Function at 0x657934
Capabilities:
Authenticate hmac
Copy file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x28c
push 0
push 0
dec ecx
jne 0x65793c
push ebx
push esi
push edi
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x18]
mov edx, dword [0x65771c]
call fcn.0040c7a0
lea eax, [ebp - 0x4e]
mov edx, dword [0x61ea4c]
call fcn.0040c7a0
xor eax, eax
push ebp
push 0x65b57d
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x68a22d], 0
mov byte [0x68a22b], 0
lea edx, [ebp - 0x1124]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x1124]
lea edx, [ebp - 0x1120]
call fcn.00427464
mov eax, dword [ebp - 0x1120]
lea edx, [ebp - 0x111c]
call fcn.004312b4
mov edx, dword [ebp - 0x111c]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.00551748
push 0
lea eax, [ebp - 0x112c]
push eax
mov ecx, 0x65b59c
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x112c]
lea edx, [ebp - 0x1128]
call fcn.00645518
mov edx, dword [ebp - 0x1128]
mov eax, 0x68a25c
call fcn.0040b848
push 0
mov ecx, 0x65b5d0
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [0x68a230], al
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x464]
xor edx, edx
call fcn.0058f1c8
push 0x65b5f8
lea eax, [ebp - 0x1130]
push eax
mov ecx, 0x65b620
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1130]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
xor eax, eax
mov dword [0x68a2a4], eax
xor eax, eax
mov dword [0x68a2a8], eax
xor eax, eax
mov dword [0x68a2ac], eax
xor eax, eax
mov dword [0x68a2b0], eax
cmp byte [0x68a231], 0
je 0x657c66
cmp byte [0x68a229], 0
jne 0x657c66
lea edx, [ebp - 0x1134]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
push dword [ebp - 0x1134]
push 0x65b650
lea ecx, [ebp - 0x1138]
mov edx, 0x65b660
mov eax, dword [0x68a274]
call fcn.00429124
push dword [ebp - 0x1138]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040c2dc
lea edx, [ebp - 0x113c]
mov eax, dword [ebp - 4]
call fcn.00642150
mov eax, dword [ebp - 0x113c]
mov dl, 1
call fcn.00428a20
test al, al
je 0x657c66
push 0
lea eax, [ebp - 0x1140]
mov ecx, 0x65b678
mov edx, dword [0x68a254]
call fcn.0040c254
mov eax, dword [ebp - 0x1140]
call fcn.0040bff0
push eax
lea edx, [ebp - 0x1144]
mov eax, dword [ebp - 4]
call fcn.00642150
mov eax, dword [ebp - 0x1144]
call fcn.0040bff0
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
je 0x657c66
lea eax, [ebp - 0x1148]
mov ecx, 0x65b678
mov edx, dword [0x68a254]
call fcn.0040c254
mov ecx, dword [ebp - 0x1148]
mov dl, 1
mov eax, dword [0x50f384]
call fcn.00512e94
mov dword [0x68a21c], eax
mov ecx, dword [0x68a294]
mov edx, 0x65b6a4
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x657bfc
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x114c]
mov eax, dword [0x68a294]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x114c]
push eax
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
pop eax
call fcn.00428010
inc eax
mov dword [0x68a2ac], eax
mov ecx, dword [0x68a294]
mov edx, 0x65b6bc
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x657c5c
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x1150]
mov eax, dword [0x68a294]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1150]
push eax
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
pop eax
call fcn.00428010
inc eax
mov dword [0x68a2b0], eax
mov eax, dword [0x68a21c]
call fcn.00409668
call fcn.004379c0
push eax
lea eax, [ebp - 0x1154]
mov ecx, 0x65b678
mov edx, dword [0x68a254]
call fcn.0040c254
mov ecx, dword [ebp - 0x1154]
mov dl, 1
mov eax, dword [0x50f384]
call fcn.00512ed8
mov dword [0x68a21c], eax
cmp byte [0x68a231], 0
je 0x657d1f
cmp byte [0x68a229], 0
jne 0x657d1f
mov eax, 0x65b6e8
call fcn.00641db8
test al, al
jne 0x657d1f
mov edx, 0x65b718
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x657cdb
mov edx, 0x65b718
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov edx, 0x65b750
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x657cfd
mov edx, 0x65b750
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov edx, 0x65b784
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x657d1f
mov edx, 0x65b784
mov eax, dword [0x68a21c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
push 0
mov ecx, 0x65b7b8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x657d57
push 0
mov ecx, 0x65b7dc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
jne 0x657f13
lea edx, [ebp - 0x1158]
mov al, 1
call fcn.0064430c
mov eax, dword [ebp - 0x1158]
push eax
mov ecx, 0x65b804
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, 0x65b83c
call fcn.00641db8
test al, al
jne 0x657de7
push 0
lea eax, [ebp - 0x1164]
push eax
mov ecx, 0x65b864
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1164]
lea edx, [ebp - 0x1160]
call fcn.00643fe0
mov eax, dword [ebp - 0x1160]
lea edx, [ebp - 0x115c]
call fcn.00645518
mov eax, dword [ebp - 0x115c]
push eax
mov ecx, 0x65b864
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x1168]
mov al, 2
call fcn.0064430c
mov eax, dword [ebp - 0x1168]
push eax
mov ecx, 0x65b888
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
mov dword [ebp - 0x5c], eax
push 0
lea eax, [ebp - 0x1170]
push eax
lea edx, [ebp - 0x1174]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x1174]
mov edx, 0x65b8ac
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1170]
lea edx, [ebp - 0x116c]
call fcn.00645518
mov eax, dword [ebp - 0x116c]
push eax
lea edx, [ebp - 0x1178]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x1178]
mov edx, 0x65b8cc
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 0xb
jne 0x657e14
push 0
mov ecx, 0x65b8ec
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x657f13
xor eax, eax
mov dword [ebp - 0x5c], eax
push 0
lea eax, [ebp - 0x1180]
push eax
lea edx, [ebp - 0x1184]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x1184]
mov edx, 0x65b8ec
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1180]
lea edx, [ebp - 0x117c]
call fcn.00645518
mov eax, dword [ebp - 0x117c]
push eax
lea edx, [ebp - 0x1188]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x1188]
mov edx, 0x65b8ec
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 0x22
jne 0x657ea3
push 0
lea eax, [ebp - 0x1194]
push eax
mov ecx, 0x65b908
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1194]
lea edx, [ebp - 0x1190]
call fcn.00643fe0
mov eax, dword [ebp - 0x1190]
lea edx, [ebp - 0x118c]
call fcn.00645518
mov eax, dword [ebp - 0x118c]
push eax
mov ecx, 0x65b908
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
movzx eax, byte [0x68a226]
push eax
mov ecx, 0x65b920
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
movzx eax, byte [0x68a224]
push eax
mov ecx, 0x65b940
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
movzx eax, byte [0x68a220]
push eax
mov ecx, 0x65b958
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
lea edx, [ebp - 0x1198]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x1198]
push eax
mov ecx, 0x65b96c
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp byte [0x68a231], 0
je 0x658025
mov ecx, 0x65b990
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x658025
mov ecx, 0x65b990
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
cmp dword [0x68a25c], 0
je 0x658048
mov eax, dword [0x68a25c]
push eax
mov ecx, 0x65b59c
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x71], 0
mov edx, 0x65b9bc
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x658117
mov ecx, dword [0x68a294]
mov edx, 0x65b9bc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x658117
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x11a0]
push eax
lea edx, [ebp - 0x11a4]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x11a4]
mov edx, 0x65b9bc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11a0]
lea edx, [ebp - 0x119c]
call fcn.0042705c
mov eax, dword [ebp - 0x119c]
mov dword [ebp - 0x90], eax
mov ecx, 1
mov edx, dword [ebp - 0x90]
mov eax, 0x65b9dc
call fcn.0040c520
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jle 0x65810c
mov byte [ebp - 0x71], 1
jmp 0x658117
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x658099
cmp byte [ebp - 0x71], 0
je 0x658137
mov eax, dword [0x68a264]
push eax
mov ecx, 0x65ba04
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp byte [0x68a222], 0
je 0x658860
cmp byte [0x68a223], 0
je 0x658173
mov eax, 0x65ba30
call fcn.00641db8
test al, al
je 0x658173
push 1
mov ecx, 0x65ba58
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x65819e
push 0
mov ecx, 0x65ba7c
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65ba58
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65baa8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65baa8
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65baa8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658483
lea edx, [ebp - 0x11a8]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x11a8]
mov dword [ebp - 0x98], eax
mov edx, 0x65bad0
mov eax, dword [ebp - 0x98]
call fcn.004271fc
test eax, eax
sete byte [ebp - 0x99]
cmp byte [ebp - 0x99], 0
je 0x658232
mov byte [ebp - 0xa2], 1
jmp 0x658278
lea edx, [ebp - 0x11ac]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0xa0], eax
mov edx, 0x65bae4
mov eax, dword [ebp - 0xa0]
call fcn.004271fc
test eax, eax
sete byte [ebp - 0xa1]
movzx eax, byte [ebp - 0xa1]
mov byte [ebp - 0xa2], al
cmp byte [ebp - 0xa2], 0
je 0x65828a
mov byte [ebp - 0xaa], 1
jmp 0x6582d0
lea edx, [ebp - 0x11b0]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x11b0]
mov dword [ebp - 0xa8], eax
mov edx, 0x65bb08
mov eax, dword [ebp - 0xa8]
call fcn.004271fc
test eax, eax
sete byte [ebp - 0xa9]
movzx eax, byte [ebp - 0xa9]
mov byte [ebp - 0xaa], al
cmp byte [ebp - 0xaa], 0
je 0x6582e2
mov byte [ebp - 0xb2], 1
jmp 0x658328
lea edx, [ebp - 0x11b4]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x11b4]
mov dword [ebp - 0xb0], eax
mov edx, 0x65bb3c
mov eax, dword [ebp - 0xb0]
call fcn.004271fc
test eax, eax
sete byte [ebp - 0xb1]
movzx eax, byte [ebp - 0xb1]
mov byte [ebp - 0xb2], al
cmp byte [ebp - 0xb2], 0
je 0x65833a
mov byte [ebp - 0xba], 1
jmp 0x658380
lea edx, [ebp - 0x11b8]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x11b8]
mov dword [ebp - 0xb8], eax
mov edx, 0x65bb6c
mov eax, dword [ebp - 0xb8]
call fcn.004271fc
test eax, eax
sete byte [ebp - 0xb9]
movzx eax, byte [ebp - 0xb9]
mov byte [ebp - 0xba], al
cmp byte [ebp - 0xba], 0
je 0x658392
mov byte [ebp - 0xc6], 1
jmp 0x6583f2
lea edx, [ebp - 0x11bc]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x11bc]
mov dword [ebp - 0xc0], eax
lea edx, [ebp - 0x11c0]
mov al, 0x15
call fcn.0064430c
mov eax, dword [ebp - 0x11c0]
mov dword [ebp - 0xc4], eax
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc0]
call fcn.004271fc
test eax, eax
sete byte [ebp - 0xc5]
movzx eax, byte [ebp - 0xc5]
mov byte [ebp - 0xc6], al
cmp byte [ebp - 0xc6], 0
je 0x658404
mov byte [ebp - 0xd2], 1
jmp 0x658464
lea edx, [ebp - 0x11c4]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
mov eax, dword [ebp - 0x11c4]
mov dword [ebp - 0xcc], eax
lea edx, [ebp - 0x11c8]
mov al, 0x16
call fcn.0064430c
mov eax, dword [ebp - 0x11c8]
mov dword [ebp - 0xd0], eax
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xcc]
call fcn.004271fc
test eax, eax
sete byte [ebp - 0xd1]
movzx eax, byte [ebp - 0xd1]
mov byte [ebp - 0xd2], al
cmp byte [ebp - 0xd2], 0
je 0x658483
push 0
mov ecx, 0x65baa8
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65bba8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65bba8
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65bbd8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658513
push 0
lea eax, [ebp - 0x11d0]
push eax
mov ecx, 0x65bc08
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11d0]
lea edx, [ebp - 0x11cc]
call fcn.00645518
mov eax, dword [ebp - 0x11cc]
push eax
mov ecx, 0x65bc08
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x658529
push 0
mov ecx, 0x65bc08
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65bc48
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65859f
push 0
lea eax, [ebp - 0x11dc]
push eax
mov ecx, 0x65bc7c
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11dc]
lea edx, [ebp - 0x11d8]
call fcn.00643fe0
mov eax, dword [ebp - 0x11d8]
lea edx, [ebp - 0x11d4]
call fcn.00645518
mov eax, dword [ebp - 0x11d4]
push eax
mov ecx, 0x65bc7c
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x6585b5
push 0
mov ecx, 0x65bc7c
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65bca4
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65bca4
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65bccc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x6586bd
push 0
lea eax, [ebp - 0x11e4]
push eax
mov ecx, 0x65bcfc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11e4]
lea edx, [ebp - 0x11e0]
call fcn.00645518
mov eax, dword [ebp - 0x11e0]
push eax
mov ecx, 0x65bd34
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
lea eax, [ebp - 0x11ec]
push eax
mov ecx, 0x65bd54
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11ec]
lea edx, [ebp - 0x11e8]
call fcn.00645518
mov eax, dword [ebp - 0x11e8]
push eax
mov ecx, 0x65bd8c
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65bdb4
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65bdf0
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x6586e9
mov ecx, 0x65bd34
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x6586e9
mov ecx, 0x65bd34
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65be18
call fcn.00641db8
push eax
mov ecx, 0x65be44
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
mov eax, 0x65be6c
call fcn.00641db8
push eax
mov ecx, 0x65be9c
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
mov eax, 0x65becc
call fcn.00641db8
push eax
mov ecx, 0x65bf00
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
mov eax, 0x65bf30
call fcn.00641db8
test al, al
je 0x65876c
push 1
mov ecx, 0x65bf60
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x658798
mov ecx, 0x65bf60
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x658798
mov ecx, 0x65bf60
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65bf90
call fcn.00641db8
test al, al
je 0x6587be
push 1
mov ecx, 0x65bfc4
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x6587ea
mov ecx, 0x65bfc4
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x6587ea
mov ecx, 0x65bfc4
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65bff8
call fcn.00641db8
test al, al
je 0x658810
push 1
mov ecx, 0x65c034
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x65883c
mov ecx, 0x65c034
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x70]
test al, al
je 0x65883c
mov ecx, 0x65c034
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x68]
mov eax, 0x65c06c
call fcn.00641db8
test al, al
je 0x658860
push 1
mov ecx, 0x65c094
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
cmp byte [0x68a229], 0
jne 0x658bef
push 0
mov ecx, 0x65b8ec
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658bef
push 0
lea eax, [ebp - 0x11f4]
push eax
mov ecx, 0x65c0b4
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11f4]
lea edx, [ebp - 0x11f0]
call fcn.00645518
mov eax, dword [ebp - 0x11f0]
push eax
mov ecx, 0x65c0b4
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
mov ecx, 0x65c0d4
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65c0d4
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65c0f8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658bef
push 1
mov ecx, 0x65c0f8
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65c120
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65c120
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65c150
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65c150
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65c180
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65c180
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65c1a8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65c1a8
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65c1dc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65c1dc
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65c1dc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658a81
push 0xffffffffffffffff
mov ecx, 0x65c208
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65c208
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65c234
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658a97
push 1
mov ecx, 0x65c234
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
jmp 0x658a97
push 0
mov ecx, 0x65c208
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
mov ecx, 0x65c264
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658ac7
push 1
mov ecx, 0x65c264
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65c298
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push eax
mov ecx, 0x65c298
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
push 0
mov ecx, 0x65c298
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x658b37
push 0
mov ecx, 0x65c2d4
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
push eax
mov ecx, 0x65c2d4
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0x14]
push 0
lea eax, [ebp - 0x11fc]
push eax
mov ecx, 0x65c304
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x11fc]
lea edx, [ebp - 0x11f8]
call fcn.00645518
mov eax, dword [ebp - 0x11f8]
push eax
mov ecx, 0x65c304
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0
lea eax, [ebp - 0x1200]
push eax
mov ecx, 0x65c334
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 0x1200], 0
je 0x658bef
push 0
lea eax, [ebp - 0x1208]
push eax
mov ecx, 0x65c334
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1208]
lea edx, [ebp - 0x1204]
call fcn.00645518
mov eax, dword [ebp - 0x1204]
push eax
mov ecx, 0x65c334
mov edx, 0x65b820
mov eax, dword [0x68a21c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x65c364
lea eax, [ebp - 0x120c]
push eax
mov ecx, 0x65c398
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x120c]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
xor eax, eax
push ebp
push 0x658cb2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x20
lea edx, [ebp - 0x1210]
xor eax, eax
call fcn.00407540
mov ecx, dword [ebp - 0x1210]
mov dl, 1
mov eax, dword [0x48b15c]
call fcn.004b635c
mov dword [0x68a1e4], eax
mov eax, dword [0x68a208]
xor edx, edx
push edx
push eax
mov eax, dword [0x68a1e4]
call fcn.004b42bc
push 0xff00
lea eax, [ebp - 0x1214]
mov ecx, 0x65c3ac
mov edx, dword [0x68a254]
call fcn.0040c254
mov ecx, dword [ebp - 0x1214]
mov dl, 1
mov eax, dword [0x48b15c]
call fcn.004b635c
mov dword [0x68a1e8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x658cc8
xor esi, esi
cmp byte [0x68a22d], 0
je 0x658cf3
mov eax, dword [0x68a1e8]
call fcn.00409668
mov eax, dword [0x68a1e4]
call fcn.00409668
xor edx, edx
mov eax, 0xb
call fcn.00657780
mov eax, dword [0x68a20c]
sub eax, esi
cmp eax, 0x1000
jb 0x658d1a
lea edx, [ebp - 0x1118]
mov ecx, 0x1000
mov eax, dword [0x68a1e4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, eax
jmp 0x658d34
mov ecx, dword [0x68a20c]
sub ecx, esi
lea edx, [ebp - 0x1118]
mov eax, dword [0x68a1e4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ebx, eax
lea edx, [ebp - 0x1118]
mov ecx, ebx
mov eax, dword [0x68a1e8]
mov edi, dword [eax]
call dword [edi + 0x10]
add esi, ebx
mov eax, dword [0x68a20c]
mov dword [ebp - 0x121c], eax
xor eax, eax
mov dword [ebp - 0x1218], eax
fild qword [ebp - 0x121c]
fdivr dword [0x65c3cc]
mov dword [ebp - 0x121c], esi
xor eax, eax
mov dword [ebp - 0x1218], eax
fild qword [ebp - 0x121c]
fmulp st(1)
call fcn.00407bd0
mov edx, eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x464]
call fcn.0058f1c8
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x464]
call fcn.00551d3c
cmp ebx, 0x1000
je 0x658cca
mov eax, dword [0x68a1e8]
call fcn.00409668
mov eax, dword [0x68a1e4]
call fcn.00409668
push 0x65c3dc
lea eax, [ebp - 0x1220]
push eax
mov ecx, 0x65c40c
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1220]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
mov dl, 1
mov eax, dword [0x61f1a0]
call fcn.006260a4
mov dword [0x68a1ec], eax
xor eax, eax
push ebp
push 0x658e51
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1224]
mov ecx, 0x65c3ac
mov edx, dword [0x68a254]
call fcn.0040c254
mov edx, dword [ebp - 0x1224]
mov cl, 1
mov eax, dword [0x68a1ec]
call fcn.00626158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x658e67
mov byte [ebp - 0x79], 0
push 0
mov ecx, 0x65c41c
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [ebp - 0x68], eax
mov eax, 0x65c440
call fcn.00641db8
xor al, 1
mov byte [ebp - 0x75], al
mov eax, 0x65c468
call fcn.00641db8
xor al, 1
mov byte [ebp - 0x77], al
mov eax, 0x65c490
call fcn.00641db8
mov byte [ebp - 0x76], al
mov eax, 0x65c4bc
call fcn.00641db8
mov byte [0x68a228], al
mov eax, 0x65c4e4
call fcn.00641db8
xor al, 1
mov byte [0x68a236], al
mov eax, 0x65c518
call fcn.00641db8
xor al, 1
mov byte [0x68a237], al
mov eax, 0x65c540
call fcn.00641db8
mov byte [0x68a238], al
mov eax, 0x65c570
call fcn.00641db8
mov byte [ebp - 0x78], al
mov byte [0x68a233], 0
mov byte [0x68a234], 0
lea eax, [ebp - 0xc]
call fcn.0040b458
push 0
mov ecx, 0x65c5a8
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [0x68a23c], eax
push 0
mov ecx, 0x65c5cc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [0x68a240], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x4e4]
cmp byte [eax + 0x69], 0
je 0x65906a
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x4e8]
mov eax, dword [eax + 0x2c0]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x65906a
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x4e8]
mov edx, dword [ebp - 0x5c]
call fcn.0063f840
test al, al
jne 0x65905b
lea ecx, [ebp - 4]
mov edx, 2
mov eax, dword [ebp - 0x5c]
call fcn.00657524
cmp dword [ebp - 4], 0
je 0x65905b
lea edx, [ebp - 0x1228]
mov eax, dword [ebp - 4]
call fcn.0042705c
mov edx, dword [ebp - 0x1228]
lea eax, [ebp - 4]
call fcn.0040b890
mov eax, dword [ebp - 4]
mov edx, 0x65c5f0
call fcn.0040c38c
jne 0x658fed
mov byte [0x68a233], 1
jmp 0x65905b
mov eax, dword [ebp - 4]
mov edx, 0x65c614
call fcn.0040c38c
jne 0x659005
mov byte [0x68a234], 1
jmp 0x65905b
mov eax, dword [ebp - 4]
mov edx, 0x65c638
call fcn.0040c38c
jne 0x659024
mov byte [0x68a233], 1
mov byte [0x68a234], 1
jmp 0x65905b
mov eax, dword [ebp - 4]
mov edx, 0x65c658
call fcn.0040c38c
jne 0x659043
mov byte [0x68a233], 1
mov byte [0x68a234], 1
jmp 0x65905b
push dword [ebp - 0xc]
push dword [ebp - 4]
push 0x65c67c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040c2dc
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x658f86
cmp dword [ebp - 0xc], 0
setne byte [ebp - 0x73]
push 0xffffffffffffffff
mov ecx, 0x65c68c
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x68]
dec eax
test eax, eax
jl 0x65a174
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
cmp byte [0x68a22d], 0
je 0x65910e
cmp dword [ebp - 0x70], 0xffffffff
je 0x6590f8
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x122c]
mov eax, dword [ebp - 0x70]
call fcn.00427d7c
mov eax, dword [ebp - 0x122c]
push eax
lea eax, [ebp - 0x1230]
mov ecx, 0x65c6b8
mov edx, dword [0x68a254]
call fcn.0040c254
mov ecx, dword [ebp - 0x1230]
mov eax, dword [0x68a1ec]
pop edx
call fcn.006272a0
mov eax, dword [0x68a1ec]
call fcn.00409668
mov dl, 1
mov eax, 0xb
call fcn.00657780
cmp byte [0x68a233], 0
je 0x659126
mov eax, dword [ebp - 0x5c]
cmp eax, dword [0x68a23c]
jl 0x65a165
push 0
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0x1234]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x1234]
mov edx, 0x65b6a4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 4], 0
jne 0x659159
mov al, 1
jmp 0x65917b
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x65c6e4
call fcn.0040c520
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
sete al
test al, al
jne 0x65a165
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x65c6e4
call fcn.0040c520
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0xdc]
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040c3c4
cmp byte [0x68a234], 0
je 0x65920f
mov eax, dword [ebp - 0x5c]
cmp eax, dword [0x68a23c]
jl 0x65920f
mov eax, dword [ebp - 0x18]
mov edx, 0x65c6f4
call fcn.0040c38c
je 0x65920f
mov eax, dword [ebp - 0x18]
mov edx, 0x65c734
call fcn.0040c38c
je 0x65920f
lea eax, [ebp - 0x1238]
mov ecx, dword [0x68a274]
mov edx, 0x65c778
call fcn.0040c254
mov edx, dword [ebp - 0x1238]
mov eax, dword [ebp - 0x18]
call fcn.0040c38c
jne 0x65a165
cmp byte [ebp - 0x73], 0
je 0x6592f0
mov byte [ebp - 0x74], 0
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.0040b890
jmp 0x6592ca
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x65c67c
call fcn.0040c520
mov esi, eax
lea eax, [ebp - 0x123c]
push eax
mov ecx, esi
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0040c3c4
mov edi, dword [ebp - 0x123c]
lea edx, [ebp - 0x1240]
mov eax, dword [ebp - 0x18]
call fcn.0042705c
mov eax, dword [ebp - 0x1240]
mov dword [ebp - 0xe0], eax
mov ecx, 1
mov edx, dword [ebp - 0xe0]
mov eax, edi
call fcn.0040c520
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jle 0x65929f
mov byte [ebp - 0x74], 1
jmp 0x6592e6
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x65c67c
call fcn.0040c520
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0xe8]
mov edx, 1
call fcn.0040c40c
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x65c67c
call fcn.0040c520
mov ebx, eax
test ebx, ebx
jg 0x65922d
cmp byte [ebp - 0x74], 0
jne 0x65a165
lea edx, [ebp - 0x1244]
mov eax, dword [ebp - 0x18]
call fcn.00645518
mov edx, dword [ebp - 0x1244]
lea eax, [ebp - 0x18]
call fcn.0040b890
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x65c6e4
call fcn.0040c520
mov dword [ebp - 0xec], eax
lea eax, [ebp - 4]
mov ecx, dword [ebp - 0xec]
mov edx, 1
call fcn.0040c40c
cmp dword [ebp - 0x18], 0
jne 0x659341
mov al, 1
jmp 0x65936e
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x659364
mov eax, dword [ebp - 0xf0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
setl al
test al, al
jne 0x65a165
lea eax, [ebp - 0x1248]
mov edx, dword [ebp - 4]
movzx edx, word [edx]
call fcn.0040c010
mov eax, dword [ebp - 0x1248]
mov edx, 1
call fcn.00428010
mov byte [ebp - 0x14], al
mov eax, dword [ebp - 4]
cmp word [eax + 2], 0x31
sete al
mov byte [ebp - 0x13], al
cmp byte [0x68a229], 0
je 0x65943e
lea edx, [ebp - 0x124c]
mov eax, dword [ebp - 0x18]
call fcn.0042705c
mov eax, dword [ebp - 0x124c]
mov dword [ebp - 0xf4], eax
mov ecx, 1
mov edx, dword [ebp - 0xf4]
mov eax, 0x65c7a0
call fcn.0040c520
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jle 0x6593f7
mov al, 1
jmp 0x659436
lea edx, [ebp - 0x1250]
mov eax, dword [ebp - 0x18]
call fcn.0042705c
mov eax, dword [ebp - 0x1250]
mov dword [ebp - 0xfc], eax
mov ecx, 1
mov edx, dword [ebp - 0xfc]
mov eax, 0x65c7c8
call fcn.0040c520
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
setg al
test al, al
jne 0x65a165
xor eax, eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x65944f
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
cmp word [edx + eax*2 - 2], 0x5c
je 0x659787
cmp byte [0x68a230], 0
jne 0x659489
lea edx, [ebp - 0x1254]
mov eax, dword [ebp - 0x18]
call fcn.00647904
mov edx, dword [ebp - 0x1254]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
call fcn.00551748
fild dword [ebp - 0x68]
fdivr dword [0x65c7e0]
fild dword [ebp - 0x5c]
fmulp st(1)
call fcn.00407bd0
mov edx, eax
add edx, 0x1e
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x464]
call fcn.0058f1c8
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
lea edx, [ebp - 0x1258]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x1258]
mov dl, 1
call fcn.00428a20
test al, al
je 0x659787
movzx eax, byte [ebp - 0x13]
and al, byte [ebp - 0x78]
je 0x6594eb
mov byte [ebp - 0x13], 0
cmp byte [ebp - 0x14], 0
jne case.0x659564.0
cmp byte [0x68a223], 0
je 0x659507
mov byte [ebp - 0x14], 1
jmp case.0x659564.0
cmp byte [ebp - 0x79], 0
jne 0x6595b8
push 0
push 0
lea eax, [ebp - 0x1260]
push eax
mov ecx, 0x65b620
mov edx, 0x65b8cc
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1260]
lea ecx, [ebp - 0x125c]
mov edx, dword [ebp - 0x18]
call fcn.00646d00
mov eax, dword [ebp - 0x125c]
movzx ecx, word [0x65c7e4]
xor edx, edx
call fcn.005a3330
cmp eax, 0xe
ja case.0x659564.0
movzx eax, byte [eax + 0x65956b]
jmp dword [eax*4 + 0x65957a]
mov byte [ebp - 0x14], 1
jmp case.0x659564.0
mov byte [ebp - 0x14], 3
jmp case.0x659564.0
mov byte [ebp - 0x14], 1
mov byte [ebp - 0x79], 1
jmp case.0x659564.0
mov byte [ebp - 0x14], 3
mov byte [ebp - 0x79], 3
jmp case.0x659564.0
mov byte [ebp - 0x14], 3
jmp case.0x659564.0
movzx eax, byte [ebp - 0x79]
mov byte [ebp - 0x14], al
cmp byte [ebp - 0x14], 2
jne 0x6596b3
xor eax, eax
push ebp
push 0x6596a5
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x4e]
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x68a1ec]
call fcn.00624ae4
mov eax, dword [ebp - 0x46]
mov dword [ebp - 0x58], eax
push 0
lea edx, [ebp - 0x1264]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov edx, dword [ebp - 0x1264]
mov ecx, dword [0x68a254]
mov eax, dword [0x68a1ec]
call fcn.006268c0
push dword [0x68a254]
push 0x65b650
lea edx, [ebp - 0x126c]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
push dword [ebp - 0x126c]
lea eax, [ebp - 0x1268]
mov edx, 3
call fcn.0040c2dc
mov eax, dword [ebp - 0x1268]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x18]
call fcn.00656f70
test al, al
je 0x65965d
mov byte [ebp - 0x14], 1
jmp 0x659661
mov byte [ebp - 0x14], 3
push dword [0x68a254]
push 0x65b650
lea edx, [ebp - 0x1274]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
push dword [ebp - 0x1274]
lea eax, [ebp - 0x1270]
mov edx, 3
call fcn.0040c2dc
mov eax, dword [ebp - 0x1270]
call fcn.00428fe4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6596b3
cmp byte [ebp - 0x14], 1
jne 0x659762
xor eax, eax
push ebp
push 0x659758
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x68a228], 0
je 0x659735
push 0
push dword [0x68a254]
push 0x65b650
lea edx, [ebp - 0x127c]
mov eax, dword [ebp - 0x18]
call fcn.00429368
push dword [ebp - 0x127c]
push 0x65c7f4
lea eax, [ebp - 0x1278]
mov edx, 4
call fcn.0040c2dc
mov eax, dword [ebp - 0x1278]
call fcn.0040bff0
push eax
lea edx, [ebp - 0x1280]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x1280]
call fcn.0040bff0
push eax
call sub.kernel32.dll_CopyFileW
lea edx, [ebp - 0x1284]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x1284]
call fcn.00428fe4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x659762
cmp byte [ebp - 0x14], 3
jne 0x659787
mov eax, 0x65c814
call fcn.00641db8
test al, al
jne 0x65a165
mov eax, dword [ebp - 0x18]
call fcn.0065715c
jmp 0x65a165
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x659793
sub ebx, 4
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x18]
cmp word [eax + ebx*2 - 2], 0x5c
je 0x6597d2
lea edx, [ebp - 0x128c]
mov eax, dword [ebp - 0x18]
call fcn.00429244
mov eax, dword [ebp - 0x128c]
lea edx, [ebp - 0x1288]
call fcn.00642150
mov eax, dword [ebp - 0x1288]
mov dl, 1
call fcn.00428ab8
test al, al
jne 0x659c2b
mov byte [ebp - 0x71], 0
mov dword [ebp - 0x6c], 4
lea eax, [ebp - 0x1290]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.0040c3c4
mov eax, dword [ebp - 0x1290]
mov edx, 0x65c844
call fcn.0040c38c
jne 0x659869
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x65982b
mov eax, dword [ebp - 0x104]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x104]
sub ecx, 2
mov edx, 3
mov eax, dword [ebp - 0x18]
call fcn.0040c3c4
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x65b650
call fcn.0040c520
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
add eax, 3
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
je 0x659895
mov eax, dword [ebp - 0x110]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x110]
sub edx, eax
jl 0x659c21
inc edx
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x60]
cmp word [eax + edx*2 - 2], 0x5c
jne 0x659c12
lea eax, [ebp - 0x1298]
push eax
mov ecx, dword [ebp - 0x60]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.0040c3c4
mov eax, dword [ebp - 0x1298]
lea edx, [ebp - 0x1294]
call fcn.00642150
mov eax, dword [ebp - 0x1294]
mov dl, 1
call fcn.00428ab8
test al, al
jne 0x659c12
xor edx, edx
push ebp
push 0x65996d
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x60]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.0040c3c4
lea edx, [ebp - 0x129c]
mov eax, dword [ebp - 4]
call fcn.00642150
mov eax, dword [ebp - 0x129c]
call fcn.004072f0
call fcn.00407178
cmp byte [0x68a222], 0
je 0x659960
cmp byte [ebp - 0x13], 0
je 0x659960
mov edx, dword [ebp - 4]
mov eax, 0x65c858
call fcn.00647e14
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x659c12
inc dword [ebp - 0x60]
dec dword [ebp - 0x8c]
jne 0x6598b3
cmp byte [ebp - 0x71], 0
jne 0x65a165
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x659c37
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
cmp word [edx + eax*2 - 2], 0x5c
je 0x65a165
lea edx, [ebp - 0x12dc]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x12dc]
mov dl, 1
call fcn.00428a20
test al, al
je 0x659e70
lea edx, [ebp - 0x12e4]
mov eax, dword [ebp - 0x18]
call fcn.004293c4
mov eax, dword [ebp - 0x12e4]
lea edx, [ebp - 0x12e0]
call fcn.0042705c
mov eax, dword [ebp - 0x12e0]
mov edx, 0x65c968
call fcn.0040c38c
jne 0x659d7a
mov eax, dword [ebp - 0x18]
call fcn.00641a84
test al, al
je 0x659d7a
cmp byte [0x68a223], 0
je 0x659cc6
mov eax, dword [0x68a2b4]
call fcn.00641b28
jmp 0x659d7a
mov eax, 0x65c980
call fcn.00641db8
test al, al
jne 0x659d6a
mov eax, dword [0x68a2b4]
call fcn.00641b28
jmp 0x659d7a
push 0x35
lea edx, [ebp - 0x12e8]
mov eax, dword [0x68a1e0]
call fcn.005516f4
mov eax, dword [ebp - 0x12e8]
call fcn.0040bff0
push eax
push 0
lea eax, [ebp - 0x12f0]
push eax
mov ecx, 0x65c9a8
mov edx, 0x65b8cc
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x12f0]
push eax
lea edx, [ebp - 0x12f4]
mov eax, dword [ebp - 0x18]
call fcn.00429368
mov edx, dword [ebp - 0x12f4]
lea ecx, [ebp - 0x12ec]
pop eax
call fcn.00646d00
mov eax, dword [ebp - 0x12ec]
call fcn.0040bff0
push eax
mov eax, dword [0x68a1e0]
call fcn.0055b354
push eax
call sub.user32.dll_MessageBoxW
cmp eax, 2
je 0x659d7a
mov eax, dword [ebp - 0x18]
call fcn.00641a84
test al, al
jne 0x659ce7
lea edx, [ebp - 0x12f8]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x12f8]
mov dl, 1
call fcn.00428d18
test eax, 1
jle 0x659ddf
xor eax, eax
push ebp
push 0x659dd5
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x12fc]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x12fc]
mov cl, 1
mov edx, 0x80
call fcn.00428dd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x659ddf
lea edx, [ebp - 0x1304]
mov eax, dword [ebp - 0x18]
call fcn.004293c4
mov eax, dword [ebp - 0x1304]
lea edx, [ebp - 0x1300]
call fcn.0042705c
mov eax, dword [ebp - 0x1300]
mov edx, 0x65c9b8
call fcn.0040c38c
je 0x659e41
lea edx, [ebp - 0x130c]
mov eax, dword [ebp - 0x18]
call fcn.004293c4
mov eax, dword [ebp - 0x130c]
lea edx, [ebp - 0x1308]
call fcn.0042705c
mov eax, dword [ebp - 0x1308]
mov edx, 0x65c9d0
call fcn.0040c38c
jne 0x659e70
lea edx, [ebp - 0x1310]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x1310]
call fcn.0065705c
push 0x12c
call sub.kernel32.dll_Sleep
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
mov byte [ebp - 0x72], 0
lea edx, [ebp - 0x1314]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x1314]
mov dl, 1
call fcn.00428a20
test al, al
je 0x659ece
xor eax, eax
push ebp
push 0x659ec4
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1318]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x1318]
call fcn.00428fe4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x659ece
xor eax, eax
push ebp
push 0x659f2e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
movzx eax, byte [ebp - 0x76]
push eax
movzx eax, byte [ebp - 0x75]
push eax
movzx eax, byte [ebp - 0x77]
push eax
lea edx, [ebp - 0x131c]
mov eax, dword [ebp - 0x18]
call fcn.00642150
mov eax, dword [ebp - 0x131c]
push eax
lea edx, [ebp - 0x1320]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov edx, dword [ebp - 0x1320]
mov eax, dword [0x68a1ec]
pop ecx
call fcn.006272a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65a125
cmp byte [ebp - 0x72], 0
jne 0x659e70
cmp byte [ebp - 0x76], 0
je 0x65a13d
mov eax, dword [ebp - 0x18]
call fcn.0065763c
cmp byte [0x68a222], 0
je 0x65a159
cmp byte [ebp - 0x13], 0
je 0x65a159
mov edx, dword [ebp - 0x18]
mov eax, 0x65b6a4
call fcn.00647e14
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x6590a5
xor eax, eax
push ebp
push 0x65a1a0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x68a1ec]
call fcn.006262cc
mov eax, dword [0x68a1ec]
call fcn.00409668
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65a1aa
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x464]
mov edx, 0x63
call fcn.0058f1c8
push 0x65cb60
lea eax, [ebp - 0x1344]
push eax
mov ecx, 0x65cb94
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1344]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x4b0]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
jne 0x65a23f
mov eax, dword [0x68a1e0]
mov eax, dword [eax + 0x470]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
je 0x65a325
cmp byte [0x68a229], 0
je 0x65a267
cmp byte [0x68a229], 0
je 0x65a325
mov eax, 0x65cba8
call fcn.00641db8
test al, al
je 0x65a325
push 0x65cbe0
lea eax, [ebp - 0x1348]
push eax
mov ecx, 0x65cc18
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1348]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov ecx, dword [0x68a294]
mov edx, 0x65b9bc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x65a315
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x134c]
push eax
lea edx, [ebp - 0x1350]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x1350]
mov edx, 0x65b9bc
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x134c]
call fcn.0064c19c
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x65a2d3
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
cmp byte [0x68a222], 0
je 0x65a391
cmp byte [0x68a231], 0
jne 0x65a391
lea edx, [ebp - 0x1358]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
push dword [ebp - 0x1358]
push 0x65b650
lea ecx, [ebp - 0x135c]
mov edx, 0x65b660
mov eax, dword [0x68a274]
call fcn.00429124
push dword [ebp - 0x135c]
lea eax, [ebp - 0x1354]
mov edx, 3
call fcn.0040c2dc
mov edx, dword [ebp - 0x1354]
mov eax, 0x65b6a4
call fcn.00647e14
cmp byte [0x68a229], 0
jne 0x65af49
push 0
mov ecx, 0x65cc28
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65af49
push 0
mov ecx, 0x65cc40
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
test eax, eax
jle 0x65a4ed
push 0x65c364
lea eax, [ebp - 0x1360]
push eax
mov ecx, 0x65c398
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1360]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
cmp byte [0x68a223], 0
je 0x65a43e
mov word [ebp - 0x82], 0
jmp 0x65a447
mov word [ebp - 0x82], 1
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x65cc64
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [ebp - 8], 0
jne 0x65a474
lea eax, [ebp - 8]
mov edx, 0x65cc94
call fcn.0040b890
mov eax, dword [ebp - 8]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
je 0x65a497
mov eax, dword [ebp - 0x114]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jle 0x65a4ed
mov eax, dword [ebp - 8]
cmp word [eax], 0x73
jne 0x65a4ed
mov word [ebp - 0x82], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x65a4d5
mov eax, dword [ebp - 0x118]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x118]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0040c3c4
push 0
mov ecx, 0x65cc40
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
dec eax
je 0x65a512
dec eax
je 0x65a641
jmp 0x65a80f
push 0
lea eax, [ebp - 0x136c]
push eax
mov ecx, 0x65cccc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x136c]
lea edx, [ebp - 0x1368]
call fcn.00643fe0
mov ecx, dword [ebp - 0x1368]
lea eax, [ebp - 0x1364]
mov edx, 0x65ccf4
call fcn.0040c254
mov eax, dword [ebp - 0x1364]
lea edx, [ebp - 4]
call fcn.00645518
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00428a20
test al, al
jne 0x65a580
lea eax, [ebp - 4]
mov edx, dword [0x68a268]
call fcn.0040b890
lea edx, [ebp - 0x1370]
mov eax, dword [ebp - 4]
call fcn.00642150
mov eax, dword [ebp - 0x1370]
mov dl, 1
call fcn.00428a20
test al, al
je 0x65a635
lea edx, [ebp - 0x1374]
mov eax, 0x65cd1c
call fcn.00645518
mov eax, dword [ebp - 0x1374]
mov dl, 1
call fcn.00428a20
test al, al
je 0x65a635
movzx eax, word [ebp - 0x82]
push eax
push 1
push 0
push 1
push 0x65cd58
push dword [ebp - 4]
push 0x65cd6c
push dword [ebp - 8]
lea eax, [ebp - 0x137c]
mov edx, 4
call fcn.0040c2dc
mov eax, dword [ebp - 0x137c]
lea edx, [ebp - 0x1378]
call fcn.00645518
mov eax, dword [ebp - 0x1378]
push eax
lea edx, [ebp - 0x1380]
mov eax, 0x65cd1c
call fcn.00645518
mov eax, dword [ebp - 0x1380]
push eax
mov eax, dword [ebp - 0x54]
call fcn.0055b354
pop edx
pop ecx
call fcn.0064fd18
jmp 0x65a80f
mov byte [0x68a22a], 1
jmp 0x65a80f
push 0
lea eax, [ebp - 0x1388]
push eax
mov ecx, 0x65cccc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x1388]
lea edx, [ebp - 0x1384]
call fcn.00643fe0
mov eax, dword [ebp - 0x1384]
lea edx, [ebp - 4]
call fcn.00645518
cmp dword [ebp - 4], 0
je 0x65a808
lea edx, [ebp - 0x138c]
mov eax, dword [ebp - 4]
call fcn.006572b0
cmp dword [ebp - 0x138c], 0
je 0x65a808
lea edx, [ebp - 0x1390]
mov eax, 0x65cd80
call fcn.00645518
mov eax, dword [ebp - 0x1390]
mov dl, 1
call fcn.00428a20
test al, al
je 0x65a808
push 1
push 1
push 0
push 1
push 0x65cdc8
push dword [ebp - 4]
push 0x65cde0
lea edx, [ebp - 0x139c]
mov eax, dword [ebp - 4]
call fcn.006572b0
push dword [ebp - 0x139c]
push 0x65ce18
lea eax, [ebp - 0x1398]
mov edx, 5
call fcn.0040c2dc
mov eax, dword [ebp - 0x1398]
lea edx, [ebp - 0x1394]
call fcn.00645518
mov eax, dword [ebp - 0x1394]
