Function at 0x467620
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x634
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push 0x103
lea eax, [ebp - 0x107]
push ebx
push eax
mov dword [ebp - 0x630], esi
mov dword [ebp - 0x62c], ebx
mov byte [ebp - 0x108], bl
call fcn.005dfd60
add esp, 0xc
cmp esi, ebx
je 0x46794b
cmp byte [esi], bl
je 0x46794b
push edi
push 1
push ebx
push 0x2c
lea ecx, [ebp - 0x62c]
push ecx
lea edx, [ebp - 0x108]
push edx
push esi
call fcn.004e1380
or edi, 0xffffffff
add esp, 0x18
cmp dword [ebp - 0x62c], edi
je 0x46794a
lea ecx, [ecx]
push 0x207
lea eax, [ebp - 0x623]
push ebx
push eax
mov byte [ebp - 0x624], bl
call fcn.005dfd60
push 0x10c
lea ecx, [ebp - 0x41c]
push ebx
push ecx
call fcn.005dfd60
add esp, 0x18
xor eax, eax
nop
mov cl, byte [ebp + eax - 0x108]
mov byte [ebp + eax - 0x624], cl
inc eax
cmp cl, bl
jne 0x4676d0
mov esi, dword [0x6861e4]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x318], edx
mov dword [ebp - 0x314], ebx
cmp esi, ebx
jbe 0x46777a
mov al, byte [0x6b08d8]
mov cl, al
sub cl, 0x61
cmp cl, 0x19
movsx ecx, al
ja 0x467711
sub ecx, 0x20
mov al, byte [ebp - 0x108]
mov dl, al
sub dl, 0x61
movsx eax, al
cmp dl, 0x19
ja 0x467727
sub eax, 0x20
cmp ecx, eax
jne 0x46777a
cmp esi, 2
jne 0x467758
cmp dword [0x72bcb8], 1
jne 0x46791c
lea eax, [ebp - 0x108]
push eax
push str._DCH__MONITOR__Ignoring_SystemDrive:_s__LogFilesCopiedIgnoreSystemDrive__2_
push 0x6b1620
call fcn.004f0f30
jmp 0x467919
cmp dword [0x72bcb8], 1
jne 0x46777a
lea ecx, [ebp - 0x108]
push ecx
push str._DCH__MONITOR__SystemDrive:_s__Only_Selected_Folders_
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
push 0x103
lea edx, [ebp - 0x20b]
push ebx
push edx
call fcn.005dfd60
add esp, 0xc
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push str.LogFilesCopiedIgnoreDriveList
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 0x20c], bl
mov dword [ebp - 0x634], 0x104
call fcn.004d5770
cmp byte [ebp - 0x20c], bl
je 0x46785a
push 1
push ebx
push 0x2c
lea edx, [ebp - 0x628]
push edx
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x20c]
push ecx
mov dword [ebp - 0x628], ebx
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x628], edi
je 0x46785a
lea ecx, [ecx]
mov al, byte [ebp - 0x310]
mov dl, al
sub dl, 0x61
movsx ecx, al
cmp dl, 0x19
ja 0x467816
sub ecx, 0x20
mov al, byte [ebp - 0x108]
mov dl, al
sub dl, 0x61
movsx eax, al
cmp dl, 0x19
ja 0x46782c
sub eax, 0x20
cmp ecx, eax
je 0x46787f
push 1
push ebx
push 0x2c
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x310]
push ecx
lea edx, [ebp - 0x20c]
push edx
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x628], edi
jne 0x467800
cmp byte [ebp - 0x623], 0x3a
jne 0x4678a4
lea eax, [ebp - 0x624]
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + 0x208], cl
inc eax
cmp cl, bl
jne 0x467870
jmp 0x4678aa
cmp dword [0x72bcb8], 1
jne 0x46791c
lea eax, [ebp - 0x108]
push eax
push str._DCH__MONITOR__Ignoring_Drive:_s__Drive_is_Part_of_LogFilesCopiedIgnoreDriveList_
push 0x6b1620
call fcn.004f0f30
jmp 0x467919
mov byte [ebp - 0x41c], bl
lea ecx, [ebp - 0x624]
push ecx
call fcn.004fb400
lea edx, [ebp - 0x624]
push edx
push ebx
push 0x467410
call fcn.005e07ac
mov esi, eax
add esp, 0xc
cmp esi, edi
je 0x46794a
lea eax, [ebp - 0x624]
push eax
lea ecx, [ebp - 0x108]
push ecx
push str._DCH__MONITOR__Drive:_s__UNC_____s_
push 0x6b1620
call fcn.004f0f30
add esp, 0x10
cmp dword [ebp - 0x314], ebx
jne 0x46790d
lea esp, [esp]
call fcn.004e03f0
cmp dword [ebp - 0x314], ebx
je 0x467900
push ebx
push esi
push str.CBD_4b
call fcn.00420720
add esp, 0xc
mov ecx, dword [ebp - 0x630]
push 1
push ebx
push 0x2c
lea edx, [ebp - 0x62c]
push edx
lea eax, [ebp - 0x108]
push eax
push ecx
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x62c], edi
jne 0x4676a0
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret