Function at 0x6aa6fc
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x30
push 0
push 0
dec ecx
jne 0x6aa704
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x6ab6b3
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x10]
mov eax, dword [0x738138]
mov eax, dword [eax]
call fcn.00604f78
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0xc]
call fcn.0042a0a0
lea eax, [ebp - 0xc]
mov edx, 0x6ab6cc
call fcn.0040c618
mov eax, dword [ebp - 0xc]
call fcn.0040c408
mov edx, eax
lea eax, [ebp - 8]
call fcn.0040c468
mov eax, dword [ebp - 8]
mov dl, 1
call fcn.00429948
test al, al
jne 0x6aa7a6
lea edx, [ebp - 0x1c]
mov eax, dword [0x738138]
mov eax, dword [eax]
call fcn.00604f78
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.0042a0a0
lea eax, [ebp - 0x18]
mov edx, 0x6ab6cc
call fcn.0040c618
mov eax, dword [ebp - 0x18]
call fcn.0040c408
mov edx, eax
lea eax, [ebp - 0x14]
call fcn.0040c468
mov eax, dword [ebp - 0x14]
call fcn.00429a88
lea edx, [ebp - 0x28]
mov eax, dword [0x738138]
mov eax, dword [eax]
call fcn.00604f78
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.0042a0a0
lea eax, [ebp - 0x24]
mov edx, 0x6ab6e4
call fcn.0040c618
mov eax, dword [ebp - 0x24]
call fcn.0040c408
mov edx, eax
lea eax, [ebp - 0x20]
call fcn.0040c468
mov eax, dword [ebp - 0x20]
mov dl, 1
call fcn.00429948
test al, al
jne 0x6aa854
push 0xffffffffffffffff
lea edx, [ebp - 0x30]
mov eax, dword [0x738138]
mov eax, dword [eax]
call fcn.00604f78
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.0042a0a0
lea eax, [ebp - 0x2c]
mov edx, 0x6ab6e4
call fcn.0040c618
mov eax, dword [ebp - 0x2c]
call fcn.0040c408
push eax
lea edx, [ebp - 0x38]
mov eax, dword [0x738138]
mov eax, dword [eax]
call fcn.00604f78
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x34]
call fcn.0042a0a0
lea eax, [ebp - 0x34]
mov edx, 0x6ab728
call fcn.0040c618
mov eax, dword [ebp - 0x34]
call fcn.0040c408
push eax
call sub.kernel32.dll_CopyFileW
lea edx, [ebp - 0x40]
mov eax, dword [0x738138]
mov eax, dword [eax]
call fcn.00604f78
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.0042a0a0
lea eax, [ebp - 0x3c]
mov edx, 0x6ab6e4
call fcn.0040c618
mov ecx, dword [ebp - 0x3c]
mov dl, 1
mov eax, dword [0x4f4788]
call fcn.004f4e98
mov dword [ebp - 4], eax
xor edx, edx
push ebp
push 0x6ab68c
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x6ab770
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x6ab788
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x44]
call fcn.006488f4
mov edx, dword [0x7382c8]
mov byte [edx], al
push 0x6ab770
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x6ab7d4
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x48]
call fcn.006488f4
mov edx, dword [0x737ce4]
mov byte [edx], al
push 0x6ab770
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x6ab804
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x4c]
call fcn.006488f4
mov edx, dword [0x7381c0]
mov byte [edx], al
push 0x6ab770
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x6ab828
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x50]
call fcn.006488f4
mov edx, dword [0x7379cc]
mov byte [edx], al
push 0x6ab770
lea eax, [ebp - 0x54]
push eax
mov ecx, 0x6ab850
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x54]
call fcn.006488f4
mov byte [ebx + 0xca1], al
push 0x6ab770
lea eax, [ebp - 0x58]
push eax
mov ecx, 0x6ab89c
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x58]
call fcn.006488f4
mov edx, dword [0x738024]
mov byte [edx], al
push 0x6ab8c8
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x6ab8e0
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x5c]
call fcn.006488f4
mov edx, dword [0x737c9c]
mov byte [edx], al
push 0x6ab8c8
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x6ab904
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x60]
call fcn.006488f4
mov byte [ebx + 0xca5], al
movzx eax, byte [ebx + 0xca5]
mov edx, dword [0x738418]
mov byte [edx], al
push 0x6ab8c8
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x6ab938
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x64]
call fcn.006488f4
mov edx, dword [0x737cd0]
mov byte [edx], al
push 0x6ab770
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x6ab960
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x68]
call fcn.006488f4
mov edx, dword [0x7385a0]
mov byte [edx], al
mov eax, dword [0x7385a0]
cmp byte [eax], 0
je 0x6aaa70
mov eax, dword [0x738458]
mov byte [eax], 0
mov eax, dword [0x7382f8]
mov byte [eax], 0
jmp 0x6aaac6
push 0x6ab770
lea eax, [ebp - 0x6c]
push eax
mov ecx, 0x6ab9a0
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x6c]
call fcn.006488f4
mov edx, dword [0x738458]
mov byte [edx], al
push 0x6ab770
lea eax, [ebp - 0x70]
push eax
mov ecx, 0x6ab9e8
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x70]
call fcn.006488f4
mov edx, dword [0x7382f8]
mov byte [edx], al
push 0x6ab770
lea eax, [ebp - 0x74]
push eax
mov ecx, 0x6aba30
mov edx, 0x6aba74
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x74]
call fcn.006488f4
mov edx, dword [0x7384ec]
mov byte [edx], al
push 0x6ab8c8
lea eax, [ebp - 0x7c]
push eax
mov ecx, 0x6aba9c
mov edx, 0x6abab8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x7c]
lea edx, [ebp - 0x78]
call fcn.00428544
mov eax, dword [ebp - 0x78]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aab30
mov eax, dword [0x7381bc]
mov byte [eax], 1
jmp 0x6aab38
mov eax, dword [0x7381bc]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x84]
push eax
mov ecx, 0x6abadc
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x80]
call fcn.00428544
mov eax, dword [ebp - 0x80]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aab7d
mov eax, dword [0x737a0c]
mov byte [eax], 1
jmp 0x6aab85
mov eax, dword [0x737a0c]
mov byte [eax], 0
push 0x6ab8c8
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x6abb0c
mov edx, 0x6abb40
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0x88]
call fcn.00428544
mov eax, dword [ebp - 0x88]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aabd0
mov eax, dword [0x737f30]
mov byte [eax], 1
jmp 0x6aabd8
mov eax, dword [0x737f30]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x94]
push eax
mov ecx, 0x6abb5c
mov edx, 0x6abb40
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.00428544
mov eax, dword [ebp - 0x90]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aac23
mov eax, dword [0x737dd8]
mov byte [eax], 1
jmp 0x6aac2b
mov eax, dword [0x737dd8]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x6abb94
mov edx, 0x6abb40
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0x98]
call fcn.00428544
mov eax, dword [ebp - 0x98]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aac76
mov eax, dword [0x73801c]
mov byte [eax], 1
jmp 0x6aac7e
mov eax, dword [0x73801c]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xa4]
push eax
mov ecx, 0x6abbcc
mov edx, 0x6abc00
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xa4]
lea edx, [ebp - 0xa0]
call fcn.00428544
mov eax, dword [ebp - 0xa0]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aacc3
mov al, 1
jmp 0x6aacc5
xor eax, eax
test al, al
je 0x6aacf9
push 0x6abc28
lea eax, [ebp - 0xa8]
push eax
mov ecx, 0x6abc40
mov edx, 0x6abc00
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0xa8]
mov eax, dword [0x737f2c]
call fcn.0040bcf4
jmp 0x6aad27
push 0x6abc68
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x6abc40
mov edx, 0x6abc00
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0xac]
mov eax, dword [0x737f2c]
call fcn.0040bcf4
push 0x6ab770
lea eax, [ebp - 0xb4]
push eax
mov ecx, 0x6abc7c
mov edx, 0x6abc00
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0xb0]
call fcn.00428544
mov eax, dword [ebp - 0xb0]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aad72
mov eax, dword [0x7384c0]
mov byte [eax], 1
jmp 0x6aad7a
mov eax, dword [0x7384c0]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xbc]
push eax
mov ecx, 0x6abcac
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb8]
call fcn.00428544
mov eax, dword [ebp - 0xb8]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aadc5
mov eax, dword [0x738108]
mov byte [eax], 1
jmp 0x6aadcd
mov eax, dword [0x738108]
mov byte [eax], 0
push 0x6ab8c8
lea eax, [ebp - 0xc4]
push eax
mov ecx, 0x6abcdc
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xc4]
lea edx, [ebp - 0xc0]
call fcn.00428544
mov eax, dword [ebp - 0xc0]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aae18
mov eax, dword [0x737d2c]
mov byte [eax], 1
jmp 0x6aae20
mov eax, dword [0x737d2c]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xcc]
push eax
mov ecx, 0x6abd18
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xcc]
lea edx, [ebp - 0xc8]
call fcn.00428544
mov eax, dword [ebp - 0xc8]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aae6b
mov eax, dword [0x737b24]
mov byte [eax], 1
jmp 0x6aae73
mov eax, dword [0x737b24]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x6abd50
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xd4]
lea edx, [ebp - 0xd0]
call fcn.00428544
mov eax, dword [ebp - 0xd0]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aaebe
mov eax, dword [0x7381ac]
mov byte [eax], 1
jmp 0x6aaec6
mov eax, dword [0x7381ac]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xdc]
push eax
mov ecx, 0x6abd7c
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xd8]
call fcn.00428544
mov eax, dword [ebp - 0xd8]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aaf11
mov eax, dword [0x737d24]
mov byte [eax], 1
jmp 0x6aaf19
mov eax, dword [0x737d24]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xe4]
push eax
mov ecx, 0x6abda4
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0xe0]
call fcn.00428544
mov eax, dword [ebp - 0xe0]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aaf64
mov eax, dword [0x73805c]
mov byte [eax], 1
jmp 0x6aaf6c
mov eax, dword [0x73805c]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xec]
push eax
mov ecx, 0x6abdd0
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xec]
lea edx, [ebp - 0xe8]
call fcn.00428544
mov eax, dword [ebp - 0xe8]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6aafb7
mov eax, dword [0x737eac]
mov byte [eax], 1
jmp 0x6aafbf
mov eax, dword [0x737eac]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xf4]
push eax
mov ecx, 0x6abdfc
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf0]
call fcn.00428544
mov eax, dword [ebp - 0xf0]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab00a
mov eax, dword [0x7384d4]
mov byte [eax], 1
jmp 0x6ab012
mov eax, dword [0x7384d4]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0xfc]
push eax
mov ecx, 0x6abe38
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0xf8]
call fcn.00428544
mov eax, dword [ebp - 0xf8]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab05d
mov eax, dword [0x738544]
mov byte [eax], 1
jmp 0x6ab065
mov eax, dword [0x738544]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x104]
push eax
mov ecx, 0x6abe7c
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x104]
lea edx, [ebp - 0x100]
call fcn.00428544
mov eax, dword [ebp - 0x100]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab0b0
mov eax, dword [0x738484]
mov byte [eax], 1
jmp 0x6ab0b8
mov eax, dword [0x738484]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x10c]
push eax
mov ecx, 0x6abeb0
mov edx, 0x6abc00
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x10c]
lea edx, [ebp - 0x108]
call fcn.00428544
mov eax, dword [ebp - 0x108]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab103
mov eax, dword [0x737990]
mov byte [eax], 1
jmp 0x6ab10b
mov eax, dword [0x737990]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x6abee0
mov edx, 0x6abf1c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x114]
lea edx, [ebp - 0x110]
call fcn.00428544
mov eax, dword [ebp - 0x110]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab156
mov eax, dword [0x7380f8]
mov byte [eax], 1
jmp 0x6ab15e
mov eax, dword [0x7380f8]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x11c]
push eax
mov ecx, 0x6abf40
mov edx, 0x6abf1c
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x11c]
lea edx, [ebp - 0x118]
call fcn.00428544
mov eax, dword [ebp - 0x118]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab1a9
mov eax, dword [0x737984]
mov byte [eax], 1
jmp 0x6ab1b1
mov eax, dword [0x737984]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x124]
push eax
mov ecx, 0x6abf84
mov edx, 0x6abfc8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x124]
lea edx, [ebp - 0x120]
call fcn.00428544
mov eax, dword [ebp - 0x120]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab1fc
mov eax, dword [0x7379d0]
mov byte [eax], 1
jmp 0x6ab204
mov eax, dword [0x7379d0]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x12c]
push eax
mov ecx, 0x6abfe4
mov edx, 0x6abfc8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x12c]
lea edx, [ebp - 0x128]
call fcn.00428544
mov eax, dword [ebp - 0x128]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab24f
mov eax, dword [0x7384b4]
mov byte [eax], 1
jmp 0x6ab257
mov eax, dword [0x7384b4]
mov byte [eax], 0
push 0x6ab770
lea eax, [ebp - 0x134]
push eax
mov ecx, 0x6ac020
mov edx, 0x6ac048
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x134]
lea edx, [ebp - 0x130]
call fcn.00428544
mov eax, dword [ebp - 0x130]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab2a2
mov eax, dword [0x737a54]
mov byte [eax], 1
jmp 0x6ab2aa
mov eax, dword [0x737a54]
mov byte [eax], 0
push 0x6ac064
lea eax, [ebp - 0x138]
push eax
mov ecx, 0x6ac084
mov edx, 0x6ac0b0
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x138]
mov eax, dword [0x738560]
call fcn.0040bcf4
push 0x6ac0d4
lea eax, [ebp - 0x13c]
push eax
mov ecx, 0x6ac0f4
mov edx, 0x6ac0b0
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x13c]
mov eax, dword [0x738174]
call fcn.0040bcf4
push 0x6ac110
lea eax, [ebp - 0x140]
push eax
mov ecx, 0x6ac128
mov edx, 0x6ac0b0
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x140]
mov eax, dword [0x737e3c]
call fcn.0040bcf4
push 0x6ac148
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x6ac174
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x144]
mov eax, dword [0x738054]
call fcn.0040bcf4
push 0xff
mov ecx, 0x6ac19c
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x10]
mov edx, dword [0x7380d0]
mov dword [edx], eax
push 0x6ac1c8
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x6ac1e4
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x148]
mov eax, dword [0x737d6c]
call fcn.0040bcf4
mov eax, dword [0x738278]
cmp dword [eax], 0
je 0x6ab3e9
push 0x6ac204
lea eax, [ebp - 0x14c]
push eax
mov ecx, 0x6ac218
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x14c]
mov eax, dword [0x737de8]
call fcn.0040bcf4
jmp 0x6ab417
push 0x6ac230
lea eax, [ebp - 0x150]
push eax
mov ecx, 0x6ac218
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x150]
mov eax, dword [0x737de8]
call fcn.0040bcf4
push 0x6ac230
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x6ac24c
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x154]
mov eax, dword [0x737dc0]
call fcn.0040bcf4
push 0x6ac230
lea eax, [ebp - 0x158]
push eax
mov ecx, 0x6ac270
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x158]
mov eax, dword [0x737fc4]
call fcn.0040bcf4
push 0x6ac294
lea eax, [ebp - 0x15c]
push eax
mov ecx, 0x6ac2b0
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x15c]
mov eax, dword [0x7382d8]
call fcn.0040bcf4
push 0x6ac2e0
lea eax, [ebp - 0x160]
push eax
mov ecx, 0x6ac2f8
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x160]
lea eax, [ebx + 0xc94]
call fcn.0040bcf4
push 0x6ac334
lea eax, [ebp - 0x164]
push eax
mov ecx, 0x6ac350
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [ebp - 0x164]
lea eax, [ebx + 0xc98]
call fcn.0040bcf4
push 0x6ac388
lea eax, [ebp - 0x168]
push eax
mov ecx, dword [0x738170]
mov ecx, dword [ecx]
lea eax, [ebp - 0x16c]
mov edx, 0x6ac39c
call fcn.0040c670
mov ecx, dword [ebp - 0x16c]
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x168]
call fcn.00429188
mov esi, eax
mov dword [ebx + 0xc9c], esi
inc esi
jne 0x6ab592
push 0x6ac3c4
lea eax, [ebp - 0x170]
push eax
mov ecx, 0x6ac3d4
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0x170]
call fcn.00429188
mov dword [ebx + 0xc9c], eax
push 0x6ac3c4
mov ecx, 0x6ac3d4
mov edx, 0x6ab7a8
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x6ac3f8
lea eax, [ebp - 0x174]
push eax
mov ecx, 0x6ac414
mov edx, 0x6ac438
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x174]
mov eax, dword [0x737c70]
call fcn.0040bcf4
push 0x6ac064
lea eax, [ebp - 0x178]
push eax
mov ecx, 0x6ac468
mov edx, 0x6abc00
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x178]
mov eax, dword [0x737c48]
call fcn.0040bcf4
push 0x6ac498
lea eax, [ebp - 0x17c]
push eax
mov ecx, 0x6ac4b4
mov edx, 0x6abc00
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x17c]
mov eax, dword [0x737a50]
call fcn.0040bcf4
push 0x6ab770
lea eax, [ebp - 0x184]
push eax
mov ecx, 0x6ac4f0
mov edx, 0x6ac53c
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x180]
call fcn.00428544
mov eax, dword [ebp - 0x180]
mov edx, 0x6ab8c8
call fcn.0040c808
jne 0x6ab667
mov eax, dword [0x737c6c]
mov byte [eax], 1
jmp 0x6ab66f
mov eax, dword [0x737c6c]
mov byte [eax], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6ab693
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 4], edx
call fcn.00409af0
pop eax
jmp eax