Function at 0x4bdb10
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4f80dd
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0xc7fc
call fcn.004df840
mov eax, dword [0x50fb70]
xor eax, esp
mov dword [esp + 0xc7f8], eax
push ebx
push esi
push edi
mov eax, dword [0x50fb70]
xor eax, esp
push eax
lea eax, [esp + 0xc810]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov eax, dword [str.InterfaceConvertProfile]
push eax
push str._s_u
push 0x567a40
mov edx, 0xc8
call fcn.00460180
add esp, 0x10
lea ecx, [esp + 0x454]
call fcn.0048b970
mov dword [esp + 0xc818], 1
xor ebx, ebx
mov byte [esp + 0x14e4], bl
cmp byte [0x533389], bl
je 0x4bdc7d
push 0x800
lea ecx, [esp + 0xb808]
push ecx
mov ecx, 0x541e38
call fcn.004785d0
push 0x10e8
lea edx, [esp + 0x2538]
push ebx
push edx
call fcn.004e0730
add esp, 0xc
xor eax, eax
jmp 0x4bdbe0
movzx ecx, word [esp + eax + 0xb804]
mov word [esp + eax + 0x2534], cx
add eax, 2
cmp cx, bx
jne 0x4bdbe0
push ebx
lea eax, [esp + 0x14f0]
push eax
lea ecx, [esp + 0xb80c]
push ecx
mov dword [esp + 0x2508], ebx
mov dword [esp + 0x250c], ebx
mov dword [esp + 0x2510], ebx
mov dword [esp + 0x2514], ebx
mov dword [esp + 0x2518], ebx
mov dword [esp + 0x251c], ebx
call fcn.004450e0
test al, al
je 0x4bdc58
mov edx, dword [esp + 0x24ec]
mov eax, dword [esp + 0x24f0]
mov dword [esp + 0x35b4], edx
mov dword [esp + 0x35b8], eax
lea ecx, [esp + 0x2534]
push ecx
lea ecx, [esp + 0x458]
call fcn.0048b730
lea ecx, [esp + 0x454]
call fcn.0048b890
jmp 0x4bdd33
lea ecx, [esp + 0x4c]
call fcn.00467090
mov byte [esp + 0xc818], 2
lea edi, [esp + 0x4c]
cmp esi, ebx
je 0x4bdc9a
mov edi, esi
jmp 0x4bdcab
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, 0x53fd10
call fcn.0048f960
push ebx
push ebx
push ebx
push ebx
push 1
push 1
lea eax, [esp + 0x46c]
push eax
push 3
push edi
call fcn.00499dd0
test al, al
jne 0x4bdcf4
mov byte [esp + 0xc818], 1
lea ecx, [esp + 0x4c]
call fcn.0041cbb0
mov dword [esp + 0xc818], 0xffffffff
lea ecx, [esp + 0x454]
call fcn.004ba1b0
jmp 0x4bee2f
xor esi, esi
cmp dword [esp + 0x4c0], ebx
jbe 0x4bdd1a
nop
push esi
lea ecx, [esp + 0x458]
call fcn.0048b930
inc esi
mov dword [eax + 4], ebx
cmp esi, dword [esp + 0x4c0]
jb 0x4bdd00
mov byte [esp + 0xc818], 1
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x4bdd33
push eax
call fcn.004df66f
add esp, 4
mov ecx, dword [str.InterfaceConvertProfile]
push 0x567a40
push ecx
call fcn.00496bb0
mov edx, dword [0x5354dc]
push edx
mov byte [esp + 0x15], 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edx, dword [0x5275b4]
neg eax
lea ecx, [esp + 0x454]
push ecx
sbb eax, eax
and eax, dword [0x5354dc]
push 0x4ba200
push eax
push str.CONVERTARC
push edx
mov dword [esp + 0x34], ebx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4bede8
push ebx
push str.Background
push 0x567a40
call fcn.00496890
test eax, eax
jne 0x4bddb8
cmp dword [0x5343a4], 1
jne 0x4bddb1
cmp byte [0x54fb33], al
jne 0x4bddb8
mov byte [esp + 0x14], 0
jmp 0x4bddbd
mov byte [esp + 0x14], 1
mov eax, dword [esp + 0x14]
push ebx
push eax
push ebx
push 8
call fcn.004b1810
push 0x800
lea ecx, [esp + 0x2538]
push ecx
call fcn.004ae940
xor edi, edi
xor esi, esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [0x534420], ebx
mov dword [0x534424], ebx
mov dword [esp + 0x44], edi
cmp dword [esp + 0x4c0], ebx
jbe 0x4bde44
lea ebx, [ebx]
push esi
lea ecx, [esp + 0x458]
call fcn.0048b930
test byte [eax + 4], 2
je 0x4bde36
mov edx, dword [eax + 8]
add dword [0x534420], edx
mov eax, dword [eax + 0xc]
adc dword [0x534424], eax
inc edi
inc esi
cmp esi, dword [esp + 0x4c0]
jb 0x4bde10
mov dword [esp + 0x44], edi
push 0x880
lea ecx, [esp + 0x8620]
push ecx
push ebx
push edi
call fcn.0049db00
mov eax, dword [0x533384]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea edx, [esp + 0x861c]
push edx
push 0x65
push eax
call esi
or edi, 0xffffffff
cmp byte [0x535458], 0
mov dword [0x535448], ebx
mov dword [0x53544c], ebx
mov dword [esp + 0x1c], ebx
jne 0x4bed1c
cmp byte [0x533388], 0
jne 0x4bed33
mov edx, dword [esp + 0x20]
push 0x880
lea ecx, [esp + 0x8620]
push ecx
push ebx
push edx
call fcn.0049db00
mov ecx, dword [0x533384]
lea eax, [esp + 0x861c]
push eax
push 0x66
push ecx
call esi
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push 0x880
lea edx, [esp + 0x8620]
push edx
push eax
push ecx
call fcn.0049db00
mov eax, dword [0x533384]
lea edx, [esp + 0x861c]
push edx
push 0x67
push eax
call esi
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push 0x880
lea ecx, [esp + 0x8620]
push ecx
push edx
push eax
call fcn.0049db00
mov edx, dword [0x533384]
lea ecx, [esp + 0x861c]
push ecx
push 0x68
push edx
call esi
cmp edi, 0xffffffff
je 0x4bdf5a
push edi
lea eax, [esp + 0xa720]
push eax
lea ecx, [esp + 0x45c]
call fcn.0048ba60
mov ecx, dword [eax + 0x1080]
add dword [0x535448], ecx
mov edx, dword [eax + 0x1084]
adc dword [0x53544c], edx
or edi, 0xffffffff
call fcn.004b0a30
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x4c0]
jge 0x4bed1c
mov ecx, eax
push ecx
lea ecx, [esp + 0x458]
call fcn.0048b930
mov ebx, eax
test byte [ebx + 4], 2
mov dword [esp + 0x18], ebx
je 0x4bed0a
cmp byte [esp + 0x14dd], 0
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x48], edi
je 0x4bdfc2
test byte [ebx + 0x28], 0x10
je 0x4bdfc2
push 0x50e
call fcn.004612b0
mov edx, dword [ebx]
push eax
push edx
call fcn.004bc660
add esp, 8
jmp 0x4bed0a
mov eax, dword [ebx]
push 1
push 0
push eax
mov ecx, 0x541e38
call fcn.00479a60
cmp eax, 1
jne 0x4bed0a
lea ecx, [esp + 0xac]
push ecx
mov ecx, 0x541e38
call fcn.00478600
xor eax, eax
push eax
lea edx, [esp + 0x14f0]
mov dword [esp + 0x2500], eax
mov dword [esp + 0x2504], eax
mov dword [esp + 0x2508], eax
mov dword [esp + 0x250c], eax
mov dword [esp + 0x2510], eax
mov dword [esp + 0x2514], eax
mov eax, dword [ebx]
push edx
push eax
call fcn.004450e0
test al, al
je 0x4bed0a
cmp byte [esp + 0x14dd], 0
je 0x4be06c
cmp byte [esp + 0x1f8], 0
jne 0x4be051
cmp byte [esp + 0x147], 0
je 0x4be06c
push 0x50e
call fcn.004612b0
mov ecx, dword [ebx]
push eax
push ecx
call fcn.004bc660
add esp, 8
jmp 0x4bed0a
push 1
push 0x800
lea edx, [esp + 0x6624]
push edx
push str.Rar_CV
call fcn.004adfe0
test al, al
je 0x4bed0a
lea eax, [esp + 0x661c]
push eax
call fcn.004ae8e0
push 1
call fcn.004a9ff0
mov ecx, dword [esp + 0x44]
push 0x800
mov dword [0x53442c], ecx
push 0x550b7a
mov ecx, 0x541e38
call fcn.004785d0
mov edx, dword [0x541e3c]
mov eax, 4
push 0x4fa890
mov ecx, 0x551b7c
mov dword [0x54db28], edx
mov dword [0x54b8a0], 1
mov dword [0x54cb18], eax
mov dword [0x54cb1c], eax
call fcn.00466f00
push 0x550b7a
push 0x20f
call fcn.004612b0
push eax
call fcn.004af110
mov eax, dword [0x56abd8]
add esp, 8
cmp byte [0x54cb11], 0
mov dword [esp + 0x14], eax
je 0x4be129
mov byte [0x54cb11], 0
mov byte [esp + 0x11], 1
push 1
push 0
mov ecx, 0x541e38
call fcn.0047a6e0
cmp byte [0x533388], 0
jne 0x4bece6
mov ecx, dword [esp + 0x14]
cmp ecx, dword [0x56abd8]
jne 0x4bece6
push 0x567a40
call fcn.004aa3d0
mov edx, dword [0x54b8f0]
xor edi, edi
mov dword [esp + 0x40], edx
mov byte [0x54ba49], 0
cmp word [0x548786], di
jne 0x4be1df
push edi
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x541e38
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], edi
call fcn.004790e0
cmp dword [esp + 0x24], edi
jbe 0x4be1d2
push 0x800
push 0x548786
push str.Rar_CM
call fcn.004adf10
mov esi, eax
cmp esi, edi
je 0x4be1d2
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
push esi
push edx
push 1
push eax
call fcn.004e450e
push esi
call fcn.004e0da1
add esp, 0x14
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004e07e4
add esp, 4
mov esi, dword [esp + 0x18]
mov eax, dword [esi]
push 0x800
lea edx, [esp + 0xa720]
push edx
push eax
call fcn.004513e0
push 0x800
lea ecx, [esp + 0x4e0]
push ecx
lea edx, [esp + 0x9724]
push edx
call fcn.00466b20
cmp word [esp + 0x971c], di
je 0x4be22e
push 0x800
lea eax, [esp + 0x9720]
push eax
call fcn.00450c80
mov ecx, dword [esi]
push ecx
call fcn.0048c970
mov byte [esp + 0x10], al
mov ebx, 0x4fa8a0
cmp dword [0x54db28], edi
je 0x4be24c
mov ebx, 0x4fa6f0
cmp word [0x546780], 0
je 0x4be25b
mov ebx, 0x4fa8a8
mov edi, dword [esp + 0x18]
mov edx, dword [edi]
push ebx
push edx
call fcn.00451360
test al, al
je 0x4be334
cmp word [esp + 0x971c], 0
je 0x4be298
lea eax, [esp + 0xa71c]
push eax
lea ecx, [esp + 0x9720]
push ecx
call fcn.00469f00
test eax, eax
jne 0x4be334
mov edx, dword [edi]
push 0x800
push 0x550b7a
push edx
mov byte [esp + 0x1e], 1
call fcn.00451140
push eax
lea eax, [esp + 0x6628]
push eax
call fcn.00450cd0
push 0x550b7a
call fcn.00451340
mov esi, eax
test esi, esi
je 0x4be451
xor ecx, ecx
push 0x550b7a
mov word [esi], cx
call fcn.00451340
mov edx, 0x2e
mov word [esi], dx
test eax, eax
je 0x4be451
cmp byte [esp + 0x10], 0
je 0x4be451
cmp dword [esp + 0x14c], 0
jne 0x4be451
cmp byte [esp + 0x12d], 0
je 0x4be451
mov edx, eax
mov ecx, esi
sub edx, esi
lea ecx, [ecx]
movzx eax, word [ecx]
mov word [edx + ecx], ax
add ecx, 2
test ax, ax
jne 0x4be320
jmp 0x4be451
cmp word [esp + 0x971c], 0
mov byte [esp + 0x12], 0
je 0x4be3a8
xor eax, eax
jmp 0x4be350
movzx ecx, word [esp + eax + 0x971c]
mov word [eax + 0x550b7a], cx
add eax, 2
test cx, cx
jne 0x4be350
mov eax, dword [edi]
push eax
call fcn.00451140
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4be371
mov edi, 0x550b7a
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4be386
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x18]
jmp 0x4be3c1
mov ecx, dword [edi]
mov edx, 0x550b7a
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4be3b0
push 0x550b7a
call fcn.00451340
mov esi, eax
test esi, esi
je 0x4be416
xor ecx, ecx
push 0x550b7a
mov word [esi], cx
call fcn.00451340
test eax, eax
je 0x4be40e
push str..tar
push eax
call fcn.00469f00
test eax, eax
je 0x4be416
cmp byte [esp + 0x10], 0
je 0x4be40e
cmp dword [esp + 0x14c], 0
jne 0x4be40e
cmp byte [esp + 0x12d], 0
jne 0x4be416
mov edx, 0x2e
mov word [esi], dx
push 0x800
push ebx
push 0x550b7a
call fcn.00451dc0
push 0x550b7a
call fcn.00443510
test al, al
je 0x4be451
push 0x50d
call fcn.004612b0
push eax
push 0x550b7a
call fcn.004bc660
add esp, 8
mov byte [esp + 0x12], 1
mov esi, dword [esp + 0x14]
cmp esi, dword [0x56abd8]
jne 0x4be4de
lea eax, [esp + 0x661c]
push eax
call fcn.004ae8e0
push 0x4fa890
mov ecx, 0x551b7c
mov dword [0x54b8cc], 3
mov dword [0x54b8c8], 2
mov byte [0x54b906], 0
mov byte [0x54b920], 0
call fcn.00466f00
push 0x550b7a
call fcn.00451140
push eax
push 0x20d
call fcn.004612b0
push eax
call fcn.004af110
add esp, 8
cmp byte [0x54cb11], 0
je 0x4be4d2
mov byte [0x54cb11], 0
mov byte [esp + 0x11], 1
push 0
mov ecx, 0x541e38
call fcn.0047a360
cmp word [0x548786], 0
je 0x4be4f2
push 0x548786
call fcn.004ae200
cmp byte [0x533388], 0
mov byte [esp + 0x13], 0
jne 0x4becd5
cmp esi, dword [0x56abd8]
jne 0x4becd5
push 1
push 0
push 0x550b7a
mov ecx, 0x541e38
call fcn.00479a60
cmp eax, 1
jne 0x4becd5
lea ecx, [esp + 0x1fc]
push ecx
mov ecx, 0x541e38
call fcn.00478600
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1e8]
cmp eax, dword [esp + 0x334]
jne 0x4be55e
cmp ecx, dword [esp + 0x338]
je 0x4be59c
or eax, ecx
je 0x4be59c
push 0x4f9c6c
lea edx, [esp + 0xb0]
push edx
call fcn.00469f00
test eax, eax
jne 0x4be581
cmp byte [esp + 0x12d], al
jne 0x4be59c
push 0x50a
call fcn.004612b0
push eax
mov eax, dword [edi]
push eax
call fcn.004bc660
add esp, 8
jmp 0x4becd5
mov eax, dword [esp + 0x14e0]
test eax, eax
je 0x4be609
mov ecx, dword [esp + 0x1f0]
push ecx
mov ecx, dword [esp + 0x1f0]
cdq
push ecx
push edx
push eax
call fcn.004e07b0
push 0
mov esi, edx
mov edx, dword [esp + 0x344]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x344]
push edx
push eax
call fcn.004e07b0
cmp esi, edx
jg 0x4be609
jl 0x4be5e6
cmp edi, eax
jae 0x4be609
push 0x550b7a
call fcn.00451140
push eax
push 0x50f
call fcn.004612b0
push eax
call fcn.004af110
add esp, 8
jmp 0x4becd5
mov ecx, 0x40
mov esi, 0x54a794
lea edi, [esp + 0x34c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [esp + 0xc818], 4
push 1
call fcn.004a9ff0
mov ecx, 0x40
lea esi, [esp + 0x34c]
mov edi, 0x54a794
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x550b7a
mov ecx, 0x541e38
movsw word es:[edi], word [esi]
call fcn.004785d0
mov ecx, dword [0x541e3c]
xor ebx, ebx
mov dword [0x54db28], ecx
push 0x4fa890
mov ecx, 0x551b7c
mov byte [0x54ba49], 1
mov dword [0x54ba28], ebx
mov dword [0x54ba2c], ebx
mov dword [0x54ba30], ebx
mov dword [0x54ba34], ebx
call fcn.00466f00
push 0x550b7a
call fcn.00451140
push eax
push 0x210
call fcn.004612b0
push eax
call fcn.004af110
add esp, 8
cmp byte [0x54cb11], bl
je 0x4be6c3
mov byte [0x54cb11], bl
mov byte [esp + 0x11], 1
push ebx
push ebx
mov ecx, 0x541e38
call fcn.0047a6e0
cmp byte [0x533388], 0
jne 0x4becba
mov edx, dword [esp + 0x14]
cmp edx, dword [0x56abd8]
jne 0x4becba
mov eax, dword [esp + 0x334]
or eax, dword [esp + 0x338]
jne 0x4be720
cmp dword [esp + 0x24f0], ebx
ja 0x4be712
cmp dword [esp + 0x24ec], 0x200
jb 0x4be720
cmp dword [esp + 0x1d4], 1
jbe 0x4becba
mov eax, dword [esp + 0x14e0]
cmp eax, ebx
je 0x4be771
mov ecx, dword [esp + 0x1f0]
push ecx
mov ecx, dword [esp + 0x1f0]
cdq
push ecx
push edx
push eax
call fcn.004e07b0
push ebx
mov esi, edx
mov edx, dword [esp + 0x344]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x344]
push edx
push eax
call fcn.004e07b0
cmp esi, edx
jl 0x4becba
jg 0x4be771
cmp edi, eax
jb 0x4becba
push 0x550b7a
mov byte [esp + 0x17], 1
call fcn.00451140
push eax
push 0x25a
call fcn.004612b0
push eax
call fcn.004af110
inc dword [esp + 0x28]
mov ecx, dword [esp + 0x1f4]
mov edx, dword [esp + 0x1f8]
mov eax, dword [esp + 0x344]
add esp, 8
add dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x340]
adc dword [esp + 0x38], edx
add dword [esp + 0x2c], eax
adc dword [esp + 0x30], ecx
cmp byte [esp + 0x12], 0
je 0x4beb34
mov esi, dword [esp + 0x18]
mov edx, dword [esi]
push ebx
push 1
push edx
mov ecx, 0x541e38
call fcn.00479a60
cmp eax, 1
jne 0x4becba
lea ecx, [esp + 0x4c]
call fcn.00467090
mov byte [esp + 0xc818], 5
mov eax, dword [esi]
lea edx, [esp + 0x461c]
sub edx, eax
jmp 0x4be810
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4be810
mov byte [esp + 0x10], 0
jmp 0x4be830
lea eax, [esp + 0x461c]
push eax
lea ecx, [esp + 0x5620]
push str._s._cvtbackup_
push ecx
mov edx, 0x800
call fcn.00460180
add esp, 0xc
lea edx, [esp + 0x561c]
push edx
lea eax, [esp + 0x4620]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4be9eb
lea ecx, [esp + 0x461c]
push ecx
lea ecx, [esp + 0x50]
call fcn.00466f00
lea edx, [esp + 0x561c]
push edx
lea ecx, [esp + 0x50]
call fcn.00466f00
mov ecx, 0x541e38
call fcn.004785f0
test eax, eax
je 0x4be8d0
push 0x800
lea eax, [esp + 0x4620]
push eax
mov ecx, 0x541e38
call fcn.00479350
test al, al
je 0x4be8d0
lea ecx, [esp + 0x461c]
push ecx
call fcn.00443510
test al, al
jne 0x4be830
push ebx
push 1
push 0x550b7a
mov ecx, 0x541e38
call fcn.00479a60
cmp eax, 1
jne 0x4be9f0
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [eax + 0x550b7a]
mov word [esp + eax + 0x461c], cx
add eax, 2
cmp cx, bx
jne 0x4be8f0
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [ecx]
mov eax, dword [esi]
lea edx, [esp + 0x561c]
sub edx, eax
jmp 0x4be920
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4be920
push 0x800
lea edx, [esp + 0x4620]
push edx
call fcn.00451140
push eax
lea eax, [esp + 0x5624]
push eax
call fcn.00451310
lea ecx, [esp + 0x561c]
push ecx
lea edx, [esp + 0x4620]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4be9eb
cmp dword [esp + 0x40], 1
jne 0x4be9a8
push ebx
push ebx
push 3
push ebx
push ebx
push 0x40000000
lea eax, [esp + 0x5634]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4be9a8
lea ecx, [esp + 0x2524]
push ecx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x541e38
call fcn.004785f0
test eax, eax
je 0x4be9f0
push 0x800
lea edx, [esp + 0x4620]
push edx
mov ecx, 0x541e38
call fcn.00479350
test al, al
je 0x4be9f0
lea eax, [esp + 0x461c]
push eax
call fcn.00443510
test al, al
je 0x4be9f0
mov esi, dword [esp + 0x18]
jmp 0x4be910
mov byte [esp + 0x10], 1
xor bl, bl
cmp byte [esp + 0x14dc], bl
jne 0x4bea72
push 0x800
lea ecx, [esp + 0x3620]
push ecx
lea ecx, [esp + 0x54]
mov bl, 1
call fcn.00467110
test al, al
je 0x4bea69
jmp 0x4bea20
push 0x800
lea edx, [esp + 0x7620]
push edx
lea ecx, [esp + 0x54]
call fcn.00467110
test al, al
je 0x4bea69
lea eax, [esp + 0x361c]
push eax
call fcn.00443510
test al, al
jne 0x4bea67
push 0x800
lea ecx, [esp + 0x3620]
push ecx
lea ecx, [esp + 0x54]
call fcn.00467110
test al, al
jne 0x4bea20
jmp 0x4bea69
xor bl, bl
lea ecx, [esp + 0x4c]
call fcn.00466e80
push 0x800
lea edx, [esp + 0x3620]
push edx
lea ecx, [esp + 0x54]
call fcn.00467110
test al, al
je 0x4beb1e
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x4beaa0
push 0x800
lea eax, [esp + 0x7620]
push eax
lea ecx, [esp + 0x54]
call fcn.00467110
test al, al
je 0x4beb1e
cmp byte [esp + 0x10], 0
jne 0x4beae1
test bl, bl
jne 0x4beaf2
lea ecx, [esp + 0x761c]
push ecx
call fcn.00443530
lea edx, [esp + 0x761c]
push edx
call fcn.00443160
jmp 0x4beb04
test bl, bl
jne 0x4beaf2
lea eax, [esp + 0x361c]
push eax
call fcn.00443160
lea ecx, [esp + 0x361c]
push ecx
lea edx, [esp + 0x7620]
push edx
call esi
push 0x800
lea eax, [esp + 0x3620]
push eax
lea ecx, [esp + 0x54]
call fcn.00467110
test al, al
jne 0x4beaa0
mov byte [esp + 0xc818], 4
lea ecx, [esp + 0x4c]
call fcn.0041cbb0
jmp 0x4becba
cmp byte [esp + 0x14dc], 0
je 0x4bebf5
mov esi, dword [esp + 0x18]
mov ecx, dword [esi]
push ebx
push 1
push ecx
mov ecx, 0x541e38
call fcn.00479a60
cmp eax, 1
jne 0x4bebf5
mov eax, dword [esi]
lea edx, [esp + 0x361c]
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4beb70
nop
lea edx, [esp + 0x361c]
push edx
call fcn.00451140
push eax
push 0x258
call fcn.004612b0
push eax
call fcn.004af110
add esp, 8
lea eax, [esp + 0x361c]
push eax
call fcn.00443530
lea ecx, [esp + 0x361c]
push ecx
call fcn.00443160
mov ecx, 0x541e38
call fcn.004785f0
test eax, eax
je 0x4bebf5
push 0x800
lea edx, [esp + 0x3620]
push edx
mov ecx, 0x541e38
call fcn.00479350
test al, al
je 0x4bebf5
lea eax, [esp + 0x361c]
push eax
call fcn.00443510
test al, al
jne 0x4beb80
push ebx
push 1
push 0x550b7a
mov ecx, 0x541e38
call fcn.00479a60
cmp eax, 1
jne 0x4becba
xor eax, eax
jmp 0x4bec20
movzx ecx, word [eax + 0x550b7a]
mov word [esp + eax + 0x561c], cx
add eax, 2
cmp cx, bx
jne 0x4bec20
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileTime]
cmp dword [esp + 0x40], 1
jne 0x4bec80
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea ecx, [esp + 0x5634]
push ecx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4bec80
lea edx, [esp + 0x2524]
push edx
push 0
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x541e38
call fcn.004785f0
test eax, eax
je 0x4becba
push 0x800
lea eax, [esp + 0x5620]
push eax
mov ecx, 0x541e38
call fcn.00479350
test al, al
je 0x4becba
lea ecx, [esp + 0x561c]
push ecx
call fcn.00443510
test al, al
jne 0x4bec43
mov byte [esp + 0xc818], 1
lea ecx, [esp + 0x34c]
call fcn.004643f0
cmp byte [esp + 0x13], 0
jne 0x4bece6
cmp byte [esp + 0x12], 0
jne 0x4bece6
push 0x550b7a
call fcn.00443160
lea edx, [esp + 0x2534]
push edx
call fcn.004ae8e0
lea eax, [esp + 0x661c]
push eax
call fcn.004ae570
mov edi, dword [esp + 0x48]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
inc dword [esp + 0x1c]
xor ebx, ebx
cmp byte [0x535458], bl
je 0x4bde90
cmp byte [0x533388], 0
jne 0x4bed33
cmp byte [0x535458], 0
mov eax, 0x4d0
je 0x4bed38
mov eax, 0x271
push eax
call fcn.004612b0
push eax
call fcn.004af110
add esp, 4
cmp byte [0x535458], 0
je 0x4bed5f
mov ecx, dword [0x533384]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4bed73
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push 1
call fcn.004afe40
call fcn.004af220
mov al, byte [0x533389]
test al, al
je 0x4bedac
push ebx
push ebx
lea edx, [esp + 0xb80c]
push edx
mov ecx, 0x541e38
call fcn.00479a60
cmp eax, 1
je 0x4beda3
mov ecx, 0x53fd10
call fcn.0048e460
test al, al
jne 0x4bedb2
mov al, byte [0x533389]
test al, al
jne 0x4bedcd
cmp dword [esp + 0x20], ebx
jbe 0x4bedc9
push 0x550b7a
call fcn.00451140
push eax
mov ecx, 0x53fd10
call fcn.00490780
jmp 0x4bede8
test al, al
je 0x4bede8
cmp dword [esp + 0x20], ebx
jbe 0x4bede8
push 0x550b7a
call fcn.00451140
push eax
mov ecx, 0x53fd10
call fcn.0048fbc0
cmp byte [esp + 0x14e4], 0
je 0x4bee02
mov eax, dword [str.InterfaceConvertProfile]
push eax
push 0x567a40
call fcn.00496bb0
push 0x567a40
call fcn.00496c90
cmp byte [esp + 0x11], 0
je 0x4bee18
call fcn.004adbd0
mov dword [esp + 0xc818], 0xffffffff
lea ecx, [esp + 0x454]
call fcn.00478d20
mov ecx, dword [esp + 0xc810]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc7f8]
xor ecx, esp
call fcn.004df824
mov esp, ebp
pop ebp
ret 4