Function at 0x56599c
Capabilities:
Copy file
Move file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x18
push 0
push 0
dec ecx
jne 0x5659a4
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x566b51
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
lea edx, [ebp - 0x24]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
call fcn.0040a050
mov edx, dword [ebp - 0x24]
mov eax, 0x566b6c
call fcn.00404e28
test eax, eax
je 0x566b33
lea eax, [ebp - 0x10]
call fcn.00404894
lea edx, [ebp - 0x28]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
call fcn.00409fe4
mov eax, dword [ebp - 0x28]
push eax
lea edx, [ebp - 0x2c]
xor eax, eax
call fcn.0055bc14
mov eax, dword [ebp - 0x2c]
pop edx
call fcn.00404e28
test eax, eax
jle 0x565ce8
lea edx, [ebp - 0x34]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
call fcn.004c5fcc
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.0040a050
mov edx, dword [ebp - 0x30]
mov eax, 0x566b7c
call fcn.00404e28
test eax, eax
jg 0x565a88
lea edx, [ebp - 0x38]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
call fcn.004c6014
mov edx, dword [ebp - 0x38]
mov eax, 0x566b88
call fcn.00404e28
test eax, eax
jle 0x565ce8
mov eax, dword [0x578640]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x565ce8
inc ebx
xor esi, esi
lea ecx, [ebp - 0x44]
mov eax, dword [0x578640]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d4]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.0040aec8
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.0040a050
mov eax, dword [ebp - 0x3c]
push eax
lea edx, [ebp - 0x4c]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
call fcn.0040aec8
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.0040a050
mov edx, dword [ebp - 0x48]
pop eax
call fcn.00404c4c
jne 0x565ce0
mov eax, dword [0x5789b0]
cmp byte [eax], 0
je 0x565b4f
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov edx, dword [eax + 0x2c8]
lea eax, [ebp - 0x50]
mov ecx, 0x566b9c
call fcn.00404b88
mov edx, dword [ebp - 0x50]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
jmp 0x565b86
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov edx, dword [eax + 0x2c8]
lea eax, [ebp - 0x54]
mov ecx, 0x566bbc
call fcn.00404b88
mov edx, dword [ebp - 0x54]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d0]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x565ce0
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
xor edx, edx
call fcn.0040aa90
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
call fcn.0040ac34
test al, al
je 0x565c59
mov eax, dword [0x5789b0]
cmp byte [eax], 0
je 0x565c1d
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov edx, dword [eax + 0x2c8]
lea eax, [ebp - 0x58]
mov ecx, 0x566bd4
call fcn.00404b88
mov edx, dword [ebp - 0x58]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
jmp 0x565ce0
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov edx, dword [eax + 0x2c8]
lea eax, [ebp - 0x5c]
mov ecx, 0x566bec
call fcn.00404b88
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
jmp 0x565ce0
mov eax, dword [0x5789b0]
cmp byte [eax], 0
jne 0x565c80
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
mov edx, 0x566c08
call fcn.00415cc8
jmp 0x565c9b
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
mov edx, 0x566c54
call fcn.00415cc8
push 4
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov edx, dword [eax + 0x2c8]
lea eax, [ebp - 0x60]
mov ecx, 0x566c78
call fcn.00404b88
mov eax, dword [ebp - 0x60]
call fcn.00404d00
push eax
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
call fcn.00404d00
push eax
call sub.kernel32.dll_MoveFileExA
inc esi
dec ebx
jne 0x565aa8
push 0
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x64]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
call fcn.004c5fcc
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x578400]
mov eax, dword [eax]
mov edx, 0x566c8c
call fcn.004ef3a8
push 0
lea eax, [ebp - 0x68]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
mov edx, 0x566c8c
call fcn.004ef3a8
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 0xc]
call fcn.0040492c
cmp dword [ebp - 0xc], 0
je 0x565d87
push 0
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x6c]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
call fcn.004c5fcc
mov ecx, dword [ebp - 0x6c]
mov eax, dword [0x578400]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.004ef3fc
cmp dword [ebp - 0x10], 0
je 0x565d87
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x10]
call fcn.0040a050
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0x10]
call fcn.0040492c
mov edx, dword [ebp - 0xc]
mov eax, 0x566ca4
call fcn.00404e28
test eax, eax
jg 0x565dad
mov edx, dword [ebp - 0xc]
mov eax, 0x566cd4
call fcn.00404e28
test eax, eax
jle 0x566b2f
lea edx, [ebp - 0x74]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
call fcn.004c5fcc
mov edx, dword [ebp - 0x74]
mov eax, 0x566d04
call fcn.00404e28
test eax, eax
jg 0x566b33
push 0
lea eax, [ebp - 0x20]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
mov edx, 0x566c8c
call fcn.004ef3a8
push 0
lea eax, [ebp - 0x78]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov edx, 0x566c8c
call fcn.004ef3a8
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x20]
call fcn.0040492c
push 0
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov edx, 0x566c8c
call fcn.004ef3a8
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x20]
call fcn.0040492c
mov edx, dword [ebp - 0x20]
mov eax, 0x566d18
call fcn.00404e28
test eax, eax
jg 0x566b33
lea edx, [ebp - 0x1c]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
call fcn.0040a050
mov edx, dword [ebp - 0x1c]
mov eax, 0x566d30
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566d44
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566d5c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566d74
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566d84
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566d94
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566db0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566dc0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566dcc
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566de0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566df0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e04
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e14
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e24
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e34
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e44
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e58
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e68
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e78
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e8c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e9c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566eac
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566ebc
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566ed0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566ee0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566ef0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f00
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f14
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f38
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f4c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f5c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f70
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f84
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566f94
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566fa4
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566fbc
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566fd0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566fe0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566ff0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566ffc
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x56700c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567020
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567030
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567044
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567058
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567068
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x56707c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567090
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5670a0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5670b0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5670c0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5670d4
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5670e4
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5670f8
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x56710c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5670c0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x56711c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567130
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567140
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567150
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567160
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567174
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567180
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x56718c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x56719c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5671ac
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5671bc
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5671d0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5671e4
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566ed0
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5671f4
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567208
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567220
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567238
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567248
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x56725c
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567270
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x566e14
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567280
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x567294
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5672a4
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5672b8
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5672cc
call fcn.00404e28
test eax, eax
jg 0x566b33
mov edx, dword [ebp - 0x1c]
mov eax, 0x5672e4
call fcn.00404e28
test eax, eax
jg 0x566b33
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d8]
mov eax, dword [eax + 0x2c8]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x5672f8
mov edx, 0x567304
call fcn.004ef750
push 0x567310
mov eax, dword [0x578524]
mov eax, dword [eax]
push dword [eax + 0x2f8]
push 0x56734c
push dword [ebp - 0x18]
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00404bfc
xor eax, eax
push ebp
push 0x566645
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
mov edx, 0x567358
call fcn.00404c4c
jne 0x56663b
mov eax, dword [0x578524]
mov eax, dword [eax]
call fcn.0056c6a4
mov eax, dword [0x5789b0]
cmp byte [eax], 0
je 0x566613
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
mov edx, 0x567368
call fcn.00415cc8
jmp 0x56662e
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
mov edx, 0x567394
call fcn.00415cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x566b33
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x56669b
mov eax, dword [0x5789b0]
cmp byte [eax], 0
je 0x5666fb
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0x80]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
lea eax, [ebp - 0x80]
mov edx, 0x567464
call fcn.00404b44
mov edx, dword [ebp - 0x80]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
jmp 0x566758
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0x84]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
lea eax, [ebp - 0x84]
mov edx, 0x566bbc
call fcn.00404b44
mov edx, dword [ebp - 0x84]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d0]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x566b29
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0x88]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
mov eax, dword [ebp - 0x88]
xor edx, edx
call fcn.0040aa90
push 0
lea edx, [ebp - 0x94]
xor eax, eax
call fcn.00403314
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.0040ad48
push dword [ebp - 0x90]
push 0x56747c
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0x98]
call fcn.0040aec8
push dword [ebp - 0x98]
push 0x566c78
lea eax, [ebp - 0x8c]
mov edx, 4
call fcn.00404bfc
mov eax, dword [ebp - 0x8c]
call fcn.00404d00
push eax
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
mov eax, dword [ebp - 0xa0]
call fcn.00404d00
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xa4]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 4]
call fcn.00565844
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
mov eax, dword [ebp - 0xa8]
call fcn.0040ac34
test al, al
je 0x5669d8
mov eax, dword [0x5789b0]
cmp byte [eax], 0
je 0x566976
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xac]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
lea eax, [ebp - 0xac]
mov edx, 0x56748c
call fcn.00404b44
mov edx, dword [ebp - 0xac]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
jmp 0x566b29
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xb0]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
lea eax, [ebp - 0xb0]
mov edx, 0x566bec
call fcn.00404b44
mov edx, dword [ebp - 0xb0]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
jmp 0x566b29
mov eax, dword [0x5789b0]
cmp byte [eax], 0
je 0x5669ff
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
mov edx, 0x566c54
call fcn.00415cc8
jmp 0x566a5c
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
lea eax, [ebp - 0xb4]
mov edx, 0x566c08
call fcn.00404b44
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x590774]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x208]
call fcn.00415cc8
push 4
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xb8]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
lea eax, [ebp - 0xb8]
mov edx, 0x566c78
call fcn.00404b44
mov eax, dword [ebp - 0xb8]
call fcn.00404d00
push eax
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
mov eax, dword [ebp - 0xbc]
call fcn.00404d00
push eax
call sub.kernel32.dll_MoveFileExA
mov eax, dword [0x5789a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3b0]
mov eax, dword [eax + 0x10110]
push eax
lea eax, [ebp - 0xc0]
push eax
mov eax, dword [0x578400]
mov eax, dword [eax]
mov ecx, 0x567304
mov edx, 0x5672f8
call fcn.004ef750
mov eax, dword [ebp - 0xc0]
call fcn.0056509c
mov byte [ebp - 5], 1
jmp 0x566b33
mov byte [ebp - 5], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x566b58
lea eax, [ebp - 0xc0]
mov edx, 0x2e
call fcn.004048b8
ret