push dword [eax]
call fcn.0046d2b0
movzx ecx, byte [esp + 0x63]
mov eax, ecx
test cl, cl
jns 0x42b056
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x42b704
test cl, cl
jns 0x42b068
mov edx, dword [esp + 0x58]
jmp 0x42b06c
lea edx, [esp + 0x58]
lea edi, [esp + 0xa0]
mov ecx, edi
push eax
push edx
call fcn.00440f40
push edi
call fcn.004442c0
add esp, 4
mov ebx, eax
mov ecx, edi
call fcn.0046dbe0
test bl, bl
jne 0x42b45d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 3
je 0x42b0ac
cmp eax, 0x52e
jne 0x42bad7
xor ebx, ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.00445090
add esp, 4
mov dword [esp + 0xc], eax
push eax
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x42b0ff
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp esi, 0xffffffff
je 0x42c1d6
call fcn.0046eab0
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ebx, esi
lea eax, [ebx + 1]
mov dword [esp + 8], eax
cmp eax, 1
mov dword [esp + 4], ebx
jbe 0x42b5b8
xor eax, eax
lea ecx, [esp + 0x90]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
pxor xmm0, xmm0
lea esi, [esp + 0x2b0]
movdqu xmmword [esi + 0xc], xmm0
movdqa xmmword [esi], xmm0
push 0x1c
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
cmp eax, 0x1c
jne 0x42b2c3
mov eax, dword [esp + 0x2bc]
cmp eax, 0xffffffff
je 0x42b2c3
cmp dword [esp + 0x2c8], 0x40000
jne 0x42b2b7
push 0x20a
push 0
push edi
call fcn.0048ef90
add esp, 0xc
push 0x104
push edi
push dword [esp + 0x2b8]
push ebx
call sub.KERNEL32.dll_K32GetMappedFileNameW
dec eax
cmp eax, 0x103
ja 0x42b2b0
push edi
call fcn.004a4ac6
add esp, 4
push 1
push 4
push str..msi
push eax
push edi
call fcn.004453c0
add esp, 0x14
test al, al
je 0x42b2b0
push edi
call fcn.004a4ac6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x42c262
mov ebx, eax
cmp eax, 5
jae 0x42b1ef
mov byte [esp + 0x8b], bl
lea esi, [esp + 0x80]
test ebx, ebx
jne 0x42b225
jmp 0x42b234
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0048b346
add esp, 4
mov esi, eax
mov dword [esp + 0x80], eax
or edi, 0x80000000
mov dword [esp + 0x88], edi
lea edi, [esp + 0xa0]
mov dword [esp + 0x84], ebx
mov eax, ebx
add eax, ebx
push eax
push edi
push esi
call fcn.0048e490
add esp, 0xc
mov word [esi + ebx*2], 0
mov eax, dword [esp + 0x94]
cmp eax, dword [esp + 0x98]
jae 0x42b278
mov ecx, dword [esp + 0x88]
mov dword [eax + 8], ecx
movq xmm0, qword [esp + 0x80]
movq qword [eax], xmm0
add eax, 0xc
mov dword [esp + 0x94], eax
mov ebx, dword [esp + 4]
lea esi, [esp + 0x2b0]
jmp 0x42b2b0
lea ecx, [esp + 0x90]
lea eax, [esp + 0x80]
push eax
call fcn.0042c800
cmp byte [esp + 0x8b], 0
mov ebx, dword [esp + 4]
lea esi, [esp + 0x2b0]
jns 0x42b2b0
push dword [esp + 0x80]
call fcn.0048b376
add esp, 4
mov eax, dword [esp + 0x2bc]
add eax, dword [esp + 0x2b0]
jmp 0x42b138
mov eax, dword [esp + 0x94]
sub eax, dword [esp + 0x90]
cmp eax, 0xc
jne 0x42b90c
lea esi, [esp + 0x80]
xor eax, eax
dec eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov ecx, esi
call fcn.00440eb0
mov eax, dword [esp + 0x94]
movzx edx, byte [eax - 1]
test dl, dl
jns 0x42b30a
mov edx, dword [eax - 8]
mov eax, dword [eax - 0xc]
jmp 0x42b30d
add eax, 0xfffffff4
mov ecx, edi
push edx
push eax
call fcn.00440f40
push esi
push edi
call fcn.004d0c70
add esp, 8
mov ebx, eax
mov ecx, edi
call fcn.0046dbe0
test bl, bl
je 0x42b9e8
cmp byte [esp + 0x73], 0
movzx eax, byte [esp + 0x8b]
js 0x42bc78
test al, al
js 0x42b364
mov eax, dword [esp + 0x88]
mov dword [esp + 0x70], eax
movq xmm0, qword [esp + 0x80]
movq qword [esp + 0x68], xmm0
jmp 0x42b37b
lea ecx, [esp + 0x68]
push dword [esp + 0x84]
push dword [esp + 0x84]
call fcn.00440160
lea ecx, [esp + 0x80]
call fcn.0046dbe0
mov edi, dword [esp + 0x90]
test edi, edi
je 0x42b3d2
mov eax, dword [esp + 0x94]
cmp eax, edi
je 0x42b635
lea esi, [eax - 0xc]
cmp byte [eax - 1], 0
jns 0x42b3b5
push dword [eax - 0xc]
call fcn.0048b376
add esp, 4
mov eax, esi
cmp esi, edi
jne 0x42b3a1
mov eax, dword [esp + 0x90]
mov dword [esp + 0x94], edi
push eax
call fcn.0048b376
add esp, 4
lea edi, [esp + 0xa0]
mov eax, dword [esp + 8]
cmp eax, 2
jb 0x42b3f3
call fcn.0046eab0
push dword [esp + 4]
call fcn.00471760
add esp, 4
test bl, bl
je 0x42b586
movzx eax, byte [esp + 0x73]
test al, al
jns 0x42b40e
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
jmp 0x42b412
lea edx, [esp + 0x68]
mov ecx, edi
push eax
push edx
call fcn.00440f40
push edi
call fcn.004442c0
add esp, 4
mov ebx, eax
mov ecx, edi
call fcn.0046dbe0
test bl, bl
je 0x42b586
cmp byte [esp + 0x63], 0
movzx eax, byte [esp + 0x73]
js 0x42bc5b
test al, al
js 0x42b4be
mov eax, dword [esp + 0x70]
mov dword [esp + 0x60], eax
movq xmm0, qword [esp + 0x68]
movq qword [esp + 0x58], xmm0
mov eax, dword [ebp + 0x10]
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x2b0], xmm0
movzx ecx, byte [eax + 0xb]
mov edx, ecx
test cl, cl
jns 0x42b47a
mov edx, dword [eax + 4]
test edx, edx
jne 0x42b4ed
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x14a
push str.GetPartnerPackageOverrideGUIDMarker
push 0
call fcn.004b9b40
lea edi, [esp + 0xdc]
mov ecx, edi
push 0x508319
push str.partner_package_guid
call fcn.004b5d50
mov ecx, edi
push 0x50893f
push 0x508908
jmp 0x42b531
lea ecx, [esp + 0x58]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
call fcn.00440160
mov bl, 1
cmp byte [esp + 0x73], 0
jns 0x42b4e4
push dword [esp + 0x68]
call fcn.0048b376
add esp, 4
test bl, bl
je 0x42b53d
jmp 0x42b45d
test cl, cl
jns 0x42b4f3
mov eax, dword [eax]
lea ecx, [esp + 0x2b0]
push ecx
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
test eax, eax
jns 0x42b572
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x151
push str.GetPartnerPackageOverrideGUIDMarker
push 0
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508b08
push str.Failed_to_decode_guid_string:_assuming_no_override_for_brand_package.
call fcn.004b5d50
mov ecx, esi
call fcn.004379a0
mov eax, dword [ebp + 8]
mov dword [eax], 0
cmp byte [esp + 0x63], 0
jns 0x42b559
push dword [esp + 0x58]
call fcn.0048b376
add esp, 4
mov ecx, dword [esp + 0x2d8]
xor ecx, ebp
call fcn.0048b980
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
cmp byte [esp + 0x63], 0
jns 0x42b63c
mov eax, dword [esp + 0x58]
jmp 0x42b640
xor eax, eax
dec eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
movzx eax, byte [esp + 0x63]
test al, al
jns 0x42b736
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
jmp 0x42b73a
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x2b0]
push eax
push edi
call fcn.004b9e70
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0xea
push str.FindMsiDatabaseLocalCopy
push 1
call fcn.004b9c70
lea ebx, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x5089bc
push str.Failed_to_open_parent_process_id
call fcn.004b5d50
mov ecx, ebx
push dword [esp + 0xc]
call fcn.004b5c00
mov ecx, esi
call fcn.004b9cb0
cmp byte [edi + 0xb], 0
jns 0x42b62e
push dword [esp + 0x2b0]
call fcn.0048b376
add esp, 4
xor ebx, ebx
jmp 0x42b3d2
mov eax, edi
jmp 0x42b3c2
lea eax, [esp + 0x58]
sub esp, 0x1c
movdqa xmm0, xmmword [0x5082e0]
movdqu xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp eax, 0xffffffff
jne 0x42b6b3
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3c8
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x5085c0
push str.Failed_to_open_msi_file_for_reading
call fcn.004b5d50
mov ecx, esi
call fcn.004379a0
mov eax, dword [ebp + 8]
mov dword [eax], edi
jmp 0x42bd0b
lea eax, [esp + 0x50]
xor ecx, ecx
dec ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
xor edi, edi
push 2
push eax
push edi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x42ba66
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3d0
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508610
push str.Failed_to_get_source_file_size_for_extracted_package_validation.
jmp 0x42bcf2
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x12b
push 0x5088f0
push 0
call fcn.004b9b40
lea edi, [esp + 0xdc]
mov ecx, edi
push 0x508304
push str.msi_database
jmp 0x42b4ab
lea edx, [esp + 0x58]
lea esi, [esp + 0x2b0]
mov ecx, esi
push eax
push edx
call fcn.00440f40
mov ecx, esi
push edi
call fcn.0046dc00
cmp byte [esp + 0xab], 0
jns 0x42b778
lea ecx, [esp + 0x90]
push dword [esp + 0xa4]
push dword [esp + 0xa4]
call fcn.0046d2b0
jmp 0x42b798
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x98], eax
movq xmm0, qword [esp + 0xa0]
movq qword [esp + 0x90], xmm0
lea ecx, [esp + 0xa0]
call fcn.0046dbe0
lea esi, [esp + 0x2b0]
mov ecx, esi
call fcn.0046dbe0
pxor xmm0, xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
cmp byte [esp + 0x9b], 0
jns 0x42b7d2
mov eax, dword [esp + 0x90]
jmp 0x42b7d9
lea eax, [esp + 0x90]
mov dword [esp + 0x2c4], eax
mov eax, 0x508a1e
push 8
push eax
push eax
push esi
call sub.MPR.dll_WNetAddConnection2W
test eax, eax
sete bl
jne 0x42b848
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x123
push str.ConnectInteractiveToFileIfLogonFailure
push 0
call fcn.004b9b40
lea edi, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x508a9e
push str.Successfully_connected_to
call fcn.004b5d50
lea eax, [esp + 0x90]
mov ecx, edi
push eax
call fcn.004b5c70
mov ecx, esi
call fcn.004379a0
jmp 0x42b8ea
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x80]
push eax
push edi
call fcn.004b9e70
add esp, 8
lea ecx, [esp + 0xa0]
push edi
push 0x120
push str.ConnectInteractiveToFileIfLogonFailure
push 1
call fcn.004b9c70
lea edi, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x508a6c
push str.Failed_WNetAddConnection2_with_error
call fcn.004b5d50
