Function at 0x13f6c0
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x136
push 0
push 0
dec ecx
jne 0x13f6c9
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00014218
mov eax, dword [ebp - 0xc]
call fcn.00014218
xor eax, eax
push ebp
push 0x141fa7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x149c70]
mov eax, dword [eax]
mov edx, 0x141fc0
call fcn.00065094
xor edx, edx
push ebp
push 0x141c46
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x141fdc
call fcn.00064894
mov dl, 1
mov eax, dword [0x21f68]
call fcn.00013014
mov edx, dword [ebp - 4]
mov dword [edx + 0xec], eax
mov dl, 1
mov eax, dword [0xda430]
call fcn.00013014
mov dword [ebp - 0x30], eax
mov dl, 1
mov eax, dword [0x1048ec]
call fcn.00013014
mov dword [0x15eb38], eax
mov dl, 1
mov eax, dword [0xd980c]
call fcn.00013014
mov dword [ebp - 0x34], eax
mov dl, 1
mov eax, dword [0x1141f0]
call fcn.00013014
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0xd2d30]
call fcn.00013014
mov dword [ebp - 0x20], eax
xor ebx, ebx
mov eax, dword [0x1498e8]
mov byte [eax], 1
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142000
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 0
je 0x13f7c5
lea eax, [ebp - 0x68]
mov edx, 0x142028
call fcn.00013e7c
jmp 0x13f7d2
lea eax, [ebp - 0x68]
mov edx, 0x142034
call fcn.00013e7c
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x84]
cmp al, 3
je 0x13f7e3
cmp al, 2
jne 0x13f7f1
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x18]
mov edx, dword [0x149bc4]
mov byte [edx], al
lea ecx, [ebp - 0x7e0]
mov eax, dword [ebp - 4]
xor edx, edx
mov dl, byte [eax + 0x84]
mov eax, dword [0x1372bc]
call fcn.00020af4
mov ecx, dword [ebp - 0x7e0]
lea eax, [ebp - 0x7dc]
mov edx, 0x142040
call fcn.000140b0
mov edx, dword [ebp - 0x7dc]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
lea eax, [ebp - 0x7e4]
mov ecx, dword [ebp - 0x68]
mov edx, 0x142058
call fcn.000140b0
mov edx, dword [ebp - 0x7e4]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [0x149c70]
mov eax, dword [eax]
add eax, 4
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x38]
call fcn.00013e38
mov eax, dword [ebp - 4]
call fcn.0013deb4
cmp dword [0x15eb54], 0
je 0x141c1b
mov eax, dword [0x149994]
mov edx, dword [0x15eb4c]
call fcn.00013e38
mov eax, dword [0x1498cc]
mov edx, dword [0x15eb50]
call fcn.00013e38
mov eax, dword [0x149c1c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
call fcn.00013e38
mov ecx, dword [0x149994]
mov ecx, dword [ecx]
lea eax, [ebp - 0x7e8]
mov edx, 0x142078
call fcn.000140b0
mov edx, dword [ebp - 0x7e8]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov ecx, dword [0x149c1c]
mov ecx, dword [ecx]
lea eax, [ebp - 0x7ec]
mov edx, 0x14208c
call fcn.000140b0
mov edx, dword [ebp - 0x7ec]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0x21], 1
jne 0x13f9c0
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe4], 0
jne 0x13f9c0
lea eax, [ebp - 0x7f0]
mov ecx, dword [ebp - 0xc]
mov edx, 0x1420a8
call fcn.000140b0
mov edx, dword [ebp - 0x7f0]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00144c50
test al, al
jne 0x13f99b
lea eax, [ebp - 0x7f4]
mov ecx, dword [ebp - 0xc]
mov edx, 0x1420dc
call fcn.000140b0
mov edx, dword [ebp - 0x7f4]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov ecx, 0x142100
mov dl, 1
mov eax, dword [0x1989c]
call fcn.0001e178
call fcn.000137dc
jmp 0x13f9c0
lea eax, [ebp - 0x7f8]
mov ecx, dword [ebp - 0xc]
mov edx, 0x142128
call fcn.000140b0
mov edx, dword [ebp - 0x7f8]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x84]
cmp al, 2
je 0x13f9d1
cmp al, 4
jne 0x13f9ed
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x80]
mov ecx, dword [0x104868]
call fcn.00016884
jmp 0x13fabe
push 0x142144
push dword [ebp - 8]
push 0x142170
lea eax, [ebp - 0x7fc]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x7fc]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
lea eax, [ebp - 0x800]
mov ecx, 0x142170
mov edx, dword [ebp - 8]
call fcn.000140b0
mov edx, dword [ebp - 0x800]
lea ecx, [ebp - 0x1c]
mov eax, dword [0x15eb38]
mov esi, dword [eax]
call dword [esi]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10], 0
jne 0x13fa8f
push 0
lea eax, [ebp - 0x804]
mov ecx, 0x142188
mov edx, dword [ebp - 0xc]
call fcn.000140b0
mov eax, dword [ebp - 0x804]
call fcn.00014228
push eax
lea eax, [ebp - 0x808]
mov ecx, 0x142170
mov edx, dword [ebp - 8]
call fcn.000140b0
mov eax, dword [ebp - 0x808]
call fcn.00014228
push eax
call sub.kernel32.dll_CopyFileA
push 0x1421a0
push dword [ebp - 8]
push 0x142170
lea eax, [ebp - 0x80c]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x80c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [0x149c7c]
cmp byte [eax], 0
je 0x13fadb
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1421c8
call fcn.00064894
jmp 0x13faec
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1421dc
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 2
je 0x13fb2b
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 4
je 0x13fb2b
lea eax, [ebp - 0x810]
mov ecx, 0x142170
mov edx, dword [ebp - 8]
call fcn.000140b0
mov eax, dword [ebp - 0x810]
call fcn.0001ac8c
test al, al
je 0x13fb2e
or ebx, 0xffffffff
jmp 0x13fb2e
or ebx, 0xffffffff
test ebx, ebx
je 0x13fb9f
push 0x1421f0
push dword [ebp - 8]
push 0x142214
mov eax, dword [ebp - 4]
push dword [eax + 0x38]
lea eax, [ebp - 0x814]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x814]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
push eax
lea eax, [ebp - 0x818]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 8]
mov eax, dword [0x15eb38]
call fcn.00104964
mov edx, dword [ebp - 0x818]
mov eax, dword [0x15eb38]
add eax, 4
call fcn.00013e38
mov eax, dword [0x15eb38]
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x81c]
mov edx, 0x142220
call fcn.000140b0
mov edx, dword [ebp - 0x81c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov dl, 1
mov eax, dword [0x21f68]
call fcn.00013014
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142234
call fcn.00064894
xor edx, edx
push ebp
push 0x13fc23
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
call fcn.00143c14
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
push edx
mov edx, dword [ebp - 4]
mov dl, byte [edx + 0x21]
push edx
mov ecx, 0x142250
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.0014498c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x13fc4e
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142268
call fcn.00064894
mov dl, 1
mov eax, dword [0x21f68]
call fcn.00013014
xor edx, edx
push ebp
push 0x13fca8
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
call fcn.00143d20
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
push edx
mov edx, dword [ebp - 4]
mov dl, byte [edx + 0x21]
push edx
mov ecx, 0x142288
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.0014498c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x13fcd3
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142298
call fcn.00064894
mov dl, 1
mov eax, dword [0x21f68]
call fcn.00013014
xor edx, edx
push ebp
push 0x13fd2d
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
call fcn.00143954
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
push edx
mov edx, dword [ebp - 4]
mov dl, byte [edx + 0x21]
push edx
mov ecx, 0x1422bc
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.0014498c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x13fd58
mov dl, 1
mov eax, dword [0x21f68]
call fcn.00013014
mov edx, dword [ebp - 4]
mov dword [edx + 0xfc], eax
mov eax, dword [0x15eb38]
mov eax, dword [eax + 4]
call fcn.00014064
test eax, eax
jle 0x140e11
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 1
xor edx, edx
push ebp
push 0x140def
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x15eb38]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x10]
cmp byte [eax + edx - 1], 0x31
jne 0x140de5
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1422d4
call fcn.00064894
mov eax, dword [ebp - 4]
mov byte [eax + 0xf0], 0
mov eax, dword [ebp - 4]
add eax, 0xf4
call fcn.00013de4
mov eax, dword [ebp - 4]
add eax, 0xf8
call fcn.00013de4
mov eax, dword [ebp - 4]
add eax, 0x100
call fcn.00013de4
lea eax, [ebp - 0x2c]
mov ebx, dword [ebp - 0x10]
lea ebx, [ebx + ebx*2]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + ebx*4 - 4]
call fcn.00013e7c
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + ebx*4 - 8]
cmp eax, 0x4ee
jg 0x13febd
je 0x140181
cmp eax, 0x421
jg 0x13fe75
je 0x140181
cmp eax, 0x3f4
jg 0x13fe5c
je 0x13ff34
sub eax, 0x3e9
je 0x13ff34
sub eax, 5
je 0x13ff34
sub eax, 4
je 0x13ff34
jmp 0x140d62
sub eax, 0x41d
je 0x140181
sub eax, 2
je 0x140181
jmp 0x140d62
cmp eax, 0x4d5
jg 0x13fea4
je 0x1405dc
sub eax, 0x45a
je 0x140a25
sub eax, 5
je 0x140c79
sub eax, 0x74
je 0x140b23
jmp 0x140d62
sub eax, 0x4de
je 0x1408f7
sub eax, 0xe
je 0x140bc7
jmp 0x140d62
cmp eax, 0x55d
jg 0x13ff02
je 0x13ff34
cmp eax, 0x52d
jg 0x13fee9
je 0x13ff34
sub eax, 0x510
je 0x13ff34
sub eax, 0x10
je 0x13ff34
sub eax, 2
je 0x13ff93
jmp 0x140d62
sub eax, 0x538
je 0x140181
sub eax, 0x24
je 0x13ff93
jmp 0x140d62
cmp eax, 0x581
jg 0x13ff24
je 0x140181
sub eax, 0x564
je 0x13ff34
sub eax, 0xd
je 0x140181
jmp 0x140d62
sub eax, 0x58a
je 0x13ff34
sub eax, 5
jne 0x140d62
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1422f8
call fcn.00064894
push 0
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + ebx*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x1c]
push dword [eax + ebx*4 - 4]
push 0x142328
lea eax, [ebp - 0x820]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x820]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
jmp 0x140dd4
xor eax, eax
push ebp
push 0x14014f
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x142338
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142328
lea eax, [ebp - 0x824]
mov edx, 5
call fcn.00014124
mov edx, dword [ebp - 0x824]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
lea eax, [ebp - 0x828]
mov ecx, dword [ebp - 0xc]
mov edx, 0x142338
call fcn.000140b0
mov edx, dword [ebp - 0x828]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x14234c
call fcn.00064894
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx + eax*4 - 4]
lea eax, [ebp - 0x82c]
mov edx, 0x142370
call fcn.000140b0
mov eax, dword [ebp - 0x82c]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + ebx*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 0
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x1c]
push dword [eax + ebx*4 - 4]
push 0x142328
lea eax, [ebp - 0x830]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x830]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
lea eax, [ebp - 0x834]
mov edx, 0x142380
call fcn.000140b0
mov edx, dword [ebp - 0x834]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, 0x1423a4
call fcn.00087f34
test eax, eax
jne 0x140131
push 0x1423bc
push dword [ebp - 8]
push 0x1423c8
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x1c]
push dword [eax + ebx*4 - 4]
push 0x1423e0
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x1423f0
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142400
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + ebx*4 - 8]
lea edx, [ebp - 0x83c]
call fcn.0001aa1c
push dword [ebp - 0x83c]
lea eax, [ebp - 0x838]
mov edx, 0xc
call fcn.00014124
mov eax, dword [ebp - 0x838]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
call fcn.00082edc
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142410
call fcn.00064894
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x140dd4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x20], 1
jne 0x1405c6
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142458
call fcn.00064894
push 0x142474
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + ebx*4 - 8]
lea edx, [ebp - 0x844]
call fcn.0001aa1c
push dword [ebp - 0x844]
push 0x142490
mov eax, dword [ebp - 0x1c]
push dword [eax + ebx*4 - 4]
lea eax, [ebp - 0x840]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x840]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
lea eax, [ebp - 0x848]
mov ecx, 0x14249c
mov edx, dword [ebp - 8]
call fcn.000140b0
mov eax, dword [ebp - 0x848]
call fcn.0001ac8c
test al, al
je 0x14023e
push 0x1424b4
push dword [ebp - 8]
push 0x14249c
lea eax, [ebp - 0x84c]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x84c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
jmp 0x14026d
push 0x1424d4
push dword [ebp - 8]
push 0x14249c
lea eax, [ebp - 0x850]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x850]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, 0x14249c
call fcn.00087f34
test eax, eax
jne 0x1405ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x90]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x94]
push eax
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x1424f8
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142504
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x1423f0
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142514
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + eax*4 - 8]
lea edx, [ebp - 0x858]
call fcn.0001aa1c
push dword [ebp - 0x858]
push 0x1424f8
push dword [ebp - 0x68]
push 0x1424f8
lea edx, [ebp - 0x85c]
mov eax, dword [0x149bc4]
mov al, byte [eax]
call fcn.00085294
push dword [ebp - 0x85c]
lea eax, [ebp - 0x854]
mov edx, 0xf
call fcn.00014124
mov eax, dword [ebp - 0x854]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
neg eax
sbb eax, eax
neg eax
push eax
lea eax, [ebp - 0x860]
mov ecx, 0x14249c
mov edx, dword [ebp - 8]
call fcn.000140b0
mov edx, dword [ebp - 0x860]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x88]
mov eax, dword [ebp - 4]
call fcn.001430c4
test al, al
jne 0x1405ac
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142524
call fcn.00064894
xor eax, eax
push ebp
push 0x140577
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142544
call fcn.00064894
mov eax, 0x14249c
call fcn.00087f34
test eax, eax
jne 0x14048c
push 0x1423bc
push dword [ebp - 8]
push 0x142568
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x1424f8
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142504
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x1423f0
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142514
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + eax*4 - 8]
lea edx, [ebp - 0x868]
call fcn.0001aa1c
push dword [ebp - 0x868]
push 0x1424f8
push dword [ebp - 0x68]
push 0x1424f8
lea edx, [ebp - 0x86c]
mov eax, dword [0x149bc4]
mov al, byte [eax]
call fcn.00085294
push dword [ebp - 0x86c]
push 0x142580
mov eax, dword [ebp - 4]
push dword [eax + 0x90]
push 0x142590
mov eax, dword [ebp - 4]
push dword [eax + 0x94]
lea eax, [ebp - 0x864]
mov edx, 0x16
call fcn.00014124
mov edx, dword [ebp - 0x864]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
push 0x1423bc
push dword [ebp - 8]
push 0x142568
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x1424f8
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142504
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x1423f0
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142514
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + eax*4 - 8]
lea edx, [ebp - 0x874]
call fcn.0001aa1c
push dword [ebp - 0x874]
push 0x1424f8
push dword [ebp - 0x68]
push 0x1424f8
lea edx, [ebp - 0x878]
mov eax, dword [0x149bc4]
mov al, byte [eax]
call fcn.00085294
push dword [ebp - 0x878]
push 0x142580
mov eax, dword [ebp - 4]
push dword [eax + 0x90]
push 0x142590
mov eax, dword [ebp - 4]
push dword [eax + 0x94]
lea eax, [ebp - 0x870]
mov edx, 0x16
call fcn.00014124
mov eax, dword [ebp - 0x870]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
call fcn.00082edc
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x14259c
call fcn.00064894
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x1405bd
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1425e8
call fcn.00064894
mov byte [ebp - 0x21], 1
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142608
call fcn.00064894
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142630
call fcn.00064894
mov eax, dword [ebp - 4]
mov byte [eax + 0xf0], 1
mov eax, dword [ebp - 0x30]
call fcn.000db738
mov dword [ebp - 0x40], eax
push dword [ebp - 0xc]
mov eax, dword [0x149c1c]
push dword [eax]
push 0x142650
lea eax, [ebp - 0x87c]
mov edx, 3
call fcn.00014124
mov ecx, dword [ebp - 0x87c]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
call fcn.000db8b4
mov eax, dword [ebp - 0x40]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x140dd4
inc ebx
xor esi, esi
lea ecx, [ebp - 0x50]
mov edx, esi
mov eax, dword [ebp - 0x40]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x880]
mov eax, dword [ebp - 0x50]
call fcn.0001a4b4
mov edx, dword [ebp - 0x880]
mov eax, 0x142674
call fcn.00014350
mov edi, eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x100]
lea eax, [ebp - 0x884]
mov ecx, 0x142688
call fcn.000140b0
mov eax, dword [ebp - 0x884]
call fcn.0001ac8c
test al, al
je 0x1406d5
mov eax, dword [ebp - 4]
add eax, 0xf4
push eax
lea edx, [ebp - 0x888]
mov eax, dword [ebp - 0x50]
call fcn.0001a4b4
mov eax, dword [ebp - 0x888]
push eax
mov eax, dword [ebp - 0x50]
call fcn.00014064
mov ecx, eax
sub ecx, edi
add ecx, 0xb
lea edx, [edi + 0xb]
pop eax
call fcn.0001426c
jmp 0x14070b
mov eax, dword [ebp - 4]
add eax, 0xf4
push eax
lea edx, [ebp - 0x88c]
mov eax, dword [ebp - 0x50]
call fcn.0001a4b4
mov eax, dword [ebp - 0x88c]
push eax
mov eax, dword [ebp - 0x50]
call fcn.00014064
mov ecx, eax
sub ecx, edi
add ecx, 0xd
lea edx, [edi + 0xd]
pop eax
call fcn.0001426c
mov eax, dword [ebp - 4]
cmp dword [eax + 0xf4], 0
jne 0x140729
mov eax, dword [ebp - 4]
add eax, 0xf4
mov edx, 0x1426ac
call fcn.00013e38
lea ecx, [ebp - 0x890]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
call fcn.000dbd40
mov edx, dword [ebp - 0x890]
mov eax, dword [ebp - 4]
add eax, 0x100
call fcn.00013e38
mov eax, dword [ebp - 4]
add eax, 0xf8
push eax
mov eax, dword [ebp - 0x50]
call fcn.00014064
mov ecx, eax
sub ecx, 6
mov edx, 7
mov eax, dword [ebp - 0x50]
call fcn.0001426c
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x100]
lea eax, [ebp - 0x894]
mov ecx, 0x142688
call fcn.000140b0
mov eax, dword [ebp - 0x894]
call fcn.0001ac8c
test al, al
je 0x1407ff
push 0xffffffffffffffff
push dword [ebp - 0xc]
mov eax, dword [0x149c1c]
push dword [eax]
push 0x1426c0
mov eax, dword [ebp - 4]
push dword [eax + 0xf8]
push 0x1426dc
lea eax, [ebp - 0x898]
mov edx, 5
call fcn.00014124
mov eax, dword [ebp - 0x898]
call fcn.00014228
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x100]
lea eax, [ebp - 0x89c]
mov ecx, 0x142688
call fcn.000140b0
mov eax, dword [ebp - 0x89c]
call fcn.00014228
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x140864
push 0xffffffffffffffff
push dword [ebp - 0xc]
mov eax, dword [0x149c1c]
push dword [eax]
push 0x1426c0
mov eax, dword [ebp - 4]
push dword [eax + 0xf8]
push 0x1426dc
lea eax, [ebp - 0x8a0]
mov edx, 5
call fcn.00014124
mov eax, dword [ebp - 0x8a0]
call fcn.00014228
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x100]
lea eax, [ebp - 0x8a4]
mov ecx, 0x1426ec
call fcn.000140b0
mov eax, dword [ebp - 0x8a4]
call fcn.00014228
push eax
call sub.kernel32.dll_CopyFileA
mov edi, dword [ebp - 0x10]
lea edi, [edi + edi*2]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + edi*4 - 4]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + edi*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x1c]
push dword [eax + edi*4 - 4]
push 0x142328
lea eax, [ebp - 0x8a8]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x8a8]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x100]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xfc]
mov ecx, dword [eax]
call dword [ecx + 0x50]
inc eax
jne 0x1408ea
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x100]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xfc]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc esi
dec ebx
jne 0x140648
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142710
call fcn.00064894
mov eax, dword [ebp - 4]
mov byte [eax + 0xf0], 1
mov eax, dword [ebp - 0x34]
call fcn.000d9860
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x140dd4
inc ebx
xor esi, esi
lea ecx, [ebp - 0x54]
mov edx, esi
mov eax, dword [ebp - 0x44]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x8ac]
mov eax, dword [ebp - 0x54]
call fcn.0001a4b4
mov edx, dword [ebp - 0x8ac]
mov eax, 0x14272c
call fcn.00014350
mov edi, eax
mov eax, dword [ebp - 4]
add eax, 0xf4
push eax
lea edx, [ebp - 0x8b0]
mov eax, dword [ebp - 0x54]
call fcn.0001a4b4
mov eax, dword [ebp - 0x8b0]
mov ecx, edi
sub ecx, 7
mov edx, 7
call fcn.0001426c
mov eax, dword [ebp - 4]
add eax, 0xf8
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xf4]
call fcn.00013e38
lea ecx, [ebp - 0x8b4]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x34]
call fcn.000d9a0c
mov edx, dword [ebp - 0x8b4]
mov eax, 0x15eb1c
call fcn.00013e38
mov edi, dword [ebp - 0x10]
lea edi, [edi + edi*2]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + edi*4 - 4]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + edi*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x1c]
push dword [eax + edi*4 - 4]
push 0x142328
lea eax, [ebp - 0x8b8]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x8b8]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
inc esi
dec ebx
jne 0x140933
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142744
call fcn.00064894
mov eax, dword [ebp - 4]
mov byte [eax + 0xf0], 1
mov eax, dword [ebp - 0x30]
call fcn.000db574
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x140dd4
inc ebx
xor esi, esi
lea ecx, [ebp - 0x8bc]
mov edx, esi
mov eax, dword [ebp - 0x4c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x8bc]
mov eax, dword [ebp - 4]
add eax, 0xf4
call fcn.00013e38
mov eax, dword [ebp - 4]
add eax, 0xf8
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xf4]
call fcn.00013e38
lea ecx, [ebp - 0x8c0]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xf4]
mov eax, dword [ebp - 0x30]
call fcn.000df3e4
mov edx, dword [ebp - 0x8c0]
mov eax, 0x15eb10
call fcn.00013e38
mov edi, dword [ebp - 0x10]
lea edi, [edi + edi*2]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + edi*4 - 4]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + edi*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x1c]
push dword [eax + edi*4 - 4]
push 0x142328
lea eax, [ebp - 0x8c4]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x8c4]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
inc esi
dec ebx
jne 0x140a61
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142768
call fcn.00064894
push dword [ebp - 0xc]
mov eax, dword [0x149c1c]
push dword [eax]
push 0x14278c
lea eax, [ebp - 0x8c8]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x8c8]
mov eax, dword [ebp - 0x30]
call fcn.000de500
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + eax*4 - 4]
push eax
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + eax*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142328
lea eax, [ebp - 0x8cc]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x8cc]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1427b4
call fcn.00064894
mov eax, dword [ebp - 4]
add eax, 0x108
push eax
mov eax, dword [ebp - 4]
lea ecx, [eax + 0x10c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x3c]
call fcn.000b8878
lea edx, [ebp - 0x8d0]
mov eax, dword [ebp - 0x3c]
call fcn.000b871c
mov edx, dword [ebp - 0x8d0]
mov eax, 0x15eb24
call fcn.00013e38
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + eax*4 - 4]
push eax
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + eax*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142328
lea eax, [ebp - 0x8d4]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x8d4]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1427d8
call fcn.00064894
mov eax, dword [ebp - 4]
mov byte [eax + 0xf0], 1
mov eax, dword [ebp - 0x38]
call fcn.00114244
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x140dd4
inc ebx
xor esi, esi
lea ecx, [ebp - 0x58]
mov edx, esi
mov eax, dword [ebp - 0x48]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 4]
add eax, 0xf4
mov edx, dword [ebp - 0x58]
call fcn.00013e38
mov eax, dword [ebp - 4]
add eax, 0xf8
mov edx, dword [ebp - 0x58]
call fcn.00013e38
lea ecx, [ebp - 0x8d8]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x38]
call fcn.00114400
mov edx, dword [ebp - 0x8d8]
mov eax, 0x15eb20
call fcn.00013e38
mov edi, dword [ebp - 0x10]
lea edi, [edi + edi*2]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + edi*4 - 4]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + edi*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x1c]
push dword [eax + edi*4 - 4]
push 0x142328
lea eax, [ebp - 0x8dc]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
inc esi
dec ebx
jne 0x140cb5
jmp 0x140dd4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1427f8
call fcn.00064894
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + eax*4 - 4]
push eax
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + eax*4 - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
push 1
push dword [ebp - 8]
push 0x142318
mov eax, dword [ebp - 0x10]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x1c]
push dword [edx + eax*4 - 4]
push 0x142328
lea eax, [ebp - 0x8e0]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x8e0]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00138ef4
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142818
call fcn.00064894
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x140e05
inc dword [ebp - 0x10]
dec dword [ebp - 0x7c]
jne 0x13fd8c
mov dl, 1
