Function at 0x409aa0
Capabilities:
Access peb ldr_data
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x411d48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc40
push ebx
push ebp
push esi
mov ebp, ecx
push edi
xor ebx, ebx
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x451]
mov byte [esp + 0x450], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call sub.MFC42.DLL_AfxGetModuleState
mov eax, dword [eax + 4]
lea ecx, [esp + 0x450]
push 0x400
push ecx
mov edx, dword [eax + 0x6c]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x41c490
lea ecx, [esp + 0x50]
call fcn.00410c7a
push str.Catcher
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0xc60], ebx
push eax
call sub.MFC42.DLL_operator
lea ecx, [esp + 0x4c]
mov byte [esp + 0xc58], 2
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ebx
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x14]
lea esi, [eax + 0xc]
mov dword [esp + 0x48], esi
call sub.MFC42.DLL_CFile::CFile
lea ecx, [esp + 0x24]
mov byte [esp + 0xc58], 3
call sub.MFC42.DLL_CException::CException
lea ecx, [esp + 0x34]
mov byte [esp + 0xc58], 4
call sub.MFC42.DLL_CString::CString_3
or edi, 0xffffffff
push ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0xc5c], 5
mov dword [esp + 0x28], 0x4136c8
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], edi
call sub.MFC42.DLL_CString::operator_2
lea edx, [esp + 0x24]
lea eax, [esp + 0x450]
push edx
push 0x40
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xc64], 6
call sub.MFC42.DLL_CFile::Open
test eax, eax
push ebx
jne 0x409c0c
push ebx
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CException::ReportError
mov dword [esp + 0x24], 0x4136c8
lea ecx, [esp + 0x34]
mov byte [esp + 0xc58], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0x413668
mov byte [esp + 0xc58], 2
call fcn.00410eb4
lea ecx, [esp + 0x10]
mov dword [esp + 0xc58], edi
call sub.MFC42.DLL_CString::CString
xor eax, eax
jmp 0x409dcd
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CFile::GetLength
sub eax, esi
lea ecx, [esp + 0x18]
push eax
call sub.MFC42.DLL_CFile::Seek
xor ecx, ecx
lea edx, [esp + 0x38]
mov dword [esp + 0x39], ecx
push 0xa
mov dword [esp + 0x41], ecx
push edx
mov byte [esp + 0x49], cl
lea ecx, [esp + 0x1c]
mov byte [esp + 0x40], bl
call sub.MFC42.DLL_CFile::Read
mov esi, dword [esp + 0x10]
mov ecx, 5
lea edi, [esp + 0x38]
xor eax, eax
repe cmpsw word [esi], word es:[edi]
jne 0x409d71
lea esi, [ebp + 0x250]
push 4
push esi
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CFile::Read
lea edi, [ebp + 0x258]
push 4
push edi
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CFile::Read
lea eax, [ebp + 0x25c]
push 4
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CFile::Read
push ebx
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CFile::GetLength
mov ecx, dword [edi]
mov edi, dword [esi]
mov edx, dword [esp + 0x4c]
sub eax, ecx
mov ecx, dword [ebp + 0x25c]
sub eax, edi
sub eax, edx
sub eax, ecx
lea ecx, [esp + 0x18]
push eax
call sub.MFC42.DLL_CFile::Seek
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x851]
mov byte [esp + 0x850], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x850]
push ecx
push 0x400
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x51]
mov byte [esp + 0x50], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0x850]
stosb byte es:[edi], al
push edx
lea eax, [esp + 0x54]
push str._sCyberArticleReader.ini
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov edx, dword [esi]
lea ecx, [esp + 0x5c]
push 1
push ecx
lea eax, [esp + 0x28]
push edx
push eax
call fcn.004098c0
add esp, 0x1c
test eax, eax
je 0x409d78
lea ecx, [esp + 0x50]
push ecx
lea ecx, [ebp + 0x24c]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CFile::GetPosition
lea edx, [esp + 0x450]
lea ecx, [ebp + 0x248]
push edx
mov dword [ebp + 0x254], eax
call sub.MFC42.DLL_CString::operator_2
lea eax, [esp + 0x50]
mov ecx, ebp
push eax
call fcn.00409df0
mov esi, eax
jmp 0x409d7c
mov esi, 1
jmp 0x409d7c
mov esi, dword [esp + 0x44]
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CFile::Close
mov dword [esp + 0x24], 0x4136c8
lea ecx, [esp + 0x34]
mov byte [esp + 0xc58], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0x413668
mov byte [esp + 0xc58], 2
call fcn.00410eb4
lea ecx, [esp + 0x10]
mov dword [esp + 0xc58], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, esi
mov ecx, dword [esp + 0xc50]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xc4c
ret