Function at 0x42e328
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x42e330
push ebx
push esi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x42e5c3
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, ebx
call fcn.0042e5d0
mov edx, esi
mov eax, dword [0x493f94]
call fcn.0042cac0
test al, al
je 0x42e370
lea eax, [ebx + 8]
mov edx, esi
call fcn.00405460
jmp 0x42e385
lea edx, [ebp - 8]
mov eax, esi
call fcn.0040a09c
mov edx, dword [ebp - 8]
lea eax, [ebx + 8]
call fcn.00405460
lea eax, [ebx + 0x72]
xor ecx, ecx
mov edx, 0xc
call fcn.00403a58
lea eax, [ebx + 0x7e]
xor ecx, ecx
mov edx, 0x324
call fcn.00403a58
mov eax, dword [ebx + 0xc]
test eax, eax
jne 0x42e3b3
mov dword [ebx + 0x7e], 0x7fffffff
jmp 0x42e3b6
mov dword [ebx + 0x7e], eax
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x42e3c9
mov dword [ebx + 0x82], 0x7fffffff
jmp 0x42e3cf
mov dword [ebx + 0x82], eax
mov eax, dword [ebx + 0x1c]
mov dword [ebx + 0x86], eax
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x8a], eax
mov eax, dword [ebx + 0x24]
mov dword [ebx + 0x8e], eax
mov dword [ebx + 0x96], 1
movzx eax, word [ebx + 0x28]
mov word [ebx + 0x9e], ax
lea ecx, [ebp - 0xc]
mov edx, dword [ebx + 0x96]
mov eax, ebx
call fcn.0042df78
mov edx, dword [ebp - 0xc]
lea eax, [ebx + 0xa0]
call fcn.0040a2d0
lea edx, [ebp - 0x10]
mov eax, dword [ebx + 8]
call fcn.0040a01c
mov edx, dword [ebp - 0x10]
lea eax, [ebx + 0x1a0]
call fcn.0040a2d0
lea edx, [ebp - 0x14]
mov eax, dword [ebx + 8]
call fcn.00409edc
mov edx, dword [ebp - 0x14]
lea eax, [ebx + 0x2a0]
call fcn.0040a2d0
mov byte [ebp - 1], 0
cmp word [ebx + 0x42], 0
je 0x42e475
push 0
lea eax, [ebp - 1]
push eax
lea ecx, [ebx + 0x7e]
mov edx, ebx
mov eax, dword [ebx + 0x44]
call dword [ebx + 0x40]
cmp byte [ebp - 1], 0
jne 0x42e59b
lea eax, [ebp - 0x18]
lea edx, [ebx + 0x2a0]
mov ecx, pe_nt_image_headers32
call fcn.0040567c
cmp dword [ebp - 0x18], 0
je 0x42e4d5
lea eax, [ebp - 0x20]
lea edx, [ebx + 0x2a0]
mov ecx, pe_nt_image_headers32
call fcn.0040567c
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.0040e114
mov edx, dword [ebp - 0x1c]
lea eax, [ebx + 0x2a0]
call fcn.0040a2d0
lea eax, [ebp - 0x24]
lea edx, [ebx + 0x2a0]
mov ecx, pe_nt_image_headers32
call fcn.0040567c
mov eax, dword [ebp - 0x24]
call fcn.00409b78
lea eax, [ebp - 0x34]
lea edx, [ebx + 0x2a0]
mov ecx, pe_nt_image_headers32
call fcn.0040567c
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x38]
lea edx, [ebx + 0x1a0]
mov ecx, pe_nt_image_headers32
call fcn.0040567c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x28]
mov edx, 1
call fcn.0042d014
mov eax, dword [ebp - 0x28]
call fcn.0040589c
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
mov dword [ebx + 0x3a2], eax
xor eax, eax
mov dword [ebx + 0x3a6], eax
xor eax, eax
mov dword [ebx + 0x3aa], eax
push ebx
lea eax, [ebx + 0x7e]
push eax
mov eax, 0x42d82c
push eax
mov eax, 0x42d800
push eax
mov eax, 0x42d7e8
push eax
mov eax, 0x42d7d8
push eax
mov eax, 0x42d7c0
push eax
mov eax, 0x42d7a8
push eax
mov eax, 0x42d790
push eax
mov eax, 0x42d780
push eax
mov eax, 0x42d770
push eax
mov eax, 0x42d83c
push eax
lea eax, [ebx + 0x72]
push eax
call fcn.00427a9c
add esp, 0x34
mov esi, eax
mov dword [ebx + 4], esi
test esi, esi
setne dl
mov eax, ebx
call fcn.0042ddc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x42e5ca
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00405430
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.00405430
ret