Function at 0x49d760
Capabilities:
Check if file exists
Copy file
Create process on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b77d9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1d8
push ebx
mov ebx, ecx
push esi
push edi
mov al, byte [ebx + 0x492]
xor esi, esi
test al, al
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x74], ebx
mov dword [ebp - 4], esi
jne 0x49d896
cmp dword [ebx + 0x50c], esi
je 0x49d896
mov eax, dword [ebx + 0x4e8]
mov edx, dword [ebx + 0x4ec]
sub eax, edx
cmp eax, 1
jg 0x49d896
call fcn.0049d710
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x90], edi
je 0x49d896
mov eax, dword [0x6754d4]
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x108], eax
call fcn.00414e30
lea ecx, [ebp - 0xf8]
call fcn.00414e30
lea ecx, [ebp - 0xec]
call fcn.00414e30
mov eax, dword [0x6754d4]
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
call fcn.00414e30
mov eax, dword [0x6754d4]
mov dword [ebp - 0x160], 0x5d1124
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x9c], esi
lea ecx, [ebp - 0x160]
push esi
push ecx
push edi
lea ecx, [ebx + 8]
mov byte [ebp - 4], 1
call fcn.0056f480
test al, al
jne 0x49d8a7
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0
call fcn.00458730
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push 0x28
call fcn.005970d9
add esp, 4
cmp eax, esi
mov dword [ebp - 0x28], eax
je 0x49da45
mov edx, dword [0x6754d4]
mov ecx, eax
lea esi, [ecx + 0xc]
add ecx, 0x10
mov dword [ebp - 0x70], ecx
mov dword [esi], edx
call fcn.00414e30
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x1c], 0
mov byte [eax + 0x24], 0
mov byte [eax + 0x25], 0
mov dword [eax], 0
mov byte [eax + 0x26], 0
mov dword [eax + 4], edi
mov ecx, dword [ebx + 0x564]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ecx - 8]
cmp eax, 5
jg 0x49d910
mov ecx, dword [ebp - 0x110]
push ecx
push 0x64efb0
push esi
call fcn.00593b08
xor edi, edi
add esp, 0xc
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x2c], edi
mov word [ebp - 0x30], di
mov eax, dword [ebp - 0xec]
mov byte [ebp - 4], 2
cmp eax, edi
mov byte [ebp - 0x11], 0
jne 0x49d943
lea eax, [ebp - 0xe8]
push eax
call fcn.0057e90a
add esp, 4
test eax, eax
jbe 0x49da64
mov eax, dword [ebp - 0xec]
cmp eax, edi
jne 0x49d964
lea eax, [ebp - 0xe8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x49da64
mov eax, dword [ebp - 0xec]
cmp eax, edi
jne 0x49d984
lea eax, [ebp - 0xe8]
mov edx, 0x64efb0
test edx, edx
je 0x49df37
cmp eax, edi
je 0x49df37
push eax
lea ecx, [ebp - 0x24]
call fcn.00403bb0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.00401070
push 0x64efb0
lea ecx, [ebp - 0x40]
call fcn.00401f30
mov esi, dword [ebp - 0x38]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.00401fb0
push eax
call fcn.0057e90a
lea esi, [eax + esi + 2]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x34], edx
je 0x49da28
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x24]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x40]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x34]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.0057e90a
add esp, 0x14
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 3
call fcn.00401070
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.00401070
jmp 0x49df35
mov ecx, dword [0x67a148]
cmp ecx, esi
je 0x49d887
push 1
push 0x65791c
call fcn.00480980
jmp 0x49d887
cmp byte [ebp - 0x122], 4
jne 0x49defb
mov eax, dword [ebp - 0x104]
cmp eax, edi
jne 0x49da81
lea eax, [ebp - 0x100]
push eax
call fcn.0057e90a
add esp, 4
test eax, eax
jbe 0x49defb
mov eax, dword [ebp - 0x104]
cmp eax, edi
jne 0x49daa2
lea eax, [ebp - 0x100]
push eax
call fcn.0043c460
add esp, 4
cmp eax, 0xffffffff
je 0x49defb
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x38], edi
mov word [ebp - 0x3c], di
mov eax, dword [ebp - 0xec]
mov byte [ebp - 4], 5
cmp eax, edi
jne 0x49dad2
lea eax, [ebp - 0xe8]
push eax
call fcn.0057e90a
add esp, 4
test eax, eax
jbe 0x49daf1
mov eax, dword [ebp - 0xec]
cmp eax, edi
jne 0x49db01
lea eax, [ebp - 0xe8]
jmp 0x49db01
mov eax, dword [ebp - 0xc8]
cmp eax, edi
jne 0x49db01
lea eax, [ebp - 0xc4]
push eax
mov dword [ebp - 0x18], eax
call fcn.0057e90a
add esp, 4
test eax, eax
jne 0x49dcc5
push edi
call fcn.00580063
mov esi, eax
push esi
call fcn.00580ead
add esp, 8
call fcn.00580eba
mov ecx, dword [ebx + 0x434]
cmp ecx, edi
je 0x49db39
mov ebx, ecx
jmp 0x49db42
mov edx, dword [ebp - 0x74]
lea ebx, [edx + 0x438]
lea ecx, [ebp - 0x1e4]
push 0xa
push ecx
push eax
call fcn.0057ff82
lea edx, [ebp - 0x1a0]
push 0xa
push edx
push esi
mov edi, eax
call fcn.0057ff82
mov esi, eax
mov eax, 0x657910
add esp, 0x18
test eax, eax
je 0x49dcb3
test ebx, ebx
je 0x49dcb3
test esi, esi
je 0x49dcb3
test edi, edi
je 0x49dcb3
push ebx
lea ecx, [ebp - 0x58]
call fcn.00403bb0
push esi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 6
call fcn.00403bb0
push edi
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 7
call fcn.00403bb0
mov bl, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], bl
call fcn.00401070
push 0x657910
lea ecx, [ebp - 0x24]
call fcn.00401f30
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 9
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x4c]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
mov dword [ebp - 0x6c], edi
mov edi, eax
add esp, 4
lea ecx, [ebp - 0x58]
add edi, esi
call fcn.00401fb0
push eax
call fcn.0057e90a
mov ecx, dword [ebp - 0x6c]
add edi, ecx
lea esi, [eax + edi + 4]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x40], edx
je 0x49dc81
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x8c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x58]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x24]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x40]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x40]
push ecx
call fcn.0057e90a
add esp, 0x1c
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 7
call fcn.00401070
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 6
call fcn.00401070
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00401070
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x49dcbf
mov dword [ebp - 0x18], eax
jmp 0x49dcc5
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
push eax
call fcn.0057e90a
add esp, 4
test eax, eax
je 0x49dee6
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], eax
mov word [ebp - 0x20], ax
mov ecx, 0x64efb0
mov byte [ebp - 4], 0xa
test ecx, ecx
je 0x49ddad
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x49ddad
mov edx, ecx
lea ecx, [ebp - 0x4c]
push edx
call fcn.00403bb0
mov bl, 0xb
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], bl
call fcn.00401070
push 0x64efb0
lea ecx, [ebp - 0x58]
call fcn.00401f30
mov esi, dword [ebp - 0x50]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xc
call fcn.00401fb0
push eax
call fcn.0057e90a
lea esi, [eax + esi + 2]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x24], edx
je 0x49dd93
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x4c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x58]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x24]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.0057e90a
add esp, 0x14
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xa
call fcn.00401070
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x49ddb4
lea eax, [ebp - 0x20]
push 0x5c
push eax
call fcn.0057e85a
add esp, 8
test eax, eax
je 0x49ddf6
add eax, 2
mov word [eax], 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x49ddd5
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x49ddf6
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x49ddeb
lea eax, [ebp - 0x20]
push 0
push eax
call fcn.0046e270
add esp, 8
mov eax, dword [ebp - 0x104]
test eax, eax
jne 0x49de06
lea eax, [ebp - 0x100]
mov esi, dword [ebp - 0x18]
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov edx, 0x64efb0
test edx, edx
je 0x49decf
test esi, esi
je 0x49decf
push esi
lea ecx, [ebp - 0x4c]
call fcn.00403bb0
mov bl, 0xd
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00401070
push 0x64efb0
lea ecx, [ebp - 0x58]
call fcn.00401f30
mov esi, dword [ebp - 0x50]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xe
call fcn.00401fb0
push eax
call fcn.0057e90a
lea esi, [eax + esi + 2]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x34], edx
je 0x49deb8
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x4c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x58]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x34]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.0057e90a
add esp, 0x14
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xa
call fcn.00401070
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x24]
mov byte [ebp - 0x11], 1
mov byte [ebp - 4], 5
mov byte [edx + 0x26], 1
call fcn.00401070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.00401070
mov al, byte [ebp - 0x11]
test al, al
jne 0x49df35
xor edi, edi
mov ecx, dword [0x67a148]
cmp ecx, edi
je 0x49df11
push 1
push 0x657900
call fcn.00480980
mov esi, dword [ebp - 0x28]
mov ecx, esi
call fcn.0049e440
push esi
call fcn.00597102
add esp, 4
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x49d887
xor edi, edi
mov eax, dword [ebp - 0x34]
cmp eax, edi
jne 0x49df41
lea eax, [ebp - 0x30]
mov ecx, 0x64efb0
test ecx, ecx
je 0x49e005
test eax, eax
je 0x49e005
push eax
lea ecx, [ebp - 0x4c]
call fcn.00403bb0
mov ecx, dword [ebp - 0x70]
mov byte [ebp - 4], 0xf
call fcn.00401070
push 0x64efb0
lea ecx, [ebp - 0x58]
call fcn.00401f30
mov esi, dword [ebp - 0x50]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
call fcn.00401fb0
push eax
call fcn.0057e90a
lea esi, [eax + esi + 2]
lea ebx, [esi + esi]
push ebx
call fcn.005970d9
mov edx, dword [ebp - 0x28]
mov edi, eax
add esp, 8
lea eax, [edx + 0x10]
test edi, edi
mov dword [eax], edi
je 0x49dfed
mov ecx, ebx
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x4c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x58]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x28]
push esi
mov ecx, dword [eax + 0x10]
lea esi, [eax + 0x10]
push ecx
call fcn.0057e89a
mov edx, dword [esi]
push edx
call fcn.0057e90a
add esp, 0x14
mov dword [esi + 8], eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 2
call fcn.00401070
mov eax, dword [ebp - 0x74]
xor ecx, ecx
mov dl, byte [eax + 0x28c]
test dl, dl
setne cl
mov dword [ebp - 0x7c], ecx
mov cl, byte [eax + 0x28d]
test cl, cl
je 0x49e026
or dword [ebp - 0x7c], 2
xor ecx, ecx
mov dword [eax + 0x520], ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x60], ecx
mov word [ebp - 0x64], cx
mov eax, dword [0x67a008]
mov byte [ebp - 4], 0x11
cmp eax, ecx
mov esi, eax
jne 0x49e04c
mov esi, 0x67a00c
mov edx, 0x64f030
test edx, edx
je 0x49e15b
test esi, esi
je 0x49e15b
mov eax, 0x654da4
test eax, eax
je 0x49e15b
push edx
lea ecx, [ebp - 0x8c]
call fcn.00401f30
push esi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x12
call fcn.00403bb0
mov bl, 0x13
push 0x654da4
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.00403bb0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
call fcn.00401070
mov esi, dword [ebp - 0x84]
lea ecx, [ebp - 0x58]
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x4c]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x68], edx
je 0x49e132
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x58]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x8c]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x68]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x11
call fcn.00401070
mov ecx, dword [ebp - 0x68]
xor esi, esi
mov eax, ecx
cmp ecx, esi
jne 0x49e166
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x49e3c4
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x80], esi
cmp eax, esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
jne 0x49e189
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x38], esi
mov word [ebp - 0x3c], si
call fcn.00401fc0
mov eax, dword [0x67a41c]
mov byte [ebp - 4], 0x15
cmp eax, esi
jne 0x49e1fa
mov eax, dword [ebp - 0x68]
cmp eax, esi
jne 0x49e1b3
lea eax, [ebp - 0x64]
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x70]
push edx
lea edx, [ebp - 0x80]
push ecx
push edx
push eax
call fcn.0048a4c0
add esp, 0x10
cmp eax, esi
je 0x49e1f2
mov eax, dword [ebp - 0x80]
cmp eax, 6
jg 0x49e1e6
jne 0x49e1f2
mov eax, dword [ebp - 0x70]
cmp eax, 6
jg 0x49e1e6
jne 0x49e1f2
cmp dword [ebp - 0x6c], 7
jl 0x49e1f2
mov dword [0x67a41c], 1
jmp 0x49e1fa
cmp dword [0x67a41c], esi
je 0x49e271
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x34]
call fcn.00401fb0
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push eax
push 0
push 0xfde9
call edi
mov esi, eax
test esi, esi
jle 0x49e26f
mov eax, dword [0x6754d4]
mov dword [ebp - 0x78], eax
push esi
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x16
call fcn.0059b10a
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x34]
call fcn.00401fb0
push eax
push 0
push 0xfde9
call edi
test eax, eax
je 0x49e263
mov ecx, dword [ebp - 0x78]
push 0
push ecx
lea ecx, [ebp - 0x40]
call fcn.004028e0
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x15
call fcn.0059ad3d
xor esi, esi
mov edx, dword [0x6754d4]
mov ecx, 0x11
xor eax, eax
lea edi, [ebp - 0x1a4]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1a4], 0x44
mov dword [ebp - 0x178], 0x81
mov word [ebp - 0x174], si
mov dword [ebp - 0x18], edx
mov eax, dword [0x67a41c]
mov byte [ebp - 4], 0x17
cmp eax, esi
mov eax, 0x657218
jne 0x49e2bb
mov eax, 0x657214
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x108]
mov ebx, dword [ebp - 0x90]
mov ecx, dword [edi + 0xc]
push ecx
mov ecx, dword [ebp - 0x74]
push edx
push eax
mov eax, dword [ebp - 0x7c]
mov edx, dword [ecx + 0x568]
push ebx
push eax
push edx
lea eax, [ebp - 0x18]
push 0x6578c4
push eax
call fcn.00593b08
add esp, 0x20
lea ecx, [ebp - 0x24]
call fcn.00414e30
mov eax, dword [0x67a41c]
mov byte [ebp - 4], 0x18
test eax, eax
lea ecx, [ebp - 0x40]
jne 0x49e30b
lea ecx, [ebp - 0x34]
call fcn.00401fb0
mov esi, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x68]
call fcn.00401fb0
push eax
push esi
lea ecx, [ebp - 0x24]
call fcn.00410280
lea ecx, [ebp - 0x5c]
lea edx, [ebp - 0x1a4]
push ecx
push edx
push 0
push 0
push 0x30
push 1
push 0
push 0
lea ecx, [ebp - 0x24]
call fcn.00401fb0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x49e3e1
mov eax, dword [ebp - 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [ebp - 0x5c]
push ecx
call esi
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x15
call fcn.0059ad3d
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x11
call fcn.00401070
push 0
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x98], ebx
call fcn.00580063
mov esi, dword [ebp - 0x74]
add esp, 4
lea edx, [ebp - 0x98]
mov dword [edi + 0x20], eax
push edx
lea ecx, [esi + 0x540]
mov byte [edi + 0x24], 1
call fcn.004a2480
inc dword [esi + 0x4e8]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.00401070
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x49d887
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x15
call fcn.0059ad3d
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x11
call fcn.00401070
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.00401070
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x49d887