Function at 0x436f19
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a0
mov eax, dword [0x4a02f0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x40]
push ebx
push esi
push edi
mov dword [ebp - 0x290], eax
call fcn.0040ff60
mov esi, str.do_not_check_running_chrome
mov dword [ebp - 0x288], eax
xor ebx, ebx
mov eax, esi
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], ebx
mov byte [ebp - 0x228], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x436f65
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x228]
call fcn.00402dd0
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x228]
push eax
call fcn.004105c0
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x228]
mov byte [ebp - 0x27d], al
call fcn.00402540
cmp byte [ebp - 0x27d], bl
je 0x437055
mov eax, esi
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], ebx
mov byte [ebp - 0x228], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x436fca
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x228]
call fcn.00402dd0
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.00410790
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402540
cmp dword [ebp - 0x230], 8
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x284], ebx
jae 0x437021
lea eax, [ebp - 0x244]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0040c610
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402b70
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401f50
push 7
pop esi
xor eax, eax
push 0x4901fc
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00401fb0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401490
lea ecx, [ebp - 0x244]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402b70
xor eax, eax
push 0x490210
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00401fb0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401490
lea ecx, [ebp - 0x244]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402b70
xor eax, eax
push str.Application
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00401fb0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401490
lea ecx, [ebp - 0x244]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402b70
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401c50
push eax
lea ecx, [ebp + 8]
call fcn.00403920
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402b70
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x260], ax
push ebx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
call fcn.00402710
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x228]
call fcn.00401f50
push eax
call fcn.00404ed0
pop ecx
lea ecx, [ebp - 0x228]
mov byte [ebp - 0x27d], al
call fcn.00401f80
cmp byte [ebp - 0x27d], bl
je 0x437596
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
call fcn.0046e0e0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x49b5ec
push 0xffffffffffffffff
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0046f91d
add esp, 0x14
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x228], ax
push ebx
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
call fcn.00402710
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0042e514
add esp, 0xc
push eax
lea ecx, [ebp - 0x228]
call fcn.00403920
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402b70
push edi
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x244]
call fcn.00401f50
push eax
call fcn.00404360
pop ecx
pop ecx
lea ecx, [ebp - 0x244]
call fcn.00401f80
cmp dword [ebp - 0x214], 8
mov ecx, dword [ebp - 0x228]
jae 0x4372ed
lea ecx, [ebp - 0x228]
cmp dword [ebp - 0x24c], 8
mov eax, dword [ebp - 0x260]
jae 0x437302
lea eax, [ebp - 0x260]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x437557
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x260]
push eax
mov dword [ebp - 0x2a0], ebx
mov dword [ebp - 0x29c], ebx
mov dword [ebp - 0x298], ebx
call fcn.00435e5b
pop ecx
pop ecx
test eax, eax
jle 0x43754a
push ebx
call fcn.0043ceb8
mov dword [ebp - 0x284], eax
lea eax, [ebp + 0x24]
push eax
call fcn.004483f1
pop ecx
pop ecx
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x288], eax
cmp ecx, ebx
je 0x43741b
cmp eax, ebx
je 0x43741b
push eax
call fcn.0044822e
test al, al
jne 0x437397
push dword [ebp - 0x284]
mov ecx, dword [ebp - 0x288]
call fcn.0044822e
test al, al
je 0x43741b
xor eax, eax
push str.5.3.0.702
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], ax
call fcn.00401fb0
lea eax, [ebp - 0x244]
push eax
call fcn.004483f1
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x244]
mov esi, eax
call fcn.00402b70
cmp esi, ebx
je 0x4373f3
mov ecx, dword [ebp - 0x284]
push esi
call fcn.0044822e
test al, al
je 0x4373f3
mov byte [0x4a2f01], 1
mov byte [0x4a2f00], 1
cmp esi, ebx
je 0x437405
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax]
mov ecx, dword [ebp - 0x288]
mov eax, dword [ecx]
push edi
call dword [eax]
mov ecx, dword [ebp - 0x284]
jmp 0x437545
push edi
call fcn.0042bf0e
mov ecx, eax
call fcn.0042bf8e
push dword [ebp - 0x290]
push edi
push ebx
call fcn.00454f24
add esp, 0xc
push ebx
mov esi, eax
call fcn.0042bf0e
mov ecx, eax
call fcn.0042bf8e
cmp esi, 2
jne 0x437452
push ebx
call fcn.0046e517
cmp dword [ebp - 0x214], 8
mov ecx, dword [ebp - 0x228]
jae 0x437467
lea ecx, [ebp - 0x228]
cmp dword [ebp - 0x24c], 8
mov eax, dword [ebp - 0x260]
jae 0x43747c
lea eax, [ebp - 0x260]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
push ecx
push eax
call esi
test eax, eax
jne 0x4374fe
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x260]
push eax
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x230], ebx
call fcn.00435e5b
pop ecx
pop ecx
test eax, eax
jle 0x4374f1
push edi
call fcn.0042bf0e
mov ecx, eax
call fcn.0042bf8e
push dword [ebp - 0x290]
push ebx
push ebx
call fcn.00454f24
add esp, 0xc
push ebx
mov esi, eax
call fcn.0042bf0e
mov ecx, eax
call fcn.0042bf8e
cmp esi, 2
je 0x43744c
push edi
call fcn.00435b95
pop ecx
lea ecx, [ebp - 0x238]
call fcn.0045c8c0
jmp 0x43752c
cmp dword [ebp - 0x24c], 8
mov ecx, dword [ebp - 0x260]
jae 0x437513
lea ecx, [ebp - 0x260]
cmp dword [ebp - 0x214], 8
mov eax, dword [ebp - 0x228]
jae 0x437528
lea eax, [ebp - 0x228]
push ecx
push eax
call esi
mov ecx, dword [ebp - 0x288]
cmp ecx, ebx
je 0x43753b
mov eax, dword [ecx]
push edi
call dword [eax]
mov ecx, dword [ebp - 0x284]
cmp ecx, ebx
je 0x43754a
mov eax, dword [ecx]
push edi
call dword [eax]
lea ecx, [ebp - 0x2a0]
call fcn.0045c8c0
jmp 0x437589
cmp dword [ebp - 0x24c], 8
mov ecx, dword [ebp - 0x260]
jae 0x43756c
lea ecx, [ebp - 0x260]
cmp dword [ebp - 0x214], 8
mov eax, dword [ebp - 0x228]
jae 0x437581
lea eax, [ebp - 0x228]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push ebx
push edi
lea ecx, [ebp - 0x228]
call fcn.00402b70
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.00402b70
lea ecx, [ebp - 0x27c]
call fcn.00401f80
push ebx
push edi
lea ecx, [ebp + 8]
call fcn.00402b70
push ebx
push edi
lea ecx, [ebp + 0x24]
call fcn.00402b70
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov al, 1
pop ebx
call fcn.0046e0cd
leave
ret