Function at 0x46f4b0
Capabilities:
Copy file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 9
add esp, 0xfffff004
push eax
dec eax
jne 0x46f4b9
mov eax, dword [ebp - 4]
add esp, 0xfffffe2c
push ebx
push esi
push edi
mov esi, str.report.
lea edi, [ebp - 0x5d90]
mov eax, 0x4a11d4
call fcn.0048dbf8
push 0x414
push 0
lea edx, [ebp - 0x38c0]
push edx
call fcn.0048d5d8
add esp, 0xc
cmp dword [0x4bc1a8], 0
je 0x46f51a
lea edx, [ebp - 0x38c0]
mov eax, 0x4ba564
xor ecx, ecx
call fcn.0045d0fc
jmp 0x46f61f
mov word [ebp - 0x347c], 8
lea eax, [ebp - 0xf8]
call fcn.0040ee04
add dword [ebp - 0x3470], 4
mov word [ebp - 0x347c], 0x14
lea edx, [ebp - 0xf8]
mov eax, 0x4b9834
xor ecx, ecx
call fcn.00463858
cmp dword [ebp - 0xc8], 0
jne 0x46f5a5
push 0x30
mov eax, 0x65
call fcn.004116e0
push eax
mov eax, 0x14c
call fcn.004116e0
push eax
push dword [0x4b9820]
call sub.USER32.DLL_MessageBoxA
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0040ef20
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
jmp 0x470530
cmp dword [ebp - 0xc8], 1
jne 0x46f5cc
push 0x400
push 0
lea edx, [ebp - 0x38c0]
lea eax, [ebp - 0xf8]
xor ecx, ecx
call fcn.0040f0b8
test al, al
jne 0x46f5ff
lea eax, [ebp - 0x3cc0]
push eax
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea eax, [ebp - 0x3cc0]
call fcn.0040b578
cmp byte [eax], 0
jne 0x46f5ef
mov eax, esi
push eax
lea edx, [ebp - 0x38c0]
push edx
call fcn.0048d758
add esp, 8
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0040ef20
mov word [ebp - 0x347c], 0
cmp dword [0x4bc1a8], 0
je 0x46f62d
lea ebx, [esi + 8]
jmp 0x46f630
lea ebx, [esi + 0x1c]
lea edx, [esi + 0x31]
mov ecx, 1
mov eax, ebx
call fcn.004659b8
test eax, eax
setne al
and eax, 1
mov byte [ebp - 0x34be], al
cmp byte [ebp - 0x34be], 0
je 0x46f65b
lea edx, [esi + 0x36]
jmp 0x46f65e
lea edx, [esi + 0x3a]
lea eax, [ebp - 0x38c0]
call fcn.0040b88c
xor ebx, ebx
jmp 0x46f6c9
lea eax, [ebp - 0x38c0]
xor edx, edx
call fcn.0040b88c
lea eax, [ebp - 0x38c0]
xor edx, edx
call fcn.0040b88c
push ebx
lea ecx, [esi + 0x3e]
push ecx
lea eax, [ebp - 0x3498]
push eax
call fcn.00490628
add esp, 0xc
lea edx, [ebp - 0x3498]
lea eax, [ebp - 0x38c0]
call fcn.0040b88c
cmp byte [ebp - 0x34be], 0
je 0x46f6ba
lea edx, [esi + 0x36]
jmp 0x46f6bd
lea edx, [esi + 0x3a]
lea eax, [ebp - 0x38c0]
call fcn.0040b88c
inc ebx
cmp ebx, 0x3e8
jge 0x46f6e2
lea eax, [ebp - 0x38c0]
xor edx, edx
call fcn.0040a0c8
test al, al
jne 0x46f66d
lea ecx, [ebp - 0x38c0]
lea eax, [esi + 0x42]
push ecx
push 0x470538
push dword [0x4b9820]
push eax
push dword [0x4a6fb8]
call sub.USER32.DLL_DialogBoxParamA
test eax, eax
jne 0x46f719
mov edx, dword [ebp - 0x348c]
mov dword fs:[0], edx
jmp 0x470530
lea edx, [ebp - 0x40c0]
lea eax, [esi + 0x49]
call fcn.00467cd4
test al, al
jne 0x46f73d
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
jmp 0x470530
lea eax, [ebp - 0x40c0]
call fcn.0040ba60
lea eax, [ebp - 0x38c0]
call fcn.0040b578
cmp byte [eax], 0
jne 0x46f769
cmp byte [ebp - 0x34be], 0
je 0x46f766
lea eax, [esi + 0x56]
jmp 0x46f769
lea eax, [esi + 0x61]
push eax
lea edx, [ebp - 0x40c0]
push edx
call fcn.0048d67c
add esp, 8
lea ecx, [esi + 0x6c]
push ecx
lea eax, [ebp - 0x40c0]
push eax
call fcn.0048f700
add esp, 8
mov ebx, eax
test ebx, ebx
jne 0x46f7b4
lea edx, [ebp - 0x40c0]
mov eax, 0x4a6984
call fcn.00429668
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
jmp 0x470530
push 0
lea edx, [esi + 7]
xor ecx, ecx
mov eax, 0xa
call fcn.00475d6c
mov byte [ebp - 0x3499], al
mov eax, 0x556
call fcn.004116e0
call fcn.00477974
mov byte [ebp - 0x349a], 1
push 0x1c
push 0
lea edx, [ebp - 0x40dc]
push edx
call fcn.0048d5d8
add esp, 0xc
cmp dword [0x4bc1a8], 0
jne 0x46f80a
cmp byte [ebp - 0x34b6], 0
je 0x46f80a
xor ecx, ecx
jmp 0x46f80f
mov ecx, 1
mov byte [ebp - 0x40c4], cl
mov word [ebp - 0x347c], 0x20
lea eax, [ebp - 0x208]
call fcn.00464d88
add dword [ebp - 0x3470], 6
mov word [ebp - 0x347c], 0x2c
mov word [ebp - 0x347c], 0x38
lea eax, [ebp - 0x318]
call fcn.00464d88
add dword [ebp - 0x3470], 6
mov word [ebp - 0x347c], 0x2c
cmp dword [0x4bc1a8], 0
je 0x46f8ac
lea ecx, [ebp - 0x4cdc]
lea edx, [ebp - 0x44dc]
mov eax, 0x4ba564
call fcn.0045d0fc
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x40dc]
push edx
push ecx
lea ecx, [ebp - 0x208]
lea edx, [ebp - 0x4cdc]
lea eax, [ebp - 0x44dc]
call fcn.00470bcc
mov byte [ebp - 0x349a], al
jmp 0x46fbe7
mov word [ebp - 0x347c], 0x44
lea eax, [ebp - 0x410]
call fcn.0040ee04
add dword [ebp - 0x3470], 4
mov word [ebp - 0x347c], 0x50
lea edx, [ebp - 0x410]
mov eax, 0x4b9834
xor ecx, ecx
call fcn.00463858
mov word [ebp - 0x347c], 0x5c
push 0
push 1
lea edx, [ebp - 0x410]
lea eax, [ebp - 0x283c]
mov ecx, 2
call fcn.0041232c
inc dword [ebp - 0x3470]
mov word [ebp - 0x347c], 0x50
lea eax, [edi + 0xc14]
call fcn.00412df4
lea eax, [edi + 0xc40]
call fcn.00412df4
lea eax, [edi + 0xc6c]
call fcn.00412df4
jmp 0x46fb9c
call fcn.00444258
cmp byte [ebp - 0x34b6], 0
je 0x46fb3a
push 0xc30
push 0
lea edx, [ebp - 0x69c0]
push edx
call fcn.0048d5d8
add esp, 0xc
push edi
lea ecx, [ebp - 0x69c0]
push ecx
call fcn.0048d758
add esp, 8
lea edx, [edi + 0x400]
lea eax, [ebp - 0x65c0]
call fcn.0040f920
mov eax, dword [edi + 0xc00]
mov edx, dword [edi + 0xc04]
mov dword [ebp - 0x5db8], eax
mov dword [ebp - 0x5db4], edx
mov dword [ebp - 0x5dc0], eax
mov dword [ebp - 0x5dbc], edx
cmp byte [ebp - 0x34b2], 0
je 0x46fa13
test byte [edi + 0xc09], 8
je 0x46fa13
call fcn.0040f818
test eax, eax
je 0x46fa13
lea ecx, [ebp - 0x34a4]
push ecx
push edi
call sub.KERNEL32.DLL_GetCompressedFileSizeA
mov dword [ebp - 0x34a0], eax
cmp dword [ebp - 0x34a0], 0xffffffff
jne 0x46f9e7
call sub.KERNEL32.DLL_GetLastError
test eax, eax
jne 0x46fa13
mov eax, dword [ebp - 0x34a4]
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [ebp - 0x34a0]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0x5db8], eax
mov dword [ebp - 0x5db4], edx
mov ecx, dword [edi + 0xc08]
mov dword [ebp - 0x5db0], ecx
mov eax, dword [edi + 0x10a8]
mov dword [ebp - 0x5dac], eax
mov eax, dword [edi + 0x10ac]
mov dword [ebp - 0x5da8], eax
mov edx, dword [ebp - 0x40c8]
inc dword [ebp - 0x40c8]
mov dword [ebp - 0x5d9c], edx
inc dword [ebp - 0x40dc]
mov eax, dword [ebp - 0x5dc0]
mov edx, dword [ebp - 0x5dbc]
add dword [ebp - 0x40d8], eax
adc dword [ebp - 0x40d4], edx
mov eax, dword [ebp - 0x5db8]
mov edx, dword [ebp - 0x5db4]
add dword [ebp - 0x40d0], eax
adc dword [ebp - 0x40cc], edx
cmp byte [ebp - 0x34b0], 0
je 0x46fb17
mov eax, dword [ebp - 0x5db0]
call fcn.0040a240
test al, al
jne 0x46fb17
mov word [ebp - 0x347c], 0x68
lea eax, [ebp - 0x345c]
call fcn.00409020
inc dword [ebp - 0x3470]
mov word [ebp - 0x347c], 0x74
push 0
push 0
lea ecx, [edi + 0x400]
mov edx, edi
lea eax, [ebp - 0x345c]
call fcn.00409118
test al, al
je 0x46faf8
push 0x80000000
push 0
lea eax, [ebp - 0x345c]
call fcn.0040a6ac
mov dword [ebp - 0x5da0], eax
or dword [ebp - 0x5da4], 8
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x345c]
mov edx, 2
call fcn.004090d0
mov word [ebp - 0x347c], 0x50
lea edx, [ebp - 0x69c0]
lea eax, [ebp - 0x208]
call fcn.00464ec8
cmp byte [ebp - 0xfc], 0
je 0x46fb3a
mov byte [ebp - 0x349a], 0
jmp 0x46fbb1
cmp dword [0x4bc1b4], 0
jne 0x46fb93
cmp byte [ebp - 0x34b7], 0
je 0x46fb9c
cmp byte [edi + 0xc10], 0
jne 0x46fb9c
push 0
push 2
lea ecx, [edi + 0x400]
mov edx, edi
mov eax, 0x4ba564
call fcn.0045bbc8
dec eax
jne 0x46fb9c
lea ecx, [ebp - 0x318]
lea eax, [ebp - 0x40dc]
push ecx
push eax
mov eax, edi
lea ecx, [ebp - 0x208]
lea edx, [edi + 0x400]
call fcn.00470bcc
test al, al
jne 0x46fb9c
mov byte [ebp - 0x349a], 0
jmp 0x46fbb1
mov edx, edi
lea eax, [ebp - 0x283c]
call fcn.00412460
test eax, eax
je 0x46f93a
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x283c]
mov edx, 2
call fcn.00412404
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0x410]
mov edx, 2
call fcn.0040ef20
mov word [ebp - 0x347c], 0x2c
cmp byte [ebp - 0x349a], 0
je 0x4704a0
lea eax, [ebp - 0x208]
call fcn.0046517c
lea eax, [ebp - 0x318]
call fcn.0046517c
cmp dword [ebp - 0x34bc], 6
je 0x46fc42
push 0x46f378
push 0x38
push dword [ebp - 0x104]
lea edx, [ebp - 0x38c0]
lea eax, [ebp - 0x208]
mov dword [0x4c9534], edx
xor edx, edx
call fcn.0046524c
push eax
call fcn.00494498
add esp, 0x10
cmp byte [ebp - 0x34be], 0
je 0x46fcec
lea eax, [ebp - 0x6e84]
call fcn.00412df4
mov word [ebp - 0x347c], 0x2c
lea eax, [ebp - 0x6e84]
call fcn.004132a8
push esi
lea esi, [ebp - 0x6e84]
lea edi, [ebp - 0x6ea8]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop esi
push dword [ebp - 0x6e98]
push dword [ebp - 0x6e9c]
push dword [ebp - 0x6ea0]
