Function at 0x63f144
Capabilities:
Get common file path
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x4d
push 0
push 0
dec ecx
jne 0x63f14c
push ecx
push ebx
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x6400c9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
call fcn.0040956c
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.0040994c
movzx eax, bl
cmp eax, 0x42
ja case.0x63f187.0
jmp dword [eax*4 + 0x63f18e]
xor eax, eax
push ebp
push 0x63f335
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 0
je 0x63f2cc
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63f2d6
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x6400e4
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63f31f
mov edx, 0x640144
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63f317
lea ecx, [ebp - 4]
mov edx, 0x640170
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
xor eax, eax
push ebp
push 0x63f3d7
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 0
je 0x63f36e
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63f378
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x64019c
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63f3c1
mov edx, 0x6401fc
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63f3b9
lea ecx, [ebp - 4]
mov edx, 0x640228
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
push 0x104
lea eax, [ebp - 0x232]
push eax
call sub.kernel32.dll_GetWindowsDirectoryW
lea edx, [ebp - 4]
lea eax, [ebp - 0x232]
call fcn.00424dcc
jmp case.0x63f187.0
push 0x104
lea eax, [ebp - 0x232]
push eax
call sub.kernel32.dll_GetSystemDirectoryW
lea edx, [ebp - 4]
lea eax, [ebp - 0x232]
call fcn.00424dcc
jmp case.0x63f187.0
lea eax, [ebp - 0x232]
push eax
push 0x104
call sub.kernel32.dll_GetTempPathW
test eax, eax
je case.0x63f187.0
lea edx, [ebp - 4]
lea eax, [ebp - 0x232]
call fcn.00424dcc
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x14
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 5
call fcn.0063f100
jmp case.0x63f187.0
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0x238]
mov al, 3
call fcn.0063f144
mov eax, dword [ebp - 0x238]
mov ecx, 2
mov edx, 1
call fcn.0040a500
jmp case.0x63f187.0
lea edx, [ebp - 0x23c]
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00616668
mov eax, dword [ebp - 0x23c]
lea edx, [ebp - 4]
call fcn.004246e0
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x420]
call fcn.005415e0
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 9
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 6
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x1f
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x15
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x1a
call fcn.0063f100
jmp case.0x63f187.0
xor eax, eax
push ebp
push 0x63f5f6
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 0
je 0x63f56a
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63f574
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x640254
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63f5e0
mov edx, 0x6402e4
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63f5b7
lea ecx, [ebp - 4]
mov edx, 0x640310
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
jmp 0x63f5d8
mov edx, 0x64033c
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63f5d8
lea ecx, [ebp - 4]
mov edx, 0x640364
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
lea edx, [ebp - 0x240]
mov al, 0x12
call fcn.0063f144
mov eax, dword [ebp - 0x240]
lea edx, [ebp - 4]
call fcn.004246e0
jmp case.0x63f187.0
lea edx, [ebp - 4]
xor eax, eax
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0xb
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 2
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 7
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x19
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x16
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x17
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x18
call fcn.0063f100
jmp case.0x63f187.0
cmp byte [0x6748df], 0
je 0x63f6f9
lea edx, [ebp - 0x244]
mov al, 0x14
call fcn.0063f144
push dword [ebp - 0x244]
push 0x64038c
lea edx, [ebp - 0x248]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x49c]
call fcn.005415e0
push dword [ebp - 0x248]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040a418
jmp case.0x63f187.0
lea edx, [ebp - 0x24c]
mov al, 0x18
call fcn.0063f144
push dword [ebp - 0x24c]
push 0x64039c
lea edx, [ebp - 0x250]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x49c]
call fcn.005415e0
push dword [ebp - 0x250]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040a418
jmp case.0x63f187.0
lea edx, [ebp - 0x254]
mov al, 0xf
call fcn.0063f144
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 4]
mov ecx, 0x6403ac
call fcn.0040a390
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x64040c
mov edx, 0x640428
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x640440
mov edx, 0x640464
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x64047c
mov edx, 0x6404a0
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x6404b8
mov edx, 0x6404d4
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x6404ec
mov edx, 0x640510
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x46c]
call fcn.005415e0
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x474]
call fcn.005415e0
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x45c]
call fcn.005415e0
jmp case.0x63f187.0
call fcn.00426b08
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea edx, [ebp - 8]
mov eax, dword [0x66e430]
call fcn.00427ad8
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.00409994
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x1c
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, 0x23
call fcn.0063f100
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov al, 0x3c
call fcn.0063f144
jmp case.0x63f187.0
xor eax, eax
push ebp
push 0x63f941
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 1
jne 0x63f8d8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63f8e2
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x640528
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63f92b
mov edx, 0x6405b8
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63f923
lea ecx, [ebp - 4]
mov edx, 0x6405e8
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
lea edx, [ebp - 0x258]
mov al, 0x16
call fcn.0063f144
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 4]
call fcn.004246e0
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x47c]
call fcn.005415e0
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x44c]
call fcn.005415e0
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x640618
mov edx, 0x64062c
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x640644
mov edx, 0x640658
mov eax, dword [0x6748d0]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
lea eax, [ebp - 4]
mov edx, dword [0x6748e8]
call fcn.00409994
jmp case.0x63f187.0
call sub.kernel32.dll_GetSystemDefaultLangID
movzx eax, ax
lea edx, [ebp - 4]
call fcn.0042345c
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x640670
mov edx, 0x640690
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
lea edx, [ebp - 4]
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00616668
jmp case.0x63f187.0
xor eax, eax
push ebp
push 0x63fade
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 1
jne 0x63fa63
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63fa6d
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x6406a8
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63fac8
mov edx, 0x640708
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63fab0
lea ecx, [ebp - 4]
mov edx, 0x640734
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
jmp 0x63fac0
lea ecx, [ebp - 4]
mov edx, 0x640760
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
lea edx, [ebp - 0x25c]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x420]
call fcn.005415e0
cmp dword [ebp - 0x25c], 0
je 0x63fb60
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0x260]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x420]
call fcn.005415e0
mov edx, dword [ebp - 0x260]
mov ecx, 1
mov eax, 0x64078c
call fcn.0040a710
push eax
lea edx, [ebp - 0x264]
mov eax, dword [0x6748a4]
mov eax, dword [eax + 0x420]
call fcn.005415e0
mov eax, dword [ebp - 0x264]
mov edx, 1
pop ecx
call fcn.0040a500
jmp case.0x63f187.0
lea eax, [ebp - 4]
mov edx, 0x64079c
call fcn.00409994
jmp case.0x63f187.0
push 0xff
lea eax, [ebp - 0x232]
push eax
call sub.kernel32.dll_GetSystemDirectoryW
lea edx, [ebp - 4]
lea eax, [ebp - 0x232]
call fcn.00424dcc
jmp case.0x63f187.0
xor eax, eax
push ebp
push 0x63fc43
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 1
jne 0x63fbc8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63fbd2
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x6407b0
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63fc2d
mov edx, 0x640810
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63fc15
lea ecx, [ebp - 4]
mov edx, 0x640848
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
jmp 0x63fc25
lea ecx, [ebp - 4]
mov edx, 0x640880
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
lea edx, [ebp - 0x268]
mov al, 0x11
call fcn.0063f144
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 4]
call fcn.00424828
jmp case.0x63f187.0
push 0
lea eax, [ebp - 4]
push eax
mov ecx, 0x6408ac
mov edx, 0x6408c4
mov eax, dword [0x6748cc]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp case.0x63f187.0
xor eax, eax
push ebp
push 0x63fd24
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 1
jne 0x63fcbb
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63fcc5
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x6408dc
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63fd0e
mov edx, 0x64096c
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63fd06
lea ecx, [ebp - 4]
mov edx, 0x640990
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
xor eax, eax
push ebp
push 0x63fdc6
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 1
jne 0x63fd5d
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63fd67
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x6409b4
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63fdb0
mov edx, 0x640a44
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63fda8
lea ecx, [ebp - 4]
mov edx, 0x640a64
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
xor eax, eax
push ebp
push 0x63fe68
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 1
jne 0x63fdff
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63fe09
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x640a84
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63fe52
mov edx, 0x640b14
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63fe4a
lea ecx, [ebp - 4]
mov edx, 0x640b40
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
xor eax, eax
push ebp
push 0x63ff0a
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 1
jne 0x63fea1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63feab
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x640b6c
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63fef4
mov edx, 0x640bfc
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63feec
lea ecx, [ebp - 4]
mov edx, 0x640c20
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
xor eax, eax
push ebp
push 0x63ffac
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x50d438]
call fcn.0050e584
mov dword [ebp - 0x14], eax
cmp byte [0x6748d8], 0
je 0x63ff43
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20119
jmp 0x63ff4d
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.0050e66c
xor ecx, ecx
mov edx, 0x640c44
mov eax, dword [ebp - 0x14]
call fcn.0050e7c4
test al, al
je 0x63ff96
mov edx, 0x640cd4
mov eax, dword [ebp - 0x14]
call fcn.0050f734
test al, al
je 0x63ff8e
lea ecx, [ebp - 4]
mov edx, 0x640d04
mov eax, dword [ebp - 0x14]
call fcn.0050f1a0
mov eax, dword [ebp - 0x14]
call fcn.0050e63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x63f187.0
mov eax, dword [ebp - 0x14]
call fcn.004078f0
ret
call fcn.00426b08
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc]
mov edx, dword [0x66e430]
mov eax, 0x640d34
call fcn.00427b20
lea eax, [ebp - 4]
mov edx, dword [ebp - 0xc]
call fcn.00409994
jmp case.0x63f187.0
lea edx, [ebp - 0x26c]
mov eax, dword [0x66e35c]
mov eax, dword [eax]
call fcn.00616668
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 4]
call fcn.00424828
jmp case.0x63f187.0
lea eax, [ebp - 4]
mov edx, dword [0x6748f0]
call fcn.00409994
jmp case.0x63f187.0
lea eax, [ebp - 4]
mov edx, dword [0x674900]
call fcn.00409994
jmp case.0x63f187.0
lea eax, [ebp - 4]
mov edx, dword [0x674904]
call fcn.00409994
jmp case.0x63f187.0
lea eax, [ebp - 4]
mov edx, dword [0x6748e4]
call fcn.00409994
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0042b2ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6400d0
lea eax, [ebp - 0x26c]
mov edx, 2
call fcn.004095cc
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.004095cc
lea eax, [ebp - 0x258]
mov edx, 2
call fcn.004095cc
lea eax, [ebp - 0x250]
call fcn.0040956c
lea eax, [ebp - 0x24c]
call fcn.0040956c
lea eax, [ebp - 0x248]
call fcn.0040956c
lea eax, [ebp - 0x244]
mov edx, 4
call fcn.004095cc
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004095cc
ret