Function at 0x42c1a0
Capabilities:
Move file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4727f7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2f8
mov eax, dword [0x4d100c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0x12
xor eax, eax
mov dword [ebp - 0x2ec], 0
push str.SpotlightPreflight
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 0x2b5], 0
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 7
mov word [ebp - 0x2ec], ax
call fcn.00411b40
push 4
push str..dat
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 4], 0
call fcn.00412220
xor ecx, ecx
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x2d4], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x2c4], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2d4]
cmp dword [ebp - 0x2c0], 8
lea esi, [edi + 0x44c]
movd eax, xmm1
mov edx, esi
cmovae ecx, eax
cmp dword [esi + 0x14], 8
jb 0x42c28e
mov edx, dword [esi]
push ecx
lea ecx, [ebp - 0x74]
call fcn.004185a0
add esp, 4
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x2c0]
cmp edx, 8
jb 0x42c2de
mov ecx, dword [ebp - 0x2d4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c2d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9cf
push edx
push ecx
call fcn.00451449
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x2d8]
cmp edx, 8
jb 0x42c322
mov ecx, dword [ebp - 0x2ec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c318
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9cf
push edx
push ecx
call fcn.00451449
add esp, 8
xor eax, eax
mov dword [ebp - 0x2dc], 0
push 0x15
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x44]
push str.TwitchStudioPreflight
mov dword [ebp - 0x2d8], 7
mov word [ebp - 0x2ec], ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00411b40
push 4
push str..dat
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.00412220
xor ecx, ecx
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x2d4], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x2c4], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2d4]
cmp dword [ebp - 0x2c0], 8
mov edx, esi
movd eax, xmm1
cmovae ecx, eax
cmp dword [esi + 0x14], 8
jb 0x42c3be
mov edx, dword [esi]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.004185a0
mov byte [ebp - 4], 5
add esp, 4
mov edx, dword [ebp - 0x2c0]
cmp edx, 8
jb 0x42c40e
mov ecx, dword [ebp - 0x2d4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c404
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9d4
push edx
push ecx
call fcn.00451449
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x42c44c
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c442
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9d4
push edx
push ecx
call fcn.00451449
add esp, 8
cmp dword [ebp - 0x60], 8
lea ecx, [ebp - 0x74]
cmovae ecx, dword [ebp - 0x74]
call fcn.0041d6c0
test edx, edx
jl 0x42c48f
jg 0x42c466
test eax, eax
jb 0x42c48f
cmp dword [ebp - 0x48], 8
lea ecx, [ebp - 0x5c]
push 2
cmovae ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 8
push ecx
cmovae eax, dword [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
setne byte [ebp - 0x2b5]
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x42c4c9
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c4bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9d9
push edx
push ecx
call fcn.00451449
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
cmp edx, 8
jb 0x42c51e
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c514
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9d9
push edx
push ecx
call fcn.00451449
add esp, 8
mov eax, 0x4c9fb4
mov dword [ebp - 0x2b4], eax
nop dword [eax]
mov esi, dword [eax]
test esi, esi
je 0x42c585
push 0
push esi
push 0
mov ecx, edi
call fcn.0042bd40
or byte [ebp - 0x2b5], al
mov ecx, edi
push 0
push esi
push 2
call fcn.0042bd40
or byte [ebp - 0x2b5], al
mov ecx, edi
push str._startup
push esi
push 7
call fcn.0042bd40
or byte [ebp - 0x2b5], al
mov eax, dword [ebp - 0x2b4]
add eax, 4
mov dword [ebp - 0x2b4], eax
cmp eax, 0x4c9fbc
jne 0x42c530
mov eax, 0x4c9fb4
mov dword [ebp - 0x2b4], eax
mov eax, dword [eax]
mov dword [ebp - 0x2bc], eax
test eax, eax
je 0x42c68c
lea ecx, [ebp - 0x2b0]
call fcn.00429c00
lea esi, [edi + 0x404]
mov dword [ebp - 4], 7
lea eax, [ebp - 0x2b0]
cmp eax, esi
je 0x42c5db
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x42c5cc
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x2b0]
push eax
call fcn.00411b40
lea ecx, [ebp - 0x2b0]
call fcn.00431af0
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
push dword [ebp - 0x2bc]
cmovae eax, dword [ebp - 0x238]
push eax
call fcn.0045466a
add esp, 8
test eax, eax
jne 0x42c660
cmp dword [edi + 0x460], 8
lea edx, [edi + 0x44c]
jb 0x42c622
mov edx, dword [edi + 0x44c]
cmp dword [edi + 0x430], 8
lea eax, [edi + 0x41c]
jb 0x42c633
mov eax, dword [eax]
cmp dword [esi + 0x14], 8
jb 0x42c63b
mov esi, dword [esi]
cmp dword [edi + 0x400], 8
lea ecx, [edi + 0x3ec]
jb 0x42c64c
mov ecx, dword [ecx]
push 1
push edx
push eax
push esi
push ecx
mov ecx, edi
call fcn.00431020
mov byte [ebp - 0x2b5], 1
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 4], 0xffffffff
call fcn.0042a3d0
mov eax, dword [ebp - 0x2b4]
add eax, 4
mov dword [ebp - 0x2b4], eax
cmp eax, 0x4c9fbc
jne 0x42c590
mov al, byte [ebp - 0x2b5]
test al, al
je 0x42c9b1
push str.SHGetKnownFolderPath
push str.shell32.dll
mov dword [ebp - 0x2b4], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x42c6d1
lea ecx, [ebp - 0x2b4]
push ecx
push 0
push 0
push 0x47c0f8
call eax
mov eax, dword [ebp - 0x2b4]
test eax, eax
je 0x42c9ab
mov esi, 0x4c9fbc
mov ecx, dword [esi]
mov dword [ebp - 0x2bc], ecx
test ecx, ecx
je 0x42c9a4
push str.TaskBar
mov edx, eax
lea ecx, [ebp - 0x304]
call fcn.004185a0
add esp, 4
mov dword [ebp - 4], 8
cmp dword [eax + 0x14], 8
jb 0x42c718
mov eax, dword [eax]
push dword [ebp - 0x2bc]
mov edx, eax
lea ecx, [ebp - 0x2d4]
call fcn.004185a0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov edx, dword [ebp - 0x2f0]
cmp edx, 8
jb 0x42c775
mov ecx, dword [ebp - 0x304]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c76b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9cf
push edx
push ecx
call fcn.00451449
add esp, 8
xor eax, eax
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 7
mov word [ebp - 0x304], ax
push 4
push str..lnk
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 4], 9
call fcn.00412220
mov dword [ebp - 0x2c], 0
xor ecx, ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x2c0]
cmp edx, 8
jb 0x42c828
mov ecx, dword [ebp - 0x2d4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c81e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9cf
push edx
push ecx
call fcn.00451449
add esp, 8
sub esp, 8
mov dword [ebp - 0x2c4], 0
xor eax, eax
mov dword [ebp - 0x2c0], 7
lea edx, [edi + 0x44c]
mov word [ebp - 0x2d4], ax
lea ecx, [ebp - 0x44]
call fcn.00429950
add esp, 8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
cmovae ecx, dword [ebp - 0x2c]
call fcn.0041d6c0
test edx, edx
jl 0x42c900
jg 0x42c87f
test eax, eax
jb 0x42c900
cmp dword [edi + 0x400], 8
lea eax, [edi + 0x3ec]
jb 0x42c890
mov eax, dword [eax]
cmp dword [ebp - 0x30], 8
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x2c]
cmovae edx, dword [ebp - 0x44]
cmp dword [ebp - 0x18], 8
cmovae ecx, dword [ebp - 0x2c]
push ecx
push eax
push 0
call fcn.004192e0
add esp, 0xc
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
cmovae eax, dword [ebp - 0x2c]
push 0
push eax
push 5
push 0x1000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 0
cmovae eax, dword [ebp - 0x2c]
push eax
push 5
push 0x2000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push 0
push 0
push 0
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov byte [ebp - 0x2b5], 1
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x42c93e
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c934
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9cf
push edx
push ecx
call fcn.00451449
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x42c98f
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42c985
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c9cf
push edx
push ecx
call fcn.00451449
add esp, 8
mov eax, dword [ebp - 0x2b4]
add esi, 4
cmp esi, 0x4c9fcc
jne 0x42c6e4
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov al, byte [ebp - 0x2b5]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00450db2
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00460976
call fcn.00460976
call fcn.00460976
int3