Function at 0x41328c
Capabilities:
Move file

Disassembly:
mov eax, 0x498681
call fcn.00497330
sub esp, 0xd0
and dword [ebp - 0x14], 0
lea eax, [ebp - 0x34]
and dword [ebp - 0x10], 0
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
push eax
mov ecx, esi
call fcn.004108ff
push 8
pop ecx
cmp dword [eax + 0x14], ecx
jb 0x4132c1
mov eax, dword [eax]
lea edx, [ebp - 0x14]
mov ecx, eax
call fcn.0041788e
lea ecx, [ebp - 0x34]
call fcn.004045a0
mov ecx, esi
call fcn.0041097f
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp + 0xc]
cmp eax, dword [ebx + 0xdc]
ja 0x413360
jb 0x4132f5
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebx + 0xd8]
ja 0x413360
lea eax, [ebp - 0x4c]
mov ecx, esi
push eax
call fcn.004108ff
cmp dword [eax + 0x14], 8
jb 0x413308
mov eax, dword [eax]
push 0
push 0x8000080
push 3
push 0
push 1
push accept
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [ebp - 0x4c]
mov ebx, eax
call fcn.004045a0
cmp ebx, 0xffffffff
je 0x413360
mov edx, ebx
lea ecx, [ebp - 0x34]
call fcn.0041871a
and dword [ebp - 4], 0
lea eax, [ebp - 0x34]
push eax
lea ecx, [edi + 0x1a0]
call fcn.0040e6c7
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00403b90
mov eax, dword [edi + 0x200]
push 0xfffffffffffffffb
pop ecx
lock and dword [eax], ecx
mov eax, dword [edi + 0x200]
push 8
pop ecx
lock or dword [eax], ecx
mov ecx, esi
call fcn.00410922
push edx
push eax
mov ecx, edi
call fcn.00411092
mov ecx, esi
call fcn.00410922
push edx
push eax
mov ecx, edi
call fcn.004110e1
xor ebx, ebx
cmp dword [esi + 0x50], ebx
jne 0x41343a
xor edx, edx
xor ecx, ecx
call fcn.0040c8b0
mov dword [ebp - 0x1c], 0x139
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x14], str.C:BooCodeOffergateMultiSetup_ObfuscatedoglibOGLiboglib_serviceshttp_downloader.cpp
mov dword [ebp - 0x10], str.ReplacementFor_ProcessSuccessfulDownload
mov dword [ebp - 0x34], ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
push 0xf
mov dword [ebp - 0x24], ebx
pop ebx
push str.Stoping_rename_file
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x34], 0
call fcn.00405c0c
xor eax, eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x4c], eax
push str.No_desired_filename
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x4c], al
mov byte [ebp - 4], 2
call fcn.00405c0c
push ecx
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0040c966
lea ecx, [ebp - 0x4c]
call fcn.00403b90
lea ecx, [ebp - 0x34]
call fcn.00403b90
jmp 0x4136a1
push ebx
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00410f4b
push eax
lea eax, [ebp - 0xac]
mov dword [ebp - 4], 5
push eax
call fcn.0041386a
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 7
call fcn.004045a0
lea eax, [esi + 0x40]
push eax
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x64]
call fcn.00416814
pop ecx
lea ecx, [ebp - 0xac]
cmp ecx, eax
je 0x41348f
mov byte [ebp + 8], bl
push dword [ebp + 8]
push eax
call fcn.0040683f
lea ecx, [ebp - 0x64]
call fcn.004045a0
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.0041386a
push 8
pop eax
mov byte [ebp - 4], al
cmp dword [ebp - 0x84], 0
push 0xf
pop ebx
jne 0x41357a
xor edx, edx
xor ecx, ecx
call fcn.0040c8b0
push 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x1c], 0x141
push eax
mov ecx, edi
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], str.C:BooCodeOffergateMultiSetup_ObfuscatedoglibOGLiboglib_serviceshttp_downloader.cpp
mov dword [ebp - 0x10], str.ReplacementFor_ProcessSuccessfulDownload
call fcn.00410f4b
push ecx
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x7c]
call fcn.004156b8
pop ecx
push 0xb
push str.Base_path:
push ecx
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa
call fcn.0040f4d8
push eax
lea ecx, [ebp - 0x4c]
call fcn.00403b39
xor eax, eax
mov dword [ebp - 0x34], eax
push str.Failed_to_generate_final_path
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x34], al
mov byte [ebp - 4], 0xb
call fcn.00405c0c
push ecx
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040c966
lea ecx, [ebp - 0x34]
call fcn.00403b90
lea ecx, [ebp - 0x4c]
call fcn.00403b90
lea ecx, [ebp - 0x7c]
call fcn.00403b90
push 8
pop eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], al
call fcn.004045a0
push 8
pop ecx
cmp dword [ebp - 0x80], ecx
lea eax, [ebp - 0x94]
mov ecx, esi
cmovae eax, dword [ebp - 0x94]
mov dword [ebp + 8], eax
lea eax, [ebp - 0x64]
push eax
call fcn.004108ff
push 8
pop ecx
cmp dword [eax + 0x14], ecx
jb 0x4135a5
mov eax, dword [eax]
push 2
push dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x64]
mov esi, eax
call fcn.004045a0
test esi, esi
jne 0x41363e
xor edx, edx
xor ecx, ecx
call fcn.0040c8b0
lea edx, [ebp - 0x94]
mov dword [ebp - 0x74], 0x148
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x6c], str.C:BooCodeOffergateMultiSetup_ObfuscatedoglibOGLiboglib_serviceshttp_downloader.cpp
mov dword [ebp - 0x68], str.ReplacementFor_ProcessSuccessfulDownload
call fcn.0041590f
push 0x25
push str.Cannt_move_temp_file_to_destination
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0040f4d8
push eax
lea ecx, [ebp - 0x64]
call fcn.00403b39
mov byte [ebp - 4], bl
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x64]
push ecx
push eax
call fcn.0040c937
lea ecx, [ebp - 0x64]
call fcn.00403b90
lea ecx, [ebp - 0xc4]
call fcn.00403b90
jmp 0x41368b
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0xdc]
call fcn.004185b9
push ecx
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x10
push eax
push 0
mov ecx, edi
call fcn.00410fa1
push ecx
lea eax, [ebp - 0xc4]
mov ecx, edi
push eax
push 2
call fcn.00410fa1
lea ecx, [ebp - 0xc4]
call fcn.004045a0
lea ecx, [ebp - 0xdc]
call fcn.004045a0
lea ecx, [ebp - 0x94]
call fcn.004045a0
lea ecx, [ebp - 0xac]
call fcn.004045a0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8