Function at 0x6460856c
Capabilities:
Delete file
Encode data using base64

Disassembly:
push 0x91c
push 0x64616738
call fcn.646164dc
mov esi, ecx
mov dword [ebp - 0x864], esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x8a8], eax
xor eax, eax
mov ebx, eax
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x874], eax
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x89c], eax
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x85c], eax
push 0x7c
push eax
lea eax, [ebp - 0x7fc]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x71c]
mov dword [ebp - 0x6d4], eax
lea eax, [ebp - 0x710]
mov dword [ebp - 0x6d0], eax
lea eax, [ebp - 0x704]
mov dword [ebp - 0x6cc], eax
lea eax, [ebp - 0x6f8]
mov dword [ebp - 0x6c8], eax
lea eax, [ebp - 0x6ec]
mov dword [ebp - 0x6c4], eax
lea eax, [ebp - 0x6e0]
mov dword [ebp - 0x6c0], eax
xor ecx, ecx
mov dword [ebp - 0x80c], ecx
mov dword [ebp - 0x84c], ecx
mov dword [ebp - 0x808], ecx
mov dword [ebp - 0x800], ecx
mov eax, ecx
mov dword [ebp - 0x824], eax
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0x86c], ecx
mov dword [ebp - 0x840], ecx
mov dword [ebp - 0x814], ecx
push 6
pop ecx
lea edi, [ebp - 0x8c4]
rep stosd dword es:[edi], eax
push 0x44
xor edi, edi
push edi
lea eax, [ebp - 0x92c]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x40
push edi
lea eax, [ebp - 0x77c]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x834], ecx
mov dword [ebp - 0x8cc], ecx
mov dword [ebp - 0x8c8], ecx
mov eax, ecx
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x720], eax
push 0x208
push ecx
lea eax, [ebp - 0x4b4]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x818], ecx
mov dword [ebp - 0x860], ecx
mov dword [ebp - 0x880], ecx
mov dword [ebp - 0x830], ecx
mov dword [ebp - 0x8ac], ecx
mov dword [ebp - 0x87c], ecx
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x804], ecx
mov dword [ebp - 0x888], ecx
mov dword [ebp - 0x73c], 3
mov dword [ebp - 0x738], 0x800f101f
mov dword [ebp - 0x734], 0x3003001f
mov dword [ebp - 0x730], 0x3002001f
mov dword [ebp - 0x868], ecx
mov dword [ebp - 0x858], ecx
mov dword [ebp - 0x854], ecx
mov dword [ebp - 0x88c], ecx
call fcn.64614d0c
test eax, eax
je 0x64609fb7
mov ecx, eax
call fcn.6460ce29
mov eax, dword [esi + 0x1c]
mov esi, dword [eax]
lea ecx, [ebp - 0x878]
push ecx
inc ebx
push ebx
push 0x646170ac
push eax
mov ecx, dword [esi + 0x24]
call dword [0x64618384]
call dword [esi + 0x24]
mov ecx, eax
test ecx, ecx
jns 0x646087d3
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x646087c9
test dword [eax + 0x1c], 0x200
je 0x646087c9
cmp byte [eax + 0x19], 2
jb 0x646087c9
push ecx
push 0x646017f8
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x3a
pop ecx
call fcn.64604495
mov ebx, 0x2cf3
jmp 0x64608ae1
mov eax, dword [ebp - 0x878]
mov esi, dword [eax]
lea ecx, [ebp - 0x838]
push ecx
lea ecx, [ebp - 0x89c]
push ecx
xor edi, edi
push edi
push 0x64601f84
push eax
mov ecx, dword [esi + 0x14]
call dword [0x64618384]
call dword [esi + 0x14]
mov ecx, eax
test ecx, ecx
js 0x64609f72
cmp ecx, 0x40380
je 0x64609f72
mov ecx, dword [ebp - 0x838]
mov ecx, dword [ecx + 0xc]
call fcn.6460e639
mov dword [ebp - 0x7fc], eax
test eax, eax
jne 0x64608836
mov ebx, 0x2cfd
jmp 0x64608ae1
mov ecx, dword [ebp - 0x838]
mov ecx, dword [ecx + 0x2c]
call fcn.6460e639
mov dword [ebp - 0x7f8], eax
test eax, eax
je 0x6460882c
mov esi, dword [ebp - 0x838]
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x7f4], eax
mov eax, dword [esi + 0x38]
mov dword [ebp - 0x7f0], eax
cmp dword [esi + 0x48], 0x5c
jbe 0x64608876
mov ebx, 0x2cfe
jmp 0x64608ae1
push dword [esi + 0x48]
mov esi, dword [ebp - 0x838]
push dword [esi + 0x4c]
lea eax, [ebp - 0x7e4]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0x58]
mov dword [ebp - 0x788], eax
mov eax, dword [esi + 0x68]
mov dword [ebp - 0x784], eax
lea eax, [ebp - 0x718]
push 6
pop ecx
mov dword [eax - 4], 0x64602240
mov dword [eax], ebx
lea eax, [eax + 0xc]
sub ecx, 1
jne 0x646088ac
mov dword [ebp - 0x714], 0x64601834
mov dword [ebp - 0x708], 0x64601858
mov dword [ebp - 0x6fc], 0x64601880
mov dword [ebp - 0x6f0], 0x646018a4
mov dword [ebp - 0x6e4], 0x646018d0
mov dword [ebp - 0x6d8], 0x64601900
mov ebx, dword [ebp - 0x82c]
mov esi, dword [ebx]
lea eax, [ebp - 0x80c]
push eax
push 2
lea eax, [ebp - 0x6d4]
push eax
push 6
push ebx
mov ecx, dword [esi + 0x34]
call dword [0x64618384]
call dword [esi + 0x34]
mov ecx, eax
test ecx, ecx
jns 0x6460897c
xor ebx, ebx
cmp ecx, 0x8007000e
setne bl
add ebx, 0x2cfd
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608ae1
test dword [eax + 0x1c], 0x200
je 0x64608ae1
cmp byte [eax + 0x19], 2
jb 0x64608ae1
push ecx
push 0x64601920
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x3c
pop ecx
call fcn.64604495
jmp 0x64608ae1
mov ecx, dword [ebp - 0x80c]
mov eax, dword [ecx + 4]
mov esi, 0xffff0102
and eax, esi
mov edx, 0x102
or eax, edx
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x80c]
mov eax, dword [ecx + 8]
and eax, esi
or eax, edx
mov dword [ecx + 8], eax
mov ecx, dword [ebp - 0x80c]
mov eax, dword [ecx + 0xc]
mov edx, 0xffff0003
and eax, edx
push 3
pop esi
or eax, esi
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x80c]
mov eax, dword [ecx + 0x10]
and eax, edx
or eax, esi
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x80c]
mov eax, dword [ecx + 0x14]
and eax, edx
or eax, esi
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x80c]
mov eax, dword [ecx + 0x18]
and eax, edx
or eax, esi
mov dword [ecx + 0x18], eax
mov esi, dword [ebx]
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x8a0]
push eax
push edi
push dword [ebp - 0x80c]
push ebx
mov ecx, dword [esi + 0x14]
call dword [0x64618384]
call dword [esi + 0x14]
mov ebx, eax
cmp ebx, 0x40380
jne 0x64608a4f
mov eax, dword [0x64617004]
mov esi, 0x64617004
mov edi, 0x200
cmp eax, esi
je 0x64608a5e
test dword [eax + 0x1c], edi
je 0x64608a5e
cmp byte [eax + 0x19], 5
jb 0x64608a5e
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x3d
pop ecx
call fcn.64604453
jmp 0x64608a59
mov esi, 0x64617004
mov edi, 0x200
mov eax, dword [0x64617004]
test ebx, ebx
jns 0x64608a8a
cmp eax, esi
je 0x64608a8a
test dword [eax + 0x1c], edi
je 0x64608a8a
cmp byte [eax + 0x19], 2
jb 0x64608a8a
push ebx
push 0x64601820
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x3e
pop ecx
call fcn.64604495
mov edx, dword [ebp - 0x85c]
lea ecx, [ebp - 0x7fc]
call fcn.6460ba65
mov ecx, dword [ebp - 0x850]
cmp word [ecx + 0x10], 0xa
je 0x64608d11
mov ecx, dword [ecx + 0x18]
test ecx, ecx
jne 0x64608abd
xor eax, eax
mov dword [ebp - 0x824], eax
jmp 0x64608ad6
call fcn.6460e6e5
mov dword [ebp - 0x824], eax
mov dword [ebp - 0x81c], eax
test eax, eax
jne 0x64608d11
mov ebx, 0x2cfd
mov edi, dword [ebp - 0x800]
mov ecx, dword [ebp - 0x880]
test ecx, ecx
je 0x64608afb
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x64618384]
call esi
mov ecx, dword [ebp - 0x87c]
test ecx, ecx
je 0x64608b15
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x64618384]
call esi
cmp dword [ebp - 0x814], 0
je 0x64608b2a
push dword [ebp - 0x814]
call dword [sym.imp.FXSAPI.dll_FaxClose]
mov ecx, dword [ebp - 0x834]
test ecx, ecx
je 0x64608b7d
mov eax, dword [ebp - 0x818]
test eax, eax
je 0x64608b78
lea esi, [ecx + 8]
mov ecx, dword [esi - 4]
test ecx, ecx
je 0x64608b53
call fcn.6460ce29
mov eax, dword [ebp - 0x818]
mov ecx, dword [esi]
test ecx, ecx
je 0x64608b64
call fcn.6460ce29
mov eax, dword [ebp - 0x818]
add esi, 0x44
sub eax, 1
mov dword [ebp - 0x818], eax
jne 0x64608b41
mov ecx, dword [ebp - 0x834]
call fcn.6460ce29
mov ecx, dword [ebp - 0x878]
test ecx, ecx
je 0x64608b97
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x64618384]
call esi
mov esi, dword [ebp - 0x838]
test esi, esi
je 0x64608ba8
push esi
call dword [sym.imp.MAPI32.dll_Ordinal_17]
cmp dword [ebp - 0x83c], 0
je 0x64608bbd
push dword [ebp - 0x83c]
call dword [sym.imp.MAPI32.dll_Ordinal_17]
cmp dword [ebp - 0x80c], 0
je 0x64608bd2
push dword [ebp - 0x80c]
call dword [sym.imp.MAPI32.dll_Ordinal_17]
cmp dword [ebp - 0x85c], 0
je 0x64608be7
push dword [ebp - 0x85c]
call dword [sym.imp.MAPI32.dll_Ordinal_17]
cmp dword [ebp - 0x874], 0
je 0x64608bfc
push dword [ebp - 0x874]
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
mov eax, dword [ebp - 0x820]
test eax, eax
je 0x64608c0d
mov ecx, eax
call fcn.6460ce29
mov eax, dword [ebp - 0x7fc]
test eax, eax
je 0x64608c1e
mov ecx, eax
call fcn.6460ce29
mov eax, dword [ebp - 0x7f8]
test eax, eax
je 0x64608c2f
mov ecx, eax
call fcn.6460ce29
mov eax, dword [ebp - 0x808]
test eax, eax
je 0x64608c40
mov ecx, eax
call fcn.6460ce29
test edi, edi
je 0x64608c4b
mov ecx, edi
call fcn.6460ce29
mov eax, dword [ebp - 0x824]
test eax, eax
je 0x64608c5c
mov ecx, eax
call fcn.6460ce29
cmp dword [ebp - 0x840], 0
je 0x64608c7c
push dword [ebp - 0x840]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x840]
call fcn.6460ce29
mov eax, dword [ebp - 0x870]
test eax, eax
je 0x64608c8d
mov ecx, eax
call fcn.6460ce29
mov esi, dword [ebp - 0x86c]
test esi, esi
je 0x64608c9e
mov ecx, esi
call fcn.6460ce29
mov ecx, dword [ebp - 0x868]
test ecx, ecx
je 0x64608cb8
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x64618384]
call esi
cmp dword [ebp - 0x858], 0
je 0x64608ccd
push dword [ebp - 0x858]
call dword [sym.imp.MAPI32.dll_Ordinal_17]
cmp dword [ebp - 0x854], 0
je 0x64608ce2
push dword [ebp - 0x854]
call dword [sym.imp.MAPI32.dll_Ordinal_17]
lea eax, [ebp - 0x92c]
push eax
call dword [sym.imp.FXSAPI.dll_FaxFreeSenderInformation]
mov eax, dword [ebp - 0x88c]
mov ecx, dword [ebp - 0x890]
mov dword [ecx], eax
mov eax, ebx
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 0x1c
push ecx
push dword [ebp - 0x7fc]
call fcn.64606017
mov ebx, eax
mov dword [ebp - 0x820], ebx
mov dword [ebp - 0x884], ebx
test ebx, ebx
jne 0x64608e35
lea eax, [ebp - 0x84c]
push eax
call fcn.6460b814
mov dword [ebp - 0x820], eax
test eax, eax
je 0x64608dc1
mov edx, dword [ebp - 0x84c]
test edx, edx
je 0x64608dcd
add eax, 0x10
mov dword [ebp - 0x810], eax
mov ecx, 0x6460139c
mov eax, dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
mov edx, dword [ebp - 0x84c]
jne 0x64608da2
cmp word [eax], 0
je 0x64608d9e
mov dx, word [eax + 2]
mov word [ebp - 0x842], dx
cmp dx, word [ecx + 2]
mov edx, dword [ebp - 0x84c]
jne 0x64608da2
add eax, 4
add ecx, 4
cmp word [ebp - 0x842], 0
jne 0x64608d63
xor eax, eax
jmp 0x64608da7
sbb eax, eax
or eax, 1
test eax, eax
je 0x64608dcd
inc ebx
mov eax, dword [ebp - 0x810]
add eax, 0x54
mov dword [ebp - 0x810], eax
cmp ebx, edx
jb 0x64608d5c
jmp 0x64608dcd
xor eax, eax
mov ebx, eax
mov edx, eax
mov dword [ebp - 0x84c], edx
cmp ebx, edx
jne 0x64608ddb
mov ebx, 0x42f
jmp 0x64608adb
mov ecx, dword [ebp - 0x7fc]
call fcn.6460ce29
imul ecx, ebx, 0x54
mov ebx, dword [ebp - 0x820]
mov ecx, dword [ecx + ebx + 4]
call fcn.6460e639
mov dword [ebp - 0x7fc], eax
test eax, eax
je 0x64608ad6
mov ecx, ebx
call fcn.6460ce29
push ecx
push dword [ebp - 0x7fc]
call fcn.64606017
mov edx, eax
mov dword [ebp - 0x820], edx
mov dword [ebp - 0x884], edx
test edx, edx
jne 0x64608e35
mov ebx, 0x2cef
jmp 0x64608adb
xor eax, eax
mov dword [ebp - 0x8d8], eax
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x8d0], 8
lea eax, [ebp - 0x8d8]
push eax
lea eax, [ebp - 0x874]
push eax
push dword [ebp - 0x7fc]
call dword [sym.imp.WINSPOOL.DRV_OpenPrinterW]
test eax, eax
je 0x64608e2b
lea eax, [ebp - 0x840]
push eax
mov eax, dword [ebp - 0x824]
push eax
lea eax, [ebp - 0x7fc]
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x828]
mov eax, dword [ebp - 0x82c]
push eax
mov ecx, dword [ebp - 0x864]
call fcn.646082c2
mov ebx, eax
cmp ebx, 0x2d04
jne 0x64608eb4
cmp dword [ebp - 0x7f4], 0
je 0x64608adb
jmp 0x64608ebc
test ebx, ebx
jne 0x64608adb
mov eax, dword [0x64617004]
cmp eax, esi
je 0x64608ee9
test dword [eax + 0x1c], edi
je 0x64608ee9
cmp byte [eax + 0x19], 5
jb 0x64608ee9
push dword [ebp - 0x840]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x3f
pop ecx
call fcn.64605f31
mov dword [ebp - 0x92c], 0x44
lea eax, [ebp - 0x92c]
push eax
call dword [sym.imp.FXSAPI.dll_FaxGetSenderInformation]
mov ebx, eax
test ebx, ebx
je 0x64608f48
mov ecx, dword [0x64617004]
cmp ecx, esi
je 0x64608f34
test dword [ecx + 0x1c], edi
je 0x64608f34
cmp byte [ecx + 0x19], 2
jb 0x64608f34
push ebx
push 0x64601940
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov edx, 0x64601f74
push 0x40
pop ecx
call fcn.64604495
cmp ebx, 0x80070057
je 0x64608f48
cmp ebx, 0x80070008
je 0x64608ad6
mov edi, dword [ebp - 0x894]
mov eax, dword [edi]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x848], eax
imul esi, eax, 0x44
mov ecx, esi
call fcn.6460cdc3
mov dword [ebp - 0x834], eax
mov dword [ebp - 0x728], eax
test eax, eax
je 0x64608ad6
push esi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x82c], edx
mov eax, edx
mov esi, 0x200
mov ebx, 0x64601f74
mov dword [ebp - 0x898], eax
cmp eax, dword [edi]
jae 0x64609280
inc eax
imul eax, eax, 0xc
mov edi, dword [eax + edi]
mov ecx, dword [edi + 0x18]
test ecx, ecx
jne 0x64608fbe
mov dword [ebp - 0x808], edx
jmp 0x64608fd3
call fcn.6460e6e5
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x844], eax
test eax, eax
jne 0x64608fe1
mov ebx, 0x2cfd
xor eax, eax
mov edi, eax
jmp 0x64608ae1
mov ecx, dword [edi + 0x28]
test ecx, ecx
jne 0x64608fec
xor edi, edi
jmp 0x64608ff9
call fcn.6460e6e5
mov edi, eax
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x828], edi
test edi, edi
je 0x6460882c
push edi
push eax
call dword [sym.imp.msvcrt.dll_wcsstr]
pop ecx
pop ecx
test eax, eax
je 0x6460902e
mov ecx, dword [ebp - 0x808]
call fcn.6460ce29
xor eax, eax
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x844], eax
push 0x40
push edi
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
pop ecx
test eax, eax
je 0x6460915d
xor ecx, ecx
mov word [eax], cx
add eax, 2
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x808]
test eax, eax
jne 0x64609074
mov ecx, edi
call fcn.6460e639
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x844], eax
test eax, eax
je 0x6460882c
imul eax, dword [ebp - 0x82c], 0x44
add eax, dword [ebp - 0x834]
mov dword [ebp - 0x800], eax
mov dword [eax], 0x44
mov ecx, dword [ebp - 0x810]
call fcn.64606b86
mov ecx, dword [ebp - 0x800]
mov dword [ecx + 8], eax
test eax, eax
jne 0x646090f9
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x646090dd
test dword [eax + 0x1c], esi
je 0x646090dd
cmp byte [eax + 0x19], 2
jb 0x646090dd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x64601980
mov eax, dword [0x64617004]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, ebx
push 0x41
pop ecx
call fcn.64604495
mov ecx, dword [ebp - 0x810]
call fcn.6460e639
mov ecx, dword [ebp - 0x800]
mov dword [ecx + 8], eax
test eax, eax
je 0x6460882c
mov edx, dword [ebp - 0x808]
test edx, edx
je 0x6460911b
mov ecx, edx
call fcn.6460e639
mov ecx, dword [ebp - 0x800]
mov dword [ecx + 4], eax
test eax, eax
je 0x6460882c
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x8a4], ecx
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x8e4]
push eax
mov ecx, dword [ebp - 0x8a8]
call fcn.6460a074
cmp byte [eax + 4], 1
jne 0x646091b7
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x8dc], eax
jmp 0x646091e1
mov dword [ebp - 0x810], edi
mov eax, dword [ebp - 0x808]
test eax, eax
jne 0x64609074
push 0x208
push eax
lea eax, [ebp - 0x6bc]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x3e
push edi
push 0x3c
push 0x64601970
push 0x104
lea eax, [ebp - 0x6bc]
push eax
call fcn.64604373
add esp, 0x18
test eax, eax
js 0x6460886c
lea ecx, [ebp - 0x6bc]
jmp 0x6460905b
mov eax, dword [ebp - 0x800]
mov ecx, dword [eax + 4]
call fcn.6460ce29
mov eax, dword [ebp - 0x800]
and dword [eax + 4], 0
mov ecx, dword [eax + 8]
call fcn.6460ce29
mov eax, dword [ebp - 0x800]
and dword [eax + 8], 0
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x808]
test eax, eax
je 0x646091f9
mov ecx, eax
call fcn.6460ce29
mov ecx, edi
call fcn.6460ce29
mov eax, dword [ebp - 0x898]
inc eax
xor edx, edx
mov dword [ebp - 0x808], edx
mov edi, dword [ebp - 0x894]
jmp 0x64608f9a
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x7f4], 0
je 0x64609407
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x848], eax
test eax, eax
je 0x646092cb
push dword [ebp - 0x7f8]
push 0x104
lea eax, [ebp - 0x4b4]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy_s]
add esp, 0xc
xor esi, esi
jmp 0x646093aa
push 0x208
push edx
lea eax, [ebp - 0x2ac]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x2ac]
call fcn.6460d961
test eax, eax
jne 0x64609331
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64609327
test dword [eax + 0x1c], esi
je 0x64609327
cmp byte [eax + 0x19], 2
jb 0x64609327
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x646019a8
mov eax, dword [0x64617004]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, ebx
push 0x42
pop ecx
call fcn.64604495
mov ebx, 0x2cfe
jmp 0x64608fd8
push dword [ebp - 0x7f8]
mov edi, 0x104
push edi
lea eax, [ebp - 0x2ac]
push eax
call dword [sym.imp.msvcrt.dll_wcscat_s]
add esp, 0xc
lea ecx, [ebp - 0x2ac]
lea edx, [ecx + 2]
xor esi, esi
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x64609358
sub ecx, edx
sar ecx, 1
shr ecx, 1
add ecx, 3
cmp ecx, edi
jbe 0x6460937c
mov ebx, 0x2cfe
mov edi, esi
jmp 0x64608ae1
push 0x646019c8
push edi
lea eax, [ebp - 0x2ac]
push eax
call dword [sym.imp.msvcrt.dll_wcscat_s]
add esp, 0xc
lea eax, [ebp - 0x2ac]
push eax
push edi
lea eax, [ebp - 0x4b4]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy_s]
add esp, 0xc
mov eax, dword [0x64617004]
mov edi, 0x200
cmp eax, 0x64617004
je 0x646093dd
test dword [eax + 0x1c], edi
je 0x646093dd
cmp byte [eax + 0x19], 5
jb 0x646093dd
lea ecx, [ebp - 0x4b4]
push ecx
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, ebx
push 0x43
pop ecx
call fcn.64605f31
mov dword [ebp - 0x8c0], 1
lea eax, [ebp - 0x4b4]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x8b4], esi
jmp 0x64609416
mov dword [ebp - 0x8c0], 2
mov edi, 0x200
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x8b0], eax
mov dword [ebp - 0x8c4], 0x18
lea edx, [ebp - 0x86c]
mov ecx, dword [ebp - 0x820]
call fcn.6460442a
test eax, eax
je 0x64609f30
lea eax, [ebp - 0x814]
push eax
mov esi, dword [ebp - 0x86c]
push esi
call dword [sym.imp.FXSAPI.dll_FaxConnectFaxServerW]
test eax, eax
je 0x64609f30
mov eax, dword [0x64617004]
mov ebx, 0x64617004
cmp eax, ebx
je 0x64609493
test dword [eax + 0x1c], edi
je 0x64609493
cmp byte [eax + 0x19], 5
jb 0x64609493
push esi
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x45
pop ecx
call fcn.64605f31
mov eax, dword [0x64617004]
mov dword [ebp - 0x77c], 0x40
cmp eax, ebx
je 0x646094bf
test dword [eax + 0x1c], edi
je 0x646094bf
cmp byte [eax + 0x19], 5
jb 0x646094bf
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x46
pop ecx
call fcn.64604453
mov eax, dword [ebp - 0x864]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
lea ecx, [ebp - 0x880]
push ecx
xor ecx, ecx
push ecx
push ecx
push eax
mov esi, dword [esi + 0x8c]
mov ecx, esi
call dword [0x64618384]
call esi
test eax, eax
jns 0x64609682
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609678
test dword [eax + 0x1c], edi
je 0x64609678
cmp byte [eax + 0x19], 2
jb 0x64609678
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x646019d4
mov eax, dword [0x64617004]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edi, 0x64601f74
push 0x47
mov edx, edi
pop ecx
call fcn.64604495
mov esi, dword [ebp - 0x804]
xor eax, eax
mov dword [ebp - 0x778], eax
lea eax, [ebp - 0x888]
push eax
push dword [ebp - 0x814]
call dword [sym.imp.FXSAPI.dll_FaxGetReceiptsOptions]
test eax, eax
jne 0x64609593
mov edx, dword [0x64617004]
cmp edx, ebx
je 0x64609599
test dword [edx + 0x1c], 0x200
je 0x64609599
cmp byte [edx + 0x19], 2
jb 0x64609599
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x64601e98
mov eax, dword [0x64617004]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, edi
push 0x54
pop ecx
call fcn.64604495
mov edx, dword [0x64617004]
xor ecx, ecx
mov eax, ecx
mov dword [ebp - 0x764], eax
test esi, esi
je 0x646095d8
test byte [ebp - 0x888], 1
je 0x646095d8
cmp dword [ebp - 0x788], 1
sete al
lea eax, [eax*8 + 1]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x784], ecx
je 0x646095d8
or eax, 0x10
mov dword [ebp - 0x764], eax
cmp edx, ebx
je 0x646095fe
test dword [edx + 0x1c], 0x200
