Function at 0x4aeb00
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d63cd
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0xc6ec
call fcn.004c1320
mov eax, dword [0x4eb0b4]
xor eax, esp
mov dword [esp + 0xc6e8], eax
push ebx
push esi
push edi
mov eax, dword [0x4eb0b4]
xor eax, esp
push eax
lea eax, [esp + 0xc700]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov eax, dword [str.InterfaceConvertProfile]
push eax
push str._s_u
push 0x572410
mov edx, 0xc8
call fcn.0041cb70
add esp, 0x10
lea ecx, [esp + 0x474]
call fcn.0044b9e0
mov dword [esp + 0xc708], 1
xor ebx, ebx
mov byte [esp + 0x1504], bl
cmp byte [0x532b51], bl
je 0x4aec67
push 0x800
lea ecx, [esp + 0xb6f8]
push ecx
mov ecx, 0x541610
call fcn.00415320
push 0x1050
lea edx, [esp + 0x2558]
push ebx
push edx
call fcn.004c1d50
add esp, 0xc
xor eax, eax
jmp 0x4aebd0
movzx ecx, word [esp + eax + 0xb6f4]
mov word [esp + eax + 0x2554], cx
add eax, 2
cmp cx, bx
jne 0x4aebd0
lea ecx, [esp + 0x251c]
call fcn.004072b0
lea ecx, [esp + 0x2524]
call fcn.004072b0
lea ecx, [esp + 0x252c]
call fcn.004072b0
push ebx
lea eax, [esp + 0x1510]
push eax
lea ecx, [esp + 0xb6fc]
push ecx
call fcn.00441780
test al, al
je 0x4aec42
mov edx, dword [esp + 0x250c]
mov eax, dword [esp + 0x2510]
mov dword [esp + 0x3554], edx
mov dword [esp + 0x3558], eax
lea ecx, [esp + 0x2554]
push ecx
lea ecx, [esp + 0x478]
call fcn.0044b610
lea ecx, [esp + 0x474]
call fcn.0044b900
jmp 0x4aed23
lea ecx, [esp + 0x4c]
call fcn.0047fbd0
mov byte [esp + 0xc708], 2
lea edi, [esp + 0x4c]
cmp esi, ebx
je 0x4aec84
mov edi, esi
jmp 0x4aec95
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, 0x53f4e8
call fcn.0044d400
push ebx
push ebx
push ebx
push 1
push 1
lea eax, [esp + 0x488]
push eax
push 3
push edi
call fcn.00477d00
test al, al
jne 0x4aecdd
mov byte [esp + 0xc708], 1
lea ecx, [esp + 0x4c]
call fcn.00401b10
mov dword [esp + 0xc708], 0xffffffff
lea ecx, [esp + 0x474]
call fcn.004ab6e0
jmp 0x4afdc5
xor esi, esi
cmp dword [esp + 0x4e0], ebx
jbe 0x4aed0a
jmp 0x4aecf0
push esi
lea ecx, [esp + 0x478]
call fcn.0044b9a0
inc esi
mov dword [eax + 4], ebx
cmp esi, dword [esp + 0x4e0]
jb 0x4aecf0
mov byte [esp + 0xc708], 1
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x4aed23
push eax
call fcn.004c1aa4
add esp, 4
mov ecx, dword [str.InterfaceConvertProfile]
push 0x572410
push ecx
call fcn.0046cc10
mov edx, dword [0x534ca4]
push edx
mov byte [esp + 0x15], 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edx, dword [0x51ef04]
neg eax
lea ecx, [esp + 0x474]
push ecx
sbb eax, eax
and eax, dword [0x534ca4]
push 0x4ab730
push eax
push str.CONVERTARC
push edx
mov dword [esp + 0x34], ebx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4afd7e
push ebx
push str.Background
push 0x572410
call fcn.0046c8f0
test eax, eax
jne 0x4aeda8
cmp dword [0x533b6c], 1
jne 0x4aeda1
cmp byte [0x54f41b], al
jne 0x4aeda8
mov byte [esp + 0x14], 0
jmp 0x4aedad
mov byte [esp + 0x14], 1
mov eax, dword [esp + 0x14]
push ebx
push eax
push ebx
push 8
call fcn.004a27f0
push 0x800
lea ecx, [esp + 0x2558]
push ecx
call fcn.0049fd20
xor edi, edi
xor esi, esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [0x533be8], ebx
mov dword [0x533bec], ebx
mov dword [esp + 0x44], edi
cmp dword [esp + 0x4e0], ebx
jbe 0x4aee34
lea ebx, [ebx]
push esi
lea ecx, [esp + 0x478]
call fcn.0044b9a0
test byte [eax + 4], 2
je 0x4aee26
mov edx, dword [eax + 8]
add dword [0x533be8], edx
mov eax, dword [eax + 0xc]
adc dword [0x533bec], eax
inc edi
inc esi
cmp esi, dword [esp + 0x4e0]
jb 0x4aee00
mov dword [esp + 0x44], edi
push 0x880
lea ecx, [esp + 0x85a8]
push ecx
push ebx
push edi
call fcn.0047f7c0
mov eax, dword [0x532b4c]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea edx, [esp + 0x85a4]
push edx
push 0x65
push eax
call esi
or edi, 0xffffffff
cmp byte [0x534c20], 0
mov dword [0x534c10], ebx
mov dword [0x534c14], ebx
mov dword [esp + 0x1c], ebx
jne 0x4afcb2
cmp byte [0x532b50], 0
jne 0x4afcc9
mov edx, dword [esp + 0x20]
push 0x880
lea ecx, [esp + 0x85a8]
push ecx
push ebx
push edx
call fcn.0047f7c0
mov ecx, dword [0x532b4c]
lea eax, [esp + 0x85a4]
push eax
push 0x66
push ecx
call esi
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push 0x880
lea edx, [esp + 0x85a8]
push edx
push eax
push ecx
call fcn.0047f7c0
mov eax, dword [0x532b4c]
lea edx, [esp + 0x85a4]
push edx
push 0x67
push eax
call esi
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push 0x880
lea ecx, [esp + 0x85a8]
push ecx
push edx
push eax
call fcn.0047f7c0
mov edx, dword [0x532b4c]
lea ecx, [esp + 0x85a4]
push ecx
push 0x68
push edx
call esi
cmp edi, 0xffffffff
je 0x4aef4a
push edi
lea eax, [esp + 0xa6a8]
push eax
lea ecx, [esp + 0x47c]
call fcn.0044b7e0
mov ecx, dword [eax + 0x1000]
add dword [0x534c10], ecx
mov edx, dword [eax + 0x1004]
adc dword [0x534c14], edx
or edi, 0xffffffff
call fcn.004a1a00
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x4e0]
jge 0x4afcb2
mov ecx, eax
push ecx
lea ecx, [esp + 0x478]
call fcn.0044b9a0
mov ebx, eax
test byte [ebx + 4], 2
mov dword [esp + 0x18], ebx
je 0x4afca0
cmp byte [esp + 0x14fd], 0
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x48], edi
je 0x4aefb2
test byte [ebx + 0x24], 0x10
je 0x4aefb2
push 0x50e
call fcn.00475570
mov edx, dword [ebx]
push eax
push edx
call fcn.004ad680
add esp, 8
jmp 0x4afca0
mov eax, dword [ebx]
push 1
push 0
push eax
mov ecx, 0x541610
call fcn.00418940
cmp eax, 1
jne 0x4afca0
lea ecx, [esp + 0xac]
push ecx
mov ecx, 0x541610
call fcn.00415350
lea ecx, [esp + 0x251c]
call fcn.004072b0
lea ecx, [esp + 0x2524]
call fcn.004072b0
lea ecx, [esp + 0x252c]
call fcn.004072b0
mov eax, dword [ebx]
push 0
lea edx, [esp + 0x1510]
push edx
push eax
call fcn.00441780
test al, al
je 0x4afca0
cmp byte [esp + 0x14fd], 0
je 0x4af055
cmp dword [esp + 0x1fc], 0
jne 0x4af03a
cmp byte [esp + 0x206], 0
je 0x4af055
push 0x50e
call fcn.00475570
mov ecx, dword [ebx]
push eax
push ecx
call fcn.004ad680
add esp, 8
jmp 0x4afca0
push 1
push 0x800
lea edx, [esp + 0x65ac]
push edx
push str.Rar_CV
call fcn.0049f2e0
test al, al
je 0x4afca0
lea eax, [esp + 0x65a4]
push eax
call fcn.0049fcc0
push 1
call fcn.0049b270
mov ecx, dword [esp + 0x44]
push 0x800
mov dword [0x533bf4], ecx
push 0x550472
mov ecx, 0x541610
call fcn.00415320
mov edx, dword [0x54181c]
mov eax, 4
push 0x4d7800
mov ecx, 0x551474
mov dword [0x54d410], edx
mov dword [0x54b188], 1
mov dword [0x54c400], eax
mov dword [0x54c404], eax
call fcn.0047fa40
push 0x550472
push 0x20f
call fcn.00475570
push eax
call fcn.004a00f0
mov eax, dword [0x5755a8]
add esp, 8
cmp byte [0x54c3f9], 0
mov dword [esp + 0x14], eax
je 0x4af112
mov byte [0x54c3f9], 0
mov byte [esp + 0x11], 1
push 1
push 0
mov ecx, 0x541610
call fcn.00419d30
cmp byte [0x532b50], 0
jne 0x4afc7c
mov ecx, dword [esp + 0x14]
cmp ecx, dword [0x5755a8]
jne 0x4afc7c
push 0x572410
call fcn.0049b650
mov edx, dword [0x54b1d8]
xor edi, edi
mov dword [esp + 0x40], edx
mov byte [0x54b331], 0
cmp word [0x54806e], di
jne 0x4af1c8
push edi
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x541610
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], edi
call fcn.00415500
cmp dword [esp + 0x24], edi
jbe 0x4af1bb
push 0x800
push 0x54806e
push str.Rar_CM
call fcn.0049f210
mov esi, eax
cmp esi, edi
je 0x4af1bb
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
push esi
push edx
push 1
push eax
call fcn.004c3ee0
push esi
call fcn.004c3d02
add esp, 0x14
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004c1dca
add esp, 4
mov esi, dword [esp + 0x18]
mov eax, dword [esi]
push 0x800
lea edx, [esp + 0xa6a8]
push edx
push eax
call fcn.004608c0
push 0x800
lea ecx, [esp + 0x500]
push ecx
lea edx, [esp + 0x96ac]
push edx
call fcn.0047f480
cmp word [esp + 0x96a4], di
je 0x4af217
push 0x800
lea eax, [esp + 0x96a8]
push eax
call fcn.004601c0
mov ecx, dword [esi]
push ecx
call fcn.0044cac0
mov byte [esp + 0x10], al
mov ebx, 0x4d7814
cmp dword [0x54d410], edi
je 0x4af235
mov ebx, 0x4d7b60
cmp word [0x546068], 0
je 0x4af244
mov ebx, 0x4d781c
mov edi, dword [esp + 0x18]
mov edx, dword [edi]
push ebx
push edx
call fcn.00460840
test al, al
je 0x4af31a
cmp word [esp + 0x96a4], 0
je 0x4af281
lea eax, [esp + 0xa6a4]
push eax
lea ecx, [esp + 0x96a8]
push ecx
call fcn.00486fc0
test eax, eax
jne 0x4af31a
mov edx, dword [edi]
push 0x800
push 0x550472
push edx
mov byte [esp + 0x1e], 1
call fcn.00460620
push eax
lea eax, [esp + 0x65b0]
push eax
call fcn.00460210
push 0x550472
call fcn.00460820
mov esi, eax
test esi, esi
je 0x4af42c
xor ecx, ecx
push 0x550472
mov word [esi], cx
call fcn.00460820
mov edx, 0x2e
mov word [esi], dx
test eax, eax
je 0x4af42c
cmp byte [esp + 0x10], 0
je 0x4af42c
cmp dword [esp + 0x12c], 0
jne 0x4af42c
cmp dword [esp + 0x1d8], 0
je 0x4af42c
mov edx, eax
mov ecx, esi
sub edx, esi
movzx eax, word [ecx]
mov word [edx + ecx], ax
add ecx, 2
test ax, ax
jne 0x4af306
jmp 0x4af42c
cmp word [esp + 0x96a4], 0
mov byte [esp + 0x12], 0
je 0x4af388
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x96a4]
mov word [eax + 0x550472], cx
add eax, 2
test cx, cx
jne 0x4af330
mov eax, dword [edi]
push eax
call fcn.00460620
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4af351
mov edi, 0x550472
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4af366
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x18]
jmp 0x4af3a1
mov ecx, dword [edi]
mov edx, 0x550472
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4af390
push 0x550472
call fcn.00460820
mov esi, eax
test esi, esi
je 0x4af3f6
xor ecx, ecx
push 0x550472
mov word [esi], cx
call fcn.00460820
test eax, eax
je 0x4af3ee
push str..tar
push eax
call fcn.00486fc0
test eax, eax
je 0x4af3f6
cmp byte [esp + 0x10], 0
je 0x4af3ee
cmp dword [esp + 0x12c], 0
jne 0x4af3ee
cmp dword [esp + 0x1d8], 0
jne 0x4af3f6
mov edx, 0x2e
mov word [esi], dx
push ebx
push 0x550472
call fcn.00461af0
push 0x550472
call fcn.0043ccc0
test al, al
je 0x4af42c
push 0x50d
call fcn.00475570
push eax
push 0x550472
call fcn.004ad680
add esp, 8
mov byte [esp + 0x12], 1
mov esi, dword [esp + 0x14]
cmp esi, dword [0x5755a8]
jne 0x4af4b9
lea eax, [esp + 0x65a4]
push eax
call fcn.0049fcc0
push 0x4d7800
mov ecx, 0x551474
mov dword [0x54b1b4], 3
mov dword [0x54b1b0], 2
mov byte [0x54b1ee], 0
mov byte [0x54b208], 0
call fcn.0047fa40
push 0x550472
call fcn.00460620
push eax
push 0x20d
call fcn.00475570
push eax
call fcn.004a00f0
add esp, 8
cmp byte [0x54c3f9], 0
je 0x4af4ad
mov byte [0x54c3f9], 0
mov byte [esp + 0x11], 1
push 0
mov ecx, 0x541610
call fcn.00419910
cmp word [0x54806e], 0
je 0x4af4cd
push 0x54806e
call fcn.0049f500
cmp byte [0x532b50], 0
mov byte [esp + 0x13], 0
jne 0x4afc6b
cmp esi, dword [0x5755a8]
jne 0x4afc6b
push 1
push 0
push 0x550472
mov ecx, 0x541610
call fcn.00418940
cmp eax, 1
jne 0x4afc6b
lea ecx, [esp + 0x20c]
push ecx
mov ecx, 0x541610
call fcn.00415350
mov eax, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x1c8]
cmp eax, dword [esp + 0x324]
jne 0x4af539
cmp ecx, dword [esp + 0x328]
je 0x4af577
or eax, ecx
je 0x4af577
push 0x4d7d80
lea edx, [esp + 0xb0]
push edx
call fcn.00486fc0
test eax, eax
jne 0x4af55c
cmp dword [esp + 0x1d8], eax
jne 0x4af577
push 0x50a
call fcn.00475570
push eax
mov eax, dword [edi]
push eax
call fcn.004ad680
add esp, 8
jmp 0x4afc6b
mov eax, dword [esp + 0x1500]
test eax, eax
je 0x4af5e4
mov ecx, dword [esp + 0x1d0]
push ecx
mov ecx, dword [esp + 0x1d0]
cdq
push ecx
push edx
push eax
call fcn.004c1a70
push 0
mov esi, edx
mov edx, dword [esp + 0x334]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x334]
push edx
push eax
call fcn.004c1a70
cmp esi, edx
jg 0x4af5e4
jl 0x4af5c1
cmp edi, eax
jae 0x4af5e4
push 0x550472
call fcn.00460620
push eax
push 0x50f
call fcn.00475570
push eax
call fcn.004a00f0
add esp, 8
jmp 0x4afc6b
mov ecx, 0x40
mov esi, 0x54a07c
lea edi, [esp + 0x36c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [esp + 0xc708], 4
push 1
call fcn.0049b270
mov ecx, 0x40
lea esi, [esp + 0x36c]
mov edi, 0x54a07c
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x550472
mov ecx, 0x541610
movsw word es:[edi], word [esi]
call fcn.00415320
mov ecx, dword [0x54181c]
xor ebx, ebx
mov dword [0x54d410], ecx
push 0x4d7800
mov ecx, 0x551474
mov byte [0x54b331], 1
mov dword [0x54b310], ebx
mov dword [0x54b314], ebx
mov dword [0x54b318], ebx
mov dword [0x54b31c], ebx
call fcn.0047fa40
push 0x550472
call fcn.00460620
push eax
push 0x210
call fcn.00475570
push eax
call fcn.004a00f0
add esp, 8
cmp byte [0x54c3f9], bl
je 0x4af69e
mov byte [0x54c3f9], bl
mov byte [esp + 0x11], 1
push ebx
push ebx
mov ecx, 0x541610
call fcn.00419d30
cmp byte [0x532b50], 0
jne 0x4afc50
mov edx, dword [esp + 0x14]
cmp edx, dword [0x5755a8]
jne 0x4afc50
mov eax, dword [esp + 0x324]
or eax, dword [esp + 0x328]
jne 0x4af6fb
cmp dword [esp + 0x2510], ebx
ja 0x4af6ed
cmp dword [esp + 0x250c], 0x200
jb 0x4af6fb
cmp dword [esp + 0x1b8], 1
jbe 0x4afc50
mov eax, dword [esp + 0x1500]
cmp eax, ebx
je 0x4af74c
mov ecx, dword [esp + 0x1d0]
push ecx
mov ecx, dword [esp + 0x1d0]
cdq
push ecx
push edx
push eax
call fcn.004c1a70
push ebx
mov esi, edx
mov edx, dword [esp + 0x334]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x334]
push edx
push eax
call fcn.004c1a70
cmp esi, edx
jl 0x4afc50
jg 0x4af74c
cmp edi, eax
jb 0x4afc50
push 0x550472
mov byte [esp + 0x17], 1
call fcn.00460620
push eax
push 0x25a
call fcn.00475570
push eax
call fcn.004a00f0
inc dword [esp + 0x28]
mov ecx, dword [esp + 0x1d4]
mov edx, dword [esp + 0x1d8]
mov eax, dword [esp + 0x334]
add esp, 8
add dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x330]
adc dword [esp + 0x38], edx
add dword [esp + 0x2c], eax
adc dword [esp + 0x30], ecx
cmp byte [esp + 0x12], 0
je 0x4afae4
mov esi, dword [esp + 0x18]
mov edx, dword [esi]
push ebx
push 1
push edx
mov ecx, 0x541610
call fcn.00418940
cmp eax, 1
jne 0x4afc50
lea ecx, [esp + 0x4c]
call fcn.0047fbd0
mov byte [esp + 0xc708], 5
mov eax, dword [esi]
lea edx, [esp + 0x45a4]
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4af7e3
mov byte [esp + 0x10], 0
jmp 0x4af800
lea eax, [esp + 0x45a4]
push eax
lea ecx, [esp + 0x55a8]
push str._s._cvtbackup_
push ecx
mov edx, 0x800
call fcn.0041cb70
add esp, 0xc
lea edx, [esp + 0x55a4]
push edx
lea eax, [esp + 0x45a8]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4af9a3
lea ecx, [esp + 0x45a4]
push ecx
lea ecx, [esp + 0x50]
call fcn.0047fa40
lea edx, [esp + 0x55a4]
push edx
lea ecx, [esp + 0x50]
call fcn.0047fa40
push 0x800
lea eax, [esp + 0x45a8]
push eax
mov ecx, 0x541610
call fcn.00415750
test al, al
je 0x4af892
lea ecx, [esp + 0x45a4]
push ecx
call fcn.0043ccc0
test al, al
jne 0x4af800
push ebx
push 1
push 0x550472
mov ecx, 0x541610
call fcn.00418940
cmp eax, 1
jne 0x4af9a8
xor eax, eax
nop
movzx ecx, word [eax + 0x550472]
mov word [esp + eax + 0x45a4], cx
add eax, 2
cmp cx, bx
jne 0x4af8b0
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [ecx]
mov eax, dword [esi]
lea edx, [esp + 0x55a4]
sub edx, eax
jmp 0x4af8e0
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4af8e0
push 0x800
lea edx, [esp + 0x45a8]
push edx
call fcn.00460620
push eax
lea eax, [esp + 0x55ac]
push eax
call fcn.004607f0
lea ecx, [esp + 0x55a4]
push ecx
lea edx, [esp + 0x45a8]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4af9a3
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x4af93a
cmp eax, 1
jne 0x4af96e
push ebx
push ebx
push 3
push ebx
push ebx
push 0x40000000
lea eax, [esp + 0x55bc]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4af96e
lea ecx, [esp + 0x2544]
push ecx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x800
lea edx, [esp + 0x45a8]
push edx
mov ecx, 0x541610
call fcn.00415750
test al, al
je 0x4af9a8
lea eax, [esp + 0x45a4]
push eax
call fcn.0043ccc0
test al, al
je 0x4af9a8
mov esi, dword [esp + 0x18]
jmp 0x4af8d0
mov byte [esp + 0x10], 1
xor bl, bl
cmp byte [esp + 0x14fc], bl
jne 0x4afa25
push 0x800
lea ecx, [esp + 0x35a8]
push ecx
lea ecx, [esp + 0x54]
mov bl, 1
call fcn.0047fc50
test al, al
je 0x4afa1c
push 0x800
lea edx, [esp + 0x75a8]
push edx
lea ecx, [esp + 0x54]
call fcn.0047fc50
test al, al
je 0x4afa1c
lea eax, [esp + 0x35a4]
push eax
call fcn.0043ccc0
test al, al
jne 0x4afa1a
push 0x800
lea ecx, [esp + 0x35a8]
push ecx
lea ecx, [esp + 0x54]
call fcn.0047fc50
test al, al
jne 0x4af9d3
jmp 0x4afa1c
xor bl, bl
lea ecx, [esp + 0x4c]
call fcn.0047f9c0
push 0x800
lea edx, [esp + 0x35a8]
push edx
lea ecx, [esp + 0x54]
call fcn.0047fc50
test al, al
je 0x4aface
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
lea esp, [esp]
push 0x800
lea eax, [esp + 0x75a8]
push eax
lea ecx, [esp + 0x54]
call fcn.0047fc50
test al, al
je 0x4aface
cmp byte [esp + 0x10], 0
jne 0x4afa91
test bl, bl
jne 0x4afaa2
lea ecx, [esp + 0x75a4]
push ecx
call fcn.0043cde0
lea edx, [esp + 0x75a4]
push edx
call fcn.0043c760
jmp 0x4afab4
test bl, bl
jne 0x4afaa2
lea eax, [esp + 0x35a4]
push eax
call fcn.0043c760
lea ecx, [esp + 0x35a4]
push ecx
lea edx, [esp + 0x75a8]
push edx
call esi
push 0x800
lea eax, [esp + 0x35a8]
push eax
lea ecx, [esp + 0x54]
call fcn.0047fc50
test al, al
jne 0x4afa50
mov byte [esp + 0xc708], 4
lea ecx, [esp + 0x4c]
call fcn.00401b10
jmp 0x4afc50
cmp byte [esp + 0x14fc], 0
je 0x4afb97
mov esi, dword [esp + 0x18]
mov ecx, dword [esi]
push ebx
push 1
push ecx
mov ecx, 0x541610
call fcn.00418940
cmp eax, 1
jne 0x4afb97
mov eax, dword [esi]
lea edx, [esp + 0x35a4]
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4afb20
nop
lea edx, [esp + 0x35a4]
push edx
call fcn.00460620
push eax
push 0x258
call fcn.00475570
push eax
call fcn.004a00f0
add esp, 8
lea eax, [esp + 0x35a4]
push eax
call fcn.0043cde0
lea ecx, [esp + 0x35a4]
push ecx
call fcn.0043c760
push 0x800
lea edx, [esp + 0x35a8]
push edx
mov ecx, 0x541610
call fcn.00415750
test al, al
je 0x4afb97
lea eax, [esp + 0x35a4]
push eax
call fcn.0043ccc0
test al, al
jne 0x4afb30
push ebx
push 1
push 0x550472
mov ecx, 0x541610
call fcn.00418940
cmp eax, 1
jne 0x4afc50
xor eax, eax
jmp 0x4afbc0
movzx ecx, word [eax + 0x550472]
mov word [esp + eax + 0x55a4], cx
add eax, 2
cmp cx, bx
jne 0x4afbc0
mov ebx, dword [esp + 0x40]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
test ebx, ebx
je 0x4afbea
cmp ebx, 1
jne 0x4afc24
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea ecx, [esp + 0x55bc]
push ecx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4afc24
lea edx, [esp + 0x2544]
push edx
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x800
lea eax, [esp + 0x55a8]
push eax
mov ecx, 0x541610
call fcn.00415750
test al, al
je 0x4afc50
lea ecx, [esp + 0x55a4]
push ecx
call fcn.0043ccc0
test al, al
jne 0x4afbe1
mov byte [esp + 0xc708], 1
lea ecx, [esp + 0x36c]
call fcn.00478c30
cmp byte [esp + 0x13], 0
jne 0x4afc7c
cmp byte [esp + 0x12], 0
jne 0x4afc7c
push 0x550472
call fcn.0043c760
lea edx, [esp + 0x2554]
push edx
call fcn.0049fcc0
lea eax, [esp + 0x65a4]
push eax
call fcn.0049f950
mov edi, dword [esp + 0x48]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
inc dword [esp + 0x1c]
xor ebx, ebx
cmp byte [0x534c20], bl
je 0x4aee80
cmp byte [0x532b50], 0
jne 0x4afcc9
cmp byte [0x534c20], 0
mov eax, 0x4d0
je 0x4afcce
mov eax, 0x271
push eax
call fcn.00475570
push eax
call fcn.004a00f0
add esp, 4
cmp byte [0x534c20], 0
je 0x4afcf5
mov ecx, dword [0x532b4c]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4afd09
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push 1
call fcn.004a0df0
call fcn.004a0200
mov al, byte [0x532b51]
test al, al
je 0x4afd42
push ebx
push ebx
lea edx, [esp + 0xb6fc]
push edx
mov ecx, 0x541610
call fcn.00418940
cmp eax, 1
je 0x4afd39
mov ecx, 0x53f4e8
call fcn.0044f2f0
test al, al
jne 0x4afd48
mov al, byte [0x532b51]
test al, al
jne 0x4afd63
cmp dword [esp + 0x20], ebx
jbe 0x4afd5f
push 0x550472
call fcn.00460620
push eax
mov ecx, 0x53f4e8
call fcn.0044f9e0
jmp 0x4afd7e
test al, al
je 0x4afd7e
cmp dword [esp + 0x20], ebx
jbe 0x4afd7e
push 0x550472
call fcn.00460620
push eax
mov ecx, 0x53f4e8
call fcn.004502c0
cmp byte [esp + 0x1504], 0
je 0x4afd98
mov eax, dword [str.InterfaceConvertProfile]
push eax
push 0x572410
call fcn.0046cc10
push 0x572410
call fcn.0046ccf0
cmp byte [esp + 0x11], 0
je 0x4afdae
call fcn.0049ee60
mov dword [esp + 0xc708], 0xffffffff
lea ecx, [esp + 0x474]
call fcn.00417a80
mov ecx, dword [esp + 0xc700]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc6e8]
xor ecx, esp
call fcn.004c1302
mov esp, ebp
pop ebp
ret 4