Function at 0x417ce3
Capabilities:
Copy file
Write file on windows

Disassembly:
push 0x37c
mov eax, 0x465fa5
call fcn.0044584f
mov ebx, ecx
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x384], eax
cmp dword [edi + 0x14], 8
jb 0x417d0d
mov ecx, dword [edi]
jmp 0x417d0f
mov ecx, edi
cmp dword [eax + 0x14], 8
jb 0x417d17
mov eax, dword [eax]
cmp dword [esi + 0x14], 8
jb 0x417d21
mov edx, dword [esi]
jmp 0x417d23
mov edx, esi
push ecx
push eax
push edx
push str._SaveGpcIniToLocal__strGpcIniFile__s___strPhpUrl__s___strPath__s_
push 0
push 2
push str.UpdateMgr.cpp
push 0x345
call fcn.0042ab69
xor eax, eax
add esp, 0x20
cmp dword [ebx + 0x10], eax
je 0x4182ea
cmp dword [esi + 0x10], eax
je 0x4182ea
cmp dword [edi + 0x10], eax
je 0x4182ea
push 0x48076c
push ebx
call dword [0x4958a8]
push eax
push 0
mov dword [ebp - 0x388], eax
call fcn.00429ff7
pop ecx
pop ecx
test eax, eax
jg 0x417d87
and dword [ebp - 0x380], 0
jmp 0x417da1
push dword [ebp - 0x388]
push 0
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov dword [ebp - 0x380], esp
push dword [ebp - 0x388]
push 0
call fcn.00429ff7
shr eax, 1
push eax
push dword [ebp - 0x380]
push dword [ebp - 0x388]
push 0
call fcn.00429fa9
add esp, 0x18
lea ecx, [ebp - 0x364]
push eax
call fcn.00401720
and dword [ebp - 4], 0
cmp dword [edi + 0x14], 8
jb 0x417de7
mov eax, dword [edi]
mov dword [ebp - 0x380], eax
jmp 0x417ded
mov dword [ebp - 0x380], edi
cmp dword [esi + 0x14], 8
jb 0x417df7
mov edx, dword [esi]
jmp 0x417df9
mov edx, esi
mov eax, dword [ebp - 0x384]
cmp dword [eax + 0x14], 8
jb 0x417e09
mov ecx, dword [eax]
jmp 0x417e0b
mov ecx, eax
push dword [ebp - 0x380]
cmp dword [ebp - 0x350], 8
lea eax, [ebp - 0x364]
push edx
cmovae eax, dword [ebp - 0x364]
push ecx
push eax
push str.CUpdateMgr::_SaveGpcIniToLocal___s___s___s___s
push 0
push 2
push str.UpdateMgr.cpp
push 0x34d
call fcn.0042ab69
add esp, 0x24
lea ecx, [ebp - 0x334]
push 0x47bb10
call fcn.00401720
push 0x47bb10
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 1
call fcn.00401720
mov byte [ebp - 4], 2
cmp dword [edi + 0x14], 8
jb 0x417e75
mov eax, dword [edi]
jmp 0x417e77
mov eax, edi
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401720
push dword [ebp - 0x384]
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x334]
push eax
call fcn.0041763a
mov dword [ebp - 0x388], eax
test eax, eax
jne 0x41801e
push 0x47bb10
lea ecx, [ebp - 0x37c]
call fcn.00401720
push 1
lea eax, [ebp - 0x37c]
mov byte [ebp - 4], 3
push eax
mov ecx, ebx
call fcn.00417af2
test eax, eax
je 0x417f17
sub esp, 0x18
lea eax, [ebp - 0x37c]
mov ecx, esp
push eax
call fcn.00404375
push dword [ebp - 0x384]
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x334]
push eax
call fcn.0041763a
mov dword [ebp - 0x388], eax
test eax, eax
jne 0x417fb1
push 2
lea eax, [ebp - 0x37c]
mov ecx, ebx
push eax
call fcn.00417af2
test eax, eax
je 0x417f66
sub esp, 0x18
lea eax, [ebp - 0x37c]
mov ecx, esp
push eax
call fcn.00404375
push dword [ebp - 0x384]
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x334]
push eax
call fcn.0041763a
mov dword [ebp - 0x388], eax
test eax, eax
jne 0x417fb1
push 3
lea eax, [ebp - 0x37c]
mov ecx, ebx
push eax
call fcn.00417af2
test eax, eax
je 0x417fb1
sub esp, 0x18
lea eax, [ebp - 0x37c]
mov ecx, esp
push eax
call fcn.00404375
push dword [ebp - 0x384]
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x334]
push eax
call fcn.0041763a
mov dword [ebp - 0x388], eax
push 0
push 1
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 2
call fcn.00401833
cmp dword [ebp - 0x388], 0
jne 0x41801e
push str._SaveGpcIniToLocal_FAILED___
push 0
push 8
push str.UpdateMgr.cpp
push 0x3a7
call fcn.0042ab69
add esp, 0x14
xor esi, esi
push 0
push 1
lea ecx, [ebp - 0x34c]
call fcn.00401833
