Function at 0x64910c
Capabilities:
Copy file
Move file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x25c
push 0
push 0
dec ecx
jne 0x649114
push ebx
push esi
push edi
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x10]
mov edx, dword [0x649050]
call fcn.0040a96c
lea eax, [ebp - 0x46]
mov edx, dword [0x620c54]
call fcn.0040a96c
xor eax, eax
push ebp
push 0x64b6a5
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x6748e1], 0
mov byte [0x6748e0], 0
lea edx, [ebp - 0x1084]
mov eax, dword [ebp - 0x4c]
mov ebx, dword [eax + 0x420]
mov eax, ebx
call fcn.005415e0
mov eax, dword [ebp - 0x1084]
lea edx, [ebp - 0x1080]
call fcn.00422ad8
mov eax, dword [ebp - 0x1080]
lea edx, [ebp - 0x107c]
call fcn.0042b2ac
mov edx, dword [ebp - 0x107c]
mov eax, ebx
call fcn.00541634
push 0
lea eax, [ebp - 0x108c]
push eax
mov ecx, 0x64b6c4
mov edx, 0x64b6f0
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x108c]
lea edx, [ebp - 0x1088]
call fcn.00640dec
mov edx, dword [ebp - 0x1088]
mov eax, 0x6748f0
call fcn.0040994c
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x434]
xor edx, edx
call fcn.0057700c
push 0x64b708
lea eax, [ebp - 0x1090]
push eax
mov ecx, 0x64b730
mov edx, 0x64b744
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1090]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
xor edx, edx
call fcn.00541634
xor eax, eax
mov dword [0x674920], eax
xor eax, eax
mov dword [0x674924], eax
xor eax, eax
mov dword [0x674928], eax
xor eax, eax
mov dword [0x67492c], eax
xor eax, eax
mov dword [0x674930], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x420]
mov edx, dword [eax]
call dword [edx + 0x68]
test al, al
jne 0x6493f2
lea edx, [ebp - 0x1094]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x420]
call fcn.005415e0
lea eax, [ebp - 0x1094]
mov edx, 0x64b760
call fcn.0040a338
mov eax, dword [ebp - 0x1094]
mov dl, 1
call fcn.00424064
test al, al
je 0x6493f2
push 0
lea eax, [ebp - 0x1098]
mov ecx, 0x64b78c
mov edx, dword [0x6748e8]
call fcn.0040a390
mov eax, dword [ebp - 0x1098]
call fcn.0040a13c
push eax
lea edx, [ebp - 0x109c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x420]
call fcn.005415e0
lea eax, [ebp - 0x109c]
mov edx, 0x64b7bc
call fcn.0040a338
mov eax, dword [ebp - 0x109c]
call fcn.0040a13c
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
je 0x649425
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
lea eax, [ebp - 0x10a0]
mov ecx, 0x64b7e8
mov edx, dword [0x6748e8]
call fcn.0040a390
mov ecx, dword [ebp - 0x10a0]
mov dl, 1
mov eax, dword [0x507448]
call fcn.0050a5f4
mov dword [0x6748d4], eax
mov ecx, dword [0x67490c]
mov edx, 0x64b818
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [0x67490c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [0x674920], eax
mov ecx, dword [0x67490c]
mov edx, 0x64b830
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [0x67490c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [0x674924], eax
mov ecx, dword [0x67490c]
mov edx, 0x64b84c
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [0x67490c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [0x674928], eax
mov ecx, dword [0x67490c]
mov edx, 0x64b874
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [0x67490c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [0x67492c], eax
mov ecx, dword [0x67490c]
mov edx, 0x64b8a0
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [0x67490c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [0x674930], eax
jmp 0x649425
call fcn.00430618
push eax
lea eax, [ebp - 0x10a4]
mov ecx, 0x64b8c0
mov edx, dword [0x6748e8]
call fcn.0040a390
mov ecx, dword [ebp - 0x10a4]
mov dl, 1
mov eax, dword [0x507448]
call fcn.0050a62c
mov dword [0x6748d4], eax
push 0
lea eax, [ebp - 0x10ac]
push eax
mov ecx, 0x64b8f0
mov edx, 0x64b900
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10ac]
lea edx, [ebp - 0x10a8]
call fcn.00640dec
mov eax, dword [ebp - 0x10a8]
push eax
mov ecx, 0x64b920
mov edx, 0x64b930
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
lea eax, [ebp - 8]
call fcn.0040956c
push 0
mov ecx, 0x64b950
mov edx, 0x64b968
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x6494e0
lea eax, [ebp - 8]
mov edx, 0x64b980
call fcn.00409994
push 0
mov ecx, 0x64ba48
mov edx, 0x64ba60
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x6494e0
cmp dword [0x6748bc], 0
jne 0x6494ce
cmp dword [0x6748b8], 0xe4e1c0
jbe 0x6494e0
jmp 0x6494d0
jle 0x6494e0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x4b0]
mov dl, 1
call fcn.005414fc
push 0
lea eax, [ebp - 0x10b8]
push eax
mov ecx, 0x64ba78
mov edx, 0x64ba88
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10b8]
lea edx, [ebp - 0x10b4]
call fcn.00640dec
mov ecx, dword [ebp - 0x10b4]
lea eax, [ebp - 0x10b0]
mov edx, dword [ebp - 8]
call fcn.0040a390
mov eax, dword [ebp - 0x10b0]
push eax
mov ecx, 0x64baa8
mov edx, 0x64bab8
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10c0]
push eax
mov ecx, 0x64bad8
mov edx, 0x64bae8
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10c0]
lea edx, [ebp - 0x10bc]
call fcn.00640dec
mov eax, dword [ebp - 0x10bc]
push eax
mov ecx, 0x64bb08
mov edx, 0x64bb18
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10c8]
push eax
mov ecx, 0x64bb38
mov edx, 0x64bb48
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10c8]
lea edx, [ebp - 0x10c4]
call fcn.00640dec
mov eax, dword [ebp - 0x10c4]
push eax
mov ecx, 0x64bb68
mov edx, 0x64bb78
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10d0]
push eax
mov ecx, 0x64bb98
mov edx, 0x64bba8
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10d0]
lea edx, [ebp - 0x10cc]
call fcn.00640dec
mov eax, dword [ebp - 0x10cc]
push eax
mov ecx, 0x64bbc8
mov edx, 0x64bbd8
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10d8]
push eax
mov ecx, 0x64bbf8
mov edx, 0x64bc08
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x10d4]
call fcn.00640dec
mov eax, dword [ebp - 0x10d4]
push eax
mov ecx, 0x64bc28
mov edx, 0x64bc38
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10e0]
push eax
mov ecx, 0x64bc58
mov edx, 0x64bc68
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10e0]
lea edx, [ebp - 0x10dc]
call fcn.00640dec
mov eax, dword [ebp - 0x10dc]
push eax
mov ecx, 0x64bc88
mov edx, 0x64bc98
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10e8]
push eax
mov ecx, 0x64bcb8
mov edx, 0x64bcc8
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10e8]
lea edx, [ebp - 0x10e4]
call fcn.00640dec
mov eax, dword [ebp - 0x10e4]
push eax
mov ecx, 0x64bce8
mov edx, 0x64bcf8
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10f0]
push eax
mov ecx, 0x64bd18
mov edx, 0x64bd28
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10f0]
lea edx, [ebp - 0x10ec]
call fcn.00640dec
mov eax, dword [ebp - 0x10ec]
push eax
mov ecx, 0x64bd44
mov edx, 0x64bd54
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x10f8]
push eax
mov ecx, 0x64bd70
mov edx, 0x64bd80
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x10f8]
lea edx, [ebp - 0x10f4]
call fcn.00640dec
mov eax, dword [ebp - 0x10f4]
push eax
mov ecx, 0x64bd9c
mov edx, 0x64bdac
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x1100]
push eax
mov ecx, 0x64bdc8
mov edx, 0x64bdd8
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1100]
lea edx, [ebp - 0x10fc]
call fcn.00640dec
mov eax, dword [ebp - 0x10fc]
push eax
mov ecx, 0x64bdf4
mov edx, 0x64be04
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x1108]
push eax
mov ecx, 0x64be20
mov edx, 0x64be30
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1108]
lea edx, [ebp - 0x1104]
call fcn.00640dec
mov eax, dword [ebp - 0x1104]
push eax
mov ecx, 0x64be4c
mov edx, 0x64be5c
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x1110]
push eax
mov ecx, 0x64be78
mov edx, 0x64be88
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1110]
lea edx, [ebp - 0x110c]
call fcn.00640dec
mov eax, dword [ebp - 0x110c]
push eax
mov ecx, 0x64bea4
mov edx, 0x64beb4
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x1118]
push eax
mov ecx, 0x64bed0
mov edx, 0x64bee0
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1118]
lea edx, [ebp - 0x1114]
call fcn.00640dec
mov eax, dword [ebp - 0x1114]
push eax
mov ecx, 0x64befc
mov edx, 0x64bf0c
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x1120]
push eax
mov ecx, 0x64bf28
mov edx, 0x64bf38
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1120]
lea edx, [ebp - 0x111c]
call fcn.00640dec
mov eax, dword [ebp - 0x111c]
push eax
mov ecx, 0x64bf54
mov edx, 0x64bf64
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x1128]
push eax
mov ecx, 0x64bf80
mov edx, 0x64bf90
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1128]
lea edx, [ebp - 0x1124]
call fcn.00640dec
mov eax, dword [ebp - 0x1124]
push eax
mov ecx, 0x64bfac
mov edx, 0x64bfbc
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
lea eax, [ebp - 0x1130]
push eax
mov ecx, 0x64bfd8
mov edx, 0x64bfe8
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1130]
lea edx, [ebp - 0x112c]
call fcn.00640dec
mov eax, dword [ebp - 0x112c]
push eax
mov ecx, 0x64c004
mov edx, 0x64c014
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
lea edx, [ebp - 0x1134]
mov al, 0x1c
call fcn.0063f144
mov eax, dword [ebp - 0x1134]
push eax
mov ecx, 0x64c030
mov edx, 0x64c04c
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
lea edx, [ebp - 0x1138]
mov al, 0x1d
call fcn.0063f144
mov eax, dword [ebp - 0x1138]
push eax
mov ecx, 0x64c068
mov edx, 0x64c08c
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
lea edx, [ebp - 0x113c]
mov al, 0x37
call fcn.0063f144
mov eax, dword [ebp - 0x113c]
push eax
mov ecx, 0x64c0a8
mov edx, 0x64c0c0
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 1
mov ecx, 0x64c0dc
mov edx, 0x64c0f4
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push eax
mov ecx, 0x64c10c
mov edx, 0x64c124
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x18]
movzx eax, byte [0x6748d8]
push eax
mov ecx, 0x64c140
mov edx, 0x64c154
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x18]
lea edx, [ebp - 0x1140]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x420]
call fcn.005415e0
mov eax, dword [ebp - 0x1140]
push eax
mov ecx, 0x64c170
mov edx, 0x64c194
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [0x6748f0], 0
je 0x649a95
mov eax, dword [0x6748f0]
push eax
mov ecx, 0x64c1b0
mov edx, 0x64c1dc
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
lea edx, [ebp - 0x1144]
mov al, 0x1a
call fcn.0063f144
mov eax, dword [ebp - 0x1144]
push eax
mov ecx, 0x64c1f8
mov edx, 0x64c224
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [0x6748d9], 0
je 0x649c41
push 0
mov ecx, 0x64c240
mov edx, 0x64c26c
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push eax
mov ecx, 0x64c284
mov edx, 0x64c2a8
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x18]
push 0
mov ecx, 0x64c2c4
mov edx, 0x64c2f0
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push eax
mov ecx, 0x64c308
mov edx, 0x64c334
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x18]
push 0
mov ecx, 0x64c350
mov edx, 0x64c380
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push eax
mov ecx, 0x64c398
mov edx, 0x64c3c8
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 0x18]
push 0
mov ecx, 0x64c3e4
mov edx, 0x64c414
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x649bb0
push 0
lea eax, [ebp - 0x114c]
push eax
mov ecx, 0x64c42c
mov edx, 0x64c46c
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x114c]
lea edx, [ebp - 0x1148]
call fcn.00640dec
mov eax, dword [ebp - 0x1148]
push eax
mov ecx, 0x64c484
mov edx, 0x64c4c4
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x649bc6
push 0
mov ecx, 0x64c4e0
mov edx, 0x64c520
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
mov ecx, 0x64c53c
mov edx, 0x64c570
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x649c2b
push 0
lea eax, [ebp - 0x1154]
push eax
mov ecx, 0x64c588
mov edx, 0x64c5b0
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1154]
lea edx, [ebp - 0x1150]
call fcn.00640dec
mov eax, dword [ebp - 0x1150]
push eax
mov ecx, 0x64c5c8
mov edx, 0x64c5f0
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x649c41
push 0
mov ecx, 0x64c60c
mov edx, 0x64c634
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
push 0
mov ecx, 0x64c650
mov edx, 0x64c66c
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x649ca4
push 0
lea eax, [ebp - 0x115c]
push eax
mov ecx, 0x64c684
mov edx, 0x64c6a4
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x115c]
lea edx, [ebp - 0x1158]
call fcn.00640dec
mov eax, dword [ebp - 0x1158]
push eax
mov ecx, 0x64c6bc
mov edx, 0x64c6dc
mov eax, dword [0x6748d4]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp byte [0x6748d8], 0
je 0x649d15
xor eax, eax
push ebp
push 0x649d0b
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x67493c], eax
push 0x64c6ec
push 0x64c72c
call sub.kernel32.dll_GetModuleHandleW_2
push eax
call fcn.00411f00
mov dword [0x674934], eax
push 0x64c748
push 0x64c72c
call sub.kernel32.dll_GetModuleHandleW_2
push eax
call fcn.00411f00
mov dword [0x674938], eax
push 0x67493c
call dword [0x674934]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x649d15
push 0x64c790
lea eax, [ebp - 0x1160]
push eax
mov ecx, 0x64c7c4
mov edx, 0x64c7d8
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1160]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
xor eax, eax
push ebp
push 0x649de6
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x54], 0x65
push 0x20
lea edx, [ebp - 0x1164]
xor eax, eax
call fcn.00406c04
mov ecx, dword [ebp - 0x1164]
mov dl, 1
mov eax, dword [0x492a04]
call fcn.004b5bb8
mov dword [0x6748a8], eax
mov eax, dword [0x6748c0]
xor edx, edx
push edx
push eax
mov eax, dword [0x6748a8]
call fcn.004b35f0
mov dword [ebp - 0x54], 0x66
push 0xff00
lea eax, [ebp - 0x1168]
mov ecx, 0x64c7f4
mov edx, dword [0x6748e8]
call fcn.0040a390
mov ecx, dword [ebp - 0x1168]
mov dl, 1
mov eax, dword [0x492a04]
call fcn.004b5bb8
mov dword [0x6748ac], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x649e39
xor esi, esi
mov eax, dword [0x6748c4]
sub eax, esi
cmp eax, 0x1000
jb 0x649e62
lea edx, [ebp - 0x1078]
mov ecx, 0x1000
mov eax, dword [0x6748a8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, eax
jmp 0x649e76
mov ecx, eax
lea edx, [ebp - 0x1078]
mov eax, dword [0x6748a8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, eax
lea edx, [ebp - 0x1078]
mov ecx, ebx
mov eax, dword [0x6748ac]
mov edi, dword [eax]
call dword [edi + 0x10]
add esi, ebx
mov eax, dword [0x6748c4]
mov dword [ebp - 0x1170], eax
xor eax, eax
mov dword [ebp - 0x116c], eax
fild qword [ebp - 0x1170]
fdivr dword [0x64c814]
mov dword [ebp - 0x1170], esi
xor eax, eax
mov dword [ebp - 0x116c], eax
fild qword [ebp - 0x1170]
fmulp st(1)
call fcn.0040710c
mov edx, eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x434]
call fcn.0057700c
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
cmp ebx, 0x1000
je 0x649e3b
mov eax, dword [0x6748ac]
call fcn.004078f0
mov eax, dword [0x6748a8]
call fcn.004078f0
push 0x64c824
lea eax, [ebp - 0x1174]
push eax
mov ecx, 0x64c854
mov edx, 0x64c864
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1174]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
mov dl, 1
mov eax, dword [0x620fa4]
call fcn.00627028
mov dword [0x6748b0], eax
xor eax, eax
push ebp
push 0x649f98
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x54], 0x67
lea eax, [ebp - 0x1178]
mov ecx, 0x64c880
mov edx, dword [0x6748e8]
call fcn.0040a390
mov edx, dword [ebp - 0x1178]
mov cl, 1
mov eax, dword [0x6748b0]
call fcn.006270a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x649feb
mov dl, 1
mov eax, dword [0x48fb74]
call fcn.004b3524
mov dword [ebp - 4], eax
mov byte [ebp - 0x62], 0
push 0
mov ecx, 0x64c8ac
mov edx, 0x64c8d0
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x64ad0c
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
cmp byte [0x6748e1], 0
je 0x64a03e
push ebp
call fcn.006490b0
pop ecx
push 0
lea eax, [ebp - 0x117c]
push eax
lea edx, [ebp - 0x1180]
mov eax, dword [ebp - 0x54]
call fcn.0042345c
mov ecx, dword [ebp - 0x1180]
mov edx, 0x64c8e8
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
cmp dword [ebp - 0x117c], 0
je 0x64ad00
movzx eax, byte [0x64c8f4]
push eax
lea eax, [ebp - 0x1184]
push eax
push 0
lea eax, [ebp - 0x1188]
push eax
lea edx, [ebp - 0x118c]
mov eax, dword [ebp - 0x54]
call fcn.0042345c
mov ecx, dword [ebp - 0x118c]
mov edx, 0x64c904
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1188]
mov ecx, 0x64c91c
mov edx, 0x64c930
call fcn.0042b4dc
mov edx, dword [ebp - 0x1184]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 3
jne 0x64ad00
cmp byte [0x6748df], 0
je 0x64a376
cmp byte [0x6748dc], 0
jne 0x64a376
lea ecx, [ebp - 0x1194]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1194]
lea edx, [ebp - 0x1190]
call fcn.004226cc
mov edx, dword [ebp - 0x1190]
mov ecx, 1
mov eax, 0x64c940
call fcn.0040a710
test eax, eax
jle 0x64a17e
movzx eax, byte [0x64c960]
push eax
lea eax, [ebp - 0x1198]
push eax
lea ecx, [ebp - 0x119c]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x119c]
mov ecx, 0x64c970
mov edx, 0x64c990
call fcn.0042b4dc
mov ecx, dword [ebp - 0x1198]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea ecx, [ebp - 0x11a4]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11a4]
lea edx, [ebp - 0x11a0]
call fcn.004226cc
mov edx, dword [ebp - 0x11a0]
mov ecx, 1
mov eax, 0x64c9bc
call fcn.0040a710
test eax, eax
jle 0x64a1fc
movzx eax, byte [0x64c960]
push eax
lea eax, [ebp - 0x11a8]
push eax
lea ecx, [ebp - 0x11ac]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11ac]
mov ecx, 0x64c9e4
mov edx, 0x64ca10
call fcn.0042b4dc
mov ecx, dword [ebp - 0x11a8]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea ecx, [ebp - 0x11b4]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11b4]
lea edx, [ebp - 0x11b0]
call fcn.004226cc
mov edx, dword [ebp - 0x11b0]
mov ecx, 1
mov eax, 0x64ca38
call fcn.0040a710
test eax, eax
jle 0x64a27a
movzx eax, byte [0x64c960]
push eax
lea eax, [ebp - 0x11b8]
push eax
lea ecx, [ebp - 0x11bc]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11bc]
mov ecx, 0x64ca68
mov edx, 0x64ca90
call fcn.0042b4dc
mov ecx, dword [ebp - 0x11b8]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea ecx, [ebp - 0x11c4]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11c4]
lea edx, [ebp - 0x11c0]
call fcn.004226cc
mov edx, dword [ebp - 0x11c0]
mov ecx, 1
mov eax, 0x64cac0
call fcn.0040a710
test eax, eax
jle 0x64a2f8
movzx eax, byte [0x64c960]
push eax
lea eax, [ebp - 0x11c8]
push eax
lea ecx, [ebp - 0x11cc]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11cc]
mov ecx, 0x64caf0
mov edx, 0x64cb18
call fcn.0042b4dc
mov ecx, dword [ebp - 0x11c8]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea ecx, [ebp - 0x11d4]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11d4]
lea edx, [ebp - 0x11d0]
call fcn.004226cc
mov edx, dword [ebp - 0x11d0]
mov ecx, 1
mov eax, 0x64cb48
call fcn.0040a710
test eax, eax
jle 0x64a376
movzx eax, byte [0x64c960]
push eax
lea eax, [ebp - 0x11d8]
push eax
lea ecx, [ebp - 0x11dc]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11dc]
mov ecx, 0x64cb70
mov edx, 0x64cb90
call fcn.0042b4dc
mov ecx, dword [ebp - 0x11d8]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea ecx, [ebp - 0x11e4]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11e4]
lea edx, [ebp - 0x11e0]
call fcn.00640dec
mov edx, dword [ebp - 0x11e0]
lea eax, [ebp - 0x10]
call fcn.00409994
lea ecx, [ebp - 0x11e8]
mov edx, 1
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11e8]
mov edx, 1
call fcn.00423708
mov byte [ebp - 0xc], al
lea ecx, [ebp - 0x11f0]
mov edx, 2
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11f0]
lea edx, [ebp - 0x11ec]
call fcn.00422ad8
mov eax, dword [ebp - 0x11ec]
mov edx, 0x64cbb8
call fcn.0040a4c8
sete al
xor al, 1
mov byte [ebp - 0xb], al
xor eax, eax
mov dword [ebp - 0x50], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x64cbc8
call fcn.0040a710
test eax, eax
jne 0x64a499
lea edx, [ebp - 0x11f4]
mov eax, dword [ebp - 0x10]
call fcn.00641734
mov edx, dword [ebp - 0x11f4]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
call fcn.00541634
xor eax, eax
push ebp
push 0x64a48f
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x11f8]
mov eax, dword [ebp - 0x54]
call fcn.0042345c
mov edx, dword [ebp - 0x11f8]
mov eax, dword [0x6748b0]
call fcn.006287b4
mov edx, eax
lea ecx, [ebp - 0x46]
mov eax, dword [0x6748b0]
call fcn.00625fc4
mov eax, dword [ebp - 0x3e]
mov dword [ebp - 0x50], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64a499
fild dword [ebp - 0x60]
fdivr dword [0x64c814]
fild dword [ebp - 0x54]
fmulp st(1)
call fcn.0040710c
mov edx, eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x434]
call fcn.0057700c
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x64cbf0
call fcn.0040a710
test eax, eax
jne 0x64a63a
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.00424064
test al, al
je 0x64a63a
cmp byte [0x6748da], 0
je 0x64a507
cmp byte [ebp - 0xc], 0
jne 0x64a507
mov byte [ebp - 0xc], 1
cmp byte [ebp - 0x62], 0
jne case.0x64a572.0
cmp byte [ebp - 0xc], 0
jne case.0x64a572.0
push 0
push 0
lea eax, [ebp - 0x1200]
push eax
mov ecx, 0x64cc18
mov edx, 0x64cc2c
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x1200]
lea ecx, [ebp - 0x11fc]
mov edx, dword [ebp - 0x10]
call fcn.00641378
mov eax, dword [ebp - 0x11fc]
movzx ecx, word [0x64cc40]
xor edx, edx
call fcn.0058a87c
cmp eax, 0xe
ja case.0x64a572.0
movzx eax, byte [eax + 0x64a579]
jmp dword [eax*4 + 0x64a588]
mov byte [ebp - 0xc], 1
jmp case.0x64a572.0
mov byte [ebp - 0xc], 3
jmp case.0x64a572.0
mov byte [ebp - 0x62], 1
mov byte [ebp - 0xc], 1
jmp case.0x64a572.0
mov byte [ebp - 0x62], 3
mov byte [ebp - 0xc], 3
jmp case.0x64a572.0
mov eax, dword [ebp - 0x4c]
call fcn.00610940
cmp byte [0x6748e1], 0
je 0x64ad00
mov eax, dword [0x6748b0]
call fcn.004078f0
push ebp
call fcn.006490b0
pop ecx
jmp 0x64ad00
cmp byte [ebp - 0xc], 1
je 0x64a5f7
cmp byte [ebp - 0x62], 1
jne 0x64a621
xor eax, eax
push ebp
push 0x64a617
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.0042455c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64a621
cmp byte [ebp - 0xc], 3
je 0x64a62d
cmp byte [ebp - 0x62], 3
jne 0x64a63a
mov eax, dword [ebp - 0x10]
call fcn.00648ec4
jmp 0x64ad00
lea eax, [ebp - 0x1204]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0040a500
mov eax, dword [ebp - 0x1204]
mov edx, 0x64cc50
call fcn.0040a4c8
jne 0x64a69c
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x64a671
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 8]
push eax
mov ecx, ebx
sub ecx, 2
mov edx, 3
mov eax, dword [ebp - 0x10]
call fcn.0040a500
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x64cc64
call fcn.0040a710
inc eax
jmp 0x64a6a1
mov eax, 3
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x64a6bb
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x78]
sub edx, eax
jl 0x64a861
inc edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x58]
cmp word [eax + edx*2 - 2], 0x5c
jne 0x64a855
lea eax, [ebp - 0x1208]
push eax
mov ebx, dword [ebp - 0x58]
dec ebx
mov ecx, ebx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0040a500
mov eax, dword [ebp - 0x1208]
mov dl, 1
call fcn.004240fc
test al, al
jne 0x64a855
xor eax, eax
push ebp
push 0x64a752
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x120c]
push eax
mov ecx, ebx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0040a500
mov eax, dword [ebp - 0x120c]
call fcn.004069bc
call fcn.00406960
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64a81e
cmp byte [0x6748d9], 0
je 0x64a855
cmp byte [ebp - 0xb], 0
je 0x64a855
lea eax, [ebp - 0x1224]
push eax
mov ecx, dword [ebp - 0x58]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0040a500
mov edx, dword [ebp - 0x1224]
mov eax, 0x64ccf0
call fcn.00641b2c
inc dword [ebp - 0x58]
dec dword [ebp - 0x70]
jne 0x64a6d0
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x64cd0c
call fcn.0040a710
test eax, eax
jg 0x64ad00
mov byte [ebp - 0x61], 0
xor eax, eax
push ebp
push 0x64a8c0
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea edx, [ebp - 0x1228]
mov eax, dword [ebp - 0x54]
call fcn.0042345c
mov edx, dword [ebp - 0x1228]
mov ecx, dword [0x6748e8]
mov eax, dword [0x6748b0]
call fcn.00627604
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64a9a6
cmp byte [ebp - 0x61], 0
jne 0x64a87b
cmp byte [ebp - 0xc], 2
jne 0x64aaa5
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.00424064
test al, al
je 0x64aaa5
push dword [0x6748e8]
push 0x64ce28
lea edx, [ebp - 0x1240]
mov eax, dword [ebp - 0x54]
call fcn.0042345c
push dword [ebp - 0x1240]
lea eax, [ebp - 0x123c]
mov edx, 3
call fcn.0040a418
mov eax, dword [ebp - 0x123c]
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x10]
call fcn.00648d28
test al, al
je 0x64aa3c
xor eax, eax
push ebp
push 0x64aa30
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.0042455c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64aaa5
xor eax, eax
push ebp
push 0x64aa8e
push dword fs:[eax]
mov dword fs:[eax], esp
push dword [0x6748e8]
push 0x64ce38
lea edx, [ebp - 0x1248]
mov eax, dword [ebp - 0x54]
call fcn.0042345c
push dword [ebp - 0x1248]
lea eax, [ebp - 0x1244]
mov edx, 3
call fcn.0040a418
mov eax, dword [ebp - 0x1244]
call fcn.0042455c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64aa98
mov eax, dword [ebp - 0x10]
call fcn.00648ec4
jmp 0x64ad00
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.00424064
test al, al
je 0x64ab37
lea edx, [ebp - 0x1250]
mov eax, dword [ebp - 0x10]
call fcn.00424864
mov eax, dword [ebp - 0x1250]
lea edx, [ebp - 0x124c]
call fcn.004226cc
mov eax, dword [ebp - 0x124c]
mov edx, 0x64ce48
call fcn.0040a4c8
je 0x64ab19
lea edx, [ebp - 0x1258]
mov eax, dword [ebp - 0x10]
call fcn.00424864
mov eax, dword [ebp - 0x1258]
lea edx, [ebp - 0x1254]
call fcn.004226cc
mov eax, dword [ebp - 0x1254]
mov edx, 0x64ce60
call fcn.0040a4c8
jne 0x64ab37
mov eax, dword [ebp - 0x10]
call fcn.00648ddc
push 0x12c
call sub.kernel32.dll_Sleep_2
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
mov byte [ebp - 0x61], 0
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.00424064
test al, al
je 0x64ab73
xor eax, eax
push ebp
push 0x64ab69
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.0042455c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64ab73
xor edx, edx
push ebp
push 0x64abe9
push dword fs:[edx]
mov dword fs:[edx], esp
push dword [0x6748e8]
push 0x64ce78
lea edx, [ebp - 0x1260]
mov eax, dword [ebp - 0x54]
call fcn.0042345c
push dword [ebp - 0x1260]
lea eax, [ebp - 0x125c]
mov edx, 3
call fcn.0040a418
mov ebx, dword [ebp - 0x125c]
mov eax, dword [ebp - 0x10]
call fcn.0040a13c
push eax
mov dword [ebp - 0x1264], ebx
mov eax, dword [ebp - 0x1264]
call fcn.0040a13c
push eax
call sub.kernel32.dll_MoveFileW
cmp eax, 1
sbb eax, eax
inc eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64aca1
cmp byte [ebp - 0x61], 0
jne 0x64ab37
xor eax, eax
push ebp
push 0x64acce
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x3e]
mov eax, dword [ebp - 0x10]
call fcn.00424398
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64acd8
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
cmp byte [0x6748d9], 0
je 0x64ad00
cmp byte [ebp - 0xb], 0
je 0x64ad00
mov edx, dword [ebp - 0x10]
mov eax, 0x64cf1c
call fcn.00641b2c
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64a02e
xor eax, eax
push ebp
push 0x64ad38
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x6748b0]
call fcn.00627218
mov eax, dword [0x6748b0]
call fcn.004078f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64ad42
push 0x64
call sub.kernel32.dll_Sleep_2
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
cmp byte [0x6748d9], 0
je 0x64ada4
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x420]
mov edx, dword [eax]
call dword [edx + 0x68]
test al, al
je 0x64ada4
lea edx, [ebp - 0x1274]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x420]
call fcn.005415e0
lea eax, [ebp - 0x1274]
mov edx, 0x64cf34
call fcn.0040a338
mov edx, dword [ebp - 0x1274]
mov eax, 0x64cf60
call fcn.00641b2c
push 0x64cf78
lea eax, [ebp - 0x1278]
push eax
mov ecx, 0x64cfb0
mov edx, 0x64cfc0
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1278]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov ecx, dword [ebp - 4]
mov edx, 0x64cfdc
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x64ae47
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x127c]
push eax
lea ecx, [ebp - 0x1280]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x1280]
mov edx, 0x64cffc
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x127c]
mov eax, dword [ebp - 0x4c]
call fcn.00642908
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64ae02
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
xor edx, edx
call fcn.00541634
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x4a8]
cmp byte [eax + 0x69], 0
je 0x64af36
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x4a8]
mov edx, dword [eax]
call dword [edx + 0x104]
test al, al
je 0x64af36
push 0x64d01c
lea eax, [ebp - 0x1284]
push eax
mov ecx, 0x64d05c
mov edx, 0x64d06c
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1284]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov ecx, dword [ebp - 4]
mov edx, 0x64d088
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x64af26
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x1288]
push eax
lea ecx, [ebp - 0x128c]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x128c]
mov edx, 0x64d0ac
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1288]
mov eax, dword [ebp - 0x4c]
call fcn.00644c8c
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64aee1
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
xor edx, edx
call fcn.00541634
push 0x64d0d0
lea eax, [ebp - 0x1290]
push eax
mov ecx, 0x64d118
mov edx, 0x64d128
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1290]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3b0]
mov ecx, dword [eax + 0x2a0]
mov edx, 0x64d144
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x2a0]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x64b006
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
cmp byte [0x6748e1], 0
jne 0x64b006
push 0
lea eax, [ebp - 0x1294]
push eax
lea ecx, [ebp - 0x1298]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x2a0]
mov edx, dword [ebp - 0x54]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x1298]
mov edx, 0x64d164
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1294]
mov eax, dword [ebp - 0x4c]
call fcn.00643754
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64afac
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
xor edx, edx
call fcn.00541634
push 0x64d184
lea eax, [ebp - 0x129c]
push eax
mov ecx, 0x64d1c0
mov edx, 0x64d1d0
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x129c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov ecx, dword [ebp - 4]
mov edx, 0x64d1ec
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x64b0b9
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x12a0]
push eax
lea ecx, [ebp - 0x12a4]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x12a4]
mov edx, 0x64d200
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x12a0]
mov eax, dword [ebp - 0x4c]
call fcn.00644770
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64b074
push 0
mov ecx, 0x64d214
mov edx, 0x64d240
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x64b1df
cmp byte [0x6748dc], 0
je 0x64b0ef
mov edx, 0x64d258
mov eax, dword [ebp - 0x4c]
call fcn.00643754
jmp 0x64b0fc
mov edx, 0x64d354
mov eax, dword [ebp - 0x4c]
call fcn.00643754
mov edx, 0x64d450
mov eax, dword [ebp - 0x4c]
call fcn.00644770
push 0x64d4d8
push 0x64d53c
lea eax, [ebp - 0x12ac]
push eax
mov ecx, 0x64d54c
mov edx, 0x64d56c
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
push dword [ebp - 0x12ac]
push 0x64d584
lea eax, [ebp - 0x12a8]
mov edx, 3
call fcn.0040a418
mov edx, dword [ebp - 0x12a8]
mov eax, dword [ebp - 0x4c]
call fcn.00644770
push 0
mov ecx, 0x64d5a8
mov edx, 0x64d5d8
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x64b1c5
mov edx, 0x64d5f0
mov eax, dword [ebp - 0x4c]
call fcn.00644770
push 0
lea edx, [ebp - 0x12b0]
mov eax, 0x64d678
call fcn.00640dec
mov eax, dword [ebp - 0x12b0]
call fcn.0040a13c
push eax
lea eax, [ebp - 0x12b4]
mov ecx, 0x64d6bc
mov edx, dword [0x6748e8]
call fcn.0040a390
mov eax, dword [ebp - 0x12b4]
call fcn.0040a13c
push eax
call sub.kernel32.dll_CopyFileW
jmp 0x64b1d2
mov edx, 0x64d6e8
mov eax, dword [ebp - 0x4c]
call fcn.00644770
mov edx, 0x64d770
mov eax, dword [ebp - 0x4c]
call fcn.00644770
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
xor edx, edx
call fcn.00541634
push 0
mov ecx, 0x64d808
mov edx, 0x64d820
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x64b43b
push 0x64d838
lea eax, [ebp - 0x12b8]
push eax
mov ecx, 0x64d880
mov edx, 0x64d890
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x12b8]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov ecx, dword [ebp - 4]
mov edx, 0x64d8ac
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x64b2b0
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x12bc]
push eax
lea ecx, [ebp - 0x12c0]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x12c0]
mov edx, 0x64d8d4
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x12bc]
mov eax, dword [ebp - 0x4c]
call fcn.006457a0
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64b26b
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x64b2fc
xor eax, eax
push ebp
push 0x64b2f2
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x68]
push eax
push 0x1388
push 2
push 0x64d8f0
push 0
push 0x1a
push 0xffff
call sub.user32.dll_SendMessageTimeoutW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64b2fc
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
xor edx, edx
call fcn.00541634
push 0x64d914
lea eax, [ebp - 0x12c4]
push eax
mov ecx, 0x64d948
mov edx, 0x64d95c
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x12c4]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
mov ecx, dword [ebp - 4]
mov edx, 0x64d978
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x64b3bb
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x12c8]
push eax
lea ecx, [ebp - 0x12cc]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x12cc]
mov edx, 0x64d994
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x12c8]
mov eax, dword [ebp - 0x4c]
call fcn.00646e34
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64b376
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x42c]
xor edx, edx
call fcn.00541634
mov ecx, dword [ebp - 4]
mov edx, 0x64d9b0
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x44]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x64b43b
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x12d0]
push eax
lea ecx, [ebp - 0x12d4]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x12d4]
mov edx, 0x64d9d0
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x12d0]
mov ax, 3
call fcn.00647278
inc dword [ebp - 0x54]
dec dword [ebp - 0x6c]
jne 0x64b3f5
cmp byte [0x6748d8], 0
je 0x64b472
xor eax, eax
push ebp
push 0x64b468
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x67493c]
push eax
call dword [0x674938]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64b472
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x434]
mov edx, 0x64
call fcn.0057700c
push 0x64d9f0
lea eax, [ebp - 0x12d8]
push eax
mov ecx, 0x64da24
mov edx, 0x64da38
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x12d8]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x430]
call fcn.00541634
push 0x64
call sub.kernel32.dll_Sleep_2
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
cmp byte [0x6748d9], 0
je 0x64b4f4
push 0
mov ecx, 0x64da54
mov edx, 0x64da7c
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
test al, al
je 0x64b4f4
call fcn.0064827c
mov eax, dword [ebp - 4]
call fcn.004078f0
mov eax, dword [0x6748d4]
mov edx, dword [eax]
call dword [edx + 0x60]
mov eax, dword [0x6748d4]
call fcn.004078f0
xor eax, eax
push ebp
push 0x64b58a
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x6748d9], 0
je 0x64b580
push 0
lea edx, [ebp - 0x12dc]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x420]
call fcn.005415e0
lea eax, [ebp - 0x12dc]
mov edx, 0x64da94
call fcn.0040a338
mov eax, dword [ebp - 0x12dc]
call fcn.0040a13c
push eax
lea eax, [ebp - 0x12e0]
mov ecx, 0x64dac0
mov edx, dword [0x6748e8]
call fcn.0040a390
mov eax, dword [ebp - 0x12e0]
call fcn.0040a13c
push eax
call sub.kernel32.dll_CopyFileW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x64b594
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00615b30
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x64b6af
lea eax, [ebp - 0x12e0]
call fcn.0040956c
lea eax, [ebp - 0x12dc]
call fcn.0040956c
lea eax, [ebp - 0x12d8]
mov edx, 0x19
call fcn.004095cc
lea eax, [ebp - 0x1274]
call fcn.0040956c
lea eax, [ebp - 0x1270]
mov edx, 3
call fcn.004095cc
lea eax, [ebp - 0x1260]
mov edx, 0x3c
call fcn.004095cc
lea eax, [ebp - 0x1168]
mov edx, 9
call fcn.004095cc
lea eax, [ebp - 0x1144]
call fcn.0040956c
lea eax, [ebp - 0x1140]
call fcn.0040956c
lea eax, [ebp - 0x113c]
mov edx, 0x28
call fcn.004095cc
lea eax, [ebp - 0x109c]
call fcn.0040956c
lea eax, [ebp - 0x1098]
call fcn.0040956c
lea eax, [ebp - 0x1094]
call fcn.0040956c
lea eax, [ebp - 0x1090]
mov edx, 3
call fcn.004095cc
lea eax, [ebp - 0x1084]
call fcn.0040956c
lea eax, [ebp - 0x1080]
mov edx, 2
call fcn.004095cc
lea eax, [ebp - 0x46]
mov edx, dword [0x620c54]
call fcn.0040aa44
lea eax, [ebp - 0x10]
mov edx, dword [0x649050]
call fcn.0040aa44
lea eax, [ebp - 8]
call fcn.0040956c
ret