Function at 0x413942
Capabilities:
Delete directory
Move file

Disassembly:
push 0x6c0
mov eax, 0x4c36e0
call fcn.0048652b
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x674]
call fcn.00408702
xor esi, esi
xor eax, eax
mov dword [ebp - 4], esi
push 0x206
mov word [ebp - 0x258], ax
lea eax, [ebp - 0x256]
push esi
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0x258]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x6c8]
call fcn.00408702
push 0x4e0d2c
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCR100.dll_wcslen]
pop ecx
push eax
lea eax, [ebp - 0x6c8]
call fcn.0040d9c2
inc eax
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x6c8]
push eax
lea eax, [ebp - 0x690]
call fcn.004089b5
mov ebx, eax
lea eax, [ebp - 0x6c8]
mov byte [ebp - 4], 2
call fcn.004089fe
push 1
xor edi, edi
lea esi, [ebp - 0x690]
mov byte [ebp - 4], 1
call fcn.00408e84
lea eax, [ebp - 0x258]
push 0x4e0d24
push eax
call dword [sym.imp.MSVCR100.dll_wcsstr]
pop ecx
pop ecx
test eax, eax
je 0x413ba7
mov esi, dword [sym.imp.MSVCR100.dll_memset]
push 0x400
xor ebx, ebx
lea eax, [ebp - 0x658]
push ebx
push eax
call esi
push 0x20
lea eax, [ebp - 0x30]
push ebx
push eax
call esi
add esp, 0x18
cmp dword [ebp - 0x664], ebx
je 0x413dab
cmp dword [ebp - 0x660], 8
mov eax, dword [ebp - 0x674]
jae 0x413a5e
lea eax, [ebp - 0x674]
push eax
call dword [sym.imp.MSVCR100.dll__wtol]
mov edi, dword [sym.imp.MSVCR100.dll_wcslen]
mov esi, 0x4e1dc0
push esi
mov dword [ebp - 0x6cc], eax
call edi
pop ecx
pop ecx
push eax
push esi
lea eax, [ebp - 0x674]
push eax
call fcn.0040d92d
cmp eax, 0xffffffff
je 0x413dab
cmp dword [ebp - 0x6cc], ebx
je 0x413dab
push esi
call edi
pop ecx
push eax
push esi
lea eax, [ebp - 0x674]
push eax
call fcn.0040d92d
add eax, 4
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x690]
call fcn.004089b5
mov ebx, eax
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 3
call fcn.004089fe
push 1
xor edi, edi
lea esi, [ebp - 0x690]
mov byte [ebp - 4], 1
call fcn.00408e84
push 0xffffffffffffffff
push dword [ebp - 0x6cc]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x6cc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x660], 8
mov eax, dword [ebp - 0x674]
jae 0x413b1b
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x690]
push eax
call sym.Uninstall.exe_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_KpBase::ws2s_wchar_t_const__
pop ecx
pop ecx
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 0x10
jb 0x413b36
mov eax, dword [eax]
push eax
call sym.Uninstall.exe_void___cdecl_KpBase::DeleteAllFile_char_const__
pop ecx
push 0
push 1
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 1
call fcn.0040d8cd
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call ebx
lea eax, [ebp - 0x690]
push 0x4e0d2c
push eax
lea edi, [ebp - 0x674]
call fcn.00409020
cmp dword [eax + 0x14], 8
pop ecx
pop ecx
jb 0x413b7e
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 1
xor edi, edi
lea esi, [ebp - 0x690]
call fcn.00408e84
push 0x3e8
call ebx
call fcn.004137b1
push edi
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea eax, [ebp - 0x258]
push 0x4e1dcc
push eax
call dword [sym.imp.MSVCR100.dll_wcsstr]
pop ecx
pop ecx
test eax, eax
je 0x413d89
mov esi, dword [sym.imp.MSVCR100.dll_memset]
push 0x400
xor edi, edi
lea eax, [ebp - 0x658]
push edi
push eax
call esi
push 0x20
lea eax, [ebp - 0x50]
push edi
push eax
call esi
add esp, 0x18
cmp dword [ebp - 0x664], edi
je 0x413d81
cmp dword [ebp - 0x660], 8
mov eax, dword [ebp - 0x674]
jae 0x413c07
lea eax, [ebp - 0x674]
push eax
call dword [sym.imp.MSVCR100.dll__wtol]
mov edi, dword [sym.imp.MSVCR100.dll_wcslen]
mov esi, 0x4e1dc0
push esi
mov ebx, eax
call edi
pop ecx
pop ecx
push eax
push esi
lea eax, [ebp - 0x674]
push eax
call fcn.0040d92d
cmp eax, 0xffffffff
je 0x413d81
test ebx, ebx
je 0x413d81
push esi
call edi
pop ecx
push eax
push esi
lea eax, [ebp - 0x674]
push eax
call fcn.0040d92d
add eax, 4
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x2c]
call fcn.004089b5
mov ebx, eax
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 5
call fcn.004089fe
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00408e84
cmp dword [ebp - 0x660], 8
mov eax, dword [ebp - 0x674]
jae 0x413c9c
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x6ac]
push eax
call sym.Uninstall.exe_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_KpBase::ws2s_wchar_t_const__
mov byte [ebp - 4], 6
mov esi, dword [sym.imp.MSVCR100.dll_strlen]
mov edi, 0x4e0dd8
push edi
call esi
add esp, 0xc
mov ebx, eax
push edi
lea eax, [ebp - 0x6ac]
call fcn.0040d84f
inc eax
push eax
xor edi, edi
push edi
lea eax, [ebp - 0x6ac]
push eax
lea eax, [ebp - 0x690]
call fcn.0040d403
mov ebx, str.motu_del
push ebx
mov byte [ebp - 4], 7
call esi
pop ecx
push ebx
mov ebx, eax
lea eax, [ebp - 0x690]
call fcn.0040e8c4
mov ecx, dword [ebp - 0x690]
push 0x10
pop esi
cmp dword [ebp - 0x67c], esi
jae 0x413d15
lea ecx, [ebp - 0x690]
mov eax, dword [ebp - 0x6ac]
cmp dword [ebp - 0x698], esi
jae 0x413d29
lea eax, [ebp - 0x6ac]
push ecx
push eax
call dword [sym.imp.MSVCR100.dll_rename]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x6ac]
cmp dword [ebp - 0x698], esi
jae 0x413d47
lea ecx, [ebp - 0x6ac]
mov eax, dword [ebp - 0x690]
cmp dword [ebp - 0x67c], esi
jae 0x413d5b
lea eax, [ebp - 0x690]
push 4
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push edi
push 1
lea ecx, [ebp - 0x690]
call fcn.0040d8cd
push edi
push 1
lea ecx, [ebp - 0x6ac]
call fcn.0040d8cd
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 1
xor edi, edi
lea esi, [ebp - 0x6c8]
call fcn.00408e84
push 1
lea esi, [ebp - 0x674]
call fcn.00408e84
call fcn.004865ae
ret
push ebx
jmp 0x413d83