Function at 0x41d970
Capabilities:
Delete file
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x48a0b6
mov eax, dword fs:[0]
push eax
sub esp, 0x8a0
mov eax, dword [0x4bc7b8]
xor eax, esp
mov dword [esp + 0x898], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4bc7b8]
xor eax, esp
push eax
lea eax, [esp + 0x8b4]
mov dword fs:[0], eax
mov esi, ecx
mov ebp, dword [esp + 0x8c4]
xor ebx, ebx
cmp esi, ebx
mov eax, str.____ROLLBACK___
jne 0x41d9c4
mov eax, 0x498194
push eax
push str.____UninstallStep______s
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
cmp esi, ebx
je 0x41d9e7
mov eax, 1
jmp 0x41dcef
mov eax, dword [ebp + 0x105c]
push eax
push str.___m_printerListIdx___d___1__REMOVEALLPRINTERS_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
mov ecx, dword [ebp + 0x1060]
add esp, 8
push ecx
push str.___m_removeOnlyOnePrinter___d
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
push 0xa
lea ecx, [esp + 0x3c]
call fcn.00451be2
mov dword [esp + 0x58], ebx
mov dword [esp + 0x8bc], ebx
mov edx, dword [ebp + 0x103c]
push 0x465
mov ecx, 0xce
call fcn.004403e0
add esp, 4
push ebp
call fcn.0041d3a0
cmp dword [ebp + 0x1060], ebx
je 0x41da77
lea ecx, [esp + 0x38]
mov dword [esp + 0x8bc], 0xffffffff
call fcn.00451dd5
mov eax, 4
jmp 0x41dcef
push str.RemovePrinters_hwidList_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 4
push 1
push 1
lea edi, [ebp + 0x10b8]
push edi
lea ecx, [esp + 0x44]
call fcn.0042fb70
mov edx, dword [ebp + 0x103c]
mov esi, dword [ebp + 0x1038]
push 0x465
mov ecx, 0xcd
call fcn.004403e0
add esp, 4
push edi
call fcn.004305a0
test eax, eax
je 0x41dbb3
cmp esi, ebx
jne 0x41dad5
mov dword [ebp + 0x1038], ebx
call fcn.00434aa0
push 0x206
lea edx, [esp + 0x6aa]
push ebx
push edx
mov word [esp + 0x6b0], bx
call fcn.0046adc0
add esp, 0xc
push 0x206
lea eax, [esp + 0x4a2]
push ebx
push eax
mov word [esp + 0x4a8], bx
call fcn.0046adc0
add esp, 0xc
push 0x104
push 0x49e0d4
call fcn.004277e0
push eax
lea edi, [esp + 0x6b0]
call fcn.00428060
test eax, eax
jne 0x41dba2
push 0x104
lea ecx, [esp + 0x4a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edx, edi
push edx
lea eax, [esp + 0x4a0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
push 0x1f4
call ebx
push esi
lea ecx, [esp + 0x4a0]
push ecx
push str.Delete_system_file__s__._d
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 0xc
lea edx, [esp + 0x49c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x41dba0
add esi, 1
cmp esi, 6
jb 0x41db62
xor ebx, ebx
call fcn.00434ee0
lea eax, [ebp + 0x10b8]
push eax
call fcn.00430640
lea esi, [ebp + 0x818]
mov eax, esi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x41dbc0
sub eax, edx
sar eax, 1
je 0x41dc42
cmp dword [ebp + 0x1060], ebx
jne 0x41dcd9
push 0xa
lea ecx, [esp + 0x20]
call fcn.00451be2
lea eax, [esp + 0x5c]
mov byte [esp + 0x8bc], 1
call fcn.0042de60
push esi
lea ebx, [esp + 0x20]
mov ecx, eax
call fcn.0042e140
push str.RemovePrinters_hwidList_
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 4
push 1
push 1
mov eax, ebx
push eax
lea ecx, [esp + 0x44]
call fcn.0042fb70
mov ecx, ebx
push ecx
call fcn.00430640
mov ecx, ebx
mov byte [esp + 0x8bc], 0
call fcn.00451dd5
xor ebx, ebx
cmp dword [ebp + 0x1060], ebx
jne 0x41dcd9
push 0x1fe
lea edx, [esp + 0x4a2]
push ebx
push edx
mov word [esp + 0x4a8], bx
call fcn.0046adc0
add esp, 0xc
push 0x100
push str.NETWORK_WIA_HWID
call fcn.004277e0
push eax
lea edi, [esp + 0x4a8]
call fcn.00428060
mov eax, edi
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x41dc90
sub eax, edx
sar eax, 1
je 0x41dcce
lea eax, [esp + 0x49c]
push eax
push str.Detected_network_scan_hwid__s_in_ini_file__attempting_to_remove_it...
call fcn.00426a70
mov edi, eax
call fcn.00426f90
add esp, 8
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x4a0]
call fcn.0042bed0
lea ecx, [ebp + 0x1080]
call fcn.0040ea60
lea ecx, [esp + 0x38]
mov dword [esp + 0x8bc], 0xffffffff
call fcn.00451dd5
xor eax, eax
mov ecx, dword [esp + 0x8b4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x898]
xor ecx, esp
call fcn.004677d8
add esp, 0x8ac
ret 4