je 0x646095fe
cmp byte [edx + 0x19], 5
jb 0x646095fe
push eax
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, edi
push 0x55
pop ecx
call fcn.64604471
xor ecx, ecx
mov esi, dword [ebp - 0x850]
cmp dword [esi + 0x70], 0x170003
jne 0x64609f24
lea eax, [ebp - 0x860]
push eax
push 0x2000000
push dword [ebp - 0x814]
call dword [sym.imp.FXSAPI.dll_FaxAccessCheckEx]
test eax, eax
jne 0x64609d0a
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x64609d0a
mov ecx, dword [0x64617004]
cmp ecx, ebx
je 0x6460966e
test dword [ecx + 0x1c], 0x200
je 0x6460966e
cmp byte [ecx + 0x19], 2
jb 0x6460966e
push eax
push 0x64601ec4
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov edx, edi
push 0x56
pop ecx
call fcn.64604495
mov ebx, 0x2cf3
jmp 0x64608fd8
mov edi, 0x64601f74
jmp 0x64609534
mov eax, dword [ebp - 0x850]
xor edx, edx
cmp dword [eax + 0xac], edx
jne 0x64609a21
mov eax, dword [ebp - 0x864]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
lea ecx, [ebp - 0x868]
push ecx
push edx
push 0x646019f4
push eax
mov ecx, dword [esi + 0x24]
call dword [0x64618384]
call dword [esi + 0x24]
test eax, eax
jns 0x64609700
mov ecx, dword [0x64617004]
cmp ecx, ebx
je 0x64609a21
test dword [ecx + 0x1c], edi
je 0x64609a21
cmp byte [ecx + 0x19], 2
jb 0x64609a21
push eax
push 0x64601a08
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x48
mov edi, 0x64601f74
mov edx, edi
pop ecx
call fcn.64604495
jmp 0x6460993c
mov dword [ebp - 0x724], 1
mov dword [ebp - 0x720], 0x6603001e
mov eax, dword [ebp - 0x868]
mov esi, dword [eax]
lea ecx, [ebp - 0x858]
push ecx
lea ecx, [ebp - 0x830]
push ecx
xor ecx, ecx
push ecx
lea ecx, [ebp - 0x724]
push ecx
push eax
mov ecx, dword [esi + 0x14]
call dword [0x64618384]
call dword [esi + 0x14]
mov edx, eax
test edx, edx
js 0x646099fa
mov ecx, dword [ebp - 0x858]
cmp dword [ecx], 0x6603001e
jne 0x646099fa
mov ecx, dword [ecx + 8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x64609763
sub ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x81c], eax
lea esi, [eax + 0x1c]
mov ecx, esi
call fcn.6460cdc3
mov ebx, eax
test ebx, ebx
je 0x64608fd3
push esi
xor esi, esi
push esi
push ebx
call sub.msvcrt.dll_memset
add esp, 0xc
xor eax, eax
inc eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x858]
push dword [eax + 8]
lea ecx, [ebx + 0x1c]
mov edx, dword [ebp - 0x81c]
call fcn.64605b1d
test eax, eax
jns 0x646097fd
mov ecx, dword [0x64617004]
cmp ecx, 0x64617004
je 0x64609370
test dword [ecx + 0x1c], edi
je 0x64609370
cmp byte [ecx + 0x19], 2
jb 0x64609370
push eax
push 0x64601b30
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov edx, 0x64601f74
push 0x4a
pop ecx
call fcn.64604495
jmp 0x64609370
mov dword [ebx + 4], 0xc840a7dc
mov dword [ebx + 8], 0x1a1042c0
mov dword [ebx + 0xc], 0x8b9b4
xor edx, edx
mov dword [ebx + 0x10], 0x82e12f2b
mov dword [ebp - 0x810], edx
mov eax, dword [ebp - 0x864]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
lea ecx, [ebp - 0x810]
push ecx
lea ecx, [ebp - 0x848]
push ecx
push edx
push edx
push ebx
mov ecx, dword [ebp - 0x81c]
add ecx, 0x1c
push ecx
push eax
mov ecx, dword [esi + 0x4c]
call dword [0x64618384]
call dword [esi + 0x4c]
test eax, eax
jns 0x6460989a
mov ecx, dword [0x64617004]
cmp ecx, 0x64617004
je 0x64609911
test dword [ecx + 0x1c], edi
je 0x64609911
mov edi, 0x64601f74
cmp byte [ecx + 0x19], 2
jb 0x64609916
push eax
push 0x64601b50
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x4b
mov edx, edi
pop ecx
call fcn.64604495
jmp 0x64609916
mov dword [ebp - 0x72c], 1
mov dword [ebp - 0x728], 0xfff0102
mov eax, dword [ebp - 0x810]
mov esi, dword [eax]
lea ecx, [ebp - 0x854]
push ecx
lea ecx, [ebp - 0x830]
push ecx
xor ecx, ecx
push ecx
lea ecx, [ebp - 0x72c]
push ecx
push eax
mov ecx, dword [esi + 0x14]
call dword [0x64618384]
call dword [esi + 0x14]
mov esi, eax
test esi, esi
js 0x646099bf
mov edx, dword [ebp - 0x854]
cmp word [edx], 0xa
je 0x646099bf
mov dword [edx], 0xc190102
mov edi, dword [ebp - 0x850]
lea edi, [edi + 0xa0]
mov esi, dword [ebp - 0x854]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, 0x64601f74
mov ecx, ebx
call fcn.6460ce29
mov ecx, dword [ebp - 0x810]
test ecx, ecx
je 0x64609937
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x64618384]
call esi
mov ebx, 0x64617004
mov eax, dword [ebp - 0x880]
mov esi, dword [eax]
lea ecx, [ebp - 0x87c]
push ecx
lea ecx, [ebp - 0x8ac]
push ecx
xor ecx, ecx
push ecx
push ecx
mov ecx, dword [ebp - 0x850]
push dword [ecx + 0xac]
push dword [ecx + 0xa8]
push eax
mov ecx, dword [esi + 0x38]
call dword [0x64618384]
call dword [esi + 0x38]
test eax, eax
jns 0x64609a2b
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609534
test dword [eax + 0x1c], 0x200
je 0x64609534
cmp byte [eax + 0x19], 2
jb 0x64609534
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x64601c4c
mov eax, dword [0x64617004]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x4d
jmp 0x6460952c
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64609911
test dword [eax + 0x1c], edi
je 0x64609911
mov edi, 0x64601f74
cmp byte [eax + 0x19], 2
jb 0x64609916
push esi
push 0x64601bd8
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x4c
jmp 0x64609890
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609a21
test dword [eax + 0x1c], edi
je 0x64609a21
cmp byte [eax + 0x19], 2
jb 0x64609a21
push edx
push 0x64601ab0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x49
jmp 0x646096ee
mov edi, 0x64601f74
jmp 0x6460993c
mov eax, dword [ebp - 0x87c]
mov esi, dword [eax]
lea ecx, [ebp - 0x83c]
push ecx
lea ecx, [ebp - 0x830]
push ecx
xor ecx, ecx
push ecx
lea ecx, [ebp - 0x73c]
push ecx
push eax
mov ecx, dword [esi + 0x14]
call dword [0x64618384]
call dword [esi + 0x14]
mov esi, eax
mov dword [ebp - 0x828], esi
test esi, esi
jns 0x64609a9c
mov ecx, dword [0x64617004]
cmp ecx, ebx
je 0x64609534
test dword [ecx + 0x1c], 0x200
je 0x64609534
cmp byte [ecx + 0x19], 2
jb 0x64609534
push esi
push 0x64601c60
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x4e
jmp 0x6460952c
push 0x3002001f
mov edx, dword [ebp - 0x830]
mov ecx, dword [ebp - 0x83c]
call fcn.6460853e
test eax, eax
jne 0x64609aed
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609534
test dword [eax + 0x1c], 0x200
je 0x64609534
cmp byte [eax + 0x19], 2
jb 0x64609534
push esi
push 0x64601cd0
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x4f
jmp 0x6460952c
mov ecx, dword [eax + 8]
mov edx, 0x64601d50
mov eax, ecx
mov si, word [eax]
cmp si, word [edx]
jne 0x64609b1f
test si, si
je 0x64609b19
mov si, word [eax + 2]
cmp si, word [edx + 2]
jne 0x64609b1f
add eax, 4
add edx, 4
test si, si
jne 0x64609af7
xor esi, esi
mov eax, esi
jmp 0x64609b26
sbb eax, eax
or eax, 1
xor esi, esi
test eax, eax
jne 0x64609c18
push 0x800f101f
mov edx, dword [ebp - 0x830]
mov ecx, dword [ebp - 0x83c]
call fcn.6460853e
mov dword [ebp - 0x81c], eax
test eax, eax
je 0x64609bdc
xor ecx, ecx
cmp dword [eax + 8], ecx
jbe 0x64609d03
mov edx, dword [eax + 0xc]
push 0x64601d58
push dword [edx + esi*4]
call dword [sym.imp.msvcrt.dll_wcsstr]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x81c]
mov edx, dword [ecx + 0xc]
cmp eax, dword [edx + esi*4]
je 0x64609b89
inc esi
cmp esi, dword [ecx + 8]
jb 0x64609b60
jmp 0x64609534
mov eax, dword [edx + esi*4]
add eax, 0xa
push eax
call dword [sym.imp.msvcrt.dll__wcsdup]
pop ecx
mov ecx, eax
mov dword [ebp - 0x760], ecx
test ecx, ecx
je 0x64608fd3
xor esi, esi
inc esi
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x6460953a
test dword [eax + 0x1c], 0x200
je 0x6460953a
cmp byte [eax + 0x19], 5
jb 0x6460953a
push ecx
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x50
jmp 0x64609cba
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609534
test dword [eax + 0x1c], 0x200
je 0x64609534
cmp byte [eax + 0x19], 2
jb 0x64609534
push dword [ebp - 0x828]
push 0x64601d68
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x51
jmp 0x6460952c
mov eax, 0x64601e04
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x64609c43
test dx, dx
je 0x64609c3f
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x64609c43
add ecx, 4
add eax, 4
test dx, dx
jne 0x64609c1d
mov eax, esi
jmp 0x64609c48
sbb eax, eax
or eax, 1
test eax, eax
jne 0x64609534
push 0x3003001f
mov edx, dword [ebp - 0x830]
mov ecx, dword [ebp - 0x83c]
call fcn.6460853e
test eax, eax
je 0x64609cc7
push dword [eax + 8]
call dword [sym.imp.msvcrt.dll__wcsdup]
pop ecx
mov ecx, eax
mov dword [ebp - 0x760], ecx
test ecx, ecx
jne 0x64609c8a
mov ebx, 0x2cfd
jmp 0x64609375
xor esi, esi
inc esi
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x6460953a
test dword [eax + 0x1c], 0x200
je 0x6460953a
cmp byte [eax + 0x19], 5
jb 0x6460953a
push ecx
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x52
mov edx, edi
pop ecx
call fcn.64605f31
jmp 0x6460953a
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609534
test dword [eax + 0x1c], 0x200
je 0x64609534
cmp byte [eax + 0x19], 2
jb 0x64609534
push dword [ebp - 0x828]
push 0x64601e10
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x53
jmp 0x6460952c
mov esi, ecx
jmp 0x6460953a
mov eax, dword [esi + 0x78]
xor esi, esi
sub eax, esi
je 0x64609d47
sub eax, 1
je 0x64609d32
sub eax, 1
jne 0x64609d5a
test byte [ebp - 0x860], 4
je 0x64609d32
mov dword [ebp - 0x75c], 2
jmp 0x64609d5a
test byte [ebp - 0x860], 2
je 0x64609d47
mov dword [ebp - 0x75c], 1
jmp 0x64609d5a
test byte [ebp - 0x860], 1
je 0x64609f1a
mov dword [ebp - 0x75c], esi
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609d88
test dword [eax + 0x1c], 0x200
je 0x64609d88
cmp byte [eax + 0x19], 5
jb 0x64609d88
push dword [ebp - 0x75c]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, edi
push 0x57
pop ecx
call fcn.64604471
push 0x40
lea eax, [ebp - 0xa4]
push eax
push 0x2d17
push dword [0x64617400]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x740], esi
mov esi, dword [ebp - 0x818]
mov ecx, esi
shl ecx, 3
call fcn.6460cdc3
mov dword [ebp - 0x870], eax
test eax, eax
je 0x64608fd3
push eax
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x77c]
push eax
push dword [ebp - 0x834]
push esi
lea eax, [ebp - 0x92c]
push eax
lea eax, [ebp - 0x8c4]
push eax
push dword [ebp - 0x840]
push dword [ebp - 0x814]
call dword [sym.imp.FXSAPI.dll_FaxSendDocumentExW]
test eax, eax
jne 0x64609eff
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x64617004]
cmp eax, ebx
je 0x64609e46
test dword [eax + 0x1c], 0x200
je 0x64609e46
cmp byte [eax + 0x19], 2
jb 0x64609e46
push esi
push 0x64601ee8
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, edi
push 0x58
pop ecx
call fcn.64604495
cmp esi, 8
je 0x64608fd3
cmp esi, 0xb
je 0x64609ef5
cmp esi, 0x5aa
je 0x64609327
cmp esi, 0x780
je 0x64609eeb
cmp esi, 0x1b65
je 0x64609e7e
mov ebx, 0x2cf1
jmp 0x64608fd8
mov ebx, 0x2d16
lea eax, [ebp - 0x88c]
push eax
push dword [ebp - 0x814]
call dword [sym.imp.FXSAPI.dll_FaxGetRecipientsLimit]
test eax, eax
jne 0x64608fd8
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64608fd8
test dword [eax + 0x1c], 0x200
je 0x64608fd8
cmp byte [eax + 0x19], 2
jb 0x64608fd8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x64601f0c
mov eax, dword [0x64617004]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, edi
push 0x59
pop ecx
call fcn.64604495
jmp 0x64608fd8
mov ebx, 0x2d00
jmp 0x64608fd8
mov ebx, 0x2d01
jmp 0x64608fd8
push dword [ebp - 0x814]
call dword [sym.imp.FXSAPI.dll_FaxClose]
xor eax, eax
mov dword [ebp - 0x814], eax
mov ebx, eax
jmp 0x64608fda
mov ebx, 0x2d15
jmp 0x64609375
mov ebx, 0x2cfe
mov edi, ecx
jmp 0x64608ae1
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x64609f68
test dword [eax + 0x1c], edi
je 0x64609f68
cmp byte [eax + 0x19], 2
jb 0x64609f68
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x64601448
mov eax, dword [0x64617004]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, ebx
push 0x44
pop ecx
call fcn.64604495
mov ebx, 0x430
jmp 0x64608fd8
mov eax, dword [0x64617004]
cmp eax, 0x64617004
je 0x6460886c
test dword [eax + 0x1c], 0x200
je 0x6460886c
cmp byte [eax + 0x19], 2
jb 0x6460886c
push ecx
push 0x64601820
push dword [eax + 0x14]
push dword [eax + 0x10]
mov edx, 0x64601f74
push 0x3b
pop ecx
call fcn.64604495
jmp 0x6460886c
mov edi, ebx
jmp 0x64608ae1