Function at 0x41b1c0
Capabilities:
Move file

Disassembly:
push 0xffffffffffffffff
push 0x45f57e
mov eax, dword fs:[0]
push eax
mov eax, 0x141c
call fcn.0044bf30
mov eax, dword [0x47b038]
xor eax, esp
mov dword [esp + 0x1418], eax
push ebp
push esi
push edi
mov eax, dword [0x47b038]
xor eax, esp
push eax
lea eax, [esp + 0x142c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x143c]
mov esi, ecx
push ebp
push str.ProcessSectionRenameAnyFolder_____s__n
mov dword [esp + 0x18], esi
call fcn.0043e2c0
mov ecx, dword [esi + 4]
add esp, 8
xor edi, edi
push edi
lea eax, [esp + 0x42c]
push eax
push edi
push ebp
call fcn.004090a0
test al, al
je 0x41b4a7
lea ecx, [esp + 0x428]
push ecx
push edi
push ebp
push str.__s___d____s__n
call fcn.0043e2c0
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x23a]
push eax
mov word [esp + 0x23c], dx
call fcn.0044ac90
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x3e]
push edx
mov word [esp + 0x40], cx
call fcn.0044ac90
push 0x1c2d0
call fcn.0044ad7f
add esp, 0x2c
mov dword [esp + 0x14], eax
mov dword [esp + 0x1434], 0
test eax, eax
je 0x41b2a9
mov ecx, eax
call fcn.0043d9e0
mov esi, eax
jmp 0x41b2ab
xor esi, esi
push 0x4641c8
lea eax, [esp + 0x42c]
push eax
mov ecx, esi
mov dword [esp + 0x143c], 0xffffffff
call fcn.0043dc30
cmp eax, 1
jle 0x41b361
cmp byte [esi + 0x1c2cc], 0
je 0x41b2f1
cmp dword [esi + 0x1c2c8], 0
jg 0x41b2e9
xor ecx, ecx
jmp 0x41b2ff
lea ecx, [esi + 0x32c8]
jmp 0x41b2ff
xor ecx, ecx
cmp dword [esi + 0x1c2c8], ecx
setle cl
dec ecx
and ecx, esi
lea edx, [esp + 0x220]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x41b306
cmp byte [esi + 0x1c2cc], al
je 0x41b334
cmp dword [esi + 0x1c2c8], 1
jg 0x41b32c
xor ecx, ecx
jmp 0x41b347
lea ecx, [esi + 0x3ac8]
jmp 0x41b347
cmp dword [esi + 0x1c2c8], 1
jg 0x41b341
xor ecx, ecx
jmp 0x41b347
lea ecx, [esi + 0x104]
lea edx, [esp + 0x18]
jmp 0x41b350
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x41b350
test esi, esi
je 0x41b375
mov ecx, esi
call fcn.0043d490
push esi
call fcn.0044ad0a
add esp, 4
lea ecx, [esp + 0x220]
push ecx
push str.wszExistFolder_________s__n
call fcn.0043e2c0
lea edx, [esp + 0x20]
push edx
push str.wszNewFolder_________s__n
call fcn.0043e2c0
add esp, 0x10
cmp word [esp + 0x220], 0
je 0x41b486
cmp word [esp + 0x18], 0
je 0x41b486
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x220]
push eax
mov ecx, esi
call fcn.004160e0
cmp word [esp + 0x18], 0
je 0x41b3db
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004160e0
mov edx, dword [esi + 8]
cmp byte [edx + 0x1e89], 0
je 0x41b3f3
mov ecx, esi
call fcn.0040b1b0
jmp 0x41b48a
mov eax, dword [esi + 0xc]
cmp byte [eax + 5], 0
je 0x41b42f
lea ecx, [esp + 0x220]
push ecx
push str.wszExistFolder_________s__n
call fcn.0043e2c0
lea edx, [esp + 0x20]
push edx
push str.wszNewFolder_________s__n
call fcn.0043e2c0
add esp, 0x10
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x224]
push ecx
jmp 0x41b460
lea edx, [esp + 0x220]
push edx
push str.wszExistFolder_________s__n
call fcn.0043e2c0
lea eax, [esp + 0x20]
push eax
push str.wszNewFolder_________s__n
call fcn.0043e2c0
add esp, 0x10
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x224]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.RenameAnyFile_Error_________ld__n
call fcn.0043e2c0
push str._____Error_code_2__3_and_183_will_be_ignore_n
call fcn.0043e2c0
add esp, 0xc
jmp 0x41b48a
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 4]
push 0
lea eax, [esp + 0x42c]
push eax
inc edi
push edi
push ebp
call fcn.004090a0
test al, al
jne 0x41b236
xor eax, eax
mov ecx, dword [esp + 0x142c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x1418]
xor ecx, esp
call fcn.0044ac80
add esp, 0x1428
ret 4