Function at 0x469c40
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x114], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x46a8cc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xc4], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x488], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x48c], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x458], edx
mov eax, dword [ebp - 8]
mov byte [eax + 0x498], 0
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x460], edx
mov dword [eax + 0x464], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x47c], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x494], edx
mov eax, dword [ebp - 8]
add eax, 0x49c
call fcn.00403b38
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov dword [edx + 0x468], eax
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x9ac], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x9b0], edx
lea eax, [ebp - 0x110]
mov edx, pe_nt_image_headers32
call fcn.00407920
mov eax, dword [ebp - 8]
add eax, 0x40c
mov edx, dword [ebp - 8]
mov dword [edx + 0x418], eax
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x3c]
xor edx, edx
mov dl, al
add edx, 0xfffffffc
cmp edx, 0x1b
ja case.default.0x469d40
jmp dword [edx*4 + 0x469d47]
push 0
lea eax, [ebp - 0x10]
push eax
push 7
mov eax, dword [ebp - 8]
add eax, 0x558
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
push 0
lea eax, [ebp - 0x10]
push eax
push 0x18
mov eax, dword [ebp - 8]
add eax, 0x55f
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov eax, dword [ebp - 4]
call fcn.004610d0
mov ebx, eax
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 0x576]
add ebx, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x470], ebx
mov edx, ebx
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004610e0
mov word [ebp - 0xc], 0
mov eax, dword [ebp - 8]
test word [eax + 0x55d], 2
jbe 0x469e5a
push 0
lea eax, [ebp - 0x10]
push eax
push 2
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x470]
add eax, 2
movzx edx, word [ebp - 0xc]
add eax, edx
mov edx, dword [ebp - 8]
mov dword [edx + 0x470], eax
mov eax, dword [ebp - 8]
add eax, 0x530
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x470]
inc eax
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x9b4
call fcn.00403b38
mov eax, dword [ebp - 8]
add eax, 0x57c
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x1d
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9a4]
mov edx, dword [ebp - 8]
mov dword [edx + 0x5c4], eax
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x5c4]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x44]
dec edx
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004610e0
mov esi, 4
push 0
lea eax, [ebp - 0x10]
push eax
push esi
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5c4]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
cmp word [ebx], 0xea60
jne 0x469f1f
cmp word [ebx + 2], 0
jne 0x469f3f
push 0
push 0x46a8e4
push 0x6216
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x38]
mov edx, dword [0x4663d0]
mov eax, dword [ebp - 8]
mov edi, dword [eax]
call dword [edi + 0x68]
push 0
lea eax, [ebp - 0x10]
push eax
movzx eax, word [ebx + 2]
push eax
lea eax, [ebx + 4]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
test byte [ebx + 8], 4
seta al
mov edx, dword [ebp - 8]
mov byte [edx + 0x9a0], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x44]
movzx edx, word [ebx + 2]
add edx, esi
add eax, edx
mov edx, dword [ebp - 8]
mov dword [edx + 0x470], eax
mov eax, dword [ebp - 8]
add dword [eax + 0x470], 4
mov eax, dword [ebp - 8]
add dword [eax + 0x470], 2
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x470]
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], esi
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x5c8
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x25
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x44]
dec edx
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004610e0
mov eax, dword [ebp - 8]
lea edx, [eax + 0x470]
mov eax, dword [ebp - 4]
call fcn.00469688
test al, al
jne 0x46a029
push 0x46a8e4
push 0x6216
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x38]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x6c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x468]
mov edx, dword [ebp - 8]
mov dword [edx + 0x470], eax
jmp 0x46a0ac
push 0
lea eax, [ebp - 0x10]
push eax
push 8
push 0x4839e4
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
cmp dword [ebp - 0x10], 0
jne 0x46a071
push 0x46a8e4
push 0x6294
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x38]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x6c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x468]
mov edx, dword [ebp - 8]
mov dword [edx + 0x470], eax
xor ecx, ecx
mov edx, dword [0x4839e4]
mov eax, dword [ebp - 4]
call fcn.004610e0
push 0
lea eax, [ebp - 0x10]
push eax
push 8
push 0x4839ec
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov edx, dword [ebp - 8]
mov eax, dword [0x4839d0]
mov dword [edx + 0x470], eax
inc eax
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x9c0], 0x4839f4
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x10
