Function at 0x140097a34
Capabilities:
Move file
Write file on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x89e0
call fcn.1400baa60
sub rsp, rax
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x8a18], rbx
mov qword [rsp + 0x8a20], rbp
mov qword [rsp + 0x8a28], rsi
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x89d0], rax
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x20], eax
mov r9, qword [str.InterfaceConvertProfile]
lea r8, str._s_u
mov edx, 0xc8
lea rcx, [0x140126bd0]
call fcn.1400287d0
lea rcx, [rsp + 0x470]
call fcn.14003f248
nop
xor esi, esi
mov byte [rsp + 0xe08], sil
cmp byte [0x1400fec05], sil
je 0x140097b9f
mov r8d, 0x400
lea rdx, [rsp + 0x81d0]
lea rcx, [0x140105fe0]
call fcn.140012a08
xor edx, edx
mov r8d, 0x838
lea rcx, [rsp + 0xe10]
call fcn.1400a9314
xor ebx, ebx
mov rdx, rbx
movzx eax, word [rsp + rdx + 0x81d0]
mov word [rsp + rdx + 0xe10], ax
add rdx, 2
cmp ax, bx
jne 0x140097b03
lea rcx, [rsp + 0x2264]
call fcn.14006e33c
lea rcx, [rsp + 0x2288]
call fcn.14006e33c
lea rcx, [rsp + 0x22ac]
call fcn.14006e33c
xor r9d, r9d
lea r8, [rsp + 0x1650]
lea rdx, [rsp + 0x81d0]
xor ecx, ecx
call fcn.140034998
mov rcx, qword [rsp + 0x1610]
cmp al, bl
cmovne rcx, qword [rsp + 0x2250]
mov qword [rsp + 0x1610], rcx
lea rdx, [rsp + 0xe10]
lea rcx, [rsp + 0x470]
call fcn.14003eecc
lea rcx, [rsp + 0x470]
call fcn.14003f0d4
jmp 0x140097cd1
lea rcx, [rsp + 0x80]
call fcn.14006bae0
nop
lea rdi, [rsp + 0x80]
cmp rbx, rsi
je 0x140097bbf
mov rdi, rbx
jmp 0x140097bd6
xor r8d, r8d
lea rdx, [rsp + 0x80]
lea rcx, [0x1401055a0]
call fcn.1400407ec
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
lea r8, [rsp + 0x470]
lea edx, [rbx + 3]
mov rcx, rdi
call fcn.140063f44
cmp al, bl
jne 0x140097c7f
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x140097c18
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x80]
cmp rcx, rbx
je 0x140097c2b
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x5e0]
cmp rcx, rbx
je 0x140097c3e
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x5c0]
cmp rcx, rbx
je 0x140097c51
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x490]
cmp rcx, rbx
je 0x140097c64
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x470]
cmp rcx, rbx
je 0x140098fa5
call fcn.1400a8854
jmp 0x140098fa5
mov rdi, rbx
cmp qword [rsp + 0x5d8], rbx
jbe 0x140097cac
mov rdx, rdi
lea rcx, [rsp + 0x470]
call fcn.14003f20c
mov dword [rax + 8], ebx
inc rdi
cmp rdi, qword [rsp + 0x5d8]
jb 0x140097c8c
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x140097cbf
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x80]
cmp rcx, rbx
je 0x140097cd1
call fcn.1400a8854
lea rdx, [0x140126bd0]
mov rcx, qword [str.InterfaceConvertProfile]
call fcn.14005c778
mov sil, bl
mov byte [rsp + 0x40], bl
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb r8, r8
and r8, qword [0x1400ffd80]
mov r13d, ebx
mov dword [rsp + 0x58], ebx
lea rax, [rsp + 0x470]
mov qword [rsp + 0x20], rax
lea r9, [0x140094738]
lea rdx, str.CONVERTARC
mov rcx, qword [0x1400ec660]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, rbx
je 0x140098f27
xor r8d, r8d
lea rdx, [0x1400ca4d8]
lea rcx, [0x140126bd0]
call fcn.14005c490
cmp eax, ebx
jne 0x140097d6c
cmp dword [0x1400fec18], 1
jne 0x140097d67
cmp byte [0x14010d6bb], bl
jne 0x140097d6c
mov r8b, bl
jmp 0x140097d6f
mov r8b, 1
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 8]
call fcn.14008a1d0
mov edx, 0x400
lea rcx, [rsp + 0xe10]
call fcn.140087598
mov r14, rbx
mov qword [rsp + 0x50], rbx
mov rbp, rbx
mov qword [rsp + 0x48], rbx
mov qword [0x1400ff4b0], rbx
xor ecx, ecx
mov rdi, rcx
cmp qword [rsp + 0x5d8], rcx
jbe 0x140097de4
mov rdx, rdi
lea rcx, [rsp + 0x470]
call fcn.14003f20c
test byte [rax + 8], 8
je 0x140097dd7
mov rax, qword [rax + 0x10]
add qword [0x1400ff4b0], rax
inc ebx
inc rdi
cmp rdi, qword [rsp + 0x5d8]
jb 0x140097db4
mov ecx, ebx
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
call fcn.140046b98
lea r8, [rsp + 0x3f90]
mov edx, 0x65
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor ebx, ebx
mov qword [0x1400ffcd8], rbx
mov r15d, ebx
or r12d, 0xffffffff
mov al, byte [0x1400ffcf0]
cmp al, bl
jne 0x140098e67
lea rdi, [0x140108360]
cmp byte [0x1400fec04], bl
jne 0x140098e7a
mov ecx, r13d
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
call fcn.140046b98
lea r8, [rsp + 0x3f90]
mov edx, 0x66
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
mov rcx, r14
call fcn.140046b98
lea r8, [rsp + 0x3f90]
mov edx, 0x67
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8d, 0x480
lea rdx, [rsp + 0x3f90]
mov rcx, rbp
call fcn.140046b98
lea r8, [rsp + 0x3f90]
mov edx, 0x68
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp r12d, 0xffffffff
je 0x140097f04
movsxd r8, r12d
lea rdx, [rsp + 0x7990]
lea rcx, [rsp + 0x470]
call fcn.14003f030
mov rcx, qword [rax + 0x800]
add qword [0x1400ffcd8], rcx
or r12d, 0xffffffff
call fcn.14008923c
cmp r15d, dword [rsp + 0x5d8]
jge 0x140098e5c
movsxd rdx, r15d
lea rcx, [rsp + 0x470]
call fcn.14003f20c
mov r13, rax
test byte [rax + 8], 8
je 0x140098e3f
mov r12d, r15d
mov dword [rsp + 0x5c], r15d
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rax]
lea rsi, [0x140105fe0]
mov rcx, rsi
call fcn.140015b20
cmp eax, 1
jne 0x140098e3f
lea rdx, [rsp + 0x1d0]
mov rcx, rsi
call fcn.140012a24
lea rcx, [rsp + 0x2264]
call fcn.14006e33c
lea rcx, [rsp + 0x2288]
call fcn.14006e33c
lea rcx, [rsp + 0x22ac]
call fcn.14006e33c
xor r9d, r9d
lea r8, [rsp + 0x1650]
mov rdx, qword [r13]
xor ecx, ecx
call fcn.140034998
cmp al, bl
je 0x140098e3f
cmp word [0x14010b778], bx
jne 0x140097fe2
cmp dword [rsp + 0x310], ebx
je 0x140097fe2
mov ecx, 0x50e
call fcn.140061d94
mov rdx, rax
mov rcx, qword [r13]
call fcn.14009666c
jmp 0x140098e3f
lea rdx, [rsp + 0x7190]
lea rcx, str.Rar_CVXXXXXX
call fcn.140086dec
cmp al, bl
je 0x140098e3f
lea rcx, [rsp + 0x7190]
call fcn.140087580
cmp dword [0x1400fec18], 1
jne 0x14009801c
mov rcx, rdi
call fcn.14001dc78
call fcn.1400829f8
mov r8d, 0x400
lea rdx, [0x14010e71c]
mov rcx, rsi
call fcn.140012a08
mov edx, dword [0x1401063f4]
mov dword [0x14010c6b4], edx
mov dword [0x14010bc84], 1
mov eax, 4
mov dword [0x14010c2a0], eax
mov dword [0x14010c2a4], eax
lea rdx, [0x1400c3120]
mov rcx, qword [0x14010ef20]
call fcn.14006bb20
mov ecx, 0x20a
call fcn.140061d94
mov r8, rax
lea r9, [0x14010e71c]
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.1400287d0
lea rcx, [rsp + 0x3f90]
call fcn.140087994
mov r12d, dword [0x140128570]
cmp byte [0x14010c29a], bl
je 0x1400980be
mov byte [0x14010c29a], bl
mov al, 1
mov byte [rsp + 0x40], al
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.140017374
cmp byte [0x1400fec04], bl
jne 0x140098e20
cmp r12d, dword [0x140128570]
jne 0x140098e20
lea rcx, [0x140126bd0]
call fcn.140082db0
movsxd r14, dword [0x14010bcd8]
mov byte [0x14010bdd2], bl
cmp word [0x14010a370], bx
jne 0x140098170
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
xor r9d, r9d
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140012bd0
cmp qword [rsp + 0x60], rbx
jbe 0x140098166
lea rdx, [0x14010a370]
lea rcx, str.Rar_CMXXXXXX
call fcn.140086d00
mov rdi, rax
cmp rax, rbx
je 0x140098166
mov r9, rax
mov r8, qword [rsp + 0x60]
mov edx, 1
mov rcx, qword [rsp + 0x68]
call fcn.1400aa848
mov rcx, rdi
call fcn.1400aa5c0
mov rcx, qword [rsp + 0x68]
call fcn.1400a93c8
mov r8d, 0x400
lea rdx, [rsp + 0x7990]
mov rcx, qword [r13]
call fcn.140053040
mov rdx, rbx
movzx eax, word [rsp + rdx + 0x600]
mov word [rsp + rdx + 0x6190], ax
add rdx, 2
cmp ax, bx
jne 0x14009818a
cmp word [rsp + 0x6190], bx
je 0x1400981ba
lea rcx, [rsp + 0x6190]
call fcn.140052588
mov rcx, qword [r13]
call fcn.14003ff64
mov sil, al
lea rax, [0x1400c40f0]
lea rcx, [0x1400c3828]
cmp dword [0x14010c6b4], ebx
cmove rcx, rax
lea rbx, [0x1400c4068]
xor edi, edi
cmp word [0x140108b70], di
cmove rbx, rcx
mov rdx, rbx
mov rcx, qword [r13]
call fcn.140052f1c
cmp al, dil
je 0x14009830a
cmp word [rsp + 0x6190], di
je 0x14009822e
lea rdx, [rsp + 0x7990]
lea rcx, [rsp + 0x6190]
call fcn.140073f2c
cmp eax, edi
jne 0x14009830a
mov bpl, 1
xor ebx, ebx
mov rcx, rbx
lea rdx, [0x140108360]
movzx eax, word [rsp + rcx + 0x7190]
mov word [rcx + rdx + 0x63bc], ax
add rcx, 2
cmp ax, bx
jne 0x14009823d
lea rcx, [0x14010e71c]
call fcn.140052588
mov rcx, qword [r13]
call fcn.140052af8
mov r11, rax
lea rdi, [0x14010e71c]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x140098280
lea rcx, [0x14010e71c]
call fcn.140052ebc
mov rdi, rax
cmp rax, rbx
je 0x14009842a
mov word [rax], bx
lea rcx, [0x14010e71c]
call fcn.140052ebc
mov r11, rax
mov eax, 0x2e
mov word [rdi], ax
cmp r11, rbx
je 0x14009842a
cmp sil, bl
je 0x14009842a
cmp dword [rsp + 0x250], ebx
jne 0x14009842a
cmp dword [rsp + 0x2f8], ebx
je 0x14009842a
sub r11, rdi
movzx eax, word [rdi]
mov word [r11 + rdi], ax
add rdi, 2
cmp ax, bx
jne 0x1400982f4
jmp 0x14009842a
mov bpl, dil
cmp word [rsp + 0x6190], di
je 0x14009836d
mov rcx, rdi
lea rdx, [0x140108360]
movzx eax, word [rsp + rcx + 0x6190]
mov word [rcx + rdx + 0x63bc], ax
add rcx, 2
cmp ax, di
jne 0x140098321
mov rcx, qword [r13]
call fcn.140052af8
mov r11, rax
lea rdi, [0x14010e71c]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x140098358
jmp 0x14009838b
mov rcx, qword [r13]
lea rdx, [0x14010e71c]
movzx eax, word [rcx]
mov word [rdx], ax
add rcx, 2
add rdx, 2
cmp ax, di
jne 0x140098378
lea rcx, [0x14010e71c]
call fcn.140052ebc
mov rdi, rax
xor eax, eax
cmp rdi, rax
je 0x1400983eb
mov word [rdi], ax
lea rcx, [0x14010e71c]
call fcn.140052ebc
xor ecx, ecx
cmp rax, rcx
je 0x1400983e3
lea rdx, str..tar
mov rcx, rax
call fcn.140073f2c
xor ecx, ecx
cmp eax, ecx
je 0x1400983eb
cmp sil, cl
je 0x1400983e3
cmp dword [rsp + 0x250], ecx
jne 0x1400983e3
cmp dword [rsp + 0x2f8], ecx
jne 0x1400983eb
mov eax, 0x2e
mov word [rdi], ax
mov rdx, rbx
lea rcx, [0x14010e71c]
call fcn.1400548e4
lea rdx, [0x14010e71c]
xor ecx, ecx
call fcn.1400310fc
xor ebx, ebx
cmp al, bl
je 0x14009842a
mov ecx, 0x50d
call fcn.140061d94
mov rdx, rax
lea rcx, [0x14010e71c]
call fcn.14009666c
mov bpl, 1
cmp r12d, dword [0x140128570]
jne 0x1400984dc
lea rcx, [rsp + 0x7190]
call fcn.140087580
mov dword [0x14010bcac], 3
mov dword [0x14010bca8], 2
mov byte [0x14010bcee], bl
mov byte [0x14010bcf2], bl
lea rdx, [0x1400c3120]
mov rcx, qword [0x14010ef20]
call fcn.14006bb20
lea rcx, [0x14010e71c]
call fcn.140052af8
mov rdi, rax
mov ecx, 0x208
call fcn.140061d94
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.1400287d0
lea rcx, [rsp + 0x3f90]
call fcn.140087994
cmp byte [0x14010c29a], bl
je 0x1400984c9
mov byte [0x14010c29a], bl
mov al, 1
mov byte [rsp + 0x40], al
xor edx, edx
lea rsi, [0x140105fe0]
mov rcx, rsi
call fcn.140016b98
jmp 0x1400984e3
lea rsi, [0x140105fe0]
cmp word [0x14010a370], bx
je 0x1400984f8
lea rcx, [0x14010a370]
call fcn.140086fb4
cmp byte [0x1400fec04], bl
jne 0x140098d9d
cmp r12d, dword [0x140128570]
jne 0x140098d9d
mov r9d, 1
xor r8d, r8d
lea rdx, [0x14010e71c]
mov rcx, rsi
call fcn.140015b20
cmp eax, 1
jne 0x140098d9d
lea rdx, [rsp + 0x320]
mov rcx, rsi
call fcn.140012a24
mov rdx, qword [rsp + 0x2e0]
cmp rdx, qword [rsp + 0x430]
je 0x140098595
cmp rdx, rbx
je 0x140098595
lea rdx, [0x1400c39b8]
lea rcx, [rsp + 0x1d0]
call fcn.140073f2c
cmp eax, ebx
jne 0x14009857a
cmp dword [rsp + 0x2f8], ebx
jne 0x140098595
mov ecx, 0x50a
call fcn.140061d94
mov rdx, rax
mov rcx, qword [r13]
call fcn.14009666c
jmp 0x140098d9d
movsxd rax, dword [rsp + 0xe04]
cmp eax, ebx
je 0x140098601
mov rcx, rax
imul rcx, qword [rsp + 0x2e8]
mov rax, qword [rsp + 0x438]
imul rax, rax, 0x64
cmp rcx, rax
jge 0x140098601
lea rcx, [0x14010e71c]
call fcn.140052af8
mov rdi, rax
mov ecx, 0x50f
call fcn.140061d94
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.1400287d0
lea rcx, [rsp + 0x3f90]
call fcn.140087994
jmp 0x140098d9d
mov rcx, rbx
lea rdi, [0x140108360]
movzx eax, word [rcx + rdi + 0x3418]
mov word [rsp + rcx + 0x4890], ax
add rcx, 2
cmp ax, bx
jne 0x14009860b
cmp dword [0x1400fec18], 1
jne 0x140098635
mov rcx, rdi
call fcn.14001dc78
call fcn.1400829f8
mov rdx, rbx
movzx eax, word [rsp + rdx + 0x4890]
mov word [rdx + rdi + 0x3418], ax
add rdx, 2
cmp ax, bx
jne 0x14009863d
mov r8d, 0x400
lea rdx, [0x14010e71c]
mov rcx, rsi
call fcn.140012a08
mov edx, dword [0x1401063f4]
mov dword [0x14010c6b4], edx
mov byte [0x14010bdd2], 1
mov dword [0x14010bd78], ebx
mov dword [0x14010bd9c], ebx
lea rdx, [0x1400c3120]
mov rcx, qword [0x14010ef20]
call fcn.14006bb20
lea rcx, [0x14010e71c]
call fcn.140052af8
mov rdi, rax
mov ecx, 0x20b
call fcn.140061d94
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.1400287d0
lea rcx, [rsp + 0x3f90]
call fcn.140087994
cmp byte [0x14010c29a], bl
je 0x1400986ef
mov byte [0x14010c29a], bl
mov al, 1
mov byte [rsp + 0x40], al
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.140017374
cmp byte [0x1400fec04], bl
jne 0x140098d9d
cmp r12d, dword [0x140128570]
jne 0x140098d9d
cmp qword [rsp + 0x430], rbx
jne 0x14009873b
cmp qword [rsp + 0x2250], 0x200
jl 0x14009873b
cmp dword [rsp + 0x2d8], 1
jbe 0x140098d9d
movsxd rax, dword [rsp + 0xe04]
cmp eax, ebx
je 0x140098768
mov rcx, rax
imul rcx, qword [rsp + 0x2e8]
mov rax, qword [rsp + 0x438]
imul rax, rax, 0x64
cmp rcx, rax
jl 0x140098d9d
lea rcx, [0x14010e71c]
call fcn.140052af8
mov rdi, rax
mov ecx, 0x25a
call fcn.140061d94
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.1400287d0
lea rcx, [rsp + 0x3f90]
call fcn.140087994
inc dword [rsp + 0x58]
mov rax, qword [rsp + 0x50]
add rax, qword [rsp + 0x2250]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x3704]
call fcn.14006e33c
lea rcx, [rsp + 0x3728]
call fcn.14006e33c
lea rcx, [rsp + 0x374c]
call fcn.14006e33c
xor r9d, r9d
lea r8, [rsp + 0x2af0]
lea rdx, [0x14010e71c]
xor ecx, ecx
call fcn.140034998
cmp al, bl
je 0x140098812
mov rax, qword [rsp + 0x48]
add rax, qword [rsp + 0x36f0]
mov qword [rsp + 0x48], rax
mov rsi, r14
cmp bpl, bl
je 0x140098bd3
xor r9d, r9d
mov r8b, 1
mov rdx, qword [r13]
lea r12, [0x140105fe0]
mov rcx, r12
call fcn.140015b20
cmp eax, 1
jne 0x140098dfc
lea rcx, [rsp + 0x80]
call fcn.14006bae0
nop
mov rcx, qword [r13]
lea rdx, [rsp + 0x5190]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, bx
jne 0x14009885d
xor ebp, ebp
mov r14d, 0x400
lea r9, [rsp + 0x5190]
lea r8, str._s._cvtbackup_
mov rdx, r14
lea rcx, [rsp + 0x5990]
call fcn.1400287d0
lea rdx, [rsp + 0x5990]
lea rcx, [rsp + 0x5190]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, ebp
je 0x140098a4c
lea rdx, [rsp + 0x5190]
lea rcx, [rsp + 0x80]
call fcn.14006bb28
lea rdx, [rsp + 0x5990]
lea rcx, [rsp + 0x80]
call fcn.14006bb28
mov r8, r14
lea rdx, [rsp + 0x5190]
mov rcx, r12
call fcn.140012e80
cmp al, bpl
je 0x14009890c
lea rdx, [rsp + 0x5190]
xor ecx, ecx
call fcn.1400310fc
cmp al, bpl
jne 0x140098875
xor r9d, r9d
mov r8b, 1
lea rdx, [0x14010e71c]
mov rcx, r12
call fcn.140015b20
cmp eax, 1
jne 0x140098a4e
mov rcx, rbp
lea rdx, [0x140108360]
movzx eax, word [rcx + rdx + 0x63bc]
mov word [rsp + rcx + 0x5190], ax
add rcx, 2
cmp ax, bp
jne 0x140098934
mov rcx, qword [r13]
lea rdx, [rsp + 0x5990]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, bp
jne 0x14009895c
lea rcx, [rsp + 0x5190]
call fcn.140052af8
mov rdi, rax
lea rcx, [rsp + 0x5990]
call fcn.140052af8
movzx ecx, word [rdi]
mov word [rax], cx
add rdi, 2
add rax, 2
cmp cx, bp
jne 0x140098989
lea rdx, [rsp + 0x5990]
lea rcx, [rsp + 0x5190]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, ebp
je 0x140098a48
cmp rsi, rbp
je 0x1400989c5
cmp rsi, 1
jne 0x140098a17
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x5990]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140098a17
lea r9, [rsp + 0x2ae0]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r14
lea rdx, [rsp + 0x5190]
mov rcx, r12
call fcn.140012e80
cmp al, bpl
je 0x140098a4e
lea rdx, [rsp + 0x5190]
xor ecx, ecx
call fcn.1400310fc
cmp al, bpl
je 0x140098a4e
jmp 0x14009894d
mov bl, 1
jmp 0x140098a4e
mov bl, 1
mov dil, bpl
cmp byte [rsp + 0xe00], bpl
jne 0x140098adf
mov dil, 1
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bcf0
cmp al, bpl
je 0x140098ad2
mov r8, r14
lea rdx, [rsp + 0x6990]
lea rcx, [rsp + 0x80]
call fcn.14006bcf0
cmp al, bpl
je 0x140098ad2
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.1400310fc
cmp al, bpl
jne 0x140098acf
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bcf0
cmp al, bpl
jne 0x140098a7f
jmp 0x140098ad2
mov dil, bpl
lea rcx, [rsp + 0x80]
call fcn.14006b7f0
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bcf0
cmp al, bpl
je 0x140098b92
mov r8, r14
lea rdx, [rsp + 0x6990]
lea rcx, [rsp + 0x80]
call fcn.14006bcf0
cmp al, bpl
je 0x140098b92
cmp bl, bpl
jne 0x140098b47
cmp dil, bpl
jne 0x140098b5b
lea rdx, [rsp + 0x6990]
xor ecx, ecx
call fcn.140031fe0
lea rdx, [rsp + 0x6990]
xor ecx, ecx
call fcn.140031424
jmp 0x140098b71
cmp dil, bpl
jne 0x140098b5b
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.140031424
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x6990]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov r8, r14
lea rdx, [rsp + 0x4990]
lea rcx, [rsp + 0x80]
call fcn.14006bcf0
cmp al, bpl
jne 0x140098b00
mov rcx, qword [rsp + 0xa0]
xor ebx, ebx
cmp rcx, rbx
je 0x140098ba7
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x80]
cmp rcx, rbx
je 0x140098de9
call fcn.1400a8854
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
jmp 0x140098e20
cmp byte [rsp + 0xe00], bl
je 0x140098cb1
xor r9d, r9d
mov r8b, 1
mov rdx, qword [r13]
lea r12, [0x140105fe0]
mov rcx, r12
call fcn.140015b20
cmp eax, 1
jne 0x140098cb8
mov rcx, qword [r13]
lea rdx, [rsp + 0x4990]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, bx
jne 0x140098c11
lea rcx, [rsp + 0x4990]
call fcn.140052af8
mov rdi, rax
mov ecx, 0x258
call fcn.140061d94
mov r8, rax
mov r9, rdi
mov edx, 0x480
lea rcx, [rsp + 0x3f90]
call fcn.1400287d0
lea rcx, [rsp + 0x3f90]
call fcn.140087994
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.140031fe0
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.140031424
mov r8d, 0x400
lea rdx, [rsp + 0x4990]
mov rcx, r12
call fcn.140012e80
cmp al, bl
je 0x140098cb8
lea rdx, [rsp + 0x4990]
xor ecx, ecx
call fcn.1400310fc
cmp al, bl
jne 0x140098c21
jmp 0x140098cb8
lea r12, [0x140105fe0]
xor r9d, r9d
mov r8b, 1
lea rdx, [0x14010e71c]
mov rcx, r12
call fcn.140015b20
cmp eax, 1
jne 0x140098dd6
mov rcx, rbx
lea rdx, [0x140108360]
movzx eax, word [rcx + rdx + 0x63bc]
mov word [rsp + rcx + 0x5990], ax
add rcx, 2
cmp ax, bx
jne 0x140098ce0
cmp r14, rbx
je 0x140098d04
cmp r14, 1
jne 0x140098d56
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x5990]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140098d56
lea r9, [rsp + 0x2ae0]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x400
lea rdx, [rsp + 0x5990]
mov rcx, r12
call fcn.140012e80
cmp al, bl
je 0x140098dc3
lea rdx, [rsp + 0x5990]
xor ecx, ecx
call fcn.1400310fc
cmp al, bl
jne 0x140098cf9
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
jmp 0x140098e20
cmp bpl, bl
jne 0x140098e0f
lea rdx, [0x14010e71c]
xor ecx, ecx
call fcn.140031424
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
jmp 0x140098e20
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
jmp 0x140098e20
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
jmp 0x140098e20
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
jmp 0x140098e20
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
jmp 0x140098e20
mov rbp, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
lea rdi, [0x140108360]
lea rcx, [rsp + 0xe10]
call fcn.140087580
lea rcx, [rsp + 0x7190]
call fcn.140087284
mov r12d, dword [rsp + 0x5c]
inc r15d
mov al, byte [0x1400ffcf0]
cmp al, bl
mov r13d, dword [rsp + 0x58]
je 0x140097e38
mov sil, byte [rsp + 0x40]
jmp 0x140098e67
mov al, byte [0x1400ffcf0]
mov sil, byte [rsp + 0x40]
cmp byte [0x1400fec04], bl
jne 0x140098e7f
cmp al, bl
jne 0x140098e7f
mov ecx, 0x4d0
jmp 0x140098e84
mov sil, byte [rsp + 0x40]
mov ecx, 0x271
call fcn.140061d94
mov rcx, rax
call fcn.140087994
cmp byte [0x1400ffcf0], bl
je 0x140098ea8
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x140098ec8
mov qword [rsp + 0x28], rbx
mov byte [rsp + 0x20], bl
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov rcx, rdx
call fcn.140088630
call fcn.140087a5c
cmp byte [0x1400fec05], bl
je 0x140098f07
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x81d0]
lea rcx, [0x140105fe0]
call fcn.140015b20
cmp eax, 1
je 0x140098eff
lea rcx, [0x1401055a0]
call fcn.140042cc8
cmp al, bl
jne 0x140098f0c
cmp byte [0x1400fec05], bl
jne 0x140098f27
cmp r13d, ebx
jbe 0x140098f27
lea rcx, [0x14010e71c]
call fcn.140052af8
mov rdx, rax
lea rcx, [0x1401055a0]
call fcn.1400433a8
cmp byte [rsp + 0xe08], bl
je 0x140098f43
mov rdx, qword [str.InterfaceConvertProfile]
lea rcx, [0x140126bd0]
call fcn.14005c778
lea rcx, [0x140126bd0]
call fcn.14005c800
cmp sil, bl
je 0x140098f5a
call fcn.140086894
nop
mov rcx, qword [rsp + 0x5e0]
cmp rcx, rbx
je 0x140098f6d
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x5c0]
cmp rcx, rbx
je 0x140098f80
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x490]
cmp rcx, rbx
je 0x140098f93
call fcn.1400a8854
nop
mov rcx, qword [rsp + 0x470]
cmp rcx, rbx
je 0x140098fa5
call fcn.1400a8854
mov rcx, qword [rsp + 0x89d0]
xor rcx, rsp
call fcn.1400a86e0
lea r11, [rsp + 0x89e0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret