Function at 0x4ba0cb
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
push edi
xor ebx, ebx
push ebx
lea eax, [ebp - 1]
push eax
push ebx
mov dword [ebp - 8], edx
mov edi, ecx
mov byte [ebp - 1], bl
call fcn.0048c02d
push eax
lea ecx, [ebp - 0x4c]
call fcn.0047311f
mov esi, dword [ebp + 8]
mov eax, str.NULL
mov ecx, esi
cmp esi, ebx
jne 0x4ba102
mov ecx, eax
cmp dword [ebp - 8], ebx
je 0x4ba10a
mov eax, dword [ebp - 8]
push ecx
push eax
push edi
push str.LoadKnownFileType_called_with__s___s___s_n
call fcn.0042ebe6
add esp, 0x10
mov edx, str.http
mov ecx, edi
call fcn.0048d5a5
test al, al
je 0x4ba2dd
cmp esi, ebx
je 0x4ba142
mov edx, str.torrent
mov ecx, esi
call fcn.0048d5a5
test al, al
jne 0x4ba158
cmp byte [ebp - 1], bl
je 0x4ba177
mov ecx, dword [ebp - 0x44]
mov edx, 0x4f19b0
call fcn.0048d4e9
test al, al
je 0x4ba177
push dword [ebp + 0xc]
mov edx, edi
push 0xa0
push 4
push ebx
push dword [ebp - 8]
mov ecx, 0x4b4e92
call fcn.004b6628
jmp 0x4ba4b1
cmp esi, ebx
je 0x4ba18b
mov edx, str.btsearch
mov ecx, esi
call fcn.0048d60c
test al, al
jne 0x4ba1a1
cmp byte [ebp - 1], bl
je 0x4ba1a8
mov ecx, dword [ebp - 0x44]
mov edx, 0x4f19c4
call fcn.0048d4e9
test al, al
je 0x4ba1a8
mov ecx, 0x4b6608
jmp 0x4ba1d7
cmp esi, ebx
je 0x4ba1bc
mov edx, str.btkey
mov ecx, esi
call fcn.0048d60c
test al, al
jne 0x4ba1d2
cmp byte [ebp - 1], bl
je 0x4ba1ef
mov ecx, dword [ebp - 0x44]
mov edx, str..btkey
call fcn.0048d4e9
test al, al
je 0x4ba1ef
mov ecx, 0x4b4f01
push ebx
push 0xa0
push 4
push ebx
push dword [ebp - 8]
mov edx, edi
call fcn.004b6628
jmp 0x4ba4c4
cmp esi, ebx
je 0x4ba203
mov edx, 0x4fdc10
mov ecx, esi
call fcn.0048d60c
test al, al
jne 0x4ba219
cmp byte [ebp - 1], bl
je 0x4ba265
mov ecx, dword [ebp - 0x44]
mov edx, 0x4f19d0
call fcn.0048d4e9
test al, al
je 0x4ba265
push 0x10
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x4ba236
push esi
push edi
push dword [ebp + 0x14]
mov ecx, eax
push dword [ebp + 0x10]
call fcn.004b4843
jmp 0x4ba238
xor eax, eax
push 0x4b7bea
push eax
push ebx
mov ecx, edi
call fcn.0048c02d
mov edx, dword [ebp - 8]
mov ecx, eax
call fcn.004c50d0
mov esi, eax
mov ecx, esi
call fcn.004b7bb7
push esi
push ebx
push 0x8016
jmp 0x4ba4b8
cmp esi, ebx
je 0x4ba279
mov edx, 0x4f38e4
mov ecx, esi
call fcn.0048d60c
test al, al
jne 0x4ba28f
cmp byte [ebp - 1], bl
je 0x4ba2c8
mov ecx, dword [ebp - 0x44]
mov edx, 0x4f19dc
call fcn.0048d4e9
test al, al
je 0x4ba2c8
push 0x10
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x4ba2ac
push esi
push edi
push dword [ebp + 0x14]
mov ecx, eax
push dword [ebp + 0x10]
call fcn.004b4843
jmp 0x4ba2ae
xor eax, eax
push 0x4b7bea
push eax
push ebx
mov ecx, edi
call fcn.0048c02d
mov edx, dword [ebp - 8]
mov ecx, eax
call fcn.004c8831
jmp 0x4ba250
mov edx, dword [ebp + 0xc]
shr edx, 2
and dl, 1
mov ecx, edi
call fcn.004a9cd6
jmp 0x4ba4c4
mov edx, str..btsearch
mov ecx, edi
call fcn.0048d60c
mov ecx, edi
test al, al
je 0x4ba2fa
push ebx
call fcn.004b643b
jmp 0x4ba4c4
mov edx, 0x4ff8c8
call fcn.0048d60c
mov ecx, edi
test al, al
je 0x4ba331
push 0x12e
lea edx, [ebp + 0xc]
call fcn.004a489b
mov edx, dword [ebp + 0xc]
mov esi, eax
mov ecx, esi
call fcn.0049b9b1
mov dl, 1
mov ecx, esi
call fcn.0046b197
jmp 0x4ba4c4
mov edx, str.magnet:
call fcn.0048d5a5
mov ecx, edi
test al, al
je 0x4ba34f
mov edx, dword [ebp + 0xc]
or edx, 0x200
jmp 0x4ba49d
mov edx, str..btapp
call fcn.0048d60c
test al, al
je 0x4ba3c0
push 0x10
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x4ba37a
push esi
push edi
push dword [ebp + 0x14]
mov ecx, eax
push dword [ebp + 0x10]
call fcn.004b4843
jmp 0x4ba37c
xor eax, eax
push 0x4b7bea
push eax
push 1
mov ecx, edi
call fcn.004a1fa5
mov ecx, eax
call fcn.0048c02d
mov edx, dword [ebp - 8]
mov ecx, eax
call fcn.004c8831
mov esi, eax
push edi
lea ecx, [esi + 0x3c]
call fcn.0048e82b
push 0x4f1e13
lea ecx, [esi + 0x40]
call fcn.0048e740
push esi
push ebx
push 0x801c
jmp 0x4ba4b8
mov edx, str..btinstall
mov ecx, edi
call fcn.0048d60c
test al, al
je 0x4ba3ee
mov edx, dword [ebp - 8]
push 0x4f1e13
push dword [ebp + 0x14]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.004b9fa6
jmp 0x4ba4c4
cmp esi, ebx
je 0x4ba402
mov edx, str.btskin
mov ecx, esi
call fcn.0048d60c
test al, al
jne 0x4ba416
mov edx, str..btskin
mov ecx, edi
call fcn.0048d60c
test al, al
je 0x4ba498
mov ecx, str.current.btskin
call fcn.0048880a
test dword [ebp + 0xc], 0x400
mov esi, eax
je 0x4ba43a
mov edx, str.user_set
mov ecx, 0x54bba8
call fcn.0048d7e4
push 0x4fc1a0
push edi
call sub.MSVCRT.dll__wcsicmp
pop ecx
pop ecx
push esi
test eax, eax
jne 0x4ba454
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
jmp 0x4ba469
push edi
call sub.MSVCRT.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
je 0x4ba469
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.DLL_CopyFileW]
call fcn.004b5bb5
call fcn.004c131c
mov dl, 1
mov cl, dl
call fcn.004c99bb
call fcn.004b47df
call fcn.004d8a01
mov ecx, dword [0x54affc]
call fcn.004b4f30
call fcn.0042abd6
jmp 0x4ba4c4
mov edx, dword [ebp + 0xc]
mov ecx, edi
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push fcn.0040a2c4
push ebx
push dword [ebp - 8]
call fcn.00420a11
push ebx
push ebx
push 0x8037
push dword [0x54bcc4]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x4c]
call fcn.0047310e
pop edi
pop esi
pop ebx
leave
ret 0x10