Function at 0x42a280
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53e578
mov eax, dword fs:[0]
push eax
mov eax, 0xcdf8
call fcn.0052bf00
mov eax, dword [0x575494]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea esi, [ebp - 0xce00]
call fcn.004b4d80
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2134], ebx
mov dword [ebp - 0x2130], ebx
mov dword [ebp - 0x212c], ebx
mov dword [ebp - method.CFileMap.virtual_0], vtable.CMemMap.0
mov dword [ebp - 0x2124], ebx
mov dword [ebp - method.CSemaphore.virtual_0], vtable.CSemaphore.0
mov dword [ebp - 0x2120], ebx
mov dword [ebp - 0x211c], ebx
mov dword [ebp - 0x2118], ebx
mov dword [ebp - 0x2114], ebx
mov dword [ebp - 0x2110], ebx
mov byte [ebp - 0x210c], bl
mov dword [ebp - 0x2108], ebx
mov dword [ebp - 0x2100], ebx
mov dword [ebp - method.CUseDll.virtual_0], vtable.CUseDll.0
mov dword [ebp - 0x20fc], ebx
mov byte [ebp - 0x20f8], bl
mov dword [ebp - 0x20f4], ebx
mov dword [ebp - 0x20ec], ebx
mov dword [ebp - 0x20e8], ebx
mov dword [ebp - 0x20e4], ebx
mov byte [ebp - 0x20f0], bl
mov ecx, 0x1ab0
lea eax, [ebp - 0x20e0]
lea esp, [esp]
mov byte [eax], bl
inc eax
dec ecx
jne 0x42a360
lea eax, [ebp - 0x2138]
mov byte [ebp - 4], 1
call fcn.00475b80
xor eax, eax
xor ecx, ecx
mov word [ebp - 0x428], ax
lea eax, [ebp - 0x428]
mov word [ebp - 0x218], cx
lea esi, [ebp - 0x1796]
mov ecx, eax
mov edx, 0x105
sub esi, ecx
lea esp, [esp]
lea ecx, [edx + 0x7ffffef9]
test ecx, ecx
je 0x42a3be
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x42a3be
mov word [eax], cx
add eax, 2
dec edx
jne 0x42a3a0
jmp 0x42a3c2
cmp edx, ebx
jne 0x42a3c5
sub eax, 2
xor edx, edx
lea ecx, [ebp - 0x218]
mov word [eax], dx
push ecx
xor eax, eax
push 0x104
mov word [ebp - 0x630], ax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x42a52d
lea edx, [ebp - 0x630]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 - 0x21a], 0x5c
je 0x42a415
push 0x54ede0
lea esi, [ebp - 0x218]
call fcn.0042a150
lea eax, [ebp - 0x218]
push eax
push ebx
push 1
push 1
push ebx
lea eax, [ebp - 0x428]
lea esi, [ebp - 0xce00]
call fcn.004b56b0
lea ecx, [ebp - 0x218]
push ecx
push 1
push 1
push 1
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56b0
lea edx, [ebp - 0x218]
push edx
push ebx
push ebx
push 1
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56b0
lea eax, [ebp - 0x218]
push eax
push 1
push ebx
push 1
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56b0
lea ecx, [ebp - 0x218]
push ecx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56b0
lea edx, [ebp - 0x218]
push edx
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x428]
call fcn.004b56b0
mov ecx, 0x104
lea eax, [ebp - 0x218]
cmp word [eax], bx
je 0x42a4c0
add eax, 2
dec ecx
jne 0x42a4b3
jmp 0x42a4e4
cmp ecx, ebx
je 0x42a4e4
mov edx, 0x104
sub edx, ecx
mov eax, 0x104
sub eax, edx
lea ecx, [ebp + edx*2 - 0x218]
lea edx, [ebp - 0x428]
call fcn.0042a1a0
mov edx, 0x104
lea eax, [ebp - 0x218]
nop
cmp word [eax], bx
je 0x42a4fd
add eax, 2
dec edx
jne 0x42a4f0
jmp 0x42a520
cmp edx, ebx
je 0x42a520
mov ecx, 0x104
sub ecx, edx
mov eax, 0x104
sub eax, ecx
lea ecx, [ebp + ecx*2 - 0x218]
mov edx, str..xml
call fcn.0042a1a0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x2138]
push ecx
mov byte [ebp - 4], bl
call fcn.00475a90
lea edx, [ebp - 0xce00]
push edx
mov dword [ebp - 4], 0xffffffff
call fcn.004b5370
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0051eacc
mov esp, ebp
pop ebp
ret