Function at 0x4bd620
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4f7bed
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0xc7fc
call fcn.004df2e0
mov eax, dword [0x50fb70]
xor eax, esp
mov dword [esp + 0xc7f8], eax
push ebx
push esi
push edi
mov eax, dword [0x50fb70]
xor eax, esp
push eax
lea eax, [esp + 0xc810]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov eax, dword [str.InterfaceConvertProfile]
push eax
push str._s_u
push 0x567a40
mov edx, 0xc8
call fcn.00493540
add esp, 0x10
lea ecx, [esp + 0x454]
call fcn.0048b5e0
mov dword [esp + 0xc818], 1
xor ebx, ebx
mov byte [esp + 0x14e4], bl
cmp byte [0x533389], bl
je 0x4bd78d
push 0x800
lea ecx, [esp + 0xb808]
push ecx
mov ecx, 0x541e38
call fcn.00478250
push 0x10e8
lea edx, [esp + 0x2538]
push ebx
push edx
call fcn.004e01d0
add esp, 0xc
xor eax, eax
jmp 0x4bd6f0
movzx ecx, word [esp + eax + 0xb804]
mov word [esp + eax + 0x2534], cx
add eax, 2
cmp cx, bx
jne 0x4bd6f0
push ebx
lea eax, [esp + 0x14f0]
push eax
lea ecx, [esp + 0xb80c]
push ecx
mov dword [esp + 0x2508], ebx
mov dword [esp + 0x250c], ebx
mov dword [esp + 0x2510], ebx
mov dword [esp + 0x2514], ebx
mov dword [esp + 0x2518], ebx
mov dword [esp + 0x251c], ebx
call fcn.00444ec0
test al, al
je 0x4bd768
mov edx, dword [esp + 0x24ec]
mov eax, dword [esp + 0x24f0]
mov dword [esp + 0x35b4], edx
mov dword [esp + 0x35b8], eax
lea ecx, [esp + 0x2534]
push ecx
lea ecx, [esp + 0x458]
call fcn.0048b3a0
lea ecx, [esp + 0x454]
call fcn.0048b500
jmp 0x4bd843
lea ecx, [esp + 0x4c]
call fcn.00466ea0
mov byte [esp + 0xc818], 2
lea edi, [esp + 0x4c]
cmp esi, ebx
je 0x4bd7aa
mov edi, esi
jmp 0x4bd7bb
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, 0x53fd10
call fcn.0048f5b0
push ebx
push ebx
push ebx
push ebx
push 1
push 1
lea eax, [esp + 0x46c]
push eax
push 3
push edi
call fcn.00499a60
test al, al
jne 0x4bd804
mov byte [esp + 0xc818], 1
lea ecx, [esp + 0x4c]
call fcn.0041cb40
mov dword [esp + 0xc818], 0xffffffff
lea ecx, [esp + 0x454]
call fcn.004b9cd0
jmp 0x4be93f
xor esi, esi
cmp dword [esp + 0x4c0], ebx
jbe 0x4bd82a
nop
push esi
lea ecx, [esp + 0x458]
call fcn.0048b5a0
inc esi
mov dword [eax + 4], ebx
cmp esi, dword [esp + 0x4c0]
jb 0x4bd810
mov byte [esp + 0xc818], 1
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x4bd843
push eax
call fcn.004df10f
add esp, 4
mov ecx, dword [str.InterfaceConvertProfile]
push 0x567a40
push ecx
call fcn.00496840
mov edx, dword [0x5354dc]
push edx
mov byte [esp + 0x15], 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edx, dword [0x5275b4]
neg eax
lea ecx, [esp + 0x454]
push ecx
sbb eax, eax
and eax, dword [0x5354dc]
push 0x4b9d30
push eax
push str.CONVERTARC
push edx
mov dword [esp + 0x34], ebx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4be8f8
push ebx
push str.Background
push 0x567a40
call fcn.00496520
test eax, eax
jne 0x4bd8c8
cmp dword [0x5343a4], 1
jne 0x4bd8c1
cmp byte [0x54fb33], al
jne 0x4bd8c8
mov byte [esp + 0x14], 0
jmp 0x4bd8cd
mov byte [esp + 0x14], 1
mov eax, dword [esp + 0x14]
push ebx
push eax
push ebx
push 8
call fcn.004b1320
push 0x800
lea ecx, [esp + 0x2538]
push ecx
call fcn.004ae690
xor edi, edi
xor esi, esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [0x534420], ebx
mov dword [0x534424], ebx
mov dword [esp + 0x44], edi
cmp dword [esp + 0x4c0], ebx
jbe 0x4bd954
lea ebx, [ebx]
push esi
lea ecx, [esp + 0x458]
call fcn.0048b5a0
test byte [eax + 4], 2
je 0x4bd946
mov edx, dword [eax + 8]
add dword [0x534420], edx
mov eax, dword [eax + 0xc]
adc dword [0x534424], eax
inc edi
inc esi
cmp esi, dword [esp + 0x4c0]
jb 0x4bd920
mov dword [esp + 0x44], edi
push 0x880
lea ecx, [esp + 0x8620]
push ecx
push ebx
push edi
call fcn.0049d790
mov eax, dword [0x533384]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea edx, [esp + 0x861c]
push edx
push 0x65
push eax
call esi
or edi, 0xffffffff
cmp byte [0x535458], 0
mov dword [0x535448], ebx
mov dword [0x53544c], ebx
mov dword [esp + 0x1c], ebx
jne 0x4be82c
cmp byte [0x533388], 0
jne 0x4be843
mov edx, dword [esp + 0x20]
push 0x880
lea ecx, [esp + 0x8620]
push ecx
push ebx
push edx
call fcn.0049d790
mov ecx, dword [0x533384]
lea eax, [esp + 0x861c]
push eax
push 0x66
push ecx
call esi
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push 0x880
lea edx, [esp + 0x8620]
push edx
push eax
push ecx
call fcn.0049d790
mov eax, dword [0x533384]
lea edx, [esp + 0x861c]
push edx
push 0x67
push eax
call esi
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push 0x880
lea ecx, [esp + 0x8620]
push ecx
push edx
push eax
call fcn.0049d790
mov edx, dword [0x533384]
lea ecx, [esp + 0x861c]
push ecx
push 0x68
push edx
call esi
cmp edi, 0xffffffff
je 0x4bda6a
push edi
lea eax, [esp + 0xa720]
push eax
lea ecx, [esp + 0x45c]
call fcn.0048b6d0
mov ecx, dword [eax + 0x1080]
add dword [0x535448], ecx
mov edx, dword [eax + 0x1084]
adc dword [0x53544c], edx
or edi, 0xffffffff
call fcn.004b0550
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x4c0]
jge 0x4be82c
mov ecx, eax
push ecx
lea ecx, [esp + 0x458]
call fcn.0048b5a0
mov ebx, eax
test byte [ebx + 4], 2
mov dword [esp + 0x18], ebx
je 0x4be81a
cmp byte [esp + 0x14dd], 0
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x48], edi
je 0x4bdad2
test byte [ebx + 0x28], 0x10
je 0x4bdad2
push 0x50e
call fcn.004610c0
mov edx, dword [ebx]
push eax
push edx
call fcn.004bc170
add esp, 8
jmp 0x4be81a
mov eax, dword [ebx]
push 1
push 0
push eax
mov ecx, 0x541e38
call fcn.004796e0
cmp eax, 1
jne 0x4be81a
lea ecx, [esp + 0xac]
push ecx
mov ecx, 0x541e38
call fcn.00478280
xor eax, eax
push eax
lea edx, [esp + 0x14f0]
mov dword [esp + 0x2500], eax
mov dword [esp + 0x2504], eax
mov dword [esp + 0x2508], eax
mov dword [esp + 0x250c], eax
mov dword [esp + 0x2510], eax
mov dword [esp + 0x2514], eax
mov eax, dword [ebx]
push edx
push eax
call fcn.00444ec0
test al, al
je 0x4be81a
cmp byte [esp + 0x14dd], 0
je 0x4bdb7c
cmp byte [esp + 0x1f8], 0
jne 0x4bdb61
cmp byte [esp + 0x147], 0
je 0x4bdb7c
push 0x50e
call fcn.004610c0
mov ecx, dword [ebx]
push eax
push ecx
call fcn.004bc170
add esp, 8
jmp 0x4be81a
push 1
push 0x800
lea edx, [esp + 0x6624]
push edx
push str.Rar_CV
call fcn.004adc90
test al, al
je 0x4be81a
lea eax, [esp + 0x661c]
push eax
call fcn.004ae630
push 1
call fcn.004a9c20
mov ecx, dword [esp + 0x44]
push 0x800
mov dword [0x53442c], ecx
push 0x550b7a
mov ecx, 0x541e38
call fcn.00478250
mov edx, dword [0x541e3c]
mov eax, 4
push 0x4fa890
mov ecx, 0x551b7c
mov dword [0x54db28], edx
mov dword [0x54b8a0], 1
mov dword [0x54cb18], eax
mov dword [0x54cb1c], eax
call fcn.00466d10
push 0x550b7a
push 0x20f
call fcn.004610c0
push eax
call fcn.004aec30
mov eax, dword [0x56abd8]
add esp, 8
cmp byte [0x54cb11], 0
mov dword [esp + 0x14], eax
je 0x4bdc39
mov byte [0x54cb11], 0
mov byte [esp + 0x11], 1
push 1
push 0
mov ecx, 0x541e38
call fcn.0047a360
cmp byte [0x533388], 0
jne 0x4be7f6
mov ecx, dword [esp + 0x14]
cmp ecx, dword [0x56abd8]
jne 0x4be7f6
push 0x567a40
call fcn.004aa000
mov edx, dword [0x54b8f0]
xor edi, edi
mov dword [esp + 0x40], edx
mov byte [0x54ba49], 0
cmp word [0x548786], di
jne 0x4bdcef
push edi
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x541e38
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], edi
call fcn.00478d60
cmp dword [esp + 0x24], edi
jbe 0x4bdce2
push 0x800
push 0x548786
push str.Rar_CM
call fcn.004adbc0
mov esi, eax
cmp esi, edi
je 0x4bdce2
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
push esi
push edx
push 1
push eax
call fcn.004e3fae
push esi
call fcn.004e0841
add esp, 0x14
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004e0284
add esp, 4
mov esi, dword [esp + 0x18]
mov eax, dword [esi]
push 0x800
lea edx, [esp + 0xa720]
push edx
push eax
call fcn.004511c0
push 0x800
lea ecx, [esp + 0x4e0]
push ecx
lea edx, [esp + 0x9724]
push edx
call fcn.00466930
cmp word [esp + 0x971c], di
je 0x4bdd3e
push 0x800
lea eax, [esp + 0x9720]
push eax
call fcn.00450a60
mov ecx, dword [esi]
push ecx
call fcn.0048c5e0
mov byte [esp + 0x10], al
mov ebx, 0x4fa8a0
cmp dword [0x54db28], edi
je 0x4bdd5c
mov ebx, 0x4fa6f0
cmp word [0x546780], 0
je 0x4bdd6b
mov ebx, 0x4fa8a8
mov edi, dword [esp + 0x18]
mov edx, dword [edi]
push ebx
push edx
call fcn.00451140
test al, al
je 0x4bde44
cmp word [esp + 0x971c], 0
je 0x4bdda8
lea eax, [esp + 0xa71c]
push eax
lea ecx, [esp + 0x9720]
push ecx
call fcn.00469c20
test eax, eax
jne 0x4bde44
mov edx, dword [edi]
push 0x800
push 0x550b7a
push edx
mov byte [esp + 0x1e], 1
call fcn.00450f20
push eax
lea eax, [esp + 0x6628]
push eax
call fcn.00450ab0
push 0x550b7a
call fcn.00451120
mov esi, eax
test esi, esi
je 0x4bdf61
xor ecx, ecx
push 0x550b7a
mov word [esi], cx
call fcn.00451120
mov edx, 0x2e
mov word [esi], dx
test eax, eax
je 0x4bdf61
cmp byte [esp + 0x10], 0
je 0x4bdf61
cmp dword [esp + 0x14c], 0
jne 0x4bdf61
cmp byte [esp + 0x12d], 0
je 0x4bdf61
mov edx, eax
mov ecx, esi
sub edx, esi
lea ecx, [ecx]
movzx eax, word [ecx]
mov word [edx + ecx], ax
add ecx, 2
test ax, ax
jne 0x4bde30
jmp 0x4bdf61
cmp word [esp + 0x971c], 0
mov byte [esp + 0x12], 0
je 0x4bdeb8
xor eax, eax
jmp 0x4bde60
movzx ecx, word [esp + eax + 0x971c]
mov word [eax + 0x550b7a], cx
add eax, 2
test cx, cx
jne 0x4bde60
mov eax, dword [edi]
push eax
call fcn.00450f20
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4bde81
mov edi, 0x550b7a
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4bde96
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x18]
jmp 0x4bded1
mov ecx, dword [edi]
mov edx, 0x550b7a
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4bdec0
push 0x550b7a
call fcn.00451120
mov esi, eax
test esi, esi
je 0x4bdf26
xor ecx, ecx
push 0x550b7a
mov word [esi], cx
call fcn.00451120
test eax, eax
je 0x4bdf1e
push str..tar
push eax
call fcn.00469c20
test eax, eax
je 0x4bdf26
cmp byte [esp + 0x10], 0
je 0x4bdf1e
cmp dword [esp + 0x14c], 0
jne 0x4bdf1e
cmp byte [esp + 0x12d], 0
jne 0x4bdf26
mov edx, 0x2e
mov word [esi], dx
push 0x800
push ebx
push 0x550b7a
call fcn.00451ba0
push 0x550b7a
call fcn.004432f0
test al, al
je 0x4bdf61
push 0x50d
call fcn.004610c0
push eax
push 0x550b7a
call fcn.004bc170
add esp, 8
mov byte [esp + 0x12], 1
mov esi, dword [esp + 0x14]
cmp esi, dword [0x56abd8]
jne 0x4bdfee
lea eax, [esp + 0x661c]
push eax
call fcn.004ae630
push 0x4fa890
mov ecx, 0x551b7c
mov dword [0x54b8cc], 3
mov dword [0x54b8c8], 2
mov byte [0x54b906], 0
mov byte [0x54b920], 0
call fcn.00466d10
push 0x550b7a
call fcn.00450f20
push eax
push 0x20d
call fcn.004610c0
push eax
call fcn.004aec30
add esp, 8
cmp byte [0x54cb11], 0
je 0x4bdfe2
mov byte [0x54cb11], 0
mov byte [esp + 0x11], 1
push 0
mov ecx, 0x541e38
call fcn.00479fe0
cmp word [0x548786], 0
je 0x4be002
push 0x548786
call fcn.004adeb0
cmp byte [0x533388], 0
mov byte [esp + 0x13], 0
jne 0x4be7e5
cmp esi, dword [0x56abd8]
jne 0x4be7e5
push 1
push 0
push 0x550b7a
mov ecx, 0x541e38
call fcn.004796e0
cmp eax, 1
jne 0x4be7e5
lea ecx, [esp + 0x1fc]
push ecx
mov ecx, 0x541e38
call fcn.00478280
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1e8]
cmp eax, dword [esp + 0x334]
jne 0x4be06e
cmp ecx, dword [esp + 0x338]
je 0x4be0ac
or eax, ecx
je 0x4be0ac
push 0x4f9c6c
lea edx, [esp + 0xb0]
push edx
call fcn.00469c20
test eax, eax
jne 0x4be091
cmp byte [esp + 0x12d], al
jne 0x4be0ac
push 0x50a
call fcn.004610c0
push eax
mov eax, dword [edi]
push eax
call fcn.004bc170
add esp, 8
jmp 0x4be7e5
mov eax, dword [esp + 0x14e0]
test eax, eax
je 0x4be119
mov ecx, dword [esp + 0x1f0]
push ecx
mov ecx, dword [esp + 0x1f0]
cdq
push ecx
push edx
push eax
call fcn.004e0250
push 0
mov esi, edx
mov edx, dword [esp + 0x344]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x344]
push edx
push eax
call fcn.004e0250
cmp esi, edx
jg 0x4be119
jl 0x4be0f6
cmp edi, eax
jae 0x4be119
push 0x550b7a
call fcn.00450f20
push eax
push 0x50f
call fcn.004610c0
push eax
call fcn.004aec30
add esp, 8
jmp 0x4be7e5
mov ecx, 0x40
mov esi, 0x54a794
lea edi, [esp + 0x34c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [esp + 0xc818], 4
push 1
call fcn.004a9c20
mov ecx, 0x40
lea esi, [esp + 0x34c]
mov edi, 0x54a794
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x550b7a
mov ecx, 0x541e38
movsw word es:[edi], word [esi]
call fcn.00478250
mov ecx, dword [0x541e3c]
xor ebx, ebx
mov dword [0x54db28], ecx
push 0x4fa890
mov ecx, 0x551b7c
mov byte [0x54ba49], 1
mov dword [0x54ba28], ebx
mov dword [0x54ba2c], ebx
mov dword [0x54ba30], ebx
mov dword [0x54ba34], ebx
call fcn.00466d10
push 0x550b7a
call fcn.00450f20
push eax
push 0x210
call fcn.004610c0
push eax
call fcn.004aec30
add esp, 8
cmp byte [0x54cb11], bl
je 0x4be1d3
mov byte [0x54cb11], bl
mov byte [esp + 0x11], 1
push ebx
push ebx
mov ecx, 0x541e38
call fcn.0047a360
cmp byte [0x533388], 0
jne 0x4be7ca
mov edx, dword [esp + 0x14]
cmp edx, dword [0x56abd8]
jne 0x4be7ca
mov eax, dword [esp + 0x334]
or eax, dword [esp + 0x338]
jne 0x4be230
cmp dword [esp + 0x24f0], ebx
ja 0x4be222
cmp dword [esp + 0x24ec], 0x200
jb 0x4be230
cmp dword [esp + 0x1d4], 1
jbe 0x4be7ca
mov eax, dword [esp + 0x14e0]
cmp eax, ebx
je 0x4be281
mov ecx, dword [esp + 0x1f0]
push ecx
mov ecx, dword [esp + 0x1f0]
cdq
push ecx
push edx
push eax
call fcn.004e0250
push ebx
mov esi, edx
mov edx, dword [esp + 0x344]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x344]
push edx
push eax
call fcn.004e0250
cmp esi, edx
jl 0x4be7ca
jg 0x4be281
cmp edi, eax
jb 0x4be7ca
push 0x550b7a
mov byte [esp + 0x17], 1
call fcn.00450f20
push eax
push 0x25a
call fcn.004610c0
push eax
call fcn.004aec30
inc dword [esp + 0x28]
mov ecx, dword [esp + 0x1f4]
mov edx, dword [esp + 0x1f8]
mov eax, dword [esp + 0x344]
add esp, 8
add dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x340]
adc dword [esp + 0x38], edx
add dword [esp + 0x2c], eax
adc dword [esp + 0x30], ecx
cmp byte [esp + 0x12], 0
je 0x4be644
mov esi, dword [esp + 0x18]
mov edx, dword [esi]
push ebx
push 1
push edx
mov ecx, 0x541e38
call fcn.004796e0
cmp eax, 1
jne 0x4be7ca
lea ecx, [esp + 0x4c]
call fcn.00466ea0
mov byte [esp + 0xc818], 5
mov eax, dword [esi]
lea edx, [esp + 0x461c]
sub edx, eax
jmp 0x4be320
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4be320
mov byte [esp + 0x10], 0
jmp 0x4be340
lea eax, [esp + 0x461c]
push eax
lea ecx, [esp + 0x5620]
push str._s._cvtbackup_
push ecx
mov edx, 0x800
call fcn.00493540
add esp, 0xc
lea edx, [esp + 0x561c]
push edx
lea eax, [esp + 0x4620]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4be4fb
lea ecx, [esp + 0x461c]
push ecx
lea ecx, [esp + 0x50]
call fcn.00466d10
lea edx, [esp + 0x561c]
push edx
lea ecx, [esp + 0x50]
call fcn.00466d10
mov ecx, 0x541e38
call fcn.00478270
test eax, eax
je 0x4be3e0
push 0x800
lea eax, [esp + 0x4620]
push eax
mov ecx, 0x541e38
call fcn.00478fd0
test al, al
je 0x4be3e0
lea ecx, [esp + 0x461c]
push ecx
call fcn.004432f0
test al, al
jne 0x4be340
push ebx
push 1
push 0x550b7a
mov ecx, 0x541e38
call fcn.004796e0
cmp eax, 1
jne 0x4be500
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [eax + 0x550b7a]
mov word [esp + eax + 0x461c], cx
add eax, 2
cmp cx, bx
jne 0x4be400
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [ecx]
mov eax, dword [esi]
lea edx, [esp + 0x561c]
sub edx, eax
jmp 0x4be430
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4be430
push 0x800
lea edx, [esp + 0x4620]
push edx
call fcn.00450f20
push eax
lea eax, [esp + 0x5624]
push eax
call fcn.004510f0
lea ecx, [esp + 0x561c]
push ecx
lea edx, [esp + 0x4620]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4be4fb
cmp dword [esp + 0x40], 1
jne 0x4be4b8
push ebx
push ebx
push 3
push ebx
push ebx
push 0x40000000
lea eax, [esp + 0x5634]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4be4b8
lea ecx, [esp + 0x2524]
push ecx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x541e38
call fcn.00478270
test eax, eax
je 0x4be500
push 0x800
lea edx, [esp + 0x4620]
push edx
mov ecx, 0x541e38
call fcn.00478fd0
test al, al
je 0x4be500
lea eax, [esp + 0x461c]
push eax
call fcn.004432f0
test al, al
je 0x4be500
mov esi, dword [esp + 0x18]
jmp 0x4be420
mov byte [esp + 0x10], 1
xor bl, bl
cmp byte [esp + 0x14dc], bl
jne 0x4be582
push 0x800
lea ecx, [esp + 0x3620]
push ecx
lea ecx, [esp + 0x54]
mov bl, 1
call fcn.00466f20
test al, al
je 0x4be579
jmp 0x4be530
push 0x800
lea edx, [esp + 0x7620]
push edx
lea ecx, [esp + 0x54]
call fcn.00466f20
test al, al
je 0x4be579
lea eax, [esp + 0x361c]
push eax
call fcn.004432f0
test al, al
jne 0x4be577
push 0x800
lea ecx, [esp + 0x3620]
push ecx
lea ecx, [esp + 0x54]
call fcn.00466f20
test al, al
jne 0x4be530
jmp 0x4be579
xor bl, bl
lea ecx, [esp + 0x4c]
call fcn.00466c90
push 0x800
lea edx, [esp + 0x3620]
push edx
lea ecx, [esp + 0x54]
call fcn.00466f20
test al, al
je 0x4be62e
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x4be5b0
push 0x800
lea eax, [esp + 0x7620]
push eax
lea ecx, [esp + 0x54]
call fcn.00466f20
test al, al
je 0x4be62e
cmp byte [esp + 0x10], 0
jne 0x4be5f1
test bl, bl
jne 0x4be602
lea ecx, [esp + 0x761c]
push ecx
call fcn.00443310
lea edx, [esp + 0x761c]
push edx
call fcn.00442f40
jmp 0x4be614
test bl, bl
jne 0x4be602
lea eax, [esp + 0x361c]
push eax
call fcn.00442f40
lea ecx, [esp + 0x361c]
push ecx
lea edx, [esp + 0x7620]
push edx
call esi
push 0x800
lea eax, [esp + 0x3620]
push eax
lea ecx, [esp + 0x54]
call fcn.00466f20
test al, al
jne 0x4be5b0
mov byte [esp + 0xc818], 4
lea ecx, [esp + 0x4c]
call fcn.0041cb40
jmp 0x4be7ca
cmp byte [esp + 0x14dc], 0
je 0x4be705
mov esi, dword [esp + 0x18]
mov ecx, dword [esi]
push ebx
push 1
push ecx
mov ecx, 0x541e38
call fcn.004796e0
cmp eax, 1
jne 0x4be705
mov eax, dword [esi]
lea edx, [esp + 0x361c]
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4be680
nop
lea edx, [esp + 0x361c]
push edx
call fcn.00450f20
push eax
push 0x258
call fcn.004610c0
push eax
call fcn.004aec30
add esp, 8
lea eax, [esp + 0x361c]
push eax
call fcn.00443310
lea ecx, [esp + 0x361c]
push ecx
call fcn.00442f40
mov ecx, 0x541e38
call fcn.00478270
test eax, eax
je 0x4be705
push 0x800
lea edx, [esp + 0x3620]
push edx
mov ecx, 0x541e38
call fcn.00478fd0
test al, al
je 0x4be705
lea eax, [esp + 0x361c]
push eax
call fcn.004432f0
test al, al
jne 0x4be690
push ebx
push 1
push 0x550b7a
mov ecx, 0x541e38
call fcn.004796e0
cmp eax, 1
jne 0x4be7ca
xor eax, eax
jmp 0x4be730
movzx ecx, word [eax + 0x550b7a]
mov word [esp + eax + 0x561c], cx
add eax, 2
cmp cx, bx
jne 0x4be730
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileTime]
cmp dword [esp + 0x40], 1
jne 0x4be790
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea ecx, [esp + 0x5634]
push ecx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4be790
lea edx, [esp + 0x2524]
push edx
push 0
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x541e38
call fcn.00478270
test eax, eax
je 0x4be7ca
push 0x800
lea eax, [esp + 0x5620]
push eax
mov ecx, 0x541e38
call fcn.00478fd0
test al, al
je 0x4be7ca
lea ecx, [esp + 0x561c]
push ecx
call fcn.004432f0
test al, al
jne 0x4be753
mov byte [esp + 0xc818], 1
lea ecx, [esp + 0x34c]
call fcn.00464200
cmp byte [esp + 0x13], 0
jne 0x4be7f6
cmp byte [esp + 0x12], 0
jne 0x4be7f6
push 0x550b7a
call fcn.00442f40
lea edx, [esp + 0x2534]
push edx
call fcn.004ae630
lea eax, [esp + 0x661c]
push eax
call fcn.004ae2c0
mov edi, dword [esp + 0x48]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
inc dword [esp + 0x1c]
xor ebx, ebx
cmp byte [0x535458], bl
je 0x4bd9a0
cmp byte [0x533388], 0
jne 0x4be843
cmp byte [0x535458], 0
mov eax, 0x4d0
je 0x4be848
mov eax, 0x271
push eax
call fcn.004610c0
push eax
call fcn.004aec30
add esp, 4
cmp byte [0x535458], 0
je 0x4be86f
mov ecx, dword [0x533384]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4be883
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push 1
call fcn.004af960
call fcn.004aed40
mov al, byte [0x533389]
test al, al
je 0x4be8bc
push ebx
push ebx
lea edx, [esp + 0xb80c]
push edx
mov ecx, 0x541e38
call fcn.004796e0
cmp eax, 1
je 0x4be8b3
mov ecx, 0x53fd10
call fcn.0048e0b0
test al, al
jne 0x4be8c2
mov al, byte [0x533389]
test al, al
jne 0x4be8dd
cmp dword [esp + 0x20], ebx
jbe 0x4be8d9
push 0x550b7a
call fcn.00450f20
push eax
mov ecx, 0x53fd10
call fcn.004903d0
jmp 0x4be8f8
test al, al
je 0x4be8f8
cmp dword [esp + 0x20], ebx
jbe 0x4be8f8
push 0x550b7a
call fcn.00450f20
push eax
mov ecx, 0x53fd10
call fcn.0048f810
cmp byte [esp + 0x14e4], 0
je 0x4be912
mov eax, dword [str.InterfaceConvertProfile]
push eax
push 0x567a40
call fcn.00496840
push 0x567a40
call fcn.00496920
cmp byte [esp + 0x11], 0
je 0x4be928
call fcn.004ad810
mov dword [esp + 0xc818], 0xffffffff
lea ecx, [esp + 0x454]
call fcn.004789a0
mov ecx, dword [esp + 0xc810]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc7f8]
xor ecx, esp
call fcn.004df2c4
mov esp, ebp
pop ebp
ret 4