Function at 0x1400b33c8
Capabilities:
Move file
Write file on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xc880
call fcn.1400d8110
sub rsp, rax
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov qword [rsp + 0xc8b8], rbx
mov qword [rsp + 0xc8c0], rbp
mov qword [rsp + 0xc8c8], rsi
mov rax, qword [0x1401006f0]
xor rax, rsp
mov qword [rsp + 0xc870], rax
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x20], eax
mov r9, qword [str.InterfaceConvertProfile]
lea r8, str._s_u
mov edx, 0xc8
lea rcx, [0x140188d90]
call fcn.140022b7c
lea rcx, [rsp + 0x540]
call fcn.14004b5f8
nop
xor r15d, r15d
mov byte [rsp + 0x1650], r15b
cmp byte [0x140148965], r15b
je 0x1400b3535
mov r8d, 0x800
lea rdx, [rsp + 0xb870]
lea rcx, [0x1401575c0]
call fcn.140014e94
xor edx, edx
mov r8d, 0x1058
lea rcx, [rsp + 0x26b0]
call fcn.1400c7170
mov rdx, r15
movzx eax, word [rsp + rdx + 0xb870]
mov word [rsp + rdx + 0x26b0], ax
add rdx, 2
cmp ax, r15w
jne 0x1400b3499
lea rcx, [rsp + 0x2670]
call fcn.140083b0c
lea rcx, [rsp + 0x2678]
call fcn.140083b0c
lea rcx, [rsp + 0x2680]
call fcn.140083b0c
xor r8d, r8d
lea rdx, [rsp + 0x1660]
lea rcx, [rsp + 0xb870]
call fcn.140040978
mov rcx, qword [rsp + 0x36b0]
cmp al, r15b
cmovne rcx, qword [rsp + 0x2660]
mov qword [rsp + 0x36b0], rcx
lea rdx, [rsp + 0x26b0]
lea rcx, [rsp + 0x540]
call fcn.14004b200
lea rcx, [rsp + 0x540]
call fcn.14004b4a4
jmp 0x1400b3631
lea rcx, [rsp + 0x90]
call fcn.140080d68
nop
lea rdi, [rsp + 0x90]
cmp rbx, r15
je 0x1400b3555
mov rdi, rbx
jmp 0x1400b356c
mov r8b, 1
lea rdx, [rsp + 0x90]
lea rcx, [0x140155380]
call fcn.14004d0b4
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], r15d
mov byte [rsp + 0x28], r15b
mov byte [rsp + 0x20], 1
mov r9b, 1
lea r8, [rsp + 0x540]
mov edx, 3
mov rcx, rdi
call fcn.140078b44
cmp al, r15b
jne 0x1400b35f1
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x1400b35b0
call fcn.1400c7040
nop
mov rcx, qword [rsp + 0x620]
cmp rcx, r15
je 0x1400b35c3
call fcn.1400c7040
nop
mov rcx, qword [rsp + 0x5f8]
cmp rcx, r15
je 0x1400b35d6
call fcn.1400c7040
nop
mov rcx, qword [rsp + 0x540]
cmp rcx, r15
je 0x1400b481e
call fcn.1400c7040
jmp 0x1400b481e
mov rdi, r15
cmp qword [rsp + 0x618], r15
jbe 0x1400b361f
mov rdx, rdi
lea rcx, [rsp + 0x540]
call fcn.14004b5b8
mov dword [rax + 8], r15d
inc rdi
cmp rdi, qword [rsp + 0x618]
jb 0x1400b35fe
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x1400b3631
call fcn.1400c7040
lea rdx, [0x140188d90]
mov rcx, qword [str.InterfaceConvertProfile]
call fcn.14006d6ac
mov r14b, r15b
mov byte [rsp + 0x40], r15b
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb r8, r8
and r8, qword [0x14014aae0]
mov esi, r15d
mov dword [rsp + 0x44], r15d
lea rax, [rsp + 0x540]
mov qword [rsp + 0x20], rax
lea r9, [0x1400b0100]
lea rdx, str.CONVERTARC
mov rcx, qword [0x140134b88]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, r15
je 0x1400b47b2
xor r8d, r8d
lea rdx, [0x1400e9240]
lea rcx, [0x140188d90]
call fcn.14006d3c4
cmp eax, r15d
jne 0x1400b36d0
cmp dword [0x140148978], 1
jne 0x1400b36cb
cmp byte [0x1401657a3], r15b
jne 0x1400b36d0
mov r8b, r15b
jmp 0x1400b36d3
mov r8b, 1
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 8]
call fcn.1400a5f90
mov edx, 0x800
lea rcx, [rsp + 0x26b0]
call fcn.1400a3348
mov rbp, r15
mov qword [rsp + 0x68], r15
mov r13, r15
mov qword [rsp + 0x58], r15
mov qword [0x140149a10], r15
mov ebx, r15d
mov rdi, r15
cmp qword [rsp + 0x618], r15
jbe 0x1400b3749
mov rdx, rdi
lea rcx, [rsp + 0x540]
call fcn.14004b5b8
test byte [rax + 8], 2
je 0x1400b373c
mov rax, qword [rax + 0x10]
add qword [0x140149a10], rax
inc ebx
inc rdi
cmp rdi, qword [rsp + 0x618]
jb 0x1400b3719
mov qword [rsp + 0x78], rbx
mov r8d, 0x880
lea rdx, [rsp + 0x8710]
mov rcx, rbx
call fcn.140080924
lea r8, [rsp + 0x8710]
mov edx, 0x65
mov rcx, qword [0x140148968]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov qword [0x14014aa40], r15
mov edi, r15d
mov dword [rsp + 0x48], r15d
or r12d, 0xffffffff
mov al, byte [0x14014aa58]
cmp al, r15b
jne 0x1400b46c0
cmp byte [0x140148964], r15b
jne 0x1400b46d5
mov ecx, esi
mov r14d, 0x880
mov r8, r14
lea rdx, [rsp + 0x8710]
call fcn.140080924
lea r8, [rsp + 0x8710]
mov edx, 0x66
mov rcx, qword [0x140148968]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8, r14
lea rdx, [rsp + 0x8710]
mov rcx, rbp
call fcn.140080924
lea r8, [rsp + 0x8710]
mov edx, 0x67
mov rcx, qword [0x140148968]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8, r14
lea rdx, [rsp + 0x8710]
mov rcx, r13
call fcn.140080924
lea r8, [rsp + 0x8710]
mov edx, 0x68
mov rcx, qword [0x140148968]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp r12d, 0xffffffff
je 0x1400b3869
movsxd r8, r12d
lea rdx, [rsp + 0xa810]
lea rcx, [rsp + 0x540]
call fcn.14004b388
mov rcx, qword [rax + 0x1000]
add qword [0x14014aa40], rcx
or r12d, 0xffffffff
call fcn.1400a5088
cmp edi, dword [rsp + 0x618]
jge 0x1400b46b5
movsxd rdx, edi
lea rcx, [rsp + 0x540]
call fcn.14004b5b8
mov rbp, rax
test byte [rax + 8], 2
je 0x1400b4694
mov r12d, edi
mov dword [rsp + 0x70], edi
cmp byte [rsp + 0x1649], r15b
je 0x1400b38ca
test byte [rax + 0x2c], 0x10
je 0x1400b38ca
mov ecx, 0x50e
call fcn.140076080
mov rdx, rax
mov rcx, qword [rbp]
call fcn.1400b1ef4
jmp 0x1400b4694
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rax]
lea rcx, [0x1401575c0]
call fcn.140018388
cmp eax, 1
jne 0x1400b4694
lea rdx, [rsp + 0x150]
lea rcx, [0x1401575c0]
call fcn.140014eb0
lea rcx, [rsp + 0x2670]
call fcn.140083b0c
lea rcx, [rsp + 0x2678]
call fcn.140083b0c
lea rcx, [rsp + 0x2680]
call fcn.140083b0c
xor r8d, r8d
lea rdx, [rsp + 0x1660]
mov rcx, qword [rbp]
call fcn.140040978
cmp al, r15b
je 0x1400b4694
cmp byte [rsp + 0x1649], r15b
je 0x1400b397c
cmp dword [rsp + 0x2a8], r15d
jne 0x1400b3961
cmp byte [rsp + 0x2b2], r15b
je 0x1400b397c
mov ecx, 0x50e
call fcn.140076080
mov rdx, rax
mov rcx, qword [rbp]
call fcn.1400b1ef4
jmp 0x1400b4694
mov r9b, 1
mov r14d, 0x800
mov r8, r14
lea rdx, [rsp + 0x6710]
lea rcx, str.Rar_CV
call fcn.1400a287c
cmp al, r15b
je 0x1400b4694
lea rcx, [rsp + 0x6710]
call fcn.1400a32e4
mov cl, 1
call fcn.14009e044
mov qword [0x140149a18], rbx
mov r8, r14
lea rdx, [0x140166802]
lea rcx, [0x1401575c0]
call fcn.140014e94
mov edx, dword [0x1401579d4]
mov dword [0x140163790], edx
mov dword [0x1401614f8], 1
mov eax, 4
mov dword [0x140162780], eax
mov dword [0x140162784], eax
lea rdx, [0x1400e0250]
lea rcx, [0x140167808]
call fcn.140080bc0
mov ecx, 0x20f
call fcn.140076080
mov rcx, rax
lea rdx, [0x140166802]
call fcn.1400a3744
mov r12d, dword [0x14018bf30]
cmp byte [0x140162779], r15b
je 0x1400b3a46
mov byte [0x140162779], r15b
mov al, 1
mov byte [rsp + 0x40], al
mov r8b, 1
xor edx, edx
lea rcx, [0x1401575c0]
call fcn.140019868
cmp byte [0x140148964], r15b
jne 0x1400b4675
cmp r12d, dword [0x14018bf30]
jne 0x1400b4675
lea rcx, [0x140188d90]
call fcn.14009e460
movsxd r13, dword [0x140161558]
mov byte [0x1401616b1], r15b
cmp word [0x14015e3de], r15w
jne 0x1400b3b06
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
xor r9d, r9d
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [0x1401575c0]
call fcn.14001508c
cmp qword [rsp + 0x60], r15
jbe 0x1400b3afc
mov r8, r14
lea rdx, [0x14015e3de]
lea rcx, str.Rar_CM
call fcn.1400a279c
mov rdi, rax
cmp rax, r15
je 0x1400b3afc
mov r9, rax
mov r8, qword [rsp + 0x60]
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.1400c8f54
mov rcx, rdi
call fcn.1400c8d40
mov rcx, qword [rsp + 0x50]
call fcn.1400c72ec
mov r8, r14
lea rdx, [rsp + 0xa810]
mov rcx, qword [rbp]
call fcn.140061890
mov r8, r14
lea rdx, [rsp + 0x648]
lea rcx, [rsp + 0x9810]
call fcn.1400805a0
cmp word [rsp + 0x9810], r15w
je 0x1400b3b4d
mov rdx, r14
lea rcx, [rsp + 0x9810]
call fcn.14006119c
mov rcx, qword [rbp]
call fcn.14004c6d8
mov bl, al
lea rax, [0x1400e0268]
lea rcx, [0x1400e0b78]
cmp dword [0x140163790], r15d
cmove rcx, rax
lea rsi, [0x1400e0270]
cmp word [0x14015c3d8], r15w
cmove rsi, rcx
mov rdx, rsi
mov rcx, qword [rbp]
call fcn.140061828
cmp al, r15b
je 0x1400b3c65
cmp word [rsp + 0x9810], r15w
je 0x1400b3bc2
lea rdx, [rsp + 0xa810]
lea rcx, [rsp + 0x9810]
call fcn.1400883c8
cmp eax, r15d
jne 0x1400b3c65
mov r15b, 1
mov rcx, qword [rbp]
call fcn.1400615e8
mov rdx, rax
mov r9, r14
lea r8, [0x140166802]
lea rcx, [rsp + 0x6710]
call fcn.1400611e8
lea rcx, [0x140166802]
call fcn.140061804
mov rdi, rax
xor r14d, r14d
cmp rax, r14
je 0x1400b3d83
mov word [rax], r14w
lea rcx, [0x140166802]
call fcn.140061804
mov r11, rax
lea eax, [r14 + 0x2e]
mov word [rdi], ax
cmp r11, r14
je 0x1400b3d83
cmp bl, r14b
je 0x1400b3d83
cmp dword [rsp + 0x1d0], r14d
jne 0x1400b3d83
cmp dword [rsp + 0x280], r14d
je 0x1400b3d83
sub r11, rdi
movzx eax, word [rdi]
mov word [r11 + rdi], ax
add rdi, 2
cmp ax, r14w
jne 0x1400b3c4e
jmp 0x1400b3d83
xor r14d, r14d
cmp word [rsp + 0x9810], r14w
je 0x1400b3cca
mov rcx, r14
lea rdx, [0x14015b3c0]
movzx eax, word [rsp + rcx + 0x9810]
mov word [rcx + rdx + 0xb442], ax
add rcx, 2
cmp ax, r14w
jne 0x1400b3c7d
mov rcx, qword [rbp]
call fcn.1400615e8
mov r11, rax
lea rdi, [0x140166802]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x1400b3cb5
jmp 0x1400b3ce9
mov rcx, qword [rbp]
lea rdx, [0x140166802]
movzx eax, word [rcx]
mov word [rdx], ax
add rcx, 2
add rdx, 2
cmp ax, r14w
jne 0x1400b3cd5
lea rcx, [0x140166802]
call fcn.140061804
mov rdi, rax
cmp rax, r14
je 0x1400b3d47
mov word [rax], r14w
lea rcx, [0x140166802]
call fcn.140061804
cmp rax, r14
je 0x1400b3d3f
lea rdx, str..tar
mov rcx, rax
call fcn.1400883c8
cmp eax, r14d
je 0x1400b3d47
cmp bl, r14b
je 0x1400b3d3f
cmp dword [rsp + 0x1d0], r14d
jne 0x1400b3d3f
cmp dword [rsp + 0x280], r14d
jne 0x1400b3d47
mov eax, 0x2e
mov word [rdi], ax
mov rdx, rsi
lea rcx, [0x140166802]
call fcn.140062a4c
lea rcx, [0x140166802]
call fcn.14003c3d4
cmp al, r14b
je 0x1400b3d83
mov ecx, 0x50d
call fcn.140076080
mov rdx, rax
lea rcx, [0x140166802]
call fcn.1400b1ef4
mov r15b, 1
cmp r12d, dword [0x14018bf30]
jne 0x1400b3e1f
lea rcx, [rsp + 0x6710]
call fcn.1400a32e4
mov dword [0x140161524], 3
mov dword [0x140161520], 2
mov byte [0x14016156e], r14b
mov byte [0x140161588], r14b
lea rdx, [0x1400e0250]
lea rcx, [0x140167808]
call fcn.140080bc0
lea rcx, [0x140166802]
call fcn.1400615e8
mov rdi, rax
mov ecx, 0x20d
call fcn.140076080
mov rcx, rax
mov rdx, rdi
call fcn.1400a3744
cmp byte [0x140162779], r14b
je 0x1400b3e0c
mov byte [0x140162779], r14b
mov al, 1
mov byte [rsp + 0x40], al
xor edx, edx
lea rsi, [0x1401575c0]
mov rcx, rsi
call fcn.140019454
jmp 0x1400b3e26
lea rsi, [0x1401575c0]
cmp word [0x14015e3de], r14w
je 0x1400b3e3c
lea rcx, [0x14015e3de]
call fcn.1400a2aa4
xor ebx, ebx
cmp byte [0x140148964], bl
jne 0x1400b461e
cmp r12d, dword [0x14018bf30]
jne 0x1400b4619
lea r9d, [rbx + 1]
xor r8d, r8d
lea rdx, [0x140166802]
mov rcx, rsi
call fcn.140018388
cmp eax, 1
jne 0x1400b4614
lea rdx, [rsp + 0x2c0]
mov rcx, rsi
call fcn.140014eb0
mov rdx, qword [rsp + 0x268]
cmp rdx, qword [rsp + 0x3d8]
je 0x1400b3edc
cmp rdx, rbx
je 0x1400b3edc
lea rdx, [0x1400e1090]
lea rcx, [rsp + 0x150]
call fcn.1400883c8
cmp eax, ebx
jne 0x1400b3ebe
cmp dword [rsp + 0x280], ebx
jne 0x1400b3edc
mov ecx, 0x50a
call fcn.140076080
mov rdx, rax
mov rcx, qword [rbp]
call fcn.1400b1ef4
xor r12d, r12d
jmp 0x1400b4621
movsxd rax, dword [rsp + 0x164c]
cmp eax, ebx
je 0x1400b3f31
mov rcx, rax
imul rcx, qword [rsp + 0x270]
mov rax, qword [rsp + 0x3e0]
imul rax, rax, 0x64
cmp rcx, rax
jge 0x1400b3f31
lea rcx, [0x140166802]
call fcn.1400615e8
mov rdi, rax
mov ecx, 0x50f
call fcn.140076080
mov rcx, rax
mov rdx, rdi
call fcn.1400a3744
xor r12d, r12d
jmp 0x1400b4621
lea rcx, [rsp + 0x430]
lea rdx, [0x1401603ec]
mov edi, 0x102
mov r8, rdi
call fcn.1400c6bb0
nop
mov cl, 1
call fcn.14009e044
lea rcx, [0x1401603ec]
lea rdx, [rsp + 0x430]
mov r8, rdi
call fcn.1400c6bb0
mov r8d, 0x800
lea rdx, [0x140166802]
mov rcx, rsi
call fcn.140014e94
mov edx, dword [0x1401579d4]
mov dword [0x140163790], edx
mov byte [0x1401616b1], 1
mov qword [0x140161690], rbx
mov qword [0x140161698], rbx
lea rdx, [0x1400e0250]
lea rcx, [0x140167808]
call fcn.140080bc0
lea rcx, [0x140166802]
call fcn.1400615e8
mov rdi, rax
mov ecx, 0x210
call fcn.140076080
mov rcx, rax
mov rdx, rdi
call fcn.1400a3744
cmp byte [0x140162779], bl
je 0x1400b3fed
mov byte [0x140162779], bl
mov al, 1
mov byte [rsp + 0x40], al
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.140019868
cmp byte [0x140148964], bl
jne 0x1400b45fd
cmp r12d, dword [0x14018bf30]
jne 0x1400b45f8
xor r12d, r12d
cmp qword [rsp + 0x3d8], r12
jne 0x1400b403c
cmp qword [rsp + 0x2660], 0x200
jb 0x1400b403c
cmp dword [rsp + 0x25c], 1
jbe 0x1400b4600
movsxd rax, dword [rsp + 0x164c]
cmp eax, r12d
je 0x1400b406a
mov rcx, rax
imul rcx, qword [rsp + 0x270]
mov rax, qword [rsp + 0x3e0]
imul rax, rax, 0x64
cmp rcx, rax
jl 0x1400b4600
mov r14b, 1
lea rcx, [0x140166802]
call fcn.1400615e8
mov rdi, rax
mov ecx, 0x25a
call fcn.140076080
mov rcx, rax
mov rdx, rdi
call fcn.1400a3744
inc dword [rsp + 0x44]
mov rax, qword [rsp + 0x68]
add rax, qword [rsp + 0x270]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x58]
add rcx, qword [rsp + 0x3e0]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], r13
cmp r15b, r12b
je 0x1400b444b
xor r9d, r9d
mov r8b, r14b
mov rdx, qword [rbp]
lea rcx, [0x1401575c0]
call fcn.140018388
cmp eax, 1
jne 0x1400b4600
lea rcx, [rsp + 0x90]
call fcn.140080d68
nop
mov rcx, qword [rbp]
lea rdx, [rsp + 0x4710]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, r12w
jne 0x1400b4103
mov bl, r12b
mov r13d, 0x800
lea r9, [rsp + 0x4710]
lea r8, str._s._cvtbackup_
mov rdx, r13
lea rcx, [rsp + 0x5710]
call fcn.140022b7c
lea rdx, [rsp + 0x5710]
lea rcx, [rsp + 0x4710]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, r12d
je 0x1400b42f6
lea rdx, [rsp + 0x4710]
lea rcx, [rsp + 0x90]
call fcn.140080bc0
lea rdx, [rsp + 0x5710]
lea rcx, [rsp + 0x90]
call fcn.140080bc0
mov r8, r13
lea rdx, [rsp + 0x4710]
lea rcx, [0x1401575c0]
call fcn.140015350
cmp al, r12b
je 0x1400b41b7
lea rcx, [rsp + 0x4710]
call fcn.14003c3d4
cmp al, r12b
jne 0x1400b411d
xor r9d, r9d
mov r8b, 1
lea rdx, [0x140166802]
lea rcx, [0x1401575c0]
call fcn.140018388
cmp eax, 1
jne 0x1400b42f8
mov rcx, r12
lea rsi, [0x14015b3c0]
movzx eax, word [rcx + rsi + 0xb442]
mov word [rsp + rcx + 0x4710], ax
add rcx, 2
cmp ax, r12w
jne 0x1400b41e3
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rbp]
lea rdx, [rsp + 0x5710]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, r12w
jne 0x1400b4211
lea rcx, [rsp + 0x4710]
call fcn.1400615e8
mov rdx, rax
mov r8, r13
lea rcx, [rsp + 0x5710]
call fcn.1400617d0
lea rdx, [rsp + 0x5710]
lea rcx, [rsp + 0x4710]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
cmp eax, r12d
je 0x1400b42f2
cmp rsi, r12
je 0x1400b426c
cmp rsi, 1
jne 0x1400b42bf
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x5710]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400b42bf
lea r9, [rsp + 0x2698]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r13
lea rdx, [rsp + 0x4710]
lea rcx, [0x1401575c0]
call fcn.140015350
cmp al, r12b
je 0x1400b42f8
lea rcx, [rsp + 0x4710]
call fcn.14003c3d4
cmp al, r12b
je 0x1400b42f8
jmp 0x1400b4202
mov bl, 1
jmp 0x1400b42f8
mov bl, 1
mov dil, r12b
cmp byte [rsp + 0x1648], r12b
jne 0x1400b4383
mov dil, 1
mov r8, r13
lea rdx, [rsp + 0x3710]
lea rcx, [rsp + 0x90]
call fcn.140080da0
cmp al, r12b
je 0x1400b4376
mov r8, r13
lea rdx, [rsp + 0x7710]
lea rcx, [rsp + 0x90]
call fcn.140080da0
cmp al, r12b
je 0x1400b4376
lea rcx, [rsp + 0x3710]
call fcn.14003c3d4
cmp al, r12b
jne 0x1400b4373
mov r8, r13
lea rdx, [rsp + 0x3710]
lea rcx, [rsp + 0x90]
call fcn.140080da0
cmp al, r12b
jne 0x1400b4325
jmp 0x1400b4376
mov dil, r12b
lea rcx, [rsp + 0x90]
call fcn.140080b50
mov r8, r13
lea rdx, [rsp + 0x3710]
lea rcx, [rsp + 0x90]
call fcn.140080da0
cmp al, r12b
je 0x1400b4430
mov r8, r13
lea rdx, [rsp + 0x7710]
lea rcx, [rsp + 0x90]
call fcn.140080da0
cmp al, r12b
je 0x1400b4430
cmp bl, r12b
jne 0x1400b43e7
cmp dil, r12b
jne 0x1400b43f9
lea rcx, [rsp + 0x7710]
call fcn.14003c4bc
lea rcx, [rsp + 0x7710]
call fcn.14003be94
jmp 0x1400b440f
cmp dil, r12b
jne 0x1400b43f9
lea rcx, [rsp + 0x3710]
call fcn.14003be94
lea rdx, [rsp + 0x3710]
lea rcx, [rsp + 0x7710]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov r8, r13
lea rdx, [rsp + 0x3710]
lea rcx, [rsp + 0x90]
call fcn.140080da0
cmp al, r12b
jne 0x1400b43a4
mov rcx, qword [rsp + 0x90]
cmp rcx, r12
je 0x1400b4600
call fcn.1400c7040
jmp 0x1400b4600
cmp byte [rsp + 0x1648], r12b
je 0x1400b450d
xor r9d, r9d
mov r8b, 1
mov rdx, qword [rbp]
lea rcx, [0x1401575c0]
call fcn.140018388
cmp eax, 1
jne 0x1400b4515
mov rcx, qword [rbp]
lea rdx, [rsp + 0x3710]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rcx + rdx], ax
add rcx, 2
cmp ax, r12w
jne 0x1400b4487
mov r13d, 0x800
lea rcx, [rsp + 0x3710]
call fcn.1400615e8
mov rdi, rax
mov ecx, 0x258
call fcn.140076080
mov rcx, rax
mov rdx, rdi
call fcn.1400a3744
lea rcx, [rsp + 0x3710]
call fcn.14003c4bc
lea rcx, [rsp + 0x3710]
call fcn.14003be94
mov r8, r13
lea rdx, [rsp + 0x3710]
lea rcx, [0x1401575c0]
call fcn.140015350
cmp al, r12b
je 0x1400b451b
lea rcx, [rsp + 0x3710]
call fcn.14003c3d4
cmp al, r12b
jne 0x1400b449e
jmp 0x1400b451b
mov r13d, 0x800
jmp 0x1400b451b
mov r13d, 0x800
xor r9d, r9d
mov r8b, 1
lea rdx, [0x140166802]
lea rcx, [0x1401575c0]
call fcn.140018388
cmp eax, 1
jne 0x1400b4600
mov rcx, r12
lea rsi, [0x14015b3c0]
movzx eax, word [rcx + rsi + 0xb442]
mov word [rsp + rcx + 0x5710], ax
add rcx, 2
cmp ax, r12w
jne 0x1400b4547
mov rsi, qword [rsp + 0x50]
cmp rsi, r12
je 0x1400b4571
cmp rsi, 1
jne 0x1400b45c4
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x5710]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400b45c4
lea r9, [rsp + 0x2698]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r13
lea rdx, [rsp + 0x5710]
lea rcx, [0x1401575c0]
call fcn.140015350
cmp al, r12b
je 0x1400b4600
lea rcx, [rsp + 0x5710]
call fcn.14003c3d4
cmp al, r12b
jne 0x1400b4566
jmp 0x1400b4600
xor r12d, r12d
jmp 0x1400b4600
xor r12d, r12d
lea rcx, [rsp + 0x430]
call fcn.140079a88
cmp r14b, r12b
jne 0x1400b4660
jmp 0x1400b4621
xor r12d, r12d
jmp 0x1400b4621
xor r12d, r12d
jmp 0x1400b4621
xor r12d, r12d
cmp r15b, r12b
jne 0x1400b4649
lea rcx, [0x140166802]
call fcn.14003be94
mov edi, dword [rsp + 0x48]
mov esi, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x78]
mov r13, qword [rsp + 0x58]
xor r15d, r15d
jmp 0x1400b4675
mov edi, dword [rsp + 0x48]
mov esi, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x78]
mov r13, qword [rsp + 0x58]
xor r15d, r15d
jmp 0x1400b4675
mov edi, dword [rsp + 0x48]
mov esi, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x78]
mov r13, qword [rsp + 0x58]
xor r15d, r15d
lea rcx, [rsp + 0x26b0]
call fcn.1400a32e4
lea rcx, [rsp + 0x6710]
call fcn.1400a2f40
mov r12d, dword [rsp + 0x70]
inc edi
mov dword [rsp + 0x48], edi
mov al, byte [0x14014aa58]
cmp al, r15b
mov rbp, qword [rsp + 0x68]
je 0x1400b37a0
mov r14b, byte [rsp + 0x40]
jmp 0x1400b46c0
mov al, byte [0x14014aa58]
mov r14b, byte [rsp + 0x40]
cmp byte [0x140148964], r15b
jne 0x1400b46da
cmp al, r15b
jne 0x1400b46da
mov ecx, 0x4d0
jmp 0x1400b46df
mov r14b, byte [rsp + 0x40]
mov ecx, 0x271
call fcn.140076080
mov rcx, rax
call fcn.1400a3744
cmp byte [0x14014aa58], r15b
je 0x1400b4704
mov rcx, qword [0x140148968]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400b4725
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], r15b
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov rcx, rdx
call fcn.1400a447c
call fcn.1400a3860
mov al, byte [0x140148965]
cmp al, r15b
je 0x1400b476b
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0xb870]
lea rcx, [0x1401575c0]
call fcn.140018388
cmp eax, 1
je 0x1400b4760
lea rcx, [0x140155380]
call fcn.14004f320
cmp al, r15b
jne 0x1400b4770
mov al, byte [0x140148965]
cmp al, r15b
jne 0x1400b4792
cmp esi, r15d
jbe 0x1400b478d
lea rcx, [0x140166802]
call fcn.1400615e8
mov rdx, rax
lea rcx, [0x140155380]
call fcn.14004fa64
jmp 0x1400b47b2
cmp al, r15b
je 0x1400b47b2
cmp esi, r15d
jbe 0x1400b47b2
lea rcx, [0x140166802]
call fcn.1400615e8
mov rdx, rax
lea rcx, [0x140155380]
call fcn.140050428
cmp byte [rsp + 0x1650], r15b
je 0x1400b47cf
mov rdx, qword [str.InterfaceConvertProfile]
lea rcx, [0x140188d90]
call fcn.14006d6ac
lea rcx, [0x140188d90]
call fcn.14006d734
cmp r14b, r15b
je 0x1400b47e6
call fcn.1400a23ac
nop
mov rcx, qword [rsp + 0x620]
cmp rcx, r15
je 0x1400b47f9
call fcn.1400c7040
nop
mov rcx, qword [rsp + 0x5f8]
cmp rcx, r15
je 0x1400b480c
call fcn.1400c7040
nop
mov rcx, qword [rsp + 0x540]
cmp rcx, r15
je 0x1400b481e
call fcn.1400c7040
mov rcx, qword [rsp + 0xc870]
xor rcx, rsp
call fcn.1400c6350
lea r11, [rsp + 0xc880]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret