Function at 0x461500
Capabilities:
Check if file exists
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f54bb
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x54c1b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
add esi, 0x5c
cmp dword [esi + 0x14], 8
jb 0x46153e
mov eax, dword [esi]
jmp 0x461540
mov eax, esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x46173f
xor ebx, ebx
mov dword [ebp - 0x6c], 0xf
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
lea eax, [ebp - 0xac]
push eax
mov dword [ebp - 4], ebx
call fcn.004158b0
mov eax, 0x2710
mov edi, 7
xor ecx, ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], cx
push 0x33
push str.https:__download.17van.com_plugin_cef109_1_18_v2.7z
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00408810
push str._tmp
lea edx, [ebp - 0x2c]
push esi
push edx
call fcn.00407ab0
add esp, 0xc
mov byte [ebp - 4], 3
cmp dword [ebp - 0x18], 8
mov edx, dword [ebp - 0x2c]
jae 0x4615ca
lea edx, [ebp - 0x2c]
xor eax, eax
mov word [ebp - 0x64], ax
mov eax, edx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
lea edi, [eax + 2]
jmp 0x4615e0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4615e0
sub eax, edi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x64]
call fcn.00408810
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x48]
mov edi, 8
cmp dword [ebp - 0x34], edi
jae 0x46160d
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea ebx, [ebp - 0x64]
call fcn.00416300
test al, al
sete bl
mov byte [ebp - 4], 3
cmp dword [ebp - 0x50], edi
jb 0x461637
mov edx, dword [ebp - 0x64]
push edx
call fcn.004bb4d8
add esp, 4
test bl, bl
je 0x4616d7
mov eax, dword [ebp - 0x8c]
mov ecx, 1
sub ecx, dword [eax - 4]
or ecx, dword [eax - 8]
jge 0x461665
xor eax, eax
lea ecx, [ebp - 0x8c]
call fcn.00407db0
mov eax, dword [ebp - 0x8c]
push eax
push 0x51c280
push 0x51be7c
mov edx, 0x14a
mov esi, 2
mov eax, 0x54fee0
call fcn.0042c610
add esp, 0xc
cmp dword [ebp - 0x18], edi
jb 0x461698
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004bb4d8
add esp, 4
xor ebx, ebx
xor eax, eax
mov esi, 7
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
cmp dword [ebp - 0x34], edi
jb 0x4616bc
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004bb4d8
add esp, 4
xor edx, edx
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], dx
call fcn.004159b0
xor al, al
jmp 0x461741
cmp dword [esi + 0x14], edi
jb 0x4616de
mov esi, dword [esi]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x4616e9
lea eax, [ebp - 0x2c]
push 1
push esi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
cmp dword [ebp - 0x18], edi
jb 0x461704
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004bb4d8
add esp, 4
xor ebx, ebx
xor ecx, ecx
mov esi, 7
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], cx
cmp dword [ebp - 0x34], edi
jb 0x461728
mov edx, dword [ebp - 0x48]
push edx
call fcn.004bb4d8
add esp, 4
xor eax, eax
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
call fcn.004159b0
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bb4e3
mov esp, ebp
pop ebp
ret 4