Function at 0x13a6793f
Capabilities:
Check if file exists
Check mutex on windows
Copy file
Create process on windows
Delete file
Get common file path
Set environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc98
mov eax, dword [0x13a6e0f4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
xor ecx, ecx
push esi
push edi
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xc48], eax
xor eax, eax
mov dword [ebp - 0xc5c], ecx
lea edi, [ebp - 0xc58]
stosd dword es:[edi], eax
mov esi, 0x1fe
mov dword [ebp - 0xc40], ecx
lea edi, [ebp - 0xc3c]
push esi
stosd dword es:[edi], eax
mov word [ebp - 0x40c], ax
push ecx
lea eax, [ebp - 0x40a]
push eax
mov dword [ebp - 0xc44], ecx
mov dword [ebp - 0xc38], ecx
mov dword [ebp - 0xc2c], ecx
mov dword [ebp - 0xc34], ecx
mov dword [ebp - 0xc4c], ecx
call sub.msvcrt.dll_memset
xor eax, eax
push esi
push eax
mov word [ebp - 0x60c], ax
lea eax, [ebp - 0x60a]
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
and dword [ebp - 0xc50], 0
mov eax, dword [0x13a6e004]
mov edi, 0x13a6e004
cmp eax, edi
je 0x13a67a0f
test byte [eax + 0x1c], 2
je 0x13a67a0f
cmp byte [eax + 0x19], 5
jb 0x13a67a0f
push 0x13a03e70
push 0x54
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a58cc1
push 0x5c
push dword [ebp - 0xc48]
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
test eax, eax
je 0x13a67a25
inc eax
inc eax
lea ecx, [ebp - 0xc3c]
push ecx
lea ecx, [ebp - 0xc40]
push ecx
push eax
call fcn.13a67450
mov esi, eax
mov dword [ebp - 0xc28], esi
test esi, esi
je 0x13a67a87
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67a6d
test byte [eax + 0x1c], 2
je 0x13a67a6d
cmp byte [eax + 0x19], 2
jb 0x13a67a6d
push esi
push 0x13a03e70
push 0x55
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.13a619a5
leave
ret 0xc
lea eax, [ebp - 0x814]
push eax
mov esi, 0x104
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x13a67ae9
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67ad1
test byte [eax + 0x1c], 2
je 0x13a67ad1
cmp byte [eax + 0x19], 2
jb 0x13a67ad1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x13a6e004]
push 0x13a03e70
push 0x56
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push dword [ebp - 0xc40]
call fcn.13a639b4
push dword [ebp - 0xc3c]
call fcn.13a639b4
jmp 0x13a67a74
push 0x100
lea eax, [ebp - 0x40c]
push eax
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push ebx
call sub.msvcrt.dll__wsplitpath_s
add esp, 0x24
test eax, eax
je 0x13a67b3e
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67b31
test byte [eax + 0x1c], 2
je 0x13a67b31
cmp byte [eax + 0x19], 2
jb 0x13a67b31
push 0x13a03e70
push 0x57
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a58cc1
push 0x65b
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x13a67ad1
push 1
lea eax, [ebp - 0x40c]
push 0x13a0253c
push eax
mov dword [ebp - 0xc30], eax
call dword [sym.imp.msvcrt.dll_wcsncmp]
add esp, 0xc
test eax, eax
jne 0x13a67b6b
lea eax, [ebp - 0x40a]
mov dword [ebp - 0xc30], eax
push esi
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0xc30]
lea eax, [ebp - 0x814]
push eax
call fcn.13a6558d
xor esi, esi
test eax, eax
jne 0x13a67bdf
cmp edx, esi
jne 0x13a67bdf
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67bc2
test byte [eax + 0x1c], 2
je 0x13a67bc2
cmp byte [eax + 0x19], 2
jb 0x13a67bc2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x13a6e004]
push 0x13a03e70
push 0x58
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push dword [ebp - 0xc40]
call fcn.13a639b4
push dword [ebp - 0xc3c]
call fcn.13a639b4
mov eax, esi
jmp 0x13a67a76
push esi
lea eax, [ebp - 0x20c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x13a67c3c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x59
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
jmp 0x13a684f9
push esi
push esi
push 0x100
lea eax, [ebp - 0x60c]
push eax
push esi
push esi
push esi
lea eax, [ebp - 0x20c]
push esi
push eax
call sub.msvcrt.dll__wsplitpath_s
add esp, 0x24
test eax, eax
je 0x13a67c97
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67c88
test byte [eax + 0x1c], 2
je 0x13a67c88
cmp byte [eax + 0x19], 2
jb 0x13a67c88
push 0x13a03e70
push 0x5a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a58cc1
mov dword [ebp - 0xc28], 0x65b
jmp 0x13a684f9
mov esi, 0x13a043c0
push esi
push 0
mov ebx, 0x1f0001
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0xc2c], eax
test eax, eax
jne 0x13a67db5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
cmp eax, 2
je 0x13a67cfd
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x5b
jmp 0x13a67c2c
and dword [ebp - 0xc28], 0
push 0
push ebx
push ebx
call fcn.13a78e7e
mov ebx, eax
test ebx, ebx
jne 0x13a67d52
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x5c
jmp 0x13a67c2c
push esi
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0xc2c], eax
test eax, eax
jne 0x13a67daa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67d9f
test byte [eax + 0x1c], 2
je 0x13a67d9f
cmp byte [eax + 0x19], 2
jb 0x13a67d9f
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x5d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push ebx
call fcn.13a6b63f
jmp 0x13a684f9
push ebx
call fcn.13a6b63f
jmp 0x13a67e82
push 0x493e0
push dword [ebp - 0xc2c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
jne 0x13a67e1c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67e04
test byte [eax + 0x1c], 2
je 0x13a67e04
cmp byte [eax + 0x19], 2
jb 0x13a67e04
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x5e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push dword [ebp - 0xc2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [ebp - 0xc2c], 0
jmp 0x13a684f9
mov esi, 0x102
cmp eax, esi
jne 0x13a67e54
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67e4c
test byte [eax + 0x1c], 2
je 0x13a67e4c
cmp byte [eax + 0x19], 2
jb 0x13a67e4c
push 0x13a03e70
push 0x5f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a58cc1
mov dword [ebp - 0xc28], esi
jmp 0x13a67e04
cmp eax, 0x80
jne 0x13a67e82
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67e82
test byte [eax + 0x1c], 2
je 0x13a67e82
cmp byte [eax + 0x19], 3
jb 0x13a67e82
push 0x13a03e70
push 0x60
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a58cc1
push 0
push 0
push 0x1f0003
call fcn.13a6b209
mov dword [ebp - 0xc30], eax
test eax, eax
jne 0x13a67ed9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x61
jmp 0x13a67c2c
xor ebx, ebx
lea esi, [ebp + ebx - 0xc5c]
cmp dword [esi], 0
jne 0x13a67f04
push dword [ebp + ebx - 0xc40]
push 0
push 0
push dword [ebp - 0xc30]
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [esi], eax
test eax, eax
je 0x13a67f6f
add ebx, 4
cmp ebx, 8
jb 0x13a67edb
push dword [ebp - 0xc30]
call fcn.13a6b63f
push dword [ebp - 0xc48]
push 0x13a0439c
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x13a67fb3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x63
jmp 0x13a67c2c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67fa8
test byte [eax + 0x1c], 2
je 0x13a67fa8
cmp byte [eax + 0x19], 2
jb 0x13a67fa8
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x62
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push dword [ebp - 0xc30]
jmp 0x13a67da0
xor ebx, ebx
push ebx
push ebx
push 6
call fcn.13a6b209
mov dword [ebp - 0xc30], eax
cmp eax, ebx
jne 0x13a68007
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x64
jmp 0x13a67c2c
push 0x13a04364
mov esi, 0x1000
push esi
push ebx
push 0x8000004
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0xc44], eax
cmp eax, ebx
jne 0x13a6806a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a67fa8
test byte [eax + 0x1c], 2
je 0x13a67fa8
cmp byte [eax + 0x19], 2
jb 0x13a67fa8
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x65
jmp 0x13a67f9d
push dword [ebp - 0xc30]
call fcn.13a6b63f
push ebx
push ebx
push ebx
push 2
push dword [ebp - 0xc44]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0xc34], eax
cmp eax, ebx
jne 0x13a680cf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x66
jmp 0x13a67c2c
push dword [ebp - 0xc48]
push esi
push dword [ebp - 0xc34]
call fcn.13a5ad9a
mov ebx, eax
test ebx, ebx
jge 0x13a68136
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a6810f
