Function at 0x472e49
Capabilities:
Copy file
Delete file

Disassembly:
mov eax, 0x56ce22
call fcn.00524444
sub esp, 0x614
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x10], esp
cmp dword [edi + 0x498], ebx
mov dword [ebp - 0x14], edi
jne 0x473bec
mov eax, dword [edi + 0x230]
cmp dword [edi + 0x18c], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 1
je 0x472e97
mov dword [ebp - 0x20], 2
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x60]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x64]
mov ecx, dword [0x62ae38]
push ebx
mov dword [ebp - 0x74], eax
call fcn.005555eb
mov ecx, eax
call fcn.00557481
mov esi, eax
mov eax, dword [0x62ae3c]
mov dword [ebp - 0x54], esi
mov ecx, dword [eax + 0x18e0]
mov dword [0x628b50], ecx
mov eax, dword [eax + 0x190c]
mov ecx, esi
mov dword [0x628b4c], eax
call fcn.004bc2db
mov eax, dword [0x62ae3c]
mov ecx, dword [esi + 0x28c]
mov dword [ebp - 0x18], ecx
cmp dword [eax + 0x18e4], ebx
je 0x472f0e
mov eax, dword [eax + 0x18ec]
dec eax
mov dword [0x628b48], eax
jmp 0x472f14
mov dword [0x628b48], ecx
mov eax, dword [esi + 0x2a0]
push ebx
push ebx
mov ecx, edi
lea eax, [eax + eax*2]
shl eax, 4
mov eax, dword [eax + 0x62a9b8]
shr eax, 2
mov dword [0x628b44], eax
call fcn.0046de5a
mov ecx, edi
call fcn.005441e0
lea ecx, [ebp - 0x1d0]
call fcn.0047a08c
lea ecx, [ebp - 0x1d0]
lea eax, [edi + 0x208]
push ecx
push eax
mov dword [ebp - 4], ebx
call fcn.00479ea2
mov eax, dword [ebp - 0xb0]
or eax, dword [ebp - 0xac]
je 0x473bd6
mov ecx, esi
call fcn.004ba36a
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x64]
push eax
mov ecx, esi
mov dword [ebp - 0x78], edx
call fcn.004b7b3c
mov eax, dword [ebp - 0x64]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
cdq
add eax, dword [esi + 0xf0]
push ebx
mov dword [ebp - 0x44], ebx
adc edx, dword [esi + 0xf4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x30], edx
cdq
idiv dword [ebp - 0x20]
push eax
push 0xc9
push dword [esi + 0x1c]
call edi
push ebx
push eax
push 0xbb
push dword [esi + 0x1c]
call edi
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], eax
mov ecx, dword [esi + 0xf0]
mov edi, dword [esi + 0xf4]
cdq
add eax, ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [esi + 0x108]
adc edx, edi
mov edi, dword [esi + 0x10c]
mov dword [ebp - 0x48], edx
mov edx, eax
and edx, edi
cmp edx, 0xffffffff
jne 0x473011
mov eax, dword [ebp - 0x70]
cdq
mov edi, edx
add eax, ecx
adc edi, dword [esi + 0xf4]
mov dword [ebp - 0x6c], eax
jmp 0x473014
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x34], eax
jne 0x473022
cmp dword [ebp - 0x30], edi
je 0x4730fc
cmp dword [ebp - 0x4c], eax
jne 0x473030
cmp dword [ebp - 0x48], edi
je 0x4730fc
mov dword [ebp - 0x2c], 1
call fcn.0055c7c5
mov eax, dword [eax + 4]
push 0xffffffffffffffff
push str.SortDrive
push 0x5c4750
mov ecx, eax
call fcn.004449d0
cmp eax, 0xffffffff
je 0x47305e
push eax
call fcn.00529c54
pop ecx
push str.UESRT
push ebx
call fcn.00529a19
mov edx, dword [ebp - 0x6c]
pop ecx
sub edx, dword [ebp - 0x4c]
pop ecx
push ebx
push ebx
sbb edi, dword [ebp - 0x48]
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push edx
push dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
push dword [ebp - 0x4c]
mov ecx, dword [eax + 0x1c]
add eax, 0x208
push dword [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004ac8fd
test eax, eax
jne 0x4731cd
mov eax, dword [0x61d784]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], eax
push 0x61
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.00545796
push 0x62
lea ecx, [ebp - 0x18]
call fcn.00545796
push 0x30
mov ecx, esi
push dword [ebp - 0x18]
push dword [ebp - 0x24]
call fcn.0054239a
push dword [ebp - 0x1c]
call fcn.0052705c
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.0053eb4f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.0053eb4f
jmp 0x473bdd
cmp dword [ebp - 0x40], ebx
je 0x4731bd
call fcn.0055c7c5
mov eax, dword [eax + 4]
or edi, 0xffffffff
push edi
push str.SortDrive
push 0x5c4750
mov ecx, eax
call fcn.004449d0
cmp eax, edi
je 0x47312d
push eax
call fcn.00529c54
pop ecx
push str.UESRT
push ebx
call fcn.00529a19
pop ecx
mov dword [ebp - 0x1c], eax
pop ecx
mov eax, dword [ebp - 0x14]
push ebx
push ebx
push ebx
push ebx
push ebx
mov ecx, dword [eax + 0x1c]
push ebx
push ebx
push edi
push edi
push ebx
push ebx
push dword [ebp - 0x1c]
add eax, 0x208
push ecx
push eax
mov ecx, esi
call fcn.004ac8fd
test eax, eax
jne 0x4731cd
mov eax, dword [0x61d784]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], eax
push 0x61
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.00545796
push 0x62
lea ecx, [ebp - 0x18]
call fcn.00545796
push 0x30
mov ecx, esi
push dword [ebp - 0x18]
push dword [ebp - 0x24]
call fcn.0054239a
push dword [ebp - 0x1c]
call fcn.0052705c
pop ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.0053eb4f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.0053eb4f
mov dword [ebp - 4], edi
jmp 0x473be1
push str.UESRT
push ebx
call fcn.00529a19
pop ecx
mov dword [ebp - 0x1c], eax
pop ecx
mov eax, dword [0x62ae3c]
xor ecx, ecx
cmp dword [0x628b50], ebx
mov dword [ebp - 0x28], ebx
setne cl
inc ecx
cmp dword [eax + 0x18dc], ebx
je 0x4731f9
cmp dword [0x628b4c], ebx
je 0x4731f6
or ch, 2
jmp 0x4731f9
or ecx, 0x10
cmp dword [0x628b4c], ebx
je 0x473204
or ecx, 4
cmp dword [eax + 0x1910], ebx
je 0x47320f
or ecx, 8
or ecx, 0x60
cmp dword [eax + 0x1918], ebx
mov dword [ebp - 0x3c], ecx
je 0x473223
or ch, 4
mov dword [ebp - 0x3c], ecx
mov ecx, dword [eax + 0x18ec]
cmp ecx, dword [eax + 0x18f0]
jne 0x473235
cmp ecx, ebx
je 0x47323c
mov dword [ebp - 0x28], 1
mov ecx, dword [eax + 0x18f4]
cmp ecx, dword [eax + 0x18f8]
jne 0x47324e
cmp ecx, ebx
je 0x473251
inc dword [ebp - 0x28]
mov ecx, dword [eax + 0x18fc]
cmp ecx, dword [eax + 0x1900]
jne 0x473263
cmp ecx, ebx
je 0x473266
inc dword [ebp - 0x28]
mov ecx, dword [eax + 0x1904]
cmp ecx, dword [eax + 0x1908]
jne 0x473278
cmp ecx, ebx
je 0x47327b
inc dword [ebp - 0x28]
cmp dword [eax + 0x1914], ebx
je 0x47328a
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x30], ebx
lea eax, [eax + eax*2]
shl eax, 2
push eax
call fcn.005444b9
pop ecx
mov dword [ebp - 0x38], eax
mov ecx, dword [0x62ae3c]
xor edi, edi
mov edx, dword [ecx + 0x18ec]
mov eax, dword [ecx + 0x18f0]
cmp edx, eax
jne 0x4732c7
cmp edx, ebx
je 0x473354
cmp eax, 0xffffffff
je 0x4732dc
cmp eax, edx
jge 0x4732dc
mov dword [ecx + 0x18f0], edx
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x18ec]
cmp ecx, ebx
jne 0x4732eb
mov ecx, dword [ebp - 0x18]
jmp 0x4732ec
dec ecx
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [0x628b48], ecx
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x18f0]
cmp ecx, 0xffffffff
jne 0x47330f
mov ecx, 0x4e1f
jmp 0x473310
dec ecx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x3c]
and ecx, 0xf
push 1
mov dword [eax + 8], ecx
mov ecx, dword [0x62ae3c]
pop edx
cmp dword [ecx + 0x18ec], edx
jne 0x473339
cmp dword [ecx + 0x18f0], 0xffffffff
jne 0x473339
mov dword [ebp - 0x24], edx
cmp dword [ecx + 0x1914], ebx
je 0x47334e
mov dword [eax + 4], 0x4e1f
mov ecx, dword [0x62ae3c]
push 1
mov dword [ebp - 0x20], ebx
pop edi
cmp dword [ecx + 0x1914], ebx
jne 0x473542
mov eax, dword [ecx + 0x18f4]
mov edx, dword [ecx + 0x18f8]
cmp eax, edx
jne 0x473378
cmp eax, ebx
je 0x4733f9
cmp edx, 0xffffffff
je 0x473399
cmp edx, eax
jge 0x473399
mov dword [ecx + 0x18f4], edx
mov ecx, dword [0x62ae3c]
mov dword [ecx + 0x18f8], eax
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x18f4]
mov eax, dword [ebp - 0x18]
cmp ecx, ebx
je 0x4733a9
lea eax, [ecx - 1]
mov edx, dword [ebp - 0x38]
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*4]
mov dword [ecx], eax
mov eax, dword [0x62ae3c]
mov eax, dword [eax + 0x18f8]
cmp eax, 0xffffffff
jne 0x4733cb
mov eax, 0x4e1f
jmp 0x4733cc
dec eax
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x3c]
and eax, 0xf
push 1
mov dword [ecx + 8], eax
mov ecx, dword [0x62ae3c]
pop eax
cmp dword [ecx + 0x18f4], eax
jne 0x4733f5
cmp dword [ecx + 0x18f8], 0xffffffff
jne 0x4733f5
mov dword [ebp - 0x24], eax
inc edi
mov dword [ebp - 0x20], ebx
cmp dword [ecx + 0x1914], ebx
jne 0x473542
mov eax, dword [ecx + 0x18fc]
mov edx, dword [ecx + 0x1900]
cmp eax, edx
jne 0x47341d
cmp eax, ebx
je 0x47349e
cmp edx, 0xffffffff
je 0x47343e
cmp edx, eax
jge 0x47343e
mov dword [ecx + 0x18fc], edx
mov ecx, dword [0x62ae3c]
mov dword [ecx + 0x1900], eax
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x18fc]
mov eax, dword [ebp - 0x18]
cmp ecx, ebx
je 0x47344e
lea eax, [ecx - 1]
mov edx, dword [ebp - 0x38]
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*4]
mov dword [ecx], eax
mov eax, dword [0x62ae3c]
mov eax, dword [eax + 0x1900]
cmp eax, 0xffffffff
jne 0x473470
mov eax, 0x4e1f
jmp 0x473471
dec eax
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x3c]
and eax, 0xf
push 1
mov dword [ecx + 8], eax
mov ecx, dword [0x62ae3c]
pop eax
cmp dword [ecx + 0x18fc], eax
jne 0x47349a
cmp dword [ecx + 0x1900], 0xffffffff
jne 0x47349a
mov dword [ebp - 0x24], eax
inc edi
mov dword [ebp - 0x20], ebx
cmp dword [ecx + 0x1914], ebx
jne 0x473542
mov eax, dword [ecx + 0x1904]
mov edx, dword [ecx + 0x1908]
cmp eax, edx
jne 0x4734c2
cmp eax, ebx
je 0x473542
cmp edx, 0xffffffff
je 0x4734e3
cmp edx, eax
jge 0x4734e3
mov dword [ecx + 0x1904], edx
mov ecx, dword [0x62ae3c]
mov dword [ecx + 0x1908], eax
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x1904]
mov eax, dword [ebp - 0x18]
cmp ecx, ebx
je 0x4734f3
lea eax, [ecx - 1]
mov edx, dword [ebp - 0x38]
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*4]
mov dword [ecx], eax
mov eax, dword [0x62ae3c]
mov eax, dword [eax + 0x1908]
cmp eax, 0xffffffff
jne 0x473515
mov eax, 0x4e1f
jmp 0x473516
dec eax
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x3c]
and eax, 0xf
push 1
mov dword [ecx + 8], eax
mov ecx, dword [0x62ae3c]
pop eax
cmp dword [ecx + 0x1904], eax
jne 0x47353f
cmp dword [ecx + 0x1908], 0xffffffff
jne 0x47353f
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
je 0x473570
push dword [ebp - 0x38]
call fcn.005444e2
cmp dword [ebp - 0x1c], ebx
pop ecx
je 0x473bdd
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push dword [ebp - 0x1c]
call fcn.0052705c
pop ecx
jmp 0x473bdd
cmp dword [ecx + 0x193c], ebx
je 0x4735f3
xor eax, eax
cmp dword [ecx + 0x18e0], ebx
je 0x473585
push 4
pop eax
cmp dword [ecx + 0x18dc], ebx
je 0x47358f
or al, 2
cmp dword [ecx + 0x190c], ebx
je 0x473599
or al, 1
cmp dword [ecx + 0x1914], ebx
je 0x4735a3
or al, 0x20
cmp dword [ecx + 0x1910], ebx
je 0x4735ad
or al, 0x40
cmp dword [ecx + 0x1918], ebx
je 0x4735b7
or al, 0x80
push dword [ecx + 0x1908]
push dword [ecx + 0x1904]
push dword [ecx + 0x1900]
push dword [ecx + 0x18fc]
push dword [ecx + 0x18f8]
push dword [ecx + 0x18f4]
push dword [ecx + 0x18f0]
push dword [ecx + 0x18ec]
push eax
call fcn.00484007
mov ecx, dword [0x62ae3c]
cmp dword [ebp - 0x40], ebx
jne 0x473610
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x208]
mov eax, dword [eax + 0x208]
call dword [eax + 0x4c]
mov ecx, dword [0x62ae3c]
cmp dword [ebp - 0xac], ebx
jg 0x473671
jl 0x473623
cmp dword [ebp - 0xb0], 1
jae 0x473671
cmp dword [ebp - 0x2c], ebx
jne 0x473671
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
push ebx
mov byte [ebp - 0x51c], bl
push dword [edx + 0x18c]
lea edi, [eax + 0x158]
mov byte [ebp - 0x1d8], bl
push dword [ecx + 0x18dc]
mov eax, dword [edi]
push eax
call fcn.0047294f
mov eax, dword [ebp - 0x14]
mov edi, dword [edi]
add esp, 0x10
lea ecx, [eax + 0x208]
push ebx
push 0x22
mov eax, dword [ecx]
push edi
call dword [eax + 0x20]
jmp 0x473764
cmp dword [ecx + 0x1914], ebx
je 0x4737a6
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18c], ebx
jne 0x4737a6
call fcn.0055c7c5
mov eax, dword [eax + 4]
push 3
push str.SortDrive
push 0x5c4750
mov ecx, eax
call fcn.004449d0
push eax
call fcn.00529c54
cmp dword [ebp - 0x2c], ebx
pop ecx
jne 0x4736cb
cmp dword [ebp - 0x40], ebx
jne 0x4736cb
mov eax, dword [ebp - 0x14]
push 1
lea ecx, [eax + 0x158]
call fcn.0053ef7f
push eax
jmp 0x4736ce
push dword [ebp - 0x1c]
call fcn.00472e38
mov dword [ebp - 0x20], eax
mov eax, dword [0x628b54]
pop ecx
mov cl, byte [eax + 0x190c]
push ecx
mov cl, byte [eax + 0x18dc]
mov al, byte [eax + 0x18e0]
push ecx
push eax
push dword [0x628b44]
push dword [0x628b48]
push dword [ebp - 0x20]
call fcn.00511b14
mov eax, dword [ebp - 0x14]
add esp, 0x18
lea edi, [eax + 0x158]
push 0xffffffffffffffff
mov ecx, edi
call fcn.0053efce
push dword [ebp - 0x20]
call fcn.005269b9
push dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.00526bb9
push dword [ebp - 0x20]
call fcn.00526b3c
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi]
add esp, 0xc
mov edx, dword [ecx + 0x208]
lea edi, [ecx + 0x208]
push ebx
push 0x22
push eax
mov ecx, edi
call dword [edx + 0x20]
cmp dword [ebp - 0x2c], ebx
jne 0x47376c
mov eax, dword [ebp - 0x30]
mov ecx, edi
cdq
push edx
push eax
call fcn.00479fcc
mov edi, dword [ebp - 0x14]
jmp 0x473968
lea ecx, [ebp - 0x60]
call fcn.0053f16c
push ebx
push 2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 5
call fcn.0053f31e
push dword [ebp - 0x30]
lea ecx, [ebp - 0x60]
call fcn.0053f5ec
lea ecx, [ebp - 0x60]
call fcn.0053f539
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.0053f261
jmp 0x473764
cmp dword [ebp - 0x2c], ebx
mov byte [ebp - 0x51c], 1
mov byte [ebp - 0x1d8], 1
jne 0x4737d1
cmp dword [ebp - 0x40], ebx
jne 0x4737d1
mov eax, dword [ebp - 0x14]
push 1
lea ecx, [eax + 0x158]
call fcn.0053ef7f
push eax
jmp 0x4737d4
push dword [ebp - 0x1c]
lea eax, [ebp - 0x2dc]
push eax
call fcn.005254b0
pop ecx
pop ecx
push str.UESRTD
push ebx
call fcn.00529a19
mov dword [ebp - 0x44], eax
push eax
lea eax, [ebp - 0x620]
push eax
call fcn.005254b0
add esp, 0x10
cmp dword [ebp - 0x24], ebx
je 0x473850
mov eax, dword [0x62ae3c]
cmp dword [eax + 0x1910], ebx
jne 0x473850
mov ecx, dword [ebp - 0x14]
push ebx
lea eax, [ebp - 0x620]
push ebx
push eax
lea eax, [ebp - 0x2dc]
push eax
xor eax, eax
cmp dword [ecx + 0x18c], ebx
setne al
push eax
push dword [ebp - 0x3c]
call fcn.005124e8
add esp, 0x18
cmp eax, ebx
je 0x4738e1
mov dword [ebp - 0x30], 1
jmp 0x4738e1
mov eax, dword [ebp - 0x3c]
push 0x43
and eax, 0xfff0
pop ecx
mov dword [ebp - 0x514], eax
mov eax, dword [0x628b44]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x28]
lea esi, [ebp - 0x2dc]
lea edi, [ebp - 0x504]
mov dword [ebp - 0x508], eax
push 0x43
rep movsd dword es:[edi], dword [esi]
pop ecx
lea esi, [ebp - 0x620]
lea edi, [ebp - 0x3f8]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x14]
mov word [ebp - 0x2e8], 9
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x2e0], ebx
cmp dword [ecx + 0x18c], ebx
setne al
mov dword [ebp - 0x2ec], eax
lea eax, [ebp - 0x514]
push eax
call fcn.00511d1c
cmp eax, ebx
pop ecx
je 0x4738e6
mov esi, dword [ebp - 0x54]
mov dword [ebp - 0x30], 1
mov edi, dword [ebp - 0x14]
jmp 0x4738ec
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x54]
lea ecx, [edi + 0x158]
push 0xffffffffffffffff
call fcn.0053efce
cmp dword [ebp - 0x2c], ebx
jne 0x47394a
cmp dword [ebp - 0x40], ebx
jne 0x473968
cmp dword [ebp - 0x30], ebx
jne 0x47394f
mov eax, dword [edi + 0x158]
push ebx
push eax
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x47394f
push 0x5c4d54
lea ecx, [ebp - 0x54]
call fcn.0053ebbd
mov eax, dword [eax]
push 0x30
push 0x5c4d30
push eax
mov ecx, esi
mov byte [ebp - 4], 6
call fcn.0054239a
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], bl
call fcn.0053eb4f
cmp dword [ebp - 0x40], ebx
jne 0x473968
mov eax, dword [edi + 0x158]
mov edx, dword [edi + 0x208]
lea ecx, [edi + 0x208]
push ebx
push 0x22
push eax
call dword [edx + 0x20]
push ebx
push ebx
push ebx
lea ecx, [edi + 0x208]
call fcn.00479f84
lea eax, [edi + 0x248]
push eax
lea eax, [edi + 0x208]
push eax
call fcn.00479ea2
push dword [ebp - 0x38]
call fcn.005444e2
cmp dword [ebp - 0x2c], ebx
pop ecx
jne 0x4739db
cmp dword [ebp - 0x40], ebx
je 0x473ac2
mov eax, dword [edi + 0x368]
mov dword [ebp - 0x54], ebx
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x30], eax
call fcn.00479de5
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 7
call fcn.005459d2
mov eax, dword [0x62ae3c]
push ebx
mov byte [ebp - 4], 9
push ebx
cmp dword [eax + 0x1914], ebx
je 0x4739e6
push dword [ebp - 0x1c]
jmp 0x4739e9
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x6c]
jmp 0x4739a9
push dword [ebp - 0x44]
lea ecx, [ebp - 0xa8]
call fcn.0053f31e
cmp eax, ebx
je 0x473a58
mov eax, dword [ebp - 0x54]
push ebx
cdq
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x30]
push ebx
mov dword [ebp - 0x54], edx
push ebx
push 1
cdq
push ebx
push ebx
push edx
push eax
push dword [ebp - 0x54]
mov ecx, esi
push dword [ebp - 0x58]
call fcn.004b8343
and eax, edx
cmp eax, 0xffffffff
je 0x473aa8
push ebx
push ebx
push ebx
lea ecx, [ebp - 0xa8]
call fcn.00479f84
push 1
lea eax, [ebp - 0xa8]
push dword [ebp - 0x54]
mov ecx, esi
push dword [ebp - 0x58]
push eax
call fcn.004bbc26
lea ecx, [ebp - 0xa8]
call fcn.0047a07c
jmp 0x473aa8
mov eax, dword [0x61d784]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], eax
push 0xfc
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call fcn.00545796
push 0xfe
lea ecx, [ebp - 0x30]
call fcn.00545796
push 0x30
mov ecx, esi
push dword [ebp - 0x18]
push dword [ebp - 0x30]
call fcn.0054239a
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.0053eb4f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.0053eb4f
mov dword [ebp - 4], 7
call fcn.00545a10
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], bl
call fcn.00479e1c
push 0xffffffffffffffff
push ebx
push ebx
mov ecx, edi
call fcn.0050ddcb
cmp dword [ebp - 0x1c], ebx
je 0x473ae4
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push dword [ebp - 0x1c]
call fcn.0052705c
pop ecx
cmp dword [ebp - 0x44], ebx
je 0x473afb
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push dword [ebp - 0x44]
call fcn.0052705c
pop ecx
mov eax, dword [ebp - 0x74]
mov ecx, dword [edi + 0x254]
add eax, 0x2c4
push eax
mov dword [eax], ecx
push dword [edi + 0x36c]
mov ecx, dword [0x62ae3c]
push dword [edi + 0x368]
call fcn.00480669
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x60]
cmp eax, ebx
mov dword [ebp - 0x50], eax
je 0x473bb5
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x50]
push edx
mov eax, dword [ecx]
call dword [eax + 0x64]
mov edi, eax
cmp edi, ebx
je 0x473bad
cmp dword [ebp - 0x2c], ebx
je 0x473b50
cmp edi, esi
je 0x473bad
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
push str.CMyEditView
push dword [eax]
call fcn.00526f30
pop ecx
test eax, eax
pop ecx
jne 0x473bad
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [edi + 0x1c]
call fcn.00463bb0
mov dword [edi + 0x220], ebx
mov dword [edi + 0x228], ebx
mov dword [edi + 0x218], ebx
mov ecx, edi
mov dword [edi + 0x224], ebx
mov dword [edi + 0x22c], ebx
mov dword [edi + 0x21c], ebx
mov dword [edi + 0x238], 1
call fcn.004afb02
cmp dword [ebp - 0x50], ebx
jne 0x473b35
mov edi, dword [ebp - 0x14]
cmp dword [ebp - 0x2c], ebx
je 0x473bcd
push dword [ebp - 0x78]
mov ecx, esi
push dword [ebp - 0x7c]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
call fcn.004b9c25
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 0x5c]
mov ecx, edi
call fcn.005441f5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.0047a0bf
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret