Function at 0x41e380
Capabilities:
Move file

Disassembly:
push 0xffffffffffffffff
push 0x46863e
mov eax, dword fs:[0]
push eax
mov eax, 0x141c
call fcn.00454790
mov eax, dword [0x48807c]
xor eax, esp
mov dword [esp + 0x1418], eax
push ebp
push esi
push edi
mov eax, dword [0x48807c]
xor eax, esp
push eax
lea eax, [esp + 0x142c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x143c]
mov esi, ecx
push ebp
push str.ProcessSectionRenameAnyFolder_____s__n
mov dword [esp + 0x18], esi
call fcn.004454c0
mov ecx, dword [esi + 4]
add esp, 8
xor edi, edi
push edi
lea eax, [esp + 0x42c]
push eax
push edi
push ebp
call fcn.00409a10
test al, al
je 0x41e667
lea ecx, [esp + 0x428]
push ecx
push edi
push ebp
push str.__s___d____s__n
call fcn.004454c0
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x23a]
push eax
mov word [esp + 0x23c], dx
call fcn.00453450
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x3e]
push edx
mov word [esp + 0x40], cx
call fcn.00453450
push 0x1c2d0
call fcn.004534f0
add esp, 0x2c
mov dword [esp + 0x14], eax
mov dword [esp + 0x1434], 0
test eax, eax
je 0x41e469
mov ecx, eax
call fcn.00444be0
mov esi, eax
jmp 0x41e46b
xor esi, esi
push 0x46dad8
lea eax, [esp + 0x42c]
push eax
mov ecx, esi
mov dword [esp + 0x143c], 0xffffffff
call fcn.00444e30
cmp eax, 1
jle 0x41e521
cmp byte [esi + 0x1c2cc], 0
je 0x41e4b1
cmp dword [esi + 0x1c2c8], 0
jg 0x41e4a9
xor ecx, ecx
jmp 0x41e4bf
lea ecx, [esi + 0x32c8]
jmp 0x41e4bf
xor ecx, ecx
cmp dword [esi + 0x1c2c8], ecx
setle cl
dec ecx
and ecx, esi
lea edx, [esp + 0x220]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x41e4c6
cmp byte [esi + 0x1c2cc], al
je 0x41e4f4
cmp dword [esi + 0x1c2c8], 1
jg 0x41e4ec
xor ecx, ecx
jmp 0x41e507
lea ecx, [esi + 0x3ac8]
jmp 0x41e507
cmp dword [esi + 0x1c2c8], 1
jg 0x41e501
xor ecx, ecx
jmp 0x41e507
lea ecx, [esi + 0x104]
lea edx, [esp + 0x18]
jmp 0x41e510
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x41e510
test esi, esi
je 0x41e535
mov ecx, esi
call fcn.0043df40
push esi
call fcn.004534ca
add esp, 4
lea ecx, [esp + 0x220]
push ecx
push str.wszExistFolder_________s__n
call fcn.004454c0
lea edx, [esp + 0x20]
push edx
push str.wszNewFolder_________s__n
call fcn.004454c0
add esp, 0x10
cmp word [esp + 0x220], 0
je 0x41e646
cmp word [esp + 0x18], 0
je 0x41e646
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x220]
push eax
mov ecx, esi
call fcn.004190c0
cmp word [esp + 0x18], 0
je 0x41e59b
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004190c0
mov edx, dword [esi + 8]
cmp byte [edx + 0x1e89], 0
je 0x41e5b3
mov ecx, esi
call fcn.0040bbb0
jmp 0x41e64a
mov eax, dword [esi + 0xc]
cmp byte [eax + 5], 0
je 0x41e5ef
lea ecx, [esp + 0x220]
push ecx
push str.wszExistFolder_________s__n
call fcn.004454c0
lea edx, [esp + 0x20]
push edx
push str.wszNewFolder_________s__n
call fcn.004454c0
add esp, 0x10
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x224]
push ecx
jmp 0x41e620
lea edx, [esp + 0x220]
push edx
push str.wszExistFolder_________s__n
call fcn.004454c0
lea eax, [esp + 0x20]
push eax
push str.wszNewFolder_________s__n
call fcn.004454c0
add esp, 0x10
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x224]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.RenameAnyFile_Error_________ld__n
call fcn.004454c0
push str._____Error_code_2__3_and_183_will_be_ignore_n
call fcn.004454c0
add esp, 0xc
jmp 0x41e64a
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 4]
push 0
lea eax, [esp + 0x42c]
push eax
inc edi
push edi
push ebp
call fcn.00409a10
test al, al
jne 0x41e3f6
xor eax, eax
mov ecx, dword [esp + 0x142c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x1418]
xor ecx, esp
call fcn.00453432
add esp, 0x1428
ret 4