Function at 0x4b0230
Capabilities:
Create process on windows
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52083b
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x887c
call fcn.00502fa0
mov eax, dword [0x5513d4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x1018
push 0
lea eax, [ebp - 0x150c]
push eax
call fcn.00505530
add esp, 0xc
cmp byte [0x558b34], 0
je 0x4b02a0
push 0x800
lea eax, [ebp - 0x150c]
push eax
mov ecx, 0x57b208
call fcn.00406070
jmp 0x4b03c9
lea ecx, [ebp - 0xd4]
call fcn.0049cee0
mov dword [ebp - 4], 0
push 1
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x57de98
call fcn.00447140
mov eax, dword [ebp - 0xbc]
test eax, eax
jne 0x4b0330
push 0x30
push 0x65
call fcn.00496b20
push eax
push 0x14c
call fcn.00496b20
push eax
push dword [0x558aa8]
call fcn.004d6c50
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xd4]
test ecx, ecx
je 0x4b12d4
cmp byte [ebp - 0xc4], 0
je 0x4b0322
mov eax, dword [ebp - 0xcc]
add eax, eax
push eax
push ecx
call fcn.0049a3e0
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.005097b2
add esp, 4
jmp 0x4b12d4
cmp eax, 1
jne 0x4b0352
push 0
push 0x800
lea eax, [ebp - 0x150c]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0049d0d0
test al, al
jne 0x4b0391
push 0x800
lea eax, [ebp - 0x3604]
push eax
mov ecx, 0x57de98
call fcn.00446fa0
lea eax, [ebp - 0x3604]
push eax
call fcn.00485280
cmp word [eax], 0
jne 0x4b037f
mov eax, str.report.
push 0x800
push eax
lea eax, [ebp - 0x150c]
push eax
call fcn.0049ce90
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xd4]
test ecx, ecx
je 0x4b03c9
cmp byte [ebp - 0xc4], 0
je 0x4b03c0
mov eax, dword [ebp - 0xcc]
add eax, eax
push eax
push ecx
call fcn.0049a3e0
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.005097b2
add esp, 4
cmp byte [0x558b34], 0
mov eax, str.InterfaceReportArc
jne 0x4b03dc
mov eax, str.InterfaceReportFile
push 0
push str.OutFormat
push eax
call fcn.004ae540
test eax, eax
sete bl
mov dword [ebp - 0x508], 0
test bl, bl
mov eax, 0x53394c
jne 0x4b0406
mov eax, 0x533954
push 0x800
push eax
lea eax, [ebp - 0x150c]
push eax
call fcn.00485320
push 0x800
lea eax, [ebp - 0x150c]
push eax
push eax
mov ecx, 0x57de98
call fcn.00447a80
xor esi, esi
lea eax, [ebp - 0x150c]
push eax
call fcn.00474160
test al, al
je 0x4b04aa
test esi, esi
je 0x4b0458
push 0x800
push 0
lea eax, [ebp - 0x150c]
push eax
call fcn.00485320
push esi
push 0x53395c
push 0xa
lea eax, [ebp - 0x28]
push eax
call fcn.004027c0
add esp, 0x10
push 0x800
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x150c]
push eax
call fcn.00485320
test bl, bl
mov eax, 0x53394c
jne 0x4b048f
mov eax, 0x533954
push 0x800
push eax
lea eax, [ebp - 0x150c]
push eax
call fcn.00485320
inc esi
cmp esi, 0x3e8
jl 0x4b0431
lea eax, [ebp - 0x150c]
push eax
push 0x4b1810
push dword [0x558aa8]
push str.REPORT
push dword [0x58c1f8]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4b12d4
push 0x800
lea eax, [ebp - 0x150c]
push eax
push eax
mov ecx, 0x57de98
call fcn.00447a80
cmp dword [ebp - 0x508], 0
sete bh
mov byte [ebp - 0x8816], bh
push 0x533974
lea eax, [ebp - 0x150c]
push eax
call fcn.00475430
mov edi, eax
mov dword [ebp - 0x881c], edi
test edi, edi
jne 0x4b052f
lea eax, [ebp - 0x150c]
push eax
mov ecx, 0x58c304
call fcn.0046da70
jmp 0x4b12d4
push 0
push 0
push 0x52452c
push 0xc
call fcn.004d8980
mov byte [ebp - 0x8817], al
push 0x556
call fcn.00496b20
push eax
call fcn.004d71d0
add esp, 4
cmp dword [ebp - 0x508], 1
jne 0x4b057a
push edi
push 0xff
call fcn.00509d89
push edi
push 0xfe
call fcn.00509d89
add esp, 0x10
mov bl, 1
mov byte [ebp - 0x8815], bl
xor esi, esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
cmp byte [0x558b34], 0
jne 0x4b05b2
cmp byte [ebp - 0x4fe], 0
mov byte [ebp - 0x18], 0
jne 0x4b05b6
mov byte [ebp - 0x18], 1
lea ecx, [ebp - 0x885c]
call fcn.00443700
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x888c]
call fcn.00443700
mov byte [ebp - 4], 4
cmp byte [0x558b34], 0
je 0x4b061b
push 0x800
lea eax, [ebp - 0x3604]
push eax
mov ecx, 0x57b208
call fcn.00406070
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x888c]
push eax
lea eax, [ebp - 0x885c]
push eax
lea eax, [ebp - 0x3604]
push eax
call fcn.004b00c0
mov bl, al
jmp 0x4b0970
lea ecx, [ebp - 0xd4]
call fcn.0049cee0
mov byte [ebp - 4], 5
push 1
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x57de98
call fcn.00447140
push 1
push 0
push 3
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x771c]
call fcn.00498fe0
mov byte [ebp - 4], 6
mov dword [ebp - 0x1544], 0
mov dword [ebp - 0x1540], 0
mov dword [ebp - 0x153c], 0
mov dword [ebp - 0x1538], 0
mov dword [ebp - 0x1534], 0
mov dword [ebp - 0x1530], 0
jmp 0x4b06a0
lea eax, [ebp - 0x2554]
push eax
lea ecx, [ebp - 0x771c]
call fcn.00499cb0
test eax, eax
jne 0x4b0926
cmp byte [0x558b36], al
jne 0x4b0926
call fcn.0044de50
cmp byte [ebp - 0x4fe], 0
je 0x4b0888
push 0x10f8
push 0
lea eax, [ebp - 0x8814]
push eax
call fcn.00505530
add esp, 0xc
push 0x800
lea eax, [ebp - 0x2554]
push eax
lea eax, [ebp - 0x8814]
push eax
call fcn.0049ce90
mov ecx, dword [ebp - 0x1554]
mov dword [ebp - 0x778c], ecx
mov eax, dword [ebp - 0x1550]
mov dword [ebp - 0x7788], eax
mov dword [ebp - 0x7794], ecx
mov dword [ebp - 0x7790], eax
cmp byte [ebp - 0x4fa], 0
je 0x4b078c
test dword [ebp - 0x154c], 0x800
je 0x4b078c
call fcn.00477ef0
test eax, eax
je 0x4b078c
lea eax, [ebp - 0x8820]
push eax
lea eax, [ebp - 0x2554]
push eax
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4b076d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x4b0786
xor ecx, ecx
mov eax, dword [ebp - 0x8820]
add ecx, ebx
adc eax, 0
mov dword [ebp - 0x778c], ecx
mov dword [ebp - 0x7788], eax
mov bl, byte [ebp - 0x8815]
mov eax, dword [ebp - 0x154c]
mov dword [ebp - 0x776c], eax
lea eax, [ebp - 0x151c]
push eax
lea ecx, [ebp - 0x7784]
call fcn.0049ea10
mov dword [ebp - 0x7728], esi
inc esi
mov dword [ebp - 0x1c], esi
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x7794]
add dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x7790]
adc dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x778c]
add dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x7788]
adc dword [ebp - 0x20], eax
cmp byte [ebp - 0x4f8], 0
je 0x4b0869
push dword [ebp - 0x776c]
call fcn.00474360
test al, al
jne 0x4b0869
lea ecx, [ebp - 0x3628]
call fcn.00472610
mov byte [ebp - 4], 7
push 0
lea eax, [ebp - 0x2554]
push eax
lea ecx, [ebp - 0x3628]
call fcn.00472d30
test al, al
je 0x4b085a
mov byte [ebp - 4], 8
push 0
push SysReAllocString
push SysReAllocString
push dword [0x56ca98]
push 0
lea eax, [ebp - 0x775c]
push eax
lea eax, [ebp - 0x3628]
push eax
call fcn.004737a0
mov dword [ebp - 4], 7
mov dword [ebp - 0x7760], 2
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3628]
call fcn.00472650
lea eax, [ebp - 0x8814]
push eax
lea ecx, [ebp - 0x885c]
call fcn.00443d40
cmp byte [ebp - 0x8830], 0
jne 0x4b0924
cmp byte [0x558b36], 0
jne 0x4b0924
cmp byte [ebp - 0x4ff], 0
je 0x4b06a0
cmp byte [ebp - 0x1548], 0
jne 0x4b06a0
push 2
push 0
lea eax, [ebp - 0x2554]
push eax
mov ecx, 0x57b208
call fcn.00406f60
cmp eax, 1
jne 0x4b06a0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x888c]
push eax
lea eax, [ebp - 0x885c]
push eax
lea eax, [ebp - 0x2554]
push eax
call fcn.004b00c0
test al, al
je 0x4b0924
mov esi, dword [ebp - 0x1c]
jmp 0x4b06a0
xor bl, bl
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x771c]
call fcn.004990d0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xd4]
test ecx, ecx
je 0x4b096a
cmp byte [ebp - 0xc4], 0
je 0x4b0961
mov eax, dword [ebp - 0xcc]
add eax, eax
push eax
push ecx
call fcn.0049a3e0
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.005097b2
add esp, 4
mov bh, byte [ebp - 0x8816]
test bl, bl
je 0x4b12a5
cmp dword [ebp - 0x504], 8
je 0x4b09af
lea eax, [ebp - 0x150c]
mov dword [0x59982c], eax
push 0x4b1f40
push 0x70
push dword [ebp - 0x8858]
push 0
lea ecx, [ebp - 0x885c]
call fcn.00443c30
push eax
call fcn.0050dab0
add esp, 0x10
test bh, bh
je 0x4b0a48
mov dword [ebp - 0x8824], 0
mov dword [ebp - 0x8820], 0
lea ecx, [ebp - 0x8824]
call fcn.0049e510
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x8824]
call fcn.0049e170
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push 0x533320
push 0x32
lea eax, [ebp - 0xd8]
push eax
call fcn.004027c0
add esp, 0x20
lea eax, [ebp - 0xd8]
push eax
push 0x55b
call fcn.00496b20
push eax
push 0x864
lea eax, [ebp - 0x25d4]
push eax
call fcn.004027c0
lea eax, [ebp - 0x25d4]
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetUTF_8____r_n_title__s__title__r_n__head__r_n_body__r_n_pre__r_n
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0x20
xor esi, esi
mov dword [ebp - 0x8820], esi
xor eax, eax
mov dword [ebp - 0x881c], eax
cmp dword [ebp - 0x8858], eax
jbe 0x4b0dea
push eax
lea eax, [ebp - 0x8814]
push eax
lea ecx, [ebp - 0x885c]
call fcn.00443a00
cmp byte [ebp - 0x4fd], 0
je 0x4b0b45
mov eax, dword [ebp - 0x7724]
cmp eax, esi
je 0x4b0b45
mov dword [ebp - 0x8820], eax
test bh, bh
je 0x4b0ab0
push 0x533a84
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
push 0x533a8c
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
mov eax, dword [ebp - 0x7724]
test eax, eax
je 0x4b0aff
dec eax
push eax
lea eax, [ebp - 0x2604]
push eax
lea ecx, [ebp - 0x888c]
call fcn.00443a00
push eax
push 0x28a
call fcn.00496b20
push eax
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0x10
jmp 0x4b0b19
push 0x558
call fcn.00496b20
push eax
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
test bh, bh
je 0x4b0b31
push 0x533a94
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
push 0x528238
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
xor eax, eax
mov word [ebp - 0x5e28], ax
push dword [ebp - 0x776c]
call fcn.00474360
mov bl, al
cmp byte [ebp - 0x4f9], 0
je 0x4b0bce
mov ecx, dword [ebp - 0x7784]
mov dword [ebp - 0x882c], ecx
mov ecx, dword [ebp - 0x7780]
mov dword [ebp - 0x8828], ecx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x882c]
call fcn.0049e170
lea ecx, [ebp - 0x5e28]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b0b94
sub ecx, edx
sar ecx, 1
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push str._u__02u__02u__02u:_02u
push 0x1400
lea eax, [ebp - 0x5e28]
lea eax, [eax + ecx*2]
push eax
call fcn.004027c0
add esp, 0x20
cmp byte [ebp - 0x4fb], 0
je 0x4b0c62
mov ecx, dword [ebp - 0x7794]
mov eax, dword [ebp - 0x7790]
cmp ecx, 0x7fffffff
jne 0x4b0c05
cmp eax, ecx
jne 0x4b0c05
push 0x1e
push 0x527fd0
lea eax, [ebp - 0x70]
push eax
call fcn.0049ce90
jmp 0x4b0c15
push 0xa
lea edx, [ebp - 0x70]
push edx
push eax
push ecx
call fcn.0050e70e
add esp, 0x10
lea esi, [ebp - 0x5e28]
lea ecx, [esi + 2]
mov edi, edi
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4b0c20
sub esi, ecx
sar esi, 1
test bl, bl
je 0x4b0c3f
push 0x573
call fcn.00496b20
jmp 0x4b0c42
lea eax, [ebp - 0x70]
push eax
push str._12s
mov eax, 0x1400
sub eax, esi
push eax
lea eax, [ebp - 0x5e28]
lea eax, [eax + esi*2]
push eax
call fcn.004027c0
add esp, 0x10
cmp byte [ebp - 0x4fa], 0
je 0x4b0cf4
mov ecx, dword [ebp - 0x778c]
mov eax, dword [ebp - 0x7788]
cmp ecx, 0x7fffffff
jne 0x4b0c99
cmp eax, ecx
jne 0x4b0c99
push 0x1e
push 0x527fd0
lea eax, [ebp - 0x70]
push eax
call fcn.0049ce90
jmp 0x4b0ca9
push 0xa
lea edx, [ebp - 0x70]
push edx
push eax
push ecx
call fcn.0050e70e
add esp, 0x10
lea esi, [ebp - 0x5e28]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4b0cb2
sub esi, ecx
sar esi, 1
test bl, bl
je 0x4b0cd1
push 0x573
call fcn.00496b20
jmp 0x4b0cd4
lea eax, [ebp - 0x70]
push eax
push str._12s
mov eax, 0x1400
sub eax, esi
push eax
lea eax, [ebp - 0x5e28]
lea eax, [eax + esi*2]
push eax
call fcn.004027c0
add esp, 0x10
cmp byte [ebp - 0x4f8], 0
je 0x4b0d98
mov eax, dword [ebp - 0x7760]
cmp eax, 3
jne 0x4b0d27
push 0x41
lea eax, [ebp - 0xf4]
push eax
push 0
push 0x20
lea eax, [ebp - 0x775c]
push eax
call fcn.0049c520
jmp 0x4b0d6a
cmp eax, 1
je 0x4b0d4d
cmp eax, 2
je 0x4b0d46
push 0x41
push 0x533ae4
lea eax, [ebp - 0xf4]
push eax
call fcn.0049ce90
jmp 0x4b0d6a
mov eax, str._08X
jmp 0x4b0d52
mov eax, 0x527fd4
push dword [ebp - 0x775c]
push eax
push 0x41
lea eax, [ebp - 0xf4]
push eax
call fcn.004027c0
add esp, 0x10
push 0x1400
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x5e28]
push eax
call fcn.0049ce50
push 0x1400
push 0x533af8
lea eax, [ebp - 0x5e28]
push eax
call fcn.0049ce50
push 0x1400
lea eax, [ebp - 0x8814]
push eax
lea eax, [ebp - 0x5e28]
push eax
call fcn.0049ce50
lea eax, [ebp - 0x5e28]
push eax
push str._s_r_n
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0x10
mov eax, dword [ebp - 0x881c]
inc eax
mov dword [ebp - 0x881c], eax
cmp eax, dword [ebp - 0x8858]
mov esi, dword [ebp - 0x8820]
jb 0x4b0a64
cmp byte [ebp - 0x4fc], 0
je 0x4b1120
push 0xa
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.0050e70e
push 0xa
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x20]
push dword [ebp - 0x24]
call fcn.0050e70e
add esp, 0x20
test bh, bh
je 0x4b0e37
push 0x533a84
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
push 0x533b00
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
xor eax, eax
mov word [ebp - 0x2f4], ax
mov word [ebp - 0x4f4], ax
cmp byte [ebp - 0x4f9], al
je 0x4b0ee0
lea esi, [ebp - 0x4f4]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4b0e70
sub esi, ecx
sar esi, 1
push 0x1ac
call fcn.00496b20
push eax
push str.___14s
push 0x100
lea eax, [ebp - 0x4f4]
lea eax, [eax + esi*2]
push eax
call fcn.004027c0
add esp, 0x10
lea ecx, [ebp - 0x2f4]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b0eb0
sub ecx, edx
sar ecx, 1
push 0x52452c
push str.___14s
push 0x100
lea eax, [ebp - 0x2f4]
lea eax, [eax + ecx*2]
push eax
call fcn.004027c0
add esp, 0x10
cmp byte [ebp - 0x4fb], 0
je 0x4b0f5f
lea esi, [ebp - 0x4f4]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4b0ef2
sub esi, ecx
sar esi, 1
push 0x6f
call fcn.00496b20
push eax
push str._12s
push 0x100
lea eax, [ebp - 0x4f4]
lea eax, [eax + esi*2]
push eax
call fcn.004027c0
add esp, 0x10
lea ecx, [ebp - 0x2f4]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b0f30
sub ecx, edx
sar ecx, 1
lea eax, [ebp - 0x70]
push eax
push str._12s
push 0x100
lea eax, [ebp - 0x2f4]
lea eax, [eax + ecx*2]
push eax
call fcn.004027c0
add esp, 0x10
cmp byte [ebp - 0x4fa], 0
je 0x4b0fe3
lea esi, [ebp - 0x4f4]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4b0f75
sub esi, ecx
sar esi, 1
push 0x71
call fcn.00496b20
push eax
push str._12s
push 0x100
lea eax, [ebp - 0x4f4]
lea eax, [eax + esi*2]
push eax
call fcn.004027c0
add esp, 0x10
lea ecx, [ebp - 0x2f4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b0fb1
sub ecx, edx
sar ecx, 1
lea eax, [ebp - 0xb0]
push eax
push str._12s
push 0x100
lea eax, [ebp - 0x2f4]
lea eax, [eax + ecx*2]
push eax
call fcn.004027c0
add esp, 0x10
cmp byte [ebp - 0x4f8], 0
je 0x4b1018
push 0x100
push 0x533b1c
lea eax, [ebp - 0x4f4]
push eax
call fcn.0049ce50
push 0x100
push 0x533b1c
lea eax, [ebp - 0x2f4]
push eax
call fcn.0049ce50
cmp word [ebp - 0x4f4], 0
jne 0x4b104e
push 0x100
push 0x533b34
lea eax, [ebp - 0x4f4]
push eax
call fcn.0049ce90
push 0x100
push 0x533b34
lea eax, [ebp - 0x2f4]
push eax
call fcn.0049ce90
push 0x100
push 0x559
call fcn.00496b20
push eax
lea eax, [ebp - 0x4f4]
push eax
call fcn.0049ce50
lea ecx, [ebp - 0x2f4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b1073
sub ecx, edx
sar ecx, 1
push dword [ebp - 0x34]
push 0x52694c
mov eax, 0x100
sub eax, ecx
push eax
lea eax, [ebp - 0x2f4]
lea eax, [eax + ecx*2]
push eax
call fcn.004027c0
add esp, 0x10
cmp word [ebp - 0x4f4], 0x20
jne 0x4b10c6
cmp word [ebp - 0x4f2], 0x20
jne 0x4b10c6
mov eax, 0x23
mov word [ebp - 0x4f4], ax
jmp 0x4b10cb
mov eax, 0x23
cmp word [ebp - 0x2f4], 0x20
jne 0x4b10e6
cmp word [ebp - 0x2f2], 0x20
jne 0x4b10e6
mov word [ebp - 0x2f4], ax
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x4f4]
push eax
push str._s_r_n_s_r_n
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0x14
test bh, bh
je 0x4b1138
push 0x533a94
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
test bh, bh
je 0x4b1138
push str.__pre__r_n__body__r_n__html__r_n
push dword [ebp - 0x508]
push edi
call fcn.004b1e10
add esp, 0xc
cmp byte [ebp - 0x50b], 0
je 0x4b1214
push edi
call fcn.0050e8df
push edi
call fcn.0050df2d
push eax
call fcn.0050c8a1
add esp, 0xc
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4b1214
mov byte [ebp - 4], 0xb
lea ecx, [ebx + 2]
push ecx
lea ecx, [ebp - 0x48]
call fcn.00404630
mov byte [ebp - 4], 0xc
push 0
push 0
push edi
call fcn.0050d9a9
add esp, 0xc
push edi
push ebx
push 1
mov esi, dword [ebp - 0x48]
push esi
call fcn.0050d63f
add esp, 0x10
mov byte [esi + ebx], 0
mov byte [esi + ebx + 1], 0
mov eax, dword [ebp - 0x508]
sub eax, 0
je 0x4b11da
sub eax, 1
je 0x4b11d2
sub eax, 1
jne 0x4b1208
push dword [ebp - 0x44]
lea ecx, [ebp - 0x28]
call fcn.0044d940
mov byte [ebp - 4], 0xd
push dword [ebp - 0x24]
mov ebx, dword [ebp - 0x28]
push ebx
push esi
call fcn.0049ff80
jmp 0x4b11f6
push esi
call fcn.0044db80
jmp 0x4b1208
push dword [ebp - 0x44]
lea ecx, [ebp - 0x28]
call fcn.0044d940
mov byte [ebp - 4], 0xe
push dword [ebp - 0x24]
mov ebx, dword [ebp - 0x28]
push ebx
push esi
call fcn.004a00a0
push ebx
call fcn.0044db80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.00404940
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x48]
call fcn.004048e0
mov dword [ebp - 4], 4
push edi
call fcn.00509ce0
add esp, 4
cmp byte [ebp - 0x50c], 0
je 0x4b127b
push 8
push 0
push 0
lea eax, [ebp - 0x150c]
push eax
push str.print
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
seta al
test al, al
jne 0x4b127b
lea eax, [ebp - 0x150c]
push eax
call fcn.004b14d0
test al, al
jne 0x4b127b
lea eax, [ebp - 0x150c]
push eax
push 0x557
call fcn.00496b20
push eax
call fcn.004db310
add esp, 8
cmp byte [0x558b34], 0
jne 0x4b12a5
cmp word [ebp - 0x150c], 0
je 0x4b12a5
lea eax, [ebp - 0x150c]
push eax
call fcn.00485280
push eax
mov ecx, 0x57de98
call fcn.0044ab10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x888c]
call fcn.00443910
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x885c]
call fcn.00443910
cmp byte [ebp - 0x8817], 0
je 0x4b12d4
call fcn.004d90f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00502f8e
mov esp, ebp
pop ebp
ret