Function at 0x468040
Capabilities:
Get common file path
Get disk information
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10bc
call fcn.004aa480
push ebx
push esi
lea eax, [ebp + 8]
push edi
push eax
mov dword [ebp - 0x28], ecx
call fcn.0043dcd9
pop ecx
push 5
lea ecx, [ebp - 0x18]
call fcn.004441bf
push 0x14
lea ecx, [ebp - 0x68]
call fcn.004441bf
lea ecx, [ebp - 0x54]
call fcn.004441a1
mov esi, dword [ebp + 8]
mov ax, word [esi]
xor ebx, ebx
cmp ax, 0x2d
mov dword [ebp - 4], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x34], ebx
mov cl, 0x2a
jne 0x46809d
mov cl, al
movsx edi, cl
movzx eax, ax
jmp 0x4681ea
push 3
lea eax, [ebp + 8]
inc esi
push eax
inc esi
push 0x4c6860
mov dword [ebp + 8], esi
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x4680d0
mov dword [ebp - 4], 1
jmp 0x4681e4
push 6
lea eax, [ebp + 8]
push eax
push str.setvol
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x4680f3
mov dword [ebp - 4], 2
jmp 0x4681e4
push 4
lea eax, [ebp + 8]
push eax
push str.idle
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x468116
mov dword [ebp - 0x3c], 1
jmp 0x4681e4
push 5
lea eax, [ebp + 8]
push eax
push str.idlec
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x468139
mov dword [ebp - 0x3c], 2
jmp 0x4681e4
push 5
lea eax, [ebp + 8]
push eax
push str.rsort
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x46815c
mov dword [ebp - 0x38], 1
jmp 0x4681e4
push 2
pop esi
push esi
lea eax, [ebp + 8]
push eax
push 0x4c6824
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x46817e
mov dword [ebp - 0x2c], 0x100
jmp 0x4681e4
push 3
lea eax, [ebp + 8]
push eax
push 0x4c681c
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x46819e
mov dword [ebp - 8], 1
jmp 0x4681e4
push 4
lea eax, [ebp + 8]
push eax
push str.devs
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x4681ba
mov dword [ebp - 8], esi
jmp 0x4681e4
push 0xffffffffffffffff
lea eax, [ebp + 8]
push eax
push str.link_
call fcn.004460ea
add esp, 0xc
test al, al
je 0x4681da
mov dword [ebp - 0x34], 1
jmp 0x4681e4
lea eax, [ebp + 8]
push eax
call fcn.00408ddd
pop ecx
mov esi, dword [ebp + 8]
movzx eax, word [esi]
cmp edi, eax
je 0x4680a8
push 0x3d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00446f11
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.00402ed1
mov eax, dword [ebp + 8]
cmp word [eax], 0x3d
mov esi, eax
jne 0x468233
lea esi, [eax + 2]
push ebx
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], esi
call fcn.00446f11
add esp, 0xc
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
jne 0x468245
mov ebx, 0x80070057
jmp 0x468c7e
cmp dword [ebp - 4], 2
jne 0x46827d
push 2
lea ecx, [ebp - 0x18]
call fcn.004441e6
mov eax, dword [ebp - 0x18]
push esi
mov word [eax + 2], 0x3a
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
test eax, eax
jne 0x468c7e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x468c7e
mov eax, dword [ebp - 0x68]
cmp word [eax], 0x3f
jne 0x468316
push 0x400008
lea ecx, [ebp - 8]
call fcn.004441bf
mov esi, dword [ebp - 8]
mov edi, esi
push 0x1ffffe
add esi, 0x400008
push esi
mov eax, edi
mov dword [esi], ebx
push ebx
mov dword [eax], ebx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
cmp eax, ebx
mov dword [ebp - 0x2c], eax
lea edx, [esi + eax*2]
jle 0x4682f0
cmp esi, edx
jae 0x4682f0
push 2
pop ecx
jmp 0x4682cf
mov word [edi], ax
add edi, ecx
xor eax, eax
mov ax, word [esi]
add esi, ecx
cmp ax, bx
jne 0x4682c8
cmp word [esi], bx
je 0x4682f0
mov word [edi], 0xd
add edi, ecx
mov word [edi], 0xa
add edi, ecx
cmp esi, edx
jb 0x4682cf
push dword [ebp - 8]
mov ecx, dword [ebp - 0x28]
mov word [edi], bx
push dword [ebp - 0x18]
call fcn.004438ac
cmp dword [ebp - 0x2c], ebx
jg 0x46830e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea ecx, [ebp - 8]
jmp 0x468c79
push eax
call fcn.00412ce4
cmp dword [ebp - 0x34], ebx
mov esi, eax
pop ecx
mov dword [ebp - 0x40], esi
je 0x46847b
cmp word [esi], bx
je 0x468371
mov ax, word [esi + 2]
cmp ax, bx
je 0x468345
cmp ax, 0x3a
jne 0x468371
cmp word [esi + 4], bx
jne 0x468371
mov word [ebp - 0x50], 0x5c
mov word [ebp - 0x4e], 0x3f
mov word [ebp - 0x4c], 0x3f
mov word [ebp - 0x4a], 0x5c
mov ax, word [esi]
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], 0x3a
mov word [ebp - 0x44], bx
lea esi, [ebp - 0x50]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
mov dword [ebp + 8], eax
call fcn.004441a1
lea ecx, [ebp - 4]
call fcn.004441a1
lea ecx, [ebp - 8]
call fcn.004441a1
push ebx
push 0x2c
pop edi
push edi
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00438fc8
push ebx
push edi
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00438fc8
push ebx
push edi
lea eax, [ebp - 8]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00438fc8
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], ebx
mov cx, word [ecx]
mov ax, word [eax]
neg cx
lea edx, [ebp - 0x14]
sbb ecx, ecx
and ecx, edx
push ecx
mov cx, ax
neg cx
lea edx, [ebp - 0x30]
sbb ecx, ecx
and ecx, edx
neg ax
push ecx
lea ecx, [ebp - 0x20]
sbb eax, eax
and eax, ecx
push eax
push esi
call fcn.004140c4
mov esi, eax
mov eax, dword [ebp - 0x10]
add esp, 0x40
cmp word [eax], bx
je 0x468417
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
push eax
call fcn.004438ac
mov eax, dword [ebp - 4]
cmp word [eax], bx
je 0x46842b
push dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
push eax
call fcn.004438ac
mov eax, dword [ebp - 8]
cmp word [eax], bx
je 0x46843f
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
push eax
call fcn.004438ac
cmp esi, ebx
je 0x46844b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea ecx, [ebp - 0x14]
call fcn.0043dd41
lea ecx, [ebp - 0x30]
call fcn.0043dd41
lea ecx, [ebp - 0x20]
call fcn.0043dd41
lea ecx, [ebp - 8]
call fcn.0043dd41
lea ecx, [ebp - 4]
call fcn.0043dd41
lea ecx, [ebp - 0x10]
jmp 0x468c79
mov eax, esi
call fcn.0044951e
mov edi, 0x517
push edi
lea ecx, [ebp - 0x24]
mov esi, eax
call fcn.004441bf
mov eax, dword [ebp - 0x24]
add eax, 0x61c
cmp dword [ebp - 8], ebx
mov dword [ebp - 0x34], eax
je 0x468570
mov eax, dword [ebp - 0x24]
push edi
push eax
push esi
mov word [eax], bx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
cmp dword [ebp - 8], 2
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], eax
jl 0x46854c
mov ecx, eax
xor esi, esi
mov dword [ebp + 8], ecx
cmp word [eax], bx
mov dword [ebp - 4], eax
je 0x46854c
mov dx, word [ecx]
inc ecx
inc ecx
test dx, dx
mov dword [ebp + 8], ecx
jne 0x4684d7
inc esi
cmp word [ecx], bx
jne 0x4684d7
cmp esi, 1
jle 0x46854c
sub ecx, eax
sar ecx, 1
lea edx, [ecx + esi]
cmp edx, edi
mov dword [ebp - 0x2c], ecx
jle 0x46850f
add edx, 2
push edx
lea ecx, [ebp - 0x24]
call fcn.004441e6
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
lea ecx, [eax + ecx*2 - 4]
mov dword [ebp + 8], ecx
lea ecx, [ecx + esi*2]
mov word [ecx], bx
jmp 0x468547
cmp ecx, dword [ebp + 8]
jbe 0x46853a
mov eax, dword [ebp + 8]
mov dx, word [eax]
mov word [ecx], dx
sub dword [ebp + 8], 2
dec ecx
dec ecx
cmp dx, bx
jne 0x468521
mov word [ecx], 0xd
mov word [ecx + 2], 0xa
dec ecx
dec ecx
cmp ecx, dword [ebp + 8]
ja 0x468526
push dword [ebp - 4]
mov ecx, dword [ebp - 0x28]
push dword [ebp - 0x18]
call fcn.004438ac
cmp dword [ebp - 0x38], ebx
jne 0x468c76
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x468c76
test byte [ebp - 4], 1
je 0x468b86
mov eax, dword [ebp - 0x24]
mov dword [eax], ebx
add eax, 0x412
mov dword [ebp - 0xc], eax
mov dword [eax], ebx
mov ax, word [esi]
cmp ax, bx
je 0x4685bd
mov cx, word [esi + 2]
cmp cx, bx
je 0x4685a6
cmp cx, 0x3a
jne 0x4685bd
cmp word [esi + 4], bx
jne 0x4685bd
lea esi, [ebp - 0x50]
mov word [ebp - 0x50], ax
mov word [ebp - 0x4e], 0x3a
mov word [ebp - 0x4c], 0x5c
mov word [ebp - 0x4a], bx
push 0xc
push str._HarddiskVolume
push esi
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 8], 1
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
mov edi, 0x208
je 0x468623
push 0x104
push dword [ebp - 0xc]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
push edi
push dword [ebp - 0x24]
push esi
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x468612
mov dword [ebp - 8], ebx
jmp 0x4686a9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
mov dword [ebp - 8], eax
je 0x4686a9
mov eax, dword [ebp - 0xc]
push ebx
push 0x4d81f0
push str.Kernel32.DLL
push str.GetVolumeInformationByHandleW
mov dword [eax], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
call fcn.0043f18a
add esp, 0x10
cmp dword [0x4d81f0], ebx
je 0x4686a9
push ebx
push ebx
push 3
push ebx
push 7
push 0x80000000
push dword [ebp - 0x40]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
call fcn.0040569f
push 0x104
push dword [ebp - 0xc]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
push edi
push dword [ebp - 0x24]
push dword [ebp - 0x14]
call dword [0x4d81f0]
test eax, eax
je 0x468698
mov dword [ebp - 8], ebx
jmp 0x4686a1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x14]
call fcn.00402c9f
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x3c]
mov dword [ebp + 8], eax
call fcn.004441a1
lea ecx, [ebp - 0x34]
call fcn.004441a1
lea ecx, [ebp - 0x40]
call fcn.004441a1
lea ecx, [ebp - 0x64]
call fcn.004441a1
lea ecx, [ebp - 0x60]
call fcn.004441a1
lea ecx, [ebp - 0x14]
call fcn.004441a1
push 0x2c
pop edi
push edi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00446f11
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x468788
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00446f11
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x468788
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00446f11
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x468788
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00446f11
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x468788
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00446f11
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x468788
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00446f11
add esp, 0xc
mov eax, dword [ebp - 0x14]
cmp word [eax], bx
je 0x468b00
push dword [ebp - 0xc]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
or dword [ebp - 0x10], 0xffffffff
push 0x4c3148
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0x200
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], str._02X_02X__02X_02X
mov word [ebp - 0x10bc], bx
mov dword [ebp - 0x1070], ebx
mov dword [ebp - 0x106c], ebx
call edi
test eax, eax
je 0x4688da
push dword [ebp - 0xc]
push str.FAT16
call edi
test eax, eax
je 0x4688da
push dword [ebp - 0xc]
push str.FAT32
call edi
test eax, eax
jne 0x468807
mov dword [ebp - 0x10], 0x43
jmp 0x4688e1
push dword [ebp - 0xc]
push str.ExFAT
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x468825
mov dword [ebp - 0x10], 0x64
jmp 0x4688e1
push dword [ebp - 0xc]
push 0x4c3124
call edi
test eax, eax
jne 0x46884d
mov dword [ebp - 0x10], 0x48
mov dword [ebp - 4], 2
mov dword [ebp - 0x20], str._02X_02X_02X_02X_02X_02X_02X_02X
jmp 0x4688e1
push 3
push dword [ebp - 0xc]
push str.EXT2
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x46888c
mov eax, dword [ebp - 0xc]
movzx eax, word [eax + 6]
push eax
call fcn.00443c3d
add esp, 4
test al, al
je 0x46888c
mov dword [ebp - 0x10], 0x468
mov dword [ebp - 4], 3
mov dword [ebp - 0x20], str._02x_02x_02x_02x__02x_02x__02x_02x__02x_02x__02x_02x_02x_02x_02x_02x
jmp 0x4688e1
push dword [ebp - 0xc]
push str.CDFS
call edi
test eax, eax
je 0x4688bc
push dword [ebp - 0xc]
push 0x4c66a0
call edi
test eax, eax
je 0x4688bc
push 3
push dword [ebp - 0xc]
push str.ISO9600
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x4688e1
mov dword [ebp - 0x38], 0x800
mov dword [ebp - 0x10], 0x833e
mov dword [ebp - 4], 4
mov dword [ebp - 0x20], str._02x_02x__02x__02x__02x__02x__02x__02x
jmp 0x4688e1
mov dword [ebp - 0x10], 0x27
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
dec eax
cmp eax, ebx
jle 0x46892c
push 0x5c
pop ecx
cmp word [esi + eax*2], cx
jne 0x4688fb
mov word [esi + eax*2], bx
dec eax
cmp eax, ebx
jle 0x46892c
cmp word [esi + 2], 0x3a
jne 0x46892c
mov ax, word [esi]
lea esi, [ebp - 0x50]
mov word [ebp - 0x4a], cx
mov word [ebp - 0x4e], cx
mov word [ebp - 0x50], cx
mov word [ebp - 0x4c], 0x2e
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], 0x3a
mov word [ebp - 0x44], bx
push ebx
push 0x80
push 3
push ebx
push 7
push 0x80000000
push esi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
call fcn.0040569f
mov esi, dword [ebp - 0x38]
cmp dword [ebp - 0x10], esi
jl 0x468968
mov eax, dword [ebp - 0x10]
cdq
idiv esi
push ebx
imul eax, esi
cdq
push edx
push eax
push dword [ebp - 0x30]
call fcn.0043f027
add esp, 0x10
push ebx
lea eax, [ebp - 0x2c]
push eax
push esi
lea eax, [ebp - 0x1070]
push eax
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_ReadFile]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 0x2c], ebx
je 0x468ae6
mov eax, dword [ebp - 0x10]
cdq
idiv esi
cmp dword [ebp - 4], 4
lea esi, [ebp + edx - 0x1070]
jne 0x4689c2
mov edi, esi
push 8
lea esi, [ebp - 0x1084]
mov eax, esi
push ebx
push eax
mov byte [edi + 0x10], bl
call fcn.004aa0a0
mov eax, esi
push eax
push edi
call fcn.004495b6
add esp, 0x14
mov eax, dword [ebp - 4]
cmp eax, 1
jg 0x4689f5
movzx eax, byte [esi]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 3]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
jmp 0x468ae6
cmp eax, 2
jne 0x468a39
movzx eax, byte [esi]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 3]
push eax
movzx eax, byte [esi + 4]
push eax
movzx eax, byte [esi + 5]
push eax
movzx eax, byte [esi + 6]
push eax
movzx eax, byte [esi + 7]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
jmp 0x468ae6
cmp eax, 3
jne 0x468aa2
movzx eax, byte [esi + 0xf]
push eax
movzx eax, byte [esi + 0xe]
push eax
movzx eax, byte [esi + 0xd]
push eax
movzx eax, byte [esi + 0xc]
push eax
movzx eax, byte [esi + 0xb]
push eax
movzx eax, byte [esi + 0xa]
push eax
movzx eax, byte [esi + 9]
push eax
movzx eax, byte [esi + 8]
push eax
movzx eax, byte [esi + 7]
push eax
movzx eax, byte [esi + 6]
push eax
movzx eax, byte [esi + 5]
push eax
movzx eax, byte [esi + 4]
push eax
movzx eax, byte [esi + 3]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x48
jmp 0x468ae6
cmp eax, 4
jne 0x468ae6
movzx eax, byte [esi + 8]
push eax
movzx eax, byte [esi + 7]
push eax
movzx eax, byte [esi + 6]
push eax
movzx eax, byte [esi + 5]
push eax
movzx eax, byte [esi + 4]
push eax
movzx eax, byte [esi + 3]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x2c
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x10bc]
push eax
push dword [ebp - 0x14]
call fcn.004438ac
lea ecx, [ebp - 0x30]
call fcn.00402c9f
push dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
push dword [ebp - 0x3c]
mov ecx, esi
call fcn.004438ac
push str._08lX
push dword [ebp - 0x34]
push dword [ebp - 0x70]
push esi
call fcn.00446712
push dword [ebp - 0x40]
push dword [ebp - 0x58]
push esi
call fcn.0044673c
push str.0x_lX
push dword [ebp - 0x60]
push dword [ebp - 0x5c]
push esi
call fcn.00446712
add esp, 0x2c
push dword [ebp - 0xc]
mov ecx, esi
push dword [ebp - 0x64]
call fcn.004438ac
lea ecx, [ebp - 0x14]
call fcn.0043dd41
lea ecx, [ebp - 0x60]
call fcn.0043dd41
lea ecx, [ebp - 0x64]
call fcn.0043dd41
lea ecx, [ebp - 0x40]
call fcn.0043dd41
lea ecx, [ebp - 0x34]
call fcn.0043dd41
lea ecx, [ebp - 0x3c]
call fcn.0043dd41
mov ebx, dword [ebp - 8]
jmp 0x468c76
mov dword [ebp + 8], esi
cmp word [esi], bx
mov byte [ebp - 0x19], 1
jne 0x468b96
mov cl, 0x7c
jmp 0x468bbd
push esi
push 0x4c6638
call fcn.0043f15a
test al, al
pop ecx
pop ecx
jne 0x468bbb
push esi
push 0x4c1290
call fcn.0043f15a
test al, al
pop ecx
pop ecx
je 0x468be2
mov byte [ebp - 0x19], bl
mov cl, 0x20
mov eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x38]
push eax
movsx eax, byte [ebp - 0x19]
push dword [ebp - 0x3c]
push eax
movsx ax, cl
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00452a85
add esp, 0x14
jmp 0x468c6a
cmp word [esi + 2], 0x3a
jne 0x468bf1
mov eax, esi
mov word [esi + 4], bx
jmp 0x468c6a
mov esi, dword [ebp - 0x34]
push esi
push 0x208
mov word [esi], bx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov ecx, dword [ebp + 8]
push 0x5c
pop edi
cmp word [ecx], di
jne 0x468c4d
cmp word [ecx + 2], di
jne 0x468c4d
cmp word [ecx + 4], 0x3f
jne 0x468c4d
cmp word [ecx + 6], di
jne 0x468c4d
mov eax, ecx
add ecx, 8
mov dword [ebp + 8], ecx
mov dx, word [ecx]
cmp dx, bx
je 0x468c6a
cmp dx, di
je 0x468c43
inc ecx
inc ecx
mov dword [ebp + 8], ecx
mov dx, word [ecx]
cmp dx, bx
jne 0x468c31
cmp word [ecx], bx
je 0x468c6a
mov word [ecx], bx
jmp 0x468c6a
push 5
lea ecx, [ebp - 0x54]
call fcn.004441e6
mov cx, word [esi]
mov eax, dword [ebp - 0x54]
mov word [eax], cx
mov word [eax + 2], 0x3a
mov word [eax + 4], bx
mov ecx, dword [ebp - 0x28]
push eax
push dword [ebp - 0x18]
call fcn.004438ac
lea ecx, [ebp - 0x24]
call fcn.0043dd41
lea ecx, [ebp - 0x54]
call fcn.0043dd41
lea ecx, [ebp - 0x68]
call fcn.0043dd41
lea ecx, [ebp - 0x18]
call fcn.0043dd41
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret 8