Function at 0x41a852
Capabilities:
Delete file
Move file

Disassembly:
push 0x78
mov eax, 0x48984a
call fcn.0046e3a1
mov eax, dword [ebp + 8]
mov ebx, ecx
mov edi, edx
mov dword [ebp - 0x84], eax
test ebx, ebx
je 0x41a943
test edi, edi
je 0x41a943
test eax, eax
je 0x41a943
push eax
call fcn.00439e4b
pop ecx
test eax, eax
je 0x41a943
push str.LZMA_EXE
push edi
push str._s_s
lea ecx, [ebp - 0x64]
call fcn.0044389e
add esp, 0xc
and dword [ebp - 4], 0
mov eax, dword [ebp - 0x64]
push 0x10
pop esi
cmp dword [ebp - 0x50], esi
jae 0x41a8ba
lea eax, [ebp - 0x64]
push eax
call fcn.00439e4b
pop ecx
test eax, eax
jne 0x41a94e
cmp dword [ebp - 0x50], esi
mov esi, dword [ebp - 0x64]
jae 0x41a8d4
lea esi, [ebp - 0x64]
push 0x49b788
push 0x3036
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceA]
test eax, eax
je 0x41a8f8
push eax
push esi
push ebx
call fcn.0041a77e
add esp, 0xc
test eax, eax
jne 0x41a94b
cmp dword [ebp - 0x50], 0x10
mov eax, dword [ebp - 0x64]
jae 0x41a904
lea eax, [ebp - 0x64]
push eax
push str.ExtraUnCompression:_Unable_write__s_using_WriteFileFromResource
lea ecx, [ebp - 0x48]
call fcn.0044389e
pop ecx
pop ecx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41a924
lea eax, [ebp - 0x48]
push eax
call fcn.00439ca9
pop ecx
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.0040e7d9
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.0040e7d9
xor eax, eax
call fcn.0046e424
ret
push 0x10
pop esi
push edi
push str._smsi.tmp
lea ecx, [ebp - 0x2c]
call fcn.0044389e
pop ecx
pop ecx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x41a96d
lea eax, [ebp - 0x2c]
push eax
call fcn.00439e4b
pop ecx
test eax, eax
je 0x41a9dd
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x41a983
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x41a9dd
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x41a999
lea eax, [ebp - 0x2c]
push eax
push str.ExtraUnCompression:_Unable_to_delete_temporary_un_compressed_file:__s
lea ecx, [ebp - 0x48]
call fcn.0044389e
pop ecx
pop ecx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x41a9b8
lea eax, [ebp - 0x48]
push eax
call fcn.00439ca9
pop ecx
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0x48]
call fcn.0040e7d9
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040e7d9
push esi
jmp 0x41a939
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x41a9e8
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x50], esi
jae 0x41a9f3
lea eax, [ebp - 0x64]
push ecx
push dword [ebp - 0x84]
lea ecx, [ebp - 0x80]
push eax
push str.__s__d___s____s_
call fcn.0044389e
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x70]
inc eax
push eax
call fcn.004654e8
mov ecx, dword [ebp - 0x80]
add esp, 0x14
cmp dword [ebp - 0x6c], 0x10
mov esi, eax
mov eax, ecx
jae 0x41aa29
lea eax, [ebp - 0x80]
add eax, dword [ebp - 0x70]
cmp dword [ebp - 0x6c], 0x10
jae 0x41aa35
lea ecx, [ebp - 0x80]
sub eax, ecx
push eax
push ecx
push esi
call fcn.004667c0
mov eax, dword [ebp - 0x70]
add esp, 0xc
push esi
lea ecx, [ebp - 0x48]
mov byte [eax + esi], 0
xor edi, edi
call fcn.0040d21d
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 5
call fcn.004521d6
mov ebx, eax
push edi
neg ebx
push 1
lea ecx, [ebp - 0x48]
sbb bl, bl
mov byte [ebp - 4], 4
call fcn.0040e7d9
inc bl
je 0x41aaa3
push dword [ebp - 0x84]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x41aa94
lea eax, [ebp - 0x2c]
push dword [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov edi, eax
push esi
call fcn.00468a4f
xor esi, esi
pop ecx
cmp edi, esi
jne 0x41aafb
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x41aabc
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ExtraUnCompression:_Failed_with_error__d
lea ecx, [ebp - 0x48]
call fcn.0044389e
pop ecx
pop ecx
mov byte [ebp - 4], 6
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41aae9
lea eax, [ebp - 0x48]
push eax
call fcn.00439ca9
pop ecx
push esi
push 1
lea ecx, [ebp - 0x48]
call fcn.0040e7d9
push esi
push 1
lea ecx, [ebp - 0x80]
call fcn.0040e7d9
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040e7d9
push esi
push 1
lea ecx, [ebp - 0x64]
call fcn.0040e7d9
mov eax, edi
jmp 0x41a945