Function at 0x4c1330
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4fbe73
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x128dc
call fcn.004e3510
mov eax, dword [0x514bc0]
xor eax, esp
mov dword [esp + 0x128d8], eax
push ebx
push esi
push edi
mov eax, dword [0x514bc0]
xor eax, esp
push eax
lea eax, [esp + 0x128f0]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov eax, dword [str.InterfaceConvertProfile]
push eax
push str._s_u
push 0x56db18
mov edx, 0xc8
call fcn.00458640
add esp, 0x10
lea ecx, [esp + 0x5f4]
call fcn.0048d400
mov dword [esp + 0x128f8], 1
xor ebx, ebx
mov byte [esp + 0x1684], bl
cmp byte [0x538309], bl
je 0x4c149d
push 0x800
lea ecx, [esp + 0xe8e8]
push ecx
mov ecx, 0x546dc0
call fcn.004790c0
push 0x10e8
lea edx, [esp + 0x26d8]
push ebx
push edx
call fcn.004e4400
add esp, 0xc
xor eax, eax
jmp 0x4c1400
movzx ecx, word [esp + eax + 0xe8e4]
mov word [esp + eax + 0x26d4], cx
add eax, 2
cmp cx, bx
jne 0x4c1400
push ebx
lea eax, [esp + 0x1690]
push eax
lea ecx, [esp + 0xe8ec]
push ecx
mov dword [esp + 0x26a8], ebx
mov dword [esp + 0x26ac], ebx
mov dword [esp + 0x26b0], ebx
mov dword [esp + 0x26b4], ebx
mov dword [esp + 0x26b8], ebx
mov dword [esp + 0x26bc], ebx
call fcn.004458a0
test al, al
je 0x4c1478
mov edx, dword [esp + 0x268c]
mov eax, dword [esp + 0x2690]
mov dword [esp + 0x3754], edx
mov dword [esp + 0x3758], eax
lea ecx, [esp + 0x26d4]
push ecx
lea ecx, [esp + 0x5f8]
call fcn.0048d1c0
lea ecx, [esp + 0x5f4]
call fcn.0048d320
jmp 0x4c1553
lea ecx, [esp + 0x4c]
call fcn.00467ad0
mov byte [esp + 0x128f8], 2
lea edi, [esp + 0x4c]
cmp esi, ebx
je 0x4c14ba
mov edi, esi
jmp 0x4c14cb
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, 0x544c98
call fcn.00491520
push ebx
push ebx
push ebx
push ebx
push 1
push 1
lea eax, [esp + 0x60c]
push eax
push 3
push edi
call fcn.0049d1d0
test al, al
jne 0x4c1514
mov byte [esp + 0x128f8], 1
lea ecx, [esp + 0x4c]
call fcn.00429e50
mov dword [esp + 0x128f8], 0xffffffff
lea ecx, [esp + 0x5f4]
call fcn.004bd970
jmp 0x4c26b0
xor esi, esi
cmp dword [esp + 0x660], ebx
jbe 0x4c153a
nop
push esi
lea ecx, [esp + 0x5f8]
call fcn.0048d3c0
inc esi
mov dword [eax + 4], ebx
cmp esi, dword [esp + 0x660]
jb 0x4c1520
mov byte [esp + 0x128f8], 1
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x4c1553
push eax
call fcn.004e3342
add esp, 4
mov ecx, dword [str.InterfaceConvertProfile]
push 0x56db18
push ecx
call fcn.00499f80
mov edx, dword [0x53a464]
push edx
mov byte [esp + 0x19], 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edx, dword [0x52c134]
neg eax
lea ecx, [esp + 0x5f4]
push ecx
sbb eax, eax
and eax, dword [0x53a464]
push 0x4bd9c0
push eax
push str.CONVERTARC
push edx
mov dword [esp + 0x38], ebx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4c2669
xor esi, esi
push esi
push str.Background
push 0x56db18
call fcn.00499a90
test eax, eax
jne 0x4c15da
cmp dword [0x539324], 1
jne 0x4c15d3
cmp byte [0x554b5b], al
jne 0x4c15da
mov byte [esp + 0x18], 0
jmp 0x4c15df
mov byte [esp + 0x18], 1
mov eax, dword [esp + 0x18]
push esi
push eax
push esi
push 8
call fcn.004b4e90
push 0x800
lea ecx, [esp + 0x108e8]
push ecx
call fcn.004b1ef0
xor edi, edi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
mov dword [0x5393a8], esi
mov dword [0x5393ac], esi
mov dword [esp + 0x3c], edi
cmp dword [esp + 0x660], esi
jbe 0x4c1664
lea ebx, [ebx]
push esi
lea ecx, [esp + 0x5f8]
call fcn.0048d3c0
test byte [eax + 4], 2
je 0x4c1656
mov edx, dword [eax + 8]
add dword [0x5393a8], edx
mov eax, dword [eax + 0xc]
adc dword [0x5393ac], eax
inc edi
inc esi
cmp esi, dword [esp + 0x660]
jb 0x4c1630
mov dword [esp + 0x3c], edi
mov edx, dword [esp + 0x3c]
push 0x880
lea ecx, [esp + 0xd7e8]
push ecx
xor edi, edi
push edi
push edx
call fcn.004a0f00
mov ecx, dword [0x538304]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea eax, [esp + 0xd7e4]
push eax
push 0x65
push ecx
call esi
or ebx, 0xffffffff
cmp byte [0x5393c9], 0
mov dword [0x53a3d8], edi
mov dword [0x53a3dc], edi
mov dword [esp + 0x20], edi
jne 0x4c2593
cmp byte [0x538308], 0
jne 0x4c25aa
mov eax, dword [esp + 0x24]
push 0x880
lea edx, [esp + 0xd7e8]
push edx
push 0
push eax
call fcn.004a0f00
mov edx, dword [0x538304]
lea ecx, [esp + 0xd7e4]
push ecx
push 0x66
push edx
call esi
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
push 0x880
lea eax, [esp + 0xd7e8]
push eax
push ecx
push edx
call fcn.004a0f00
mov ecx, dword [0x538304]
lea eax, [esp + 0xd7e4]
push eax
push 0x67
push ecx
call esi
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push 0x880
lea edx, [esp + 0xd7e8]
push edx
push eax
push ecx
call fcn.004a0f00
mov eax, dword [0x538304]
lea edx, [esp + 0xd7e4]
push edx
push 0x68
push eax
call esi
cmp ebx, 0xffffffff
je 0x4c1782
push ebx
lea ecx, [esp + 0x26d8]
push ecx
lea ecx, [esp + 0x5fc]
call fcn.0048d4f0
mov edx, dword [eax + 0x1080]
add dword [0x53a3d8], edx
mov eax, dword [eax + 0x1084]
adc dword [0x53a3dc], eax
or ebx, 0xffffffff
call fcn.004b40c0
mov ecx, dword [esp + 0x20]
cmp ecx, dword [esp + 0x660]
jge 0x4c2593
mov edx, ecx
push edx
lea ecx, [esp + 0x5f8]
call fcn.0048d3c0
mov edi, eax
test byte [edi + 4], 2
mov dword [esp + 0x1c], edi
je 0x4c2582
cmp byte [esp + 0x167d], 0
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x48], ebx
je 0x4c17ea
test byte [edi + 0x28], 0x10
je 0x4c17ea
push 0x50e
call fcn.00461b20
push eax
mov eax, dword [edi]
push eax
call fcn.004bfeb0
add esp, 8
jmp 0x4c2582
mov ecx, dword [edi]
push 1
push 0
push ecx
mov ecx, 0x546dc0
call fcn.0047a6c0
cmp eax, 1
jne 0x4c2582
lea edx, [esp + 0x10c]
push edx
mov ecx, 0x546dc0
call fcn.004790f0
xor eax, eax
push eax
mov dword [esp + 0x26a0], eax
mov dword [esp + 0x26a4], eax
mov dword [esp + 0x26a8], eax
mov dword [esp + 0x26ac], eax
mov dword [esp + 0x26b0], eax
mov dword [esp + 0x26b4], eax
mov ecx, dword [edi]
lea eax, [esp + 0x1690]
push eax
push ecx
call fcn.004458a0
test al, al
je 0x4c2582
cmp byte [esp + 0x167d], 0
je 0x4c1894
cmp byte [esp + 0x2f8], 0
jne 0x4c1879
cmp byte [esp + 0x247], 0
je 0x4c1894
push 0x50e
call fcn.00461b20
mov edx, dword [edi]
push eax
push edx
call fcn.004bfeb0
add esp, 8
jmp 0x4c2582
push 1
push 0x800
lea eax, [esp + 0xf8ec]
push eax
push str.Rar_CV
call fcn.004b1590
test al, al
je 0x4c2582
lea ecx, [esp + 0xf8e4]
push ecx
call fcn.004b1e90
push 1
call fcn.004ad4e0
mov edx, dword [esp + 0x3c]
push 0x800
push 0x555ba2
mov ecx, 0x546dc0
mov dword [0x5393b4], edx
call fcn.004790c0
mov eax, dword [0x546dc4]
mov dword [0x552b50], eax
mov eax, 4
push 0x4fe964
mov ecx, 0x556ba4
mov dword [0x5508c8], 1
mov dword [0x551b40], eax
mov dword [0x551b44], eax
call fcn.00467940
push 0x555ba2
push 0x20f
call fcn.00461b20
push eax
call fcn.004b2770
mov ecx, dword [0x570cb0]
add esp, 8
cmp byte [0x551b39], 0
mov dword [esp + 0x18], ecx
je 0x4c1950
mov byte [0x551b39], 0
mov byte [esp + 0x15], 1
push 1
push 0
mov ecx, 0x546dc0
call fcn.0047b380
cmp byte [0x538308], 0
jne 0x4c255e
mov edx, dword [esp + 0x18]
cmp edx, dword [0x570cb0]
jne 0x4c255e
push 0x56db18
call fcn.004ad8d0
mov eax, dword [0x550918]
xor edi, edi
mov dword [esp + 0x44], eax
mov byte [0x550a71], 0
cmp word [0x54d7ae], di
jne 0x4c1a05
push edi
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x30]
push edx
mov ecx, 0x546dc0
mov dword [esp + 0x34], edi
mov dword [esp + 0x4c], edi
call fcn.00479ce0
cmp dword [esp + 0x40], edi
jbe 0x4c19f8
push 0x800
push 0x54d7ae
push str.Rar_CM
call fcn.004b14c0
mov esi, eax
cmp esi, edi
je 0x4c19f8
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
push esi
push eax
push 1
push ecx
call fcn.004e8056
push esi
call fcn.004e4b91
add esp, 0x14
mov edx, dword [esp + 0x28]
push edx
call fcn.004e44b4
add esp, 4
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi]
push 0x800
lea eax, [esp + 0x118e8]
push eax
push ecx
call fcn.00451cb0
push 0x800
lea edx, [esp + 0x680]
push edx
lea eax, [esp + 0xa7ec]
push eax
call fcn.00467570
cmp word [esp + 0xa7e4], di
je 0x4c1a54
push 0x800
lea ecx, [esp + 0xa7e8]
push ecx
call fcn.00451500
mov edx, dword [esi]
push edx
call fcn.0048e520
mov byte [esp + 0x14], al
mov ebx, 0x4fe974
cmp dword [0x552b50], edi
je 0x4c1a72
mov ebx, 0x4fe710
cmp word [0x54b7a8], 0
je 0x4c1a81
mov ebx, 0x4fe97c
mov edi, dword [esp + 0x1c]
mov ecx, dword [edi]
push ebx
xor eax, eax
push ecx
mov word [esp + 0x97ec], ax
call fcn.00451c30
test al, al
je 0x4c1b7a
cmp word [esp + 0xa7e4], 0
je 0x4c1ac8
lea edx, [esp + 0x118e4]
push edx
lea eax, [esp + 0xa7e8]
push eax
call fcn.0046a940
test eax, eax
jne 0x4c1b7a
push 1
push 0x800
lea ecx, [esp + 0x97ec]
push ecx
push str.Rar_CV
mov byte [esp + 0x26], 1
call fcn.004b1590
mov edx, dword [edi]
push 0x800
push 0x555ba2
push edx
call fcn.00451a10
push eax
lea eax, [esp + 0x97f0]
push eax
call fcn.00451550
push 0x555ba2
call fcn.00451c10
mov esi, eax
test esi, esi
je 0x4c1c91
xor ecx, ecx
push 0x555ba2
mov word [esi], cx
call fcn.00451c10
mov edx, 0x2e
mov word [esi], dx
test eax, eax
je 0x4c1c91
cmp byte [esp + 0x14], 0
je 0x4c1c91
cmp dword [esp + 0x24c], 0
jne 0x4c1c91
cmp byte [esp + 0x22e], 0
je 0x4c1c91
mov edx, eax
mov ecx, esi
sub edx, esi
movzx eax, word [ecx]
mov word [edx + ecx], ax
add ecx, 2
test ax, ax
jne 0x4c1b66
jmp 0x4c1c91
cmp word [esp + 0xa7e4], 0
mov byte [esp + 0x16], 0
je 0x4c1be8
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0xa7e4]
mov word [eax + 0x555ba2], cx
add eax, 2
test cx, cx
jne 0x4c1b90
mov eax, dword [edi]
push eax
call fcn.00451a10
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4c1bb1
mov edi, 0x555ba2
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4c1bc6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x1c]
jmp 0x4c1c01
mov ecx, dword [edi]
mov edx, 0x555ba2
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4c1bf0
push 0x555ba2
call fcn.00451c10
mov esi, eax
test esi, esi
je 0x4c1c56
xor ecx, ecx
push 0x555ba2
mov word [esi], cx
call fcn.00451c10
test eax, eax
je 0x4c1c4e
push str..tar
push eax
call fcn.0046a940
test eax, eax
je 0x4c1c56
cmp byte [esp + 0x14], 0
je 0x4c1c4e
cmp dword [esp + 0x24c], 0
jne 0x4c1c4e
cmp byte [esp + 0x22e], 0
jne 0x4c1c56
mov edx, 0x2e
mov word [esi], dx
push 0x800
push ebx
push 0x555ba2
call fcn.00452660
push 0x555ba2
call fcn.00443cc0
test al, al
je 0x4c1c91
push 0x50d
call fcn.00461b20
push eax
push 0x555ba2
call fcn.004bfeb0
add esp, 8
mov byte [esp + 0x16], 1
mov esi, dword [esp + 0x18]
cmp esi, dword [0x570cb0]
jne 0x4c1cf5
lea eax, [esp + 0xf8e4]
push eax
call fcn.004b1e90
push 0x4fe964
mov ecx, 0x556ba4
mov dword [0x5508f4], 3
mov dword [0x5508f0], 2
mov byte [0x55092e], 0
call fcn.00467940
cmp byte [0x551b39], 0
je 0x4c1ce9
mov byte [0x551b39], 0
mov byte [esp + 0x15], 1
push 0
mov ecx, 0x546dc0
call fcn.0047afe0
cmp word [0x54d7ae], 0
je 0x4c1d09
push 0x54d7ae
call fcn.004b17b0
cmp byte [0x538308], 0
mov byte [esp + 0x17], 0
jne 0x4c2535
cmp esi, dword [0x570cb0]
jne 0x4c2535
push 1
push 0
push 0x555ba2
mov ecx, 0x546dc0
call fcn.0047a6c0
cmp eax, 1
jne 0x4c2535
lea ecx, [esp + 0x2fc]
push ecx
mov ecx, 0x546dc0
call fcn.004790f0
mov eax, dword [esp + 0x2e4]
mov ecx, dword [esp + 0x2e8]
cmp eax, dword [esp + 0x4d4]
jne 0x4c1d75
cmp ecx, dword [esp + 0x4d8]
je 0x4c1db3
or eax, ecx
je 0x4c1db3
push 0x4fdc8c
lea edx, [esp + 0x110]
push edx
call fcn.0046a940
test eax, eax
jne 0x4c1d98
cmp byte [esp + 0x22e], al
jne 0x4c1db3
push 0x50a
call fcn.00461b20
push eax
mov eax, dword [edi]
push eax
call fcn.004bfeb0
add esp, 8
jmp 0x4c2535
mov eax, dword [esp + 0x1680]
test eax, eax
je 0x4c1e20
mov ecx, dword [esp + 0x2f0]
push ecx
mov ecx, dword [esp + 0x2f0]
cdq
push ecx
push edx
push eax
call fcn.004e4480
push 0
mov esi, edx
mov edx, dword [esp + 0x4e4]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x4e4]
push edx
push eax
call fcn.004e4480
cmp esi, edx
jg 0x4c1e20
jl 0x4c1dfd
cmp edi, eax
jae 0x4c1e20
push 0x555ba2
call fcn.00451a10
push eax
push 0x50f
call fcn.00461b20
push eax
call fcn.004b2770
add esp, 8
jmp 0x4c2535
mov ecx, 0x40
mov esi, 0x54f7bc
lea edi, [esp + 0x4ec]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [esp + 0x128f8], 4
push 1
call fcn.004ad4e0
mov ecx, 0x40
lea esi, [esp + 0x4ec]
mov edi, 0x54f7bc
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x555ba2
mov ecx, 0x546dc0
movsw word es:[edi], word [esi]
call fcn.004790c0
mov ecx, dword [0x546dc4]
xor ebx, ebx
mov dword [0x552b50], ecx
push 0x4fe964
mov ecx, 0x556ba4
mov byte [0x550a71], 1
mov dword [0x550a50], ebx
mov dword [0x550a54], ebx
mov dword [0x550a58], ebx
mov dword [0x550a5c], ebx
call fcn.00467940
push 0x555ba2
call fcn.00451a10
push eax
push 0x210
call fcn.00461b20
push eax
call fcn.004b2770
add esp, 8
cmp byte [0x551b39], bl
je 0x4c1eda
mov byte [0x551b39], bl
mov byte [esp + 0x15], 1
push ebx
push ebx
mov ecx, 0x546dc0
call fcn.0047b380
cmp byte [0x538308], 0
jne 0x4c251a
mov edx, dword [esp + 0x18]
cmp edx, dword [0x570cb0]
jne 0x4c251a
mov eax, dword [esp + 0x4d4]
or eax, dword [esp + 0x4d8]
jne 0x4c1f37
cmp dword [esp + 0x2690], ebx
ja 0x4c1f29
cmp dword [esp + 0x268c], 0x200
jb 0x4c1f37
cmp dword [esp + 0x2d4], 1
jbe 0x4c251a
mov eax, dword [esp + 0x1680]
cmp eax, ebx
je 0x4c1f88
mov ecx, dword [esp + 0x2f0]
push ecx
mov ecx, dword [esp + 0x2f0]
cdq
push ecx
push edx
push eax
call fcn.004e4480
push ebx
mov esi, edx
mov edx, dword [esp + 0x4e4]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x4e4]
push edx
push eax
call fcn.004e4480
cmp esi, edx
jl 0x4c251a
jg 0x4c1f88
cmp edi, eax
jb 0x4c251a
push 0x555ba2
mov byte [esp + 0x1b], 1
call fcn.00451a10
push eax
push 0x25a
call fcn.00461b20
push eax
call fcn.004b2770
inc dword [esp + 0x2c]
mov ecx, dword [esp + 0x2f4]
mov edx, dword [esp + 0x2f8]
mov eax, dword [esp + 0x4e4]
add esp, 8
add dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x4e0]
adc dword [esp + 0x30], edx
add dword [esp + 0x34], eax
adc dword [esp + 0x38], ecx
cmp byte [esp + 0x16], 0
je 0x4c2394
mov esi, dword [esp + 0x1c]
mov edx, dword [esi]
push ebx
push 1
push edx
mov ecx, 0x546dc0
call fcn.0047a6c0
cmp eax, 1
jne 0x4c251a
lea ecx, [esp + 0x4c]
call fcn.00467ad0
mov byte [esp + 0x128f8], 5
mov eax, dword [esi]
lea edx, [esp + 0x87e4]
sub edx, eax
nop
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4c2020
mov byte [esp + 0x14], 0
jmp 0x4c2040
lea eax, [esp + 0x87e4]
push eax
lea ecx, [esp + 0x77e8]
push str._s._cvtbackup_
push ecx
mov edx, 0x800
call fcn.00458640
add esp, 0xc
lea edx, [esp + 0x77e4]
push edx
lea eax, [esp + 0x87e8]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4c2165
lea ecx, [esp + 0x87e4]
push ecx
lea ecx, [esp + 0x50]
call fcn.00467940
lea edx, [esp + 0x77e4]
push edx
lea ecx, [esp + 0x50]
call fcn.00467940
mov ecx, 0x546dc0
call fcn.004790e0
test eax, eax
je 0x4c20e0
push 0x800
lea eax, [esp + 0x87e8]
push eax
mov ecx, 0x546dc0
call fcn.00479f50
test al, al
je 0x4c20e0
lea ecx, [esp + 0x87e4]
push ecx
call fcn.00443cc0
test al, al
jne 0x4c2040
cmp word [esp + 0x97e4], bx
je 0x4c224f
lea ecx, [esp + 0xac]
call fcn.00467ad0
mov byte [esp + 0x128f8], 6
lea edx, [esp + 0x97e4]
push edx
lea ecx, [esp + 0xb0]
call fcn.00467940
lea ecx, [esp + 0x26d4]
call fcn.004036c0
push ebx
push ebx
push ebx
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0x37cc]
call fcn.00463fb0
mov byte [esp + 0x128f8], 7
lea ecx, [esp + 0x26d4]
push ecx
lea ecx, [esp + 0x37c0]
call fcn.004648a0
test eax, eax
jne 0x4c2227
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x4c2174
mov byte [esp + 0x14], 1
jmp 0x4c224f
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
lea edx, [esp + 0x77e4]
sub edx, eax
nop
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4c2180
push 0x800
lea edx, [esp + 0x26d8]
push edx
call fcn.00451a10
push eax
lea eax, [esp + 0x77ec]
push eax
call fcn.00451be0
lea ecx, [esp + 0x77e4]
push ecx
lea edx, [esp + 0x26d8]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4c2222
cmp dword [esp + 0x44], 1
jne 0x4c2204
push ebx
push ebx
push 3
push ebx
push ebx
push 0x40000000
lea eax, [esp + 0x77fc]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4c2204
lea ecx, [esp + 0x370c]
push ecx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x26d4]
push edx
lea ecx, [esp + 0x37c0]
call fcn.004648a0
test eax, eax
je 0x4c2170
jmp 0x4c2227
mov byte [esp + 0x14], 1
mov byte [esp + 0x128f8], 6
lea ecx, [esp + 0x37bc]
call fcn.00464130
mov byte [esp + 0x128f8], 5
lea ecx, [esp + 0xac]
call fcn.00429e50
xor bl, bl
cmp byte [esp + 0x167c], bl
jne 0x4c22d2
push 0x800
lea eax, [esp + 0xc7e8]
push eax
lea ecx, [esp + 0x54]
mov bl, 1
call fcn.00467b50
test al, al
je 0x4c22c9
lea ebx, [ebx]
push 0x800
lea ecx, [esp + 0xb7e8]
push ecx
lea ecx, [esp + 0x54]
call fcn.00467b50
test al, al
je 0x4c22c9
lea edx, [esp + 0xc7e4]
push edx
call fcn.00443cc0
test al, al
jne 0x4c22c7
push 0x800
lea eax, [esp + 0xc7e8]
push eax
lea ecx, [esp + 0x54]
call fcn.00467b50
test al, al
jne 0x4c2280
jmp 0x4c22c9
xor bl, bl
lea ecx, [esp + 0x4c]
call fcn.004678c0
push 0x800
lea ecx, [esp + 0xc7e8]
push ecx
lea ecx, [esp + 0x54]
call fcn.00467b50
test al, al
je 0x4c237e
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x4c2300
push 0x800
lea edx, [esp + 0xb7e8]
push edx
lea ecx, [esp + 0x54]
call fcn.00467b50
test al, al
je 0x4c237e
cmp byte [esp + 0x14], 0
jne 0x4c2341
test bl, bl
jne 0x4c2352
lea eax, [esp + 0xb7e4]
push eax
call fcn.00443ce0
lea ecx, [esp + 0xb7e4]
push ecx
call fcn.00443910
jmp 0x4c2364
test bl, bl
jne 0x4c2352
lea edx, [esp + 0xc7e4]
push edx
call fcn.00443910
lea eax, [esp + 0xc7e4]
push eax
lea ecx, [esp + 0xb7e8]
push ecx
call esi
push 0x800
lea edx, [esp + 0xc7e8]
push edx
lea ecx, [esp + 0x54]
call fcn.00467b50
test al, al
jne 0x4c2300
mov byte [esp + 0x128f8], 4
lea ecx, [esp + 0x4c]
call fcn.00429e50
jmp 0x4c251a
cmp byte [esp + 0x167c], 0
je 0x4c2455
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
push ebx
push 1
push eax
mov ecx, 0x546dc0
call fcn.0047a6c0
cmp eax, 1
jne 0x4c2455
mov eax, dword [esi]
lea edx, [esp + 0x87e4]
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4c23d0
nop
lea ecx, [esp + 0x87e4]
push ecx
call fcn.00451a10
push eax
push 0x258
call fcn.00461b20
push eax
call fcn.004b2770
add esp, 8
lea edx, [esp + 0x87e4]
push edx
call fcn.00443ce0
lea eax, [esp + 0x87e4]
push eax
call fcn.00443910
mov ecx, 0x546dc0
call fcn.004790e0
test eax, eax
je 0x4c2455
push 0x800
lea ecx, [esp + 0x87e8]
push ecx
mov ecx, 0x546dc0
call fcn.00479f50
test al, al
je 0x4c2455
lea edx, [esp + 0x87e4]
push edx
call fcn.00443cc0
test al, al
jne 0x4c23e0
push ebx
push 1
push 0x555ba2
mov ecx, 0x546dc0
call fcn.0047a6c0
cmp eax, 1
jne 0x4c251a
xor eax, eax
jmp 0x4c2480
movzx ecx, word [eax + 0x555ba2]
mov word [esp + eax + 0x77e4], cx
add eax, 2
cmp cx, bx
jne 0x4c2480
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileTime]
cmp dword [esp + 0x44], 1
jne 0x4c24e0
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [esp + 0x77fc]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4c24e0
lea ecx, [esp + 0x26c4]
push ecx
push 0
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x546dc0
call fcn.004790e0
test eax, eax
je 0x4c251a
push 0x800
lea edx, [esp + 0x77e8]
push edx
mov ecx, 0x546dc0
call fcn.00479f50
test al, al
je 0x4c251a
lea eax, [esp + 0x77e4]
push eax
call fcn.00443cc0
test al, al
jne 0x4c24a3
mov byte [esp + 0x128f8], 1
lea ecx, [esp + 0x4ec]
call fcn.00464cb0
cmp byte [esp + 0x17], 0
jne 0x4c2546
cmp byte [esp + 0x16], 0
jne 0x4c2546
push 0x555ba2
call fcn.00443910
cmp word [esp + 0x97e4], 0
je 0x4c255e
lea ecx, [esp + 0x97e4]
push ecx
call fcn.004b1b20
lea edx, [esp + 0x108e4]
push edx
call fcn.004b1e90
lea eax, [esp + 0xf8e4]
push eax
call fcn.004b1b20
mov ebx, dword [esp + 0x48]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
inc dword [esp + 0x20]
cmp byte [0x5393c9], 0
je 0x4c16b7
cmp byte [0x538308], 0
jne 0x4c25aa
cmp byte [0x5393c9], 0
mov eax, 0x4d0
je 0x4c25af
mov eax, 0x271
push eax
call fcn.00461b20
push eax
call fcn.004b2770
add esp, 4
cmp byte [0x5393c9], 0
je 0x4c25d6
mov ecx, dword [0x538304]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4c25f0
push 0
push 0
push 0
push 0
push 0
push 1
push 0
push 1
call fcn.004b34c0
call fcn.004b2880
mov al, byte [0x538309]
test al, al
je 0x4c262b
push 0
push 0
lea edx, [esp + 0xe8ec]
push edx
mov ecx, 0x546dc0
call fcn.0047a6c0
cmp eax, 1
je 0x4c2622
mov ecx, 0x544c98
call fcn.00490010
test al, al
jne 0x4c2632
mov al, byte [0x538309]
test al, al
jne 0x4c264d
cmp dword [esp + 0x24], 0
jbe 0x4c2649
push 0x555ba2
call fcn.00451a10
push eax
mov ecx, 0x544c98
call fcn.00492300
jmp 0x4c2669
test al, al
je 0x4c2669
cmp dword [esp + 0x24], 0
jbe 0x4c2669
push 0x555ba2
call fcn.00451a10
push eax
mov ecx, 0x544c98
call fcn.00491780
cmp byte [esp + 0x1684], 0
je 0x4c2683
mov eax, dword [str.InterfaceConvertProfile]
push eax
push 0x56db18
call fcn.00499f80
push 0x56db18
call fcn.0049a080
cmp byte [esp + 0x15], 0
je 0x4c2699
call fcn.004b1180
mov dword [esp + 0x128f8], 0xffffffff
lea ecx, [esp + 0x5f4]
call fcn.00479920
mov ecx, dword [esp + 0x128f0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x128d8]
xor ecx, esp
call fcn.004e34f4
mov esp, ebp
pop ebp
ret 4