Function at 0x4af3c0
Capabilities:
Move file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d6d1d
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0xc6ec
call fcn.004c1c40
mov eax, dword [0x4ec0b4]
xor eax, esp
mov dword [esp + 0xc6e8], eax
push ebx
push esi
push edi
mov eax, dword [0x4ec0b4]
xor eax, esp
push eax
lea eax, [esp + 0xc700]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov eax, dword [str.InterfaceConvertProfile]
push eax
push str._s_u
push 0x573418
mov edx, 0xc8
call fcn.00407810
add esp, 0x10
lea ecx, [esp + 0x474]
call fcn.0044bfe0
mov dword [esp + 0xc708], 1
xor ebx, ebx
mov byte [esp + 0x1504], bl
cmp byte [0x533b59], bl
je 0x4af527
push 0x800
lea ecx, [esp + 0xb6f8]
push ecx
mov ecx, 0x542618
call fcn.004153c0
push 0x1050
lea edx, [esp + 0x2558]
push ebx
push edx
call fcn.004c2670
add esp, 0xc
xor eax, eax
jmp 0x4af490
movzx ecx, word [esp + eax + 0xb6f4]
mov word [esp + eax + 0x2554], cx
add eax, 2
cmp cx, bx
jne 0x4af490
lea ecx, [esp + 0x251c]
call fcn.00482f00
lea ecx, [esp + 0x2524]
call fcn.00482f00
lea ecx, [esp + 0x252c]
call fcn.00482f00
push ebx
lea eax, [esp + 0x1510]
push eax
lea ecx, [esp + 0xb6fc]
push ecx
call fcn.00441e10
test al, al
je 0x4af502
mov edx, dword [esp + 0x250c]
mov eax, dword [esp + 0x2510]
mov dword [esp + 0x3554], edx
mov dword [esp + 0x3558], eax
lea ecx, [esp + 0x2554]
push ecx
lea ecx, [esp + 0x478]
call fcn.0044bc10
lea ecx, [esp + 0x474]
call fcn.0044bf00
jmp 0x4af5e3
lea ecx, [esp + 0x4c]
call fcn.00480330
mov byte [esp + 0xc708], 2
lea edi, [esp + 0x4c]
cmp esi, ebx
je 0x4af544
mov edi, esi
jmp 0x4af555
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, 0x5404f0
call fcn.0044da00
push ebx
push ebx
push ebx
push 1
push 1
lea eax, [esp + 0x488]
push eax
push 3
push edi
call fcn.00478450
test al, al
jne 0x4af59d
mov byte [esp + 0xc708], 1
lea ecx, [esp + 0x4c]
call fcn.00401b50
mov dword [esp + 0xc708], 0xffffffff
lea ecx, [esp + 0x474]
call fcn.004abf90
jmp 0x4b06c3
xor esi, esi
cmp dword [esp + 0x4e0], ebx
jbe 0x4af5ca
jmp 0x4af5b0
push esi
lea ecx, [esp + 0x478]
call fcn.0044bfa0
inc esi
mov dword [eax + 4], ebx
cmp esi, dword [esp + 0x4e0]
jb 0x4af5b0
mov byte [esp + 0xc708], 1
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x4af5e3
push eax
call fcn.004c23c4
add esp, 4
mov ecx, dword [str.InterfaceConvertProfile]
push 0x573418
push ecx
call fcn.0046d200
mov edx, dword [0x535cac]
push edx
mov byte [esp + 0x15], 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edx, dword [0x51ff0c]
neg eax
lea ecx, [esp + 0x474]
push ecx
sbb eax, eax
and eax, dword [0x535cac]
push 0x4abfe0
push eax
push str.CONVERTARC
push edx
mov dword [esp + 0x34], ebx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4b067c
push ebx
push str.Background
push 0x573418
call fcn.0046cee0
test eax, eax
jne 0x4af668
cmp dword [0x534b74], 1
jne 0x4af661
cmp byte [0x550423], al
jne 0x4af668
mov byte [esp + 0x14], 0
jmp 0x4af66d
mov byte [esp + 0x14], 1
mov eax, dword [esp + 0x14]
push ebx
push eax
push ebx
push 8
call fcn.004a30d0
push 0x800
lea ecx, [esp + 0x2558]
push ecx
call fcn.004a0610
xor edi, edi
xor esi, esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [0x534bf0], ebx
mov dword [0x534bf4], ebx
mov dword [esp + 0x44], edi
cmp dword [esp + 0x4e0], ebx
jbe 0x4af6f4
lea ebx, [ebx]
push esi
lea ecx, [esp + 0x478]
call fcn.0044bfa0
test byte [eax + 4], 2
je 0x4af6e6
mov edx, dword [eax + 8]
add dword [0x534bf0], edx
mov eax, dword [eax + 0xc]
adc dword [0x534bf4], eax
inc edi
inc esi
cmp esi, dword [esp + 0x4e0]
jb 0x4af6c0
mov dword [esp + 0x44], edi
push 0x880
lea ecx, [esp + 0x85a8]
push ecx
push ebx
push edi
call fcn.0047ff20
mov eax, dword [0x533b54]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea edx, [esp + 0x85a4]
push edx
push 0x65
push eax
call esi
or edi, 0xffffffff
cmp byte [0x535c28], 0
mov dword [0x535c18], ebx
mov dword [0x535c1c], ebx
mov dword [esp + 0x1c], ebx
jne 0x4b05b0
cmp byte [0x533b58], 0
jne 0x4b05c7
mov edx, dword [esp + 0x20]
push 0x880
lea ecx, [esp + 0x85a8]
push ecx
push ebx
push edx
call fcn.0047ff20
mov ecx, dword [0x533b54]
lea eax, [esp + 0x85a4]
push eax
push 0x66
push ecx
call esi
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push 0x880
lea edx, [esp + 0x85a8]
push edx
push eax
push ecx
call fcn.0047ff20
mov eax, dword [0x533b54]
lea edx, [esp + 0x85a4]
push edx
push 0x67
push eax
call esi
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push 0x880
lea ecx, [esp + 0x85a8]
push ecx
push edx
push eax
call fcn.0047ff20
mov edx, dword [0x533b54]
lea ecx, [esp + 0x85a4]
push ecx
push 0x68
push edx
call esi
cmp edi, 0xffffffff
je 0x4af80a
push edi
lea eax, [esp + 0xa6a8]
push eax
lea ecx, [esp + 0x47c]
call fcn.0044bde0
mov ecx, dword [eax + 0x1000]
add dword [0x535c18], ecx
mov edx, dword [eax + 0x1004]
adc dword [0x535c1c], edx
or edi, 0xffffffff
call fcn.004a22f0
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x4e0]
jge 0x4b05b0
mov ecx, eax
push ecx
lea ecx, [esp + 0x478]
call fcn.0044bfa0
mov ebx, eax
test byte [ebx + 4], 2
mov dword [esp + 0x18], ebx
je 0x4b059e
cmp byte [esp + 0x14fd], 0
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x48], edi
je 0x4af872
test byte [ebx + 0x24], 0x10
je 0x4af872
push 0x50e
call fcn.00475cc0
mov edx, dword [ebx]
push eax
push edx
call fcn.004adf30
add esp, 8
jmp 0x4b059e
mov eax, dword [ebx]
push 1
push 0
push eax
mov ecx, 0x542618
call fcn.00418a80
cmp eax, 1
jne 0x4b059e
lea ecx, [esp + 0xac]
push ecx
mov ecx, 0x542618
call fcn.004153f0
lea ecx, [esp + 0x251c]
call fcn.00482f00
lea ecx, [esp + 0x2524]
call fcn.00482f00
lea ecx, [esp + 0x252c]
call fcn.00482f00
mov eax, dword [ebx]
push 0
lea edx, [esp + 0x1510]
push edx
push eax
call fcn.00441e10
test al, al
je 0x4b059e
cmp byte [esp + 0x14fd], 0
je 0x4af915
cmp dword [esp + 0x1fc], 0
jne 0x4af8fa
cmp byte [esp + 0x206], 0
je 0x4af915
push 0x50e
call fcn.00475cc0
