Function at 0x427090
Capabilities:
Move file
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x538a40
mov eax, dword fs:[0]
push eax
sub esp, 0x568
mov eax, dword [0x5be1ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x390], ecx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x390]
add eax, 0x48
push eax
lea ecx, [ebp - 0x1ec]
push ecx
call fcn.00427bf0
add esp, 8
mov byte [ebp - 4], 1
push str.filename
lea ecx, [ebp - 0x544]
call fcn.00406fc0
mov byte [ebp - 4], 2
lea edx, [ebp - 0x1ec]
push edx
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00423260
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x544]
call fcn.00406e80
push 0xc0
lea ecx, [ebp - 0x388]
call fcn.0040a660
push 1
lea ecx, [ebp - 0x388]
call fcn.00411500
mov byte [ebp - 4], 3
push 0x40
push 1
lea ecx, [ebp - 0x1ec]
call fcn.00406e10
push eax
lea ecx, [ebp - 0x388]
call fcn.00411420
lea ecx, [ebp - 0x388]
call fcn.00411480
movzx ecx, al
test ecx, ecx
je 0x4271bb
lea ecx, [ebp - 0x388]
call fcn.004113f0
mov ecx, dword [ebp - 0x390]
call fcn.004233c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x388]
call fcn.0040d970
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call fcn.00406e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406d60
jmp 0x427bc6
push str..tmp
lea edx, [ebp - 0x1ec]
push edx
lea eax, [ebp - 0x204]
push eax
call fcn.00430270
add esp, 0xc
mov byte [ebp - 4], 4
push 0x5a447c
lea ecx, [ebp - 0x52c]
call fcn.00406fc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x52c]
push ecx
call fcn.004dc410
add esp, 4
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x52c]
call fcn.00406e80
mov ecx, dword [ebp - 0x390]
add ecx, 0x48
call fcn.00406e10
push eax
push str.curl_download_file__s
push 0x100
lea edx, [ebp - 0x1d0]
push edx
call fcn.00440e30
add esp, 0x10
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x514]
call fcn.00406fc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x514]
push ecx
mov ecx, dword [ebp - 0x394]
call fcn.0040cc50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x514]
call fcn.00406e80
mov edx, dword [ebp - 0x390]
add edx, 0x48
push edx
lea ecx, [ebp - 0x2c8]
call fcn.004e2b30
mov byte [ebp - 4], 7
call fcn.00455050
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
jne 0x4273ae
mov ecx, dword [ebp - 0x390]
call fcn.004233e0
push 0x5a44a4
lea ecx, [ebp - 0x4fc]
call fcn.00406fc0
mov byte [ebp - 4], 8
push 0x5a44a0
lea eax, [ebp - 0x4fc]
push eax
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4fc]
call fcn.00406e80
push 0x5a44bc
lea ecx, [ebp - 0x4e4]
call fcn.00406fc0
mov byte [ebp - 4], 9
push 0x5a44ac
lea ecx, [ebp - 0x4e4]
push ecx
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4e4]
call fcn.00406e80
push 0x5a44c4
lea ecx, [ebp - 0x55c]
call fcn.00406fc0
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x55c]
push edx
mov ecx, dword [ebp - 0x394]
call fcn.0040cc30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x55c]
call fcn.00406e80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.004e2c40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x204]
call fcn.00406e80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x388]
call fcn.0040d970
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call fcn.00406e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406d60
jmp 0x427bc6
push 0x40
push 0x28
lea ecx, [ebp - 0x204]
call fcn.00406e10
push eax
lea ecx, [ebp - 0x388]
call fcn.00411420
push 2
push 0
push 0
lea ecx, [ebp - 0x388]
call fcn.0042b040
lea eax, [ebp - 0x574]
push eax
lea ecx, [ebp - 0x388]
call fcn.0042af50
mov ecx, eax
call fcn.00413e60
push eax
push str._lu_
lea ecx, [ebp - 0xd0]
push ecx
call fcn.00440da0
add esp, 0xc
mov edx, dword [ebp - 0x388]
mov eax, dword [edx + 4]
lea ecx, [ebp + eax - 0x388]
call fcn.00423210
movzx ecx, al
test ecx, ecx
je 0x427581
mov ecx, dword [ebp - 0x390]
call fcn.004233e0
push 0x5a44e0
lea ecx, [ebp - 0x3c4]
call fcn.00406fc0
mov byte [ebp - 4], 0xb
push 0x5a44dc
lea edx, [ebp - 0x3c4]
push edx
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430160
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3c4]
call fcn.00406e80
push 0x5a44e8
lea ecx, [ebp - 0x234]
call fcn.00406fc0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x234]
call fcn.00416b10
push 0x5a44fc
lea ecx, [ebp - 0x3dc]
call fcn.00406fc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x234]
push ecx
lea edx, [ebp - 0x3dc]
push edx
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00423260
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3dc]
call fcn.00406e80
lea ecx, [ebp - 0x234]
call fcn.00406e10
push eax
lea ecx, [ebp - 0x3f4]
call fcn.00406fc0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x3f4]
push eax
mov ecx, dword [ebp - 0x394]
call fcn.0040cc30
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3f4]
call fcn.00406e80
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00455010
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x234]
call fcn.00406e80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.004e2c40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x204]
call fcn.00406e80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x388]
call fcn.0040d970
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call fcn.00406e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406d60
jmp 0x427bc6
mov ecx, dword [ebp - 0x390]
add ecx, 0x48
call fcn.00406e10
push eax
push 0x2712
mov edx, dword [ebp - 0x38c]
push edx
call fcn.00457ef0
add esp, 0xc
lea eax, [ebp - 0xd0]
push eax
push 0x2717
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00457ef0
add esp, 0xc
push 0x5a4510
push 0x2722
mov edx, dword [ebp - 0x38c]
push edx
call fcn.00457ef0
add esp, 0xc
push 1
push 0x34
mov eax, dword [ebp - 0x38c]
push eax
call fcn.00457ef0
add esp, 0xc
push 0x14
push 0x44
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00457ef0
add esp, 0xc
push 0x423f60
push 0x4e2b
mov edx, dword [ebp - 0x38c]
push edx
call fcn.00457ef0
add esp, 0xc
push 0
push 0x2b
mov eax, dword [ebp - 0x38c]
push eax
call fcn.00457ef0
add esp, 0xc
lea ecx, [ebp - 0x388]
push ecx
push 0x2711
mov edx, dword [ebp - 0x38c]
push edx
call fcn.00457ef0
add esp, 0xc
mov dword [ebp - 0x39c], 0
push str.speedKB
lea ecx, [ebp - 0x40c]
call fcn.00406fc0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x40c]
push ecx
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40c]
call fcn.00406e80
mov dword [ebp - 0x3a0], 0
push str.write
lea ecx, [ebp - 0x424]
call fcn.00406fc0
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x3a0]
push edx
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x424]
call fcn.00406e80
mov dword [ebp - 0x3a4], 0
push str.percentage
lea ecx, [ebp - 0x43c]
call fcn.00406fc0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x3a4]
push ecx
lea edx, [ebp - 0x43c]
push edx
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430070
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x43c]
call fcn.00406e80
lea ecx, [ebp - 0x21c]
call fcn.00427050
mov byte [ebp - 4], 0x12
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00410b20
xorps xmm0, xmm0
movlpd qword [ebp - 0x20c], xmm0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x214], eax
push 0x426380
push 0x4efb
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00457ef0
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
push 0x2749
mov eax, dword [ebp - 0x38c]
push eax
call fcn.00457ef0
add esp, 0xc
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00455090
add esp, 4
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
jne 0x427941
mov dword [ebp - 0x1d4], 0
lea edx, [ebp - 0x1d4]
push edx
push 0x200002
mov eax, dword [ebp - 0x38c]
push eax
call fcn.00455030
add esp, 0xc
push 0x5a4564
lea ecx, [ebp - 0x454]
call fcn.00406fc0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x454]
push edx
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430420
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x454]
call fcn.00406e80
cmp dword [ebp - 0x1d4], 0xce
jne 0x42782f
mov ecx, dword [ebp - 0x390]
call fcn.004233c0
jmp 0x42793c
mov eax, dword [ebp - 0x1d4]
push eax
push str.Http_error_code:__d
push 0x40
lea ecx, [ebp - 0x90]
push ecx
call fcn.00440e30
add esp, 0x10
push 0x5a4580
lea ecx, [ebp - 0x46c]
call fcn.00406fc0
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x46c]
push eax
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430160
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x46c]
call fcn.00406e80
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x484]
call fcn.00406fc0
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x484]
push edx
mov ecx, dword [ebp - 0x394]
call fcn.0040cc30
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x484]
call fcn.00406e80
mov ecx, dword [ebp - 0x390]
call fcn.004233e0
mov eax, dword [ebp - 0x38c]
push eax
call fcn.00455010
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x21c]
call fcn.00427070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.004e2c40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x204]
call fcn.00406e80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x388]
call fcn.0040d970
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call fcn.00406e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406d60
jmp 0x427bc6
jmp 0x427a45
mov ecx, dword [ebp - 0x398]
push ecx
push str.liburl_error_code:__d
push 0x40
lea edx, [ebp - 0x50]
push edx
call fcn.00440e30
add esp, 0x10
push 0x5a45a0
lea ecx, [ebp - 0x49c]
call fcn.00406fc0
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x49c]
push ecx
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430160
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x49c]
call fcn.00406e80
mov ecx, dword [ebp - 0x390]
call fcn.004233e0
lea edx, [ebp - 0x50]
push edx
lea ecx, [ebp - 0x4b4]
call fcn.00406fc0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x4b4]
push eax
mov ecx, dword [ebp - 0x394]
call fcn.0040cc30
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4b4]
call fcn.00406e80
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00455010
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x21c]
call fcn.00427070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.004e2c40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x204]
call fcn.00406e80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x388]
call fcn.0040d970
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call fcn.00406e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406d60
jmp 0x427bc6
mov edx, dword [ebp - 0x38c]
push edx
call fcn.00455010
add esp, 4
lea ecx, [ebp - 0x388]
call fcn.004113f0
push 1
lea ecx, [ebp - 0x1ec]
call fcn.00406e10
push eax
lea ecx, [ebp - 0x204]
call fcn.00406e10
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
jne 0x427b61
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x3ac], eax
push str.Error
lea ecx, [ebp - 0x4cc]
call fcn.00406fc0
mov byte [ebp - 4], 0x18
push 0x5a45a8
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp + 8]
call fcn.00410a70
mov ecx, eax
call fcn.00430160
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4cc]
call fcn.00406e80
push fcn.00409200
push 0x5a45d0
push 0x5c3be8
call fcn.00408cf0
add esp, 8
mov ecx, eax
call fcn.00407070
mov ecx, dword [ebp - 0x390]
call fcn.004233e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x21c]
call fcn.00427070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.004e2c40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x204]
call fcn.00406e80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x388]
call fcn.0040d970
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call fcn.00406e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406d60
jmp 0x427bc6
mov ecx, dword [ebp - 0x390]
call fcn.004233c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x21c]
call fcn.00427070
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.004e2c40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x204]
call fcn.00406e80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x388]
call fcn.0040d970
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call fcn.00406e80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00406d60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004951c6
mov esp, ebp
pop ebp
ret 8