Function at 0x647da0
Capabilities:
Copy file
Get common file path
Move file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xaf
push 0
push 0
dec ecx
jne 0x647da8
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 4]
call fcn.00407c14
lea eax, [ebp - 0x2f0]
mov edx, dword [0x41b154]
call fcn.004093d4
xor eax, eax
push ebp
push 0x64927d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x649098
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x40
lea eax, [ebp - 0x394]
push eax
call sub.kernel32.dll_GetSystemDirectoryW
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 4]
call fcn.00407f58
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
call fcn.00429ba4
lea eax, [ebp - 8]
mov ecx, 0x64929c
mov edx, dword [ebp - 0x50]
call fcn.00408e20
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 4]
call fcn.00407f58
mov esi, dword [ebp - 4]
mov ebx, esi
test ebx, ebx
je 0x647e3e
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x398]
push eax
mov ecx, 1
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00408ff0
mov eax, dword [ebp - 0x398]
mov edx, 0x6492b4
call fcn.00408fb8
jne 0x647e85
mov ebx, esi
test ebx, ebx
je 0x647e71
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00408ff0
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3bc]
mov eax, dword [eax + 0x6c]
mov edx, 0xff0000
call fcn.0047de0c
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3a4]
xor edx, edx
call fcn.004c25ec
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3a4]
xor edx, edx
call fcn.004c2678
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x6c]
mov edx, dword [eax]
call dword [edx + 0x188]
mov edx, eax
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3a4]
call fcn.004c25f8
lea eax, [ebp - 0x2c]
call fcn.00407b30
lea eax, [ebp - 0x28]
call fcn.00647d18
xor ecx, ecx
mov dl, 1
mov eax, dword [0x626dac]
call fcn.0045b220
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
movzx edx, byte [0x6492b8]
mov byte [eax + 0x65], dl
mov eax, dword [ebp - 0x2fc]
mov byte [eax + 0x178], 0
mov eax, dword [ebp - 0x2fc]
mov byte [eax + 0x174], 0
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x6c]
call fcn.0056263c
jmp 0x648ffe
mov eax, esi
mov edx, 0x6492c8
call fcn.005610f4
lea edx, [ebp - 0x3a0]
mov ecx, dword [eax]
call dword [ecx + 0x80]
mov eax, dword [ebp - 0x3a0]
lea edx, [ebp - 0x39c]
call fcn.00421218
mov ecx, dword [ebp - 0x39c]
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 8]
call fcn.00408e20
mov dl, 1
mov eax, dword [ebp - 0x30]
call fcn.00422750
cmp eax, 0x10
jne 0x647fb3
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x6c]
call fcn.00562958
jmp 0x648ffe
push 1
push 0
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x3ac]
mov edx, dword [ebp - 8]
call fcn.00408cc0
mov eax, dword [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x3b0]
mov edx, dword [ebp - 0x30]
call fcn.00408cc0
mov eax, dword [ebp - 0x3b0]
xor ecx, ecx
pop edx
call fcn.0058da68
mov edx, dword [ebp - 0x3a8]
lea eax, [ebp - 0x3a4]
call fcn.00408cac
mov edx, dword [ebp - 0x3a4]
mov eax, 0x6492b4
call fcn.00429c44
test eax, eax
jg 0x648027
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x6c]
call fcn.00562958
jmp 0x648ffe
push 1
push 0
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x3bc]
mov edx, dword [ebp - 8]
call fcn.00408cc0
mov eax, dword [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x3c0]
mov edx, dword [ebp - 0x30]
call fcn.00408cc0
mov eax, dword [ebp - 0x3c0]
xor ecx, ecx
pop edx
call fcn.0058da68
mov edx, dword [ebp - 0x3b8]
lea eax, [ebp - 0x3b4]
call fcn.00408cac
mov eax, dword [ebp - 0x3b4]
lea edx, [ebp - 0x10]
call fcn.00420d10
push 1
push 0
lea eax, [ebp - 0x3cc]
push eax
lea eax, [ebp - 0x3d0]
mov edx, dword [ebp - 0x10]
call fcn.00408cc0
mov eax, dword [ebp - 0x3d0]
xor ecx, ecx
mov edx, 0x6492dc
call fcn.0058da68
mov edx, dword [ebp - 0x3cc]
lea eax, [ebp - 0x3c8]
call fcn.00408cac
mov eax, dword [ebp - 0x3c8]
lea edx, [ebp - 0x3c4]
call fcn.00420d10
mov edx, dword [ebp - 0x3c4]
lea eax, [ebp - 0x10]
call fcn.00407f58
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.00408e20
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00408e20
lea eax, [ebp - 0x18]
mov edx, 0x6492f4
call fcn.00407f58
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x648112
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x3e0]
mov edx, dword [ebp - 0x18]
call fcn.004377a8
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
mov ecx, 1
mov edx, ebx
mov eax, dword [ebp - 0x18]
call fcn.00408ff0
mov eax, dword [ebp - 0x3f4]
mov edx, 0x649524
call fcn.00408fb8
sete al
push eax
lea eax, [ebp - 0x404]
mov edx, 0x649524
call fcn.004377a8
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x414]
xor edx, edx
call fcn.004377a8
lea edx, [ebp - 0x414]
pop ecx
pop eax
call fcn.0058d984
lea edx, [ebp - 0x3f0]
pop eax
call fcn.0043b7a8
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x424]
mov edx, 0x649534
call fcn.004377a8
lea edx, [ebp - 0x424]
pop eax
call fcn.0043b7a8
lea edx, [ebp - 0x3e0]
lea eax, [ebp - 0x18]
call fcn.00436bec
lea edx, [ebp - 0x42c]
mov eax, dword [ebp - 0x1c]
call fcn.00422cc8
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x428]
call fcn.00420d10
mov eax, dword [ebp - 0x428]
mov edx, 0x6495f0
call fcn.0040919c
test eax, eax
jle 0x6485bf
mov dl, 1
mov eax, dword [ebp - 0x20]
call fcn.0042242c
test al, al
je 0x6485bf
lea edx, [ebp - 0x434]
mov eax, dword [ebp - 0x20]
call fcn.00422c88
mov eax, dword [ebp - 0x434]
lea edx, [ebp - 0x430]
call fcn.00420d10
mov eax, dword [ebp - 0x430]
mov edx, dword [ebp - 0x18]
call fcn.0040919c
test eax, eax
jg 0x6485bf
lea edx, [ebp - 0x438]
mov eax, dword [ebp - 0x20]
call fcn.00420d10
mov edx, dword [ebp - 0x438]
mov eax, 0x649624
call fcn.0040919c
test eax, eax
jg 0x6485bf
lea edx, [ebp - 0x43c]
mov eax, dword [ebp - 0x20]
call fcn.00420d10
mov edx, dword [ebp - 0x43c]
mov eax, 0x64963c
call fcn.0040919c
test eax, eax
jg 0x6485bf
mov ecx, 0x649654
mov edx, 0x649664
mov eax, 0x6496a8
call fcn.0058dc84
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x6496bc
lea eax, [ebp - 0x440]
mov edx, 3
call fcn.00408ea8
mov edx, dword [ebp - 0x440]
mov eax, dword [ebp - 0x2fc]
call fcn.0062a024
mov eax, dword [ebp - 0x28]
call fcn.00404a78
call fcn.00404a3c
xor eax, eax
push ebp
push 0x648300
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x2fc]
call fcn.00628a54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64834a
lea eax, [ebp - 0x448]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.00408e20
mov eax, dword [ebp - 0x448]
lea edx, [ebp - 0x24]
call fcn.00422c88
lea eax, [ebp - 0x44c]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.00408e20
mov eax, dword [ebp - 0x44c]
mov edx, dword [ebp - 0x20]
call fcn.00645400
test al, al
je 0x6483c0
push 0x649718
push dword [ebp - 0x20]
push 0x649734
lea eax, [ebp - 0x450]
mov edx, 3
call fcn.00408ea8
mov edx, dword [ebp - 0x450]
mov ecx, 0x649654
mov eax, 0x6496a8
call fcn.0058dc84
jmp 0x6483f2
push 0x6497a0
push dword [ebp - 0x20]
push 0x6497bc
lea eax, [ebp - 0x454]
mov edx, 3
call fcn.00408ea8
mov edx, dword [ebp - 0x454]
mov ecx, 0x649654
mov eax, 0x6496a8
call fcn.0058dc84
push 1
push 0
lea eax, [ebp - 0x45c]
push eax
mov eax, dword [ebp - 0x2f4]
mov edx, dword [eax + 0xdd]
lea eax, [ebp - 0x464]
mov ecx, 0x649824
call fcn.00408e20
mov edx, dword [ebp - 0x464]
lea eax, [ebp - 0x460]
call fcn.00408cc0
mov eax, dword [ebp - 0x460]
mov ecx, 0x649844
mov edx, 0x64984c
call fcn.0058da68
mov edx, dword [ebp - 0x45c]
lea eax, [ebp - 0x458]
call fcn.00408cac
mov eax, dword [ebp - 0x458]
lea ecx, [ebp - 0x2f0]
mov edx, 0x1ff
call fcn.00422890
test eax, eax
jne 0x6485af
test dword [ebp - 0x2e0], 0x10
jle 0x64859c
mov eax, dword [ebp - 0x2dc]
mov edx, 0x649860
call fcn.00408fb8
je 0x64859c
mov eax, dword [ebp - 0x2dc]
mov edx, 0x649870
call fcn.00408fb8
je 0x64859c
push 1
push 0
lea eax, [ebp - 0x468]
push eax
mov eax, dword [ebp - 0x2f4]
push dword [eax + 0xdd]
push 0x649884
push dword [ebp - 0x2dc]
push dword [ebp - 0x10]
lea eax, [ebp - 0x470]
mov edx, 4
call fcn.00408ea8
mov edx, dword [ebp - 0x470]
lea eax, [ebp - 0x46c]
call fcn.00408cc0
mov eax, dword [ebp - 0x46c]
mov ecx, 0x649844
mov edx, 0x64984c
call fcn.0058da68
mov edx, dword [ebp - 0x468]
lea eax, [ebp - 0x40]
call fcn.00408cac
lea eax, [ebp - 0x474]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.00408e20
mov eax, dword [ebp - 0x474]
mov edx, dword [ebp - 0x40]
call fcn.00645400
test al, al
je 0x64856a
push 0x6498a4
push dword [ebp - 0x20]
push 0x649734
lea eax, [ebp - 0x478]
mov edx, 3
call fcn.00408ea8
mov edx, dword [ebp - 0x478]
mov ecx, 0x649654
mov eax, 0x6496a8
call fcn.0058dc84
jmp 0x64859c
push 0x6498c0
push dword [ebp - 0x20]
push 0x6497bc
lea eax, [ebp - 0x47c]
mov edx, 3
call fcn.00408ea8
mov edx, dword [ebp - 0x47c]
mov ecx, 0x649654
mov eax, 0x6496a8
call fcn.0058dc84
lea eax, [ebp - 0x2f0]
call fcn.004228e0
test eax, eax
je 0x64846e
lea eax, [ebp - 0x2f0]
call fcn.00422904
jmp 0x648d9c
mov ecx, 0x649654
mov edx, 0x6498dc
mov eax, 0x6496a8
call fcn.0058dc84
push 1
push 0
lea eax, [ebp - 0x484]
push eax
mov eax, dword [ebp - 0x2f4]
mov edx, dword [eax + 0xdd]
lea eax, [ebp - 0x48c]
mov ecx, 0x649824
call fcn.00408e20
mov edx, dword [ebp - 0x48c]
lea eax, [ebp - 0x488]
call fcn.00408cc0
mov eax, dword [ebp - 0x488]
mov ecx, 0x649844
mov edx, 0x64984c
call fcn.0058da68
mov edx, dword [ebp - 0x484]
lea eax, [ebp - 0x480]
call fcn.00408cac
mov eax, dword [ebp - 0x480]
lea ecx, [ebp - 0x2f0]
mov edx, 0x1ff
call fcn.00422890
test eax, eax
jne 0x648658
lea eax, [ebp - 0x44]
mov edx, 0x649918
call fcn.00407f58
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x6496bc
lea eax, [ebp - 0x490]
mov edx, 3
call fcn.00408ea8
mov eax, dword [ebp - 0x490]
mov dl, 1
call fcn.0042242c
test al, al
je 0x648cee
lea eax, [ebp - 0x34]
call fcn.00407b30
push dword [ebp - 8]
push dword [ebp - 0x10]
push 0x6496bc
lea eax, [ebp - 0x494]
mov edx, 3
call fcn.00408ea8
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x2fc]
call fcn.0062a024
mov dl, 1
mov eax, dword [ebp - 0x20]
call fcn.0042242c
test al, al
je 0x6486d5
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x20]
call fcn.00644848
lea edx, [ebp - 0x498]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
mov eax, dword [ebp - 0x498]
call fcn.0058d73c
test al, al
jne 0x6487be
lea edx, [ebp - 0x4a0]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
mov eax, dword [ebp - 0x4a0]
lea edx, [ebp - 0x49c]
call fcn.00420d10
mov edx, dword [ebp - 0x49c]
mov eax, 0x649930
call fcn.0040919c
test eax, eax
jne 0x6487be
lea edx, [ebp - 0x4a4]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
mov eax, dword [ebp - 0x4a4]
call fcn.00423374
test al, al
jne 0x6487be
lea edx, [ebp - 0x4ac]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
mov ecx, dword [ebp - 0x4ac]
lea eax, [ebp - 0x4a8]
mov edx, 0x649944
call fcn.00408e20
mov edx, dword [ebp - 0x4a8]
mov ecx, 0x649654
mov eax, 0x6496a8
call fcn.0058dc84
lea edx, [ebp - 0x4b4]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
mov ecx, dword [ebp - 0x4b4]
lea eax, [ebp - 0x4b0]
mov edx, 0x64997c
call fcn.00408e20
mov ecx, dword [ebp - 0x4b0]
mov dl, 1
mov eax, dword [0x41b6fc]
call fcn.004285dc
call fcn.00407228
lea edx, [ebp - 0x4b8]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
mov eax, dword [ebp - 0x4b8]
call fcn.0058d73c
test al, al
je 0x648cee
lea edx, [ebp - 0x4bc]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
mov eax, dword [ebp - 0x4bc]
call fcn.00404a78
call fcn.00404a3c
lea edx, [ebp - 0x4c0]
mov eax, dword [ebp - 0x10]
call fcn.00420d10
mov eax, dword [ebp - 0x4c0]
push eax
lea edx, [ebp - 0x4c4]
mov eax, 0x6499a8
call fcn.00420d10
mov eax, dword [ebp - 0x4c4]
pop edx
call fcn.0040919c
test eax, eax
jle 0x6488a8
mov eax, dword [ebp - 0x2f4]
add eax, 0xb9
call fcn.00439b64
test al, al
jne 0x6488a8
mov eax, dword [ebp - 0x2f4]
call fcn.0064ff38
push 0x1f4
call sub.kernel32.dll_Sleep_2
mov eax, dword [ebp - 0x2fc]
call fcn.00628a54
lea eax, [ebp - 0x4c8]
mov ecx, dword [ebp - 0x20]
mov edx, 0x6499d4
call fcn.00408e20
mov edx, dword [ebp - 0x4c8]
mov ecx, 0x649654
mov eax, 0x6499f8
call fcn.0058dc84
push 0x1f4
call sub.kernel32.dll_Sleep_2
mov eax, dword [ebp - 0x2f4]
call fcn.0064fcd4
jmp 0x648cee
mov eax, dword [ebp - 0x44]
mov edx, 0x649918
call fcn.00408fb8
jne 0x648c59
lea edx, [ebp - 0x4d0]
mov eax, dword [ebp - 0x20]
call fcn.00422c88
mov eax, dword [ebp - 0x4d0]
lea edx, [ebp - 0x4cc]
call fcn.00420d10
mov eax, dword [ebp - 0x4cc]
mov edx, dword [ebp - 0x18]
call fcn.0040919c
test eax, eax
jg 0x648923
lea edx, [ebp - 0x4d8]
mov eax, dword [ebp - 0x1c]
call fcn.00422cc8
mov eax, dword [ebp - 0x4d8]
lea edx, [ebp - 0x4d4]
call fcn.00420d10
mov eax, dword [ebp - 0x4d4]
mov edx, 0x649a24
call fcn.0040919c
test eax, eax
jle 0x648bbc
mov eax, dword [ebp - 0x2fc]
call fcn.00628a54
lea eax, [ebp - 0x4dc]
mov ecx, dword [ebp - 0x20]
mov edx, 0x649a3c
call fcn.00408e20
mov edx, dword [ebp - 0x4dc]
mov ecx, 0x649654
mov eax, 0x6499f8
call fcn.0058dc84
lea edx, [ebp - 0x4e0]
mov eax, dword [ebp - 0x20]
call fcn.00420d10
mov eax, dword [ebp - 0x4e0]
lea edx, [ebp - 0x48]
call fcn.00422b6c
lea eax, [ebp - 0x4e4]
push eax
lea eax, [ebp - 0x4e8]
mov edx, dword [ebp - 0x48]
call fcn.00408cc0
mov eax, dword [ebp - 0x4e8]
mov edx, 0x649844
call fcn.0058d83c
push eax
lea eax, [ebp - 0x4ec]
mov edx, dword [ebp - 0x48]
call fcn.00408cc0
mov eax, dword [ebp - 0x4ec]
mov edx, 0x649844
pop ecx
call fcn.0058d74c
mov edx, dword [ebp - 0x4e4]
lea eax, [ebp - 0x48]
call fcn.00408cac
mov dl, 1
mov eax, dword [0x443d60]
call fcn.004524b8
mov dword [ebp - 0x300], eax
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 0x2f4]
mov edx, dword [edx + 0xdd]
call fcn.00407f58
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x54]
call fcn.00429bf4
push 1
lea eax, [ebp - 0x4f4]
mov ecx, 0x649884
mov edx, dword [ebp - 0x58]
call fcn.00408e20
mov edx, dword [ebp - 0x4f4]
lea eax, [ebp - 0x4f0]
mov ecx, 0
call fcn.004086d4
mov eax, dword [ebp - 0x4f0]
lea ecx, [ebp - 0x300]
mov edx, 0x649a78
call fcn.00645784
mov eax, dword [ebp - 0x300]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x648cee
inc eax
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x2f8], 0
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x2f4]
mov edx, dword [edx + 0xdd]
call fcn.00407f58
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
call fcn.00429bf4
push 0
push dword [ebp - 0x60]
push 0x649884
lea ecx, [ebp - 0x4fc]
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x300]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x4fc]
push 0x6492b4
push dword [ebp - 0x48]
push 0x6492b4
lea edx, [ebp - 0x500]
mov eax, dword [ebp - 0x20]
call fcn.00422c88
push dword [ebp - 0x500]
lea eax, [ebp - 0x4f8]
mov edx, 7
call fcn.00408ea8
mov eax, dword [ebp - 0x4f8]
call fcn.00408bc4
push eax
mov eax, dword [ebp - 0x20]
call fcn.00408bc4
push eax
call sub.kernel32.dll_CopyFileW
lea eax, [ebp - 0x64]
mov edx, dword [ebp - 0x2f4]
mov edx, dword [edx + 0xdd]
call fcn.00407f58
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0x64]
call fcn.00429bf4
push dword [ebp - 0x68]
push 0x649884
lea ecx, [ebp - 0x510]
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x300]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x510]
push 0x6492b4
push dword [ebp - 0x48]
push 0x6492b4
lea edx, [ebp - 0x514]
mov eax, dword [ebp - 0x20]
call fcn.00422c88
push dword [ebp - 0x514]
lea eax, [ebp - 0x50c]
mov edx, 7
call fcn.00408ea8
mov eax, dword [ebp - 0x50c]
call fcn.00408bc4
mov edx, eax
lea eax, [ebp - 0x508]
call fcn.00408c1c
mov ecx, dword [ebp - 0x508]
lea eax, [ebp - 0x504]
mov edx, 0x649a88
call fcn.00408e20
mov edx, dword [ebp - 0x504]
mov ecx, 0x649654
mov eax, 0x6499f8
call fcn.0058dc84
inc dword [ebp - 0x2f8]
dec dword [ebp - 0x308]
jne 0x648a5c
jmp 0x648cee
xor eax, eax
push ebp
push 0x648c0a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x2fc]
call fcn.00628a54
lea eax, [ebp - 0x518]
mov ecx, dword [ebp - 0x20]
mov edx, 0x6499d4
call fcn.00408e20
mov edx, dword [ebp - 0x518]
mov ecx, 0x649654
mov eax, 0x6499f8
call fcn.0058dc84
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x648cee
xor eax, eax
push ebp
push 0x648ca4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x2fc]
call fcn.00628a54
lea eax, [ebp - 0x520]
mov ecx, dword [ebp - 0x20]
mov edx, 0x6499d4
call fcn.00408e20
mov edx, dword [ebp - 0x520]
mov ecx, 0x649654
mov eax, 0x6499f8
call fcn.0058dc84
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x648cee
cmp dword [ebp - 0x34], 0
je 0x648d9c
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x20]
call fcn.00644848
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
call fcn.00408fb8
je 0x648d9c
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
call fcn.00422b30
lea eax, [ebp - 0x6c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00408e20
lea eax, [ebp - 0x70]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x3c]
call fcn.00408e20
mov eax, dword [ebp - 0x70]
call fcn.00408bc4
push eax
mov eax, dword [ebp - 0x6c]
call fcn.00408bc4
push eax
call sub.kernel32.dll_MoveFileW
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x311], al
cmp byte [ebp - 0x311], 0
jne 0x648d9c
push 0x649b3c
push dword [ebp - 0x3c]
push dword [ebp - 0x34]
push 0x649b58
lea eax, [ebp - 0x528]
mov edx, 4
call fcn.00408ea8
mov edx, dword [ebp - 0x528]
mov ecx, 0x649654
mov eax, 0x6496a8
call fcn.0058dc84
lea edx, [ebp - 0x52c]
mov eax, dword [ebp - 0x10]
call fcn.00420d10
mov eax, dword [ebp - 0x52c]
push eax
lea edx, [ebp - 0x530]
mov eax, 0x649b88
call fcn.00420d10
mov eax, dword [ebp - 0x530]
pop edx
call fcn.0040919c
test eax, eax
jle 0x648f50
mov eax, dword [ebp - 0x2f4]
add eax, 0xb9
call fcn.00439b64
test al, al
jne 0x648f50
lea eax, [ebp - 0x534]
mov edx, dword [ebp - 0x10]
call fcn.00408cc0
mov eax, dword [ebp - 0x534]
mov edx, 0x649844
call fcn.0058d83c
cmp eax, 3
jne 0x648f50
lea eax, [ebp - 0x538]
push eax
lea eax, [ebp - 0x53c]
mov edx, dword [ebp - 0x10]
call fcn.00408cc0
mov eax, dword [ebp - 0x53c]
mov ecx, 3
mov edx, 0x649844
call fcn.0058d74c
mov edx, dword [ebp - 0x538]
lea eax, [ebp - 0x14]
call fcn.00408cac
cmp dword [ebp - 0x14], 0
je 0x648f50
lea eax, [ebp - 0x74]
lea edx, [ebp - 0x394]
mov ecx, 0x41
call fcn.00408c70
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 0x74]
call fcn.00429ba4
lea eax, [ebp - 0x550]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x78]
call fcn.00408e20
mov eax, dword [ebp - 0x550]
push eax
lea eax, [ebp - 0x554]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00408e20
mov eax, dword [ebp - 0x554]
push eax
push 0x649b9c
mov eax, dword [ebp - 0x2f4]
add eax, 0xb9
push eax
lea eax, [ebp - 0x54c]
push eax
call fcn.00431aa0
add esp, 0x14
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x564]
xor edx, edx
mov cl, 1
call fcn.004374a0
lea edx, [ebp - 0x564]
pop eax
call fcn.0043b7c4
je 0x648f02
push dword [ebp - 0x2c]
push 0x649524
push dword [ebp - 0x14]
lea eax, [ebp - 0x2c]
mov edx, 3
call fcn.00408ea8
jmp 0x648f50
lea eax, [ebp - 0x7c]
lea edx, [ebp - 0x394]
mov ecx, 0x41
call fcn.00408c70
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
call fcn.00429ba4
push 0x6499d4
push dword [ebp - 0x80]
push dword [ebp - 0x14]
lea eax, [ebp - 0x568]
mov edx, 3
call fcn.00408ea8
mov edx, dword [ebp - 0x568]
mov ecx, 0x649654
mov eax, 0x6499f8
call fcn.0058dc84
lea eax, [ebp - 0x56c]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.00408e20
mov eax, dword [ebp - 0x56c]
mov dl, 1
call fcn.0042242c
test al, al
je 0x648f8e
lea eax, [ebp - 0x570]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.00408e20
mov eax, dword [ebp - 0x570]
call fcn.00422920
lea eax, [ebp - 0x574]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00408e20
mov edx, dword [ebp - 0x574]
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3a8]
call fcn.0049ca08
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3a4]
call fcn.004c2464
mov edx, eax
inc edx
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3a4]
call fcn.004c2678
mov eax, dword [0x66a360]
mov eax, dword [eax]
call fcn.00527dc0
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x6c]
call fcn.00562958
mov eax, dword [ebp - 0x2f4]
mov esi, dword [eax + 0x6c]
cmp byte [esi + 0xa9], 0
je 0x647f55
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x39c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xfc]
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x3bc]
mov eax, dword [eax + 0x6c]
mov edx, 0x808080
call fcn.0047de0c
mov eax, dword [0x66a360]
mov eax, dword [eax]
call fcn.00527dc0
mov eax, dword [ebp - 0x2fc]
call fcn.00405de4
cmp dword [ebp - 0x2c], 0
je 0x64908e
lea eax, [ebp - 0x578]
mov ecx, dword [ebp - 0x2c]
mov edx, 0x649bb8
call fcn.00408e20
mov edx, dword [ebp - 0x578]
mov ecx, 0x649654
mov eax, 0x6496a8
call fcn.0058dc84
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6490d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x649287
lea eax, [ebp - 0x57c]
mov edx, 6
call fcn.00407b90
lea eax, [ebp - 0x564]
call fcn.00431a98
lea eax, [ebp - 0x554]
mov edx, 2
call fcn.00407b90
lea eax, [ebp - 0x54c]
call fcn.00431a98
lea eax, [ebp - 0x53c]
mov edx, 3
call fcn.00407bf0
lea eax, [ebp - 0x530]
mov edx, 0x10
call fcn.00407b90
lea eax, [ebp - 0x4f0]
call fcn.00407b54
lea eax, [ebp - 0x4ec]
mov edx, 3
call fcn.00407bf0
lea eax, [ebp - 0x4e0]
mov edx, 0x16
call fcn.00407b90
lea eax, [ebp - 0x488]
mov edx, 2
call fcn.00407bf0
lea eax, [ebp - 0x480]
mov edx, 5
call fcn.00407b90
lea eax, [ebp - 0x46c]
mov edx, 2
call fcn.00407bf0
lea eax, [ebp - 0x464]
call fcn.00407b30
lea eax, [ebp - 0x460]
mov edx, 2
call fcn.00407bf0
lea eax, [ebp - 0x458]
mov edx, 0xd
call fcn.00407b90
lea eax, [ebp - 0x424]
mov edx, dword [0x4012c0]
mov ecx, 3
call fcn.004094fc
lea eax, [ebp - 0x3f4]
call fcn.00407b30
lea eax, [ebp - 0x3f0]
mov edx, dword [0x4012c0]
mov ecx, 2
call fcn.004094fc
lea eax, [ebp - 0x3d0]
mov edx, 2
call fcn.00407bf0
lea eax, [ebp - 0x3c8]
mov edx, 2
call fcn.00407b90
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00407bf0
lea eax, [ebp - 0x3b4]
call fcn.00407b30
lea eax, [ebp - 0x3b0]
mov edx, 3
call fcn.00407bf0
lea eax, [ebp - 0x3a4]
mov edx, 3
call fcn.00407b90
lea eax, [ebp - 0x398]
call fcn.00407b30
lea eax, [ebp - 0x2f0]
mov edx, dword [0x41b154]
call fcn.004094ac
lea eax, [ebp - 0x80]
mov edx, 0x20
call fcn.00407b90
ret