Function at 0x424e90
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b5fff
mov eax, dword fs:[0]
push eax
sub esp, 0x18c
mov eax, dword [0x4ff1a0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x7e
mov esi, ecx
xor ebx, ebx
lea ecx, [ebp - 0x8e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x90], ax
call fcn.004911e0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea edx, [ebp - 0x90]
push 0x4c59b0
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0xd0], 7
mov dword [ebp - 0xd4], ebx
mov word [ebp - 0xe4], ax
mov dword [ebp - 4], ebx
push 4
push ebx
push str..tmp
mov ecx, esi
call fcn.0041a490
cmp eax, 0xffffffff
je 0x424fcc
add eax, 4
push eax
push ebx
lea ecx, [ebp - 0xc8]
push ecx
mov ecx, esi
call fcn.00413c40
mov byte [ebp - 4], 1
lea edx, [ebp - 0x90]
push edx
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00427210
add esp, 0xc
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xe4]
call fcn.00409ad0
mov byte [ebp - 4], 1
mov edi, 8
cmp dword [ebp - 0x98], edi
jb 0x424f8b
mov ecx, dword [ebp - 0xac]
push ecx
call fcn.00490458
add esp, 4
xor edx, edx
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x9c], ebx
mov word [ebp - 0xac], dx
mov byte [ebp - 4], bl
cmp dword [ebp - 0xb4], edi
jb 0x424fbe
mov eax, dword [ebp - 0xc8]
push eax
call fcn.00490458
add esp, 4
xor ecx, ecx
mov word [ebp - 0xc8], cx
jmp 0x425068
push str..tmp
lea edx, [ebp - 0xc8]
push esi
push edx
call fcn.00410b20
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x90]
push ecx
push eax
lea edx, [ebp - 0xac]
push edx
call fcn.00427210
add esp, 0xc
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0xe4]
call fcn.00409ad0
mov byte [ebp - 4], 3
mov edi, 8
cmp dword [ebp - 0x98], edi
jb 0x42502c
mov eax, dword [ebp - 0xac]
push eax
call fcn.00490458
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x9c], ebx
mov word [ebp - 0xac], cx
mov byte [ebp - 4], bl
cmp dword [ebp - 0xb4], edi
jb 0x42505f
mov edx, dword [ebp - 0xc8]
push edx
call fcn.00490458
add esp, 4
xor eax, eax
mov word [ebp - 0xc8], ax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], 7
cmp dword [ebp - 0xd0], edi
jae 0x42508c
lea eax, [ebp - 0xe4]
cmp dword [esi + 0x14], edi
jb 0x425093
mov esi, dword [esi]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4253d8
push 1
push 2
lea ecx, [ebp - 0x198]
call fcn.00413cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xe4]
push ecx
push ecx
lea edx, [ebp - 0x198]
push str.MoveFileEx_MOVEFILE_DELAY_UNTIL_REBOOT._strResult:
push edx
call fcn.00416b90
add esp, 0xc
push eax
call fcn.00416df0
add esp, 8
push 0x1e
mov esi, 0xf
push str.CFileUtility::RebootRemoveFile
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
call fcn.0040ebe0
mov byte [ebp - 4], 6
push esi
push str.FileUtility.cpp
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb8], ebx
mov byte [ebp - 0xc8], bl
call fcn.0040ebe0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x198]
call fcn.00413de0
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0xac]
push ecx
push 0x515
lea edx, [ebp - 0xc8]
push edx
push 3
call fcn.004144e0
mov ecx, eax
call fcn.0042e360
mov byte [ebp - 4], 7
cmp dword [ebp - 0xec], edi
jb 0x425182
mov eax, dword [ebp - 0x100]
push eax
call fcn.00490458
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xec], 7
mov dword [ebp - 0xf0], ebx
mov word [ebp - 0x100], cx
mov byte [ebp - 4], 6
cmp dword [ebp - 0xb4], 0x10
jb 0x4251b7
mov edx, dword [ebp - 0xc8]
push edx
call fcn.00490458
add esp, 4
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb8], ebx
mov byte [ebp - 0xc8], bl
mov byte [ebp - 4], 5
cmp dword [ebp - 0x98], 0x10
jb 0x4251e5
mov eax, dword [ebp - 0xac]
push eax
call fcn.00490458
add esp, 4
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x198]
call fcn.00412cc0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xd0], edi
jae 0x425219
lea eax, [ebp - 0xe4]
push 4
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4253ad
push 1
push 2
lea ecx, [ebp - 0x198]
call fcn.00413cc0
mov byte [ebp - 4], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
lea ecx, [ebp - 0x198]
push str.MoveFileExW_Error:
push ecx
call fcn.00416b90
add esp, 0xc
push eax
call fcn.004135f0
push 0x1e
push str.CFileUtility::RebootRemoveFile
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb8], ebx
mov byte [ebp - 0xc8], bl
call fcn.0040ebe0
mov byte [ebp - 4], 0xa
push esi
push str.FileUtility.cpp
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
call fcn.0040ebe0
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x100]
push edx
lea ecx, [ebp - 0x198]
call fcn.00413de0
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0xc8]
push eax
push 0x518
lea ecx, [ebp - 0xac]
push ecx
push ebx
call fcn.004144e0
mov ecx, eax
call fcn.0042e360
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0xec], edi
jb 0x425301
mov edx, dword [ebp - 0x100]
push edx
call fcn.00490458
add esp, 4
xor eax, eax
mov dword [ebp - 0xec], 7
mov dword [ebp - 0xf0], ebx
mov word [ebp - 0x100], ax
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x98], 0x10
jb 0x425336
mov ecx, dword [ebp - 0xac]
push ecx
call fcn.00490458
add esp, 4
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
mov byte [ebp - 4], 9
cmp dword [ebp - 0xb4], 0x10
jb 0x425364
mov edx, dword [ebp - 0xc8]
push edx
call fcn.00490458
add esp, 4
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb8], ebx
mov byte [ebp - 0xc8], bl
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x198]
call fcn.00412cc0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xd0], edi
jb 0x4253a2
mov eax, dword [ebp - 0xe4]
push eax
call fcn.00490458
add esp, 4
xor ecx, ecx
mov word [ebp - 0xe4], cx
jmp 0x4253ff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xd0], edi
jb 0x4253cb
mov edx, dword [ebp - 0xe4]
push edx
call fcn.00490458
add esp, 4
xor eax, eax
mov word [ebp - 0xe4], ax
mov al, 1
jmp 0x425401
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xd0], edi
jb 0x4253f6
mov ecx, dword [ebp - 0xe4]
push ecx
call fcn.00490458
add esp, 4
xor edx, edx
mov word [ebp - 0xe4], dx
xor al, al
mov dword [ebp - 0xd0], 7
mov dword [ebp - 0xd4], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004911d1
mov esp, ebp
pop ebp
ret