Function at 0x41c310
Capabilities:
Move file

Disassembly:
push 0xffffffffffffffff
push 0x462aee
mov eax, dword fs:[0]
push eax
mov eax, 0x141c
call fcn.0044f450
mov eax, dword [0x47f038]
xor eax, esp
mov dword [esp + 0x1418], eax
push ebp
push esi
push edi
mov eax, dword [0x47f038]
xor eax, esp
push eax
lea eax, [esp + 0x142c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x143c]
mov esi, ecx
push ebp
push str.ProcessSectionRenameAnyFolder_____s__n
mov dword [esp + 0x18], esi
call fcn.004412c0
mov ecx, dword [esi + 4]
add esp, 8
xor edi, edi
push edi
lea eax, [esp + 0x42c]
push eax
push edi
push ebp
call 0x409a30
test al, al
je 0x41c5f7
lea ecx, [esp + 0x428]
push ecx
push edi
push ebp
push str.__s___d____s__n
call fcn.004412c0
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x23a]
push eax
mov word [esp + 0x23c], dx
call fcn.0044e1b0
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x3e]
push edx
mov word [esp + 0x40], cx
call fcn.0044e1b0
push 0x1c2d0
call fcn.0044e29f
add esp, 0x2c
mov dword [esp + 0x14], eax
mov dword [esp + 0x1434], 0
test eax, eax
je 0x41c3f9
mov ecx, eax
call fcn.004409e0
mov esi, eax
jmp 0x41c3fb
xor esi, esi
push 0x4676d8
lea eax, [esp + 0x42c]
push eax
mov ecx, esi
mov dword [esp + 0x143c], 0xffffffff
call fcn.00440c30
cmp eax, 1
jle 0x41c4b1
cmp byte [esi + 0x1c2cc], 0
je 0x41c441
cmp dword [esi + 0x1c2c8], 0
jg 0x41c439
xor ecx, ecx
jmp 0x41c44f
lea ecx, [esi + 0x32c8]
jmp 0x41c44f
xor ecx, ecx
cmp dword [esi + 0x1c2c8], ecx
setle cl
dec ecx
and ecx, esi
lea edx, [esp + 0x220]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x41c456
cmp byte [esi + 0x1c2cc], al
je 0x41c484
cmp dword [esi + 0x1c2c8], 1
jg 0x41c47c
xor ecx, ecx
jmp 0x41c497
lea ecx, [esi + 0x3ac8]
jmp 0x41c497
cmp dword [esi + 0x1c2c8], 1
jg 0x41c491
xor ecx, ecx
jmp 0x41c497
lea ecx, [esi + 0x104]
lea edx, [esp + 0x18]
jmp 0x41c4a0
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x41c4a0
test esi, esi
je 0x41c4c5
mov ecx, esi
call fcn.00440490
push esi
call fcn.0044e22a
add esp, 4
lea ecx, [esp + 0x220]
push ecx
push str.wszExistFolder_________s__n
call fcn.004412c0
lea edx, [esp + 0x20]
push edx
push str.wszNewFolder_________s__n
call fcn.004412c0
add esp, 0x10
cmp word [esp + 0x220], 0
je 0x41c5d6
cmp word [esp + 0x18], 0
je 0x41c5d6
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x220]
push eax
mov ecx, esi
call fcn.00417110
cmp word [esp + 0x18], 0
je 0x41c52b
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00417110
mov edx, dword [esi + 8]
cmp byte [edx + 0x1e89], 0
je 0x41c543
mov ecx, esi
call fcn.00416fc0
jmp 0x41c5da
mov eax, dword [esi + 0xc]
cmp byte [eax + 5], 0
je 0x41c57f
lea ecx, [esp + 0x220]
push ecx
push str.wszExistFolder_________s__n
call fcn.004412c0
lea edx, [esp + 0x20]
push edx
push str.wszNewFolder_________s__n
call fcn.004412c0
add esp, 0x10
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x224]
push ecx
jmp 0x41c5b0
lea edx, [esp + 0x220]
push edx
push str.wszExistFolder_________s__n
call fcn.004412c0
lea eax, [esp + 0x20]
push eax
push str.wszNewFolder_________s__n
call fcn.004412c0
add esp, 0x10
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x224]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.RenameAnyFile_Error_________ld__n
call fcn.004412c0
push str._____Error_code_2__3_and_183_will_be_ignore_n
call fcn.004412c0
add esp, 0xc
jmp 0x41c5da
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 4]
push 0
lea eax, [esp + 0x42c]
push eax
inc edi
push edi
push ebp
call 0x409a30
test al, al
jne 0x41c386
xor eax, eax
mov ecx, dword [esp + 0x142c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x1418]
xor ecx, esp
call fcn.0044e1a0
add esp, 0x1428
ret 4