Function at 0x6461275e
Capabilities:
Check if file exists
Check mutex on windows
Copy file
Delete file
Set environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xca0
mov eax, dword [0x646180b0]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x20c]
push edi
xor edi, edi
mov dword [ebp - 0xc54], ecx
push 0x200
push edi
push eax
mov ebx, edx
mov dword [ebp - 0xc40], esi
mov dword [ebp - 0xc48], edi
mov dword [ebp - 0xc3c], edi
mov dword [ebp - 0xc30], edi
mov dword [ebp - 0xc60], edi
mov dword [ebp - 0xc5c], edi
mov dword [ebp - 0xc38], edi
mov dword [ebp - 0xc34], edi
mov dword [ebp - 0xc44], edi
mov dword [ebp - 0xc58], edi
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x614]
push 0x200
push edi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64612814
test byte [eax + 0x1c], 2
je 0x64612814
cmp byte [eax + 0x19], 5
jb 0x64612814
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x56
pop ecx
call fcn.6460534c
push 0x5c
push esi
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
test eax, eax
je 0x64612826
add eax, 2
lea ecx, [ebp - 0xc34]
push ecx
lea edx, [ebp - 0xc38]
mov ecx, eax
call fcn.64611eaa
mov esi, eax
test esi, esi
je 0x6461287a
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x6461286c
test byte [eax + 0x1c], 2
je 0x6461286c
cmp byte [eax + 0x19], 2
jb 0x6461286c
push esi
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x57
pop ecx
call fcn.64605370
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x646135d8
lea eax, [ebp - 0x81c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPath2W]
test eax, eax
jne 0x646128df
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646128c7
test byte [eax + 0x1c], 2
je 0x646128c7
cmp byte [eax + 0x19], 2
jb 0x646128c7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x58
pop ecx
call fcn.64605370
mov ecx, dword [ebp - 0xc38]
call fcn.6460d3c9
mov ecx, dword [ebp - 0xc34]
call fcn.6460d3c9
jmp 0x64612873
push 0x100
lea eax, [ebp - 0x20c]
push eax
push edi
push edi
push edi
push edi
push edi
push edi
push ebx
call dword [sym.imp.msvcrt.dll__wsplitpath_s]
add esp, 0x24
test eax, eax
je 0x64612937
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x6461292a
test byte [eax + 0x1c], 2
je 0x6461292a
cmp byte [eax + 0x19], 2
jb 0x6461292a
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x59
pop ecx
call fcn.6460534c
push 0x65b
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x646128c7
push 1
lea eax, [ebp - 0x20c]
push 0x64603434
push eax
mov dword [ebp - 0xc50], eax
call dword [sym.imp.msvcrt.dll_wcsncmp]
add esp, 0xc
test eax, eax
jne 0x64612966
lea eax, [ebp - 0x20a]
mov dword [ebp - 0xc50], eax
jmp 0x6461296c
lea eax, [ebp - 0x20c]
push ecx
lea ecx, [ebp - 0x414]
push ecx
push eax
push ecx
lea edx, [ebp - 0x81c]
call fcn.6460fe64
cmp eax, edi
jne 0x646129d1
cmp edx, edi
jne 0x646129d1
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646135c0
test byte [eax + 0x1c], 2
je 0x646135c0
cmp byte [eax + 0x19], 2
jb 0x646135c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x5a
pop ecx
call fcn.64605370
jmp 0x646135c0
push edi
lea eax, [ebp - 0x414]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x64612a29
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x5b
mov edx, 0x64603dd0
pop ecx
call fcn.64605370
jmp 0x64613342
push edi
push edi
push 0x100
lea eax, [ebp - 0x614]
push eax
push edi
push edi
push edi
lea eax, [ebp - 0x414]
push edi
push eax
call dword [sym.imp.msvcrt.dll__wsplitpath_s]
add esp, 0x24
test eax, eax
je 0x64612a84
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64612a7a
test byte [eax + 0x1c], 2
je 0x64612a7a
cmp byte [eax + 0x19], 2
jb 0x64612a7a
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x5c
pop ecx
call fcn.6460534c
mov esi, 0x65b
jmp 0x64613342
push 0x64603bb4
push edi
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov ebx, eax
mov dword [ebp - 0xc30], ebx
test ebx, ebx
jne 0x64612b99
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, 2
je 0x64612ae4
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x5d
jmp 0x64612a19
mov eax, 0x1f0001
mov esi, edi
push edi
mov edx, eax
mov ecx, eax
call fcn.646159c1
mov ebx, eax
test ebx, ebx
jne 0x64612b35
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x5e
jmp 0x64612a19
push 0x64603bb4
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0xc30], eax
test eax, eax
jne 0x64612b8d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64612b81
test byte [eax + 0x1c], 2
je 0x64612b81
cmp byte [eax + 0x19], 2
jb 0x64612b81
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x5f
mov edx, 0x64603dd0
pop ecx
call fcn.64605370
mov ecx, ebx
call fcn.64615d9b
jmp 0x64613342
mov ecx, ebx
call fcn.64615d9b
jmp 0x64612c5b
push 0x493e0
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
jne 0x64612bf0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64612bde
test byte [eax + 0x1c], 2
je 0x64612bde
cmp byte [eax + 0x19], 2
jb 0x64612bde
push esi
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x60
pop ecx
call fcn.64605370
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xc30], edi
jmp 0x64613342
cmp eax, 0x102
jne 0x64612c29
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64612c22
test byte [eax + 0x1c], 2
je 0x64612c22
cmp byte [eax + 0x19], 2
jb 0x64612c22
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x61
pop ecx
call fcn.6460534c
mov esi, 0x102
jmp 0x64612bde
cmp eax, 0x80
jne 0x64612c5b
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64612c5b
test byte [eax + 0x1c], 2
je 0x64612c5b
cmp byte [eax + 0x19], 3
jb 0x64612c5b
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x62
pop ecx
call fcn.6460534c
push edi
xor edx, edx
mov ecx, 0x1f0003
call fcn.646159c1
mov dword [ebp - 0xc4c], eax
test eax, eax
jne 0x64612cac
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x63
jmp 0x64612a19
mov ebx, edi
cmp dword [ebp + ebx - 0xc60], edi
jne 0x64612cd8
push dword [ebp + ebx - 0xc38]
push edi
push edi
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp + ebx - 0xc60], eax
test eax, eax
je 0x64612d36
mov eax, dword [ebp - 0xc4c]
add ebx, 4
cmp ebx, 8
jb 0x64612cae
mov ecx, eax
call fcn.64615d9b
push dword [ebp - 0xc40]
push 0x64603be8
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x64612d75
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x65
jmp 0x64612a19
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64612d6a
test byte [eax + 0x1c], 2
je 0x64612d6a
cmp byte [eax + 0x19], 2
jb 0x64612d6a
push esi
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x64
pop ecx
call fcn.64605370
mov ecx, dword [ebp - 0xc4c]
jmp 0x64612b83
push edi
push 6
xor edx, edx
pop ecx
call fcn.646159c1
mov ebx, eax
test ebx, ebx
jne 0x64612dc0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x66
jmp 0x64612a19
push 0x64603c0c
push 0x1000
push edi
push 0x8000004
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0xc48], eax
test eax, eax
jne 0x64612e1f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, dword [0x6461800c]
cmp ecx, 0x6461800c
je 0x64612b81
test byte [ecx + 0x1c], 2
je 0x64612b81
cmp byte [ecx + 0x19], 2
jb 0x64612b81
push esi
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x67
jmp 0x64612b76
mov ecx, ebx
call fcn.64615d9b
mov eax, dword [ebp - 0xc48]
push edi
push edi
push edi
push 2
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0xc44], eax
test eax, eax
jne 0x64612e7e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, dword [0x6461800c]
cmp ecx, 0x6461800c
je 0x64613342
test byte [ecx + 0x1c], 2
je 0x64613342
cmp byte [ecx + 0x19], 2
jb 0x64613342
push esi
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x68
jmp 0x64612a19
push ecx
push dword [ebp - 0xc40]
mov edx, 0x800
push ecx
mov ecx, eax
call fcn.646052c7
mov ebx, eax
test ebx, ebx
jns 0x64612ee0
mov ecx, dword [0x6461800c]
cmp ecx, 0x6461800c
je 0x64612ec6
test byte [ecx + 0x1c], 2
je 0x64612ec6
cmp byte [ecx + 0x19], 2
jb 0x64612ec6
push ebx
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x69
mov edx, 0x64603dd0
pop ecx
call fcn.64605370
mov eax, ebx
and eax, 0x1fff0000
cmp eax, 0x70000
jne 0x646132ae
movzx esi, bx
jmp 0x64613342
mov eax, dword [ebp - 0xc44]
push edi
push eax
call dword [sym.imp.msvcrt.dll_wcschr]
mov edx, dword [ebp - 0xc40]
pop ecx
pop ecx
lea ecx, [eax + 2]
test edx, edx
je 0x64612f23
lea ebx, [edx + 2]
mov ax, word [edx]
add edx, 2
cmp ax, di
jne 0x64612f00
sub edx, ebx
mov eax, 0x7ff
sar edx, 1
sub eax, edx
add eax, eax
shr eax, 1
jne 0x64612f28
mov ebx, 0x80070057
jmp 0x64612f3e
mov eax, 0x800
push ecx
lea edx, [ebp - 0x614]
push edx
push ecx
mov edx, eax
call fcn.646052c7
mov ebx, eax
test ebx, ebx
jns 0x64612f72
mov ecx, dword [0x6461800c]
cmp ecx, 0x6461800c
je 0x64612ec6
test byte [ecx + 0x1c], 2
je 0x64612ec6
cmp byte [ecx + 0x19], 2
jb 0x64612ec6
push ebx
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x6a
jmp 0x64612ebb
push dword [ebp - 0xc54]
lea eax, [ebp - 0xc2c]
push 0x64603c44
push 0x208
push eax
call fcn.64605260
mov ebx, eax
add esp, 0x10
test ebx, ebx
jns 0x64612fcb
mov ecx, dword [0x6461800c]
cmp ecx, 0x6461800c
je 0x64612ec6
test byte [ecx + 0x1c], 2
je 0x64612ec6
cmp byte [ecx + 0x19], 2
jb 0x64612ec6
push ebx
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x6b
jmp 0x64612ebb
lea eax, [ebp - 0x414]
mov dword [ebp - 0xc9c], 0x3c
mov dword [ebp - 0xc8c], eax
lea eax, [ebp - 0xc2c]
mov dword [ebp - 0xc88], eax
lea eax, [ebp - 0x81c]
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0xc50]
push 0x64603c60
push eax
mov dword [ebp - 0xc98], 0x500
mov dword [ebp - 0xc94], edi
mov dword [ebp - 0xc90], 0x64603c50
mov dword [ebp - 0xc80], 7
mov dword [ebp - 0xc7c], edi
mov dword [ebp - 0xc78], edi
mov dword [ebp - 0xc74], edi
mov dword [ebp - 0xc70], edi
mov dword [ebp - 0xc6c], edi
mov dword [ebp - 0xc68], edi
mov dword [ebp - 0xc64], edi
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x64613070
or dword [ebp - 0xc98], 1
mov dword [ebp - 0xc74], 0x64603c68
push edi
xor edx, edx
mov ecx, 0x1f0001
call fcn.64623f9a
mov ebx, eax
test ebx, ebx
jne 0x646130bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x6c
jmp 0x64612a19
push 0x64603c88
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0xc3c], eax
test eax, eax
jne 0x64613110
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov ecx, dword [0x6461800c]
cmp ecx, 0x6461800c
je 0x64612b81
test byte [ecx + 0x1c], 2
je 0x64612b81
cmp byte [ecx + 0x19], 2
jb 0x64612b81
push esi
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x6d
jmp 0x64612b76
mov ecx, ebx
call fcn.64615d9b
lea eax, [ebp - 0xc9c]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x64613226
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613160
test byte [eax + 0x1c], 2
je 0x64613160
cmp byte [eax + 0x19], 2
jb 0x64613160
push esi
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x6e
pop ecx
call fcn.64605370
cmp esi, 0x483
jne 0x64613203
lea eax, [ebp - 0x414]
push 0x2e
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x64613207
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x6461318c
sub ecx, edx
sar ecx, 1
cmp ecx, 4
jb 0x64613207
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x646131a5
sub ecx, edx
sar ecx, 1
push ecx
push 0x64603b24
push ebx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x646131f0
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x646131cd
sub ecx, edx
sar ecx, 1
push ecx
push 0x64603b30
push ebx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x64613207
mov ecx, dword [ebp - 0xc54]
lea edx, [ebp - 0x414]
call fcn.6461204a
mov esi, eax
test esi, esi
je 0x64613226
lea eax, [ebp - 0x20c]
push eax
push 0xc0007d73
push 1
push 1
push 3
call fcn.64615e9a
add esp, 0x14
jmp 0x64613342
push 0x493e0
push edi
lea eax, [ebp - 0xc60]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 0xffffffff
jne 0x6461327a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613342
test byte [eax + 0x1c], 2
je 0x64613342
cmp byte [eax + 0x19], 2
jb 0x64613342
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x6f
jmp 0x64612a19
mov ebx, 0x102
cmp eax, ebx
jne 0x646132b5
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646132ae
test byte [eax + 0x1c], 2
je 0x646132ae
cmp byte [eax + 0x19], 2
jb 0x646132ae
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x70
pop ecx
call fcn.6460534c
mov esi, ebx
jmp 0x64613342
xor ebx, ebx
inc ebx
cmp eax, ebx
jne 0x646132ee
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646132e7
test byte [eax + 0x1c], 2
je 0x646132e7
cmp byte [eax + 0x19], 2
jb 0x646132e7
push dword [eax + 0x14]
mov edx, 0x64603dd0
push dword [eax + 0x10]
push 0x71
pop ecx
call fcn.6460534c
mov esi, 0x4d3
jmp 0x64613342
mov eax, dword [ebp - 0xc3c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x64613336
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613336
test byte [eax + 0x1c], 2
je 0x64613336
cmp byte [eax + 0x19], 3
jb 0x64613336
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x72
pop ecx
call fcn.64605370
mov dword [ebp - 0xc3c], edi
mov dword [ebp - 0xc58], ebx
push edi
push 0x64603be8
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x64613389
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613389
test byte [eax + 0x1c], 2
je 0x64613389
cmp byte [eax + 0x19], 3
jb 0x64613389
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x73
pop ecx
call fcn.64605370
mov ebx, edi
mov eax, dword [ebp + ebx*4 - 0xc60]
test eax, eax
je 0x646133d8
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x646133d8
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646133d8
test byte [eax + 0x1c], 2
je 0x646133d8
cmp byte [eax + 0x19], 3
jb 0x646133d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x74
pop ecx
call fcn.64605370
inc ebx
cmp ebx, 2
jb 0x6461338b
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x6461342a
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x6461342a
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x6461342a
test byte [eax + 0x1c], 2
je 0x6461342a
cmp byte [eax + 0x19], 3
jb 0x6461342a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x75
pop ecx
call fcn.64605370
mov eax, dword [ebp - 0xc44]
test eax, eax
je 0x64613476
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
test eax, eax
jne 0x64613476
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613476
test byte [eax + 0x1c], 2
je 0x64613476
cmp byte [eax + 0x19], 3
jb 0x64613476
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x76
pop ecx
call fcn.64605370
mov eax, dword [ebp - 0xc48]
test eax, eax
je 0x646134c2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x646134c2
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646134c2
test byte [eax + 0x1c], 2
je 0x646134c2
cmp byte [eax + 0x19], 3
jb 0x646134c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x77
pop ecx
call fcn.64605370
mov ebx, dword [ebp - 0xc30]
test ebx, ebx
je 0x64613554
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x64613512
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613512
test byte [eax + 0x1c], 2
je 0x64613512
cmp byte [eax + 0x19], 3
jb 0x64613512
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x78
pop ecx
call fcn.64605370
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x64613554
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x64613554
test byte [eax + 0x1c], 2
je 0x64613554
cmp byte [eax + 0x19], 3
jb 0x64613554
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x79
pop ecx
call fcn.64605370
mov ebx, dword [ebp - 0xc58]
test ebx, ebx
jne 0x64613565
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x646135be
mov eax, dword [0x6461800c]
cmp eax, 0x6461800c
je 0x646135ad
test byte [eax + 0x1c], 2
je 0x646135ad
cmp byte [eax + 0x19], 3
jb 0x646135ad
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x6461800c]
mov edx, 0x64603dd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x7a
pop ecx
call fcn.64605370
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 5
jb 0x64613565
mov edi, ebx
mov ecx, dword [ebp - 0xc38]
call fcn.6460d3c9
mov ecx, dword [ebp - 0xc34]
call fcn.6460d3c9
mov eax, edi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.64616f60
leave
ret 4