Function at 0x41d1c3
Capabilities:
Get file size
Read .ini file

Disassembly:
push ebp
lea ebp, [esp - 0x1fc]
sub esp, 0x27c
mov eax, dword [0x48e610]
xor eax, ebp
mov dword [ebp + 0x1f8], eax
mov eax, dword [ebp + 0x208]
push ebx
mov ebx, dword [ebp + 0x204]
push esi
mov esi, dword [ebp + 0x214]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0x20c]
push edi
mov edi, dword [ebp + 0x210]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp + 0x218]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x220]
push 0x47e7fe
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x64], eax
call fcn.0043f8e0
push str.constant
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d253
mov ecx, esi
call fcn.00401005
mov ecx, dword [ebp - 0x50]
test al, al
jne 0x41d246
push esi
jmp 0x41d249
push dword [ebp - 0x64]
call fcn.0043f840
jmp 0x41dedf
mov ecx, dword [ebp - 0x6c]
push str.browser
call fcn.0043f620
test eax, eax
jne 0x41d36b
push str.name
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d304
mov esi, dword [ebp - 0x7c]
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x64]
mov ecx, esi
call fcn.0041bb2b
test eax, eax
jns 0x41d2c2
lea eax, [esi + 0x8bc]
cmp byte [eax + 7], 0xff
jne 0x41d2a0
mov eax, dword [eax]
push dword [ebx]
push eax
push ecx
push ecx
mov ecx, esp
push str.bad_browser_param
call fcn.0043f7b0
mov ecx, esi
call fcn.0041ced3
mov eax, 0x8000aaa0
jmp 0x41dee1
cmp dword [ebp - 0x74], 0
mov ecx, dword [ebp - 0x50]
je 0x41d2f5
push dword [ebp - 0x64]
call fcn.0043f840
push dword [ebp - 0x64]
lea eax, [ebp + 0x1ec]
push 0x47e7fc
push eax
call fcn.004400e0
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
push eax
call fcn.0043fcf0
jmp 0x41d360
push str.notpresent
call fcn.0043f8e0
jmp 0x41dedf
push str.version
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d44e
mov ecx, dword [ebp - 0x6c]
push 0x2e
call fcn.0043f540
mov ecx, dword [ebp - 0x6c]
push eax
push 0x2e
lea eax, [ebp + 0x1ec]
push eax
call fcn.00440130
push dword [ebp - 0x50]
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp + 0x1ec]
push eax
call fcn.0041bbdb
mov ecx, dword [ebp - 0x74]
call fcn.00401005
test al, al
je 0x41d360
mov ecx, dword [ebp - 0x74]
push str.version4
call fcn.0043f8e0
lea ecx, [ebp + 0x1ec]
jmp 0x41deda
push str.osCheck.os
push dword [ebp - 0x6c]
call fcn.00401046
pop ecx
pop ecx
test al, al
jne 0x41d395
push 0x47f79c
push dword [ebp - 0x6c]
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d44e
push 0x481e54
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d3d6
lea eax, [ebp - 0x64]
push eax
push 0
push 0
call fcn.0041ba8a
push 0xa
lea eax, [ebp + 0x1ec]
push eax
push dword [ebp - 0x64]
call fcn.0047cee1
mov ecx, dword [ebp - 0x50]
add esp, 0x18
lea eax, [ebp + 0x1ec]
push eax
jmp 0x41d2fa
push 0x481e50
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d405
mov ecx, dword [ebp - 0x7c]
call fcn.0041bc71
push eax
push 0x47eab0
push dword [ebp - 0x50]
call fcn.00440350
add esp, 0xc
jmp 0x41dedf
push str.version
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d44e
push 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0041ba8a
add esp, 0xc
lea ecx, [ebp + 0x1ec]
call fcn.0043f500
push dword [ebp - 0x64]
push dword [ebp - 0x6c]
push str._d._d
push dword [ebp - 0x50]
call fcn.00440350
add esp, 0x10
jmp 0x41d347
push 0x481e44
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d6ad
push esi
lea ecx, [ebp - 0x60]
call fcn.0043f6f0
lea ecx, [ebp - 0x58]
call fcn.0043f500
push str.keyValueName
lea ecx, [ebp - 0x70]
call fcn.0043f7b0
push dword [ebx]
lea ecx, [ebp - 0x68]
call fcn.0043f7b0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
lea edi, [ebp - 0x68]
call fcn.0041c41d
pop ecx
pop ecx
mov ecx, edi
call fcn.0043f790
lea ecx, [ebp - 0x70]
call fcn.0043f790
push esi
lea ecx, [ebp + 0x1ec]
call fcn.0043f6f0
lea ecx, [ebp + 0x1ec]
call fcn.0043f510
cmp byte [esi + 7], 0xff
jne 0x41d4cb
mov esi, dword [esi]
cmp byte [esi + eax - 1], 0x5c
je 0x41d4e2
push 0x47e754
lea ecx, [ebp + 0x1ec]
call fcn.0043fc10
and dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
push ecx
lea eax, [ebp + 0x1ec]
mov ecx, esp
push eax
call fcn.0043f6f0
mov esi, dword [ebp - 0x7c]
mov ecx, esi
call fcn.0041af49
test eax, eax
jne 0x41d561
lea eax, [esi + 0x8bc]
cmp byte [eax + 7], 0xff
jne 0x41d522
mov eax, dword [eax]
push dword [ebx]
push eax
push ecx
push ecx
mov ecx, esp
push str.couldnt_parse_reg_reference
call fcn.0043f7b0
mov ecx, esi
call fcn.0041ced3
mov esi, 0x8000aaa0
lea ecx, [ebp + 0x1ec]
call fcn.0043f790
lea ecx, [ebp - 0x58]
call fcn.0043f790
lea ecx, [ebp - 0x60]
call fcn.0043f790
mov eax, esi
jmp 0x41dee1
lea ecx, [ebp - 0x58]
call fcn.00401005
test al, al
jne 0x41d669
lea eax, [ebp - 0x58]
push 0x481e10
push eax
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d592
push 0x47e7fe
lea ecx, [ebp - 0x58]
call fcn.0043f8e0
or dword [ebp - 0x6c], 0xffffffff
cmp byte [ebp - 0x51], 0xff
lea ecx, [ebp - 0x58]
jne 0x41d5a2
mov ecx, dword [ebp - 0x58]
cmp byte [ebp - 0x59], 0xff
lea eax, [ebp - 0x60]
jne 0x41d5ae
mov eax, dword [ebp - 0x60]
mov esi, dword [ebp - 0x50]
lea edx, [ebp - 0x6c]
push edx
push dword [ebp - 0x64]
push esi
push ecx
push eax
push dword [ebp - 0x74]
call fcn.00402b10
add esp, 0x18
mov ecx, esi
test eax, eax
je 0x41d69c
mov eax, dword [ebp - 0x6c]
dec eax
je 0x41d5eb
sub eax, 3
je 0x41d5e5
push str.unsupported_reg_format
jmp 0x41d695
push esi
jmp 0x41d6a1
call fcn.00401005
test al, al
jne 0x41d620
cmp byte [esi + 7], 0xff
mov eax, esi
jne 0x41d5fe
mov eax, dword [esi]
cmp byte [eax], 0x22
jne 0x41d620
push 1
lea eax, [ebp - 0x68]
push eax
mov ecx, esi
call fcn.00440300
push eax
mov ecx, esi
call fcn.0043f840
lea ecx, [ebp - 0x68]
call fcn.0043f790
mov ecx, esi
call fcn.00401005
test al, al
jne 0x41d6a6
mov ecx, esi
call fcn.0043f510
cmp byte [esi + 7], 0xff
mov ecx, esi
jne 0x41d63c
mov ecx, dword [esi]
cmp byte [eax + ecx - 1], 0x22
jne 0x41d6a6
mov ecx, esi
call fcn.0043f510
dec eax
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, esi
call fcn.0043ff80
push eax
mov ecx, esi
call fcn.0043f840
lea ecx, [ebp - 0x78]
call fcn.0043f790
jmp 0x41d6a6
cmp byte [ebp - 0x59], 0xff
lea eax, [ebp - 0x60]
jne 0x41d675
mov eax, dword [ebp - 0x60]
push 0x20019
push dword [ebp - 0x64]
push eax
push dword [ebp - 0x74]
call fcn.00401555
mov ecx, dword [ebp - 0x50]
add esp, 0x10
test eax, eax
je 0x41d69c
push str.__keyexists__
call fcn.0043f8e0
jmp 0x41d6a6
push 0x48fdd4
call fcn.0043f840
xor esi, esi
jmp 0x41d53f
push 0x481de4
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d832
lea ecx, [ebp - 0x58]
call fcn.0043f500
lea ecx, [ebp - 0x60]
call fcn.0043f500
push str.section
lea ecx, [ebp - 0x70]
call fcn.0043f7b0
push dword [ebx]
lea ecx, [ebp + 0x1ec]
call fcn.0043f7b0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
lea edi, [ebp + 0x1ec]
call fcn.0041c41d
pop ecx
pop ecx
mov ecx, edi
call fcn.0043f790
lea ecx, [ebp - 0x70]
call fcn.0043f790
push str.propertyName
lea ecx, [ebp - 0x70]
call fcn.0043f7b0
push dword [ebx]
lea ecx, [ebp + 0x1ec]
call fcn.0043f7b0
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x70]
push eax
lea edi, [ebp + 0x1ec]
call fcn.0041c41d
pop ecx
pop ecx
mov ecx, edi
call fcn.0043f790
lea ecx, [ebp - 0x70]
call fcn.0043f790
mov ecx, dword [ebp - 0x64]
call fcn.00401005
test al, al
je 0x41d78f
lea ecx, [ebp - 0x58]
call fcn.00401005
test al, al
je 0x41d78f
lea ecx, [ebp - 0x60]
call fcn.00401005
test al, al
je 0x41d78f
mov ecx, dword [ebp - 0x7c]
push esi
call fcn.0041ba4b
test eax, eax
mov eax, 0x48fd84
jne 0x41d789
mov eax, 0x48fdd4
push eax
jmp 0x41d81a
push 0x1f3
lea eax, [ebp - 7]
push 0
push eax
mov byte [ebp - 8], 0
call fcn.0045f090
add esp, 0xc
cmp byte [esi + 7], 0xff
jne 0x41d7ae
mov esi, dword [esi]
cmp byte [0x48fddb], 0xff
mov edi, 0x48fdd4
mov edx, edi
jne 0x41d7c4
mov edx, dword [0x48fdd4]
cmp byte [ebp - 0x59], 0xff
lea ecx, [ebp - 0x60]
jne 0x41d7d0
mov ecx, dword [ebp - 0x60]
cmp byte [ebp - 0x51], 0xff
lea eax, [ebp - 0x58]
jne 0x41d7dc
mov eax, dword [ebp - 0x58]
push esi
push 0x1f4
lea esi, [ebp - 8]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [ebp - 0x50]
mov eax, esi
push eax
call fcn.0043f8e0
mov ecx, dword [ebp - 0x64]
call fcn.00401005
test al, al
je 0x41d822
push edi
push dword [ebp - 0x50]
call fcn.0040ce04
pop ecx
pop ecx
test al, al
je 0x41d822
push 0x48fd84
mov ecx, dword [ebp - 0x50]
call fcn.0043f840
lea ecx, [ebp - 0x60]
call fcn.0043f790
lea ecx, [ebp - 0x58]
jmp 0x41deda
push str.version
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d940
lea ecx, [ebp - 0x58]
call fcn.0043f500
push str.file
lea ecx, [ebp - 0x60]
call fcn.0043f7b0
push dword [ebx]
lea ecx, [ebp + 0x1ec]
call fcn.0043f7b0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x60]
push eax
lea edi, [ebp + 0x1ec]
call fcn.0041c41d
pop ecx
pop ecx
mov ecx, edi
call fcn.0043f790
lea ecx, [ebp - 0x60]
call fcn.0043f790
lea ecx, [ebp - 0x58]
call fcn.00401005
test al, al
je 0x41d8cf
mov esi, dword [ebp - 0x7c]
lea eax, [esi + 0x8bc]
cmp byte [eax + 7], 0xff
jne 0x41d8aa
mov eax, dword [eax]
push dword [ebx]
push eax
push ecx
push ecx
mov ecx, esp
push str.missing__test_type_version__file_attribute
call fcn.0043f7b0
mov ecx, esi
call fcn.0041ced3
lea ecx, [ebp - 0x58]
call fcn.0043f790
jmp 0x41d2b8
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0x1ec]
push eax
call fcn.004030b0
add esp, 0xc
push eax
lea ecx, [ebp - 0x58]
call fcn.0043f840
lea ecx, [ebp + 0x1ec]
call fcn.0043f790
cmp byte [ebp - 0x51], 0xff
lea esi, [ebp - 0x58]
jne 0x41d904
mov esi, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x50]
push 0xc8
call fcn.00440160
push eax
push esi
call fcn.00402e5b
pop ecx
pop ecx
mov ecx, dword [ebp - 0x50]
push 0xffffffffffffffff
mov esi, eax
call fcn.004401f0
test esi, esi
jne 0x41d82a
mov ecx, dword [ebp - 0x50]
push str.0.0.0.0
call fcn.0043f8e0
jmp 0x41d82a
push str.file
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41d971
mov ecx, dword [ebp - 0x7c]
push esi
call fcn.0041ba4b
test eax, eax
mov eax, 0x48fd84
jne 0x41d968
mov eax, 0x48fdd4
mov ecx, dword [ebp - 0x50]
push eax
jmp 0x41d249
push str.filesize
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41daa3
lea ecx, [ebp - 0x60]
call fcn.0043f500
push str.param
lea ecx, [ebp - 0x58]
call fcn.0043f7b0
push dword [ebx]
lea ecx, [ebp + 0x1ec]
call fcn.0043f7b0
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x58]
push eax
lea edi, [ebp + 0x1ec]
call fcn.0041c41d
pop ecx
pop ecx
mov ecx, edi
call fcn.0043f790
lea ecx, [ebp - 0x58]
call fcn.0043f790
xor edi, edi
push edi
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp + 0x1ec]
push eax
call fcn.004030b0
add esp, 0xc
push eax
lea ecx, [ebp - 0x60]
call fcn.0043f840
lea ecx, [ebp + 0x1ec]
call fcn.0043f790
cmp byte [ebp - 0x59], 0xff
lea eax, [ebp - 0x60]
jne 0x41da02
mov eax, dword [ebp - 0x60]
push edi
push 0x2000000
push 3
push edi
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x41da2f
mov ecx, dword [ebp - 0x50]
push 0x48fdd4
call fcn.0043f840
jmp 0x41da81
lea eax, [ebp + 0x1ec]
push eax
push esi
mov dword [ebp + 0x1ec], edi
mov dword [ebp + 0x1f0], edi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, edi
jne 0x41da65
mov ecx, dword [ebp - 0x50]
push 0x47e82c
call fcn.0043f8e0
jmp 0x41da81
push dword [ebp + 0x1f0]
push dword [ebp + 0x1ec]
push str._llu
push dword [ebp - 0x50]
call fcn.00440350
add esp, 0x10
mov ecx, dword [ebp - 0x74]
call fcn.00401005
test al, al
je 0x41ded7
mov ecx, dword [ebp - 0x74]
push str.int64
call fcn.0043f8e0
jmp 0x41ded7
push str.modified_date
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
jne 0x41dd43
push str.created_date
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
jne 0x41dd43
push 0x481d50
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
je 0x41dced
lea ecx, [ebp + 0x1ec]
call fcn.0043f500
lea ecx, [ebp - 0x60]
call fcn.0043f500
push str.file
lea ecx, [ebp - 0x70]
call fcn.0043f7b0
push dword [ebx]
lea ecx, [ebp - 0x58]
call fcn.0043f7b0
lea eax, [ebp + 0x1ec]
push eax
lea eax, [ebp - 0x70]
push eax
lea edi, [ebp - 0x58]
call fcn.0041c41d
pop ecx
pop ecx
mov ecx, edi
call fcn.0043f790
lea ecx, [ebp - 0x70]
call fcn.0043f790
push esi
lea ecx, [ebp - 0x60]
call fcn.0043f840
lea ecx, [ebp - 0x68]
call fcn.0043f500
mov eax, dword [ebp - 0x7c]
cmp dword [eax + 0x8f8], 0
jne 0x41dbe4
mov esi, eax
add esi, 0x8d4
push str.testdetectxml
mov ecx, esi
call fcn.0043f620
test eax, eax
je 0x41dbe4
push 0x5c
mov ecx, esi
call fcn.0043f5f0
inc eax
push eax
lea eax, [ebp - 0x58]
push eax
mov ecx, esi
call fcn.0043ff80
push eax
lea ecx, [ebp - 0x68]
call fcn.0043f840
lea ecx, [ebp - 0x58]
call fcn.0043f790
lea eax, [ebp + 0x1ec]
push eax
lea ecx, [ebp - 0x68]
call fcn.0043fcf0
push str.file:__
push 7
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x68]
call fcn.0043ff80
push eax
call fcn.00401046
pop ecx
pop ecx
lea ecx, [ebp - 0x58]
mov bl, al
call fcn.0043f790
test bl, bl
je 0x41dc1d
push 7
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x68]
call fcn.00440300
push eax
lea ecx, [ebp - 0x68]
call fcn.0043f840
lea ecx, [ebp - 0x58]
jmp 0x41dc18
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp + 0x1ec]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00407bf4
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00440040
add esp, 0xc
push eax
lea ecx, [ebp - 0x68]
call fcn.0043f840
lea ecx, [ebp - 0x58]
call fcn.0043f790
lea ecx, [ebp - 0x70]
call fcn.0043f790
cmp byte [ebp - 0x61], 0xff
lea eax, [ebp - 0x68]
jne 0x41dc29
mov eax, dword [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x41dc9e
cmp byte [ebp - 0x59], 0xff
lea eax, [ebp - 0x60]
jne 0x41dc42
mov eax, dword [ebp - 0x60]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov edi, 0x48fdd4
test esi, esi
je 0x41dc8c
push 0xff
lea eax, [ebp + 0xed]
push 0
push eax
mov byte [ebp + 0xec], 0
call fcn.0045f090
lea eax, [ebp + 0xec]
push eax
call esi
mov ecx, dword [ebp - 0x50]
add esp, 0x10
lea eax, [ebp + 0xec]
push eax
call fcn.0043f8e0
jmp 0x41dc95
mov ecx, dword [ebp - 0x50]
push edi
call fcn.0043f840
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x41dcac
mov ecx, dword [ebp - 0x50]
mov edi, 0x48fdd4
push edi
call fcn.0043f840
push edi
push dword [ebp - 0x50]
call fcn.0040ce04
pop ecx
pop ecx
mov ecx, dword [ebp - 0x7c]
add ecx, 0x918
test al, al
je 0x41dcce
push dword [ebp - 0x50]
call fcn.0043f840
jmp 0x41dcd8
push 0x47e7fe
call fcn.0043f8e0
lea ecx, [ebp - 0x68]
call fcn.0043f790
lea ecx, [ebp - 0x60]
call fcn.0043f790
jmp 0x41d360
push 0x481d3c
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
jne 0x41dedf
push str.func
push edi
call fcn.00401046
pop ecx
pop ecx
test al, al
jne 0x41dedf
mov esi, dword [ebp - 0x7c]
lea eax, [esi + 0x8bc]
cmp byte [eax + 7], 0xff
jne 0x41dd28
mov eax, dword [eax]
push dword [ebx]
push eax
push ecx
push ecx
mov eax, esp
push edi
push str.unknown__test__strType_attribute:
push eax
call fcn.004400e0
add esp, 0xc
jmp 0x41d2b1
lea ecx, [ebp - 0x60]
call fcn.0043f500
push esi
lea ecx, [ebp - 0x70]
call fcn.0043f6f0
xor ebx, ebx
push ebx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp + 0x1ec]
push eax
call fcn.004030b0
add esp, 0xc
push eax
lea ecx, [ebp - 0x60]
call fcn.0043f840
lea ecx, [ebp + 0x1ec]
call fcn.0043f790
cmp byte [ebp - 0x59], 0xff
lea eax, [ebp - 0x60]
jne 0x41dd8a
mov eax, dword [ebp - 0x60]
push ebx
push 0x2000000
push 3
push ebx
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x41ddba
mov ecx, dword [ebp - 0x50]
push 0x48fdd4
call fcn.0043f840
jmp 0x41deb6
lea eax, [ebp - 0x4c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
push esi
mov dword [ebp - 0x64], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x64], ebx
jne 0x41dde6
mov ecx, dword [ebp - 0x50]
push 0x47e82c
call fcn.0043f8e0
jmp 0x41deb6
push str.modified_date
push edi
call fcn.00401046
pop ecx
test al, al
pop ecx
lea eax, [ebp - 0x38]
jne 0x41ddfd
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x18]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea ecx, [ebp + 0x1ec]
call fcn.0043f500
push dword [ebp - 0xe]
lea ecx, [ebp + 0x1ec]
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push dword [ebp - 0x12]
push dword [ebp - 0x16]
push str._02d__02d__04d__02d:_02d
call fcn.0041bf72
xor eax, eax
mov word [ebp - 0x10], ax
mov word [ebp - 0xe], ax
mov word [ebp - 0xc], ax
mov word [ebp - 0xa], ax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
push eax
push ecx
push str._022llu
push dword [ebp - 0x50]
call fcn.00440350
add esp, 0x10
lea eax, [ebp + 0x1ec]
push eax
push 0x47ea68
push dword [ebp - 0x50]
lea eax, [ebp - 0x80]
push eax
call fcn.00440090
add esp, 0xc
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.00440040
mov ecx, dword [ebp - 0x50]
add esp, 0xc
push eax
call fcn.0043f840
lea ecx, [ebp - 0x68]
call fcn.0043f790
lea ecx, [ebp - 0x80]
call fcn.0043f790
lea ecx, [ebp + 0x1ec]
call fcn.0043f790
mov ecx, dword [ebp - 0x74]
call fcn.00401005
test al, al
je 0x41decf
mov ecx, dword [ebp - 0x74]
push str.date
call fcn.0043f8e0
lea ecx, [ebp - 0x70]
call fcn.0043f790
lea ecx, [ebp - 0x60]
call fcn.0043f790
xor eax, eax
mov ecx, dword [ebp + 0x1f8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0045f4ee
add ebp, 0x1fc
leave
ret 0x20