mov ecx, dword [ebx]
push eax
push ecx
call fcn.004adf30
add esp, 8
jmp 0x4b059e
push 1
push 0x800
lea edx, [esp + 0x65ac]
push edx
push str.Rar_CV
call fcn.0049fbc0
test al, al
je 0x4b059e
lea eax, [esp + 0x65a4]
push eax
call fcn.004a05b0
push 1
call fcn.0049ba40
mov ecx, dword [esp + 0x44]
push 0x800
mov dword [0x534bfc], ecx
push 0x55147a
mov ecx, 0x542618
call fcn.004153c0
mov edx, dword [0x542824]
mov eax, 4
push 0x4d8800
mov ecx, 0x55247c
mov dword [0x54e418], edx
mov dword [0x54c190], 1
mov dword [0x54d408], eax
mov dword [0x54d40c], eax
call fcn.004801a0
push 0x55147a
push 0x20f
call fcn.00475cc0
push eax
call fcn.004a09e0
mov eax, dword [0x5765b0]
add esp, 8
cmp byte [0x54d401], 0
mov dword [esp + 0x14], eax
je 0x4af9d2
mov byte [0x54d401], 0
mov byte [esp + 0x11], 1
push 1
push 0
mov ecx, 0x542618
call fcn.00419e80
cmp byte [0x533b58], 0
jne 0x4b057a
mov ecx, dword [esp + 0x14]
cmp ecx, dword [0x5765b0]
jne 0x4b057a
push 0x573418
call fcn.0049be20
mov edx, dword [0x54c1e0]
xor edi, edi
mov dword [esp + 0x40], edx
mov byte [0x54c339], 0
cmp word [0x549076], di
jne 0x4afa88
push edi
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x542618
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], edi
call fcn.004155a0
cmp dword [esp + 0x24], edi
jbe 0x4afa7b
push 0x800
push 0x549076
push str.Rar_CM
call fcn.0049faf0
mov esi, eax
cmp esi, edi
je 0x4afa7b
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
push esi
push edx
push 1
push eax
call fcn.004c4800
push esi
call fcn.004c4622
add esp, 0x14
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004c26ea
add esp, 4
mov esi, dword [esp + 0x18]
mov eax, dword [esi]
push 0x800
lea edx, [esp + 0xa6a8]
push edx
push eax
call fcn.00460ef0
push 0x800
lea ecx, [esp + 0x500]
push ecx
lea edx, [esp + 0x96ac]
push edx
call fcn.0047fbe0
cmp word [esp + 0x96a4], di
je 0x4afad7
push 0x800
lea eax, [esp + 0x96a8]
push eax
call fcn.004607d0
mov ecx, dword [esi]
push ecx
call fcn.0044d0c0
mov byte [esp + 0x10], al
mov ebx, 0x4d8814
cmp dword [0x54e418], edi
je 0x4afaf5
mov ebx, 0x4d8b60
cmp word [0x547070], 0
je 0x4afb04
mov ebx, 0x4d881c
mov edi, dword [esp + 0x18]
mov edx, dword [edi]
push ebx
push edx
call fcn.00460e70
test al, al
je 0x4afbda
cmp word [esp + 0x96a4], 0
je 0x4afb41
lea eax, [esp + 0xa6a4]
push eax
lea ecx, [esp + 0x96a8]
push ecx
call fcn.00487680
test eax, eax
jne 0x4afbda
mov edx, dword [edi]
push 0x800
push 0x55147a
push edx
mov byte [esp + 0x1e], 1
call fcn.00460c50
push eax
lea eax, [esp + 0x65b0]
push eax
call fcn.00460820
push 0x55147a
call fcn.00460e50
mov esi, eax
test esi, esi
je 0x4afcec
xor ecx, ecx
push 0x55147a
mov word [esi], cx
call fcn.00460e50
mov edx, 0x2e
mov word [esi], dx
test eax, eax
je 0x4afcec
cmp byte [esp + 0x10], 0
je 0x4afcec
cmp dword [esp + 0x12c], 0
jne 0x4afcec
cmp dword [esp + 0x1d8], 0
je 0x4afcec
mov edx, eax
mov ecx, esi
sub edx, esi
movzx eax, word [ecx]
mov word [edx + ecx], ax
add ecx, 2
test ax, ax
jne 0x4afbc6
jmp 0x4afcec
cmp word [esp + 0x96a4], 0
mov byte [esp + 0x12], 0
je 0x4afc48
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x96a4]
mov word [eax + 0x55147a], cx
add eax, 2
test cx, cx
jne 0x4afbf0
mov eax, dword [edi]
push eax
call fcn.00460c50
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4afc11
mov edi, 0x55147a
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4afc26
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x18]
jmp 0x4afc61
mov ecx, dword [edi]
mov edx, 0x55147a
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4afc50
push 0x55147a
call fcn.00460e50
mov esi, eax
test esi, esi
je 0x4afcb6
xor ecx, ecx
push 0x55147a
mov word [esi], cx
call fcn.00460e50
test eax, eax
je 0x4afcae
push str..tar
push eax
call fcn.00487680
test eax, eax
je 0x4afcb6
cmp byte [esp + 0x10], 0
je 0x4afcae
cmp dword [esp + 0x12c], 0
jne 0x4afcae
cmp dword [esp + 0x1d8], 0
jne 0x4afcb6
mov edx, 0x2e
mov word [esi], dx
push ebx
push 0x55147a
call fcn.00462140
push 0x55147a
call fcn.0043d340
test al, al
je 0x4afcec
push 0x50d
call fcn.00475cc0
push eax
push 0x55147a
call fcn.004adf30
add esp, 8
mov byte [esp + 0x12], 1
mov esi, dword [esp + 0x14]
cmp esi, dword [0x5765b0]
jne 0x4afd79
lea eax, [esp + 0x65a4]
push eax
call fcn.004a05b0
push 0x4d8800
mov ecx, 0x55247c
mov dword [0x54c1bc], 3
mov dword [0x54c1b8], 2
mov byte [0x54c1f6], 0
mov byte [0x54c210], 0
call fcn.004801a0
push 0x55147a
call fcn.00460c50
push eax
push 0x20d
call fcn.00475cc0
push eax
call fcn.004a09e0
add esp, 8
cmp byte [0x54d401], 0
je 0x4afd6d
mov byte [0x54d401], 0
mov byte [esp + 0x11], 1
push 0
mov ecx, 0x542618
call fcn.00419a60
cmp word [0x549076], 0
je 0x4afd8d
push 0x549076
call fcn.0049fde0
cmp byte [0x533b58], 0
mov byte [esp + 0x13], 0
jne 0x4b0569
cmp esi, dword [0x5765b0]
jne 0x4b0569
push 1
push 0
push 0x55147a
mov ecx, 0x542618
call fcn.00418a80
cmp eax, 1
jne 0x4b0569
lea ecx, [esp + 0x20c]
push ecx
mov ecx, 0x542618
call fcn.004153f0
mov eax, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x1c8]
cmp eax, dword [esp + 0x324]
jne 0x4afdf9
cmp ecx, dword [esp + 0x328]
je 0x4afe37
or eax, ecx
je 0x4afe37
push 0x4d8d8c
lea edx, [esp + 0xb0]
push edx
call fcn.00487680
test eax, eax
jne 0x4afe1c
cmp dword [esp + 0x1d8], eax
jne 0x4afe37
push 0x50a
call fcn.00475cc0
push eax
mov eax, dword [edi]
push eax
call fcn.004adf30
add esp, 8
jmp 0x4b0569
mov eax, dword [esp + 0x1500]
test eax, eax
je 0x4afea4
mov ecx, dword [esp + 0x1d0]
push ecx
mov ecx, dword [esp + 0x1d0]
cdq
push ecx
push edx
push eax
call fcn.004c2390
push 0
mov esi, edx
mov edx, dword [esp + 0x334]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x334]
push edx
push eax
call fcn.004c2390
cmp esi, edx
jg 0x4afea4
jl 0x4afe81
cmp edi, eax
jae 0x4afea4
push 0x55147a
call fcn.00460c50
push eax
push 0x50f
call fcn.00475cc0
push eax
call fcn.004a09e0
add esp, 8
jmp 0x4b0569
mov ecx, 0x40
mov esi, 0x54b084
lea edi, [esp + 0x36c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [esp + 0xc708], 4
push 1
call fcn.0049ba40
mov ecx, 0x40
lea esi, [esp + 0x36c]
mov edi, 0x54b084
rep movsd dword es:[edi], dword [esi]
push 0x800
push 0x55147a
mov ecx, 0x542618
movsw word es:[edi], word [esi]
call fcn.004153c0
mov ecx, dword [0x542824]
xor ebx, ebx
mov dword [0x54e418], ecx
push 0x4d8800
mov ecx, 0x55247c
mov byte [0x54c339], 1
mov dword [0x54c318], ebx
mov dword [0x54c31c], ebx
mov dword [0x54c320], ebx
mov dword [0x54c324], ebx
call fcn.004801a0
push 0x55147a
call fcn.00460c50
push eax
push 0x210
call fcn.00475cc0
push eax
call fcn.004a09e0
add esp, 8
cmp byte [0x54d401], bl
je 0x4aff5e
mov byte [0x54d401], bl
mov byte [esp + 0x11], 1
push ebx
push ebx
mov ecx, 0x542618
call fcn.00419e80
cmp byte [0x533b58], 0
jne 0x4b054e
mov edx, dword [esp + 0x14]
cmp edx, dword [0x5765b0]
jne 0x4b054e
mov eax, dword [esp + 0x324]
or eax, dword [esp + 0x328]
jne 0x4affbb
cmp dword [esp + 0x2510], ebx
ja 0x4affad
cmp dword [esp + 0x250c], 0x200
jb 0x4affbb
cmp dword [esp + 0x1b8], 1
jbe 0x4b054e
mov eax, dword [esp + 0x1500]
cmp eax, ebx
je 0x4b000c
mov ecx, dword [esp + 0x1d0]
push ecx
mov ecx, dword [esp + 0x1d0]
cdq
push ecx
push edx
push eax
call fcn.004c2390
push ebx
mov esi, edx
mov edx, dword [esp + 0x334]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x334]
push edx
push eax
call fcn.004c2390
cmp esi, edx
jl 0x4b054e
jg 0x4b000c
cmp edi, eax
jb 0x4b054e
push 0x55147a
mov byte [esp + 0x17], 1
call fcn.00460c50
push eax
push 0x25a
call fcn.00475cc0
push eax
call fcn.004a09e0
inc dword [esp + 0x28]
mov ecx, dword [esp + 0x1d4]
mov edx, dword [esp + 0x1d8]
mov eax, dword [esp + 0x334]
add esp, 8
add dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x330]
adc dword [esp + 0x38], edx
add dword [esp + 0x2c], eax
adc dword [esp + 0x30], ecx
cmp byte [esp + 0x12], 0
je 0x4b03c4
mov esi, dword [esp + 0x18]
mov edx, dword [esi]
push ebx
push 1
push edx
mov ecx, 0x542618
call fcn.00418a80
cmp eax, 1
jne 0x4b054e
lea ecx, [esp + 0x4c]
call fcn.00480330
mov byte [esp + 0xc708], 5
mov eax, dword [esi]
lea edx, [esp + 0x45a4]
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4b00a3
mov byte [esp + 0x10], 0
jmp 0x4b00c0
lea eax, [esp + 0x45a4]
push eax
lea ecx, [esp + 0x55a8]
push str._s._cvtbackup_
push ecx
mov edx, 0x800
call fcn.00407810
add esp, 0xc
lea edx, [esp + 0x55a4]
push edx
lea eax, [esp + 0x45a8]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4b0281
lea ecx, [esp + 0x45a4]
push ecx
lea ecx, [esp + 0x50]
call fcn.004801a0
lea edx, [esp + 0x55a4]
push edx
lea ecx, [esp + 0x50]
call fcn.004801a0
mov ecx, 0x542618
call fcn.004153e0
test eax, eax
je 0x4b0160
push 0x800
lea eax, [esp + 0x45a8]
push eax
mov ecx, 0x542618
call fcn.004157f0
test al, al
je 0x4b0160
lea ecx, [esp + 0x45a4]
push ecx
call fcn.0043d340
test al, al
jne 0x4b00c0
push ebx
push 1
push 0x55147a
mov ecx, 0x542618
call fcn.00418a80
cmp eax, 1
jne 0x4b0286
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [eax + 0x55147a]
mov word [esp + eax + 0x45a4], cx
add eax, 2
cmp cx, bx
jne 0x4b0180
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [ecx]
mov eax, dword [esi]
lea edx, [esp + 0x55a4]
sub edx, eax
jmp 0x4b01b0
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4b01b0
push 0x800
lea edx, [esp + 0x45a8]
push edx
call fcn.00460c50
push eax
lea eax, [esp + 0x55ac]
push eax
call fcn.00460e20
lea ecx, [esp + 0x55a4]
push ecx
lea edx, [esp + 0x45a8]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x4b0281
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x4b020a
cmp eax, 1
jne 0x4b023e
push ebx
push ebx
push 3
push ebx
push ebx
push 0x40000000
lea eax, [esp + 0x55bc]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4b023e
lea ecx, [esp + 0x2544]
push ecx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x542618
call fcn.004153e0
test eax, eax
je 0x4b0286
push 0x800
lea edx, [esp + 0x45a8]
push edx
mov ecx, 0x542618
call fcn.004157f0
test al, al
je 0x4b0286
lea eax, [esp + 0x45a4]
push eax
call fcn.0043d340
test al, al
je 0x4b0286
mov esi, dword [esp + 0x18]
jmp 0x4b01a0
mov byte [esp + 0x10], 1
xor bl, bl
cmp byte [esp + 0x14fc], bl
jne 0x4b0302
push 0x800
lea ecx, [esp + 0x35a8]
push ecx
lea ecx, [esp + 0x54]
mov bl, 1
call fcn.004803b0
test al, al
je 0x4b02f9
lea ecx, [ecx]
push 0x800
lea edx, [esp + 0x75a8]
push edx
lea ecx, [esp + 0x54]
call fcn.004803b0
test al, al
je 0x4b02f9
lea eax, [esp + 0x35a4]
push eax
call fcn.0043d340
test al, al
jne 0x4b02f7
push 0x800
lea ecx, [esp + 0x35a8]
push ecx
lea ecx, [esp + 0x54]
call fcn.004803b0
test al, al
jne 0x4b02b0
jmp 0x4b02f9
xor bl, bl
lea ecx, [esp + 0x4c]
call fcn.00480120
push 0x800
lea edx, [esp + 0x35a8]
push edx
lea ecx, [esp + 0x54]
call fcn.004803b0
test al, al
je 0x4b03ae
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x4b0330
push 0x800
lea eax, [esp + 0x75a8]
push eax
lea ecx, [esp + 0x54]
call fcn.004803b0
test al, al
je 0x4b03ae
cmp byte [esp + 0x10], 0
jne 0x4b0371
test bl, bl
jne 0x4b0382
lea ecx, [esp + 0x75a4]
push ecx
call fcn.0043d460
lea edx, [esp + 0x75a4]
push edx
call fcn.0043cde0
jmp 0x4b0394
test bl, bl
jne 0x4b0382
lea eax, [esp + 0x35a4]
push eax
call fcn.0043cde0
lea ecx, [esp + 0x35a4]
push ecx
lea edx, [esp + 0x75a8]
push edx
call esi
push 0x800
lea eax, [esp + 0x35a8]
push eax
lea ecx, [esp + 0x54]
call fcn.004803b0
test al, al
jne 0x4b0330
mov byte [esp + 0xc708], 4
lea ecx, [esp + 0x4c]
call fcn.00401b50
jmp 0x4b054e
cmp byte [esp + 0x14fc], 0
je 0x4b0485
mov esi, dword [esp + 0x18]
mov ecx, dword [esi]
push ebx
push 1
push ecx
mov ecx, 0x542618
call fcn.00418a80
cmp eax, 1
jne 0x4b0485
mov eax, dword [esi]
lea edx, [esp + 0x35a4]
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bx
jne 0x4b0400
nop
lea edx, [esp + 0x35a4]
push edx
call fcn.00460c50
push eax
push 0x258
call fcn.00475cc0
push eax
call fcn.004a09e0
add esp, 8
lea eax, [esp + 0x35a4]
push eax
call fcn.0043d460
lea ecx, [esp + 0x35a4]
push ecx
call fcn.0043cde0
mov ecx, 0x542618
call fcn.004153e0
test eax, eax
je 0x4b0485
push 0x800
lea edx, [esp + 0x35a8]
push edx
mov ecx, 0x542618
call fcn.004157f0
test al, al
je 0x4b0485
lea eax, [esp + 0x35a4]
push eax
call fcn.0043d340
test al, al
jne 0x4b0410
push ebx
push 1
push 0x55147a
mov ecx, 0x542618
call fcn.00418a80
cmp eax, 1
jne 0x4b054e
xor eax, eax
jmp 0x4b04b0
movzx ecx, word [eax + 0x55147a]
mov word [esp + eax + 0x55a4], cx
add eax, 2
cmp cx, bx
jne 0x4b04b0
mov ebx, dword [esp + 0x40]
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
test ebx, ebx
je 0x4b04da
cmp ebx, 1
jne 0x4b0514
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea ecx, [esp + 0x55bc]
push ecx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x4b0514
lea edx, [esp + 0x2544]
push edx
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x542618
call fcn.004153e0
test eax, eax
je 0x4b054e
push 0x800
lea eax, [esp + 0x55a8]
push eax
mov ecx, 0x542618
call fcn.004157f0
test al, al
je 0x4b054e
lea ecx, [esp + 0x55a4]
push ecx
call fcn.0043d340
test al, al
jne 0x4b04d1
mov byte [esp + 0xc708], 1
lea ecx, [esp + 0x36c]
call fcn.00479380
cmp byte [esp + 0x13], 0
jne 0x4b057a
cmp byte [esp + 0x12], 0
jne 0x4b057a
push 0x55147a
call fcn.0043cde0
lea edx, [esp + 0x2554]
push edx
call fcn.004a05b0
lea eax, [esp + 0x65a4]
push eax
call fcn.004a0240
mov edi, dword [esp + 0x48]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
inc dword [esp + 0x1c]
xor ebx, ebx
cmp byte [0x535c28], bl
je 0x4af740
cmp byte [0x533b58], 0
jne 0x4b05c7
cmp byte [0x535c28], 0
mov eax, 0x4d0
je 0x4b05cc
mov eax, 0x271
push eax
call fcn.00475cc0
push eax
call fcn.004a09e0
add esp, 4
cmp byte [0x535c28], 0
je 0x4b05f3
mov ecx, dword [0x533b54]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4b0607
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push 1
call fcn.004a16e0
call fcn.004a0af0
mov al, byte [0x533b59]
test al, al
je 0x4b0640
push ebx
push ebx
lea edx, [esp + 0xb6fc]
push edx
mov ecx, 0x542618
call fcn.00418a80
cmp eax, 1
je 0x4b0637
mov ecx, 0x5404f0
call fcn.0044f920
test al, al
jne 0x4b0646
mov al, byte [0x533b59]
test al, al
jne 0x4b0661
cmp dword [esp + 0x20], ebx
jbe 0x4b065d
push 0x55147a
call fcn.00460c50
push eax
mov ecx, 0x5404f0
call fcn.00450010
jmp 0x4b067c
test al, al
je 0x4b067c
cmp dword [esp + 0x20], ebx
jbe 0x4b067c
push 0x55147a
call fcn.00460c50
push eax
mov ecx, 0x5404f0
call fcn.004508c0
cmp byte [esp + 0x1504], 0
je 0x4b0696
mov eax, dword [str.InterfaceConvertProfile]
push eax
push 0x573418
call fcn.0046d200
push 0x573418
call fcn.0046d2e0
cmp byte [esp + 0x11], 0
je 0x4b06ac
call fcn.0049f740
mov dword [esp + 0xc708], 0xffffffff
lea ecx, [esp + 0x474]
call fcn.00417bc0
mov ecx, dword [esp + 0xc700]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc6e8]
xor ecx, esp
call fcn.004c1c22
mov esp, ebp
pop ebp
ret 4