Function at 0x41f484
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443bc6
mov eax, dword fs:[0]
push eax
mov eax, 0x2738
call fcn.0042a390
mov eax, dword [0x45a400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x2f0]
test eax, eax
je 0x41f721
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x41f4d6
push eax
call fcn.0042a410
pop ecx
jmp 0x41f4d8
xor eax, eax
test eax, eax
je 0x41f721
push dword [esi + 0x7c]
lea eax, [ebp - 0x2720]
push eax
call fcn.0042a290
lea eax, [ebp - 0x2720]
push 0x2e
push eax
call fcn.0042a260
push dword [esi + 0x7c]
mov dword [ebp - 0x2740], eax
call fcn.004288f1
mov eax, dword [esi + 0x2f0]
mov eax, dword [eax + 0x1c]
add esp, 0x14
test eax, eax
je 0x41f526
push eax
call fcn.0042a410
pop ecx
mov edi, eax
jmp 0x41f528
xor edi, edi
lea eax, [ebp - 0x2720]
push eax
call fcn.0042a410
lea eax, [eax + edi + 0xb]
push eax
call fcn.0042824d
pop ecx
mov dword [esi + 0x7c], eax
mov eax, dword [esi + 0x2f0]
pop ecx
push dword [eax + 0x1c]
lea ecx, [ebp - 0x273c]
call fcn.00403704
mov ecx, dword [ebp - 0x272c]
and dword [ebp - 4], 0
push 0x10
pop ebx
test ecx, ecx
je 0x41f608
mov eax, dword [ebp - 0x273c]
cmp dword [ebp - 0x2728], ebx
jae 0x41f580
lea eax, [ebp - 0x273c]
cmp byte [eax], 0x20
jne 0x41f604
mov eax, dword [ebp - 0x273c]
cmp dword [ebp - 0x2728], ebx
jae 0x41f599
lea eax, [ebp - 0x273c]
push eax
lea eax, [ebp - 0x2744]
push eax
lea ecx, [ebp - 0x273c]
call fcn.0041518f
mov ecx, dword [ebp - 0x272c]
test ecx, ecx
jne 0x41f56c
jmp 0x41f604
mov eax, dword [ebp - 0x273c]
cmp dword [ebp - 0x2728], ebx
jae 0x41f5cc
lea eax, [ebp - 0x273c]
cmp byte [eax + ecx - 1], 0x20
jne 0x41f608
mov eax, dword [ebp - 0x273c]
cmp dword [ebp - 0x2728], ebx
jae 0x41f5e7
lea eax, [ebp - 0x273c]
lea eax, [eax + ecx - 1]
push eax
lea eax, [ebp - 0x2744]
push eax
lea ecx, [ebp - 0x273c]
call fcn.0041518f
mov ecx, dword [ebp - 0x272c]
test ecx, ecx
jne 0x41f5b8
xor edi, edi
test ecx, ecx
je 0x41f658
mov eax, dword [ebp - 0x273c]
cmp dword [ebp - 0x2728], ebx
jae 0x41f622
lea eax, [ebp - 0x273c]
movsx eax, byte [eax + edi]
push eax
push 0x448940
call fcn.0042a1a0
pop ecx
pop ecx
test eax, eax
je 0x41f64f
mov eax, dword [ebp - 0x273c]
cmp dword [ebp - 0x2728], ebx
jae 0x41f64b
lea eax, [ebp - 0x273c]
mov byte [eax + edi], 0x20
inc edi
cmp edi, dword [ebp - 0x272c]
jb 0x41f60e
lea eax, [ebp - 0x2720]
push eax
push dword [esi + 0x7c]
call fcn.0042a290
xor edi, edi
pop ecx
pop ecx
cmp dword [ebp - 0x2740], edi
je 0x41f6cc
mov eax, dword [esi + 0x7c]
lea ecx, [ebp - 0x2720]
sub eax, ecx
add eax, dword [ebp - 0x2740]
push 0x448958
push eax
call fcn.0042a290
mov eax, dword [ebp - 0x273c]
pop ecx
pop ecx
cmp dword [ebp - 0x2728], ebx
jae 0x41f6a5
lea eax, [ebp - 0x273c]
push eax
push dword [esi + 0x7c]
call fcn.0042a2a0
push 0x448954
push dword [esi + 0x7c]
call fcn.0042a2a0
push dword [ebp - 0x2740]
push dword [esi + 0x7c]
call fcn.0042a2a0
add esp, 0x18
cmp dword [ebp + 8], edi
je 0x41f713
mov ecx, esi
call fcn.0041e4f7
push dword [esi + 0x7c]
lea eax, [ebp - 0x2720]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x41f713
mov ecx, esi
call fcn.00426858
push 2
push 0x44b696
mov dword [ebp - 0x2740], eax
call fcn.0041cebd
lea eax, [ebp - 0x2740]
push eax
mov ecx, esi
call fcn.0041d13e
push edi
push 1
lea ecx, [ebp - 0x273c]
call fcn.00403a1b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00428263
leave
ret 4