Function at 0x4659c7
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
and dword [ebp - 0x28], 0
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
mov di, word [esi]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 2], 0
mov byte [ebp - 1], 0
mov dword [ebp - 8], 0xffff0000
mov eax, edi
call fcn.0040ea2b
test al, al
mov ebx, 0x4b0
je 0x465a0e
and dword [ebp - 8], 0
mov dword [ebp - 0x28], 1
jmp 0x465b29
push 4
push esi
push str._UNI
call fcn.0043af01
add esp, 0xc
test al, al
je 0x465a2a
mov dword [ebp - 8], ebx
jmp 0x465b29
push 8
push esi
push str._UNICODE
call fcn.0043af01
add esp, 0xc
test al, al
jne 0x465a22
push 5
pop ebx
push ebx
push esi
push str._UNIB
call fcn.0043af01
add esp, 0xc
test al, al
je 0x465a60
mov dword [ebp - 8], 0x4b1
jmp 0x465b29
push 9
push esi
push str._UNICODEB
call fcn.0043af01
add esp, 0xc
test al, al
jne 0x465a54
push ebx
push esi
push str._ANSI
call fcn.0043af01
add esp, 0xc
test al, al
je 0x465a90
and dword [ebp - 8], 0
jmp 0x465b29
push 4
push esi
push str._GBK
call fcn.0043af01
add esp, 0xc
test al, al
je 0x465aad
mov dword [ebp - 8], 0x3a8
jmp 0x465b29
push ebx
push esi
push str._BIG5
call fcn.0043af01
add esp, 0xc
test al, al
je 0x465ac9
mov dword [ebp - 8], 0x3b6
jmp 0x465b29
push ebx
push esi
push str._UTF8
call fcn.0043af01
add esp, 0xc
test al, al
je 0x465ae5
mov dword [ebp - 8], 0xfde9
jmp 0x465b29
push ebx
push esi
push str._UTF7
call fcn.0043af01
add esp, 0xc
test al, al
je 0x465b01
mov dword [ebp - 8], 0xfde8
jmp 0x465b29
cmp di, 0x2d
jne 0x465b29
xor eax, eax
lea ecx, [esi + 2]
mov ax, word [ecx]
push eax
call fcn.0043f865
add esp, 4
test al, al
je 0x465b29
push ecx
mov dword [ebp + 8], ecx
call fcn.004408e4
pop ecx
mov dword [ebp - 8], eax
lea eax, [ebp + 8]
push eax
call fcn.00405444
push 4
lea eax, [ebp + 8]
push eax
push str.fix
call fcn.00441bc4
mov bl, al
add esp, 0x10
neg bl
sbb bl, bl
push 0x4ae9fc
lea ecx, [ebp - 0x24]
and ebx, 2
mov byte [ebp - 0x34], bl
call fcn.00448399
push str.READLINE
lea ecx, [ebp - 0x18]
call fcn.00448399
mov ecx, dword [ebp - 0x14]
xor edi, edi
xor eax, eax
inc eax
push edi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x54], eax
push 0x2c
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 8]
push eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x64], edi
call fcn.004350f0
mov esi, dword [ebp - 0x24]
push esi
push 0x4b8aac
mov dword [ebp + 8], eax
call fcn.0043af97
test al, al
pop ecx
pop ecx
je 0x465c27
mov dword [ebp - 0x64], 1
mov byte [ebp - 2], 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x2c], edi
call fcn.0043fd9a
mov ecx, dword [ebp - 0x14]
push 1
push edi
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 8]
call fcn.0044dca2
mov eax, dword [ebp - 0x30]
mov dword [ebp + 8], eax
cmp word [eax], 0x2c
jne 0x465cc7
lea ecx, [ebp - 0x1c]
call fcn.0043fd9a
add dword [ebp + 8], 2
push 0x2c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
mov esi, dword [ebp - 0x1c]
push esi
push 0x4b8aa8
mov dword [ebp - 0x20], esi
call fcn.0043af97
add esp, 0x14
test al, al
je 0x465c5f
mov byte [ebp - 1], 2
mov dword [ebp - 0x2c], 0x4b8aa4
jmp 0x465cbf
cmp word [esi], di
je 0x465bb3
push esi
push 0x4afd68
call fcn.0043af97
test al, al
pop ecx
pop ecx
jne 0x465bb3
push esi
push 0x4af798
call fcn.0043af97
test al, al
pop ecx
pop ecx
je 0x465bb7
mov byte [ebp - 2], 2
jmp 0x465bb7
push esi
push 0x4b8aa0
call fcn.0043af97
test al, al
pop ecx
pop ecx
je 0x465c76
mov byte [ebp - 1], 3
jmp 0x465cbf
push esi
push 0x4b450c
call fcn.0043af97
test al, al
pop ecx
pop ecx
je 0x465c94
mov byte [ebp - 1], 1
mov dword [ebp - 0x2c], 0x4b8a9c
jmp 0x465cbf
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0044b318
mov eax, dword [ebp - 0x20]
cmp word [eax], 0x2b
pop ecx
pop ecx
jne 0x465cbf
add dword [ebp - 0x20], 2
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0044b318
pop ecx
pop ecx
lea ecx, [ebp - 0x1c]
call fcn.00439cfd
mov eax, dword [ebp + 8]
cmp word [eax], 0x2c
jne 0x465ce6
add dword [ebp + 8], 2
push 0x2c
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
add esp, 0xc
mov ecx, dword [ebp - 0x14]
push edi
lea eax, [ebp - 0x18]
push eax
call fcn.00402e5f
push 8
lea ecx, [ebp - 0xc]
call fcn.0043fc43
mov eax, dword [ebp - 0xc]
xor esi, esi
inc esi
cmp dword [ebp - 8], edi
mov dword [ebp - 0x38], eax
mov word [eax], di
jl 0x4666bb
lea ecx, [ebp - 0x78]
call fcn.0043fc26
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
cmp word [eax], 0x75
jne 0x465ec1
cmp word [eax + 2], 0x64
jne 0x465ec1
cmp word [eax + 4], 0x3a
jne 0x465ec1
mov ecx, dword [ebp + 8]
push 0x22
add eax, 6
pop esi
mov word [ecx], di
cmp word [eax], si
mov dword [ebp - 0x20], eax
jne 0x465d5c
inc eax
inc eax
mov dword [ebp - 0x20], eax
mov ebx, eax
push 0x3a
lea eax, [ebp - 0x20]
call fcn.0043f8e8
mov eax, dword [ebp - 0x20]
cmp eax, ebx
pop ecx
je 0x465d7a
cmp word [eax - 2], si
jne 0x465d7a
mov word [eax - 2], di
cmp word [eax], 0x3a
jne 0x465d85
mov word [eax], di
inc eax
inc eax
cmp word [eax], si
mov ecx, eax
jne 0x465d9e
lea ecx, [eax + 2]
inc eax
inc eax
cmp word [eax], si
jne 0x465d99
mov word [eax], di
cmp word [eax], di
jne 0x465d8f
push edi
push edi
push 0x10000
push ecx
lea eax, [ebp - 0x78]
push eax
push ebx
call fcn.00437959
mov esi, dword [ebp - 0x74]
add esp, 0x18
cmp esi, edi
jle 0x465dc7
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x78]
add eax, ecx
mov dword [ebp + 8], eax
jmp 0x465dca
mov eax, dword [ebp + 8]
movsx edx, byte [eax]
xor ecx, ecx
cmp edx, 0xff
mov dword [ebp - 0x58], edi
jne 0x465def
movsx ebx, byte [eax + 1]
cmp ebx, 0xfe
jne 0x465def
mov dword [ebp - 8], 0x4b0
jmp 0x465e0a
cmp edx, 0xfe
jne 0x465e0e
movsx ebx, byte [eax + 1]
cmp ebx, 0xff
jne 0x465e0e
mov dword [ebp - 8], 0x4b1
push 2
jmp 0x465e37
cmp edx, 0xef
jne 0x465e3b
movsx edx, byte [eax + 1]
cmp edx, 0xbb
jne 0x465e3b
movsx edx, byte [eax + 2]
cmp edx, 0xbf
jne 0x465e3b
mov dword [ebp - 8], 0xfde9
push 3
pop ecx
mov dword [ebp - 0x58], edi
mov ebx, dword [ebp - 8]
sub esi, ecx
cmp ebx, 0x4b1
lea edi, [ecx + eax]
jne 0x465e72
and esi, 0xfffffffe
add esi, edi
cmp edi, esi
mov ecx, edi
ja 0x465f00
mov al, byte [ecx]
mov dl, byte [ecx + 1]
mov byte [ecx], dl
mov byte [ecx + 1], al
inc ecx
inc ecx
cmp ecx, esi
jbe 0x465e5a
mov eax, dword [ebp + 8]
jmp 0x465f00
cmp ebx, 0x4b0
je 0x465f00
cmp dword [ebp - 0x28], 0
je 0x465e8f
push esi
push edi
call fcn.0044d894
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp - 0x78]
and dword [ebp - 0x78], 0
mov dword [ebp - 0x38], eax
lea eax, [esi + esi + 0x20]
push eax
lea ecx, [ebp - 0x78]
call fcn.0043fc68
push ebx
push esi
push edi
lea ecx, [ebp - 0x78]
call fcn.0043fe55
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x38]
mov dword [ebp + 8], eax
call fcn.00439cfd
jmp 0x465e6a
mov eax, dword [ebp - 0x18]
cmp word [eax], di
jne 0x465ed8
lea ecx, [ebp - 0x78]
call fcn.00439cfd
xor esi, esi
jmp 0x4666c9
cmp byte [ebp - 2], 1
mov eax, dword [ebp + 8]
jne 0x465ef1
cmp word [eax], 0x2c
je 0x465ef1
mov esi, 0x80070057
jmp 0x4666b3
inc eax
inc eax
test byte [ebp - 2], 1
mov dword [ebp + 8], eax
je 0x4661ba
mov ecx, dword [ebp - 0x64]
xor ebx, ebx
xor edx, edx
or ecx, edx
push 0xffffffffffffffff
mov dword [ebp - 0x1c], ebx
pop edi
je 0x465f60
lea eax, [ebp + 8]
push eax
call fcn.00439c95
mov esi, dword [ebp + 8]
lea eax, [ebp + 8]
push eax
call fcn.0040549b
mov eax, dword [ebp + 8]
cmp word [eax], bx
pop ecx
pop ecx
je 0x465f36
mov word [eax], bx
mov eax, dword [ebp + 8]
cmp word [esi], bx
je 0x465f60
mov ecx, dword [ebp - 0x14]
push edi
push ebx
push esi
call fcn.00413e55
cmp eax, ebx
je 0x465f5d
push edi
push dword [eax]
lea ecx, [ebp - 0x1c]
call fcn.0043febe
mov eax, dword [ebp - 0x1c]
mov dword [ebp + 8], eax
jmp 0x465f60
mov eax, dword [ebp + 8]
cmp byte [ebp - 1], 3
mov ebx, eax
jne 0x465f6e
push eax
jmp 0x4660d2
cmp byte [ebp - 1], 0
je 0x46601a
cmp byte [ebp - 1], 1
mov edi, 0x4b2554
je 0x465f88
mov edi, 0x4b1ee0
lea ecx, [ebp - 0x20]
call fcn.0043fd9a
mov eax, dword [ebp + 8]
mov esi, eax
xor ebx, ebx
jmp 0x465fdf
cmp cx, 0xd
jne 0x465faf
cmp word [eax + 2], 0xa
jne 0x465fb5
mov word [eax], bx
add dword [ebp + 8], 2
jmp 0x465fb8
cmp cx, 0xa
jne 0x465fda
mov word [eax], bx
cmp byte [ebp - 1], 0
jne 0x465fc7
push edi
lea ecx, [ebp - 0x20]
call fcn.0043fe06
push esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 1], 0
call fcn.0043fe06
mov eax, dword [ebp + 8]
lea esi, [eax + 2]
inc eax
inc eax
mov dword [ebp + 8], eax
mov cx, word [eax]
cmp cx, bx
jne 0x465f99
cmp word [esi], bx
je 0x466004
cmp byte [ebp - 1], 0
jne 0x465ffb
push edi
lea ecx, [ebp - 0x20]
call fcn.0043fe06
push esi
lea ecx, [ebp - 0x20]
call fcn.0043fe06
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0043f62b
lea ecx, [ebp - 0x20]
jmp 0x4661a8
mov edx, dword [ebp - 0x48]
test edx, edx
jg 0x466092
jl 0x466029
cmp dword [ebp - 0x4c], 0
jae 0x466092
mov cx, word [eax]
xor esi, esi
xor edi, edi
test cx, cx
je 0x46605f
cmp cx, 0xa
jne 0x466041
add esi, 1
adc edi, 0
inc eax
inc eax
mov dword [ebp + 8], eax
mov cx, word [eax]
test cx, cx
jne 0x466035
cmp eax, ebx
jbe 0x46605f
cmp word [eax - 2], 0xa
je 0x46605f
add esi, 1
adc edi, 0
push 0x20
lea ecx, [ebp - 0x28]
call fcn.0043fdb8
push edi
push esi
push 0x4af1c4
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x14]
add esp, 0x10
push dword [ebp - 0x28]
push dword [ebp - 0x18]
call fcn.0043f62b
lea ecx, [ebp - 0x28]
jmp 0x4661a8
mov esi, dword [ebp - 0x4c]
mov ecx, esi
or ecx, edx
jne 0x466103
mov dx, word [eax]
test dx, dx
push 0xa
mov ecx, eax
mov esi, eax
pop edi
je 0x4660f1
cmp dx, di
jne 0x4660b3
mov esi, ecx
mov ecx, eax
inc eax
inc eax
mov dword [ebp + 8], eax
mov dx, word [eax]
test dx, dx
jne 0x4660aa
cmp eax, ebx
jbe 0x4660e2
cmp word [eax - 2], di
je 0x4660e2
cmp word [ecx], di
jne 0x4660d1
inc ecx
inc ecx
push ecx
push dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
call fcn.0043f62b
jmp 0x4661ad
cmp ecx, ebx
jbe 0x4660f1
lea eax, [ecx - 2]
cmp word [eax], 0xd
jne 0x4660f1
mov ecx, eax
cmp word [esi], di
jne 0x4660f8
inc esi
inc esi
sub ecx, esi
sar ecx, 1
push ecx
push esi
jmp 0x46618f
test edx, edx
jl 0x46612b
jle 0x466126
mov cx, word [eax]
test cx, cx
je 0x46612b
cmp cx, 0xa
jne 0x46611b
add esi, edi
adc edx, edi
inc eax
inc eax
test edx, edx
mov dword [ebp + 8], eax
jg 0x466109
jl 0x46612b
cmp esi, 1
ja 0x466109
mov esi, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
mov edi, esi
jmp 0x46617b
mov ecx, edi
or ecx, ebx
je 0x46614d
add esi, 0xffffffff
adc dword [ebp - 0x50], 0xffffffff
js 0x466186
jg 0x46614d
test esi, esi
jb 0x466186
lea eax, [ebp + 8]
call fcn.004135f1
mov eax, edi
or eax, ebx
je 0x466162
mov eax, esi
or eax, dword [ebp - 0x50]
je 0x466183
mov eax, dword [ebp + 8]
cmp word [eax], 0xd
jne 0x466170
inc eax
inc eax
mov dword [ebp + 8], eax
cmp word [eax], 0xa
jne 0x46617b
inc eax
inc eax
mov dword [ebp + 8], eax
cmp word [eax], 0
jne 0x466138
jmp 0x466186
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0x2c]
sar eax, 1
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2c]
call fcn.004483b6
push dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0043f62b
lea ecx, [ebp - 0x2c]
call fcn.00439cfd
lea ecx, [ebp - 0x1c]
call fcn.00439cfd
jmp 0x465ec9
push 8
lea ecx, [ebp - 0x20]
call fcn.0043fc43
mov eax, dword [ebp - 0xc]
xor esi, esi
mov word [eax], si
xor eax, eax
cmp byte [ebp - 2], 2
lea edi, [ebp - 0x68]
stosd dword es:[edi], eax
mov eax, dword [0x4c7308]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], esi
jne 0x4661ee
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x1c], eax
jmp 0x466346
push dword [ebp - 0x24]
lea eax, [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x5c], esi
call fcn.00404d12
test eax, eax
pop ecx
je 0x46621b
push 7
push 0x80000000
push dword [ebp - 0x24]
call fcn.00413276
add esp, 0xc
mov dword [ebp - 0x10], eax
jmp 0x466236
push esi
push 0x2000000
push 3
push esi
push 7
push 0x80000000
push dword [ebp - 0x24]
lea ecx, [ebp - 0x10]
call fcn.004054c4
cmp dword [ebp - 0x10], esi
je 0x4662df
xor eax, eax
push esi
mov byte [ebp - 0x44], 0
mov byte [ebp - 0x43], 0
mov byte [ebp - 0x42], 0
lea edi, [ebp - 0x41]
stosw word es:[edi], ax
lea eax, [ebp - 0x64]
push eax
push 3
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x10]
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp byte [ebp - 0x44], 0xff
jne 0x466281
cmp byte [ebp - 0x43], 0xfe
jne 0x4662c0
mov dword [ebp - 8], 0x4b0
jmp 0x466294
cmp byte [ebp - 0x44], 0xfe
jne 0x46629d
cmp byte [ebp - 0x43], 0xff
jne 0x4662c0
mov dword [ebp - 8], 0x4b1
mov dword [ebp - 0x5c], 2
jmp 0x4662bd
cmp byte [ebp - 0x44], 0xef
jne 0x4662c0
cmp byte [ebp - 0x43], 0xbb
jne 0x4662c0
cmp byte [ebp - 0x42], 0xbf
jne 0x4662c0
mov dword [ebp - 8], 0xfde9
mov dword [ebp - 0x5c], 3
mov dword [ebp - 0x28], esi
push esi
push esi
push dword [ebp - 0x5c]
push dword [ebp - 0x10]
call fcn.0043ae64
mov edi, edx
add esp, 0x10
cmp edi, esi
mov dword [ebp - 0x5c], eax
jg 0x4662ec
jl 0x4662df
cmp eax, esi
jae 0x4662ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x4666a3
cmp dword [ebp - 0x28], esi
je 0x466346
push dword [ebp - 0x10]
call fcn.0048c6df
test edx, edx
pop ecx
mov esi, eax
jg 0x466346
jl 0x46630a
cmp esi, 0x1000000
ja 0x466346
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0x78]
call fcn.0043fc68
push 0
lea eax, [ebp - 0x64]
push eax
push esi
push dword [ebp - 0x78]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
push edi
push dword [ebp - 0x5c]
push dword [ebp - 0x10]
call fcn.0043ae64
push esi
push dword [ebp - 0x78]
call fcn.0044d894
add esp, 0x18
mov dword [ebp - 8], eax
xor edi, edi
push edi
mov dword [ebp - 0x5c], 0x186a0
mov dword [ebp - 0x58], edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp byte [ebp - 1], 3
jne 0x466421
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x28], edi
xor esi, esi
mov dword [ebp - 0x38], eax
mov edi, 0x40000
lea eax, [esi + 0x40001]
push eax
lea ecx, [ebp - 0x28]
call fcn.0043fc68
mov ebx, dword [ebp - 0x28]
xor eax, eax
push eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x54]
push eax
push edi
lea eax, [esi + ebx]
push eax
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x50], 0
jl 0x4663b6
jg 0x4663af
cmp dword [ebp - 0x54], edi
jbe 0x4663b6
and dword [ebp - 0x50], 0
mov dword [ebp - 0x54], edi
mov ecx, dword [ebp - 0x54]
or ecx, dword [ebp - 0x50]
jne 0x4663e5
test eax, eax
jne 0x4663ee
cmp byte [ebp - 2], 2
jne 0x4663d3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6d
je 0x4663ee
add dword [ebp - 0x5c], 0xffffffff
adc dword [ebp - 0x58], 0xffffffff
js 0x4663ee
jg 0x4663e5
cmp dword [ebp - 0x5c], 0
jb 0x4663ee
add esi, dword [ebp - 0x54]
mov byte [esi + ebx], 0
jmp 0x466375
mov eax, dword [ebp - 8]
lea esi, [ebp - 0x28]
call fcn.004460c7
mov ecx, dword [ebp - 0x14]
push eax
push dword [ebp - 0x18]
call fcn.0043f62b
mov ecx, esi
call fcn.00439cfd
lea ecx, [ebp - 0x10]
call fcn.00402c5b
lea ecx, [ebp - 0x20]
call fcn.00439cfd
jmp 0x465ec9
cmp byte [ebp - 1], 0
je 0x4664b9
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jne 0x466437
mov eax, 0x4af60a
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x2c]
call fcn.004483cf
or ebx, 1
lea ecx, [ebp - 0x28]
call fcn.0043fd9a
cmp byte [ebp - 1], 0
jne 0x46645e
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xc]
call fcn.0043fe06
push ebx
push dword [ebp - 8]
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x1c]
mov byte [ebp - 1], 0
call fcn.00445e00
add esp, 0x10
cmp byte [ebp - 2], 2
mov edi, eax
jne 0x466488
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6d
je 0x4664a9
mov eax, dword [ebp - 8]
lea esi, [ebp - 0x28]
call fcn.004460c7
push eax
lea ecx, [ebp - 0xc]
call fcn.0043fe06
mov ecx, esi
call fcn.00439cfd
test edi, edi
je 0x4664b1
jmp 0x466445
lea ecx, [ebp - 0x28]
call fcn.00439cfd
lea ecx, [ebp - 0x2c]
jmp 0x466687
cmp dword [ebp - 0x48], edi
jg 0x466526
jl 0x4664c5
cmp dword [ebp - 0x4c], edi
jae 0x466526
xor edi, edi
xor ebx, ebx
push dword [ebp - 0x34]
lea eax, [ebp - 0xc]
push dword [ebp - 8]
push eax
push dword [ebp - 0x1c]
call fcn.00445e00
add esp, 0x10
cmp byte [ebp - 2], 2
mov esi, eax
jne 0x4664f1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6d
je 0x4664fd
test esi, esi
je 0x4664fd
add edi, 1
adc ebx, 0
jmp 0x4664c9
push 0x20
lea ecx, [ebp - 0xc]
mov dword [ebp - 8], 0x4b0
call fcn.0043fc68
push ebx
push edi
push 0x4af1c4
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x466693
mov eax, dword [ebp - 0x4c]
mov ecx, eax
or ecx, dword [ebp - 0x48]
jne 0x466572
or ebx, 1
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
push ebx
push dword [ebp - 8]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
call fcn.00445e00
add esp, 0x10
cmp byte [ebp - 2], 2
mov esi, eax
jne 0x466569
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6d
je 0x466693
cmp esi, edi
jne 0x466533
jmp 0x466693
xor esi, esi
cmp esi, dword [ebp - 0x48]
mov dword [ebp - 0x5c], 1
jg 0x4665c9
jl 0x466587
cmp dword [ebp - 0x5c], eax
jae 0x4665c9
push dword [ebp - 0x34]
lea eax, [ebp - 0xc]
push dword [ebp - 8]
push eax
push dword [ebp - 0x1c]
call fcn.00445e00
add esp, 0x10
cmp byte [ebp - 2], 2
mov edi, eax
jne 0x4665af
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6d
je 0x4665c9
test edi, edi
je 0x4665c9
add dword [ebp - 0x5c], 1
adc esi, 0
cmp esi, dword [ebp - 0x48]
jl 0x466587
jg 0x4665c9
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x4c]
jb 0x466587
mov edi, dword [ebp - 0x54]
cmp edi, 1
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
jne 0x4665f4
cmp dword [ebp - 0x50], 0
jne 0x4665f4
or ebx, edi
push ebx
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x1c]
call fcn.00445e00
jmp 0x46651e
lea ecx, [ebp - 0x28]
call fcn.0043fd9a
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x34], 0
je 0x466614
add edi, 0xffffffff
adc dword [ebp - 0x50], 0xffffffff
js 0x466684
jg 0x466614
test edi, edi
jb 0x466684
mov eax, dword [ebp - 0x28]
and word [eax], 0
xor eax, eax
mov al, bl
or eax, 1
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x1c]
call fcn.00445e00
add esp, 0x10
cmp byte [ebp - 2], 2
mov esi, eax
jne 0x466648
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6d
je 0x466684
test esi, esi
je 0x466684
mov eax, dword [ebp - 8]
lea esi, [ebp - 0x28]
call fcn.004460c7
push eax
lea ecx, [ebp - 0xc]
call fcn.0043fe06
cmp dword [ebp - 0x34], 0
je 0x466672
cmp dword [ebp - 0x50], 0
jl 0x466684
jg 0x466672
test edi, edi
jbe 0x466684
push 0x4b1ee0
lea ecx, [ebp - 0xc]
call fcn.0043fe06
jmp 0x4665ff
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], 0x4b0
call fcn.00439cfd
mov eax, dword [ebp - 8]
lea esi, [ebp - 0xc]
call fcn.004460c7
mov dword [ebp - 0x38], eax
xor esi, esi
lea ecx, [ebp - 0x10]
call fcn.00402c5b
lea ecx, [ebp - 0x20]
call fcn.00439cfd
lea ecx, [ebp - 0x78]
call fcn.00439cfd
push dword [ebp - 0x38]
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0043f62b
lea ecx, [ebp - 0xc]
call fcn.00439cfd
lea ecx, [ebp - 0x30]
call fcn.00439cfd
lea ecx, [ebp - 0x3c]
call fcn.00402c5b
lea ecx, [ebp - 0x18]
call fcn.00439cfd
lea ecx, [ebp - 0x24]
call fcn.00439cfd
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 8