Function at 0x140097874
Capabilities:
Move file
Write file on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x89e0
call fcn.1400ba8b0
sub rsp, rax
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x8a18], rbx
mov qword [rsp + 0x8a20], rbp
mov qword [rsp + 0x8a28], rsi
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x89d0], rax
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x20], eax
mov r9, qword [str.InterfaceConvertProfile]
lea r8, str._s_u
mov edx, 0xc8
lea rcx, [0x140127750]
call fcn.14005b860
lea rcx, [rsp + 0x470]
call fcn.14003f1d0
nop
xor esi, esi
mov byte [rsp + 0xe08], sil
cmp byte [0x1400fec05], sil
je 0x1400979df
mov r8d, 0x400
lea rdx, [rsp + 0x81d0]
lea rcx, [0x140105fb0]
call fcn.1400129d4
xor edx, edx
mov r8d, 0x838
lea rcx, [rsp + 0xe10]
call fcn.1400a9164
xor ebx, ebx
mov rdx, rbx
movzx eax, word [rsp + rdx + 0x81d0]
mov word [rsp + rdx + 0xe10], ax
add rdx, 2
cmp ax, bx
jne 0x140097943
lea rcx, [rsp + 0x2264]
call fcn.14006e1b0
lea rcx, [rsp + 0x2288]
call fcn.14006e1b0
lea rcx, [rsp + 0x22ac]
call fcn.14006e1b0
xor r9d, r9d
lea r8, [rsp + 0x1650]
lea rdx, [rsp + 0x81d0]
xor ecx, ecx
call fcn.140034930
mov rcx, qword [rsp + 0x1610]
cmp al, bl
cmovne rcx, qword [rsp + 0x2250]
mov qword [rsp + 0x1610], rcx
lea rdx, [rsp + 0xe10]
lea rcx, [rsp + 0x470]
call fcn.14003ee54
lea rcx, [rsp + 0x470]
call fcn.14003f05c
jmp 0x140097b11
lea rcx, [rsp + 0x80]
call fcn.14006ba08
nop
lea rdi, [rsp + 0x80]
cmp rbx, rsi
je 0x1400979ff
mov rdi, rbx
jmp 0x140097a16
xor r8d, r8d
lea rdx, [rsp + 0x80]
lea rcx, [0x140105570]
call fcn.140040774
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
lea r8, [rsp + 0x470]
lea edx, [rbx + 3]
mov rcx, rdi
call fcn.140063edc
cmp al, bl
jne 0x140097abf
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x140097a58
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x80]
cmp rcx, rbx
je 0x140097a6b
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x5e0]
cmp rcx, rbx
je 0x140097a7e
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x5c0]
cmp rcx, rbx
je 0x140097a91
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x490]
cmp rcx, rbx
je 0x140097aa4
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x470]
cmp rcx, rbx
je 0x140098e30
call fcn.1400a86a4
jmp 0x140098e30
mov rdi, rbx
cmp qword [rsp + 0x5d8], rbx
jbe 0x140097aec
mov rdx, rdi
lea rcx, [rsp + 0x470]
call fcn.14003f194
mov dword [rax + 8], ebx
inc rdi
cmp rdi, qword [rsp + 0x5d8]
jb 0x140097acc
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x140097aff
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x80]
cmp rcx, rbx
je 0x140097b11
call fcn.1400a86a4
lea rdx, [0x140127750]
mov rcx, qword [str.InterfaceConvertProfile]
call fcn.14005c708
mov sil, bl
mov byte [rsp + 0x40], bl
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb r8, r8
and r8, qword [0x1400ffd80]
mov r13d, ebx
mov dword [rsp + 0x58], ebx
lea rax, [rsp + 0x470]
mov qword [rsp + 0x20], rax
lea r9, [0x140094578]
lea rdx, str.CONVERTARC
mov rcx, qword [0x1400ec660]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, rbx
je 0x140098db2
xor r8d, r8d
lea rdx, [0x1400ca4d8]
lea rcx, [0x140127750]
call fcn.14005c420
cmp eax, ebx
jne 0x140097bac
cmp dword [0x1400fec18], 1
jne 0x140097ba7
cmp byte [0x14010d65b], bl
jne 0x140097bac
mov r8b, bl
jmp 0x140097baf
mov r8b, 1
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 8]
call fcn.14008a020
mov edx, 0x400
lea rcx, [rsp + 0xe10]
call fcn.140087408
mov r14, rbx
mov qword [rsp + 0x50], rbx
mov rbp, rbx
mov qword [rsp + 0x48], rbx
mov qword [0x1400ff4b0], rbx
xor ecx, ecx
mov rdi, rcx
cmp qword [rsp + 0x5d8], rcx
jbe 0x140097c24
mov rdx, rdi
lea rcx, [rsp + 0x470]
call fcn.14003f194
test byte [rax + 8], 8
je 0x140097c17
mov rax, qword [rax + 0x10]
add qword [0x1400ff4b0], rax
inc ebx
inc rdi
cmp rdi, qword [rsp + 0x5d8]
jb 0x140097bf4
mov ecx, ebx
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
call fcn.140046b20
lea r8, [rsp + 0x3f90]
mov edx, 0x65
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor ebx, ebx
mov qword [0x1400ffcd8], rbx
mov r15d, ebx
or r12d, 0xffffffff
mov al, byte [0x1400ffcf0]
cmp al, bl
jne 0x140098cf2
lea rdi, [0x140108330]
cmp byte [0x1400fec04], bl
jne 0x140098d05
mov ecx, r13d
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
call fcn.140046b20
lea r8, [rsp + 0x3f90]
mov edx, 0x66
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
mov rcx, r14
call fcn.140046b20
lea r8, [rsp + 0x3f90]
mov edx, 0x67
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
mov rcx, rbp
call fcn.140046b20
lea r8, [rsp + 0x3f90]
mov edx, 0x68
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp r12d, 0xffffffff
je 0x140097d44
movsxd r8, r12d
lea rdx, [rsp + 0x7990]
lea rcx, [rsp + 0x470]
call fcn.14003efb8
mov rcx, qword [rax + 0x800]
add qword [0x1400ffcd8], rcx
or r12d, 0xffffffff
call fcn.1400890ac
cmp r15d, dword [rsp + 0x5d8]
jge 0x140098ce7
movsxd rdx, r15d
lea rcx, [rsp + 0x470]
call fcn.14003f194
mov r13, rax
test byte [rax + 8], 8
je 0x140098cca
mov r12d, r15d
mov dword [rsp + 0x5c], r15d
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rax]
lea rsi, [0x140105fb0]
mov rcx, rsi
call fcn.140015af0
cmp eax, 1
jne 0x140098cca
lea rdx, [rsp + 0x1d0]
mov rcx, rsi
call fcn.1400129f0
lea rcx, [rsp + 0x2264]
call fcn.14006e1b0
lea rcx, [rsp + 0x2288]
call fcn.14006e1b0
lea rcx, [rsp + 0x22ac]
call fcn.14006e1b0
xor r9d, r9d
lea r8, [rsp + 0x1650]
mov rdx, qword [r13]
xor ecx, ecx
call fcn.140034930
cmp al, bl
je 0x140098cca
cmp word [0x14010b748], bx
jne 0x140097e22
cmp dword [rsp + 0x310], ebx
je 0x140097e22
mov ecx, 0x50e
call fcn.140061d2c
mov rdx, rax
mov rcx, qword [r13]
call fcn.1400964ac
jmp 0x140098cca
lea rdx, [rsp + 0x7190]
lea rcx, str.Rar_CVXXXXXX
call fcn.140086c74
cmp al, bl
je 0x140098cca
lea rcx, [rsp + 0x7190]
call fcn.1400873f0
cmp dword [0x1400fec18], 1
jne 0x140097e5c
mov rcx, rdi
call fcn.14001dc50
call fcn.140082880
mov r8d, 0x400
lea rdx, [0x14010e6bc]
mov rcx, rsi
call fcn.1400129d4
mov edx, dword [0x1401063c4]
mov dword [0x14010c654], edx
mov dword [0x14010bc54], 1
mov eax, 4
mov dword [0x14010c240], eax
mov dword [0x14010c244], eax
lea rdx, [0x1400c3120]
mov rcx, qword [0x14010eec0]
call fcn.14006ba48
mov ecx, 0x20a
call fcn.140061d2c
mov r8, rax
lea r9, [0x14010e6bc]
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.14005b860
lea rcx, [rsp + 0x3f90]
call fcn.140087804
mov r12d, dword [0x1401290f0]
cmp byte [0x14010c23a], bl
je 0x140097efe
mov byte [0x14010c23a], bl
mov al, 1
mov byte [rsp + 0x40], al
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.14001731c
cmp byte [0x1400fec04], bl
jne 0x140098cab
cmp r12d, dword [0x1401290f0]
jne 0x140098cab
lea rcx, [0x140127750]
call fcn.140082c38
movsxd r14, dword [0x14010bca8]
mov byte [0x14010bd72], bl
cmp word [0x14010a340], bx
jne 0x140097fb0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
xor r9d, r9d
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140012b9c
cmp qword [rsp + 0x60], rbx
jbe 0x140097fa6
lea rdx, [0x14010a340]
lea rcx, str.Rar_CMXXXXXX
call fcn.140086b88
mov rdi, rax
cmp rax, rbx
je 0x140097fa6
mov r9, rax
mov r8, qword [rsp + 0x60]
mov edx, 1
mov rcx, qword [rsp + 0x68]
call fcn.1400aa698
mov rcx, rdi
call fcn.1400aa410
mov rcx, qword [rsp + 0x68]
call fcn.1400a9218
mov r8d, 0x400
lea rdx, [rsp + 0x7990]
mov rcx, qword [r13]
call fcn.140053004
mov rdx, rbx
movzx eax, word [rsp + rdx + 0x600]
mov word [rsp + rdx + 0x6190], ax
add rdx, 2
cmp ax, bx
jne 0x140097fca
cmp word [rsp + 0x6190], bx
je 0x140097ffa
lea rcx, [rsp + 0x6190]
call fcn.14005254c
mov rcx, qword [r13]
call fcn.14003feec
mov sil, al
lea rax, [0x1400c40f0]
lea rcx, [0x1400c3828]
cmp dword [0x14010c654], ebx
cmove rcx, rax
lea rbx, [0x1400c4068]
xor edi, edi
cmp word [0x140108b40], di
cmove rbx, rcx
mov rdx, rbx
mov rcx, qword [r13]
call fcn.140052ee0
cmp al, dil
je 0x140098195
cmp word [rsp + 0x6190], di
je 0x14009806e
lea rdx, [rsp + 0x7990]
lea rcx, [rsp + 0x6190]
call fcn.140073da4
cmp eax, edi
jne 0x140098195
mov bpl, 1
xor ebx, ebx
mov rcx, rbx
lea rdx, [0x140108330]
movzx eax, word [rsp + rcx + 0x7190]
mov word [rcx + rdx + 0x638c], ax
add rcx, 2
cmp ax, bx
jne 0x14009807d
lea rcx, [0x14010e6bc]
call fcn.14005254c
mov rcx, qword [r13]
call fcn.140052abc
mov r11, rax
lea rdi, [0x14010e6bc]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x1400980c0
lea rcx, [0x14010e6bc]
call fcn.140052e80
mov rdi, rax
cmp rax, rbx
je 0x1400982b5
mov word [rax], bx
lea rcx, [0x14010e6bc]
call fcn.140052e80
mov r11, rax
mov eax, 0x2e
mov word [rdi], ax
cmp r11, rbx
je 0x1400982b5
cmp sil, bl
je 0x1400982b5
cmp dword [rsp + 0x250], ebx
jne 0x1400982b5
cmp dword [rsp + 0x2f8], ebx
je 0x1400982b5
sub r11, rdi
movzx eax, word [rdi]
mov word [rdi + r11], ax
add rdi, 2
cmp ax, bx
jne 0x140098134
lea rcx, [0x14010e6bc]
call fcn.140052e80
mov rdi, rax
cmp rax, rbx
je 0x1400982b5
mov word [rax], bx
lea rcx, [0x14010e6bc]
call fcn.140052e80
mov ecx, 0x2e
mov word [rdi], cx
cmp rax, rbx
je 0x1400982b5
sub rax, rdi
movzx ecx, word [rdi]
mov word [rdi + rax], cx
add rdi, 2
cmp cx, bx
jne 0x140098180
jmp 0x1400982b5
mov bpl, dil
cmp word [rsp + 0x6190], di
je 0x1400981f8
mov rcx, rdi
lea rdx, [0x140108330]
movzx eax, word [rsp + rcx + 0x6190]
mov word [rcx + rdx + 0x638c], ax
add rcx, 2
cmp ax, di
jne 0x1400981ac
mov rcx, qword [r13]
call fcn.140052abc
mov r11, rax
lea rdi, [0x14010e6bc]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x1400981e3
jmp 0x140098216
mov rcx, qword [r13]
lea rdx, [0x14010e6bc]
movzx eax, word [rcx]
mov word [rdx], ax
add rcx, 2
add rdx, 2
cmp ax, di
jne 0x140098203
lea rcx, [0x14010e6bc]
call fcn.140052e80
mov rdi, rax
xor eax, eax
cmp rdi, rax
je 0x140098276
mov word [rdi], ax
lea rcx, [0x14010e6bc]
call fcn.140052e80
xor ecx, ecx
cmp rax, rcx
je 0x14009826e
lea rdx, str..tar
mov rcx, rax
call fcn.140073da4
xor ecx, ecx
cmp eax, ecx
je 0x140098276
cmp sil, cl
je 0x14009826e
cmp dword [rsp + 0x250], ecx
jne 0x14009826e
cmp dword [rsp + 0x2f8], ecx
jne 0x140098276
mov eax, 0x2e
mov word [rdi], ax
mov rdx, rbx
lea rcx, [0x14010e6bc]
call fcn.1400549fc
lea rdx, [0x14010e6bc]
xor ecx, ecx
call fcn.1400310a8
xor ebx, ebx
cmp al, bl
je 0x1400982b5
mov ecx, 0x50d
call fcn.140061d2c
mov rdx, rax
lea rcx, [0x14010e6bc]
call fcn.1400964ac
mov bpl, 1
cmp r12d, dword [0x1401290f0]
jne 0x140098367
lea rcx, [rsp + 0x7190]
call fcn.1400873f0
mov dword [0x14010bc7c], 3
mov dword [0x14010bc78], 2
mov byte [0x14010bcbe], bl
mov byte [0x14010bcc2], bl
lea rdx, [0x1400c3120]
mov rcx, qword [0x14010eec0]
call fcn.14006ba48
lea rcx, [0x14010e6bc]
call fcn.140052abc
mov rdi, rax
mov ecx, 0x208
call fcn.140061d2c
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.14005b860
lea rcx, [rsp + 0x3f90]
call fcn.140087804
cmp byte [0x14010c23a], bl
je 0x140098354
mov byte [0x14010c23a], bl
mov al, 1
mov byte [rsp + 0x40], al
xor edx, edx
lea rsi, [0x140105fb0]
mov rcx, rsi
call fcn.140016b48
jmp 0x14009836e
lea rsi, [0x140105fb0]
cmp word [0x14010a340], bx
je 0x140098383
lea rcx, [0x14010a340]
call fcn.140086e3c
cmp byte [0x1400fec04], bl
jne 0x140098c28
cmp r12d, dword [0x1401290f0]
jne 0x140098c28
mov r9d, 1
xor r8d, r8d
lea rdx, [0x14010e6bc]
mov rcx, rsi
call fcn.140015af0
cmp eax, 1
jne 0x140098c28
lea rdx, [rsp + 0x320]
mov rcx, rsi
call fcn.1400129f0
mov rdx, qword [rsp + 0x2e0]
cmp rdx, qword [rsp + 0x430]
je 0x140098420
cmp rdx, rbx
je 0x140098420
lea rdx, [0x1400c39b8]
lea rcx, [rsp + 0x1d0]
call fcn.140073da4
cmp eax, ebx
jne 0x140098405
cmp dword [rsp + 0x2f8], ebx
jne 0x140098420
mov ecx, 0x50a
call fcn.140061d2c
mov rdx, rax
mov rcx, qword [r13]
call fcn.1400964ac
jmp 0x140098c28
movsxd rax, dword [rsp + 0xe04]
cmp eax, ebx
je 0x14009848c
mov rcx, rax
imul rcx, qword [rsp + 0x2e8]
mov rax, qword [rsp + 0x438]
imul rax, rax, 0x64
cmp rcx, rax
jge 0x14009848c
lea rcx, [0x14010e6bc]
call fcn.140052abc
mov rdi, rax
mov ecx, 0x50f
call fcn.140061d2c
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.14005b860
lea rcx, [rsp + 0x3f90]
call fcn.140087804
jmp 0x140098c28
mov rcx, rbx
lea rdi, [0x140108330]
movzx eax, word [rcx + rdi + 0x3418]
mov word [rsp + rcx + 0x4890], ax
add rcx, 2
cmp ax, bx
jne 0x140098496
cmp dword [0x1400fec18], 1
jne 0x1400984c0
mov rcx, rdi
call fcn.14001dc50
call fcn.140082880
mov rdx, rbx
movzx eax, word [rsp + rdx + 0x4890]
mov word [rdx + rdi + 0x3418], ax
add rdx, 2
cmp ax, bx
jne 0x1400984c8
mov r8d, 0x400
lea rdx, [0x14010e6bc]
mov rcx, rsi
call fcn.1400129d4
mov edx, dword [0x1401063c4]
mov dword [0x14010c654], edx
mov byte [0x14010bd72], 1
mov dword [0x14010bd18], ebx
mov dword [0x14010bd3c], ebx
lea rdx, [0x1400c3120]
mov rcx, qword [0x14010eec0]
call fcn.14006ba48
lea rcx, [0x14010e6bc]
call fcn.140052abc
mov rdi, rax
mov ecx, 0x20b
call fcn.140061d2c
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.14005b860
lea rcx, [rsp + 0x3f90]
call fcn.140087804
cmp byte [0x14010c23a], bl
je 0x14009857a
mov byte [0x14010c23a], bl
mov al, 1
mov byte [rsp + 0x40], al
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.14001731c
cmp byte [0x1400fec04], bl
jne 0x140098c28
cmp r12d, dword [0x1401290f0]
jne 0x140098c28
cmp qword [rsp + 0x430], rbx
jne 0x1400985c6
cmp qword [rsp + 0x2250], 0x200
jl 0x1400985c6
cmp dword [rsp + 0x2d8], 1
jbe 0x140098c28
movsxd rax, dword [rsp + 0xe04]
cmp eax, ebx
je 0x1400985f3
mov rcx, rax
imul rcx, qword [rsp + 0x2e8]
mov rax, qword [rsp + 0x438]
imul rax, rax, 0x64
cmp rcx, rax
jl 0x140098c28
lea rcx, [0x14010e6bc]
call fcn.140052abc
mov rdi, rax
mov ecx, 0x25a
call fcn.140061d2c
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.14005b860
lea rcx, [rsp + 0x3f90]
call fcn.140087804
inc dword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
add rax, qword [rsp + 0x2250]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x3704]
call fcn.14006e1b0
lea rcx, [rsp + 0x3728]
call fcn.14006e1b0
lea rcx, [rsp + 0x374c]
call fcn.14006e1b0
xor r9d, r9d
lea r8, [rsp + 0x2af0]
lea rdx, [0x14010e6bc]
xor ecx, ecx
call fcn.140034930
cmp al, bl
je 0x14009869d
mov rax, qword [rsp + 0x48]
add rax, qword [rsp + 0x36f0]
mov qword [rsp + 0x48], rax
mov rsi, r14
cmp bpl, bl
je 0x140098a5e
xor r9d, r9d
mov r8b, 1
mov rdx, qword [r13]
lea r12, [0x140105fb0]
mov rcx, r12
call fcn.140015af0
cmp eax, 1
jne 0x140098c87
lea rcx, [rsp + 0x80]
call fcn.14006ba08
nop
mov rcx, qword [r13]
lea rdx, [rsp + 0x5190]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, bx
jne 0x1400986e8
xor ebp, ebp
mov r14d, 0x400
lea r9, [rsp + 0x5190]
lea r8, str._s._cvtbackup_
mov rdx, r14
lea rcx, [rsp + 0x5990]
call fcn.14005b860
lea rdx, [rsp + 0x5990]
lea rcx, [rsp + 0x5190]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, ebp
je 0x1400988d7
lea rdx, [rsp + 0x5190]
lea rcx, [rsp + 0x80]
call fcn.14006ba50
lea rdx, [rsp + 0x5990]
lea rcx, [rsp + 0x80]
call fcn.14006ba50
mov r8, r14
lea rdx, [rsp + 0x5190]
mov rcx, r12
call fcn.140012e4c
cmp al, bpl
je 0x140098797
lea rdx, [rsp + 0x5190]
xor ecx, ecx
call fcn.1400310a8
cmp al, bpl
jne 0x140098700
xor r9d, r9d
mov r8b, 1
lea rdx, [0x14010e6bc]
mov rcx, r12
call fcn.140015af0
cmp eax, 1
jne 0x1400988d9
mov rcx, rbp
lea rdx, [0x140108330]
movzx eax, word [rcx + rdx + 0x638c]
mov word [rsp + rcx + 0x5190], ax
add rcx, 2
cmp ax, bp
jne 0x1400987bf
mov rcx, qword [r13]
lea rdx, [rsp + 0x5990]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, bp
jne 0x1400987e7
lea rcx, [rsp + 0x5190]
call fcn.140052abc
mov rdi, rax
lea rcx, [rsp + 0x5990]
call fcn.140052abc
movzx ecx, word [rdi]
mov word [rax], cx
add rdi, 2
add rax, 2
cmp cx, bp
jne 0x140098814
lea rdx, [rsp + 0x5990]
lea rcx, [rsp + 0x5190]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, ebp
je 0x1400988d3
cmp rsi, rbp
je 0x140098850
cmp rsi, 1
jne 0x1400988a2
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x5990]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400988a2
lea r9, [rsp + 0x2ae0]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r14
lea rdx, [rsp + 0x5190]
mov rcx, r12
call fcn.140012e4c
cmp al, bpl
je 0x1400988d9
lea rdx, [rsp + 0x5190]
xor ecx, ecx
call fcn.1400310a8
cmp al, bpl
je 0x1400988d9
jmp 0x1400987d8
mov bl, 1
jmp 0x1400988d9
mov bl, 1
mov dil, bpl
cmp byte [rsp + 0xe00], bpl
jne 0x14009896a
mov dil, 1
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bc18
cmp al, bpl
je 0x14009895d
mov r8, r14
lea rdx, [rsp + 0x6990]
lea rcx, [rsp + 0x80]
call fcn.14006bc18
cmp al, bpl
je 0x14009895d
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.1400310a8
cmp al, bpl
jne 0x14009895a
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bc18
cmp al, bpl
jne 0x14009890a
jmp 0x14009895d
mov dil, bpl
lea rcx, [rsp + 0x80]
call fcn.14006b718
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bc18
cmp al, bpl
je 0x140098a1d
mov r8, r14
lea rdx, [rsp + 0x6990]
lea rcx, [rsp + 0x80]
call fcn.14006bc18
cmp al, bpl
je 0x140098a1d
cmp bl, bpl
jne 0x1400989d2
cmp dil, bpl
jne 0x1400989e6
lea rdx, [rsp + 0x6990]
xor ecx, ecx
call fcn.140031f84
lea rdx, [rsp + 0x6990]
xor ecx, ecx
call fcn.1400313c8
jmp 0x1400989fc
cmp dil, bpl
jne 0x1400989e6
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.1400313c8
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x6990]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bc18
cmp al, bpl
jne 0x14009898b
mov rcx, qword [rsp + 0xa0]
xor ebx, ebx
cmp rcx, rbx
je 0x140098a32
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x80]
cmp rcx, rbx
je 0x140098c74
call fcn.1400a86a4
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
jmp 0x140098cab
cmp byte [rsp + 0xe00], bl
je 0x140098b3c
xor r9d, r9d
mov r8b, 1
mov rdx, qword [r13]
lea r12, [0x140105fb0]
mov rcx, r12
call fcn.140015af0
cmp eax, 1
jne 0x140098b43
mov rcx, qword [r13]
lea rdx, [rsp + 0x4990]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, bx
jne 0x140098a9c
lea rcx, [rsp + 0x4990]
call fcn.140052abc
mov rdi, rax
mov ecx, 0x258
call fcn.140061d2c
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.14005b860
lea rcx, [rsp + 0x3f90]
call fcn.140087804
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.140031f84
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.1400313c8
mov r8d, 0x400
lea rdx, [rsp + 0x4990]
mov rcx, r12
call fcn.140012e4c
cmp al, bl
je 0x140098b43
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.1400310a8
cmp al, bl
jne 0x140098aac
jmp 0x140098b43
lea r12, [0x140105fb0]
xor r9d, r9d
mov r8b, 1
lea rdx, [0x14010e6bc]
mov rcx, r12
call fcn.140015af0
cmp eax, 1
jne 0x140098c61
mov rcx, rbx
lea rdx, [0x140108330]
movzx eax, word [rcx + rdx + 0x638c]
mov word [rsp + rcx + 0x5990], ax
add rcx, 2
cmp ax, bx
jne 0x140098b6b
cmp r14, rbx
je 0x140098b8f
cmp r14, 1
jne 0x140098be1
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x5990]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140098be1
lea r9, [rsp + 0x2ae0]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x400
lea rdx, [rsp + 0x5990]
mov rcx, r12
call fcn.140012e4c
cmp al, bl
je 0x140098c4e
lea rdx, [rsp + 0x5990]
xor ecx, ecx
call fcn.1400310a8
cmp al, bl
jne 0x140098b84
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
jmp 0x140098cab
cmp bpl, bl
jne 0x140098c9a
lea rdx, [0x14010e6bc]
xor ecx, ecx
call fcn.1400313c8
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
jmp 0x140098cab
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
jmp 0x140098cab
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
jmp 0x140098cab
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
jmp 0x140098cab
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
jmp 0x140098cab
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108330]
lea rcx, [rsp + 0xe10]
call fcn.1400873f0
lea rcx, [rsp + 0x7190]
call fcn.14008710c
mov r12d, dword [rsp + 0x5c]
inc r15d
mov al, byte [0x1400ffcf0]
cmp al, bl
mov r13d, dword [rsp + 0x58]
je 0x140097c78
mov sil, byte [rsp + 0x40]
jmp 0x140098cf2
mov al, byte [0x1400ffcf0]
mov sil, byte [rsp + 0x40]
cmp byte [0x1400fec04], bl
jne 0x140098d0a
cmp al, bl
jne 0x140098d0a
mov ecx, 0x4d0
jmp 0x140098d0f
mov sil, byte [rsp + 0x40]
mov ecx, 0x271
call fcn.140061d2c
mov rcx, rax
call fcn.140087804
cmp byte [0x1400ffcf0], bl
je 0x140098d33
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x140098d53
mov qword [rsp + 0x28], rbx
mov byte [rsp + 0x20], bl
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov rcx, rdx
call fcn.1400884a0
call fcn.1400878cc
cmp byte [0x1400fec05], bl
je 0x140098d92
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x81d0]
lea rcx, [0x140105fb0]
call fcn.140015af0
cmp eax, 1
je 0x140098d8a
lea rcx, [0x140105570]
call fcn.140042c50
cmp al, bl
jne 0x140098d97
cmp byte [0x1400fec05], bl
jne 0x140098db2
cmp r13d, ebx
jbe 0x140098db2
lea rcx, [0x14010e6bc]
call fcn.140052abc
mov rdx, rax
lea rcx, [0x140105570]
call fcn.140043330
cmp byte [rsp + 0xe08], bl
je 0x140098dce
mov rdx, qword [str.InterfaceConvertProfile]
lea rcx, [0x140127750]
call fcn.14005c708
lea rcx, [0x140127750]
call fcn.14005c790
cmp sil, bl
je 0x140098de5
call fcn.14008671c
nop
mov rcx, qword [rsp + 0x5e0]
cmp rcx, rbx
je 0x140098df8
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x5c0]
cmp rcx, rbx
je 0x140098e0b
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x490]
cmp rcx, rbx
je 0x140098e1e
call fcn.1400a86a4
nop
mov rcx, qword [rsp + 0x470]
cmp rcx, rbx
je 0x140098e30
call fcn.1400a86a4
mov rcx, qword [rsp + 0x89d0]
xor rcx, rsp
call fcn.1400a8530
lea r11, [rsp + 0x89e0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret