Function at 0x5a6680
Capabilities:
Copy file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x50
push 0
push 0
dec ecx
jne 0x5a6688
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov ebx, 0x6389dc
xor eax, eax
push ebp
push 0x5a81dc
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
call fcn.0049f300
mov eax, dword [ebp - 0x70]
lea edx, [ebp - 0x6c]
call fcn.004094ac
cmp dword [ebp - 0x6c], 0
je 0x5a67d7
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.00469044
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.004094ac
cmp dword [ebp - 0x74], 0
je 0x5a67d7
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3bc]
call fcn.0049f300
mov eax, dword [ebp - 0x80]
lea edx, [ebp - 0x7c]
call fcn.004094ac
cmp dword [ebp - 0x7c], 0
je 0x5a67d7
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
call fcn.0049f300
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x84]
call fcn.004094ac
cmp dword [ebp - 0x84], 0
je 0x5a67d7
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a4]
call fcn.00469044
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x8c]
call fcn.004094ac
cmp dword [ebp - 0x8c], 0
je 0x5a67d7
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.00469044
mov eax, dword [ebp - 0x98]
lea edx, [ebp - 0x94]
call fcn.004094ac
cmp dword [ebp - 0x94], 0
je 0x5a67d7
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3ac]
call fcn.00469044
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.004094ac
cmp dword [ebp - 0x9c], 0
jne 0x5a67ef
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
mov edx, 0x5a81f8
call fcn.00469074
jmp 0x5a7fb7
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.0049f300
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa4]
call fcn.004094ac
cmp dword [ebp - 0xa4], 0
jne 0x5a6830
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
mov edx, 0x5a8220
call fcn.0049f394
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.0049f300
mov eax, dword [ebp - 0xb0]
lea edx, [ebp - 0xac]
call fcn.004094ac
cmp dword [ebp - 0xac], 0
jne 0x5a6871
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
mov edx, 0x5a822c
call fcn.0049f394
xor ecx, ecx
mov dl, 1
mov eax, dword [0x43383c]
call fcn.00433d20
mov esi, eax
lea edx, [ebp - 0xb4]
mov eax, dword [0x634984]
mov eax, dword [eax]
call fcn.0048a028
mov edx, dword [ebp - 0xb4]
mov eax, esi
call fcn.004345d0
lea eax, [esi + 0x78]
mov edx, 0x5a823c
call fcn.00404b44
lea eax, [esi + 0x74]
mov edx, 0x5a8254
call fcn.00404b44
lea eax, [esi + 0x70]
mov edx, 0x5a8260
call fcn.00404b44
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x3c]
test al, al
je 0x5a7fb7
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.00469044
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x18]
call fcn.004094ac
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
call fcn.0049f300
mov eax, dword [ebp - 0xc0]
lea edx, [ebp - 0xbc]
call fcn.004094ac
mov eax, dword [ebp - 0xbc]
lea ecx, [ebp - 0x1c]
mov edx, dword [0x63485c]
mov edx, dword [edx]
mov edx, dword [edx + 0x9cc]
call fcn.0056ad70
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
call fcn.0049f300
mov eax, dword [ebp - 0xc4]
lea edx, [ebp - 0x20]
call fcn.004094ac
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
call fcn.0049f300
mov eax, dword [ebp - 0xc8]
lea edx, [ebp - 0x24]
call fcn.004094ac
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
call fcn.0049f300
mov eax, dword [ebp - 0xcc]
lea edx, [ebp - 0x28]
call fcn.004094ac
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
call fcn.0049f300
mov eax, dword [ebp - 0xd8]
lea edx, [ebp - 0xd4]
call fcn.004094ac
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov edx, 1
call fcn.005a6608
mov eax, dword [ebp - 0xd0]
mov edx, 0x5a8278
call fcn.00404efc
je 0x5a6a77
lea edx, [ebp - 0xe4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
call fcn.0049f300
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0xe0]
call fcn.004094ac
mov eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov edx, 1
call fcn.005a6608
mov eax, dword [ebp - 0xdc]
mov edx, 0x5a8284
call fcn.00404efc
je 0x5a6a77
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
call fcn.0049f300
mov eax, dword [ebp - 0xec]
lea edx, [ebp - 0xe8]
call fcn.004094ac
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 0x2c]
mov ecx, 0x5a8278
call fcn.00404dfc
jmp 0x5a6a99
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
call fcn.0049f300
mov eax, dword [ebp - 0xf0]
lea edx, [ebp - 0x2c]
call fcn.004094ac
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x36c]
movzx eax, byte [eax + 0x310]
call fcn.0040987c
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
movzx eax, byte [eax + 0x310]
call fcn.0040987c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
cmp byte [eax + 0x310], 0
je 0x5a6b43
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a4]
call fcn.00469044
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0x38]
call fcn.004094ac
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.00469044
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0x3c]
call fcn.004094ac
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3ac]
call fcn.00469044
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0x40]
call fcn.004094ac
jmp 0x5a6b6a
lea eax, [ebp - 0x38]
mov edx, 0x5a8290
call fcn.00404b88
lea eax, [ebp - 0x3c]
mov edx, 0x5a8290
call fcn.00404b88
lea eax, [ebp - 0x40]
mov edx, 0x5a8290
call fcn.00404b88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
cmp byte [eax + 0x310], 0
je 0x5a6bad
lea eax, [ebp - 0x44]
mov edx, 0x5a829c
call fcn.00404b88
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
call fcn.00469044
mov eax, dword [ebp - 0x100]
lea edx, [ebp - 0x48]
call fcn.004094ac
jmp 0x5a6bc7
lea eax, [ebp - 0x44]
mov edx, 0x5a82a8
call fcn.00404b88
lea eax, [ebp - 0x48]
mov edx, 0x5a82b4
call fcn.00404b88
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x368]
movzx eax, byte [eax + 0x310]
call fcn.0040987c
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
movzx eax, byte [eax + 0x310]
call fcn.0040987c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.004db3ac
lea edx, [ebp - 0x50]
call fcn.0040987c
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x394]
movzx eax, byte [eax + 0x310]
call fcn.0040987c
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x380]
movzx eax, byte [eax + 0x310]
call fcn.0040987c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
call fcn.004db3ac
lea edx, [ebp - 0x58]
call fcn.0040987c
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
call fcn.00469044
mov eax, dword [ebp - 0x104]
lea edx, [ebp - 0x5c]
call fcn.004094ac
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3bc]
call fcn.0049f300
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x68]
call fcn.004094ac
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
call fcn.0049f300
mov eax, dword [ebp - 0x10c]
lea edx, [ebp - 0x14]
call fcn.004094ac
lea eax, [ebp - 0x114]
call fcn.0056ae38
push dword [ebp - 0x114]
push 0x5a82cc
lea edx, [ebp - 0x118]
mov eax, dword [ebx]
call fcn.0040987c
push dword [ebp - 0x118]
push 0x5a82dc
lea eax, [ebp - 0x110]
mov edx, 4
call fcn.00404e70
mov eax, dword [ebp - 0x110]
call fcn.00409e2c
test al, al
je 0x5a6d72
push 0
lea edx, [ebp - 0x11c]
mov eax, esi
call fcn.00434568
mov eax, dword [ebp - 0x11c]
call fcn.00404fb0
push eax
lea eax, [ebp - 0x124]
call fcn.0056ae38
push dword [ebp - 0x124]
push 0x5a82cc
lea edx, [ebp - 0x128]
mov eax, dword [ebx]
call fcn.0040987c
push dword [ebp - 0x128]
push 0x5a82dc
lea eax, [ebp - 0x120]
mov edx, 4
call fcn.00404e70
mov eax, dword [ebp - 0x120]
call fcn.00404fb0
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x5a6d92
push 0x40000
mov ecx, 0x5a82e4
mov edx, 0x5a82ec
mov eax, dword [0x634984]
mov eax, dword [eax]
call fcn.00489ba8
jmp 0x5a7fb7
mov eax, dword [ebx]
mov dword [0x6389e0], eax
mov eax, dword [ebx]
add eax, 0x44
mov dword [0x6389e4], eax
mov eax, dword [ebx]
add eax, 0xc8
mov dword [0x6389e8], eax
mov eax, dword [ebx]
add eax, 0xd4
mov dword [0x6389ec], eax
mov eax, dword [ebx]
add eax, 0xe0
mov dword [0x6389f0], eax
mov eax, dword [ebx]
add eax, 0x124
mov dword [0x6389f4], eax
mov eax, dword [ebx]
add eax, 0x1a8
mov dword [0x6389f8], eax
mov eax, dword [ebx]
add eax, 0x1ac
mov dword [0x6389fc], eax
mov eax, dword [ebx]
add eax, 0x1b0
mov dword [0x638a00], eax
mov eax, dword [ebx]
add eax, 0x1f4
mov dword [0x638a04], eax
mov eax, dword [ebx]
add eax, 0x238
mov dword [0x638a08], eax
mov eax, dword [ebx]
add eax, 0x27c
mov dword [0x638a0c], eax
mov eax, dword [ebx]
add eax, 0x280
mov dword [0x638a10], eax
mov eax, dword [ebx]
add eax, 0x2c4
mov dword [0x638a14], eax
mov eax, dword [ebx]
add eax, 0x2c8
mov dword [0x638a18], eax
mov eax, dword [ebx]
add eax, 0x2cc
mov dword [0x638a1c], eax
mov eax, dword [ebx]
add eax, 0x2d0
mov dword [0x638a20], eax
mov eax, dword [ebx]
add eax, 0x2d4
mov dword [0x638a24], eax
mov eax, dword [ebx]
add eax, 0x2d8
mov dword [0x638a28], eax
mov eax, dword [ebx]
add eax, 0x2dc
mov dword [0x638a2c], eax
mov eax, dword [ebx]
add eax, 0x320
mov dword [0x638a30], eax
lea edx, [ebp - 0x12c]
mov eax, esi
call fcn.00434568
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 4]
add eax, 0x3ec
call fcn.00404b44
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3ec]
mov edx, 1
call fcn.00409ca8
mov dword [ebp - 0xc], eax
xor edx, edx
push ebp
push 0x5a76c7
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
push 0
mov eax, dword [0x6389e0]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x18]
call fcn.00404db0
mov edx, 0x40
sub edx, eax
lea ecx, [ebp - 0x134]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x134]
lea eax, [ebp - 0x130]
mov edx, dword [ebp - 0x18]
call fcn.00404dfc
mov eax, dword [ebp - 0x130]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x41
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x6389e4]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x1c]
call fcn.00404db0
mov edx, 0x80
sub edx, eax
lea ecx, [ebp - 0x13c]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x1c]
call fcn.00404dfc
mov eax, dword [ebp - 0x138]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x81
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x6389e8]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x20]
call fcn.00404db0
mov edx, 0xa
sub edx, eax
lea ecx, [ebp - 0x144]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x144]
lea eax, [ebp - 0x140]
mov edx, dword [ebp - 0x20]
call fcn.00404dfc
mov eax, dword [ebp - 0x140]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0xb
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x6389ec]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x24]
call fcn.00404db0
mov edx, 0xa
sub edx, eax
lea ecx, [ebp - 0x14c]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x148]
mov edx, dword [ebp - 0x24]
call fcn.00404dfc
mov eax, dword [ebp - 0x148]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0xb
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x6389f0]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x28]
call fcn.00404db0
mov edx, 0x40
sub edx, eax
lea ecx, [ebp - 0x154]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x154]
lea eax, [ebp - 0x150]
mov edx, dword [ebp - 0x28]
call fcn.00404dfc
mov eax, dword [ebp - 0x150]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x41
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x6389f4]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x2c]
call fcn.00404db0
mov edx, 0x80
sub edx, eax
lea ecx, [ebp - 0x15c]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x15c]
lea eax, [ebp - 0x158]
mov edx, dword [ebp - 0x2c]
call fcn.00404dfc
mov eax, dword [ebp - 0x158]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x81
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x6389f8]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x30]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x164]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x164]
lea eax, [ebp - 0x160]
mov edx, dword [ebp - 0x30]
call fcn.00404dfc
mov eax, dword [ebp - 0x160]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x6389fc]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x34]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x16c]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x16c]
lea eax, [ebp - 0x168]
mov edx, dword [ebp - 0x34]
call fcn.00404dfc
mov eax, dword [ebp - 0x168]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a00]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x38]
call fcn.00404db0
mov edx, 0x40
sub edx, eax
lea ecx, [ebp - 0x174]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x174]
lea eax, [ebp - 0x170]
mov edx, dword [ebp - 0x38]
call fcn.00404dfc
mov eax, dword [ebp - 0x170]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x41
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a04]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x3c]
call fcn.00404db0
mov edx, 0x40
sub edx, eax
lea ecx, [ebp - 0x17c]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
mov edx, dword [ebp - 0x3c]
call fcn.00404dfc
mov eax, dword [ebp - 0x178]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x41
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a08]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x40]
call fcn.00404db0
mov edx, 0x40
sub edx, eax
lea ecx, [ebp - 0x184]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x184]
lea eax, [ebp - 0x180]
mov edx, dword [ebp - 0x40]
call fcn.00404dfc
mov eax, dword [ebp - 0x180]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x41
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a0c]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x44]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x18c]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x18c]
lea eax, [ebp - 0x188]
mov edx, dword [ebp - 0x44]
call fcn.00404dfc
mov eax, dword [ebp - 0x188]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a10]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x48]
call fcn.00404db0
mov edx, 0x40
sub edx, eax
lea ecx, [ebp - 0x194]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
mov edx, dword [ebp - 0x48]
call fcn.00404dfc
mov eax, dword [ebp - 0x190]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x41
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a14]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x4c]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x19c]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov edx, dword [ebp - 0x4c]
call fcn.00404dfc
mov eax, dword [ebp - 0x198]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a18]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x60]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x1a4]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a0]
mov edx, dword [ebp - 0x60]
call fcn.00404dfc
mov eax, dword [ebp - 0x1a0]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a1c]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x50]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x1ac]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x1ac]
lea eax, [ebp - 0x1a8]
mov edx, dword [ebp - 0x50]
call fcn.00404dfc
mov eax, dword [ebp - 0x1a8]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a20]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x64]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x1b4]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x1b0]
mov edx, dword [ebp - 0x64]
call fcn.00404dfc
mov eax, dword [ebp - 0x1b0]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a24]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x54]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x1bc]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
mov edx, dword [ebp - 0x54]
call fcn.00404dfc
mov eax, dword [ebp - 0x1b8]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a28]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x58]
call fcn.00404db0
mov edx, 1
sub edx, eax
lea ecx, [ebp - 0x1c4]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x1c0]
mov edx, dword [ebp - 0x58]
call fcn.00404dfc
mov eax, dword [ebp - 0x1c0]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 2
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a2c]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x5c]
call fcn.00404db0
mov edx, 0x40
sub edx, eax
lea ecx, [ebp - 0x1cc]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x1cc]
lea eax, [ebp - 0x1c8]
mov edx, dword [ebp - 0x5c]
call fcn.00404dfc
mov eax, dword [ebp - 0x1c8]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 0x41
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
push 0
push 0
mov eax, dword [0x638a30]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x68]
call fcn.00404db0
mov edx, 6
sub edx, eax
lea ecx, [ebp - 0x1d4]
xor eax, eax
call fcn.004051a0
mov ecx, dword [ebp - 0x1d4]
lea eax, [ebp - 0x1d0]
mov edx, dword [ebp - 0x68]
call fcn.00404dfc
mov eax, dword [ebp - 0x1d0]
call fcn.00404fb0
push 0
lea edx, [ebp - 8]
push edx
push 7
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WriteFile_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a76ce
mov eax, dword [ebp - 0xc]
call fcn.00409dbc
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a81e6
lea eax, [ebp - 0x284]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0x27c]
mov edx, 3
call fcn.00404b14
lea eax, [ebp - 0x270]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0x268]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0x260]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0x258]
mov edx, 8
call fcn.00404b14
lea eax, [ebp - 0x238]
call fcn.00404af0
lea eax, [ebp - 0x234]
mov edx, 0x42
call fcn.00404b14
lea eax, [ebp - 0x12c]
call fcn.00404af0
lea eax, [ebp - 0x128]
mov edx, 3
call fcn.00404b14
lea eax, [ebp - 0x11c]
call fcn.00404af0
lea eax, [ebp - 0x118]
mov edx, 3
call fcn.00404b14
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0x104]
mov edx, 4
call fcn.00404b14
lea eax, [ebp - 0xf4]
call fcn.00404af0
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0xe8]
call fcn.00404af0
lea eax, [ebp - 0xe4]
call fcn.00404af0
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0xd8]
call fcn.00404af0
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00404b14
lea eax, [ebp - 0xcc]
mov edx, 4
call fcn.00404b14
lea eax, [ebp - 0xbc]
call fcn.00404af0
lea eax, [ebp - 0xb8]
call fcn.00404af0
lea eax, [ebp - 0xb4]
call fcn.00404af0
lea eax, [ebp - 0xb0]
call fcn.00404af0
lea eax, [ebp - 0xac]
call fcn.00404af0
lea eax, [ebp - 0xa8]
call fcn.00404af0
lea eax, [ebp - 0xa4]
call fcn.00404af0
lea eax, [ebp - 0xa0]
call fcn.00404af0
lea eax, [ebp - 0x9c]
call fcn.00404af0
lea eax, [ebp - 0x98]
call fcn.00404af0
lea eax, [ebp - 0x94]
call fcn.00404af0
lea eax, [ebp - 0x90]
call fcn.00404af0
lea eax, [ebp - 0x8c]
call fcn.00404af0
lea eax, [ebp - 0x88]
call fcn.00404af0
lea eax, [ebp - 0x84]
call fcn.00404af0
lea eax, [ebp - 0x80]
call fcn.00404af0
lea eax, [ebp - 0x7c]
call fcn.00404af0
lea eax, [ebp - 0x78]
call fcn.00404af0
lea eax, [ebp - 0x74]
call fcn.00404af0
lea eax, [ebp - 0x70]
call fcn.00404af0
lea eax, [ebp - 0x6c]
mov edx, 0x18
call fcn.00404b14
ret