Function at 0x463ca7
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
and dword [ebp - 0x24], 0
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
mov di, word [esi]
mov dword [ebp - 0x10], ecx
mov byte [ebp - 2], 0
mov byte [ebp - 1], 0
mov dword [ebp - 8], 0xffff0000
mov eax, edi
call fcn.00437e2d
test al, al
mov ebx, 0x4b0
je 0x463cee
and dword [ebp - 8], 0
mov dword [ebp - 0x24], 1
jmp 0x463e09
push 4
push esi
push 0x4b0780
call fcn.00439124
add esp, 0xc
test al, al
je 0x463d0a
mov dword [ebp - 8], ebx
jmp 0x463e09
push 8
push esi
push 0x4b0774
call fcn.00439124
add esp, 0xc
test al, al
jne 0x463d02
push 5
pop ebx
push ebx
push esi
push 0x4b076c
call fcn.00439124
add esp, 0xc
test al, al
je 0x463d40
mov dword [ebp - 8], 0x4b1
jmp 0x463e09
push 9
push esi
push 0x4b0760
call fcn.00439124
add esp, 0xc
test al, al
jne 0x463d34
push ebx
push esi
push 0x4b0758
call fcn.00439124
add esp, 0xc
test al, al
je 0x463d70
and dword [ebp - 8], 0
jmp 0x463e09
push 4
push esi
push 0x4b0750
call fcn.00439124
add esp, 0xc
test al, al
je 0x463d8d
mov dword [ebp - 8], 0x3a8
jmp 0x463e09
push ebx
push esi
push 0x4b0748
call fcn.00439124
add esp, 0xc
test al, al
je 0x463da9
mov dword [ebp - 8], 0x3b6
jmp 0x463e09
push ebx
push esi
push 0x4b0740
call fcn.00439124
add esp, 0xc
test al, al
je 0x463dc5
mov dword [ebp - 8], 0xfde9
jmp 0x463e09
push ebx
push esi
push 0x4b0738
call fcn.00439124
add esp, 0xc
test al, al
je 0x463de1
mov dword [ebp - 8], 0xfde8
jmp 0x463e09
cmp di, 0x2d
jne 0x463e09
xor eax, eax
add esi, 2
mov ax, word [esi]
push eax
call fcn.004129ca
add esp, 4
test al, al
je 0x463e09
push esi
mov dword [ebp + 8], esi
call fcn.0043e91d
pop ecx
mov dword [ebp - 8], eax
lea eax, [ebp + 8]
push eax
call fcn.00405196
push 4
lea eax, [ebp + 8]
push eax
push 0x4b0730
call fcn.0043fbfd
add esp, 0x10
neg al
sbb al, al
push 0x4a69d4
lea ecx, [ebp - 0x2c]
and eax, 2
mov byte [ebp - 0x28], al
call fcn.00446497
push 0x4b071c
lea ecx, [ebp - 0x14]
call fcn.00446497
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
push ebx
xor eax, eax
push 0x2c
inc eax
pop edi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x54], eax
push edi
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x5c], ebx
call fcn.0043359b
mov esi, dword [ebp - 0x2c]
push esi
push 0x4b0718
mov dword [ebp + 8], eax
call fcn.004391ba
test al, al
pop ecx
pop ecx
je 0x463f05
mov dword [ebp - 0x5c], 1
mov byte [ebp - 2], 1
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x30], ebx
call fcn.0043dd7e
mov ecx, dword [ebp - 0x10]
push 1
push ebx
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
call fcn.0044bafc
mov eax, dword [ebp - 0x34]
mov dword [ebp + 8], eax
cmp word [eax], di
jne 0x463fa5
lea ecx, [ebp - 0x1c]
call fcn.0043dd7e
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004408ab
mov esi, dword [ebp - 0x1c]
push esi
push 0x4b0714
mov dword [ebp - 0x20], esi
call fcn.004391ba
add esp, 0x14
test al, al
je 0x463f3d
mov byte [ebp - 1], 2
mov dword [ebp - 0x30], 0x4b0710
jmp 0x463f9d
cmp word [esi], bx
je 0x463e93
push esi
push 0x4a7c9c
call fcn.004391ba
test al, al
pop ecx
pop ecx
jne 0x463e93
push esi
push 0x4a7704
call fcn.004391ba
test al, al
pop ecx
pop ecx
je 0x463e97
mov byte [ebp - 2], 2
jmp 0x463e97
push esi
push 0x4b070c
call fcn.004391ba
test al, al
pop ecx
pop ecx
je 0x463f54
mov byte [ebp - 1], 3
jmp 0x463f9d
push esi
push 0x4ac1e4
call fcn.004391ba
test al, al
pop ecx
pop ecx
je 0x463f72
mov byte [ebp - 1], 1
mov dword [ebp - 0x30], 0x4b0708
jmp 0x463f9d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00449426
mov eax, dword [ebp - 0x20]
cmp word [eax], 0x2b
pop ecx
pop ecx
jne 0x463f9d
add dword [ebp - 0x20], 2
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00449426
pop ecx
pop ecx
lea ecx, [ebp - 0x1c]
call fcn.00437e1a
mov eax, dword [ebp + 8]
cmp word [eax], di
jne 0x463fc2
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004408ab
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x14]
push eax
call fcn.00402d33
push 8
lea ecx, [ebp - 0xc]
call fcn.0043dc74
mov esi, dword [ebp - 0xc]
xor edi, edi
inc edi
cmp dword [ebp - 8], ebx
mov dword [ebp - 0x38], esi
mov word [esi], bx
jl 0x464951
lea ecx, [ebp - 0x78]
call fcn.0043dc57
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
cmp word [eax], 0x75
jne 0x46419b
cmp word [eax + 2], 0x64
jne 0x46419b
cmp word [eax + 4], 0x3a
jne 0x46419b
mov ecx, dword [ebp + 8]
push 0x22
add eax, 6
pop esi
mov word [ecx], bx
cmp word [eax], si
mov dword [ebp - 0x28], eax
jne 0x464038
inc eax
inc eax
mov dword [ebp - 0x28], eax
mov edi, eax
push 0x3a
lea eax, [ebp - 0x28]
call fcn.004128fe
mov eax, dword [ebp - 0x28]
cmp eax, edi
pop ecx
je 0x464056
cmp word [eax - 2], si
jne 0x464056
mov word [eax - 2], bx
cmp word [eax], 0x3a
jne 0x464061
mov word [eax], bx
inc eax
inc eax
cmp word [eax], si
mov ecx, eax
jne 0x46407a
lea ecx, [eax + 2]
inc eax
inc eax
cmp word [eax], si
jne 0x464075
mov word [eax], bx
cmp word [eax], bx
jne 0x46406b
push ebx
push ebx
push 0x10000
push ecx
lea eax, [ebp - 0x78]
push eax
push edi
call fcn.00435b56
mov esi, dword [ebp - 0x74]
add esp, 0x18
cmp esi, ebx
jle 0x4640a3
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x78]
add eax, ecx
mov dword [ebp + 8], eax
jmp 0x4640a6
mov eax, dword [ebp + 8]
movsx edx, byte [eax]
mov edi, 0xff
xor ecx, ecx
cmp edx, edi
mov dword [ebp - 0x40], ebx
jne 0x4640cc
movsx ebx, byte [eax + 1]
cmp ebx, 0xfe
jne 0x4640cc
mov dword [ebp - 8], 0x4b0
jmp 0x4640e3
cmp edx, 0xfe
jne 0x4640e7
movsx ebx, byte [eax + 1]
cmp ebx, edi
jne 0x4640e7
mov dword [ebp - 8], 0x4b1
push 2
jmp 0x464110
cmp edx, 0xef
jne 0x464115
movsx edx, byte [eax + 1]
cmp edx, 0xbb
jne 0x464115
movsx edx, byte [eax + 2]
cmp edx, 0xbf
jne 0x464115
mov dword [ebp - 8], 0xfde9
push 3
and dword [ebp - 0x40], 0
pop ecx
mov ebx, dword [ebp - 8]
sub esi, ecx
cmp ebx, 0x4b1
lea edi, [ecx + eax]
jne 0x46414c
and esi, 0xfffffffe
add esi, edi
cmp edi, esi
mov ecx, edi
ja 0x4641da
mov al, byte [ecx]
mov dl, byte [ecx + 1]
mov byte [ecx], dl
mov byte [ecx + 1], al
inc ecx
inc ecx
cmp ecx, esi
jbe 0x464134
mov eax, dword [ebp + 8]
jmp 0x4641da
cmp ebx, 0x4b0
je 0x4641da
cmp dword [ebp - 0x24], 0
je 0x464169
push esi
push edi
call fcn.0044b6e7
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp - 0x78]
and dword [ebp - 0x78], 0
mov dword [ebp - 0x38], eax
lea eax, [esi + esi + 0x20]
push eax
lea ecx, [ebp - 0x78]
call fcn.0043dc99
push ebx
push esi
push edi
lea ecx, [ebp - 0x78]
call fcn.0043de39
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x38]
mov dword [ebp + 8], eax
call fcn.00437e1a
jmp 0x464144
mov eax, dword [ebp - 0x14]
cmp word [eax], bx
jne 0x4641b2
lea ecx, [ebp - 0x78]
call fcn.00437e1a
xor edi, edi
jmp 0x46495f
cmp byte [ebp - 2], 1
mov eax, dword [ebp + 8]
jne 0x4641cb
cmp word [eax], 0x2c
je 0x4641cb
mov edi, 0x80070057
jmp 0x464949
inc eax
inc eax
test byte [ebp - 2], 1
mov dword [ebp + 8], eax
je 0x464493
mov edx, dword [ebp - 0x5c]
xor edi, edi
xor ecx, ecx
or edx, ecx
push 0xffffffffffffffff
mov dword [ebp - 0x24], edi
pop ebx
je 0x46423a
lea eax, [ebp + 8]
push eax
call fcn.00437e65
mov esi, dword [ebp + 8]
lea eax, [ebp + 8]
push eax
call fcn.00405172
mov eax, dword [ebp + 8]
cmp word [eax], di
pop ecx
pop ecx
je 0x464210
mov word [eax], di
mov eax, dword [ebp + 8]
cmp word [esi], di
je 0x46423a
mov ecx, dword [ebp - 0x10]
push ebx
push edi
push esi
call fcn.00413152
cmp eax, edi
je 0x464237
push ebx
push dword [eax]
lea ecx, [ebp - 0x24]
call fcn.0043dea2
mov eax, dword [ebp - 0x24]
mov dword [ebp + 8], eax
jmp 0x46423a
mov eax, dword [ebp + 8]
cmp byte [ebp - 1], 3
mov dword [ebp - 0x28], eax
jne 0x464249
push eax
jmp 0x4643aa
cmp byte [ebp - 1], 0
je 0x4642f3
cmp byte [ebp - 1], 1
mov ebx, 0x4aa28c
je 0x464263
mov ebx, 0x4a9c18
lea ecx, [ebp - 0x20]
call fcn.0043dd7e
mov eax, dword [ebp + 8]
mov esi, eax
jmp 0x4642b8
cmp cx, 0xd
jne 0x464288
cmp word [eax + 2], 0xa
jne 0x46428e
mov word [eax], di
add dword [ebp + 8], 2
jmp 0x464291
cmp cx, 0xa
jne 0x4642b3
mov word [eax], di
cmp byte [ebp - 1], 0
jne 0x4642a0
push ebx
lea ecx, [ebp - 0x20]
call fcn.0043ddea
push esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 1], 0
call fcn.0043ddea
mov eax, dword [ebp + 8]
lea esi, [eax + 2]
inc eax
inc eax
mov dword [ebp + 8], eax
mov cx, word [eax]
cmp cx, di
jne 0x464272
cmp word [esi], di
je 0x4642dd
cmp byte [ebp - 1], 0
jne 0x4642d4
push ebx
lea ecx, [ebp - 0x20]
call fcn.0043ddea
push esi
lea ecx, [ebp - 0x20]
call fcn.0043ddea
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.0043d658
lea ecx, [ebp - 0x20]
jmp 0x464481
mov edx, dword [ebp - 0x48]
cmp edx, edi
jg 0x464369
jl 0x464301
cmp dword [ebp - 0x4c], edi
jae 0x464369
mov cx, word [eax]
xor esi, esi
xor ebx, ebx
cmp cx, di
je 0x464336
cmp cx, 0xa
jne 0x464318
add esi, 1
adc ebx, edi
inc eax
inc eax
mov dword [ebp + 8], eax
mov cx, word [eax]
cmp cx, di
jne 0x46430d
cmp eax, dword [ebp - 0x28]
jbe 0x464336
cmp word [eax - 2], 0xa
je 0x464336
add esi, 1
adc ebx, edi
push 0x20
lea ecx, [ebp - 0x28]
call fcn.0043dd9c
push ebx
push esi
push 0x4a7164
push dword [ebp - 0x28]
call dword [sym.imp.USER32.DLL_wsprintfW]
mov ecx, dword [ebp - 0x10]
add esp, 0x10
push dword [ebp - 0x28]
push dword [ebp - 0x14]
call fcn.0043d658
lea ecx, [ebp - 0x28]
jmp 0x464481
mov esi, dword [ebp - 0x4c]
