Function at 0x423c30
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x84
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x44f420
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x18]
xor ebx, ebx
mov edi, dword fs:[0]
mov dword [ebp - 0x18], edi
mov dword fs:[0], esi
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], edx
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], edx
jmp 0x423c9f
push esi
push 0
push dword [0x45f508]
call dword [sym.imp.kernel32.dll_HeapFree]
lea eax, [ebx + 1]
mov ecx, dword [ebp - 0x7c]
lea edi, [ebp - 0x6c]
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x2c], 0x44f300
mov dword [ebp - 0x6c], 0x457abc
mov dword [ebp - 0x68], 3
mov dword [ebp - 0x50], 0x457aa4
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], 0x4595d0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x44], 0x4578d8
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x24], 0x40b290
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], 2
mov edx, dword [eax + 4]
mov ecx, dword [eax]
add eax, 8
mov esi, dword [edx + 8]
dec esi
and esi, 0xfffffff8
lea ecx, [esi + ecx + 8]
push eax
lea ebx, [ebp - 0x50]
push ebx
push ecx
call dword [edx + 0xc]
add esp, 0xc
mov edx, dword [ebp - 0x78]
mov ecx, edi
call fcn.00445ea0
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x30]
mov esi, dword [eax + 4]
mov edi, dword [eax + 8]
push dword [ebp - 0x64]
call fcn.0043e3b0
add esp, 4
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x80000000
jne 0x423d70
mov edi, eax
jmp 0x423d99
mov dword [ebp - 0x30], ecx
mov ecx, ebx
lea ebx, [ebp - 0x30]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], eax
mov edx, ebx
call fcn.00444e30
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
cmp eax, 0x80000000
jne 0x423f20
mov edi, dword [ebp - 0x48]
mov esi, edx
mov ebx, edx
shr esi, 8
cmp dword [ebp - 0x6c], 0
je 0x423db7
push dword [ebp - 0x68]
push 0
push dword [0x45f508]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp bl, 4
je 0x424007
movzx eax, byte [0x45f57c]
mov eax, dword [0x45f508]
test eax, eax
jne 0x423de3
call dword [sym.imp.kernel32.dll_GetProcessHeap]
test eax, eax
je 0x424043
mov dword [0x45f508], eax
push 8
push 0
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
test eax, eax
je 0x424043
mov ecx, edi
mov edx, esi
mov dword [ebp - 0x70], edi
shr edi, 8
mov dword [ebp - 0x40], esi
movzx esi, bl
mov ebx, dword [ebp - 0x88]
shl ecx, 0x18
and edx, 0xffffff
or edx, ecx
shld edi, edx, 8
shl edx, 8
or esi, edx
cmp dword [ebp - 0x84], 0xa
mov dword [eax + 4], edi
mov dword [eax], esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0x45793c
jb 0x423ebd
lea eax, [ebp - 0x90]
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x6c], 0x4579d0
mov dword [ebp - 0x68], 3
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0x41fe30
mov dword [ebp - 0x28], edx
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x24], 0x42e390
mov dword [ebp - 0x60], 2
call fcn.0040ac80
mov esi, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x50]
mov edx, dword [ebp - 0x48]
mov ecx, esi
push 1
push str.Visual_Studio_Codesrcutil.rs
call fcn.004216d0
add esp, 8
cmp al, 7
jne 0x424010
xor ebx, ebx
test edi, edi
je 0x423ebd
push esi
push 0
push dword [0x45f508]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, ebx
mov edx, 0x10624dd3
imul eax, ebx
imul ecx, eax, 0x32
mov eax, ecx
mul edx
shr edx, 6
imul eax, edx, 0x3e8
sub ecx, eax
imul eax, ecx, 0xf4240
mov ecx, edx
xor edx, edx
push eax
call fcn.0043e9b0
add esp, 4
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
push esi
call dword [edi]
add esp, 4
cmp dword [edi + 4], 0
je 0x423c9f
cmp dword [edi + 8], 9
jb 0x423c90
mov esi, dword [esi - 4]
jmp 0x423c90
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x10], 0
mov ecx, ebx
mov edx, esi
push edi
call fcn.0043e3b0
add esp, 4
mov edx, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x28]
lea ecx, [ebp - 0x50]
cmp edx, 0x80000000
je 0x423f79
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], edx
lea edx, [ebp - 0x30]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x54], eax
call fcn.00444e30
mov esi, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x4c]
cmp esi, 0x80000000
jne 0x423f9f
mov edi, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov esi, ebx
shr esi, 8
cmp dword [ebp - 0x3c], 0
je 0x423da0
push eax
push 0
push dword [0x45f508]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x423da0
push 1
push ebx
push dword [ebp - 0x20]
call dword [sym.imp.kernel32.dll_MoveFileExW]
test eax, eax
je 0x423fd9
test esi, esi
je 0x423fc2
push ebx
push 0
push dword [0x45f508]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [ebp - 0x3c], 0
mov edi, dword [ebp - 0x70]
mov esi, dword [ebp - 0x40]
mov bl, 4
je 0x423da0
push dword [ebp - 0x20]
jmp 0x423f8c
call dword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
test esi, esi
je 0x423ff4
push ebx
push 0
push dword [0x45f508]
call dword [sym.imp.kernel32.dll_HeapFree]
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
xor ebx, ebx
cmp dword [ebp - 0x3c], 0
jne 0x423f8b
jmp 0x423da0
mov edx, 0x45793c
xor ebx, ebx
jmp 0x42402d
mov ebx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
test edi, edi
je 0x42402d
push esi
push 0
push dword [0x45f508]
mov esi, edx
call dword [sym.imp.kernel32.dll_HeapFree]
mov edx, esi
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, ebx
add esp, 0x84
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, 4
mov edx, 8
call fcn.00450740
nop word cs:[eax + eax]
nop dword [eax]
push ebp
sub esp, 0xc
add ebp, 0xc
cmp dword [ebp - 0x3c], 0
je 0x42407e
push dword [ebp - 0x54]
push 0
push dword [0x45f508]
call dword [sym.imp.kernel32.dll_HeapFree]
add esp, 0xc
pop ebp
ret