push 0
push 1
lea ecx, [ebp - 0x334]
call fcn.00401833
push 0
push 1
lea ecx, [ebp - 0x364]
call fcn.00401833
mov eax, esi
jmp 0x4182ec
push 0xfe
lea eax, [ebp - 0x113]
mov byte [ebp - 0x114], 0
push 0
push eax
call fcn.00447ae0
add esp, 0xc
mov dword [ebp - 0x384], 0xff
cmp dword [ebp + 0x14], 0
jne 0x41807a
mov ecx, dword [ebx + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x18]
lea eax, [ebx + 0x140]
mov ecx, esi
push eax
call fcn.00404ee5
test eax, eax
jne 0x41807a
cmp dword [esi + 0x14], 8
jb 0x41806f
mov eax, dword [esi]
jmp 0x418071
mov eax, esi
mov ecx, dword [ebx + 0x10]
push eax
call fcn.004324c2
cmp dword [esi + 0x14], 8
jb 0x418084
mov ecx, dword [esi]
jmp 0x418086
mov ecx, esi
lea eax, [ebp - 0x384]
push 0x800c
push eax
lea edx, [ebp - 0x114]
call fcn.00407ce7
pop ecx
pop ecx
test eax, eax
je 0x417fe8
cmp dword [ebp - 0x338], 8
lea eax, [ebp - 0x34c]
push 0
cmovae eax, dword [ebp - 0x34c]
push 0x80
push 2
push 0
push 7
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x380], eax
cmp eax, 0xffffffff
je 0x417fe8
push 0
lea ecx, [ebp - 0x384]
push ecx
push dword [ebp - 0x384]
lea ecx, [ebp - 0x114]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [ebp - 0x380]
test eax, eax
jne 0x418115
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x417fe8
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x338], 8
lea ecx, [ebp - 0x34c]
cmovae ecx, dword [ebp - 0x34c]
call fcn.004023e0
cmp dword [ebp - 0x320], 8
lea ecx, [ebp - 0x334]
cmovae ecx, dword [ebp - 0x334]
cmp dword [esi + 0x14], 8
jb 0x418152
mov eax, dword [esi]
jmp 0x418154
mov eax, esi
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x417fe8
cmp dword [ebp - 0x320], 8
lea ecx, [ebp - 0x334]
cmovae ecx, dword [ebp - 0x334]
call fcn.004023e0
lea eax, [ebx + 0x140]
mov ecx, esi
push eax
call fcn.00404ee5
test eax, eax
jne 0x418268
cmp dword [ebp + 0x14], eax
jne 0x4181ff
push 0x206
push eax
mov word [ebp - 0x31c], ax
lea eax, [ebp - 0x31a]
push eax
call fcn.00447ae0
mov ecx, dword [ebx + 0x10]
lea edx, [ebp - 0x31c]
add esp, 0xc
mov eax, dword [ecx]
push 0x104
push edx
call dword [eax + 0x1c]
cmp dword [ebp - 0x320], 8
lea esi, [ebp - 0x334]
cmovae esi, dword [ebp - 0x334]
cmp dword [edi + 0x14], 8
jb 0x4181e8
mov edx, dword [edi]
jmp 0x4181ea
mov edx, edi
mov ecx, dword [ebx + 0x10]
push esi
push edx
mov eax, dword [ecx]
call dword [eax + 0x2c]
push edi
call fcn.004182fa
jmp 0x4182e2
lea edi, [ebx + 0x98]
cmp dword [edi + 0x14], 8
jb 0x41820f
mov ecx, dword [edi]
jmp 0x418211
mov ecx, edi
cmp dword [ebp - 0x338], 8
lea eax, [ebp - 0x34c]
push ecx
cmovae eax, dword [ebp - 0x34c]
push eax
push str.GpcIniFile_Hash
push 0x480d18
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp dword [edi + 0x14], 8
jb 0x41823f
mov edi, dword [edi]
cmp dword [ebp - 0x320], 8
lea eax, [ebp - 0x334]
push edi
cmovae eax, dword [ebp - 0x334]
mov edi, 0x480d18
push eax
push str.GpcIniFile
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x41826d
mov edi, 0x480d18
cmp dword [ebp + 0x14], 0
je 0x4182e2
lea eax, [ebx + 0x158]
mov ecx, esi
push eax
call fcn.00404ee5
test eax, eax
jne 0x4182e2
lea esi, [ebx + 0x98]
push 8
pop ebx
cmp dword [esi + 0x14], ebx
jb 0x418297
mov ecx, dword [esi]
jmp 0x418299
mov ecx, esi
cmp dword [ebp - 0x320], ebx
lea eax, [ebp - 0x334]
push ecx
cmovae eax, dword [ebp - 0x334]
push eax
push str.FullGpcIniFile_Hash
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp dword [esi + 0x14], ebx
jb 0x4182c1
mov esi, dword [esi]
cmp dword [ebp - 0x320], ebx
lea eax, [ebp - 0x334]
push esi
cmovae eax, dword [ebp - 0x334]
push eax
push str.FullGpcIniFile
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor esi, esi
inc esi
jmp 0x417fea
xor eax, eax
lea esp, [ebp - 0x398]
call fcn.004457fe
ret 0x10