Function at 0x4d6cc0
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x12a1c]
mov eax, 0x12a1c
call fcn.004f8350
push 0xffffffffffffffff
push 0x515ff1
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x544354]
xor eax, ebp
mov dword [ebp + 0x12a18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x12a24]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push dword [0x544144]
push 0x529cc8
push 0xc8
push 0x5af8a0
call fcn.00402720
add esp, 0x14
lea ecx, [ebp + 0x6234]
call fcn.0043dd00
mov dword [ebp - 4], 1
cmp byte [0x54ba54], 0
mov byte [ebp + 0x726c], 0
je 0x4d6e20
push 0x800
lea eax, [ebp + 0x8918]
mov ecx, 0x56e128
push eax
call fcn.00405080
push 0x10f8
lea eax, [ebp + 0x40f4]
push 0
push eax
call fcn.004fa860
add esp, 0xc
lea eax, [ebp + 0x8918]
push 0x800
push eax
lea eax, [ebp + 0x40f4]
push eax
call fcn.004947d0
push 0
lea eax, [ebp + 0x51ec]
mov dword [ebp + 0x61fc], 0
push eax
lea eax, [ebp + 0x8918]
mov dword [ebp + 0x6200], 0
push eax
mov dword [ebp + 0x6204], 0
mov dword [ebp + 0x6208], 0
mov dword [ebp + 0x620c], 0
mov dword [ebp + 0x6210], 0
call fcn.0046e3d0
test al, al
je 0x4d6dfe
mov eax, dword [ebp + 0x61ec]
mov dword [ebp + 0x5174], eax
mov eax, dword [ebp + 0x61f0]
mov dword [ebp + 0x5178], eax
lea eax, [ebp + 0x40f4]
push eax
lea ecx, [ebp + 0x6234]
call fcn.0043e360
lea ecx, [ebp + 0x6234]
call fcn.00415370
jmp 0x4d6f01
lea ecx, [ebp + 0x78b8]
call fcn.00494820
mov byte [ebp - 4], 2
lea esi, [ebp + 0x78b8]
test edi, edi
je 0x4d6e3d
mov esi, edi
jmp 0x4d6e50
push 1
lea eax, [ebp + 0x78b8]
mov ecx, 0x570db0
push eax
call fcn.00440ec0
push 0
push 0
push 3
lea eax, [ebp + 0x6234]
push eax
push 3
push esi
call fcn.004a9e20
test al, al
jne 0x4d6ea2
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 0x78b8]
test ecx, ecx
je 0x4d6e9d
cmp byte [ebp + 0x78c8], al
je 0x4d6e94
mov eax, dword [ebp + 0x78c0]
add eax, eax
push eax
push ecx
call fcn.00491e00
mov ecx, dword [ebp + 0x78b8]
push ecx
call fcn.004fe8b9
add esp, 4
jmp 0x4d7ffc
xor esi, esi
cmp dword [ebp + 0x6238], esi
jbe 0x4d6ecc
lea esp, [esp]
push esi
lea ecx, [ebp + 0x6234]
call fcn.0043e250
inc esi
mov dword [eax + 4], 0
cmp esi, dword [ebp + 0x6238]
jb 0x4d6eb0
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 0x78b8]
test ecx, ecx
je 0x4d6f01
cmp byte [ebp + 0x78c8], 0
je 0x4d6ef8
mov eax, dword [ebp + 0x78c0]
add eax, eax
push eax
push ecx
call fcn.00491e00
mov ecx, dword [ebp + 0x78b8]
push ecx
call fcn.004fe8b9
add esp, 4
push 0x5af8a0
push dword [0x544144]
call fcn.004a50b0
push dword [0x54b9c8]
xor ebx, ebx
mov dword [ebp - 0x20], ebx
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
mov dword [ebp - 0x18], ebx
lea ecx, [ebp + 0x6234]
push ecx
sbb eax, eax
and eax, dword [0x54b9c8]
push 0x4d8040
push eax
push str.CONVERTARC
push dword [0x57f310]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4d7fcf
push ebx
push 0x528ce8
push 0x5af8a0
call fcn.004a5d50
test eax, eax
jne 0x4d6f7f
cmp dword [0x54bacc], 1
jne 0x4d6f7a
cmp byte [0x5619cb], bl
jne 0x4d6f7f
mov byte [ebp - 0x14], bl
jmp 0x4d6f83
mov byte [ebp - 0x14], 1
push 0
push dword [ebp - 0x14]
push 0
push 0xa
call fcn.004cee40
push 0x800
lea eax, [ebp + 0xa918]
push eax
call fcn.004cd210
lea ecx, [ebp + 0x7374]
call fcn.004919e0
mov byte [ebp - 4], 6
cmp byte [0x54ba54], 0
je 0x4d6fce
mov ecx, 0x40
lea edi, [ebp + 0x7374]
mov esi, 0x56e46a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ebx, ebx
mov dword [ebp - 0x34], 0
xor esi, esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [0x54cb20], 0
mov dword [0x54cb24], 0
mov dword [ebp - 0x40], ebx
cmp dword [ebp + 0x6238], ebx
jbe 0x4d7041
lea ecx, [ecx]
push esi
lea ecx, [ebp + 0x6234]
call fcn.0043e250
test byte [eax + 4], 2
je 0x4d7035
mov ecx, dword [eax + 8]
add dword [0x54cb20], ecx
mov eax, dword [eax + 0xc]
adc dword [0x54cb24], eax
inc ebx
inc esi
cmp esi, dword [ebp + 0x6238]
jb 0x4d7010
mov dword [ebp - 0x40], ebx
push 0x880
lea eax, [ebp + 0xb918]
push eax
push 0
push ebx
call fcn.004addd0
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea eax, [ebp + 0xb918]
push eax
push 0x67
push dword [0x54b9d4]
call ebx
mov al, byte [0x54ba56]
xor edi, edi
or esi, 0xffffffff
mov dword [0x54cb08], 0
mov dword [0x54cb0c], 0
mov dword [ebp - 0x14], edi
test al, al
jne 0x4d7ed5
jmp 0x4d70a0
cmp byte [0x54ba57], 0
jne 0x4d7ee7
push 0x880
lea eax, [ebp + 0xb918]
push eax
push 0
push dword [ebp - 0x18]
call fcn.004addd0
lea eax, [ebp + 0xb918]
push eax
push 0x69
push dword [0x54b9d4]
call ebx
push 0x880
lea eax, [ebp + 0xb918]
push eax
push dword [ebp - 0x30]
push dword [ebp - 0x34]
call fcn.004addd0
lea eax, [ebp + 0xb918]
push eax
push 0x6c
push dword [0x54b9d4]
call ebx
push 0x880
lea eax, [ebp + 0xb918]
push eax
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.004addd0
lea eax, [ebp + 0xb918]
push eax
push 0x6e
push dword [0x54b9d4]
call ebx
cmp esi, 0xffffffff
je 0x4d7157
push esi
lea eax, [ebp + 0x40f4]
push eax
lea ecx, [ebp + 0x6234]
call fcn.0043e020
mov ecx, dword [eax + 0x1080]
add dword [0x54cb08], ecx
mov eax, dword [eax + 0x1084]
adc dword [0x54cb0c], eax
or esi, 0xffffffff
call fcn.004ce050
cmp edi, dword [ebp + 0x6238]
jge 0x4d7ed0
push edi
lea ecx, [ebp + 0x6234]
call fcn.0043e250
mov ebx, eax
test byte [ebx + 4], 2
je 0x4d7eb7
mov al, byte [ebp + 0x7265]
mov esi, edi
mov dword [ebp - 0x1c], esi
test al, al
je 0x4d71af
test byte [ebx + 0x38], 0x10
je 0x4d71af
push 0x50e
call fcn.0048e4c0
push eax
push dword [ebx]
call fcn.004d1f40
add esp, 8
jmp 0x4d7eb7
cmp byte [0x54ba54], 0
je 0x4d71d6
mov ecx, 0x40
lea esi, [ebp + 0x7374]
mov edi, 0x56e46a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, dword [ebp - 0x14]
mov byte [0x56e56c], 1
test al, al
je 0x4d71e1
push 1
call fcn.0044a8c0
push 1
push 0
push dword [ebx]
mov ecx, 0x56e128
call fcn.00405c30
cmp byte [ebp + 0x7265], 0
mov esi, eax
je 0x4d721a
call fcn.0044a930
test al, al
je 0x4d721a
push 0x50e
call fcn.0048e4c0
push eax
push dword [ebx]
call fcn.004d1f40
add esp, 8
push 0
call fcn.0044a8c0
cmp esi, 1
jne 0x4d7eb4
lea eax, [ebp + 0x7668]
mov ecx, 0x56e128
push eax
call fcn.00405440
push 0
lea eax, [ebp + 0x51ec]
mov dword [ebp + 0x61fc], 0
push eax
mov dword [ebp + 0x6200], 0
mov dword [ebp + 0x6204], 0
mov dword [ebp + 0x6208], 0
mov dword [ebp + 0x620c], 0
mov dword [ebp + 0x6210], 0
push dword [ebx]
call fcn.0046e3d0
test al, al
je 0x4d7eb4
cmp byte [ebp + 0x7265], 0
je 0x4d72c4
cmp byte [ebp + 0x7854], 0
jne 0x4d72aa
cmp byte [ebp + 0x77a3], 0
je 0x4d72c4
push 0x50e
call fcn.0048e4c0
push eax
push dword [ebx]
call fcn.004d1f40
add esp, 8
jmp 0x4d7eb4
push 1
push 0x800
lea eax, [ebp + 0x7918]
push eax
push str.Rar_CV
call fcn.004cc310
test al, al
je 0x4d7eb4
lea eax, [ebp + 0x7918]
push eax
call fcn.004cd920
push 1
call fcn.004c73a0
mov eax, dword [ebp - 0x40]
mov ecx, 0x56e128
push 0x800
push 0x562a1a
mov dword [0x54cb00], eax
call fcn.00405080
mov eax, dword [0x56e12c]
mov ecx, 0x563a1c
push 0x517a54
mov dword [0x55f9c0], eax
mov dword [0x55d5fc], 1
mov dword [0x55e9ac], 2
mov dword [0x55e9b0], 2
call fcn.004948c0
push 0x562a1a
push 0x20f
call fcn.0048e4c0
push eax
call fcn.004cd9b0
add esp, 8
call fcn.004d1e50
mov ecx, dword [0x55e9a4]
mov esi, eax
mov dword [ebp - 0x24], esi
test ecx, ecx
je 0x4d7383
mov dword [ebp - 0x20], ecx
mov dword [0x55e9a4], 0
push 1
push 0
mov ecx, 0x56e128
call fcn.00404c20
cmp byte [0x54ba57], 0
jne 0x4d7e99
call fcn.004d1e50
cmp esi, eax
jne 0x4d7e99
push 0x5af8a0
call fcn.004c8790
cmp word [0x55a4de], 0
mov eax, dword [0x55d654]
mov dword [ebp - 0x44], eax
mov byte [0x55d8d9], 0
jne 0x4d7432
push 0
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x38], 0
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push eax
mov ecx, 0x56e128
call fcn.004051d0
cmp dword [ebp - 0x3c], 0
jbe 0x4d7427
push 0x800
push 0x55a4de
push str.Rar_CM
call fcn.004cc240
mov esi, eax
test esi, esi
je 0x4d7427
push esi
push dword [ebp - 0x3c]
push 1
push dword [ebp - 0x38]
call fcn.004ff1cc
push esi
call fcn.004fede7
add esp, 0x14
push dword [ebp - 0x38]
call fcn.004f8488
add esp, 4
push 0x800
lea eax, [ebp + 0x9918]
push eax
push dword [ebx]
call fcn.0047cc00
push 0x800
lea eax, [ebp + 0x6264]
push eax
lea eax, [ebp + 0xca18]
push eax
call fcn.004947d0
cmp word [ebp + 0xca18], 0
je 0x4d7478
push 0x800
lea eax, [ebp + 0xca18]
push eax
call fcn.0047bc90
push dword [ebx]
call fcn.00441aa0
cmp dword [0x55f9c0], 0
mov esi, 0x517a7c
mov byte [ebp - 0xd], al
je 0x4d7495
mov esi, 0x517a84
cmp word [0x5584d8], 0
je 0x4d74a4
mov esi, 0x517a74
push esi
push dword [ebx]
xor eax, eax
mov word [ebp + 0xea18], ax
call fcn.0047bcd0
test al, al
je 0x4d75a6
cmp word [ebp + 0xca18], 0
je 0x4d74e2
lea eax, [ebp + 0x9918]
push eax
lea eax, [ebp + 0xca18]
push eax
call fcn.00497d90
test eax, eax
jne 0x4d75a6
push 1
push 0x800
lea eax, [ebp + 0xea18]
mov byte [ebp - 0xe], 1
push eax
push str.Rar_CV
call fcn.004cc310
push 0x800
push 0x562a1a
push dword [ebx]
call fcn.0047d830
push eax
lea eax, [ebp + 0xea18]
push eax
call fcn.0047d340
push 0x562a1a
call fcn.0047cbe0
mov esi, eax
test esi, esi
je 0x4d767b
xor eax, eax
push 0x562a1a
mov word [esi], ax
call fcn.0047cbe0
mov edx, eax
mov eax, 0x2e
mov word [esi], ax
test edx, edx
je 0x4d767b
cmp byte [ebp - 0xd], 0
je 0x4d767b
cmp dword [ebp + 0x77a8], 0
jne 0x4d767b
cmp byte [ebp + 0x778a], 0
je 0x4d767b
mov ecx, esi
lea edi, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4d7580
sub ecx, edi
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push esi
push edx
call fcn.004f96d0
add esp, 0xc
jmp 0x4d767b
cmp word [ebp + 0xca18], 0
mov byte [ebp - 0xe], 0
push 0x800
je 0x4d75e3
lea eax, [ebp + 0xca18]
push eax
push 0x562a1a
call fcn.004947d0
push 0x800
push dword [ebx]
call fcn.0047d830
push eax
push 0x562a1a
call fcn.00494790
jmp 0x4d75ef
push dword [ebx]
push 0x562a1a
call fcn.004947d0
push 0x562a1a
call fcn.0047cbe0
mov edi, eax
test edi, edi
je 0x4d7641
xor eax, eax
push 0x562a1a
mov word [edi], ax
call fcn.0047cbe0
test eax, eax
je 0x4d7639
push str..tar
push eax
call fcn.00497d90
test eax, eax
je 0x4d7641
cmp byte [ebp - 0xd], 0
je 0x4d7639
cmp dword [ebp + 0x77a8], 0
jne 0x4d7639
cmp byte [ebp + 0x778a], 0
jne 0x4d7641
mov eax, 0x2e
mov word [edi], ax
push 0x800
push esi
push 0x562a1a
call fcn.0047d8d0
push 0x562a1a
call fcn.0046cad0
test al, al
je 0x4d767b
push 0x50d
call fcn.0048e4c0
push eax
push 0x562a1a
call fcn.004d1f40
add esp, 8
mov byte [ebp - 0xe], 1
call fcn.004d1e50
mov esi, dword [ebp - 0x24]
cmp esi, eax
jne 0x4d76df
lea eax, [ebp + 0x7918]
push eax
call fcn.004cd920
push 0x517a54
mov ecx, 0x563a1c
mov dword [0x55d628], 3
mov dword [0x55d624], 2
mov byte [0x55d66a], 0
call fcn.004948c0
mov eax, dword [0x55e9a4]
test eax, eax
je 0x4d76d3
mov dword [ebp - 0x20], eax
mov dword [0x55e9a4], 0
push 0
mov ecx, 0x56e128
call fcn.004041f0
cmp word [0x55a4de], 0
je 0x4d76f3
push 0x55a4de
call fcn.004cb670
cmp byte [0x54ba57], 0
mov byte [ebp - 0xf], 0
jne 0x4d7e73
call fcn.004d1e50
cmp esi, eax
jne 0x4d7e73
mov ecx, 0x40
mov esi, 0x55c4f0
mov edi, 0x56e46a
rep movsd dword es:[edi], dword [esi]
push 1
push 0
push 0x562a1a
movsw word es:[edi], word [esi]
mov ecx, 0x56e128
mov byte [0x56e56c], 1
call fcn.00405c30
cmp eax, 1
jne 0x4d7e73
lea eax, [ebp + 0x7478]
mov ecx, 0x56e128
push eax
call fcn.00405440
mov eax, dword [ebp + 0x7840]
mov ecx, dword [ebp + 0x7844]
cmp eax, dword [ebp + 0x7650]
jne 0x4d7774
cmp ecx, dword [ebp + 0x7654]
je 0x4d77af
or eax, ecx
je 0x4d77af
push 0x517b3c
lea eax, [ebp + 0x7668]
push eax
call fcn.00497d90
test eax, eax
jne 0x4d7795
cmp byte [ebp + 0x778a], al
jne 0x4d77af
push 0x50a
call fcn.0048e4c0
push eax
push dword [ebx]
call fcn.004d1f40
add esp, 8
jmp 0x4d7e73
mov eax, dword [ebp + 0x7268]
test eax, eax
je 0x4d7813
push dword [ebp + 0x784c]
cdq
push dword [ebp + 0x7848]
push edx
push eax
call fcn.004f8560
push 0
push 0x64
push dword [ebp + 0x765c]
mov edi, eax
mov esi, edx
push dword [ebp + 0x7658]
call fcn.004f8560
cmp esi, edx
jg 0x4d7813
jl 0x4d77f0
cmp edi, eax
jae 0x4d7813
push 0x562a1a
call fcn.0047d830
push eax
push 0x50f
call fcn.0048e4c0
push eax
call fcn.004cd9b0
