Function at 0x4762a4
Capabilities:
Copy file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 9
add esp, 0xfffff004
push eax
dec eax
jne 0x4762ad
mov eax, dword [ebp - 4]
add esp, 0xfffffe2c
push ebx
push esi
push edi
mov esi, str.report.
lea edi, [ebp - 0x5d90]
mov eax, 0x4a98dc
call fcn.00495388
push 0x414
push 0
lea edx, [ebp - 0x38c0]
push edx
call fcn.00494dd8
add esp, 0xc
cmp dword [0x4c4de0], 0
je 0x47630e
lea edx, [ebp - 0x38c0]
mov eax, 0x4c319c
xor ecx, ecx
call fcn.00462710
jmp 0x476413
mov word [ebp - 0x347c], 8
lea eax, [ebp - 0xf8]
call fcn.0040f5f8
add dword [ebp - 0x3470], 4
mov word [ebp - 0x347c], 0x14
lea edx, [ebp - 0xf8]
mov eax, 0x4c2454
xor ecx, ecx
call fcn.00469058
cmp dword [ebp - 0xc8], 0
jne 0x476399
push 0x30
mov eax, 0x65
call fcn.0041202c
push eax
mov eax, 0x14c
call fcn.0041202c
push eax
push dword [0x4c2440]
call sub.USER32.DLL_MessageBoxA
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0040f6d0
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
jmp 0x477324
cmp dword [ebp - 0xc8], 1
jne 0x4763c0
push 0x400
push 0
lea edx, [ebp - 0x38c0]
lea eax, [ebp - 0xf8]
xor ecx, ecx
call fcn.0040f868
test al, al
jne 0x4763f3
lea eax, [ebp - 0x3cc0]
push eax
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea eax, [ebp - 0x3cc0]
call fcn.0040ba60
cmp byte [eax], 0
jne 0x4763e3
mov eax, esi
push eax
lea edx, [ebp - 0x38c0]
push edx
call fcn.00494f58
add esp, 8
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0040f6d0
mov word [ebp - 0x347c], 0
cmp dword [0x4c4de0], 0
je 0x476421
lea ebx, [esi + 8]
jmp 0x476424
lea ebx, [esi + 0x1c]
lea edx, [esi + 0x31]
mov ecx, 1
mov eax, ebx
call fcn.0046c37c
test eax, eax
setne al
and eax, 1
mov byte [ebp - 0x34be], al
cmp byte [ebp - 0x34be], 0
je 0x47644f
lea edx, [esi + 0x36]
jmp 0x476452
lea edx, [esi + 0x3a]
lea eax, [ebp - 0x38c0]
call fcn.0040bd90
xor ebx, ebx
jmp 0x4764bd
lea eax, [ebp - 0x38c0]
xor edx, edx
call fcn.0040bd90
lea eax, [ebp - 0x38c0]
xor edx, edx
call fcn.0040bd90
push ebx
lea ecx, [esi + 0x3e]
push ecx
lea eax, [ebp - 0x3498]
push eax
call fcn.00497eb8
add esp, 0xc
lea edx, [ebp - 0x3498]
lea eax, [ebp - 0x38c0]
call fcn.0040bd90
cmp byte [ebp - 0x34be], 0
je 0x4764ae
lea edx, [esi + 0x36]
jmp 0x4764b1
lea edx, [esi + 0x3a]
lea eax, [ebp - 0x38c0]
call fcn.0040bd90
inc ebx
cmp ebx, 0x3e8
jge 0x4764d6
lea eax, [ebp - 0x38c0]
xor edx, edx
call fcn.0040a504
test al, al
jne 0x476461
lea ecx, [ebp - 0x38c0]
lea eax, [esi + 0x42]
push ecx
push 0x47732c
push dword [0x4c2440]
push eax
push dword [0x4af754]
call sub.USER32.DLL_DialogBoxParamA
test eax, eax
jne 0x47650d
mov edx, dword [ebp - 0x348c]
mov dword fs:[0], edx
jmp 0x477324
lea edx, [ebp - 0x40c0]
lea eax, [esi + 0x49]
call fcn.0046e83c
test al, al
jne 0x476531
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
jmp 0x477324
lea eax, [ebp - 0x40c0]
call fcn.0040bf64
lea eax, [ebp - 0x38c0]
call fcn.0040ba60
cmp byte [eax], 0
jne 0x47655d
cmp byte [ebp - 0x34be], 0
je 0x47655a
lea eax, [esi + 0x56]
jmp 0x47655d
lea eax, [esi + 0x61]
push eax
lea edx, [ebp - 0x40c0]
push edx
call fcn.00494e7c
add esp, 8
lea ecx, [esi + 0x6c]
push ecx
lea eax, [ebp - 0x40c0]
push eax
call fcn.00496e90
add esp, 8
mov ebx, eax
test ebx, ebx
jne 0x4765a8
lea edx, [ebp - 0x40c0]
mov eax, 0x4af120
call fcn.0042ce6c
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
jmp 0x477324
push 0
lea edx, [esi + 7]
xor ecx, ecx
mov eax, 0xa
call fcn.0047cd94
mov byte [ebp - 0x3499], al
mov eax, 0x556
call fcn.0041202c
call fcn.0047ea94
mov byte [ebp - 0x349a], 1
push 0x1c
push 0
lea edx, [ebp - 0x40dc]
push edx
call fcn.00494dd8
add esp, 0xc
cmp dword [0x4c4de0], 0
jne 0x4765fe
cmp byte [ebp - 0x34b6], 0
je 0x4765fe
xor ecx, ecx
jmp 0x476603
mov ecx, 1
mov byte [ebp - 0x40c4], cl
mov word [ebp - 0x347c], 0x20
lea eax, [ebp - 0x208]
call fcn.0046b718
add dword [ebp - 0x3470], 6
mov word [ebp - 0x347c], 0x2c
mov word [ebp - 0x347c], 0x38
lea eax, [ebp - 0x318]
call fcn.0046b718
add dword [ebp - 0x3470], 6
mov word [ebp - 0x347c], 0x2c
cmp dword [0x4c4de0], 0
je 0x4766a0
lea ecx, [ebp - 0x4cdc]
lea edx, [ebp - 0x44dc]
mov eax, 0x4c319c
call fcn.00462710
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x40dc]
push edx
push ecx
lea ecx, [ebp - 0x208]
lea edx, [ebp - 0x4cdc]
lea eax, [ebp - 0x44dc]
call fcn.004779c0
mov byte [ebp - 0x349a], al
jmp 0x4769db
mov word [ebp - 0x347c], 0x44
lea eax, [ebp - 0x410]
call fcn.0040f5f8
add dword [ebp - 0x3470], 4
mov word [ebp - 0x347c], 0x50
lea edx, [ebp - 0x410]
mov eax, 0x4c2454
xor ecx, ecx
call fcn.00469058
mov word [ebp - 0x347c], 0x5c
push 0
push 1
lea edx, [ebp - 0x410]
lea eax, [ebp - 0x283c]
mov ecx, 2
call fcn.00412cdc
inc dword [ebp - 0x3470]
mov word [ebp - 0x347c], 0x50
lea eax, [edi + 0xc14]
call fcn.004137a4
lea eax, [edi + 0xc40]
call fcn.004137a4
lea eax, [edi + 0xc6c]
call fcn.004137a4
jmp 0x476990
call fcn.0044844c
cmp byte [ebp - 0x34b6], 0
je 0x47692e
push 0xc30
push 0
lea edx, [ebp - 0x69c0]
push edx
call fcn.00494dd8
add esp, 0xc
push edi
lea ecx, [ebp - 0x69c0]
push ecx
call fcn.00494f58
add esp, 8
lea edx, [edi + 0x400]
lea eax, [ebp - 0x65c0]
call fcn.0041023c
mov eax, dword [edi + 0xc00]
mov edx, dword [edi + 0xc04]
mov dword [ebp - 0x5db8], eax
mov dword [ebp - 0x5db4], edx
mov dword [ebp - 0x5dc0], eax
mov dword [ebp - 0x5dbc], edx
cmp byte [ebp - 0x34b2], 0
je 0x476807
test byte [edi + 0xc09], 8
je 0x476807
call fcn.0040ffc8
test eax, eax
je 0x476807
lea ecx, [ebp - 0x34a4]
push ecx
push edi
call sub.KERNEL32.DLL_GetCompressedFileSizeA
mov dword [ebp - 0x34a0], eax
cmp dword [ebp - 0x34a0], 0xffffffff
jne 0x4767db
call sub.KERNEL32.DLL_GetLastError
test eax, eax
jne 0x476807
mov eax, dword [ebp - 0x34a4]
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [ebp - 0x34a0]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0x5db8], eax
mov dword [ebp - 0x5db4], edx
mov ecx, dword [edi + 0xc08]
mov dword [ebp - 0x5db0], ecx
mov eax, dword [edi + 0x10a8]
mov dword [ebp - 0x5dac], eax
mov eax, dword [edi + 0x10ac]
mov dword [ebp - 0x5da8], eax
mov edx, dword [ebp - 0x40c8]
inc dword [ebp - 0x40c8]
mov dword [ebp - 0x5d9c], edx
inc dword [ebp - 0x40dc]
mov eax, dword [ebp - 0x5dc0]
mov edx, dword [ebp - 0x5dbc]
add dword [ebp - 0x40d8], eax
adc dword [ebp - 0x40d4], edx
mov eax, dword [ebp - 0x5db8]
mov edx, dword [ebp - 0x5db4]
add dword [ebp - 0x40d0], eax
adc dword [ebp - 0x40cc], edx
cmp byte [ebp - 0x34b0], 0
je 0x47690b
mov eax, dword [ebp - 0x5db0]
call fcn.0040a67c
test al, al
jne 0x47690b
mov word [ebp - 0x347c], 0x68
lea eax, [ebp - 0x345c]
call fcn.00409448
inc dword [ebp - 0x3470]
mov word [ebp - 0x347c], 0x74
push 0
push 0
lea ecx, [edi + 0x400]
mov edx, edi
lea eax, [ebp - 0x345c]
call fcn.00409540
test al, al
je 0x4768ec
push 0x80000000
push 0
lea eax, [ebp - 0x345c]
call fcn.0040aae8
mov dword [ebp - 0x5da0], eax
or dword [ebp - 0x5da4], 8
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x345c]
mov edx, 2
call fcn.004094f8
mov word [ebp - 0x347c], 0x50
lea edx, [ebp - 0x69c0]
lea eax, [ebp - 0x208]
call fcn.0046b858
cmp byte [ebp - 0xfc], 0
je 0x47692e
mov byte [ebp - 0x349a], 0
jmp 0x4769a5
cmp dword [0x4c4df0], 0
jne 0x476987
cmp byte [ebp - 0x34b7], 0
je 0x476990
cmp byte [edi + 0xc10], 0
jne 0x476990
push 0
push 2
lea ecx, [edi + 0x400]
mov edx, edi
mov eax, 0x4c319c
call fcn.00461128
dec eax
jne 0x476990
lea ecx, [ebp - 0x318]
lea eax, [ebp - 0x40dc]
push ecx
push eax
mov eax, edi
lea ecx, [ebp - 0x208]
lea edx, [edi + 0x400]
call fcn.004779c0
test al, al
jne 0x476990
mov byte [ebp - 0x349a], 0
jmp 0x4769a5
mov edx, edi
lea eax, [ebp - 0x283c]
call fcn.00412e10
test eax, eax
je 0x47672e
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x283c]
mov edx, 2
call fcn.00412db4
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0x410]
mov edx, 2
call fcn.0040f6d0
mov word [ebp - 0x347c], 0x2c
cmp byte [ebp - 0x349a], 0
je 0x477294
lea eax, [ebp - 0x208]
call fcn.0046bb0c
lea eax, [ebp - 0x318]
call fcn.0046bb0c
cmp dword [ebp - 0x34bc], 6
je 0x476a36
push 0x47616c
push 0x38
push dword [ebp - 0x104]
lea edx, [ebp - 0x38c0]
lea eax, [ebp - 0x208]
mov dword [0x4d0dc8], edx
xor edx, edx
call fcn.0046bbfc
push eax
call fcn.0049bd28
add esp, 0x10
cmp byte [ebp - 0x34be], 0
je 0x476ae0
lea eax, [ebp - 0x6e84]
call fcn.004137a4
mov word [ebp - 0x347c], 0x2c
lea eax, [ebp - 0x6e84]
call fcn.00413c58
push esi
lea esi, [ebp - 0x6e84]
lea edi, [ebp - 0x6ea8]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop esi
push dword [ebp - 0x6e98]
push dword [ebp - 0x6e9c]
push dword [ebp - 0x6ea0]
push dword [ebp - 0x6ea4]
push dword [ebp - 0x6ea8]
lea eax, [esi + 0x70]
push eax
lea edx, [ebp - 0x6e58]
push edx
call fcn.00497eb8
add esp, 0x1c
lea ecx, [ebp - 0x6e58]
push ecx
mov eax, 0x55b
call fcn.0041202c
push eax
lea edx, [ebp - 0x6e24]
push edx
call fcn.00497eb8
add esp, 0xc
lea ecx, [ebp - 0x6e24]
push ecx
lea eax, [esi + 0x87]
push eax
push ebx
call fcn.00496ec4
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x34a8], edx
mov word [ebp - 0x347c], 0x2c
xor edi, edi
jmp 0x476dd0
mov byte [ebp - 0x76a8], 0
lea ecx, [ebp - 0x82d8]
lea eax, [ebp - 0x208]
mov edx, edi
call fcn.0046ba40
mov word [ebp - 0x347c], 0x2c
cmp byte [ebp - 0x34b5], 0
je 0x476bea
mov eax, dword [ebp - 0x76ac]
cmp eax, dword [ebp - 0x34a8]
je 0x476bea
mov edx, dword [ebp - 0x76ac]
mov dword [ebp - 0x34a8], edx
cmp byte [ebp - 0x34be], 0
je 0x476b5f
lea ecx, [esi + 0xc3]
push ecx
push ebx
call fcn.00496ec4
add esp, 8
lea eax, [esi + 0xc7]
push eax
push ebx
call fcn.00496ec4
add esp, 8
cmp dword [ebp - 0x76ac], 0
je 0x476bad
lea ecx, [ebp - 0x8f08]
mov edx, dword [ebp - 0x76ac]
dec edx
lea eax, [ebp - 0x318]
call fcn.0046ba40
lea edx, [ebp - 0x8f08]
mov eax, 0x28a
push edx
call fcn.0041202c
push eax
push ebx
call fcn.00496ec4
add esp, 0xc
jmp 0x476bc1
mov eax, 0x558
call fcn.0041202c
push eax
push ebx
call fcn.00496ec4
add esp, 8
cmp byte [ebp - 0x34be], 0
je 0x476bda
lea edx, [esi + 0xcb]
push edx
push ebx
call fcn.00496ec4
add esp, 8
lea ecx, [esi + 0xc0]
push ecx
push ebx
call fcn.00496ec4
add esp, 8
mov eax, dword [ebp - 0x76c8]
call fcn.0040a67c
mov byte [ebp - 0x34a9], al
cmp byte [ebp - 0x34b1], 0
je 0x476c7a
lea eax, [ebp - 0x8f34]
call fcn.004137a4
lea edx, [ebp - 0x76c4]
lea eax, [ebp - 0x8f34]
call fcn.004137cc
push esi
push edi
lea esi, [ebp - 0x8f34]
lea edi, [ebp - 0x8f58]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push dword [ebp - 0x8f48]
push dword [ebp - 0x8f4c]
push dword [ebp - 0x8f50]
push dword [ebp - 0x8f54]
push dword [ebp - 0x8f58]
lea eax, [esi + 0xd0]
push eax
lea edx, [ebp - 0x76a8]
push edx
call fcn.00494f88
pop ecx
lea ecx, [ebp - 0x76a8]
add eax, ecx
push eax
call fcn.00497eb8
add esp, 0x1c
cmp byte [ebp - 0x34b3], 0
je 0x476cdb
push dword [ebp - 0x76d4]
push dword [ebp - 0x76d8]
lea eax, [ebp - 0x8f78]
call fcn.0040b974
cmp byte [ebp - 0x34a9], 0
je 0x476caf
mov eax, 0x573
call fcn.0041202c
jmp 0x476cb5
lea eax, [ebp - 0x8f78]
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x76a8]
push ecx
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x76a8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
cmp byte [ebp - 0x34b2], 0
je 0x476d3c
push dword [ebp - 0x76cc]
push dword [ebp - 0x76d0]
lea eax, [ebp - 0x8f98]
call fcn.0040b974
cmp byte [ebp - 0x34a9], 0
je 0x476d10
mov eax, 0x573
call fcn.0041202c
jmp 0x476d16
lea eax, [ebp - 0x8f98]
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x76a8]
push ecx
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x76a8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
cmp byte [ebp - 0x34b0], 0
je 0x476da2
test byte [ebp - 0x76bc], 8
je 0x476d7b
push dword [ebp - 0x76b8]
lea eax, [esi + 0xf0]
push eax
lea ecx, [ebp - 0x76a8]
push ecx
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x76a8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
jmp 0x476da2
cmp byte [ebp - 0x34a9], 0
je 0x476d8c
lea eax, [esi + 0xf7]
jmp 0x476d92
lea eax, [esi + 0x102]
push eax
lea edx, [ebp - 0x76a8]
push edx
call fcn.00494e7c
add esp, 8
lea ecx, [ebp - 0x82d8]
push ecx
lea eax, [ebp - 0x76a8]
push eax
call fcn.00494e7c
add esp, 8
lea edx, [ebp - 0x76a8]
push edx
lea ecx, [esi + 0x10d]
push ecx
push ebx
call fcn.00496ec4
add esp, 0xc
inc edi
cmp edi, dword [ebp - 0x104]
jb 0x476af8
cmp byte [ebp - 0x34b4], 0
je 0x4770a2
push dword [ebp - 0x40d4]
push dword [ebp - 0x40d8]
lea eax, [ebp - 0x8fb8]
call fcn.0040b974
push dword [ebp - 0x40cc]
push dword [ebp - 0x40d0]
lea eax, [ebp - 0x8fd8]
call fcn.0040b974
cmp byte [ebp - 0x34be], 0
je 0x476e30
lea edx, [esi + 0xc3]
push edx
push ebx
call fcn.00496ec4
add esp, 8
lea ecx, [esi + 0x112]
push ecx
push ebx
call fcn.00496ec4
add esp, 8
xor eax, eax
mov byte [ebp - 0x91d8], al
mov byte [ebp - 0x90d8], al
cmp byte [ebp - 0x34b1], 0
je 0x476eb0
mov eax, 0x1aa
call fcn.0041202c
push eax
lea edx, [esi + 0x116]
push edx
lea ecx, [ebp - 0x90d8]
push ecx
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x90d8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
lea eax, [esi + 7]
push eax
lea ecx, [esi + 0x116]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
cmp byte [ebp - 0x34b3], 0
je 0x476f15
mov eax, 0x6f
call fcn.0041202c
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x90d8]
push ecx
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x90d8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
lea eax, [ebp - 0x8fb8]
push eax
lea ecx, [esi + 0xe9]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
cmp byte [ebp - 0x34b2], 0
je 0x476f7a
mov eax, 0x71
call fcn.0041202c
push eax
lea edx, [esi + 0xe9]
push edx
lea ecx, [ebp - 0x90d8]
push ecx
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x90d8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
lea eax, [ebp - 0x8fd8]
push eax
lea ecx, [esi + 0xe9]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
cmp byte [ebp - 0x34b0], 0
je 0x476faf
lea ecx, [esi + 0x120]
push ecx
lea eax, [ebp - 0x90d8]
push eax
call fcn.00494e7c
add esp, 8
lea edx, [esi + 0x120]
push edx
lea ecx, [ebp - 0x91d8]
push ecx
call fcn.00494e7c
add esp, 8
cmp byte [ebp - 0x90d8], 0
jne 0x476fe4
lea eax, [esi + 0x12b]
push eax
lea edx, [ebp - 0x90d8]
push edx
call fcn.00494f58
add esp, 8
lea ecx, [esi + 0x12b]
push ecx
lea eax, [ebp - 0x91d8]
push eax
call fcn.00494f58
add esp, 8
mov eax, 0x559
call fcn.0041202c
push eax
lea edx, [ebp - 0x90d8]
push edx
call fcn.00494e7c
add esp, 8
lea ecx, [esi + 0x12e]
lea eax, [ebp - 0x91d8]
push dword [ebp - 0x40dc]
push ecx
push eax
call fcn.00494f88
pop ecx
lea edx, [ebp - 0x91d8]
add eax, edx
push eax
call fcn.00497eb8
add esp, 0xc
xor ecx, ecx
mov cl, byte [ebp - 0x90d8]
cmp ecx, 0x20
jne 0x47704a
xor eax, eax
mov al, byte [ebp - 0x90d7]
cmp eax, 0x20
jne 0x47704a
mov byte [ebp - 0x90d8], 0x23
xor edx, edx
mov dl, byte [ebp - 0x91d8]
cmp edx, 0x20
jne 0x47706b
xor ecx, ecx
mov cl, byte [ebp - 0x91d7]
cmp ecx, 0x20
jne 0x47706b
mov byte [ebp - 0x91d8], 0x23
lea eax, [ebp - 0x91d8]
push eax
lea edx, [ebp - 0x90d8]
push edx
lea ecx, [esi + 0x131]
push ecx
push ebx
call fcn.00496ec4
add esp, 0x10
cmp byte [ebp - 0x34be], 0
je 0x4770a2
lea eax, [esi + 0xcb]
push eax
push ebx
call fcn.00496ec4
add esp, 8
cmp byte [ebp - 0x34be], 0
je 0x4770bb
lea edx, [esi + 0x13a]
push edx
push ebx
call fcn.00496ec4
add esp, 8
cmp byte [ebp - 0x34bf], 0
je 0x477208
push ebx
call fcn.00496a3c
pop ecx
xor ecx, ecx
mov cl, byte [ebx + 0x16]
push ecx
call fcn.00496c08
pop ecx
mov esi, eax
cmp esi, 0xffffffff
je 0x477208
mov word [ebp - 0x347c], 0x80
mov word [ebp - 0x347c], 0x8c
lea edx, [esi + 1]
lea eax, [ebp - 0x3468]
call fcn.00401c08
inc dword [ebp - 0x3470]
mov word [ebp - 0x347c], 0x98
push 0
push 0
push ebx
call fcn.004971a8
add esp, 0xc
push ebx
push esi
push 1
push dword [ebp - 0x3468]
call fcn.00497108
add esp, 0x10
mov eax, dword [ebp - 0x3468]
mov byte [eax + esi], 0
call fcn.00448540
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x3468]
mov edx, 2
call fcn.00401c80
mov word [ebp - 0x347c], 0x80
mov word [ebp - 0x347c], 0x2c
jmp 0x477208
push ebx
call fcn.00496994
cmp byte [ebp - 0x38c0], 0
pop ecx
je 0x477241
push 0
lea edx, [ebp - 0x38c0]
push edx
lea ecx, [ebp - 0x40c0]
push ecx
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
jne 0x477241
lea edx, [ebp - 0x38c0]
mov eax, 0x4af120
call fcn.0042ce6c
cmp byte [ebp - 0x34c0], 0
je 0x477257
lea eax, [ebp - 0x40c0]
xor edx, edx
call fcn.00474cc4
cmp byte [ebp - 0x34c0], 0
jne 0x47726b
lea eax, [ebp - 0x40c0]
call fcn.00448488
cmp dword [0x4c4de0], 0
jne 0x477294
cmp byte [ebp - 0x38c0], 0
je 0x477294
lea eax, [ebp - 0x38c0]
call fcn.0040ba60
mov edx, eax
mov eax, 0x4c2454
call fcn.00463974
dec dword [ebp - 0x3470]
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.0043ccb8
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0x318]
mov edx, 2
call fcn.0040f6d0
dec dword [ebp - 0x3470]
dec dword [ebp - 0x3470]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0043ccb8
sub dword [ebp - 0x3470], 4
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0040f6d0
mov word [ebp - 0x347c], 0
cmp byte [ebp - 0x3499], 0
je 0x477317
push dword [0x4c244c]
call sub.USER32.DLL_DestroyWindow
mov ecx, dword [ebp - 0x348c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret