Function at 0x46e890
Capabilities:
Copy file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4da197
push eax
mov eax, 0x4c98
mov dword fs:[0], esp
call fcn.004d4ce0
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x1c], esi
call fcn.0046e840
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
xor ebp, ebp
push ebp
mov edi, eax
push ebp
push 0x1032
push edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x44], 0xffffffff
call ebx
mov ecx, eax
mov eax, dword [0x4ed0fc]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x4cb0], ebp
mov dword [esp + 0x28], eax
mov al, byte [esp + 0x4b]
mov dword [esp + 0x3c], ebp
mov byte [esp + 0x38], al
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
mov eax, dword [esp + 0x4cb8]
mov byte [esp + 0x4cb0], 2
cmp eax, ebp
mov dword [esp + 0x20], ebp
jne 0x46e9cc
cmp ecx, 5
jle 0x46e9cc
push 0x21
push 0xf
call fcn.004afb70
add esp, 4
push eax
push 0x9a
call fcn.004afb70
mov ecx, dword [esi + 4]
add esp, 4
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x46e9cc
mov edx, dword [esp + 0x3c]
push edx
call fcn.004d4cc1
mov eax, dword [esp + 0x2c]
mov edx, dword [0x4ed100]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add esp, 4
lea ecx, [eax - 0xc]
mov dword [esp + 0x3c], ebp
cmp ecx, edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
je 0x46e9a4
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x46e9a4
mov edx, dword [esp + 0x28]
add edx, 0xfffffff4
push edx
call fcn.004d4cc1
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x4ed100]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x46f6bd
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x46f6bd
jmp 0x46f6ad
mov dword [esp + 0x2c], 1
mov eax, dword [esp + 0x34]
mov esi, dword [sym.imp.WININET.dll_GetUrlCacheEntryInfoW]
push 2
push eax
push 0x100c
push edi
call ebx
mov edx, eax
cmp edx, 0xffffffff
mov dword [esp + 0x34], edx
je 0x46f0d5
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x50]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x4c]
push ecx
push ebp
push 0x104b
push edx
mov dword [esp + 0x60], 4
call ebx
test eax, eax
je 0x46f056
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
push eax
call fcn.0046e730
mov ebx, eax
cmp ebx, ebp
je 0x46f056
mov eax, dword [esp + 0x4cb8]
sub eax, ebp
je 0x46f042
dec eax
je 0x46ea99
dec eax
jne 0x46f056
mov ebx, dword [ebx + 4]
push ebx
mov ecx, dword [ebx - 8]
push ecx
lea ecx, [esp + 0x30]
call fcn.00406810
mov edx, 0x4edacc
test edx, edx
jne 0x46ea7a
xor eax, eax
jmp 0x46ea85
push 0x4edacc
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4edacc
push eax
lea ecx, [esp + 0x30]
call fcn.00406810
jmp 0x46f056
mov ecx, 0x411
xor eax, eax
lea edi, [esp + 0x3c62]
mov word [esp + 0x3c60], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x4ed0fc]
mov dword [esp + 0x30], ebp
mov dword [esp + 0x18], eax
mov ecx, dword [ebx + 4]
lea edx, [esp + 0x3c60]
push ecx
push 0x4ed128
push 0x823
push edx
mov byte [esp + 0x4cc0], 3
call dword [sym.imp.MSVCRT.dll__snwprintf]
mov ebx, dword [ebx + 4]
add esp, 0x10
lea eax, [esp + 0x30]
push eax
push ebp
push ebx
call esi
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.MSVCRT.dll_malloc]
mov ecx, dword [esp + 0x34]
mov ebx, eax
mov edx, ecx
xor eax, eax
mov edi, ebx
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [esp + 0x30]
lea ecx, [esp + 0x3c60]
push eax
push ebx
push ecx
call esi
cmp eax, ebp
jne 0x46eb63
push 8
lea edx, [esp + 0x3c64]
push str.file:___
push edx
call dword [sym.imp.MSVCRT.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x46ebc8
lea eax, [esp + 0x3c60]
push eax
call fcn.004a28e0
lea ecx, [esp + 0x3c74]
add esp, 4
mov dword [ebx + 8], ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
test eax, eax
je 0x46ebc8
mov esi, dword [ebx + 8]
cmp esi, ebp
jne 0x46eb7f
xor eax, eax
jmp 0x46eb86
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], eax
call fcn.004066f0
test eax, eax
je 0x46ebc8
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
lea ecx, [eax + eax]
mov dword [esp + 0x14], ecx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov dword [ecx - 8], eax
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov word [eax + edx], bp
cmp ebx, ebp
je 0x46ebd6
push ebx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 8], ebp
je 0x46eff4
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x7a]
mov word [esp + 0x78], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 1
lea edx, [esp + 0x7c]
push 0x103
lea eax, [esp + 0x3c68]
push edx
push eax
call fcn.00438b20
mov eax, dword [esp + 0x34]
add esp, 0x10
cmp eax, 1
jne 0x46eda7
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x692]
mov word [esp + 0x690], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x89a]
mov word [esp + 0x898], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edx, dword [0x73ff28]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xaa2]
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov word [esp + 0xaa0], bp
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x898]
push 0x104
push ecx
push 0x5c
push edx
stosw word es:[edi], ax
call esi
mov ecx, dword [0x73ff28]
lea eax, [esp + 0x690]
push 0x104
push eax
push 0x63
push ecx
call esi
lea edx, [esp + 0x690]
push edx
call fcn.004a94a0
lea eax, [esp + 0xaa4]
lea ecx, [esp + 0x7c]
push eax
push ebp
push 0x80802
push 0x500df0
push ecx
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x6a8]
lea eax, [esp + 0x8b0]
push edx
mov edx, dword [ecx + 4]
push eax
mov eax, dword [0x73ff2c]
push edx
push eax
call fcn.004a9650
add esp, 0x28
test eax, eax
je 0x46ed46
lea ecx, [esp + 0x78]
test ecx, ecx
jne 0x46ecff
xor ebx, ebx
jmp 0x46ed0c
lea edx, [esp + 0x78]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
push ebx
lea ecx, [esp + 0x14]
call fcn.004066f0
test eax, eax
je 0x46ed4a
mov edi, dword [esp + 0x10]
lea eax, [ebx + ebx]
mov ecx, eax
lea esi, [esp + 0x78]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x10]
mov dword [ecx - 8], ebx
mov edx, dword [esp + 0x10]
mov word [eax + edx], bp
jmp 0x46ed4a
mov dword [esp + 0x2c], ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
push ebp
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x46ed63
inc dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4ed100]
mov byte [esp + 0x4cb0], 2
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x46f056
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x46f056
mov eax, dword [esp + 0x18]
add eax, 0xfffffff4
push eax
call fcn.004d4cc1
add esp, 4
jmp 0x46f056
mov ecx, dword [0x4ed0fc]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x10]
mov byte [esp + 0x4cb0], 4
cmp dword [eax - 8], ebp
jne 0x46eed4
mov dx, word [0x500df0]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x282]
mov word [esp + 0x280], dx
mov word [esp + 0x488], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x48a]
push reloc.DSOUND.dll_DirectSoundCreate
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x48c]
push 0x103
push ecx
push str.LastSavePagePath
push str.Path
stosw word es:[edi], ax
call fcn.004af1b0
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x49c]
push ebp
push edx
mov edx, dword [ecx + 4]
lea eax, [esp + 0x29c]
push 0x103
push eax
push ebp
push edx
call fcn.004b1c50
add esp, 0x2c
test eax, eax
je 0x46f06b
