Function at 0x41b686
Capabilities:
Check if file exists
Move file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5c1697
mov eax, dword fs:[0]
push eax
sub esp, 0x228
mov eax, dword [0x61dc40]
xor eax, esp
mov dword [esp + 0x220], eax
push ebx
push esi
push edi
mov eax, dword [0x61dc40]
xor eax, esp
push eax
lea eax, [esp + 0x238]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push dword [ebp + 0x10]
mov dword [esp + 0x18], eax
call fcn.0041d3c1
mov ebx, eax
xor edi, edi
cmp ebx, edi
je 0x41ba9b
mov esi, dword [ebx + 0x7444]
cmp esi, edi
je 0x41ba9b
mov eax, dword [ebp + 0xc]
cmp eax, 2
je 0x41ba8d
cmp eax, 4
je 0x41ba1d
cmp eax, 6
je 0x41b95e
cmp eax, 7
je 0x41b797
jle 0x41ba9b
cmp eax, 9
jg 0x41ba9b
mov esi, ebx
mov dword [ebx + 0x7414], 1
call fcn.0041aec4
mov ecx, ebx
lea edi, [esp + 0x14]
call fcn.0041d812
mov dword [esp + 0x240], 2
mov esi, dword [esp + 0x14]
push esi
push ecx
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3ca1
push dword [ebx + 0x7414]
push ecx
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3d88
call fcn.0041afab
mov edi, eax
call fcn.0041b22b
lea eax, [esi - 0x10]
jmp 0x41ba16
push edi
mov dword [ebx + 0x7414], edi
call fcn.005901bf
mov dword [ebx + 0x7424], edx
mov edx, dword [ebx + 0x7404]
mov dword [ebx + 0x7420], eax
mov eax, dword [esi + 0x5d138]
mov esi, dword [esi + 0x5d13c]
pop ecx
mov ecx, dword [ebx + 0x7400]
mov dword [ebx + 0x7408], eax
mov dword [ebx + 0x740c], esi
cmp ecx, 0xffffffff
jne 0x41b7dd
cmp edx, ecx
je 0x41b7e5
cmp ecx, edi
jne 0x41b7f1
cmp edx, edi
jne 0x41b7f1
mov dword [ebx + 0x7400], eax
mov dword [ebx + 0x7404], esi
mov esi, ebx
call fcn.0041aec4
xor eax, eax
push 0x206
push eax
mov word [esp + 0x2c], ax
lea eax, [esp + 0x2e]
push eax
call fcn.00596530
add esp, 0xc
push 0x5def44
lea esi, [ebx + 0x71f4]
push esi
push 0x5def50
lea eax, [esp + 0x30]
push 0x103
push eax
call fcn.0058f42f
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
add esp, 0x14
push esi
call edi
test eax, eax
je 0x41b849
mov ecx, esi
call fcn.0041d40c
push esi
call edi
test eax, eax
jne 0x41b874
push esi
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
cmp dword [ebx + 0x7428], 0
je 0x41b874
push dword [ebx + 0x7430]
mov eax, dword [esp + 0x18]
call fcn.0041d1be
push esi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov ecx, ebx
lea edi, [esp + 0x14]
mov dword [esp + 0x20], eax
call fcn.0041d812
xor edi, edi
inc edi
mov eax, ebx
mov dword [esp + 0x240], edi
call fcn.0041d9da
mov dword [esp + 0x18], eax
test esi, esi
je 0x41b8af
push esi
call fcn.0041da3a
mov dword [esp + 0x1c], eax
jmp 0x41b8b4
and dword [esp + 0x1c], 0
push dword [esp + 0x20]
push ecx
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3c67
push dword [esp + 0x14]
push ecx
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3ca1
push dword [esp + 0x18]
push ecx
call fcn.004a24c1
mov esi, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3cdd
push edi
push dword [esp + 0x20]
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
call fcn.004a3d43
push dword [ebx + 0x7414]
push ecx
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3d88
cmp dword [esp + 0x1c], 0
je 0x41b946
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_DestroyIcon]
call fcn.0041afab
mov edi, eax
call fcn.0041b22b
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
jmp 0x41ba16
cmp dword [ebx + 0x7414], 2
mov eax, dword [esi + 0x5d128]
mov ecx, dword [esi + 0x5d12c]
mov dword [ebx + 0x7400], eax
mov dword [ebx + 0x7404], ecx
mov eax, dword [esi + 0x5d138]
mov ecx, dword [esi + 0x5d13c]
mov dword [ebx + 0x7408], eax
mov dword [ebx + 0x740c], ecx
jne 0x41ba9b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebx + 0x7434]
mov edx, eax
sub edx, dword [ecx]
cmp edx, 0x3e8
jb 0x41ba9b
mov dword [ecx], eax
mov esi, dword [esi + 0x26b8]
mov ecx, ebx
lea edi, [esp + 0x18]
mov dword [ebx + 0x7438], esi
call fcn.0041d812
and dword [esp + 0x240], 0
mov eax, ebx
call fcn.0041d9da
mov edi, dword [esp + 0x18]
push edi
push ecx
mov esi, eax
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3ca1
push esi
push ecx
call fcn.004a24c1
mov esi, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3cdd
lea eax, [edi - 0x10]
call fcn.00407b6b
jmp 0x41ba9b
lea eax, [ebx + 0x7410]
cmp dword [eax], edi
jne 0x41ba9b
xor edi, edi
lea esi, [ebx + 0x71f4]
inc edi
push esi
mov dword [eax], edi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [esp + 0x18], eax
test esi, esi
je 0x41ba4b
push esi
call fcn.0041da3a
mov esi, eax
jmp 0x41ba4d
xor esi, esi
push dword [esp + 0x18]
push ecx
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
add esp, 4
call fcn.004a3c67
push edi
push esi
call fcn.004a24c1
mov ecx, eax
mov eax, dword [ebx + 0x7430]
call fcn.004a3d43
test esi, esi
je 0x41ba86
push esi
call dword [sym.imp.USER32.dll_DestroyIcon]
call fcn.0041cc45
jmp 0x41ba9b
cmp dword [esi + 0x271c], edi
jne 0x41ba9b
mov dword [ebx + 0x743c], edi
mov ecx, dword [esp + 0x238]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x220]
xor ecx, esp
call fcn.0058f3cf
mov esp, ebp
pop ebp
ret 0xc