Function at 0x4b2520
Capabilities:
Move file

Disassembly:
sub esp, 0x148
mov eax, dword [0x679840]
push ebx
push ebp
xor ebx, ebx
cmp eax, ebx
push esi
push edi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x10], ebx
jne 0x4b2542
mov eax, 0x5ad73f
push 0xff
push eax
lea eax, [esp + 0x60]
push eax
call fcn.00588960
push 0xff
lea ecx, [esp + 0x68]
push str.NetCommUtilPlugin.dll
push ecx
call fcn.00588820
add esp, 0x18
mov ecx, 0xa1a528
call fcn.00567630
push 1
push str.Plugins
push ebx
push str.NetCommUtilPlugin.dll.new
mov ecx, 0xa1a528
call fcn.00567650
push ebx
mov edi, 0xf
push 0x5ad73f
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040a500
mov ecx, 0xa1a528
call fcn.00567170
test eax, eax
je 0x4b25dd
mov ecx, 0xa1a528
call fcn.00567170
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
add ecx, 1
cmp dl, bl
jne 0x4b25c7
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.0040a500
mov edx, dword [esp + 0x28]
push 0x19
push str.NetCommUtilPlugin.dll.new
push edx
push ebx
lea ecx, [esp + 0x24]
call fcn.00482800
test eax, eax
mov ebp, 0x10
jne 0x4b2674
mov edx, dword [0x679840]
cmp edx, ebx
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
jne 0x4b2617
mov edx, 0x5ad73f
mov eax, edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4b2620
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x44]
call fcn.0040a500
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x48]
call fcn.0040a040
cmp dword [esp + 0x54], ebp
mov eax, dword [esp + 0x40]
jae 0x4b2655
lea eax, [esp + 0x40]
lea ecx, [esp + 0x58]
push ecx
push eax
call dword [sym.imp.kernel32.dll_MoveFileA]
cmp dword [esp + 0x54], ebp
jb 0x4b2674
mov edx, dword [esp + 0x40]
push edx
call fcn.00588796
add esp, 4
push 0x28
mov byte [esp + 0x15b], bl
call fcn.00588cb9
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x4b26bd
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], 0xffffffff
call fcn.00566e70
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
mov dword [esp + 0x14], 1
call fcn.004b1960
mov esi, eax
jmp 0x4b26bf
xor esi, esi
test byte [esp + 0x10], 1
je 0x4b26d3
mov edx, dword [esp + 0x30]
push edx
call fcn.00588796
add esp, 4
cmp esi, ebx
jne 0x4b26fb
cmp dword [esp + 0x2c], ebp
jb 0x4b27e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00588796
add esp, 4
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x148
ret
cmp byte [esi + 4], bl
jne 0x4b2734
mov ecx, esi
call fcn.004b1a70
push esi
call fcn.00588796
add esp, 4
cmp dword [esp + 0x2c], ebp
jb 0x4b27e6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00588796
add esp, 4
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x148
ret
fldz
fcomp dword [esi + 0x20]
fnstsw ax
test ah, 0x44
jnp 0x4b2774
mov ecx, esi
call fcn.004b1a70
push esi
call fcn.00588796
add esp, 4
cmp dword [esp + 0x2c], ebp
jb 0x4b27e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00588796
add esp, 4
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x148
ret
mov eax, dword [esi + 0x18]
cmp eax, 6
jb 0x4b27cd
cmp eax, 0x1a
jae 0x4b27cd
cmp dword [esi + 0x1c], 1
mov ecx, esi
jne 0x4b27cf
push ebx
call fcn.004b1aa0
mov edi, eax
cmp edi, ebx
je 0x4b27cd
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
cmp eax, 5
jne 0x4b27cd
mov eax, dword [edi]
mov edx, dword [eax + 0x1c]
mov ecx, edi
call edx
cmp eax, ebx
je 0x4b27cd
mov ecx, dword [esp + 0x38]
mov dword [ecx + 0x4c], eax
lea ecx, [esp + 0x14]
call fcn.00409f50
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x148
ret
mov ecx, esi
call fcn.004b1a70
push esi
call fcn.00588796
add esp, 4
lea ecx, [esp + 0x14]
call fcn.00409f50
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x148
ret