mov ecx, esi
or ecx, edx
jne 0x4643dc
mov dx, word [eax]
cmp dx, di
push 0xa
mov ecx, eax
mov esi, eax
pop ebx
je 0x4643ca
cmp dx, bx
jne 0x46438a
mov esi, ecx
mov ecx, eax
inc eax
inc eax
mov dword [ebp + 8], eax
mov dx, word [eax]
cmp dx, di
jne 0x464381
cmp eax, dword [ebp - 0x28]
jbe 0x4643ba
cmp word [eax - 2], bx
je 0x4643ba
cmp word [ecx], bx
jne 0x4643a9
inc ecx
inc ecx
push ecx
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
call fcn.0043d658
jmp 0x464486
cmp ecx, dword [ebp - 0x28]
jbe 0x4643ca
lea eax, [ecx - 2]
cmp word [eax], 0xd
jne 0x4643ca
mov ecx, eax
cmp word [esi], bx
jne 0x4643d1
inc esi
inc esi
sub ecx, esi
sar ecx, 1
push ecx
push esi
jmp 0x464468
cmp edx, edi
jl 0x464404
jle 0x4643ff
mov cx, word [eax]
cmp cx, di
je 0x464404
cmp cx, 0xa
jne 0x4643f4
add esi, ebx
adc edx, ebx
inc eax
inc eax
cmp edx, edi
mov dword [ebp + 8], eax
jg 0x4643e2
jl 0x464404
cmp esi, 1
ja 0x4643e2
mov esi, dword [ebp - 0x54]
mov edi, dword [ebp - 0x50]
mov dword [ebp - 0x30], eax
mov ebx, esi
jmp 0x464454
mov ecx, ebx
or ecx, edi
je 0x464426
add esi, 0xffffffff
adc dword [ebp - 0x50], 0xffffffff
js 0x46445f
jg 0x464426
test esi, esi
jb 0x46445f
lea eax, [ebp + 8]
call fcn.0043da00
mov eax, ebx
or eax, edi
je 0x46443b
mov eax, esi
or eax, dword [ebp - 0x50]
je 0x46445c
mov eax, dword [ebp + 8]
cmp word [eax], 0xd
jne 0x464449
inc eax
inc eax
mov dword [ebp + 8], eax
cmp word [eax], 0xa
jne 0x464454
inc eax
inc eax
mov dword [ebp + 8], eax
cmp word [eax], 0
jne 0x464411
jmp 0x46445f
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0x30]
sar eax, 1
push eax
push dword [ebp - 0x30]
lea ecx, [ebp - 0x30]
call fcn.004464b4
push dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.0043d658
lea ecx, [ebp - 0x30]
call fcn.00437e1a
lea ecx, [ebp - 0x24]
call fcn.00437e1a
jmp 0x4641a3
push 8
lea ecx, [ebp - 0x20]
call fcn.0043dc74
and word [esi], 0
and dword [ebp - 0x18], 0
xor eax, eax
cmp byte [ebp - 2], 2
lea edi, [ebp - 0x60]
stosd dword es:[edi], eax
mov eax, dword [0x4bf310]
mov dword [ebp - 0x64], eax
jne 0x4644c4
lea eax, [ebp - 0x64]
mov dword [ebp - 0x1c], eax
jmp 0x4645e9
xor esi, esi
push esi
push 0x2000000
push 3
push esi
push 7
lea eax, [ebp - 0x18]
push 0x80000000
push dword [ebp - 0x2c]
mov ecx, eax
mov dword [ebp - 0x1c], eax
xor ebx, ebx
call fcn.004051d2
cmp dword [ebp - 0x18], esi
je 0x464587
xor eax, eax
push eax
mov byte [ebp - 0x44], bl
mov byte [ebp - 0x43], bl
mov byte [ebp - 0x42], bl
lea edi, [ebp - 0x41]
stosw word es:[edi], ax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5c]
push eax
push 3
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
cmp byte [ebp - 0x44], 0xff
jne 0x464530
cmp byte [ebp - 0x43], 0xfe
jne 0x464568
mov dword [ebp - 8], 0x4b0
jmp 0x464543
cmp byte [ebp - 0x44], 0xfe
jne 0x464547
cmp byte [ebp - 0x43], 0xff
jne 0x464568
mov dword [ebp - 8], 0x4b1
push 2
jmp 0x464562
cmp byte [ebp - 0x44], 0xef
jne 0x464568
cmp byte [ebp - 0x43], 0xbb
jne 0x464568
cmp byte [ebp - 0x42], 0xbf
jne 0x464568
mov dword [ebp - 8], 0xfde9
push 3
xor ebx, ebx
pop esi
mov dword [ebp - 0x24], ebx
mov edi, dword [ebp - 0x18]
push 0
push ebx
push esi
push edi
call fcn.0043908b
mov ebx, edx
add esp, 0x10
test ebx, ebx
mov dword [ebp - 0x6c], eax
jg 0x464594
jl 0x464587
test eax, eax
jae 0x464594
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov edi, eax
jmp 0x464939
cmp dword [ebp - 0x24], 0
je 0x4645e9
push edi
call fcn.004875b9
test edx, edx
pop ecx
mov esi, eax
jg 0x4645e9
jl 0x4645b1
cmp esi, 0x1000000
ja 0x4645e9
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0x78]
call fcn.0043dc99
push 0
lea eax, [ebp - 0x5c]
push eax
push esi
push dword [ebp - 0x78]
push edi
call dword [sym.imp.KERNEL32.DLL_ReadFile]
push 0
push ebx
push dword [ebp - 0x6c]
push edi
call fcn.0043908b
push esi
push dword [ebp - 0x78]
call fcn.0044b6e7
add esp, 0x18
mov dword [ebp - 8], eax
xor esi, esi
push esi
mov dword [ebp - 0x44], 0x186a0
mov dword [ebp - 0x40], esi
call dword [sym.imp.KERNEL32.DLL_SetLastError]
cmp byte [ebp - 1], 3
jne 0x4646c2
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x38], eax
mov edi, 0x40000
lea eax, [esi + 0x40001]
push eax
lea ecx, [ebp - 0x28]
call fcn.0043dc99
mov ebx, dword [ebp - 0x28]
xor eax, eax
push eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x54]
push eax
push edi
lea eax, [esi + ebx]
push eax
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
cmp dword [ebp - 0x50], 0
jl 0x464657
jg 0x464650
cmp dword [ebp - 0x54], edi
jbe 0x464657
and dword [ebp - 0x50], 0
mov dword [ebp - 0x54], edi
mov ecx, dword [ebp - 0x54]
or ecx, dword [ebp - 0x50]
jne 0x464686
test eax, eax
jne 0x46468f
cmp byte [ebp - 2], 2
jne 0x464674
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x46468f
add dword [ebp - 0x44], 0xffffffff
adc dword [ebp - 0x40], 0xffffffff
js 0x46468f
jg 0x464686
cmp dword [ebp - 0x44], 0
jb 0x46468f
add esi, dword [ebp - 0x54]
mov byte [esi + ebx], 0
jmp 0x464616
mov eax, dword [ebp - 8]
lea esi, [ebp - 0x28]
call fcn.00443f5d
mov ecx, dword [ebp - 0x10]
push eax
push dword [ebp - 0x14]
call fcn.0043d658
mov ecx, esi
call fcn.00437e1a
lea ecx, [ebp - 0x18]
call fcn.00402b5a
lea ecx, [ebp - 0x20]
call fcn.00437e1a
jmp 0x4641a3
cmp byte [ebp - 1], 0
je 0x46475f
mov eax, dword [ebp - 0x30]
cmp eax, esi
jne 0x4646d8
mov eax, 0x4a75aa
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x30]
call fcn.004464cd
xor ebx, ebx
mov bl, byte [ebp - 0x28]
or ebx, 1
lea ecx, [ebp - 0x28]
call fcn.0043dd7e
cmp byte [ebp - 1], 0
jne 0x464704
push dword [ebp - 0x30]
lea ecx, [ebp - 0xc]
call fcn.0043ddea
push ebx
push dword [ebp - 8]
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x1c]
mov byte [ebp - 1], 0
call fcn.00443c96
add esp, 0x10
cmp byte [ebp - 2], 2
mov edi, eax
jne 0x46472e
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x46474f
mov eax, dword [ebp - 8]
lea esi, [ebp - 0x28]
call fcn.00443f5d
push eax
lea ecx, [ebp - 0xc]
call fcn.0043ddea
mov ecx, esi
call fcn.00437e1a
test edi, edi
je 0x464757
jmp 0x4646eb
lea ecx, [ebp - 0x28]
call fcn.00437e1a
lea ecx, [ebp - 0x30]
jmp 0x46491d
cmp dword [ebp - 0x48], esi
jg 0x4647cc
jl 0x46476b
cmp dword [ebp - 0x4c], esi
jae 0x4647cc
xor edi, edi
xor ebx, ebx
push dword [ebp - 0x28]
lea eax, [ebp - 0xc]
push dword [ebp - 8]
push eax
push dword [ebp - 0x1c]
call fcn.00443c96
add esp, 0x10
cmp byte [ebp - 2], 2
mov esi, eax
jne 0x464797
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x4647a3
test esi, esi
je 0x4647a3
add edi, 1
adc ebx, 0
jmp 0x46476f
push 0x20
lea ecx, [ebp - 0xc]
mov dword [ebp - 8], 0x4b0
call fcn.0043dc99
push ebx
push edi
push 0x4a7164
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_wsprintfW]
add esp, 0x10
jmp 0x464929
mov eax, dword [ebp - 0x4c]
xor ebx, ebx
or eax, dword [ebp - 0x48]
jne 0x46481b
mov bl, byte [ebp - 0x28]
or ebx, 1
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
push ebx
push dword [ebp - 8]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
call fcn.00443c96
add esp, 0x10
cmp byte [ebp - 2], 2
mov esi, eax
jne 0x464812
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x464929
test esi, esi
jne 0x4647dc
jmp 0x464929
inc ebx
cmp esi, dword [ebp - 0x48]
jg 0x464861
jge 0x46485c
push dword [ebp - 0x28]
lea eax, [ebp - 0xc]
push dword [ebp - 8]
push eax
push dword [ebp - 0x1c]
call fcn.00443c96
add esp, 0x10
cmp byte [ebp - 2], 2
mov edi, eax
jne 0x46484b
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x464861
test edi, edi
je 0x464861
add ebx, 1
adc esi, 0
cmp esi, dword [ebp - 0x48]
jl 0x464823
jg 0x464861
cmp ebx, dword [ebp - 0x4c]
jb 0x464823
mov edi, dword [ebp - 0x54]
cmp edi, 1
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
jne 0x464891
cmp dword [ebp - 0x50], 0
jne 0x464891
xor eax, eax
mov al, byte [ebp - 0x28]
or eax, edi
push eax
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x1c]
call fcn.00443c96
jmp 0x4647c4
lea ecx, [ebp - 0x24]
call fcn.0043dd7e
mov ebx, edi
test ebx, ebx
je 0x4648ae
add edi, 0xffffffff
adc dword [ebp - 0x50], 0xffffffff
js 0x46491a
jg 0x4648ae
test edi, edi
jb 0x46491a
mov eax, dword [ebp - 0x24]
and word [eax], 0
xor eax, eax
mov al, byte [ebp - 0x28]
or eax, 1
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
call fcn.00443c96
add esp, 0x10
cmp byte [ebp - 2], 2
mov esi, eax
jne 0x4648e3
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x6d
je 0x46491a
test esi, esi
je 0x46491a
mov eax, dword [ebp - 8]
lea esi, [ebp - 0x24]
call fcn.00443f5d
push eax
lea ecx, [ebp - 0xc]
call fcn.0043ddea
test ebx, ebx
je 0x46490b
cmp dword [ebp - 0x50], 0
jl 0x46491a
jg 0x46490b
test edi, edi
jbe 0x46491a
push 0x4a9c18
lea ecx, [ebp - 0xc]
call fcn.0043ddea
jmp 0x46489b
lea ecx, [ebp - 0x24]
mov dword [ebp - 8], 0x4b0
call fcn.00437e1a
mov eax, dword [ebp - 8]
lea esi, [ebp - 0xc]
call fcn.00443f5d
mov dword [ebp - 0x38], eax
xor edi, edi
lea ecx, [ebp - 0x18]
call fcn.00402b5a
lea ecx, [ebp - 0x20]
call fcn.00437e1a
lea ecx, [ebp - 0x78]
call fcn.00437e1a
push dword [ebp - 0x38]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.0043d658
lea ecx, [ebp - 0xc]
call fcn.00437e1a
lea ecx, [ebp - 0x34]
call fcn.00437e1a
lea ecx, [ebp - 0x3c]
call fcn.00402b5a
lea ecx, [ebp - 0x14]
call fcn.00437e1a
lea ecx, [ebp - 0x2c]
call fcn.00437e1a
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 8