Function at 0x46f700
Capabilities:
Read file via mapping

Disassembly:
push ebp
lea ebp, [esp - 0x358]
sub esp, 0x358
push 0xffffffffffffffff
push 0x586d7d
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x634384]
xor eax, ebp
mov dword [ebp + 0x354], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov esi, dword [ebp + 0x364]
mov dword [ebp - 0x24], 0
cmp byte [edi + 0x78], 0
je 0x46fe44
lea ecx, [ebp + 0x33c]
call fcn.0041bb10
mov dword [ebp - 4], 0
test esi, esi
je 0x46f790
xor eax, eax
cmp ax, word [esi]
je 0x46f790
push esi
call fcn.0041bea0
add esp, 4
push eax
push esi
lea ecx, [ebp + 0x33c]
call fcn.0041bc10
mov ebx, dword [ebp + 0x360]
jmp 0x46f7b6
mov ebx, dword [ebp + 0x360]
test bl, bl
jne 0x46f7b6
mov esi, dword [edi + 0xc8]
push esi
call fcn.0041bea0
add esp, 4
push eax
push esi
lea ecx, [ebp + 0x33c]
call fcn.0041bc10
lea ecx, [ebp + 0x33c]
call fcn.0041bbd0
test eax, eax
je 0x46fe74
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x30c]
call fcn.0041bb10
mov esi, eax
mov dword [ebp - 0x24], 1
push 0
lea eax, [ebp + 0x30c]
push eax
lea ecx, [ebp + 0x33c]
call fcn.0041ba50
push eax
call fcn.0043afe0
add esp, 0xc
lea eax, [ebp + 0x33c]
cmp eax, esi
je 0x46f822
mov ecx, eax
call fcn.0041bb70
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
push esi
lea ecx, [ebp + 0x33c]
call fcn.0043af40
mov eax, 1
mov dword [ebp - 0x24], eax
and eax, 0xfffffffe
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x30c]
call fcn.0041ba60
lea ecx, [ebp + 0x33c]
call fcn.0046ce60
test al, al
jne 0x46fea4
lea ecx, [ebp + 0x33c]
call fcn.0046cdb0
test al, al
jne 0x46fed4
push dword [edi + 0x34]
lea ecx, [ebp - 0x40]
call fcn.00475060
mov byte [ebp - 4], 2
lea edx, [ebp - 0x40]
lea ecx, [ebp + 0x33c]
call fcn.0046d0c0
test eax, eax
jne 0x46ff04
push 1
lea edx, [ebp + 0x33c]
lea ecx, [ebp + 0x2d8]
call fcn.0043cf80
add esp, 4
mov byte [ebp - 4], 3
mov byte [ebp - 0x11], 0
mov eax, dword [edi + 0x178]
mov ecx, dword [eax]
add ecx, 0x48
cmp byte [ecx], 0
je 0x46f8d2
lea eax, [ebp - 0x11]
push eax
lea eax, [ebp + 0x2d8]
push eax
call fcn.00467600
test eax, eax
jne 0x46ff30
jmp 0x46f94a
push 1
call fcn.0045e0c0
mov ecx, eax
call fcn.00462520
test al, al
je 0x46f94a
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
lea ecx, [ebp + 0x324]
call fcn.00412850
mov byte [ebp - 4], 4
push str.Cant_check_restore_directory_for_drweb
lea ecx, [ebp + 0x30c]
call fcn.0041bac0
mov byte [ebp - 4], 5
push 0x16c
lea eax, [ebp + 0x324]
push eax
lea eax, [ebp + 0x30c]
push eax
push ecx
call fcn.0045e0c0
mov ecx, eax
call fcn.00462330
mov byte [ebp - 4], 4
lea ecx, [ebp + 0x30c]
call fcn.0041ba60
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x324]
call fcn.004100d0
push dword [edi + 0x34]
lea ecx, [ebp - 0x4c]
call fcn.00475060
mov byte [ebp - 4], 6
push dword [edi + 0x34]
lea ecx, [ebp - 0x18]
call fcn.004653f0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x4c]
push eax
mov ecx, edi
call fcn.004726b0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x46f983
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x20], vtable.Utils::ResourceHolders::resource_t_void___struct_Utils::ResourceHolders::gh_dtor_t__struct_Utils::ResourceHolders::puredrop_and_illhnd_t_void___struct_Utils::ResourceHolders::gh_dtor_t__.0
mov dword [ebp - 0x1c], 0xffffffff
mov byte [ebp - 4], 8
mov dword [ebp - 0x20], vtable.Utils::ResourceHolders::CDwHandleP.0
mov byte [ebp - 4], 9
cmp byte [ebp - 0x11], 0
je 0x46fd65
mov eax, dword [edi + 0x110]
mov ecx, dword [edi + 0x114]
test ecx, ecx
jne 0x470095
cmp eax, 0x40
jb 0x46fd65
test ecx, ecx
jne 0x470095
cmp eax, 0xffffffff
ja 0x470095
lea ecx, [ebp + 0x2f0]
call fcn.0041bb10
mov byte [ebp - 4], 0xe
push 0x20
push 0
lea eax, [ebp + 0x2f0]
push eax
mov edx, str.dwqr
lea ecx, [ebp + 0x2d8]
call fcn.004657a0
add esp, 0xc
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x20]
call fcn.00472970
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x470033
cmp esi, 0xffffffff
je 0x470033
lea eax, [ebp + 0x2f0]
push eax
lea ecx, [ebp - 0x40]
call fcn.004751d0
push 1
push esi
lea eax, [ebp + 0x2f0]
push eax
mov ecx, edi
call fcn.00470110
push 0
push dword [edi + 0x110]
push 0
push 2
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044ca90
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x470001
cmp eax, 0xffffffff
je 0x470001
push 0
push 0
push 0
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
mov dword [ebp - 0x34], vtable.Utils::ResourceHolders::resource_t_void___struct_Utils::ResourceHolders::fview_dtor_t__struct_Utils::ResourceHolders::puredrop_and_null_t_void___struct_Utils::ResourceHolders::fview_dtor_t__.0
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x34], vtable.Utils::ResourceHolders::file_view_t.0
mov byte [ebp - 4], 0x14
test esi, esi
je 0x46ff5c
mov edx, dword [edi + 0x110]
mov ecx, esi
call fcn.004285f0
test eax, eax
je 0x46fadf
mov edx, dword [edi + 0x110]
test edx, edx
je 0x46ffc0
call fcn.0041f590
movzx eax, al
test eax, eax
je 0x46ffc8
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x46fb00
cmp eax, 0xffffffff
je 0x46fb00
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp + 0x33c]
call fcn.0041ba50
push eax
push dword [ebp - 0x1c]
call fcn.00446030
mov ecx, eax
call fcn.004541c0
mov esi, eax
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1c], 0xffffffff
test esi, esi
js 0x46ff8e
push 0
lea ecx, [ebp - 0x40]
call fcn.00475330
test bl, bl
jne 0x46fbac
push 0
lea ecx, [ebp - 0x4c]
call fcn.00475330
lea ecx, [ebp + 0x33c]
call fcn.0041ba50
mov ecx, dword [edi + 0x178]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x40]
test ecx, ecx
je 0x46fb7b
mov edx, dword [ecx]
push eax
lea eax, [edi + 0x80]
push eax
call dword [edx + 4]
mov byte [ebp - 4], 0x15
push dword [edi + 0x34]
lea ecx, [ebp - 0x18]
call fcn.004653f0
mov byte [ebp - 4], 0x16
mov ecx, edi
call fcn.004723f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x18]
call fcn.00465450
mov byte [edi + 0x78], 0
mov dword [ebp - 4], 0x14
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x34], vtable.Utils::ResourceHolders::resource_t_void___struct_Utils::ResourceHolders::fview_dtor_t__struct_Utils::ResourceHolders::puredrop_and_null_t_void___struct_Utils::ResourceHolders::fview_dtor_t__.0
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2c], vtable.Utils::ResourceHolders::resource_t_void___struct_Utils::ResourceHolders::gh_dtor_t__struct_Utils::ResourceHolders::puredrop_and_illhnd_t_void___struct_Utils::ResourceHolders::gh_dtor_t__.0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x46fbdc
cmp eax, 0xffffffff
je 0x46fbdc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 4], 9
lea ecx, [ebp + 0x2f0]
call fcn.0041ba60
mov byte [ebp - 4], 6
mov dword [ebp - 0x20], vtable.Utils::ResourceHolders::resource_t_void___struct_Utils::ResourceHolders::gh_dtor_t__struct_Utils::ResourceHolders::puredrop_and_illhnd_t_void___struct_Utils::ResourceHolders::gh_dtor_t__.0
mov dword [ebp - 0x1c], 0xffffffff
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4c]
call fcn.004750d0
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x2d8]
call fcn.0041ba60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.004750d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x33c]
call fcn.0041ba60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x354]
xor ecx, ebp
call fcn.005395e6
lea esp, [ebp + 0x358]
pop ebp
ret 8
push ecx
lea ecx, [ebp + 0x324]
call fcn.00412850
mov byte [ebp - 4], 0x18
lea eax, [ebp + 0x324]
push eax
push 1
call fcn.0045e0c0
mov ecx, eax
call fcn.00462480
mov byte [ebp - 4], 0x17
lea ecx, [ebp + 0x324]
call fcn.004100d0
mov eax, 0x46fd10
ret
push 0
push 0x20
push 2
push 0
push 7
push 0x120116
lea ecx, [ebp + 0x33c]
call fcn.0041ba50
push eax
call fcn.00445310
add esp, 0x1c
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x20]
call fcn.00472970
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x46fe18
cmp esi, 0xffffffff
je 0x46fe18
lea eax, [ebp + 0x33c]
push eax
lea ecx, [ebp - 0x40]
call fcn.004751d0
push ebx
push esi
lea eax, [ebp + 0x33c]
push eax
mov ecx, edi
call fcn.00470110
push 0
lea ecx, [ebp - 0x40]
call fcn.00475330
test bl, bl
jne 0x46fe01
push 0
lea ecx, [ebp - 0x4c]
call fcn.00475330
lea ecx, [ebp + 0x33c]
call fcn.0041ba50
mov ecx, dword [edi + 0x178]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x40]
test ecx, ecx
je 0x46fe01
mov edx, dword [ecx]
push eax
lea eax, [edi + 0x80]
push eax
call dword [edx + 4]
mov byte [ebp - 4], 6
mov dword [ebp - 0x20], vtable.Utils::ResourceHolders::resource_t_void___struct_Utils::ResourceHolders::gh_dtor_t__struct_Utils::ResourceHolders::puredrop_and_illhnd_t_void___struct_Utils::ResourceHolders::gh_dtor_t__.0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x46fbfd
push 0x180
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Create_the_file_by_a_restore_path_failed.
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp]
push eax
call fcn.005510b1
push 0x136
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Attempt_to_restore_a_not_quarantined_object.
push 0x139f
lea ecx, [ebp + 0x2a0]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x2a0]
push eax
call fcn.005510b1
push 0x145
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Path_to_restore_not_specified.
push 0xe14a0001
lea ecx, [ebp + 0x268]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x268]
push eax
call fcn.005510b1
push 0x14d
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Cannot_create_a_file_when_that_path_is_already_existing_directory.
push 0xe14a0001
lea ecx, [ebp + 0x230]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x230]
push eax
call fcn.005510b1
push 0x153
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Cannot_create_a_file_when_that_file_already_exists.
push 0xe14a0004
lea ecx, [ebp + 0x1f8]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x1f8]
push eax
call fcn.005510b1
push 0x15b
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Restore_directiories_failed.
push eax
lea ecx, [ebp + 0x1c0]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x1c0]
push eax
call fcn.005510b1
push 0x168
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Check_for_DrWeb_directiory_failed.
push eax
lea ecx, [ebp + 0x188]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x188]
push eax
call fcn.005510b1
push 0x1c0
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.View_temporary_file_failed
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp + 0x150]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x150]
push eax
call fcn.005510b1
push 0x1ce
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Rename_temporary_file_failed
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp + 0xe0]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0xe0]
push eax
call fcn.005510b1
push 0x57
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x1e2
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Attempt_to_restore_an_unknown_file_in_drweb_directory.
push 0xe14a0013
lea ecx, [ebp + 0x118]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0x118]
push eax
call fcn.005510b1
call eax
mov ecx, eax
jmp 0x46fcd6
push 0x1b7
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
push str.Map_temporary_file_failed
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp + 0xa8]
call fcn.0045e150
push 0x6308f4
lea eax, [ebp + 0xa8]
push eax
call fcn.005510b1
push str.Cant_create_tmp_file_by_path___s__
lea ecx, [ebp + 0x308]
call fcn.004343a0
mov byte [ebp - 4], 0xf
lea ecx, [ebp + 0x324]
push ecx
lea ecx, [ebp + 0x2f0]
push ecx
mov ecx, eax
call fcn.004446d0
mov ecx, eax
call fcn.00434730
mov byte [ebp - 4], 0x10
push 0x1a6
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
lea eax, [ebp + 0x324]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp + 0x70]
call fcn.0045e1e0
push 0x6308f4
lea eax, [ebp + 0x70]
push eax
call fcn.005510b1
push str.Cant_copy_file___s___in_drweb_folder___s___because_it_too_large.
lea ecx, [ebp + 0x308]
call fcn.004343a0
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x324]
push ecx
lea ecx, [ebp + 0x2d8]
push ecx
push dword [edi + 0xc8]
mov ecx, eax
call fcn.0045dd90
mov ecx, eax
call fcn.004446d0
mov ecx, eax
call fcn.00434730
mov byte [ebp - 4], 0xc
push 0x196
push str.d:projectsdrweb_se_testingdrweb_se_solutiondrweb_quarantineqrobject.cpp
lea eax, [ebp + 0x324]
push eax
push 0xdf
lea ecx, [ebp + 0x38]
call fcn.0045e1e0
push 0x6308f4
lea eax, [ebp + 0x38]
push eax
call fcn.005510b1
int3