Function at 0x466cf0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov edx, 0x400
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x408], edx
mov dword [ebp - 0x41c], 0xffffffff
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x40c], 0
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x424], edi
test ecx, ecx
je 0x46702b
cmp dword [ecx], 0
je 0x46702b
push dword [ecx + 0x1b0]
push dword [ecx + 0x1ac]
push 1
push eax
call dword [0x563124]
add esp, 0x10
mov dword [ebp - 0x410], eax
test eax, eax
jne 0x466d92
mov eax, 0x1f4
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
push ebx
mov dword [edi + 0x130], 3
push esi
nop
push edi
call fcn.00468a60
mov ecx, dword [ebp - 0x408]
mov esi, eax
lea eax, [edi + 0x114]
add esp, 4
mov ebx, eax
cmp esi, 2
jne 0x466dcc
mov dword [ebp - 0x414], 1
mov ebx, eax
jmp 0x466de0
test esi, esi
je 0x466de0
mov ebx, eax
cmp esi, 6
je 0x466de0
cmp esi, 1
jne 0x466fbd
mov edx, dword [ebp - 0x40c]
mov eax, dword [edi + 0x110]
add edx, ecx
cmp edx, eax
jbe 0x466ed5
nop word [eax + eax]
cmp dword [edi + 0x130], 4
je 0x466ed5
lea eax, [ebp - 0x41c]
push eax
push 0x400
lea eax, [ebp - 0x404]
push eax
push dword [ebp - 0x420]
call fcn.0046a090
add esp, 0x10
test eax, eax
jle 0x466e7b
push eax
lea eax, [ebp - 0x404]
push eax
push ebx
call fcn.0045d2e0
add esp, 0xc
test eax, eax
jne 0x466fa2
push edi
call fcn.00468a60
mov esi, eax
add esp, 4
cmp esi, 2
jne 0x466e67
mov dword [ebp - 0x414], 1
jmp 0x466eb5
test esi, esi
je 0x466eb5
cmp esi, 6
je 0x466eb5
cmp esi, 1
jne 0x466fbd
jmp 0x466eb5
jne 0x466fc4
cmp dword [ebp - 0x414], 0
je 0x466fb3
push dword [ebx]
push str._____RECVD______n_s_n__________________n
push 0x66a
push str.D:UsersphiliDropboxDevelopmentlibpupnppupnpupnp_srcgenlib_nethttpwebserver.c
push 7
push 2
call fcn.0040d4d0
add esp, 0x18
mov dword [edi + 0x130], 4
mov edx, dword [ebp - 0x40c]
mov eax, dword [edi + 0x110]
add edx, dword [ebp - 0x408]
mov edi, dword [ebp - 0x424]
cmp edx, eax
ja 0x466e00
mov ecx, eax
sub ecx, dword [ebp - 0x40c]
cmp edx, eax
cmovbe ecx, dword [ebp - 0x408]
mov eax, ecx
push eax
mov dword [ebp - 0x408], eax
mov eax, dword [edi + 0x140]
add eax, dword [ebx]
add eax, dword [ebp - 0x40c]
push eax
lea eax, [ebp - 0x404]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [ebp - 0x418]
add esp, 0xc
mov eax, dword [ebp - 0x408]
add dword [ebp - 0x40c], eax
cmp dword [ecx], 0
je 0x466f53
push dword [ecx + 0x1b0]
push dword [ecx + 0x1ac]
push eax
lea eax, [ebp - 0x404]
push eax
push dword [ebp - 0x410]
call dword [0x56312c]
add esp, 0x14
test eax, eax
js 0x466fac
mov ecx, dword [ebp - 0x408]
jmp 0x466f76
push dword [ebp - 0x410]
push eax
lea eax, [ebp - 0x404]
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov ecx, dword [ebp - 0x408]
add esp, 0x10
cmp eax, ecx
jne 0x466fac
cmp dword [edi + 0x130], 4
jne 0x466da0
mov eax, dword [ebp - 0x40c]
cmp eax, dword [edi + 0x110]
je 0x466fcb
mov dword [ebp - 0x408], ecx
lea eax, [edi + 0x114]
jmp 0x466db9
mov dword [edi + 0x128], 0x1f4
mov ebx, 0x1f4
jmp 0x466fd0
mov dword [edi + 0x128], 0x190
mov ebx, 0x190
jmp 0x466fd0
mov ebx, 0x1f7
jmp 0x466fd0
mov ebx, 0xc8
mov ecx, dword [ebp - 0x418]
cmp dword [ecx], 0
je 0x467009
push dword [ecx + 0x1b0]
push dword [ecx + 0x1ac]
push dword [ebp - 0x410]
call dword [0x563134]
add esp, 0xc
mov eax, ebx
pop esi
pop ebx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x410]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov eax, ebx
pop esi
pop ebx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 0x194
xor ecx, ebp
pop edi
call fcn.005091c5
mov esp, ebp
pop ebp
ret