add esp, 8
jmp 0x4d7e73
mov ecx, 0x40
lea edi, [ebp + 0x7270]
mov esi, 0x55c4f0
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [ebp - 4], 7
push 1
call fcn.004c73a0
mov ecx, 0x40
lea esi, [ebp + 0x7270]
mov edi, 0x55c4f0
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x562a1a
mov ecx, 0x56e128
movsw word es:[edi], word [esi]
call fcn.00405080
mov eax, dword [0x56e12c]
mov dword [0x55f9c0], eax
mov byte [0x55d8d9], 1
call fcn.004c8c60
push 0x517a54
mov ecx, 0x563a1c
call fcn.004948c0
mov eax, dword [0x55e9a4]
test eax, eax
je 0x4d7895
mov dword [ebp - 0x20], eax
mov dword [0x55e9a4], 0
push 0
push 0
mov ecx, 0x56e128
call fcn.00404c20
cmp byte [0x54ba57], 0
jne 0x4d7e5e
call fcn.004d1e50
cmp dword [ebp - 0x24], eax
jne 0x4d7e5e
mov eax, dword [ebp + 0x7650]
or eax, dword [ebp + 0x7654]
jne 0x4d78ed
cmp dword [ebp + 0x61f0], eax
ja 0x4d78e0
cmp dword [ebp + 0x61ec], 0x200
jb 0x4d78ed
cmp dword [ebp + 0x7830], 1
jbe 0x4d7e5e
mov eax, dword [ebp + 0x7268]
mov edi, dword [ebp + 0x784c]
mov ecx, dword [ebp + 0x7848]
test eax, eax
je 0x4d7940
push edi
cdq
push ecx
push edx
push eax
call fcn.004f8560
push 0
push 0x64
push dword [ebp + 0x765c]
mov dword [ebp - 0x24], eax
mov esi, edx
push dword [ebp + 0x7658]
call fcn.004f8560
cmp esi, edx
jl 0x4d7e5e
jg 0x4d793a
cmp dword [ebp - 0x24], eax
jb 0x4d7e5e
mov ecx, dword [ebp + 0x7848]
inc dword [ebp - 0x18]
add dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x2c]
adc dword [ebp - 0x30], edi
add eax, dword [ebp + 0x7658]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
adc eax, dword [ebp + 0x765c]
cmp byte [ebp - 0xe], 0
mov byte [ebp - 0xf], 1
mov dword [ebp - 0x28], eax
je 0x4d7d00
push 0
push 1
push dword [ebx]
mov ecx, 0x56e128
call fcn.00405c30
cmp eax, 1
jne 0x4d7e5e
lea ecx, [ebp + 0x78b8]
call fcn.00494820
mov byte [ebp - 4], 8
lea eax, [ebp + 0x10a18]
push 0x800
push dword [ebx]
push eax
call fcn.004947d0
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
xor al, al
mov byte [ebp - 0xd], al
jmp 0x4d79c0
lea eax, [ebp + 0x10a18]
push eax
push str._s._cvtbackup_
lea eax, [ebp + 0xfa18]
push 0x800
push eax
call fcn.00402720
add esp, 0x10
lea eax, [ebp + 0xfa18]
push eax
lea eax, [ebp + 0x10a18]
push eax
call esi
test eax, eax
je 0x4d7c48
lea eax, [ebp + 0x10a18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004948c0
lea eax, [ebp + 0xfa18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004948c0
mov ecx, 0x56e128
call fcn.00405ac0
test eax, eax
je 0x4d7a58
push 0x800
lea eax, [ebp + 0x10a18]
mov ecx, 0x56e128
push eax
call fcn.00405620
test al, al
je 0x4d7a58
lea eax, [ebp + 0x10a18]
push eax
call fcn.0046cad0
test al, al
jne 0x4d79c0
cmp word [ebp + 0xea18], 0
je 0x4d7bd5
lea ecx, [ebp + 0x7858]
call fcn.00494820
mov byte [ebp - 4], 9
lea eax, [ebp + 0xea18]
push eax
lea ecx, [ebp + 0x7858]
call fcn.004948c0
lea ecx, [ebp + 0x41a4]
call fcn.00404070
push 0
push 0
push 0
lea eax, [ebp + 0x7858]
push eax
lea ecx, [ebp]
call fcn.00490a40
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0x41a4]
push eax
lea ecx, [ebp]
call fcn.00491710
test eax, eax
jne 0x4d7bba
mov edi, dword [ebp - 0x44]
jmp 0x4d7ad0
push 0x800
push dword [ebx]
lea eax, [ebp + 0xfa18]
push eax
call fcn.004947d0
push 0x800
lea eax, [ebp + 0x41a4]
push eax
call fcn.0047d830
push eax
lea eax, [ebp + 0xfa18]
push eax
call fcn.0047d930
lea eax, [ebp + 0x41a4]
push eax
call fcn.0047d830
push eax
push 0x25a
call fcn.0048e4c0
push eax
call fcn.004cd9b0
add esp, 8
lea eax, [ebp + 0xfa18]
push eax
lea eax, [ebp + 0x41a4]
push eax
call esi
test eax, eax
je 0x4d7b95
cmp edi, 1
jne 0x4d7b7c
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [ebp + 0xfa18]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4d7b76
lea eax, [ebp + 0x51dc]
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
lea eax, [ebp + 0x41a4]
push eax
lea ecx, [ebp]
call fcn.00491710
test eax, eax
je 0x4d7ad0
jmp 0x4d7bba
lea eax, [ebp + 0xfa18]
push eax
lea eax, [ebp + 0x41a4]
push eax
push 0x5b0
call fcn.0048e4c0
push eax
call fcn.004cd9b0
add esp, 0xc
mov byte [ebp - 0xd], 1
mov byte [ebp - 4], 9
lea ecx, [ebp]
call fcn.00490b30
mov byte [ebp - 4], 8
lea ecx, [ebp + 0x7858]
call fcn.00404180
mov bh, byte [ebp - 0xd]
xor bl, bl
cmp byte [ebp + 0x7264], bl
jne 0x4d7c59
push 0x800
lea eax, [ebp + 0xda18]
mov bl, 1
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004949c0
test al, al
je 0x4d7c4e
nop
push 0x800
lea eax, [ebp + 0x11a18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004949c0
test al, al
je 0x4d7c4e
lea eax, [ebp + 0xda18]
push eax
call fcn.0046cad0
test al, al
jne 0x4d7c4c
push 0x800
lea eax, [ebp + 0xda18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004949c0
test al, al
jne 0x4d7c00
jmp 0x4d7c4e
mov bh, 1
jmp 0x4d7bd8
xor bl, bl
lea ecx, [ebp + 0x78b8]
call fcn.00494b00
push 0x800
lea eax, [ebp + 0xda18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004949c0
test al, al
je 0x4d7cec
push 0x800
lea eax, [ebp + 0x11a18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004949c0
test al, al
je 0x4d7cec
test bh, bh
jne 0x4d7cb1
test bl, bl
jne 0x4d7cc1
lea eax, [ebp + 0x11a18]
push eax
call fcn.0046d310
lea eax, [ebp + 0x11a18]
push eax
call fcn.0046c6d0
jmp 0x4d7cd1
test bl, bl
jne 0x4d7cc1
lea eax, [ebp + 0xda18]
push eax
call fcn.0046c6d0
lea eax, [ebp + 0xda18]
push eax
lea eax, [ebp + 0x11a18]
push eax
call esi
push 0x800
lea eax, [ebp + 0xda18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.004949c0
test al, al
jne 0x4d7c74
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x78b8]
call fcn.00404180
jmp 0x4d7e5e
cmp byte [ebp + 0x7264], 0
je 0x4d7db0
push 0
push 1
push dword [ebx]
mov ecx, 0x56e128
call fcn.00405c30
cmp eax, 1
jne 0x4d7db0
push 0x800
push dword [ebx]
lea eax, [ebp + 0x10a18]
push eax
call fcn.004947d0
lea esp, [esp]
lea eax, [ebp + 0x10a18]
push eax
call fcn.0047d830
push eax
push 0x258
call fcn.0048e4c0
push eax
call fcn.004cd9b0
add esp, 8
lea eax, [ebp + 0x10a18]
push eax
call fcn.0046d310
lea eax, [ebp + 0x10a18]
push eax
call fcn.0046c6d0
mov ecx, 0x56e128
call fcn.00405ac0
test eax, eax
je 0x4d7db0
push 0x800
lea eax, [ebp + 0x10a18]
mov ecx, 0x56e128
push eax
call fcn.00405620
test al, al
je 0x4d7db0
lea eax, [ebp + 0x10a18]
push eax
call fcn.0046cad0
test al, al
jne 0x4d7d40
push 0
push 1
push 0x562a1a
mov ecx, 0x56e128
call fcn.00405c30
cmp eax, 1
jne 0x4d7e5e
push 0x800
push 0x562a1a
lea eax, [ebp + 0x11a18]
push eax
call fcn.004947d0
mov edi, dword [ebp - 0x44]
cmp edi, 1
jne 0x4d7e26
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [ebp + 0x11a18]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4d7e26
lea eax, [ebp + 0x6224]
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x56e128
call fcn.00405ac0
test eax, eax
je 0x4d7e5e
push 0x800
lea eax, [ebp + 0x11a18]
mov ecx, 0x56e128
push eax
call fcn.00405620
test al, al
je 0x4d7e5e
lea eax, [ebp + 0x11a18]
push eax
call fcn.0046cad0
test al, al
jne 0x4d7de5
mov byte [ebp - 4], 6
lea ecx, [ebp + 0x7270]
call fcn.00491b40
cmp byte [ebp - 0xf], 0
jne 0x4d7e83
cmp byte [ebp - 0xe], 0
jne 0x4d7e83
push 0x562a1a
call fcn.0046c6d0
cmp word [ebp + 0xea18], 0
je 0x4d7e99
lea eax, [ebp + 0xea18]
push eax
call fcn.004cb740
lea eax, [ebp + 0xa918]
push eax
call fcn.004cd920
lea eax, [ebp + 0x7918]
push eax
call fcn.004cb740
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x1c]
mov al, byte [0x54ba56]
inc edi
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov dword [ebp - 0x14], edi
test al, al
je 0x4d70a0
jmp 0x4d7ed5
mov al, byte [0x54ba56]
cmp byte [0x54ba57], 0
jne 0x4d7ee7
test al, al
mov eax, 0x4d0
je 0x4d7eec
mov eax, 0x272
push eax
call fcn.0048e4c0
push eax
call fcn.004cd9b0
add esp, 4
cmp byte [0x54ba56], 0
je 0x4d7f12
push dword [0x54b9d4]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4d7f2c
push 0
push 0
push 0
push 0
push 0
push 1
push 0
push 1
call fcn.004cf4e0
call fcn.004d0360
mov al, byte [0x54ba54]
test al, al
je 0x4d7f81
mov ecx, 0x40
lea esi, [ebp + 0x7374]
mov edi, 0x56e46a
lea eax, [ebp + 0x8918]
rep movsd dword es:[edi], dword [esi]
push 0
push 0
push eax
movsw word es:[edi], word [esi]
mov ecx, 0x56e128
mov byte [0x56e56c], 1
call fcn.00405c30
cmp eax, 1
je 0x4d7f78
mov ecx, 0x570db0
call fcn.0043f4c0
test al, al
jne 0x4d7f87
mov al, byte [0x54ba54]
test al, al
jne 0x4d7fa2
cmp dword [ebp - 0x18], 0
jbe 0x4d7f9e
push 0x562a1a
call fcn.0047d830
push eax
mov ecx, 0x570db0
call fcn.004444e0
jmp 0x4d7fbd
test al, al
je 0x4d7fbd
cmp dword [ebp - 0x18], 0
jbe 0x4d7fbd
push 0x562a1a
call fcn.0047d830
push eax
mov ecx, 0x570db0
call fcn.00443a00
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x7374]
call fcn.00491b40
mov ebx, dword [ebp - 0x20]
cmp byte [ebp + 0x726c], 0
je 0x4d7fe8
push dword [0x544144]
push 0x5af8a0
call fcn.004a50b0
push 0x5af8a0
call fcn.004a5510
test ebx, ebx
je 0x4d7ffc
push ebx
call fcn.004cc850
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x6234]
call fcn.0043df10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x12a18]
xor ecx, ebp
call fcn.004f833c
lea esp, [ebp + 0x12a1c]
pop ebp
ret 4