Function at 0x1400c7268
Capabilities:
Move file
Write file on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x13d60
call fcn.1400fe810
sub rsp, rax
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rsp + 0x13d98], rbx
mov qword [rsp + 0x13da0], rbp
mov qword [rsp + 0x13da8], rsi
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x13d50], rax
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x20], eax
mov r9, qword [str.InterfaceConvertProfile]
lea r8, str._s_u
mov edx, 0xc8
lea rbp, [0x14018c480]
mov rcx, rbp
call fcn.140057264
lea rcx, [rsp + 0x840]
call fcn.14008e5a0
nop
xor r15d, r15d
mov byte [rsp + 0x1950], r15b
cmp byte [0x1401561a5], r15b
je 0x1400c73c9
mov r8d, 0x800
lea rdx, [rsp + 0x10d50]
lea rcx, [0x140164e50]
call fcn.140078534
xor edx, edx
mov r8d, 0x10f0
lea rcx, [rsp + 0x1960]
call fcn.1400ea880
mov rdx, r15
movzx eax, word [rsp + rdx + 0x10d50]
mov word [rsp + rdx + 0x1960], ax
add rdx, 2
cmp ax, r15w
jne 0x1400c733c
mov qword [rsp + 0x3a60], r15
mov qword [rsp + 0x3a68], r15
mov qword [rsp + 0x3a70], r15
xor r8d, r8d
lea rdx, [rsp + 0x2a50]
lea rcx, [rsp + 0x10d50]
call fcn.140043efc
mov rcx, qword [rsp + 0x29e0]
cmp al, r15b
cmovne rcx, qword [rsp + 0x3a50]
mov qword [rsp + 0x29e0], rcx
lea rdx, [rsp + 0x1960]
lea rcx, [rsp + 0x840]
call fcn.14008e348
lea rcx, [rsp + 0x840]
call fcn.14008e450
jmp 0x1400c74ca
lea rcx, [rsp + 0xa0]
call fcn.14006634c
nop
lea rdi, [rsp + 0xa0]
cmp rbx, r15
je 0x1400c73e9
mov rdi, rbx
jmp 0x1400c7400
mov r8b, 1
lea rdx, [rsp + 0xa0]
lea rcx, [0x140162bc0]
call fcn.140092c70
mov qword [rsp + 0x40], r15
mov byte [rsp + 0x38], r15b
mov dword [rsp + 0x30], r15d
mov byte [rsp + 0x28], r15b
mov byte [rsp + 0x20], 1
mov r9b, 1
lea r8, [rsp + 0x840]
mov edx, 3
mov rcx, rdi
call fcn.14009fa04
cmp al, r15b
jne 0x1400c748a
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x1400c7449
call fcn.1400e9aa4
nop
mov rcx, qword [rsp + 0x920]
cmp rcx, r15
je 0x1400c745c
call fcn.1400e9aa4
nop
mov rcx, qword [rsp + 0x8f8]
cmp rcx, r15
je 0x1400c746f
call fcn.1400e9aa4
nop
mov rcx, qword [rsp + 0x840]
cmp rcx, r15
je 0x1400c87b0
call fcn.1400e9aa4
jmp 0x1400c87b0
mov rdi, r15
cmp qword [rsp + 0x918], r15
jbe 0x1400c74b8
mov rdx, rdi
lea rcx, [rsp + 0x840]
call fcn.14008e564
mov dword [rax + 8], r15d
inc rdi
cmp rdi, qword [rsp + 0x918]
jb 0x1400c7497
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x1400c74ca
call fcn.1400e9aa4
mov rdx, rbp
mov rcx, qword [str.InterfaceConvertProfile]
call fcn.14009bd28
mov r14b, r15b
mov byte [rsp + 0x50], r15b
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb r8, r8
and r8, qword [0x140158330]
mov esi, r15d
mov dword [rsp + 0x54], r15d
lea rax, [rsp + 0x840]
mov qword [rsp + 0x20], rax
lea r9, [0x1400c4810]
lea rdx, str.CONVERTARC
mov rcx, qword [0x140149ef8]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, r15
je 0x1400c874c
xor r8d, r8d
lea rdx, [0x140114818]
mov rcx, rbp
call fcn.14009b870
cmp eax, r15d
jne 0x1400c7561
cmp dword [0x1401571d0], 1
jne 0x1400c755c
cmp byte [0x140172edb], r15b
jne 0x1400c7561
mov r8b, r15b
jmp 0x1400c7564
mov r8b, 1
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 9]
call fcn.1400b99d4
mov edx, 0x800
lea rcx, [rsp + 0x11d50]
call fcn.1400b676c
lea rcx, [rsp + 0x420]
call fcn.1400634a4
nop
cmp byte [0x1401561a5], r15b
je 0x1400c75b4
lea rcx, [rsp + 0x420]
lea rdx, [0x140165382]
mov r8d, 0x102
call fcn.1400ea530
mov rbp, r15
mov qword [rsp + 0x80], r15
mov r13, r15
mov qword [rsp + 0x68], r15
mov qword [0x140157258], r15
mov ebx, r15d
mov rdi, r15
cmp qword [rsp + 0x918], r15
jbe 0x1400c760e
mov rdx, rdi
lea rcx, [rsp + 0x840]
call fcn.14008e564
test byte [rax + 8], 2
je 0x1400c7601
mov rax, qword [rax + 0x10]
add qword [0x140157258], rax
inc ebx
inc rdi
cmp rdi, qword [rsp + 0x918]
jb 0x1400c75de
mov qword [rsp + 0x88], rbx
mov r8d, 0x880
lea rdx, [rsp + 0xcc50]
mov rcx, rbx
call fcn.1400a3d3c
lea r8, [rsp + 0xcc50]
mov edx, 0x65
mov rcx, qword [0x1401561a8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov qword [0x140158298], r15
mov edi, r15d
mov dword [rsp + 0x58], r15d
or r12d, 0xffffffff
mov al, byte [0x140157281]
cmp al, r15b
jne 0x1400c8624
cmp byte [0x1401561a4], r15b
jne 0x1400c8639
mov ecx, esi
mov r14d, 0x880
mov r8, r14
lea rdx, [rsp + 0xcc50]
call fcn.1400a3d3c
lea r8, [rsp + 0xcc50]
mov edx, 0x66
mov rcx, qword [0x1401561a8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8, r14
lea rdx, [rsp + 0xcc50]
mov rcx, rbp
call fcn.1400a3d3c
lea r8, [rsp + 0xcc50]
mov edx, 0x67
mov rcx, qword [0x1401561a8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8, r14
lea rdx, [rsp + 0xcc50]
mov rcx, r13
call fcn.1400a3d3c
lea r8, [rsp + 0xcc50]
mov edx, 0x68
mov rcx, qword [0x1401561a8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp r12d, 0xffffffff
je 0x1400c7731
movsxd r8, r12d
lea rdx, [rsp + 0x1960]
lea rcx, [rsp + 0x840]
call fcn.14008e6b8
mov rcx, qword [rax + 0x1080]
add qword [0x140158298], rcx
or r12d, 0xffffffff
call fcn.1400b8ad4
cmp edi, dword [rsp + 0x918]
jge 0x1400c8619
movsxd rdx, edi
lea rcx, [rsp + 0x840]
call fcn.14008e564
mov rbp, rax
test byte [rax + 8], 2
je 0x1400c85f5
mov r12d, edi
mov dword [rsp + 0x78], edi
cmp byte [rsp + 0x1949], r15b
je 0x1400c7792
test byte [rax + 0x30], 0x10
je 0x1400c7792
mov ecx, 0x50e
call fcn.14005fad0
mov rdx, rax
mov rcx, qword [rbp]
call fcn.1400c5d9c
jmp 0x1400c85f5
cmp byte [0x1401561a5], r15b
je 0x1400c77bc
lea rcx, [0x140165382]
lea rdx, [rsp + 0x420]
mov r8d, 0x102
call fcn.1400ea530
mov byte [0x140165484], 1
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rbp]
lea rcx, [0x140164e50]
call fcn.140079aac
cmp eax, 1
jne 0x1400c85f5
lea rdx, [rsp + 0x220]
lea rcx, [0x140164e50]
call fcn.140078550
mov qword [rsp + 0x3a60], r15
mov qword [rsp + 0x3a68], r15
mov qword [rsp + 0x3a70], r15
xor r8d, r8d
lea rdx, [rsp + 0x2a50]
mov rcx, qword [rbp]
call fcn.140043efc
cmp al, r15b
je 0x1400c85f5
cmp byte [rsp + 0x1949], r15b
je 0x1400c7860
cmp byte [rsp + 0x418], r15b
jne 0x1400c7845
cmp byte [rsp + 0x363], r15b
je 0x1400c7860
mov ecx, 0x50e
call fcn.14005fad0
mov rdx, rax
mov rcx, qword [rbp]
call fcn.1400c5d9c
jmp 0x1400c85f5
mov r9b, 1
mov r14d, 0x800
mov r8, r14
lea rdx, [rsp + 0xfd50]
lea rcx, str.Rar_CV
call fcn.1400b5d58
cmp al, r15b
je 0x1400c85f5
lea rcx, [rsp + 0xfd50]
call fcn.1400b6708
mov cl, 1
call fcn.1400b1468
mov qword [0x140157260], rbx
mov r8, r14
lea rdx, [0x140173f2a]
lea rcx, [0x140164e50]
call fcn.140078534
mov edx, dword [0x140164e54]
mov dword [0x140170ec8], edx
mov dword [0x14016ec2c], 1
mov eax, 4
mov dword [0x14016feb8], eax
mov dword [0x14016febc], eax
lea rdx, [0x14010be18]
lea rcx, [0x140174f30]
call fcn.1400661a4
mov ecx, 0x20f
call fcn.14005fad0
mov rcx, rax
lea rdx, [0x140173f2a]
call fcn.1400b7118
mov r12d, dword [0x14018f618]
cmp byte [0x14016feb1], r15b
je 0x1400c792a
mov byte [0x14016feb1], r15b
mov al, 1
mov byte [rsp + 0x50], al
mov r8b, 1
xor edx, edx
lea rcx, [0x140164e50]
call fcn.14007a724
cmp byte [0x1401561a4], r15b
jne 0x1400c85d6
cmp r12d, dword [0x14018f618]
jne 0x1400c85d6
lea rcx, [0x14018c480]
call fcn.1400b191c
movsxd r13, dword [0x14016ec90]
mov byte [0x14016ede9], r15b
cmp word [0x14016bb0e], r15w
jne 0x1400c79ea
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
xor r9d, r9d
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x60]
lea rcx, [0x140164e50]
call fcn.140078d58
cmp qword [rsp + 0x70], r15
jbe 0x1400c79e0
mov r8, r14
lea rdx, [0x14016bb0e]
lea rcx, str.Rar_CM
call fcn.1400b5c78
mov rdi, rax
cmp rax, r15
je 0x1400c79e0
mov r9, rax
mov r8, qword [rsp + 0x70]
mov edx, 1
mov rcx, qword [rsp + 0x60]
call fcn.1400ef054
mov rcx, rdi
call fcn.1400eee40
mov rcx, qword [rsp + 0x60]
call fcn.1400ea9fc
mov r8, r14
lea rdx, [rsp + 0x12d50]
mov rcx, qword [rbp]
call fcn.140050f5c
mov r8, r14
lea rdx, [rsp + 0x948]
lea rcx, [rsp + 0xed50]
call fcn.140065d2c
cmp word [rsp + 0xed50], r15w
je 0x1400c7a31
mov rdx, r14
lea rcx, [rsp + 0xed50]
call fcn.1400504d4
mov rcx, qword [rbp]
call fcn.14008f698
mov bl, al
lea rax, [0x14010bf20]
lea rcx, [0x14010aa00]
cmp dword [0x140170ec8], r15d
cmove rcx, rax
lea rsi, [0x14010bf28]
cmp word [0x140169b08], r15w
cmove rsi, rcx
mov word [rsp + 0xbc50], r15w
mov rdx, rsi
mov rcx, qword [rbp]
call fcn.140050f20
cmp al, r15b
je 0x1400c7b67
cmp word [rsp + 0xed50], r15w
je 0x1400c7aaf
lea rdx, [rsp + 0x12d50]
lea rcx, [rsp + 0xed50]
call fcn.140068ca4
cmp eax, r15d
jne 0x1400c7b67
mov r15b, 1
mov r9b, r15b
mov r8, r14
lea rdx, [rsp + 0xbc50]
lea rcx, str.Rar_CV
call fcn.1400b5d58
mov rcx, qword [rbp]
call fcn.140050ce0
mov rdx, rax
mov r9, r14
lea rsi, [0x140173f2a]
mov r8, rsi
lea rcx, [rsp + 0xbc50]
call fcn.140050520
mov rcx, rsi
call fcn.140050efc
mov rdi, rax
xor r14d, r14d
cmp rax, r14
je 0x1400c7c8b
mov word [rax], r14w
mov rcx, rsi
call fcn.140050efc
mov r11, rax
lea eax, [r14 + 0x2e]
mov word [rdi], ax
cmp r11, r14
je 0x1400c7c8b
cmp bl, r14b
je 0x1400c7c8b
cmp dword [rsp + 0x368], r14d
jne 0x1400c7c8b
cmp byte [rsp + 0x342], r14b
je 0x1400c7c8b
sub r11, rdi
movzx eax, word [rdi]
mov word [r11 + rdi], ax
add rdi, 2
cmp ax, r14w
jne 0x1400c7b50
jmp 0x1400c7c8b
xor r14d, r14d
cmp word [rsp + 0xed50], r14w
je 0x1400c7bcc
mov rcx, r14
lea rdx, [0x140168af0]
movzx eax, word [rsp + rcx + 0xed50]
mov word [rcx + rdx + 0xb43a], ax
add rcx, 2
cmp ax, r14w
jne 0x1400c7b7f
mov rcx, qword [rbp]
call fcn.140050ce0
mov r11, rax
lea rdi, [0x140173f2a]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x1400c7bb7
jmp 0x1400c7beb
mov rcx, qword [rbp]
lea rdx, [0x140173f2a]
movzx eax, word [rcx]
mov word [rdx], ax
add rcx, 2
add rdx, 2
cmp ax, r14w
jne 0x1400c7bd7
lea rcx, [0x140173f2a]
call fcn.140050efc
mov rdi, rax
cmp rax, r14
je 0x1400c7c49
mov word [rax], r14w
lea rcx, [0x140173f2a]
call fcn.140050efc
cmp rax, r14
je 0x1400c7c41
lea rdx, str..tar
mov rcx, rax
call fcn.140068ca4
cmp eax, r14d
je 0x1400c7c49
cmp bl, r14b
je 0x1400c7c41
cmp dword [rsp + 0x368], r14d
jne 0x1400c7c41
cmp byte [rsp + 0x342], r14b
jne 0x1400c7c49
mov eax, 0x2e
mov word [rdi], ax
mov r8d, 0x800
mov rdx, rsi
lea rcx, [0x140173f2a]
call fcn.140051728
lea rcx, [0x140173f2a]
call fcn.140042584
cmp al, r14b
je 0x1400c7c8b
mov ecx, 0x50d
call fcn.14005fad0
mov rdx, rax
lea rcx, [0x140173f2a]
call fcn.1400c5d9c
mov r15b, 1
cmp r12d, dword [0x14018f618]
jne 0x1400c7cf8
lea rcx, [rsp + 0xfd50]
call fcn.1400b6708
mov dword [0x14016ec58], 3
mov dword [0x14016ec54], 2
mov byte [0x14016eca6], r14b
lea rdx, [0x14010be18]
lea rcx, [0x140174f30]
call fcn.1400661a4
cmp byte [0x14016feb1], r14b
je 0x1400c7ce5
mov byte [0x14016feb1], r14b
mov al, 1
mov byte [rsp + 0x50], al
xor edx, edx
lea rsi, [0x140164e50]
mov rcx, rsi
call fcn.14007a38c
jmp 0x1400c7cff
lea rsi, [0x140164e50]
cmp word [0x14016bb0e], r14w
je 0x1400c7d15
lea rcx, [0x14016bb0e]
call fcn.1400b5f80
xor ebx, ebx
cmp byte [0x1401561a4], bl
jne 0x1400c857b
cmp r12d, dword [0x14018f618]
jne 0x1400c8576
lea rcx, [0x140165382]
lea rdx, [0x14016db20]
mov edi, 0x102
mov r8, rdi
call fcn.1400ea530
mov byte [0x140165484], 1
lea r9d, [rbx + 1]
xor r8d, r8d
lea rdx, [0x140173f2a]
mov rcx, rsi
call fcn.140079aac
cmp eax, 1
jne 0x1400c8571
lea rdx, [rsp + 0x530]
mov rcx, rsi
call fcn.140078550
mov rdx, qword [rsp + 0x400]
cmp rdx, qword [rsp + 0x710]
je 0x1400c7dd7
cmp rdx, rbx
je 0x1400c7dd7
lea rdx, [0x140109b78]
lea rcx, [rsp + 0x220]
call fcn.140068ca4
cmp eax, ebx
jne 0x1400c7db9
cmp byte [rsp + 0x342], bl
jne 0x1400c7dd7
mov ecx, 0x50a
call fcn.14005fad0
mov rdx, rax
mov rcx, qword [rbp]
call fcn.1400c5d9c
xor r12d, r12d
jmp 0x1400c857e
movsxd rax, dword [rsp + 0x194c]
cmp eax, ebx
je 0x1400c7e2c
mov rcx, rax
imul rcx, qword [rsp + 0x408]
mov rax, qword [rsp + 0x718]
imul rax, rax, 0x64
cmp rcx, rax
jge 0x1400c7e2c
lea rcx, [0x140173f2a]
call fcn.140050ce0
mov rdi, rax
mov ecx, 0x50f
call fcn.14005fad0
mov rcx, rax
mov rdx, rdi
call fcn.1400b7118
xor r12d, r12d
jmp 0x1400c857e
lea rcx, [rsp + 0x730]
lea rdx, [0x14016db20]
mov r8, rdi
call fcn.1400ea530
nop
mov cl, 1
call fcn.1400b1468
lea rcx, [0x14016db20]
lea rdx, [rsp + 0x730]
mov r8, rdi
call fcn.1400ea530
mov r8d, 0x800
lea rdx, [0x140173f2a]
mov rcx, rsi
call fcn.140078534
mov edx, dword [0x140164e54]
mov dword [0x140170ec8], edx
mov byte [0x14016ede9], 1
mov qword [0x14016edc8], rbx
mov qword [0x14016edd0], rbx
lea rdx, [0x14010be18]
lea rcx, [0x140174f30]
call fcn.1400661a4
lea rcx, [0x140173f2a]
call fcn.140050ce0
mov rdi, rax
mov ecx, 0x210
call fcn.14005fad0
mov rcx, rax
mov rdx, rdi
call fcn.1400b7118
cmp byte [0x14016feb1], bl
je 0x1400c7ee3
mov byte [0x14016feb1], bl
mov al, 1
mov byte [rsp + 0x50], al
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.14007a724
cmp byte [0x1401561a4], bl
jne 0x1400c855a
cmp r12d, dword [0x14018f618]
jne 0x1400c8555
xor r12d, r12d
cmp qword [rsp + 0x710], r12
jne 0x1400c7f32
cmp qword [rsp + 0x3a50], 0x200
jb 0x1400c7f32
cmp dword [rsp + 0x3f0], 1
jbe 0x1400c855d
movsxd rax, dword [rsp + 0x194c]
cmp eax, r12d
je 0x1400c7f60
mov rcx, rax
imul rcx, qword [rsp + 0x408]
mov rax, qword [rsp + 0x718]
imul rax, rax, 0x64
cmp rcx, rax
jl 0x1400c855d
mov r14b, 1
lea rcx, [0x140173f2a]
call fcn.140050ce0
mov rdi, rax
mov ecx, 0x25a
call fcn.14005fad0
mov rcx, rax
mov rdx, rdi
call fcn.1400b7118
inc dword [rsp + 0x54]
mov rax, qword [rsp + 0x80]
add rax, qword [rsp + 0x408]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x68]
add rcx, qword [rsp + 0x718]
mov qword [rsp + 0x68], rcx
mov rsi, r13
mov qword [rsp + 0x60], r13
cmp r15b, r12b
je 0x1400c83a0
xor r9d, r9d
mov r8b, r14b
mov rdx, qword [rbp]
lea rbx, [0x140164e50]
mov rcx, rbx
call fcn.140079aac
cmp eax, 1
jne 0x1400c855d
lea rcx, [rsp + 0xa0]
call fcn.14006634c
nop
mov rcx, qword [rbp]
lea rdx, [rsp + 0x9c50]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, r12w
jne 0x1400c8005
mov bl, r12b
mov r13d, 0x800
lea r9, [rsp + 0x9c50]
lea r8, str._s._cvtbackup_
mov rdx, r13
lea rcx, [rsp + 0x8c50]
call fcn.140057264
lea rdx, [rsp + 0x8c50]
lea rcx, [rsp + 0x9c50]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, r12d
je 0x1400c824b
lea rdx, [rsp + 0x9c50]
lea rcx, [rsp + 0xa0]
call fcn.1400661a4
lea rdx, [rsp + 0x8c50]
lea rcx, [rsp + 0xa0]
call fcn.1400661a4
lea rcx, [0x140164e50]
call fcn.140078548
cmp eax, r12d
je 0x1400c80ca
mov r8, r13
lea rdx, [rsp + 0x9c50]
lea rcx, [0x140164e50]
call fcn.140079014
cmp al, r12b
je 0x1400c80ca
lea rcx, [rsp + 0x9c50]
call fcn.140042584
cmp al, r12b
jne 0x1400c801f
cmp word [rsp + 0xbc50], r12w
je 0x1400c824d
lea rcx, [rsp + 0x160]
call fcn.14006634c
nop
lea rdx, [rsp + 0xbc50]
lea rcx, [rsp + 0x160]
call fcn.1400661a4
mov qword [rsp + 0x2970], r12
mov qword [rsp + 0x2978], r12
mov qword [rsp + 0x2980], r12
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x3aa0]
call fcn.140062290
nop
lea rdx, [rsp + 0x1960]
lea rcx, [rsp + 0x3aa0]
call fcn.140063080
cmp eax, r12d
jne 0x1400c8229
mov rcx, qword [rbp]
lea rdx, [rsp + 0x8c50]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, r12w
jne 0x1400c8162
lea rcx, [rsp + 0x1960]
call fcn.140050ce0
mov rdx, rax
mov r8, r13
lea rcx, [rsp + 0x8c50]
call fcn.140050ec8
lea rdx, [rsp + 0x8c50]
lea rcx, [rsp + 0x1960]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, r12d
je 0x1400c8227
cmp rsi, 1
jne 0x1400c8207
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x8c50]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400c8207
lea r9, [rsp + 0x2998]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x1960]
lea rcx, [rsp + 0x3aa0]
call fcn.140063080
cmp eax, r12d
je 0x1400c8153
jmp 0x1400c8229
mov bl, 1
lea rcx, [rsp + 0x3aa0]
call fcn.140062354
nop
mov rcx, qword [rsp + 0x160]
cmp rcx, r12
je 0x1400c824d
call fcn.1400e9aa4
jmp 0x1400c824d
mov bl, 1
mov dil, r12b
cmp byte [rsp + 0x1948], r12b
jne 0x1400c82d8
mov dil, 1
mov r8, r13
lea rdx, [rsp + 0xdd50]
lea rcx, [rsp + 0xa0]
call fcn.140066384
cmp al, r12b
je 0x1400c82cb
mov r8, r13
lea rdx, [rsp + 0xac50]
lea rcx, [rsp + 0xa0]
call fcn.140066384
cmp al, r12b
je 0x1400c82cb
lea rcx, [rsp + 0xdd50]
call fcn.140042584
cmp al, r12b
jne 0x1400c82c8
mov r8, r13
lea rdx, [rsp + 0xdd50]
lea rcx, [rsp + 0xa0]
call fcn.140066384
cmp al, r12b
jne 0x1400c827a
jmp 0x1400c82cb
mov dil, r12b
lea rcx, [rsp + 0xa0]
call fcn.140066134
mov r8, r13
lea rdx, [rsp + 0xdd50]
lea rcx, [rsp + 0xa0]
call fcn.140066384
cmp al, r12b
je 0x1400c8385
mov r8, r13
lea rdx, [rsp + 0xac50]
lea rcx, [rsp + 0xa0]
call fcn.140066384
cmp al, r12b
je 0x1400c8385
cmp bl, r12b
jne 0x1400c833c
cmp dil, r12b
jne 0x1400c834e
lea rcx, [rsp + 0xac50]
call fcn.140042598
lea rcx, [rsp + 0xac50]
call fcn.140042188
jmp 0x1400c8364
cmp dil, r12b
jne 0x1400c834e
lea rcx, [rsp + 0xdd50]
call fcn.140042188
lea rdx, [rsp + 0xdd50]
lea rcx, [rsp + 0xac50]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov r8, r13
lea rdx, [rsp + 0xdd50]
lea rcx, [rsp + 0xa0]
call fcn.140066384
cmp al, r12b
jne 0x1400c82f9
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1400c855d
call fcn.1400e9aa4
jmp 0x1400c855d
cmp byte [rsp + 0x1948], r12b
je 0x1400c846b
xor r9d, r9d
mov r8b, 1
mov rdx, qword [rbp]
lea rbx, [0x140164e50]
mov rcx, rbx
call fcn.140079aac
cmp eax, 1
jne 0x1400c8472
mov rcx, qword [rbp]
lea rdx, [rsp + 0x9c50]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, r12w
jne 0x1400c83df
lea rcx, [rsp + 0x9c50]
call fcn.140050ce0
mov rdi, rax
mov ecx, 0x258
call fcn.14005fad0
mov rcx, rax
mov rdx, rdi
call fcn.1400b7118
lea rcx, [rsp + 0x9c50]
call fcn.140042598
lea rcx, [rsp + 0x9c50]
call fcn.140042188
mov rcx, rbx
call fcn.140078548
cmp eax, r12d
je 0x1400c8472
mov r8d, 0x800
lea rdx, [rsp + 0x9c50]
mov rcx, rbx
call fcn.140079014
cmp al, r12b
je 0x1400c8472
lea rcx, [rsp + 0x9c50]
call fcn.140042584
cmp al, r12b
jne 0x1400c83f0
jmp 0x1400c8472
lea rbx, [0x140164e50]
xor r9d, r9d
mov r8b, 1
lea rdx, [0x140173f2a]
mov rcx, rbx
call fcn.140079aac
cmp eax, 1
jne 0x1400c855d
mov rcx, r12
lea rsi, [0x140168af0]
movzx eax, word [rcx + rsi + 0xb43a]
mov word [rsp + rcx + 0x8c50], ax
add rcx, 2
cmp ax, r12w
jne 0x1400c849a
mov rsi, qword [rsp + 0x60]
mov r13d, 0x800
cmp rsi, 1
jne 0x1400c8518
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x8c50]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400c8518
lea r9, [rsp + 0x3a88]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call fcn.140078548
cmp eax, r12d
je 0x1400c855d
mov r8, r13
lea rdx, [rsp + 0x8c50]
mov rcx, rbx
call fcn.140079014
cmp al, r12b
je 0x1400c855d
lea rcx, [rsp + 0x8c50]
call fcn.140042584
cmp al, r12b
jne 0x1400c84bf
jmp 0x1400c855d
xor r12d, r12d
jmp 0x1400c855d
xor r12d, r12d
lea rcx, [rsp + 0x730]
call fcn.1400634cc
cmp r14b, r12b
jne 0x1400c858f
jmp 0x1400c857e
xor r12d, r12d
jmp 0x1400c857e
xor r12d, r12d
jmp 0x1400c857e
xor r12d, r12d
cmp r15b, r12b
jne 0x1400c858f
lea rcx, [0x140173f2a]
call fcn.140042188
xor r15d, r15d
cmp word [rsp + 0xbc50], r15w
je 0x1400c85c1
lea rcx, [rsp + 0xbc50]
call fcn.1400b6370
mov edi, dword [rsp + 0x58]
mov esi, dword [rsp + 0x54]
mov rbx, qword [rsp + 0x88]
mov r13, qword [rsp + 0x68]
jmp 0x1400c85d6
mov edi, dword [rsp + 0x58]
mov esi, dword [rsp + 0x54]
mov rbx, qword [rsp + 0x88]
mov r13, qword [rsp + 0x68]
lea rcx, [rsp + 0x11d50]
call fcn.1400b6708
lea rcx, [rsp + 0xfd50]
call fcn.1400b6370
mov r12d, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x58], edi
mov al, byte [0x140157281]
cmp al, r15b
mov rbp, qword [rsp + 0x80]
je 0x1400c7668
mov r14b, byte [rsp + 0x50]
jmp 0x1400c8624
mov al, byte [0x140157281]
mov r14b, byte [rsp + 0x50]
cmp byte [0x1401561a4], r15b
jne 0x1400c863e
cmp al, r15b
jne 0x1400c863e
mov ecx, 0x4d0
jmp 0x1400c8643
mov r14b, byte [rsp + 0x50]
mov ecx, 0x271
call fcn.14005fad0
mov rcx, rax
call fcn.1400b7118
cmp byte [0x140157281], r15b
je 0x1400c8668
mov rcx, qword [0x1401561a8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400c8689
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], r15b
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov rcx, rdx
call fcn.1400b7ec0
call fcn.1400b7234
mov al, byte [0x1401561a5]
cmp al, r15b
je 0x1400c86f0
lea rcx, [0x140165382]
lea rdx, [rsp + 0x420]
mov r8d, 0x102
call fcn.1400ea530
mov byte [0x140165484], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x10d50]
lea rcx, [0x140164e50]
call fcn.140079aac
cmp eax, 1
je 0x1400c86e5
lea rcx, [0x140162bc0]
call fcn.1400914ac
cmp al, r15b
jne 0x1400c86f5
mov al, byte [0x1401561a5]
cmp al, r15b
jne 0x1400c8717
cmp esi, r15d
jbe 0x1400c8712
lea rcx, [0x140173f2a]
call fcn.140050ce0
mov rdx, rax
lea rcx, [0x140162bc0]
call fcn.140093b64
jmp 0x1400c8738
cmp al, r15b
je 0x1400c8738
cmp esi, r15d
jbe 0x1400c8738
lea rcx, [0x140173f2a]
call fcn.140050ce0
mov rdx, rax
lea rcx, [0x140162bc0]
call fcn.140092ec8
nop
lea rcx, [rsp + 0x420]
call fcn.1400634cc
lea rbp, [0x14018c480]
cmp byte [rsp + 0x1950], r15b
je 0x1400c8765
mov rdx, qword [str.InterfaceConvertProfile]
mov rcx, rbp
call fcn.14009bd28
mov rcx, rbp
call fcn.14009bf3c
cmp r14b, r15b
je 0x1400c8778
call fcn.1400b5fcc
nop
mov rcx, qword [rsp + 0x920]
cmp rcx, r15
je 0x1400c878b
call fcn.1400e9aa4
nop
mov rcx, qword [rsp + 0x8f8]
cmp rcx, r15
je 0x1400c879e
call fcn.1400e9aa4
nop
mov rcx, qword [rsp + 0x840]
cmp rcx, r15
je 0x1400c87b0
call fcn.1400e9aa4
mov rcx, qword [rsp + 0x13d50]
xor rcx, rsp
call fcn.1400e9d00
lea r11, [rsp + 0x13d60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret