Function at 0x42082f
Capabilities:
Delete directory
Delete file
Get common file path
Move file

Disassembly:
push 0x6c0
mov eax, 0x4b5333
call fcn.00469c08
mov edi, ecx
xor ebx, ebx
lea ecx, [ebp - 0x658]
mov edx, edi
mov dword [ebp - 0x6c8], ebx
call fcn.00420229
xor eax, eax
push eax
mov dword [ebp - 4], eax
push eax
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], eax
call fcn.004210f0
mov dword [ebp - 0x6c4], eax
push 0x4d2ad0
lea eax, [ebp - 0x658]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x670]
push eax
call fcn.0040e762
add esp, 0xc
push 3
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00412374
lea edx, [ebp - 0x6c4]
mov ecx, eax
call 0x420719
pop ecx
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 1
call fcn.004123b1
lea eax, [ebp - 0x6bc]
push eax
lea ecx, [ebp - 0x6c4]
call fcn.00420ef0
lea eax, [ebp - 0x6cc]
push eax
lea ecx, [ebp - 0x6c4]
call fcn.00420ea8
mov ecx, dword [ebp - 0x6bc]
cmp ecx, dword [eax]
je 0x420b3e
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x4d2b00
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.0040e762
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x6bc]
add ecx, 0x34
push ecx
push eax
lea eax, [ebp - 0x640]
push eax
call fcn.0040e80d
add esp, 0x18
lea ecx, [ebp - 0x688]
mov byte [ebp - 4], 5
call fcn.004123b1
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0046d6f0
add esp, 0xc
lea eax, [ebp - 0x420]
lea ecx, [ebp - 0x640]
push 0x104
push eax
call fcn.00412374
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
dec eax
cmp eax, 0x102
ja 0x420987
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x640]
call fcn.00416cc5
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x640]
test byte [eax + 8], 0x10
je 0x4209bf
call fcn.00412374
mov ecx, eax
call fcn.0042082f
test al, al
jne 0x420b01
lea ecx, [ebp - 0x640]
call fcn.004123b1
xor bl, bl
jmp 0x420b4a
call fcn.00412374
push eax
call esi
test eax, eax
jne 0x420b01
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x420b01
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0046d6f0
add esp, 0xc
lea eax, [ebp - 0x628]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x420a28
cmp eax, 0x104
jae 0x420a28
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x6b8]
call fcn.0041185a
or ebx, 1
jmp 0x420a3d
lea eax, [ebp - 0x658]
push eax
lea ecx, [ebp - 0x6a0]
call fcn.0040c84a
or ebx, 2
push eax
lea ecx, [ebp - 0x670]
mov dword [ebp - 0x6c8], ebx
call fcn.0041119a
test bl, 2
je 0x420a68
and ebx, 0xfffffffd
lea ecx, [ebp - 0x6a0]
mov dword [ebp - 0x6c8], ebx
call fcn.004123b1
mov dword [ebp - 4], 5
test bl, 1
je 0x420a88
and ebx, 0xfffffffe
lea ecx, [ebp - 0x6b8]
mov dword [ebp - 0x6c8], ebx
call fcn.004123b1
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0046d6f0
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x218]
add esp, 0xc
add eax, 0x34
push ecx
push 0
push eax
lea ecx, [ebp - 0x670]
call fcn.00412374
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
lea eax, [ebp - 0x218]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x640]
call fcn.00412374
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push 4
push 0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x670]
call fcn.004123b1
lea ecx, [ebp - 0x640]
mov byte [ebp - 4], 1
call fcn.004123b1
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6c4]
mov eax, dword [eax]
mov dword [ebp - 0x6bc], eax
lea eax, [ebp - 0x6cc]
push eax
call fcn.00420ea8
mov ecx, dword [ebp - 0x6bc]
cmp ecx, dword [eax]
jne 0x4208f4
push edi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
setne bl
mov byte [ebp - 4], 7
mov edi, 0x258
mov eax, dword [ebp - 0x6c4]
mov ecx, dword [eax]
mov dword [eax], eax
mov eax, dword [ebp - 0x6c4]
mov dword [eax + 4], eax
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c4]
cmp ecx, eax
je 0x420b91
mov esi, dword [ecx]
push edi
push 1
push ecx
call fcn.00412440
mov eax, dword [ebp - 0x6c4]
add esp, 0xc
mov ecx, esi
cmp esi, eax
jne 0x420b77
push edi
push 1
push eax
mov byte [ebp - 4], 8
call fcn.00412440
add esp, 0xc
lea ecx, [ebp - 0x658]
call fcn.004123b1
mov al, bl
call fcn.00469bb2
ret