push dword [ebp - 0x6ea4]
push dword [ebp - 0x6ea8]
lea eax, [esi + 0x70]
push eax
lea edx, [ebp - 0x6e58]
push edx
call fcn.00490628
add esp, 0x1c
lea ecx, [ebp - 0x6e58]
push ecx
mov eax, 0x55b
call fcn.004116e0
push eax
lea edx, [ebp - 0x6e24]
push edx
call fcn.00490628
add esp, 0xc
lea ecx, [ebp - 0x6e24]
push ecx
lea eax, [esi + 0x87]
push eax
push ebx
call fcn.0048f734
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x34a8], edx
mov word [ebp - 0x347c], 0x2c
xor edi, edi
jmp 0x46ffdc
mov byte [ebp - 0x76a8], 0
lea ecx, [ebp - 0x82d8]
lea eax, [ebp - 0x208]
mov edx, edi
call fcn.004650b0
mov word [ebp - 0x347c], 0x2c
cmp byte [ebp - 0x34b5], 0
je 0x46fdf6
mov eax, dword [ebp - 0x76ac]
cmp eax, dword [ebp - 0x34a8]
je 0x46fdf6
mov edx, dword [ebp - 0x76ac]
mov dword [ebp - 0x34a8], edx
cmp byte [ebp - 0x34be], 0
je 0x46fd6b
lea ecx, [esi + 0xc3]
push ecx
push ebx
call fcn.0048f734
add esp, 8
lea eax, [esi + 0xc7]
push eax
push ebx
call fcn.0048f734
add esp, 8
cmp dword [ebp - 0x76ac], 0
je 0x46fdb9
lea ecx, [ebp - 0x8f08]
mov edx, dword [ebp - 0x76ac]
dec edx
lea eax, [ebp - 0x318]
call fcn.004650b0
lea edx, [ebp - 0x8f08]
mov eax, 0x28a
push edx
call fcn.004116e0
push eax
push ebx
call fcn.0048f734
add esp, 0xc
jmp 0x46fdcd
mov eax, 0x558
call fcn.004116e0
push eax
push ebx
call fcn.0048f734
add esp, 8
cmp byte [ebp - 0x34be], 0
je 0x46fde6
lea edx, [esi + 0xcb]
push edx
push ebx
call fcn.0048f734
add esp, 8
lea ecx, [esi + 0xc0]
push ecx
push ebx
call fcn.0048f734
add esp, 8
mov eax, dword [ebp - 0x76c8]
call fcn.0040a240
mov byte [ebp - 0x34a9], al
cmp byte [ebp - 0x34b1], 0
je 0x46fe86
lea eax, [ebp - 0x8f34]
call fcn.00412df4
lea edx, [ebp - 0x76c4]
lea eax, [ebp - 0x8f34]
call fcn.00412e1c
push esi
push edi
lea esi, [ebp - 0x8f34]
lea edi, [ebp - 0x8f58]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push dword [ebp - 0x8f48]
push dword [ebp - 0x8f4c]
push dword [ebp - 0x8f50]
push dword [ebp - 0x8f54]
push dword [ebp - 0x8f58]
lea eax, [esi + 0xd0]
push eax
lea edx, [ebp - 0x76a8]
push edx
call fcn.0048d788
pop ecx
lea ecx, [ebp - 0x76a8]
add eax, ecx
push eax
call fcn.00490628
add esp, 0x1c
cmp byte [ebp - 0x34b3], 0
je 0x46fee7
push dword [ebp - 0x76d4]
push dword [ebp - 0x76d8]
lea eax, [ebp - 0x8f78]
call fcn.0040b48c
cmp byte [ebp - 0x34a9], 0
je 0x46febb
mov eax, 0x573
call fcn.004116e0
jmp 0x46fec1
lea eax, [ebp - 0x8f78]
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x76a8]
push ecx
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x76a8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
cmp byte [ebp - 0x34b2], 0
je 0x46ff48
push dword [ebp - 0x76cc]
push dword [ebp - 0x76d0]
lea eax, [ebp - 0x8f98]
call fcn.0040b48c
cmp byte [ebp - 0x34a9], 0
je 0x46ff1c
mov eax, 0x573
call fcn.004116e0
jmp 0x46ff22
lea eax, [ebp - 0x8f98]
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x76a8]
push ecx
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x76a8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
cmp byte [ebp - 0x34b0], 0
je 0x46ffae
test byte [ebp - 0x76bc], 8
je 0x46ff87
push dword [ebp - 0x76b8]
lea eax, [esi + 0xf0]
push eax
lea ecx, [ebp - 0x76a8]
push ecx
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x76a8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
jmp 0x46ffae
cmp byte [ebp - 0x34a9], 0
je 0x46ff98
lea eax, [esi + 0xf7]
jmp 0x46ff9e
lea eax, [esi + 0x102]
push eax
lea edx, [ebp - 0x76a8]
push edx
call fcn.0048d67c
add esp, 8
lea ecx, [ebp - 0x82d8]
push ecx
lea eax, [ebp - 0x76a8]
push eax
call fcn.0048d67c
add esp, 8
lea edx, [ebp - 0x76a8]
push edx
lea ecx, [esi + 0x10d]
push ecx
push ebx
call fcn.0048f734
add esp, 0xc
inc edi
cmp edi, dword [ebp - 0x104]
jb 0x46fd04
cmp byte [ebp - 0x34b4], 0
je 0x4702ae
push dword [ebp - 0x40d4]
push dword [ebp - 0x40d8]
lea eax, [ebp - 0x8fb8]
call fcn.0040b48c
push dword [ebp - 0x40cc]
push dword [ebp - 0x40d0]
lea eax, [ebp - 0x8fd8]
call fcn.0040b48c
cmp byte [ebp - 0x34be], 0
je 0x47003c
lea edx, [esi + 0xc3]
push edx
push ebx
call fcn.0048f734
add esp, 8
lea ecx, [esi + 0x112]
push ecx
push ebx
call fcn.0048f734
add esp, 8
xor eax, eax
mov byte [ebp - 0x91d8], al
mov byte [ebp - 0x90d8], al
cmp byte [ebp - 0x34b1], 0
je 0x4700bc
mov eax, 0x1aa
call fcn.004116e0
push eax
lea edx, [esi + 0x116]
push edx
lea ecx, [ebp - 0x90d8]
push ecx
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x90d8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
lea eax, [esi + 7]
push eax
lea ecx, [esi + 0x116]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
cmp byte [ebp - 0x34b3], 0
je 0x470121
mov eax, 0x6f
call fcn.004116e0
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x90d8]
push ecx
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x90d8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
lea eax, [ebp - 0x8fb8]
push eax
lea ecx, [esi + 0xe9]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
cmp byte [ebp - 0x34b2], 0
je 0x470186
mov eax, 0x71
call fcn.004116e0
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x90d8]
push ecx
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x90d8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
lea eax, [ebp - 0x8fd8]
push eax
lea ecx, [esi + 0xe9]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
cmp byte [ebp - 0x34b0], 0
je 0x4701bb
lea ecx, [esi + 0x120]
push ecx
lea eax, [ebp - 0x90d8]
push eax
call fcn.0048d67c
add esp, 8
lea edx, [esi + 0x120]
push edx
lea ecx, [ebp - 0x91d8]
push ecx
call fcn.0048d67c
add esp, 8
cmp byte [ebp - 0x90d8], 0
jne 0x4701f0
lea eax, [esi + 0x12b]
push eax
lea edx, [ebp - 0x90d8]
push edx
call fcn.0048d758
add esp, 8
lea ecx, [esi + 0x12b]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.0048d758
add esp, 8
mov eax, 0x559
call fcn.004116e0
push eax
lea edx, [ebp - 0x90d8]
push edx
call fcn.0048d67c
add esp, 8
lea ecx, [esi + 0x12e]
lea eax, [ebp - 0x91d8]
push dword [ebp - 0x40dc]
push ecx
push eax
call fcn.0048d788
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00490628
add esp, 0xc
xor ecx, ecx
mov cl, byte [ebp - 0x90d8]
cmp ecx, 0x20
jne 0x470256
xor eax, eax
mov al, byte [ebp - 0x90d7]
cmp eax, 0x20
jne 0x470256
mov byte [ebp - 0x90d8], 0x23
xor edx, edx
mov dl, byte [ebp - 0x91d8]
cmp edx, 0x20
jne 0x470277
xor ecx, ecx
mov cl, byte [ebp - 0x91d7]
cmp ecx, 0x20
jne 0x470277
mov byte [ebp - 0x91d8], 0x23
lea eax, [ebp - 0x91d8]
push eax
lea edx, [ebp - 0x90d8]
push edx
lea ecx, [esi + 0x131]
push ecx
push ebx
call fcn.0048f734
add esp, 0x10
cmp byte [ebp - 0x34be], 0
je 0x4702ae
lea eax, [esi + 0xcb]
push eax
push ebx
call fcn.0048f734
add esp, 8
cmp byte [ebp - 0x34be], 0
je 0x4702c7
lea edx, [esi + 0x13a]
push edx
push ebx
call fcn.0048f734
add esp, 8
cmp byte [ebp - 0x34bf], 0
je 0x470414
push ebx
call fcn.0048f2ac
pop ecx
xor ecx, ecx
mov cl, byte [ebx + 0x16]
push ecx
call fcn.0048f478
pop ecx
mov esi, eax
cmp esi, 0xffffffff
je 0x470414
mov word [ebp - 0x347c], 0x80
mov word [ebp - 0x347c], 0x8c
lea edx, [esi + 1]
lea eax, [ebp - 0x3468]
call fcn.00401a54
inc dword [ebp - 0x3470]
mov word [ebp - 0x347c], 0x98
push 0
push 0
push ebx
call fcn.0048fa18
add esp, 0xc
push ebx
push esi
push 1
push dword [ebp - 0x3468]
call fcn.0048f978
add esp, 0x10
mov eax, dword [ebp - 0x3468]
mov byte [eax + esi], 0
call fcn.0044434c
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x3468]
mov edx, 2
call fcn.00401acc
mov word [ebp - 0x347c], 0x80
mov word [ebp - 0x347c], 0x2c
jmp 0x470414
push ebx
call fcn.0048f204
cmp byte [ebp - 0x38c0], 0
pop ecx
je 0x47044d
push 0
lea edx, [ebp - 0x38c0]
push edx
lea ecx, [ebp - 0x40c0]
push ecx
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
jne 0x47044d
lea edx, [ebp - 0x38c0]
mov eax, 0x4a6984
call fcn.00429668
cmp byte [ebp - 0x34c0], 0
je 0x470463
lea eax, [ebp - 0x40c0]
xor edx, edx
call fcn.0046ded4
cmp byte [ebp - 0x34c0], 0
jne 0x470477
lea eax, [ebp - 0x40c0]
call fcn.00444294
cmp dword [0x4bc1a8], 0
jne 0x4704a0
cmp byte [ebp - 0x38c0], 0
je 0x4704a0
lea eax, [ebp - 0x38c0]
call fcn.0040b578
mov edx, eax
mov eax, 0x4b9834
call fcn.0045e1dc
dec dword [ebp - 0x3470]
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.00439274
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0x318]
mov edx, 2
call fcn.0040ef20
dec dword [ebp - 0x3470]
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.00439274
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0040ef20
mov word [ebp - 0x347c], 0
cmp byte [ebp - 0x3499], 0
je 0x470523
push dword [0x4b982c]
call sub.USER32.DLL_DestroyWindow
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret