Function at 0x63f474
Capabilities:
Copy file
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x63f47c
push ecx
push ebx
push esi
push edi
mov esi, 0x65dc0c
xor eax, eax
push ebp
push 0x6401a4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x65b610]
mov edx, 0x6401bc
call fcn.00404c3c
mov eax, dword [0x65b4e0]
mov byte [eax], 0x2d
xor eax, eax
mov dword [0x65dc3c], eax
xor eax, eax
mov dword [0x65dc40], eax
lea eax, [ebp - 0x10]
call fcn.00641fc4
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 8]
mov ecx, 0x6401d0
call fcn.00404efc
mov eax, dword [ebp - 8]
call fcn.0040a10c
test al, al
je 0x63fd34
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x4a4e34]
call fcn.004a4ee4
mov ebx, eax
lea eax, [ebp - 4]
mov edx, 0x6401e4
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
mov edx, 0x6401fc
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x14]
mov eax, 0x65db2c
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x640214
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x18]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x18]
mov eax, 0x65db30
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x64022c
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1c]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x1c]
mov eax, 0x65db34
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x640244
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x20]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x20]
mov eax, 0x65db38
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x64025c
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x24]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x24]
mov eax, 0x65db3c
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x640274
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x28]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x28]
mov eax, 0x65db40
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x64028c
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x2c]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x2c]
mov eax, 0x65db44
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x6402a4
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x30]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x30]
mov eax, 0x65db48
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x6402bc
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x34]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x34]
mov eax, 0x65db4c
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x6402d4
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x38]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x38]
mov eax, 0x65db50
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x6402ec
call fcn.00404c80
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x40]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.0040954c
mov edx, dword [ebp - 0x3c]
mov eax, 0x65db54
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x6402fc
call fcn.00404c80
push 0x64030c
lea eax, [ebp - 0x48]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.0040954c
mov edx, dword [ebp - 0x44]
mov eax, 0x65db08
call fcn.00404c3c
lea eax, [ebp - 4]
mov edx, 0x64031c
call fcn.00404c80
push 0
lea eax, [ebp - 0x50]
push eax
mov edx, 0x6401fc
mov ecx, dword [ebp - 4]
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
call fcn.0040954c
mov edx, dword [ebp - 0x4c]
mov eax, 0x65dc38
call fcn.00404c3c
push 0
lea eax, [ebp - 0x54]
push eax
mov edx, 0x6401fc
mov ecx, 0x640330
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x54]
mov edx, 0x640348
call fcn.00404ff4
sete al
mov byte [0x65db70], al
push 0
lea eax, [ebp - 0x58]
push eax
mov edx, 0x6401fc
mov ecx, 0x640358
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x58]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db71], al
push 0
lea eax, [ebp - 0x5c]
push eax
mov edx, 0x6401fc
mov ecx, 0x64037c
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x5c]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db72], al
push 0
lea eax, [ebp - 0x60]
push eax
mov edx, 0x6401fc
mov ecx, 0x640394
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x60]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db73], al
push 0
lea eax, [ebp - 0x64]
push eax
mov edx, 0x6401fc
mov ecx, 0x6403ac
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x64]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db74], al
push 0
lea eax, [ebp - 0x68]
push eax
mov edx, 0x6401fc
mov ecx, 0x6403c4
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x68]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db75], al
push 0
lea eax, [ebp - 0x6c]
push eax
mov edx, 0x6401fc
mov ecx, 0x6403dc
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x6c]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db76], al
push 0
lea eax, [ebp - 0x70]
push eax
mov edx, 0x6401fc
mov ecx, 0x6403f4
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x70]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db77], al
push 0
lea eax, [ebp - 0x74]
push eax
mov edx, 0x6401fc
mov ecx, 0x64040c
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x74]
mov edx, 0x640424
call fcn.00404ff4
sete al
mov byte [0x65db78], al
push 0
lea eax, [ebp - 0x78]
push eax
mov edx, 0x6401fc
mov ecx, 0x640430
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x78]
mov edx, 0x640424
call fcn.00404ff4
sete al
mov byte [0x65db79], al
push 0
lea eax, [ebp - 0x7c]
push eax
mov edx, 0x6401fc
mov ecx, 0x640448
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x7c]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db7b], al
push 0
lea eax, [ebp - 0x80]
push eax
mov edx, 0x6401fc
mov ecx, 0x640460
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x80]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db7c], al
push 0
lea eax, [ebp - 0x84]
push eax
mov edx, 0x6401fc
mov ecx, 0x640478
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x84]
mov edx, 0x640370
call fcn.00404ff4
sete al
mov byte [0x65db7d], al
push 0x640490
lea eax, [ebp - 0x88]
push eax
mov edx, 0x6401fc
mov ecx, 0x6404a0
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x88]
mov eax, 0x65db80
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0x8c]
push eax
mov edx, 0x6401fc
mov ecx, 0x6404b8
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x8c]
mov eax, 0x65db84
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0x90]
push eax
mov edx, 0x6401fc
mov ecx, 0x6404cc
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x90]
mov eax, 0x65db88
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0x94]
push eax
mov edx, 0x6401fc
mov ecx, 0x6404e0
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x94]
mov eax, 0x65db8c
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0x98]
push eax
mov edx, 0x6401fc
mov ecx, 0x6404f4
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x98]
mov eax, 0x65db90
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0x9c]
push eax
mov edx, 0x6401fc
mov ecx, 0x640508
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x9c]
mov eax, 0x65db94
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xa0]
push eax
mov edx, 0x6401fc
mov ecx, 0x64051c
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xa0]
mov eax, 0x65db98
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xa4]
push eax
mov edx, 0x6401fc
mov ecx, 0x640534
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xa4]
mov eax, 0x65db9c
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xa8]
push eax
mov edx, 0x6401fc
mov ecx, 0x640548
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xa8]
mov eax, 0x65dba0
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xac]
push eax
mov edx, 0x6401fc
mov ecx, 0x64055c
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xac]
mov eax, 0x65dba4
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xb0]
push eax
mov edx, 0x6401fc
mov ecx, 0x640570
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xb0]
mov eax, 0x65dba8
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xb4]
push eax
mov edx, 0x6401fc
mov ecx, 0x640584
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xb4]
mov eax, 0x65dbac
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xb8]
push eax
mov edx, 0x6401fc
mov ecx, 0x640598
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xb8]
mov eax, 0x65dbb0
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xbc]
push eax
mov edx, 0x6401fc
mov ecx, 0x6405b0
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xbc]
mov eax, 0x65dbb4
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xc0]
push eax
mov edx, 0x6401fc
mov ecx, 0x6405c4
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xc0]
mov eax, 0x65dbb8
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xc4]
push eax
mov edx, 0x6401fc
mov ecx, 0x6405d8
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xc4]
mov eax, 0x65dbbc
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xc8]
push eax
mov edx, 0x6401fc
mov ecx, 0x6405ec
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xc8]
mov eax, 0x65dbc0
call fcn.00404c3c
push 0x640490
lea eax, [ebp - 0xcc]
push eax
mov edx, 0x6401fc
mov ecx, 0x640600
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xcc]
mov eax, 0x65dbc4
call fcn.00404c3c
push 0x640614
lea eax, [ebp - 0xd0]
push eax
mov edx, 0x6401fc
mov ecx, 0x640620
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xd0]
mov eax, 0x65dbc8
call fcn.00404c3c
push 0x64063c
lea eax, [ebp - 0xd4]
push eax
mov edx, 0x6401fc
mov ecx, 0x640648
mov eax, ebx
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xd4]
mov eax, 0x65dbcc
call fcn.00404c3c
mov eax, ebx
call fcn.00403cf8
mov eax, esi
mov edx, 0x640664
call fcn.00404c3c
push dword [0x65db30]
push 0x6406a8
push dword [0x65db30]
push 0x6406d8
push dword [0x65db30]
push 0x640708
lea eax, [esi + 4]
mov edx, 6
call fcn.00404f70
push 0x640740
push dword [0x65db30]
push 0x640784
lea eax, [esi + 0xc]
mov edx, 3
call fcn.00404f70
lea eax, [esi + 0x10]
mov edx, 0x6407b8
call fcn.00404c3c
push 0x640808
push dword [0x65db30]
push 0x64083c
lea eax, [esi + 0x14]
mov edx, 3
call fcn.00404f70
lea eax, [esi + 0x18]
mov ecx, 0x640878
mov edx, dword [0x65db30]
call fcn.00404efc
lea eax, [esi + 0x1c]
mov edx, 0x6408a4
call fcn.00404c3c
lea eax, [esi + 0x20]
mov edx, 0x6408d8
call fcn.00404c3c
lea eax, [esi + 0x24]
mov edx, 0x64090c
call fcn.00404c3c
lea eax, [esi + 0x28]
mov edx, 0x640928
call fcn.00404c3c
mov eax, 0x65db58
mov ecx, dword [0x65db38]
mov edx, 0x640958
call fcn.00404efc
call fcn.0063f368
test al, al
je 0x640030
lea edx, [ebp - 0xdc]
mov eax, dword [0x65b97c]
mov eax, dword [eax]
call fcn.004722e8
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xd8]
call fcn.0040954c
mov eax, dword [ebp - 0xd8]
push eax
lea edx, [ebp - 0xe0]
mov eax, 0x6409b8
call fcn.0040954c
mov eax, dword [ebp - 0xe0]
pop edx
call fcn.004051ec
test eax, eax
jg 0x63ff00
lea edx, [ebp - 0xe8]
mov eax, dword [0x65b97c]
mov eax, dword [eax]
call fcn.004722e8
mov eax, dword [ebp - 0xe8]
lea edx, [ebp - 0xe4]
call fcn.0040954c
mov eax, dword [ebp - 0xe4]
push eax
lea edx, [ebp - 0xec]
mov eax, 0x6409d0
call fcn.0040954c
mov eax, dword [ebp - 0xec]
pop edx
call fcn.004051ec
test eax, eax
jg 0x63ff00
lea edx, [ebp - 0xf4]
mov eax, dword [0x65b97c]
mov eax, dword [eax]
call fcn.004722e8
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf0]
call fcn.0040954c
mov eax, dword [ebp - 0xf0]
push eax
lea edx, [ebp - 0xf8]
mov eax, 0x6409f4
call fcn.0040954c
mov eax, dword [ebp - 0xf8]
pop edx
call fcn.004051ec
test eax, eax
jle 0x63ff12
lea eax, [ebp - 0xc]
mov edx, 0x640a0c
call fcn.00404c80
jmp 0x63ffc2
lea edx, [ebp - 0x100]
mov eax, dword [0x65b97c]
mov eax, dword [eax]
call fcn.004722e8
mov eax, dword [ebp - 0x100]
lea edx, [ebp - 0xfc]
call fcn.0040954c
mov eax, dword [ebp - 0xfc]
push eax
lea edx, [ebp - 0x104]
mov eax, 0x640a20
call fcn.0040954c
mov eax, dword [ebp - 0x104]
pop edx
call fcn.004051ec
test eax, eax
jle 0x63ff6b
lea eax, [ebp - 0xc]
mov edx, 0x640a3c
call fcn.00404c80
jmp 0x63ffc2
lea edx, [ebp - 0x10c]
mov eax, dword [0x65b97c]
mov eax, dword [eax]
call fcn.004722e8
mov eax, dword [ebp - 0x10c]
lea edx, [ebp - 0x108]
call fcn.0040954c
mov eax, dword [ebp - 0x108]
push eax
lea edx, [ebp - 0x110]
mov eax, 0x640a50
call fcn.0040954c
mov eax, dword [ebp - 0x110]
pop edx
call fcn.004051ec
test eax, eax
jle 0x63ffc2
lea eax, [ebp - 0xc]
mov edx, 0x640a6c
call fcn.00404c80
push 0
lea edx, [ebp - 0x118]
mov eax, dword [0x65b97c]
mov eax, dword [eax]
call fcn.004722e8
mov eax, dword [ebp - 0x118]
lea edx, [ebp - 0x114]
call fcn.0040a494
lea eax, [ebp - 0x114]
mov edx, dword [ebp - 0xc]
call fcn.00404eb8
mov eax, dword [ebp - 0x114]
call fcn.004050a8
push eax
lea edx, [ebp - 0x11c]
mov eax, dword [0x65b97c]
mov eax, dword [eax]
call fcn.004722e8
mov eax, dword [ebp - 0x11c]
call fcn.004050a8
push eax
call sub.kernel32.dll_CopyFileA
push 7
push 0x640a78
call sub.kernel32.dll_WinExec
mov eax, dword [0x65db2c]
mov edx, 0x640a94
call fcn.00404ff4
je 0x640063
mov eax, dword [0x65db2c]
mov edx, 0x640ab0
call fcn.00404ff4
je 0x640063
mov eax, dword [0x65db2c]
mov edx, 0x640acc
call fcn.00404ff4
jne 0x64006a
mov byte [0x65dc09], 1
cmp byte [0x65dc09], 0
je 0x64014f
push 0x640ae0
push dword [0x65db50]
push 0x640bb0
push 0x640bbc
push dword [0x65db48]
push 0x640bb0
push 0x640bcc
push dword [0x65db4c]
push 0x640bb0
push 0x640bdc
push dword [0x65db38]
push 0x640bb0
push 0x640bb0
push 0x640bf4
push 0x640bb0
push 0x640c38
push 0x640bb0
push 0x640c84
push 0x640bb0
push 0x640cd8
push 0x640bb0
push 0x640bb0
push 0x640d2c
push 0x640bb0
push 0x640bb0
push 0x640d80
push 0x640bb0
push 0x640dcc
push 0x640bb0
push 0x640bb0
mov eax, 0x65db60
mov edx, 0x1e
call fcn.00404f70
mov eax, 0x65db64
mov edx, 0x640e1c
call fcn.00404c3c
mov eax, 0x65dc44
mov edx, 0x640f10
call fcn.00404c3c
mov eax, 0x65dc48
mov edx, 0x640f30
call fcn.00404c3c
jmp 0x640186
mov eax, 0x65db60
mov edx, 0x640f50
call fcn.00404c3c
mov eax, 0x65db64
call fcn.00404be8
mov edx, 0x640f30
mov eax, 0x65dc44
call fcn.00404c3c
mov edx, 0x640f10
mov eax, 0x65dc48
call fcn.00404c3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6401ab
lea eax, [ebp - 0x11c]
mov edx, 0x47
call fcn.00404c0c
ret