Function at 0x4270d0
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x534af9
mov eax, dword fs:[0]
push eax
sub esp, 0x548
mov eax, dword [0x5bc684]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x52c], esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x530], ecx
xor edi, edi
mov dword [ebp - 0x534], edi
mov dword [ebp - 4], edi
mov ecx, esi
call fcn.00426740
mov ecx, esi
call fcn.00426640
cmp dword [esi + 4], edi
je 0x4275ab
push 0xa
lea edx, [ebp - 0x528]
push edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00500ffe
mov eax, dword [esi + 4]
mov ebx, dword [eax + 0x140]
push 0x394
call fcn.00480850
add esp, 0x10
mov dword [ebp - 0x554], eax
mov byte [ebp - 4], 1
cmp eax, edi
je 0x42719c
mov esi, dword [esi]
mov edx, dword [esi + 0x60]
push edi
lea ecx, [edx + 0x1334]
push ecx
lea ecx, [edx + 0x1230]
push ecx
add edx, 0xf24
push edx
push edi
push esi
mov ecx, eax
call fcn.00427b20
mov edi, eax
mov byte [ebp - 4], 0
lea edx, [ebp - 0x528]
push edx
mov ecx, edi
call fcn.0042a630
push 0
lea eax, [ebp - 0x544]
push eax
mov ecx, ebx
call fcn.00428f50
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0
push 0
lea ecx, [ebp - 0x544]
push ecx
mov ecx, ebx
call fcn.00428e00
mov ebx, eax
push ebx
lea ecx, [ebp - 0x550]
call fcn.00498260
mov byte [ebp - 4], 2
lea ebx, [ebx]
lea ecx, [ebp - 0x550]
call fcn.00498ec0
mov esi, eax
test esi, esi
je 0x427220
mov edx, dword [ebp - 0x530]
push edx
push esi
call dword [ebp - 0x538]
add esp, 8
test eax, eax
je 0x4271f0
push esi
mov ecx, edi
call fcn.00429b90
jmp 0x4271f0
mov ecx, edi
call fcn.0042a1d0
push ebx
call fcn.004296d0
lea eax, [ebp - 0x544]
push eax
call fcn.00428130
add esp, 8
test edi, edi
je 0x42724a
mov edx, dword [edi]
push 1
mov ecx, edi
mov eax, dword [edx]
call eax
mov esi, dword [ebp - 0x52c]
mov ecx, esi
call fcn.00426740
mov ecx, 0x2e
mov word [ebp - 0x52c], cx
mov edx, dword [esi]
mov ecx, dword [edx + 0x60]
add ecx, 0xf24
lea edx, [ebp - 0x118]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x427274
lea eax, [ebp - 0x118]
push eax
call fcn.004bf2e0
add esp, 4
lea ecx, [ebp - 0x118]
lea edx, [ebp - 0x424]
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4272a0
lea ecx, [ebp - 0x118]
lea edx, [ebp - 0x320]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4272b6
lea ecx, [ebp - 0x118]
lea edx, [ebp - 0x21c]
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4272d0
mov ebx, dword [esi]
mov eax, dword [ebx + 0x60]
add eax, 0x95c0
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4272e6
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x118]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4272f8
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x52c]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x427316
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x118]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x427328
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x60]
add eax, 0x1230
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x427348
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x118]
dec edi
lea ebx, [ebx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x427360
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x60]
add eax, 0x95c0
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x427380
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x424]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x427392
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x52c]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4273b0
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x424]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4273c2
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x60]
add eax, 0x1334
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4273e2
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x424]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4273f4
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x528]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x427412
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x320]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x427424
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x52c]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x427442
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x320]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x427454
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x60]
add eax, 0x1230
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x427474
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x320]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x427486
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x528]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4274a4
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x21c]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4274b6
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x52c]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4274d4
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x21c]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4274e6
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x60]
add eax, 0x1334
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x427506
sub eax, ecx
mov esi, ecx
lea edi, [ebp - 0x21c]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x427518
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x320]
push ecx
call fcn.004c4aa0
add esp, 4
test eax, eax
je 0x42759c
lea edx, [ebp - 0x21c]
push edx
call fcn.004c4aa0
add esp, 4
test eax, eax
je 0x42759c
lea eax, [ebp - 0x118]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call esi
lea ecx, [ebp - 0x424]
push ecx
call esi
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x320]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
call esi
lea ecx, [ebp - 0x424]
push ecx
lea edx, [ebp - 0x21c]
push edx
call esi
mov dword [ebp - 0x534], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x550]
call fcn.00498280
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x534]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004fe1f5
mov esp, ebp
pop ebp
ret 8