Function at 0x431bc0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x60c69e
mov eax, dword fs:[0]
push eax
sub esp, 0x70
push ebx
push esi
push edi
mov eax, dword [0x6963f4]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, edx
test byte [0x6b5ba8], 1
jne 0x431c30
or dword [0x6b5ba8], 1
push 0x6b59e8
mov dword [esp + 0x8c], 0
call fcn.00430500
push 0x618aa0
call fcn.0059e40a
add esp, 4
mov dword [esp + 0x88], 0xffffffff
mov eax, dword [0x6b5a08]
test eax, eax
je 0x431c4e
push eax
call dword [sym.imp.user32.dll_IsWindow]
test eax, eax
je 0x431c4e
mov ecx, 0x6b59e8
call fcn.00560923
mov esi, dword [ebp + 8]
test esi, esi
mov dword [0x6b5b84], 0
jne 0x431cae
call fcn.005669f5
test eax, eax
je 0x431c75
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x74]
call eax
mov esi, eax
jmp 0x431c77
xor esi, esi
call dword [sym.imp.user32.dll_GetActiveWindow]
cmp eax, dword [esi + 0x20]
jne 0x431cab
call fcn.00568851
mov eax, dword [eax + 4]
push 8
push 0
mov ecx, eax
call fcn.0057313e
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
push esi
push str._08X.rtf
push 0x6b5b30
mov dword [0x6b5b08], 1
mov dword [0x6b5b0c], 0
call fcn.0059e1a7
add esp, 0xc
cmp dword [0x6b5b80], 0
je 0x431cff
push esi
mov esi, 0x6b59e8
call fcn.00431660
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
jne 0x431d07
xor eax, eax
jmp 0x431d1b
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x431d10
sub eax, edx
push eax
push edi
mov ecx, 0x6b5b28
call fcn.00401480
test ebx, ebx
jne 0x431d2f
xor eax, eax
jmp 0x431d3f
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x431d34
sub eax, edx
push eax
push ebx
mov ecx, 0x6b5b2c
call fcn.00401480
mov ecx, dword [0x6b5b28]
push 0x639ce8
push ecx
call fcn.0059e0af
add esp, 8
test eax, eax
setg al
test al, al
je 0x431f5c
push 0x63dab8
lea edx, [esp + 0x1c]
push 0x6b5b28
push edx
call fcn.00401be0
add esp, 0xc
push 0x6b5b30
push eax
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x94], 1
call fcn.00401be0
mov eax, dword [eax]
add esp, 0xc
push 0x641fa4
push eax
call fcn.0059f606
mov esi, eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431dd3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x88], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431dfe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.00564d6e
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x431e18
push 0x80004005
call fcn.004012a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x28], ebx
test esi, esi
mov dword [esp + 0x88], 2
jne 0x431ee4
cmp dword [0x6b5b88], esi
jne 0x431e4f
push 0x6b59e8
xor ecx, ecx
call fcn.004319c0
mov esi, dword [ebp + 8]
lea ecx, [esp + 0x1c]
push ecx
push esi
mov ecx, 0x6b5b8c
call fcn.00584a1e
test eax, eax
je 0x431f2c
mov eax, dword [esp + 0x1c]
push eax
push str._08X.rtf
push 0x6b5b30
mov dword [0x6b5b84], esi
mov dword [ebp + 8], eax
call fcn.0059e1a7
add esp, 0xc
push 0x63dab8
lea edx, [esp + 0x28]
push 0x6b5b28
push edx
call fcn.00401be0
add esp, 0xc
push 0x6b5b30
push eax
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0x94], 3
call fcn.00401be0
mov eax, dword [eax]
add esp, 0xc
push 0x641fa4
push eax
call fcn.0059f606
add esp, 8
lea ecx, [esp + 0x20]
mov esi, eax
call fcn.00401510
lea ecx, [esp + 0x24]
call fcn.00401510
test esi, esi
je 0x431f2c
push 2
push 0
push esi
call fcn.005a1be7
add esp, 0xc
push esi
call fcn.005a1e04
add esp, 4
push 0
push 0
push esi
mov edi, eax
call fcn.005a1be7
add esp, 0xc
lea ecx, [edi + 2]
push 1
push ecx
call fcn.005a1b21
push esi
push edi
push 1
push eax
mov dword [0x6b5b04], eax
call fcn.005a210e
push esi
call fcn.0059f7da
add esp, 0x1c
lea eax, [ebx - 0x10]
mov dword [esp + 0x88], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x432073
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x432073
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.004ea4a0
add esp, 4
mov esi, eax
test esi, esi
push 0
jne 0x431f91
push eax
push str.Popup_help_file_missing_
call fcn.0056a67b
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x6b5b30
push esi
call fcn.004ea9e0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x432007
cmp dword [0x6b5b88], 0
jne 0x431fba
push 0x6b59e8
mov ecx, esi
call fcn.004319c0
mov ebx, dword [ebp + 8]
lea edx, [esp + 0x24]
push edx
push ebx
mov ecx, 0x6b5b8c
call fcn.00584a1e
test eax, eax
je 0x432003
mov eax, dword [esp + 0x24]
push eax
push str._08X.rtf
push 0x6b5b30
mov dword [0x6b5b84], ebx
mov dword [ebp + 8], eax
call fcn.0059e1a7
add esp, 0xc
push 0
push 0x6b5b30
push esi
call fcn.004ea9e0
add esp, 0xc
mov edi, eax
test edi, edi
jne 0x43206a
push 0x50
lea eax, [esp + 0x30]
push 0
push eax
call fcn.005a3bb0
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esp + 0x44]
push ecx
push esi
call fcn.004ea4f0
mov edx, dword [esp + 0x68]
add edx, 2
push 1
push edx
call fcn.005a1b21
push esi
mov dword [0x6b5b04], eax
call fcn.004eaea0
mov eax, dword [esp + 0x74]
mov ecx, dword [0x6b5b04]
add esp, 0x2c
push eax
push ecx
push esi
call fcn.004eaec0
add esp, 0xc
push esi
call fcn.004eb0c0
add esp, 4
push esi
call fcn.004ea4b0
add esp, 4
xor ebx, ebx
cmp dword [0x6b5b04], ebx
jne 0x432179
push 1
push 0x100
call fcn.005a1b21
lea edx, [esp + 0x28]
push edx
mov edi, 0xbb
mov dword [0x6b5b04], eax
call fcn.004dd5f0
mov ecx, dword [eax]
mov edx, dword [0x6b5b04]
add esp, 0xc
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
test al, al
jne 0x4320b0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4320de
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [0x6b5b28]
push 0x639ce8
push ecx
mov dword [0x6b5b08], ebx
mov dword [0x6b5b0c], 1
call fcn.0059e0af
add esp, 8
cmp eax, ebx
setg al
test al, al
je 0x432179
mov edx, dword [0x6b5b04]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x432116
sub eax, esi
mov esi, dword [ebp + 8]
push esi
add eax, edx
push str.___X_
push eax
call fcn.0059e1a7
add esp, 0xc
lea ecx, [esp + 0x14]
call fcn.00401450
push esi
lea edx, [esp + 0x18]
push 0x642b18
push edx
mov dword [esp + 0x94], 4
call fcn.00413730
mov eax, dword [esp + 0x20]
add esp, 0xc
call fcn.004ddc10
lea ecx, [esp + 0x14]
mov dword [esp + 0x88], 0xffffffff
call fcn.00401510
push ebx
push 0x812
mov ecx, 0x6b59e8
call fcn.005640d6
push 5
mov ecx, 0x6b59e8
call fcn.005652e8
push 3
push ebx
push ebx
push ebx
push ebx
push 0x6a7f28
mov ecx, 0x6b59e8
call fcn.005654f3
mov eax, dword [0x6b5b04]
cmp eax, ebx
je 0x4321bc
push eax
call fcn.005a01b3
add esp, 4
mov dword [0x6b5b04], ebx
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret