Function at 0x4e2810
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x12a1c]
mov eax, 0x12a1c
call fcn.00507730
push 0xffffffffffffffff
push 0x53da61
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x5755c4]
xor eax, ebp
mov dword [ebp + 0x12a18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x12a24]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push dword [0x5753b8]
push 0x5548c4
push 0xc8
push 0x5e7c78
call fcn.00402930
add esp, 0x14
lea ecx, [ebp + 0x6234]
call fcn.00443d10
mov dword [ebp - 4], 1
cmp byte [0x57dfb4], 0
mov byte [ebp + 0x726c], 0
je 0x4e2965
push 0x800
lea eax, [ebp + 0x8918]
mov ecx, 0x5a6670
push eax
call fcn.004065d0
push 0x10f8
lea eax, [ebp + 0x40f4]
push 0
push eax
call fcn.00520500
add esp, 0xc
lea eax, [ebp + 0x8918]
push 0x800
push eax
lea eax, [ebp + 0x40f4]
push eax
call fcn.0049dc20
push 0
lea eax, [ebp + 0x51ec]
mov dword [ebp + 0x61fc], 0
push eax
lea eax, [ebp + 0x8918]
mov dword [ebp + 0x6200], 0
push eax
mov dword [ebp + 0x6204], 0
mov dword [ebp + 0x6208], 0
mov dword [ebp + 0x620c], 0
mov dword [ebp + 0x6210], 0
call fcn.004769d0
test al, al
je 0x4e294e
mov eax, dword [ebp + 0x61ec]
mov dword [ebp + 0x5174], eax
mov eax, dword [ebp + 0x61f0]
mov dword [ebp + 0x5178], eax
lea eax, [ebp + 0x40f4]
push eax
lea ecx, [ebp + 0x6234]
call fcn.00444350
jmp 0x4e2a42
lea ecx, [ebp + 0x78b8]
call fcn.0049dc70
mov byte [ebp - 4], 2
lea esi, [ebp + 0x78b8]
test edi, edi
je 0x4e2982
mov esi, edi
jmp 0x4e2995
push 1
lea eax, [ebp + 0x78b8]
mov ecx, 0x5a9378
push eax
call fcn.004477c0
push 0
push 0
push 0xb
lea eax, [ebp + 0x6234]
push eax
push 3
push esi
call fcn.004b33e0
test al, al
jne 0x4e29e7
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 0x78b8]
test ecx, ecx
je 0x4e29e2
cmp byte [ebp + 0x78c8], al
je 0x4e29d9
mov eax, dword [ebp + 0x78c0]
add eax, eax
push eax
push ecx
call fcn.0049b220
mov ecx, dword [ebp + 0x78b8]
push ecx
call fcn.00524aa2
add esp, 4
jmp 0x4e3be4
xor esi, esi
cmp dword [ebp + 0x6238], esi
jbe 0x4e2a0d
push esi
lea ecx, [ebp + 0x6234]
call fcn.00444240
inc esi
mov dword [eax + 4], 0
cmp esi, dword [ebp + 0x6238]
jb 0x4e29f1
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 0x78b8]
test ecx, ecx
je 0x4e2a42
cmp byte [ebp + 0x78c8], 0
je 0x4e2a39
mov eax, dword [ebp + 0x78c0]
add eax, eax
push eax
push ecx
call fcn.0049b220
mov ecx, dword [ebp + 0x78b8]
push ecx
call fcn.00524aa2
add esp, 4
push 0x5e7c78
push dword [0x5753b8]
call fcn.004ae4d0
push dword [0x57cf9c]
xor ebx, ebx
mov dword [ebp - 0x18], ebx
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp + 0x6234]
push ecx
sbb eax, eax
and eax, dword [0x57cf9c]
push 0x4e3c20
push eax
push str.CONVERTARC
push dword [0x5b76d8]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4e3bb7
push ebx
push 0x5536d8
push 0x5e7c78
call fcn.004af130
test eax, eax
jne 0x4e2ac0
cmp dword [0x57dfb8], 1
jne 0x4e2abb
cmp byte [0x596e9b], bl
jne 0x4e2ac0
mov byte [ebp - 0x14], bl
jmp 0x4e2ac4
mov byte [ebp - 0x14], 1
push 0
push dword [ebp - 0x14]
push 0
push 0xa
call fcn.004da270
push 0x800
lea eax, [ebp + 0xa918]
push eax
call fcn.004d7f20
lea ecx, [ebp + 0x7564]
call fcn.0049adc0
mov byte [ebp - 4], 6
cmp byte [0x57dfb4], 0
je 0x4e2b0f
mov ecx, 0x40
lea edi, [ebp + 0x7564]
mov esi, 0x5a69ba
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor edi, edi
mov dword [ebp - 0x34], 0
xor esi, esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [0x57f008], 0
mov dword [0x57f00c], 0
mov dword [ebp - 0x44], edi
cmp dword [ebp + 0x6238], esi
jbe 0x4e2b81
mov edi, edi
push esi
lea ecx, [ebp + 0x6234]
call fcn.00444240
test byte [eax + 4], 2
je 0x4e2b75
mov ecx, dword [eax + 8]
add dword [0x57f008], ecx
mov eax, dword [eax + 0xc]
adc dword [0x57f00c], eax
inc edi
inc esi
cmp esi, dword [ebp + 0x6238]
jb 0x4e2b50
mov dword [ebp - 0x44], edi
push 0x880
lea eax, [ebp + 0xb918]
push eax
push 0
push edi
call fcn.004b7540
lea eax, [ebp + 0xb918]
push eax
push 0x67
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp word [ebp + 0x6264], 0
mov dword [0x57eff0], 0
mov dword [0x57eff4], 0
je 0x4e2c06
lea eax, [ebp + 0x6264]
push eax
call fcn.004750c0
test al, al
jne 0x4e2c06
push 0
push 0
lea eax, [ebp + 0x6264]
push eax
call fcn.00474b20
test al, al
jne 0x4e2c06
lea eax, [ebp + 0x6264]
mov ecx, 0x5b77e4
push eax
call fcn.0046e480
mov al, 1
mov byte [0x57dfb6], al
jmp 0x4e2c0b
mov al, byte [0x57dfb6]
xor edi, edi
or esi, 0xffffffff
mov dword [ebp - 0x14], edi
test al, al
jne 0x4e3ac2
jmp 0x4e2c20
cmp byte [0x57dfb7], 0
jne 0x4e3ad6
push 0x880
lea eax, [ebp + 0xb918]
push eax
push 0
push dword [ebp - 0x24]
call fcn.004b7540
lea eax, [ebp + 0xb918]
push eax
push 0x69
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x880
lea eax, [ebp + 0xb918]
push eax
push dword [ebp - 0x30]
push dword [ebp - 0x34]
call fcn.004b7540
lea eax, [ebp + 0xb918]
push eax
push 0x6c
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x880
lea eax, [ebp + 0xb918]
push eax
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.004b7540
lea eax, [ebp + 0xb918]
push eax
push 0x6e
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp esi, 0xffffffff
je 0x4e2ce3
push esi
lea eax, [ebp + 0x40f4]
push eax
lea ecx, [ebp + 0x6234]
call fcn.00444010
mov ecx, dword [eax + 0x1080]
add dword [0x57eff0], ecx
mov eax, dword [eax + 0x1084]
adc dword [0x57eff4], eax
or esi, 0xffffffff
call fcn.004d9120
cmp edi, dword [ebp + 0x6238]
jge 0x4e3aba
push edi
lea ecx, [ebp + 0x6234]
call fcn.00444240
mov ebx, eax
test byte [ebx + 4], 2
je 0x4e3aa7
mov al, byte [ebp + 0x7265]
mov esi, edi
mov dword [ebp - 0x1c], esi
test al, al
je 0x4e2d3b
test byte [ebx + 0x38], 0x10
je 0x4e2d3b
push 0x50e
call fcn.00497960
push eax
push dword [ebx]
call fcn.004dd4d0
add esp, 8
jmp 0x4e3aa7
cmp byte [0x57dfb4], 0
je 0x4e2d62
mov ecx, 0x40
lea esi, [ebp + 0x7564]
mov edi, 0x5a69ba
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, dword [ebp - 0x14]
mov byte [0x5a6abc], 1
test al, al
je 0x4e2d6d
push 1
call fcn.00451e30
push 1
push 0
push dword [ebx]
mov ecx, 0x5a6670
call fcn.004074c0
cmp byte [ebp + 0x7265], 0
mov esi, eax
je 0x4e2da6
call fcn.00451ea0
test al, al
je 0x4e2da6
push 0x50e
call fcn.00497960
push eax
push dword [ebx]
call fcn.004dd4d0
add esp, 8
push 0
call fcn.00451e30
cmp esi, 1
je 0x4e2dcc
cmp esi, 0xffffffff
jne 0x4e3aa4
push dword [ebx]
mov ecx, 0x5b77e4
call fcn.0046e680
jmp 0x4e3aa4
lea eax, [ebp + 0x7668]
mov ecx, 0x5a6670
push eax
call fcn.00406c50
push 0
lea eax, [ebp + 0x51ec]
mov dword [ebp + 0x61fc], 0
push eax
mov dword [ebp + 0x6200], 0
mov dword [ebp + 0x6204], 0
mov dword [ebp + 0x6208], 0
mov dword [ebp + 0x620c], 0
mov dword [ebp + 0x6210], 0
push dword [ebx]
call fcn.004769d0
test al, al
je 0x4e3aa4
cmp byte [ebp + 0x7265], 0
je 0x4e2e66
cmp byte [ebp + 0x7854], 0
jne 0x4e2e4c
cmp byte [ebp + 0x77a3], 0
je 0x4e2e66
push 0x50e
call fcn.00497960
push eax
push dword [ebx]
call fcn.004dd4d0
add esp, 8
jmp 0x4e3aa4
push 1
push 0x800
lea eax, [ebp + 0x7918]
push eax
push str.Rar_CV
call fcn.004d6f80
test al, al
je 0x4e3aa4
lea eax, [ebp + 0x7918]
push eax
call fcn.004d8860
push 1
call fcn.004d1ed0
mov eax, dword [ebp - 0x44]
mov ecx, 0x5a6670
push 0x800
push 0x598eea
mov dword [0x57efec], eax
call fcn.004065d0
mov eax, dword [0x5a6674]
mov ecx, 0x599eec
push 0x541db4
mov dword [0x593e90], eax
mov dword [0x591acc], 1
mov dword [0x592e7c], 2
mov dword [0x592e80], 2
call fcn.0049dd10
push 0x598eea
push 0x20f
call fcn.00497960
push eax
call fcn.004d89d0
add esp, 8
call fcn.004dd3f0
mov ecx, dword [0x592e74]
mov esi, eax
mov dword [ebp - 0x20], esi
test ecx, ecx
je 0x4e2f25
mov dword [ebp - 0x18], ecx
mov dword [0x592e74], 0
push 0
push str.WaitForOther
push 0x5e7c78
call fcn.004af130
test eax, eax
mov ecx, 0x5a6670
push 1
push 0
setne byte [0x596e9c]
call fcn.00406100
cmp byte [0x57dfb7], 0
jne 0x4e3a89
call fcn.004dd3f0
cmp esi, eax
jne 0x4e3a89
push 0x5e7c78
call fcn.004d33b0
cmp word [0x58e9ae], 0
mov eax, dword [0x591b24]
mov dword [ebp - 0x40], eax
mov byte [0x591da9], 0
jne 0x4e2ffb
push 1
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x38], 0
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push eax
mov ecx, 0x5a6670
call fcn.00406810
cmp dword [ebp - 0x3c], 0
jbe 0x4e2ff0
push 0x800
push 0x58e9ae
push str.Rar_CM
call fcn.004d6eb0
mov esi, eax
test esi, esi
je 0x4e2ff0
mov ecx, dword [ebp - 0x3c]
push esi
add ecx, ecx
push ecx
push 1
push dword [ebp - 0x38]
call fcn.00525e32
push esi
call fcn.00525a4d
add esp, 0x14
mov dword [0x58f9b0], 3
push dword [ebp - 0x38]
call fcn.0050786d
add esp, 4
push 0x800
lea eax, [ebp + 0x9918]
push eax
push dword [ebx]
call fcn.004855a0
push 0x800
lea eax, [ebp + 0x6264]
push eax
lea eax, [ebp + 0xca18]
push eax
call fcn.0049dc20
cmp word [ebp + 0xca18], 0
je 0x4e3041
push 0x800
lea eax, [ebp + 0xca18]
push eax
call fcn.00484610
push dword [ebx]
call fcn.004483e0
cmp dword [0x593e90], 0
mov esi, 0x541e10
mov byte [ebp - 0xd], al
je 0x4e305e
mov esi, 0x541e18
cmp word [0x58c9a8], 0
je 0x4e306d
mov esi, 0x541e08
push esi
push dword [ebx]
xor eax, eax
mov word [ebp + 0xea18], ax
call fcn.00484650
test al, al
je 0x4e3169
cmp word [ebp + 0xca18], 0
je 0x4e30ab
lea eax, [ebp + 0x9918]
push eax
lea eax, [ebp + 0xca18]
push eax
call fcn.004a1330
test eax, eax
jne 0x4e3169
push 1
push 0x800
lea eax, [ebp + 0xea18]
mov byte [ebp - 0xe], 1
push eax
push str.Rar_CV
call fcn.004d6f80
push 0x800
push 0x598eea
push dword [ebx]
call fcn.00486220
push eax
lea eax, [ebp + 0xea18]
push eax
call fcn.00485ce0
push 0x598eea
call fcn.00485580
mov esi, eax
test esi, esi
je 0x4e323e
xor eax, eax
push 0x598eea
mov word [esi], ax
call fcn.00485580
mov edx, eax
mov eax, 0x2e
mov word [esi], ax
test edx, edx
je 0x4e323e
cmp byte [ebp - 0xd], 0
je 0x4e323e
cmp dword [ebp + 0x77a8], 0
jne 0x4e323e
cmp byte [ebp + 0x778a], 0
je 0x4e323e
mov ecx, esi
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4e3143
sub ecx, edi
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push esi
push edx
call fcn.0051f100
add esp, 0xc
jmp 0x4e323e
cmp word [ebp + 0xca18], 0
mov byte [ebp - 0xe], 0
push 0x800
je 0x4e31a6
lea eax, [ebp + 0xca18]
push eax
push 0x598eea
call fcn.0049dc20
push 0x800
push dword [ebx]
call fcn.00486220
push eax
push 0x598eea
call fcn.0049dbe0
jmp 0x4e31b2
push dword [ebx]
push 0x598eea
call fcn.0049dc20
push 0x598eea
call fcn.00485580
mov edi, eax
test edi, edi
je 0x4e3204
xor eax, eax
push 0x598eea
mov word [edi], ax
call fcn.00485580
test eax, eax
je 0x4e31fc
push str..tar
push eax
call fcn.004a1330
test eax, eax
je 0x4e3204
cmp byte [ebp - 0xd], 0
je 0x4e31fc
cmp dword [ebp + 0x77a8], 0
jne 0x4e31fc
cmp byte [ebp + 0x778a], 0
jne 0x4e3204
mov eax, 0x2e
mov word [edi], ax
push 0x800
push esi
push 0x598eea
call fcn.004862c0
push 0x598eea
call fcn.004750c0
test al, al
je 0x4e323e
push 0x50d
call fcn.00497960
push eax
push 0x598eea
call fcn.004dd4d0
add esp, 8
mov byte [ebp - 0xe], 1
call fcn.004dd3f0
mov esi, dword [ebp - 0x20]
cmp esi, eax
jne 0x4e32d5
lea eax, [ebp + 0x7918]
push eax
call fcn.004d8860
push 0x541db4
mov ecx, 0x599eec
mov dword [0x591afc], 3
mov dword [0x591af8], 2
mov byte [0x591b3a], 0
call fcn.0049dd10
mov eax, dword [0x592e74]
test eax, eax
je 0x4e329a
mov dword [ebp - 0x18], eax
mov dword [0x592e74], 0
push 0
mov ecx, 0x5a6670
call fcn.00405290
cmp byte [0x57dfb4], 0
je 0x4e32d5
cmp byte [ebp - 0xe], 0
je 0x4e32d5
cmp byte [0x590ac0], 0
je 0x4e32d5
mov ecx, 0x40
lea edi, [ebp + 0x7564]
mov esi, 0x5909c0
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [ebp - 0x20]
cmp word [0x58e9ae], 0
je 0x4e32e9
push 0x58e9ae
call fcn.004d6280
cmp byte [0x57dfb7], 0
mov byte [ebp - 0xf], 0
jne 0x4e3a63
call fcn.004dd3f0
cmp esi, eax
jne 0x4e3a63
mov ecx, 0x40
mov esi, 0x5909c0
mov edi, 0x5a69ba
rep movsd dword es:[edi], dword [esi]
push 1
push 0
push 0x598eea
movsw word es:[edi], word [esi]
mov ecx, 0x5a6670
mov byte [0x5a6abc], 1
call fcn.004074c0
cmp eax, 1
jne 0x4e3a63
lea eax, [ebp + 0x7374]
mov ecx, 0x5a6670
push eax
call fcn.00406c50
mov eax, dword [ebp + 0x7840]
mov ecx, dword [ebp + 0x7844]
cmp eax, dword [ebp + 0x754c]
jne 0x4e336a
cmp ecx, dword [ebp + 0x7550]
je 0x4e33a5
or eax, ecx
je 0x4e33a5
push 0x541ed0
lea eax, [ebp + 0x7668]
push eax
call fcn.004a1330
test eax, eax
jne 0x4e338b
cmp byte [ebp + 0x778a], al
jne 0x4e33a5
push 0x50a
call fcn.00497960
push eax
push dword [ebx]
call fcn.004dd4d0
add esp, 8
jmp 0x4e3a63
mov eax, dword [ebp + 0x7268]
test eax, eax
je 0x4e3409
push dword [ebp + 0x784c]
cdq
push dword [ebp + 0x7848]
push edx
push eax
call fcn.00507960
push 0
push 0x64
push dword [ebp + 0x7558]
mov edi, eax
mov esi, edx
push dword [ebp + 0x7554]
call fcn.00507960
cmp esi, edx
jg 0x4e3409
jl 0x4e33e6
cmp edi, eax
jae 0x4e3409
push 0x598eea
call fcn.00486220
push eax
push 0x50f
call fcn.00497960
push eax
call fcn.004d89d0
add esp, 8
jmp 0x4e3a63
mov ecx, 0x40
lea edi, [ebp + 0x7270]
mov esi, 0x5909c0
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [ebp - 4], 7
push 1
call fcn.004d1ed0
mov ecx, 0x40
lea esi, [ebp + 0x7270]
mov edi, 0x5909c0
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x598eea
mov ecx, 0x5a6670
movsw word es:[edi], word [esi]
call fcn.004065d0
mov eax, dword [0x5a6674]
mov dword [0x593e90], eax
mov byte [0x591da9], 1
call fcn.004d3880
push 0x541db4
mov ecx, 0x599eec
call fcn.0049dd10
mov eax, dword [0x592e74]
test eax, eax
je 0x4e348b
mov dword [ebp - 0x18], eax
mov dword [0x592e74], 0
push 0
push 0
mov ecx, 0x5a6670
call fcn.00406100
cmp byte [0x57dfb7], 0
jne 0x4e3a4e
call fcn.004dd3f0
cmp dword [ebp - 0x20], eax
jne 0x4e3a4e
mov eax, dword [ebp + 0x754c]
or eax, dword [ebp + 0x7550]
jne 0x4e34e3
cmp dword [ebp + 0x61f0], eax
ja 0x4e34d6
cmp dword [ebp + 0x61ec], 0x200
jb 0x4e34e3
cmp dword [ebp + 0x7830], 1
jbe 0x4e3a4e
mov eax, dword [ebp + 0x7268]
mov edi, dword [ebp + 0x784c]
mov ecx, dword [ebp + 0x7848]
test eax, eax
je 0x4e3536
push edi
cdq
push ecx
push edx
push eax
call fcn.00507960
push 0
push 0x64
push dword [ebp + 0x7558]
mov dword [ebp - 0x20], eax
mov esi, edx
push dword [ebp + 0x7554]
call fcn.00507960
cmp esi, edx
jl 0x4e3a4e
jg 0x4e3530
cmp dword [ebp - 0x20], eax
jb 0x4e3a4e
mov ecx, dword [ebp + 0x7848]
inc dword [ebp - 0x24]
add dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x2c]
adc dword [ebp - 0x30], edi
add eax, dword [ebp + 0x7554]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
adc eax, dword [ebp + 0x7558]
cmp byte [ebp - 0xe], 0
mov byte [ebp - 0xf], 1
mov dword [ebp - 0x28], eax
je 0x4e38f4
push 0
push 1
push dword [ebx]
mov ecx, 0x5a6670
call fcn.004074c0
cmp eax, 1
jne 0x4e3a4e
lea ecx, [ebp + 0x78b8]
call fcn.0049dc70
mov byte [ebp - 4], 8
lea eax, [ebp + 0x10a18]
push 0x800
push dword [ebx]
push eax
call fcn.0049dc20
xor al, al
mov byte [ebp - 0xd], al
jmp 0x4e35b0
lea eax, [ebp + 0x10a18]
push eax
push str._s._cvtbackup_
lea eax, [ebp + 0xfa18]
push 0x800
push eax
call fcn.00402930
add esp, 0x10
lea eax, [ebp + 0xfa18]
push eax
lea eax, [ebp + 0x10a18]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4e3838
lea eax, [ebp + 0x10a18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049dd10
lea eax, [ebp + 0xfa18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049dd10
mov ecx, 0x5a6670
call fcn.00407320
test eax, eax
je 0x4e364c
push 0x800
lea eax, [ebp + 0x10a18]
mov ecx, 0x5a6670
push eax
call fcn.00406e30
test al, al
je 0x4e364c
lea eax, [ebp + 0x10a18]
push eax
call fcn.004750c0
test al, al
jne 0x4e35b0
cmp word [ebp + 0xea18], 0
je 0x4e37c3
lea ecx, [ebp + 0x7858]
call fcn.0049dc70
mov byte [ebp - 4], 9
lea eax, [ebp + 0xea18]
push eax
lea ecx, [ebp + 0x7858]
call fcn.0049dd10
lea ecx, [ebp + 0x41a4]
call fcn.00404cb0
push 0
push 0
push 0
lea eax, [ebp + 0x7858]
push eax
lea ecx, [ebp]
call fcn.00499e20
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0x41a4]
push eax
lea ecx, [ebp]
call fcn.0049aaf0
test eax, eax
jne 0x4e37a8
mov edi, dword [ebp - 0x40]
lea esp, [esp]
push 0x800
push dword [ebx]
lea eax, [ebp + 0xfa18]
push eax
call fcn.0049dc20
push 0x800
lea eax, [ebp + 0x41a4]
push eax
call fcn.00486220
push eax
lea eax, [ebp + 0xfa18]
push eax
call fcn.00486320
lea eax, [ebp + 0x41a4]
push eax
call fcn.00486220
push eax
push 0x25a
call fcn.00497960
push eax
call fcn.004d89d0
add esp, 8
lea eax, [ebp + 0xfa18]
push eax
lea eax, [ebp + 0x41a4]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4e3783
cmp edi, 1
jne 0x4e376a
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [ebp + 0xfa18]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4e376a
lea eax, [ebp + 0x51dc]
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp + 0x41a4]
push eax
lea ecx, [ebp]
call fcn.0049aaf0
test eax, eax
je 0x4e36c0
jmp 0x4e37a8
lea eax, [ebp + 0xfa18]
push eax
lea eax, [ebp + 0x41a4]
push eax
push 0x5b0
call fcn.00497960
push eax
call fcn.004d89d0
add esp, 0xc
mov byte [ebp - 0xd], 1
mov byte [ebp - 4], 9
lea ecx, [ebp]
call fcn.00499f10
mov byte [ebp - 4], 8
lea ecx, [ebp + 0x7858]
call fcn.00405100
mov bh, byte [ebp - 0xd]
xor bl, bl
cmp byte [ebp + 0x7264], bl
jne 0x4e3849
push 0x800
lea eax, [ebp + 0xda18]
mov bl, 1
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049de10
test al, al
je 0x4e383e
lea ecx, [ecx]
push 0x800
lea eax, [ebp + 0x11a18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049de10
test al, al
je 0x4e383e
lea eax, [ebp + 0xda18]
push eax
call fcn.004750c0
test al, al
jne 0x4e383c
push 0x800
lea eax, [ebp + 0xda18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049de10
test al, al
jne 0x4e37f0
jmp 0x4e383e
mov bh, 1
jmp 0x4e37c6
xor bl, bl
lea ecx, [ebp + 0x78b8]
call fcn.0049df50
push 0x800
lea eax, [ebp + 0xda18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049de10
test al, al
je 0x4e38e0
push 0x800
lea eax, [ebp + 0x11a18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049de10
test al, al
je 0x4e38e0
test bh, bh
jne 0x4e38a1
test bl, bl
jne 0x4e38b1
lea eax, [ebp + 0x11a18]
push eax
call fcn.004758f0
lea eax, [ebp + 0x11a18]
push eax
call fcn.00474cc0
jmp 0x4e38c5
test bl, bl
jne 0x4e38b1
lea eax, [ebp + 0xda18]
push eax
call fcn.00474cc0
lea eax, [ebp + 0xda18]
push eax
lea eax, [ebp + 0x11a18]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push 0x800
lea eax, [ebp + 0xda18]
push eax
lea ecx, [ebp + 0x78b8]
call fcn.0049de10
test al, al
jne 0x4e3864
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x78b8]
call fcn.00405100
jmp 0x4e3a4e
cmp byte [ebp + 0x7264], 0
je 0x4e39a0
push 0
push 1
push dword [ebx]
mov ecx, 0x5a6670
call fcn.004074c0
cmp eax, 1
jne 0x4e39a0
push 0x800
push dword [ebx]
lea eax, [ebp + 0x10a18]
push eax
call fcn.0049dc20
lea ecx, [ecx]
lea eax, [ebp + 0x10a18]
push eax
call fcn.00486220
push eax
push 0x258
call fcn.00497960
push eax
call fcn.004d89d0
add esp, 8
lea eax, [ebp + 0x10a18]
push eax
call fcn.004758f0
lea eax, [ebp + 0x10a18]
push eax
call fcn.00474cc0
mov ecx, 0x5a6670
call fcn.00407320
test eax, eax
je 0x4e39a0
push 0x800
lea eax, [ebp + 0x10a18]
mov ecx, 0x5a6670
push eax
call fcn.00406e30
test al, al
je 0x4e39a0
lea eax, [ebp + 0x10a18]
push eax
call fcn.004750c0
test al, al
jne 0x4e3930
push 0
push 1
push 0x598eea
mov ecx, 0x5a6670
call fcn.004074c0
cmp eax, 1
jne 0x4e3a4e
push 0x800
push 0x598eea
lea eax, [ebp + 0x11a18]
push eax
call fcn.0049dc20
mov edi, dword [ebp - 0x40]
cmp edi, 1
jne 0x4e3a16
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [ebp + 0x11a18]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4e3a16
lea eax, [ebp + 0x6224]
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x5a6670
call fcn.00407320
test eax, eax
je 0x4e3a4e
push 0x800
lea eax, [ebp + 0x11a18]
mov ecx, 0x5a6670
push eax
call fcn.00406e30
test al, al
je 0x4e3a4e
lea eax, [ebp + 0x11a18]
push eax
call fcn.004750c0
test al, al
jne 0x4e39d5
mov byte [ebp - 4], 6
lea ecx, [ebp + 0x7270]
call fcn.0049af20
cmp byte [ebp - 0xf], 0
jne 0x4e3a73
cmp byte [ebp - 0xe], 0
jne 0x4e3a73
push 0x598eea
call fcn.00474cc0
cmp word [ebp + 0xea18], 0
je 0x4e3a89
lea eax, [ebp + 0xea18]
push eax
call fcn.004d6350
lea eax, [ebp + 0xa918]
push eax
call fcn.004d8860
lea eax, [ebp + 0x7918]
push eax
call fcn.004d6350
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x1c]
mov al, byte [0x57dfb6]
inc edi
mov dword [ebp - 0x14], edi
test al, al
je 0x4e2c20
jmp 0x4e3abf
mov al, byte [0x57dfb6]
mov ebx, dword [ebp - 0x18]
cmp byte [0x57dfb7], 0
jne 0x4e3ad9
test al, al
jne 0x4e3ad9
mov eax, 0x4d0
jmp 0x4e3ade
mov ebx, dword [ebp - 0x18]
mov eax, 0x272
push eax
call fcn.00497960
push eax
call fcn.004d89d0
add esp, 4
cmp byte [0x57dfb6], 0
je 0x4e3afd
call fcn.004da9e0
jmp 0x4e3b17
push 0
push 0
push 0
push 0
push 0
push 1
push 0
push 1
call fcn.004daa30
call fcn.004db8d0
mov al, byte [0x57dfb4]
test al, al
je 0x4e3b6c
mov ecx, 0x40
lea esi, [ebp + 0x7564]
mov edi, 0x5a69ba
lea eax, [ebp + 0x8918]
rep movsd dword es:[edi], dword [esi]
push 0
push 0
push eax
movsw word es:[edi], word [esi]
mov ecx, 0x5a6670
mov byte [0x5a6abc], 1
call fcn.004074c0
cmp eax, 1
je 0x4e3b63
mov ecx, 0x5a9378
call fcn.00445be0
test al, al
jne 0x4e3b72
mov al, byte [0x57dfb4]
test al, al
jne 0x4e3b8d
cmp dword [ebp - 0x24], 0
jbe 0x4e3b89
push 0x598eea
call fcn.00486220
push eax
mov ecx, 0x5a9378
call fcn.0044b220
jmp 0x4e3ba8
test al, al
je 0x4e3ba8
cmp dword [ebp - 0x24], 0
jbe 0x4e3ba8
push 0x598eea
call fcn.00486220
push eax
mov ecx, 0x5a9378
call fcn.0044a400
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x7564]
call fcn.0049af20
cmp byte [ebp + 0x726c], 0
je 0x4e3bd0
push dword [0x5753b8]
push 0x5e7c78
call fcn.004ae4d0
push 0x5e7c78
call fcn.004ae930
test ebx, ebx
je 0x4e3be4
push ebx
call fcn.004d74d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x6234]
call fcn.00443f20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x12a18]
xor ecx, ebp
call fcn.00507712
lea esp, [ebp + 0x12a1c]
pop ebp
ret 4