test byte [eax + 0x1c], 2
je 0x13a6810f
cmp byte [eax + 0x19], 2
jb 0x13a6810f
push ebx
push 0x13a03e70
push 0x67
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
mov eax, ebx
and eax, 0x1fff0000
cmp eax, 0x70000
jne 0x13a6812b
movzx eax, bx
mov dword [ebp - 0xc28], eax
jmp 0x13a684f9
mov dword [ebp - 0xc28], ebx
jmp 0x13a684f9
xor ebx, ebx
push ebx
push dword [ebp - 0xc34]
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
inc eax
pop ecx
mov ecx, dword [ebp - 0xc48]
inc eax
cmp ecx, ebx
je 0x13a6816c
lea ebx, [ecx + 2]
mov dx, word [ecx]
inc ecx
inc ecx
test dx, dx
jne 0x13a68156
sub ecx, ebx
sar ecx, 1
lea ecx, [ecx + ecx + 2]
xor ebx, ebx
jmp 0x13a6816e
xor ecx, ecx
lea edx, [ebp - 0x60c]
push edx
sub esi, ecx
push esi
push eax
call fcn.13a5ad9a
mov esi, eax
cmp esi, ebx
jge 0x13a681c6
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a681ac
test byte [eax + 0x1c], 2
je 0x13a681ac
cmp byte [eax + 0x19], 2
jb 0x13a681ac
push esi
push 0x13a03e70
push 0x68
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
mov eax, esi
and eax, 0x1fff0000
cmp eax, 0x70000
jne 0x13a6846c
movzx eax, si
jmp 0x13a68120
push dword [ebp - 0xc54]
lea eax, [ebp - 0xc24]
push 0x13a04358
push 0x208
push eax
call fcn.13a58e45
mov esi, eax
add esp, 0x10
cmp esi, ebx
jge 0x13a6820a
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a681ac
test byte [eax + 0x1c], 2
je 0x13a681ac
cmp byte [eax + 0x19], 2
jb 0x13a681ac
push esi
push 0x13a03e70
push 0x69
jmp 0x13a681a1
lea eax, [ebp - 0x20c]
mov dword [ebp - 0xc88], eax
push ebx
lea eax, [ebp - 0xc24]
mov dword [ebp - 0xc84], eax
push ebx
lea eax, [ebp - 0x814]
push 0x1f0001
mov dword [ebp - 0xc98], 0x3c
mov dword [ebp - 0xc94], 0x500
mov dword [ebp - 0xc90], ebx
mov dword [ebp - 0xc8c], 0x13a04348
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0xc7c], 7
mov dword [ebp - 0xc78], ebx
mov dword [ebp - 0xc74], ebx
mov dword [ebp - 0xc70], ebx
mov dword [ebp - 0xc6c], ebx
mov dword [ebp - 0xc68], ebx
mov dword [ebp - 0xc64], ebx
mov dword [ebp - 0xc60], ebx
call fcn.13a6b209
mov esi, eax
cmp esi, ebx
jne 0x13a682d7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x6a
jmp 0x13a67c2c
push 0x13a04308
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0xc38], eax
cmp eax, ebx
jne 0x13a6832d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a68327
test byte [eax + 0x1c], 2
je 0x13a68327
cmp byte [eax + 0x19], 2
jb 0x13a68327
push dword [ebp - 0xc28]
push 0x13a03e70
push 0x6b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push esi
jmp 0x13a67da0
push esi
call fcn.13a6b63f
lea eax, [ebp - 0xc98]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x13a683e5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a68384
test byte [eax + 0x1c], 2
je 0x13a68384
cmp byte [eax + 0x19], 2
jb 0x13a68384
push dword [ebp - 0xc28]
mov ebx, 0x13a03e70
push ebx
push 0x6c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
jmp 0x13a68389
mov ebx, 0x13a03e70
cmp dword [ebp - 0xc28], 0x483
jne 0x13a683bd
lea eax, [ebp - 0x20c]
push eax
call fcn.13a663d8
test eax, eax
je 0x13a683c6
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0xc54]
call fcn.13a67611
mov dword [ebp - 0xc28], eax
cmp dword [ebp - 0xc28], 0
je 0x13a683ea
lea eax, [ebp - 0x40c]
push eax
push 0xc0007d73
push 1
push 1
push 3
call fcn.13a6ad01
add esp, 0x14
jmp 0x13a684f9
mov ebx, 0x13a03e70
push 0x493e0
push 0
lea eax, [ebp - 0xc5c]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 0xffffffff
jne 0x13a68440
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc28], eax
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684f9
test byte [eax + 0x1c], 2
je 0x13a684f9
cmp byte [eax + 0x19], 2
jb 0x13a684f9
push dword [ebp - 0xc28]
push ebx
push 0x6d
jmp 0x13a67c2c
mov esi, 0x102
cmp eax, esi
jne 0x13a68477
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a6846c
test byte [eax + 0x1c], 2
je 0x13a6846c
cmp byte [eax + 0x19], 2
jb 0x13a6846c
push ebx
push 0x6e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a58cc1
mov dword [ebp - 0xc28], esi
jmp 0x13a684f9
xor esi, esi
inc esi
cmp eax, esi
jne 0x13a684ad
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684a1
test byte [eax + 0x1c], 2
je 0x13a684a1
cmp byte [eax + 0x19], 2
jb 0x13a684a1
push ebx
push 0x6f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a58cc1
mov dword [ebp - 0xc28], 0x4d3
jmp 0x13a684f9
push dword [ebp - 0xc38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x13a684ec
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a684ec
test byte [eax + 0x1c], 2
je 0x13a684ec
cmp byte [eax + 0x19], 3
jb 0x13a684ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x13a6e004]
push ebx
push 0x70
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
and dword [ebp - 0xc38], 0
mov dword [ebp - 0xc4c], esi
push 0
push 0x13a0439c
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x13a68541
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a68541
test byte [eax + 0x1c], 2
je 0x13a68541
cmp byte [eax + 0x19], 3
jb 0x13a68541
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push eax
mov eax, dword [0x13a6e004]
push 0x13a03e70
push 0x71
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
jmp 0x13a68547
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
mov eax, dword [ebp + esi*4 - 0xc5c]
test eax, eax
je 0x13a6858e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x13a6858e
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a6858e
test byte [eax + 0x1c], 2
je 0x13a6858e
cmp byte [eax + 0x19], 3
jb 0x13a6858e
call ebx
push eax
mov eax, dword [0x13a6e004]
push 0x13a03e70
push 0x72
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
inc esi
cmp esi, 2
jb 0x13a68549
cmp dword [ebp - 0xc38], 0
je 0x13a685df
push dword [ebp - 0xc38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x13a685df
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a685df
test byte [eax + 0x1c], 2
je 0x13a685df
cmp byte [eax + 0x19], 3
jb 0x13a685df
call ebx
push eax
mov eax, dword [0x13a6e004]
mov esi, 0x13a03e70
push esi
push 0x73
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
jmp 0x13a685e4
mov esi, 0x13a03e70
cmp dword [ebp - 0xc34], 0
je 0x13a68628
push dword [ebp - 0xc34]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
test eax, eax
jne 0x13a68628
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a68628
test byte [eax + 0x1c], 2
je 0x13a68628
cmp byte [eax + 0x19], 3
jb 0x13a68628
call ebx
push eax
mov eax, dword [0x13a6e004]
push esi
push 0x74
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
cmp dword [ebp - 0xc44], 0
je 0x13a6866c
push dword [ebp - 0xc44]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x13a6866c
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a6866c
test byte [eax + 0x1c], 2
je 0x13a6866c
cmp byte [eax + 0x19], 3
jb 0x13a6866c
call ebx
push eax
mov eax, dword [0x13a6e004]
push esi
push 0x75
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
cmp dword [ebp - 0xc2c], 0
je 0x13a686eb
push dword [ebp - 0xc2c]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x13a686b0
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a686b0
test byte [eax + 0x1c], 2
je 0x13a686b0
cmp byte [eax + 0x19], 3
jb 0x13a686b0
call ebx
push eax
mov eax, dword [0x13a6e004]
push esi
push 0x76
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push dword [ebp - 0xc2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x13a686eb
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a686eb
test byte [eax + 0x1c], 2
je 0x13a686eb
cmp byte [eax + 0x19], 3
jb 0x13a686eb
call ebx
push eax
mov eax, dword [0x13a6e004]
push esi
push 0x77
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
cmp dword [ebp - 0xc4c], 0
jne 0x13a68700
push dword [ebp - 0xc28]
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x13a68756
mov eax, dword [0x13a6e004]
cmp eax, edi
je 0x13a6873c
test byte [eax + 0x1c], 2
je 0x13a6873c
cmp byte [eax + 0x19], 3
jb 0x13a6873c
call ebx
push eax
mov eax, dword [0x13a6e004]
push esi
push 0x78
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.13a5a529
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [ebp - 0xc50]
cmp dword [ebp - 0xc50], 5
jb 0x13a68700
mov esi, dword [ebp - 0xc4c]
jmp 0x13a67bc2