Function at 0x656f5c
Capabilities:
Copy file
Create process on windows
Persist via app paths registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x28a
push 0
push 0
dec ecx
jne 0x656f64
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x1c]
mov edx, dword [0x656d58]
call fcn.0040c8d8
lea eax, [ebp - 0x52]
mov edx, dword [0x61eb64]
call fcn.0040c8d8
xor eax, eax
push ebp
push 0x65ab8e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x65abac
call fcn.00642e58
mov byte [0x68a239], al
mov byte [0x68a22c], 0
mov byte [0x68a22a], 0
lea edx, [ebp - 0x1114]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x1114]
lea edx, [ebp - 0x1110]
call fcn.0042759c
mov eax, dword [ebp - 0x1110]
lea edx, [ebp - 0x110c]
call fcn.004313ec
mov edx, dword [ebp - 0x110c]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.00551860
push 0
lea eax, [ebp - 0x111c]
push eax
mov ecx, 0x65abcc
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x111c]
lea edx, [ebp - 0x1118]
call fcn.00645914
mov edx, dword [ebp - 0x1118]
mov eax, 0x68a25c
call fcn.0040b980
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x464]
xor edx, edx
call fcn.0058f2e0
push 0x65ac00
lea eax, [ebp - 0x1120]
push eax
mov ecx, 0x65ac28
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1120]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
push 0
mov ecx, 0x65ac58
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [0x68a22f], al
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
xor eax, eax
mov dword [0x68a2a8], eax
xor eax, eax
mov dword [0x68a2ac], eax
xor eax, eax
mov dword [0x68a2b0], eax
xor eax, eax
mov dword [0x68a2b4], eax
mov dl, 1
mov eax, dword [0x487fdc]
call fcn.004b41c0
mov dword [0x68a294], eax
cmp byte [0x68a230], 0
je 0x6572a2
lea edx, [ebp - 0x1124]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
push dword [ebp - 0x1124]
push 0x65ac80
lea ecx, [ebp - 0x1128]
mov edx, 0x65ac90
mov eax, dword [0x68a274]
call fcn.0042925c
push dword [ebp - 0x1128]
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040c414
lea edx, [ebp - 0x112c]
mov eax, dword [ebp - 8]
call fcn.006431f0
mov eax, dword [ebp - 0x112c]
mov dl, 1
call fcn.00428b58
test al, al
je 0x6572a2
push 0
lea eax, [ebp - 0x1130]
mov ecx, 0x65aca8
mov edx, dword [0x68a254]
call fcn.0040c38c
mov eax, dword [ebp - 0x1130]
call fcn.0040c128
push eax
lea edx, [ebp - 0x1134]
mov eax, dword [ebp - 8]
call fcn.006431f0
mov eax, dword [ebp - 0x1134]
call fcn.0040c128
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
je 0x6572a2
lea eax, [ebp - 0x1138]
mov ecx, 0x65aca8
mov edx, dword [0x68a254]
call fcn.0040c38c
mov ecx, dword [ebp - 0x1138]
mov dl, 1
mov eax, dword [0x50f49c]
call fcn.00512fac
mov dword [0x68a21c], eax
mov ecx, dword [0x68a294]
mov edx, 0x65acd4
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x657238
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x113c]
mov eax, dword [0x68a294]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x113c]
push eax
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
pop eax
call fcn.00428148
inc eax
mov dword [0x68a2b0], eax
mov ecx, dword [0x68a294]
mov edx, 0x65acec
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x657298
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x1140]
mov eax, dword [0x68a294]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1140]
push eax
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
pop eax
call fcn.00428148
inc eax
mov dword [0x68a2b4], eax
mov eax, dword [0x68a21c]
call fcn.004097a0
call fcn.00437af8
push eax
lea eax, [ebp - 0x1144]
mov ecx, 0x65aca8
mov edx, dword [0x68a254]
call fcn.0040c38c
mov ecx, dword [ebp - 0x1144]
mov dl, 1
mov eax, dword [0x50f49c]
call fcn.00512ff0
mov dword [0x68a21c], eax
cmp byte [0x68a230], 0
je 0x657352
mov eax, 0x65ad18
call fcn.00642e58
test al, al
jne 0x657352
mov edx, 0x65ad48
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65730e
mov edx, 0x65ad48
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov edx, 0x65ad80
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x657330
mov edx, 0x65ad80
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov edx, 0x65adb4
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x657352
mov edx, 0x65adb4
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
push 0
mov ecx, 0x65ade8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65738a
push 0
mov ecx, 0x65ae0c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
jne 0x657637
lea edx, [ebp - 0x1148]
mov al, 1
call fcn.00644708
mov eax, dword [ebp - 0x1148]
push eax
mov ecx, 0x65ae34
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, 0x65ae6c
call fcn.00642e58
test al, al
jne 0x65741a
push 0
lea eax, [ebp - 0x1154]
push eax
mov ecx, 0x65ae94
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1154]
lea edx, [ebp - 0x1150]
call fcn.006443a0
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x114c]
call fcn.00645914
mov eax, dword [ebp - 0x114c]
push eax
mov ecx, 0x65ae94
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x1158]
mov al, 2
call fcn.00644708
mov eax, dword [ebp - 0x1158]
push eax
mov ecx, 0x65aeb8
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
lea eax, [ebp - 0x1160]
push eax
mov ecx, 0x65aedc
mov edx, 0x65aeec
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1160]
lea edx, [ebp - 0x115c]
call fcn.00645914
mov eax, dword [ebp - 0x115c]
push eax
mov ecx, 0x65aedc
mov edx, 0x65af0c
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 8]
call fcn.0040b590
push 0
mov ecx, 0x65af2c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x6574d4
push 0
mov ecx, 0x65af48
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x6574d4
lea eax, [ebp - 8]
mov edx, 0x65af60
call fcn.0040b9c8
push 0
lea eax, [ebp - 0x116c]
push eax
mov ecx, 0x65b01c
mov edx, 0x65aeec
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x116c]
lea edx, [ebp - 0x1168]
call fcn.00645914
mov ecx, dword [ebp - 0x1168]
lea eax, [ebp - 0x1164]
mov edx, dword [ebp - 8]
call fcn.0040c38c
mov eax, dword [ebp - 0x1164]
push eax
mov ecx, 0x65b01c
mov edx, 0x65af0c
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov dword [ebp - 0x60], 2
push 0
lea eax, [ebp - 0x1174]
push eax
lea edx, [ebp - 0x1178]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x1178]
mov edx, 0x65aeec
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1174]
lea edx, [ebp - 0x1170]
call fcn.00645914
mov eax, dword [ebp - 0x1170]
push eax
lea edx, [ebp - 0x117c]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x117c]
mov edx, 0x65af0c
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0xb
jne 0x657538
push 0
mov ecx, 0x65b02c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x657637
xor eax, eax
mov dword [ebp - 0x60], eax
push 0
lea eax, [ebp - 0x1184]
push eax
lea edx, [ebp - 0x1188]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x1188]
mov edx, 0x65b02c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1184]
lea edx, [ebp - 0x1180]
call fcn.00645914
mov eax, dword [ebp - 0x1180]
push eax
lea edx, [ebp - 0x118c]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x118c]
mov edx, 0x65b02c
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0x22
jne 0x6575c7
push 0
lea eax, [ebp - 0x1198]
push eax
mov ecx, 0x65b048
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1198]
lea edx, [ebp - 0x1194]
call fcn.006443a0
mov eax, dword [ebp - 0x1194]
lea edx, [ebp - 0x1190]
call fcn.00645914
mov eax, dword [ebp - 0x1190]
push eax
mov ecx, 0x65b048
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
movzx eax, byte [0x68a226]
push eax
mov ecx, 0x65b060
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
movzx eax, byte [0x68a224]
push eax
mov ecx, 0x65b080
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
movzx eax, byte [0x68a220]
push eax
mov ecx, 0x65b098
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
lea edx, [ebp - 0x119c]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x119c]
push eax
mov ecx, 0x65b0ac
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp byte [0x68a230], 0
je 0x657749
mov ecx, 0x65b0d0
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x657749
mov ecx, 0x65b0d0
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
cmp dword [0x68a25c], 0
je 0x65776c
mov eax, dword [0x68a25c]
push eax
mov ecx, 0x65abcc
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x75], 0
mov edx, 0x65b0fc
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65784f
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x3e8]
mov ecx, dword [eax + 0x2c0]
mov edx, 0x65b0fc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x3e8]
mov edx, dword [eax]
call dword [edx + 0x16c]
dec eax
test eax, eax
jl 0x65784f
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x11a4]
push eax
lea edx, [ebp - 0x11a8]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x11a8]
mov edx, 0x65b0fc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11a4]
lea edx, [ebp - 0x11a0]
call fcn.00427194
mov eax, dword [ebp - 0x11a0]
mov dword [ebp - 0x94], eax
mov ecx, 1
mov edx, dword [ebp - 0x94]
mov eax, 0x65b11c
call fcn.0040c658
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jle 0x657844
mov byte [ebp - 0x75], 1
jmp 0x65784f
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x6577d1
cmp byte [ebp - 0x75], 0
je 0x65786f
mov eax, dword [0x68a264]
push eax
mov ecx, 0x65b144
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp byte [0x68a222], 0
je 0x657f98
cmp byte [0x68a223], 0
je 0x6578ab
mov eax, 0x65b170
call fcn.00642e58
test al, al
je 0x6578ab
push 1
mov ecx, 0x65b198
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x6578d6
push 0
mov ecx, 0x65b1bc
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b198
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b1e8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b1e8
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b1e8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x657bbb
lea edx, [ebp - 0x11ac]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0x9c], eax
mov edx, 0x65b210
mov eax, dword [ebp - 0x9c]
call fcn.00427334
test eax, eax
sete byte [ebp - 0x9d]
cmp byte [ebp - 0x9d], 0
je 0x65796a
mov byte [ebp - 0xa6], 1
jmp 0x6579b0
lea edx, [ebp - 0x11b0]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x11b0]
mov dword [ebp - 0xa4], eax
mov edx, 0x65b224
mov eax, dword [ebp - 0xa4]
call fcn.00427334
test eax, eax
sete byte [ebp - 0xa5]
movzx eax, byte [ebp - 0xa5]
mov byte [ebp - 0xa6], al
cmp byte [ebp - 0xa6], 0
je 0x6579c2
mov byte [ebp - 0xae], 1
jmp 0x657a08
lea edx, [ebp - 0x11b4]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x11b4]
mov dword [ebp - 0xac], eax
mov edx, 0x65b248
mov eax, dword [ebp - 0xac]
call fcn.00427334
test eax, eax
sete byte [ebp - 0xad]
movzx eax, byte [ebp - 0xad]
mov byte [ebp - 0xae], al
cmp byte [ebp - 0xae], 0
je 0x657a1a
mov byte [ebp - 0xb6], 1
jmp 0x657a60
lea edx, [ebp - 0x11b8]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x11b8]
mov dword [ebp - 0xb4], eax
mov edx, 0x65b27c
mov eax, dword [ebp - 0xb4]
call fcn.00427334
test eax, eax
sete byte [ebp - 0xb5]
movzx eax, byte [ebp - 0xb5]
mov byte [ebp - 0xb6], al
cmp byte [ebp - 0xb6], 0
je 0x657a72
mov byte [ebp - 0xbe], 1
jmp 0x657ab8
lea edx, [ebp - 0x11bc]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x11bc]
mov dword [ebp - 0xbc], eax
mov edx, 0x65b2ac
mov eax, dword [ebp - 0xbc]
call fcn.00427334
test eax, eax
sete byte [ebp - 0xbd]
movzx eax, byte [ebp - 0xbd]
mov byte [ebp - 0xbe], al
cmp byte [ebp - 0xbe], 0
je 0x657aca
mov byte [ebp - 0xca], 1
jmp 0x657b2a
lea edx, [ebp - 0x11c0]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x11c0]
mov dword [ebp - 0xc4], eax
lea edx, [ebp - 0x11c4]
mov al, 0x15
call fcn.00644708
mov eax, dword [ebp - 0x11c4]
mov dword [ebp - 0xc8], eax
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc4]
call fcn.00427334
test eax, eax
sete byte [ebp - 0xc9]
movzx eax, byte [ebp - 0xc9]
mov byte [ebp - 0xca], al
cmp byte [ebp - 0xca], 0
je 0x657b3c
mov byte [ebp - 0xd6], 1
jmp 0x657b9c
lea edx, [ebp - 0x11c8]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
mov eax, dword [ebp - 0x11c8]
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x11cc]
mov al, 0x16
call fcn.00644708
mov eax, dword [ebp - 0x11cc]
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd0]
call fcn.00427334
test eax, eax
sete byte [ebp - 0xd5]
movzx eax, byte [ebp - 0xd5]
mov byte [ebp - 0xd6], al
cmp byte [ebp - 0xd6], 0
je 0x657bbb
push 0
mov ecx, 0x65b1e8
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b2e8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b2e8
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b318
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x657c4b
push 0
lea eax, [ebp - 0x11d4]
push eax
mov ecx, 0x65b348
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11d4]
lea edx, [ebp - 0x11d0]
call fcn.00645914
mov eax, dword [ebp - 0x11d0]
push eax
mov ecx, 0x65b348
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x657c61
push 0
mov ecx, 0x65b348
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65b388
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x657cd7
push 0
lea eax, [ebp - 0x11e0]
push eax
mov ecx, 0x65b3bc
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11e0]
lea edx, [ebp - 0x11dc]
call fcn.006443a0
mov eax, dword [ebp - 0x11dc]
lea edx, [ebp - 0x11d8]
call fcn.00645914
mov eax, dword [ebp - 0x11d8]
push eax
mov ecx, 0x65b3bc
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x657ced
push 0
mov ecx, 0x65b3bc
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65b3e4
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b3e4
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b40c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x657df5
push 0
lea eax, [ebp - 0x11e8]
push eax
mov ecx, 0x65b43c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11e8]
lea edx, [ebp - 0x11e4]
call fcn.00645914
mov eax, dword [ebp - 0x11e4]
push eax
mov ecx, 0x65b474
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
lea eax, [ebp - 0x11f0]
push eax
mov ecx, 0x65b494
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11f0]
lea edx, [ebp - 0x11ec]
call fcn.00645914
mov eax, dword [ebp - 0x11ec]
push eax
mov ecx, 0x65b4cc
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65b4f4
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b530
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x657e21
mov ecx, 0x65b474
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x657e21
mov ecx, 0x65b474
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65b558
call fcn.00642e58
push eax
mov ecx, 0x65b584
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
mov eax, 0x65b5ac
call fcn.00642e58
push eax
mov ecx, 0x65b5dc
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
mov eax, 0x65b60c
call fcn.00642e58
push eax
mov ecx, 0x65b640
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
mov eax, 0x65b670
call fcn.00642e58
test al, al
je 0x657ea4
push 1
mov ecx, 0x65b6a0
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x657ed0
mov ecx, 0x65b6a0
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x657ed0
mov ecx, 0x65b6a0
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65b6d0
call fcn.00642e58
test al, al
je 0x657ef6
push 1
mov ecx, 0x65b704
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x657f22
mov ecx, 0x65b704
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x657f22
mov ecx, 0x65b704
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65b738
call fcn.00642e58
test al, al
je 0x657f48
push 1
mov ecx, 0x65b774
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x657f74
mov ecx, 0x65b774
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x657f74
mov ecx, 0x65b774
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65b7ac
call fcn.00642e58
test al, al
je 0x657f98
push 1
mov ecx, 0x65b7d4
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b02c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65831a
push 0
lea eax, [ebp - 0x11f8]
push eax
mov ecx, 0x65b7f4
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11f8]
lea edx, [ebp - 0x11f4]
call fcn.00645914
mov eax, dword [ebp - 0x11f4]
push eax
mov ecx, 0x65b7f4
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65b814
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65b814
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65b838
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65831a
push 1
mov ecx, 0x65b838
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b860
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b860
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b890
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b890
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b8c0
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65b8c0
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65b8e8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b8e8
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b91c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b91c
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b91c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x6581ac
push 0xffffffffffffffff
mov ecx, 0x65b948
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65b948
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65b974
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x6581c2
push 1
mov ecx, 0x65b974
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x6581c2
push 0
mov ecx, 0x65b948
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65b9a4
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x6581f2
push 1
mov ecx, 0x65b9a4
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b9d8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65b9d8
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65b9d8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658262
push 0
mov ecx, 0x65ba14
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65ba14
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
lea eax, [ebp - 0x1200]
push eax
mov ecx, 0x65ba44
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1200]
lea edx, [ebp - 0x11fc]
call fcn.00645914
mov eax, dword [ebp - 0x11fc]
push eax
mov ecx, 0x65ba44
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
lea eax, [ebp - 0x1204]
push eax
mov ecx, 0x65ba74
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x1204], 0
je 0x65831a
push 0
lea eax, [ebp - 0x120c]
push eax
mov ecx, 0x65ba74
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x120c]
lea edx, [ebp - 0x1208]
call fcn.00645914
mov eax, dword [ebp - 0x1208]
push eax
mov ecx, 0x65ba74
mov edx, 0x65ae50
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x65baa4
lea eax, [ebp - 0x1210]
push eax
mov ecx, 0x65bad8
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1210]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
push 0x1f4
call sub.kernel32.dll_Sleep
cmp byte [0x68a221], 0
je 0x6583d5
xor eax, eax
push ebp
push 0x6583cb
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x68a2c4], eax
push 0x65bae0
push 0x65bb20
call sub.kernel32.dll_GetModuleHandleW
push eax
call fcn.0041738c
mov dword [0x68a2bc], eax
push 0x65bb3c
push 0x65bb20
call sub.kernel32.dll_GetModuleHandleW
push eax
call fcn.0041738c
mov dword [0x68a2c0], eax
push 0x68a2c4
call dword [0x68a2bc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6583d5
xor eax, eax
push ebp
push 0x658458
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x20
lea edx, [ebp - 0x1214]
xor eax, eax
call fcn.00407540
mov ecx, dword [ebp - 0x1214]
mov dl, 1
mov eax, dword [0x48b294]
call fcn.004b6494
mov dword [0x68a1e4], eax
mov eax, dword [0x68a208]
xor edx, edx
push edx
push eax
mov eax, dword [0x68a1e4]
call fcn.004b43f4
push 0xff00
lea eax, [ebp - 0x1218]
mov ecx, 0x65bb84
mov edx, dword [0x68a254]
call fcn.0040c38c
mov ecx, dword [ebp - 0x1218]
mov dl, 1
mov eax, dword [0x48b294]
call fcn.004b6494
mov dword [0x68a1e8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6584a3
xor esi, esi
mov eax, dword [0x68a20c]
sub eax, esi
cmp eax, 0x1000
jb 0x6584cc
lea edx, [ebp - 0x1108]
mov ecx, 0x1000
mov eax, dword [0x68a1e4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, eax
jmp 0x6584e6
mov ecx, dword [0x68a20c]
sub ecx, esi
lea edx, [ebp - 0x1108]
mov eax, dword [0x68a1e4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, eax
lea edx, [ebp - 0x1108]
mov ecx, ebx
mov eax, dword [0x68a1e8]
mov edi, dword [eax]
call dword [edi + 0x10]
add esi, ebx
mov eax, dword [0x68a20c]
mov dword [ebp - 0x1220], eax
xor eax, eax
mov dword [ebp - 0x121c], eax
fild qword [ebp - 0x1220]
fdivr dword [0x65bba4]
mov dword [ebp - 0x1220], esi
xor eax, eax
mov dword [ebp - 0x121c], eax
fild qword [ebp - 0x1220]
fmulp st(1)
call fcn.00407bd0
mov edx, eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x464]
call fcn.0058f2e0
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
cmp ebx, 0x1000
je 0x6584a5
mov eax, dword [0x68a1e8]
call fcn.004097a0
mov eax, dword [0x68a1e4]
call fcn.004097a0
push 0x65bbb4
lea eax, [ebp - 0x1224]
push eax
mov ecx, 0x65bbe4
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1224]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
mov dl, 1
mov eax, dword [0x61f2b8]
call fcn.006261bc
mov dword [0x68a1ec], eax
xor eax, eax
push ebp
push 0x658601
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1228]
mov ecx, 0x65bb84
mov edx, dword [0x68a254]
call fcn.0040c38c
mov edx, dword [ebp - 0x1228]
mov cl, 1
mov eax, dword [0x68a1ec]
call fcn.00626270
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65864c
mov dl, 1
mov eax, dword [0x487fdc]
call fcn.004b41c0
mov dword [ebp - 4], eax
mov byte [ebp - 0x7d], 0
push 0
mov ecx, 0x65bbf4
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [ebp - 0x6c], eax
mov eax, 0x65bc18
call fcn.00642e58
xor al, 1
mov byte [ebp - 0x79], al
mov eax, 0x65bc40
call fcn.00642e58
xor al, 1
mov byte [ebp - 0x7b], al
mov eax, 0x65bc68
call fcn.00642e58
mov byte [ebp - 0x7a], al
mov eax, 0x65bc94
call fcn.00642e58
mov byte [0x68a228], al
mov eax, 0x65bcbc
call fcn.00642e58
xor al, 1
mov byte [0x68a235], al
mov eax, 0x65bcf0
call fcn.00642e58
xor al, 1
mov byte [0x68a236], al
mov eax, 0x65bd18
call fcn.00642e58
mov byte [0x68a237], al
mov eax, 0x65bd48
call fcn.00642e58
mov byte [ebp - 0x7c], al
mov byte [0x68a232], 0
mov byte [0x68a233], 0
lea eax, [ebp - 0x10]
call fcn.0040b590
push 0
mov ecx, 0x65bd80
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [0x68a23c], eax
push 0
mov ecx, 0x65bda4
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [0x68a240], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x4e8]
cmp byte [eax + 0x69], 0
je 0x65885e
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x4ec]
mov eax, dword [eax + 0x2c0]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x65885e
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x4ec]
mov edx, dword [ebp - 0x60]
call fcn.006408d0
test al, al
jne 0x65884f
lea ecx, [ebp - 8]
mov edx, 2
mov eax, dword [ebp - 0x60]
call fcn.00656b60
cmp dword [ebp - 8], 0
je 0x65884f
lea edx, [ebp - 0x122c]
mov eax, dword [ebp - 8]
call fcn.00427194
mov edx, dword [ebp - 0x122c]
lea eax, [ebp - 8]
call fcn.0040b9c8
mov eax, dword [ebp - 8]
mov edx, 0x65bdc8
call fcn.0040c4c4
jne 0x6587e1
mov byte [0x68a232], 1
jmp 0x65884f
mov eax, dword [ebp - 8]
mov edx, 0x65bdec
call fcn.0040c4c4
jne 0x6587f9
mov byte [0x68a233], 1
jmp 0x65884f
mov eax, dword [ebp - 8]
mov edx, 0x65be10
call fcn.0040c4c4
jne 0x658818
mov byte [0x68a232], 1
mov byte [0x68a233], 1
jmp 0x65884f
mov eax, dword [ebp - 8]
mov edx, 0x65be30
call fcn.0040c4c4
jne 0x658837
mov byte [0x68a232], 1
mov byte [0x68a233], 1
jmp 0x65884f
push dword [ebp - 0x10]
push dword [ebp - 8]
push 0x65be54
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.0040c414
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x65877a
cmp dword [ebp - 0x10], 0
setne byte [ebp - 0x77]
push 0xffffffffffffffff
mov ecx, 0x65be64
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x6c]
dec eax
test eax, eax
jl 0x65985c
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
cmp byte [0x68a22c], 0
je 0x6588fd
cmp dword [ebp - 0x74], 0xffffffff
je 0x6588ec
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x1230]
mov eax, dword [ebp - 0x74]
call fcn.00427eb4
mov eax, dword [ebp - 0x1230]
push eax
lea eax, [ebp - 0x1234]
mov ecx, 0x65be90
mov edx, dword [0x68a254]
call fcn.0040c38c
mov ecx, dword [ebp - 0x1234]
mov eax, dword [0x68a1ec]
pop edx
call fcn.006273b8
mov eax, dword [0x68a1ec]
call fcn.004097a0
push ebp
call fcn.00656dbc
pop ecx
cmp byte [0x68a232], 0
je 0x658915
mov eax, dword [ebp - 0x60]
cmp eax, dword [0x68a23c]
jl 0x65984d
push 0
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0x1238]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x1238]
mov edx, 0x65acd4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 8], 0
jne 0x658948
mov al, 1
jmp 0x65896a
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x65bebc
call fcn.0040c658
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
sete al
test al, al
jne 0x65984d
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x65bebc
call fcn.0040c658
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xe0]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040c4fc
cmp byte [0x68a233], 0
je 0x6589fe
mov eax, dword [ebp - 0x60]
cmp eax, dword [0x68a23c]
jl 0x6589fe
mov eax, dword [ebp - 0x1c]
mov edx, 0x65becc
call fcn.0040c4c4
je 0x6589fe
mov eax, dword [ebp - 0x1c]
mov edx, 0x65bf0c
call fcn.0040c4c4
je 0x6589fe
lea eax, [ebp - 0x123c]
mov ecx, dword [0x68a274]
mov edx, 0x65bf50
call fcn.0040c38c
mov edx, dword [ebp - 0x123c]
mov eax, dword [ebp - 0x1c]
call fcn.0040c4c4
jne 0x65984d
cmp byte [ebp - 0x77], 0
je 0x658adf
mov byte [ebp - 0x78], 0
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.0040b9c8
jmp 0x658ab9
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x65be54
call fcn.0040c658
mov esi, eax
lea eax, [ebp - 0x1240]
push eax
mov ecx, esi
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.0040c4fc
mov edi, dword [ebp - 0x1240]
lea edx, [ebp - 0x1244]
mov eax, dword [ebp - 0x1c]
call fcn.00427194
mov eax, dword [ebp - 0x1244]
mov dword [ebp - 0xe4], eax
mov ecx, 1
mov edx, dword [ebp - 0xe4]
mov eax, edi
call fcn.0040c658
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jle 0x658a8e
mov byte [ebp - 0x78], 1
jmp 0x658ad5
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x65be54
call fcn.0040c658
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x14]
mov ecx, dword [ebp - 0xec]
mov edx, 1
call fcn.0040c544
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x65be54
call fcn.0040c658
mov ebx, eax
test ebx, ebx
jg 0x658a1c
cmp byte [ebp - 0x78], 1
je 0x65984d
lea edx, [ebp - 0x1248]
mov eax, dword [ebp - 0x1c]
call fcn.00645914
mov edx, dword [ebp - 0x1248]
lea eax, [ebp - 0x1c]
call fcn.0040b9c8
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x65bebc
call fcn.0040c658
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0xf0]
mov edx, 1
call fcn.0040c544
cmp dword [ebp - 0x1c], 0
jne 0x658b30
mov al, 1
jmp 0x658b42
mov eax, dword [ebp - 8]
test eax, eax
je 0x658b3c
sub eax, 4
mov eax, dword [eax]
cmp eax, 2
setl al
test al, al
jne 0x65984d
lea eax, [ebp - 0x124c]
mov edx, dword [ebp - 8]
movzx edx, word [edx]
call fcn.0040c148
mov eax, dword [ebp - 0x124c]
mov edx, 1
call fcn.00428148
mov byte [ebp - 0x18], al
mov eax, dword [ebp - 8]
cmp word [eax + 2], 0x31
sete al
mov byte [ebp - 0x17], al
xor eax, eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x658b8d
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
cmp word [edx + eax*2 - 2], 0x5c
je 0x658ec5
cmp byte [0x68a22f], 0
jne 0x658bc7
lea edx, [ebp - 0x1250]
mov eax, dword [ebp - 0x1c]
call fcn.00647d00
mov edx, dword [ebp - 0x1250]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
call fcn.00551860
fild dword [ebp - 0x6c]
fdivr dword [0x65bf6c]
fild dword [ebp - 0x60]
fmulp st(1)
call fcn.00407bd0
mov edx, eax
add edx, 0x1e
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x464]
call fcn.0058f2e0
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
lea edx, [ebp - 0x1254]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x1254]
mov dl, 1
call fcn.00428b58
test al, al
je 0x658ec5
movzx eax, byte [ebp - 0x17]
and al, byte [ebp - 0x7c]
je 0x658c29
mov byte [ebp - 0x17], 0
cmp byte [ebp - 0x18], 0
jne case.0x658ca2.0
cmp byte [0x68a223], 0
je 0x658c45
mov byte [ebp - 0x18], 1
jmp case.0x658ca2.0
cmp byte [ebp - 0x7d], 0
jne 0x658cf6
push 0
push 0
lea eax, [ebp - 0x125c]
push eax
mov ecx, 0x65ac28
mov edx, 0x65af0c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x125c]
lea ecx, [ebp - 0x1258]
mov edx, dword [ebp - 0x1c]
call fcn.006470fc
mov eax, dword [ebp - 0x1258]
movzx ecx, word [0x65bf70]
xor edx, edx
call fcn.005a3448
cmp eax, 0xe
ja case.0x658ca2.0
movzx eax, byte [eax + 0x658ca9]
jmp dword [eax*4 + 0x658cb8]
mov byte [ebp - 0x18], 1
jmp case.0x658ca2.0
mov byte [ebp - 0x18], 3
jmp case.0x658ca2.0
mov byte [ebp - 0x18], 1
mov byte [ebp - 0x7d], 1
jmp case.0x658ca2.0
mov byte [ebp - 0x18], 3
mov byte [ebp - 0x7d], 3
jmp case.0x658ca2.0
mov byte [ebp - 0x18], 3
jmp case.0x658ca2.0
movzx eax, byte [ebp - 0x7d]
mov byte [ebp - 0x18], al
cmp byte [ebp - 0x18], 2
jne 0x658df1
xor eax, eax
push ebp
push 0x658de3
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x52]
mov edx, dword [ebp - 0x60]
mov eax, dword [0x68a1ec]
call fcn.00624bfc
mov eax, dword [ebp - 0x4a]
mov dword [ebp - 0x5c], eax
push 0
lea edx, [ebp - 0x1260]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov edx, dword [ebp - 0x1260]
mov ecx, dword [0x68a254]
mov eax, dword [0x68a1ec]
call fcn.006269d8
push dword [0x68a254]
push 0x65ac80
lea edx, [ebp - 0x1268]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
push dword [ebp - 0x1268]
lea eax, [ebp - 0x1264]
mov edx, 3
call fcn.0040c414
mov eax, dword [ebp - 0x1264]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x1c]
call fcn.0065659c
test al, al
je 0x658d9b
mov byte [ebp - 0x18], 1
jmp 0x658d9f
mov byte [ebp - 0x18], 3
push dword [0x68a254]
push 0x65ac80
lea edx, [ebp - 0x1270]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
push dword [ebp - 0x1270]
lea eax, [ebp - 0x126c]
mov edx, 3
call fcn.0040c414
mov eax, dword [ebp - 0x126c]
call fcn.0042911c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x658df1
cmp byte [ebp - 0x18], 1
jne 0x658ea0
xor eax, eax
push ebp
push 0x658e96
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x68a228], 0
je 0x658e73
push 0
push dword [0x68a254]
push 0x65ac80
lea edx, [ebp - 0x1278]
mov eax, dword [ebp - 0x1c]
call fcn.004294a0
push dword [ebp - 0x1278]
push 0x65bf80
lea eax, [ebp - 0x1274]
mov edx, 4
call fcn.0040c414
mov eax, dword [ebp - 0x1274]
call fcn.0040c128
push eax
lea edx, [ebp - 0x127c]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x127c]
call fcn.0040c128
push eax
call sub.kernel32.dll_CopyFileW
lea edx, [ebp - 0x1280]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x1280]
call fcn.0042911c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x658ea0
cmp byte [ebp - 0x18], 3
jne 0x658ec5
mov eax, 0x65bfa0
call fcn.00642e58
test al, al
jne 0x65984d
mov eax, dword [ebp - 0x1c]
call fcn.00656788
jmp 0x65984d
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x658ed1
sub ebx, 4
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x1c]
cmp word [eax + ebx*2 - 2], 0x5c
je 0x658f10
lea edx, [ebp - 0x1288]
mov eax, dword [ebp - 0x1c]
call fcn.0042937c
mov eax, dword [ebp - 0x1288]
lea edx, [ebp - 0x1284]
call fcn.006431f0
mov eax, dword [ebp - 0x1284]
mov dl, 1
call fcn.00428bf0
test al, al
jne 0x65938e
mov dword [ebp - 0x70], 4
lea eax, [ebp - 0x128c]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0040c4fc
mov eax, dword [ebp - 0x128c]
mov edx, 0x65bfd0
call fcn.0040c4c4
jne 0x658fa3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x658f65
mov eax, dword [ebp - 0xf4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0xf4]
sub ecx, 2
mov edx, 3
mov eax, dword [ebp - 0x1c]
call fcn.0040c4fc
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x65ac80
call fcn.0040c658
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
add eax, 3
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x75], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
je 0x658fd3
mov eax, dword [ebp - 0x100]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0xfc]
mov edx, dword [ebp - 0x100]
sub edx, eax
jl 0x659384
inc edx
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x64]
cmp word [eax + edx*2 - 2], 0x5c
jne 0x659375
lea eax, [ebp - 0x1294]
push eax
mov ecx, dword [ebp - 0x64]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0040c4fc
mov eax, dword [ebp - 0x1294]
lea edx, [ebp - 0x1290]
call fcn.006431f0
mov eax, dword [ebp - 0x1290]
mov dl, 1
call fcn.00428bf0
test al, al
jne 0x659375
xor edx, edx
push ebp
push 0x6590cc
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x129c]
push eax
mov ecx, dword [ebp - 0x64]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0040c4fc
mov eax, dword [ebp - 0x129c]
lea edx, [ebp - 0x1298]
call fcn.006431f0
mov eax, dword [ebp - 0x1298]
call fcn.004072f0
call fcn.00407178
cmp byte [0x68a222], 0
je 0x6590bf
cmp byte [ebp - 0x17], 0
je 0x6590bf
lea eax, [ebp - 0x12a0]
push eax
mov ecx, dword [ebp - 0x64]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.0040c4fc
mov edx, dword [ebp - 0x12a0]
mov eax, 0x65bfe4
call fcn.00648204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x659375
inc dword [ebp - 0x64]
dec dword [ebp - 0x90]
jne 0x658ff1
cmp byte [ebp - 0x75], 0
jne 0x65984d
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x65939a
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
cmp word [edx + eax*2 - 2], 0x5c
je 0x65984d
lea edx, [ebp - 0x12e0]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x12e0]
mov dl, 1
call fcn.00428b58
test al, al
je 0x659555
lea edx, [ebp - 0x12e8]
mov eax, dword [ebp - 0x1c]
call fcn.004294fc
mov eax, dword [ebp - 0x12e8]
lea edx, [ebp - 0x12e4]
call fcn.00427194
mov eax, dword [ebp - 0x12e4]
mov edx, 0x65c0f4
call fcn.0040c4c4
jne 0x65945f
mov eax, dword [ebp - 0x1c]
call fcn.00642bac
test al, al
je 0x65945f
push 0
push 0
push 0x65c10c
lea edx, [ebp - 0x12f0]
mov eax, dword [ebp - 0x1c]
call fcn.004294a0
push dword [ebp - 0x12f0]
push 0x65c140
lea eax, [ebp - 0x12ec]
mov edx, 3
call fcn.0040c414
mov eax, dword [ebp - 0x12ec]
call fcn.0040c128
push eax
push 0x65c148
push 0
push 0
call sub.shell32.dll_ShellExecuteW