mov ecx, edi
push esi
call fcn.004b5c00
mov esi, eax
lea ecx, [eax + 0x34]
push 0x508a83
push str._during_connection_to
call fcn.004b5d50
lea eax, [esp + 0x90]
mov ecx, esi
push eax
call fcn.004b5c70
lea ecx, [esp + 0xa0]
call fcn.004b9cb0
lea eax, [esp + 0x80]
cmp byte [eax + 0xb], 0
jns 0x42b8ea
push dword [esp + 0x80]
call fcn.0048b376
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x42b4d1
push dword [esp + 0x90]
call fcn.0048b376
add esp, 4
jmp 0x42b4d1
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x80]
push eax
push edi
call fcn.004b9e70
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0x10c
push str.FindMsiDatabaseLocalCopy
push 1
call fcn.004b9c70
lea ebx, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x508a1c
push str.Unexpected_count_of_local_mapped_msi_
call fcn.004b5d50
mov eax, dword [esp + 0x94]
sub eax, dword [esp + 0x90]
sar eax, 2
imul eax, eax, 0xaaaaaaab
mov ecx, ebx
push eax
call fcn.004b6300
mov ecx, esi
call fcn.004b9cb0
cmp byte [edi + 0xb], 0
jns 0x42b996
push dword [esp + 0x80]
call fcn.0048b376
add esp, 4
mov edi, dword [esp + 0x90]
mov esi, dword [esp + 0x94]
cmp edi, esi
je 0x42bb3a
lea ebx, [esp + 0xa0]
mov ecx, ebx
push 0x10e
push str.FindMsiDatabaseLocalCopy
push 0
call fcn.004b9b40
lea ecx, [esp + 0xa8]
push edi
call fcn.004b5c70
mov ecx, ebx
call fcn.004379a0
add edi, 0xc
xor ebx, ebx
cmp edi, esi
jne 0x42b9ac
jmp 0x42b387
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x74]
push eax
push edi
call fcn.004b9e70
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0x105
push str.FindMsiDatabaseLocalCopy
push 1
call fcn.004b9c70
lea ecx, [esp + 0xdc]
push 0x5089f4
push str.DevicePathToDriveLetterPath_failed_for_path
call fcn.004b5d50
mov eax, dword [esp + 0x94]
add eax, 0xfffffff4
lea ecx, [esp + 0xa8]
push eax
call fcn.004b5c70
mov ecx, esi
call fcn.004b9cb0
cmp byte [edi + 0xb], 0
jns 0x42b37b
push dword [esp + 0x74]
call fcn.0048b376
add esp, 4
jmp 0x42b37b
mov dword [esp + 0x4c], 0xffffffff
mov dword [esp + 0x48], 0xfffffff0
sub esp, 0x14
movq xmm0, qword [esp + 0x5c]
movq qword [esp + 4], xmm0
mov dword [esp], ebx
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], 0
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x42bb41
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3d7
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x50863e
push str.Failed_to_move_file_pointer_for_guid_reading.
jmp 0x42bcf2
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x2b0]
push eax
push edi
call fcn.004b9e70
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0x139
push 0x5088f0
push 1
call fcn.004b9c70
lea edi, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x508949
push str.MSI_file
call fcn.004b5d50
cmp byte [esp + 0x63], 0
jns 0x42bc14
mov eax, dword [esp + 0x58]
jmp 0x42bc18
xor ebx, ebx
jmp 0x42b38e
pcmpeqd xmm0, xmm0
lea eax, [esp + 0x90]
movdqa xmmword [eax], xmm0
xor edi, edi
mov dword [esp + 0xa0], edi
push edi
lea ecx, [esp + 0xa4]
push ecx
push 0x10
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42bc9a
cmp dword [esp + 0xa0], 0
je 0x42bc9a
movdqa xmm0, xmmword [esp + 0x2b0]
pcmpeqb xmm0, xmmword [esp + 0x90]
pmovmskb eax, xmm0
cmp eax, 0xffff
jne 0x42bcc6
mov dword [esp + 0x44], 0xffffffff
mov dword [esp + 0x40], 0xffffffe8
sub esp, 0x14
movq xmm0, qword [esp + 0x54]
movq qword [esp + 4], xmm0
mov dword [esp], ebx
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], 0
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x42bd17
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3ea
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x5086d2
push str.Failed_to_move_file_pointer_for_target_position_reading.
