Function at 0x41ee77
Capabilities:
Move file

Disassembly:
push 0x16c
mov eax, 0x4a412b
call fcn.00481da3
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x160], ebx
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x12c]
call fcn.0040161b
mov dword [ebp - 4], ebx
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x140]
call fcn.0040161b
push 0x103
lea eax, [ebp - 0x117]
push ebx
mov byte [ebp - 4], 1
push eax
mov byte [ebp - 0x118], bl
call fcn.0047e7d0
add esp, 0xc
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x16c]
call fcn.0040161b
mov byte [ebp - 4], 2
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x164]
call fcn.0040161b
mov byte [ebp - 4], 3
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x14c]
call fcn.0040161b
mov byte [ebp - 4], 4
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x150]
call fcn.0040161b
mov byte [ebp - 4], 5
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x128]
call fcn.0040161b
mov byte [ebp - 4], 6
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x124]
call fcn.0040161b
mov byte [ebp - 4], 7
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x134]
call fcn.0040161b
mov byte [ebp - 4], 8
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x154]
call fcn.0040161b
lea eax, [ebp - 0x13c]
push eax
call fcn.004216de
lea eax, [ebp - 0x138]
push eax
call fcn.004216de
mov byte [ebp - 4], 0xb
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x148]
call fcn.0040161b
lea eax, [ebp - 0x148]
push 2
push eax
mov byte [ebp - 4], 0xc
call fcn.00412b93
cmp eax, ebx
pop ecx
pop ecx
je 0x41f765
push str.indexksg.dat
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.00402dca
add esp, 0xc
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
call fcn.004015ba
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
call fcn.00428e38
mov edi, 0x4ed5e8
push edi
lea ecx, [ebp - 0x11c]
call fcn.00401640
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xe
call fcn.0042e810
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
call fcn.00428e69
push edi
lea ecx, [ebp - 0x11c]
call fcn.00401640
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0xf
call fcn.004015ba
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
push edi
lea ecx, [ebp - 0x11c]
call fcn.00401640
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x10
call fcn.004015ba
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
push esi
call fcn.0041e7c4
mov dword [0x4d2394], 1
call fcn.0041243e
cmp eax, ebx
je 0x41f765
push edi
lea ecx, [ebp - 0x128]
call fcn.004014c5
push str.index.dat
mov esi, 0x4ef5ec
lea eax, [ebp - 0x11c]
push esi
push eax
call fcn.00402dca
add esp, 0xc
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x12
call fcn.00404637
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
push 0x5c
push 0x2f
lea ebx, [ebp - 0x128]
call fcn.00402ce3
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0041ead4
test eax, eax
jne 0x41f181
push edi
lea ecx, [ebp - 0x14c]
call fcn.004014c5
push 0x4ad1b4
lea eax, [ebp - 0x11c]
push esi
push eax
call fcn.00402dca
add esp, 0xc
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x13
call fcn.00404637
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
push 0x5c
push 0x2f
lea ebx, [ebp - 0x14c]
call fcn.00402ce3
push 1
mov eax, ebx
jmp 0x41f74b
call fcn.00428e38
lea eax, [ebp - 0x11c]
push edi
push eax
mov ecx, esi
call fcn.00412d62
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.0042e810
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
call fcn.00428e69
push edi
lea ecx, [ebp - 0x124]
call fcn.004014c5
mov ebx, str.index.dat
push ebx
lea eax, [ebp - 0x11c]
push esi
push eax
call fcn.00402dca
add esp, 0xc
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x15
call fcn.00404637
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
push esi
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040a465
add esp, 0xc
push ebx
push eax
lea eax, [ebp - 0x11c]
push eax
mov byte [ebp - 4], 0x16
call fcn.00402dca
add esp, 0xc
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x17
call fcn.004015ba
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x144]
add ecx, 0xfffffff0
call fcn.00401325
lea eax, [ebp - 0x11c]
push edi
push eax
mov ecx, esi
call fcn.00412d62
push 0x4ad1b4
push eax
lea eax, [ebp - 0x144]
push eax
mov byte [ebp - 4], 0x18
call fcn.00402dca
add esp, 0x14
push eax
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x19
call fcn.004015ba
mov ecx, dword [ebp - 0x144]
add ecx, 0xfffffff0
call fcn.00401325
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
push 0x4ac810
mov ebx, 0x4ac26c
push ebx
lea eax, [ebp - 0x12c]
push eax
call fcn.00406220
mov eax, dword [ebp - 0x13c]
cmp dword [eax - 0xc], 0
je 0x41f4fd
mov ecx, dword [ebp - 0x138]
cmp dword [ecx - 0xc], 0
je 0x41f4fd
push eax
lea ecx, [ebp - 0x120]
call fcn.004134db
mov dword [ebp - 0x11c], eax
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x138]
lea ecx, [ebp - 0x158]
call fcn.004134db
mov dword [ebp - 0x144], eax
push esi
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040a465
add esp, 0xc
mov byte [ebp - 4], 0x1c
push dword [ebp - 0x144]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.0040a465
add esp, 0xc
push 0x4b6964
push eax
lea eax, [ebp - 0x174]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402dca
add esp, 0xc
mov byte [ebp - 4], 0x1e
push dword [ebp - 0x11c]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.0040a465
add esp, 0xc
push eax
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x1f
call fcn.004015ba
mov ecx, dword [ebp - 0x168]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x170]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x15c]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x158]
add ecx, 0xfffffff0
call fcn.00401325
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x120]
add ecx, 0xfffffff0
call fcn.00401325
push 0x4ac810
push ebx
lea eax, [ebp - 0x140]
push eax
call fcn.00406220
push edi
lea ecx, [ebp - 0x15c]
call fcn.00401640
push esi
push eax
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x20
push eax
call fcn.0040a465
add esp, 0xc
push 0x4ad1b4
push eax
lea eax, [ebp - 0x120]
push eax
mov byte [ebp - 4], 0x21
call fcn.00402dca
add esp, 0xc
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x22
call fcn.004015ba
mov ecx, dword [ebp - 0x120]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x158]
add ecx, 0xfffffff0
call fcn.00401325
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x15c]
add ecx, 0xfffffff0
call fcn.00401325
push 0x4b71d0
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00402dca
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x23
call fcn.004015ba
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x120]
add ecx, 0xfffffff0
call fcn.00401325
call dword [0x4d1acc]
push dword [ebp - 0x13c]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
cmp esi, 0x3fffffff
jle 0x41f4cf
xor eax, eax
jmp 0x41f4e7
lea eax, [esi + esi]
call fcn.004840d0
mov eax, esp
push edi
push esi
push dword [ebp - 0x13c]
push eax
call fcn.00408bae
push eax
call fcn.004129ee
test eax, eax
pop ecx
jne 0x41f4fd
lea ecx, [ebp - 0x140]
call fcn.00401557
cmp dword [0x4efc58], 0
je 0x41f5b4
mov eax, dword [ebp - 0x140]
cmp dword [eax - 0xc], 0
je 0x41f5b4
push dword [ebp - 0x154]
push dword [ebp - 0x134]
push eax
push dword [ebp - 0x130]
call fcn.00421460
test eax, eax
je 0x41f5b4
call fcn.00428e38
lea ecx, [ebp - 0x134]
call fcn.00402a47
mov esi, dword [ebp - 0x134]
push 2
push esi
push dword [ebp - 0x154]
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
call fcn.00428e69
mov edi, dword [ebp - 0x138]
call fcn.004213ff
test eax, eax
je 0x41f5b4
call fcn.00428e38
lea ecx, [ebp - 0x128]
call fcn.00402a47
push esi
push dword [ebp - 0x128]
call fcn.00433ec9
pop ecx
pop ecx
mov esi, eax
call fcn.00428e69
test esi, esi
je 0x41f5b4
push 0
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x130]
call fcn.0041f82d
test eax, eax
jne 0x41f75b
call fcn.00428e38
lea ecx, [ebp - 0x124]
call fcn.00402a47
lea ecx, [ebp - 0x150]
call fcn.00402a47
call fcn.00428e69
xor edi, edi
push edi
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x130]
lea ecx, [ebp - 0x12c]
call fcn.0041d1b6
mov ebx, eax
lea eax, [ebp - 0x118]
push eax
call fcn.0042b045
pop ecx
lea esi, [ebp - 0x118]
call fcn.0041d149
cmp ebx, edi
mov dword [0x4efd2c], eax
mov eax, esi
push eax
je 0x41f6cb
lea ecx, [ebp - 0x120]
call fcn.004134db
push ebx
mov byte [ebp - 4], 0x24
push dword [ebp - 0x12c]
mov edi, 0x4ef184
push dword [eax]
push 0x14d
push edi
call fcn.0042a517
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x120]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.00401325
cmp ebx, 0x17
jne 0x41f765
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x11c]
call fcn.0040161b
mov esi, 0xc5
push esi
push edi
mov byte [ebp - 4], 0x25
call fcn.0042a4c4
xor eax, eax
inc eax
push esi
mov dword [0x4ef878], eax
mov dword [0x4efd30], eax
mov eax, dword [0x4ee7f4]
mov ecx, dword [eax]
lea edx, [ebp - 0x11c]
push edx
push eax
call dword [ecx + 0xc]
mov ecx, dword [ebp - 0x130]
push 0x10
push str.Kingsoft_Antivirus_Update
push dword [ebp - 0x11c]
call fcn.0046423e
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
jmp 0x41f765
call fcn.0042b045
pop ecx
lea esi, [ebp - 0x118]
call fcn.0041d149
mov dword [0x4efd2c], eax
mov eax, esi
push eax
lea ecx, [ebp - 0x120]
call fcn.004134db
mov byte [ebp - 4], 0x26
push dword [ebp - 0x12c]
push dword [eax]
push 0x196
push 0x4ef184
call fcn.0042a517
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x120]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00401325
call fcn.00428e38
push edi
push dword [ebp - 0x124]
push dword [ebp - 0x150]
call fcn.00433d0f
add esp, 0xc
mov esi, eax
call fcn.00428e69
cmp esi, edi
je 0x41f765
push edi
lea eax, [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x130]
call fcn.0041f82d
test eax, eax
je 0x41f765
mov dword [ebp - 0x160], 1
mov ecx, dword [ebp - 0x148]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x138]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x13c]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x154]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x134]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x124]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x128]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x150]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x14c]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x164]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x16c]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x140]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x12c]
add ecx, 0xfffffff0
call fcn.00401325
mov eax, dword [ebp - 0x160]
lea esp, [ebp - 0x188]
call fcn.00481e26
ret