push eax
lea edx, [ebp - 0x13a0]
mov eax, 0x65cd80
call fcn.00645518
mov eax, dword [ebp - 0x13a0]
push eax
mov eax, dword [ebp - 0x54]
call fcn.0055b354
pop edx
pop ecx
call fcn.0064fd18
test al, al
je 0x65a7ff
mov eax, dword [0x68a260]
mov edx, 0x65c40c
call fcn.0040c38c
je 0x65a7f6
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
movzx eax, word [ebp - 0x82]
push eax
push 1
push 0
push 1
push 0x65ce28
lea edx, [ebp - 0x13ac]
mov eax, dword [ebp - 4]
call fcn.006572b0
push dword [ebp - 0x13ac]
push 0x65cd6c
push dword [ebp - 8]
lea eax, [ebp - 0x13a8]
mov edx, 4
call fcn.0040c2dc
mov eax, dword [ebp - 0x13a8]
lea edx, [ebp - 0x13a4]
call fcn.00645518
mov eax, dword [ebp - 0x13a4]
push eax
lea edx, [ebp - 0x13b0]
mov eax, 0x65cd1c
call fcn.00645518
mov eax, dword [ebp - 0x13b0]
push eax
mov eax, dword [ebp - 0x54]
call fcn.0055b354
pop edx
pop ecx
call fcn.0064fd18
test al, al
jne 0x65a80f
mov byte [0x68a22a], 1
jmp 0x65a80f
mov byte [0x68a22a], 1
jmp 0x65a80f
mov byte [0x68a22a], 1
jmp 0x65a80f
mov byte [0x68a22a], 1
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x4b8]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
je 0x65a936
cmp byte [0x68a229], 0
je 0x65a850
cmp byte [0x68a229], 0
je 0x65a936
mov eax, 0x65ce5c
call fcn.00641db8
test al, al
je 0x65a936
push 0x65ce94
lea eax, [ebp - 0x13b4]
push eax
mov ecx, 0x65c9a8
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13b4]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
mov ecx, dword [0x68a294]
mov edx, 0x65ced4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x65a90a
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x13b8]
push eax
lea edx, [ebp - 0x13bc]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x13bc]
mov edx, 0x65ced4
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13b8]
call fcn.0064deb4
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x65a8c8
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
push 0
push 0
push 0
push 0x8000000
call sub.shell32.dll_SHChangeNotify
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
mov ecx, dword [0x68a294]
mov edx, 0x65cef8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x65aa1f
push 0x65cf18
lea eax, [ebp - 0x13c0]
push eax
mov ecx, 0x65cf60
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13c0]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x65aa0f
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
cmp byte [0x68a22d], 0
jne 0x65aa0f
push 0
lea eax, [ebp - 0x13c4]
push eax
lea edx, [ebp - 0x13c8]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x13c8]
mov edx, 0x65cef8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13c4]
call fcn.0064b110
test al, al
je 0x65aa0f
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x65a9c0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
cmp byte [0x68a224], 0
je 0x65aa87
cmp byte [0x68a229], 0
jne 0x65aa87
push 0
mov ecx, 0x65cf70
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65aa68
call fcn.0064a834
test al, al
je 0x65aa87
mov al, 1
call fcn.0064aac4
test al, al
je 0x65aa87
xor eax, eax
call fcn.0064aac4
jmp 0x65aa87
push 0
mov ecx, 0x65cf94
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65aa87
call fcn.0064a834
mov eax, 0x68a278
call fcn.0040b458
mov edx, 0x65cfb8
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65ab1e
mov ecx, dword [0x68a294]
mov edx, 0x65cfb8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x65ab1e
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x13cc]
push eax
lea edx, [ebp - 0x13d0]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x13d0]
mov edx, 0x65cfb8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13cc]
call fcn.0064d7bc
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x65aadc
cmp byte [0x68a229], 0
jne 0x65ab9e
push 0
mov ecx, 0x65c1dc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65ab9e
push 0xffffffffffffffff
mov ecx, 0x65c208
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
test eax, eax
jne 0x65ab9e
cmp byte [0x68a226], 0
je 0x65ab73
lea eax, [ebp - 4]
mov edx, 0x65cfcc
call fcn.0040b890
jmp 0x65ab80
lea eax, [ebp - 4]
mov edx, 0x65cff8
call fcn.0040b890
lea eax, [ebp - 0x13d4]
mov ecx, 0x65d024
mov edx, dword [ebp - 4]
call fcn.0040c254
mov eax, dword [ebp - 0x13d4]
call fcn.0064b110
cmp byte [0x68a229], 0
jne 0x65ac0f
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x4d4]
mov edx, dword [eax]
call dword [edx + 0x150]
test al, al
je 0x65ac0f
cmp byte [0x68a226], 0
je 0x65abd4
lea eax, [ebp - 4]
mov edx, 0x65cfcc
call fcn.0040b890
jmp 0x65abe1
lea eax, [ebp - 4]
mov edx, 0x65cff8
call fcn.0040b890
push dword [ebp - 4]
push 0x65d114
push dword [0x68a25c]
push 0x65d194
lea eax, [ebp - 0x13d8]
mov edx, 4
call fcn.0040c2dc
mov eax, dword [ebp - 0x13d8]
call fcn.0064b110
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
mov ecx, dword [0x68a294]
mov edx, 0x65d1c8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x65ad2f
push 0x65cf18
lea eax, [ebp - 0x13dc]
push eax
mov ecx, 0x65cf60
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13dc]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x65acdf
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x13e0]
push eax
lea edx, [ebp - 0x13e4]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x13e4]
mov edx, 0x65d1c8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13e0]
call fcn.0064ed38
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x65ac9d
xor eax, eax
push ebp
push 0x65ad15
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x80]
push eax
push 0x1388
push 2
push 0x65d1e4
push 0
push 0x1a
push 0xffff
call sub.user32.dll_SendMessageTimeoutW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65ad1f
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
push 0x65cb60
lea eax, [ebp - 0x13e8]
push eax
mov ecx, 0x65cb94
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13e8]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
mov edx, 0x65d208
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65adfc
mov ecx, dword [0x68a294]
mov edx, 0x65d208
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x65adfc
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x13ec]
push eax
lea edx, [ebp - 0x13f0]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x13f0]
mov edx, 0x65d208
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x13ec]
call fcn.00650fa0
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x65adba
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
mov edx, 0x65d224
mov eax, dword [0x68a214]
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x65af49
mov ecx, dword [0x68a294]
mov edx, 0x65d224
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov eax, dword [0x68a294]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
dec eax
test eax, eax
jl 0x65af49
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x13f4]
push eax
lea edx, [ebp - 0x13f8]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x13f8]
mov edx, 0x65d224
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13f4]
mov ax, 5
call fcn.00653a08
cmp byte [0x68a22f], 0
je 0x65aeaf
mov dl, 1
mov eax, 0x10
call fcn.00657780
push 0
lea eax, [ebp - 0x13fc]
push eax
lea edx, [ebp - 0x1400]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x1400]
mov edx, 0x65d224
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x13fc]
mov ax, 6
call fcn.00653a08
push 0x65cb60
lea eax, [ebp - 0x1404]
push eax
mov ecx, 0x65cb94
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x1404]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x45c]
xor edx, edx
call fcn.00551748
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
inc dword [ebp - 0x5c]
dec dword [ebp - 0x88]
jne 0x65ae5f
cmp dword [0x68a25c], 0
je 0x65b0ba
lea edx, [ebp - 0x1408]
mov eax, dword [0x68a25c]
call fcn.00642150
mov eax, dword [ebp - 0x1408]
mov dl, 1
call fcn.00428a20
test al, al
je 0x65b0ba
push 0
mov ecx, 0x65d244
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65b028
lea edx, [ebp - 0x140c]
mov eax, dword [0x68a25c]
call fcn.00429368
mov ecx, dword [ebp - 0x140c]
lea eax, [ebp - 4]
mov edx, 0x65d270
call fcn.0040c254
push dword [ebp - 4]
push 0x65d300
push dword [0x68a25c]
push 0x65d194
lea eax, [ebp - 0x1410]
mov edx, 4
call fcn.0040c2dc
mov eax, dword [ebp - 0x1410]
call fcn.0064b110
push dword [ebp - 4]
push 0x65d328
lea edx, [ebp - 0x1418]
mov eax, dword [0x68a25c]
call fcn.00429244
push dword [ebp - 0x1418]
push 0x65d194
lea eax, [ebp - 0x1414]
mov edx, 4
call fcn.0040c2dc
mov eax, dword [ebp - 0x1414]
call fcn.0064b110
mov eax, 0x65d358
call fcn.00641db8
test al, al
je 0x65b071
push 0x65d380
lea edx, [ebp - 0x1420]
mov eax, dword [0x68a25c]
call fcn.00429368
push dword [ebp - 0x1420]
push 0x65d3e4
lea eax, [ebp - 0x141c]
mov edx, 3
call fcn.0040c2dc
mov eax, dword [ebp - 0x141c]
call fcn.0064b110
mov eax, 0x65d448
call fcn.00641db8
test al, al
je 0x65b0ba
push 0x65d380
lea edx, [ebp - 0x1428]
mov eax, dword [0x68a25c]
call fcn.00429368
push dword [ebp - 0x1428]
push 0x65d46c
lea eax, [ebp - 0x1424]
mov edx, 3
call fcn.0040c2dc
mov eax, dword [ebp - 0x1424]
call fcn.0064b110
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x464]
mov edx, 0x64
call fcn.0058f1c8
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
push 0x65cb60
lea eax, [ebp - 0x142c]
push eax
mov ecx, 0x65cb94
mov edx, 0x65b634
mov eax, dword [0x68a218]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x142c]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x460]
call fcn.00551748
cmp byte [0x68a222], 0
je 0x65b135
push 0
mov ecx, 0x65d4cc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65b135
call fcn.0065642c
xor eax, eax
push ebp
push 0x65b161
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x68a21c]
mov edx, dword [eax]
call dword [edx + 0x6c]
mov eax, dword [0x68a21c]
call fcn.00409668
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x65b16b
cmp byte [0x68a222], 0
je 0x65b213
push 0
lea edx, [ebp - 0x1438]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
push dword [ebp - 0x1438]
push 0x65b650
lea ecx, [ebp - 0x143c]
mov edx, 0x65b660
mov eax, dword [0x68a274]
call fcn.00429124
push dword [ebp - 0x143c]
lea eax, [ebp - 0x1434]
mov edx, 3
call fcn.0040c2dc
mov eax, dword [ebp - 0x1434]
lea edx, [ebp - 0x1430]
call fcn.00642150
mov eax, dword [ebp - 0x1430]
call fcn.0040bff0
push eax
lea eax, [ebp - 0x1440]
mov ecx, 0x65b678
mov edx, dword [0x68a254]
call fcn.0040c254
mov eax, dword [ebp - 0x1440]
call fcn.0040bff0
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
jne 0x65b213
mov byte [0x68a22a], 1
cmp byte [0x68a222], 0
jne 0x65b2ee
push 0
mov ecx, 0x65b8ec
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65b2ee
lea edx, [ebp - 0x1448]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
lea eax, [ebp - 0x1448]
mov edx, 0x65d4f4
call fcn.0040c1fc
mov eax, dword [ebp - 0x1448]
lea edx, [ebp - 0x1444]
call fcn.00642150
mov eax, dword [ebp - 0x1444]
mov dl, 1
call fcn.00428a20
test al, al
jne 0x65b2ee
push 0
lea edx, [ebp - 0x1450]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
lea eax, [ebp - 0x1450]
mov edx, 0x65d4f4
call fcn.0040c1fc
mov eax, dword [ebp - 0x1450]
lea edx, [ebp - 0x144c]
call fcn.00642150
mov eax, dword [ebp - 0x144c]
call fcn.0040bff0
push eax
lea eax, [ebp - 0x1454]
mov ecx, 0x65b678
mov edx, dword [0x68a254]
call fcn.0040c254
mov eax, dword [ebp - 0x1454]
call fcn.0040bff0
push eax
call sub.kernel32.dll_CopyFileW
push 0
mov ecx, 0x65b8ec
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65b3ae
push 0
mov ecx, 0x65c1dc
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65b3ae
push 0xffffffffffffffff
mov ecx, 0x65c208
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jle 0x65b3ae
push 5
push 0
push 1
push 1
lea edx, [ebp - 0x145c]
mov eax, dword [ebp - 0x5c]
call fcn.00427d7c
mov ecx, dword [ebp - 0x145c]
lea eax, [ebp - 0x1458]
mov edx, 0x65d51c
call fcn.0040c254
mov eax, dword [ebp - 0x1458]
push eax
lea edx, [ebp - 0x1460]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x450]
call fcn.005516f4
lea eax, [ebp - 0x1460]
mov edx, 0x65d548
call fcn.0040c1fc
mov edx, dword [ebp - 0x1460]
xor eax, eax
pop ecx
call fcn.0064fd18
mov byte [0x68a22b], 1
mov eax, dword [0x682278]
mov eax, dword [eax]
call fcn.0061056c
cmp byte [0x68a223], 0
jne 0x65b3eb
push 0
mov ecx, 0x65d570
mov edx, 0x65b5b8
mov eax, dword [0x68a214]
mov ebx, dword [eax]
call dword [ebx + 0x20]
test al, al
je 0x65b3eb
push 0
call sub.user32.dll_MessageBeep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x65b587
lea eax, [ebp - 0x1460]
call fcn.0040b458
lea eax, [ebp - 0x145c]
mov edx, 3
call fcn.0040b4b8
lea eax, [ebp - 0x1450]
call fcn.0040b458
lea eax, [ebp - 0x144c]
call fcn.0040b458
lea eax, [ebp - 0x1448]
call fcn.0040b458
lea eax, [ebp - 0x1444]
mov edx, 3
call fcn.0040b4b8
lea eax, [ebp - 0x1438]
mov edx, 2
call fcn.0040b4b8
lea eax, [ebp - 0x1430]
mov edx, 0x36
call fcn.0040b4b8
lea eax, [ebp - 0x1358]
mov edx, 2
call fcn.0040b4b8
lea eax, [ebp - 0x1350]
mov edx, 0x1a
call fcn.0040b4b8
lea eax, [ebp - 0x12e8]
call fcn.0040b458
lea eax, [ebp - 0x12e4]
mov edx, 5
call fcn.0040b4b8
lea eax, [ebp - 0x12d0]
mov edx, 0x2d
call fcn.0040b4b8
lea eax, [ebp - 0x1214]
mov edx, 0x14
call fcn.0040b4b8
lea eax, [ebp - 0x11c4]
call fcn.0040b458
lea eax, [ebp - 0x11c0]
call fcn.0040b458
lea eax, [ebp - 0x11bc]
mov edx, 6
call fcn.0040b4b8
lea eax, [ebp - 0x11a4]
mov edx, 3
call fcn.0040b4b8
lea eax, [ebp - 0x1198]
call fcn.0040b458
lea eax, [ebp - 0x1194]
mov edx, 0x17
call fcn.0040b4b8
lea eax, [ebp - 0x1138]
call fcn.0040b458
lea eax, [ebp - 0x1134]
call fcn.0040b458
lea eax, [ebp - 0x1130]
mov edx, 3
call fcn.0040b4b8
lea eax, [ebp - 0x1124]
call fcn.0040b458
lea eax, [ebp - 0x1120]
mov edx, 2
call fcn.0040b4b8
lea eax, [ebp - 0x4e]
mov edx, dword [0x61ea4c]
call fcn.0040cb6c
lea eax, [ebp - 0x18]
mov edx, dword [0x65771c]
call fcn.0040cb6c
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.0040b4b8
pop eax
jmp eax