Function at 0x4056b0
Capabilities:
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x43669b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x438
mov eax, dword [0x446214]
push ebx
mov ebx, ecx
mov dword [esp + 0x434], eax
mov eax, dword [ebx + 0x10]
test eax, eax
push esi
push edi
je 0x405946
mov ecx, dword [ebx + 0x14]
mov dword [ecx + 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebx + 0x14]
push eax
call fcn.00405230
test eax, eax
je 0x405946
mov ecx, dword [ebx + 0x14]
call fcn.004051e0
mov esi, eax
test esi, esi
jne 0x40572c
mov ecx, dword [ebp + 0xc]
push eax
push eax
push eax
push eax
push eax
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
xor eax, eax
jmp 0x405989
cmp dword [ebx], 0
je 0x405771
test esi, esi
mov dword [esp + 0x10], esi
fild dword [esp + 0x10]
jge 0x405743
fadd dword [0x438970]
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
push eax
push 1
fdivr st(1)
fstp dword [ebx + 8]
mov ecx, dword [0x447168]
fstp st(0)
call fcn.00403510
mov ecx, eax
call fcn.00408000
mov ecx, eax
call fcn.00405a90
mov edx, dword [ebp + 0xc]
xor eax, eax
mov word [esp + 0x28], 0
mov ecx, 0x81
lea edi, [esp + 0x2a]
rep stosd dword es:[edi], eax
push edx
stosw word es:[edi], ax
lea eax, [esp + 0x2c]
push str._s.download
push eax
call fcn.0041ad49
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.0042a184
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebx
mov dword [esp + 0x450], 0
mov edi, 0x8002
call fcn.00405050
test eax, eax
jne 0x4057cb
mov edi, 0x9002
push 0
push edi
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x24]
call fcn.0042a420
test eax, eax
lea ecx, [esp + 0x18]
jne 0x4057fb
mov dword [esp + 0x44c], 0xffffffff
call fcn.0042a1c3
xor eax, eax
jmp 0x405989
mov dword [esp + 0x14], 0
call fcn.0042a07c
lea ecx, [esi + 4]
xor edi, edi
cmp eax, ecx
jne 0x405846
cmp edx, edi
jne 0x405846
sub eax, 4
push edi
sbb edx, edi
push edx
push eax
lea ecx, [esp + 0x24]
call fcn.00429f22
push 4
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
call fcn.00429e97
mov edi, dword [esp + 0x14]
cmp edi, esi
jbe 0x405855
xor edi, edi
mov dword [esp + 0x14], edi
jmp 0x405855
push edi
push ecx
lea ecx, [esp + 0x20]
call fcn.0042a04a
mov edi, dword [esp + 0x14]
cmp dword [ebx], 0
je 0x40590c
test edi, edi
mov dword [esp + 0x10], edi
fild dword [esp + 0x10]
jge 0x405870
fadd dword [0x438970]
test esi, esi
mov dword [esp + 0x10], esi
fild dword [esp + 0x10]
jge 0x405882
fadd dword [0x438970]
fld st(1)
fdivrp st(1)
fmul qword [0x438968]
fxch st(1)
fdiv dword [ebx + 8]
call fcn.0041b710
mov dword [esp + 0x10], eax
call fcn.0041b710
push eax
push esi
push edi
lea ecx, [esp + 0x23c]
push 0x438938
push ecx
call fcn.0041ad49
lea edx, [esp + 0x244]
push 0x438934
push edx
call fcn.0041acbd
mov ecx, dword [0x447168]
add esp, 0x1c
lea eax, [esp + 0x230]
push eax
call fcn.00403510
mov ecx, eax
call fcn.00408000
mov ecx, eax
call fcn.00405ab0
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [0x447168]
call fcn.00403510
mov ecx, eax
call fcn.00408000
mov ecx, eax
call fcn.00405aa0
mov edi, dword [esp + 0x14]
push edi
push esi
lea edx, [esp + 0x20]
push edx
mov ecx, ebx
call fcn.00405420
test eax, eax
lea ecx, [esp + 0x18]
jne 0x40594a
call fcn.0042a122
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x18]
mov dword [esp + 0x44c], 0xffffffff
call fcn.0042a1c3
xor eax, eax
jmp 0x405989
push 0
push esi
call fcn.0042a04a
lea ecx, [esp + 0x18]
call fcn.0042a122
mov esi, dword [ebp + 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
lea ecx, [esp + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
lea ecx, [esp + 0x18]
mov esi, eax
mov dword [esp + 0x44c], 0xffffffff
call fcn.0042a1c3
mov eax, esi
mov ecx, dword [esp + 0x444]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x43c]
call fcn.0041a963
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8