Function at 0x43275e
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c4f66
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2aec
call fcn.00506f00
mov eax, dword [0x67e2d4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov ebx, 0x800
lea eax, [ebp - 0x814]
push ebx
push 0
push eax
call fcn.0056b050
lea esi, [edi + 0x1254]
push esi
lea eax, [ebp - 0x814]
push 0x5eeaa4
push eax
call fcn.00436927
push ebx
xor ebx, ebx
lea eax, [ebp - 0x1014]
push ebx
push eax
call fcn.0056b050
push esi
lea eax, [ebp - 0x1014]
push 0x5eeac0
push eax
call fcn.00436927
push esi
call fcn.0042ea00
add esp, 0x34
test al, al
je 0x4328b2
push esi
call fcn.0042f36d
pop ecx
cmp eax, dword [edi + 0x25b0]
jne 0x4328b2
cmp edx, dword [edi + 0x25b4]
jne 0x4328b2
lea eax, [ebp - 0x1014]
push eax
call fcn.0059ca5b
mov eax, dword [edi + 0x25b4]
pop ecx
mov ecx, dword [edi + 0x25b0]
push ebx
push eax
push ecx
push eax
push ecx
push 5
mov ecx, edi
call fcn.00434df0
test eax, eax
je 0x4328aa
cmp dword [edi + 0x24c4], ebx
jne 0x4328aa
cmp dword [edi + 0x210], ebx
je 0x43288c
lea eax, [edi + 0x2254]
push eax
sub esp, 0xe4
lea eax, [edi + 0x2358]
mov ecx, esp
push eax
call fcn.0042cb10
lea eax, [edi + 0x1a54]
mov ecx, 0x6822b8
push eax
push esi
lea eax, [edi + 0x254]
push eax
lea eax, [edi + 0x214]
push eax
call fcn.0042e300
jmp 0x4328aa
mov eax, dword [edi + 0x25b4]
mov ecx, edi
mov edx, dword [edi + 0x25b0]
push 0x5eebe8
push eax
push edx
push eax
push edx
push 9
call fcn.00434df0
xor eax, eax
inc eax
jmp 0x432d2e
push 0x5c0
lea eax, [ebp - 0x15d4]
mov dword [ebp - 4], ebx
push 0
mov bl, 1
push eax
mov byte [ebp - 0x2af0], bl
call fcn.0056b050
lea eax, [ebp - 0x814]
push eax
call fcn.0042ea00
add esp, 0x10
test al, al
je 0x432944
push 0
lea eax, [ebp - 0x1014]
lea esi, [edi + 0x2568]
push eax
mov ecx, esi
call fcn.00434006
push 0x5c0
lea eax, [ebp - 0x15d4]
mov ecx, esi
push eax
call fcn.00434452
cmp eax, 0x5c0
jne 0x432944
mov eax, dword [ebp - 0x14d4]
cmp eax, dword [edi + 0x25b0]
jne 0x432944
mov eax, dword [ebp - 0x14d0]
cmp eax, dword [edi + 0x25b4]
jne 0x432944
xor eax, eax
movzx ebx, bl
cmp dword [ebp - 0x14cc], 1
cmovg ebx, eax
mov byte [ebp - 0x2af0], bl
push dword [ebp - 0x2af0]
lea eax, [ebp - 0x1014]
lea esi, [edi + 0x2568]
push eax
mov ecx, esi
call fcn.00434006
push 0x5c0
lea eax, [ebp - 0x15d4]
mov ecx, esi
push eax
call fcn.00434452
lea eax, [edi + 0x214]
push eax
lea eax, [ebp - 0x15d4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [edi + 0x25b0]
mov eax, dword [edi + 0x25b4]
mov dword [ebp - 0x14d4], ecx
mov dword [ebp - 0x14d0], eax
test bl, bl
je 0x4329c8
lea eax, [ebp - 0x814]
push eax
call fcn.0059ca5b
mov esi, dword [edi + 0x24b0]
mov ebx, dword [ebp - 0x14d0]
pop ecx
mov ecx, dword [ebp - 0x14d4]
mov dword [ebp - 0x14cc], esi
jmp 0x4329d4
mov esi, dword [ebp - 0x14cc]
mov ebx, dword [edi + 0x25b4]
push ebx
mov eax, esi
cdq
push edx
push eax
push ebx
push ecx
call fcn.00507840
mov dword [ebp - 0x2ae0], ebx
pop ebx
mov ebx, ecx
mov dword [ebp - 0x2aec], edx
mov edx, dword [ebp - 0x2ae0]
mov ecx, eax
mov eax, ebx
mov dword [ebp - 0x2ae4], ecx
or eax, edx
jne 0x432a18
mov eax, dword [ebp - 0x2aec]
mov dword [ebp - 0x2af4], ecx
mov dword [ebp - 0x2ae0], eax
jmp 0x432a2c
add ebx, ecx
mov dword [ebp - 0x2af4], ebx
adc edx, dword [ebp - 0x2aec]
mov dword [ebp - 0x2ae0], edx
xor ecx, ecx
xorps xmm0, xmm0
movlpd qword [ebp - 0x2afc], xmm0
mov dword [ebp - 0x2ae8], ecx
test esi, esi
jle 0x432ab8
mov esi, dword [ebp - 0x2af8]
lea edx, [ebp - 0x14bc]
mov ebx, dword [ebp - 0x2afc]
mov eax, dword [edx + 8]
add dword [edi + 0x25b8], eax
mov eax, dword [edx + 0xc]
adc dword [edi + 0x25bc], eax
mov dword [edx - 8], ebx
mov dword [edx - 4], esi
mov eax, dword [ebp - 0x14cc]
dec eax
cmp ecx, eax
jne 0x432a95
mov ecx, ebx
mov eax, esi
add ecx, dword [ebp - 0x2af4]
mov dword [edx], ecx
adc eax, dword [ebp - 0x2ae0]
mov ecx, dword [ebp - 0x2ae8]
mov dword [edx + 4], eax
jmp 0x432aa6
add ebx, dword [ebp - 0x2ae4]
mov dword [edx], ebx
adc esi, dword [ebp - 0x2aec]
mov dword [edx + 4], esi
inc ecx
add edx, 0x18
mov dword [ebp - 0x2ae8], ecx
cmp ecx, dword [ebp - 0x14cc]
jl 0x432a55
push 0x5c0
lea eax, [ebp - 0x15d4]
push eax
lea ecx, [edi + 0x2568]
call fcn.0043603b
push 0x5eedf4
push dword [edi + 0x25b4]
mov ecx, edi
push dword [edi + 0x25b0]
push dword [edi + 0x25bc]
push dword [edi + 0x25b8]
push 2
call fcn.00434df0
push dword [ebp - 0x2af0]
lea eax, [ebp - 0x814]
push dword [edi + 0x25b4]
lea ecx, [edi + 0x2530]
push dword [edi + 0x25b0]
push eax
call fcn.00433f08
test eax, eax
jne 0x432b27
push 0x5eee64
jmp 0x432e48
push dword [ebp - 0x14cc]
lea ecx, [edi + 0x24c8]
call fcn.0050324a
xor ebx, ebx
mov dword [ebp - 0x2ae0], ebx
cmp ebx, dword [ebp - 0x14cc]
jge 0x432c3f
call fcn.0041279d
push eax
lea ecx, [ebp - 0x2ae8]
call fcn.00411d94
push ebx
lea eax, [ebp - 0x15d4]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x2ae8]
push str._s__d
push eax
call fcn.00412690
add esp, 0x10
push 0x238
call fcn.00506ecd
pop ecx
mov dword [ebp - 0x2af4], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x432ba1
mov ecx, eax
call fcn.0042cad5
mov ebx, eax
jmp 0x432ba3
xor ebx, ebx
mov eax, dword [ebx]
mov ecx, ebx
mov esi, dword [ebp - 0x2ae8]
push esi
mov byte [ebp - 4], 1
call dword [eax + 4]
imul eax, dword [ebp - 0x2ae0], 0x18
mov dword [ebx + 0x208], edi
push dword [ebp + eax - 0x14b0]
push dword [ebp + eax - 0x14b4]
push dword [ebp + eax - 0x14b8]
push dword [ebp + eax - 0x14bc]
push dword [ebp + eax - 0x14c0]
push dword [ebp + eax - 0x14c4]
mov eax, dword [edi + 0x25a0]
push ecx
sub eax, 0x10
mov dword [ebp - 0x2ae4], esp
push eax
call fcn.00412393
pop ecx
mov ecx, dword [ebp - 0x2ae4]
add eax, 0x10
push dword [ebp - 0x2ae0]
mov dword [ecx], eax
mov ecx, ebx
call fcn.004355e9
push ebx
lea ecx, [edi + 0x24c8]
call fcn.00502fd2
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 0
call fcn.00412ac4
mov ebx, dword [ebp - 0x2ae0]
inc ebx
jmp 0x432b3a
lea ecx, [edi + 0x24c8]
call fcn.0050365e
lea ecx, [edi + 0x2568]
call fcn.0042e63e
lea ecx, [edi + 0x2530]
call fcn.0042e63e
mov esi, dword [edi + 0x25b8]
mov edx, dword [edi + 0x25b0]
mov ecx, dword [edi + 0x25bc]
mov eax, dword [edi + 0x25b4]
cmp esi, edx
jne 0x432dd6
cmp ecx, eax
jne 0x432dd6
lea eax, [ebp - 0x1014]
push eax
call fcn.0059ca5b
pop ecx
push 3
lea esi, [edi + 0x1254]
push esi
lea eax, [ebp - 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
xor ebx, ebx
cmp dword [edi + 0x24c4], ebx
jne 0x432d2c
mov eax, dword [edi + 0x2430]
cmp dword [eax - 0xc], ebx
je 0x432d4a
push 0x1508
lea eax, [ebp - 0x2adc]
push ebx
push eax
call fcn.0056b050
lea eax, [ebp - 0x2adc]
push eax
push esi
call fcn.0042ed78
add esp, 0x14
test eax, eax
je 0x432d01
push dword [edi + 0x2430]
lea eax, [ebp - 0x1c58]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x432d4a
push esi
call fcn.00434add
mov dword [esp], 0x5eef04
mov ecx, edi
push dword [edi + 0x25b4]
push dword [edi + 0x25b0]
push ebx
push ebx
push 2
call fcn.00434df0
mov ecx, edi
call fcn.004330f7
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00506d7f
mov esp, ebp
pop ebp
ret
mov eax, dword [edi + 0x25b4]
mov ecx, dword [edi + 0x25b0]
push 0x5eef20
push eax
push ecx
push eax
push ecx
push 5
mov ecx, edi
call fcn.00434df0
test eax, eax
je 0x432d2c
cmp dword [edi + 0x210], ebx
je 0x432dba
push dword [edi + 0x24b0]
lea eax, [edi + 0x2254]
push eax
sub esp, 0xe4
lea eax, [edi + 0x2358]
mov ecx, esp
push eax
call fcn.0042cb10
lea eax, [edi + 0x1a54]
mov ecx, 0x6822b8
push eax
push esi
lea eax, [edi + 0x254]
push eax
lea eax, [edi + 0x214]
push eax
call fcn.00430d2e
jmp 0x432d2c
mov eax, dword [edi + 0x25b4]
mov ecx, dword [edi + 0x25b0]
push 0x5eef5c
push eax
push ecx
push eax
push ecx
push 9
jmp 0x432e62
cmp dword [edi + 0x24c0], 0
je 0x432dec
push 0x5eef98
push eax
push edx
push ecx
push esi
push 7
jmp 0x432e62
cmp dword [edi + 0x24b8], 0
lea eax, [ebp - 0x814]
push eax
je 0x432e30
call fcn.0059ca5b
lea eax, [ebp - 0x1014]
push eax
call fcn.0059ca5b
pop ecx
pop ecx
push 0x5eefe0
push dword [edi + 0x25b4]
push dword [edi + 0x25b0]
push dword [edi + 0x25bc]
push dword [edi + 0x25b8]
push 6
jmp 0x432e62
call fcn.0059ca5b
lea eax, [ebp - 0x1014]
push eax
call fcn.0059ca5b
pop ecx
pop ecx
push 0x5eeff8
push dword [edi + 0x25b4]
push dword [edi + 0x25b0]
push dword [edi + 0x25bc]
push dword [edi + 0x25b8]
push 0x20
mov ecx, edi
call fcn.00434df0
jmp 0x432d2c