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x61c
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0xa
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x630
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x12
mov eax, dword [ebp - 8]
mov dword [eax + 0x44], 4
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x688
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x16
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x30]
dec edx
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004610e0
push 0
lea eax, [ebp - 0x10]
push eax
push 0x16
mov eax, dword [ebp - 8]
add eax, 0x688
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov eax, dword [ebp - 8]
cmp byte [eax + 0x688], 0
jne case.default.0x469d40
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
add eax, 0x80
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
jmp case.default.0x469d40
push 0
lea eax, [ebp - 0x10]
push eax
push 0xff
mov eax, dword [ebp - 8]
add eax, 0x4e8
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x511]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0x40]
jae 0x46a264
mov edx, eax
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004610e0
mov dl, 1
mov eax, dword [0x4678bc]
call fcn.00402e80
mov ebx, eax
push 0
lea eax, [ebp - 0x10]
push eax
push 6
lea eax, [ebx + 4]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov al, byte [ebx + 6]
test al, al
jbe 0x46a23f
push 0
lea edx, [ebp - 0x10]
push edx
and eax, 0xff
sub eax, 6
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
lea eax, [ebp - 0x114]
lea edx, [ebp - 0x110]
mov ecx, pe_nt_image_headers32
call fcn.00403d68
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9a8]
mov ecx, ebx
mov esi, dword [eax]
call dword [esi + 0x38]
jmp 0x46a246
mov eax, ebx
call fcn.00402eb0
cmp byte [ebx + 6], 0
jne 0x46a1c8
mov eax, dword [ebp - 4]
call fcn.004610d0
inc eax
sub eax, 5
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
jmp 0x46a270
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
mov eax, dword [ebp - 8]
add eax, 0x4c5
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x1d
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x6b4
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x1d
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x6ec
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x20
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x44]
dec edx
add edx, 7
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004610e0
test al, al
jne 0x46a30c
push 0
push 0x46a8e4
push 0x6293
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x38]
mov edx, dword [0x4663d0]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x68]
push 0
lea eax, [ebp - 0x10]
push eax
push 0xd
mov eax, dword [ebp - 8]
add eax, 0x6d8
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
cmp dword [ebp - 0x10], 0xd
jne 0x46a35b
mov eax, dword [ebp - 4]
call fcn.004610d0
inc eax
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
mov eax, dword [ebp - 8]
movzx eax, word [eax + 0x6dd]
sub eax, 0xd
test eax, eax
jle case.default.0x469d40
mov edx, dword [ebp - 8]
add dword [edx + 0x44], eax
jmp case.default.0x469d40
push 0
push 0x46a8e4
push 0x6294
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x38]
mov edx, dword [0x4663d0]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x68]
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x11e
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x200
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
cmp eax, 0x8000
jae 0x46a3b5
mov dword [ebp - 0x10], eax
jmp 0x46a3bc
mov dword [ebp - 0x10], 0x8000
mov eax, dword [ebp - 0x10]
inc eax
call fcn.0040271c
mov edx, dword [ebp - 8]
mov dword [edx + 0x9bc], eax
xor ecx, ecx
push ebp
push 0x46a6bc
push dword fs:[ecx]
mov dword fs:[ecx], esp
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004610e0
push 0
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9bc]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
xor ebx, ebx
jmp 0x46a67d
lea eax, [ebx + 2]
cmp eax, dword [ebp - 0x10]
jae 0x46a67c
test ebx, ebx
je 0x46a438
test ebx, ebx
jle 0x46a67c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9bc]
cmp byte [eax + ebx - 1], 0xa
jne 0x46a67c
mov edx, 0x46a8e8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9bc]
add eax, ebx
mov ecx, 6
call fcn.0040984c
test eax, eax
jne 0x46a67c
test ebx, ebx
jne 0x46a465
mov ebx, 6
jmp 0x46a46b
add ebx, 6
jmp 0x46a46b
inc ebx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9bc]
cmp byte [eax + ebx], 0x20
je 0x46a47f
cmp ebx, dword [ebp - 0x10]
jb 0x46a46a
cmp dword [ebp - 0x10], 0xff
jbe 0x46a48f
mov dword [ebp - 0x10], 0xff
mov eax, ebx
mov esi, ebx
add esi, dword [ebp - 0x10]
sub esi, eax
jl 0x46a4cd
inc esi
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x9bc]
mov dl, byte [edx + eax]
cmp dl, 0xa
je 0x46a4ba
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0x9bc]
cmp dl, 0xd
jne 0x46a4c9
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x9bc]
mov byte [edx + eax], 0
jmp 0x46a4cd
inc eax
dec esi
jne 0x46a49b
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9bc]
add eax, ebx
inc eax
call fcn.00409954
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 8]
add eax, 0x46c
call fcn.00403b8c
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x46c]
mov eax, 0x46a8f8
call fcn.004040a4
test eax, eax
jle 0x46a531
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x46c]
mov eax, 0x46a8f8
call fcn.004040a4
mov edx, eax
dec edx
mov eax, dword [ebp - 8]
add eax, 0x46c
call fcn.004040ec
mov eax, dword [ebp - 8]
cmp word [eax + 0x9d2], 0
je 0x46a559
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x46c]
mov ebx, dword [ebp - 8]
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x9d4]
call dword [ebx + 0x9d0]
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x9b8]
sub al, 1
jb 0x46a574
je 0x46a65b
dec al
jne 0x46a672
mov eax, dword [ebp - 8]
cmp word [eax + 0x3ca], 0
je 0x46a672
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00409034
call fcn.00467350
mov eax, dword [ebp - 8]
fstp qword [eax + 0x460]
wait
mov eax, dword [ebp - 8]
mov word [eax + 0x4a4], 0
mov eax, dword [ebp - 8]
mov word [eax + 0x478], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov dword [edx + 0x47c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov dword [edx + 0x494], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x47c]
mov edx, dword [ebp - 8]
mov dword [edx + 0x488], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x494]
mov edx, dword [ebp - 8]
mov dword [edx + 0x48c], eax
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x458], edx
mov eax, dword [ebp - 8]
mov byte [eax + 0x474], 0
mov eax, dword [ebp - 8]
add eax, 0x49c
call fcn.00403b38
mov eax, dword [ebp - 8]
mov word [eax + 0x4a6], 0
mov eax, dword [ebp - 8]
mov word [eax + 0x476], 0x20
mov eax, dword [ebp - 8]
mov dword [eax + 0x3f4], 0x20
mov eax, dword [ebp - 8]
mov byte [eax + 0x498], 0
mov ecx, 1
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0046abc4
jmp 0x46a672
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x46c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9c8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
call fcn.004036a8
jmp case.default.0x469d40
inc ebx
cmp ebx, dword [ebp - 0x10]
jb 0x46a40c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.default.0x469d40
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x484], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x9bc]
call fcn.00402734
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov dword [edx + 0x470], eax
ret
cmp al, 0x1e
jne 0x46a6e3
push ebp
lea eax, [ebp - 4]
call fcn.00469b80
pop ecx
test al, al
jne 0x46a73d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
jmp 0x46a73d
mov eax, dword [ebp - 8]
cmp word [eax + 0x352], 0
je 0x46a73d
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x31e]
test al, 0x10
je 0x46a705
test al, 8
je 0x46a705
test al, 1
jne 0x46a73d
mov byte [ebp - 9], 1
lea eax, [ebp - 9]
push eax
mov eax, dword [ebp - 8]
mov cl, byte [eax + 0x31e]
mov ebx, dword [ebp - 8]
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x354]
call dword [ebx + 0x350]
cmp byte [ebp - 9], 0
je 0x46a73d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x468]
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov dword [edx + 0x468], eax
mov eax, dword [ebp - 8]
inc dword [eax + 0x44]
mov eax, dword [ebp - 8]
test byte [eax + 0x31e], 8
jne 0x46a768
mov eax, dword [ebp - 8]
mov byte [eax + 0x31e], 0x10
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x44]
dec edx
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004610e0
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x31e]
cmp al, 0x10
jne 0x46a80e
push 0
lea eax, [ebp - 0x10]
push eax
push 0x1e
mov eax, dword [ebp - 8]
add eax, 0xe2
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov eax, dword [ebp - 8]
cmp dword [eax + 0xe2], 0x8074b50
jne 0x46a7ba
mov eax, dword [ebp - 8]
add dword [eax + 0x44], 4
mov eax, dword [ebp - 8]
test word [eax + 0xe8], 0x40
jbe 0x46a7eb
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x1e
mov eax, dword [ebp - 8]
add eax, 0x100
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x1e
mov eax, dword [ebp - 8]
add eax, 0xe2
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
jmp case.default.0x469d40
test al, 8
jbe 0x46a874
push 0
lea eax, [ebp - 0x10]
push eax
push 0x2e
mov eax, dword [ebp - 8]
add eax, 0x68
push eax
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_ReadFile_1
mov eax, dword [ebp - 8]
test word [eax + 0x70], 0x40
jbe 0x46a856
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x2e
mov eax, dword [ebp - 8]
add eax, 0x96
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x2e
mov eax, dword [ebp - 8]
add eax, 0x68
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
jmp case.default.0x469d40
push 0x46a8e4
push 0x6216
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x38]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x6c]
jmp case.default.0x469d40
mov eax, dword [ebp - 8]
add eax, 0x724
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c0], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x484], 0x3a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46a8d3
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.00403b5c
ret