lea eax, [esp + 0x280]
test eax, eax
jne 0x46ee60
xor ebx, ebx
jmp 0x46ee70
lea ecx, [esp + 0x280]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
push ebx
lea ecx, [esp + 0x14]
call fcn.004066f0
test eax, eax
je 0x46eeab
mov edi, dword [esp + 0x10]
lea eax, [ebx + ebx]
mov ecx, eax
lea esi, [esp + 0x280]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x10]
mov dword [ecx - 8], ebx
mov edx, dword [esp + 0x10]
mov word [eax + edx], bp
push reloc.DSOUND.dll_DirectSoundCreate
lea eax, [esp + 0x284]
push 0xffffffffffffffff
push eax
push str.LastSavePagePath
push str.Path
call fcn.004af2d0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
add esp, 0x14
cmp ecx, eax
je 0x46ef45
cmp dword [ecx - 0xc], ebp
jge 0x46eeea
mov edx, dword [0x4ed100]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x46eeef
cmp dword [eax - 0xc], ebp
jge 0x46ef2a
mov ebx, dword [eax - 8]
lea ecx, [esp + 0x14]
push ebx
mov esi, eax
call fcn.004066f0
test eax, eax
je 0x46ef45
mov edi, dword [esp + 0x14]
lea eax, [ebx + ebx]
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x14]
mov dword [ecx - 8], ebx
mov edx, dword [esp + 0x14]
mov word [eax + edx], bp
jmp 0x46ef45
lea ecx, [esp + 0x14]
call fcn.00406610
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov eax, 0x4ef314
test eax, eax
je 0x46ef59
push 0x4ef314
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4ef314
push eax
lea ecx, [esp + 0x1c]
call fcn.00406810
lea ecx, [esp + 0x78]
test ecx, ecx
jne 0x46ef74
xor eax, eax
jmp 0x46ef7f
lea edx, [esp + 0x78]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esp + 0x78]
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.00406810
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x78]
push 0x103
push edx
push ebp
push eax
call fcn.004a97a0
add esp, 0x10
test eax, eax
je 0x46efc3
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x78]
push ebp
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x46efc3
inc dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov edx, dword [0x4ed100]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x46f009
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x46f009
mov edx, dword [esp + 0x14]
lea eax, [edx - 0xc]
push eax
call fcn.004d4cc1
add esp, 4
jmp 0x46f009
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0x34]
push eax
push 1
push ecx
lea ecx, [esp + 0x44]
call fcn.00470320
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4ed100]
mov byte [esp + 0x4cb0], 2
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x46f056
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x46f056
mov eax, dword [esp + 0x18]
add eax, 0xfffffff4
push eax
call fcn.004d4cc1
add esp, 4
jmp 0x46f056
mov ecx, dword [ebx + 4]
push ebp
push ebp
push ebp
push ebp
push 1
push ecx
mov ecx, 0x6f2878
call fcn.00452680
cmp dword [esp + 0x2c], ebp
je 0x46f0d5
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [esp + 0x4c]
jmp 0x46e9d4
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4ed100]
mov dword [esp + 0x2c], ebp
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x46f09e
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x46f09e
mov eax, dword [esp + 0x14]
add eax, 0xfffffff4
push eax
call fcn.004d4cc1
add esp, 4
mov eax, dword [esp + 0x18]
mov edx, dword [0x4ed100]
mov byte [esp + 0x4cb0], 2
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x46f0d5
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x46f0d5
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004d4cc1
add esp, 4
mov eax, dword [esp + 0x4cb8]
dec eax
je 0x46f101
dec eax
jne 0x46f646
mov eax, dword [esp + 0x28]
cmp dword [eax - 8], ebp
je 0x46f646
push eax
call fcn.004b1a30
add esp, 4
jmp 0x46f646
cmp dword [esp + 0x2c], ebp
je 0x46f646
mov ecx, dword [esp + 0x3c]
cmp ecx, ebp
jne 0x46f11b
xor ebx, ebx
mov dword [esp + 0x18], ebx
jmp 0x46f12a
mov eax, dword [esp + 0x40]
sub eax, ecx
sar eax, 2
mov dword [esp + 0x18], eax
mov ebx, eax
mov esi, dword [esp + 0x20]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x7a]
mov word [esp + 0x78], bp
cmp esi, ebp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
je 0x46f199
cmp ebx, ebp
jne 0x46f1a5
mov eax, dword [esp + 0x24]
push esi
push eax
push 0x98
call fcn.004afb70
add esp, 4
lea ecx, [esp + 0x80]
push eax
push 0x103
push ecx
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
push 0x40
push 0xf
call fcn.004afb70
add esp, 4
lea edx, [esp + 0x7c]
push eax
mov eax, dword [esp + 0x24]
push edx
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x46f646
cmp ebx, ebp
je 0x46f646
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
cmp dword [edx - 8], ebp
jne 0x46f2e5
cmp ebx, 1
jne 0x46f1bf
cmp esi, ebp
je 0x46f2e5
mov dx, word [0x500df0]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x282]
mov word [esp + 0x280], dx
mov word [esp + 0x488], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x48a]
push reloc.DSOUND.dll_DirectSoundCreate
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x48c]
push 0x103
push eax
push str.LastSavePagePath
push str.Path
call fcn.004af1b0
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x49c]
push ebp
push ecx
mov ecx, dword [eax + 4]
lea edx, [esp + 0x29c]
push 0x103
push edx
push ebp
push ecx
call fcn.004b1c50
add esp, 0x2c
test eax, eax
je 0x46f2e5
lea edx, [esp + 0x280]
test edx, edx
jne 0x46f259
xor ebx, ebx
jmp 0x46f269
lea eax, [esp + 0x280]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
mov edi, dword [esp + 0x10]
cmp dword [edi - 0xc], 1
jg 0x46f278
cmp ebx, dword [edi - 4]
jle 0x46f293
lea ecx, [esp + 0x10]
call fcn.00406610
push ebx
lea ecx, [esp + 0x14]
call fcn.00406580
cmp eax, ebp
je 0x46f2c0
mov edi, dword [esp + 0x10]
lea eax, [ebx + ebx]
lea esi, [esp + 0x280]
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x20]
mov dword [ecx - 8], ebx
mov edx, dword [esp + 0x10]
mov word [eax + edx], bp
push reloc.DSOUND.dll_DirectSoundCreate
lea eax, [esp + 0x284]
push 0xffffffffffffffff
push eax
push str.LastSavePagePath
push str.Path
call fcn.004af2d0
mov ebx, dword [esp + 0x2c]
add esp, 0x14
mov eax, dword [esp + 0x24]
sub eax, esi
push eax
push 0x99
call fcn.004afb70
add esp, 4
lea ecx, [esp + 0x7c]
push eax
push 0x103
push ecx
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
push 0x21
push 0xf
call fcn.004afb70
add esp, 4
lea edx, [esp + 0x7c]
push eax
mov eax, dword [esp + 0x24]
push edx
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x46f646
cmp ebx, ebp
mov dword [esp + 0x24], ebp
jle 0x46f646
or esi, 0xffffffff
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x24]
mov ecx, dword [edx + eax*4]
push ecx
mov ecx, dword [esp + 0x20]
call fcn.0046e730
mov ebx, eax
mov ecx, 0x412
xor eax, eax
lea edi, [esp + 0xcac]
mov dword [esp + 0x3bb8], ebp
mov dword [esp + 0xca8], ebp
rep stosd dword es:[edi], eax
mov ecx, 0x412
lea edi, [esp + 0x1cf4]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [esp + 0x2d3c]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [esp + 0x2f44]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [esp + 0x314c]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [esp + 0x355c]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [esp + 0x3354]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x397c]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x3a7c]
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [esp + 0x3764]
rep stosd dword es:[edi], eax
mov eax, 1
mov ecx, 0x1e
mov dword [esp + 0x3bac], eax
mov dword [esp + 0x3bb0], eax
mov dword [esp + 0x3bb4], eax
xor eax, eax
lea edi, [esp + 0x3bc0]
mov dword [esp + 0x396c], ebp
mov dword [esp + 0x3b94], ebp
mov dword [esp + 0x3978], ebp
mov dword [esp + 0x3b7c], ebp
mov dword [esp + 0x3b80], esi
mov dword [esp + 0x3b84], esi
mov dword [esp + 0x3b88], esi
mov dword [esp + 0x3b8c], esi
mov dword [esp + 0x3970], ebp
mov dword [esp + 0x3b98], esi
mov dword [esp + 0x3b9c], ebp
mov dword [esp + 0x3ba0], ebp
mov dword [esp + 0x3ba4], ebp
mov dword [esp + 0x3ba8], ebp
mov dword [esp + 0x3974], ebp
mov dword [esp + 0x3c38], ebp
mov dword [esp + 0x3b90], ebp
mov dword [esp + 0x3c3c], 0x2fb8
mov dword [esp + 0x3bbc], ebp
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c40], ebp
mov dword [esp + 0x3c44], esi
mov dword [esp + 0x3c48], esi
mov dword [esp + 0x3c4c], esi
mov dword [esp + 0x3c50], esi
mov dword [esp + 0x3c54], esi
mov dword [esp + 0x3c58], esi
mov dword [esp + 0x3c5c], esi
mov ecx, dword [eax - 8]
cmp ecx, ebp
je 0x46f50e
mov edi, dword [sym.imp.MSVCRT.dll__snwprintf]
push eax
push 0x4ed128
lea edx, [esp + 0x2d44]
push 0x103
push edx
call edi
add esp, 0x10
jmp 0x46f514
mov edi, dword [sym.imp.MSVCRT.dll__snwprintf]
mov eax, dword [esp + 0x18]
mov dword [esp + 0xca8], 5
cmp eax, 1
jne 0x46f535
cmp dword [esp + 0x20], ebp
jne 0x46f535
mov dword [esp + 0xca8], ebp
mov eax, dword [ebx + 4]
lea ecx, [esp + 0xcac]
push eax
push 0x4ed128
push 0x823
push ecx
call edi
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x5c]
add esp, 0x10
cmp edx, dword [eax + 0x19d1c]
jne 0x46f57d
mov ecx, dword [ebx + 0x18]
lea edx, [esp + 0x1cf4]
push ecx
push 0x4ed128
push 0x823
push edx
call edi
add esp, 0x10
jmp 0x46f5d9
mov ecx, dword [0x717344]
cmp ecx, ebp
je 0x46f5d9
lea eax, [esp + 0x1cf4]
push ebp
push eax
call fcn.004a0e30
lea ecx, [esp + 0x1cf4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathIsURLW]
test eax, eax
je 0x46f5c3
push 6
lea edx, [esp + 0x1cf8]
push str.res:__
push edx
call dword [sym.imp.MSVCRT.dll_wcsncmp]
add esp, 0xc
test eax, eax
jne 0x46f5d9
mov ecx, 0x412
xor eax, eax
lea edi, [esp + 0x1cf4]
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.MSVCRT.dll__snwprintf]
mov ecx, dword [esp + 0x1c]
call fcn.0046e840
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 0x19d18], eax
je 0x46f61f
mov edx, dword [ebx]
lea eax, [esp + 0x2f44]
push edx
push 0x4ed128
push 0x103
push eax
call edi
lea ecx, [esp + 0x2f54]
push 0x3f
push ecx
call dword [sym.imp.MSVCRT.dll_wcschr]
add esp, 0x18
cmp eax, ebp
je 0x46f61f
mov word [eax], bp
lea edx, [esp + 0xca8]
mov ecx, 0x71b3ac
push edx
call fcn.0041a9c0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
inc eax
cmp eax, ecx
mov dword [esp + 0x24], eax
jl 0x46f345
mov eax, dword [esp + 0x3c]
push eax
call fcn.004d4cc1
mov eax, dword [esp + 0x2c]
mov edx, dword [0x4ed100]
add esp, 4
mov dword [esp + 0x3c], ebp
lea ecx, [eax - 0xc]
mov dword [esp + 0x40], ebp
cmp ecx, edx
mov dword [esp + 0x44], ebp
je 0x46f68e
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x46f68e
mov edx, dword [esp + 0x28]
add edx, 0xfffffff4
push edx
call fcn.004d4cc1
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x4ed100]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x46f6bd
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x46f6bd
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004d4cc1
add esp, 4
mov ecx, dword [esp + 0x4ca8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x4ca4
ret 4