Function at 0x42c5bd
Capabilities:
Delete file

Disassembly:
mov eax, 0x4bfde0
call fcn.004bd430
sub esp, 0x544
push esi
push edi
mov edi, ecx
test edi, edi
je 0x42c86a
mov eax, edi
call fcn.00470dc7
test eax, eax
je 0x42c86a
push ebx
mov ebx, 0x4f36c4
mov ecx, ebx
lea esi, [ebp - 0x34]
mov dword [ebp - 0x3c], vtable.KInstallLoader.0
call fcn.00402b17
mov ecx, ebx
lea esi, [ebp - 0x30]
call fcn.00402b17
mov ecx, ebx
lea esi, [ebp - 0x2c]
call fcn.00402b17
mov ecx, ebx
lea esi, [ebp - 0x28]
call fcn.00402b17
mov ecx, ebx
lea esi, [ebp - 0x24]
call fcn.00402b17
mov ecx, ebx
lea esi, [ebp - 0x20]
call fcn.00402b17
xor ebx, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], ebx
mov eax, 0x4cea40
push 0x10
push eax
push eax
mov dword [ebp - 4], ebx
call fcn.0049de50
add esp, 0xc
test eax, eax
jne 0x42c65a
mov eax, dword [ebp + 8]
add eax, 4
mov dword [ebp - 0x38], eax
push dword [edi + 0xc]
lea esi, [ebp - 0x140]
call fcn.00402cbc
mov byte [ebp - 4], 1
push dword [eax]
lea eax, [ebp - 0x10]
push eax
call fcn.00403217
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 3
cmp dword [ebp - 0x140], eax
je 0x42c695
push dword [ebp - 0x140]
call fcn.0049bd0b
pop ecx
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
sub eax, 0x10
call fcn.00420382
add eax, 0x10
mov dword [ebp + 8], eax
mov byte [ebp - 4], 4
cmp dword [edi + 0x60], ebx
je 0x42c6d8
mov ecx, dword [0x4f5480]
sub ecx, ebx
je 0x42c6c3
dec ecx
jne 0x42c6d8
push 2
pop ecx
jmp 0x42c6c6
xor ecx, ecx
inc ecx
push ecx
push eax
push str._s__semtype_d
lea ecx, [ebp + 8]
call fcn.0042f3c3
add esp, 0xc
push dword [edi + 0x20]
lea esi, [ebp - 0x550]
call fcn.00402cbc
mov ebx, eax
mov byte [ebp - 4], 5
push dword [edi + 0x1c]
lea esi, [ebp - 0x348]
call fcn.00402cbc
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 6
push dword [edi + 0x18]
lea esi, [ebp - 0x244]
call fcn.00402cbc
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 7
push dword [ebp + 8]
lea esi, [ebp - 0x44c]
call fcn.00402cbc
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 8
push dword [edi + 8]
lea esi, [ebp - 0x140]
call fcn.00402cbc
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov byte [ebp - 4], 9
mov edi, dword [edi + 0x4c]
mov ebx, dword [ebx]
mov ecx, dword [ecx]
mov edx, dword [edx]
mov esi, dword [esi]
mov eax, dword [eax]
push edi
push ebx
push ecx
mov ecx, dword [ebp - 0x10]
push edx
push esi
lea edi, [ebp - 0x3c]
call fcn.004774fa
mov ebx, eax
neg ebx
sbb bl, bl
lea eax, [ebp - 0x13c]
inc bl
cmp dword [ebp - 0x140], eax
je 0x42c785
push dword [ebp - 0x140]
call fcn.0049bd0b
pop ecx
lea eax, [ebp - 0x448]
cmp dword [ebp - 0x44c], eax
je 0x42c79f
push dword [ebp - 0x44c]
call fcn.0049bd0b
pop ecx
lea eax, [ebp - 0x240]
cmp dword [ebp - 0x244], eax
je 0x42c7b9
push dword [ebp - 0x244]
call fcn.0049bd0b
pop ecx
lea eax, [ebp - 0x344]
cmp dword [ebp - 0x348], eax
je 0x42c7d3
push dword [ebp - 0x348]
call fcn.0049bd0b
pop ecx
lea eax, [ebp - 0x54c]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x550], eax
je 0x42c7f1
push dword [ebp - 0x550]
call fcn.0049bd0b
pop ecx
test bl, bl
pop ebx
je 0x42c824
push dword [ebp - 0x10]
mov esi, 0x12f
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.004027f9
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004027f9
lea ecx, [ebp - 0x3c]
call fcn.004774af
jmp 0x42c86f
push 0x4d49dc
push dword [ebp - 0x34]
call fcn.0049f60e
test eax, eax
pop ecx
pop ecx
jne 0x42c846
push dword [ebp + 0xc]
lea esi, [ebp - 0x3c]
call fcn.00477635
mov esi, eax
jmp 0x42c804
push 0x4ce954
push dword [ebp - 0x34]
call fcn.0049f60e
test eax, eax
pop ecx
pop ecx
jne 0x42c863
lea esi, [ebp - 0x3c]
call fcn.004775c1
jmp 0x42c842
mov esi, 0x12e
jmp 0x42c804
mov esi, 0x130
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
leave
ret 0xc