Function at 0x464d00
Capabilities:
Create directory
Delete file
Move file

Disassembly:
mov eax, 0x563a7e
call fcn.0053c1d0
sub esp, 0x220
mov eax, dword [0x5af710]
and dword [ebp - 0x44], 0
xor eax, ebp
push ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
test eax, eax
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], eax
je 0x46517c
push eax
lea ecx, [ebp - 0x30]
call fcn.004071e0
xor edi, edi
inc edi
push 0x5c
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edi
call fcn.0044ffe4
mov ebx, eax
mov eax, dword [0x5b096c]
add eax, 0x6c
push eax
lea ecx, [ebp - 0x34]
call fcn.004071e0
push 3
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call fcn.00418d7f
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.0040b4e0
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.00401250
push str.RunDir
lea ecx, [ebp - 0x34]
call fcn.0042ad47
push dword [ebp - 0x34]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call esi
push 0
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push ebx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0042a804
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.0040b4e0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.00401250
push 0
push 0x5f
lea ecx, [ebp - 0x30]
call fcn.00418bc0
test eax, eax
jle 0x464e21
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x30]
call fcn.00418d7f
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.0040b4e0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.00401250
push str..exe
lea ecx, [ebp - 0x30]
call fcn.0042ad47
push edi
push 2
lea ecx, [ebp - 0x12c]
call fcn.00404a20
push dword [ebp - 0x30]
lea eax, [ebp - 0x12c]
push dword [ebp - 0x34]
mov byte [ebp - 4], 6
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x12c]
call fcn.00407320
push 0x10
pop ebx
cmp dword [eax + 0x18], ebx
mov byte [ebp - 4], 7
jb 0x464e72
mov eax, dword [eax + 4]
jmp 0x464e75
add eax, 4
push eax
lea ecx, [ebp - 0x2c]
call fcn.00405500
push 0
push edi
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 9
call fcn.00402c50
cmp dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x28]
jae 0x464e9b
lea eax, [ebp - 0x28]
push eax
call esi
cmp dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x28]
jae 0x464ea9
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x46511b
push edi
push 2
lea ecx, [ebp - 0x22c]
call fcn.00404a20
mov byte [ebp - 4], 0xa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._Error:
push dword [ebp - 0x40]
lea eax, [ebp - 0x22c]
push 0x5770a0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bbec
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push edi
push 2
lea ecx, [ebp - 0x1ac]
call fcn.00404a20
mov esi, 0x572a6c
push esi
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0xb
call fcn.00407320
cmp dword [eax + 0x18], ebx
mov byte [ebp - 4], 0xc
jb 0x464f45
mov eax, dword [eax + 4]
jmp 0x464f48
add eax, 4
push eax
push 0x572a4c
push esi
push 0x572a48
push 0x10000000
push 0x572a40
push dword [ebp - 0x4c]
mov eax, 0x572a3c
push eax
push dword [ebp - 0x4e]
mov edx, 0x572a38
push eax
push dword [ebp - 0x50]
mov ecx, 0x572a34
push edx
push dword [ebp - 0x52]
push ecx
push dword [ebp - 0x56]
push ecx
push dword [ebp - 0x58]
push edx
push 0x7a8
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str..PatchXml.cpp
call fcn.00405500
lea eax, [ebp - 0x90]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], ebx
mov byte [ebp - 4], 0xd
jb 0x464fbc
mov eax, dword [eax + 4]
jmp 0x464fbf
add eax, 4
push eax
lea eax, [ebp - 0x1ac]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
xor ebx, ebx
push ebx
push edi
lea ecx, [ebp - 0x90]
call fcn.00402c50
push ebx
push edi
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xb
call fcn.00402c50
lea eax, [ebp - 0x1ac]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xa
call fcn.004028d0
mov esi, 0x572840
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x160], esi
call fcn.0054dfcb
mov ecx, dword [ebp - 0x38]
push 0x572aed
call fcn.00405500
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x44], edi
mov byte [ebp - 4], 9
call fcn.004028d0
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], esi
call fcn.0054dfcb
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00402c50
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004028d0
mov dword [ebp - 0xe0], esi
jmp 0x465156
cmp dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x28]
jae 0x465126
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
push eax
call fcn.00405500
push 0
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x44], edi
call fcn.00402c50
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.004028d0
mov dword [ebp - 0xe0], 0x572840
lea ecx, [ebp - 0xe0]
call fcn.0054dfcb
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401250
mov eax, dword [ebp - 0x38]
jmp 0x46518a
push 0x572aed
mov ecx, esi
call fcn.00405500
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053aaae
leave
ret 8