Function at 0x4619c0
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d6e50
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x511070]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
call fcn.00461c10
test eax, eax
je 0x461a3b
push 0x4f60ec
push 0x515408
call fcn.0048be90
add esp, 8
cmp dword [esi + 0x38], edi
jne 0x461a1e
push edi
push 0x4f610c
push 0x4f6120
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esi]
mov ecx, esi
push 0x12
call dword [eax + 0x1c]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.00461cc0
test eax, eax
je 0x461a8e
push 0x4f6158
push 0x515408
call fcn.0048be90
add esp, 8
cmp dword [esi + 0x38], edi
jne 0x461a71
push 0
push 0x4f21fc
push 0x4f6180
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esi]
mov ecx, esi
push 0x1d
call dword [eax + 0x1c]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esi + 4], edi
jne 0x461a9c
mov ecx, esi
call fcn.00461650
mov edi, eax
cmp dword [esi + 0x38], 0
mov ecx, esi
jne 0x461bc0
test edi, edi
je 0x461ab3
push str._uid
jmp 0x461ab8
push 0x4f61c8
call fcn.00464a10
test eax, eax
jne 0x461af0
push str.failed_to_close_rtp
push 0x515408
call fcn.0048be90
mov eax, dword [esi]
add esp, 8
mov ecx, esi
push 4
call dword [eax + 0x1c]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ebx, [esi + 0x58]
push str.QQRepair.exe
mov edx, ebx
lea ecx, [ebp - 0x10]
call fcn.0041c030
add esp, 4
mov dword [ebp - 4], 0
mov ecx, dword [eax]
call fcn.004591a0
mov dword [ebp - 4], 0xffffffff
or edi, 0xffffffff
mov edx, dword [ebp - 0x10]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461b37
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.QQRepair.exetmp
mov edx, ebx
lea ecx, [ebp - 0x18]
call fcn.0041c030
add esp, 4
mov esi, eax
push str.QQRepair.exe
mov edx, ebx
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x14]
call fcn.0041c030
add esp, 4
push dword [esi]
push dword [eax]
call fcn.004ae39f
mov edx, dword [ebp - 0x14]
add esp, 8
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461b8a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x461ba9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00461f60
test eax, eax
jne 0x461ba9
test edi, edi
je 0x461ba9
mov ecx, esi
call fcn.00461e50
test eax, eax
jne 0x461ba9
mov eax, dword [esi]
mov ecx, esi
push 7
call dword [eax + 0x1c]
push 0x4f6204
push 0x515408
call fcn.0048be90
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret