Function at 0x4255fc
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
push ebx
push esi
push edi
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
mov al, byte [0x7f5500]
push 0xa
push eax
push 0x7fdd54
call fcn.00412ef3
add esp, 0xc
mov dword [0x7fdd60], eax
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push dword [0x7fdd60]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x7f8890], eax
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push dword [0x7fdd60]
call fcn.00428816
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
and dword [0x7fdd60], 0
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
mov al, byte [0x7f5500]
push 0xf
push eax
push 0x7fdd64
call fcn.00412ef3
add esp, 0x10
mov dword [0x7fdd74], eax
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push dword [0x7fdd74]
push dword [0x7f8890]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x7fcfd4], eax
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push dword [0x7fdd74]
call fcn.00428816
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
and dword [0x7fdd74], 0
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
mov al, byte [0x7f5500]
push 7
push eax
push 0x7ff71c
call fcn.00412ef3
add esp, 0x10
mov dword [0x7ff730], eax
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
mov ebx, dword [0x7ff730]
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push ebx
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
lea edx, [0x7ff734]
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push edx
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
call dword [0x7fcfd4]
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
mov dword [0x7fcfe8], eax
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push 0x40
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x103]
mov byte [ebp - 0x104], bl
rep stosd dword es:[edi], eax
cmp dword [0x7fcfe8], ebx
stosw word es:[edi], ax
stosb byte es:[edi], al
jne 0x425c32
call fcn.00425107
mov esi, 0x7ff734
lea eax, [ebp - 0x104]
push esi
push eax
call fcn.00429230
mov al, byte [0x7f5500]
push 5
push eax
push 0x7fdd34
call fcn.00412ef3
add esp, 0x14
mov dword [0x7fdd3c], eax
push eax
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRenameExtensionA]
push dword [0x7fdd3c]
call fcn.00428816
pop ecx
lea eax, [ebp - 0x104]
push eax
push esi
mov dword [0x7fdd3c], ebx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov ebx, dword [0x7ff730]
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push ebx
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
lea edx, [ebp - 0x104]
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
push edx
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
call dword [0x7fcfd4]
sub eax, dword [0x7f5508]
sub ebx, dword [str.Tb:]
mov ebx, ebx
add ecx, dword [0x7f5510]
sub edx, dword [0x7f550c]
sub ecx, dword [0x7f5510]
inc edx
mov edx, edx
add ebx, dword [str.Tb:]
add eax, dword [0x7f5508]
dec edx
lea edi, [edi]
add edx, dword [0x7f550c]
lea ecx, [ecx]
mov dword [0x7fcfe8], eax
lea eax, [ebp - 0x104]
push eax
push esi
call fcn.00429230
pop ecx
mov dword [0x800504], 1
pop ecx
push dword [0x7ff730]
call fcn.00428816
and dword [0x7ff730], 0
pop ecx
pop edi
pop esi
pop ebx
leave
ret