Function at 0x43a695
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x566063
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x5d6c64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jne 0x43a6e0
jmp 0x43a953
push 0
push 0x572640
lea ecx, [ebp - 0x64]
call fcn.0042b16f
and dword [ebp - 4], 0
push 0x572658
push 0x57265c
push 0x57266c
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x64]
call fcn.0042b4cd
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jbe 0x43a8fc
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0xb4]
call fcn.0043ae31
mov byte [ebp - 4], 2
cmp dword [ebp - 0x70], 8
jb 0x43a756
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xb8], eax
jmp 0x43a762
lea eax, [ebp - 0x84]
mov dword [ebp - 0xb8], eax
push 0x572684
push dword [ebp - 0xb8]
call dword [sym.imp.MSVCR100.dll__wfopen]
pop ecx
pop ecx
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x43a8e5
push dword [ebp - 0x68]
call dword [sym.imp.MSVCR100.dll_fclose]
pop ecx
cmp dword [ebp - 0x70], 8
jb 0x43a7a0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xbc], eax
jmp 0x43a7ac
lea eax, [ebp - 0x84]
mov dword [ebp - 0xbc], eax
push 4
push 0
push dword [ebp - 0xbc]
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov dword [ebp - 0x88], eax
push 4
call fcn.0041b640
pop ecx
movzx eax, al
test eax, eax
je 0x43a80c
cmp dword [ebp - 0x88], 0
je 0x43a7e6
mov dword [ebp - 0xc0], str.success
jmp 0x43a7f0
mov dword [ebp - 0xc0], str.failed
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0xc0]
push str._ProcessStateMachine__UpdateNewSelfUpdateVersion_success__reboot_del__s__err_d
push 4
call fcn.0041b5a4
add esp, 0x10
cmp dword [ebp - 0x88], 0
je 0x43a8e5
push 0x57269c
push 0x5726f0
push 0x572708
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x64]
call fcn.0042b4cd
mov byte [ebp - 4], 3
push 0x572720
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00412033
add esp, 0xc
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 4
push dword [0x5c0400]
push 0
push dword [ebp - 0xb0]
lea ecx, [ebp - 0xa4]
call fcn.004074b0
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00406660
mov byte [ebp - 4], 3
cmp dword [ebp - 0x90], 8
jb 0x43a8aa
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc8], eax
jmp 0x43a8b6
lea eax, [ebp - 0xa4]
mov dword [ebp - 0xc8], eax
push dword [ebp - 0xc8]
push 0x572724
push 0x57273c
lea ecx, [ebp - 0x64]
call fcn.0042b5de
mov byte [ebp - 4], 6
push 0
push 1
lea ecx, [ebp - 0xa4]
call fcn.00406660
mov byte [ebp - 4], 2
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x84]
call fcn.00406660
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], 8
jb 0x43a912
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 0xcc], eax
jmp 0x43a91b
mov eax, dword [ebp + 8]
mov dword [ebp - 0xcc], eax
push dword [ebp - 0xcc]
push 0x572754
push 0x572764
lea ecx, [ebp - 0x64]
call fcn.0042b5de
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00406660
mov byte [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.0042b3c8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004610a0
leave
ret 4