Function at 0x6465ec
Capabilities:
Get common file path
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x4d
push 0
push 0
dec ecx
jne 0x6465f4
push ecx
push ebx
mov dword [ebp - 8], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x6478b1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
call fcn.0040b464
mov eax, dword [ebp - 8]
call fcn.0040b464
movzx eax, bl
cmp eax, 0x53
ja case.0x64662c.0
jmp dword [eax*4 + 0x646633]
xor eax, eax
push ebp
push 0x646820
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 0
je 0x6467b5
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x6467bf
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x6478cc
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x646808
mov edx, 0x64792c
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x646800
lea ecx, [ebp - 4]
mov edx, 0x64792c
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
xor eax, eax
push ebp
push 0x6468c4
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 0
je 0x646859
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x646863
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x6478cc
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x6468ac
mov edx, 0x647958
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x6468a4
lea ecx, [ebp - 4]
mov edx, 0x647958
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
push 0x104
lea eax, [ebp - 0x22a]
push eax
call sub.kernel32.dll_GetWindowsDirectoryW
lea edx, [ebp - 4]
lea eax, [ebp - 0x22a]
call fcn.004298d0
jmp case.0x64662c.0
push 0x104
lea eax, [ebp - 0x22a]
push eax
call sub.kernel32.dll_GetSystemDirectoryW
lea edx, [ebp - 4]
lea eax, [ebp - 0x22a]
call fcn.004298d0
jmp case.0x64662c.0
lea eax, [ebp - 0x22a]
push eax
push 0x104
call sub.kernel32.dll_GetTempPathW
test eax, eax
je case.0x64662c.0
lea edx, [ebp - 4]
lea eax, [ebp - 0x22a]
call fcn.004298d0
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x14
call fcn.006463d4
jmp case.0x64662c.0
push 1
mov ecx, 0x647984
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
dec eax
setg al
and al, byte [0x68a20b]
je 0x646993
mov eax, 0x6479c4
call fcn.00644e7c
test al, al
je 0x646993
lea edx, [ebp - 4]
mov eax, 0x2e
call fcn.006463d4
jmp case.0x64662c.0
cmp dword [0x68a254], 0
je 0x6469aa
mov eax, 0x6479e0
call fcn.00644e7c
test al, al
je 0x6469bc
lea edx, [ebp - 4]
mov eax, 5
call fcn.006463d4
jmp case.0x64662c.0
movzx eax, byte [0x6479f0]
push eax
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0x230]
mov al, 0x36
call fcn.006465ec
mov eax, dword [ebp - 0x230]
push eax
lea edx, [ebp - 0x234]
mov eax, 5
call fcn.006463d4
mov eax, dword [ebp - 0x234]
mov ecx, dword [0x68a254]
pop edx
call fcn.0043167c
jmp case.0x64662c.0
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0x238]
mov al, 3
call fcn.006465ec
mov eax, dword [ebp - 0x238]
mov ecx, 2
mov edx, 1
call fcn.0040c3d0
jmp case.0x64662c.0
lea edx, [ebp - 0x23c]
mov eax, dword [0x6823c8]
mov eax, dword [eax]
call fcn.0060d00c
mov eax, dword [ebp - 0x23c]
lea edx, [ebp - 4]
call fcn.00429248
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a25c]
call fcn.0040b89c
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 9
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 6
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x1f
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x15
call fcn.006463d4
jmp case.0x64662c.0
push 1
mov ecx, 0x647984
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
dec eax
setg al
and al, byte [0x68a20b]
je 0x646af0
mov eax, 0x6479c4
call fcn.00644e7c
test al, al
je 0x646af0
lea edx, [ebp - 4]
mov eax, 0x23
call fcn.006463d4
jmp case.0x64662c.0
cmp dword [0x68a254], 0
je 0x646b07
mov eax, 0x6479e0
call fcn.00644e7c
test al, al
je 0x646b19
lea edx, [ebp - 4]
mov eax, 0x1a
call fcn.006463d4
jmp case.0x64662c.0
movzx eax, byte [0x6479f0]
push eax
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0x240]
mov al, 0x36
call fcn.006465ec
mov eax, dword [ebp - 0x240]
push eax
lea edx, [ebp - 0x244]
mov eax, 0x1a
call fcn.006463d4
mov eax, dword [ebp - 0x244]
mov ecx, dword [0x68a254]
pop edx
call fcn.0043167c
jmp case.0x64662c.0
xor eax, eax
push ebp
push 0x646c20
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 0
je 0x646b92
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x646b9c
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x647a00
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x646c08
mov edx, 0x647a90
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x646bdf
lea ecx, [ebp - 4]
mov edx, 0x647a90
mov eax, dword [ebp - 0xc]
call fcn.00516e28
jmp 0x646c00
mov edx, 0x647abc
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x646c00
lea ecx, [ebp - 4]
mov edx, 0x647abc
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
lea edx, [ebp - 4]
mov eax, 0x28
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
xor eax, eax
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0xb
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 2
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 7
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x19
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x16
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x17
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x18
call fcn.006463d4
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a260]
call fcn.0040b89c
jmp case.0x64662c.0
lea edx, [ebp - 0x248]
mov al, 0xf
call fcn.006465ec
mov edx, dword [ebp - 0x248]
lea eax, [ebp - 4]
mov ecx, 0x647ae4
call fcn.0040c260
jmp case.0x64662c.0
push 0
lea eax, [ebp - 0x24c]
push eax
mov ecx, 0x647b44
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x24c]
lea edx, [ebp - 4]
call fcn.00646418
jmp case.0x64662c.0
push 0
lea eax, [ebp - 0x254]
push eax
mov ecx, 0x647b60
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x254]
lea edx, [ebp - 0x250]
call fcn.00646418
mov eax, dword [ebp - 0x250]
lea edx, [ebp - 4]
call fcn.00648370
jmp case.0x64662c.0
push 0
lea eax, [ebp - 0x258]
push eax
mov ecx, 0x647b84
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 4]
call fcn.00646418
jmp case.0x64662c.0
push 0
lea eax, [ebp - 0x25c]
push eax
mov ecx, 0x647ba8
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x25c]
lea edx, [ebp - 4]
call fcn.00646418
jmp case.0x64662c.0
push 0
lea eax, [ebp - 0x260]
push eax
mov ecx, 0x647bc4
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x260]
lea edx, [ebp - 4]
call fcn.00646418
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a238]
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a23c]
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a240]
call fcn.0040b89c
jmp case.0x64662c.0
call fcn.0042b720
fstp qword [ebp - 0x18]
wait
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea edx, [ebp - 4]
mov eax, dword [0x6824ac]
call fcn.0042c6d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x1c
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, 0x23
call fcn.006463d4
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov al, 0x3c
call fcn.006465ec
jmp case.0x64662c.0
xor eax, eax
push ebp
push 0x646f29
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 1
jne 0x646ebe
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x646ec8
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x647be8
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x646f11
mov edx, 0x647c78
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x646f09
lea ecx, [ebp - 4]
mov edx, 0x647c78
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
lea edx, [ebp - 0x264]
mov al, 0x16
call fcn.006465ec
mov eax, dword [ebp - 0x264]
lea edx, [ebp - 4]
call fcn.00429248
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, dword [0x682650]
mov eax, dword [eax]
mov eax, dword [eax + 0x450]
call fcn.00551394
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a264]
call fcn.0040b89c
jmp case.0x64662c.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x647ca8
mov edx, 0x647cbc
mov eax, dword [0x68a1fc]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x64662c.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x647cd4
mov edx, 0x647cbc
mov eax, dword [0x68a1fc]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a228]
call fcn.0040b89c
jmp case.0x64662c.0
call sub.kernel32.dll_GetSystemDefaultLangID
movzx eax, ax
lea edx, [ebp - 4]
call fcn.00427d80
jmp case.0x64662c.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x647ce8
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, dword [0x6823c8]
mov eax, dword [eax]
call fcn.0060d00c
jmp case.0x64662c.0
xor eax, eax
push ebp
push 0x6470c5
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 1
jne 0x647048
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x647052
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x6478cc
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x6470ad
mov edx, 0x647d00
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x647095
lea ecx, [ebp - 4]
mov edx, 0x647d00
mov eax, dword [ebp - 0xc]
call fcn.00516e28
jmp 0x6470a5
lea ecx, [ebp - 4]
mov edx, 0x64792c
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
mov ecx, 1
mov edx, dword [0x68a25c]
mov eax, 0x647d2c
call fcn.0040c52c
test eax, eax
jle 0x647116
mov ecx, 1
mov edx, dword [0x68a25c]
mov eax, 0x647d2c
call fcn.0040c52c
mov ebx, eax
lea eax, [ebp - 4]
push eax
mov ecx, ebx
mov edx, 1
mov eax, dword [0x68a25c]
call fcn.0040c3d0
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647d3c
call fcn.0040b89c
jmp case.0x64662c.0
push 0xff
lea eax, [ebp - 0x22a]
push eax
call sub.kernel32.dll_GetSystemDirectoryW
lea edx, [ebp - 4]
lea eax, [ebp - 0x22a]
call fcn.004298d0
jmp case.0x64662c.0
xor eax, eax
push ebp
push 0x6471fb
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 1
jne 0x64717e
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x647188
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x6478cc
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x6471e3
mov edx, 0x647d50
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x6471cb
lea ecx, [ebp - 4]
mov edx, 0x647d50
mov eax, dword [ebp - 0xc]
call fcn.00516e28
jmp 0x6471db
lea ecx, [ebp - 4]
mov edx, 0x64792c
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
lea edx, [ebp - 0x268]
mov eax, 0x28
call fcn.006463d4
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 4]
call fcn.0042936c
jmp case.0x64662c.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x647d88
mov edx, 0x6479ac
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x64662c.0
xor eax, eax
push ebp
push 0x6472e1
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 1
jne 0x647276
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x647280
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x647a00
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x6472c9
mov edx, 0x647da0
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x6472c1
lea ecx, [ebp - 4]
mov edx, 0x647da0
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
xor eax, eax
push ebp
push 0x647385
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 1
jne 0x64731a
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x647324
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x647a00
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x64736d
mov edx, 0x647dc4
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x647365
lea ecx, [ebp - 4]
mov edx, 0x647dc4
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
xor eax, eax
push ebp
push 0x647429
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 1
jne 0x6473be
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x6473c8
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x647be8
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x647411
mov edx, 0x647de4
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x647409
lea ecx, [ebp - 4]
mov edx, 0x647de4
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
xor eax, eax
push ebp
push 0x6474cd
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 1
jne 0x647462
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x64746c
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x647be8
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x6474b5
mov edx, 0x647e10
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x6474ad
lea ecx, [ebp - 4]
mov edx, 0x647e10
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
xor eax, eax
push ebp
push 0x647571
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x5150d0]
call fcn.0051621c
mov dword [ebp - 0xc], eax
cmp byte [0x68a204], 0
je 0x647506
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20119
jmp 0x647510
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0xc]
call fcn.00516304
xor ecx, ecx
mov edx, 0x647be8
mov eax, dword [ebp - 0xc]
call fcn.00516460
test al, al
je 0x647559
mov edx, 0x647e34
mov eax, dword [ebp - 0xc]
call fcn.005173c0
test al, al
je 0x647551
lea ecx, [ebp - 4]
mov edx, 0x647e34
mov eax, dword [ebp - 0xc]
call fcn.00516e28
mov eax, dword [ebp - 0xc]
call fcn.005162d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x64662c.0
mov eax, dword [ebp - 0xc]
call fcn.00409674
pop eax
jmp eax
call fcn.0042b720
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 4]
mov edx, dword [0x6824ac]
mov eax, 0x647e64
call fcn.0042c73c
jmp case.0x64662c.0
lea edx, [ebp - 0x26c]
mov eax, dword [0x6823c8]
mov eax, dword [eax]
call fcn.0060d00c
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 4]
call fcn.0042936c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a22c]
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a244]
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a248]
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a224]
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
call fcn.00652420
jmp case.0x64662c.0
lea eax, [ebp - 4]
call fcn.00646028
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a268]
call fcn.0040b89c
jmp case.0x64662c.0
mov eax, dword [0x682650]
mov eax, dword [eax]
mov eax, dword [eax + 0x414]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
je 0x647668
lea eax, [ebp - 4]
mov edx, 0x647e84
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647e94
call fcn.0040b89c
jmp case.0x64662c.0
cmp byte [0x68a210], 0
je 0x647695
lea eax, [ebp - 4]
mov edx, 0x647e84
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647e94
call fcn.0040b89c
jmp case.0x64662c.0
cmp byte [0x68a274], 0
jne 0x6476dc
mov eax, dword [0x682650]
mov eax, dword [eax]
mov ebx, dword [eax + 0x420]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x150]
mov edx, eax
lea ecx, [ebp - 4]
mov eax, dword [ebx + 0x2ec]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp case.0x64662c.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x647ea4
mov edx, 0x647ec4
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp case.0x64662c.0
cmp byte [0x68a274], 0
jne 0x647726
mov eax, dword [0x682650]
mov eax, dword [eax]
mov eax, dword [eax + 0x420]
mov edx, dword [eax]
call dword [edx + 0x150]
lea edx, [ebp - 4]
call fcn.00427d80
jmp case.0x64662c.0
push 0xffffffffffffffff
mov ecx, 0x647ee0
mov edx, 0x647ec4
mov eax, dword [0x68a1f8]
mov ebx, dword [eax]
call dword [ebx + 0x10]
lea edx, [ebp - 4]
call fcn.00427d80
jmp case.0x64662c.0
cmp byte [0x68a208], 0
je 0x647764
lea eax, [ebp - 4]
mov edx, 0x647e84
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647e94
call fcn.0040b89c
jmp case.0x64662c.0
cmp byte [0x68a20b], 0
je 0x647791
lea eax, [ebp - 4]
mov edx, 0x647e84
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647e94
call fcn.0040b89c
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, dword [0x6812c4]
call fcn.00427d80
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, dword [0x6812c8]
call fcn.00427d80
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, dword [0x6812cc]
call fcn.00427d80
jmp case.0x64662c.0
lea edx, [ebp - 4]
mov eax, dword [0x6812d0]
call fcn.00427d80
jmp case.0x64662c.0
mov eax, dword [0x682650]
mov eax, dword [eax]
mov eax, dword [eax + 0x414]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
je 0x647813
lea eax, [ebp - 4]
mov edx, 0x647e84
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647e94
call fcn.0040b89c
jmp case.0x64662c.0
cmp byte [0x68a275], 0
je 0x64783a
lea eax, [ebp - 4]
mov edx, 0x647e84
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647e94
call fcn.0040b89c
jmp case.0x64662c.0
cmp byte [0x68a210], 0
je 0x647861
lea eax, [ebp - 4]
mov edx, 0x647f08
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, 0x647f1c
call fcn.0040b89c
jmp case.0x64662c.0
lea eax, [ebp - 4]
mov edx, dword [0x68a258]
call fcn.0040b89c
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00431278
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6478b8
lea eax, [ebp - 0x26c]
mov edx, 0x10
call fcn.0040b4c4
lea eax, [ebp - 4]
call fcn.0040b464
pop eax
jmp eax