Function at 0x1000211b
Capabilities:
Delete directory
Delete file
Move file

Disassembly:
mov eax, 0x1005081f
call fcn.100457f4
sub esp, 0x874
push ebx
push esi
push edi
mov ecx, dword [ebp + 8]
test ecx, ecx
mov dword [ebp - 4], 1
je 0x10002145
call fcn.10001a3c
mov esi, eax
jmp 0x10002147
xor esi, esi
mov al, byte [ebp + 0xf]
push 0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 0x4c], al
call fcn.1002376b
push esi
call fcn.10045c20
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4c]
call fcn.100243fe
mov esi, 0x10066594
push esi
mov byte [ebp - 4], 2
call fcn.10045c20
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4c]
call fcn.100243a7
mov edi, str.toolbar.crc
push edi
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.10027e2b
add esp, 0xc
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp - 4], 3
mov ebx, 0x10057508
jne 0x100021aa
mov eax, ebx
push 0x10066584
push eax
call fcn.100462c0
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x1000226d
push esi
mov ebx, 0x400
lea eax, [ebp - 0x880]
push ebx
push eax
call fcn.1004622d
add esp, 0xc
test byte [esi + 0xc], 0x10
jne 0x10002261
push esi
lea eax, [ebp - 0x480]
push ebx
push eax
call fcn.1004622d
add esp, 0xc
test byte [esi + 0xc], 0x10
jne 0x10002261
lea eax, [ebp - 0x480]
push eax
call fcn.10045c20
and byte [ebp + eax - 0x481], 0
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10027e2b
mov eax, dword [ebp - 0x24]
add esp, 0x10
cmp byte [ebp + 0x20], 0
je 0x10002242
test eax, eax
jne 0x10002235
mov eax, 0x10057508
push 4
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
jmp 0x10002252
test eax, eax
jne 0x1000224b
mov eax, 0x10057508
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 1
lea ecx, [ebp - 0x28]
call fcn.1002376b
jmp 0x100021d7
push esi
call fcn.100461b0
pop ecx
mov ebx, 0x10057508
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.10027eb4
add esp, 0xc
cmp byte [ebp + 0x20], 0
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 4
je 0x100022a1
test eax, eax
jne 0x10002294
mov eax, ebx
push 4
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
jmp 0x100022ae
test eax, eax
jne 0x100022a7
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov al, byte [ebp + 0xf]
xor esi, esi
push esi
lea ecx, [ebp - 0x68]
mov byte [ebp - 0x68], al
call fcn.1002376b
push edi
call fcn.10045c20
pop ecx
push eax
push edi
lea ecx, [ebp - 0x68]
call fcn.100243fe
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 5
call fcn.10027eb4
add esp, 0xc
push dword [0x1005750c]
lea ecx, [ebp - 0x3c]
push esi
push eax
mov byte [ebp - 4], 6
call fcn.10023391
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.1002376b
cmp byte [ebp + 0x20], 0
mov eax, dword [ebp - 0x38]
je 0x10002325
cmp eax, esi
jne 0x10002319
mov eax, ebx
push 4
push esi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
jmp 0x10002332
cmp eax, esi
jne 0x1000232b
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov esi, str.newversion.txt
push esi
call fcn.10045c20
pop ecx
push eax
push esi
lea ecx, [ebp - 0x68]
call fcn.100243fe
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10027eb4
add esp, 0xc
push dword [0x1005750c]
xor edi, edi
push edi
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 7
call fcn.10023391
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.1002376b
cmp byte [ebp + 0x20], 0
mov eax, dword [ebp - 0x38]
je 0x1000239b
cmp eax, edi
jne 0x1000238f
mov eax, ebx
push 4
push edi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
jmp 0x100023a8
cmp eax, edi
jne 0x100023a1
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov al, byte [ebp + 0xf]
push edi
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x28], al
call fcn.1002376b
mov byte [ebp - 0x8c], 0x5c
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], edi
push str..
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call fcn.1000101a
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa
call fcn.100018c9
mov ecx, dword [eax]
cmp ecx, edi
mov byte [ebp - 4], 0xb
je 0x10002400
call fcn.10001a3c
jmp 0x10002402
xor eax, eax
push eax
lea ecx, [ebp - 0x2d0]
call fcn.1001416d
lea ecx, [ebp - 0x18]
mov esi, eax
call fcn.100018b6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call fcn.100018b6
cmp esi, edi
je 0x10002616
mov edi, 0x10066570
mov ebx, str.cache
lea ecx, [ebp - 0x2d0]
call fcn.1001420e
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x54], eax
call fcn.10013e47
test eax, eax
jne 0x1000260a
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.10013aa8
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 0xc
call fcn.10002752
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xe
call fcn.1001179b
lea ecx, [ebp - 0x14]
call fcn.10002791
push 0x10
lea ecx, [ebp - 0x2d0]
call fcn.10013e2b
test eax, eax
je 0x10002584
push dword [ebp - 0x14]
lea ecx, [ebp - 0x50]
call fcn.100026ca
mov ecx, dword [eax]
test ecx, ecx
mov byte [ebp - 4], 0xf
je 0x100024c0
call fcn.10001a3c
mov esi, eax
jmp 0x100024c2
xor esi, esi
push esi
call fcn.10045c20
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.100243fe
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xe
call fcn.100018b6
mov eax, dword [0x1005750c]
push 1
push eax
lea eax, [ebp - 0xd]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 0xd], 0x5c
call fcn.10023621
push edi
mov esi, eax
call fcn.10045c20
pop ecx
push eax
push esi
push edi
lea ecx, [ebp - 0x28]
call fcn.1002359f
mov ecx, dword [0x1005750c]
cmp eax, ecx
jne 0x10002548
push 1
push ecx
lea eax, [ebp - 0xd]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 0xd], 0x5c
call fcn.10023621
push ebx
mov esi, eax
call fcn.10045c20
pop ecx
push eax
push esi
push ebx
lea ecx, [ebp - 0x28]
call fcn.1002359f
cmp eax, dword [0x1005750c]
je 0x100025fd
push dword [ebp + 0x20]
lea eax, [ebp + 0x10]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x6c], esp
push eax
call fcn.10021d06
push 1
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.10022da4
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push eax
call fcn.100026ca
mov byte [ebp - 4], 0xe
call fcn.1000211b
add esp, 0x1c
jmp 0x100025fd
cmp byte [ebp + 0xc], 0
je 0x100025fd
cmp byte [ebp + 0x20], 0
push dword [ebp - 0x14]
je 0x100025cb
lea ecx, [ebp - 0x2c]
call fcn.100026ca
mov ecx, dword [eax]
test ecx, ecx
mov byte [ebp - 4], 0x11
je 0x100025ac
call fcn.10001a3c
jmp 0x100025ae
xor eax, eax
push 4
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x100025fd
call fcn.10001129
and dword [ebp - 0x2c], 0
jmp 0x100025fd
lea ecx, [ebp - 0x18]
call fcn.100026ca
mov ecx, dword [eax]
test ecx, ecx
mov byte [ebp - 4], 0x12
je 0x100025e4
call fcn.10001a3c
jmp 0x100025e6
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x100025fd
call fcn.10001129
and dword [ebp - 0x18], 0
push dword [ebp - 0x14]
mov byte [ebp - 4], 9
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x54], 0
jne 0x10002436
xor edi, edi
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 8
call fcn.1001431f
push 1
pop esi
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.1002376b
cmp byte [ebp + 0x20], 0
mov ecx, dword [ebp + 8]
je 0x10002657
cmp ecx, edi
je 0x10002649
call fcn.10001a3c
jmp 0x1000264b
xor eax, eax
push 4
push edi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
jmp 0x1000266b
cmp ecx, edi
je 0x10002662
call fcn.10001a3c
jmp 0x10002664
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push esi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 4
call fcn.1002376b
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 3
call fcn.1002376b
push esi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.1002376b
push esi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 1
call fcn.1002376b
mov ecx, dword [ebp + 8]
cmp ecx, edi
je 0x100026ae
call fcn.10001129
mov dword [ebp + 8], edi
or dword [ebp - 4], 0xffffffff
push esi
lea ecx, [ebp + 0x10]
call fcn.1002376b
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret