Function at 0x4cbf30
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x129f4]
mov eax, 0x129f4
call fcn.004ebbf0
push 0xffffffffffffffff
push 0x509591
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x528af4]
xor eax, ebp
mov dword [ebp + 0x129f0], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x129fc]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push dword [0x5278dc]
push str._s_u
push 0xc8
push 0x598568
call fcn.004028e0
add esp, 0x14
lea ecx, [ebp + 0x621c]
call fcn.0043cf40
mov dword [ebp - 4], 1
cmp byte [0x53898c], 0
mov byte [ebp + 0x724c], 0
je 0x4cc097
push 0x800
lea eax, [ebp + 0x88f0]
mov ecx, 0x55a850
push eax
call fcn.00404e00
push 0x10e8
lea eax, [ebp + 0x40ec]
push 0
push eax
call fcn.004ee100
add esp, 0xc
xor ecx, ecx
jmp 0x4cbff0
movzx eax, word [ebp + ecx + 0x88f0]
lea ecx, [ecx + 2]
mov word [ebp + ecx + 0x40ea], ax
test ax, ax
jne 0x4cbff0
push 0
lea eax, [ebp + 0x51d4]
mov dword [ebp + 0x61e4], 0
push eax
lea eax, [ebp + 0x88f0]
mov dword [ebp + 0x61e8], 0
push eax
mov dword [ebp + 0x61ec], 0
mov dword [ebp + 0x61f0], 0
mov dword [ebp + 0x61f4], 0
mov dword [ebp + 0x61f8], 0
call fcn.0046ac60
test al, al
je 0x4cc075
mov eax, dword [ebp + 0x61d4]
mov dword [ebp + 0x516c], eax
mov eax, dword [ebp + 0x61d8]
mov dword [ebp + 0x5170], eax
lea eax, [ebp + 0x40ec]
push eax
lea ecx, [ebp + 0x621c]
call fcn.0043d430
lea ecx, [ebp + 0x621c]
call fcn.0043d690
jmp 0x4cc143
lea ecx, [ebp + 0x7894]
call fcn.0048e750
mov byte [ebp - 4], 2
lea esi, [ebp + 0x7894]
test edi, edi
je 0x4cc0b4
mov esi, edi
jmp 0x4cc0c7
push 1
lea eax, [ebp + 0x7894]
mov ecx, 0x55d4d8
push eax
call fcn.0043f800
push 0
push 0
push 3
lea eax, [ebp + 0x621c]
push eax
push 3
push esi
call fcn.004a3d60
test al, al
jne 0x4cc0fc
mov byte [ebp - 4], 1
mov eax, dword [ebp + 0x7894]
test eax, eax
je 0x4cc0f7
push eax
call fcn.004f252e
add esp, 4
jmp 0x4cd26d
xor esi, esi
cmp dword [ebp + 0x6220], esi
jbe 0x4cc12c
jmp 0x4cc110
push esi
lea ecx, [ebp + 0x621c]
call fcn.0043d380
inc esi
mov dword [eax + 4], 0
cmp esi, dword [ebp + 0x6220]
jb 0x4cc110
mov byte [ebp - 4], 1
mov eax, dword [ebp + 0x7894]
test eax, eax
je 0x4cc143
push eax
call fcn.004f252e
add esp, 4
push 0x598568
push dword [0x5278dc]
call fcn.0049f140
push dword [0x538900]
xor bl, bl
mov byte [ebp - 0xe], bl
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp + 0x621c]
push ecx
sbb eax, eax
and eax, dword [0x538900]
push 0x4cd2b0
push eax
push str.CONVERTARC
push dword [0x56df20]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4cd241
push 0
push str.Background
push 0x598568
call fcn.0049fd30
test eax, eax
jne 0x4cc1c7
cmp dword [0x538a04], 1
jne 0x4cc1c1
cmp byte [0x54e253], al
jne 0x4cc1c7
mov byte [ebp - 0x14], 0
jmp 0x4cc1cb
mov byte [ebp - 0x14], 1
push 0
push dword [ebp - 0x14]
push 0
push 0xa
call fcn.004c5f90
push 0x800
lea eax, [ebp + 0xa8f0]
push eax
call fcn.004c48f0
lea ecx, [ebp + 0x7354]
call fcn.0048b930
mov byte [ebp - 4], 6
cmp byte [0x53898c], 0
je 0x4cc216
mov ecx, 0x40
lea edi, [ebp + 0x7354]
mov esi, 0x55ab8a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor edi, edi
mov dword [ebp - 0x34], 0
xor esi, esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [0x539a58], 0
mov dword [0x539a5c], 0
mov dword [ebp - 0x20], edi
cmp dword [ebp + 0x6220], esi
jbe 0x4cc291
jmp 0x4cc260
push esi
lea ecx, [ebp + 0x621c]
call fcn.0043d380
test byte [eax + 4], 2
je 0x4cc285
mov ecx, dword [eax + 8]
add dword [0x539a58], ecx
mov eax, dword [eax + 0xc]
adc dword [0x539a5c], eax
inc edi
inc esi
cmp esi, dword [ebp + 0x6220]
jb 0x4cc260
mov dword [ebp - 0x20], edi
push 0x880
lea eax, [ebp + 0xb8f0]
push eax
push 0
push edi
call fcn.004a7a90
lea eax, [ebp + 0xb8f0]
push eax
push 0x65
push dword [0x53890c]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov al, byte [0x53898e]
xor ebx, ebx
or esi, 0xffffffff
mov dword [0x539a40], 0
mov dword [0x539a44], 0
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], esi
test al, al
jne 0x4cd147
jmp 0x4cc2f0
cmp byte [0x53898f], 0
jne 0x4cd159
push 0x880
lea eax, [ebp + 0xb8f0]
push eax
push 0
push dword [ebp - 0x1c]
call fcn.004a7a90
lea eax, [ebp + 0xb8f0]
push eax
push 0x66
push dword [0x53890c]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x880
lea eax, [ebp + 0xb8f0]
push eax
push dword [ebp - 0x30]
push dword [ebp - 0x34]
call fcn.004a7a90
lea eax, [ebp + 0xb8f0]
push eax
push 0x67
push dword [0x53890c]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x880
lea eax, [ebp + 0xb8f0]
push eax
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.004a7a90
lea eax, [ebp + 0xb8f0]
push eax
push 0x68
push dword [0x53890c]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp esi, 0xffffffff
je 0x4cc3b6
push esi
lea eax, [ebp + 0x40ec]
push eax
lea ecx, [ebp + 0x621c]
call fcn.0043d1b0
mov ecx, dword [eax + 0x1080]
add dword [0x539a40], ecx
mov eax, dword [eax + 0x1084]
adc dword [0x539a44], eax
or eax, 0xffffffff
mov dword [ebp - 0x14], eax
call fcn.004c52a0
cmp ebx, dword [ebp + 0x6220]
jge 0x4cd142
push ebx
lea ecx, [ebp + 0x621c]
call fcn.0043d380
mov esi, eax
mov dword [ebp - 0x18], esi
test byte [esi + 4], 2
je 0x4cd129
cmp byte [ebp + 0x7245], 0
mov dword [ebp - 0x14], ebx
je 0x4cc40e
test byte [esi + 0x28], 0x10
je 0x4cc40e
push 0x50e
call fcn.00488530
push eax
push dword [esi]
call fcn.004d2c60
add esp, 8
jmp 0x4cd129
cmp byte [0x53898c], 0
je 0x4cc438
mov ecx, 0x40
lea esi, [ebp + 0x7354]
mov edi, 0x55ab8a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
mov byte [0x55ac8c], 1
push 1
push 0
push dword [esi]
mov ecx, 0x55a850
call fcn.004059c0
cmp eax, 1
jne 0x4cd129
lea eax, [ebp + 0x7648]
mov ecx, 0x55a850
push eax
call fcn.004051c0
push 0
lea eax, [ebp + 0x51d4]
mov dword [ebp + 0x61e4], 0
push eax
mov dword [ebp + 0x61e8], 0
mov dword [ebp + 0x61ec], 0
mov dword [ebp + 0x61f0], 0
mov dword [ebp + 0x61f4], 0
mov dword [ebp + 0x61f8], 0
push dword [esi]
call fcn.0046ac60
test al, al
je 0x4cd129
cmp byte [ebp + 0x7245], 0
je 0x4cc4d9
cmp byte [ebp + 0x7834], 0
jne 0x4cc3f4
cmp byte [ebp + 0x7783], 0
jne 0x4cc3f4
push 1
push 0x800
lea eax, [ebp + 0x78f0]
push eax
push str.Rar_CV
call fcn.004c3dd0
test al, al
je 0x4cd129
lea eax, [ebp + 0x78f0]
push eax
call fcn.004c4cd0
push 1
call fcn.004bf7c0
push 0x800
push 0x54f29a
mov ecx, 0x55a850
mov dword [0x539a38], edi
call fcn.00404e00
mov eax, dword [0x55a854]
mov ecx, 0x55029c
push 0x50ba14
mov dword [0x54c248], eax
mov dword [0x549fbc], 1
mov dword [0x54b238], 4
mov dword [0x54b23c], 4
call fcn.0048e7f0
push 0x54f29a
push 0x20f
call fcn.00488530
push eax
call fcn.004c4d60
mov edi, dword [0x598728]
add esp, 8
cmp byte [0x54b231], 0
mov dword [ebp - 0x44], edi
je 0x4cc592
mov byte [0x54b231], 0
mov byte [ebp - 0xe], 1
push 1
push 0
mov ecx, 0x55a850
call fcn.004049a0
cmp byte [0x53898f], 0
jne 0x4cd111
cmp edi, dword [0x598728]
jne 0x4cd111
push 0x598568
call fcn.004c0a40
cmp word [0x546e9e], 0
mov eax, dword [0x54a010]
mov dword [ebp - 0x40], eax
mov byte [0x54a169], 0
jne 0x4cc643
push 0
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x38], 0
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push eax
mov ecx, 0x55a850
call fcn.00404f50
cmp dword [ebp - 0x3c], 0
jbe 0x4cc638
push 0x800
push 0x546e9e
push str.Rar_CM
call fcn.004c3d00
mov esi, eax
test esi, esi
je 0x4cc635
push esi
push dword [ebp - 0x3c]
push 1
push dword [ebp - 0x38]
call fcn.004f2dfc
push esi
call fcn.004f2a17
add esp, 0x14
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x38]
call fcn.004ebd28
add esp, 4
push 0x800
lea eax, [ebp + 0x98f0]
push eax
push dword [esi]
call fcn.00478280
push 0x800
lea eax, [ebp + 0x6244]
push eax
lea eax, [ebp + 0xc9f0]
push eax
call fcn.0048e710
cmp word [ebp + 0xc9f0], 0
je 0x4cc689
push 0x800
lea eax, [ebp + 0xc9f0]
push eax
call fcn.00477290
push dword [esi]
call fcn.004402f0
cmp dword [0x54c248], 0
mov ebx, 0x50ba28
mov byte [ebp - 0xd], al
je 0x4cc6a6
mov ebx, 0x50ba30
cmp word [0x544e98], 0
je 0x4cc6b5
mov ebx, 0x50ba20
push ebx
push dword [esi]
xor eax, eax
mov word [ebp + 0xe9f0], ax
call fcn.004772e0
test al, al
je 0x4cc7a5
cmp word [ebp + 0xc9f0], 0
je 0x4cc6f3
lea eax, [ebp + 0x98f0]
push eax
lea eax, [ebp + 0xc9f0]
push eax
call fcn.00491ab0
test eax, eax
jne 0x4cc7a5
push 1
push 0x800
lea eax, [ebp + 0xe9f0]
mov bh, 1
push eax
push str.Rar_CV
mov byte [ebp - 0xf], bh
call fcn.004c3dd0
push 0x800
push 0x54f29a
push dword [esi]
call fcn.00478eb0
push eax
lea eax, [ebp + 0xe9f0]
push eax
call fcn.004789f0
push 0x54f29a
call fcn.00478260
mov esi, eax
test esi, esi
je 0x4cc8c9
xor eax, eax
push 0x54f29a
mov word [esi], ax
call fcn.00478260
mov ecx, eax
mov eax, 0x2e
mov word [esi], ax
test ecx, ecx
je 0x4cc8c9
cmp byte [ebp - 0xd], 0
je 0x4cc8c9
cmp dword [ebp + 0x7788], 0
jne 0x4cc8c9
cmp byte [ebp + 0x776a], 0
je 0x4cc8c9
sub ecx, esi
lea esp, [esp]
movzx eax, word [esi]
lea esi, [esi + 2]
mov word [ecx + esi - 2], ax
test ax, ax
jne 0x4cc790
jmp 0x4cc8c9
xor al, al
cmp word [ebp + 0xc9f0], 0
mov byte [ebp - 0xf], al
je 0x4cc81f
xor ecx, ecx
jmp 0x4cc7c0
movzx eax, word [ebp + ecx + 0xc9f0]
lea ecx, [ecx + 2]
mov word [ecx + 0x54f298], ax
test ax, ax
jne 0x4cc7c0
push dword [esi]
call fcn.00478eb0
mov edx, eax
mov esi, eax
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4cc7e2
mov edi, 0x54f29a
sub edx, esi
add edi, 0xfffffffe
jmp 0x4cc800
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4cc800
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x44]
jmp 0x4cc837
mov ecx, dword [esi]
mov edx, 0x54f29a
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x4cc826
push 0x54f29a
call fcn.00478260
mov esi, eax
test esi, esi
je 0x4cc889
xor eax, eax
push 0x54f29a
mov word [esi], ax
call fcn.00478260
test eax, eax
je 0x4cc881
push str..tar
push eax
call fcn.00491ab0
test eax, eax
je 0x4cc889
cmp byte [ebp - 0xd], 0
je 0x4cc881
cmp dword [ebp + 0x7788], 0
jne 0x4cc881
cmp byte [ebp + 0x776a], 0
jne 0x4cc889
mov eax, 0x2e
mov word [esi], ax
push 0x800
push ebx
push 0x54f29a
call fcn.00478f50
push 0x54f29a
call fcn.00469360
test al, al
je 0x4cc8c6
push 0x50d
call fcn.00488530
push eax
push 0x54f29a
call fcn.004d2c60
mov bh, 1
add esp, 8
mov byte [ebp - 0xf], bh
jmp 0x4cc8c9
mov bh, byte [ebp - 0xf]
cmp edi, dword [0x598728]
jne 0x4cc927
lea eax, [ebp + 0x78f0]
push eax
call fcn.004c4cd0
push 0x50ba14
mov ecx, 0x55029c
mov dword [0x549fe8], 3
mov dword [0x549fe4], 2
mov byte [0x54a026], 0
call fcn.0048e7f0
cmp byte [0x54b231], 0
je 0x4cc91b
mov byte [0x54b231], 0
mov byte [ebp - 0xe], 1
push 0
mov ecx, 0x55a850
call fcn.00404090
cmp word [0x546e9e], 0
je 0x4cc93b
push 0x546e9e
call fcn.004c3150
xor bl, bl
cmp byte [0x53898f], bl
jne 0x4cd0e7
cmp edi, dword [0x598728]
jne 0x4cd0e7
mov ecx, 0x40
mov esi, 0x548eb0
mov edi, 0x55ab8a
rep movsd dword es:[edi], dword [esi]
push 1
push 0
push 0x54f29a
movsw word es:[edi], word [esi]
mov ecx, 0x55a850
mov byte [0x55ac8c], 1
call fcn.004059c0
cmp eax, 1
jne 0x4cd0e7
lea eax, [ebp + 0x7458]
mov ecx, 0x55a850
push eax
call fcn.004051c0
mov eax, dword [ebp + 0x7820]
mov ecx, dword [ebp + 0x7824]
cmp eax, dword [ebp + 0x7630]
jne 0x4cc9b8
cmp ecx, dword [ebp + 0x7634]
je 0x4cc9f6
or eax, ecx
je 0x4cc9f6
push 0x50bae8
lea eax, [ebp + 0x7648]
push eax
call fcn.00491ab0
test eax, eax
jne 0x4cc9d9
cmp byte [ebp + 0x776a], al
jne 0x4cc9f6
push 0x50a
call fcn.00488530
mov edi, dword [ebp - 0x18]
push eax
push dword [edi]
call fcn.004d2c60
add esp, 8
jmp 0x4cd0e7
mov eax, dword [ebp + 0x7248]
test eax, eax
je 0x4cca5a
push dword [ebp + 0x782c]
cdq
push dword [ebp + 0x7828]
push edx
push eax
call fcn.004ebe00
push 0
push 0x64
push dword [ebp + 0x763c]
mov edi, eax
mov esi, edx
push dword [ebp + 0x7638]
call fcn.004ebe00
cmp esi, edx
jg 0x4cca5a
jl 0x4cca37
cmp edi, eax
jae 0x4cca5a
push 0x54f29a
call fcn.00478eb0
push eax
push 0x50f
call fcn.00488530
push eax
call fcn.004c4d60
add esp, 8
jmp 0x4cd0e7
mov ecx, 0x40
lea edi, [ebp + 0x7250]
mov esi, 0x548eb0
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [ebp - 4], 7
push 1
call fcn.004bf7c0
mov ecx, 0x40
lea esi, [ebp + 0x7250]
mov edi, 0x548eb0
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x54f29a
mov ecx, 0x55a850
movsw word es:[edi], word [esi]
call fcn.00404e00
mov eax, dword [0x55a854]
mov ecx, 0x55029c
push 0x50ba14
mov dword [0x54c248], eax
mov byte [0x54a169], 1
mov dword [0x54a148], 0
mov dword [0x54a14c], 0
mov dword [0x54a150], 0
mov dword [0x54a154], 0
call fcn.0048e7f0
push 0x54f29a
call fcn.00478eb0
push eax
push 0x210
call fcn.00488530
push eax
call fcn.004c4d60
add esp, 8
cmp byte [0x54b231], 0
je 0x4ccb1b
mov byte [0x54b231], 0
mov byte [ebp - 0xe], 1
push 0
push 0
mov ecx, 0x55a850
call fcn.004049a0
cmp byte [0x53898f], 0
jne 0x4cd0d4
mov eax, dword [ebp - 0x44]
cmp eax, dword [0x598728]
jne 0x4cd0d4
mov eax, dword [ebp + 0x7630]
or eax, dword [ebp + 0x7634]
jne 0x4ccb74
cmp dword [ebp + 0x61d8], eax
ja 0x4ccb67
cmp dword [ebp + 0x61d4], 0x200
jb 0x4ccb74
cmp dword [ebp + 0x7810], 1
jbe 0x4cd0d4
mov eax, dword [ebp + 0x7248]
test eax, eax
je 0x4ccbbd
push dword [ebp + 0x782c]
cdq
push dword [ebp + 0x7828]
push edx
push eax
call fcn.004ebe00
push 0
push 0x64
push dword [ebp + 0x763c]
mov edi, eax
mov esi, edx
push dword [ebp + 0x7638]
call fcn.004ebe00
cmp esi, edx
jl 0x4cd0d4
jg 0x4ccbbd
cmp edi, eax
jb 0x4cd0d4
push 0x54f29a
mov byte [ebp - 0xd], 1
call fcn.00478eb0
push eax
push 0x25a
call fcn.00488530
push eax
call fcn.004c4d60
inc dword [ebp - 0x1c]
add esp, 8
mov eax, dword [ebp - 0x34]
add eax, dword [ebp + 0x7828]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
adc eax, dword [ebp + 0x782c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp + 0x7638]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
adc eax, dword [ebp + 0x763c]
mov dword [ebp - 0x28], eax
test bh, bh
je 0x4ccf6c
mov edi, dword [ebp - 0x18]
mov ecx, 0x55a850
push 0
push 1
push dword [edi]
call fcn.004059c0
cmp eax, 1
jne 0x4cd0d1
lea ecx, [ebp + 0x7894]
call fcn.0048e750
mov byte [ebp - 4], 8
lea edx, [ebp + 0x109f0]
mov ecx, dword [edi]
sub edx, ecx
nop
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + edx - 2], ax
test ax, ax
jne 0x4ccc50
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
xor bh, bh
jmp 0x4ccc70
lea eax, [ebp + 0x109f0]
push eax
push str._s._cvtbackup_
lea eax, [ebp + 0x119f0]
push 0x800
push eax
call fcn.004028e0
add esp, 0x10
lea eax, [ebp + 0x119f0]
push eax
lea eax, [ebp + 0x109f0]
push eax
call esi
test eax, eax
je 0x4cce42
lea eax, [ebp + 0x109f0]
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e7f0
lea eax, [ebp + 0x119f0]
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e7f0
mov ecx, 0x55a850
call fcn.00405850
test eax, eax
je 0x4ccd08
push 0x800
lea eax, [ebp + 0x109f0]
mov ecx, 0x55a850
push eax
call fcn.004053b0
test al, al
je 0x4ccd08
lea eax, [ebp + 0x109f0]
push eax
call fcn.00469360
test al, al
jne 0x4ccc70
cmp word [ebp + 0xe9f0], 0
je 0x4cce44
lea ecx, [ebp + 0x7838]
call fcn.0048e750
mov byte [ebp - 4], 9
lea eax, [ebp + 0xe9f0]
push eax
lea ecx, [ebp + 0x7838]
call fcn.0048e7f0
lea ecx, [ebp + 0x418c]
call fcn.0040d460
push 0
push 0
push 0
lea eax, [ebp + 0x7838]
push eax
lea ecx, [ebp]
call fcn.0048a9b0
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0x418c]
push eax
lea ecx, [ebp]
call fcn.0048b630
test eax, eax
jne 0x4cce25
mov eax, dword [edi]
lea edx, [ebp + 0x119f0]
sub edx, eax
lea esp, [esp]
movzx ecx, word [eax]
lea eax, [eax + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x4ccd80
push 0x800
lea eax, [ebp + 0x418c]
push eax
call fcn.00478eb0
push eax
lea eax, [ebp + 0x119f0]
push eax
call fcn.00478fb0
lea eax, [ebp + 0x119f0]
push eax
lea eax, [ebp + 0x418c]
push eax
call esi
test eax, eax
je 0x4cce23
cmp dword [ebp - 0x40], 1
jne 0x4cce0a
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [ebp + 0x119f0]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4cce04
lea eax, [ebp + 0x51c4]
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
lea eax, [ebp + 0x418c]
push eax
lea ecx, [ebp]
call fcn.0048b630
test eax, eax
je 0x4ccd72
jmp 0x4cce25
mov bh, 1
mov byte [ebp - 4], 9
lea ecx, [ebp]
call fcn.0048aaa0
mov byte [ebp - 4], 8
lea ecx, [ebp + 0x7838]
call fcn.00403fc0
jmp 0x4cce44
mov bh, 1
xor bl, bl
cmp byte [ebp + 0x7244], bl
jne 0x4ccec5
push 0x800
lea eax, [ebp + 0xd9f0]
mov bl, 1
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e8f0
test al, al
je 0x4cceba
jmp 0x4cce70
push 0x800
lea eax, [ebp + 0xf9f0]
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e8f0
test al, al
je 0x4cceba
lea eax, [ebp + 0xd9f0]
push eax
call fcn.00469360
test al, al
jne 0x4cceb8
push 0x800
lea eax, [ebp + 0xd9f0]
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e8f0
test al, al
jne 0x4cce70
jmp 0x4cceba
xor bl, bl
lea ecx, [ebp + 0x7894]
call fcn.0048ea30
push 0x800
lea eax, [ebp + 0xd9f0]
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e8f0
test al, al
je 0x4ccf58
push 0x800
lea eax, [ebp + 0xf9f0]
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e8f0
test al, al
je 0x4ccf58
test bh, bh
jne 0x4ccf1d
test bl, bl
jne 0x4ccf2d
lea eax, [ebp + 0xf9f0]
push eax
call fcn.00469b50
lea eax, [ebp + 0xf9f0]
push eax
call fcn.00468f10
jmp 0x4ccf3d
test bl, bl
jne 0x4ccf2d
lea eax, [ebp + 0xd9f0]
push eax
call fcn.00468f10
lea eax, [ebp + 0xd9f0]
push eax
lea eax, [ebp + 0xf9f0]
push eax
call esi
push 0x800
lea eax, [ebp + 0xd9f0]
push eax
lea ecx, [ebp + 0x7894]
call fcn.0048e8f0
test al, al
jne 0x4ccee0
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x7894]
call fcn.00403fc0
jmp 0x4cd0d1
cmp byte [ebp + 0x7244], 0
je 0x4cd020
mov edi, dword [ebp - 0x18]
mov ecx, 0x55a850
push 0
push 1
push dword [edi]
call fcn.004059c0
cmp eax, 1
jne 0x4cd020
mov ecx, dword [edi]
lea edx, [ebp + 0x109f0]
sub edx, ecx
nop
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + edx - 2], ax
test ax, ax
jne 0x4ccfa0
lea eax, [ebp + 0x109f0]
push eax
call fcn.00478eb0
push eax
push 0x258
call fcn.00488530
push eax
call fcn.004c4d60
add esp, 8
lea eax, [ebp + 0x109f0]
push eax
call fcn.00469b50
lea eax, [ebp + 0x109f0]
push eax
call fcn.00468f10
mov ecx, 0x55a850
call fcn.00405850
test eax, eax
je 0x4cd020
push 0x800
lea eax, [ebp + 0x109f0]
mov ecx, 0x55a850
push eax
call fcn.004053b0
test al, al
je 0x4cd020
lea eax, [ebp + 0x109f0]
push eax
call fcn.00469360
test al, al
jne 0x4ccfb0
push 0
push 1
push 0x54f29a
mov ecx, 0x55a850
call fcn.004059c0
cmp eax, 1
jne 0x4cd0d1
xor ecx, ecx
mov edi, edi
movzx eax, word [ecx + 0x54f29a]
lea ecx, [ecx + 2]
mov word [ebp + ecx + 0x119ee], ax
test ax, ax
jne 0x4cd040
cmp dword [ebp - 0x40], 1
jne 0x4cd099
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [ebp + 0x119f0]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4cd099
lea eax, [ebp + 0x620c]
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x55a850
call fcn.00405850
test eax, eax
je 0x4cd0d1
push 0x800
lea eax, [ebp + 0x119f0]
mov ecx, 0x55a850
push eax
call fcn.004053b0
test al, al
je 0x4cd0d1
lea eax, [ebp + 0x119f0]
push eax
call fcn.00469360
test al, al
jne 0x4cd057
mov bl, byte [ebp - 0xd]
mov byte [ebp - 4], 6
lea ecx, [ebp + 0x7250]
call fcn.0048b950
test bl, bl
jne 0x4cd0f8
mov al, byte [ebp - 0xf]
test al, al
jne 0x4cd0f8
push 0x54f29a
call fcn.00468f10
cmp word [ebp + 0xe9f0], 0
je 0x4cd10e
lea eax, [ebp + 0xe9f0]
push eax
call fcn.004c3220
mov ebx, dword [ebp - 0x24]
lea eax, [ebp + 0xa8f0]
push eax
call fcn.004c4cd0
lea eax, [ebp + 0x78f0]
push eax
call fcn.004c3220
mov al, byte [0x53898e]
inc ebx
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x24], ebx
test al, al
je 0x4cc2f0
jmp 0x4cd147
mov al, byte [0x53898e]
cmp byte [0x53898f], 0
jne 0x4cd159
test al, al
mov eax, 0x4d0
je 0x4cd15e
mov eax, 0x271
push eax
call fcn.00488530
push eax
call fcn.004c4d60
add esp, 4
cmp byte [0x53898e], 0
je 0x4cd184
push dword [0x53890c]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4cd19e
push 0
push 0
push 0
push 0
push 0
push 1
push 0
push 1
call fcn.004c65a0
call fcn.004c73f0
mov al, byte [0x53898c]
test al, al
je 0x4cd1f3
mov ecx, 0x40
lea esi, [ebp + 0x7354]
mov edi, 0x55ab8a
lea eax, [ebp + 0x88f0]
rep movsd dword es:[edi], dword [esi]
push 0
push 0
push eax
movsw word es:[edi], word [esi]
mov ecx, 0x55a850
mov byte [0x55ac8c], 1
call fcn.004059c0
cmp eax, 1
je 0x4cd1ea
mov ecx, 0x55d4d8
call fcn.0043e4b0
test al, al
jne 0x4cd1f9
mov al, byte [0x53898c]
test al, al
jne 0x4cd214
cmp dword [ebp - 0x1c], 0
jbe 0x4cd210
push 0x54f29a
call fcn.00478eb0
push eax
mov ecx, 0x55d4d8
call fcn.00442c60
jmp 0x4cd22f
test al, al
je 0x4cd22f
cmp dword [ebp - 0x1c], 0
jbe 0x4cd22f
push 0x54f29a
call fcn.00478eb0
push eax
mov ecx, 0x55d4d8
call fcn.00442300
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x7354]
call fcn.0048b950
mov bl, byte [ebp - 0xe]
cmp byte [ebp + 0x724c], 0
je 0x4cd25a
push dword [0x5278dc]
push 0x598568
call fcn.0049f140
push 0x598568
call fcn.0049f5a0
test bl, bl
je 0x4cd26d
call fcn.004c4310
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x621c]
call fcn.0043d0f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x129f0]
xor ecx, ebp
call fcn.004ebbd8
lea esp, [ebp + 0x129f4]
pop ebp
ret 4