Function at 0x417a9c
Capabilities:
Check if file exists
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4
mov eax, dword [0x5c2460]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
and dword [ebp - 0xb4], 0
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0x1c]
push esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0xd0], eax
xor eax, eax
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
call fcn.0041b35e
mov edx, esi
lea ecx, [eax + 0x1c]
add eax, 0x20
and dword [ecx], 0
push eax
push ecx
and dword [eax], 0
mov ecx, ebx
call fcn.0041c5ad
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x417b29
push edi
call fcn.0041b35e
mov ecx, eax
call fcn.0041bc7f
mov esi, eax
and dword [ebp - 0x6c], 0
xor eax, eax
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
test esi, esi
je 0x417d64
lea eax, [ebp - 0x94]
push eax
call fcn.0041fa7f
mov ecx, eax
call fcn.004205ce
push str._new_core.zip
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x64]
call fcn.0041540b
pop ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.004075c9
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.0040536f
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x1c]
call fcn.004058f0
push ebx
lea ecx, [ebp - 0x34]
call fcn.004058f0
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x34]
call fcn.0041c463
pop ecx
mov ebx, eax
lea ecx, [ebp - 0x34]
push 0
neg ebx
push 1
sbb bl, bl
call fcn.0040536f
push 0
push 1
lea ecx, [ebp - 0x1c]
call fcn.0040536f
inc bl
je 0x417c11
xor esi, esi
lea ecx, [ebp - 0x34]
push edi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
call fcn.004058f0
lea eax, [ebp - 0x40]
xor edx, edx
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x7c]
call fcn.004063af
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x34]
push esi
push 1
setne bl
call fcn.0040536f
movzx esi, bl
lea ecx, [ebp - 0x40]
neg esi
sbb esi, esi
and esi, 5
call fcn.00407966
xor ebx, ebx
lea ecx, [ebp - 0x94]
push ebx
push 1
call fcn.0040536f
test esi, esi
je 0x417d66
mov ebx, dword [ebp - 0xc8]
lea eax, [ebp - 0x64]
push eax
call fcn.0041fa7f
mov ecx, eax
call fcn.004205ce
push str._new_ext.zip
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x1c]
call fcn.0041540b
pop ecx
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x94]
call fcn.004058f0
push ebx
lea ecx, [ebp - 0xac]
call fcn.004058f0
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0xac]
call fcn.0041c463
pop ecx
mov ebx, eax
lea ecx, [ebp - 0xac]
push 0
neg ebx
push 1
sbb bl, bl
call fcn.0040536f
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040536f
inc bl
je 0x418015
xor eax, eax
lea ecx, [ebp - 0xac]
push edi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
call fcn.004058f0
lea eax, [ebp - 0x40]
xor edx, edx
push eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004063af
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0xac]
xor edi, edi
push edi
push 1
call fcn.0040536f
inc bl
je 0x417ff5
push str.chrome.ext.7z
push 0x53fe1c
lea edx, [ebp - 0xc4]
mov esi, edi
lea ecx, [ebp - 0xac]
call fcn.0041540b
pop ecx
mov edx, eax
lea ecx, [ebp - 0x34]
call fcn.0041545e
pop ecx
push edi
push 1
lea ecx, [ebp - 0xac]
call fcn.0040536f
cmp dword [ebp - 0x20], 8
mov ecx, dword [ebp - 0x34]
jae 0x417d3e
lea ecx, [ebp - 0x34]
cmp dword [ebp - 8], 8
mov eax, dword [ebp - 0x1c]
jae 0x417d4a
lea eax, [ebp - 0x1c]
push 3
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push edi
push 1
lea ecx, [ebp - 0x34]
call fcn.0040536f
jmp 0x417ff8
xor ebx, ebx
lea eax, [ebp - 0xac]
push eax
call fcn.0041fa7f
mov ecx, eax
call fcn.004203be
xor eax, eax
mov dword [ebp - 8], 7
lea edx, [ebp - 0x1c]
mov dword [ebp - 0xc], ebx
lea ecx, [ebp - 0xac]
mov word [ebp - 0x1c], ax
call fcn.0043189c
test eax, eax
je 0x417f23
cmp dword [ebp - 8], 8
mov eax, dword [ebp - 0x1c]
jae 0x417dab
lea eax, [ebp - 0x1c]
mov ebx, dword [ebp - 0xd0]
push 0xffffffffffffffff
push eax
push 0x64
push ebx
call fcn.00504153
add esp, 0x10
call fcn.0041fa7f
push ebx
lea ecx, [ebp - 0x34]
call fcn.004058f0
push edi
lea ecx, [ebp - 0x94]
call fcn.004058f0
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x64]
call fcn.0042044c
pop ecx
push eax
lea ecx, [ebp - 0xc4]
call fcn.004075c9
xor ebx, ebx
lea ecx, [ebp - 0x64]
push ebx
push 1
call fcn.0040536f
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.0040536f
push ebx
push 1
lea ecx, [ebp - 0x34]
call fcn.0040536f
push ecx
push ecx
lea eax, [ebp - 0xc4]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0x64]
call fcn.00458fb0
xor edx, edx
mov ecx, eax
call fcn.00458200
lea ecx, [ebp - 0x64]
call fcn.00459030
push str.chrome.core.7z
push 0x53fe1c
lea edx, [ebp - 0xc4]
lea ecx, [ebp - 0x64]
call fcn.0041540b
pop ecx
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.0041545e
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.0040536f
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x417e82
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x417eb1
cmp dword [ebp - 0x38], 8
mov ecx, dword [ebp - 0x4c]
jae 0x417e99
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
jae 0x417ea5
lea eax, [ebp - 0x7c]
push 3
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x417f16
push str.chrome.core.7z
push 0x53fe1c
lea edx, [ebp - 0xc4]
lea ecx, [ebp - 0x34]
call fcn.0041540b
pop ecx
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.0041545e
push ecx
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0x64]
call fcn.00458fb0
push eax
call fcn.0041b35e
mov ecx, eax
call fcn.0041b629
lea ecx, [ebp - 0x64]
call fcn.00459030
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.0040536f
push ebx
push 1
lea ecx, [ebp - 0x34]
call fcn.0040536f
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.0040536f
jmp 0x417f26
push 6
pop esi
push ebx
push 1
lea ecx, [ebp - 0x1c]
call fcn.0040536f
push ebx
push 1
lea ecx, [ebp - 0xac]
call fcn.0040536f
test esi, esi
jne 0x417c29
call fcn.0041b35e
mov edx, dword [ebp - 0xcc]
lea ecx, [eax + 0x24]
add eax, 0x28
mov dword [ecx], ebx
push eax
push ecx
mov dword [eax], ebx
mov ebx, dword [ebp - 0xc8]
mov ecx, ebx
call fcn.0041c5ad
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x417c2f
push edi
call fcn.0041b35e
mov ecx, eax
call fcn.0041bd5c
mov esi, eax
test esi, esi
jne 0x417c2f
push str.chrome.ext.7z
push 0x53fe1c
lea edx, [ebp - 0xc4]
lea ecx, [ebp - 0x94]
call fcn.0041540b
pop ecx
mov edx, eax
lea ecx, [ebp - 0xac]
call fcn.0041545e
push ecx
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0x64]
call fcn.00458fb0
push eax
call fcn.0041b35e
mov ecx, eax
call fcn.0041b651
lea ecx, [ebp - 0x64]
call fcn.00459030
xor edi, edi
lea ecx, [ebp - 0xac]
push edi
push 1
call fcn.0040536f
lea ecx, [ebp - 0x94]
jmp 0x418025
push 0xb
pop esi
cmp dword [ebp - 8], 8
mov eax, dword [ebp - 0x1c]
jae 0x418004
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x40]
call fcn.00407966
jmp 0x418017
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x1c]
call fcn.0040536f
lea ecx, [ebp - 0x64]
push edi
push 1
call fcn.0040536f
test esi, esi
jne 0x41803b
call fcn.00418617
call fcn.004199e8
push edi
push 1
lea ecx, [ebp - 0x7c]
call fcn.0040536f
push edi
push 1
lea ecx, [ebp - 0xc4]
call fcn.0040536f
mov ecx, dword [ebp - 4]
test esi, esi
pop edi
sete al
xor ecx, ebp
pop esi
pop ebx
call fcn.00501d03
mov esp, ebp
pop ebp
ret 0x18