push 0x3e8
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x12f4]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x12f4]
mov dl, 1
call fcn.00428e50
test eax, 1
jle 0x6594c4
xor eax, eax
push ebp
push 0x6594ba
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x12f8]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x12f8]
mov cl, 1
mov edx, 0x80
call fcn.00428f08
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6594c4
lea edx, [ebp - 0x1300]
mov eax, dword [ebp - 0x1c]
call fcn.004294fc
mov eax, dword [ebp - 0x1300]
lea edx, [ebp - 0x12fc]
call fcn.00427194
mov eax, dword [ebp - 0x12fc]
mov edx, 0x65c164
call fcn.0040c4c4
je 0x659526
lea edx, [ebp - 0x1308]
mov eax, dword [ebp - 0x1c]
call fcn.004294fc
mov eax, dword [ebp - 0x1308]
lea edx, [ebp - 0x1304]
call fcn.00427194
mov eax, dword [ebp - 0x1304]
mov edx, 0x65c17c
call fcn.0040c4c4
jne 0x659555
lea edx, [ebp - 0x130c]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x130c]
call fcn.00656688
push 0x12c
call sub.kernel32.dll_Sleep
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
mov byte [ebp - 0x76], 0
lea edx, [ebp - 0x1310]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x1310]
mov dl, 1
call fcn.00428b58
test al, al
je 0x6595b3
xor eax, eax
push ebp
push 0x6595a9
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1314]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x1314]
call fcn.0042911c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6595b3
xor eax, eax
push ebp
push 0x659613
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
movzx eax, byte [ebp - 0x7a]
push eax
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x7b]
push eax
lea edx, [ebp - 0x1318]
mov eax, dword [ebp - 0x1c]
call fcn.006431f0
mov eax, dword [ebp - 0x1318]
push eax
lea edx, [ebp - 0x131c]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov edx, dword [ebp - 0x131c]
mov eax, dword [0x68a1ec]
pop ecx
call fcn.006273b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x659800
cmp byte [ebp - 0x76], 0
jne 0x659555
cmp byte [ebp - 0x7a], 0
je 0x659818
mov eax, dword [ebp - 0x1c]
call fcn.00656c78
cmp byte [0x68a222], 0
je 0x659834
cmp byte [ebp - 0x17], 0
je 0x659834
mov edx, dword [ebp - 0x1c]
mov eax, 0x65acd4
call fcn.00648204
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
cmp dword [ebp - 0x6c], 0x32
jge 0x65984d
push 0x64
call sub.kernel32.dll_Sleep
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x658899
xor eax, eax
push ebp
push 0x659888
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x68a1ec]
call fcn.006263e4
mov eax, dword [0x68a1ec]
call fcn.004097a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x659892
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x464]
mov edx, 0x63
call fcn.0058f2e0
push 0x65c30c
lea eax, [ebp - 0x1340]
push eax
mov ecx, 0x65c340
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1340]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
mov ecx, dword [ebp - 4]
mov edx, 0x65b0fc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x6599bb
push 0x65c354
lea eax, [ebp - 0x1344]
push eax
mov ecx, 0x65c38c
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1344]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x6599ab
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x1348]
push eax
lea ecx, [ebp - 0x134c]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x134c]
mov edx, 0x65b0fc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1348]
call fcn.0064bcac
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x659966
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
cmp byte [0x68a222], 0
je 0x659a27
cmp byte [0x68a230], 0
jne 0x659a27
lea edx, [ebp - 0x1354]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
push dword [ebp - 0x1354]
push 0x65ac80
lea ecx, [ebp - 0x1358]
mov edx, 0x65ac90
mov eax, dword [0x68a274]
call fcn.0042925c
push dword [ebp - 0x1358]
lea eax, [ebp - 0x1350]
mov edx, 3
call fcn.0040c414
mov edx, dword [ebp - 0x1350]
mov eax, 0x65acd4
call fcn.00648204
push 0
mov ecx, 0x65af48
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65a505
push 0
mov ecx, 0x65c39c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
test eax, eax
jle 0x659b76
push 0x65baa4
lea eax, [ebp - 0x135c]
push eax
mov ecx, 0x65bad8
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x135c]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
cmp byte [0x68a223], 0
je 0x659ac7
mov word [ebp - 0x86], 0
jmp 0x659ad0
mov word [ebp - 0x86], 1
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x65c3c0
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0xc], 0
jne 0x659afd
lea eax, [ebp - 0xc]
mov edx, 0x65c3f0
call fcn.0040b9c8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x659b20
mov eax, dword [ebp - 0x104]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jle 0x659b76
mov eax, dword [ebp - 0xc]
cmp word [eax], 0x73
jne 0x659b76
mov word [ebp - 0x86], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x659b5e
mov eax, dword [ebp - 0x108]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x108]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.0040c4fc
push 0
mov ecx, 0x65c39c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
dec eax
je 0x659b9b
dec eax
je 0x659cb9
jmp 0x659e76
push 0
lea eax, [ebp - 0x1364]
push eax
mov ecx, 0x65c428
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ecx, dword [ebp - 0x1364]
lea eax, [ebp - 0x1360]
mov edx, 0x65c450
call fcn.0040c38c
mov eax, dword [ebp - 0x1360]
lea edx, [ebp - 8]
call fcn.00645914
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00428b58
test al, al
jne 0x659bf8
lea eax, [ebp - 8]
mov edx, dword [0x68a268]
call fcn.0040b9c8
lea edx, [ebp - 0x1368]
mov eax, dword [ebp - 8]
call fcn.006431f0
mov eax, dword [ebp - 0x1368]
mov dl, 1
call fcn.00428b58
test al, al
je 0x659cad
lea edx, [ebp - 0x136c]
mov eax, 0x65c478
call fcn.00645914
mov eax, dword [ebp - 0x136c]
mov dl, 1
call fcn.00428b58
test al, al
je 0x659cad
movzx eax, word [ebp - 0x86]
push eax
push 1
push 0
push 1
push 0x65c4b4
push dword [ebp - 8]
push 0x65c4c8
push dword [ebp - 0xc]
lea eax, [ebp - 0x1374]
mov edx, 4
call fcn.0040c414
mov eax, dword [ebp - 0x1374]
lea edx, [ebp - 0x1370]
call fcn.00645914
mov eax, dword [ebp - 0x1370]
push eax
lea edx, [ebp - 0x1378]
mov eax, 0x65c478
call fcn.00645914
mov eax, dword [ebp - 0x1378]
push eax
mov eax, dword [ebp - 0x58]
call fcn.0055b46c
pop edx
pop ecx
call fcn.0064f868
jmp 0x659e76
mov byte [0x68a229], 1
jmp 0x659e76
push 0
lea eax, [ebp - 0x137c]
push eax
mov ecx, 0x65c428
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x137c]
lea edx, [ebp - 8]
call fcn.00645914
cmp dword [ebp - 8], 0
je 0x659e6f
lea edx, [ebp - 0x1380]
mov eax, dword [ebp - 8]
call fcn.006568ec
cmp dword [ebp - 0x1380], 0
je 0x659e6f
lea edx, [ebp - 0x1384]
mov eax, 0x65c4dc
call fcn.00645914
mov eax, dword [ebp - 0x1384]
mov dl, 1
call fcn.00428b58
test al, al
je 0x659e6f
push 1
push 1
push 0
push 1
push 0x65c524
push dword [ebp - 8]
push 0x65c53c
lea edx, [ebp - 0x1390]
mov eax, dword [ebp - 8]
call fcn.006568ec
push dword [ebp - 0x1390]
push 0x65c574
lea eax, [ebp - 0x138c]
mov edx, 5
call fcn.0040c414
mov eax, dword [ebp - 0x138c]
lea edx, [ebp - 0x1388]
call fcn.00645914
mov eax, dword [ebp - 0x1388]
push eax
lea edx, [ebp - 0x1394]
mov eax, 0x65c4dc
call fcn.00645914
mov eax, dword [ebp - 0x1394]
push eax
mov eax, dword [ebp - 0x58]
call fcn.0055b46c
pop edx
pop ecx
call fcn.0064f868
test al, al
je 0x659e66
mov eax, dword [0x68a260]
mov edx, 0x65bbe4
call fcn.0040c4c4
je 0x659e5d
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
movzx eax, word [ebp - 0x86]
push eax
push 1
push 0
push 1
push 0x65c584
lea edx, [ebp - 0x13a0]
mov eax, dword [ebp - 8]
call fcn.006568ec
push dword [ebp - 0x13a0]
push 0x65c4c8
push dword [ebp - 0xc]
lea eax, [ebp - 0x139c]
mov edx, 4
call fcn.0040c414
mov eax, dword [ebp - 0x139c]
lea edx, [ebp - 0x1398]
call fcn.00645914
mov eax, dword [ebp - 0x1398]
push eax
lea edx, [ebp - 0x13a4]
mov eax, 0x65c478
call fcn.00645914
mov eax, dword [ebp - 0x13a4]
push eax
mov eax, dword [ebp - 0x58]
call fcn.0055b46c
pop edx
pop ecx
call fcn.0064f868
test al, al
jne 0x659e76
mov byte [0x68a229], 1
jmp 0x659e76
mov byte [0x68a229], 1
jmp 0x659e76
mov byte [0x68a229], 1
jmp 0x659e76
mov byte [0x68a229], 1
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x4bc]
cmp byte [eax + 0x69], 0
je 0x659f80
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x4bc]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
je 0x659f80
push 0x65c5b8
lea eax, [ebp - 0x13a8]
push eax
mov ecx, 0x65c5f8
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13a8]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
mov ecx, dword [ebp - 4]
mov edx, 0x65c608
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x659f54
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x13ac]
push eax
lea ecx, [ebp - 0x13b0]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x13b0]
mov edx, 0x65c608
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13ac]
call fcn.0064d994
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x659f0f
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov ecx, dword [ebp - 4]
mov edx, 0x65c62c
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x65a069
push 0x65c64c
lea eax, [ebp - 0x13b4]
push eax
mov ecx, 0x65c694
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13b4]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x65a059
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
cmp byte [0x68a22c], 0
jne 0x65a059
push 0
lea eax, [ebp - 0x13b8]
push eax
lea ecx, [ebp - 0x13bc]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x13bc]
mov edx, 0x65c62c
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13b8]
call fcn.0064ac20
test al, al
je 0x65a059
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x65a007
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov eax, 0x68a278
call fcn.0040b590
mov edx, 0x65c6a4
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65a0fb
mov ecx, dword [ebp - 4]
mov edx, 0x65c6a4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
dec eax
test eax, eax
jl 0x65a0fb
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x13c0]
push eax
lea edx, [ebp - 0x13c4]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x13c4]
mov edx, 0x65c6a4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13c0]
call fcn.0064d2cc
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x65a0b9
push 0
mov ecx, 0x65b91c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65a172
push 0xffffffffffffffff
mov ecx, 0x65b948
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
test eax, eax
jne 0x65a172
cmp byte [0x68a226], 0
je 0x65a147
lea eax, [ebp - 8]
mov edx, 0x65c6b8
call fcn.0040b9c8
jmp 0x65a154
lea eax, [ebp - 8]
mov edx, 0x65c6e4
call fcn.0040b9c8
lea eax, [ebp - 0x13c8]
mov ecx, 0x65c710
mov edx, dword [ebp - 8]
call fcn.0040c38c
mov eax, dword [ebp - 0x13c8]
call fcn.0064ac20
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x4d8]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
je 0x65a1da
cmp byte [0x68a226], 0
je 0x65a19f
lea eax, [ebp - 8]
mov edx, 0x65c6b8
call fcn.0040b9c8
jmp 0x65a1ac
lea eax, [ebp - 8]
mov edx, 0x65c6e4
call fcn.0040b9c8
push dword [ebp - 8]
push 0x65c800
push dword [0x68a25c]
push 0x65c880
lea eax, [ebp - 0x13cc]
mov edx, 4
call fcn.0040c414
mov eax, dword [ebp - 0x13cc]
call fcn.0064ac20
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov ecx, dword [ebp - 4]
mov edx, 0x65c8b4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x65a2f3
push 0x65c64c
lea eax, [ebp - 0x13d0]
push eax
mov ecx, 0x65c694
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13d0]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x65a2a0
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x13d4]
push eax
lea ecx, [ebp - 0x13d8]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x13d8]
mov edx, 0x65c8b4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13d4]
call fcn.0064e818
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x65a25b
xor eax, eax
push ebp
push 0x65a2d9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x84]
push eax
push 0x1388
push 2
push 0x65c8d0
push 0
push 0x1a
push 0xffff
call sub.user32.dll_SendMessageTimeoutW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65a2e3
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
push 0x65c30c
lea eax, [ebp - 0x13dc]
push eax
mov ecx, 0x65c340
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13dc]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
mov edx, 0x65c8f4
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65a3bb
mov ecx, dword [ebp - 4]
mov edx, 0x65c8f4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
dec eax
test eax, eax
jl 0x65a3bb
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x13e0]
push eax
lea edx, [ebp - 0x13e4]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x13e4]
mov edx, 0x65c8f4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13e0]
call fcn.00650af0
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x65a379
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov edx, 0x65c910
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65a505
mov ecx, dword [ebp - 4]
mov edx, 0x65c910
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
dec eax
test eax, eax
jl 0x65a505
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x13e8]
push eax
lea edx, [ebp - 0x13ec]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x13ec]
mov edx, 0x65c910
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13e8]
mov ax, 5
call fcn.00652e78
cmp byte [0x68a22e], 0
je 0x65a46b
mov byte [0x68a229], 1
push ebp
call fcn.00656dbc
pop ecx
push 0
lea eax, [ebp - 0x13f0]
push eax
lea edx, [ebp - 0x13f4]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x13f4]
mov edx, 0x65c910
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13f0]
mov ax, 6
call fcn.00652e78
push 0x65c30c
lea eax, [ebp - 0x13f8]
push eax
mov ecx, 0x65c340
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13f8]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551860
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x65a419
cmp dword [0x68a25c], 0
je 0x65a676
lea edx, [ebp - 0x13fc]
mov eax, dword [0x68a25c]
call fcn.006431f0
mov eax, dword [ebp - 0x13fc]
mov dl, 1
call fcn.00428b58
test al, al
je 0x65a676
push 0
mov ecx, 0x65c930
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65a5e4
lea edx, [ebp - 0x1400]
mov eax, dword [0x68a25c]
call fcn.004294a0
mov ecx, dword [ebp - 0x1400]
lea eax, [ebp - 8]
mov edx, 0x65c95c
call fcn.0040c38c
push dword [ebp - 8]
push 0x65c9ec
push dword [0x68a25c]
push 0x65c880
lea eax, [ebp - 0x1404]
mov edx, 4
call fcn.0040c414
mov eax, dword [ebp - 0x1404]
call fcn.0064ac20
push dword [ebp - 8]
push 0x65ca14
lea edx, [ebp - 0x140c]
mov eax, dword [0x68a25c]
call fcn.0042937c
push dword [ebp - 0x140c]
push 0x65c880
lea eax, [ebp - 0x1408]
mov edx, 4
call fcn.0040c414
mov eax, dword [ebp - 0x1408]
call fcn.0064ac20
mov eax, 0x65ca44
call fcn.00642e58
test al, al
je 0x65a62d
push 0x65ca6c
lea edx, [ebp - 0x1414]
mov eax, dword [0x68a25c]
call fcn.004294a0
push dword [ebp - 0x1414]
push 0x65cad0
lea eax, [ebp - 0x1410]
mov edx, 3
call fcn.0040c414
mov eax, dword [ebp - 0x1410]
call fcn.0064ac20
mov eax, 0x65cb34
call fcn.00642e58
test al, al
je 0x65a676
push 0x65ca6c
lea edx, [ebp - 0x141c]
mov eax, dword [0x68a25c]
call fcn.004294a0
push dword [ebp - 0x141c]
push 0x65cb58
lea eax, [ebp - 0x1418]
mov edx, 3
call fcn.0040c414
mov eax, dword [ebp - 0x1418]
call fcn.0064ac20
cmp byte [0x68a221], 0
je 0x65a6ad
xor eax, eax
push ebp
push 0x65a6a3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x68a2c4]
push eax
call dword [0x68a2c0]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65a6ad
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x464]
mov edx, 0x64
call fcn.0058f2e0
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
push 0x65c30c
lea eax, [ebp - 0x1420]
push eax
mov ecx, 0x65c340
mov edx, 0x65ac3c
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1420]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x460]
call fcn.00551860
cmp byte [0x68a222], 0
je 0x65a728
push 0
mov ecx, 0x65cbb8
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65a728
call fcn.00655584
xor eax, eax
push ebp
push 0x65a752
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x68a294]
call fcn.004097a0
mov eax, dword [ebp - 4]
call fcn.004097a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65a75c
xor eax, eax
push ebp
push 0x65a788
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x68a21c]
mov edx, dword [eax]
call dword [edx + 0x6c]
mov eax, dword [0x68a21c]
call fcn.004097a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65a792
cmp byte [0x68a222], 0
je 0x65a83a
push 0
lea edx, [ebp - 0x142c]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
push dword [ebp - 0x142c]
push 0x65ac80
lea ecx, [ebp - 0x1430]
mov edx, 0x65ac90
mov eax, dword [0x68a274]
call fcn.0042925c
push dword [ebp - 0x1430]
lea eax, [ebp - 0x1428]
mov edx, 3
call fcn.0040c414
mov eax, dword [ebp - 0x1428]
lea edx, [ebp - 0x1424]
call fcn.006431f0
mov eax, dword [ebp - 0x1424]
call fcn.0040c128
push eax
lea eax, [ebp - 0x1434]
mov ecx, 0x65aca8
mov edx, dword [0x68a254]
call fcn.0040c38c
mov eax, dword [ebp - 0x1434]
call fcn.0040c128
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
jne 0x65a83a
mov byte [0x68a229], 1
cmp byte [0x68a222], 0
jne 0x65a915
push 0
mov ecx, 0x65b02c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65a915
lea edx, [ebp - 0x143c]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
lea eax, [ebp - 0x143c]
mov edx, 0x65cbe0
call fcn.0040c334
mov eax, dword [ebp - 0x143c]
lea edx, [ebp - 0x1438]
call fcn.006431f0
mov eax, dword [ebp - 0x1438]
mov dl, 1
call fcn.00428b58
test al, al
jne 0x65a915
push 0
lea edx, [ebp - 0x1444]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
lea eax, [ebp - 0x1444]
mov edx, 0x65cbe0
call fcn.0040c334
mov eax, dword [ebp - 0x1444]
lea edx, [ebp - 0x1440]
call fcn.006431f0
mov eax, dword [ebp - 0x1440]
call fcn.0040c128
push eax
lea eax, [ebp - 0x1448]
mov ecx, 0x65aca8
mov edx, dword [0x68a254]
call fcn.0040c38c
mov eax, dword [ebp - 0x1448]
call fcn.0040c128
push eax
call sub.kernel32.dll_CopyFileW
push 0
mov ecx, 0x65b02c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65a9d5
push 0
mov ecx, 0x65b91c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65a9d5
push 0xffffffffffffffff
mov ecx, 0x65b948
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jle 0x65a9d5
push 5
push 0
push 1
push 1
lea edx, [ebp - 0x1450]
mov eax, dword [ebp - 0x60]
call fcn.00427eb4
mov ecx, dword [ebp - 0x1450]
lea eax, [ebp - 0x144c]
mov edx, 0x65cc08
call fcn.0040c38c
mov eax, dword [ebp - 0x144c]
push eax
lea edx, [ebp - 0x1454]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x450]
call fcn.0055180c
lea eax, [ebp - 0x1454]
mov edx, 0x65cc34
call fcn.0040c334
mov edx, dword [ebp - 0x1454]
xor eax, eax
pop ecx
call fcn.0064f868
mov byte [0x68a22a], 1
mov eax, dword [0x68238c]
mov eax, dword [eax]
call fcn.00610684
cmp byte [0x68a223], 0
jne 0x65aa12
push 0
mov ecx, 0x65cc5c
mov edx, 0x65abe8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65aa12
push 0
call sub.user32.dll_MessageBeep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x65ab98
lea eax, [ebp - 0x1454]
call fcn.0040b590
lea eax, [ebp - 0x1450]
mov edx, 3
call fcn.0040b5f0
lea eax, [ebp - 0x1444]
call fcn.0040b590
lea eax, [ebp - 0x1440]
call fcn.0040b590
lea eax, [ebp - 0x143c]
call fcn.0040b590
lea eax, [ebp - 0x1438]
mov edx, 3
call fcn.0040b5f0
lea eax, [ebp - 0x142c]
mov edx, 2
call fcn.0040b5f0
lea eax, [ebp - 0x1424]
mov edx, 0x34
call fcn.0040b5f0
lea eax, [ebp - 0x1354]
mov edx, 2
call fcn.0040b5f0
lea eax, [ebp - 0x134c]
mov edx, 0x22
call fcn.0040b5f0
lea eax, [ebp - 0x12c4]
mov edx, 0x29
call fcn.0040b5f0
lea eax, [ebp - 0x1218]
mov edx, 0x14
call fcn.0040b5f0
lea eax, [ebp - 0x11c8]
call fcn.0040b590
lea eax, [ebp - 0x11c4]
call fcn.0040b590
lea eax, [ebp - 0x11c0]
mov edx, 6
call fcn.0040b5f0
lea eax, [ebp - 0x11a8]
mov edx, 3
call fcn.0040b5f0
lea eax, [ebp - 0x119c]
call fcn.0040b590
lea eax, [ebp - 0x1198]
mov edx, 0x1b
call fcn.0040b5f0
lea eax, [ebp - 0x112c]
mov edx, 2
call fcn.0040b5f0
lea eax, [ebp - 0x1124]
call fcn.0040b590
lea eax, [ebp - 0x1120]
mov edx, 3
call fcn.0040b5f0
lea eax, [ebp - 0x1114]
call fcn.0040b590
lea eax, [ebp - 0x1110]
mov edx, 2
call fcn.0040b5f0
lea eax, [ebp - 0x52]
mov edx, dword [0x61eb64]
call fcn.0040cca4
lea eax, [ebp - 0x1c]
mov edx, dword [0x656d58]
call fcn.0040cca4
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.0040b5f0
pop eax
jmp eax