Function at 0x1005a420
Capabilities:
Get disk size
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100af52e
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x100e4618]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x58], edi
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
cmp eax, dword [edi + 0x24]
jne 0x1005aa23
cmp byte [edi + 0xc], 0
je 0x1005aa0c
push dword [edi + 0x10]
lea eax, [edi + 0x10]
mov dword [ebp - 0x4c], eax
call sub.NetStream.dll_NS_GetRecordFileSize
mov ebx, dword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____cdecl_QString::fromAscii_helper_char_const___int_]
push 1
push 0x100be7a4
mov dword [ebp - 0x44], eax
call ebx
mov dword [ebp - 0x74], eax
add esp, 4
mov dword [ebp - 4], 0
mov eax, esp
lea ecx, [ebp - 0x74]
push 0
push 0
push ecx
lea ecx, [ebp - 0x8c]
mov dword [eax], 0
push ecx
lea ecx, [edi + 0x1c]
call dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::section_class_QString_const___int__int__class_QFlags_enum_QString::SectionFlag__]
mov esi, eax
push 3
push 0x100be7a0
mov byte [ebp - 4], 1
call ebx
mov dword [ebp - 0x78], eax
add esp, 4
mov byte [ebp - 0x50], 0x20
mov ecx, esp
mov byte [ebp - 4], 2
push dword [ebp - 0x50]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QChar::constructor_struct_QLatin1Char_]
push 0
push esi
mov esi, dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::arg_class_QString_const___int__class_QChar_]
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x78]
call esi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 5
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 6
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x64]
call dword [sym.imp.Qt5Core.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, dword [ebp - 0x94]
test eax, eax
mov eax, dword [ebp - 0x90]
setne dl
shrd ecx, eax, 0x1e
shr eax, 0x1e
cmp ecx, 1
jl 0x1005a567
test dl, dl
jne 0x1005a791
lea ecx, [ebp - 0x6c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonObject::constructor_void_]
push str.window.onPluginEventHandler
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 7
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonValue::constructor_char_const__]
push 3
push 0x100bbec8
mov byte [ebp - 4], 8
call ebx
add esp, 8
mov dword [ebp - 0x48], eax
mov esi, dword [sym.imp.Qt5Core.dll_public:_class_QJsonObject::iterator___thiscall_QJsonObject::insert_class_QString_const___class_QJsonValue_const__]
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x6c]
call esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov edi, dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonValue::destructor_void_]
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 7
call edi
push 0x15
lea ecx, [ebp - 0x88]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonValue::constructor_int_]
push 9
push str.eventType
mov byte [ebp - 4], 0xa
call ebx
add esp, 8
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x6c]
call esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 7
call edi
push dword [ebp - 0x4c]
mov edi, dword [0x100ea0c8]
lea eax, [ebp - 0x50]
push eax
mov ecx, edi
call fcn.10051390
mov esi, dword [ebp - 0x50]
cmp esi, dword [edi]
jne 0x1005a654
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 6
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonObject::destructor_void_]
jmp 0x1005a9fa
push dword [esi + 0xc]
mov ebx, dword [sym.imp.Qt5Core.dll_public:_class_QObject____thiscall_QMetaObject::cast_class_QObject__const]
mov ecx, 0x100e451c
call ebx
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QObject____thiscall_QObject::parent_void_const]
push eax
mov ecx, 0x100e44fc
call ebx
push dword [esi + 0xc]
mov ecx, 0x100e451c
mov edi, eax
call ebx
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QObject____thiscall_QObject::parent_void_const]
push eax
mov ecx, 0x100e44fc
call ebx
mov ecx, eax
call dword [sym.imp.Qt5Widgets.dll_public:_class_QWidget____thiscall_QWidget::parentWidget_void_const]
mov ecx, eax
call dword [sym.imp.Qt5Widgets.dll_public:_class_QWidget____thiscall_QWidget::parentWidget_void_const]
push edi
push eax
lea ecx, [ebp - 0x60]
call fcn.100469c0
mov ecx, eax
call fcn.1004a1c0
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonValue::constructor_int_]
mov ebx, dword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____cdecl_QString::fromAscii_helper_char_const___int_]
push 8
push str.wndIndex
mov byte [ebp - 4], 0xc
call ebx
add esp, 8
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x6c]
call dword [sym.imp.Qt5Core.dll_public:_class_QJsonObject::iterator___thiscall_QJsonObject::insert_class_QString_const___class_QJsonValue_const__]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonValue::destructor_void_]
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x54]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonDocument::constructor_class_QJsonObject_const__]
mov edi, dword [ebp - 0x58]
mov ecx, edi
mov byte [ebp - 4], 0xe
call dword [sym.imp.Qt5Core.dll_public:_class_QObject____thiscall_QObject::parent_void_const]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QObject____thiscall_QObject::parent_void_const]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QObject____thiscall_QObject::parent_void_const]
mov esi, eax
test esi, esi
je 0x1005a745
mov ecx, esi
call dword [sym.imp.Qt5Core.dll_public:_bool___thiscall_QObject::isWidgetType_void_const]
test al, al
jne 0x1005a747
xor esi, esi
lea eax, [ebp - 0x54]
push eax
push esi
push 3
call fcn.100091b0
add esp, 0xc
push dword [edi + 0x10]
call sub.NetStream.dll_NS_StopSave
test eax, eax
js 0x1005a766
mov byte [edi + 0xc], 0
push dword [edi + 0x24]
mov ecx, edi
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QObject::killTimer_int_]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 7
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonDocument::destructor_void_]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 6
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QJsonObject::destructor_void_]
mov esi, dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::arg_class_QString_const___int__class_QChar_]
mov eax, dword [ebp - 0x44]
cmp eax, dword [edi + 0x20]
jle 0x1005a9fa
push 9
push str._1__2.mp4
call ebx
mov dword [ebp - 0x54], eax
add esp, 4
mov byte [ebp - 0x44], 0x20
mov ecx, esp
mov byte [ebp - 4], 0xf
push dword [ebp - 0x44]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QChar::constructor_struct_QLatin1Char_]
push 0
lea eax, [edi + 0x1c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x54]
call esi
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 0x44], 0x20
push dword [ebp - 0x44]
mov byte [ebp - 4], 0x10
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QChar::constructor_struct_QLatin1Char_]
mov eax, dword [edi + 0x28]
mov ecx, esi
push 0xa
push 0
inc eax
push eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::arg_int__int__int__class_QChar_]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x12
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x13
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.Qt5Core.dll_public:_class_QByteArray___thiscall_QString::toLocal8Bit_void_]
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.Qt5Core.dll_public:_char_const____thiscall_QByteArray::operator_char_const__void_const]
push eax
push dword [edi + 0x10]
call sub.NetStream.dll_NS_SwitchFile
test eax, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x44]
setne bl
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QByteArray::destructor_void_]
test bl, bl
je 0x1005a867
push dword [edi + 0x10]
call sub.NetStream.dll_NS_StopSave
push dword [edi + 0x24]
mov ecx, edi
mov byte [edi + 0xc], 0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QObject::killTimer_int_]
jmp 0x1005a9ed
cmp dword [edi + 0x28], 1
jne 0x1005a9ea
mov ebx, dword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____cdecl_QString::fromAscii_helper_char_const___int_]
push 9
push str._1__2.mp4
call ebx
mov dword [ebp - 0x48], eax
add esp, 4
mov byte [ebp - 0x44], 0x20
mov ecx, esp
mov byte [ebp - 4], 0x15
push dword [ebp - 0x44]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QChar::constructor_struct_QLatin1Char_]
push 0
lea eax, [edi + 0x1c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::arg_class_QString_const___int__class_QChar_]
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 0x44], 0x20
push dword [ebp - 0x44]
mov byte [ebp - 4], 0x16
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QChar::constructor_struct_QLatin1Char_]
push 0xa
push 0
push dword [edi + 0x28]
lea eax, [ebp - 0x58]
mov ecx, esi
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::arg_int__int__int__class_QChar_]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x18
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x19
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
push 6
push str._1.mp4
call ebx
mov dword [ebp - 0x4c], eax
add esp, 4
mov byte [ebp - 0x44], 0x20
mov ecx, esp
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x44]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QChar::constructor_struct_QLatin1Char_]
push 0
lea eax, [edi + 0x1c]
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::arg_class_QString_const___int__class_QChar_]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x58]
call dword [sym.imp.Qt5Core.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____thiscall_QString::toStdWString_void_]
mov esi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.Qt5Core.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____thiscall_QString::toStdWString_void_]
cmp dword [esi + 0x14], 8
jb 0x1005a959
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x1005a961
mov eax, dword [eax]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
sete bl
cmp dword [ebp - 0x14], 8
jb 0x1005a97f
push dword [ebp - 0x28]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x14], 7
cmp dword [ebp - 0x2c], 8
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 0x1c
jb 0x1005a9a8
push dword [ebp - 0x40]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
test bl, bl
je 0x1005a9d0
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1005a931
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x19
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x13
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
inc dword [edi + 0x28]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 6
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
jmp 0x1005aa23
push dword [edi + 0x10]
call sub.NetStream.dll_NS_StopSave
push dword [edi + 0x24]
mov ecx, edi
mov byte [edi + 0xc], 0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QObject::killTimer_int_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100a3b70
mov esp, ebp
pop ebp
ret 4