Function at 0x424490
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x526568
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x590cc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [ecx + 8], 0
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], ebx
jne 0x424710
test edi, edi
je 0x424710
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4244e7
sub eax, edx
sar eax, 1
je 0x424710
test esi, esi
je 0x424710
mov eax, esi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x424510
sub eax, edx
sar eax, 1
je 0x424710
test ebx, ebx
je 0x424710
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x424532
sub eax, edx
sar eax, 1
je 0x424710
mov ebx, dword [ebp - 0x54]
add ebx, 0x38
push esi
mov ecx, ebx
call fcn.004025d0
push str..dlcache
mov ecx, ebx
call fcn.00402600
mov esi, 8
cmp dword [ebx + 0x14], esi
jb 0x42456f
mov eax, dword [ebx]
jmp 0x424571
mov eax, ebx
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
lea eax, [ebp - 0x2c]
push edi
push eax
call fcn.0041c200
add esp, 8
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], esi
jb 0x424593
mov eax, dword [eax]
push eax
call fcn.00420930
mov ecx, eax
call fcn.00422e90
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
call fcn.0051c7a0
push 0
push 0
call fcn.00420930
mov ecx, eax
call fcn.0045e0e0
call fcn.004dfe80
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x4245d9
xor eax, eax
jmp 0x4245f2
lea edi, [eax + eax]
mov eax, edi
call fcn.004bb0f0
mov ecx, dword [ebp - 0x60]
mov eax, esp
push 3
push edi
push ecx
push eax
call fcn.00409630
push eax
push 0x2712
push esi
call fcn.004e2d00
push 0x421000
push 0x4e2b
push esi
call fcn.004e2d00
mov edx, dword [ebp - 0x54]
push edx
push 0x2711
push esi
call fcn.004e2d00
push 5
push 0x44
push esi
call fcn.004e2d00
push 1
push 0x34
push esi
call fcn.004e2d00
push 0
push 0x2b
push esi
call fcn.004e2d00
add esp, 0x48
push 0x420c00
push 0x4e58
push esi
call fcn.004e2d00
push esi
call fcn.004e00c0
push esi
mov edi, eax
call fcn.004e00e0
add esp, 0x14
test edi, edi
jne 0x4246c9
mov esi, 8
cmp dword [ebx + 0x14], esi
jb 0x424671
mov eax, dword [ebx]
jmp 0x424673
mov eax, ebx
push eax
call fcn.0041b230
add esp, 4
test al, al
je 0x424709
cmp dword [ebx + 0x14], esi
jb 0x42468d
mov eax, dword [ebx]
jmp 0x42468f
mov eax, ebx
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0044d200
add esp, 8
cmp dword [eax + 0x14], esi
jb 0x4246a3
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
push ecx
push eax
call fcn.004bb2ef
add esp, 8
test eax, eax
lea ecx, [ebp - 0x48]
setne byte [ebp - 0x49]
call fcn.0051c7a0
cmp byte [ebp - 0x49], 0
je 0x4246df
mov edi, 0x2712
mov eax, 0x53e740
push eax
call fcn.00420930
mov ecx, eax
call fcn.00422ed0
mov eax, edi
jmp 0x424712
cmp dword [ebx + 0x14], esi
jb 0x4246e6
mov ebx, dword [ebx]
mov edx, dword [ebp - 0x5c]
push 3
push edx
push ebx
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
mov eax, 0x53e744
push eax
call fcn.00420930
mov ecx, eax
call fcn.00422ed0
mov eax, edi
jmp 0x424712
mov edi, 0x2711
jmp 0x4246c9
xor eax, eax
lea esp, [ebp - 0x70]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b9ff3
mov esp, ebp
pop ebp
ret 0xc