jmp 0x42bcf2
lea eax, [esp + 0x58]
mov ecx, edi
push eax
call fcn.004b6280
lea ecx, [eax + 0x34]
push 0x508981
push str.does_not_exist:_assuming_no_override_for_brand_package.
call fcn.004b5d50
mov ecx, esi
call fcn.004b9cb0
cmp byte [esp + 0x2bb], 0
jns 0x42b53d
push dword [esp + 0x2b0]
call fcn.0048b376
add esp, 4
jmp 0x42b53d
test al, al
lea edx, [esp + 0x68]
cmovs eax, dword [edx + 4]
cmovs edx, dword [edx]
lea ecx, [esp + 0x58]
push eax
push edx
call fcn.004400f0
jmp 0x42b4cf
test al, al
cmovs eax, dword [esp + 0x84]
cmovs esi, dword [esp + 0x80]
lea ecx, [esp + 0x68]
push eax
push esi
call fcn.004400f0
jmp 0x42b37b
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3df
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508661
push str.Failed_to_read_tailing_guid_marker
jmp 0x42bcf2
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3e4
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508699
push str.Tail_GUID_from_msi_does_not_match_specified_guid_marker
call fcn.004b5d50
mov ecx, esi
call fcn.004379a0
mov eax, dword [ebp + 8]
mov dword [eax], edi
test ebx, ebx
je 0x42b546
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42b546
lea eax, [esp + 0x38]
xor ecx, ecx
dec ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
xor edi, edi
mov dword [esp + 0xa0], edi
push edi
lea ecx, [esp + 0xa4]
push ecx
push 8
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42bdb2
cmp dword [esp + 0xa0], 0
je 0x42bdb2
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], eax
sub esp, 0x14
movq xmm0, qword [esp + 0x44]
movq qword [esp + 4], xmm0
xor edi, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], edi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x42bdc5
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3f8
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508711
push str.Failed_to_move_file_pointer_to_target_pos_for_package_reading.
jmp 0x42bcf2
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3f2
jmp 0x42bca8
pcmpeqd xmm0, xmm0
lea eax, [esp + 0x80]
movdqa xmmword [eax], xmm0
mov dword [esp + 0xa0], edi
push edi
lea ecx, [esp + 0xa4]
push ecx
push 0x10
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42c147
cmp dword [esp + 0xa0], 0
je 0x42c147
movdqa xmm0, xmmword [esp + 0x2b0]
pcmpeqb xmm0, xmmword [esp + 0x80]
pmovmskb eax, xmm0
xor edi, edi
cmp eax, 0xffff
jne 0x42c178
lea eax, [esp + 0x2c]
mov dword [eax], edi
mov dword [esp + 0xa0], edi
push edi
lea ecx, [esp + 0xa4]
push ecx
push 4
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42c1a7
mov eax, dword [esp + 0xa0]
test eax, eax
je 0x42c1a7
cmp eax, 4
jne 0x42c1a7
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x42c1a7
xor edi, edi
lea esi, [esp + 0x74]
mov dword [esi], edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov byte [esp + 0xa0], 0
mov ecx, esi
lea edx, [esp + 0xa0]
push edx
push eax
call fcn.004b6700
mov ecx, dword [esp + 0x2c]
mov eax, dword [esi]
mov dword [esp + 0xa0], edi
push edi
lea edx, [esp + 0xa4]
push edx
mov esi, ecx
push ecx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42bec5
mov eax, dword [esp + 0xa0]
xor edi, edi
cmp esi, eax
jne 0x42c1dd
lea eax, [esp + 0x28]
mov dword [eax], edi
mov dword [esp + 0xa0], edi
push edi
lea ecx, [esp + 0xa4]
push ecx
push 4
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42c209
mov eax, dword [esp + 0xa0]
test eax, eax
je 0x42c209
cmp eax, 4
jne 0x42c209
mov eax, dword [esp + 0x28]
test eax, eax
je 0x42c209
xor edi, edi
lea esi, [esp + 0x68]
mov dword [esi], edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov byte [esp + 0xa0], 0
mov ecx, esi
lea edx, [esp + 0xa0]
push edx
push eax
call fcn.004b6700
mov ecx, dword [esp + 0x28]
mov eax, dword [esi]
mov dword [esp + 0xa0], edi
push edi
lea edx, [esp + 0xa4]
push edx
mov esi, ecx
push ecx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42bf6d
mov eax, dword [esp + 0xa0]
cmp esi, eax
jne 0x42c339
mov edi, dword [ebp + 0x14]
lea ecx, [esp + 0xa0]
call fcn.004d8100
mov eax, dword [esp + 0x74]
mov dword [esp + 4], eax
mov edx, dword [esp + 0x78]
sub edx, eax
mov eax, dword [edi]
mov dword [esp + 8], eax
mov edi, dword [edi + 4]
sub edi, eax
mov eax, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
sub esi, eax
lea ecx, [esp + 0xa0]
push edx
push dword [esp + 8]
push edi
push dword [esp + 0x14]
push esi
push eax
call fcn.004d8300
mov byte [esp + 4], al
lea ecx, [esp + 0xa0]
call fcn.004d8120
cmp byte [esp + 4], 0
je 0x42c37b
lea esi, [esp + 0x1c]
xor eax, eax
dec eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
lea edi, [esp + 0xa0]
push edi
call fcn.004292e0
add esp, 4
push edi
push esi
call fcn.004295e0
add esp, 8
cmp byte [esp + 0xab], 0
jns 0x42c01c
push dword [esp + 0xa0]
call fcn.0048b376
add esp, 4
movzx eax, byte [esp + 0x27]
test al, al
jns 0x42c02d
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
lea edi, [esp + 0xa0]
mov ecx, edi
push eax
push esi
call fcn.00440f40
push 0x1c
call fcn.0048b346
add esp, 4
mov esi, eax
mov ecx, eax
push 0x261
push edi
call fcn.00440ca0
mov ecx, edi
call fcn.0046dbe0
mov dword [esp + 4], esi
mov ecx, esi
call fcn.004449b0
test al, al
je 0x42c3e7
mov eax, dword [esp + 0x74]
mov dword [esp + 8], eax
mov edi, dword [esp + 0x78]
mov ecx, dword [esp + 4]
call fcn.00424f80
mov esi, eax
xor eax, eax
mov dword [esp + 0xa0], eax
push 2
push eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
je 0x42c2ae
mov ecx, eax
sub edi, dword [esp + 8]
xor eax, eax
push eax
push edi
push eax
mov dword [esp + 0x18], ecx
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_LockFile]
xor eax, eax
push eax
lea eax, [esp + 0xa4]
push eax
push edi
push dword [esp + 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [esp + 8], eax
xor eax, eax
push eax
push edi
push eax
push dword [esp + 0x18]
push esi
call dword [sym.imp.KERNEL32.dll_UnlockFile]
cmp dword [esp + 8], 0
je 0x42c2ae
cmp dword [esp + 0xa0], edi
jne 0x42c2ae
mov ecx, dword [ebp + 0x18]
lea eax, [esp + 0x1c]
cmp eax, ecx
sete dl
test ecx, ecx
je 0x42c27b
test dl, dl
jne 0x42c27b
cmp byte [ecx + 0xb], 0
movzx edx, byte [esp + 0x27]
js 0x42c459
test dl, dl
js 0x42c26e
mov eax, dword [esp + 0x24]
mov dword [ecx + 8], eax
movq xmm0, qword [esp + 0x1c]
movq qword [ecx], xmm0
jmp 0x42c27b
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x3ff
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508735
push str.Failed_to_read_starting_guid_marker
jmp 0x42bcf2
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x404
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508777
push str.Appendix_start_GUID_from_msi_does_not_match_specified_guid_marker
jmp 0x42bcf2
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x40d
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x50878f
push str.Failed_to_read_zip_size
jmp 0x42bcf2
xor esi, esi
jmp 0x42b0f6
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x414
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x5087a7
push str.Failed_to_read_zip_data
jmp 0x42c233
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x41e
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x5087c5
push str.Failed_to_read_signature_size
call fcn.004b5d50
mov ecx, esi
call fcn.004379a0
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov eax, dword [esp + 0x74]
test eax, eax
je 0x42bd03
mov dword [esp + 0x78], eax
push eax
call fcn.0048b376
add esp, 4
jmp 0x42bd03
lea ecx, [esp + 0x80]
call fcn.004cb7c0
push dword [esp + 0x20]
push dword [esp + 0x20]
call fcn.00440160
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 4]
mov dword [eax], ecx
cmp byte [esp + 0x27], 0
jns 0x42c297
push dword [esp + 0x1c]
call fcn.0048b376
add esp, 4
mov eax, dword [esp + 0x68]
test eax, eax
je 0x42c244
mov dword [esp + 0x6c], eax
push eax
call fcn.0048b376
add esp, 4
jmp 0x42c244
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x441
push str.ExtractPartnerPackageOverridePackage
push 0
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x50884f
push str.Failed_to_write_file_data_to_output_file
call fcn.004b5d50
lea edi, [esp + 0x1c]
lea ecx, [esp + 0xa8]
push edi
call fcn.004b5c70
mov ecx, esi
call fcn.004379a0
cmp dword [esp + 4], 0
je 0x42c311
mov esi, dword [esp + 4]
mov ecx, esi
call fcn.00440e20
push esi
call fcn.0048b376
add esp, 4
cmp byte [esp + 0x27], 0
jns 0x42c31c
mov edi, dword [esp + 0x1c]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x42c471
mov eax, dword [ebp + 8]
mov dword [eax], 0
jmp 0x42c284
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x426
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x5087e3
push str.Failed_to_read_signature_data
call fcn.004b5d50
mov ecx, esi
call fcn.004379a0
mov eax, dword [ebp + 8]
mov dword [eax], edi
jmp 0x42c297
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x1c]
push eax
push edi
call fcn.004b9e70
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0x42d
push str.ExtractPartnerPackageOverridePackage
push 1
call fcn.004b9c70
lea ecx, [esp + 0xdc]
push 0x5087fd
push str.Zip_verification_failed:
call fcn.004b5d50
mov ecx, esi
call fcn.004b9cb0
cmp byte [edi + 0xb], 0
jns 0x42c3d9
push dword [esp + 0x1c]
call fcn.0048b376
add esp, 4
mov eax, dword [ebp + 8]
mov dword [eax], 0
jmp 0x42c297
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x438
push str.ExtractPartnerPackageOverridePackage
push edi
call fcn.004b9b40
lea ecx, [esp + 0xdc]
push 0x508825
push str.Failed_to_open_target_file_for_reading
call fcn.004b5d50
lea eax, [esp + 0x1c]
lea ecx, [esp + 0xa8]
push eax
call fcn.004b5c70
mov ecx, esi
call fcn.004379a0
mov eax, dword [ebp + 8]
mov dword [eax], edi
cmp dword [esp + 4], 0
je 0x42c284
mov esi, dword [esp + 4]
mov ecx, esi
call fcn.00440e20
push esi
call fcn.0048b376
add esp, 4
jmp 0x42c284
test dl, dl
cmovs edx, dword [esp + 0x20]
cmovs eax, dword [esp + 0x1c]
push edx
push eax
call fcn.004400f0
jmp 0x42c27b
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x10]
push eax
push edi
call fcn.004b9e70
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0x444
push str.ExtractPartnerPackageOverridePackage
push 1
call fcn.004b9c70
lea ecx, [esp + 0xdc]
push 0x508867
push str.Unable_to_delete_file:
call fcn.004b5d50
lea eax, [esp + 0x1c]
lea ecx, [esp + 0xa8]
push eax
call fcn.004b5c70
mov ecx, esi
call fcn.004b9cb0
cmp byte [edi + 0xb], 0
jns 0x42c32b
push dword [esp + 0x10]
call fcn.0048b376
add esp, 4
jmp 0x42c32b