Function at 0x4200a0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4a4cd7
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x4c84d4]
xor eax, esp
mov dword [esp + 0xb8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c84d4]
xor eax, esp
push eax
lea eax, [esp + 0xd4]
mov dword fs:[0], eax
mov eax, dword [esp + 0xe4]
lea ecx, [esp + 0x60]
mov dword [esp + 0x14], eax
call fcn.00443fb0
xor ebx, ebx
push eax
mov edi, str._service.xml
lea esi, [esp + 0xb4]
mov dword [esp + 0xe0], ebx
call fcn.0040a7e0
add esp, 4
mov ebp, 0x10
mov byte [esp + 0xdc], 2
cmp dword [esp + 0x78], ebp
jb 0x42012d
mov ecx, dword [esp + 0x64]
push ecx
call fcn.00460054
add esp, 4
lea ecx, [esp + 0x7c]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
call fcn.00468552
mov byte [esp + 0xdc], 3
cmp dword [esp + 0xc8], ebp
mov eax, dword [esp + 0xb4]
jae 0x420165
lea eax, [esp + 0xb4]
push ebx
push eax
lea ecx, [esp + 0x84]
call fcn.004685de
test eax, eax
jne 0x4201f0
lea ecx, [esp + 0x44]
call fcn.00443fb0
push eax
mov edi, str._ftstkdrv.xml
lea esi, [esp + 0x2c]
mov byte [esp + 0xe0], 4
call fcn.0040a7e0
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0xe8], 5
call fcn.004081b0
cmp dword [esp + 0x40], ebp
jb 0x4201c5
mov edx, dword [esp + 0x2c]
push edx
call fcn.00460054
add esp, 4
mov byte [esp + 0xdc], 3
cmp dword [esp + 0x5c], ebp
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
jb 0x4201f0
mov eax, dword [esp + 0x48]
push eax
call fcn.00460054
add esp, 4
lea ecx, [esp + 0x7c]
call fcn.00468213
lea ecx, [esp + 0x18]
call fcn.0046ef4f
mov byte [esp + 0xdc], 6
cmp dword [esp + 0xc8], ebp
mov eax, dword [esp + 0xb4]
jae 0x420221
lea eax, [esp + 0xb4]
push ebx
push ebx
push eax
lea ecx, [esp + 0x24]
call fcn.0046f334
test eax, eax
jne 0x42027c
mov esi, dword [esp + 0x14]
call fcn.0041e060
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 3
call fcn.0046f023
lea ecx, [esp + 0x7c]
mov byte [esp + 0xdc], 2
call fcn.00468576
cmp dword [esp + 0xc8], ebp
jb 0x420275
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.00460054
add esp, 4
xor eax, eax
jmp 0x42044b
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 7
call fcn.0046ee42
mov ecx, dword [esp + 0xa8]
add eax, 1
cmp eax, ecx
ja 0x4202c5
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x9c]
call fcn.004080f0
jmp 0x4202d4
push ebx
sub eax, ecx
lea edi, [esp + 0x98]
call fcn.00404e20
cmp dword [esp + 0xac], ebp
mov eax, dword [esp + 0x98]
jae 0x4202eb
lea eax, [esp + 0x98]
mov edx, dword [esp + 0xa8]
add edx, 0xffffffff
push edx
push eax
lea ecx, [esp + 0x20]
call fcn.0046ec5d
lea ecx, [esp + 0x18]
call fcn.0046eeed
mov eax, dword [esp + 0xa8]
lea esi, [eax - 1]
cmp esi, eax
jbe 0x42031c
call fcn.0047ecbf
cmp dword [esp + 0xac], ebp
mov eax, dword [esp + 0x98]
jae 0x420333
lea eax, [esp + 0x98]
mov byte [eax + esi], bl
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x94]
push eax
push esi
call fcn.00420480
call fcn.0041e060
lea ecx, [esp + 0x44]
call fcn.00443fb0
push eax
mov edi, str._ftstkdrv.xml
lea esi, [esp + 0x2c]
mov byte [esp + 0xe0], 8
call fcn.0040a7e0
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0xe8], 9
call fcn.004081b0
cmp dword [esp + 0x40], ebp
jb 0x42039b
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.00460054
add esp, 4
cmp dword [esp + 0x5c], ebp
mov esi, 0xf
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
jb 0x4203bf
mov edx, dword [esp + 0x48]
push edx
call fcn.00460054
add esp, 4
cmp dword [esp + 0xc8], ebp
mov eax, dword [esp + 0xb4]
jae 0x4203d6
lea eax, [esp + 0xb4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0xac], ebp
jb 0x4203f6
mov eax, dword [esp + 0x98]
push eax
call fcn.00460054
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0xac], esi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
mov byte [esp + 0xdc], 3
call fcn.0046f023
lea ecx, [esp + 0x7c]
mov byte [esp + 0xdc], 2
call fcn.00468576
cmp dword [esp + 0xc8], ebp
jb 0x420446
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.00460054
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0xd4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb8]
xor ecx, esp
call fcn.0047d992
add esp, 0xcc
ret 4