mov eax, dword [0x21f68]
call fcn.00013014
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x68]
mov edx, 0x142034
call fcn.00014174
jne 0x141961
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142838
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe4], 0
je 0x141069
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142854
call fcn.00064894
xor eax, eax
push ebp
push 0x140f34
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
lea eax, [ebp - 0x8e4]
mov ecx, 0x14286c
call fcn.000140b0
mov edx, dword [ebp - 0x8e4]
mov ecx, 0x142878
mov eax, dword [ebp - 0x28]
call fcn.00113a24
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x8ec]
call fcn.0001aa1c
mov ecx, dword [ebp - 0x8ec]
lea eax, [ebp - 0x8e8]
mov edx, 0x142884
call fcn.000140b0
mov edx, dword [ebp - 0x8e8]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x140f2a
inc eax
mov dword [ebp - 0x7c], eax
xor ebx, ebx
lea ecx, [ebp - 0x8f4]
mov edx, ebx
mov eax, dword [ebp - 0x28]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x8f4]
lea eax, [ebp - 0x8f0]
mov edx, 0x1428a0
call fcn.000140b0
mov edx, dword [ebp - 0x8f0]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
inc ebx
dec dword [ebp - 0x7c]
jne 0x140eec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x140f67
xor eax, eax
push ebp
push 0x141034
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
lea eax, [ebp - 0x8f8]
mov ecx, 0x1428e4
call fcn.000140b0
mov eax, dword [ebp - 0x8f8]
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x40]
mov edx, dword [ebp - 0x28]
call fcn.00113e9c
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
lea eax, [ebp - 0x8fc]
mov ecx, 0x1428e4
call fcn.000140b0
mov eax, dword [ebp - 0x8fc]
call fcn.0001ac8c
test al, al
je 0x140ff8
push 0x1428f4
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x1428e4
lea eax, [ebp - 0x900]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x900]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
jmp 0x14102a
push 0x14291c
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x1428e4
lea eax, [ebp - 0x904]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x904]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x14107a
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x14295c
call fcn.00064894
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142978
call fcn.00064894
mov eax, dword [ebp - 4]
mov bl, byte [eax + 0x84]
cmp bl, 2
je 0x14171c
cmp bl, 4
je 0x14171c
cmp bl, 3
je 0x14171c
cmp bl, 1
je 0x14171c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x21], 1
je 0x1410ce
mov eax, dword [ebp - 4]
cmp byte [eax + 0x21], 2
jne 0x141758
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe4], 0
je 0x141638
mov eax, dword [ebp - 4]
cmp byte [eax + 0x21], 1
jne 0x1414f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x60]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6c]
call fcn.00083308
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.00144c50
test al, al
jne 0x14115b
lea eax, [ebp - 0x908]
mov ecx, dword [ebp - 0xc]
mov edx, 0x142990
call fcn.000140b0
mov edx, dword [ebp - 0x908]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov ecx, 0x142100
mov dl, 1
mov eax, dword [0x1989c]
call fcn.0001e178
call fcn.000137dc
jmp 0x141180
lea eax, [ebp - 0x90c]
mov ecx, dword [ebp - 0xc]
mov edx, 0x1429b0
call fcn.000140b0
mov edx, dword [ebp - 0x90c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x1429d0
call fcn.00064894
push 0xffffffffffffffff
mov eax, dword [ebp - 4]
push dword [eax + 0x38]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x1428e4
lea eax, [ebp - 0x910]
mov edx, 4
call fcn.00014124
mov eax, dword [ebp - 0x910]
call fcn.00014228
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
lea eax, [ebp - 0x914]
mov ecx, 0x1428e4
call fcn.000140b0
mov eax, dword [ebp - 0x914]
call fcn.00014228
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 4]
push dword [eax + 0x38]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x1428e4
lea eax, [ebp - 0x918]
mov edx, 4
call fcn.00014124
mov eax, dword [ebp - 0x918]
call fcn.0001ac8c
test al, al
je 0x141260
push 0x142a04
mov eax, dword [ebp - 4]
push dword [eax + 0x38]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x1428e4
lea eax, [ebp - 0x91c]
mov edx, 5
call fcn.00014124
mov edx, dword [ebp - 0x91c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
jmp 0x14129d
push 0x142a18
mov eax, dword [ebp - 4]
push dword [eax + 0x38]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x1428e4
lea eax, [ebp - 0x920]
mov edx, 5
call fcn.00014124
mov edx, dword [ebp - 0x920]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
lea eax, [ebp - 0x7d8]
xor ecx, ecx
mov edx, 0xc
call fcn.00012cd0
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142a30
call fcn.00064894
mov dword [ebp - 0x7d8], 0xc
xor eax, eax
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x7d0], 0xffffffff
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142a64
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0x18], 0
je 0x141391
xor eax, eax
push ebp
push 0x141387
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x142aa8
mov eax, dword [ebp - 4]
push dword [eax + 0x38]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x142ad4
lea eax, [ebp - 0x924]
mov edx, 5
call fcn.00014124
mov edx, dword [ebp - 0x924]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
push dword [eax + 0x38]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x142ad4
lea eax, [ebp - 0x928]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x928]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.000648e8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x141391
xor eax, eax
mov dword [ebp - 0x78], eax
lea edx, [ebp - 0x930]
mov eax, dword [ebp - 0x78]
call fcn.0001aa1c
mov ecx, dword [ebp - 0x930]
lea eax, [ebp - 0x92c]
mov edx, 0x142ae4
call fcn.000140b0
mov edx, dword [ebp - 0x92c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
cmp dword [ebp - 0x78], 1
jle 0x1413dc
push 0xbb8
call sub.kernel32.dll_Sleep
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
lea eax, [ebp - 0x934]
mov ecx, 0x142b00
call fcn.000140b0
mov eax, dword [ebp - 0x934]
call fcn.0001ac8c
test al, al
jne 0x1414ba
xor eax, eax
push ebp
push 0x141477
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142b20
call fcn.00064894
push 0
push 0x80000080
push 2
lea eax, [ebp - 0x7d8]
push eax
push 3
mov eax, dword [0x14999c]
mov eax, dword [eax]
mov edx, dword [0x149d2c]
or eax, dword [edx]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
lea eax, [ebp - 0x938]
mov ecx, 0x142b00
call fcn.000140b0
mov eax, dword [ebp - 0x938]
call fcn.00014228
push eax
call sub.kernel32.dll_CreateFileA_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x1414cd
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142b64
call fcn.00064894
jmp 0x1414da
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xb
jne 0x141396
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142b78
call fcn.00064894
jmp 0x141758
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142ba8
call fcn.00064894
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
lea eax, [ebp - 0x74]
mov ecx, 0x1428e4
call fcn.000140b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe8]
mov edx, dword [ebp - 0x74]
call fcn.001362f8
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142bd8
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0x18], 0
je 0x141614
xor eax, eax
push ebp
push 0x14160a
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x142c0c
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x142c3c
lea eax, [ebp - 0x93c]
mov edx, 5
call fcn.00014124
mov edx, dword [ebp - 0x93c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x142c3c
lea eax, [ebp - 0x940]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x940]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.000648e8
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 0xc]
push 0x142c3c
lea eax, [ebp - 0x944]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x944]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe8]
call fcn.001362f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x141614
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe8]
call fcn.0013647c
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142c50
call fcn.00064894
jmp 0x141758
mov eax, dword [ebp - 4]
cmp byte [eax + 0x21], 2
jne 0x14164f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe8]
call fcn.0013647c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x21], 1
jne 0x141758
mov dword [ebp - 0x7d8], 0xc
xor eax, eax
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x7d0], 0xffffffff
xor eax, eax
push ebp
push 0x1416d9
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x80000080
push 2
lea eax, [ebp - 0x7d8]
push eax
push 3
mov eax, dword [0x14999c]
mov eax, dword [eax]
mov edx, dword [0x149d2c]
or eax, dword [edx]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
lea eax, [ebp - 0x948]
mov ecx, 0x142b00
call fcn.000140b0
mov eax, dword [ebp - 0x948]
call fcn.00014228
push eax
call sub.kernel32.dll_CreateFileA_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x141758
lea ecx, [ebp - 0x950]
xor edx, edx
mov dl, bl
mov eax, dword [0x1372bc]
call fcn.00020af4
mov ecx, dword [ebp - 0x950]
lea eax, [ebp - 0x94c]
mov edx, 0x142cb0
call fcn.000140b0
mov edx, dword [ebp - 0x94c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe4], 0
je 0x141806
push 0x142cdc
mov eax, dword [ebp - 4]
push dword [eax + 0x40]
push 0x1428e4
lea eax, [ebp - 0x954]
mov edx, 3
call fcn.00014124
mov edx, dword [ebp - 0x954]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
lea eax, [ebp - 0x95c]
mov ecx, 0x1428e4
call fcn.000140b0
mov eax, dword [ebp - 0x95c]
call fcn.00014228
mov edx, eax
lea eax, [ebp - 0x958]
call fcn.00013f9c
mov eax, dword [ebp - 0x958]
call fcn.0001ad90
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
lea eax, [ebp - 0x960]
mov edx, 0x142d00
call fcn.000140b0
mov edx, dword [ebp - 0x960]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00113968
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10], 0
je 0x141935
mov eax, dword [ebp - 4]
cmp byte [eax + 0x21], 1
jne 0x141935
mov eax, dword [ebp - 4]
call fcn.00142e78
push 0x142d20
mov eax, dword [ebp - 4]
push dword [eax + 0x60]
push 0x142214
mov eax, dword [ebp - 4]
push dword [eax + 0x68]
lea eax, [ebp - 0x964]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x964]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x60]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x6c]
mov eax, dword [ebp - 8]
call fcn.000831c8
push 0x142d40
mov eax, dword [ebp - 4]
push dword [eax + 0x60]
push 0x142214
mov eax, dword [ebp - 4]
push dword [eax + 0x68]
lea eax, [ebp - 0x968]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x968]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
push 0x142d20
mov eax, dword [ebp - 4]
push dword [eax + 0x64]
push 0x142214
mov eax, dword [ebp - 4]
push dword [eax + 0x68]
lea eax, [ebp - 0x96c]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x96c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x64]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x68]
mov eax, dword [ebp - 8]
call fcn.000831c8
push 0x142d40
mov eax, dword [ebp - 4]
push dword [eax + 0x64]
push 0x142214
mov eax, dword [ebp - 4]
push dword [eax + 0x68]
lea eax, [ebp - 0x970]
mov edx, 4
call fcn.00014124
mov edx, dword [ebp - 0x970]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
jmp 0x141c1b
mov eax, dword [ebp - 0x68]
mov edx, 0x142034
call fcn.00014174
jne 0x141c1b
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x5c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x68]
mov eax, dword [ebp - 8]
call fcn.000831c8
jmp 0x141c1b
xor edx, edx
push ebp
push 0x141bb7
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x149c20]
mov eax, dword [eax]
mov edx, 0x142d60
call fcn.00064894
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
lea eax, [ebp - 0x974]
mov ecx, 0x142b00
call fcn.000140b0
mov edx, dword [ebp - 0x974]
lea eax, [ebp - 0x434]
call fcn.00017956
lea eax, [ebp - 0x434]
call fcn.00017c82
call fcn.000128b0
xor edx, edx
lea eax, [ebp - 0x434]
call fcn.000143fc
call fcn.000179d1
call fcn.000128b0
lea eax, [ebp - 0x434]
call fcn.00017a5c
call fcn.000128b0
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x84]
cmp al, 2
je 0x1419f7
cmp al, 4
je 0x1419f7
cmp al, 3
je 0x1419f7
cmp al, 1
jne 0x141a29
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
lea eax, [ebp - 0x978]
mov ecx, 0x14286c
call fcn.000140b0
mov edx, dword [ebp - 0x978]
mov ecx, 0x142878
mov eax, dword [ebp - 0x28]
call fcn.00113a24
jmp 0x141a3b
push 0
mov ecx, 0x142878
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
call fcn.00113a24
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x980]
call fcn.0001aa1c
mov ecx, dword [ebp - 0x980]
lea eax, [ebp - 0x97c]
mov edx, 0x142d7c
call fcn.000140b0
mov edx, dword [ebp - 0x97c]
mov eax, dword [0x149c20]
mov eax, dword [eax]
call fcn.00064894
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 4
je 0x141b7f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 2
jne 0x141b18
push dword [ebp - 0xc]
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x142dac
lea eax, [ebp - 0x984]
mov edx, 3
call fcn.00014124
mov eax, dword [ebp - 0x984]
push eax
push dword [ebp - 0xc]
push 0x14286c
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x142dbc
lea eax, [ebp - 0x988]
mov edx, 4
call fcn.00014124
mov eax, dword [ebp - 0x988]
mov edx, dword [ebp - 0x28]
pop ecx
call fcn.00113e9c
push dword [ebp - 0xc]
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x142dac
lea eax, [ebp - 0x98c]
mov edx, 3
call fcn.00014124
mov eax, dword [ebp - 0x98c]
call fcn.00113968
jmp 0x141b7f
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 8]
lea eax, [ebp - 0x990]
mov edx, dword [ebp - 0xc]
call fcn.000140b0
mov eax, dword [ebp - 0x990]
push eax
push dword [ebp - 0xc]
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x1428e4
lea eax, [ebp - 0x994]
mov edx, 3
call fcn.00014124
mov eax, dword [ebp - 0x994]
mov edx, dword [ebp - 0x28]
pop ecx
call fcn.00113e9c
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 8]
lea eax, [ebp - 0x998]
mov edx, dword [ebp - 0xc]
call fcn.000140b0
mov eax, dword [ebp - 0x998]
call fcn.00113968
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 1
je 0x141bad
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 2
je 0x141bad
mov eax, dword [ebp - 4]
cmp byte [eax + 0x84], 4
je 0x141bad
mov eax, 0x142dd0
call fcn.0005eba4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x141c1b
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x84]
cmp al, 2
je 0x141c2c
cmp al, 4
jne 0x141c39
mov ecx, eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00144670
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x141f26
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x141fae
lea eax, [ebp - 0x9b4]
mov edx, 0x64
call fcn.00013e08
lea eax, [ebp - 0x824]
mov edx, 0x13
call fcn.00013e08
lea eax, [ebp - 0x74]
call fcn.00013de4
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.00013e08
lea eax, [ebp - 0x60]
mov edx, dword [0xcef14]
call fcn.00016848
lea eax, [ebp - 0x5c]
mov edx, 4
call fcn.00013e08
lea eax, [ebp - 0x2c]
call fcn.00013de4
lea eax, [ebp - 0x1c]
mov edx, dword [0x104868]
call fcn.00016848
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00013e08
ret